last executing test programs: 1m55.277285632s ago: executing program 0 (id=922): ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@arm64={0x7, 0x92, 0x9, '\x00', 0x7}) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = memfd_secret(0x80000) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000280)={0x0, 0x8, 0x46, {0x46, 0xf, "af97d4491d9cac23d0b4758d8b6d179d263291a33f74cae07e3860770dfa07bcbac47e8e9918b73bddde1a06f15c45ff052c7a7eba2859b82ccce77d42b7b98e8a6e709e"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x4, 0x6, 0x82, "6d97312c", "cb3dc388"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x3, 0x8, 0x26, 0x7e, 0x5, 0x1}}}, &(0x7f0000000840)={0x84, 0x0, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8d}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0xe0, 0x2}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x475}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000580)={0x40, 0xb, 0x2, "5dbb"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xb9a9}, &(0x7f0000000600)={0x40, 0x13, 0x6, @local}, &(0x7f0000000640)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x19, 0x2, "8ea7"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x7f}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x45}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0xf}}) ftruncate(r1, 0x3) migrate_pages(0x0, 0x8, &(0x7f0000000040)=0x1, &(0x7f0000000100)=0x2) socket$nl_generic(0x10, 0x3, 0x10) 1m54.739523177s ago: executing program 0 (id=923): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/183, 0xb7}, {0x0}, {&(0x7f0000001740)=""/4067, 0xfe3}, {&(0x7f0000000000)=""/141, 0x8d}, {&(0x7f0000000680)=""/250, 0xfa}], 0x5}, 0xe68e}], 0x4, 0x10100, 0x0) 1m54.689236247s ago: executing program 0 (id=924): r0 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x8000, 0x1, 0x50323234, 0x3, 0x8, [{0x3, 0x10001}, {0x54, 0x8}, {0x6, 0x7}, {0x2, 0x3}, {0x11, 0x5}, {0x2, 0x10000}, {0x5, 0x400}, {0xc, 0x3000000}], 0xd, 0x7, 0x8, 0x1, 0x7}}) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001400000008000a"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000002540)='vegas\x00', 0x6) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f00000006c0)='./file0\x00', &(0x7f0000001d00), &(0x7f0000003a40)=ANY=[@ANYRES16=r4], 0x1015, 0x3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100)) r7 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x400000000, 0xa4ce4) write$snddsp(r7, &(0x7f0000000200), 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r7, 0x4144, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r9, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000048}, 0x24000c00) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m54.565434732s ago: executing program 0 (id=925): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000400)) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2adc0, 0x1c1}, 0x18) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r4 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1\xbf\x00nh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\xe5\x00\x00\x00', 0x0) r5 = dup(r4) finit_module(r5, 0x0, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="190c0941e4f53c8772613a9c6be22955db5d", 0x12}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008094) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x2, 0x1, {}, {0x0}, 0x9, 0x6}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2004001, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2cd266646e6f3d", @ANYRESHEX=r2, @ANYBLOB="2c667363616368652c6163636573733d636c69656e742c616e616d653d2af95d2e982d2c2d002c756e616d653d452c76657273696f6e3d3970323030302e4c2c76657273696f6e3d3970323030302e752c6163636573733d", @ANYRESDEC=r7, @ANYBLOB=',cache=loose,nodevmap,permit_directio,euid=', @ANYRESDEC=r8, @ANYBLOB=',euid>', @ANYRESDEC=r9, @ANYBLOB=',smackfsfloor=syz3,smackfsfloor=,\x00']) write$binfmt_register(r3, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) 1m54.511937936s ago: executing program 0 (id=926): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000100), 0x10000, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0585604, &(0x7f0000000080)={0x2, 0x0, "3127608efb75b4c827912445aead8b49f0a87e73a02eec2f"}) r2 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x1e, 0x5, 0xd}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x9, 0x4, 0x9}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x2, 0xf8, 0x2, 0x8, 0xb}, 0xb0, &(0x7f0000000200)={0x5, 0xf, 0xb0, 0x4, [@generic={0x85, 0x10, 0xa, "3be91701328f90e43dcf1d104069693ac4900bb854fc2e50c25ed26b39f4168295097131c15e666bc9cffb6f7527aec3229606fd972b793f60c7444235c41af47b0e162eb770d152994bfcecd21f82412f49c8ad7c1200773c5a110afdf556706a5be492d0c7cebf2721a90fb4fc1a7de423b71a42b053067685872a7dc5036838a3"}, @wireless={0xb, 0x10, 0x1, 0xe, 0x40, 0x7, 0x80, 0x699b, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "6d2bc7d673098594aef4e706d861aebf"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0xa, 0x3}]}, 0x8, [{0xa7, &(0x7f00000002c0)=@string={0xa7, 0x3, "873a5e47252e80fcc26ab37b87f012396f0f545b6f4e299a03fa48b5764ea7afac4379706496cebed7e3208e09c4c90cd2210ceb9615a204c84dd9f16067d1340f19ffce721a6534a2622b94479a60edfde44fc4507d3a7047535e90f46969b25f60e914a2c41bce0a65bebe5a924b04042b60fb930be9a05da537518ceffbd688208aecd671b42b30b77f7a50c06817e6806b8fbd6c80f9c76db6b639344d66a4a1d05d20"}}, {0x45, &(0x7f0000000140)=@string={0x45, 0x3, "1f1a29e53c40ee37a6b5fa5364f06bdcb980e6a369f9e3cf7d1431b8778e4942b58cee6af1580cb9b22f1fb2138582e24e007a1bf74e51552bfaa9ffec50fa56a6dd86"}}, {0xfe, &(0x7f0000000380)=ANY=[@ANYBLOB="fe03481fff5f521cf8d6028b1ee15aa674fe82c55fc934e476341f85f16f3d0477a0d6154153b7e49527ae055dbf591d9737fb9c0ba0be49660f9f30c693966d149987bb1e118bf6535f8e15d0dc8a84a11c43e1addbcd88d5b29d6fa0038b06b7d4d1db0de918e09ba8dc7e9b66ea51b6a80838ed247c5f743c41f0e0d99809af6f4211ef39faa871937e9494109dcbb01b290ac7dffbe198a750d2b7704c4aa8ddee1f46391484c2f22a754dec345fb8dcf5207630d94d3f32e4921de0302564b5dacb5c139537fc6af85f09f84e455050c28b5efaaf2f6c1776f5cff5508cca828b3f9926f74a4f8428d4887157415c223a7ffccce5"]}, {0xbc, &(0x7f0000000480)=@string={0xbc, 0x3, "02a832702f8616cec05a0f152a814979b428bff8ad78248dfa6f727a45e9e69141a1a7cb307f214cf3c2fe34408859ad740e0e1fa74d79205d3382e83707a6c92ab3860f0eea103d83a9b55a428a551a72e869dde8f12bf8b4d37dffd14e9c8c7d01b6c719c26ad3d531d2d4b499bf3f0f3022327df0505bbd391f7108f2d517ecd2f7d6397a50ac0280a39aca0624e9856a503d2fd86e4625327e43be717e659fa180a6b36eb5e476e3b84063b3cdb669d285e267b0dd80514b"}}, {0xb7, &(0x7f0000000540)=@string={0xb7, 0x3, "b0ef0ec5123db1992924497f062543b6f291457c3282f44033c03f8a1b6d2783006f23bf048c592ff0ad67c3af879e2b42a09680bccbc241f5b242bf1377b8b2676ba93f182fc4c155eaa735b2051aeb39b531d20652e4d48e58edda83f4516a70801f6923125c9de401467a5616e33fccb60f55d35f43bfc9640180b0682698951360a32ec0322dcf5b6f5ead9de08558fcf4245d86fb5fe567e36030ca84ea549d3a7248bcfae0c82e83d2b4d7a6464c1f51dccb"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x447}}, {0x1f, &(0x7f0000000a40)=ANY=[@ANYBLOB="1f035083da171218fe601bf8798e0529d1b3f873f0dcc8133908dfb751208060d4fc837de999eba2cad3251110c501f566fd52b637dd15470595f76cea5aeee4d16d973ef22c868e8ea51298535ac73310c9c8b0c59b4c4343cf69a11f788dc8119f2fad1f166ba8b401bf31723f0e840a405e36a9a7472dab7979619b6a1a8045e7c8c4bc4e8473e90bc6941920b43df30c303a8d43e6e39358ebbb3431de6afcbf22792d453951d324a358f7eba2d3df81e4b5d9315e78e2c003e08697c26ec95d"]}]}) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x8, 0x0, &(0x7f0000002140)=0xfccf) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="140100002e0001000000000000000000070100800c0000000800000000000000140001"], 0x114}], 0x1}, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000000800)={0x14, &(0x7f0000000740)={0x0, 0x5, 0x71, {0x71, 0x2, "474d7c4e2f8821525417e743461a879f927620f536000362243a63bb1c57c12e8b75b063f35aa261116dfb659a80f8e3711f153b32648344b07984c4debb019504345dd03d7558fb7447be911f457b155706cd0774a02f15f97cd49839aadddcb8957377e7a1b77560d70fff454cd0"}}, &(0x7f00000007c0)={0x0, 0x3, 0x28, @string={0x28, 0x3, "b799ae59b50070bbf1bc62cf8918b86862ac60706041298582fbb6c28604a66029c54a09fd28"}}}, &(0x7f0000000a00)={0x34, &(0x7f0000000840)={0x0, 0x6, 0x1e, "4e583b444b70f1155ba426958d0c122da5c1f3765a4ccd6409c6f96af634"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000900)={0x20, 0x0, 0x60, {0x5e, "cddcea4b56fbe09831d9ada463702b2790337531e3043080356953853a0781a030de0d99922355c45df912940e8164cd5f7becd0d9f6e05764ed0bc3fd149510995bf68427eb9bdd065996cfb5a99ee6875bc09c44ac6caef16eae01834b"}}, &(0x7f0000000980)={0x20, 0x1, 0x1, 0x8}, &(0x7f00000009c0)={0x20, 0x0, 0x1, 0xc}}) syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x107082) 1m54.249728628s ago: executing program 0 (id=927): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000100)={0x1, 0x2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = fsmount(0xffffffffffffffff, 0x0, 0x9) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x8181, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {r0}}, './file0\x00'}) splice(r6, &(0x7f00000001c0)=0x5, r7, &(0x7f0000000240)=0x2, 0x6, 0x0) bind$bt_sco(r8, &(0x7f0000000300)={0x1f, @none}, 0x8) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f0000000040)=0x6) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ffffffff0c000000180001801400020076657468315f746f5f62616f616476001c000380180003801400018005000200000000000800010004000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) r10 = syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r11, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$EXT4_IOC_SETFSUUID(r10, 0x4008662c, &(0x7f00000000c0)={0x0, 0x0, "0002dc1acdfa2937704735e2b1169b79"}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a0200000000000009"]) 1m53.923330426s ago: executing program 32 (id=927): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000100)={0x1, 0x2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = fsmount(0xffffffffffffffff, 0x0, 0x9) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x8181, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {r0}}, './file0\x00'}) splice(r6, &(0x7f00000001c0)=0x5, r7, &(0x7f0000000240)=0x2, 0x6, 0x0) bind$bt_sco(r8, &(0x7f0000000300)={0x1f, @none}, 0x8) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f0000000040)=0x6) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ffffffff0c000000180001801400020076657468315f746f5f62616f616476001c000380180003801400018005000200000000000800010004000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) r10 = syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r11, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$EXT4_IOC_SETFSUUID(r10, 0x4008662c, &(0x7f00000000c0)={0x0, 0x0, "0002dc1acdfa2937704735e2b1169b79"}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a0200000000000009"]) 4.37823895s ago: executing program 3 (id=1574): syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"2996acbf16803bb01c4b856180c82669", 0x0, 0x0, {0x1, 0x3}, {0x0, 0x400}, 0x8, [0x1, 0x7, 0x40, 0x2, 0xd1, 0x2, 0x1, 0x7, 0x10000, 0x5, 0x401, 0x100, 0x0, 0x9, 0xf, 0x6]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000003a40)=ANY=[], 0x1015, 0x3) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x1) fchdir(r1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f0000000200)='m', 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (fail_nth: 16) 3.725615105s ago: executing program 3 (id=1578): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000d80)=""/255, 0xff}, {&(0x7f0000001740)=""/4067, 0xfe3}, {&(0x7f0000000680)=""/250, 0xfa}], 0x3}, 0xe68e}], 0x4, 0x10100, 0x0) 3.564701248s ago: executing program 3 (id=1581): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32], 0x4) 3.420345193s ago: executing program 3 (id=1584): ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@arm64={0x7, 0x92, 0x9, '\x00', 0x7}) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = memfd_secret(0x80000) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000280)={0x0, 0x8, 0x46, {0x46, 0xf, "af97d4491d9cac23d0b4758d8b6d179d263291a33f74cae07e3860770dfa07bcbac47e8e9918b73bddde1a06f15c45ff052c7a7eba2859b82ccce77d42b7b98e8a6e709e"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x4, 0x6, 0x82, "6d97312c", "cb3dc388"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x3, 0x8, 0x26, 0x7e, 0x5, 0x1}}}, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x20, 0x12, 0xe, "3f4247997acfed61dc6e2a6f7b56"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8d}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0xe0, 0x2}}, 0x0, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000580)={0x40, 0xb, 0x2, "5dbb"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xb9a9}, &(0x7f0000000600)={0x40, 0x13, 0x6, @local}, &(0x7f0000000640)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x19, 0x2, "8ea7"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x7f}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x45}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0xf}}) ftruncate(r1, 0x3) migrate_pages(0x0, 0x8, &(0x7f0000000040)=0x1, &(0x7f0000000100)=0x2) socket$nl_generic(0x10, 0x3, 0x10) 1.917594378s ago: executing program 2 (id=1592): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r1], 0x4) 1.825139428s ago: executing program 2 (id=1593): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2040, 0x0) 1.767301256s ago: executing program 2 (id=1594): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b0001000000000904", @ANYRES16], 0x0) 1.46038866s ago: executing program 1 (id=1597): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x300}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f00000018c0)=""/4104, 0x1008}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000600)=""/244, 0xf4}], 0x5}, 0x80000000}], 0x4, 0x4022, 0x0) 1.385443011s ago: executing program 1 (id=1598): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close_range(r1, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x200000, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x140a, 0xd01, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x9040}, 0xc010) socket$nl_rdma(0x10, 0x3, 0x14) (async) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) socket$inet6(0xa, 0x80002, 0x0) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) mount(0x0, 0x0, 0x0, 0x200000, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x140a, 0xd01, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x9040}, 0xc010) (async) 1.384838501s ago: executing program 1 (id=1599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000314230c2abd7000ffdbdf250900020073797a3100000000080041007369770014003300766972745f77696669300000000000000900020073797a31000000000800410073697700140002"], 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/address_bits', 0x0, 0x0) lseek(r2, 0x7fb, 0x1) unshare(0x22020600) r3 = socket$tipc(0x1e, 0x2, 0x0) fremovexattr(r3, &(0x7f00000000c0)=@known='system.posix_acl_access\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) write(r5, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x110, 0x22, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) poll(&(0x7f0000000080)=[{r7}], 0x1, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt(r2, 0x8, 0xffffff80, &(0x7f0000000700)=""/4096, &(0x7f00000001c0)=0x1000) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xfffffffb}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8b5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="26f9ea06dde2a698408b2f55e973e43ab8b4fdeb3c0e32f7c49c0c6a00bb7e15933b3130da4737856a2ce97309c012ac5678c39a4174a1b3fe39a38b93d4e1724e5902f48bb8e2c6022e60e4261ae86a295ff72797e304894e36c5de9b878384ba06055f789d51015257374d6b8a7dec4cfdbbcacaec62618396f7fb572f30d3e36f0128a04ff53673af4f09c1f18d545c5654631e7322f37669dd905fdd1027f1d770dafd213b3f", @ANYRESOCT=0x0, @ANYBLOB="010086010400000080eb080003c01442180000000000d848c2a039cf687bb15f6b092bc1e27e314949591baee3a69bd6fac47c08257d50ef98b0441d0500bd90c97eff922e22", @ANYRES32=0x0, @ANYRES32=r1], 0x5c}}, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.17458716s ago: executing program 1 (id=1600): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/35, 0x23}, {&(0x7f0000000080)=""/97, 0x61}, {&(0x7f0000000100)=""/147, 0x93}, {&(0x7f00000001c0)=""/70, 0x1b}], 0x4, &(0x7f00000025c0)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000002640)=""/204, 0xc4}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/225, 0xe1}, {&(0x7f0000002480)=""/182, 0xb6}, {&(0x7f0000001280)=""/95, 0x54}], 0x6, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0xfffffffffffffffe) 1.06744474s ago: executing program 1 (id=1601): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r1], 0x4) 961.943898ms ago: executing program 1 (id=1602): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xf5, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb5") 740.416345ms ago: executing program 4 (id=1603): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbc0, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @start={0x0, 0x1}}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 485.383579ms ago: executing program 4 (id=1604): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000880)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x1c, 0xc, 0x6, 0xd39b7709b0eb1560, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/248, 0xf8}], 0x1}, 0xa}], 0x1, 0x40002100, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="58010000100013"], 0x158}, 0x1, 0x0, 0x0, 0x4048010}, 0x24040014) socket(0x2c, 0x5, 0x40) syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) r5 = socket(0x2, 0x3, 0x6) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000400), 0x800042, &(0x7f00000006c0)={[{@uuid_on}, {@redirect_dir_nofollow}, {@redirect_dir_nofollow}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/sequencer2\x00'}}, {@flag='sync'}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x31, 0x65, 0x66, 0x38, 0x66, 0x35, 0x35], 0x2d, [0x61, 0x30, 0x53, 0x66], 0x2d, [0x34, 0x34, 0x36, 0x34], 0x2d, [0x32, 0x64, 0x35, 0x61], 0x2d, [0x62, 0x38, 0x62, 0x31, 0x33, 0x65, 0x38, 0x65]}}}]}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x20040800, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f0000001400)={{0x80, 0x4}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r7, &(0x7f0000000340)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000000)=0x8006) 484.118053ms ago: executing program 2 (id=1605): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000140)) read$FUSE(r3, &(0x7f0000001600)={0x2020}, 0x2020) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xf, @loopback, 0x6}, {0xa, 0x4e20, 0x80, @empty, 0x4}, r4, 0x8}}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) syslog(0x369dd417, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, r7, 0x101, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="b3"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x6c}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48081}, 0x4850) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r4, 0x2}}, 0x18) 361.456861ms ago: executing program 2 (id=1606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x40000000004, 0x9, 0x0, 0x0, 0x4, 0x0, 0x4002004c6, 0x1004, 0xffffffffffffffff, 0x9, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000/0x4000)=nil}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r4 = socket(0x10, 0x803, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41c", 0x25}], 0x2) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0xffff4625, "5660359c3245d1c42317afad7d48ed51000000000000a5bda7c540fd15c900", 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000061401"], 0x40}}, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r8, 0x0) 361.222645ms ago: executing program 4 (id=1607): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'veth0_to_team\x00'}, 0x18) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000900010073797a32000000000900030073797a30000000000900030073797a320000000009004dc87d4f649e177600000900010073797a32000000000900030073797a3200000000050004"], 0x70}}, 0xc800) 333.228529ms ago: executing program 3 (id=1608): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chmod(&(0x7f0000000100)='./file0\x00', 0x38c) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x211002f, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x1, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0xf, 0xcbff, 0x0, {0x8, 0x5, 0x3, 0x4, 0x7, 0x3, 0x1, 0x10, 0x101, 0x2000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0xaa484289a9181863, 0x0) stat(&(0x7f0000000040)='./file0/file0\x00', 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'batadv_slave_1\x00'}) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x200001, 0x0) 245.090679ms ago: executing program 4 (id=1609): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r1 = syz_open_procfs$userns(r0, &(0x7f00000001c0)) fcntl$getown(r1, 0x9) open_by_handle_at(r1, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0xf1, {0x98, 0x8000000}}, 0x424442) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ptype\x00') pread64(r2, &(0x7f0000000140)=""/215, 0xd7, 0x100000076) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) 137.4301ms ago: executing program 4 (id=1610): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r1], 0x4) 137.209579ms ago: executing program 3 (id=1611): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x7f, 0xab, 0x7, 0x7fe, 0x8, 0x40009, 0x6, 0x4, 0x2c, 0x1f}) 135.327152ms ago: executing program 2 (id=1612): write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0014f9f4070009040081000000000140", 0x17) syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000018203010902680002010040000904000001020e0000052406000105240000000d240f010000000000000000000624030000000c241b4800f3ff0005008005094581130202000000090401"], 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000340)='\t^', 0x2}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000003840)={0x2e8, 0x0, 0x2, 0x0, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa7}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT={0xf8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x42}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1000}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x43}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASK={0x20, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_EXPECT_ZONE={0x6}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x20080, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000001c0)=@v2={0x2, @aes128, 0x1, '\x00', @b}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x2, 0xfffffffffffffffd, 0x0, 0x2, 0x4, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0xd10, 0x2, 0xf7, 0x0, 0x7f, 0xc], 0x80a0000, 0x2010d3}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r5, 0x59c0e000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r6, &(0x7f00000036c0)=[{{&(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000740)=""/199, 0xc7}, {&(0x7f0000000680)=""/35, 0x23}, {&(0x7f00000006c0)=""/5, 0x5}, {&(0x7f0000000840)=""/91, 0x5b}, {&(0x7f00000008c0)=""/11, 0xb}, {&(0x7f0000000900)=""/40, 0x28}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/109, 0x6d}], 0x8, &(0x7f0000001a40)=""/152, 0x98}, 0xfffffffa}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001b00)=""/14, 0xe}], 0x1, &(0x7f0000001b80)=""/2, 0x2}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001bc0)=""/6, 0x6}, {&(0x7f0000001c00)=""/226, 0xe2}, {&(0x7f0000001d00)=""/15, 0xf}, {&(0x7f0000001d40)=""/139, 0x8b}], 0x4, &(0x7f0000001e40)=""/10, 0xa}, 0x2}, {{&(0x7f0000001e80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000001f00)=""/101, 0x65}, {&(0x7f0000001f80)=""/161, 0xa1}, {&(0x7f0000002040)=""/93, 0x5d}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/102, 0x66}, {&(0x7f0000003140)=""/200, 0xc8}, {&(0x7f0000003240)=""/165, 0xa5}, {&(0x7f0000003300)=""/233, 0xe9}], 0x8, &(0x7f0000003480)=""/35, 0x23}, 0xa2dc}, {{&(0x7f00000034c0)=@isdn, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003540)=""/69, 0x45}], 0x1, &(0x7f0000003600)=""/157, 0x9d}, 0x4}], 0x5, 0x12202, &(0x7f0000003800)={0x0, 0x3938700}) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') lseek(r8, 0x4, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r8) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 4 (id=1613): r0 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0xf1, {0x1001, 0x8000000}}, 0x400040) kernel console output (not intermixed with test programs): 332.695046][ T9180] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 332.695058][ T9180] R13: 00007f4a483d6128 R14: 00007f4a483d6090 R15: 00007ffd65fcfb48 [ 332.695091][ T9180] [ 332.698258][ T6122] usb 5-1: Using ep0 maxpacket: 16 [ 332.844299][ T5871] Bluetooth: hci0: command 0x0401 tx timeout [ 332.854224][ T6122] usb 5-1: config 0 has no interfaces? [ 333.182066][ T6122] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 333.207639][ T6122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.215818][ T6122] usb 5-1: Product: syz [ 333.230105][ T6122] usb 5-1: Manufacturer: syz [ 333.234760][ T6122] usb 5-1: SerialNumber: syz [ 333.251560][ T6122] usb 5-1: config 0 descriptor?? [ 333.495669][ T9176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.508750][ T9176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.527250][ T5959] usb 5-1: USB disconnect, device number 9 [ 333.867567][ T6122] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 334.027929][ T6122] usb 2-1: Using ep0 maxpacket: 16 [ 334.034842][ T6122] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.045135][ T6122] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.056742][ T6122] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 334.065979][ T6122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.074953][ T6122] usb 2-1: Product: syz [ 334.081589][ T6122] usb 2-1: Manufacturer: syz [ 334.086246][ T6122] usb 2-1: SerialNumber: syz [ 334.183517][ T5959] usb 4-1: USB disconnect, device number 96 [ 334.349770][ T6122] usb 2-1: 0:2 : does not exist [ 334.390461][ T6122] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 334.469461][ T6122] usb 2-1: USB disconnect, device number 104 [ 334.532668][ T5865] udevd[5865]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.769454][ T6114] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 334.819493][ T6112] hid_parser_main: 6 callbacks suppressed [ 334.819519][ T6112] hid-generic 00A0:0008:0003.003D: unknown main item tag 0x2 [ 334.834752][ T6112] hid-generic 00A0:0008:0003.003D: unknown main item tag 0x2 [ 334.843675][ T6112] hid-generic 00A0:0008:0003.003D: unknown main item tag 0x0 [ 334.852794][ T6112] hid-generic 00A0:0008:0003.003D: unknown main item tag 0x0 [ 334.867201][ T6112] hid-generic 00A0:0008:0003.003D: unknown main item tag 0x0 [ 334.884879][ T6112] hid-generic 00A0:0008:0003.003D: unknown main item tag 0x0 [ 334.898750][ T6112] hid-generic 00A0:0008:0003.003D: unknown main item tag 0x0 [ 334.916515][ T6112] hid-generic 00A0:0008:0003.003D: unknown main item tag 0x0 [ 334.924320][ T6112] hid-generic 00A0:0008:0003.003D: unknown main item tag 0x0 [ 334.933751][ T6112] hid-generic 00A0:0008:0003.003D: unknown main item tag 0x0 [ 334.945696][ T6114] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.960370][ T6112] hid-generic 00A0:0008:0003.003D: hidraw0: HID v0.05 Device [syz1] on syz0 [ 334.970240][ T6114] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.983140][ T6114] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 334.993134][ T6114] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.004918][ T6114] usb 3-1: config 0 descriptor?? [ 335.357910][ T6112] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 335.548079][ T6112] usb 2-1: Using ep0 maxpacket: 16 [ 335.555281][ T6112] usb 2-1: config 0 has no interfaces? [ 335.564523][ T6112] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 335.573985][ T6112] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.582660][ T6112] usb 2-1: Product: syz [ 335.587197][ T6112] usb 2-1: Manufacturer: syz [ 335.591883][ T6112] usb 2-1: SerialNumber: syz [ 335.601077][ T6112] usb 2-1: config 0 descriptor?? [ 335.657112][ T5855] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 335.817996][ T5855] usb 5-1: Using ep0 maxpacket: 8 [ 335.826336][ T5855] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 11 [ 335.827516][ T9215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.838423][ T5855] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 335.849175][ T9215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.858577][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.879161][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.886019][ T6112] usb 2-1: USB disconnect, device number 105 [ 335.889169][ T5855] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 335.909215][ T5855] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 335.918372][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.930759][ T5855] usb 5-1: config 0 descriptor?? [ 336.027744][ T6114] uclogic 0003:256C:006D.003E: failed retrieving string descriptor #100: -71 [ 336.038698][ T6114] uclogic 0003:256C:006D.003E: failed retrieving pen parameters: -71 [ 336.048052][ T6114] uclogic 0003:256C:006D.003E: failed probing pen v1 parameters: -71 [ 336.056197][ T6114] uclogic 0003:256C:006D.003E: failed probing parameters: -71 [ 336.063929][ T6114] uclogic 0003:256C:006D.003E: probe with driver uclogic failed with error -71 [ 336.078254][ T6114] usb 3-1: USB disconnect, device number 107 [ 336.098185][ T5959] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 336.259084][ T5959] usb 4-1: config 0 has no interfaces? [ 336.264832][ T5959] usb 4-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 336.274949][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.286111][ T5959] usb 4-1: config 0 descriptor?? [ 336.366239][ T5855] acrux 0003:1A34:0802.003F: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 336.378833][ T5855] acrux 0003:1A34:0802.003F: no inputs found [ 336.384867][ T5855] acrux 0003:1A34:0802.003F: Failed to enable force feedback support, error: -19 [ 336.499995][ T9225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.512118][ T9225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.525063][ T5855] usb 4-1: USB disconnect, device number 97 [ 336.826164][ T6114] hid-generic 00A0:0008:0003.0040: hidraw1: HID v0.05 Device [syz1] on syz0 [ 337.178257][ T9253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.198948][ T9253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.217340][ T5855] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 337.226845][ T5871] Bluetooth: hci0: Malformed LE Event: 0x0d [ 337.303068][ T9257] netlink: 'syz.1.1085': attribute type 1 has an invalid length. [ 337.311078][ T9257] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1085'. [ 337.366479][ T5855] usb 3-1: device descriptor read/64, error -71 [ 337.446353][ T6114] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 337.556338][ T6113] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 337.597240][ T6114] usb 4-1: no configurations [ 337.601989][ T6114] usb 4-1: can't read configurations, error -22 [ 337.606348][ T5855] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 337.627846][ T5959] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 337.708629][ T6113] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.719087][ T6113] usb 2-1: config 0 interface 0 has no altsetting 0 [ 337.728751][ T6113] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 337.738443][ T6114] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 337.746371][ T6113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.754572][ T6113] usb 2-1: Product: syz [ 337.756329][ T5855] usb 3-1: device descriptor read/64, error -71 [ 337.760695][ T6113] usb 2-1: Manufacturer: syz [ 337.771692][ T6113] usb 2-1: SerialNumber: syz [ 337.779951][ T6113] usb 2-1: config 0 descriptor?? [ 337.798675][ T6113] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 337.820155][ T6113] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 337.835236][ T9259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.844875][ T6113] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 337.846836][ T9259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.854889][ T6113] usb 2-1: media controller created [ 337.886796][ T5855] usb usb3-port1: attempt power cycle [ 337.890472][ T6113] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.926962][ T6114] usb 4-1: no configurations [ 337.931632][ T6114] usb 4-1: can't read configurations, error -22 [ 337.939405][ T6114] usb usb4-port1: attempt power cycle [ 337.953845][ T6113] DVB: Unable to find symbol tda10046_attach() [ 337.960315][ T6113] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 337.971000][ T6113] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 337.988560][ T6113] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 338.008836][ T6113] usb 2-1: USB disconnect, device number 106 [ 338.226208][ T5855] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 338.246842][ T5855] usb 3-1: device descriptor read/8, error -71 [ 338.286128][ T6114] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 338.307814][ T6114] usb 4-1: no configurations [ 338.312478][ T6114] usb 4-1: can't read configurations, error -22 [ 338.446351][ T6114] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 338.467316][ T6114] usb 4-1: no configurations [ 338.471982][ T6114] usb 4-1: can't read configurations, error -22 [ 338.479970][ T6114] usb usb4-port1: unable to enumerate USB device [ 338.486097][ T5855] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 338.506806][ T5855] usb 3-1: device descriptor read/8, error -71 [ 338.616642][ T5855] usb usb3-port1: unable to enumerate USB device [ 338.888194][ T6120] libceph: connect (1)[c::]:6789 error -101 [ 338.894355][ T6120] libceph: mon0 (1)[c::]:6789 connect error [ 338.933149][ T9272] ceph: No mds server is up or the cluster is laggy [ 339.009723][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.018756][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.187396][ T6120] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 339.357475][ T6120] usb 2-1: Using ep0 maxpacket: 32 [ 339.367396][ T6120] usb 2-1: config index 0 descriptor too short (expected 8242, got 50) [ 339.377893][ T6120] usb 2-1: config 0 has an invalid interface number: 234 but max is 0 [ 339.386585][ T6120] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.397232][ T6120] usb 2-1: config 0 has no interface number 0 [ 339.403497][ T6120] usb 2-1: config 0 interface 234 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 339.415094][ T6120] usb 2-1: config 0 interface 234 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 339.425407][ T6120] usb 2-1: config 0 interface 234 has no altsetting 0 [ 339.435597][ T6120] usb 2-1: New USB device found, idVendor=0781, idProduct=0200, bcdDevice=3c.a2 [ 339.445773][ T6120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.455348][ T6120] usb 2-1: Product: syz [ 339.459848][ T6120] usb 2-1: Manufacturer: syz [ 339.464645][ T6120] usb 2-1: SerialNumber: syz [ 339.477879][ T6120] usb 2-1: config 0 descriptor?? [ 339.713031][ T6120] ums-sddr09 2-1:0.234: USB Mass Storage device detected [ 339.774130][ T6114] hid-generic 00A0:0008:0003.0041: hidraw1: HID v0.05 Device [syz1] on syz0 [ 339.807767][ T6120] ums-sddr09 2-1:0.234: probe with driver ums-sddr09 failed with error -22 [ 339.842796][ T6120] usb 2-1: USB disconnect, device number 107 [ 340.416206][ T9297] netlink: 'syz.4.1098': attribute type 1 has an invalid length. [ 340.424248][ T9297] netlink: 'syz.4.1098': attribute type 101 has an invalid length. [ 340.433919][ T9297] netlink: 552 bytes leftover after parsing attributes in process `syz.4.1098'. [ 340.444115][ T5855] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 340.475524][ T6120] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 340.618786][ T9301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.628435][ T9301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.635717][ T5855] usb 3-1: Using ep0 maxpacket: 16 [ 340.643689][ T5855] usb 3-1: config 0 has no interfaces? [ 340.651094][ T6120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.662891][ T6120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.674120][ T6120] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 340.684625][ T6120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.693000][ T5855] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 340.703801][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.713635][ T6120] usb 2-1: config 0 descriptor?? [ 340.719019][ T5855] usb 3-1: Product: syz [ 340.723349][ T5855] usb 3-1: Manufacturer: syz [ 340.731355][ T5855] usb 3-1: SerialNumber: syz [ 340.739844][ T5855] usb 3-1: config 0 descriptor?? [ 340.951967][ T5871] Bluetooth: hci3: Malformed LE Event: 0x0d [ 340.958077][ T5855] usb 3-1: USB disconnect, device number 112 [ 341.264564][ T9305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.276545][ T9305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.352171][ T6113] hid_parser_main: 81 callbacks suppressed [ 341.352196][ T6113] hid-generic 00A0:0008:0003.0043: unknown main item tag 0x2 [ 341.366086][ T6113] hid-generic 00A0:0008:0003.0043: unknown main item tag 0x2 [ 341.373609][ T6113] hid-generic 00A0:0008:0003.0043: unknown main item tag 0x0 [ 341.381302][ T6113] hid-generic 00A0:0008:0003.0043: unknown main item tag 0x0 [ 341.389317][ T6113] hid-generic 00A0:0008:0003.0043: unknown main item tag 0x0 [ 341.396858][ T6113] hid-generic 00A0:0008:0003.0043: unknown main item tag 0x0 [ 341.404286][ T6113] hid-generic 00A0:0008:0003.0043: unknown main item tag 0x0 [ 341.412547][ T6113] hid-generic 00A0:0008:0003.0043: unknown main item tag 0x0 [ 341.420115][ T6113] hid-generic 00A0:0008:0003.0043: unknown main item tag 0x0 [ 341.427691][ T6113] hid-generic 00A0:0008:0003.0043: unknown main item tag 0x0 [ 341.437914][ T6113] hid-generic 00A0:0008:0003.0043: hidraw1: HID v0.05 Device [syz1] on syz0 [ 341.499475][ T9310] fido_id[9310]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 341.747402][ T6120] uclogic 0003:256C:006D.0042: failed retrieving string descriptor #100: -71 [ 341.756541][ T6120] uclogic 0003:256C:006D.0042: failed retrieving pen parameters: -71 [ 341.764674][ T6120] uclogic 0003:256C:006D.0042: failed probing pen v1 parameters: -71 [ 341.773757][ T6120] uclogic 0003:256C:006D.0042: failed probing parameters: -71 [ 341.781733][ T6120] uclogic 0003:256C:006D.0042: probe with driver uclogic failed with error -71 [ 341.795365][ T6113] usb 3-1: new low-speed USB device number 113 using dummy_hcd [ 341.809333][ T6120] usb 2-1: USB disconnect, device number 108 [ 341.845153][ T5855] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 341.956775][ T6113] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.005177][ T5855] usb 4-1: Using ep0 maxpacket: 8 [ 342.013059][ T5855] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 342.021580][ T5855] usb 4-1: config 179 has no interface number 0 [ 342.028163][ T5855] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 342.039879][ T5855] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 342.051313][ T5855] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 342.062782][ T5855] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 342.074294][ T5855] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 342.087637][ T5855] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 342.096863][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.111069][ T9314] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 342.308848][ T9316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.321905][ T9316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.343545][ T5871] Bluetooth: hci0: Malformed LE Event: 0x0d [ 342.364021][ T5855] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input39 [ 342.558276][ T6114] usb 4-1: USB disconnect, device number 102 [ 342.558313][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 342.573872][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 342.804811][ T5959] usb 5-1: device descriptor read/64, error -110 [ 343.002385][ T9329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.012407][ T9329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.054707][ T5959] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 343.194614][ T5959] usb 5-1: device descriptor read/64, error -32 [ 343.344564][ T6120] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 343.434617][ T5959] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 343.472556][ T5959] usb 5-1: device descriptor read/8, error -32 [ 343.497203][ T6120] usb 4-1: unable to get BOS descriptor or descriptor too short [ 343.506205][ T6120] usb 4-1: config 1 interface 0 altsetting 155 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.519973][ T6120] usb 4-1: config 1 interface 0 has no altsetting 0 [ 343.538574][ T6120] usb 4-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 343.548743][ T6120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.564755][ T6120] usb 4-1: Product: syz [ 343.568982][ T6120] usb 4-1: Manufacturer: syz [ 343.573603][ T6120] usb 4-1: SerialNumber: syz [ 343.582973][ T9335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.605103][ T9335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.704500][ T5855] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 343.715662][ T5959] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 343.744819][ T5959] usb 5-1: device descriptor read/8, error -32 [ 343.807016][ T9331] program syz.3.1113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.824711][ T6120] usbhid 4-1:1.0: can't add hid device: -22 [ 343.830818][ T6120] usbhid 4-1:1.0: probe with driver usbhid failed with error -22 [ 343.841608][ T6120] usb 4-1: USB disconnect, device number 103 [ 343.855166][ T5959] raw-gadget.2 gadget.4: failed to queue suspend event [ 343.869149][ T24] usb 5-1: USB disconnect, device number 10 [ 343.889211][ T5855] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 343.899799][ T24] raw-gadget.2 gadget.4: failed to queue reset event [ 343.907616][ T5855] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 343.919849][ T5855] usb 2-1: config 220 has no interface number 2 [ 343.928667][ T5855] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 343.942101][ T5855] usb 2-1: config 220 interface 0 has no altsetting 0 [ 343.949572][ T5855] usb 2-1: config 220 interface 76 has no altsetting 0 [ 343.957465][ T5855] usb 2-1: config 220 interface 1 has no altsetting 0 [ 343.966829][ T5855] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 343.976047][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.984158][ T5855] usb 2-1: Product: syz [ 343.988709][ T24] raw-gadget.2 gadget.4: failed to queue resume event [ 343.996659][ T5855] usb 2-1: Manufacturer: syz [ 344.001304][ T5855] usb 2-1: SerialNumber: syz [ 344.064402][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 344.072374][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 344.079703][ T24] raw-gadget.2 gadget.4: failed to queue reset event [ 344.154441][ T24] raw-gadget.2 gadget.4: failed to queue resume event [ 344.213492][ T9333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1114'. [ 344.224400][ T24] usb 5-1: device descriptor read/64, error -32 [ 344.232062][ T9333] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 344.250898][ T5855] usb 2-1: selecting invalid altsetting 0 [ 344.264442][ T5855] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 344.272118][ T5855] uvcvideo 2-1:220.0: No valid video chain found. [ 344.288045][ T5855] usb 2-1: selecting invalid altsetting 0 [ 344.294019][ T5855] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 344.305444][ T5855] usb 2-1: USB disconnect, device number 109 [ 344.334398][ T24] raw-gadget.2 gadget.4: failed to queue suspend event [ 344.346849][ T24] raw-gadget.2 gadget.4: failed to queue reset event [ 344.445095][ T24] raw-gadget.2 gadget.4: failed to queue resume event [ 344.514446][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 344.523192][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 344.530704][ T24] raw-gadget.2 gadget.4: failed to queue reset event [ 344.575699][ T6113] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 344.587711][ T6113] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.608168][ T24] raw-gadget.2 gadget.4: failed to queue resume event [ 344.609998][ T6113] usb 3-1: config 0 descriptor?? [ 344.637213][ T6113] usb 3-1: can't set config #0, error -71 [ 344.646550][ T6113] usb 3-1: USB disconnect, device number 113 [ 344.684169][ T6111] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 344.684477][ T24] usb 5-1: device descriptor read/64, error -32 [ 344.804359][ T24] raw-gadget.2 gadget.4: failed to queue suspend event [ 344.817011][ T24] usb usb5-port1: attempt power cycle [ 344.822683][ T24] raw-gadget.2 gadget.4: failed to queue disconnect event [ 344.834157][ T6111] usb 4-1: Using ep0 maxpacket: 32 [ 344.840603][ T24] raw-gadget.2 gadget.4: failed to queue reset event [ 344.860864][ T6111] usb 4-1: unable to get BOS descriptor or descriptor too short [ 344.876211][ T6111] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 344.888374][ T6111] usb 4-1: can't read configurations, error -71 [ 344.914829][ T24] raw-gadget.2 gadget.4: failed to queue resume event [ 344.923275][ T24] raw-gadget.2 gadget.4: failed to queue reset event [ 344.967842][ T9351] binder_alloc: 9349: binder_alloc_buf size 73014444032 failed, no address space [ 344.979451][ T9351] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 345.096926][ T9357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.107386][ T9357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.125978][ T9358] binder: BINDER_SET_CONTEXT_MGR already set [ 345.134673][ T9358] binder: 9354:9358 ioctl 4018620d 200000004a80 returned -16 [ 345.142677][ T24] raw-gadget.2 gadget.4: failed to queue resume event [ 345.206228][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 345.235348][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 345.242612][ T24] usb 5-1: device descriptor read/8, error -32 [ 345.354161][ T24] raw-gadget.2 gadget.4: failed to queue suspend event [ 345.361457][ T24] raw-gadget.2 gadget.4: failed to queue reset event [ 345.435474][ T24] raw-gadget.2 gadget.4: failed to queue resume event [ 345.513998][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 345.521801][ T5855] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 345.557312][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 345.570548][ T24] usb 5-1: device descriptor read/8, error -32 [ 345.683987][ T24] raw-gadget.2 gadget.4: failed to queue suspend event [ 345.691900][ T5855] usb 3-1: Using ep0 maxpacket: 32 [ 345.715431][ T24] usb usb5-port1: unable to enumerate USB device [ 345.725368][ T5855] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 345.733688][ T5855] usb 3-1: config 0 has no interface number 0 [ 345.746617][ T5855] usb 3-1: config 0 interface 184 has no altsetting 0 [ 345.768051][ T5855] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 345.782357][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.795233][ T9375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.814507][ T9375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.923838][ T5855] usb 3-1: Product: syz [ 345.928172][ T5855] usb 3-1: Manufacturer: syz [ 345.932856][ T5855] usb 3-1: SerialNumber: syz [ 345.951491][ T5855] usb 3-1: config 0 descriptor?? [ 345.966997][ T5855] smsc75xx v1.0.0 [ 346.370140][ T5855] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 346.409045][ T5855] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 346.441774][ T5855] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 346.474347][ T5855] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 346.680438][ T9384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.690477][ T9384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.134310][ T6114] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 347.270676][ T9402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.280366][ T9402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.310537][ T6114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.321918][ T6114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.332364][ T6114] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 347.342774][ T6114] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.353989][ T6114] usb 4-1: config 0 descriptor?? [ 347.847607][ T9409] netlink: 'syz.4.1145': attribute type 1 has an invalid length. [ 347.855798][ T9409] netlink: 'syz.4.1145': attribute type 3 has an invalid length. [ 347.864229][ T9409] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1145'. [ 347.940991][ T9411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.954846][ T9411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.371162][ T6113] usb 3-1: USB disconnect, device number 114 [ 348.382144][ T6114] uclogic 0003:256C:006D.0044: failed retrieving string descriptor #100: -71 [ 348.407405][ T6114] uclogic 0003:256C:006D.0044: failed retrieving pen parameters: -71 [ 348.417515][ T6114] uclogic 0003:256C:006D.0044: failed probing pen v1 parameters: -71 [ 348.431634][ T6114] uclogic 0003:256C:006D.0044: failed probing parameters: -71 [ 348.442053][ T6114] uclogic 0003:256C:006D.0044: probe with driver uclogic failed with error -71 [ 348.473208][ T6114] usb 4-1: USB disconnect, device number 106 [ 348.663029][ T5855] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 348.763067][ T6113] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 348.814848][ T5855] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 348.823347][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 348.834960][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 348.846342][ T5855] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 348.859763][ T5855] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 348.870312][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.880628][ T5855] usb 2-1: config 0 descriptor?? [ 348.893789][ T9417] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 348.938144][ T6113] usb 3-1: Using ep0 maxpacket: 32 [ 348.965050][ T6113] usb 3-1: unable to get BOS descriptor or descriptor too short [ 348.991672][ T6113] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 348.999918][ T6113] usb 3-1: can't read configurations, error -71 [ 349.309869][ T5855] plantronics 0003:047F:FFFF.0045: reserved main item tag 0xd [ 349.317602][ T6120] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 349.336500][ T5855] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 349.463026][ T6120] usb 4-1: device descriptor read/64, error -71 [ 349.702822][ T6120] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 349.842642][ T6120] usb 4-1: device descriptor read/64, error -71 [ 349.953135][ T6120] usb usb4-port1: attempt power cycle [ 350.108572][ T9440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.117654][ T9440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.293177][ T6120] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 350.313373][ T6120] usb 4-1: device descriptor read/8, error -71 [ 350.552454][ T6120] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 350.573121][ T6120] usb 4-1: device descriptor read/8, error -71 [ 350.678011][ T9445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.687337][ T6120] usb usb4-port1: unable to enumerate USB device [ 350.694796][ T9445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.279286][ T5871] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 351.410939][ T6113] usb 2-1: USB disconnect, device number 110 [ 351.572149][ T6111] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 351.722082][ T6111] usb 3-1: Using ep0 maxpacket: 32 [ 351.732416][ T6111] usb 3-1: unable to get BOS descriptor or descriptor too short [ 351.741327][ T6111] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 351.749112][ T6111] usb 3-1: can't read configurations, error -71 [ 352.307313][ T9466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.317814][ T9466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.342212][ T9466] capability: warning: `syz.4.1170' uses deprecated v2 capabilities in a way that may be insecure [ 352.347813][ T5871] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 352.355139][ T9466] program syz.4.1170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.378626][ T9466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.390269][ T9466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.404189][ T9466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.413478][ T9466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.495159][ T6113] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 352.661817][ T6113] usb 4-1: Using ep0 maxpacket: 32 [ 352.669215][ T6113] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 352.677740][ T6113] usb 4-1: config 0 has no interface number 0 [ 352.683942][ T6113] usb 4-1: config 0 interface 184 has no altsetting 0 [ 352.693368][ T6113] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 352.702901][ T6113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.710926][ T6113] usb 4-1: Product: syz [ 352.715275][ T6113] usb 4-1: Manufacturer: syz [ 352.719913][ T6113] usb 4-1: SerialNumber: syz [ 352.727888][ T6113] usb 4-1: config 0 descriptor?? [ 352.735634][ T6113] smsc75xx v1.0.0 [ 352.831818][ T6120] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 352.961915][ T6120] usb 2-1: device descriptor read/64, error -71 [ 353.138317][ T6113] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 353.150342][ T6113] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 353.160537][ T6113] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 353.171455][ T6113] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 353.211682][ T6120] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 353.341593][ T6120] usb 2-1: device descriptor read/64, error -71 [ 353.464973][ T6120] usb usb2-port1: attempt power cycle [ 353.812371][ T6120] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 353.843475][ T6120] usb 2-1: device descriptor read/8, error -71 [ 354.091402][ T6113] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 354.111443][ T6120] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 354.132353][ T6120] usb 2-1: device descriptor read/8, error -71 [ 354.241365][ T6113] usb 3-1: Using ep0 maxpacket: 32 [ 354.242649][ T6120] usb usb2-port1: unable to enumerate USB device [ 354.251336][ T6113] usb 3-1: unable to get BOS descriptor or descriptor too short [ 354.267277][ T6113] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 354.275128][ T6113] usb 3-1: can't read configurations, error -71 [ 354.845177][ T9497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.854457][ T9497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.150003][ T6114] usb 4-1: USB disconnect, device number 111 [ 355.621145][ T6114] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 355.803960][ T6114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.816377][ T6114] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 355.827865][ T6114] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.844331][ T6114] usb 4-1: config 0 descriptor?? [ 356.260907][ T6114] keytouch 0003:0926:3333.0046: fixing up Keytouch IEC report descriptor [ 356.275319][ T6114] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0046/input/input42 [ 356.369087][ T6114] keytouch 0003:0926:3333.0046: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 356.394316][ T5855] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 356.560533][ T5855] usb 2-1: Using ep0 maxpacket: 32 [ 356.569386][ T5855] usb 2-1: unable to get BOS descriptor or descriptor too short [ 356.579968][ T5855] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 356.587912][ T5855] usb 2-1: can't read configurations, error -71 [ 356.667531][ T5959] usb 4-1: USB disconnect, device number 112 [ 357.032889][ T6114] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 357.042600][ T9537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.052151][ T9537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.076291][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 357.082761][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 357.121017][ T9537] ceph: No mds server is up or the cluster is laggy [ 357.227612][ T6114] usb 3-1: Using ep0 maxpacket: 32 [ 357.234465][ T6114] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 357.242809][ T6114] usb 3-1: config 0 has no interface number 0 [ 357.249068][ T6114] usb 3-1: config 0 interface 184 has no altsetting 0 [ 357.258217][ T6114] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 357.267403][ T6114] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.275481][ T6114] usb 3-1: Product: syz [ 357.279791][ T6114] usb 3-1: Manufacturer: syz [ 357.284465][ T6114] usb 3-1: SerialNumber: syz [ 357.292033][ T6114] usb 3-1: config 0 descriptor?? [ 357.299565][ T6114] smsc75xx v1.0.0 [ 357.420402][ T5855] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 357.450403][ T5959] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 357.550328][ T5855] usb 2-1: device descriptor read/64, error -71 [ 357.602559][ T5959] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 357.617239][ T5959] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 357.626573][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.634828][ T5959] usb 4-1: Product: syz [ 357.639008][ T5959] usb 4-1: Manufacturer: syz [ 357.643773][ T5959] usb 4-1: SerialNumber: syz [ 357.651317][ T5959] usb 4-1: config 0 descriptor?? [ 357.662028][ T5855] usb usb2-port1: attempt power cycle [ 357.670953][ T5959] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 357.707036][ T6114] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 357.731196][ T6114] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 357.743714][ T6114] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 357.756853][ T6114] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 357.866128][ T6114] usb 4-1: USB disconnect, device number 113 [ 358.030270][ T5855] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 358.051030][ T5855] usb 2-1: device descriptor read/8, error -71 [ 358.290789][ T5855] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 358.310769][ T5855] usb 2-1: device descriptor read/8, error -71 [ 358.430674][ T5855] usb usb2-port1: unable to enumerate USB device [ 358.820642][ T9562] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 358.829209][ T9562] cramfs: wrong magic [ 359.011196][ T9571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.020460][ T9571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.786657][ T6113] usb 3-1: USB disconnect, device number 121 [ 360.551617][ T9609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 360.742515][ T6120] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 360.909425][ T6120] usb 2-1: Using ep0 maxpacket: 32 [ 360.916417][ T6120] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 360.925021][ T6120] usb 2-1: config 0 has no interface number 0 [ 360.931319][ T6120] usb 2-1: config 0 interface 184 has no altsetting 0 [ 360.941331][ T6120] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 360.951203][ T6120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.959298][ T6120] usb 2-1: Product: syz [ 360.963601][ T6120] usb 2-1: Manufacturer: syz [ 360.968302][ T6120] usb 2-1: SerialNumber: syz [ 360.975495][ T6120] usb 2-1: config 0 descriptor?? [ 360.984540][ T6120] smsc75xx v1.0.0 [ 361.069324][ T6113] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 361.219211][ T6113] usb 3-1: Using ep0 maxpacket: 16 [ 361.227619][ T6113] usb 3-1: config 0 has no interfaces? [ 361.236661][ T6113] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 361.246422][ T6113] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.254610][ T6113] usb 3-1: Product: syz [ 361.258811][ T6113] usb 3-1: Manufacturer: syz [ 361.263595][ T6113] usb 3-1: SerialNumber: syz [ 361.274965][ T6113] usb 3-1: config 0 descriptor?? [ 361.386540][ T6120] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 361.397447][ T6120] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 361.407381][ T6120] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 361.418264][ T6120] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 361.652218][ T9625] CUSE: zero length info key specified [ 361.725595][ T9627] FAULT_INJECTION: forcing a failure. [ 361.725595][ T9627] name failslab, interval 1, probability 0, space 0, times 0 [ 361.739296][ T9627] CPU: 1 UID: 0 PID: 9627 Comm: syz.4.1229 Not tainted syzkaller #0 PREEMPT(full) [ 361.739321][ T9627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 361.739333][ T9627] Call Trace: [ 361.739341][ T9627] [ 361.739351][ T9627] dump_stack_lvl+0x189/0x250 [ 361.739378][ T9627] ? __pfx____ratelimit+0x10/0x10 [ 361.739406][ T9627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.739427][ T9627] ? __pfx__printk+0x10/0x10 [ 361.739479][ T9627] ? __pfx___might_resched+0x10/0x10 [ 361.739504][ T9627] ? fs_reclaim_acquire+0x7d/0x100 [ 361.739537][ T9627] should_fail_ex+0x414/0x560 [ 361.739570][ T9627] should_failslab+0xa8/0x100 [ 361.739601][ T9627] __kmalloc_noprof+0xcb/0x7f0 [ 361.739625][ T9627] ? tomoyo_encode+0x28b/0x550 [ 361.739658][ T9627] tomoyo_encode+0x28b/0x550 [ 361.739692][ T9627] tomoyo_realpath_from_path+0x58d/0x5d0 [ 361.739731][ T9627] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 361.739754][ T9627] tomoyo_path_number_perm+0x1e8/0x5a0 [ 361.739780][ T9627] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 361.739848][ T9627] ? __fget_files+0x2a/0x420 [ 361.739875][ T9627] ? __fget_files+0x3a0/0x420 [ 361.739892][ T9627] ? __fget_files+0x2a/0x420 [ 361.739918][ T9627] security_file_ioctl+0xcb/0x2d0 [ 361.739943][ T9627] __se_sys_ioctl+0x47/0x170 [ 361.739972][ T9627] do_syscall_64+0xfa/0xfa0 [ 361.739989][ T9627] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.740015][ T9627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.740035][ T9627] ? clear_bhb_loop+0x60/0xb0 [ 361.740060][ T9627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.740079][ T9627] RIP: 0033:0x7fbfcc78ec29 [ 361.740099][ T9627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.740117][ T9627] RSP: 002b:00007fbfcd581038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.740148][ T9627] RAX: ffffffffffffffda RBX: 00007fbfcc9d5fa0 RCX: 00007fbfcc78ec29 [ 361.740163][ T9627] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 361.740177][ T9627] RBP: 00007fbfcd581090 R08: 0000000000000000 R09: 0000000000000000 [ 361.740191][ T9627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.740205][ T9627] R13: 00007fbfcc9d6038 R14: 00007fbfcc9d5fa0 R15: 00007ffef71f8c38 [ 361.740242][ T9627] [ 361.740375][ T9627] ERROR: Out of memory at tomoyo_realpath_from_path. [ 361.768042][ T9629] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1230'. [ 361.926116][ C0] vkms_vblank_simulate: vblank timer overrun [ 362.326445][ T9646] tipc: Enabling of bearer rejected, failed to enable media [ 363.524157][ T6114] usb 2-1: USB disconnect, device number 119 [ 364.348607][ T6114] usb 3-1: USB disconnect, device number 122 [ 364.770122][ T6114] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 364.948278][ T6114] usb 3-1: Using ep0 maxpacket: 32 [ 364.955520][ T6114] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 364.971258][ T6114] usb 3-1: config 0 has no interface number 0 [ 364.977682][ T6114] usb 3-1: config 0 interface 184 has no altsetting 0 [ 364.990765][ T6114] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 365.002790][ T6114] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.011962][ T6114] usb 3-1: Product: syz [ 365.016185][ T6114] usb 3-1: Manufacturer: syz [ 365.021648][ T6114] usb 3-1: SerialNumber: syz [ 365.041313][ T6114] usb 3-1: config 0 descriptor?? [ 365.057102][ T6114] smsc75xx v1.0.0 [ 365.104134][ T9707] FAULT_INJECTION: forcing a failure. [ 365.104134][ T9707] name failslab, interval 1, probability 0, space 0, times 0 [ 365.121830][ T9707] CPU: 1 UID: 0 PID: 9707 Comm: syz.1.1258 Not tainted syzkaller #0 PREEMPT(full) [ 365.121860][ T9707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 365.121872][ T9707] Call Trace: [ 365.121888][ T9707] [ 365.121897][ T9707] dump_stack_lvl+0x189/0x250 [ 365.121923][ T9707] ? __pfx____ratelimit+0x10/0x10 [ 365.121950][ T9707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.121970][ T9707] ? __pfx__printk+0x10/0x10 [ 365.122003][ T9707] ? __pfx___might_resched+0x10/0x10 [ 365.122033][ T9707] should_fail_ex+0x414/0x560 [ 365.122063][ T9707] should_failslab+0xa8/0x100 [ 365.122092][ T9707] __kmalloc_noprof+0xcb/0x7f0 [ 365.122114][ T9707] ? do_handle_open+0x4d4/0x8f0 [ 365.122142][ T9707] do_handle_open+0x4d4/0x8f0 [ 365.122170][ T9707] ? __pfx_do_handle_open+0x10/0x10 [ 365.122192][ T9707] ? ksys_write+0x22a/0x250 [ 365.122220][ T9707] ? __pfx_ksys_write+0x10/0x10 [ 365.122251][ T9707] ? do_syscall_64+0xbe/0xfa0 [ 365.122273][ T9707] do_syscall_64+0xfa/0xfa0 [ 365.122290][ T9707] ? lockdep_hardirqs_on+0x9c/0x150 [ 365.122317][ T9707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.122336][ T9707] ? clear_bhb_loop+0x60/0xb0 [ 365.122358][ T9707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.122375][ T9707] RIP: 0033:0x7f4a4818ec29 [ 365.122394][ T9707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.122410][ T9707] RSP: 002b:00007f4a4900e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 365.122432][ T9707] RAX: ffffffffffffffda RBX: 00007f4a483d5fa0 RCX: 00007f4a4818ec29 [ 365.122446][ T9707] RDX: 0000000000400040 RSI: 0000200000000000 RDI: 0000000000000003 [ 365.122459][ T9707] RBP: 00007f4a4900e090 R08: 0000000000000000 R09: 0000000000000000 [ 365.122471][ T9707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.122483][ T9707] R13: 00007f4a483d6038 R14: 00007f4a483d5fa0 R15: 00007ffd65fcfb48 [ 365.122515][ T9707] [ 365.330813][ T5855] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 365.453651][ T6114] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 365.465414][ T6114] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 365.475823][ T6114] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 365.487456][ T6114] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 365.487888][ T5855] usb 4-1: Using ep0 maxpacket: 16 [ 365.503861][ T5855] usb 4-1: config 251 has an invalid interface number: 117 but max is 0 [ 365.512490][ T5855] usb 4-1: config 251 has no interface number 0 [ 365.518973][ T5855] usb 4-1: config 251 interface 117 has no altsetting 0 [ 365.528285][ T5855] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= d.3e [ 365.537357][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.545713][ T5855] usb 4-1: Product: syz [ 365.550304][ T5855] usb 4-1: Manufacturer: syz [ 365.555633][ T5855] usb 4-1: SerialNumber: syz [ 365.627822][ T6111] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 365.773025][ T5855] gspca_main: spca500-2.14.0 probing 046d:0900 [ 365.777851][ T6111] usb 2-1: Using ep0 maxpacket: 16 [ 365.785617][ T5855] gspca_spca500: reg write: error -71 [ 365.787297][ T6111] usb 2-1: config 0 has no interfaces? [ 365.792502][ T5855] gspca_spca500: reg write: error -71 [ 365.800262][ T6111] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 365.803171][ T5855] gspca_spca500: reg write: error -71 [ 365.812344][ T6111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.817255][ T5855] gspca_spca500: reg write: error -71 [ 365.826763][ T6111] usb 2-1: Product: syz [ 365.831548][ T5855] gspca_spca500: reg write: error -71 [ 365.835304][ T6111] usb 2-1: Manufacturer: syz [ 365.841442][ T5855] gspca_spca500: reg write: error -71 [ 365.845754][ T6111] usb 2-1: SerialNumber: syz [ 365.852076][ T5855] gspca_spca500: reg write: error -71 [ 365.859176][ T6111] usb 2-1: config 0 descriptor?? [ 365.864941][ T5855] gspca_spca500: reg write: error -71 [ 365.873851][ T5855] gspca_spca500: reg write: error -71 [ 365.883210][ T5855] gspca_spca500: reg write: error -71 [ 365.890233][ T5855] gspca_spca500: reg write: error -71 [ 365.895954][ T5855] gspca_spca500: reg write: error -71 [ 365.902080][ T5855] gspca_spca500: reg write: error -71 [ 365.908450][ T5855] gspca_spca500: reg write: error -71 [ 365.921857][ T5855] usb 4-1: USB disconnect, device number 114 [ 366.765594][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1266'. [ 367.452570][ T5855] usb 3-1: USB disconnect, device number 123 [ 367.572712][ T9749] netlink: 'syz.2.1269': attribute type 83 has an invalid length. [ 367.817971][ T9758] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1272'. [ 367.913390][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 367.936441][ T9766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.959666][ T9766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.117329][ T6111] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 368.227276][ T5855] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 368.267061][ T6111] usb 3-1: Using ep0 maxpacket: 32 [ 368.276497][ T6111] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 368.285819][ T6111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.293949][ T6111] usb 3-1: Product: syz [ 368.298300][ T6111] usb 3-1: Manufacturer: syz [ 368.302915][ T6111] usb 3-1: SerialNumber: syz [ 368.311395][ T6111] usb 3-1: config 0 descriptor?? [ 368.321086][ T6111] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 368.386963][ T5855] usb 4-1: Using ep0 maxpacket: 32 [ 368.394060][ T5855] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 368.402481][ T5855] usb 4-1: config 0 has no interface number 0 [ 368.408763][ T5855] usb 4-1: config 0 interface 184 has no altsetting 0 [ 368.419109][ T5855] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 368.428321][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.436516][ T5855] usb 4-1: Product: syz [ 368.440869][ T5855] usb 4-1: Manufacturer: syz [ 368.445483][ T5855] usb 4-1: SerialNumber: syz [ 368.453522][ T5855] usb 4-1: config 0 descriptor?? [ 368.462951][ T5855] smsc75xx v1.0.0 [ 368.574085][ T9772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.588728][ T9772] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1278'. [ 368.661760][ T9775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1279'. [ 368.872387][ T5855] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 368.896976][ T5855] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 368.926857][ T5855] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 368.948452][ T5855] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 368.980210][ T5855] usb 2-1: USB disconnect, device number 120 [ 369.062931][ T9795] use of bytesused == 0 is deprecated and will be removed in the future, [ 369.075451][ T9795] use the actual size instead. [ 369.090855][ T9787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.111076][ T9787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.181591][ T6111] gspca_stk1135: reg_w 0x203 err -71 [ 369.189558][ T6111] gspca_stk1135: serial bus timeout: status=0x00 [ 369.208568][ T6111] gspca_stk1135: Sensor write failed [ 369.224294][ T6111] gspca_stk1135: serial bus timeout: status=0x00 [ 369.248063][ T6111] gspca_stk1135: Sensor write failed [ 369.263749][ T6111] gspca_stk1135: serial bus timeout: status=0x00 [ 369.280791][ T6111] gspca_stk1135: Sensor read failed [ 369.290515][ T9803] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1284'. [ 369.300185][ T6111] gspca_stk1135: serial bus timeout: status=0x00 [ 369.307908][ T6111] gspca_stk1135: Sensor read failed [ 369.320317][ T6111] gspca_stk1135: Detected sensor type unknown (0x0) [ 369.336203][ T6111] gspca_stk1135: serial bus timeout: status=0x00 [ 369.355559][ T6111] gspca_stk1135: Sensor read failed [ 369.378584][ T6111] gspca_stk1135: serial bus timeout: status=0x00 [ 369.385995][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1285'. [ 369.400710][ T6111] gspca_stk1135: Sensor read failed [ 369.407540][ T6111] gspca_stk1135: serial bus timeout: status=0x00 [ 369.415296][ T6111] gspca_stk1135: Sensor write failed [ 369.422655][ T6111] gspca_stk1135: serial bus timeout: status=0x00 [ 369.434920][ T6111] gspca_stk1135: Sensor write failed [ 369.446288][ T6111] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 369.480149][ T6111] usb 3-1: USB disconnect, device number 124 [ 369.715177][ T9814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.724424][ T9814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.786790][ T6112] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 369.826654][ T6111] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 369.946499][ T6112] usb 2-1: Using ep0 maxpacket: 32 [ 369.954049][ T6112] usb 2-1: config 0 has an invalid interface number: 220 but max is 0 [ 369.962553][ T6112] usb 2-1: config 0 has no interface number 0 [ 369.968857][ T6112] usb 2-1: config 0 interface 220 has no altsetting 0 [ 369.978644][ T6112] usb 2-1: New USB device found, idVendor=05d1, idProduct=6001, bcdDevice=86.9d [ 369.988405][ T6112] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.997698][ T6112] usb 2-1: Product: syz [ 370.002444][ T6112] usb 2-1: Manufacturer: syz [ 370.007623][ T6112] usb 2-1: SerialNumber: syz [ 370.012737][ T6111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.025533][ T6111] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 370.035849][ T6111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.035912][ T6112] usb 2-1: config 0 descriptor?? [ 370.051257][ T6112] ftdi_sio 2-1:0.220: FTDI USB Serial Device converter detected [ 370.061273][ T6111] usb 3-1: config 0 descriptor?? [ 370.067861][ T6112] ftdi_sio ttyUSB0: unknown device type: 0x869d [ 370.450747][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1290'. [ 370.488971][ T6111] keytouch 0003:0926:3333.0047: fixing up Keytouch IEC report descriptor [ 370.501088][ T6111] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0047/input/input43 [ 370.607441][ T6111] keytouch 0003:0926:3333.0047: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 370.905525][ T6122] usb 3-1: USB disconnect, device number 125 [ 370.994338][ T5855] usb 4-1: USB disconnect, device number 115 [ 371.316127][ T5855] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 371.466287][ T5855] usb 4-1: Using ep0 maxpacket: 16 [ 371.476049][ T5855] usb 4-1: config 0 has no interfaces? [ 371.484714][ T5855] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 371.495180][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.503548][ T5855] usb 4-1: Product: syz [ 371.508115][ T5855] usb 4-1: Manufacturer: syz [ 371.512836][ T5855] usb 4-1: SerialNumber: syz [ 371.526733][ T5855] usb 4-1: config 0 descriptor?? [ 371.645296][ T9832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1294'. [ 371.701386][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1295'. [ 372.538579][ T6111] usb 2-1: USB disconnect, device number 121 [ 372.549680][ T6111] ftdi_sio 2-1:0.220: device disconnected [ 373.009959][ T9854] program syz.2.1300 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.145607][ T6111] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 373.305550][ T6122] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 373.310057][ T6111] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 373.322750][ T6111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.330856][ T6111] usb 2-1: Product: syz [ 373.335159][ T6111] usb 2-1: Manufacturer: syz [ 373.339980][ T6111] usb 2-1: SerialNumber: syz [ 373.347895][ T6111] usb 2-1: config 0 descriptor?? [ 373.355662][ T6111] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 122 [ 373.457278][ T6122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.468400][ T6122] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 373.477690][ T6122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.496585][ T6122] usb 3-1: config 0 descriptor?? [ 373.542444][ T9860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.551991][ T9860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.786966][ T6111] (null): failure reading functionality [ 373.798060][ T6111] i2c i2c-2: failure reading functionality [ 373.808233][ T6111] i2c i2c-2: connected i2c-tiny-usb device [ 373.820915][ T6111] usb 2-1: USB disconnect, device number 122 [ 373.910936][ T6122] keytouch 0003:0926:3333.0048: fixing up Keytouch IEC report descriptor [ 373.922835][ T6122] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0048/input/input44 [ 374.030032][ T6122] keytouch 0003:0926:3333.0048: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 374.160878][ T9864] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1303'. [ 374.340969][ T6112] usb 3-1: USB disconnect, device number 126 [ 374.574145][ T6113] usb 4-1: USB disconnect, device number 116 [ 374.768534][ T6122] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 374.788305][ T9889] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1312'. [ 374.899906][ T9893] FAULT_INJECTION: forcing a failure. [ 374.899906][ T9893] name failslab, interval 1, probability 0, space 0, times 0 [ 374.922416][ T9893] CPU: 0 UID: 0 PID: 9893 Comm: syz.4.1314 Not tainted syzkaller #0 PREEMPT(full) [ 374.922444][ T9893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 374.922456][ T9893] Call Trace: [ 374.922464][ T9893] [ 374.922472][ T9893] dump_stack_lvl+0x189/0x250 [ 374.922497][ T9893] ? __pfx____ratelimit+0x10/0x10 [ 374.922525][ T9893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.922543][ T9893] ? __pfx__printk+0x10/0x10 [ 374.922575][ T9893] ? __pfx___might_resched+0x10/0x10 [ 374.922603][ T9893] should_fail_ex+0x414/0x560 [ 374.922633][ T9893] should_failslab+0xa8/0x100 [ 374.922661][ T9893] __kmalloc_noprof+0xcb/0x7f0 [ 374.922683][ T9893] ? kfree+0x4d/0x6d0 [ 374.922699][ T9893] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 374.922731][ T9893] tomoyo_realpath_from_path+0xe3/0x5d0 [ 374.922764][ T9893] ? tomoyo_domain+0xd9/0x130 [ 374.922792][ T9893] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 374.922812][ T9893] tomoyo_path_number_perm+0x1e8/0x5a0 [ 374.922834][ T9893] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 374.922896][ T9893] ? __fget_files+0x2a/0x420 [ 374.922918][ T9893] ? __fget_files+0x3a0/0x420 [ 374.922933][ T9893] ? __fget_files+0x2a/0x420 [ 374.922955][ T9893] security_file_ioctl+0xcb/0x2d0 [ 374.922975][ T9893] __se_sys_ioctl+0x47/0x170 [ 374.923001][ T9893] do_syscall_64+0xfa/0xfa0 [ 374.923016][ T9893] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.923041][ T9893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.923061][ T9893] ? clear_bhb_loop+0x60/0xb0 [ 374.923085][ T9893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.923102][ T9893] RIP: 0033:0x7fbfcc78ec29 [ 374.923120][ T9893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.923136][ T9893] RSP: 002b:00007fbfcd581038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.923158][ T9893] RAX: ffffffffffffffda RBX: 00007fbfcc9d5fa0 RCX: 00007fbfcc78ec29 [ 374.923171][ T9893] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 374.923183][ T9893] RBP: 00007fbfcd581090 R08: 0000000000000000 R09: 0000000000000000 [ 374.923195][ T9893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.923207][ T9893] R13: 00007fbfcc9d6038 R14: 00007fbfcc9d5fa0 R15: 00007ffef71f8c38 [ 374.923241][ T9893] [ 374.923302][ T9893] ERROR: Out of memory at tomoyo_realpath_from_path. [ 374.944990][ T6122] usb 2-1: Using ep0 maxpacket: 8 [ 375.006846][ T6113] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 375.022368][ T6122] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 375.193043][ T6122] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 375.202961][ T6122] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 375.211431][ T6113] usb 4-1: Using ep0 maxpacket: 8 [ 375.214247][ T6122] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.231463][ T6122] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 375.233311][ T6113] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 375.241866][ T6122] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.284497][ T6113] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 375.335222][ T6113] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 375.356324][ T6113] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.370212][ T6113] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 375.386765][ T9902] netlink: 'syz.2.1318': attribute type 29 has an invalid length. [ 375.386979][ T6113] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.418400][ T9902] netlink: 'syz.2.1318': attribute type 29 has an invalid length. [ 375.423398][ T9904] netlink: 'syz.4.1319': attribute type 11 has an invalid length. [ 375.438827][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1318'. [ 375.454689][ T9904] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 375.473994][ T6122] usb 2-1: GET_CAPABILITIES returned 0 [ 375.483391][ T6122] usbtmc 2-1:16.0: can't read capabilities [ 375.579066][ T9908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.588353][ T9908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.620026][ T9886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.642431][ T9910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1321'. [ 375.647500][ T9886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.698308][ T6113] usb 4-1: GET_CAPABILITIES returned 0 [ 375.704147][ T6113] usbtmc 4-1:16.0: can't read capabilities [ 375.713414][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 375.736723][ T6122] usb 2-1: USB disconnect, device number 123 [ 376.233609][ T9930] netlink: 'syz.2.1328': attribute type 10 has an invalid length. [ 376.253396][ T9930] team0: Port device macvlan1 added [ 376.543487][ T9952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.555081][ T9952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.157030][ T6112] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 377.248938][ T9973] tmpfs: Bad value for 'mpol' [ 377.316988][ T6112] usb 3-1: device descriptor read/64, error -71 [ 377.531065][ T9987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.543382][ T9987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.564256][ T6112] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 377.658813][ T5959] usb 4-1: USB disconnect, device number 117 [ 377.711327][ T6112] usb 3-1: device descriptor read/64, error -71 [ 377.724210][ T6122] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 377.844415][ T6112] usb usb3-port1: attempt power cycle [ 377.877795][ T6122] usb 2-1: device descriptor read/64, error -71 [ 378.124808][ T6122] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 378.194093][ T6112] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 378.225001][ T6112] usb 3-1: device descriptor read/8, error -71 [ 378.284022][ T6122] usb 2-1: device descriptor read/64, error -71 [ 378.398095][ T6122] usb usb2-port1: attempt power cycle [ 378.475368][ T6112] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 378.495580][ T6112] usb 3-1: device descriptor read/8, error -71 [ 378.616636][ T6112] usb usb3-port1: unable to enumerate USB device [ 378.696808][T10025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.705898][T10025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.743927][ T6122] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 378.766373][ T6122] usb 2-1: device descriptor read/8, error -71 [ 379.013806][ T6122] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 379.059810][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.066892][ T6122] usb 2-1: device descriptor read/8, error -71 [ 379.067789][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.174212][ T6122] usb usb2-port1: unable to enumerate USB device [ 379.443723][ T6112] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 379.459956][T10042] random: crng reseeded on system resumption [ 379.475334][T10042] FAULT_INJECTION: forcing a failure. [ 379.475334][T10042] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 379.489066][T10042] CPU: 1 UID: 0 PID: 10042 Comm: syz.4.1368 Not tainted syzkaller #0 PREEMPT(full) [ 379.489084][T10042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 379.489092][T10042] Call Trace: [ 379.489097][T10042] [ 379.489103][T10042] dump_stack_lvl+0x189/0x250 [ 379.489120][T10042] ? __pfx____ratelimit+0x10/0x10 [ 379.489136][T10042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.489148][T10042] ? __pfx__printk+0x10/0x10 [ 379.489165][T10042] ? fs_reclaim_acquire+0x7d/0x100 [ 379.489186][T10042] should_fail_ex+0x414/0x560 [ 379.489205][T10042] prepare_alloc_pages+0x213/0x610 [ 379.489225][T10042] __alloc_frozen_pages_noprof+0x123/0x370 [ 379.489244][T10042] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 379.489270][T10042] alloc_pages_mpol+0x232/0x4a0 [ 379.489290][T10042] alloc_pages_noprof+0xa9/0x190 [ 379.489307][T10042] get_zeroed_page_noprof+0x1a/0x90 [ 379.489324][T10042] get_image_page+0x36/0x330 [ 379.489339][T10042] memory_bm_create+0x736/0xdc0 [ 379.489355][T10042] ? create_basic_memory_bitmaps+0x81/0x3d0 [ 379.489370][T10042] create_basic_memory_bitmaps+0x98/0x3d0 [ 379.489384][T10042] snapshot_open+0x1aa/0x280 [ 379.489398][T10042] ? __pfx_snapshot_open+0x10/0x10 [ 379.489410][T10042] misc_open+0x2d5/0x350 [ 379.489429][T10042] chrdev_open+0x4cc/0x5e0 [ 379.489442][T10042] ? __pfx_chrdev_open+0x10/0x10 [ 379.489455][T10042] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 379.489471][T10042] ? __pfx_chrdev_open+0x10/0x10 [ 379.489481][T10042] do_dentry_open+0x953/0x13f0 [ 379.489503][T10042] vfs_open+0x3b/0x340 [ 379.489513][T10042] ? path_openat+0x2ecd/0x3830 [ 379.489530][T10042] path_openat+0x2ee5/0x3830 [ 379.489565][T10042] ? __pfx_path_openat+0x10/0x10 [ 379.489591][T10042] do_filp_open+0x1fa/0x410 [ 379.489604][T10042] ? __lock_acquire+0xab9/0xd20 [ 379.489618][T10042] ? __pfx_do_filp_open+0x10/0x10 [ 379.489646][T10042] ? _raw_spin_unlock+0x28/0x50 [ 379.489669][T10042] ? alloc_fd+0x64c/0x6c0 [ 379.489686][T10042] do_sys_openat2+0x121/0x1c0 [ 379.489702][T10042] ? __pfx_do_sys_openat2+0x10/0x10 [ 379.489717][T10042] ? ksys_write+0x22a/0x250 [ 379.489735][T10042] ? __pfx_ksys_write+0x10/0x10 [ 379.489751][T10042] __x64_sys_openat+0x138/0x170 [ 379.489768][T10042] do_syscall_64+0xfa/0xfa0 [ 379.489779][T10042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.489790][T10042] ? asm_sysvec_call_function_single+0x1a/0x20 [ 379.489802][T10042] ? clear_bhb_loop+0x60/0xb0 [ 379.489815][T10042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.489826][T10042] RIP: 0033:0x7fbfcc78ec29 [ 379.489838][T10042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.489848][T10042] RSP: 002b:00007fbfcd581038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 379.489862][T10042] RAX: ffffffffffffffda RBX: 00007fbfcc9d5fa0 RCX: 00007fbfcc78ec29 [ 379.489871][T10042] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: ffffffffffffff9c [ 379.489878][T10042] RBP: 00007fbfcd581090 R08: 0000000000000000 R09: 0000000000000000 [ 379.489885][T10042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 379.489892][T10042] R13: 00007fbfcc9d6038 R14: 00007fbfcc9d5fa0 R15: 00007ffef71f8c38 [ 379.489911][T10042] [ 379.833720][ T6112] usb 4-1: Using ep0 maxpacket: 8 [ 379.840915][ T6112] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 379.852174][ T6112] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 379.866995][ T6112] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 379.877236][ T6112] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 379.892029][ T6112] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 379.903186][ T6112] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 379.912442][ T6112] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.975363][ T6112] usb 4-1: config 0 descriptor?? [ 380.004030][T10034] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 380.170542][T10044] FAULT_INJECTION: forcing a failure. [ 380.170542][T10044] name failslab, interval 1, probability 0, space 0, times 0 [ 380.185076][T10044] CPU: 0 UID: 0 PID: 10044 Comm: syz.4.1369 Not tainted syzkaller #0 PREEMPT(full) [ 380.185106][T10044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 380.185118][T10044] Call Trace: [ 380.185127][T10044] [ 380.185135][T10044] dump_stack_lvl+0x189/0x250 [ 380.185161][T10044] ? __pfx____ratelimit+0x10/0x10 [ 380.185189][T10044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.185209][T10044] ? __pfx__printk+0x10/0x10 [ 380.185242][T10044] ? __pfx___might_resched+0x10/0x10 [ 380.185271][T10044] should_fail_ex+0x414/0x560 [ 380.185303][T10044] should_failslab+0xa8/0x100 [ 380.185332][T10044] __kmalloc_noprof+0xcb/0x7f0 [ 380.185353][T10044] ? iter_file_splice_write+0x1c6/0x10e0 [ 380.185389][T10044] iter_file_splice_write+0x1c6/0x10e0 [ 380.185417][T10044] ? __pfx_current_time+0x10/0x10 [ 380.185465][T10044] ? __pfx_iter_file_splice_write+0x10/0x10 [ 380.185497][T10044] ? rcu_read_lock_any_held+0xb3/0x120 [ 380.185523][T10044] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 380.185581][T10044] ? __pfx_iter_file_splice_write+0x10/0x10 [ 380.185612][T10044] direct_splice_actor+0x101/0x160 [ 380.185633][T10044] splice_direct_to_actor+0x5a8/0xcc0 [ 380.185683][T10044] ? __pfx_direct_splice_actor+0x10/0x10 [ 380.185701][T10044] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 380.185732][T10044] do_splice_direct+0x181/0x270 [ 380.185754][T10044] ? __pfx_do_splice_direct+0x10/0x10 [ 380.185772][T10044] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 380.185800][T10044] ? rw_verify_area+0x255/0x4d0 [ 380.185831][T10044] do_sendfile+0x4da/0x7e0 [ 380.185851][T10044] ? __pfx_vfs_write+0x10/0x10 [ 380.185884][T10044] ? __pfx_do_sendfile+0x10/0x10 [ 380.185904][T10044] ? __fget_files+0x3a0/0x420 [ 380.185934][T10044] __se_sys_sendfile64+0x13e/0x190 [ 380.185957][T10044] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 380.185983][T10044] ? do_syscall_64+0xbe/0xfa0 [ 380.186006][T10044] do_syscall_64+0xfa/0xfa0 [ 380.186022][T10044] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.186050][T10044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.186067][T10044] ? clear_bhb_loop+0x60/0xb0 [ 380.186092][T10044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.186109][T10044] RIP: 0033:0x7fbfcc78ec29 [ 380.186127][T10044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.186144][T10044] RSP: 002b:00007fbfcd581038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 380.186166][T10044] RAX: ffffffffffffffda RBX: 00007fbfcc9d5fa0 RCX: 00007fbfcc78ec29 [ 380.186180][T10044] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 380.186192][T10044] RBP: 00007fbfcd581090 R08: 0000000000000000 R09: 0000000000000000 [ 380.186204][T10044] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000002 [ 380.186216][T10044] R13: 00007fbfcc9d6038 R14: 00007fbfcc9d5fa0 R15: 00007ffef71f8c38 [ 380.186249][T10044] [ 380.488503][T10034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.497653][T10034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.509371][T10034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.518320][T10034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.533572][ T6111] usb 4-1: USB disconnect, device number 118 [ 380.542101][ T5871] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 380.894958][T10065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.854815][ T5855] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 381.962996][ T5959] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 382.046306][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.057740][ T5855] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 382.067119][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.078617][ T5855] usb 2-1: config 0 descriptor?? [ 382.127515][T10097] netlink: 'syz.4.1385': attribute type 4 has an invalid length. [ 382.133047][ T5959] usb 4-1: Using ep0 maxpacket: 32 [ 382.148637][ T5959] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 382.159497][ T5959] usb 4-1: config 0 has no interface number 0 [ 382.162966][T10097] netlink: 'syz.4.1385': attribute type 4 has an invalid length. [ 382.166317][ T5959] usb 4-1: config 0 interface 184 has no altsetting 0 [ 382.187976][ T5959] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 382.197297][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.206252][ T5959] usb 4-1: Product: syz [ 382.210514][ T5959] usb 4-1: Manufacturer: syz [ 382.216007][ T5959] usb 4-1: SerialNumber: syz [ 382.225556][ T5959] usb 4-1: config 0 descriptor?? [ 382.243711][ T5959] smsc75xx v1.0.0 [ 382.496508][ T5855] keytouch 0003:0926:3333.0049: fixing up Keytouch IEC report descriptor [ 382.511648][ T5855] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0049/input/input45 [ 382.604434][ T5855] keytouch 0003:0926:3333.0049: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 382.637790][ T5959] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 382.664902][ T5959] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 382.685444][ T5959] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 382.697442][ T5959] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 382.917241][ T5959] usb 2-1: USB disconnect, device number 2 [ 383.033699][T10110] netlink: 14428 bytes leftover after parsing attributes in process `syz.4.1388'. [ 383.039322][T10109] netlink: 14428 bytes leftover after parsing attributes in process `syz.4.1388'. [ 383.043173][T10110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.062221][T10109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.076110][T10109] input: syz1 as /devices/virtual/input/input46 [ 383.841454][ T5871] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 384.024675][T10146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.034220][T10146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.610763][T10157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.623568][T10157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.709265][ T6111] usb 4-1: USB disconnect, device number 119 [ 385.001982][ T5959] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 385.104782][ T5855] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 385.163864][ T5959] usb 3-1: config 5 has an invalid interface number: 245 but max is 0 [ 385.172316][ T5959] usb 3-1: config 5 has no interface number 0 [ 385.178578][ T5959] usb 3-1: config 5 interface 245 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 385.190849][ T5959] usb 3-1: config 5 interface 245 has no altsetting 0 [ 385.201684][ T5959] usb 3-1: New USB device found, idVendor=0a07, idProduct=0078, bcdDevice=f7.36 [ 385.213666][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.223262][ T5959] usb 3-1: Product: syz [ 385.227477][ T5959] usb 3-1: Manufacturer: syz [ 385.235012][ T5959] usb 3-1: SerialNumber: syz [ 385.292260][ T5855] usb 2-1: Using ep0 maxpacket: 32 [ 385.299322][ T5855] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 385.308642][ T5855] usb 2-1: config 0 has no interface number 0 [ 385.315093][ T5855] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 385.327526][ T5855] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 385.336799][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.345434][ T5855] usb 2-1: Product: syz [ 385.349730][ T5855] usb 2-1: Manufacturer: syz [ 385.351386][ T6111] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 385.354462][ T5855] usb 2-1: SerialNumber: syz [ 385.369075][ T5855] usb 2-1: config 0 descriptor?? [ 385.381370][ T5855] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 385.391231][ T5855] em28xx 2-1:0.132: Video interface 132 found: [ 385.456438][ T5959] adutux 3-1:5.245: interrupt endpoints not found [ 385.467232][ T5959] usb 3-1: USB disconnect, device number 5 [ 385.513851][ T6111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.526242][ T6111] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 385.535412][ T6111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.546316][ T6111] usb 4-1: config 0 descriptor?? [ 385.783536][ T5855] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 385.965364][ T6111] keytouch 0003:0926:3333.004A: fixing up Keytouch IEC report descriptor [ 385.996366][ T6111] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.004A/input/input47 [ 386.143731][ T6111] keytouch 0003:0926:3333.004A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 386.282684][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 386.384670][ T6111] usb 4-1: USB disconnect, device number 120 [ 386.461553][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 386.474134][ T24] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 386.492172][ T24] usb 3-1: config 0 has no interface number 0 [ 386.495628][T10189] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1418'. [ 386.508645][ T24] usb 3-1: config 0 interface 184 has no altsetting 0 [ 386.513247][T10189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.528036][T10189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.532805][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 386.543116][T10189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.558686][T10189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.561580][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.576785][ T24] usb 3-1: Product: syz [ 386.585382][ T24] usb 3-1: Manufacturer: syz [ 386.590080][ T24] usb 3-1: SerialNumber: syz [ 386.599266][ T24] usb 3-1: config 0 descriptor?? [ 386.609078][ T24] smsc75xx v1.0.0 [ 386.649714][T10166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.659110][ T5855] em28xx 2-1:0.132: failed to read eeprom (err=-110) [ 386.668106][ T5855] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 386.681864][T10166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.941599][ T5855] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 386.954687][ T5855] em28xx 2-1:0.132: analog set to bulk mode. [ 386.971173][ T5959] em28xx 2-1:0.132: Registering V4L2 extension [ 387.013075][ T5855] usb 2-1: USB disconnect, device number 3 [ 387.019339][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 387.052107][ T5855] em28xx 2-1:0.132: Disconnecting em28xx [ 387.061599][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 387.082163][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 387.104418][ T24] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 387.197899][T10213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.209258][T10213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.250285][ T5871] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 387.267986][ T5959] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 387.275306][ T5959] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 387.284610][ T5959] em28xx 2-1:0.132: No AC97 audio processor [ 387.299330][ T5959] usb 2-1: Decoder not found [ 387.304197][ T5959] em28xx 2-1:0.132: failed to create media graph [ 387.311085][ T5959] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 387.322426][ T5959] em28xx 2-1:0.132: Remote control support is not available for this card. [ 387.332292][ T5855] em28xx 2-1:0.132: Closing input extension [ 387.349333][ T5855] em28xx 2-1:0.132: Freeing device [ 388.085535][T10250] FAULT_INJECTION: forcing a failure. [ 388.085535][T10250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.119264][T10250] CPU: 0 UID: 0 PID: 10250 Comm: syz.1.1435 Not tainted syzkaller #0 PREEMPT(full) [ 388.119296][T10250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 388.119307][T10250] Call Trace: [ 388.119316][T10250] [ 388.119325][T10250] dump_stack_lvl+0x189/0x250 [ 388.119351][T10250] ? __pfx____ratelimit+0x10/0x10 [ 388.119378][T10250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.119397][T10250] ? __pfx__printk+0x10/0x10 [ 388.119437][T10250] should_fail_ex+0x414/0x560 [ 388.119478][T10250] strncpy_from_user+0x36/0x290 [ 388.119508][T10250] getname_flags+0xf3/0x540 [ 388.119528][T10250] ? _copy_from_user+0x94/0xb0 [ 388.119554][T10250] user_path_at+0x24/0x60 [ 388.119578][T10250] __se_sys_mount+0x2d4/0x410 [ 388.119604][T10250] ? __pfx___se_sys_mount+0x10/0x10 [ 388.119629][T10250] ? do_syscall_64+0xbe/0xfa0 [ 388.119643][T10250] ? __x64_sys_mount+0x20/0xc0 [ 388.119662][T10250] do_syscall_64+0xfa/0xfa0 [ 388.119677][T10250] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.119702][T10250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.119719][T10250] ? clear_bhb_loop+0x60/0xb0 [ 388.119742][T10250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.119761][T10250] RIP: 0033:0x7f4a4818ec29 [ 388.119777][T10250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.119794][T10250] RSP: 002b:00007f4a4900e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 388.119815][T10250] RAX: ffffffffffffffda RBX: 00007f4a483d5fa0 RCX: 00007f4a4818ec29 [ 388.119829][T10250] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 00002000000000c0 [ 388.119841][T10250] RBP: 00007f4a4900e090 R08: 0000000000000000 R09: 0000000000000000 [ 388.119853][T10250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.119864][T10250] R13: 00007f4a483d6038 R14: 00007f4a483d5fa0 R15: 00007ffd65fcfb48 [ 388.119897][T10250] [ 388.741980][ T5855] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 388.900812][ T5855] usb 4-1: Using ep0 maxpacket: 8 [ 388.908119][ T5855] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 388.917946][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.929192][ T5855] usb 4-1: config 0 descriptor?? [ 389.078697][ T5959] usb 3-1: USB disconnect, device number 6 [ 389.167693][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1441'. [ 389.180325][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1441'. [ 389.190164][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1441'. [ 389.201927][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1441'. [ 389.217827][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1441'. [ 389.227829][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1441'. [ 389.237758][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1441'. [ 389.248028][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1441'. [ 389.258096][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1441'. [ 389.268290][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1441'. [ 389.617634][T10285] FAULT_INJECTION: forcing a failure. [ 389.617634][T10285] name failslab, interval 1, probability 0, space 0, times 0 [ 389.631755][T10285] CPU: 0 UID: 0 PID: 10285 Comm: syz.2.1447 Not tainted syzkaller #0 PREEMPT(full) [ 389.631796][T10285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 389.631809][T10285] Call Trace: [ 389.631818][T10285] [ 389.631827][T10285] dump_stack_lvl+0x189/0x250 [ 389.631854][T10285] ? __pfx____ratelimit+0x10/0x10 [ 389.631883][T10285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.631904][T10285] ? __pfx__printk+0x10/0x10 [ 389.631937][T10285] ? __pfx___might_resched+0x10/0x10 [ 389.631960][T10285] ? fs_reclaim_acquire+0x7d/0x100 [ 389.631991][T10285] should_fail_ex+0x414/0x560 [ 389.632022][T10285] should_failslab+0xa8/0x100 [ 389.632051][T10285] __kmalloc_noprof+0xcb/0x7f0 [ 389.632074][T10285] ? tomoyo_encode+0x28b/0x550 [ 389.632115][T10285] tomoyo_encode+0x28b/0x550 [ 389.632152][T10285] tomoyo_realpath_from_path+0x58d/0x5d0 [ 389.632193][T10285] tomoyo_check_open_permission+0x1c1/0x3b0 [ 389.632216][T10285] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 389.632235][T10285] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 389.632288][T10285] ? lockref_get+0x15/0x60 [ 389.632315][T10285] ? tomoyo_file_open+0x165/0x220 [ 389.632343][T10285] security_file_open+0xb1/0x270 [ 389.632362][T10285] do_dentry_open+0x384/0x13f0 [ 389.632390][T10285] ? vfs_open+0x31/0x340 [ 389.632415][T10285] vfs_open+0x3b/0x340 [ 389.632432][T10285] ? path_openat+0x2ecd/0x3830 [ 389.632467][T10285] path_openat+0x2ee5/0x3830 [ 389.632528][T10285] ? __pfx_path_openat+0x10/0x10 [ 389.632575][T10285] do_filp_open+0x1fa/0x410 [ 389.632596][T10285] ? __lock_acquire+0xab9/0xd20 [ 389.632620][T10285] ? __pfx_do_filp_open+0x10/0x10 [ 389.632669][T10285] ? _raw_spin_unlock+0x28/0x50 [ 389.632694][T10285] ? alloc_fd+0x64c/0x6c0 [ 389.632728][T10285] do_sys_openat2+0x121/0x1c0 [ 389.632753][T10285] ? __pfx_do_sys_openat2+0x10/0x10 [ 389.632775][T10285] ? ksys_write+0x22a/0x250 [ 389.632804][T10285] ? __pfx_ksys_write+0x10/0x10 [ 389.632830][T10285] __x64_sys_open+0x11e/0x150 [ 389.632857][T10285] do_syscall_64+0xfa/0xfa0 [ 389.632872][T10285] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.632899][T10285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.632917][T10285] ? clear_bhb_loop+0x60/0xb0 [ 389.632940][T10285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.632957][T10285] RIP: 0033:0x7fa29298ec29 [ 389.632975][T10285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.632991][T10285] RSP: 002b:00007fa2938ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 389.633012][T10285] RAX: ffffffffffffffda RBX: 00007fa292bd5fa0 RCX: 00007fa29298ec29 [ 389.633026][T10285] RDX: 0000000000000014 RSI: 00000000000cc000 RDI: 0000200000000040 [ 389.633038][T10285] RBP: 00007fa2938ff090 R08: 0000000000000000 R09: 0000000000000000 [ 389.633050][T10285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 389.633061][T10285] R13: 00007fa292bd6038 R14: 00007fa292bd5fa0 R15: 00007fff6719cf28 [ 389.633095][T10285] [ 389.633480][T10285] ERROR: Out of memory at tomoyo_realpath_from_path. [ 389.714150][T10288] usb usb8: usbfs: process 10288 (syz.4.1448) did not claim interface 0 before use [ 389.994419][ T5855] usb 4-1: string descriptor 0 read error: -71 [ 390.010053][ T5855] uvcvideo 4-1:0.0: Found UVC 0.00 device (2833:0201) [ 390.010566][ T6113] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 390.019413][ T5855] uvcvideo 4-1:0.0: No valid video chain found. [ 390.083608][ T5855] usb 4-1: USB disconnect, device number 121 [ 390.180428][ T6113] usb 2-1: Using ep0 maxpacket: 32 [ 390.187949][ T6113] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 390.196990][ T6113] usb 2-1: config 0 has no interface number 0 [ 390.203488][ T6113] usb 2-1: config 0 interface 184 has no altsetting 0 [ 390.213641][ T6113] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 390.224227][ T6113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.249390][ T6113] usb 2-1: Product: syz [ 390.257020][ T6113] usb 2-1: Manufacturer: syz [ 390.266976][ T6113] usb 2-1: SerialNumber: syz [ 390.284528][ T6113] usb 2-1: config 0 descriptor?? [ 390.302898][ T6113] smsc75xx v1.0.0 [ 390.559109][T10315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.568679][T10315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.696576][ T6113] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 390.708501][ T6113] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 390.718686][ T6113] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 390.729829][ T6113] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 391.045723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 391.055156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 391.064735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 391.074566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 391.084654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 391.094548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 391.104359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 391.249583][T10333] FAULT_INJECTION: forcing a failure. [ 391.249583][T10333] name failslab, interval 1, probability 0, space 0, times 0 [ 391.264198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 391.277273][T10333] CPU: 1 UID: 0 PID: 10333 Comm: syz.4.1464 Not tainted syzkaller #0 PREEMPT(full) [ 391.277301][T10333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 391.277313][T10333] Call Trace: [ 391.277322][T10333] [ 391.277332][T10333] dump_stack_lvl+0x189/0x250 [ 391.277357][T10333] ? __pfx____ratelimit+0x10/0x10 [ 391.277385][T10333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.277404][T10333] ? __pfx__printk+0x10/0x10 [ 391.277438][T10333] ? __pfx___might_resched+0x10/0x10 [ 391.277460][T10333] ? fs_reclaim_acquire+0x7d/0x100 [ 391.277492][T10333] should_fail_ex+0x414/0x560 [ 391.277531][T10333] should_failslab+0xa8/0x100 [ 391.277560][T10333] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 391.277585][T10333] ? ovl_do_parse_layer+0x39/0xbb0 [ 391.277612][T10333] kstrdup+0x42/0x100 [ 391.277632][T10333] ovl_do_parse_layer+0x39/0xbb0 [ 391.277655][T10333] ? ovl_parse_param_lowerdir+0x6f4/0xaa0 [ 391.277672][T10333] ? kfree+0x19a/0x6d0 [ 391.277697][T10333] ovl_parse_param_lowerdir+0x708/0xaa0 [ 391.277730][T10333] ? __pfx_ovl_parse_param_lowerdir+0x10/0x10 [ 391.277763][T10333] ovl_parse_param+0x51b/0xee0 [ 391.277791][T10333] ? __pfx_ovl_parse_param+0x10/0x10 [ 391.277812][T10333] ? rcu_is_watching+0x15/0xb0 [ 391.277842][T10333] ? static_key_count+0x41/0x70 [ 391.277869][T10333] vfs_parse_fs_param+0x1a9/0x420 [ 391.277894][T10333] vfs_parse_monolithic_sep+0x25d/0x320 [ 391.277917][T10333] ? __pfx_ovl_next_opt+0x10/0x10 [ 391.277937][T10333] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 391.277968][T10333] ? alloc_fs_context+0x665/0x7d0 [ 391.277997][T10333] do_new_mount+0x2cb/0x9e0 [ 391.278015][T10333] ? apparmor_capable+0x137/0x1b0 [ 391.278047][T10333] ? security_capable+0x7e/0x2e0 [ 391.278069][T10333] ? __pfx_do_new_mount+0x10/0x10 [ 391.278087][T10333] ? ns_capable+0x8a/0xf0 [ 391.278112][T10333] ? path_mount+0x61c/0xfe0 [ 391.278137][T10333] ? kmem_cache_free+0x19b/0x690 [ 391.278173][T10333] __se_sys_mount+0x313/0x410 [ 391.278200][T10333] ? __pfx___se_sys_mount+0x10/0x10 [ 391.278229][T10333] ? do_syscall_64+0xbe/0xfa0 [ 391.278246][T10333] ? __x64_sys_mount+0x20/0xc0 [ 391.278267][T10333] do_syscall_64+0xfa/0xfa0 [ 391.278286][T10333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.278303][T10333] ? asm_sysvec_call_function_single+0x1a/0x20 [ 391.278322][T10333] ? clear_bhb_loop+0x60/0xb0 [ 391.278346][T10333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.278364][T10333] RIP: 0033:0x7fbfcc78ec29 [ 391.278383][T10333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.278400][T10333] RSP: 002b:00007fbfcd581038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 391.278423][T10333] RAX: ffffffffffffffda RBX: 00007fbfcc9d5fa0 RCX: 00007fbfcc78ec29 [ 391.278437][T10333] RDX: 0000200000000480 RSI: 00002000000000c0 RDI: 0000000000000000 [ 391.278450][T10333] RBP: 00007fbfcd581090 R08: 0000200000000400 R09: 0000000000000000 [ 391.278463][T10333] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000002 [ 391.278476][T10333] R13: 00007fbfcc9d6038 R14: 00007fbfcc9d5fa0 R15: 00007ffef71f8c38 [ 391.278517][T10333] [ 392.215660][T10357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.239317][T10357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.627997][T10376] FAULT_INJECTION: forcing a failure. [ 392.627997][T10376] name failslab, interval 1, probability 0, space 0, times 0 [ 392.642418][T10376] CPU: 0 UID: 0 PID: 10376 Comm: syz.2.1471 Not tainted syzkaller #0 PREEMPT(full) [ 392.642447][T10376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 392.642459][T10376] Call Trace: [ 392.642467][T10376] [ 392.642475][T10376] dump_stack_lvl+0x189/0x250 [ 392.642507][T10376] ? __pfx____ratelimit+0x10/0x10 [ 392.642533][T10376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.642552][T10376] ? __pfx__printk+0x10/0x10 [ 392.642585][T10376] ? __pfx___might_resched+0x10/0x10 [ 392.642615][T10376] should_fail_ex+0x414/0x560 [ 392.642647][T10376] should_failslab+0xa8/0x100 [ 392.642675][T10376] __kmalloc_noprof+0xcb/0x7f0 [ 392.642694][T10376] ? kfree+0x4d/0x6d0 [ 392.642711][T10376] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 392.642741][T10376] tomoyo_realpath_from_path+0xe3/0x5d0 [ 392.642766][T10376] ? tomoyo_domain+0xd9/0x130 [ 392.642795][T10376] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 392.642815][T10376] tomoyo_path_number_perm+0x1e8/0x5a0 [ 392.642840][T10376] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 392.642903][T10376] ? __fget_files+0x2a/0x420 [ 392.642925][T10376] ? __fget_files+0x3a0/0x420 [ 392.642941][T10376] ? __fget_files+0x2a/0x420 [ 392.642962][T10376] security_file_ioctl+0xcb/0x2d0 [ 392.642984][T10376] __se_sys_ioctl+0x47/0x170 [ 392.643009][T10376] do_syscall_64+0xfa/0xfa0 [ 392.643025][T10376] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.643052][T10376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.643071][T10376] ? clear_bhb_loop+0x60/0xb0 [ 392.643095][T10376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.643112][T10376] RIP: 0033:0x7fa29298ec29 [ 392.643130][T10376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.643145][T10376] RSP: 002b:00007fa2938ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.643167][T10376] RAX: ffffffffffffffda RBX: 00007fa292bd5fa0 RCX: 00007fa29298ec29 [ 392.643181][T10376] RDX: 0000200000000440 RSI: 0000000000003b72 RDI: 0000000000000003 [ 392.643194][T10376] RBP: 00007fa2938ff090 R08: 0000000000000000 R09: 0000000000000000 [ 392.643206][T10376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.643217][T10376] R13: 00007fa292bd6038 R14: 00007fa292bd5fa0 R15: 00007fff6719cf28 [ 392.643252][T10376] [ 392.643267][T10376] ERROR: Out of memory at tomoyo_realpath_from_path. [ 392.898448][ T5959] usb 2-1: USB disconnect, device number 4 [ 393.500683][T10414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.502482][T10414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.999303][ T6113] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 394.119234][ T5855] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 394.169328][ T6113] usb 3-1: Using ep0 maxpacket: 16 [ 394.188083][ T6113] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 394.197810][ T6113] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.213392][T10431] __nla_validate_parse: 133 callbacks suppressed [ 394.213413][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 394.229235][ T6113] usb 3-1: Product: syz [ 394.233442][ T6113] usb 3-1: Manufacturer: syz [ 394.238096][ T6113] usb 3-1: SerialNumber: syz [ 394.245230][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 394.257523][ T6113] usb 3-1: config 0 descriptor?? [ 394.263004][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 394.278429][ T6113] as10x_usb: device has been detected [ 394.280585][ T5855] usb 2-1: Using ep0 maxpacket: 32 [ 394.285676][ T6113] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 394.298040][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 394.303409][ T5855] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 394.318212][ T5855] usb 2-1: config 0 has no interface number 0 [ 394.325535][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 394.328282][ T5855] usb 2-1: config 0 interface 184 has no altsetting 0 [ 394.335755][ T6113] usb 3-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 394.344981][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 394.362840][ T5855] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 394.366603][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 394.372716][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.382661][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 394.392031][ T5855] usb 2-1: Product: syz [ 394.405201][ T5855] usb 2-1: Manufacturer: syz [ 394.414810][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 394.426420][ T5855] usb 2-1: SerialNumber: syz [ 394.426813][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 394.442203][ T5855] usb 2-1: config 0 descriptor?? [ 394.454983][ T6113] as10x_usb: error during firmware upload part1 [ 394.466430][ T5855] smsc75xx v1.0.0 [ 394.529181][ T6113] Registered device Sky IT Digital Key (green led) [ 394.536954][ T6113] usb 3-1: USB disconnect, device number 7 [ 394.615615][ T6113] Unregistered device Sky IT Digital Key (green led) [ 394.624794][ T6113] as10x_usb: device has been disconnected [ 394.875059][ T5855] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 394.898929][ T5855] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 394.908689][ T5855] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 394.939440][ T5855] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 394.999062][ T6112] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 395.158983][ T6112] usb 4-1: Using ep0 maxpacket: 16 [ 395.172119][ T6112] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 395.196039][ T6112] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 395.207174][ T6112] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.215778][ T6112] usb 4-1: Product: syz [ 395.220153][ T6112] usb 4-1: Manufacturer: syz [ 395.224838][ T6112] usb 4-1: SerialNumber: syz [ 395.232048][ T6112] usb 4-1: config 0 descriptor?? [ 395.967928][T10472] fuse: Bad value for 'user_id' [ 395.972874][T10474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.973362][T10474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.981681][T10472] fuse: Bad value for 'user_id' [ 396.019880][ T5959] hid_parser_main: 3 callbacks suppressed [ 396.019903][ T5959] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0 [ 396.053552][ T5959] hid-generic 0000:0000:0000.004B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 396.301897][T10472] hid-generic 0000:0000:0000.004B: pid 10472 passed too short report [ 396.910587][ T6112] usb 2-1: USB disconnect, device number 5 [ 396.980682][ T30] audit: type=1326 audit(3516640785.606:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10484 comm="syz.4.1504" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfcc78ec29 code=0x0 [ 397.738218][ T5855] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 397.908387][ T5855] usb 3-1: Using ep0 maxpacket: 32 [ 397.916306][ T5855] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 397.932586][ T5855] usb 3-1: config 0 has no interface number 0 [ 397.939386][ T5855] usb 3-1: config 0 interface 184 has no altsetting 0 [ 397.949876][ T5855] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 397.959376][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.967517][ T5855] usb 3-1: Product: syz [ 397.973206][ T5855] usb 3-1: Manufacturer: syz [ 397.977880][ T5855] usb 3-1: SerialNumber: syz [ 397.986379][ T5855] usb 3-1: config 0 descriptor?? [ 397.995904][ T5855] smsc75xx v1.0.0 [ 398.324884][ T6113] usb 4-1: USB disconnect, device number 122 [ 398.403461][ T5855] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 398.418548][ T5855] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 398.448104][ T5855] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 398.466262][T10516] overlayfs: statfs failed on './file0' [ 398.472717][ T5855] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 398.633481][ T5871] Bluetooth: hci2: unexpected event for opcode 0x7205 [ 398.927797][ T6113] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 399.077757][ T6113] usb 4-1: Using ep0 maxpacket: 16 [ 399.085064][ T6113] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 399.096761][ T6113] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 399.111030][ T6113] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 399.120408][ T6113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.128831][ T6113] usb 4-1: Product: syz [ 399.133146][ T6113] usb 4-1: Manufacturer: syz [ 399.138004][ T6113] usb 4-1: SerialNumber: syz [ 399.144781][ T6113] usb 4-1: config 0 descriptor?? [ 399.153436][ T6113] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 399.162745][ T6113] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 399.755077][ T6113] em28xx 4-1:0.0: chip ID is em2874 [ 400.069157][T10551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.080534][T10551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.149513][T10552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.159497][T10552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.363887][ T24] usb 4-1: USB disconnect, device number 123 [ 400.403692][ T24] em28xx 4-1:0.0: Disconnecting em28xx [ 400.435397][ T24] em28xx 4-1:0.0: Freeing device [ 400.624803][ T24] usb 3-1: USB disconnect, device number 8 [ 400.869657][ T5855] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 401.049703][ T5855] usb 2-1: Using ep0 maxpacket: 16 [ 401.083848][ T5855] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 401.099607][ T5855] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 401.119512][T10563] overlay: Unknown parameter 'hash' [ 401.125806][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.158868][ T5855] usb 2-1: Product: syz [ 401.186172][ T5855] usb 2-1: Manufacturer: syz [ 401.203606][ T5855] usb 2-1: SerialNumber: syz [ 401.225842][ T5855] usb 2-1: config 0 descriptor?? [ 401.397158][ T6113] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 401.559582][ T6113] usb 3-1: unable to get BOS descriptor or descriptor too short [ 401.579258][ T6113] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 401.589910][ T6113] usb 3-1: config 251 has 1 interface, different from the descriptor's value: 2 [ 401.603471][ T6113] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=6d.47 [ 401.612781][ T6113] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.625824][ T6113] usb 3-1: Product: syz [ 401.632198][ T6113] usb 3-1: Manufacturer: syz [ 401.637295][ T6113] usb 3-1: SerialNumber: syz [ 401.869393][T10563] netlink: 'syz.2.1528': attribute type 10 has an invalid length. [ 401.909331][T10563] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.927301][T10578] netlink: 'syz.2.1528': attribute type 10 has an invalid length. [ 401.935247][T10563] bond0: (slave team0): Enslaving as an active interface with an up link [ 401.996635][T10578] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 402.013197][T10563] siw: device registration error -23 [ 402.020067][T10563] __nla_validate_parse: 62 callbacks suppressed [ 402.020086][T10563] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1528'. [ 402.210954][ T6113] usb 3-1: interface 1 not found [ 402.274729][ T6113] usb 3-1: USB disconnect, device number 9 [ 402.536702][ T5855] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 402.706678][ T5855] usb 4-1: Using ep0 maxpacket: 32 [ 402.725931][ T5855] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 402.761322][ T5855] usb 4-1: config 0 has no interface number 0 [ 402.769151][ T5855] usb 4-1: config 0 interface 184 has no altsetting 0 [ 402.783845][ T5855] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 402.793273][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.806637][ T5855] usb 4-1: Product: syz [ 402.815884][ T5855] usb 4-1: Manufacturer: syz [ 402.826169][ T5855] usb 4-1: SerialNumber: syz [ 402.850211][ T5855] usb 4-1: config 0 descriptor?? [ 402.895625][ T5855] smsc75xx v1.0.0 [ 403.196866][T10595] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1537'. [ 403.299627][ T5855] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 403.311443][ T5855] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 403.323086][ T5855] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 403.334765][ T5855] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 403.521656][T10604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.531297][T10604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.275627][ T6113] usb 2-1: USB disconnect, device number 6 [ 404.460879][T10628] 9pnet: Could not find request transport: f€ [ 404.470691][T10628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1546'. [ 404.756011][ T6113] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 404.908762][ T6113] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 404.918509][ T6113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.933863][ T6113] usb 2-1: config 0 descriptor?? [ 404.949323][ T6113] cp210x 2-1:0.0: cp210x converter detected [ 405.148554][T10631] tmpfs: Bad value for 'mpol' [ 405.303799][ T5855] usb 4-1: USB disconnect, device number 124 [ 405.370710][T10631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.385527][T10631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.419055][ T6113] usb 2-1: cp210x converter now attached to ttyUSB0 [ 405.611846][T10631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.672330][ T5855] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 405.729801][ T5959] usb 2-1: USB disconnect, device number 7 [ 405.751393][ T5959] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 405.804316][ T5959] cp210x 2-1:0.0: device disconnected [ 405.826150][ T5855] usb 4-1: Using ep0 maxpacket: 16 [ 405.843060][ T5855] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 405.855235][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 405.869763][ T5855] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 405.879299][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.889367][T10654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.898678][ T5855] usb 4-1: Product: syz [ 405.902891][ T5855] usb 4-1: Manufacturer: syz [ 405.903878][T10654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.908066][ T5855] usb 4-1: SerialNumber: syz [ 405.923095][ T5855] usb 4-1: config 0 descriptor?? [ 405.934167][ T5855] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 406.384008][T10667] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1560'. [ 406.470788][T10671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.481414][T10671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.675451][ T5959] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 406.835379][ T5959] usb 2-1: Using ep0 maxpacket: 32 [ 406.852513][ T5959] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 406.865169][ T5959] usb 2-1: config 0 has no interface number 0 [ 406.872362][ T5959] usb 2-1: config 0 interface 184 has no altsetting 0 [ 406.895834][ T5959] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 406.904957][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.913848][ T5959] usb 2-1: Product: syz [ 406.918629][ T5959] usb 2-1: Manufacturer: syz [ 406.923366][ T5959] usb 2-1: SerialNumber: syz [ 406.937441][ T5959] usb 2-1: config 0 descriptor?? [ 406.948660][ T5959] smsc75xx v1.0.0 [ 407.319824][T10692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.329897][T10692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.351125][ T5959] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 407.362662][ T5959] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 407.372673][ T5959] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 407.383306][ T5959] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 407.425271][ T6113] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 407.577133][ T6113] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 407.588968][ T6113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 407.599916][ T6113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 407.609868][ T6113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 407.623128][ T6113] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 407.632388][ T6113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.643774][ T6113] usb 3-1: config 0 descriptor?? [ 407.862989][ T6113] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 407.891188][ T6113] plantronics 0003:047F:FFFF.004C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 407.982429][T10702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.997226][T10702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.011040][T10702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.020226][T10702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.056307][ T5959] usb 3-1: USB disconnect, device number 10 [ 408.864748][ T6113] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 408.963421][ T6112] usb 4-1: USB disconnect, device number 125 [ 409.017748][ T6113] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 409.026576][ T6113] usb 3-1: config 0 has no interface number 1 [ 409.032884][ T6113] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 409.043233][ T6113] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 409.056626][ T6113] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 409.058373][T10714] FAULT_INJECTION: forcing a failure. [ 409.058373][T10714] name failslab, interval 1, probability 0, space 0, times 0 [ 409.066951][ T6113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 409.079939][T10714] CPU: 1 UID: 0 PID: 10714 Comm: syz.3.1574 Not tainted syzkaller #0 PREEMPT(full) [ 409.079964][T10714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 409.079974][T10714] Call Trace: [ 409.079982][T10714] [ 409.079990][T10714] dump_stack_lvl+0x189/0x250 [ 409.080013][T10714] ? __pfx____ratelimit+0x10/0x10 [ 409.080037][T10714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.080054][T10714] ? __pfx__printk+0x10/0x10 [ 409.080083][T10714] ? __pfx___might_resched+0x10/0x10 [ 409.080109][T10714] should_fail_ex+0x414/0x560 [ 409.080138][T10714] should_failslab+0xa8/0x100 [ 409.080163][T10714] __kmalloc_noprof+0xcb/0x7f0 [ 409.080183][T10714] ? snd_pcm_hw_refine+0x967/0x1640 [ 409.080215][T10714] snd_pcm_hw_refine+0x967/0x1640 [ 409.080256][T10714] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 409.080316][T10714] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 409.080338][T10714] ? _snd_pcm_hw_param_min+0x2f5/0x540 [ 409.080364][T10714] snd_pcm_hw_param_near+0xfd/0x500 [ 409.080393][T10714] snd_pcm_oss_change_params_locked+0x2199/0x3e40 [ 409.080455][T10714] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 409.080493][T10714] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 409.080525][T10714] snd_pcm_oss_make_ready+0x11b/0x340 [ 409.080551][T10714] snd_pcm_oss_set_trigger+0x95/0x740 [ 409.080581][T10714] snd_pcm_oss_poll+0x841/0x980 [ 409.080610][T10714] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 409.080636][T10714] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 409.080655][T10714] do_sys_poll+0x8c9/0x1070 [ 409.080678][T10714] ? do_sys_poll+0x361/0x1070 [ 409.080702][T10714] ? __pfx_do_sys_poll+0x10/0x10 [ 409.080734][T10714] ? __pfx_pollwake+0x10/0x10 [ 409.080754][T10714] ? __pfx_pollwake+0x10/0x10 [ 409.080772][T10714] ? __pfx_pollwake+0x10/0x10 [ 409.080791][T10714] ? __pfx_pollwake+0x10/0x10 [ 409.080810][T10714] ? __pfx_pollwake+0x10/0x10 [ 409.080828][T10714] ? __pfx_pollwake+0x10/0x10 [ 409.080847][T10714] ? __pfx_pollwake+0x10/0x10 [ 409.080877][T10714] ? rcu_read_lock_any_held+0xb3/0x120 [ 409.080899][T10714] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 409.080924][T10714] ? vfs_write+0x956/0xb30 [ 409.080974][T10714] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 409.080990][T10714] ? set_user_sigmask+0xc7/0x1b0 [ 409.081010][T10714] ? __pfx_set_user_sigmask+0x10/0x10 [ 409.081030][T10714] ? __fget_files+0x3a0/0x420 [ 409.081056][T10714] __se_sys_ppoll+0x1ff/0x260 [ 409.081083][T10714] ? __pfx___se_sys_ppoll+0x10/0x10 [ 409.081106][T10714] ? __pfx_ksys_write+0x10/0x10 [ 409.081133][T10714] ? do_syscall_64+0xbe/0xfa0 [ 409.081147][T10714] ? __x64_sys_ppoll+0x20/0xc0 [ 409.081173][T10714] do_syscall_64+0xfa/0xfa0 [ 409.081186][T10714] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.081210][T10714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.081226][T10714] ? clear_bhb_loop+0x60/0xb0 [ 409.081247][T10714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.081262][T10714] RIP: 0033:0x7f9cf358ec29 [ 409.081279][T10714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.081293][T10714] RSP: 002b:00007f9cf43b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 409.081312][T10714] RAX: ffffffffffffffda RBX: 00007f9cf37d5fa0 RCX: 00007f9cf358ec29 [ 409.081324][T10714] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 409.081335][T10714] RBP: 00007f9cf43b5090 R08: 0000000000000000 R09: 0000000000000000 [ 409.081346][T10714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 409.081356][T10714] R13: 00007f9cf37d6038 R14: 00007f9cf37d5fa0 R15: 00007ffe5e4e2858 [ 409.081387][T10714] [ 409.446894][ T6113] usb 3-1: SerialNumber: syz [ 409.462093][ T6113] usb 3-1: config 0 descriptor?? [ 409.484953][ T6116] usb 2-1: USB disconnect, device number 8 [ 409.691431][ T6113] uvcvideo 3-1:0.199: Found UVC 0.00 device (0002:0000) [ 409.691471][ T6113] uvcvideo 3-1:0.199: No valid video chain found. [ 409.720494][ T6113] usb 3-1: USB disconnect, device number 11 [ 410.264575][ T6120] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 410.274579][ T5959] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 410.434346][ T6120] usb 2-1: Using ep0 maxpacket: 32 [ 410.441505][ T6120] usb 2-1: unable to get BOS descriptor or descriptor too short [ 410.449595][ T5959] usb 4-1: Using ep0 maxpacket: 32 [ 410.457047][ T6120] usb 2-1: config 6 has an invalid interface number: 123 but max is 0 [ 410.465806][ T6120] usb 2-1: config 6 has no interface number 0 [ 410.472113][ T6120] usb 2-1: config 6 interface 123 has no altsetting 0 [ 410.479176][ T5959] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 410.487594][ T5959] usb 4-1: config 0 has no interface number 0 [ 410.494846][ T5959] usb 4-1: config 0 interface 184 has no altsetting 0 [ 410.504759][ T6120] usb 2-1: New USB device found, idVendor=2184, idProduct=0036, bcdDevice=cb.85 [ 410.514082][ T5959] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 410.523313][ T6120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.531966][ T6120] usb 2-1: Product: syz [ 410.536224][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.544290][ T6120] usb 2-1: Manufacturer: syz [ 410.548901][ T6120] usb 2-1: SerialNumber: syz [ 410.554251][ T5959] usb 4-1: Product: syz [ 410.557103][ T6113] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 410.558445][ T5959] usb 4-1: Manufacturer: syz [ 410.571841][ T5959] usb 4-1: SerialNumber: syz [ 410.585590][ T5959] usb 4-1: config 0 descriptor?? [ 410.594840][ T5959] smsc75xx v1.0.0 [ 410.718943][ T6113] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 410.728283][ T6113] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.736965][ T6113] usb 3-1: Product: syz [ 410.741170][ T6113] usb 3-1: Manufacturer: syz [ 410.746115][ T6113] usb 3-1: SerialNumber: syz [ 410.753468][ T6113] usb 3-1: config 0 descriptor?? [ 410.877704][T10754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.887025][T10754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.997795][ T5959] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 411.009168][ T5959] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 411.019089][ T5959] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 411.029983][ T5959] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 411.246949][ T6113] mos7840 3-1:0.0: required endpoints missing [ 411.265801][ T6113] usb 3-1: USB disconnect, device number 12 [ 411.429426][ T6120] usb 2-1: USB disconnect, device number 9 [ 411.516069][ T5871] Bluetooth: hci0: unexpected event for opcode 0x2043 [ 411.894025][ T6113] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 412.055508][ T6113] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 412.064146][ T6113] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.076317][ T6113] usb 3-1: config 0 has no interface number 0 [ 412.082636][ T6113] usb 3-1: config 0 interface 255 has no altsetting 0 [ 412.098448][ T6113] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 412.111497][ T6113] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.121313][ T6113] usb 3-1: Product: syz [ 412.127276][ T6113] usb 3-1: Manufacturer: syz [ 412.132165][ T6113] usb 3-1: SerialNumber: syz [ 412.140872][ T6113] usb 3-1: config 0 descriptor?? [ 412.155408][ T6113] streamzap 3-1:0.255: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 412.361914][ T6113] usb 3-1: USB disconnect, device number 13 [ 412.693613][ T5855] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 412.847254][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.859094][ T5855] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 412.868483][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.890300][ T5855] usb 2-1: config 0 descriptor?? [ 413.059189][ T6113] usb 4-1: USB disconnect, device number 126 [ 413.097712][T10814] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 413.112275][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1607'. [ 413.328134][ T5855] keytouch 0003:0926:3333.004D: fixing up Keytouch IEC report descriptor [ 413.370933][ T5855] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.004D/input/input51 [ 413.430080][T10831] ------------[ cut here ]------------ [ 413.437433][T10831] WARNING: fs/nsfs.c:493 at nsfs_fh_to_dentry+0xcc5/0xdc0, CPU#1: syz.4.1613/10831 [ 413.447713][T10831] Modules linked in: [ 413.451935][T10831] CPU: 1 UID: 0 PID: 10831 Comm: syz.4.1613 Not tainted syzkaller #0 PREEMPT(full) [ 413.462104][T10831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 413.472553][T10831] RIP: 0010:nsfs_fh_to_dentry+0xcc5/0xdc0 [ 413.479066][T10831] Code: 7c 24 60 e9 10 f8 ff ff e8 48 01 79 ff 90 0f 0b 90 e9 09 f6 ff ff e8 3a 01 79 ff 90 0f 0b 90 e9 81 f6 ff ff e8 2c 01 79 ff 90 <0f> 0b 90 e9 d0 f6 ff ff e8 1e 01 79 ff 45 31 ff e9 d9 f7 ff ff e8 [ 413.499831][T10831] RSP: 0018:ffffc9000b3f7a20 EFLAGS: 00010287 [ 413.506280][T10831] RAX: ffffffff824717f4 RBX: 00000000efffffff RCX: 0000000000080000 [ 413.514829][T10831] RDX: ffffc90017c24000 RSI: 0000000000000039 RDI: 000000000000003a [ 413.522884][T10831] RBP: ffffc9000b3f7b10 R08: ffffffff8fe4db77 R09: 1ffffffff1fc9b6e [ 413.531287][T10831] R10: dffffc0000000000 R11: fffffbfff1fc9b6f R12: 1ffff9200167ef4c [ 413.539581][T10831] R13: ffff888020eaf854 R14: dffffc0000000000 R15: 0000000000000000 [ 413.547844][T10831] FS: 00007fbfcd5816c0(0000) GS:ffff8881258a2000(0000) knlGS:0000000000000000 [ 413.557375][T10831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 413.564516][T10831] CR2: 00007fbfcc9d20c0 CR3: 0000000077f9a000 CR4: 00000000003526f0 [ 413.572601][T10831] Call Trace: [ 413.576074][T10831] [ 413.579097][T10831] ? __pfx_stack_trace_save+0x10/0x10 [ 413.584636][T10831] ? nsfs_fh_to_dentry+0x13c/0xdc0 [ 413.589871][T10831] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 413.595732][T10831] exportfs_decode_fh_raw+0x178/0x6e0 [ 413.601275][T10831] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 413.607421][T10831] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 413.613567][T10831] do_handle_to_path+0xa4/0x1a0 [ 413.618549][T10831] do_handle_open+0x6b4/0x8f0 [ 413.623417][T10831] ? __pfx_do_handle_open+0x10/0x10 [ 413.628829][T10831] ? rcu_is_watching+0x15/0xb0 [ 413.633792][T10831] ? do_syscall_64+0xbe/0xfa0 [ 413.638694][T10831] do_syscall_64+0xfa/0xfa0 [ 413.643396][T10831] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.648957][T10831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.655445][T10831] ? clear_bhb_loop+0x60/0xb0 [ 413.660425][T10831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.666676][T10831] RIP: 0033:0x7fbfcc78ec29 [ 413.671449][T10831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.691397][T10831] RSP: 002b:00007fbfcd581038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 413.700013][T10831] RAX: ffffffffffffffda RBX: 00007fbfcc9d5fa0 RCX: 00007fbfcc78ec29 [ 413.708176][T10831] RDX: 0000000000400040 RSI: 0000200000000000 RDI: 0000000000000003 [ 413.716394][T10831] RBP: 00007fbfcc811e41 R08: 0000000000000000 R09: 0000000000000000 [ 413.724688][T10831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.732867][T10831] R13: 00007fbfcc9d6038 R14: 00007fbfcc9d5fa0 R15: 00007ffef71f8c38 [ 413.741186][T10831] [ 413.744328][T10831] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 413.751880][T10831] CPU: 1 UID: 0 PID: 10831 Comm: syz.4.1613 Not tainted syzkaller #0 PREEMPT(full) [ 413.761251][T10831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 413.771574][T10831] Call Trace: [ 413.774885][T10831] [ 413.777857][T10831] dump_stack_lvl+0x99/0x250 [ 413.782644][T10831] ? __asan_memcpy+0x40/0x70 [ 413.787348][T10831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.792573][T10831] ? __pfx__printk+0x10/0x10 [ 413.797343][T10831] vpanic+0x237/0x6d0 [ 413.801354][T10831] ? __pfx_vpanic+0x10/0x10 [ 413.805891][T10831] ? is_bpf_text_address+0x292/0x2b0 [ 413.811289][T10831] ? is_bpf_text_address+0x26/0x2b0 [ 413.816684][T10831] panic+0xb9/0xc0 [ 413.820426][T10831] ? __pfx_panic+0x10/0x10 [ 413.824957][T10831] __warn+0x334/0x4c0 [ 413.828943][T10831] ? nsfs_fh_to_dentry+0xcc5/0xdc0 [ 413.834060][T10831] ? nsfs_fh_to_dentry+0xcc5/0xdc0 [ 413.839191][T10831] report_bug+0x2be/0x4f0 [ 413.843535][T10831] ? nsfs_fh_to_dentry+0xcc5/0xdc0 [ 413.848678][T10831] ? nsfs_fh_to_dentry+0xcc5/0xdc0 [ 413.853792][T10831] ? nsfs_fh_to_dentry+0xcc7/0xdc0 [ 413.858917][T10831] handle_bug+0x84/0x160 [ 413.863174][T10831] exc_invalid_op+0x1a/0x50 [ 413.867711][T10831] asm_exc_invalid_op+0x1a/0x20 [ 413.872592][T10831] RIP: 0010:nsfs_fh_to_dentry+0xcc5/0xdc0 [ 413.878334][T10831] Code: 7c 24 60 e9 10 f8 ff ff e8 48 01 79 ff 90 0f 0b 90 e9 09 f6 ff ff e8 3a 01 79 ff 90 0f 0b 90 e9 81 f6 ff ff e8 2c 01 79 ff 90 <0f> 0b 90 e9 d0 f6 ff ff e8 1e 01 79 ff 45 31 ff e9 d9 f7 ff ff e8 [ 413.898136][T10831] RSP: 0018:ffffc9000b3f7a20 EFLAGS: 00010287 [ 413.904230][T10831] RAX: ffffffff824717f4 RBX: 00000000efffffff RCX: 0000000000080000 [ 413.912228][T10831] RDX: ffffc90017c24000 RSI: 0000000000000039 RDI: 000000000000003a [ 413.920331][T10831] RBP: ffffc9000b3f7b10 R08: ffffffff8fe4db77 R09: 1ffffffff1fc9b6e [ 413.928349][T10831] R10: dffffc0000000000 R11: fffffbfff1fc9b6f R12: 1ffff9200167ef4c [ 413.936463][T10831] R13: ffff888020eaf854 R14: dffffc0000000000 R15: 0000000000000000 [ 413.944476][T10831] ? nsfs_fh_to_dentry+0xcc4/0xdc0 [ 413.949634][T10831] ? __pfx_stack_trace_save+0x10/0x10 [ 413.955169][T10831] ? nsfs_fh_to_dentry+0x13c/0xdc0 [ 413.960307][T10831] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 413.965875][T10831] exportfs_decode_fh_raw+0x178/0x6e0 [ 413.971385][T10831] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 413.977416][T10831] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 413.983394][T10831] do_handle_to_path+0xa4/0x1a0 [ 413.988392][T10831] do_handle_open+0x6b4/0x8f0 [ 413.993629][T10831] ? __pfx_do_handle_open+0x10/0x10 [ 413.998964][T10831] ? rcu_is_watching+0x15/0xb0 [ 414.004154][T10831] ? do_syscall_64+0xbe/0xfa0 [ 414.008938][T10831] do_syscall_64+0xfa/0xfa0 [ 414.013675][T10831] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.018921][T10831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.025007][T10831] ? clear_bhb_loop+0x60/0xb0 [ 414.029869][T10831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.036030][T10831] RIP: 0033:0x7fbfcc78ec29 [ 414.040562][T10831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.060189][T10831] RSP: 002b:00007fbfcd581038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 414.068615][T10831] RAX: ffffffffffffffda RBX: 00007fbfcc9d5fa0 RCX: 00007fbfcc78ec29 [ 414.076600][T10831] RDX: 0000000000400040 RSI: 0000200000000000 RDI: 0000000000000003 [ 414.084574][T10831] RBP: 00007fbfcc811e41 R08: 0000000000000000 R09: 0000000000000000 [ 414.092567][T10831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.100543][T10831] R13: 00007fbfcc9d6038 R14: 00007fbfcc9d5fa0 R15: 00007ffef71f8c38 [ 414.108707][T10831] [ 414.111897][T10831] Kernel Offset: disabled [ 414.116306][T10831] Rebooting in 86400 seconds..