last executing test programs: 14m55.219416076s ago: executing program 32 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x1e000000) 13m27.480173248s ago: executing program 33 (id=438): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x4603c2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f00000000c0)={0x3, 0xa, 0x6, 0x1, 0x2c}) r2 = syz_ublk_setup_io_uring(0x4de5, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000007, 0x401d031, r2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"983e62f19ffab9f96cf59b2a54c3d83c", 0x0, r3, {0x136}, {0xea87, 0xfffffff7}, 0x9, [0x8, 0x8000000000000001, 0xffff, 0x2, 0x3f, 0x3, 0x0, 0x80000001, 0x6, 0x5e7, 0x7, 0x8, 0x97, 0x7, 0x7d, 0x8fdd]}) r4 = syz_ublk_setup_io_uring(0x4de5, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000007, 0x401d031, r4, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000300)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000340)={"983e62f19ffab9f96cf59b2a54c3d83c", 0x0, r5, {0x136}, {0xea87, 0xfffffff7}, 0x9, [0x8, 0x8000000000000001, 0xffff, 0x2, 0x3f, 0x3, 0x0, 0x80000001, 0x6, 0x5e7, 0x7, 0x8, 0x97, 0x7, 0x7d, 0x8fdd]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000440)={"d4048fd7fc2608ca343ac9cbb47d5044", r3, r5, {0xdb94, 0x670}, {0x1, 0x9}, 0xffffffffffffff01, [0x61f6, 0x2, 0x6, 0xb19, 0x9, 0x2, 0xffffffffffffffcf, 0x6, 0x9, 0x3, 0x6, 0x0, 0x8, 0x321, 0x7fff, 0x2]}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 12m42.239973677s ago: executing program 34 (id=739): r0 = syz_open_dev$usbfs(&(0x7f0000000800), 0xffffffffffffffff, 0x1781) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000840)=@urb_type_control={0x2, {}, 0xffffffff, 0x0, &(0x7f0000001e00)={0x4b5a9da54893e123, 0x1, 0x3, 0xc00}, 0x8, 0x200, 0xfffffe, 0x0, 0x1, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x84042, 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x2, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="008f5355a5ec86"]) read$FUSE(r2, 0x0, 0x0) open(0x0, 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r2, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f00000060c0)={0x10, 0xffffffffffffffda}, 0x10) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, &(0x7f0000006300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid={'afid', 0x3d, 0x69}}, {@msize={'msize', 0x3d, 0x4}}, {@nodevmap}, {@dfltgid}, {@noxattr}, {@access_client}, {@noxattr}, {@mmap}, {@cache_mmap}], [{@smackfshat}, {@pcr={'pcr', 0x3d, 0x40}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fowner_lt}, {@euid_lt}, {@uid_lt}]}}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000006100), 0x20080, 0x0) dup3(r4, r2, 0x0) close(0x3) 11m33.678904007s ago: executing program 35 (id=1072): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone3(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005"], 0x58}}, 0x4080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) 10m29.325864488s ago: executing program 36 (id=1344): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0xfffffff8, {{0xa, 0x4e20, 0x81, @loopback, 0x1}}}, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./pipefs/gssd/clntXX/gssd\x00', 0x17f) mount(0x0, &(0x7f0000000840)='./pipefs\x00', &(0x7f0000000880)='rpc_pipefs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000900)='./pipefs/gssd/clntXX/gssd\x00', 0x169c02, 0x96) close_range(r0, 0xffffffffffffffff, 0x0) 10m17.545727714s ago: executing program 37 (id=1436): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x24, 0x26, 0x503, 0x3fffd, 0x400000, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x24}], 0x1}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r0) (fail_nth: 2) 9m12.068964187s ago: executing program 9 (id=1797): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000140), 0x0) 9m11.839454413s ago: executing program 9 (id=1799): r0 = syz_open_dev$mtd(&(0x7f0000000080), 0x48a99fbe, 0x10b241) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000140)) ioctl$MEMWRITEOOB(r0, 0xc0104d03, &(0x7f0000000100)={0x1e7, 0x100000, 0x0}) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xfd, 0x1, 0x4000010, r1, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mom\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xe7\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x9}}, 0x20) 9m11.629121186s ago: executing program 9 (id=1800): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x10200, 0x2, 0xfee00000, 0x2000, &(0x7f0000000000/0x2000)=nil}) setns(0xc9, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000001280)={0x2, 0x4e22, @private=0xa010102}, 0x10) (async) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f00000012c0)=0xffffff7e, 0x4) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) syz_emit_vhci(&(0x7f0000001300)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9) setitimer(0x3, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect(0x0, 0x63, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c0320904000002080650000705010200020007058202000200090400010408066200070501020002000324010705020200020003240207050302000200032403070584020002000324"], 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/wireless\x00') pread64(r1, &(0x7f0000000280)=""/4092, 0x9e, 0x4) (async) r2 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a41535900002000000010902270001010080fa0904000003ff000000070502020002"], 0x0) syz_usb_ep_read(r2, 0x2, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2b, 0x1, 0x1) listen(r3, 0x0) (async) pselect6(0x40, &(0x7f0000001340)={0x0, 0x3, 0x5, 0x1, 0x800, 0xfffffffffffffffc, 0x81}, 0x0, &(0x7f0000001380)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, &(0x7f00000013c0)={0x0, 0x3938700}, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/drivers/ahci\x00', 0x0, 0x0) openat(r4, &(0x7f0000000100)='new_id\x00', 0x1, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000140)={0x7, 0x0, 0x8, r4}) 9m8.513648642s ago: executing program 9 (id=1814): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000007c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000800)='.\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x9801) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602117436c379000000020000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c10000a0fff00224e0000", 0x58}], 0x1) move_mount(r1, &(0x7f00000008c0)='.\x00', r0, &(0x7f0000000900)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000940)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000980)='\x00', 0x89901) 9m8.417168065s ago: executing program 9 (id=1815): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/module/nf_conntrack/parameters/hashsize\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='16', 0x2) 9m8.091530254s ago: executing program 9 (id=1818): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) r0 = openat$rnull_attr(0xffffffffffffff9c, &(0x7f0000000080)={'/sys/kernel/config/rnull/syzrnull', 0x0, '/power\x00'}, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000180)={0x1, 0x0, 0x1, 0x8, 0x14, "3eccd800000000000000cbfa000000040100"}) open_by_handle_at(r0, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x2, 0x449}}, 0x400) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000400)={0x1, 0x10, 0xf}, 0x18) utimensat(r2, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)={{}, {0x77359400}}, 0x100) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='nfs4\x00', 0x80404, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/module/nf_conntrack/parameters/hashsize\x00', 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xce, 0x0, 0x10004}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x4020) write(r3, &(0x7f00000003c0)='16', 0x2) 9m7.842458045s ago: executing program 38 (id=1818): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) r0 = openat$rnull_attr(0xffffffffffffff9c, &(0x7f0000000080)={'/sys/kernel/config/rnull/syzrnull', 0x0, '/power\x00'}, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000180)={0x1, 0x0, 0x1, 0x8, 0x14, "3eccd800000000000000cbfa000000040100"}) open_by_handle_at(r0, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x2, 0x449}}, 0x400) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000400)={0x1, 0x10, 0xf}, 0x18) utimensat(r2, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)={{}, {0x77359400}}, 0x100) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='nfs4\x00', 0x80404, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/module/nf_conntrack/parameters/hashsize\x00', 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xce, 0x0, 0x10004}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x4020) write(r3, &(0x7f00000003c0)='16', 0x2) 9m7.313442389s ago: executing program 8 (id=1821): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) r1 = syz_open_dev$cec(&(0x7f0000002b00), 0xffffffffffffffff, 0xc0c00) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) (async) signalfd(r1, &(0x7f0000002b40)={[0x2]}, 0x8) (async) ioctl$KVM_X86_SET_MSR_FILTER(r0, 0x4188aec6, &(0x7f00000028c0)={0x0, [{0x2, 0x548, 0x2, &(0x7f00000000c0)="5a06201f1c624ee11df74dc96cd7a1570eb36fb4c53f364f206a69b32e956c8e2c0075cfe7eced5a5b76cf41b73d351bf5498a902a786246df5354a3c903fd0f9084ec7f4633dd9fb253e5be3625fb819fad1ab6d2e3c4df0e0ff9466a7dd154c29602ef65b1c04f6d2bc33c2fa2b4aff7d7ee7059e75ee192f3aacaf811546120e0cec9417b36ed9bbebbf472ad5079c20b3db4ccc367367d0db0fcffd0dde7eb909d2f0702e22e4e"}, {0x2, 0x190, 0x5, &(0x7f0000000180)="471ecbc427aeb764d383b152b3f4e44538bb1fe29e9ace60aebb856fb843c712c7efef1f846431a570743927a15b75458cce"}, {0x1, 0x588, 0x4202, &(0x7f00000001c0)="fadd9c712a1ec74f3578d9f3df75bda5412344da3ecc8065af1b403d2e8d876d1f28958e357e07512787a69495749be38b5a5e7d39b075d7592bc53130ce5de92797b80f25f80892dd7a9e4a0467363588c3e53a091c6da22f51c8b14af03d5a5816e4b9863c571085dc4f71c69bfcf703e53884b88dd81cf5d327c164282ed3b5fc91a7574a8aa6c1e3be04c1a950656843f555a964c7d6012c76bd063cadc54b6d2888911c32fd4e88cc6ac22a71da9f"}, {0x2, 0xa8, 0x1, &(0x7f0000000280)="cf66094d32c0b3f7bd9c080329d8f8da4e5c837731"}, {0x0, 0x4e0, 0x76, &(0x7f00000002c0)="2b0c195e679503e2f39f37285ca26b6606bf89eb96eaf864b14a58788bbdcbe93cb1c68888bd88ee7b86f35478b21aa7214911d289887363390e9faec88e2b3979737f8113a87e5ada186b4be521458c40bbd69fc5c2a76fee24ab270cbdb693d0c29c59f350a59285d84e74248a0e7ce8479cd7b775ce530fb2fd960098e5852e83512fbddb612a2012e41708e89910a8c40c4479251568588655c4"}, {0x1, 0x208, 0x8, &(0x7f0000000380)="29f1e2615ba34b27791b502a0474f1b7ff5a81e64bbcbf91d7a55ae5dec9003dee7e2b11989c9ddbf4eae0743e1c3f42e86876bda8c310d445441414179d6ad245"}, {0x2, 0x488, 0x8c, &(0x7f0000000400)="cf3f2a3ed1b9cf479931d5d1673f18ea0227da8e7fa37b8e9d22ccd6f0cf0d474a1a032f16ee2ad39cc5c76ecdac1e59f03e4997efd9f4fee337c4daba464ac937f0b016c6b5017ae277fa3a07343ecc953289ff8515d50fb29d60f113181dc5bae556eb81c077c6e40d01d63d1e89888cf17675568bc652c82b6e8a5cc7d93c522145956f0730d1599a79f82c668fdf2c"}, {0x2, 0x370, 0x6, &(0x7f00000004c0)="81952f19e067eb8daef8b789318c2e591996e46731618238bdcd34c5b969494abf41a4d2a34a5ee2b2f563a64fafb41a28099c82d660ac77b99133f066034d91a4915dbfa27c9c8e9fbbd98129d6074e5f4cde4f0dcd9343d49379ffcdcaea0161b6b8170491aa4b787b3dfc5e39"}, {0x1, 0x88, 0x5, &(0x7f0000000540)="a76a1a03f05ee5acc8c05ed6c3938dd710"}, {0x0, 0x2c8, 0x8, &(0x7f0000000580)="087c35e70536593df939331be50e5d4acdc7bdaee582f293931b7dcc758b657861f39fb97f964521ef55e9c1c69b983b5be8e08f9e111932977192a30988996d967439762d2937547fa2aecffe45d3dcd3ede536df45883742"}, {0x5, 0x80, 0x7, &(0x7f0000000600)="44cac7202618137cb9b4842bc290413d"}, {0x2, 0x8000, 0x7a98, &(0x7f0000000640)="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"}, {0x3, 0x4d8, 0x2, &(0x7f0000001640)="9fc49d98c2de0375ac458e84658671ff1043daf313d4c2c6d130654686da7c08d1799318ad1b7993216b246e220f35b49f9f2b3b41e14e47ccec79c1829c438e590478191639d661c3d7d5e54923d93598da0ec713cdbab0e2eb0f3a0015b38eb2882d8e6acf4487464a8f007351a062c33f34eb1c61be7b660405d8866ec173a36086b6bd15a3e647f2623f876ab34c14c28be5c543e774c467a4"}, {0x3, 0x420, 0x7, &(0x7f0000001700)="9852c38cea0c77153ebb150e1d0852ef13ebb35ac15a96f90bc1c6c70e4b576a7ac7a373dadf01b4627671468af5f09f84e4d637337f6fabd3a2309f95cdbb62f7d398a0a1146e0aa38b56619f506b9571040feaf1e0f5961a8a6953ed4334ecbb5bf40a548132efff3bd4b4a5aee032b13a82f14bf29f203784cfd4f1a76c2f797ed261"}, {0x0, 0x760, 0x9, &(0x7f00000017c0)="de8d7ff2eb2b63a5bba58aa7cf833bf73619ad9dedddf3b6b3777212fde759170e8b1ebf38e011e2c9ccde78cd452a95c516cb2fcfa2576dd236099189e1d08c7b3b15c8869cdf54a8bcd51539614db37ade1d7ab888f7cbc1d41933b2262205e47400d6c519a519c1c6dadf4043337d597d17e8403b92e2a6d9453364cdbcb6ff8de57538d26a535e941bddb5484c484debaa52de4978c5047bbff26ca4ac0fd75cfe647b52f2f71c9222518254ec7114892bbd90dd507c2592a4c4ecb662778522ebb16b06bff0cd28d33d90ee89a5725d9f919d662b4d603ddec2912138e68d4ac24360f8b7d8b3ebe4f2"}, {0x4, 0x8000, 0x4256, &(0x7f00000018c0)="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"}]}) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = open(&(0x7f0000002a80)='.\x00', 0x880, 0x5a) fcntl$lock(r3, 0x410, 0x0) fcntl$getflags(r3, 0x401) (async) move_mount(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000002ac0)='./file0\x00', 0x80) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) 9m6.955420938s ago: executing program 8 (id=1823): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, r3, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x84, 0x5, 0x9, 0x3, 0x0, 0x1]}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) syz_usb_connect(0x0, 0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070502"], 0x0) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffff94, 0x34, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr', 0x3) recvfrom$inet(r0, &(0x7f00000001c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 9m3.835510192s ago: executing program 8 (id=1828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) rt_sigpending(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x200000, 0x200003, 0x0, 0x0, 0x3}) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/apparmor/parameters/debug\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1', 0x1) (async) write(r1, &(0x7f0000000240)='1', 0x1) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x10d400, 0x0) (async) openat$vcsu(0xffffffffffffff9c, 0x0, 0x10d400, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xe2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x10000}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x40c4}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x40c4}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) 9m3.63844195s ago: executing program 8 (id=1829): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000007c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000800)='.\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x9801) move_mount(r1, &(0x7f00000008c0)='.\x00', r0, &(0x7f0000000900)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000940)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000980)='\x00', 0x89901) (fail_nth: 2) 9m3.465307578s ago: executing program 8 (id=1830): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_usb_connect(0x5, 0x51, &(0x7f0000000640)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f000000000009050300000000000009050cfeffff01060209050f000000000000090507c2"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0xa, 0x10}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, '\x00', 0x8, 0x3c, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], "82def990596d374d"}}}}}}, 0x42) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001402000", 0x3a}], 0x1}, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000780)={0xaa, 0x140}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r8, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000100000a000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r3, &(0x7f0000000500)={&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000600)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000140007800800064000000200080008"], 0x60}, 0x1, 0x0, 0x0, 0x404c014}, 0xd4) write$P9_RCREATE(r2, &(0x7f0000000180)={0x18, 0x73, 0x1, {{0x1, 0x4, 0x5}, 0x7}}, 0x18) 9m3.040516889s ago: executing program 8 (id=1831): symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x12d7498, 0x0) r0 = socket(0x2, 0x805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000240)=0x10) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000280)=""/4102, &(0x7f00000012c0)=0x1006) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x89901) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) mount_setattr(r2, &(0x7f0000000040)='./file0/../file0/../file0\x00', 0x800, &(0x7f0000000200)={0x1, 0x70, 0x0, {r2}}, 0x20) 9m2.43860292s ago: executing program 39 (id=1831): symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x12d7498, 0x0) r0 = socket(0x2, 0x805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000240)=0x10) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000280)=""/4102, &(0x7f00000012c0)=0x1006) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x89901) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) mount_setattr(r2, &(0x7f0000000040)='./file0/../file0/../file0\x00', 0x800, &(0x7f0000000200)={0x1, 0x70, 0x0, {r2}}, 0x20) 7m50.084158723s ago: executing program 3 (id=2062): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40280, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x4a, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x406401, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000740)='environ\x00') preadv(r11, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="60040400e79d2636fccec9bf86cb586558610545c537864130d0a4a58d30b37a6e249ba55143348159ac54324ba3fdd8e1a39a410b1d578b1aa78c46fa6cbb18519ac0b602c67a702734bab505acba960ba41508d6511d3b59280b18b5e0ad1a57b2594e565eeaff7a493b8ff5533d470067cb99c65fe89350a1bc3d478a02f74b680ec8a97ca63dd6", @ANYRES16=r10, @ANYBLOB="000127bd7000fbdbdf250100000008000100", @ANYRES32=r12, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400d407acef7008353e", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x60}, 0x1, 0x400000000000000, 0x0, 0x10}, 0x40005) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000400)={@mcast2, 0x0}, &(0x7f0000000440)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @multicast2, @multicast1}, &(0x7f0000000500)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="50010000", @ANYRES16=r8, @ANYBLOB="000128bd7000fbdbdf25060000000c00018008000300020000009400018008000300020000001400020062726964676530000000000000000000140002006272696467655f736c6176655f300000140002007663616e3000000000000000000000001400020069703667726574617030000000000000140002007369743000000000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="140002007767320000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="28000180140002006272696467655f736c6176655f30000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="5800018008000300020000001400020076657468315f766972745f776966690008000100", @ANYRES32=r14, @ANYBLOB="08080100", @ANYRES32=0x0, @ANYBLOB="1400020067656e65766531000000000000000000140002007663616e3000000000000000000000001c0001800800030003000000080003000300000008000100", @ANYRES32=r15, @ANYBLOB], 0x150}, 0x1, 0x0, 0x0, 0x40001}, 0x4000810) ioctl(r6, 0x4048aecb, &(0x7f00000000c0)) r16 = getpid() r17 = syz_pidfd_open(r16, 0x0) setns(r17, 0x24020000) syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000840)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) 7m49.568113541s ago: executing program 3 (id=2064): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0500000003", @ANYRESOCT=0x0], 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000540)={0xe, {0x1, 0x5, 0x6, 0xb}, {0x0, 0xfffffffe, 0x5, 0x9}, {0xffff8502, 0x9c}}) shutdown(0xffffffffffffffff, 0x8c5d47e95537ac9b) sendfile(r2, r2, &(0x7f0000000200)=0x9, 0x40) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="4400000010000104000000000000000000000000000000002100000000000000240012000a00010076786c616e00000014000200080000207b00000008000c0001020304", 0x44}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 7m45.169982929s ago: executing program 3 (id=2073): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x27c}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$pppl2tp(r1, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x40) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000100)={0xfe, 0x20, 0x0, 0x1, "d503000000f17e817d96b582000300ed0000240ec7dc6537283a5b00000024b3"}) 7m39.497145862s ago: executing program 3 (id=2083): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x1950d2, 0x0) mount$bind(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80000, 0x0) 7m38.149620085s ago: executing program 3 (id=2085): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mknod(&(0x7f0000000280)='./file0\x00', 0x8001420, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002d40)='./file0\x00', 0x101001, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f00000000c0)=0x7f, 0x4) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005a000d03ffffffff0000000004000080080004"], 0x1c}], 0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x22842, 0x0) write$yama_ptrace_scope(r3, &(0x7f0000000000)='1\x00', 0xffffffaf) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x77359400}, {r4, r5+10000000}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) 7m36.333208168s ago: executing program 3 (id=2089): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000540)={0x4, r0, 0x80000}) lseek(r2, 0x0, 0x2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/255, 0xff}], 0x1}, 0x1}], 0x2, 0x40010040, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f00000000c0), 0x8) listen(r4, 0x5) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x80082102, &(0x7f0000000440)={0x0, 0x1, r5, 0x4}) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040207000002000080fcab52ac590f5eef59642d0bfb6a"], 0xa) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xb, 0x1, 0x0, 0x2}}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r6) prctl$PR_SET_PTRACER(0x59616d61, r6) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) 7m33.619700334s ago: executing program 40 (id=2089): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000540)={0x4, r0, 0x80000}) lseek(r2, 0x0, 0x2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/255, 0xff}], 0x1}, 0x1}], 0x2, 0x40010040, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f00000000c0), 0x8) listen(r4, 0x5) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x80082102, &(0x7f0000000440)={0x0, 0x1, r5, 0x4}) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040207000002000080fcab52ac590f5eef59642d0bfb6a"], 0xa) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xb, 0x1, 0x0, 0x2}}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r6) prctl$PR_SET_PTRACER(0x59616d61, r6) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) 7m16.515764687s ago: executing program 2 (id=2113): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001280)=[@text32={0x20, &(0x7f00000012c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100f7225d5deabbc900bbc9000fb9330b00000f320f272d9d53bf0000c4b9e16dc30101220f01c3", 0x6d}], 0x1, 0x14, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="4c00000011000700000000000000000075800000000000", 0x17) r2 = syz_usb_connect(0x3, 0x40, &(0x7f00000002c0)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/dri/128/name\x00', 0x0, 0x0) read(r3, &(0x7f0000000180), 0x100) syz_usb_ep_write(r2, 0x81, 0xffffffffffffffac, &(0x7f00000003c0)="9001000000000000") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40042, 0x1) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12012000f1048108cd060202d4c34e01000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x40, 0x0, 0xa5, {0xa5, 0x22, "c3fcae1e67ea0701465b1693452d2fca34dbae63895ad99043947a8f5bd17fc4c2eb636a39359e6841c938e196c49ae96d4c0f9fbd7cf1b11078658c939ba16563e30ddde4599741f1171d83e821ec0e99042bfa8782bd33167ed2a4da59c0bbfad039cd0b015dd2c2f6a70589098d6120736f6721d9c13a410254ae39e41193d9c265997b5f269838fa338894a79c1272233be8f2e552fa0df020375d3c96a7baf41c"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}, &(0x7f0000000400)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x7, 0x2}, @ptm_cap={0x3}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x1, 0x4, 0x3, "b83d4b9a", "5f39d59c"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xde, 0x8, 0x80, 0xb, 0xfc, 0x9, 0x1}}}, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x20, 0x0, 0x1e, "51ec339cc4cc387fe08c0747287e30f9972e23f59698059297bf29197578"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x100, 0x10}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "69ee"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0xf801}, &(0x7f0000000740)={0x40, 0x13, 0x6, @local}, &(0x7f0000000780)={0x40, 0x17, 0x6}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "f953"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0xf}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0xf1}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x10}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x8}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 7m12.080726039s ago: executing program 2 (id=2118): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 7m11.536760763s ago: executing program 2 (id=2121): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./debug\x00', 0x1ff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000200), 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000040)=[{&(0x7f0000000080)={0x114, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x700000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) mount(0x0, &(0x7f0000000480)='./debug\x00', &(0x7f00000004c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$eventfd(r2, &(0x7f0000000540)=0x4, 0x8) 7m9.795754196s ago: executing program 2 (id=2124): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="002218000000050c04a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000f40)=ANY=[@ANYBLOB, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000980), 0xa, 0x62080) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x208000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0), 0xc81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000c00)={0x1, 0x0, [{0x400000f5}]}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000280)='./config/nvmet/subsystems/testsubsys\x00', &(0x7f0000000740), &(0x7f0000000780)={'L-', 0x4345}, 0x16, 0x0) r5 = syz_io_uring_complete(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1ff) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000c40)={0x1, @raw_data="79be996f97528a0bf9bdc608ed00ab35442537490fcc1f27a1f08898467394bb67e8bd0325f232f229b631a7af46d535c52016332261ec296c97a9a704609efb1949e83b1f7de46d33d09edb8ed911a12a931f89591ff4ddedf1d8c132f174b581183321faa80e2d61350e5dc9156cb6d461c1e074388cf7b1303738b8f4c0d6d889f34ba125e48b3b76a62caea546606e044b60381719f4221e90da1ba7e035be541be30f4752442e5e57652a09d65bd01c859bc006eb9a6e2477f8bc099df142b41001064402b7"}) mount(0x0, &(0x7f0000000a00)='./tracing\x00', &(0x7f0000000a40)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./tracing/events/sched/filter\x00', 0x1, 0x15d) execveat(r5, &(0x7f00000000c0)='./config\x00', &(0x7f0000000240)={[&(0x7f00000002c0)='con\xd4\xb6\x8e\xd1\x97\xf3\xca\x90figfs\x02\x1c\xf87\xc63)\x16\xccg\xc0\x8bTu\xcd\x90>\xbd>n', &(0x7f0000000140)=']*[:}\x00', &(0x7f0000000200)]}, &(0x7f0000000500)={[&(0x7f0000000200)='\x00', &(0x7f0000000300)='configfs\x00', &(0x7f0000000340)='\x1a+\'\x11~&+(&\x14)!@@]:\x00', &(0x7f0000000380)='\\).#($/,\x00', &(0x7f00000003c0)='$\x00', &(0x7f0000000400)='configfs\x00', &(0x7f0000000440)='configfs\x00', &(0x7f0000000480)='*\x19\x00', &(0x7f00000004c0)='configfs\x00']}, 0x400) syz_open_dev$I2C(&(0x7f0000000b00), 0x0, 0x100) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r6, 0x7cb, &(0x7f0000000b80)={0x7ff, 0x0, 0x8000}) symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', r5, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00') ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './config/nvmet/ports/1/subsystems/testsubsys\x00'}) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) move_pages(0x0, 0x1efe, &(0x7f0000000700), 0x0, &(0x7f0000000740), 0x0) getresuid(&(0x7f0000000580), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) quotactl_fd$Q_GETFMT(r5, 0xffffffff80000400, r8, &(0x7f00000006c0)) mkdirat(r7, &(0x7f0000000080)='./tracing/events/sched/filter/../file0\x00', 0x0) 7m7.505875528s ago: executing program 1 (id=2127): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000001c0)="14000000070000000000", 0xa) 7m6.667275656s ago: executing program 1 (id=2128): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0436"], 0xa) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x15}, @l2cap_cid_signaling={{0x11}, [@l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0x3, 0x3}}, @l2cap_create_chan_req={{0xc, 0x9, 0x5}, {0x3ba, 0x1, 0x2}}]}}, 0x1a) 7m5.080269151s ago: executing program 1 (id=2129): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x300000e, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000000)={0x0, 0x3f37, 0xfc23b49482d6feb9, 0x2, 0x177}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8008662c, 0x0) 7m4.458110561s ago: executing program 2 (id=2131): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000740)='sysfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/class/udc/dummy_udc.0/state\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./debug\x00', 0x1ff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x49, 0x0, 0x0) mount(&(0x7f00000005c0)=@sg0, &(0x7f0000000600)='./debug\x00', &(0x7f0000000640)='gfs2\x00', 0x200000, &(0x7f0000000680)='data=writeback') setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x5, 0x4c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x11, 0x10, 0x22f0, 'bridge_slave_0\x00', 'pim6reg1\x00', 'macvlan1\x00', 'ip6gre0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0xff, 0x0, 0xff], @random="5af0e09b10c2", [0x17e, 0x0, 0xff, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xe8, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x6, 0xb3f, 0x264, 0x0, 0x0, "ac74ae6605cca14f1ee3c0dff674d8d98e2f8c9884ad7f0b085be25071edb80543a2e6f95d26cfcc97afb6bd90da93465a6d155e656bb8f57afda6e5e4caa565"}}}}, {0x5, 0x40, 0x60, 'bridge_slave_0\x00', 'veth0_macvtap\x00', 'veth0_to_bridge\x00', 'pimreg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x0, 0x70, 0xa8, 0xf8, [], [@common=@dnat={'dnat\x00', 0xfc, {{@local, 0x10}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xffff, 'syz1\x00', {0x8}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x9, 0x5, 0xfbfb, 'team0\x00', 'geneve1\x00', 'sit0\x00', 'xfrm0\x00', @empty, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @empty, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x0, 0x70, 0x70, 0xe8, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0x5, 0x2, 0x0, 0x0, "4113ddd2122ea0a620cb57fa6f9cf4ec9e155ac926be8e962dad86d20465c69c1eac1cdc948fc2cac4905ac8b98addb56dc09f0fb3c24ff6d3907c021f2a9dfa"}}}}, {0x3, 0x22, 0x6, 'syzkaller0\x00', 'syzkaller0\x00', 'bond_slave_1\x00', 'tunl0\x00', @remote, [0x0, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0x70, 0x70, 0xb8, [], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x4b, 0x82, {0xe}}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe, 0x1, [{0x5, 0x6, 0x1c, 'ip6tnl0\x00', 'wg1\x00', 'team0\x00', 'veth1\x00', @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @remote, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x0, 0x70, 0x70, 0xb8, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"25efac4d21c32c459e294894b8cd981e21d7508f556c54e0c746905a02b5"}}}]}]}, 0x540) 7m3.272799746s ago: executing program 1 (id=2133): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) 7m2.247975431s ago: executing program 2 (id=2134): truncate(&(0x7f0000000080)='./file0\x00', 0x2498) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) finit_module(r1, &(0x7f0000000100)='(\'\x00', 0x0) r2 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000d40)={0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="000033000000efe112c5f4a52975aa5eb483727c000000004a0bbc21e1263b2082daf373dc3541f8d918ad606100"/57], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) 7m1.598362748s ago: executing program 1 (id=2136): r0 = syz_open_dev$sndpcmp(&(0x7f00000009c0), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './proc/thread-self/fail-nth\x00'}) mkdir(&(0x7f00000000c0)='./proc\x00', 0x2) mkdirat(r1, &(0x7f0000000080)='./proc\x00', 0x1f7) mount(0x0, &(0x7f0000001540)='./proc\x00', &(0x7f0000001580)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000015c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r2, &(0x7f0000001600)='7', 0x1) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000900), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000940)=@urb_type_control={0x2, {}, 0x0, 0x21, &(0x7f0000000980)={0x4, 0x3, 0x4, 0x3}, 0xffffff20, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f00000008c0)={0x1, 0x0, [{0x40000084, 0x0, 0x6}]}) kexec_load(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x11, 0x1000000, 0x80000000}], 0x0) kexec_load(0x9, 0x9, &(0x7f0000000740)=[{&(0x7f0000000100)="1be34bdbeb83e1f9699cb89181e9eae90bd5a4d3f968d59005ec4939cba0ec7f6b756fc5c6a21a850cc2e0c1ebd30f09b430ce5056367cce491a3a777e4e762437dbe4e35527520adff98456ba9f9a2b5487e909810bda7f6dcc4ff98b8b7c41052700728f16f4ef13b1cf1d582a4e379f05ac8aa90e4f3a33362a20912d088b91f38e1db00fd009051a", 0x8a, 0x5, 0xb}, {&(0x7f00000001c0)="f9d2e09c2a275ec2363a7238f87e528bc274184d2fd51273ce111d93e42239a2dcabcde94610289e7615b89ffa46ea87220ede90687cf2cf07624af9f8d25c4a1b4566bb167e744955611260a757d0e812d0f927edf03d27050e8f51aed4dd0f271f1681b54a1fd7ba72d92318681c2dd13236dbfa679e93ea498e18fb6b9164e7d62cfb1425c1b3a9c162b02ac07f6089187fc0d35c3af629fcfae05e3f3eb1fda8732b1eea4406ac799b80ef0928e947c3f4640aa5396bdb97bf4e28eeb4a450a54b7ce787cee50d525b12f4146375faef76156bb0bb6a129431723ee462168cacb31439cf3c16cc", 0xe9, 0x5, 0x47a}, {&(0x7f00000002c0)="14b3511059a661a2bc732357c5d156fd52eff67e4f43b02340f00cce372e5300041a8ae52d5b4fcac9133f79f439ad17e426bf240e50a6a484e855679333d030bb39d1ba45cb7d1b685905d7e7fb6b357e67b08bd7aaa7832b654479667abd160bee108f1d0e6bf13a68c0ce71aeb5c0e76f9fac563ba825d5bf02440ffc82521fdfa03547f490", 0x87, 0x0, 0x4800000}, {&(0x7f0000000380)="dbf4e24e", 0x4, 0xe168, 0x5}, {&(0x7f00000003c0)="141512f32393f979d63a58c49ac634a9aaf46d12b0bf8605d4be4e30e8781a5ceedb4d14da7f28c486bfe39a39acd0ae0eed5eddfed171b7f1e2f62e0c5de9f37ae638b0e10b9c3bd58703f639e1ffe7224e8c75000cdf45cafca08470eaf8090a31f0f7c4b85bab4b8f36f3afceb3ad9b6ca7ae7f71f029a777df87d04e8aa3adbd5bc7c3b9d04109428a58bc7143baddc40f974c64fc4f832b6baeb85ff5dfb81f80882460d8bb4d2c60d7f5db4d256d73e2a824182cc26fcd12b79e83907dfd46e0a48ed8", 0xc6, 0x9, 0x40}, {&(0x7f00000004c0)="fd47c1298ef98c339078744b0281", 0xe, 0x8, 0x1}, {&(0x7f0000000500)="8ddf1812fb75fb622734ed0a2833909aac61260f27b5c40787565ebc4a321e5fded16cc1960d3cffe360bafe88668b", 0x2f, 0x3}, {&(0x7f0000000540)="974077ade2679804a6ec8f24b7477c7912130d15d8df06cb10b8843be87202bf851b79539321ee8bbe730cf9a70b0c1b02c638d06862367892fc90967aab6044138cbe667c908e98d340cdfe96fb9cfd2336420bdd5ee264720453e7e98f364e56fe7b028ad49b33c3859224d2c6787f23e3d53ab4c93c1f87cf6691d94866887bc821b745202bf31f0d953764ea6dab748c0d5d8607399897c148c539b3ff226a1cb8ed1c5667c2c38089cc7e0ff78edc9ad72b8ea4d7662a09f4287448ab5fa54f4d1d9b84371df93358e9201f5b", 0xcf, 0xc, 0x800}, {&(0x7f0000000640)="ce5db255bbb40a3b422f8c8c53a11c3ec49d614dcdda4f2ccad00cd481657febb5a448299e35bcc6aebe4c965f0dcf72a5b0ef76e1acf5d7f788f13d5789cff8657f3efbaaafefddbbfaad5fc07544c98869a9a6d931da95a49d52d2891eecca9f0595d800909402296b213cf0fda92a6be649e84b0d966508a8f4c21b1a13707ac5c2aaf626a6170ab21281f1b1c4e861a70548e17230963185273d6ccad4b4d214bbf86ad931edaa3b06aa1ef306d95546ce46c5c13bb50a24fd293e852e29a3c957c01c435135d5ed46332ef073b924ef4b11949875eca5f165713ee49441c8c8d0e6dc62834b161a2008ce04bfc0aca8af297bb9", 0xf6, 0xca7, 0x8}], 0xeaf6df0bdb7e1f6f) 6m58.641499515s ago: executing program 1 (id=2139): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x98) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = socket(0xa, 0x3, 0x3a) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) ioctl$UI_DEV_CREATE(r3, 0x5501) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x22, 0x8, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000002c0)=0x2, 0x4) write(r0, &(0x7f0000000100)='fc', 0x2) 6m45.89475777s ago: executing program 41 (id=2134): truncate(&(0x7f0000000080)='./file0\x00', 0x2498) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) finit_module(r1, &(0x7f0000000100)='(\'\x00', 0x0) r2 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000d40)={0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="000033000000efe112c5f4a52975aa5eb483727c000000004a0bbc21e1263b2082daf373dc3541f8d918ad606100"/57], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) 6m42.538079032s ago: executing program 42 (id=2139): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x98) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = socket(0xa, 0x3, 0x3a) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) ioctl$UI_DEV_CREATE(r3, 0x5501) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x22, 0x8, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000002c0)=0x2, 0x4) write(r0, &(0x7f0000000100)='fc', 0x2) 4m29.045283388s ago: executing program 6 (id=2197): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x1e, 0x0, &(0x7f0000000500)) 4m23.756083484s ago: executing program 6 (id=2198): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140)) geteuid() 4m20.479970206s ago: executing program 6 (id=2199): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) userfaultfd(0x801) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f00000001c0)=ANY=[], 0x0) syz_io_uring_setup(0x867, &(0x7f0000000200)={0x0, 0x9164, 0x10, 0x2, 0x358}, 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000280), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002640)='./binderfs/binder0\x00', 0x0, 0x0) pipe2(&(0x7f0000002a00), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x21, &(0x7f0000002a40)={0x0, 0x30b7, 0x1000, 0x2, 0x158}, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000002b40)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b2800633018024", @ANYRES8=r0, @ANYRES64=r0], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) 4m16.257602386s ago: executing program 6 (id=2200): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="380200001900010000000000ffdbdf2500000000000000000000ffffac1414bbac1414bb0000000000000000000000004e20000bf7ff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000090000000000000080000000000000000000000000000000fcffffff000000000000000084010500fc000000000000000000000000000004000000003c00000000000000000000000000000000000000000000000235000000020000000000000000000003000000fe8000000000000000000000000000bb000000003c0000000a000000ffffffff000000000000000000000000fdffffff0d"], 0x238}, 0x1, 0x0, 0x0, 0x20006854}, 0x800) 4m13.982445597s ago: executing program 6 (id=2201): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) poll(&(0x7f0000000300)=[{r0, 0x282}], 0x1, 0x5) 4m12.463666411s ago: executing program 6 (id=2202): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000080), 0x5, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x1, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "e044144ff3fc4d90"}, 0x10}, 0x1, 0x0, 0x0, 0x40080d0}, 0x891) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584", @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESOCT=r1, @ANYRESHEX=r0], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000c00), 0x3, 0x101400) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect$midi(0x0, 0xcc, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x110, 0xa, 0x55, 0x4, 0x9f}, 0xcc, &(0x7f0000000a00)={0x5, 0xf, 0xcc, 0x5, [@generic={0x99, 0x10, 0x4, "e7835d2f1e03f5e9727efe9feeb9907e5b52dfd528d60693377b8d1a8e844b05552e4c9cfd2274d9a563469a321ad652498f54ca18119a0a71030bd3d653e149143b92cfdefed98737a7665dfe204955e6228fe1c5faede64136dce315daa964ac0829525385bf21a5641d8ebc9e36df3fe655ee04bcd0d36ed0d9e47bda4c0e67c676cf5f41bcef3734c1267f595713e719bf881f15"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "8b70e0772fc5bbd2cbcc6518cb61e673"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "0274de8fda66fbe5e78424b1e7cec0f3"}, @ptm_cap={0x3}]}, 0x1, [{0x47, &(0x7f0000000b00)=@string={0x47, 0x3, "0fec8c51420ea99f01f0c00cc23a425732b708ccedcabbc76e0c03d35d80e070f94b45bbca3f1f606a12c46e68c6fc7fc96bf43e82cf68e18759a1149d748d59cb6189362e"}}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000800)=[{{&(0x7f0000000340)=@caif=@dbg={0x25, 0x7, 0x9}, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)="07d0645b628b781ce619d243cec670b496b15bc9f7c6be8f08949b8bfd644ed0b34820378f8f3e654050c62bb76b78f8357026a1ac44550bfe838b3e10164d3f9d9f9b79a806f4977e19b551b81a40d6e104ad4cf1e2c107133e0fc13e9c1313d3cd4c2ca844b6976cb8993af4daf90bbd80a4ab7c2adc9d83186db6b476275e12fb37bbd10b6fcfcc", 0x89}, {&(0x7f0000000480)="f72fb8e89b0d0df7c93844030007feaeedddc38c58228d9d4cbabc5ff6da5db0dcd8486da031cf937bd64b63501322a7d1fe8eb922983db08d72596bd77ccdda271b4612b8156d00f8e1805c8709f7899d037ddac8ebe0c4f6483ef53fd3d882317b738a58eab4e4c5fb1ca25db521ed95535f54dc3b49077675a8075fd03f1f51627a1be859c07b9f7d08535808a0823b371fd60ef14b5ca5bb67576fdc1c0f1cbf73532cb687ef5e0a960f5329f4f4e047ff004811cb817a93d8dace3b3089777366113421d257e1207a1d41055b0642", 0xd1}], 0x2, &(0x7f00000005c0)=[@txtime={{0x14, 0x1, 0x3d, 0x81}}, @timestamping={{0x10, 0x1, 0x25, 0xa1}}, @txtime={{0x14, 0x1, 0x3d, 0x8}}, @txtime={{0x14, 0x1, 0x3d, 0x2}}], 0x4c}}, {{&(0x7f0000000640)=@caif=@rfm={0x25, 0x3, "c196cc8a051b9097df21da387c5f4502"}, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="792e2d8d67e8ec39a3bf07181beb5e0788e93e200315c1d1574df1354f419252e42258e077b7b6704ad9abaf5f5ae316cabc2bd7c0295950129fb311e5a7e585a6e2ce7d961f18bc490496783e434cc67cd7e86a4004391e2395cee20fbfdcb634556a0f350116a1", 0x68}, {&(0x7f0000000740)="1bc6a8f9553d1293c2", 0x9}], 0x2, &(0x7f00000007c0)=[@mark={{0x10, 0x1, 0x24, 0x6}}, @timestamping={{0x10, 0x1, 0x25, 0x3ff}}], 0x20}}], 0x2, 0x800) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x41, 0x5, 0x0, 0x4, 0x7, 0x2, 0x5, 0x1, 0x57, 0x8, 0xfffffffd, 0x2, 0x8, 0xff, 0x9a, 0x45, [0x4d, 0x4]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000300)={'tunl0\x00', 0x0}) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='C', 0xffffffffffffffc4}], 0x1, 0xfffffff8, 0x4) 3m56.846546832s ago: executing program 43 (id=2202): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000080), 0x5, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x1, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "e044144ff3fc4d90"}, 0x10}, 0x1, 0x0, 0x0, 0x40080d0}, 0x891) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584", @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESOCT=r1, @ANYRESHEX=r0], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000c00), 0x3, 0x101400) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect$midi(0x0, 0xcc, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x110, 0xa, 0x55, 0x4, 0x9f}, 0xcc, &(0x7f0000000a00)={0x5, 0xf, 0xcc, 0x5, [@generic={0x99, 0x10, 0x4, "e7835d2f1e03f5e9727efe9feeb9907e5b52dfd528d60693377b8d1a8e844b05552e4c9cfd2274d9a563469a321ad652498f54ca18119a0a71030bd3d653e149143b92cfdefed98737a7665dfe204955e6228fe1c5faede64136dce315daa964ac0829525385bf21a5641d8ebc9e36df3fe655ee04bcd0d36ed0d9e47bda4c0e67c676cf5f41bcef3734c1267f595713e719bf881f15"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "8b70e0772fc5bbd2cbcc6518cb61e673"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "0274de8fda66fbe5e78424b1e7cec0f3"}, @ptm_cap={0x3}]}, 0x1, [{0x47, &(0x7f0000000b00)=@string={0x47, 0x3, "0fec8c51420ea99f01f0c00cc23a425732b708ccedcabbc76e0c03d35d80e070f94b45bbca3f1f606a12c46e68c6fc7fc96bf43e82cf68e18759a1149d748d59cb6189362e"}}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000800)=[{{&(0x7f0000000340)=@caif=@dbg={0x25, 0x7, 0x9}, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)="07d0645b628b781ce619d243cec670b496b15bc9f7c6be8f08949b8bfd644ed0b34820378f8f3e654050c62bb76b78f8357026a1ac44550bfe838b3e10164d3f9d9f9b79a806f4977e19b551b81a40d6e104ad4cf1e2c107133e0fc13e9c1313d3cd4c2ca844b6976cb8993af4daf90bbd80a4ab7c2adc9d83186db6b476275e12fb37bbd10b6fcfcc", 0x89}, {&(0x7f0000000480)="f72fb8e89b0d0df7c93844030007feaeedddc38c58228d9d4cbabc5ff6da5db0dcd8486da031cf937bd64b63501322a7d1fe8eb922983db08d72596bd77ccdda271b4612b8156d00f8e1805c8709f7899d037ddac8ebe0c4f6483ef53fd3d882317b738a58eab4e4c5fb1ca25db521ed95535f54dc3b49077675a8075fd03f1f51627a1be859c07b9f7d08535808a0823b371fd60ef14b5ca5bb67576fdc1c0f1cbf73532cb687ef5e0a960f5329f4f4e047ff004811cb817a93d8dace3b3089777366113421d257e1207a1d41055b0642", 0xd1}], 0x2, &(0x7f00000005c0)=[@txtime={{0x14, 0x1, 0x3d, 0x81}}, @timestamping={{0x10, 0x1, 0x25, 0xa1}}, @txtime={{0x14, 0x1, 0x3d, 0x8}}, @txtime={{0x14, 0x1, 0x3d, 0x2}}], 0x4c}}, {{&(0x7f0000000640)=@caif=@rfm={0x25, 0x3, "c196cc8a051b9097df21da387c5f4502"}, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="792e2d8d67e8ec39a3bf07181beb5e0788e93e200315c1d1574df1354f419252e42258e077b7b6704ad9abaf5f5ae316cabc2bd7c0295950129fb311e5a7e585a6e2ce7d961f18bc490496783e434cc67cd7e86a4004391e2395cee20fbfdcb634556a0f350116a1", 0x68}, {&(0x7f0000000740)="1bc6a8f9553d1293c2", 0x9}], 0x2, &(0x7f00000007c0)=[@mark={{0x10, 0x1, 0x24, 0x6}}, @timestamping={{0x10, 0x1, 0x25, 0x3ff}}], 0x20}}], 0x2, 0x800) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x41, 0x5, 0x0, 0x4, 0x7, 0x2, 0x5, 0x1, 0x57, 0x8, 0xfffffffd, 0x2, 0x8, 0xff, 0x9a, 0x45, [0x4d, 0x4]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000300)={'tunl0\x00', 0x0}) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='C', 0xffffffffffffffc4}], 0x1, 0xfffffff8, 0x4) 8.567939777s ago: executing program 4 (id=3247): syz_usb_connect(0x0, 0x3a, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c03209040000010209000005240010010524060001052401000007058103"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xb0) 6.439942719s ago: executing program 0 (id=3262): r0 = syz_open_dev$usbfs(&(0x7f0000000440), 0x75, 0x109301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, 0x0) 6.429768838s ago: executing program 0 (id=3263): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000080)='lo\x00'}) 6.183379297s ago: executing program 0 (id=3266): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.424029577s ago: executing program 4 (id=3275): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000540)={&(0x7f0000000140), 0x4, &(0x7f0000000740)={&(0x7f0000000000)=@canfd={{0x0, 0x0, 0x0, 0x1}, 0x27, 0x3, 0x0, 0x0, "22ece45085b9171fb308b5931d673c3f7a84380a3a0a9ac4707c14620b864fb02fe1a2fc8b956cfff57f64d26efcebab3279e71194db2220229c35259cdf7671"}, 0x48}, 0x1, 0x0, 0x0, 0x84844}, 0x0) 5.285227768s ago: executing program 4 (id=3276): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000060006004e23000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e140002007767300000000000000000000000000098000880"], 0xec}, 0x1, 0x0, 0x0, 0x20004844}, 0x40000) 5.083684414s ago: executing program 4 (id=3279): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8414, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) ptrace$pokeuser(0x6, 0x0, 0x358, 0xfffffffffffffffc) syz_open_procfs(0x0, 0x0) 4.397582419s ago: executing program 4 (id=3282): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b"], 0x0) 4.331582715s ago: executing program 0 (id=3283): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f000000b000)={0x44, &(0x7f000000adc0)={0x0, 0x3, 0x2, "db46"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.2525279s ago: executing program 0 (id=3292): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.13189916s ago: executing program 5 (id=3293): symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') io_setup(0x7, 0x0) io_cancel(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/bus/usb/devices/usb1/1-0:1.0/usb1-port1/disable\x00', 0x1, 0x8) write(r2, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) tee(r5, r4, 0x9, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'syz_tun\x00', 0x0}) mount(0x0, &(0x7f0000000500)='./binfmt/status\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./binfmt\x00', 0x1ff) 2.019024549s ago: executing program 5 (id=3295): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000140)={0x1, 0x0, 0x52}) 1.803874811s ago: executing program 5 (id=3298): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/net/bridge0/bridge/priority\x00', 0x2, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000340)={0x30}, 0x6) 1.467133771s ago: executing program 5 (id=3300): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa) 1.331784574s ago: executing program 7 (id=3301): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2adc0, 0x1c1, 0x6}, 0x18) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000180)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbfi\xd9\r\x8d\x9f\xbe\x0ei\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46]}, 0x34) 1.212728159s ago: executing program 7 (id=3302): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/sda\x00', 0x84142, 0x2) write$P9_RUNLINKAT(r0, &(0x7f0000000b40)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4048814) capset(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fd/3\x00') pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000640)="98", 0x1}], 0x1, 0x7, 0x6) 1.170298812s ago: executing program 4 (id=3303): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000206d044fc200000000000109022400010000000409040008020301030009210000000122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) 711.937863ms ago: executing program 7 (id=3304): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 655.485058ms ago: executing program 7 (id=3305): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 504.633735ms ago: executing program 7 (id=3306): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) 304.049193ms ago: executing program 0 (id=3307): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x7, 0x10c062) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/sync_on_suspend', 0x40000, 0x11) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6010000000001001, 0x0, 0x0, 0x19, 0x1c, "faf98317e5a1149989fc8dbe43ee6acc9634464c516bddc70f35000000000000000000000000000000000000000000000000000000e0ff00", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce5, 0x80000000]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 297.47557ms ago: executing program 5 (id=3308): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000002980)={0x2, 0xf, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x0, 0x32, 0x0, 0x0, @in6={0xa, 0x4e21, 0x6, @mcast1, 0x8}}]}, 0x38}}, 0x0) 285.042454ms ago: executing program 7 (id=3309): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x51, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB=')'], 0x18}, 0x440e0) 0s ago: executing program 5 (id=3310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="b882008ee8f3cf66b80500000066b9f10000000f01c10fc7ba8c9eba610066ed0f01f766b80500000066b90b0000000f01c1ba6100eddfdfbaa10066b80098000066ef", 0x2c}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): /syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadb959e1eb code=0x7ffc0000 [ 841.169140][ T5340] usb 6-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 841.169401][ T32] audit: type=1326 audit(1792496532.909:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15444 comm="syz.7.2302" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadb959e1eb code=0x7ffc0000 [ 841.194950][ T32] audit: type=1326 audit(1792496532.939:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15444 comm="syz.7.2302" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadb959e1eb code=0x7ffc0000 [ 841.223514][ T5340] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 841.223536][ T5340] usb 6-1: config 0 has no interface number 0 [ 841.223566][ T5340] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 841.223584][ T5340] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 841.223603][ T5340] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 841.223621][ T5340] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 841.223640][ T5340] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 841.223659][ T5340] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 841.223691][ T5340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.381470][ T5340] usb 6-1: config 0 descriptor?? [ 841.416620][T15437] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 841.416727][T15437] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 841.576445][ T5340] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 841.705276][T15437] ldusb 6-1:0.55: Write buffer overflow, 688 bytes dropped [ 841.707058][ T5340] usb 6-1: USB disconnect, device number 15 [ 841.737145][ T5340] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 842.730546][ T7758] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 843.738109][T15493] profile_transition: 8 callbacks suppressed [ 843.739357][T15493] profile_transition: unconfined exec no attachment [ 843.973921][T15485] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 843.975979][T15485] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 844.015355][T15485] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 844.103878][T15498] profile_transition: unconfined exec no attachment [ 844.108190][T15485] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 844.108310][T15485] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 844.144448][T15485] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 844.161442][T15485] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 844.169424][T15485] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 844.229400][T15485] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 844.261908][T15485] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 844.262814][T15485] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 844.290119][T15485] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 844.500704][T15501] profile_transition: unconfined exec no attachment [ 844.934549][T15508] profile_transition: unconfined exec no attachment [ 845.233668][T11796] Bluetooth: hci0: command 0x0c1a tx timeout [ 845.331836][ T7758] usb 8-1: unable to get BOS descriptor or descriptor too short [ 845.331874][ T7758] usb 8-1: New USB device found: idVendor=1430, idProduct=474b, bcdDevice=0.40 [ 845.332977][ T7758] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 845.333003][ T7758] usb 8-1: can't read configurations, error -71 [ 845.334037][T15513] profile_transition: unconfined exec no attachment [ 845.593781][T15517] profile_transition: unconfined exec no attachment [ 845.744004][T15515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2309'. [ 845.778307][T15522] profile_transition: unconfined exec no attachment [ 846.051554][T15528] profile_transition: unconfined exec no attachment [ 846.110003][T11796] Bluetooth: hci8: command 0x0c1a tx timeout [ 846.172013][ T5340] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 846.189768][T11796] Bluetooth: hci1: command 0x0c1a tx timeout [ 846.270237][T11796] Bluetooth: hci2: command 0x0c1a tx timeout [ 846.321382][ T5340] usb 1-1: New USB device found: idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 846.322614][ T5340] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 846.322634][ T5340] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 846.322649][ T5340] usb 1-1: config 0 has no interface number 0 [ 846.322677][ T5340] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 846.322696][ T5340] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 846.322716][ T5340] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 846.322746][ T5340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.381862][ T5340] usb 1-1: config 0 descriptor?? [ 846.426318][T15515] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 846.543301][T15536] profile_transition: unconfined exec no attachment [ 846.693926][T15538] netlink: 296 bytes leftover after parsing attributes in process `syz.4.2325'. [ 846.731137][T13959] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 846.843655][T15540] profile_transition: unconfined exec no attachment [ 846.879687][T13959] usb 8-1: Using ep0 maxpacket: 16 [ 846.902790][T13959] usb 8-1: unable to get BOS descriptor or descriptor too short [ 846.902839][T13959] usb 8-1: New USB device found: idVendor=0856, idProduct=ac32, bcdDevice=d8.41 [ 846.906391][T13959] usb 8-1: config 251 has an invalid interface number: 95 but max is 0 [ 846.906411][T13959] usb 8-1: config 251 has no interface number 0 [ 846.906433][T13959] usb 8-1: config 251 interface 95 has no altsetting 0 [ 846.961830][T13959] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.961877][T13959] usb 8-1: Product: syz [ 846.961889][T13959] usb 8-1: Manufacturer: syz [ 846.961900][T13959] usb 8-1: SerialNumber: syz [ 847.072344][ T5340] usb 1-1: USB disconnect, device number 67 [ 847.181718][T15542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 847.258242][T13959] mos7840 8-1:251.95: required endpoints missing [ 847.282968][T13959] usb 8-1: USB disconnect, device number 20 [ 847.312438][T11796] Bluetooth: hci0: command 0x0c1a tx timeout [ 848.190983][T11796] Bluetooth: hci8: command 0x0c1a tx timeout [ 848.270929][T11796] Bluetooth: hci1: command 0x0c1a tx timeout [ 848.350734][T11796] Bluetooth: hci2: command 0x0c1a tx timeout [ 848.925750][T15578] profile_transition: 7 callbacks suppressed [ 848.925768][T15578] profile_transition: unconfined exec no attachment [ 849.233610][T15587] profile_transition: unconfined exec no attachment [ 849.389938][T11796] Bluetooth: hci0: command 0x0c1a tx timeout [ 849.471904][T15595] profile_transition: unconfined exec no attachment [ 849.516174][T15596] tipc: Enabling of bearer rejected, media not registered [ 849.663905][T15599] profile_transition: unconfined exec no attachment [ 849.737432][T11287] IPVS: starting estimator thread 0... [ 849.822756][T15602] IPVS: using max 39 ests per chain, 93600 per kthread [ 849.877822][T15607] profile_transition: unconfined exec no attachment [ 850.151396][T15615] profile_transition: unconfined exec no attachment [ 850.204508][T15616] loop2: detected capacity change from 0 to 8 [ 850.269786][T11796] Bluetooth: hci8: command 0x0c1a tx timeout [ 850.270771][T15616] Dev loop2: unable to read RDB block 8 [ 850.270801][T15616] loop2: unable to read partition table [ 850.270995][T15616] loop2: partition table beyond EOD, truncated [ 850.271023][T15616] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 850.350044][T11796] Bluetooth: hci1: command 0x0c1a tx timeout [ 850.430613][T11796] Bluetooth: hci2: command 0x0c1a tx timeout [ 850.522047][T15624] profile_transition: unconfined exec no attachment [ 850.765243][T15631] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2353'. [ 850.814157][T15633] profile_transition: unconfined exec no attachment [ 851.101851][T15639] profile_transition: unconfined exec no attachment [ 851.242928][T15641] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2356'. [ 851.312275][T15642] profile_transition: unconfined exec no attachment [ 851.553158][T15646] kvm: pic: single mode not supported [ 851.553223][T15646] kvm: pic: single mode not supported [ 851.553232][T15646] kvm: pic: level sensitive irq not supported [ 851.553287][T15646] kvm: pic: single mode not supported [ 851.553295][T15646] kvm: pic: level sensitive irq not supported [ 851.553349][T15646] kvm: pic: single mode not supported [ 851.553357][T15646] kvm: pic: level sensitive irq not supported [ 851.553413][T15646] kvm: pic: single mode not supported [ 851.553421][T15646] kvm: pic: level sensitive irq not supported [ 851.553482][T15646] kvm: pic: single mode not supported [ 851.553490][T15646] kvm: pic: level sensitive irq not supported [ 851.553545][T15646] kvm: pic: single mode not supported [ 851.553553][T15646] kvm: pic: level sensitive irq not supported [ 851.553607][T15646] kvm: pic: single mode not supported [ 851.553615][T15646] kvm: pic: level sensitive irq not supported [ 851.553670][T15646] kvm: pic: single mode not supported [ 851.553678][T15646] kvm: pic: level sensitive irq not supported [ 851.553733][T15646] kvm: pic: single mode not supported [ 851.553741][T15646] kvm: pic: level sensitive irq not supported [ 851.553796][T15646] kvm: pic: level sensitive irq not supported [ 852.266250][T15661] input: syz0 as /devices/virtual/input/input81 [ 853.024294][T15677] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 853.646349][ T32] kauditd_printk_skb: 21 callbacks suppressed [ 853.646365][ T32] audit: type=1326 audit(1792496545.380:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15692 comm="syz.7.2373" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb959e559 code=0x7ffc0000 [ 853.646536][ T32] audit: type=1326 audit(1792496545.380:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15692 comm="syz.7.2373" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb959e559 code=0x7ffc0000 [ 853.717503][ T32] audit: type=1326 audit(1792496545.450:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15692 comm="syz.7.2373" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadb959e1eb code=0x7ffc0000 [ 853.717545][ T32] audit: type=1326 audit(1792496545.450:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15692 comm="syz.7.2373" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadb959e1eb code=0x7ffc0000 [ 853.717575][ T32] audit: type=1326 audit(1792496545.450:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15692 comm="syz.7.2373" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadb959e1eb code=0x7ffc0000 [ 853.717624][ T32] audit: type=1326 audit(1792496545.450:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15692 comm="syz.7.2373" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadb959e1eb code=0x7ffc0000 [ 853.717657][ T32] audit: type=1326 audit(1792496545.450:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15692 comm="syz.7.2373" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadb959e1eb code=0x7ffc0000 [ 853.717689][ T32] audit: type=1326 audit(1792496545.450:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15692 comm="syz.7.2373" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadb959e1eb code=0x7ffc0000 [ 853.717721][ T32] audit: type=1326 audit(1792496545.450:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15692 comm="syz.7.2373" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadb959e1eb code=0x7ffc0000 [ 853.717753][ T32] audit: type=1326 audit(1792496545.450:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15692 comm="syz.7.2373" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadb959e1eb code=0x7ffc0000 [ 853.943345][T11796] Bluetooth: hci8: unexpected event for opcode 0x2042 [ 853.978948][T15703] profile_transition: 8 callbacks suppressed [ 853.978965][T15703] profile_transition: unconfined exec no attachment [ 854.258702][T15709] profile_transition: unconfined exec no attachment [ 854.339790][ T1224] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 854.432522][T15711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2377'. [ 854.460696][T15713] profile_transition: unconfined exec no attachment [ 854.494849][ T1224] usb 6-1: unable to get BOS descriptor or descriptor too short [ 854.494892][ T1224] usb 6-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 854.495765][ T1224] usb 6-1: config 189 has an invalid descriptor of length 0, skipping remainder of the config [ 854.495782][ T1224] usb 6-1: config 189 has 0 interfaces, different from the descriptor's value: 1 [ 854.559369][ T1224] usb 6-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 854.559391][ T1224] usb 6-1: Product: syz [ 854.559402][ T1224] usb 6-1: Manufacturer: syz [ 854.559413][ T1224] usb 6-1: SerialNumber: syz [ 854.800636][T15719] profile_transition: unconfined exec no attachment [ 854.955788][T15723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2380'. [ 854.955809][T15723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2380'. [ 854.955834][T15723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2380'. [ 855.174399][T15727] profile_transition: unconfined exec no attachment [ 855.332898][T15730] profile_transition: unconfined exec no attachment [ 855.537063][T15735] profile_transition: unconfined exec no attachment [ 855.649242][ T1224] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 855.733510][T15738] profile_transition: unconfined exec no attachment [ 855.801482][ T1224] usb 8-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 855.802481][ T1224] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 855.802499][ T1224] usb 8-1: config 0 has no interface number 0 [ 855.802528][ T1224] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 855.802547][ T1224] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 855.802577][ T1224] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.804522][ T1224] usb 8-1: config 0 descriptor?? [ 855.805556][T15732] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 855.914931][ T1224] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 856.170477][ T5340] usb 8-1: USB disconnect, device number 21 [ 856.247535][T15743] profile_transition: unconfined exec no attachment [ 856.407046][T15747] profile_transition: unconfined exec no attachment [ 858.994153][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2393'. [ 858.997884][T15798] profile_transition: 21 callbacks suppressed [ 858.997901][T15798] profile_transition: unconfined exec no attachment [ 859.369319][T15804] profile_transition: unconfined exec no attachment [ 859.464207][ T5340] usb 6-1: USB disconnect, device number 16 [ 859.661619][T15810] profile_transition: unconfined exec no attachment [ 859.858516][T15814] profile_transition: unconfined exec no attachment [ 860.122241][T15819] profile_transition: unconfined exec no attachment [ 860.478177][T15832] profile_transition: unconfined exec no attachment [ 860.746530][T15839] profile_transition: unconfined exec no attachment [ 861.019750][T15847] profile_transition: unconfined exec no attachment [ 861.288474][T15851] profile_transition: unconfined exec no attachment [ 861.474365][T15853] profile_transition: unconfined exec no attachment [ 861.766834][ T32] kauditd_printk_skb: 20 callbacks suppressed [ 861.766852][ T32] audit: type=1326 audit(1792496553.501:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15861 comm="syz.7.2415" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fadb959e559 code=0x0 [ 861.915276][ T5269] 8021q: adding VLAN 0 to HW filter on device eth31 [ 861.939738][ T5340] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 862.090986][ T5340] usb 1-1: Using ep0 maxpacket: 8 [ 862.093948][ T5340] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 862.095099][ T5340] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 862.095146][ T5340] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 862.095164][ T5340] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 862.095182][ T5340] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 862.095200][ T5340] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 862.095229][ T5340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.275025][T15880] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 862.359355][ T5340] usb 1-1: GET_CAPABILITIES returned 0 [ 862.359390][ T5340] usbtmc 1-1:16.0: can't read capabilities [ 862.574940][T15862] usb 1-1: usbtmc_ioctl_clear_out_halt returned -32 [ 862.576306][ T5340] usb 1-1: USB disconnect, device number 68 [ 862.949215][ T7758] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 863.100729][ T7758] usb 8-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 863.101606][ T7758] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 863.101625][ T7758] usb 8-1: config 0 has no interface number 0 [ 863.101659][ T7758] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 863.101676][ T7758] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 863.101694][ T7758] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 863.101713][ T7758] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 863.101732][ T7758] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 863.101750][ T7758] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 863.101779][ T7758] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.106034][ T7758] usb 8-1: config 0 descriptor?? [ 863.106656][T15889] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 863.106729][T15889] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 863.253930][ T7758] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 863.375957][ T7758] usb 8-1: USB disconnect, device number 22 [ 863.400468][ T7758] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 864.081523][T15917] profile_transition: 14 callbacks suppressed [ 864.081541][T15917] profile_transition: unconfined exec no attachment [ 864.153912][ T10] wiimote 0005:057E:0306.0023: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 864.218327][ T10] wiimote 0005:057E:0306.0023: New device registered (Wiimote 1) [ 864.240156][T15920] profile_transition: unconfined exec no attachment [ 864.462671][T15927] profile_transition: unconfined exec no attachment [ 864.709247][T15939] profile_transition: unconfined exec no attachment [ 864.911262][T15913] wiimote 0005:057E:0306.0023: Device removed [ 864.960252][T15948] profile_transition: unconfined exec no attachment [ 865.105988][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2439'. [ 865.196159][T15954] profile_transition: unconfined exec no attachment [ 865.294349][T15956] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 865.315103][ T1224] wiimote 0005:057E:0306.0023: detected device: Nintendo Wii Remote (Gen 1) (1) [ 865.366992][T15961] profile_transition: unconfined exec no attachment [ 865.439655][T15963] profile_transition: unconfined exec no attachment [ 865.638687][T15966] profile_transition: unconfined exec no attachment [ 865.663040][T15967] profile_transition: unconfined exec no attachment [ 866.062958][ T1224] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0023/input/input83 [ 866.321962][ T1224] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0023/input/input84 [ 866.426172][ T1224] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0023/input/input82 [ 867.279501][ T5340] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 867.428617][ T5340] usb 1-1: Using ep0 maxpacket: 8 [ 867.437286][ T5340] usb 1-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 867.454936][ T5340] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 867.454957][ T5340] usb 1-1: config 0 has no interface number 0 [ 867.454987][ T5340] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 867.455005][ T5340] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 867.455024][ T5340] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 867.455044][ T5340] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 867.455075][ T5340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.468034][ T5340] usb 1-1: config 0 descriptor?? [ 867.574720][ T5340] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 867.782864][ T5269] 8021q: adding VLAN 0 to HW filter on device eth32 [ 868.512594][ T32] audit: type=1326 audit(1792496560.251:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=16024 comm="syz.4.2453" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b6f19e559 code=0x0 [ 869.097779][T16040] profile_transition: 14 callbacks suppressed [ 869.097797][T16040] profile_transition: unconfined exec no attachment [ 869.197046][T16041] profile_transition: unconfined exec no attachment [ 869.334815][T16042] profile_transition: unconfined exec no attachment [ 869.509058][T16045] profile_transition: unconfined exec no attachment [ 869.749143][T16053] profile_transition: unconfined exec no attachment [ 869.971432][ T5340] usb 1-1: USB disconnect, device number 69 [ 870.009635][ T5340] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 870.076184][T16059] profile_transition: unconfined exec no attachment [ 870.191866][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.311541][T16065] profile_transition: unconfined exec no attachment [ 870.525154][T16069] profile_transition: unconfined exec no attachment [ 870.701388][T16073] profile_transition: unconfined exec no attachment [ 870.896813][T16075] profile_transition: unconfined exec no attachment [ 872.453341][T16130] vivid-000: ================= START STATUS ================= [ 872.453359][T16130] vivid-000: Enable Output Cropping: true [ 872.453405][T16130] vivid-000: Enable Output Composing: true [ 872.453420][T16130] vivid-000: Enable Output Scaler: true [ 872.453435][T16130] vivid-000: Tx RGB Quantization Range: Automatic [ 872.453450][T16130] vivid-000: Transmit Mode: HDMI [ 872.453464][T16130] vivid-000: Hotplug Present: 0x00000000 [ 872.453480][T16130] vivid-000: RxSense Present: 0x00000000 [ 872.453495][T16130] vivid-000: EDID Present: 0x00000000 [ 872.453509][T16130] vivid-000: ================== END STATUS ================== [ 873.698301][T15274] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 873.851044][T15274] usb 6-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 873.851920][T15274] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.851940][T15274] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 873.851968][T15274] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.920327][T15274] idmouse 6-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 874.171396][T16179] profile_transition: 22 callbacks suppressed [ 874.171414][T16179] profile_transition: unconfined exec no attachment [ 874.226364][T16180] profile_transition: unconfined exec no attachment [ 874.276011][T16181] profile_transition: unconfined exec no attachment [ 874.335102][T16182] profile_transition: unconfined exec no attachment [ 874.415492][T16185] profile_transition: unconfined exec no attachment [ 874.487693][T16188] profile_transition: unconfined exec no attachment [ 874.659508][T16193] profile_transition: unconfined exec no attachment [ 874.839412][T16196] profile_transition: unconfined exec no attachment [ 875.034268][T16197] profile_transition: unconfined exec no attachment [ 875.245386][T16198] profile_transition: unconfined exec no attachment [ 875.581063][ T1224] usb 6-1: USB disconnect, device number 17 [ 875.610933][ T1224] idmouse 6-1:1.0: disconnected [ 876.216519][T16232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2496'. [ 876.216555][T16232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2496'. [ 876.285571][T11796] Bluetooth: hci8: unexpected event for opcode 0x080e [ 877.958802][T13959] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 878.108111][T13959] usb 1-1: Using ep0 maxpacket: 16 [ 878.108667][T13959] usb 1-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 878.111086][T13959] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 878.111105][T13959] usb 1-1: config 0 has no interface number 0 [ 878.111140][T13959] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 878.111160][T13959] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 878.133058][T13959] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 878.133078][T13959] usb 1-1: Product: syz [ 878.133090][T13959] usb 1-1: SerialNumber: syz [ 878.198102][T13959] usb 1-1: config 0 descriptor?? [ 878.213504][T13959] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 878.247039][T13959] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input85 [ 878.284883][ T5777] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 878.439354][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 878.441905][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 878.442096][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 878.442280][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 878.442474][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 878.442670][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 878.442920][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 878.443123][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 878.443188][T13959] usb 1-1: USB disconnect, device number 70 [ 878.443315][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 878.443329][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 878.470106][ T5777] usb 6-1: New USB device found: idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 878.515284][ T5777] usb 6-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 878.570661][ T5777] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.570682][ T5777] usb 6-1: Product: syz [ 878.570694][ T5777] usb 6-1: Manufacturer: syz [ 878.570705][ T5777] usb 6-1: SerialNumber: syz [ 878.602110][T13959] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 878.648054][ T5777] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 878.648111][ T5777] dvb-usb: bulk message failed: -22 (3/0) [ 878.684510][ T5777] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 878.686662][ T5777] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 878.686702][ T5777] usb 6-1: media controller created [ 878.785342][ T5777] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 879.004397][ T5777] DVB: Unable to find symbol mt352_attach() [ 879.004411][ T5777] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 879.028546][ T5777] dvb-usb: bulk message failed: -22 (3/0) [ 879.048736][ T5777] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 879.057088][ T5777] usb 6-1: USB disconnect, device number 18 [ 879.195481][ T5777] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 879.351434][T16310] profile_transition: 13 callbacks suppressed [ 879.351451][T16310] profile_transition: unconfined exec no attachment [ 879.540666][T16315] profile_transition: unconfined exec no attachment [ 879.741469][T16322] profile_transition: unconfined exec no attachment [ 880.040401][T16332] profile_transition: unconfined exec no attachment [ 880.281991][T16341] profile_transition: unconfined exec no attachment [ 880.307267][T16344] profile_transition: unconfined exec no attachment [ 880.468856][T16349] profile_transition: unconfined exec no attachment [ 880.639604][T16356] profile_transition: unconfined exec no attachment [ 880.808378][ T5777] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 880.932711][T16362] profile_transition: unconfined exec no attachment [ 880.962675][ T5777] usb 8-1: New USB device found: idVendor=0458, idProduct=5013, bcdDevice=0.40 [ 880.965707][ T5777] usb 8-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 880.965739][ T5777] usb 8-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 880.965769][ T5777] usb 8-1: config 1 interface 0 has no altsetting 0 [ 881.033533][ T5777] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.033555][ T5777] usb 8-1: Product: syz [ 881.033567][ T5777] usb 8-1: Manufacturer: syz [ 881.033578][ T5777] usb 8-1: SerialNumber: syz [ 881.215936][T16367] profile_transition: unconfined exec no attachment [ 881.363117][ T5777] usbhid 8-1:1.0: can't add hid device: -71 [ 881.363207][ T5777] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 881.405974][ T5777] usb 8-1: USB disconnect, device number 23 [ 881.524014][T16372] input: syz0 as /devices/virtual/input/input86 [ 881.944530][T11796] Bluetooth: hci1: unexpected event for opcode 0x080e [ 882.109441][T16386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 882.918714][ T5340] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 882.924250][T16404] netlink: 'syz.5.2551': attribute type 10 has an invalid length. [ 883.022673][T16404] team0: Port device dummy0 added [ 883.068653][ T5340] usb 8-1: Using ep0 maxpacket: 16 [ 883.072323][ T5340] usb 8-1: New USB device found: idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 883.083011][ T5340] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 883.083030][ T5340] usb 8-1: config 0 has no interface number 0 [ 883.125528][ T5340] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.125551][ T5340] usb 8-1: Product: syz [ 883.125562][ T5340] usb 8-1: Manufacturer: syz [ 883.125573][ T5340] usb 8-1: SerialNumber: syz [ 883.158926][ T5340] usb 8-1: config 0 descriptor?? [ 883.187619][ T5340] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 883.351164][T16412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2554'. [ 883.889430][ T5340] gspca_spca1528: reg_w err -110 [ 883.908637][ T5340] spca1528 8-1:0.1: probe with driver spca1528 failed with error -110 [ 883.981819][ T5340] usb 8-1: USB disconnect, device number 24 [ 884.516782][T16452] profile_transition: 15 callbacks suppressed [ 884.516799][T16452] profile_transition: unconfined exec no attachment [ 884.582904][T16447] rxe_eth0 speed is unknown, defaulting to 1000 [ 884.807784][ T5340] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 884.863581][T16461] profile_transition: unconfined exec no attachment [ 884.960818][ T5340] usb 1-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 884.962857][ T5340] usb 1-1: config 0 has no interfaces? [ 884.967984][ T5340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.968002][ T5340] usb 1-1: Product: syz [ 884.968032][ T5340] usb 1-1: Manufacturer: syz [ 884.968043][ T5340] usb 1-1: SerialNumber: syz [ 885.021660][ T5340] usb 1-1: config 0 descriptor?? [ 885.111916][T16467] profile_transition: unconfined exec no attachment [ 885.265398][T16470] profile_transition: unconfined exec no attachment [ 885.558356][T16477] profile_transition: unconfined exec no attachment [ 885.926283][T15274] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 885.970663][T16487] profile_transition: unconfined exec no attachment [ 885.974394][T15274] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 886.055613][T16489] profile_transition: unconfined exec no attachment [ 886.084583][T15274] usb 1-1: USB disconnect, device number 71 [ 886.339135][T16493] profile_transition: unconfined exec no attachment [ 886.726753][T16498] profile_transition: unconfined exec no attachment [ 887.181138][T16506] profile_transition: unconfined exec no attachment [ 889.646832][T16575] profile_transition: 8 callbacks suppressed [ 889.646851][T16575] profile_transition: unconfined exec no attachment [ 889.943834][T16583] profile_transition: unconfined exec no attachment [ 890.216225][T16591] profile_transition: unconfined exec no attachment [ 890.373641][T16593] profile_transition: unconfined exec no attachment [ 890.533794][T16598] profile_transition: unconfined exec no attachment [ 890.653559][T16601] profile_transition: unconfined exec no attachment [ 890.756697][T16604] profile_transition: unconfined exec no attachment [ 890.810381][T16588] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 890.810528][T16588] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 890.810634][T16588] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 890.811755][T16585] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 890.811771][T16585] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 890.970797][T16607] profile_transition: unconfined exec no attachment [ 890.973422][T16585] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 890.973441][T16585] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 890.978217][T16585] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 890.978234][T16585] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 891.031210][T16585] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 891.031229][T16585] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 891.137798][T13959] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 891.236623][T16615] profile_transition: unconfined exec no attachment [ 891.289240][T13959] usb 1-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 891.290199][T13959] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 891.290217][T13959] usb 1-1: config 0 has no interface number 0 [ 891.305880][T13959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.305901][T13959] usb 1-1: Product: syz [ 891.305912][T13959] usb 1-1: Manufacturer: syz [ 891.305923][T13959] usb 1-1: SerialNumber: syz [ 891.335429][T13959] usb 1-1: config 0 descriptor?? [ 891.386128][T16617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 891.543857][T16623] profile_transition: unconfined exec no attachment [ 891.596064][T13959] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 891.624337][T13959] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 891.624611][T13959] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 891.624643][T13959] usb 1-1: media controller created [ 891.692025][T13959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 891.803162][T13959] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 891.962985][T13959] usb 1-1: USB disconnect, device number 72 [ 892.849677][ T32] audit: type=1326 audit(1792496584.592:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=16656 comm="syz.7.2630" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb959e559 code=0x7ffc0000 [ 892.849910][ T32] audit: type=1326 audit(1792496584.592:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=16656 comm="syz.7.2630" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb959e559 code=0x7ffc0000 [ 892.913765][ T32] audit: type=1326 audit(1792496584.652:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=16656 comm="syz.7.2630" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadb959e1eb code=0x7ffc0000 [ 892.913803][ T32] audit: type=1326 audit(1792496584.652:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=16656 comm="syz.7.2630" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadb959e1eb code=0x7ffc0000 [ 892.913833][ T32] audit: type=1326 audit(1792496584.652:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=16656 comm="syz.7.2630" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadb959e1eb code=0x7ffc0000 [ 892.913863][ T32] audit: type=1326 audit(1792496584.652:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=16656 comm="syz.7.2630" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadb959e1eb code=0x7ffc0000 [ 892.913893][ T32] audit: type=1326 audit(1792496584.652:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=16656 comm="syz.7.2630" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadb959e1eb code=0x7ffc0000 [ 892.913923][ T32] audit: type=1326 audit(1792496584.652:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=16656 comm="syz.7.2630" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadb959e1eb code=0x7ffc0000 [ 892.913953][ T32] audit: type=1326 audit(1792496584.652:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=16656 comm="syz.7.2630" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadb959e1eb code=0x7ffc0000 [ 892.913984][ T32] audit: type=1326 audit(1792496584.652:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=16656 comm="syz.7.2630" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadb959e1eb code=0x7ffc0000 [ 893.524204][ T5777] wacom 0003:056A:0042.0025: Unknown device_type for 'syz0'. Assuming pen. [ 893.611110][ T5777] wacom 0003:056A:0042.0025: hidraw0: USB HID vffffff.ff Gamepad [syz0] on syz0 [ 893.702110][ T5777] input: Wacom Intuos2 6x8 Pen as /devices/virtual/misc/uhid/0003:056A:0042.0025/input/input87 [ 893.921559][T13959] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 894.068542][T13959] usb 6-1: Using ep0 maxpacket: 16 [ 894.069096][T13959] usb 6-1: New USB device found: idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 894.076571][T13959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.076591][T13959] usb 6-1: Product: syz [ 894.076602][T13959] usb 6-1: Manufacturer: syz [ 894.076614][T13959] usb 6-1: SerialNumber: syz [ 894.153037][T13959] usb 6-1: config 0 descriptor?? [ 894.178507][T13959] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 894.179408][T13959] usb 6-1: Detected FT-X [ 894.567762][ T5777] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 894.661752][T16700] profile_transition: 12 callbacks suppressed [ 894.661770][T16700] profile_transition: unconfined exec no attachment [ 894.719489][ T5777] usb 8-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 894.721271][ T5777] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.753012][ T5777] usb 8-1: config 0 descriptor?? [ 894.822427][T16701] profile_transition: unconfined exec no attachment [ 894.891553][T13959] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 894.893942][T13959] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 894.894338][T13959] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 894.896605][T13959] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 894.958402][T13959] usb 6-1: USB disconnect, device number 19 [ 894.992831][ T5777] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 895.040147][T13959] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 895.042030][T13959] ftdi_sio 6-1:0.0: device disconnected [ 895.083150][T16703] profile_transition: unconfined exec no attachment [ 895.183207][T16706] profile_transition: unconfined exec no attachment [ 895.262401][ T5777] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 1 [ 895.262423][ T5777] [drm] Initialized udl on minor 1 [ 895.338527][T16708] profile_transition: unconfined exec no attachment [ 895.423942][T16711] profile_transition: unconfined exec no attachment [ 895.558275][T16713] profile_transition: unconfined exec no attachment [ 895.647499][T16716] profile_transition: unconfined exec no attachment [ 895.786397][T16718] profile_transition: unconfined exec no attachment [ 896.033952][T16726] profile_transition: unconfined exec no attachment [ 897.127374][ T5340] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 897.276708][ T5340] usb 6-1: Using ep0 maxpacket: 8 [ 897.277507][ T5340] usb 6-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 897.279196][ T5340] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 897.279215][ T5340] usb 6-1: config 0 has no interface number 0 [ 897.279244][ T5340] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 897.279262][ T5340] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 897.279299][ T5340] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 897.279320][ T5340] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 897.279350][ T5340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.332771][ T5340] usb 6-1: config 0 descriptor?? [ 897.423120][ T5340] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 897.693877][ T1224] usb 6-1: USB disconnect, device number 20 [ 897.721671][ T1224] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 899.691161][T16805] profile_transition: 14 callbacks suppressed [ 899.691181][T16805] profile_transition: unconfined exec no attachment [ 899.953359][T16814] profile_transition: unconfined exec no attachment [ 900.229972][T16820] profile_transition: unconfined exec no attachment [ 900.349866][ T5777] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 900.350252][ T5777] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 900.422896][T13959] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 900.461331][ T5777] usb 8-1: USB disconnect, device number 25 [ 900.596130][T13959] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 900.644298][T16823] profile_transition: unconfined exec no attachment [ 900.869449][T16826] profile_transition: unconfined exec no attachment [ 901.064337][T16831] profile_transition: unconfined exec no attachment [ 901.354725][T16845] profile_transition: unconfined exec no attachment [ 901.458185][ T10] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 901.598723][T16854] profile_transition: unconfined exec no attachment [ 901.608433][ T10] usb 8-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 901.611504][ T10] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 901.611531][ T10] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 901.611559][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.679896][T16838] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 901.700500][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 901.944554][T16860] profile_transition: unconfined exec no attachment [ 902.020211][ T10] usb 8-1: USB disconnect, device number 26 [ 902.240969][T16865] profile_transition: unconfined exec no attachment [ 902.809787][T16882] binder: Failure in copy_transaction_data: EINVAL [ 902.946975][T15274] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 903.105103][T15274] usb 6-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 903.126841][T15274] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 903.126881][T15274] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 903.126902][T15274] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 903.126921][T15274] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 903.126941][T15274] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 903.129186][T15274] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 903.129218][T15274] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 903.129237][T15274] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 903.129255][T15274] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 903.129274][T15274] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 903.146020][T15274] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 903.146058][T15274] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 903.146078][T15274] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 903.146096][T15274] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 903.146115][T15274] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 903.338716][T15274] usb 6-1: string descriptor 0 read error: -22 [ 903.338825][T15274] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.374545][T15274] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 903.495055][ T51] tipc: Subscription rejected, illegal request [ 903.761804][T15274] usb 6-1: USB disconnect, device number 21 [ 903.946470][ T7758] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 904.103871][ T7758] usb 8-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 904.116259][ T7758] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.133621][ T7758] usb 8-1: config 0 descriptor?? [ 904.363998][ T7758] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 904.634386][ T7758] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 1 [ 904.634406][ T7758] [drm] Initialized udl on minor 1 [ 904.741387][T16913] syz_tun: entered allmulticast mode [ 904.830842][T16919] profile_transition: 11 callbacks suppressed [ 904.830860][T16919] profile_transition: unconfined exec no attachment [ 905.074065][T16925] profile_transition: unconfined exec no attachment [ 905.355333][T16929] profile_transition: unconfined exec no attachment [ 905.608215][T16931] profile_transition: unconfined exec no attachment [ 905.789660][T16932] profile_transition: unconfined exec no attachment [ 905.949631][T16913] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2694'. [ 906.008175][T16934] profile_transition: unconfined exec no attachment [ 906.245587][T16939] profile_transition: unconfined exec no attachment [ 906.321842][T16941] netlink: 'syz.5.2699': attribute type 10 has an invalid length. [ 906.321870][T16941] netlink: 55 bytes leftover after parsing attributes in process `syz.5.2699'. [ 906.521043][T16947] profile_transition: unconfined exec no attachment [ 906.698040][T15274] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 906.771816][T16949] profile_transition: unconfined exec no attachment [ 906.846765][T15274] usb 6-1: Using ep0 maxpacket: 32 [ 906.847866][T15274] usb 6-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 906.851143][T15274] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 906.851165][T15274] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 906.851191][T15274] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.851205][T15274] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 906.851259][T15274] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 906.851276][T15274] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 906.851294][T15274] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 906.851323][T15274] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.978763][T15274] usb 6-1: config 0 descriptor?? [ 907.171580][T16952] profile_transition: unconfined exec no attachment [ 907.434751][ T5777] usb 6-1: USB disconnect, device number 22 [ 907.761303][T16913] syz_tun: left allmulticast mode [ 908.486208][T15274] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 908.639234][T15274] usb 1-1: Using ep0 maxpacket: 32 [ 908.643092][T15274] usb 1-1: unable to get BOS descriptor or descriptor too short [ 908.643130][T15274] usb 1-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 908.644006][T15274] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 908.644024][T15274] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 908.644057][T15274] usb 1-1: config 14 has no interface number 0 [ 908.644069][T15274] usb 1-1: config 14 has no interface number 1 [ 908.644119][T15274] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 908.644137][T15274] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 908.644155][T15274] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 908.644191][T15274] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 908.644211][T15274] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 908.644231][T15274] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 908.644250][T15274] usb 1-1: config 14 interface 57 has no altsetting 0 [ 908.644263][T15274] usb 1-1: config 14 interface 228 has no altsetting 0 [ 908.718714][T15274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.718736][T15274] usb 1-1: Product: syz [ 908.718747][T15274] usb 1-1: Manufacturer: syz [ 908.718758][T15274] usb 1-1: SerialNumber: syz [ 909.254326][T15274] legousbtower 1-1:14.57: interrupt endpoints not found [ 909.300466][T16988] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2708'. [ 909.429604][T16991] fuse: Bad value for 'fd' [ 909.654280][T15274] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 909.671560][T15274] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 909.708660][ T7758] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 909.709422][ T7758] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 909.742463][ T7758] usb 8-1: USB disconnect, device number 27 [ 909.753738][T15274] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 910.223411][T17011] usb 1-1: LEGO USB Tower reset control request failed [ 910.421559][ T7758] usb 1-1: USB disconnect, device number 73 [ 910.455749][ T7758] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 911.373614][T17028] rxe_eth0 speed is unknown, defaulting to 1000 [ 911.525219][ T32] kauditd_printk_skb: 20 callbacks suppressed [ 911.525234][ T32] audit: type=1326 audit(1792496603.263:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17035 comm="syz.5.2727" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c959e559 code=0x7ffc0000 [ 911.525422][ T32] audit: type=1326 audit(1792496603.263:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17035 comm="syz.5.2727" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c959e559 code=0x7ffc0000 [ 911.525672][ T32] audit: type=1326 audit(1792496603.263:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17035 comm="syz.5.2727" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc4c959e1eb code=0x7ffc0000 [ 911.636293][ T32] audit: type=1326 audit(1792496603.333:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17035 comm="syz.5.2727" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc4c959e1eb code=0x7ffc0000 [ 911.636334][ T32] audit: type=1326 audit(1792496603.373:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17035 comm="syz.5.2727" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc4c959e1eb code=0x7ffc0000 [ 911.636364][ T32] audit: type=1326 audit(1792496603.373:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17035 comm="syz.5.2727" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc4c959e1eb code=0x7ffc0000 [ 911.636395][ T32] audit: type=1326 audit(1792496603.373:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17035 comm="syz.5.2727" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc4c959e1eb code=0x7ffc0000 [ 911.636425][ T32] audit: type=1326 audit(1792496603.373:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17035 comm="syz.5.2727" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc4c959e1eb code=0x7ffc0000 [ 911.636461][ T32] audit: type=1326 audit(1792496603.373:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17035 comm="syz.5.2727" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc4c959e1eb code=0x7ffc0000 [ 911.636491][ T32] audit: type=1326 audit(1792496603.373:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17035 comm="syz.5.2727" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc4c959e1eb code=0x7ffc0000 [ 912.574546][T17028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 912.692510][T17055] binder: Failure in copy_transaction_data: EINVAL [ 912.807714][T17058] profile_transition: 12 callbacks suppressed [ 912.807732][T17058] profile_transition: unconfined exec no attachment [ 913.039661][T17062] profile_transition: unconfined exec no attachment [ 913.404086][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888027122400: rx timeout, send abort [ 913.413875][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888027122400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 914.969671][T17105] profile_transition: name lookup ix on error [ 916.586162][T15274] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 916.735540][T15274] usb 8-1: Using ep0 maxpacket: 8 [ 916.736055][T15274] usb 8-1: New USB device found: idVendor=0b0e, idProduct=ffff, bcdDevice=0.00 [ 916.737065][T15274] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.737081][T15274] usb 8-1: config 0 has no interfaces? [ 916.737102][T15274] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.744667][T15274] usb 8-1: config 0 descriptor?? [ 917.003890][T17142] sg_write: data in/out 503296/136 bytes for SCSI command 0x0-- guessing data in; [ 917.003890][T17142] program syz.7.2770 not setting count and/or reply_len properly [ 917.038041][T15274] usb 8-1: USB disconnect, device number 28 [ 917.894881][T17173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2784'. [ 917.942494][T17175] sctp: [Deprecated]: syz.7.2785 (pid 17175) Use of int in max_burst socket option. [ 917.942494][T17175] Use struct sctp_assoc_value instead [ 918.153208][T17181] profile_transition: unconfined exec no attachment [ 918.655575][ T5777] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 918.808641][ T5777] usb 8-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 918.826392][ T5777] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.826412][ T5777] usb 8-1: Product: syz [ 918.826424][ T5777] usb 8-1: Manufacturer: syz [ 918.826435][ T5777] usb 8-1: SerialNumber: syz [ 918.861579][ T5777] usb 8-1: config 0 descriptor?? [ 918.881951][ T5777] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 918.914967][ T5777] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 918.928959][ T5777] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 918.928999][ T5777] usb 8-1: media controller created [ 918.991459][ T5777] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 919.059392][T17212] profile_transition: unconfined exec no attachment [ 919.176304][ T5777] DVB: Unable to find symbol mt352_attach() [ 919.177195][T17217] profile_transition: unconfined exec no attachment [ 919.338278][ T5777] DVB: Unable to find symbol nxt6000_attach() [ 919.338294][ T5777] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 919.371954][ T5777] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input90 [ 919.394175][ T5777] dvb-usb: schedule remote query interval to 1000 msecs. [ 919.394193][ T5777] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 919.394205][ T5777] dvb-usb: bulk message failed: -22 (7/0) [ 919.394216][ T5777] dvb-usb: bulk message failed: -22 (7/0) [ 919.434775][ T5777] usb 8-1: USB disconnect, device number 29 [ 919.597891][ T5777] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 919.697877][T17227] profile_transition: unconfined exec no attachment [ 920.008143][T17235] profile_transition: unconfined exec no attachment [ 920.302018][T17246] profile_transition: unconfined exec no attachment [ 920.678228][T17254] profile_transition: unconfined exec no attachment [ 921.012594][T17259] profile_transition: unconfined exec no attachment [ 921.194269][T17266] profile_transition: unconfined exec no attachment [ 921.195142][T17265] mac80211_hwsim hwsim28 5: renamed from wlan0 (while UP) [ 921.429810][T17273] profile_transition: unconfined exec no attachment [ 922.295038][T17297] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2830'. [ 922.295059][T17297] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2830'. [ 923.216043][T17317] profile_transition: 6 callbacks suppressed [ 923.216060][T17317] profile_transition: unconfined exec no attachment [ 924.281385][T17332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2841'. [ 924.410467][ T32] kauditd_printk_skb: 21 callbacks suppressed [ 924.410484][ T32] audit: type=1326 audit(1792496616.154:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17334 comm="syz.0.2843" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525079e559 code=0x7ffc0000 [ 924.413857][ T32] audit: type=1326 audit(1792496616.154:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17334 comm="syz.0.2843" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525079e559 code=0x7ffc0000 [ 924.495114][ T32] audit: type=1326 audit(1792496616.234:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17334 comm="syz.0.2843" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f525079e559 code=0x7ffc0000 [ 924.495155][ T32] audit: type=1326 audit(1792496616.234:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17334 comm="syz.0.2843" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525079e559 code=0x7ffc0000 [ 924.495243][ T32] audit: type=1326 audit(1792496616.234:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17334 comm="syz.0.2843" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525079e559 code=0x7ffc0000 [ 924.500230][ T32] audit: type=1326 audit(1792496616.244:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17334 comm="syz.0.2843" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f525079e559 code=0x7ffc0000 [ 924.500267][ T32] audit: type=1326 audit(1792496616.244:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17334 comm="syz.0.2843" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525079e559 code=0x7ffc0000 [ 924.500307][ T32] audit: type=1326 audit(1792496616.244:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17334 comm="syz.0.2843" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525079e559 code=0x7ffc0000 [ 924.500685][ T32] audit: type=1326 audit(1792496616.244:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17334 comm="syz.0.2843" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f525079e559 code=0x7ffc0000 [ 924.500719][ T32] audit: type=1326 audit(1792496616.244:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17334 comm="syz.0.2843" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525079e559 code=0x7ffc0000 [ 924.786734][T13959] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 924.839938][T17340] profile_transition: unconfined exec no attachment [ 924.909342][T17343] profile_transition: unconfined exec no attachment [ 924.949031][T13959] usb 6-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 924.949919][T13959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.953766][T13959] usb 6-1: config 0 descriptor?? [ 925.044602][T17346] profile_transition: unconfined exec no attachment [ 925.122434][T17348] profile_transition: unconfined exec no attachment [ 925.164597][T13959] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 925.535427][T17354] profile_transition: unconfined exec no attachment [ 925.682067][T13959] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 925.682088][T13959] [drm] Initialized udl on minor 1 [ 925.887642][T17357] profile_transition: unconfined exec no attachment [ 926.044610][T17364] profile_transition: unconfined exec no attachment [ 926.211923][T17369] profile_transition: unconfined exec no attachment [ 926.458247][T17374] FAULT_INJECTION: forcing a failure. [ 926.458247][T17374] name failslab, interval 1, probability 0, space 0, times 0 [ 926.458275][T17374] CPU: 0 UID: 0 PID: 17374 Comm: syz.4.2854 Tainted: G L syzkaller #0 PREEMPT(full) [ 926.458300][T17374] Tainted: [L]=SOFTLOCKUP [ 926.458306][T17374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 926.458317][T17374] Call Trace: [ 926.458323][T17374] [ 926.458330][T17374] dump_stack_lvl+0xe8/0x150 [ 926.458360][T17374] should_fail_ex+0x3eb/0x540 [ 926.458384][T17374] should_failslab+0xa8/0x100 [ 926.458406][T17374] __kmalloc_noprof+0xf9/0x710 [ 926.458431][T17374] ? tomoyo_encode+0x2ad/0x570 [ 926.458447][T17374] ? tomoyo_encode+0x2ad/0x570 [ 926.458468][T17374] tomoyo_encode+0x2ad/0x570 [ 926.458488][T17374] tomoyo_realpath_from_path+0x5fa/0x640 [ 926.458512][T17374] ? tomoyo_path_number_perm+0x219/0x5f0 [ 926.458536][T17374] tomoyo_path_number_perm+0x246/0x5f0 [ 926.458561][T17374] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 926.458582][T17374] ? __lock_acquire+0x747/0x2de0 [ 926.458628][T17374] ? __fget_files+0x2a/0x420 [ 926.458657][T17374] ? __fget_files+0x2a/0x420 [ 926.458681][T17374] ? __fget_files+0x2a/0x420 [ 926.458709][T17374] security_file_ioctl+0xc3/0x2a0 [ 926.458732][T17374] __se_sys_ioctl+0x47/0x170 [ 926.458753][T17374] do_syscall_64+0x166/0x520 [ 926.458775][T17374] ? trace_irq_disable+0x3b/0x140 [ 926.458794][T17374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.458811][T17374] ? clear_bhb_loop+0x70/0xc0 [ 926.458831][T17374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.458847][T17374] RIP: 0033:0x7f8b6f19e559 [ 926.458862][T17374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.458875][T17374] RSP: 002b:00007f8b70139028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 926.458892][T17374] RAX: ffffffffffffffda RBX: 00007f8b6f425fa0 RCX: 00007f8b6f19e559 [ 926.458904][T17374] RDX: 0000200000000600 RSI: 00000000c0306201 RDI: 0000000000000003 [ 926.458914][T17374] RBP: 00007f8b70139090 R08: 0000000000000000 R09: 0000000000000000 [ 926.458924][T17374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.458934][T17374] R13: 00007f8b6f426038 R14: 00007f8b6f425fa0 R15: 00007ffdf769ba38 [ 926.458959][T17374] [ 926.458996][T17374] ERROR: Out of memory at tomoyo_realpath_from_path. [ 926.935312][T17382] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 926.935312][T17382] Please contact the netfilter-devel mailing list or update your nftables rules. [ 926.969198][T17382] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2856'. [ 927.122895][T17386] tipc: Started in network mode [ 927.122922][T17386] tipc: Node identity ac14142f, cluster identity 4711 [ 927.123955][T17386] tipc: New replicast peer: 127.0.0.1 [ 927.127972][T17385] FAULT_INJECTION: forcing a failure. [ 927.127972][T17385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 927.127999][T17385] CPU: 0 UID: 0 PID: 17385 Comm: syz.4.2857 Tainted: G L syzkaller #0 PREEMPT(full) [ 927.128020][T17385] Tainted: [L]=SOFTLOCKUP [ 927.128026][T17385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 927.128035][T17385] Call Trace: [ 927.128041][T17385] [ 927.128048][T17385] dump_stack_lvl+0xe8/0x150 [ 927.128081][T17385] should_fail_ex+0x3eb/0x540 [ 927.128104][T17385] strncpy_from_user+0x36/0x2c0 [ 927.128126][T17385] do_getname+0x77/0x250 [ 927.128150][T17385] do_sys_openat2+0xce/0x200 [ 927.128174][T17385] ? __pfx_do_sys_openat2+0x10/0x10 [ 927.128195][T17385] ? ksys_write+0x242/0x270 [ 927.128212][T17385] ? __pfx_ksys_write+0x10/0x10 [ 927.128230][T17385] __x64_sys_openat+0x138/0x170 [ 927.128255][T17385] do_syscall_64+0x166/0x520 [ 927.128275][T17385] ? trace_irq_disable+0x3b/0x140 [ 927.128292][T17385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.128308][T17385] ? clear_bhb_loop+0x70/0xc0 [ 927.128327][T17385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.128342][T17385] RIP: 0033:0x7f8b6f19e559 [ 927.128357][T17385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.128371][T17385] RSP: 002b:00007f8b70118028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 927.128388][T17385] RAX: ffffffffffffffda RBX: 00007f8b6f426090 RCX: 00007f8b6f19e559 [ 927.128399][T17385] RDX: 0000000000101001 RSI: 0000200000016a40 RDI: ffffffffffffff9c [ 927.128410][T17385] RBP: 00007f8b70118090 R08: 0000000000000000 R09: 0000000000000000 [ 927.128420][T17385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.128430][T17385] R13: 00007f8b6f426128 R14: 00007f8b6f426090 R15: 00007ffdf769ba38 [ 927.128454][T17385] [ 927.389475][T17386] tipc: Enabled bearer , priority 10 [ 927.391504][T17388] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2856'. [ 927.403655][T17392] FAULT_INJECTION: forcing a failure. [ 927.403655][T17392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 927.403700][T17392] CPU: 0 UID: 0 PID: 17392 Comm: syz.0.2858 Tainted: G L syzkaller #0 PREEMPT(full) [ 927.403721][T17392] Tainted: [L]=SOFTLOCKUP [ 927.403727][T17392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 927.403737][T17392] Call Trace: [ 927.403755][T17392] [ 927.403763][T17392] dump_stack_lvl+0xe8/0x150 [ 927.403788][T17392] should_fail_ex+0x3eb/0x540 [ 927.403812][T17392] _copy_from_user+0x2d/0xb0 [ 927.403836][T17392] kstrtouint_from_user+0xd6/0x180 [ 927.403855][T17392] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 927.403878][T17392] ? lock_acquire+0x115/0x350 [ 927.403896][T17392] proc_fail_nth_write+0x8e/0x210 [ 927.403917][T17392] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 927.403941][T17392] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 927.403959][T17392] vfs_write+0x296/0xba0 [ 927.403981][T17392] ? __pfx_vfs_write+0x10/0x10 [ 927.403998][T17392] ? __fget_files+0x2a/0x420 [ 927.404020][T17392] ? __fget_files+0x3a2/0x420 [ 927.404042][T17392] ? __fget_files+0x2a/0x420 [ 927.404067][T17392] ? fdget+0x1ac/0x250 [ 927.404095][T17392] ksys_write+0x150/0x270 [ 927.404110][T17392] ? __fget_files+0x3a2/0x420 [ 927.404140][T17392] ? __pfx_ksys_write+0x10/0x10 [ 927.404164][T17392] do_syscall_64+0x166/0x520 [ 927.404185][T17392] ? trace_irq_disable+0x3b/0x140 [ 927.404203][T17392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.404218][T17392] ? clear_bhb_loop+0x70/0xc0 [ 927.404238][T17392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.404253][T17392] RIP: 0033:0x7f525075ed8e [ 927.404267][T17392] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 927.404280][T17392] RSP: 002b:00007f52515cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 927.404296][T17392] RAX: ffffffffffffffda RBX: 00007f52515cf6c0 RCX: 00007f525075ed8e [ 927.404308][T17392] RDX: 0000000000000001 RSI: 00007f52515cf0a0 RDI: 0000000000000005 [ 927.404318][T17392] RBP: 00007f52515cf090 R08: 0000000000000000 R09: 0000000000000000 [ 927.404328][T17392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.404337][T17392] R13: 00007f5250a263f8 R14: 00007f5250a26360 R15: 00007fffe4c6be98 [ 927.404361][T17392] [ 927.928689][T17395] FAULT_INJECTION: forcing a failure. [ 927.928689][T17395] name failslab, interval 1, probability 0, space 0, times 0 [ 927.928715][T17395] CPU: 0 UID: 0 PID: 17395 Comm: syz.0.2859 Tainted: G L syzkaller #0 PREEMPT(full) [ 927.928736][T17395] Tainted: [L]=SOFTLOCKUP [ 927.928743][T17395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 927.928753][T17395] Call Trace: [ 927.928759][T17395] [ 927.928769][T17395] dump_stack_lvl+0xe8/0x150 [ 927.928795][T17395] should_fail_ex+0x3eb/0x540 [ 927.928827][T17395] should_failslab+0xa8/0x100 [ 927.928848][T17395] __kmalloc_noprof+0xf9/0x710 [ 927.928872][T17395] ? tomoyo_encode+0x2ad/0x570 [ 927.928887][T17395] ? tomoyo_encode+0x2ad/0x570 [ 927.928907][T17395] tomoyo_encode+0x2ad/0x570 [ 927.928928][T17395] tomoyo_realpath_from_path+0x5fa/0x640 [ 927.928951][T17395] ? tomoyo_path_number_perm+0x219/0x5f0 [ 927.928975][T17395] tomoyo_path_number_perm+0x246/0x5f0 [ 927.929014][T17395] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 927.929041][T17395] ? __lock_acquire+0x747/0x2de0 [ 927.929086][T17395] ? __fget_files+0x2a/0x420 [ 927.929112][T17395] ? __fget_files+0x2a/0x420 [ 927.929143][T17395] ? __fget_files+0x2a/0x420 [ 927.929170][T17395] security_file_ioctl+0xc3/0x2a0 [ 927.929194][T17395] __se_sys_ioctl+0x47/0x170 [ 927.929214][T17395] do_syscall_64+0x166/0x520 [ 927.929237][T17395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.929253][T17395] ? clear_bhb_loop+0x70/0xc0 [ 927.929273][T17395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.929289][T17395] RIP: 0033:0x7f525079e559 [ 927.929304][T17395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.929317][T17395] RSP: 002b:00007f5251653028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 927.929334][T17395] RAX: ffffffffffffffda RBX: 00007f5250a25fa0 RCX: 00007f525079e559 [ 927.929346][T17395] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 927.929356][T17395] RBP: 00007f5251653090 R08: 0000000000000000 R09: 0000000000000000 [ 927.929367][T17395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.929376][T17395] R13: 00007f5250a26038 R14: 00007f5250a25fa0 R15: 00007fffe4c6be98 [ 927.929401][T17395] [ 927.929436][T17395] ERROR: Out of memory at tomoyo_realpath_from_path. [ 928.238267][ T7758] tipc: Node number set to 2886997039 [ 928.780052][T17419] loop5: detected capacity change from 0 to 7 [ 928.807640][T17419] Dev loop5: unable to read RDB block 7 [ 928.807685][T17419] loop5: AHDI p1 p2 p4 [ 928.807700][T17419] loop5: partition table partially beyond EOD, truncated [ 928.811075][T17419] loop5: p1 start 5439488 is beyond EOD, truncated [ 928.811114][T17419] loop5: p4 start 3288604672 is beyond EOD, truncated [ 929.105254][ T5777] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 929.254908][ T5777] usb 1-1: Using ep0 maxpacket: 8 [ 929.255557][ T5777] usb 1-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 929.256466][ T5777] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 929.256482][ T5777] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 929.256513][ T5777] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.256543][ T5777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.263110][ T5777] hub 1-1:1.0: bad descriptor, ignoring hub [ 929.263129][ T5777] hub 1-1:1.0: probe with driver hub failed with error -5 [ 929.265947][ T5340] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 929.353700][ T5777] cdc_wdm 1-1:1.0: skipping garbage [ 929.353716][ T5777] cdc_wdm 1-1:1.0: skipping garbage [ 929.373754][ T5777] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 929.373772][ T5777] cdc_wdm 1-1:1.0: Unknown control protocol [ 929.415055][ T5340] usb 8-1: Using ep0 maxpacket: 32 [ 929.415623][ T5340] usb 8-1: New USB device found: idVendor=1b1c, idProduct=0c10, bcdDevice=0.00 [ 929.416620][ T5340] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 929.416643][ T5340] usb 8-1: config 0 interface 0 has no altsetting 0 [ 929.416687][ T5340] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.418834][ T5340] usb 8-1: config 0 descriptor?? [ 929.551497][T17432] profile_transition: unconfined exec no attachment [ 929.619461][T17434] profile_transition: unconfined exec no attachment [ 929.858108][ T5340] corsair-cpro 0003:1B1C:0C10.0026: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.7-1/input0 [ 929.922365][T17439] profile_transition: unconfined exec no attachment [ 930.015122][ T7758] usb 1-1: USB disconnect, device number 74 [ 930.317233][ T5340] corsair-cpro 0003:1B1C:0C10.0026: probe with driver corsair-cpro failed with error -71 [ 930.342779][ T5340] usb 8-1: USB disconnect, device number 30 [ 930.748784][T13959] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 930.749087][T13959] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 930.775589][ T5340] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 930.818246][ T5340] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 930.818391][ T5340] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 930.818857][ T5340] usb 6-1: USB disconnect, device number 23 [ 931.632118][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.374924][T17482] openvswitch: netlink: Message has 8 unknown bytes. [ 932.374953][T17482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 932.547059][ T5340] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 932.704743][ T5340] usb 8-1: Using ep0 maxpacket: 16 [ 932.722106][ T5340] usb 8-1: unable to get BOS descriptor or descriptor too short [ 932.722143][ T5340] usb 8-1: New USB device found: idVendor=103d, idProduct=0100, bcdDevice=0.40 [ 932.722890][ T5340] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 932.722915][ T5340] usb 8-1: can't read configurations, error -71 [ 934.693496][T17528] syzkaller1: entered promiscuous mode [ 934.693515][T17528] syzkaller1: entered allmulticast mode [ 936.596825][ T5340] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 936.756847][ T5340] usb 6-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 936.782700][ T5340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.782727][ T5340] usb 6-1: Product: syz [ 936.782739][ T5340] usb 6-1: Manufacturer: syz [ 936.782750][ T5340] usb 6-1: SerialNumber: syz [ 936.808782][ T5340] usb 6-1: config 0 descriptor?? [ 936.822778][ T5340] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 936.848138][ T5340] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 936.850315][ T5340] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 936.850358][ T5340] usb 6-1: media controller created [ 936.927461][ T5340] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 937.005465][T17575] profile_transition: unconfined exec no attachment [ 937.163927][ T5340] DVB: Unable to find symbol mt352_attach() [ 937.181351][T17580] profile_transition: unconfined exec no attachment [ 937.307361][ T5340] DVB: Unable to find symbol nxt6000_attach() [ 937.307375][ T5340] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 937.312741][ T5340] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input91 [ 937.355154][T13959] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 937.357147][ T5340] dvb-usb: schedule remote query interval to 1000 msecs. [ 937.357162][ T5340] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 937.357174][ T5340] dvb-usb: bulk message failed: -22 (7/0) [ 937.357184][ T5340] dvb-usb: bulk message failed: -22 (7/0) [ 937.406401][ T5340] usb 6-1: USB disconnect, device number 24 [ 937.504460][T13959] usb 1-1: Using ep0 maxpacket: 16 [ 937.505128][T13959] usb 1-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 937.508806][T13959] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.508846][T13959] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.508865][T13959] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.508883][T13959] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 937.508902][T13959] usb 1-1: config 0 interface 0 has no altsetting 0 [ 937.508927][T13959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.510865][T13959] usb 1-1: config 0 descriptor?? [ 937.679435][ T5340] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 937.866795][T17589] profile_transition: unconfined exec no attachment [ 937.995981][T17590] profile_transition: unconfined exec no attachment [ 938.034146][T13959] logitech-djreceiver 0003:046D:C53A.0027: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.0-1/input0 [ 938.101666][T17593] profile_transition: unconfined exec no attachment [ 938.201839][T13959] usb 1-1: USB disconnect, device number 75 [ 938.327261][T17593] fido_id[17593]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 938.438515][T17599] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2939'. [ 938.806214][ T13] IPVS: starting estimator thread 0... [ 938.895315][T17611] IPVS: using max 38 ests per chain, 91200 per kthread [ 940.914356][T13959] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 941.064686][T13959] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41 [ 941.065706][T13959] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 941.065725][T13959] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 941.065743][T13959] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 941.067470][T17672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2968'. [ 941.068395][T13959] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 941.068414][T13959] usb 8-1: Product: syz [ 941.068425][T13959] usb 8-1: Manufacturer: syz [ 941.068435][T13959] usb 8-1: SerialNumber: syz [ 941.337652][T13959] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 941.379268][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2969'. [ 941.545664][ T5777] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 941.545807][T13959] usb 8-1: USB disconnect, device number 33 [ 941.600485][T13959] usblp0: removed [ 941.701521][ T5777] usb 1-1: New USB device found: idVendor=1235, idProduct=8203, bcdDevice=0.40 [ 941.702834][ T5777] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 941.702858][ T5777] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 941.703300][ T5777] usb 1-1: language id specifier not provided by device, defaulting to English [ 941.760929][ T5777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.760951][ T5777] usb 1-1: Product: Ђ [ 941.760962][ T5777] usb 1-1: Manufacturer: ᅆ鍥閜靳앉៺Ẫư읅㭃螏乜䉖◭Ҳʉ묍뇧ṯࡪ못荹땕첡紛薒汍㞓췏쬀됲௶ᶯɚ湿굲ꤠ垽㔑駱쿖 [ 941.760979][ T5777] usb 1-1: SerialNumber: 䳅 [ 941.797598][T17670] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 942.106640][T17690] profile_transition: name lookup ix on error [ 942.272593][T17694] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2978'. [ 942.307167][T17694] netlink: 'syz.4.2978': attribute type 10 has an invalid length. [ 942.330284][T17694] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.341912][T17694] bond0: (slave team0): Enslaving as an active interface with an up link [ 942.464289][ T7758] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 942.524241][T17694] block device autoloading is deprecated and will be removed. [ 942.615564][ T7758] usb 8-1: Using ep0 maxpacket: 32 [ 942.616322][ T7758] usb 8-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 942.617217][ T7758] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 942.617234][ T7758] usb 8-1: config 0 has no interface number 0 [ 942.619155][ T7758] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.619171][ T7758] usb 8-1: Product: syz [ 942.619182][ T7758] usb 8-1: Manufacturer: syz [ 942.619193][ T7758] usb 8-1: SerialNumber: syz [ 942.623399][ T7758] usb 8-1: config 0 descriptor?? [ 942.705079][ T7758] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 942.705186][ T7758] usb 8-1: selecting invalid altsetting 1 [ 942.705200][ T7758] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 942.754673][ T7758] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 942.754890][ T7758] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 942.754929][ T7758] usb 8-1: media controller created [ 942.762574][ T5777] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 942.846939][ T7758] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 942.937503][ T7758] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 942.937544][ T7758] zl10353_read_register: readreg error (reg=127, ret==-71) [ 942.938386][ T7758] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 943.153544][ T5777] usb 1-1: USB disconnect, device number 76 [ 943.190566][ T7758] usb 8-1: USB disconnect, device number 34 [ 943.383471][T15805] udevd[15805]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 943.914108][ T5777] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 944.066829][ T5777] usb 8-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 944.069074][ T5777] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.069112][ T5777] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.085016][ T5777] usb 8-1: config 0 descriptor?? [ 944.333298][ T5777] usbhid 8-1:0.0: can't add hid device: -71 [ 944.333377][ T5777] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 944.380896][ T5777] usb 8-1: USB disconnect, device number 35 [ 944.857355][ T5777] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 945.006708][ T5777] usb 8-1: New USB device found: idVendor=0458, idProduct=5013, bcdDevice=0.40 [ 945.007695][ T5777] usb 8-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 945.007727][ T5777] usb 8-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 945.007747][ T5777] usb 8-1: config 1 interface 0 has no altsetting 0 [ 945.011340][ T5777] usb 8-1: string descriptor 0 read error: -22 [ 945.011464][ T5777] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.892400][ T5777] input: HID 0458:5013 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/0003:0458:5013.0028/input/input92 [ 945.928658][T17709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.952959][T17709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.025091][ T5777] input: HID 0458:5013 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/0003:0458:5013.0028/input/input93 [ 946.122406][ T5777] kye 0003:0458:5013.0028: input,hiddev0,hidraw0: USB HID v0.04 Device [HID 0458:5013] on usb-dummy_hcd.7-1/input0 [ 946.219660][ T5777] usb 8-1: USB disconnect, device number 36 [ 946.251427][T17739] profile_transition: unconfined exec no attachment [ 946.477716][T17739] fido_id[17739]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 946.732697][T17744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2996'. [ 946.732719][T17744] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2996'. [ 949.783940][ T7758] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 949.937346][ T7758] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 949.938208][ T7758] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 949.938234][ T7758] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 949.938248][ T7758] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 949.938280][ T7758] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.939711][ T7758] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 949.939728][ T7758] usb 6-1: Product: syz [ 949.939739][ T7758] usb 6-1: Manufacturer: syz [ 949.946975][ T7758] cdc_wdm 6-1:1.0: skipping garbage [ 949.946991][ T7758] cdc_wdm 6-1:1.0: skipping garbage [ 950.031833][ T7758] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 950.031851][ T7758] cdc_wdm 6-1:1.0: Unknown control protocol [ 950.157823][ T7758] usb 6-1: USB disconnect, device number 25 [ 950.634978][ T7758] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 950.784357][ T7758] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 950.785287][ T7758] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 950.785307][ T7758] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 950.785321][ T7758] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 950.785373][ T7758] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.790452][ T7758] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 950.790471][ T7758] usb 6-1: Product: syz [ 950.790482][ T7758] usb 6-1: Manufacturer: syz [ 950.795405][ T7758] cdc_wdm 6-1:1.0: skipping garbage [ 950.795419][ T7758] cdc_wdm 6-1:1.0: skipping garbage [ 950.883170][ T7758] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 950.883187][ T7758] cdc_wdm 6-1:1.0: Unknown control protocol [ 951.167787][T17787] input: syz0 as /devices/virtual/input/input94 [ 951.211332][T17789] tipc: Failed to remove unknown binding: 66,0,0/0:830823821/830823822 [ 951.566217][T17792] rxe_eth0 speed is unknown, defaulting to 1000 [ 951.739512][ C0] cdc_wdm 6-1:1.0: unknown notification 72 received: index 13556 len 60644 [ 951.753136][ C0] cdc_wdm 6-1:1.0: Unexpected error -71 [ 951.754117][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 951.754133][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 951.754563][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 951.754577][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 951.754754][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 951.754768][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 951.754942][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 951.754955][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 951.755132][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 951.755145][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 951.755322][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 951.755335][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 951.755510][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 951.755541][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 951.755721][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 951.755734][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 951.755908][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 951.755921][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 951.756095][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 951.756108][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 951.759811][T13959] usb 6-1: USB disconnect, device number 26 [ 951.759946][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 955.738620][T17748] Set syz0 is full, maxelem 65536 reached [ 956.396497][T13959] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 956.543328][T13959] usb 6-1: Using ep0 maxpacket: 8 [ 956.543888][T13959] usb 6-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 956.544743][T13959] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 956.544759][T13959] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 956.544790][T13959] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 956.544808][T13959] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 956.544827][T13959] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 956.544852][T13959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.553061][T13959] hub 6-1:1.0: bad descriptor, ignoring hub [ 956.553082][T13959] hub 6-1:1.0: probe with driver hub failed with error -5 [ 956.666308][T13959] cdc_wdm 6-1:1.0: skipping garbage [ 956.666326][T13959] cdc_wdm 6-1:1.0: skipping garbage [ 956.669885][T13959] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 956.669903][T13959] cdc_wdm 6-1:1.0: Unknown control protocol [ 957.013935][T13959] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 957.169222][T13959] usb 8-1: Using ep0 maxpacket: 16 [ 957.169740][T13959] usb 8-1: New USB device found: idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 957.172317][T13959] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 957.172337][T13959] usb 8-1: Product: syz [ 957.172348][T13959] usb 8-1: Manufacturer: syz [ 957.172359][T13959] usb 8-1: SerialNumber: syz [ 957.268487][T13959] usb 8-1: config 0 descriptor?? [ 957.397264][T17859] usb 6-1: reset high-speed USB device number 27 using dummy_hcd [ 957.420322][T17859] usb 6-1: device reset changed ep0 maxpacket size! [ 957.469544][T17859] cdc_wdm 6-1:1.0: Error autopm - -16 [ 957.469786][ T5777] usb 6-1: USB disconnect, device number 27 [ 957.643244][ T5777] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 957.710815][T13959] usb 8-1: USB disconnect, device number 37 [ 957.811511][ T5777] usb 6-1: New USB device found: idVendor=046d, idProduct=c094, bcdDevice=0.00 [ 957.823072][ T5777] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 957.823166][ T5777] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 957.823186][ T5777] usb 6-1: config 0 interface 0 has no altsetting 0 [ 957.823212][ T5777] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.892417][ T5777] usb 6-1: config 0 descriptor?? [ 958.120904][ T5777] usbhid 6-1:0.0: can't add hid device: -71 [ 958.120984][ T5777] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 958.170041][ T5777] usb 6-1: USB disconnect, device number 28 [ 958.298422][T17900] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3064'. [ 960.509051][T17954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3085'. [ 960.897208][T17965] base or size exceeds the MTRR width [ 961.151520][T17973] FAULT_INJECTION: forcing a failure. [ 961.151520][T17973] name failslab, interval 1, probability 0, space 0, times 0 [ 961.151548][T17973] CPU: 0 UID: 0 PID: 17973 Comm: syz.5.3091 Tainted: G L syzkaller #0 PREEMPT(full) [ 961.151571][T17973] Tainted: [L]=SOFTLOCKUP [ 961.151576][T17973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 961.151587][T17973] Call Trace: [ 961.151594][T17973] [ 961.151601][T17973] dump_stack_lvl+0xe8/0x150 [ 961.151628][T17973] should_fail_ex+0x3eb/0x540 [ 961.151655][T17973] should_failslab+0xa8/0x100 [ 961.151675][T17973] __kmalloc_cache_noprof+0x9e/0x600 [ 961.151702][T17973] ? bus_add_driver+0x19d/0x6e0 [ 961.151813][T17973] ? bus_add_driver+0x19d/0x6e0 [ 961.151841][T17973] bus_add_driver+0x19d/0x6e0 [ 961.151872][T17973] driver_register+0x23a/0x320 [ 961.151911][T17973] usb_gadget_register_driver_owner+0xf9/0x270 [ 961.151994][T17973] raw_ioctl+0x1541/0x41c0 [ 961.152048][T17973] ? tomoyo_path_number_perm+0x219/0x5f0 [ 961.152077][T17973] ? do_vfs_ioctl+0x116f/0x1530 [ 961.152105][T17973] ? __pfx_raw_ioctl+0x10/0x10 [ 961.152132][T17973] ? handle_mm_fault+0xee/0x3540 [ 961.152180][T17973] ? __fget_files+0x2a/0x420 [ 961.152207][T17973] ? __fget_files+0x2a/0x420 [ 961.152231][T17973] ? __fget_files+0x2a/0x420 [ 961.152258][T17973] ? bpf_lsm_file_ioctl+0x9/0x20 [ 961.152277][T17973] ? __pfx_raw_ioctl+0x10/0x10 [ 961.152301][T17973] __se_sys_ioctl+0xfc/0x170 [ 961.152322][T17973] do_syscall_64+0x166/0x520 [ 961.152352][T17973] ? trace_irq_disable+0x3b/0x140 [ 961.152370][T17973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.152387][T17973] ? clear_bhb_loop+0x70/0xc0 [ 961.152407][T17973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.152424][T17973] RIP: 0033:0x7fc4c959e1eb [ 961.152439][T17973] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 961.152453][T17973] RSP: 002b:00007fc4ca43df00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 961.152470][T17973] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fc4c959e1eb [ 961.152482][T17973] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 961.152493][T17973] RBP: 00007fc4ca43efd0 R08: 0000000000000001 R09: 00000000ffffffff [ 961.152508][T17973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 961.152518][T17973] R13: 00002000000000c0 R14: 0000000000000000 R15: 0000000000000000 [ 961.152543][T17973] [ 961.152550][T17973] UDC core: USB Raw Gadget: driver registration failed: -12 [ 961.152564][T17973] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 961.964177][ T5340] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 962.113981][ T5340] usb 1-1: Using ep0 maxpacket: 8 [ 962.120760][ T5340] usb 1-1: New USB device found: idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 962.121242][ T5340] usb 1-1: config 0 has no interfaces? [ 962.121266][ T5340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.152314][ T5340] usb 1-1: config 0 descriptor?? [ 962.369962][ T5340] usb 1-1: USB disconnect, device number 77 [ 962.513530][ T5777] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 962.667864][ T5777] usb 6-1: New USB device found: idVendor=05d1, idProduct=2021, bcdDevice=9.00 [ 962.672582][ T5777] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 962.672603][ T5777] usb 6-1: Product: syz [ 962.702735][ T5777] usb 6-1: config 0 descriptor?? [ 962.711367][ T5777] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 962.726754][ T5777] usb 6-1: Detected FT232H [ 962.921141][ T5777] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 963.262974][ T5340] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 963.339729][ T5777] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 963.414409][ T5340] usb 1-1: New USB device found: idVendor=04f2, idProduct=1421, bcdDevice=0.00 [ 963.415504][ T5340] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.415528][ T5340] usb 1-1: config 0 interface 0 has no altsetting 0 [ 963.415551][ T5340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.421991][ T5340] usb 1-1: config 0 descriptor?? [ 963.509895][T18023] binder: Write failure EFAULT in pid:488 [ 963.532661][ T5777] usb 6-1: USB disconnect, device number 29 [ 963.571721][ T5777] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 963.595032][ T5777] ftdi_sio 6-1:0.0: device disconnected [ 963.893857][ T5340] chicony 0003:04F2:1421.0029: unknown main item tag 0x0 [ 963.893887][ T5340] chicony 0003:04F2:1421.0029: unknown main item tag 0x0 [ 963.893906][ T5340] chicony 0003:04F2:1421.0029: unknown main item tag 0x0 [ 963.893925][ T5340] chicony 0003:04F2:1421.0029: unknown main item tag 0x0 [ 963.893944][ T5340] chicony 0003:04F2:1421.0029: unknown main item tag 0x0 [ 963.901147][ T5340] chicony 0003:04F2:1421.0029: unknown main item tag 0x0 [ 963.901174][ T5340] chicony 0003:04F2:1421.0029: unknown main item tag 0x0 [ 963.901194][ T5340] chicony 0003:04F2:1421.0029: unknown main item tag 0x0 [ 963.901213][ T5340] chicony 0003:04F2:1421.0029: unknown main item tag 0x0 [ 963.901232][ T5340] chicony 0003:04F2:1421.0029: unknown main item tag 0x0 [ 963.982582][ T5340] chicony 0003:04F2:1421.0029: hidraw0: USB HID v0.b7 Device [HID 04f2:1421] on usb-dummy_hcd.0-1/input0 [ 964.026023][T18032] profile_transition: unconfined exec no attachment [ 964.111706][ T5340] usb 1-1: USB disconnect, device number 78 [ 964.143797][ T5777] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 964.293858][ T5777] usb 8-1: New USB device found: idVendor=054c, idProduct=09cc, bcdDevice=0.00 [ 964.294752][ T5777] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.294775][ T5777] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 964.294795][ T5777] usb 8-1: config 0 interface 0 has no altsetting 0 [ 964.294818][ T5777] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.299666][ T5777] usb 8-1: config 0 descriptor?? [ 964.634787][T18041] loop7: detected capacity change from 0 to 8 [ 964.777669][ T5777] playstation 0003:054C:09CC.002A: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.7-1/input0 [ 964.866934][T18043] profile_transition: unconfined exec no attachment [ 964.942691][ T5777] playstation 0003:054C:09CC.002A: Invalid byte count transferred, expected 16 got 0 [ 964.944098][ T5777] playstation 0003:054C:09CC.002A: Failed to retrieve DualShock4 pairing info: -22 [ 964.944140][ T5777] playstation 0003:054C:09CC.002A: Failed to get MAC address from DualShock4 [ 964.944152][ T5777] playstation 0003:054C:09CC.002A: Failed to create dualshock4. [ 965.009641][ T5777] playstation 0003:054C:09CC.002A: probe with driver playstation failed with error -22 [ 965.157990][ T5777] usb 8-1: USB disconnect, device number 38 [ 965.357081][T18041] Dev loop7: unable to read RDB block 8 [ 965.357115][T18041] loop7: unable to read partition table [ 965.357262][T18041] loop7: partition table beyond EOD, truncated [ 965.359184][T18041] loop_reread_partitions: partition scan of loop7 (Cj̖4FLQk5) failed (rc=-5) [ 965.591365][T18053] FAULT_INJECTION: forcing a failure. [ 965.591365][T18053] name failslab, interval 1, probability 0, space 0, times 0 [ 965.591393][T18053] CPU: 0 UID: 0 PID: 18053 Comm: syz.4.3125 Tainted: G L syzkaller #0 PREEMPT(full) [ 965.591415][T18053] Tainted: [L]=SOFTLOCKUP [ 965.591421][T18053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 965.591432][T18053] Call Trace: [ 965.591438][T18053] [ 965.591446][T18053] dump_stack_lvl+0xe8/0x150 [ 965.591473][T18053] should_fail_ex+0x3eb/0x540 [ 965.591498][T18053] should_failslab+0xa8/0x100 [ 965.591519][T18053] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 965.591547][T18053] ? shmem_symlink+0x19f/0x4d0 [ 965.591567][T18053] ? shmem_symlink+0x19f/0x4d0 [ 965.591592][T18053] kmemdup_noprof+0x2b/0x70 [ 965.591616][T18053] shmem_symlink+0x19f/0x4d0 [ 965.591636][T18053] ? inode_permission+0x2b8/0x600 [ 965.591663][T18053] vfs_symlink+0x18e/0x330 [ 965.591683][T18053] ? security_path_symlink+0xfd/0x360 [ 965.591704][T18053] filename_symlinkat+0x1cd/0x410 [ 965.591724][T18053] ? __might_fault+0xaf/0x130 [ 965.591747][T18053] ? __pfx_filename_symlinkat+0x10/0x10 [ 965.591771][T18053] ? do_getname+0x151/0x250 [ 965.591800][T18053] __se_sys_symlinkat+0x4e/0x2b0 [ 965.591823][T18053] do_syscall_64+0x166/0x520 [ 965.591846][T18053] ? trace_irq_disable+0x3b/0x140 [ 965.591864][T18053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.591881][T18053] ? clear_bhb_loop+0x70/0xc0 [ 965.591910][T18053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.591926][T18053] RIP: 0033:0x7f8b6f19e559 [ 965.591941][T18053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.591955][T18053] RSP: 002b:00007f8b70139028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 965.591972][T18053] RAX: ffffffffffffffda RBX: 00007f8b6f425fa0 RCX: 00007f8b6f19e559 [ 965.591984][T18053] RDX: 0000200000000200 RSI: ffffffffffffff9c RDI: 0000200000000180 [ 965.591996][T18053] RBP: 00007f8b6f235ad8 R08: 0000000000000000 R09: 0000000000000000 [ 965.592006][T18053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 965.592016][T18053] R13: 00007f8b6f426038 R14: 00007f8b6f425fa0 R15: 00007ffdf769ba38 [ 965.592042][T18053] [ 966.079799][T18061] batadv_slave_1: entered promiscuous mode [ 966.099294][T18061] veth0_to_bridge: entered allmulticast mode [ 966.117393][T18059] veth0_to_bridge: left allmulticast mode [ 966.117423][T18059] batadv_slave_1: left promiscuous mode [ 966.460406][T18072] input: syz1 as /devices/virtual/input/input95 [ 966.545588][T18077] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 966.767207][ T32] kauditd_printk_skb: 7 callbacks suppressed [ 966.767223][ T32] audit: type=1800 audit(1792496658.517:429): pid=18083 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.7.3140" name="file1" dev="sda1" ino=2045 res=0 errno=-22 [ 966.923042][ T5340] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 967.086669][ T5340] usb 6-1: Using ep0 maxpacket: 32 [ 967.087243][ T5340] usb 6-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 967.091365][ T5340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.091390][ T5340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.091420][ T5340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.121109][ T5340] usb 6-1: config 0 descriptor?? [ 967.164934][ T5340] hub 6-1:0.0: USB hub found [ 967.358218][ T5340] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 967.361102][T18085] block device autoloading is deprecated and will be removed. [ 967.795557][ T5340] hid-generic 0003:046D:C31C.002B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 967.841567][T18109] profile_transition: unconfined exec no attachment [ 968.067385][T18115] MTRR 1 not used [ 968.437221][T18080] usb 6-1: reset high-speed USB device number 30 using dummy_hcd [ 968.798972][T18080] usbhid 6-1:0.0: reset_resume error -32 [ 968.923986][ T5340] usb 6-1: USB disconnect, device number 30 [ 969.986408][T18151] rxe_eth0 speed is unknown, defaulting to 1000 [ 970.246736][ T5777] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 970.302544][ T5340] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 970.394859][ T5777] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=1.00 [ 970.395801][ T5777] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.397684][ T5777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.397702][ T5777] usb 1-1: Product: syz [ 970.397713][ T5777] usb 1-1: Manufacturer: syz [ 970.397724][ T5777] usb 1-1: SerialNumber: syz [ 970.454477][ T5777] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 970.454500][ T5777] cdc_wdm 1-1:1.0: Unknown control protocol [ 970.480103][ T5340] usb 6-1: New USB device found: idVendor=05ac, idProduct=024f, bcdDevice=0.00 [ 970.481101][ T5340] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 970.481132][ T5340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 970.481152][ T5340] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 970.481182][ T5340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.543595][ T5340] usb 6-1: config 0 descriptor?? [ 970.546386][T18154] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 970.634194][ T5777] usb 1-1: USB disconnect, device number 79 [ 970.963729][ T5340] apple 0003:05AC:024F.002C: item fetching failed at offset 5/6 [ 970.965468][ T5340] apple 0003:05AC:024F.002C: parse failed [ 970.965544][ T5340] apple 0003:05AC:024F.002C: probe with driver apple failed with error -22 [ 971.169781][ T5340] usb 6-1: USB disconnect, device number 31 [ 971.512759][ T5777] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 971.664141][ T5777] usb 1-1: Using ep0 maxpacket: 16 [ 971.664875][ T5777] usb 1-1: New USB device found: idVendor=17ef, idProduct=6085, bcdDevice=0.00 [ 971.665986][ T5777] usb 1-1: too many endpoints for config 0 interface 0 altsetting 5: 255, using maximum allowed: 30 [ 971.666017][ T5777] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.666037][ T5777] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 971.666057][ T5777] usb 1-1: config 0 interface 0 has no altsetting 0 [ 971.666080][ T5777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.668527][ T5777] usb 1-1: config 0 descriptor?? [ 971.883191][ T5340] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 972.033932][ T5340] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 972.035009][ T5340] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 972.035032][ T5340] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 972.036950][ T5340] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.036970][ T5340] usb 8-1: Product: syz [ 972.036981][ T5340] usb 8-1: Manufacturer: syz [ 972.036992][ T5340] usb 8-1: SerialNumber: syz [ 972.137598][ T5777] hid_parser_main: 15 callbacks suppressed [ 972.137620][ T5777] hid-rmi 0003:17EF:6085.002D: unknown main item tag 0x0 [ 972.137661][ T5777] hid-rmi 0003:17EF:6085.002D: unknown main item tag 0x0 [ 972.137680][ T5777] hid-rmi 0003:17EF:6085.002D: unknown main item tag 0x0 [ 972.137699][ T5777] hid-rmi 0003:17EF:6085.002D: unknown main item tag 0x0 [ 972.137718][ T5777] hid-rmi 0003:17EF:6085.002D: unknown main item tag 0x0 [ 972.137737][ T5777] hid-rmi 0003:17EF:6085.002D: unknown main item tag 0x0 [ 972.137756][ T5777] hid-rmi 0003:17EF:6085.002D: unknown main item tag 0x0 [ 972.137790][ T5777] hid-rmi 0003:17EF:6085.002D: unknown main item tag 0x0 [ 972.137809][ T5777] hid-rmi 0003:17EF:6085.002D: unknown main item tag 0x0 [ 972.137828][ T5777] hid-rmi 0003:17EF:6085.002D: unknown main item tag 0x0 [ 972.243864][ T5777] hid-rmi 0003:17EF:6085.002D: hidraw0: USB HID v0.05 Device [HID 17ef:6085] on usb-dummy_hcd.0-1/input0 [ 972.295969][T18159] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 972.296071][T18159] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 972.328004][T18170] profile_transition: unconfined exec no attachment [ 972.350507][ T5777] usb 1-1: USB disconnect, device number 80 [ 972.504812][T18170] fido_id[18170]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 972.698975][T18175] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 973.135290][T18159] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 973.135403][T18159] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 973.345962][ T5340] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 973.345990][ T5340] cdc_ncm 8-1:1.0: setting rx_max = 16384 [ 973.555983][ T5340] cdc_ncm 8-1:1.0: setting tx_max = 184 [ 976.910032][ T5340] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 976.942545][ T5340] usb 8-1: USB disconnect, device number 39 [ 976.945885][ T5340] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP) [ 977.294073][ T5340] usb 8-1: new full-speed USB device number 40 using dummy_hcd [ 977.632491][ T5340] usb 8-1: device not accepting address 40, error -71 [ 977.985785][T18220] rxe_eth0 speed is unknown, defaulting to 1000 [ 978.646161][T18234] binder: Error in use_page_slow: ESRCH [ 978.646180][T18234] binder: use_range failure ESRCH [ 978.646194][T18234] binder: Failed to allocate buffer. len:8, is_oneway:false [ 978.646224][T18234] binder: Failure in copy_transaction_data: ESRCH [ 980.801237][T18294] rxe_eth0 speed is unknown, defaulting to 1000 [ 980.842544][ T10] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 980.997127][ T10] usb 8-1: New USB device found: idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 981.000395][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.024914][ T10] usb 8-1: config 0 descriptor?? [ 981.443277][ T10] usb 8-1: Cannot set MAC address [ 981.443436][ T10] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 981.478317][ T10] usb 8-1: USB disconnect, device number 42 [ 982.942669][T18343] profile_transition: unconfined exec no attachment [ 983.931775][ T10] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 984.092049][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 984.094579][ T10] usb 6-1: New USB device found: idVendor=1e7d, idProduct=319c, bcdDevice=0.00 [ 984.097093][ T10] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 984.097118][ T10] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 984.097138][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 984.097162][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.099197][ T10] usb 6-1: config 0 descriptor?? [ 984.533418][ T10] input: HID 1e7d:319c as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:1E7D:319C.002E/input/input96 [ 984.674619][ T10] isku 0003:1E7D:319C.002E: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 984.742773][ T10] usb 6-1: USB disconnect, device number 32 [ 984.755926][T18378] profile_transition: unconfined exec no attachment [ 984.919926][T18378] fido_id[18378]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 984.999632][T18381] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 470156546 (only 8 groups) [ 985.315267][T18393] netlink: 160 bytes leftover after parsing attributes in process `syz.7.3264'. [ 985.731683][ T10] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 985.881973][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 985.884871][ T10] usb 1-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 985.886084][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 985.886110][ T10] usb 1-1: config 0 has no interface number 0 [ 985.886177][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 985.887866][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.887884][ T10] usb 1-1: Product: syz [ 985.887895][ T10] usb 1-1: Manufacturer: syz [ 985.887907][ T10] usb 1-1: SerialNumber: syz [ 985.889970][ T10] usb 1-1: config 0 descriptor?? [ 986.508106][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 986.508131][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 986.583596][T18427] sd 0:0:1:0: PR command failed: 1026 [ 986.583663][T18427] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 986.583694][T18427] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 986.711463][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 986.712440][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 986.712457][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 986.712653][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 986.715132][ T10] usb 1-1: USB disconnect, device number 81 [ 986.793064][ T5777] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 986.815575][T18431] profile_transition: unconfined exec no attachment [ 986.823985][ T32] audit: type=1800 audit(1792496678.578:430): pid=18429 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.4.3279" name="file1" dev="sda1" ino=2045 res=0 errno=-22 [ 986.942289][ T5777] usb 6-1: Using ep0 maxpacket: 32 [ 986.942807][ T5777] usb 6-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 986.943669][ T5777] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 986.943687][ T5777] usb 6-1: config 0 has no interface number 0 [ 986.943719][ T5777] usb 6-1: config 0 interface 184 has no altsetting 0 [ 986.946407][ T5777] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.946426][ T5777] usb 6-1: Product: syz [ 986.946437][ T5777] usb 6-1: Manufacturer: syz [ 986.946449][ T5777] usb 6-1: SerialNumber: syz [ 986.948685][ T5777] usb 6-1: config 0 descriptor?? [ 987.499581][T18440] rxe_eth0 speed is unknown, defaulting to 1000 [ 987.671579][ T1224] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 987.823515][ T1224] usb 1-1: New USB device found: idVendor=05d1, idProduct=2021, bcdDevice=9.00 [ 987.825394][ T1224] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 987.825415][ T1224] usb 1-1: Product: syz [ 987.827787][ T1224] usb 1-1: config 0 descriptor?? [ 987.889865][ T5777] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 987.889890][ T5777] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 987.916265][ T5777] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 987.916290][ T5777] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 987.916306][ T5777] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 987.916320][ T5777] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 987.916495][ T5777] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 987.980164][ T1224] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 987.981169][ T1224] usb 1-1: Detected FT232H [ 988.025467][ T5777] usb 6-1: USB disconnect, device number 33 [ 988.079309][ T1224] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 988.197256][T18445] FAULT_INJECTION: forcing a failure. [ 988.197256][T18445] name failslab, interval 1, probability 0, space 0, times 0 [ 988.197287][T18445] CPU: 0 UID: 0 PID: 18445 Comm: syz.7.3285 Tainted: G L syzkaller #0 PREEMPT(full) [ 988.197309][T18445] Tainted: [L]=SOFTLOCKUP [ 988.197315][T18445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 988.197326][T18445] Call Trace: [ 988.197333][T18445] [ 988.197341][T18445] dump_stack_lvl+0xe8/0x150 [ 988.197368][T18445] should_fail_ex+0x3eb/0x540 [ 988.197395][T18445] should_failslab+0xa8/0x100 [ 988.197414][T18445] ? __kernfs_new_node+0xe6/0x980 [ 988.197435][T18445] kmem_cache_alloc_noprof+0x9c/0x600 [ 988.197461][T18445] ? __kernfs_new_node+0xe6/0x980 [ 988.197486][T18445] __kernfs_new_node+0xe6/0x980 [ 988.197513][T18445] ? __pfx___kernfs_new_node+0x10/0x10 [ 988.197539][T18445] ? kernfs_root+0x1c/0x230 [ 988.197562][T18445] ? kernfs_root+0x1c/0x230 [ 988.197580][T18445] ? kernfs_root+0x1c/0x230 [ 988.197596][T18445] ? kernfs_root+0x1c/0x230 [ 988.197618][T18445] kernfs_create_dir_ns+0xf7/0x220 [ 988.197643][T18445] internal_create_group+0x440/0x1180 [ 988.197729][T18445] ? __pfx_dev_add_physical_location+0x10/0x10 [ 988.197787][T18445] ? sysfs_create_groups+0xfa/0x120 [ 988.197807][T18445] ? __pfx_internal_create_group+0x10/0x10 [ 988.197825][T18445] ? device_add_attrs+0x5c3/0x600 [ 988.197844][T18445] ? __pfx_device_add_attrs+0x10/0x10 [ 988.197863][T18445] dpm_sysfs_add+0x6a/0x270 [ 988.197902][T18445] device_add+0x4ca/0xb80 [ 988.197920][T18445] netdev_register_kobject+0x197/0x350 [ 988.197985][T18445] register_netdevice+0x17be/0x2280 [ 988.198055][T18445] ? __pfx_register_netdevice+0x10/0x10 [ 988.198079][T18445] ? alloc_netdev_mqs+0xd5b/0x1240 [ 988.198110][T18445] ? alloc_netdev_mqs+0xe92/0x1240 [ 988.198134][T18445] ? ip6gre_tunnel_locate+0x221/0x970 [ 988.198190][T18445] ip6gre_tunnel_locate+0x2d0/0x970 [ 988.198215][T18445] ? __pfx_gre_flags_to_tnl_flags+0x10/0x10 [ 988.198243][T18445] ? __pfx_ip6gre_tunnel_locate+0x10/0x10 [ 988.198266][T18445] ? ip6gre_tnl_parm_from_user+0x41/0x400 [ 988.198292][T18445] ? ip6gre_tunnel_siocdevprivate+0x8d9/0xd90 [ 988.198321][T18445] ip6gre_tunnel_siocdevprivate+0x904/0xd90 [ 988.198351][T18445] ? __pfx_ip6gre_tunnel_siocdevprivate+0x10/0x10 [ 988.198396][T18445] ? __pfx___mutex_lock+0x10/0x10 [ 988.198418][T18445] ? full_name_hash+0x92/0xe0 [ 988.198448][T18445] dev_ifsioc+0xb56/0x1360 [ 988.198492][T18445] dev_ioctl+0x84c/0x1150 [ 988.198515][T18445] sock_ioctl+0x753/0x7e0 [ 988.198550][T18445] ? __pfx_sock_ioctl+0x10/0x10 [ 988.198577][T18445] ? __fget_files+0x2a/0x420 [ 988.198605][T18445] ? bpf_lsm_file_ioctl+0x9/0x20 [ 988.198623][T18445] ? __pfx_sock_ioctl+0x10/0x10 [ 988.198647][T18445] __se_sys_ioctl+0xfc/0x170 [ 988.198668][T18445] do_syscall_64+0x166/0x520 [ 988.198689][T18445] ? trace_irq_disable+0x3b/0x140 [ 988.198708][T18445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.198724][T18445] ? clear_bhb_loop+0x70/0xc0 [ 988.198744][T18445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.198760][T18445] RIP: 0033:0x7fadb959e559 [ 988.198776][T18445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.198790][T18445] RSP: 002b:00007fadba474028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 988.198808][T18445] RAX: ffffffffffffffda RBX: 00007fadb9825fa0 RCX: 00007fadb959e559 [ 988.198820][T18445] RDX: 0000200000000600 RSI: 00000000000089f1 RDI: 0000000000000004 [ 988.198831][T18445] RBP: 00007fadb9635ad8 R08: 0000000000000000 R09: 0000000000000000 [ 988.198841][T18445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 988.198851][T18445] R13: 00007fadb9826038 R14: 00007fadb9825fa0 R15: 00007fff8861f768 [ 988.198877][T18445] [ 988.806012][ T1224] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 988.810171][ T1224] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 988.846834][ T1224] usb 1-1: USB disconnect, device number 82 [ 988.930529][ T1224] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 988.953677][ T1224] ftdi_sio 1-1:0.0: device disconnected [ 989.703413][ T1224] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 989.854072][ T1224] usb 1-1: Using ep0 maxpacket: 32 [ 989.854558][ T1224] usb 1-1: New USB device found: idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 989.855649][ T1224] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 989.855668][ T1224] usb 1-1: config 0 has no interface number 0 [ 989.855698][ T1224] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 989.855729][ T1224] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 989.855746][ T1224] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 989.855764][ T1224] usb 1-1: config 0 interface 196 has no altsetting 0 [ 989.857659][ T1224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.857678][ T1224] usb 1-1: Product: syz [ 989.857689][ T1224] usb 1-1: Manufacturer: syz [ 989.857701][ T1224] usb 1-1: SerialNumber: syz [ 989.886267][ T1224] usb 1-1: config 0 descriptor?? [ 989.887156][T18460] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 990.352952][ T1224] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 990.353130][ T1224] ipheth 1-1:0.196: probe with driver ipheth failed with error -22 [ 990.563238][ T1224] usb 1-1: USB disconnect, device number 83 [ 991.058164][T18496] profile_transition: unconfined exec no attachment [ 991.432049][T18500] loop7: detected capacity change from 0 to 8 [ 991.949049][T18512] profile_transition: unconfined exec no attachment [ 991.975976][T18500] Dev loop7: unable to read RDB block 8 [ 991.976012][T18500] loop7: unable to read partition table [ 991.976167][T18500] loop7: partition table beyond EOD, truncated [ 991.976191][T18500] loop_reread_partitions: partition scan of loop7 (Cj̖4FLQk5) failed (rc=-5) [ 992.027737][T18505] [ 992.030159][T18505] ====================================================== [ 992.037194][T18505] WARNING: possible circular locking dependency detected [ 992.044223][T18505] syzkaller #0 Tainted: G L [ 992.050283][T18505] ------------------------------------------------------ [ 992.057297][T18505] syz.0.3307/18505 is trying to acquire lock: [ 992.063356][T18505] ffff88801d68ca10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 992.073631][T18505] [ 992.073631][T18505] but task is already holding lock: [ 992.081025][T18505] ffff88802760f020 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x19c9/0x2010 [ 992.091041][T18505] [ 992.091041][T18505] which lock already depends on the new lock. [ 992.091041][T18505] [ 992.101442][T18505] [ 992.101442][T18505] the existing dependency chain (in reverse order) is: [ 992.110482][T18505] [ 992.110482][T18505] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 992.119092][T18505] blk_alloc_queue+0x544/0x690 [ 992.124479][T18505] __blk_mq_alloc_disk+0x194/0x390 [ 992.130164][T18505] loop_add+0x480/0xb40 [ 992.134871][T18505] loop_init+0xd7/0x160 [ 992.139658][T18505] do_one_initcall+0x250/0x870 [ 992.144979][T18505] do_initcall_level+0x10a/0x1a0 [ 992.150488][T18505] do_initcalls+0x59/0xa0 [ 992.155353][T18505] kernel_init_freeable+0x29d/0x3e0 [ 992.161076][T18505] kernel_init+0x22/0x1d0 [ 992.165924][T18505] ret_from_fork+0x514/0xb70 [ 992.171042][T18505] ret_from_fork_asm+0x1a/0x30 [ 992.176356][T18505] [ 992.176356][T18505] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 992.183592][T18505] fs_reclaim_acquire+0x71/0x100 [ 992.189076][T18505] kmem_cache_alloc_noprof+0x5f/0x600 [ 992.194978][T18505] __kernfs_iattrs+0xdd/0x380 [ 992.200180][T18505] kernfs_iop_setattr+0xe6/0x3f0 [ 992.205641][T18505] notify_change+0xbba/0xea0 [ 992.210759][T18505] do_truncate+0x1c2/0x250 [ 992.215710][T18505] path_openat+0x18a6/0x20f0 [ 992.220842][T18505] do_file_open+0x23e/0x4a0 [ 992.225883][T18505] do_sys_openat2+0x115/0x200 [ 992.231091][T18505] __x64_sys_openat+0x138/0x170 [ 992.236482][T18505] do_syscall_64+0x166/0x520 [ 992.241601][T18505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.248032][T18505] [ 992.248032][T18505] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 992.256548][T18505] __lock_acquire+0x164c/0x2de0 [ 992.261922][T18505] lock_acquire+0x115/0x350 [ 992.266966][T18505] down_read+0x45/0x320 [ 992.271657][T18505] kernfs_iop_getattr+0x9e/0x450 [ 992.277116][T18505] vfs_getattr_nosec+0x305/0x460 [ 992.282579][T18505] loop_assign_backing_file+0x282/0x610 [ 992.288675][T18505] lo_ioctl+0x1a3f/0x2010 [ 992.293531][T18505] blkdev_ioctl+0x5e3/0x740 [ 992.298642][T18505] __se_sys_ioctl+0xfc/0x170 [ 992.303756][T18505] do_syscall_64+0x166/0x520 [ 992.308877][T18505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.315315][T18505] [ 992.315315][T18505] other info that might help us debug this: [ 992.315315][T18505] [ 992.325542][T18505] Chain exists of: [ 992.325542][T18505] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 992.325542][T18505] [ 992.339979][T18505] Possible unsafe locking scenario: [ 992.339979][T18505] [ 992.347427][T18505] CPU0 CPU1 [ 992.352789][T18505] ---- ---- [ 992.358149][T18505] lock(&q->q_usage_counter(io)#24); [ 992.363532][T18505] lock(fs_reclaim); [ 992.370043][T18505] lock(&q->q_usage_counter(io)#24); [ 992.377939][T18505] rlock(&root->kernfs_iattr_rwsem); [ 992.383314][T18505] [ 992.383314][T18505] *** DEADLOCK *** [ 992.383314][T18505] [ 992.391453][T18505] locks held by syz.0.3307/18505: 3, last CPU#0: [ 992.397778][T18505] #0: ffff888027a93430 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x1488/0x2010 [ 992.406839][T18505] #1: ffff88802760f020 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x19c9/0x2010 [ 992.417029][T18505] #2: ffff88802760f058 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: lo_ioctl+0x19c9/0x2010 [ 992.427391][T18505] [ 992.427391][T18505] stack backtrace: [ 992.433286][T18505] CPU: 0 UID: 0 PID: 18505 Comm: syz.0.3307 Tainted: G L syzkaller #0 PREEMPT(full) [ 992.444757][T18505] Tainted: [L]=SOFTLOCKUP [ 992.449087][T18505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 992.459146][T18505] Call Trace: [ 992.462435][T18505] [ 992.465368][T18505] dump_stack_lvl+0xe8/0x150 [ 992.469988][T18505] print_circular_bug+0x2e2/0x300 [ 992.475026][T18505] check_noncircular+0x12f/0x150 [ 992.479970][T18505] __lock_acquire+0x164c/0x2de0 [ 992.484826][T18505] ? tomoyo_path_perm+0x251/0x560 [ 992.489862][T18505] ? lockdep_hardirqs_on+0x7b/0x110 [ 992.495088][T18505] lock_acquire+0x115/0x350 [ 992.499590][T18505] ? kernfs_iop_getattr+0x9e/0x450 [ 992.504725][T18505] down_read+0x45/0x320 [ 992.508892][T18505] ? kernfs_iop_getattr+0x9e/0x450 [ 992.514027][T18505] kernfs_iop_getattr+0x9e/0x450 [ 992.518982][T18505] vfs_getattr_nosec+0x305/0x460 [ 992.523930][T18505] loop_assign_backing_file+0x282/0x610 [ 992.529516][T18505] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 992.535607][T18505] lo_ioctl+0x1a3f/0x2010 [ 992.539954][T18505] ? __pfx_lo_ioctl+0x10/0x10 [ 992.544637][T18505] ? lock_acquire+0x115/0x350 [ 992.549318][T18505] ? is_bpf_text_address+0x26/0x2b0 [ 992.554525][T18505] ? is_bpf_text_address+0x292/0x2b0 [ 992.559916][T18505] ? is_bpf_text_address+0x26/0x2b0 [ 992.565129][T18505] ? kernel_text_address+0xa5/0xe0 [ 992.570258][T18505] ? __lock_acquire+0x747/0x2de0 [ 992.575201][T18505] ? __lock_acquire+0x747/0x2de0 [ 992.580145][T18505] ? __lock_acquire+0x747/0x2de0 [ 992.585085][T18505] ? __lock_acquire+0x747/0x2de0 [ 992.590044][T18505] ? __lock_acquire+0x747/0x2de0 [ 992.594988][T18505] ? lock_acquire+0x115/0x350 [ 992.599670][T18505] ? lock_acquire+0x115/0x350 [ 992.604352][T18505] ? is_bpf_text_address+0x26/0x2b0 [ 992.609557][T18505] ? is_bpf_text_address+0x292/0x2b0 [ 992.614888][T18505] ? is_bpf_text_address+0x26/0x2b0 [ 992.620093][T18505] ? kernel_text_address+0xa5/0xe0 [ 992.625208][T18505] ? __kernel_text_address+0xd/0x30 [ 992.630409][T18505] ? unwind_get_return_address+0x4d/0x90 [ 992.636061][T18505] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 992.642216][T18505] ? arch_stack_walk+0xfb/0x150 [ 992.647077][T18505] ? stack_trace_save+0xa9/0x100 [ 992.652019][T18505] ? __pfx_stack_trace_save+0x10/0x10 [ 992.657394][T18505] ? kasan_save_track+0x4f/0x80 [ 992.662249][T18505] ? stack_depot_save_flags+0x33/0x7f0 [ 992.667717][T18505] ? __lock_acquire+0x747/0x2de0 [ 992.672676][T18505] ? kasan_save_track+0x4f/0x80 [ 992.677528][T18505] ? kasan_save_track+0x3e/0x80 [ 992.682377][T18505] ? kasan_save_free_info+0x40/0x50 [ 992.687603][T18505] ? __kasan_slab_free+0x5c/0x80 [ 992.692545][T18505] ? kfree+0x1c5/0x650 [ 992.696645][T18505] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 992.702289][T18505] ? security_file_ioctl+0xc3/0x2a0 [ 992.707493][T18505] ? __se_sys_ioctl+0x47/0x170 [ 992.712260][T18505] ? do_syscall_64+0x166/0x520 [ 992.717029][T18505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.723123][T18505] ? __asan_memset+0x22/0x50 [ 992.727721][T18505] ? blk_get_meta_cap+0x19d/0x780 [ 992.732855][T18505] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 992.738237][T18505] ? blkdev_common_ioctl+0x14b7/0x3250 [ 992.743708][T18505] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 992.749351][T18505] ? kasan_quarantine_put+0xbb/0x1f0 [ 992.754645][T18505] ? tomoyo_path_number_perm+0x219/0x5f0 [ 992.760300][T18505] ? tomoyo_path_number_perm+0x219/0x5f0 [ 992.766031][T18505] ? do_vfs_ioctl+0x116f/0x1530 [ 992.770893][T18505] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 992.775927][T18505] ? __set_task_blocked+0x233/0x320 [ 992.781133][T18505] ? __pfx_lo_ioctl+0x10/0x10 [ 992.785818][T18505] blkdev_ioctl+0x5e3/0x740 [ 992.790336][T18505] ? __pfx_blkdev_ioctl+0x10/0x10 [ 992.795372][T18505] ? bpf_lsm_file_ioctl+0x9/0x20 [ 992.800316][T18505] ? __pfx_blkdev_ioctl+0x10/0x10 [ 992.805350][T18505] __se_sys_ioctl+0xfc/0x170 [ 992.809945][T18505] do_syscall_64+0x166/0x520 [ 992.814543][T18505] ? trace_irq_disable+0x3b/0x140 [ 992.819584][T18505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.825655][T18505] ? clear_bhb_loop+0x70/0xc0 [ 992.830335][T18505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.836231][T18505] RIP: 0033:0x7f525079e559 [ 992.840656][T18505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.860258][T18505] RSP: 002b:00007f5251632028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 992.868674][T18505] RAX: ffffffffffffffda RBX: 00007f5250a26090 RCX: 00007f525079e559 [ 992.876646][T18505] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 992.884620][T18505] RBP: 00007f5250835ad8 R08: 0000000000000000 R09: 0000000000000000 [ 992.892593][T18505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.900564][T18505] R13: 00007f5250a26128 R14: 00007f5250a26090 R15: 00007fffe4c6be98 [ 992.908549][T18505] [ 993.066663][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.230720][T18505] Dev loop7: unable to read RDB block 8 [ 993.230751][T18505] loop7: unable to read partition table [ 993.230876][T18505] loop7: partition table beyond EOD, truncated [ 993.230896][T18505] loop_reread_partitions: partition scan of loop7 (Cj̖4FLQk5) failed (rc=-5)