last executing test programs: 4.155413929s ago: executing program 0 (id=391): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000100000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 3.996108589s ago: executing program 0 (id=393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010012000000000000000700000a20000000000a03000000000000000000070000480900010073797a300000000044000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000020080003400000000514000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x200288c0) 3.812575859s ago: executing program 0 (id=397): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@remote, 0x4e24, 0xfff7, 0x4e21, 0x2, 0x2}, {0x6, 0x6, 0xc6b9, 0x5, 0x6, 0x6, 0x8, 0xff}, {0x6b, 0xffffffffffff149d, 0x2, 0xab15}, 0x7, 0x6e6bb8, 0x0, 0x1, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x4d5, 0x32}, 0xa, @in6=@mcast1, 0x3501, 0x4, 0x2, 0x0, 0x4, 0x1, 0x406}}, 0xe8) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031011ff00000000000100070000fddd00000000ff0200000000000000000000000000014f194e20"], 0xfdef) 3.489593405s ago: executing program 2 (id=401): sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000020000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 3.464376327s ago: executing program 0 (id=402): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x7f}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec70102030109022400010200100009045807028ab53800090506020001000006090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect$uac1(0x0, 0xe2, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x3, 0x1, 0x1, 0xe0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xae}, [@extension_unit={0x8, 0x24, 0x8, 0x2, 0xe, 0x8, '-'}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x1ff, 0x4, 0x6, 0xfb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xfffe, 0x6, 0xa8, "461ed1a5af6468f8"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x10, 0x2, 0x40, 0x7, "8706ea"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x3, 0x10, 0x0, "784e39aef240277d30"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x70, 0x2, 0xec, 0x7, "dbeb0e"}, @as_header={0x7, 0x24, 0x1, 0xda, 0xd, 0x3}, @as_header={0x7, 0x24, 0x1, 0xc, 0x8, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x8, 0x1, {0x7, 0x25, 0x1, 0x2, 0xc, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x3, 0x86, 0xdf, "7ce4"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x1, 0x1001}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xf7, 0x3, 0x4, 0x1, "e3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x81, 0x8, {0x7, 0x25, 0x1, 0x0, 0x4, 0x100}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xcf, 0x9, 0x9, 0xff, 0x2}, 0x47, &(0x7f0000001380)={0x5, 0xf, 0x47, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "1f60180d3d8875fa2103bff53d795d63"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x2, 0xe, 0x5da8}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x8, 0xf008, 0x3ff, [0xf, 0xc0, 0xbecf, 0xc000, 0xff3f30]}]}, 0x8, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x813}}, {0xcb, &(0x7f0000001400)=@string={0xcb, 0x3, "a9c96f1e90068f1cd2c6adfa4aed01fd20beb77c760c42ee801424ed794be33764b6db318d6d971fe0d55ac30b86495e47f03180768e1892ea916999a91d1c1547cae30b045d7899f534b88f8af807440e9cd85e152c202e94f2cf5380aa932f1130eec19a474e4919d48e1e1b5315e82aba62cfc58005485513769f3a5d622484b001bc8d313837fe4a60241d3ce31aa9ecc3f4e6c6b7fbbf905930fd67ba23e71aa405680ea42d02029cf48f1a8a1464d338c4f4f5db4c71540d89dfc723d3fccfee22b4c6d200ff"}}, {0x18, &(0x7f0000001300)=@string={0x18, 0x3, "b6172231c228e5d15ff8a57d9ec732d3b8bbd397d2d1"}}, {0xca, &(0x7f0000001500)=@string={0xca, 0x3, "ce4d1b3726cdd2652f0cc45703523504912723cf6aab2cee8f73fcdc44351cca596335fb95a48643cd67eebdeb2c0aaa69618f9f20c2888bdc922578435cd5c71f742d9019002657972a423f33225a73b63ba186a7168f9cf10de0aa380bfd4a0bedce3c1cf942db6509bc441e500901943dff85aca135fb0e780623af8f36d79b101ebb16f68a10f5630aa54b1d274fbf96a2309a67eba90306c28b9c62bb8d1810c3f6aa87b9aafc29fd5cd6e42c45196a98e6142cfdd9ea54ac82fd42f988f985e1dd333a8049"}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x8f5}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)={0x20, 0x25, 0x5, {0x5, 0x6, '\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.345699949s ago: executing program 2 (id=404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001811ff00000000000000000000000004000000ff0200000000000000000000000000014f194e2000189078"], 0x52) 3.241507864s ago: executing program 2 (id=406): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) (fail_nth: 17) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2.752220954s ago: executing program 2 (id=407): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x54900, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000540)={@multicast1, @private}, &(0x7f0000000580)=0x8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000600)={0x73622a85, 0x80, 0x3}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1070, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0xc0, 0x2, 0x2c}, @ptr={0x73682a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x6, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 2.70752626s ago: executing program 2 (id=408): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1070, 0xfffffffffffffe6c, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0xc0, 0x2, 0x2c}, @ptr={0x73682a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x6, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 2.653847999s ago: executing program 2 (id=409): syz_usb_connect(0x1, 0x41, &(0x7f00000016c0)={{0x12, 0x1, 0x201, 0xab, 0x62, 0x58, 0x40, 0xc880, 0x760e, 0x35fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0xe, 0xe, 0xa0, 0x32, [{{0x9, 0x4, 0x15, 0xfb, 0x0, 0x1, 0x3, 0x67, 0x2, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x6}}]}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 1.813210344s ago: executing program 3 (id=422): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fedbdf250500000008000300f3"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fedbdf250500000008000300f3"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bind$can_raw(r1, &(0x7f0000000000), 0x10) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1.795734922s ago: executing program 3 (id=423): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x4, 0x0, 0x717e387b, 0x40, "1ae34e06a6ffffff7f0000000040794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a310000000030000000030a010200000000000000000000ffff0900030073797a3200000000040004800900010073797a31000000004c000000050a01080000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030077657468315f6d616376746170000000080001400000000538010000180a05000000000000000000010000020900010073797a3100000000340003801800038014000100736974300000000000000000000000000800024000000009080000000000000080000140000000000900010073797a310000000008000740000000010900020073797a3200000000c40003800800024000000002b80003801400010067656e657665300000000000000000001400010076657468305f766972745f77696669001400010070696d3672656700000000000000000014000100726f7365300000000000000000000000140001007866726d30000000000000000000000014000100766574683000000000000000000000001400010064766d727031000000000000000000001400010067656e65766530000000000000000000140001007465616d300000000000000000000000140000001100010000000000000000000a00000a8dc1cc1af020ae69459e04b90dfe1a423a18c8a61c14df7277504f4550ffc3d43f1a1019b0afcc9d4f7e168af48bcd7d5d06e973ccee9f7bfc4efb887a3e8c8ceaff81ae194cfc7882b4bbc02a63f732eb12f4bc218d988c26277d8d2ca56394c3"], 0x1fc}}, 0x40014) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf74, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000100)={0x1, @pix_mp={0x0, 0x0, 0x38415261}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0xda9917f2, &(0x7f0000000480)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\xe6R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd8\xc7B\x1cP\x02\xcfH\x89\x82G\xcf\x1921\x9e\v4Q\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\xf6\x99\xcb\x1a\x17\x02\xd1\x9d(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x2000000) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r7, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x808}, 0x24000841) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000003010101"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}, 0x1c1}], 0x1, 0x0, 0x0) 1.103396724s ago: executing program 3 (id=424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010014000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000020800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) 1.00460557s ago: executing program 3 (id=425): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') umount2(&(0x7f00000001c0)='./file0\x00', 0x8) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000000)) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRESOCT, @ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYRES16=r0], 0x0) syz_usb_connect(0x2, 0x265, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0xe9, 0x1f, 0x7d, 0x10, 0x16d8, 0x6008, 0x84b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x253, 0x1, 0x5, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x17, 0x88, 0xc, 0x5f, 0x42, 0x34, 0x40, [], [{{0x9, 0x5, 0x4, 0x16, 0x200, 0xfc, 0x30, 0x5, [@generic={0x49, 0xe, "3fde8991a6826c59f678b9566bf65c60bc66087ab15f147a3da30e9b3e762a3c9233adbd6dd68a5897776a877fe7c4e338dc439e9f01199d14eb7578b7243990c8a00940306db9"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x1}]}}, {{0x9, 0x5, 0x6e177040831f1918, 0x10, 0x400, 0xa, 0x1b, 0x1}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x0, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x400}, @generic={0x6e, 0xc, "454d9fa28be9f4556c7f01af6c5d45487be2b801163033a9de1160317f44785a6bcdd51f72a03ec440ac971495092e178cd0f744245db8ae68ebfc6020259e3498e42b3515b35105b9303765a89a05c13ded87fdbb3cab4e364b3bc533aa36a090f5cae3a5ccaee7a08a669b"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x1, 0x8, 0x1f, [@generic={0x1f, 0x22, "c3efa45d43f53f2eb239512db25645e563ccec7c20e4d5e30a77525c57"}, @generic={0x9, 0xb, "dd395553fde8ca"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x10, 0x3, 0x3, 0x3, [@generic={0x72, 0x21, "fd696584ebdce18e7e80d172b229e01f09488600431214bd6861bf94a820078b7c58dcb1316d064d08fc490c5c6906f33fdc82886c9104a9accbbe5cf692544ad3f0806bbced313510f64ea8842941c4d46ebdb0a92743c9c1d23c78cc3353534268bcfabd9694a551b5268168ac8c75"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x4}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x6, 0x2, 0x8}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x81, 0xfd, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x9}, @generic={0x5a, 0x11, "0cb2c2e4a5e5f6935674883c4dd090a0f666650706191d38797297aadef76515afad2995a7fe6723f5976f208e7ac3ec9ac90221a3f64d8ce621beec3a6be96f105f3a5f2fe524d88cdfbfdb2a5aa03661e035a2281cc8c4"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x30, 0x4, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x40}]}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0x9, 0x6c, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x6, 0x7, 0xa}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x2, 0x3, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0x1, 0x5}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xfb, 0xfd, 0x1, 0x40, 0x2}, 0x1b7, &(0x7f0000000840)={0x5, 0xf, 0x1b7, 0x6, [@generic={0xf8, 0x10, 0x4, "623b6c63dee7dee18134faf34a1502ba00cf44c42c62b365590b4d316d084d93ddce5c7e6342f52567bf51bc8fead72217d0a2c9bc4434d19d3e7642840d9fa436dce8de5d3c0955c7d867545e80cffad292809a3d744e8254165bb002a34354694ca6274f8056a12f88bb9604b4bf40b8b6a7c05b1af17f2af42e41f4c636fd7bcaf1dd4077ae6b6bdbca88d316af495c8f0006515c125952402b3fac8829dbb4822f2e9f72273930f0b78236215b926947c4ae61eddb90b7edfd562c6e1aa2a34d4e18fed78d0eafd945589610ed931f8c1d59a410467f97e90bc66376088c5508181232d621097a6531645c3097f8c3840cebff"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "d320c3d301dc85938fe8d3ab2ba7590d"}, @ssp_cap={0x1c, 0x10, 0xa, 0x5c, 0x4, 0x7, 0xf, 0x0, [0xc0, 0x3f00, 0x3f00, 0xff00f0]}, @generic={0x7b, 0x10, 0x4, "d72d97be2b30dee4e258fe07297f91b66b714c3f545c0503790e2ba38160116eda28d7ccbd571648f9fe10277e40830369950aad4a6e9f5207d286a31f961c426532c1c7c540d127c65a7546da7501ff03f8497a9a1f8cb1484a45f7fe8beb9db0a09cf571df2156fc5ba5e4fa6172c0cdef78c2f1c22871"}, @ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x8001, 0xf000, 0xfe01}]}, 0x8, [{0x4c, &(0x7f0000000300)=@string={0x4c, 0x3, "ffa47a5a64b04c8ebc2a7e26084d5c0a6efb087529fd9c06c8692d5e1d0136a0352f9df28294499198adc08725f193066a6f046f390f62921cbfa914c11e19006ff72836dd37ebaa0235"}}, {0xe3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x40b}}, {0xcf, &(0x7f0000000540)=@string={0xcf, 0x3, "103ab0fe810f06af258daf5f541310a51813bdc6fc3915e1c39d8062622e3a0c778c3fd73f2bd292e750d621f0e5f3e3803e1949d47afe947763c909e0ae7b57158856c4fc9f569c5a8314d787f87860e5e076bb76d0c7c6788c710ef0b632ad59db17208fb0c283f0861f05e54027d8a5fd6e6a00c37d9b07825c549a32fdfcc27b47c181a377b7cde9be88a425cd4d5fbb45e3e84f1b3baf0901333fcf7aae706fa135ba69cf3d4efa0f15e521a573297aee6c49b18edbc04034717bdbe54e816de5a30061923d143fc098ab"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x5817}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x427}}, {0xcf, &(0x7f00000006c0)=@string={0xcf, 0x3, "2f90d3496fa4df2ca929097159e35d49cbe5fc67ff24fb3aa6ef9325800e537f3228f24b9a62ef23711e8e5c3a5a1a072b09c7e0c7c3153d51c5eb23414c770bcdad804c620f2b2d5f8e2547d855a88db18f93529993b45cc9f5718104712026a84a97c3215c4985548cc13f4cac773d2855c43d6c208939df88b9ca95bc1a0117813146daab328a339efc894a8e52d28258a6ffe12421238e64e849691d6bf0129c99aba4787980c78d0c170bd5f675a9748fedaefd58a107937b2facda4e43cbd8b729c93bb882390c81b0e0"}}]}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x24000024) 487.637082ms ago: executing program 1 (id=430): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000200000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 412.595785ms ago: executing program 3 (id=431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010012000000000000000700000a20000000000a03000000000000000000070000600900010073797a300000000044000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000020080003400000000514000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x200288c0) 397.874275ms ago: executing program 3 (id=432): syz_usb_connect$uac1(0x3, 0xb4, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x3, 0x1, 0x5, 0x20, 0x60, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x3}, [@processing_unit={0x8, 0x24, 0x7, 0x6, 0x2, 0x9, "93"}, @extension_unit={0x7, 0x24, 0x8, 0x5, 0x3, 0xc}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x2, 0x5, 0x1, 0xfffa, 0x9, 0x3}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x1, 0x3, [0x4, 0x9, 0x9], 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x204, 0x6, 0xd, 0x2, 0xeb, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0x7, 0x40, {0x7, 0x25, 0x1, 0x80, 0x26, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2d, 0x8, 0x1002}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3b, 0x2, 0xc4, 0x98}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0xfb, 0x58, {0x7, 0x25, 0x1, 0x80, 0x1c, 0x8}}}}}}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$cdc_ecm(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x2, 0x6, 0x0, 0xed, {{0xb, 0x24, 0x6, 0x0, 0x0, "b4c7bbffa6dc"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7f, 0x400, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x6a}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xec, 0x1, 0xfd}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x9, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0xb}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x6, 0x3, 0x3, 0x0, 0x6d}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "dea97974d916888d97a6d6f37fd36964"}]}, 0x2, [{0xae, &(0x7f0000000100)=@string={0xae, 0x3, "a7409c8ec0722c99f28640588826888b44a8b66f8b2d78d4d2d79e9d0d3b35323e96b15f41dff27d5e4cb1489c5130e9cc98e650a1ca477c605c6d41c16668c10a9bcfd3ece85b75481238c5d59ad6ead5be56164e2c55e626dfc304e8279bca333f5b7bbcc51d008f9116fbfcbdc655101e2243bc9881f601fb724df318600e3a0cb9e3a607d0a527644c23a9bc1f0d5879c63af36eeb38fe6bc8eecc20ec6a136de5e359795f2af2f08596"}}, {0x2c, &(0x7f00000001c0)=@string={0x2c, 0x3, "57d8f1eeae4223d93d01a7d873a6e2b27162f029b9e55c102d3edcaf860c8c9c7c51606317da054467db"}}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000440)={0x14, &(0x7f0000000300)={0x20, 0x22, 0xcd, {0xcd, 0xf, "ec3021a73d376b83907c1524389aed030a01b8ade2202d0f96e28a0703f2fa9973789efbdbc3be561d7cc6cfc26891180a5565d16a6b573105fd61633853e6dbc76a7f65a7c4a499820cfd876111ae7c201c95d85bd8bd5de86af9adc306de58dc7e5e17c30d7a0c307ea6ac8033b6c9959bf844607989e9602850c665ab36d74244d36e1cf6ec9c3021aa5ab11645984ef3a29f9f826429c46ca8b057eea44d3a9c91e463079ce6260086cc1c9d62352e9a7b7679e23b00f5af72aab69a5507a3b31ac3f47ac4ef1f0d41"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x1c, &(0x7f0000000480)={0x40, 0x1, 0x32, "20dbef70acf4877202f157e3b1feaf392cad44e6521075fdc32aabf2c5075f6c906978c78b8037c9389df3ab0d5a29e8f6bf"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x64}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x5}}) 363.544028ms ago: executing program 0 (id=433): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {}, {0x8000000}, {}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x106, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) 269.603411ms ago: executing program 1 (id=434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07258a0000000000000005000000180001801400020073797a5f74756e0000000000000000000c00038004000380040001"], 0x38}, 0x1, 0xfcffffff}, 0x0) 268.727726ms ago: executing program 0 (id=435): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, 0x0, 0xb0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x247) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) setfsuid(r4) lstat(&(0x7f0000001680)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() mount$fuseblk(&(0x7f0000000340), &(0x7f0000000680)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000380), 0x800020, &(0x7f0000002680)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other}], [{@context={'context', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r6}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) sendto$packet(r7, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x2, &(0x7f0000000300)=[{0x74, 0xfe, 0x0, 0x4}, {0x6, 0x10, 0x0, 0xfff}]}) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1000000000000000100100000e00000018000000000000001001000001"], 0x28}, 0x0) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e73d28987e92c706f72743d3078303030303034653233e76e6f78617474721490e1175c8516943eb52726fd38ed2c1127c20d7c8043101c1a8ff2fe45e32ced17a27cdd7b1844fefd3573258143136080995d9aa94773bbccd84c31f71467e8af138b1e000000000000000000"]) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r10, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0xd, 0x6, 0x300, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 235.465845ms ago: executing program 1 (id=436): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1070, 0xfffffffffffffe6c, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0xc0, 0x2, 0x2c}, @ptr={0x73682a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x6, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 172.700762ms ago: executing program 1 (id=437): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@remote, 0x4e24, 0xfff7, 0x4e21, 0x2, 0x2}, {0x6, 0x6, 0xc6b9, 0x5, 0x6, 0x6, 0x8, 0xff}, {0x6b, 0xffffffffffff149d, 0x2, 0xab15}, 0x7, 0x6e6bb8, 0x0, 0x1, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x4d5, 0x32}, 0xa, @in6=@mcast1, 0x3501, 0x4, 0x2, 0x0, 0x4, 0x1, 0x406}}, 0xe8) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031011ff00000000000100070000fdeb00000000ff0200000000000000000000000000014f194e20"], 0xfdef) 9.819502ms ago: executing program 1 (id=438): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf252600000008000300", @ANYRES32=0x0, @ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4000815}, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000ac0)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x1c}}, 0x40000) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140), &(0x7f0000000400)={0x0, 0xfb, 0x114, 0x4, 0x8, "8e8aa15ccb495b87599f7c00cd7deae7", "b863d5f58f6dd2e009ab4951263bb17c53c96c3d32c73a380699c29d1bc5cf182b4e2d9f0aead14f6ea7596c7b4580a6da57df9a7a38700a238d00fe198bdf73d44580921213a97e685818c08ae987b75fe9109382fd7a48e1a574acc40b57d9a576e0398586f603266ae886e99d3477db5547a456f8f941b4e042876ef269504d32d4f360c6cf518faf21e2fd5b5603566bf6d0321afc4776106c8a85e8389140a0d935d3e2e82989493bd44a1444681ecc0f31e6aee165d0dc239cac13c4502ba78baf0e6b94b9c97bbcfb542b9eff128f575335c25ae39c977f8bb6a0e0d90ebea49afa208e337e16efa9e042236d2d53d8a3e91475337edea4f09743f5"}, 0x114, 0x1) r5 = syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r5, 0xc0245720, 0x0) timer_delete(0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x519b0bf9c81d06c1) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd70000700000008000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', &(0x7f00000006c0)={0xa40, 0x42, 0x6}, 0x18) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000740)='\x89\xb8\x9f\x10\xfd\xdc;\x8a\x92\x00', &(0x7f0000000700)='./file1\x00', r8) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x2e) ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0]) chdir(&(0x7f00000003c0)='./bus\x00') r11 = open(&(0x7f00000002c0)='./bus/file0\x00', 0x10540, 0x0) getdents(r11, &(0x7f0000001fc0)=""/184, 0x20002078) 0s ago: executing program 1 (id=439): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x111b090c, 0x40d}) close(r1) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) kernel console output (not intermixed with test programs): 0] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.721624][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.729099][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.767442][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.774797][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.801606][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.838394][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.845662][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.886748][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.894350][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.993685][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.029690][ T5146] Bluetooth: hci1: command tx timeout [ 80.030752][ T5837] Bluetooth: hci3: command tx timeout [ 80.035140][ T5146] Bluetooth: hci0: command tx timeout [ 80.047748][ T5827] Bluetooth: hci2: command tx timeout [ 80.292134][ T5822] veth0_vlan: entered promiscuous mode [ 80.324204][ T5822] veth1_vlan: entered promiscuous mode [ 80.336358][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.446437][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.461565][ T5822] veth0_macvtap: entered promiscuous mode [ 80.483134][ T5822] veth1_macvtap: entered promiscuous mode [ 80.514174][ T5824] veth0_vlan: entered promiscuous mode [ 80.549831][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.561621][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.573647][ T5824] veth1_vlan: entered promiscuous mode [ 80.600317][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.638508][ T1168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.649460][ T1168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.658502][ T1168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.681359][ T1168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.713787][ T5830] veth0_vlan: entered promiscuous mode [ 80.761375][ T5824] veth0_macvtap: entered promiscuous mode [ 80.796832][ T5830] veth1_vlan: entered promiscuous mode [ 80.806677][ T5824] veth1_macvtap: entered promiscuous mode [ 80.852390][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.862339][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.875852][ T5823] veth0_vlan: entered promiscuous mode [ 80.917060][ T5823] veth1_vlan: entered promiscuous mode [ 80.930762][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.947067][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.955339][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.968796][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.003993][ T5830] veth0_macvtap: entered promiscuous mode [ 81.032431][ T1168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.051334][ T5830] veth1_macvtap: entered promiscuous mode [ 81.065092][ T1168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.085249][ T1168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.092967][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.121467][ T1168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.164226][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.184775][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.205212][ T5823] veth0_macvtap: entered promiscuous mode [ 81.256789][ T5823] veth1_macvtap: entered promiscuous mode [ 81.278817][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.317423][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.327186][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.341048][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.356564][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.382099][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.443321][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.464037][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.486621][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.513405][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.560442][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.637975][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.647260][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.666725][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.668223][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.694538][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.797007][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.813428][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.902103][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.936991][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.951438][ T5862] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 81.999261][ T5923] loop7: detected capacity change from 0 to 7 [ 82.008042][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.018656][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.028131][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.040376][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.047989][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.057221][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.067531][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.076980][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.086585][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.097133][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.106137][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.115471][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.121190][ T5146] Bluetooth: hci0: command tx timeout [ 82.129603][ T5827] Bluetooth: hci2: command tx timeout [ 82.130966][ T5146] Bluetooth: hci3: command tx timeout [ 82.135028][ T5827] Bluetooth: hci1: command tx timeout [ 82.160320][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.169552][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.182841][ T5862] usb 2-1: too many configurations: 171, using maximum allowed: 8 [ 82.192544][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.201771][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.212322][ T5923] ldm_validate_partition_table(): Disk read failed. [ 82.224298][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.233903][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.236201][ T5862] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 82.245102][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.258660][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.268345][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.277844][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.290587][ T5923] Dev loop7: unable to read RDB block 0 [ 82.297514][ T5923] loop7: unable to read partition table [ 82.298956][ T5862] usb 2-1: can't read configurations, error -61 [ 82.304117][ T5923] loop7: partition table beyond EOD, truncated [ 82.325350][ T5923] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 82.482972][ T5928] binder: 5927:5928 ioctl c018937e 200000000280 returned -22 [ 82.496844][ T5928] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.525157][ T5862] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 82.712183][ T5862] usb 2-1: too many configurations: 171, using maximum allowed: 8 [ 82.740348][ T799] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.771234][ T5862] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 82.782248][ T5862] usb 2-1: can't read configurations, error -61 [ 82.791504][ T5862] usb usb2-port1: attempt power cycle [ 82.930261][ T799] usb 3-1: Using ep0 maxpacket: 16 [ 82.942934][ T799] usb 3-1: unable to get BOS descriptor or descriptor too short [ 82.966747][ T799] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.981277][ T799] usb 3-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.999787][ T799] usb 3-1: config 1 interface 0 has no altsetting 0 [ 83.011853][ T799] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 83.028023][ T799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.039670][ T799] usb 3-1: Product: syz [ 83.046189][ T799] usb 3-1: Manufacturer: syz [ 83.052664][ T799] usb 3-1: SerialNumber: syz [ 83.087833][ T5949] syz.3.17 uses obsolete (PF_INET,SOCK_PACKET) [ 83.100048][ T5949] syzkaller1: entered promiscuous mode [ 83.108351][ T5949] syzkaller1: entered allmulticast mode [ 83.112273][ T799] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input6 [ 83.139609][ T5862] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 83.172091][ T5862] usb 2-1: too many configurations: 171, using maximum allowed: 8 [ 83.189418][ T5826] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.201822][ T5862] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 83.211625][ T5862] usb 2-1: can't read configurations, error -61 [ 83.302354][ T5953] netlink: 'syz.3.18': attribute type 1 has an invalid length. [ 83.310736][ T5953] netlink: 244 bytes leftover after parsing attributes in process `syz.3.18'. [ 83.350913][ T5181] bcm5974 3-1:1.0: could not read from device [ 83.355487][ T5826] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 83.355523][ T5826] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 83.355548][ T5826] usb 1-1: config 1 interface 0 has no altsetting 0 [ 83.359472][ T5862] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 83.363794][ T5826] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 83.363879][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.363900][ T5826] usb 1-1: Product: syz [ 83.363915][ T5826] usb 1-1: Manufacturer: syz [ 83.363930][ T5826] usb 1-1: SerialNumber: syz [ 83.377243][ T5945] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 83.377418][ T5945] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 83.384932][ T5862] usb 2-1: too many configurations: 171, using maximum allowed: 8 [ 83.406759][ T5862] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 83.502504][ T5862] usb 2-1: can't read configurations, error -61 [ 83.503027][ T5862] usb usb2-port1: unable to enumerate USB device [ 83.602913][ T799] bcm5974 3-1:1.0: could not read from device [ 83.613428][ T5181] bcm5974 3-1:1.0: could not read from device [ 83.624132][ T799] input: failed to attach handler mousedev to device input6, error: -5 [ 83.671812][ T5181] bcm5974 3-1:1.0: could not read from device [ 83.683271][ T799] usb 3-1: USB disconnect, device number 2 [ 83.694753][ T5181] bcm5974 3-1:1.0: could not read from device [ 83.706942][ T5826] rtl8150 1-1:1.0: couldn't reset the device [ 83.719466][ T5826] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 83.776705][ T5826] usb 1-1: USB disconnect, device number 2 [ 83.914718][ T5971] binder: 5970:5971 ioctl c018937e 200000000280 returned -22 [ 84.090153][ T5975] nftables ruleset with unbound set [ 84.189891][ T5833] Bluetooth: hci3: command tx timeout [ 84.189911][ T5146] Bluetooth: hci2: command tx timeout [ 84.195674][ T5837] Bluetooth: hci0: command tx timeout [ 84.206480][ T5827] Bluetooth: hci1: command tx timeout [ 84.419054][ T5885] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.453114][ T5987] tipc: Enabling of bearer rejected, failed to enable media [ 84.709030][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 84.716142][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.760982][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.797609][ T5885] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 84.811288][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.813093][ T5993] tipc: Started in network mode [ 84.825252][ T5993] tipc: Node identity ac1414aa, cluster identity 4711 [ 84.834450][ T5885] usb 1-1: config 0 descriptor?? [ 84.836070][ T5993] tipc: Enabled bearer , priority 10 [ 85.163390][ T5999] binder: 5998:5999 ioctl c018937e 200000000280 returned -22 [ 85.272082][ T799] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 85.286368][ T5885] elo 0003:04E7:0009.0001: item fetching failed at offset 0/4 [ 85.319734][ T5885] elo 0003:04E7:0009.0001: parse failed [ 85.325601][ T5885] elo 0003:04E7:0009.0001: probe with driver elo failed with error -22 [ 85.326036][ T6005] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 85.371016][ T6003] FAULT_INJECTION: forcing a failure. [ 85.371016][ T6003] name failslab, interval 1, probability 0, space 0, times 1 [ 85.384913][ T6003] CPU: 0 UID: 0 PID: 6003 Comm: syz.3.34 Not tainted syzkaller #0 PREEMPT(full) [ 85.384939][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 85.384958][ T6003] Call Trace: [ 85.384969][ T6003] [ 85.384976][ T6003] dump_stack_lvl+0x189/0x250 [ 85.385005][ T6003] ? __pfx____ratelimit+0x10/0x10 [ 85.385029][ T6003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.385051][ T6003] ? __pfx__printk+0x10/0x10 [ 85.385073][ T6003] ? __pfx___might_resched+0x10/0x10 [ 85.385093][ T6003] ? fs_reclaim_acquire+0x7d/0x100 [ 85.385124][ T6003] should_fail_ex+0x414/0x560 [ 85.385156][ T6003] should_failslab+0xa8/0x100 [ 85.385184][ T6003] kmem_cache_alloc_noprof+0x88/0x700 [ 85.385207][ T6003] ? alloc_empty_file+0x55/0x1d0 [ 85.385233][ T6003] alloc_empty_file+0x55/0x1d0 [ 85.385257][ T6003] dentry_open+0x44/0xa0 [ 85.385278][ T6003] ovl_dir_read+0x85/0x560 [ 85.385311][ T6003] ? __pfx_ovl_dir_read+0x10/0x10 [ 85.385336][ T6003] ? ovl_path_upper+0x105/0x170 [ 85.385362][ T6003] ? ovl_path_next+0x23c/0x470 [ 85.385391][ T6003] ovl_dir_read_merged+0x3bf/0x4b0 [ 85.385420][ T6003] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 85.385446][ T6003] ? __pfx_ovl_fill_merge+0x10/0x10 [ 85.385485][ T6003] ? __kasan_kmalloc+0x93/0xb0 [ 85.385511][ T6003] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 85.385534][ T6003] ? ovl_iterate+0xcb2/0x2110 [ 85.385566][ T6003] ovl_iterate+0xd75/0x2110 [ 85.385609][ T6003] ? lockdep_unlock+0x89/0x120 [ 85.385637][ T6003] ? __pfx_ovl_iterate+0x10/0x10 [ 85.385689][ T6003] ? __lock_acquire+0xab9/0xd20 [ 85.385717][ T6003] ? wrap_directory_iterator+0x5a/0xe0 [ 85.385755][ T6003] ? down_write+0x162/0x1f0 [ 85.385778][ T6003] ? __pfx_down_write+0x10/0x10 [ 85.385801][ T6003] ? wrap_directory_iterator+0x52/0xe0 [ 85.385824][ T6003] ? __pfx_ovl_iterate+0x10/0x10 [ 85.385848][ T6003] wrap_directory_iterator+0x96/0xe0 [ 85.385877][ T6003] iterate_dir+0x399/0x570 [ 85.385910][ T6003] __se_sys_getdents+0xe4/0x250 [ 85.385942][ T6003] ? __pfx___se_sys_getdents+0x10/0x10 [ 85.385967][ T6003] ? ksys_write+0x22a/0x250 [ 85.385982][ T6003] ? __pfx_filldir+0x10/0x10 [ 85.386011][ T6003] ? __pfx_ksys_write+0x10/0x10 [ 85.386033][ T6003] ? do_syscall_64+0xbe/0xfa0 [ 85.386063][ T6003] do_syscall_64+0xfa/0xfa0 [ 85.386089][ T6003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.386108][ T6003] ? clear_bhb_loop+0x60/0xb0 [ 85.386132][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.386150][ T6003] RIP: 0033:0x7f5a14d8f6c9 [ 85.386176][ T6003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.386191][ T6003] RSP: 002b:00007f5a15bbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 85.386210][ T6003] RAX: ffffffffffffffda RBX: 00007f5a14fe5fa0 RCX: 00007f5a14d8f6c9 [ 85.386224][ T6003] RDX: 0000000020002078 RSI: 0000200000001fc0 RDI: 0000000000000003 [ 85.386236][ T6003] RBP: 00007f5a15bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 85.386246][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.386255][ T6003] R13: 00007f5a14fe6038 R14: 00007f5a14fe5fa0 R15: 00007ffd3d3abd28 [ 85.386289][ T6003] [ 85.449143][ T799] usb 2-1: device descriptor read/64, error -71 [ 85.484903][ T5866] usb 1-1: USB disconnect, device number 3 [ 85.639874][ T5885] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.799167][ T799] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 85.873566][ T5826] tipc: Node number set to 2886997162 [ 85.889219][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 85.897037][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.908758][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.919801][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 85.932878][ T799] usb 2-1: device descriptor read/64, error -71 [ 85.939248][ T5885] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 85.963032][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.973887][ T5885] usb 3-1: config 0 descriptor?? [ 86.069883][ T799] usb usb2-port1: attempt power cycle [ 86.082735][ T6017] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 86.179735][ T5826] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 86.342625][ T5826] usb 4-1: unable to get BOS descriptor or descriptor too short [ 86.366007][ T5826] usb 4-1: not running at top speed; connect to a high speed hub [ 86.387401][ T5826] usb 4-1: config 5 has an invalid interface number: 215 but max is 0 [ 86.411999][ T5826] usb 4-1: config 5 has no interface number 0 [ 86.419980][ T799] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 86.431013][ T5826] usb 4-1: config 5 interface 215 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 86.431656][ T5885] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 86.456852][ T5885] microsoft 0003:045E:07DA.0002: no inputs found [ 86.463936][ T5826] usb 4-1: config 5 interface 215 has no altsetting 0 [ 86.475731][ T5826] usb 4-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 86.489854][ T799] usb 2-1: device descriptor read/8, error -71 [ 86.492072][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.506066][ T5885] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 86.518276][ T5826] usb 4-1: Product: syz [ 86.533236][ T5826] usb 4-1: Manufacturer: syz [ 86.548968][ T5826] usb 4-1: SerialNumber: syz [ 86.569539][ T6014] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 86.675052][ T6029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.704634][ T6029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.739035][ T799] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 86.760056][ T799] usb 2-1: device descriptor read/8, error -71 [ 86.762029][ T6031] binder: 6030:6031 ioctl c018937e 200000000280 returned -22 [ 86.786564][ T5921] usb 3-1: USB disconnect, device number 3 [ 86.794421][ T6014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.815236][ T6014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.841824][ T6014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.851466][ T6014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.862571][ T6014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.873245][ T799] usb usb2-port1: unable to enumerate USB device [ 86.881282][ T6014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.891276][ T6014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.900962][ T6014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.916765][ T6014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.935040][ T6014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.985219][ T5826] cypress_m8 4-1:5.215: DeLorme Earthmate USB converter detected [ 87.011127][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 87.022395][ T5826] usb 4-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 87.070743][ T5826] usb 4-1: USB disconnect, device number 2 [ 87.100026][ T6035] /dev/nullb0: Can't open blockdev [ 87.101604][ T5826] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 87.139691][ T5826] cypress_m8 4-1:5.215: device disconnected [ 87.444358][ T6039] netlink: 'syz.0.47': attribute type 21 has an invalid length. [ 87.452366][ T6039] netlink: 'syz.0.47': attribute type 1 has an invalid length. [ 87.460199][ T6039] netlink: 144 bytes leftover after parsing attributes in process `syz.0.47'. [ 87.805042][ T6049] loop7: detected capacity change from 0 to 7 [ 87.814239][ C1] blk_print_req_error: 10 callbacks suppressed [ 87.814258][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.829846][ C1] buffer_io_error: 10 callbacks suppressed [ 87.829864][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.846208][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.855467][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.865675][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.875646][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.884748][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.894147][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.906026][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.915297][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.925245][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.929157][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.934732][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.959396][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.968715][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.976649][ T5961] ldm_validate_partition_table(): Disk read failed. [ 87.983882][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.993606][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.996111][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.996148][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.996693][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.996719][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.997394][ T5961] Dev loop7: unable to read RDB block 0 [ 87.998108][ T5961] loop7: unable to read partition table [ 87.998348][ T5961] loop7: partition table beyond EOD, truncated [ 88.022925][ T6049] ldm_validate_partition_table(): Disk read failed. [ 88.023663][ T6049] Dev loop7: unable to read RDB block 0 [ 88.024450][ T6049] loop7: unable to read partition table [ 88.024668][ T6049] loop7: partition table beyond EOD, truncated [ 88.024699][ T6049] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 88.113646][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 88.118352][ T6054] binder: 6053:6054 ioctl c018937e 200000000280 returned -22 [ 88.122091][ T24] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 88.122127][ T24] usb 4-1: config 0 has no interface number 0 [ 88.122165][ T24] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.125208][ T24] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 88.125239][ T24] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 88.125260][ T24] usb 4-1: Product: syz [ 88.125273][ T24] usb 4-1: SerialNumber: syz [ 88.139554][ T24] usb 4-1: config 0 descriptor?? [ 88.158855][ T24] cm109 4-1:0.8: invalid payload size 255, expected 4 [ 88.184019][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input8 [ 88.489760][ T5826] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.571681][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 88.579187][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 88.586619][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 88.594039][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 88.601508][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 88.608885][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 88.616396][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 88.623606][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 88.630848][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 88.637940][ T5921] usb 4-1: USB disconnect, device number 3 [ 88.638032][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 88.638061][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 88.661955][ T5826] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.677580][ T5826] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.686776][ T5921] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 88.703200][ T5866] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 88.712028][ T5826] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 88.722749][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 88.729249][ T24] IPVS: starting estimator thread 0... [ 88.731225][ T5826] usb 3-1: SerialNumber: syz [ 88.821473][ T6068] IPVS: using max 26 ests per chain, 62400 per kthread [ 88.868956][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 88.876521][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 88.891458][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.907476][ T5866] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 88.917658][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.932867][ T5866] usb 2-1: config 0 descriptor?? [ 88.993126][ T6072] syzkaller1: entered promiscuous mode [ 88.999082][ T6072] syzkaller1: entered allmulticast mode [ 89.142245][ T6074] IPv6: NLM_F_CREATE should be specified when creating new route [ 89.355730][ T5866] hid (null): invalid report_count 220993173 [ 89.367034][ T6081] binder: BINDER_SET_CONTEXT_MGR already set [ 89.383055][ T5866] lg-g15 0003:046D:C222.0003: invalid report_count 220993173 [ 89.399164][ T5866] lg-g15 0003:046D:C222.0003: item 0 4 1 9 parsing failed [ 89.406439][ T6081] binder: 6080:6081 ioctl 4018620d 200000000040 returned -16 [ 89.407390][ T5866] lg-g15 0003:046D:C222.0003: probe with driver lg-g15 failed with error -22 [ 89.424449][ T6083] binder: 6080:6083 ioctl c018937e 200000000280 returned -22 [ 89.576513][ T5909] usb 2-1: USB disconnect, device number 10 [ 89.689122][ T5866] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.741895][ T6090] kvm: Disabled LAPIC found during irq injection [ 89.829215][ T5866] usb 4-1: device descriptor read/64, error -71 [ 90.079797][ T5866] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 90.098664][ T6098] tipc: Started in network mode [ 90.108752][ T6098] tipc: Node identity ac1414aa, cluster identity 4711 [ 90.124678][ T6098] tipc: Enabled bearer , priority 10 [ 90.219205][ T5866] usb 4-1: device descriptor read/64, error -71 [ 90.245508][ T6102] binder: 6101:6102 ioctl c018937e 200000000280 returned -22 [ 90.273649][ T6103] tipc: Enabling of bearer rejected, failed to enable media [ 90.362448][ T5866] usb usb4-port1: attempt power cycle [ 90.632551][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.643234][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.762784][ T5866] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 90.799815][ T5866] usb 4-1: device descriptor read/8, error -71 [ 90.869272][ T5921] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 91.015035][ T5826] usb 3-1: 0:2 : does not exist [ 91.040616][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 91.069160][ T5866] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 91.077258][ T5921] usb 1-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 91.079835][ T5826] usb 3-1: USB disconnect, device number 4 [ 91.105401][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.109975][ T5866] usb 4-1: device descriptor read/8, error -71 [ 91.114848][ T5921] usb 1-1: Product: syz [ 91.130569][ T24] tipc: Node number set to 2886997162 [ 91.154352][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.157590][ T5921] usb 1-1: Manufacturer: syz [ 91.185500][ T5921] usb 1-1: SerialNumber: syz [ 91.194202][ T6117] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 91.217186][ T5921] usb 1-1: config 0 descriptor?? [ 91.221172][ T6113] FAULT_INJECTION: forcing a failure. [ 91.221172][ T6113] name failslab, interval 1, probability 0, space 0, times 0 [ 91.238751][ T5866] usb usb4-port1: unable to enumerate USB device [ 91.245100][ T5921] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 91.247061][ T6113] CPU: 0 UID: 0 PID: 6113 Comm: syz.1.77 Not tainted syzkaller #0 PREEMPT(full) [ 91.247096][ T6113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 91.247107][ T6113] Call Trace: [ 91.247115][ T6113] [ 91.247123][ T6113] dump_stack_lvl+0x189/0x250 [ 91.247152][ T6113] ? __pfx____ratelimit+0x10/0x10 [ 91.247176][ T6113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.247199][ T6113] ? __pfx__printk+0x10/0x10 [ 91.247227][ T6113] ? __pfx___might_resched+0x10/0x10 [ 91.247247][ T6113] ? fs_reclaim_acquire+0x7d/0x100 [ 91.247277][ T6113] should_fail_ex+0x414/0x560 [ 91.247308][ T6113] should_failslab+0xa8/0x100 [ 91.247337][ T6113] kmem_cache_alloc_noprof+0x88/0x700 [ 91.247359][ T6113] ? security_file_alloc+0x34/0x330 [ 91.247392][ T6113] security_file_alloc+0x34/0x330 [ 91.247421][ T6113] init_file+0x93/0x2f0 [ 91.247448][ T6113] alloc_empty_file+0x6e/0x1d0 [ 91.247472][ T6113] dentry_open+0x44/0xa0 [ 91.247496][ T6113] ovl_dir_read+0x85/0x560 [ 91.247529][ T6113] ? __pfx_ovl_dir_read+0x10/0x10 [ 91.247553][ T6113] ? ovl_path_upper+0x105/0x170 [ 91.247578][ T6113] ? ovl_path_next+0x23c/0x470 [ 91.247604][ T6113] ovl_dir_read_merged+0x3bf/0x4b0 [ 91.247634][ T6113] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 91.247663][ T6113] ? __pfx_ovl_fill_merge+0x10/0x10 [ 91.247701][ T6113] ? __kasan_kmalloc+0x93/0xb0 [ 91.247727][ T6113] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 91.247751][ T6113] ? ovl_iterate+0xcb2/0x2110 [ 91.247775][ T6113] ? __lock_acquire+0xab9/0xd20 [ 91.247799][ T6113] ovl_iterate+0xd75/0x2110 [ 91.247845][ T6113] ? __pfx_ovl_iterate+0x10/0x10 [ 91.247875][ T6113] ? aa_file_perm+0x139/0x1540 [ 91.247900][ T6113] ? aa_file_perm+0x139/0x1540 [ 91.247935][ T6113] ? __lock_acquire+0xab9/0xd20 [ 91.247964][ T6113] ? wrap_directory_iterator+0x5a/0xe0 [ 91.248007][ T6113] ? down_write+0x162/0x1f0 [ 91.248034][ T6113] ? __pfx_down_write+0x10/0x10 [ 91.248062][ T6113] ? wrap_directory_iterator+0x52/0xe0 [ 91.248094][ T6113] ? __pfx_ovl_iterate+0x10/0x10 [ 91.248123][ T6113] wrap_directory_iterator+0x96/0xe0 [ 91.248153][ T6113] iterate_dir+0x399/0x570 [ 91.248185][ T6113] __se_sys_getdents+0xe4/0x250 [ 91.248216][ T6113] ? __pfx___se_sys_getdents+0x10/0x10 [ 91.248240][ T6113] ? ksys_write+0x22a/0x250 [ 91.248255][ T6113] ? __pfx_filldir+0x10/0x10 [ 91.248284][ T6113] ? __pfx_ksys_write+0x10/0x10 [ 91.248305][ T6113] ? do_syscall_64+0xbe/0xfa0 [ 91.248334][ T6113] do_syscall_64+0xfa/0xfa0 [ 91.248359][ T6113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.248378][ T6113] ? clear_bhb_loop+0x60/0xb0 [ 91.248401][ T6113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.248419][ T6113] RIP: 0033:0x7f67d318f6c9 [ 91.248436][ T6113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.248451][ T6113] RSP: 002b:00007f67d405a038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 91.248472][ T6113] RAX: ffffffffffffffda RBX: 00007f67d33e5fa0 RCX: 00007f67d318f6c9 [ 91.248486][ T6113] RDX: 0000000020002078 RSI: 0000200000001fc0 RDI: 0000000000000003 [ 91.248498][ T6113] RBP: 00007f67d405a090 R08: 0000000000000000 R09: 0000000000000000 [ 91.248509][ T6113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.248520][ T6113] R13: 00007f67d33e6038 R14: 00007f67d33e5fa0 R15: 00007ffe9f812c68 [ 91.248552][ T6113] [ 91.559180][ T5826] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 91.566211][ T5921] gspca_sonixj: reg_r err -32 [ 91.612230][ T5921] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 91.740190][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 91.761309][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 3139, setting to 64 [ 91.774219][ T5826] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 91.783910][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.796568][ T5826] usb 3-1: config 0 descriptor?? [ 91.809914][ T6116] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.971491][ T798] cfg80211: failed to load regulatory.db [ 92.055685][ T6128] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 92.147207][ T6130] binder: 6129:6130 ioctl c018937e 200000000280 returned -22 [ 92.245003][ T5826] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 92.381173][ T6135] capability: warning: `syz.1.85' uses deprecated v2 capabilities in a way that may be insecure [ 92.393945][ T6135] capability: warning: `syz.1.85' uses 32-bit capabilities (legacy support in use) [ 92.411782][ T6135] ucma_write: process 42 (syz.1.85) changed security contexts after opening file descriptor, this is not allowed. [ 92.549461][ T5921] usb 1-1: USB disconnect, device number 4 [ 92.642116][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.87'. [ 92.703266][ T6147] hpfs: Bad magic ... probably not HPFS [ 92.727378][ T6147] binder: 6145:6147 ioctl c0306201 0 returned -14 [ 92.899524][ T6162] binder: 6150:6162 unknown command 0 [ 92.905050][ T6162] binder: 6150:6162 ioctl c0306201 200000000100 returned -22 [ 92.944538][ T6166] binder: 6163:6166 ioctl c018937e 200000000280 returned -22 [ 93.029411][ T5826] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 93.146722][ T6172] loop7: detected capacity change from 0 to 7 [ 93.155228][ C1] blk_print_req_error: 25 callbacks suppressed [ 93.155248][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.171330][ C1] buffer_io_error: 25 callbacks suppressed [ 93.171349][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 93.187084][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.198818][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 93.207595][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.217282][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 93.225931][ T5826] usb 1-1: Using ep0 maxpacket: 32 [ 93.226303][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.241630][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 93.252996][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.262443][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 93.275551][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.285087][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 93.293969][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.303256][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 93.311547][ T6172] ldm_validate_partition_table(): Disk read failed. [ 93.319274][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.329450][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 93.337813][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.347559][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 93.355956][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.366278][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 93.377098][ T6172] Dev loop7: unable to read RDB block 0 [ 93.384903][ T6172] loop7: unable to read partition table [ 93.391704][ T6172] loop7: partition table beyond EOD, truncated [ 93.398351][ T6172] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 93.500145][ T798] usb 3-1: reset full-speed USB device number 5 using dummy_hcd [ 93.896416][ T6187] binder: BINDER_SET_CONTEXT_MGR already set [ 93.905460][ T6187] binder: 6186:6187 ioctl 4018620d 2000000000c0 returned -16 [ 93.916949][ T6187] binder: BINDER_SET_CONTEXT_MGR already set [ 93.925938][ T6187] binder: 6186:6187 ioctl 4018620d 200000000040 returned -16 [ 93.935040][ T6187] binder: 6186:6187 ioctl c018937e 200000000280 returned -22 [ 94.096506][ T6196] syzkaller1: entered promiscuous mode [ 94.104595][ T6196] syzkaller1: entered allmulticast mode [ 94.599040][ T6214] binder: 6213:6214 ioctl c018937e 200000000280 returned -22 [ 94.885388][ T6226] tipc: Started in network mode [ 94.900879][ T6226] tipc: Node identity ac1414aa, cluster identity 4711 [ 94.948612][ T6226] tipc: Enabled bearer , priority 10 [ 94.964980][ T5866] usb 3-1: USB disconnect, device number 5 [ 94.992730][ T6231] warning: `syz.2.115' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.120031][ T6234] tipc: Enabling of bearer rejected, failed to enable media [ 95.673658][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 95.807626][ T5826] usb 1-1: unable to get BOS descriptor or descriptor too short [ 95.896074][ T5826] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 95.904337][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 95.912493][ T24] usb 4-1: config 40 has an invalid interface number: 140 but max is 0 [ 95.962795][ T5826] usb 1-1: can't read configurations, error -71 [ 95.999214][ T24] usb 4-1: config 40 has no interface number 0 [ 96.052915][ T24] usb 4-1: config 40 interface 140 has no altsetting 0 [ 96.060476][ T5921] tipc: Node number set to 2886997162 [ 96.093915][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b200, bcdDevice=c7.df [ 96.134695][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.189310][ T24] usb 4-1: Product: syz [ 96.201577][ T24] usb 4-1: Manufacturer: syz [ 96.213798][ T24] usb 4-1: SerialNumber: syz [ 96.384442][ T6280] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 96.416823][ T6278] FAULT_INJECTION: forcing a failure. [ 96.416823][ T6278] name failslab, interval 1, probability 0, space 0, times 0 [ 96.436661][ T6278] CPU: 0 UID: 0 PID: 6278 Comm: syz.2.120 Not tainted syzkaller #0 PREEMPT(full) [ 96.436686][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.436698][ T6278] Call Trace: [ 96.436705][ T6278] [ 96.436714][ T6278] dump_stack_lvl+0x189/0x250 [ 96.436742][ T6278] ? __pfx____ratelimit+0x10/0x10 [ 96.436766][ T6278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.436790][ T6278] ? __pfx__printk+0x10/0x10 [ 96.436820][ T6278] ? __pfx___might_resched+0x10/0x10 [ 96.436847][ T6278] should_fail_ex+0x414/0x560 [ 96.436879][ T6278] should_failslab+0xa8/0x100 [ 96.436909][ T6278] __kmalloc_noprof+0xdf/0x800 [ 96.436931][ T6278] ? kfree+0x4d/0x6d0 [ 96.436950][ T6278] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 96.436981][ T6278] tomoyo_realpath_from_path+0xe3/0x5d0 [ 96.437019][ T6278] tomoyo_check_open_permission+0x1c1/0x3b0 [ 96.437049][ T6278] ? init_file+0x93/0x2f0 [ 96.437073][ T6278] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 96.437103][ T6278] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 96.437132][ T6278] ? iterate_dir+0x399/0x570 [ 96.437193][ T6278] ? lockref_get+0x15/0x60 [ 96.437221][ T6278] ? tomoyo_file_open+0x164/0x220 [ 96.437251][ T6278] security_file_open+0xb1/0x270 [ 96.437281][ T6278] do_dentry_open+0x384/0x13f0 [ 96.437321][ T6278] ? vfs_open+0x31/0x340 [ 96.437350][ T6278] vfs_open+0x3b/0x340 [ 96.437377][ T6278] dentry_open+0x61/0xa0 [ 96.437402][ T6278] ovl_dir_read+0x85/0x560 [ 96.437436][ T6278] ? __pfx_ovl_dir_read+0x10/0x10 [ 96.437461][ T6278] ? ovl_path_upper+0x105/0x170 [ 96.437488][ T6278] ? ovl_path_next+0x23c/0x470 [ 96.437515][ T6278] ovl_dir_read_merged+0x3bf/0x4b0 [ 96.437547][ T6278] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 96.437577][ T6278] ? __pfx_ovl_fill_merge+0x10/0x10 [ 96.437616][ T6278] ? __kasan_kmalloc+0x93/0xb0 [ 96.437643][ T6278] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 96.437669][ T6278] ? ovl_iterate+0xcb2/0x2110 [ 96.437694][ T6278] ? __lock_acquire+0xab9/0xd20 [ 96.437718][ T6278] ovl_iterate+0xd75/0x2110 [ 96.437768][ T6278] ? __pfx_ovl_iterate+0x10/0x10 [ 96.437800][ T6278] ? aa_file_perm+0x139/0x1540 [ 96.437826][ T6278] ? aa_file_perm+0x139/0x1540 [ 96.437862][ T6278] ? __lock_acquire+0xab9/0xd20 [ 96.437894][ T6278] ? wrap_directory_iterator+0x5a/0xe0 [ 96.437938][ T6278] ? down_write+0x162/0x1f0 [ 96.437967][ T6278] ? __pfx_down_write+0x10/0x10 [ 96.437995][ T6278] ? wrap_directory_iterator+0x52/0xe0 [ 96.438025][ T6278] ? __pfx_ovl_iterate+0x10/0x10 [ 96.438055][ T6278] wrap_directory_iterator+0x96/0xe0 [ 96.438087][ T6278] iterate_dir+0x399/0x570 [ 96.438121][ T6278] __se_sys_getdents+0xe4/0x250 [ 96.438153][ T6278] ? __pfx___se_sys_getdents+0x10/0x10 [ 96.438179][ T6278] ? ksys_write+0x22a/0x250 [ 96.438194][ T6278] ? __pfx_filldir+0x10/0x10 [ 96.438224][ T6278] ? __pfx_ksys_write+0x10/0x10 [ 96.438247][ T6278] ? do_syscall_64+0xbe/0xfa0 [ 96.438277][ T6278] do_syscall_64+0xfa/0xfa0 [ 96.438304][ T6278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.438329][ T6278] ? clear_bhb_loop+0x60/0xb0 [ 96.438353][ T6278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.438372][ T6278] RIP: 0033:0x7f3a3e78f6c9 [ 96.438389][ T6278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.438405][ T6278] RSP: 002b:00007f3a3c9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 96.438425][ T6278] RAX: ffffffffffffffda RBX: 00007f3a3e9e5fa0 RCX: 00007f3a3e78f6c9 [ 96.438440][ T6278] RDX: 0000000020002078 RSI: 0000200000001fc0 RDI: 0000000000000003 [ 96.438453][ T6278] RBP: 00007f3a3c9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 96.438465][ T6278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.438476][ T6278] R13: 00007f3a3e9e6038 R14: 00007f3a3e9e5fa0 R15: 00007ffc15da8bf8 [ 96.438511][ T6278] [ 96.438520][ T6278] ERROR: Out of memory at tomoyo_realpath_from_path. [ 96.500152][ T6237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.848469][ T6237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.862770][ T6237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.872956][ T6237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.191922][ T6294] binder: 6293:6294 ioctl c018937e 200000000280 returned -22 [ 97.316559][ T6296] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 97.359142][ T24] dvb-usb: found a 'Hauppauge ATSC MiniCard (B200)' in cold state, will try to load a firmware [ 97.433883][ T24] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 97.449335][ T24] dib0700: firmware download failed at 7 with -22 [ 97.467716][ T24] usb 4-1: USB disconnect, device number 8 [ 97.635096][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'. [ 97.689297][ T5826] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 97.860417][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.873480][ T5826] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.894747][ T5826] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 97.905245][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.916977][ T5826] usb 2-1: config 0 descriptor?? [ 98.077094][ T6315] binder: 6314:6315 ioctl c018937e 200000000280 returned -22 [ 98.098288][ T6317] loop7: detected capacity change from 0 to 7 [ 98.119963][ T6317] ldm_validate_partition_table(): Disk read failed. [ 98.134697][ T6298] raw_sendmsg: syz.1.128 forgot to set AF_INET. Fix it! [ 98.144369][ T6298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.155945][ T6317] Dev loop7: unable to read RDB block 0 [ 98.158110][ T6298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.172185][ C1] blk_print_req_error: 21 callbacks suppressed [ 98.172203][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.187647][ C1] buffer_io_error: 21 callbacks suppressed [ 98.187661][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 98.208077][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.217342][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 98.230165][ T5921] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 98.238266][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.247490][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 98.258929][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.268249][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 98.276704][ T6317] loop7: unable to read partition table [ 98.287409][ T6317] loop7: partition table beyond EOD, truncated [ 98.297277][ T6317] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 98.313927][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.323148][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 98.340910][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.350129][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 98.358811][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.368134][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 98.378957][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.388113][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 98.399031][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.408253][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 98.470388][ T5921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 98.478813][ T5921] usb 4-1: not running at top speed; connect to a high speed hub [ 98.493492][ T5826] megaworld 0003:07B5:0312.0005: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.1-1/input0 [ 98.509422][ T5921] usb 4-1: config 1 has an invalid interface descriptor of length 5, skipping [ 98.528681][ T5921] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.541041][ T5826] megaworld 0003:07B5:0312.0005: no inputs found [ 98.567962][ T5921] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 19 [ 98.591526][ T5921] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4 [ 98.619292][ T5921] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 98.693966][ T5921] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.706374][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.725055][ T5921] usb 4-1: Product: syz [ 98.730690][ T5921] usb 4-1: Manufacturer: syz [ 98.735328][ T5921] usb 4-1: SerialNumber: syz [ 98.986719][ T5921] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 99.062174][ T5921] usb 4-1: USB disconnect, device number 9 [ 99.119908][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.158990][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 99.330306][ T24] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 99.354815][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.364626][ T6342] process 'syz.2.141' launched './file0' with NULL argv: empty string added [ 99.381234][ T24] usb 1-1: Product: syz [ 99.395789][ T24] usb 1-1: Manufacturer: syz [ 99.408975][ T24] usb 1-1: SerialNumber: syz [ 99.426771][ T24] usb 1-1: config 0 descriptor?? [ 99.442324][ T24] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 007 [ 99.772145][ T6353] binder: BINDER_SET_CONTEXT_MGR already set [ 99.778418][ T6353] binder: 6352:6353 ioctl 4018620d 2000000000c0 returned -16 [ 99.816161][ T6353] binder: BINDER_SET_CONTEXT_MGR already set [ 99.839297][ T6353] binder: 6352:6353 ioctl 4018620d 200000000040 returned -16 [ 99.847402][ T6353] binder: 6352:6353 ioctl c018937e 200000000280 returned -22 [ 99.959234][ T5866] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 100.063018][ T24] i2c i2c-1: failure reading functionality [ 100.087062][ T24] i2c i2c-1: connected i2c-tiny-usb device [ 100.113916][ T24] usb 1-1: USB disconnect, device number 7 [ 100.152784][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 100.187816][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.204131][ T6361] syzkaller1: entered promiscuous mode [ 100.219178][ T6361] syzkaller1: entered allmulticast mode [ 100.232369][ T5866] usb 3-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 100.245106][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.266472][ T5866] usb 3-1: config 0 descriptor?? [ 100.540721][ T6368] binder: BINDER_SET_CONTEXT_MGR already set [ 100.556261][ T5826] usb 2-1: USB disconnect, device number 11 [ 100.557841][ T6368] binder: 6367:6368 ioctl 4018620d 2000000000c0 returned -16 [ 100.615801][ T6368] binder: BINDER_SET_CONTEXT_MGR already set [ 100.640732][ T6368] binder: 6367:6368 ioctl 4018620d 200000000040 returned -16 [ 100.735710][ T5866] waltop 0003:172F:0038.0006: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.2-1/input0 [ 100.925519][ T5866] usb 3-1: USB disconnect, device number 6 [ 100.959574][ T6379] Zero length message leads to an empty skb [ 101.000261][ T6375] fido_id[6375]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 101.344475][ T6394] binder: 6393:6394 ioctl c018937e 200000000280 returned -22 [ 101.867447][ T6413] tipc: Enabling of bearer rejected, already enabled [ 101.941228][ T5909] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 101.987365][ T6417] tipc: Enabling of bearer rejected, failed to enable media [ 102.718260][ T6436] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 102.805527][ T6431] FAULT_INJECTION: forcing a failure. [ 102.805527][ T6431] name failslab, interval 1, probability 0, space 0, times 0 [ 102.857307][ T6440] binder: 6439:6440 ioctl c018937e 200000000280 returned -22 [ 102.892848][ T6431] CPU: 1 UID: 0 PID: 6431 Comm: syz.0.162 Not tainted syzkaller #0 PREEMPT(full) [ 102.892877][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 102.892889][ T6431] Call Trace: [ 102.892898][ T6431] [ 102.892906][ T6431] dump_stack_lvl+0x189/0x250 [ 102.892936][ T6431] ? __pfx____ratelimit+0x10/0x10 [ 102.892959][ T6431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.892979][ T6431] ? __pfx__printk+0x10/0x10 [ 102.893004][ T6431] ? __pfx___might_resched+0x10/0x10 [ 102.893021][ T6431] ? fs_reclaim_acquire+0x7d/0x100 [ 102.893050][ T6431] should_fail_ex+0x414/0x560 [ 102.893078][ T6431] should_failslab+0xa8/0x100 [ 102.893107][ T6431] __kmalloc_noprof+0xdf/0x800 [ 102.893130][ T6431] ? tomoyo_encode+0x28b/0x550 [ 102.893159][ T6431] tomoyo_encode+0x28b/0x550 [ 102.893189][ T6431] tomoyo_realpath_from_path+0x58d/0x5d0 [ 102.893229][ T6431] tomoyo_check_open_permission+0x1c1/0x3b0 [ 102.893256][ T6431] ? init_file+0x93/0x2f0 [ 102.893277][ T6431] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 102.893307][ T6431] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 102.893334][ T6431] ? iterate_dir+0x399/0x570 [ 102.893397][ T6431] ? lockref_get+0x15/0x60 [ 102.893423][ T6431] ? tomoyo_file_open+0x164/0x220 [ 102.893450][ T6431] security_file_open+0xb1/0x270 [ 102.893477][ T6431] do_dentry_open+0x384/0x13f0 [ 102.893505][ T6431] ? vfs_open+0x31/0x340 [ 102.893529][ T6431] vfs_open+0x3b/0x340 [ 102.893554][ T6431] dentry_open+0x61/0xa0 [ 102.893577][ T6431] ovl_dir_read+0x85/0x560 [ 102.893611][ T6431] ? __pfx_ovl_dir_read+0x10/0x10 [ 102.893635][ T6431] ? ovl_path_upper+0x105/0x170 [ 102.893662][ T6431] ? ovl_path_next+0x23c/0x470 [ 102.893689][ T6431] ovl_dir_read_merged+0x3bf/0x4b0 [ 102.893720][ T6431] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 102.893751][ T6431] ? __pfx_ovl_fill_merge+0x10/0x10 [ 102.893786][ T6431] ? __kasan_kmalloc+0x93/0xb0 [ 102.893824][ T6431] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 102.893853][ T6431] ? ovl_iterate+0xcb2/0x2110 [ 102.893878][ T6431] ? __lock_acquire+0xab9/0xd20 [ 102.893903][ T6431] ovl_iterate+0xd75/0x2110 [ 102.893953][ T6431] ? __pfx_ovl_iterate+0x10/0x10 [ 102.893981][ T6431] ? aa_file_perm+0x139/0x1540 [ 102.894004][ T6431] ? aa_file_perm+0x139/0x1540 [ 102.894037][ T6431] ? __lock_acquire+0xab9/0xd20 [ 102.894066][ T6431] ? wrap_directory_iterator+0x5a/0xe0 [ 102.894109][ T6431] ? down_write+0x162/0x1f0 [ 102.894134][ T6431] ? __pfx_down_write+0x10/0x10 [ 102.894160][ T6431] ? wrap_directory_iterator+0x52/0xe0 [ 102.894187][ T6431] ? __pfx_ovl_iterate+0x10/0x10 [ 102.894214][ T6431] wrap_directory_iterator+0x96/0xe0 [ 102.894244][ T6431] iterate_dir+0x399/0x570 [ 102.894276][ T6431] __se_sys_getdents+0xe4/0x250 [ 102.894306][ T6431] ? __pfx___se_sys_getdents+0x10/0x10 [ 102.894333][ T6431] ? ksys_write+0x22a/0x250 [ 102.894348][ T6431] ? __pfx_filldir+0x10/0x10 [ 102.894379][ T6431] ? __pfx_ksys_write+0x10/0x10 [ 102.894401][ T6431] ? do_syscall_64+0xbe/0xfa0 [ 102.894430][ T6431] do_syscall_64+0xfa/0xfa0 [ 102.894456][ T6431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.894476][ T6431] ? clear_bhb_loop+0x60/0xb0 [ 102.894499][ T6431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.894518][ T6431] RIP: 0033:0x7f255158f6c9 [ 102.894535][ T6431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.894552][ T6431] RSP: 002b:00007f25524b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 102.894572][ T6431] RAX: ffffffffffffffda RBX: 00007f25517e5fa0 RCX: 00007f255158f6c9 [ 102.894587][ T6431] RDX: 0000000020002078 RSI: 0000200000001fc0 RDI: 0000000000000003 [ 102.894599][ T6431] RBP: 00007f25524b5090 R08: 0000000000000000 R09: 0000000000000000 [ 102.894610][ T6431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.894620][ T6431] R13: 00007f25517e6038 R14: 00007f25517e5fa0 R15: 00007ffd825ed998 [ 102.894653][ T6431] [ 102.896976][ T6431] ERROR: Out of memory at tomoyo_realpath_from_path. [ 102.939006][ T5909] usb 2-1: device descriptor read/64, error -71 [ 103.033629][ T6445] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 103.389408][ T5909] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 103.556485][ T5909] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.565766][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.587659][ T5909] usb 2-1: Product: syz [ 103.609250][ T5909] usb 2-1: Manufacturer: syz [ 103.623719][ T5909] usb 2-1: SerialNumber: syz [ 103.670109][ T6463] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.174'. [ 103.699745][ T6463] openvswitch: netlink: Flow actions attr not present in new flow. [ 103.719727][ T6466] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.174'. [ 103.735795][ T6466] openvswitch: netlink: Flow actions attr not present in new flow. [ 103.873918][ T6469] binder: 6468:6469 ioctl c018937e 200000000280 returned -22 [ 103.943089][ T6471] loop7: detected capacity change from 0 to 7 [ 103.969937][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.979294][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.011737][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.021073][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.030016][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.039307][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.055787][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.065123][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.075416][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.084737][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.094288][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.103526][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.112586][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.121804][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.136587][ T6471] ldm_validate_partition_table(): Disk read failed. [ 104.153508][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.162777][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.179198][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.188906][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.197079][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.206326][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.214778][ T6471] Dev loop7: unable to read RDB block 0 [ 104.229712][ T6471] loop7: unable to read partition table [ 104.266583][ T6471] loop7: partition table beyond EOD, truncated [ 104.273331][ T6471] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 104.439319][ T5885] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 104.553871][ T6490] netlink: 'syz.3.181': attribute type 2 has an invalid length. [ 104.575564][ T6490] netlink: 244 bytes leftover after parsing attributes in process `syz.3.181'. [ 104.610964][ T5885] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 104.624173][ T5885] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.647426][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.669115][ T5885] usb 3-1: Product: syz [ 104.679306][ T5885] usb 3-1: Manufacturer: syz [ 104.683946][ T5885] usb 3-1: SerialNumber: syz [ 104.689990][ T5909] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 104.959076][ T5885] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 105.024608][ T5885] usb 3-1: USB disconnect, device number 7 [ 105.130456][ T5909] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 105.301172][ T5909] usb 2-1: USB disconnect, device number 13 [ 105.308428][ T5909] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 105.401511][ T6509] syzkaller1: entered promiscuous mode [ 105.421596][ T6509] syzkaller1: entered allmulticast mode [ 105.442272][ T6512] binder: 6511:6512 ioctl c018937e 200000000280 returned -22 [ 105.563486][ T6475] syz.2.178 (6475) used greatest stack depth: 15640 bytes left [ 105.781018][ T6528] netlink: 'syz.3.191': attribute type 10 has an invalid length. [ 105.817228][ T6528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.860876][ T6528] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 106.089871][ T5909] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 106.230290][ T6542] binder: 6541:6542 ioctl c018937e 200000000280 returned -22 [ 106.308999][ T5909] usb 1-1: Using ep0 maxpacket: 32 [ 106.356784][ T5909] usb 1-1: config 40 has an invalid interface number: 249 but max is 0 [ 106.359010][ T5885] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 106.368308][ T5909] usb 1-1: config 40 has no interface number 0 [ 106.380116][ T5909] usb 1-1: config 40 interface 249 has no altsetting 0 [ 106.397115][ T5909] usb 1-1: New USB device found, idVendor=1614, idProduct=0407, bcdDevice=4d.7d [ 106.427296][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.447591][ T5909] usb 1-1: Product: syz [ 106.452157][ T5909] usb 1-1: Manufacturer: syz [ 106.459043][ T5909] usb 1-1: SerialNumber: syz [ 106.506393][ T5909] option 1-1:40.249: GSM modem (1-port) converter detected [ 106.529010][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 106.540555][ T5885] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.567414][ T5885] usb 4-1: config 0 interface 0 has no altsetting 0 [ 106.584911][ T5885] usb 4-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 106.618425][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.681121][ T5885] usb 4-1: config 0 descriptor?? [ 106.723178][ T6554] tipc: Started in network mode [ 106.750551][ T6554] tipc: Node identity ac1414aa, cluster identity 4711 [ 106.758231][ T6554] tipc: Enabled bearer , priority 10 [ 106.901111][ T5885] elecom 0003:056E:00E6.0007: unknown main item tag 0x7 [ 106.926760][ T5885] elecom 0003:056E:00E6.0007: hidraw0: USB HID v10.00 Device [HID 056e:00e6] on usb-dummy_hcd.3-1/input0 [ 107.097884][ T5885] usb 4-1: USB disconnect, device number 10 [ 107.232330][ T6564] tipc: Enabling of bearer rejected, failed to enable media [ 107.599948][ T5909] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 107.739663][ T5909] usb 2-1: device descriptor read/64, error -71 [ 107.791445][ T6569] hugetlbfs: Bad value 't' for mount option 'nr_inodes' [ 107.791445][ T6569] [ 107.869262][ T24] tipc: Node number set to 2886997162 [ 107.913263][ T6571] binder: BINDER_SET_CONTEXT_MGR already set [ 107.920584][ T6571] binder: 6570:6571 ioctl 4018620d 2000000000c0 returned -16 [ 107.933054][ T6571] binder: BINDER_SET_CONTEXT_MGR already set [ 107.939561][ T6571] binder: 6570:6571 ioctl 4018620d 200000000040 returned -16 [ 107.947575][ T6571] binder: 6570:6571 ioctl c018937e 200000000280 returned -22 [ 107.982942][ T5909] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 108.139343][ T5909] usb 2-1: device descriptor read/64, error -71 [ 108.159726][ T6575] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 108.171296][ T6575] FAULT_INJECTION: forcing a failure. [ 108.171296][ T6575] name failslab, interval 1, probability 0, space 0, times 0 [ 108.185312][ T6575] CPU: 1 UID: 0 PID: 6575 Comm: syz.2.207 Not tainted syzkaller #0 PREEMPT(full) [ 108.185358][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.185379][ T6575] Call Trace: [ 108.185387][ T6575] [ 108.185395][ T6575] dump_stack_lvl+0x189/0x250 [ 108.185424][ T6575] ? __pfx____ratelimit+0x10/0x10 [ 108.185449][ T6575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.185473][ T6575] ? __pfx__printk+0x10/0x10 [ 108.185499][ T6575] ? __pfx___might_resched+0x10/0x10 [ 108.185522][ T6575] ? fs_reclaim_acquire+0x7d/0x100 [ 108.185554][ T6575] should_fail_ex+0x414/0x560 [ 108.185588][ T6575] should_failslab+0xa8/0x100 [ 108.185618][ T6575] __kmalloc_noprof+0xdf/0x800 [ 108.185654][ T6575] ? ovl_cache_entry_new+0x4d/0x7a0 [ 108.185691][ T6575] ovl_cache_entry_new+0x4d/0x7a0 [ 108.185723][ T6575] ? __lock_acquire+0xab9/0xd20 [ 108.185749][ T6575] ovl_fill_merge+0x654/0xda0 [ 108.185789][ T6575] ? __pfx_ovl_fill_merge+0x10/0x10 [ 108.185829][ T6575] ? __pfx_ovl_fill_merge+0x10/0x10 [ 108.185856][ T6575] kernfs_fop_readdir+0x537/0x870 [ 108.185893][ T6575] iterate_dir+0x399/0x570 [ 108.185930][ T6575] ovl_dir_read+0x13f/0x560 [ 108.185965][ T6575] ? __pfx_ovl_dir_read+0x10/0x10 [ 108.185990][ T6575] ? ovl_path_upper+0x105/0x170 [ 108.186017][ T6575] ? ovl_path_next+0x23c/0x470 [ 108.186043][ T6575] ovl_dir_read_merged+0x3bf/0x4b0 [ 108.186075][ T6575] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 108.186106][ T6575] ? __pfx_ovl_fill_merge+0x10/0x10 [ 108.186146][ T6575] ? __kasan_kmalloc+0x93/0xb0 [ 108.186173][ T6575] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 108.186205][ T6575] ? ovl_iterate+0xcb2/0x2110 [ 108.186230][ T6575] ? __lock_acquire+0xab9/0xd20 [ 108.186255][ T6575] ovl_iterate+0xd75/0x2110 [ 108.186304][ T6575] ? __pfx_ovl_iterate+0x10/0x10 [ 108.186340][ T6575] ? aa_file_perm+0x139/0x1540 [ 108.186367][ T6575] ? aa_file_perm+0x139/0x1540 [ 108.186403][ T6575] ? __lock_acquire+0xab9/0xd20 [ 108.186435][ T6575] ? wrap_directory_iterator+0x5a/0xe0 [ 108.186479][ T6575] ? down_write+0x162/0x1f0 [ 108.186508][ T6575] ? __pfx_down_write+0x10/0x10 [ 108.186537][ T6575] ? wrap_directory_iterator+0x52/0xe0 [ 108.186567][ T6575] ? __pfx_ovl_iterate+0x10/0x10 [ 108.186597][ T6575] wrap_directory_iterator+0x96/0xe0 [ 108.186629][ T6575] iterate_dir+0x399/0x570 [ 108.186664][ T6575] __se_sys_getdents+0xe4/0x250 [ 108.186696][ T6575] ? __pfx___se_sys_getdents+0x10/0x10 [ 108.186722][ T6575] ? ksys_write+0x22a/0x250 [ 108.186737][ T6575] ? __pfx_filldir+0x10/0x10 [ 108.186779][ T6575] ? __pfx_ksys_write+0x10/0x10 [ 108.186802][ T6575] ? do_syscall_64+0xbe/0xfa0 [ 108.186833][ T6575] do_syscall_64+0xfa/0xfa0 [ 108.186861][ T6575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.186881][ T6575] ? clear_bhb_loop+0x60/0xb0 [ 108.186906][ T6575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.186925][ T6575] RIP: 0033:0x7f3a3e78f6c9 [ 108.186943][ T6575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.186958][ T6575] RSP: 002b:00007f3a3c9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 108.186979][ T6575] RAX: ffffffffffffffda RBX: 00007f3a3e9e5fa0 RCX: 00007f3a3e78f6c9 [ 108.186993][ T6575] RDX: 0000000020002078 RSI: 0000200000001fc0 RDI: 0000000000000003 [ 108.187005][ T6575] RBP: 00007f3a3c9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 108.187017][ T6575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.187028][ T6575] R13: 00007f3a3e9e6038 R14: 00007f3a3e9e5fa0 R15: 00007ffc15da8bf8 [ 108.187071][ T6575] [ 108.548499][ T5909] usb usb2-port1: attempt power cycle [ 108.899017][ T5909] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 108.930807][ T5909] usb 2-1: device descriptor read/8, error -71 [ 108.945355][ T798] usb 1-1: USB disconnect, device number 8 [ 108.955151][ T798] option 1-1:40.249: device disconnected [ 109.060285][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 109.189136][ T5909] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 109.243072][ T6596] binder: 6595:6596 ioctl c018937e 200000000280 returned -22 [ 109.244057][ T5909] usb 2-1: device descriptor read/8, error -71 [ 109.269007][ T5885] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 109.389276][ T5909] usb usb2-port1: unable to enumerate USB device [ 109.419025][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 109.435218][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 109.449473][ T5885] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 109.464579][ T5885] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 109.474530][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.488956][ T5885] usb 4-1: Product: syz [ 109.494746][ T6604] loop7: detected capacity change from 0 to 7 [ 109.499473][ T5885] usb 4-1: Manufacturer: syz [ 109.504023][ C0] blk_print_req_error: 10 callbacks suppressed [ 109.504041][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.509741][ T5885] usb 4-1: SerialNumber: syz [ 109.511632][ C0] buffer_io_error: 10 callbacks suppressed [ 109.511648][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.537101][ T5885] usb 4-1: config 0 descriptor?? [ 109.540231][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.553187][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.565387][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.574685][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.584438][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.593831][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.602770][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.611986][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.620625][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.629822][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.638368][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.647748][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.655669][ T5961] ldm_validate_partition_table(): Disk read failed. [ 109.663141][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.672582][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.683852][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.693117][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.701443][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.710671][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.719504][ T5961] Dev loop7: unable to read RDB block 0 [ 109.726177][ T5961] loop7: unable to read partition table [ 109.732381][ T5961] loop7: partition table beyond EOD, truncated [ 109.743994][ T6604] ldm_validate_partition_table(): Disk read failed. [ 109.752267][ T6604] Dev loop7: unable to read RDB block 0 [ 109.758660][ T6604] loop7: unable to read partition table [ 109.771878][ T6604] loop7: partition table beyond EOD, truncated [ 109.790559][ T5885] usb 4-1: USB disconnect, device number 11 [ 109.801119][ T6604] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 109.836585][ T5196] ldm_validate_partition_table(): Disk read failed. [ 109.845882][ T5196] Dev loop7: unable to read RDB block 0 [ 109.855425][ T5196] loop7: unable to read partition table [ 109.866053][ T5196] loop7: partition table beyond EOD, truncated [ 109.880758][ T5909] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 110.044801][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.069698][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.093705][ T5909] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 110.103218][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.119439][ T5909] usb 3-1: config 0 descriptor?? [ 110.223824][ T6621] binder: 6620:6621 ioctl c018937e 200000000280 returned -22 [ 110.377635][ T6627] netdevsim netdevsim0: Firmware load for 'nel/address_bits0/../file0' refused, path contains '..' component [ 110.484470][ T6628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.500645][ T6628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.552734][ T6608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.566694][ T6634] fuse: Unknown parameter '0x00000000000000040x0000000000000004' [ 110.570064][ T6632] syzkaller1: entered promiscuous mode [ 110.580751][ T6608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.582979][ T6632] syzkaller1: entered allmulticast mode [ 110.617354][ T30] audit: type=1800 audit(1762384587.180:2): pid=6634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.231" name="file1" dev="tmpfs" ino=322 res=0 errno=0 [ 110.670120][ T5866] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 110.812498][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 110.820262][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 110.827951][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 110.835839][ T5909] usbhid 3-1:0.0: can't add hid device: -32 [ 110.843980][ T5866] usb 1-1: Using ep0 maxpacket: 32 [ 110.849759][ T5909] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 110.860960][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 110.877867][ T5909] usb 3-1: USB disconnect, device number 8 [ 110.883960][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 110.904743][ T5866] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 110.914878][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.923003][ T5866] usb 1-1: Product: syz [ 110.927317][ T5866] usb 1-1: Manufacturer: syz [ 110.933200][ T5866] usb 1-1: SerialNumber: syz [ 110.941512][ T5866] usb 1-1: config 0 descriptor?? [ 110.965598][ T5866] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 111.117238][ T6651] binder: 6650:6651 ioctl c018937e 200000000280 returned -22 [ 111.155694][ T6260] usb 1-1: Failed to submit usb control message: -71 [ 111.159051][ T5909] usb 1-1: USB disconnect, device number 9 [ 111.175914][ T6260] usb 1-1: unable to send the bmi data to the device: -71 [ 111.189261][ T6260] usb 1-1: unable to get target info from device [ 111.199169][ T6260] usb 1-1: could not get target info (-71) [ 111.205979][ T6260] usb 1-1: could not probe fw (-71) [ 111.253878][ T6657] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.490990][ T6668] tipc: Enabling of bearer rejected, already enabled [ 111.806914][ T5885] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 111.809316][ T5909] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 111.964444][ T5885] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.978803][ T5885] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.000856][ T5909] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 112.012180][ T5885] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.021257][ T5909] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 112.024070][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.043983][ T5885] usb 3-1: Product: syz [ 112.048364][ T5885] usb 3-1: Manufacturer: syz [ 112.054849][ T5885] usb 3-1: SerialNumber: syz [ 112.068833][ T5909] usb 2-1: config 1 interface 0 has no altsetting 0 [ 112.078788][ T5909] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 112.089799][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.117003][ T5909] usb 2-1: Product: syz [ 112.135583][ T5909] usb 2-1: Manufacturer: syz [ 112.161606][ T5909] usb 2-1: SerialNumber: syz [ 112.188991][ T6670] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 112.194989][ T6680] tipc: Enabling of bearer rejected, media not registered [ 112.196395][ T6670] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 112.290247][ T5885] usb 3-1: invalid UAC_HEADER (v1) [ 112.343874][ T5885] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 112.360486][ T5885] usb 3-1: USB disconnect, device number 9 [ 112.474212][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.519752][ T6683] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 112.533488][ T6683] FAULT_INJECTION: forcing a failure. [ 112.533488][ T6683] name failslab, interval 1, probability 0, space 0, times 0 [ 112.546875][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.0.249 Not tainted syzkaller #0 PREEMPT(full) [ 112.546901][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 112.546912][ T6683] Call Trace: [ 112.546920][ T6683] [ 112.546928][ T6683] dump_stack_lvl+0x189/0x250 [ 112.546956][ T6683] ? __pfx____ratelimit+0x10/0x10 [ 112.546981][ T6683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.547004][ T6683] ? __pfx__printk+0x10/0x10 [ 112.547030][ T6683] ? __pfx___might_resched+0x10/0x10 [ 112.547052][ T6683] ? fs_reclaim_acquire+0x7d/0x100 [ 112.547083][ T6683] should_fail_ex+0x414/0x560 [ 112.547124][ T6683] should_failslab+0xa8/0x100 [ 112.547152][ T6683] __kmalloc_noprof+0xdf/0x800 [ 112.547176][ T6683] ? ovl_cache_entry_new+0x4d/0x7a0 [ 112.547211][ T6683] ovl_cache_entry_new+0x4d/0x7a0 [ 112.547243][ T6683] ? __lock_acquire+0xab9/0xd20 [ 112.547268][ T6683] ovl_fill_merge+0x654/0xda0 [ 112.547308][ T6683] ? __pfx_ovl_fill_merge+0x10/0x10 [ 112.547347][ T6683] ? __pfx_ovl_fill_merge+0x10/0x10 [ 112.547374][ T6683] kernfs_fop_readdir+0x537/0x870 [ 112.547410][ T6683] iterate_dir+0x399/0x570 [ 112.547445][ T6683] ovl_dir_read+0x13f/0x560 [ 112.547479][ T6683] ? __pfx_ovl_dir_read+0x10/0x10 [ 112.547503][ T6683] ? ovl_path_upper+0x105/0x170 [ 112.547528][ T6683] ? ovl_path_next+0x23c/0x470 [ 112.547555][ T6683] ovl_dir_read_merged+0x3bf/0x4b0 [ 112.547586][ T6683] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 112.547615][ T6683] ? __pfx_ovl_fill_merge+0x10/0x10 [ 112.547654][ T6683] ? __kasan_kmalloc+0x93/0xb0 [ 112.547681][ T6683] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 112.547706][ T6683] ? ovl_iterate+0xcb2/0x2110 [ 112.547730][ T6683] ? __lock_acquire+0xab9/0xd20 [ 112.547754][ T6683] ovl_iterate+0xd75/0x2110 [ 112.547801][ T6683] ? __pfx_ovl_iterate+0x10/0x10 [ 112.547831][ T6683] ? aa_file_perm+0x139/0x1540 [ 112.547856][ T6683] ? aa_file_perm+0x139/0x1540 [ 112.547892][ T6683] ? __lock_acquire+0xab9/0xd20 [ 112.547923][ T6683] ? wrap_directory_iterator+0x5a/0xe0 [ 112.547967][ T6683] ? down_write+0x162/0x1f0 [ 112.547995][ T6683] ? __pfx_down_write+0x10/0x10 [ 112.548023][ T6683] ? wrap_directory_iterator+0x52/0xe0 [ 112.548052][ T6683] ? __pfx_ovl_iterate+0x10/0x10 [ 112.548081][ T6683] wrap_directory_iterator+0x96/0xe0 [ 112.548119][ T6683] iterate_dir+0x399/0x570 [ 112.548153][ T6683] __se_sys_getdents+0xe4/0x250 [ 112.548184][ T6683] ? __pfx___se_sys_getdents+0x10/0x10 [ 112.548210][ T6683] ? ksys_write+0x22a/0x250 [ 112.548224][ T6683] ? __pfx_filldir+0x10/0x10 [ 112.548252][ T6683] ? __pfx_ksys_write+0x10/0x10 [ 112.548274][ T6683] ? do_syscall_64+0xbe/0xfa0 [ 112.548302][ T6683] do_syscall_64+0xfa/0xfa0 [ 112.548328][ T6683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.548346][ T6683] ? clear_bhb_loop+0x60/0xb0 [ 112.548369][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.548387][ T6683] RIP: 0033:0x7f255158f6c9 [ 112.548406][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.548422][ T6683] RSP: 002b:00007f25524b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 112.548442][ T6683] RAX: ffffffffffffffda RBX: 00007f25517e5fa0 RCX: 00007f255158f6c9 [ 112.548456][ T6683] RDX: 0000000020002078 RSI: 0000200000001fc0 RDI: 0000000000000003 [ 112.548468][ T6683] RBP: 00007f25524b5090 R08: 0000000000000000 R09: 0000000000000000 [ 112.548480][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.548490][ T6683] R13: 00007f25517e6038 R14: 00007f25517e5fa0 R15: 00007ffd825ed998 [ 112.548524][ T6683] [ 113.066097][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 113.118299][ T6696] overlayfs: failed to resolve './file0': -2 [ 113.279086][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 113.295880][ T6703] binder: BINDER_SET_CONTEXT_MGR already set [ 113.302163][ T6703] binder: 6702:6703 ioctl 4018620d 2000000000c0 returned -16 [ 113.312844][ T5909] (unnamed net_device) (uninitialized): Assigned a random MAC address: e6:43:3d:ac:f2:f2 [ 113.357151][ T5909] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 113.399707][ T5909] usb 2-1: USB disconnect, device number 18 [ 113.441425][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 113.455439][ T10] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 113.472643][ T10] usb 1-1: config 0 has no interface number 0 [ 113.505501][ T10] usb 1-1: config 0 interface 12 has no altsetting 0 [ 113.534635][ T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 113.552563][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.568675][ T10] usb 1-1: Product: syz [ 113.578590][ T10] usb 1-1: Manufacturer: syz [ 113.583659][ T10] usb 1-1: SerialNumber: syz [ 113.720650][ T10] usb 1-1: config 0 descriptor?? [ 114.067983][ T6692] netlink: 'syz.0.251': attribute type 4 has an invalid length. [ 114.117362][ T6747] loop7: detected capacity change from 0 to 7 [ 114.157749][ T10] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 114.173603][ T6747] ldm_validate_partition_table(): Disk read failed. [ 114.188076][ T10] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 114.199638][ T6747] Dev loop7: unable to read RDB block 0 [ 114.212014][ T6747] loop7: unable to read partition table [ 114.218843][ T10] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 114.229791][ T10] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 114.239283][ T6747] loop7: partition table beyond EOD, truncated [ 114.260000][ T6747] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 114.279216][ T10] usb 1-1: USB disconnect, device number 10 [ 114.749148][ T5909] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 114.939842][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 114.947158][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.982635][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.000407][ T5909] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 115.013983][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.026821][ T5909] usb 3-1: config 0 descriptor?? [ 115.035439][ T5909] hub 3-1:0.0: USB hub found [ 115.057943][ T6773] netlink: 'syz.3.273': attribute type 10 has an invalid length. [ 115.072971][ T6772] syzkaller1: entered promiscuous mode [ 115.092201][ T6772] syzkaller1: entered allmulticast mode [ 115.152688][ T6779] binder: BINDER_SET_CONTEXT_MGR already set [ 115.158715][ T6779] binder: 6778:6779 ioctl 4018620d 2000000000c0 returned -16 [ 115.234859][ T5909] hub 3-1:0.0: 1 port detected [ 115.314284][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'. [ 115.329034][ T24] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 115.484029][ T24] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 115.495302][ T24] usb 2-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.509309][ T24] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 115.520851][ T24] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 115.531409][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 115.542513][ T24] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 115.551813][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.559996][ T24] usb 2-1: Product: syz [ 115.564581][ T24] usb 2-1: Manufacturer: syz [ 115.569297][ T24] usb 2-1: SerialNumber: syz [ 115.576617][ T24] usb 2-1: config 0 descriptor?? [ 115.675957][ T6796] tipc: Enabling of bearer rejected, already enabled [ 115.685706][ T5866] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 115.789503][ T24] usb 2-1: Can not set alternate setting to 1, error: -71 [ 115.802457][ T24] synaptics_usb 2-1:0.0: probe with driver synaptics_usb failed with error -71 [ 115.829967][ T24] usb 2-1: USB disconnect, device number 19 [ 115.851734][ T5909] hub 3-1:0.0: activate --> -90 [ 115.860415][ T5866] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 115.881898][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.892919][ T5866] usb 4-1: Product: syz [ 115.897347][ T5866] usb 4-1: Manufacturer: syz [ 115.902527][ T5866] usb 4-1: SerialNumber: syz [ 115.910064][ T5866] usb 4-1: config 0 descriptor?? [ 115.934893][ T5827] Bluetooth: hci4: urb ffff88814173c300 submission failed (2) [ 116.122563][ T30] audit: type=1326 audit(1762384592.690:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.3.281" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a14d8f6c9 code=0x0 [ 116.172944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 116.181778][ T5866] usb 4-1: USB disconnect, device number 12 [ 116.309533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 116.383382][ T24] usb 3-1: USB disconnect, device number 10 [ 116.391948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 116.580229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.634614][ T6804] binder_alloc: 6803: binder_alloc_buf, no vma [ 116.868354][ T6811] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 116.879319][ T6811] FAULT_INJECTION: forcing a failure. [ 116.879319][ T6811] name failslab, interval 1, probability 0, space 0, times 0 [ 116.895153][ T6811] CPU: 0 UID: 0 PID: 6811 Comm: syz.1.289 Not tainted syzkaller #0 PREEMPT(full) [ 116.895179][ T6811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 116.895190][ T6811] Call Trace: [ 116.895197][ T6811] [ 116.895205][ T6811] dump_stack_lvl+0x189/0x250 [ 116.895232][ T6811] ? __pfx____ratelimit+0x10/0x10 [ 116.895254][ T6811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.895275][ T6811] ? __pfx__printk+0x10/0x10 [ 116.895301][ T6811] ? __pfx___might_resched+0x10/0x10 [ 116.895321][ T6811] ? fs_reclaim_acquire+0x7d/0x100 [ 116.895352][ T6811] should_fail_ex+0x414/0x560 [ 116.895380][ T6811] should_failslab+0xa8/0x100 [ 116.895413][ T6811] __kmalloc_noprof+0xdf/0x800 [ 116.895436][ T6811] ? ovl_cache_entry_new+0x4d/0x7a0 [ 116.895470][ T6811] ovl_cache_entry_new+0x4d/0x7a0 [ 116.895501][ T6811] ? __lock_acquire+0xab9/0xd20 [ 116.895524][ T6811] ovl_fill_merge+0x654/0xda0 [ 116.895550][ T6811] ? __pfx_ovl_fill_merge+0x10/0x10 [ 116.895570][ T6811] ? __pfx_ovl_fill_merge+0x10/0x10 [ 116.895584][ T6811] kernfs_fop_readdir+0x537/0x870 [ 116.895604][ T6811] iterate_dir+0x399/0x570 [ 116.895622][ T6811] ovl_dir_read+0x13f/0x560 [ 116.895649][ T6811] ? __pfx_ovl_dir_read+0x10/0x10 [ 116.895662][ T6811] ? ovl_path_upper+0x105/0x170 [ 116.895676][ T6811] ? ovl_path_next+0x23c/0x470 [ 116.895690][ T6811] ovl_dir_read_merged+0x3bf/0x4b0 [ 116.895707][ T6811] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 116.895723][ T6811] ? __pfx_ovl_fill_merge+0x10/0x10 [ 116.895743][ T6811] ? __kasan_kmalloc+0x93/0xb0 [ 116.895757][ T6811] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 116.895770][ T6811] ? ovl_iterate+0xcb2/0x2110 [ 116.895783][ T6811] ? __lock_acquire+0xab9/0xd20 [ 116.895796][ T6811] ovl_iterate+0xd75/0x2110 [ 116.895821][ T6811] ? __pfx_ovl_iterate+0x10/0x10 [ 116.895838][ T6811] ? aa_file_perm+0x139/0x1540 [ 116.895853][ T6811] ? aa_file_perm+0x139/0x1540 [ 116.895871][ T6811] ? __lock_acquire+0xab9/0xd20 [ 116.895888][ T6811] ? wrap_directory_iterator+0x5a/0xe0 [ 116.895910][ T6811] ? down_write+0x162/0x1f0 [ 116.895925][ T6811] ? __pfx_down_write+0x10/0x10 [ 116.895941][ T6811] ? wrap_directory_iterator+0x52/0xe0 [ 116.895956][ T6811] ? __pfx_ovl_iterate+0x10/0x10 [ 116.895971][ T6811] wrap_directory_iterator+0x96/0xe0 [ 116.895988][ T6811] iterate_dir+0x399/0x570 [ 116.896005][ T6811] __se_sys_getdents+0xe4/0x250 [ 116.896022][ T6811] ? __pfx___se_sys_getdents+0x10/0x10 [ 116.896035][ T6811] ? ksys_write+0x22a/0x250 [ 116.896043][ T6811] ? __pfx_filldir+0x10/0x10 [ 116.896059][ T6811] ? __pfx_ksys_write+0x10/0x10 [ 116.896070][ T6811] ? do_syscall_64+0xbe/0xfa0 [ 116.896087][ T6811] do_syscall_64+0xfa/0xfa0 [ 116.896100][ T6811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.896111][ T6811] ? clear_bhb_loop+0x60/0xb0 [ 116.896123][ T6811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.896133][ T6811] RIP: 0033:0x7f67d318f6c9 [ 116.896143][ T6811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.896151][ T6811] RSP: 002b:00007f67d405a038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 116.896163][ T6811] RAX: ffffffffffffffda RBX: 00007f67d33e5fa0 RCX: 00007f67d318f6c9 [ 116.896170][ T6811] RDX: 0000000020002078 RSI: 0000200000001fc0 RDI: 0000000000000003 [ 116.896180][ T6811] RBP: 00007f67d405a090 R08: 0000000000000000 R09: 0000000000000000 [ 116.896187][ T6811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.896192][ T6811] R13: 00007f67d33e6038 R14: 00007f67d33e5fa0 R15: 00007ffe9f812c68 [ 116.896210][ T6811] [ 117.249894][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 117.410965][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 117.422170][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 117.487866][ T24] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 117.508681][ T6822] tipc: Enabling of bearer rejected, failed to enable media [ 117.539427][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.669161][ T24] usb 4-1: config 0 descriptor?? [ 117.705377][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'. [ 118.029016][ T6833] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 118.154092][ T24] creative-sb0540 0003:041E:3100.0008: hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.3-1/input0 [ 118.168365][ T6835] binder_alloc: 6834: binder_alloc_buf, no vma [ 118.400848][ T5885] usb 4-1: USB disconnect, device number 13 [ 118.465108][ T6842] netlink: 164 bytes leftover after parsing attributes in process `syz.2.300'. [ 118.942173][ T6859] binder: BINDER_SET_CONTEXT_MGR already set [ 118.948321][ T6859] binder: 6858:6859 ioctl 4018620d 2000000000c0 returned -16 [ 118.960210][ T6859] binder: BINDER_SET_CONTEXT_MGR already set [ 118.966207][ T6859] binder: 6858:6859 ioctl 4018620d 200000000040 returned -16 [ 119.010566][ T6861] loop7: detected capacity change from 0 to 7 [ 119.019297][ C1] blk_print_req_error: 60 callbacks suppressed [ 119.019315][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.034800][ C1] buffer_io_error: 60 callbacks suppressed [ 119.034819][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.048811][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.058424][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.066676][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.075831][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.084226][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.093494][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.102671][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.111936][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.120813][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.130150][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.138195][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.147561][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.155504][ T6861] ldm_validate_partition_table(): Disk read failed. [ 119.162962][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.172313][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.180460][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.189644][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.197665][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.207199][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.215517][ T6861] Dev loop7: unable to read RDB block 0 [ 119.221833][ T6861] loop7: unable to read partition table [ 119.227844][ T6861] loop7: partition table beyond EOD, truncated [ 119.234197][ T6861] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 119.579760][ T5909] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 119.587884][ T6871] syzkaller1: entered promiscuous mode [ 119.594599][ T6871] syzkaller1: entered allmulticast mode [ 119.622741][ T6873] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.739023][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 119.751403][ T5909] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 119.768397][ T5909] usb 4-1: config 0 has no interface number 0 [ 119.791958][ T5909] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 119.819844][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.836785][ T5909] usb 4-1: Product: syz [ 119.841153][ T5909] usb 4-1: Manufacturer: syz [ 119.845804][ T5909] usb 4-1: SerialNumber: syz [ 119.860004][ T5909] usb 4-1: config 0 descriptor?? [ 119.878541][ T5909] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 119.893854][ T6877] binder: BINDER_SET_CONTEXT_MGR already set [ 119.927599][ T6877] binder: 6876:6877 ioctl 4018620d 200000000040 returned -16 [ 120.110121][ T5909] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 120.142187][ T5909] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 120.752631][ T6910] CIFS: VFS: Malformed UNC in devname [ 120.897581][ T6914] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 120.908114][ T6914] FAULT_INJECTION: forcing a failure. [ 120.908114][ T6914] name failslab, interval 1, probability 0, space 0, times 0 [ 120.922128][ T6914] CPU: 0 UID: 0 PID: 6914 Comm: syz.1.329 Not tainted syzkaller #0 PREEMPT(full) [ 120.922154][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.922166][ T6914] Call Trace: [ 120.922174][ T6914] [ 120.922182][ T6914] dump_stack_lvl+0x189/0x250 [ 120.922212][ T6914] ? __pfx____ratelimit+0x10/0x10 [ 120.922240][ T6914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.922263][ T6914] ? __pfx__printk+0x10/0x10 [ 120.922289][ T6914] ? __pfx___might_resched+0x10/0x10 [ 120.922311][ T6914] ? fs_reclaim_acquire+0x7d/0x100 [ 120.922349][ T6914] should_fail_ex+0x414/0x560 [ 120.922381][ T6914] should_failslab+0xa8/0x100 [ 120.922411][ T6914] __kmalloc_noprof+0xdf/0x800 [ 120.922435][ T6914] ? ovl_cache_entry_new+0x4d/0x7a0 [ 120.922470][ T6914] ovl_cache_entry_new+0x4d/0x7a0 [ 120.922502][ T6914] ? __lock_acquire+0xab9/0xd20 [ 120.922527][ T6914] ovl_fill_merge+0x654/0xda0 [ 120.922566][ T6914] ? __pfx_ovl_fill_merge+0x10/0x10 [ 120.922614][ T6914] ? __pfx_ovl_fill_merge+0x10/0x10 [ 120.922642][ T6914] kernfs_fop_readdir+0x537/0x870 [ 120.922678][ T6914] iterate_dir+0x399/0x570 [ 120.922712][ T6914] ovl_dir_read+0x13f/0x560 [ 120.922746][ T6914] ? __pfx_ovl_dir_read+0x10/0x10 [ 120.922770][ T6914] ? ovl_path_upper+0x105/0x170 [ 120.922796][ T6914] ? ovl_path_next+0x23c/0x470 [ 120.922823][ T6914] ovl_dir_read_merged+0x3bf/0x4b0 [ 120.922854][ T6914] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 120.922884][ T6914] ? __pfx_ovl_fill_merge+0x10/0x10 [ 120.922924][ T6914] ? __kasan_kmalloc+0x93/0xb0 [ 120.922951][ T6914] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 120.922976][ T6914] ? ovl_iterate+0xcb2/0x2110 [ 120.923001][ T6914] ? __lock_acquire+0xab9/0xd20 [ 120.923025][ T6914] ovl_iterate+0xd75/0x2110 [ 120.923074][ T6914] ? __pfx_ovl_iterate+0x10/0x10 [ 120.923105][ T6914] ? aa_file_perm+0x139/0x1540 [ 120.923131][ T6914] ? aa_file_perm+0x139/0x1540 [ 120.923167][ T6914] ? __lock_acquire+0xab9/0xd20 [ 120.923199][ T6914] ? wrap_directory_iterator+0x5a/0xe0 [ 120.923243][ T6914] ? down_write+0x162/0x1f0 [ 120.923270][ T6914] ? __pfx_down_write+0x10/0x10 [ 120.923299][ T6914] ? wrap_directory_iterator+0x52/0xe0 [ 120.923333][ T6914] ? __pfx_ovl_iterate+0x10/0x10 [ 120.923362][ T6914] wrap_directory_iterator+0x96/0xe0 [ 120.923394][ T6914] iterate_dir+0x399/0x570 [ 120.923428][ T6914] __se_sys_getdents+0xe4/0x250 [ 120.923457][ T6914] ? __pfx___se_sys_getdents+0x10/0x10 [ 120.923481][ T6914] ? ksys_write+0x22a/0x250 [ 120.923495][ T6914] ? __pfx_filldir+0x10/0x10 [ 120.923523][ T6914] ? __pfx_ksys_write+0x10/0x10 [ 120.923543][ T6914] ? do_syscall_64+0xbe/0xfa0 [ 120.923571][ T6914] do_syscall_64+0xfa/0xfa0 [ 120.923598][ T6914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.923617][ T6914] ? clear_bhb_loop+0x60/0xb0 [ 120.923641][ T6914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.923660][ T6914] RIP: 0033:0x7f67d318f6c9 [ 120.923677][ T6914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.923694][ T6914] RSP: 002b:00007f67d405a038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 120.923714][ T6914] RAX: ffffffffffffffda RBX: 00007f67d33e5fa0 RCX: 00007f67d318f6c9 [ 120.923728][ T6914] RDX: 0000000020002078 RSI: 0000200000001fc0 RDI: 0000000000000003 [ 120.923741][ T6914] RBP: 00007f67d405a090 R08: 0000000000000000 R09: 0000000000000000 [ 120.923752][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.923764][ T6914] R13: 00007f67d33e6038 R14: 00007f67d33e5fa0 R15: 00007ffe9f812c68 [ 120.923798][ T6914] [ 121.539604][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 121.715819][ T6926] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 122.107349][ T6939] tipc: Enabling of bearer rejected, failed to enable media [ 122.387808][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 122.395930][ T10] usb 4-1: USB disconnect, device number 14 [ 122.422930][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 122.456159][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 122.484263][ T10] quatech2 4-1:0.51: device disconnected [ 122.491066][ T6942] netlink: 164 bytes leftover after parsing attributes in process `syz.3.339'. [ 122.578679][ T6944] binder: BINDER_SET_CONTEXT_MGR already set [ 122.586790][ T6944] binder: 6943:6944 ioctl 4018620d 2000000000c0 returned -16 [ 122.597820][ T6944] binder: BINDER_SET_CONTEXT_MGR already set [ 122.607483][ T6944] binder: 6943:6944 ioctl 4018620d 200000000040 returned -16 [ 122.744068][ T6951] binder: BINDER_SET_CONTEXT_MGR already set [ 122.750358][ T6951] binder: 6950:6951 ioctl 4018620d 2000000000c0 returned -16 [ 122.812739][ T6955] loop7: detected capacity change from 0 to 7 [ 122.823624][ T6955] ldm_validate_partition_table(): Disk read failed. [ 122.832462][ T6955] Dev loop7: unable to read RDB block 0 [ 122.839778][ T6955] loop7: unable to read partition table [ 122.845908][ T6955] loop7: partition table beyond EOD, truncated [ 122.855198][ T6955] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 123.030486][ T6968] binder: BINDER_SET_CONTEXT_MGR already set [ 123.036567][ T6968] binder: 6967:6968 ioctl 4018620d 2000000000c0 returned -16 [ 123.047182][ T6968] binder: BINDER_SET_CONTEXT_MGR already set [ 123.053357][ T6968] binder: 6967:6968 ioctl 4018620d 200000000040 returned -16 [ 123.094669][ T6970] netlink: 'syz.3.350': attribute type 10 has an invalid length. [ 123.130810][ T10] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 123.174167][ T6974] binder: BINDER_SET_CONTEXT_MGR already set [ 123.180532][ T6974] binder: 6973:6974 ioctl 4018620d 2000000000c0 returned -16 [ 123.226557][ T6976] syzkaller1: entered promiscuous mode [ 123.232305][ T6976] syzkaller1: entered allmulticast mode [ 123.299022][ T10] usb 2-1: Invalid ep0 maxpacket: 64 [ 123.396192][ T30] audit: type=1326 audit(1762384599.960:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.3.355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a14d8f6c9 code=0x0 [ 123.439069][ T10] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 123.599009][ T10] usb 2-1: Invalid ep0 maxpacket: 64 [ 123.605171][ T10] usb usb2-port1: attempt power cycle [ 123.949097][ T10] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 123.970465][ T10] usb 2-1: Invalid ep0 maxpacket: 64 [ 124.099004][ T10] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 124.119650][ T10] usb 2-1: Invalid ep0 maxpacket: 64 [ 124.126466][ T10] usb usb2-port1: unable to enumerate USB device [ 124.509562][ T6994] binder: BINDER_SET_CONTEXT_MGR already set [ 124.516864][ T6994] binder: 6993:6994 ioctl 4018620d 2000000000c0 returned -16 [ 124.798989][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 124.929201][ T24] usb 4-1: device descriptor read/64, error -71 [ 125.002699][ T7006] binder: 7005:7006 ioctl c0306201 200000000080 returned -14 [ 125.021026][ T7006] binder: 7005:7006 ioctl c0306201 2000000003c0 returned -14 [ 125.034834][ T7006] binder: 7005:7006 ioctl c0306201 200000000a00 returned -14 [ 125.153898][ T7011] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 125.164340][ T7011] FAULT_INJECTION: forcing a failure. [ 125.164340][ T7011] name failslab, interval 1, probability 0, space 0, times 0 [ 125.177566][ T7011] CPU: 1 UID: 0 PID: 7011 Comm: syz.0.369 Not tainted syzkaller #0 PREEMPT(full) [ 125.177589][ T7011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.177599][ T7011] Call Trace: [ 125.177606][ T7011] [ 125.177613][ T7011] dump_stack_lvl+0x189/0x250 [ 125.177638][ T7011] ? __pfx____ratelimit+0x10/0x10 [ 125.177662][ T7011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.177684][ T7011] ? __pfx__printk+0x10/0x10 [ 125.177707][ T7011] ? __pfx___might_resched+0x10/0x10 [ 125.177719][ T7011] ? fs_reclaim_acquire+0x7d/0x100 [ 125.177736][ T7011] should_fail_ex+0x414/0x560 [ 125.177753][ T7011] should_failslab+0xa8/0x100 [ 125.177769][ T7011] __kmalloc_noprof+0xdf/0x800 [ 125.177783][ T7011] ? ovl_cache_entry_new+0x4d/0x7a0 [ 125.177813][ T7011] ovl_cache_entry_new+0x4d/0x7a0 [ 125.177844][ T7011] ? __lock_acquire+0xab9/0xd20 [ 125.177896][ T7011] ovl_fill_merge+0x654/0xda0 [ 125.177918][ T7011] ? __pfx_ovl_fill_merge+0x10/0x10 [ 125.177938][ T7011] ? __pfx_ovl_fill_merge+0x10/0x10 [ 125.177952][ T7011] kernfs_fop_readdir+0x537/0x870 [ 125.177971][ T7011] iterate_dir+0x399/0x570 [ 125.177990][ T7011] ovl_dir_read+0x13f/0x560 [ 125.178007][ T7011] ? __pfx_ovl_dir_read+0x10/0x10 [ 125.178020][ T7011] ? ovl_path_upper+0x105/0x170 [ 125.178034][ T7011] ? ovl_path_next+0x23c/0x470 [ 125.178048][ T7011] ovl_dir_read_merged+0x3bf/0x4b0 [ 125.178064][ T7011] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 125.178080][ T7011] ? __pfx_ovl_fill_merge+0x10/0x10 [ 125.178100][ T7011] ? __kasan_kmalloc+0x93/0xb0 [ 125.178114][ T7011] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 125.178127][ T7011] ? ovl_iterate+0xcb2/0x2110 [ 125.178140][ T7011] ? __lock_acquire+0xab9/0xd20 [ 125.178152][ T7011] ovl_iterate+0xd75/0x2110 [ 125.178178][ T7011] ? __pfx_ovl_iterate+0x10/0x10 [ 125.178194][ T7011] ? aa_file_perm+0x139/0x1540 [ 125.178209][ T7011] ? aa_file_perm+0x139/0x1540 [ 125.178227][ T7011] ? __lock_acquire+0xab9/0xd20 [ 125.178243][ T7011] ? wrap_directory_iterator+0x5a/0xe0 [ 125.178266][ T7011] ? down_write+0x162/0x1f0 [ 125.178281][ T7011] ? __pfx_down_write+0x10/0x10 [ 125.178296][ T7011] ? wrap_directory_iterator+0x52/0xe0 [ 125.178311][ T7011] ? __pfx_ovl_iterate+0x10/0x10 [ 125.178326][ T7011] wrap_directory_iterator+0x96/0xe0 [ 125.178342][ T7011] iterate_dir+0x399/0x570 [ 125.178360][ T7011] __se_sys_getdents+0xe4/0x250 [ 125.178377][ T7011] ? __pfx___se_sys_getdents+0x10/0x10 [ 125.178390][ T7011] ? ksys_write+0x22a/0x250 [ 125.178398][ T7011] ? __pfx_filldir+0x10/0x10 [ 125.178413][ T7011] ? __pfx_ksys_write+0x10/0x10 [ 125.178425][ T7011] ? do_syscall_64+0xbe/0xfa0 [ 125.178441][ T7011] do_syscall_64+0xfa/0xfa0 [ 125.178455][ T7011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.178465][ T7011] ? clear_bhb_loop+0x60/0xb0 [ 125.178478][ T7011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.178487][ T7011] RIP: 0033:0x7f255158f6c9 [ 125.178498][ T7011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.178507][ T7011] RSP: 002b:00007f25524b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 125.178518][ T7011] RAX: ffffffffffffffda RBX: 00007f25517e5fa0 RCX: 00007f255158f6c9 [ 125.178526][ T7011] RDX: 0000000020002078 RSI: 0000200000001fc0 RDI: 0000000000000003 [ 125.178532][ T7011] RBP: 00007f25524b5090 R08: 0000000000000000 R09: 0000000000000000 [ 125.178538][ T7011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.178544][ T7011] R13: 00007f25517e6038 R14: 00007f25517e5fa0 R15: 00007ffd825ed998 [ 125.178562][ T7011] [ 125.528065][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 125.605485][ T7014] binder: BINDER_SET_CONTEXT_MGR already set [ 125.619615][ T7014] binder: 7013:7014 ioctl 4018620d 200000000040 returned -16 [ 125.679145][ T24] usb 4-1: device descriptor read/64, error -71 [ 125.721631][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 125.791227][ T24] usb usb4-port1: attempt power cycle [ 125.877114][ T7026] netlink: 164 bytes leftover after parsing attributes in process `syz.2.376'. [ 126.029972][ T7032] netlink: 220 bytes leftover after parsing attributes in process `syz.2.378'. [ 126.035171][ T7033] binder: BINDER_SET_CONTEXT_MGR already set [ 126.045548][ T7033] binder: 7029:7033 ioctl 4018620d 200000000040 returned -16 [ 126.143085][ T7035] tipc: Enabling of bearer rejected, failed to enable media [ 126.160168][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 126.189891][ T24] usb 4-1: device descriptor read/8, error -71 [ 126.459021][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 126.481755][ T7044] loop7: detected capacity change from 0 to 7 [ 126.501402][ C0] blk_print_req_error: 30 callbacks suppressed [ 126.501419][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.516830][ C0] buffer_io_error: 30 callbacks suppressed [ 126.516847][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.520148][ T24] usb 4-1: device descriptor read/8, error -71 [ 126.544407][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.553671][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.564149][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.573368][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.587711][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.596987][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.605883][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.615096][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.623682][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.632938][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.645445][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.657288][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.666092][ T7044] ldm_validate_partition_table(): Disk read failed. [ 126.695354][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.704604][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.718631][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.719405][ T24] usb usb4-port1: unable to enumerate USB device [ 126.728209][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.750370][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.759622][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 126.779101][ T7044] Dev loop7: unable to read RDB block 0 [ 126.801068][ T7044] loop7: unable to read partition table [ 126.807117][ T7044] loop7: partition table beyond EOD, truncated [ 126.816174][ T7044] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 127.270132][ T7056] binder: BINDER_SET_CONTEXT_MGR already set [ 127.276410][ T7056] binder: 7055:7056 ioctl 4018620d 200000000040 returned -16 [ 127.352814][ T7059] netlink: 'syz.0.390': attribute type 10 has an invalid length. [ 127.366582][ T7059] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 127.429026][ T10] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 127.447886][ T7061] syzkaller1: entered promiscuous mode [ 127.455785][ T7061] syzkaller1: entered allmulticast mode [ 127.524592][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'. [ 127.535876][ T7063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.392'. [ 127.548060][ T7063] netlink: 88 bytes leftover after parsing attributes in process `syz.2.392'. [ 127.632191][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 127.662698][ T10] usb 2-1: config 2 has an invalid interface number: 67 but max is 0 [ 127.669926][ T7065] ptrace attach of "./syz-executor exec"[5830] was attempted by ""[7065] [ 127.679626][ T10] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 127.690513][ T10] usb 2-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 127.718965][ T10] usb 2-1: config 2 has no interface number 0 [ 127.729112][ T10] usb 2-1: config 2 interface 67 altsetting 5 endpoint 0xD has an invalid bInterval 0, changing to 4 [ 127.769021][ T10] usb 2-1: config 2 interface 67 has no altsetting 0 [ 127.810404][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=16.07 [ 127.833950][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.836970][ T7075] binder: BINDER_SET_CONTEXT_MGR already set [ 127.850037][ T7075] binder: 7073:7075 ioctl 4018620d 2000000000c0 returned -16 [ 127.860684][ T10] usb 2-1: Product: Ṳ⽯웹㌺㜥佬ꀋ聙鋏དྷӕ،ᷘᆂ饺倖ᄩ铗묞쮈囡릗岻䗅锟ઘ⍳䌃嗚䝓鋵奈枥࿥ᗏŭ魫᭺롤鬱즓뉀䊄㚷藔Ⱪ䘣₈蚖峸᤬眘䑚佂讲킳ⱞ䯍淩껛骨䎪킲龩ᤤ燱ᙧ희ḍ筂삣❌肦૙鱑ᐛこ鐒鎘蘥䪪㍪퉾ஷꁷꃜ做⒡庌姄余〡⩥≔ꁗ䲂㐨鱺睑蓍ﲎ掺ᘡ뮏䂮ག茨鯉 [ 127.863440][ T7075] binder: BINDER_SET_CONTEXT_MGR already set [ 127.907800][ T7075] binder: 7073:7075 ioctl 4018620d 200000000040 returned -16 [ 127.956827][ T10] usb 2-1: Manufacturer: Ы [ 127.967161][ T10] usb 2-1: SerialNumber: syz [ 127.980139][ T7079] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 128.219946][ T10] usb 2-1: USB disconnect, device number 24 [ 128.365102][ T7094] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 128.374797][ T7094] FAULT_INJECTION: forcing a failure. [ 128.374797][ T7094] name failslab, interval 1, probability 0, space 0, times 0 [ 128.388438][ T7094] CPU: 0 UID: 0 PID: 7094 Comm: syz.2.406 Not tainted syzkaller #0 PREEMPT(full) [ 128.388462][ T7094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.388473][ T7094] Call Trace: [ 128.388480][ T7094] [ 128.388487][ T7094] dump_stack_lvl+0x189/0x250 [ 128.388515][ T7094] ? __pfx____ratelimit+0x10/0x10 [ 128.388540][ T7094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.388564][ T7094] ? __pfx__printk+0x10/0x10 [ 128.388590][ T7094] ? __pfx___might_resched+0x10/0x10 [ 128.388617][ T7094] ? fs_reclaim_acquire+0x7d/0x100 [ 128.388648][ T7094] should_fail_ex+0x414/0x560 [ 128.388679][ T7094] should_failslab+0xa8/0x100 [ 128.388706][ T7094] __kmalloc_noprof+0xdf/0x800 [ 128.388729][ T7094] ? ovl_cache_entry_new+0x4d/0x7a0 [ 128.388763][ T7094] ovl_cache_entry_new+0x4d/0x7a0 [ 128.388794][ T7094] ? __lock_acquire+0xab9/0xd20 [ 128.388819][ T7094] ovl_fill_merge+0x654/0xda0 [ 128.388856][ T7094] ? __pfx_ovl_fill_merge+0x10/0x10 [ 128.388893][ T7094] ? __pfx_ovl_fill_merge+0x10/0x10 [ 128.388918][ T7094] kernfs_fop_readdir+0x537/0x870 [ 128.388954][ T7094] iterate_dir+0x399/0x570 [ 128.388989][ T7094] ovl_dir_read+0x13f/0x560 [ 128.389023][ T7094] ? __pfx_ovl_dir_read+0x10/0x10 [ 128.389048][ T7094] ? ovl_path_upper+0x105/0x170 [ 128.389075][ T7094] ? ovl_path_next+0x23c/0x470 [ 128.389102][ T7094] ovl_dir_read_merged+0x3bf/0x4b0 [ 128.389133][ T7094] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 128.389169][ T7094] ? __pfx_ovl_fill_merge+0x10/0x10 [ 128.389208][ T7094] ? __kasan_kmalloc+0x93/0xb0 [ 128.389235][ T7094] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 128.389261][ T7094] ? ovl_iterate+0xcb2/0x2110 [ 128.389286][ T7094] ? __lock_acquire+0xab9/0xd20 [ 128.389310][ T7094] ovl_iterate+0xd75/0x2110 [ 128.389359][ T7094] ? __pfx_ovl_iterate+0x10/0x10 [ 128.389391][ T7094] ? aa_file_perm+0x139/0x1540 [ 128.389418][ T7094] ? aa_file_perm+0x139/0x1540 [ 128.389453][ T7094] ? __lock_acquire+0xab9/0xd20 [ 128.389485][ T7094] ? wrap_directory_iterator+0x5a/0xe0 [ 128.389530][ T7094] ? down_write+0x162/0x1f0 [ 128.389558][ T7094] ? __pfx_down_write+0x10/0x10 [ 128.389586][ T7094] ? wrap_directory_iterator+0x52/0xe0 [ 128.389623][ T7094] ? __pfx_ovl_iterate+0x10/0x10 [ 128.389653][ T7094] wrap_directory_iterator+0x96/0xe0 [ 128.389685][ T7094] iterate_dir+0x399/0x570 [ 128.389719][ T7094] __se_sys_getdents+0xe4/0x250 [ 128.389751][ T7094] ? __pfx___se_sys_getdents+0x10/0x10 [ 128.389777][ T7094] ? ksys_write+0x22a/0x250 [ 128.389792][ T7094] ? __pfx_filldir+0x10/0x10 [ 128.389822][ T7094] ? __pfx_ksys_write+0x10/0x10 [ 128.389845][ T7094] ? do_syscall_64+0xbe/0xfa0 [ 128.389875][ T7094] do_syscall_64+0xfa/0xfa0 [ 128.389902][ T7094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.389922][ T7094] ? clear_bhb_loop+0x60/0xb0 [ 128.389946][ T7094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.389965][ T7094] RIP: 0033:0x7f3a3e78f6c9 [ 128.389984][ T7094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.390000][ T7094] RSP: 002b:00007f3a3c9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 128.390021][ T7094] RAX: ffffffffffffffda RBX: 00007f3a3e9e5fa0 RCX: 00007f3a3e78f6c9 [ 128.390036][ T7094] RDX: 0000000020002078 RSI: 0000200000001fc0 RDI: 0000000000000003 [ 128.390049][ T7094] RBP: 00007f3a3c9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 128.390061][ T7094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 128.390073][ T7094] R13: 00007f3a3e9e6038 R14: 00007f3a3e9e5fa0 R15: 00007ffc15da8bf8 [ 128.390108][ T7094] [ 128.794754][ T7098] binder: BINDER_SET_CONTEXT_MGR already set [ 128.802224][ T5885] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 128.811368][ T7098] binder: 7097:7098 ioctl 4018620d 200000000600 returned -16 [ 128.820781][ T7098] binder: 7097:7098 ioctl ae41 0 returned -22 [ 128.827146][ T7098] binder: 7097:7098 ioctl c0984124 200000000280 returned -22 [ 128.977738][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 128.989850][ T5885] usb 4-1: unable to get BOS descriptor or descriptor too short [ 129.003138][ T5885] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 129.011075][ T5885] usb 4-1: can't read configurations, error -71 [ 129.057337][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 129.169076][ T10] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 129.329020][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 129.458971][ T10] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 129.477731][ T7127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.491185][ T7127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.577119][ T7132] loop7: detected capacity change from 0 to 7 [ 129.586718][ T5961] ldm_validate_partition_table(): Disk read failed. [ 129.594243][ T5961] Dev loop7: unable to read RDB block 0 [ 129.600816][ T5961] loop7: unable to read partition table [ 129.606810][ T5961] loop7: partition table beyond EOD, truncated [ 129.609102][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 129.619228][ T10] usb usb3-port1: attempt power cycle [ 129.627958][ T7132] ldm_validate_partition_table(): Disk read failed. [ 129.636062][ T7132] Dev loop7: unable to read RDB block 0 [ 129.643622][ T7132] loop7: unable to read partition table [ 129.649933][ T7132] loop7: partition table beyond EOD, truncated [ 129.657353][ T7132] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 129.714563][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 129.727768][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 129.740670][ T799] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 129.892771][ T7140] tipc: Enabling of bearer rejected, failed to enable media [ 129.912635][ T799] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 129.954486][ T799] usb 2-1: config 7 has no interface number 0 [ 129.965691][ T799] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 129.975703][ T799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.983958][ T799] usb 2-1: Product: syz [ 129.988520][ T799] usb 2-1: Manufacturer: syz [ 129.993413][ T799] usb 2-1: SerialNumber: syz [ 130.101863][ T10] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 130.139570][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 130.277042][ T799] as10x_usb: device has been detected [ 130.280916][ T10] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 130.283616][ T799] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 130.309716][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 130.311921][ T799] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 130.316051][ T10] usb usb3-port1: unable to enumerate USB device [ 130.346961][ T799] as10x_usb: error during firmware upload part1 [ 130.355114][ T799] Registered device Elgato EyeTV DTT Deluxe [ 130.366395][ T799] usb 2-1: USB disconnect, device number 25 [ 130.426468][ T799] Unregistered device Elgato EyeTV DTT Deluxe [ 130.437753][ T799] as10x_usb: device has been disconnected [ 130.513365][ T7146] ======================================================= [ 130.513365][ T7146] WARNING: The mand mount option has been deprecated and [ 130.513365][ T7146] and is ignored by this kernel. Remove the mand [ 130.513365][ T7146] option from the mount to silence this warning. [ 130.513365][ T7146] ======================================================= [ 130.806490][ T7148] binder: BINDER_SET_CONTEXT_MGR already set [ 130.812584][ T7148] binder: 7147:7148 ioctl 4018620d 200000000040 returned -16 [ 130.932229][ T7152] netlink: 'syz.1.428': attribute type 10 has an invalid length. [ 131.112833][ T7159] syzkaller1: entered promiscuous mode [ 131.118569][ T7159] syzkaller1: entered allmulticast mode [ 131.352496][ T7171] binder: BINDER_SET_CONTEXT_MGR already set [ 131.361451][ T7171] binder: 7170:7171 ioctl 4018620d 200000000040 returned -16 [ 131.422758][ T5885] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 131.578998][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 131.584126][ T7177] ------------[ cut here ]------------ [ 131.586156][ T5885] usb 4-1: unable to get BOS descriptor or descriptor too short [ 131.590067][ T7177] WARNING: ./include/linux/ns_common.h:288 at nsproxy_ns_active_get+0x88f/0xcb0, CPU#0: syz.1.439/7177 [ 131.603572][ T5885] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.609562][ T7177] Modules linked in: [ 131.619214][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.622841][ T7177] CPU: 0 UID: 0 PID: 7177 Comm: syz.1.439 Not tainted syzkaller #0 PREEMPT(full) [ 131.632358][ T5885] usb 4-1: Product: syz [ 131.640543][ T7177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 131.645145][ T5885] usb 4-1: Manufacturer: syz [ 131.655000][ T7177] RIP: 0010:nsproxy_ns_active_get+0x88f/0xcb0 [ 131.660252][ T5885] usb 4-1: SerialNumber: syz [ 131.665930][ T7177] Code: 00 e8 a5 60 77 ff eb 0c e8 9e 60 77 ff eb 05 e8 97 60 77 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 82 60 77 ff 90 <0f> 0b 90 e9 ee f7 ff ff e8 74 60 77 ff 90 0f 0b 90 e9 12 f8 ff ff [ 131.665959][ T7177] RSP: 0018:ffffc90018f3fd40 EFLAGS: 00010283 [ 131.697077][ T7177] RAX: ffffffff824a0d3e RBX: ffff88801d299820 RCX: 0000000000080000 [ 131.705226][ T7177] RDX: ffffc9000ba79000 RSI: 0000000000000931 RDI: 0000000000000932 [ 131.713314][ T7177] RBP: ffffc90018f3fe01 R08: ffff8880309718bb R09: 1ffff1100612e317 [ 131.721410][ T7177] R10: dffffc0000000000 R11: ffffed100612e318 R12: dffffc0000000000 [ 131.729489][ T7177] R13: 0000000000000000 R14: ffff8880309718b8 R15: ffff888030971800 [ 131.737488][ T7177] FS: 00007f67d405a6c0(0000) GS:ffff888125a8b000(0000) knlGS:0000000000000000 [ 131.746517][ T7177] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.753148][ T7177] CR2: 00007f67d4059f98 CR3: 0000000032aea000 CR4: 00000000003526f0 [ 131.761268][ T7177] Call Trace: [ 131.764578][ T7177] [ 131.767537][ T7177] switch_task_namespaces+0x3e/0x110 [ 131.772919][ T7177] __se_sys_setns+0x784/0x17d0 [ 131.777736][ T7177] ? __pfx_do_sys_openat2+0x10/0x10 [ 131.783381][ T7177] ? __pfx___se_sys_setns+0x10/0x10 [ 131.788712][ T7177] ? do_syscall_64+0xbe/0xfa0 [ 131.793534][ T7177] do_syscall_64+0xfa/0xfa0 [ 131.798098][ T7177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.804298][ T7177] ? clear_bhb_loop+0x60/0xb0 [ 131.809050][ T7177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.814997][ T7177] RIP: 0033:0x7f67d3190ef7 [ 131.819500][ T7177] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.839276][ T7177] RSP: 002b:00007f67d4059fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 131.847755][ T7177] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f67d3190ef7 [ 131.855832][ T7177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 131.863990][ T7177] RBP: 00007f67d3211f91 R08: 0000000000000000 R09: 0000000000000000 [ 131.872780][ T7177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.880919][ T7177] R13: 00007f67d33e6038 R14: 00007f67d33e5fa0 R15: 00007ffe9f812c68 [ 131.889299][ T7177] [ 131.892404][ T7177] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 131.899702][ T7177] CPU: 0 UID: 0 PID: 7177 Comm: syz.1.439 Not tainted syzkaller #0 PREEMPT(full) [ 131.908903][ T7177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 131.919048][ T7177] Call Trace: [ 131.922330][ T7177] [ 131.925259][ T7177] dump_stack_lvl+0x99/0x250 [ 131.929871][ T7177] ? __asan_memcpy+0x40/0x70 [ 131.934481][ T7177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.939687][ T7177] ? __pfx__printk+0x10/0x10 [ 131.944288][ T7177] vpanic+0x237/0x6d0 [ 131.948265][ T7177] ? __pfx_vpanic+0x10/0x10 [ 131.952772][ T7177] ? is_bpf_text_address+0x292/0x2b0 [ 131.958108][ T7177] ? is_bpf_text_address+0x26/0x2b0 [ 131.963351][ T7177] panic+0xb9/0xc0 [ 131.967177][ T7177] ? __pfx_panic+0x10/0x10 [ 131.971610][ T7177] __warn+0x334/0x4c0 [ 131.975590][ T7177] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 131.981056][ T7177] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 131.986519][ T7177] report_bug+0x2be/0x4f0 [ 131.990891][ T7177] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 131.996357][ T7177] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 132.001821][ T7177] ? nsproxy_ns_active_get+0x891/0xcb0 [ 132.007280][ T7177] handle_bug+0x84/0x160 [ 132.011541][ T7177] exc_invalid_op+0x1a/0x50 [ 132.016076][ T7177] asm_exc_invalid_op+0x1a/0x20 [ 132.020939][ T7177] RIP: 0010:nsproxy_ns_active_get+0x88f/0xcb0 [ 132.027018][ T7177] Code: 00 e8 a5 60 77 ff eb 0c e8 9e 60 77 ff eb 05 e8 97 60 77 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 82 60 77 ff 90 <0f> 0b 90 e9 ee f7 ff ff e8 74 60 77 ff 90 0f 0b 90 e9 12 f8 ff ff [ 132.046724][ T7177] RSP: 0018:ffffc90018f3fd40 EFLAGS: 00010283 [ 132.052817][ T7177] RAX: ffffffff824a0d3e RBX: ffff88801d299820 RCX: 0000000000080000 [ 132.060799][ T7177] RDX: ffffc9000ba79000 RSI: 0000000000000931 RDI: 0000000000000932 [ 132.068996][ T7177] RBP: ffffc90018f3fe01 R08: ffff8880309718bb R09: 1ffff1100612e317 [ 132.076976][ T7177] R10: dffffc0000000000 R11: ffffed100612e318 R12: dffffc0000000000 [ 132.084953][ T7177] R13: 0000000000000000 R14: ffff8880309718b8 R15: ffff888030971800 [ 132.092936][ T7177] ? nsproxy_ns_active_get+0x88e/0xcb0 [ 132.098412][ T7177] switch_task_namespaces+0x3e/0x110 [ 132.103697][ T7177] __se_sys_setns+0x784/0x17d0 [ 132.108464][ T7177] ? __pfx_do_sys_openat2+0x10/0x10 [ 132.113669][ T7177] ? __pfx___se_sys_setns+0x10/0x10 [ 132.118872][ T7177] ? do_syscall_64+0xbe/0xfa0 [ 132.123578][ T7177] do_syscall_64+0xfa/0xfa0 [ 132.128108][ T7177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.134190][ T7177] ? clear_bhb_loop+0x60/0xb0 [ 132.138871][ T7177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.144866][ T7177] RIP: 0033:0x7f67d3190ef7 [ 132.149292][ T7177] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.169275][ T7177] RSP: 002b:00007f67d4059fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 132.177707][ T7177] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f67d3190ef7 [ 132.185675][ T7177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 132.193640][ T7177] RBP: 00007f67d3211f91 R08: 0000000000000000 R09: 0000000000000000 [ 132.201612][ T7177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.209666][ T7177] R13: 00007f67d33e6038 R14: 00007f67d33e5fa0 R15: 00007ffe9f812c68 [ 132.217653][ T7177] [ 132.221010][ T7177] Kernel Offset: disabled [ 132.225353][ T7177] Rebooting in 86400 seconds..