last executing test programs: 6m11.437341734s ago: executing program 32 (id=115): r0 = openat$kvm(0x0, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000006c0)={0x79, 0x0, 0x756}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000c1d000/0x18000)=nil, &(0x7f00000009c0)=[@text64={0x40, 0x0}], 0x1, 0x23, 0x0, 0x0) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000740)={0x0, 0x0}) r4 = openat$kvm(0x0, &(0x7f00000008c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f0000000900)={0x0, &(0x7f0000000940)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}], 0x30}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m28.163863402s ago: executing program 33 (id=667): memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2T\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xb8\xb5\xbf5\xc2tDF\xe9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x30, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) 1m44.451952729s ago: executing program 8 (id=972): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0xffffffffffffff47}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x0, 0xfffffffffffffff9}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0xffffffffffffff67}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3000}]}) 1m44.350786079s ago: executing program 6 (id=973): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x14}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x40, 0x12, 0x4, "03e00382"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000a00)={0x20, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) 1m44.083017456s ago: executing program 8 (id=974): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x6004, 0x1) lstat(0x0, &(0x7f00000001c0)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) unlink(&(0x7f0000000140)='./file0\x00') r2 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000067c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000006800)={0x0, &(0x7f0000006840)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000006880)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m43.323317414s ago: executing program 38 (id=974): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x6004, 0x1) lstat(0x0, &(0x7f00000001c0)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) unlink(&(0x7f0000000140)='./file0\x00') r2 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000067c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000006800)={0x0, &(0x7f0000006840)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000006880)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m42.319263037s ago: executing program 6 (id=980): socket$inet6_sctp(0xa, 0x1, 0x84) pipe2$9p(&(0x7f0000000480), 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xd3a, &(0x7f0000000380)={0x0, 0x8010001, 0x3a10, 0x200004, 0x2003}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/mtrr\x00', 0x2, 0x0) r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 1m41.30819949s ago: executing program 6 (id=984): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r1, &(0x7f0000000000)='3', 0x4e) ioctl$SG_IO(r1, 0x2285, 0x0) fanotify_init(0x10, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x11) 1m40.858665896s ago: executing program 6 (id=985): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000640)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000680)={0x1, 0x1, 0x0, 0x0, &(0x7f00000006c0)=""/61, 0x58000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000700)=0x1) kcmp(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m40.403489963s ago: executing program 39 (id=985): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000640)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000680)={0x1, 0x1, 0x0, 0x0, &(0x7f00000006c0)=""/61, 0x58000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000700)=0x1) kcmp(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m30.320189474s ago: executing program 9 (id=1012): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0xb, 0x60443) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000001c0)={0x14}) 1m28.753327354s ago: executing program 9 (id=1013): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syz_tun\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000180), 0x12) listen(r2, 0x5) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000008050010010b"], 0xa) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xa) 1m28.460507134s ago: executing program 9 (id=1014): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000480), 0x0, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x653}], 0x1) 1m27.433656619s ago: executing program 9 (id=1016): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x20, 0x3, 0x46d, 0xc082, 0x0, 0x0, "0600ff0901a10185107508950609018102090191028511750895130901810209"}}, 0x138) write$UHID_INPUT2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c000000d45bd324d5"], 0xd) 1m27.296145483s ago: executing program 9 (id=1018): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 1m27.13584498s ago: executing program 9 (id=1019): openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mmap$snddsp_status(&(0x7f0000002000/0x3000)=nil, 0x1000, 0x1, 0x100010, 0xffffffffffffffff, 0x82000000) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) 1m20.839461624s ago: executing program 3 (id=1033): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000480), 0x0, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="fb7ef3f08d8f0d64c4636b96073c171a2926f00a2baa2c2752e6ba348df7c6cb64a0a5dbc368e6e57135b7c7f20a1e4ca2d0c293b9df5480df71d6dcdd9beb4fa3247b3b7e38346fa0436ee2d9c57c41af42a71188cbd6b252eb449052ef2d76f3c0ab72b88db15921409f4efe9fe517430ec288238072967546e6a834ac62fec1df765d0147d8d2993dceb59f5b66b848a8f1d09a0d8108e7ef271311ea18df574e3e0b9242dd27f45258cb3bb762582f5737efdc15dabfa031673c84696ab886bdd35bb35a5346cf472e001e71c5384fc353b3181775acb185307d6f762e564b7fd4f06f875fc919c3ebb015f673a3cb380b03abbbfe30c781bd8b17292a1e2b748107e60e568c1e1f86a0cf01e30772b6b2146cd4d1f2e9fc7b5bcefded909fe7bf723490ced2d106004e3a0cd7b9c3519b05741751325fe8538085cc1f902fa544dcc929f10469fe39c3cf61f786254a373316923186fa08ef3c8917d4c2df0d3e41c32b6948177e71b23c3a9eb9c30db62011da02d48da9318c20a438f6ba2962ce066b8793e16831c350a379f8c54c5de2eab0b0117e3dc30f5c27c87b2eb33b43215bdcabb7185b1ca317dc967cfdfdcbf92a4e196bcf0d6ba1cea19dd296b4de3625a95ea0ee82efc84379be3125e84d8183ebce42f98654f44f86d49b13529b6cec5acbe93af52987080df30eed17685881b67777877226704091bd1f07b76c3af968b6afc17751d27756d8df673ee1cc756cbc9ef90ee5477c529105548e84a9fa4cba55b8fe48ef33e206952e5be378ef8df0c7c024080b8961d49a6b863cd8f4e29dd1c66fd9f93ea18010b541133f792fde35c33b0bd8ef50f205193ac4c223f6f5e9659ff679a132fee9cf1769ecef53bc2ed1b3feaa0306025a68e87a88f7bf740a457024963ef1dac67dbd1bae5aec6604b8440e5f3cf21d1c4187db1a1f205054ec1f9dd4d86977bdd6c4c30ef70e2f96fca9ad0cd08dd057286fb658aa836f5a0b1e0c0b86e5e4ab951fd85fa9bc1fa58696b69b2a423a9da883ea945955840c11ae26af5a08cf7d8ce3eda8eef541ba114e0614a0e864424df8aaab36a8abcacf52adddd298c11557f6948215b809e817fefbba3c2fdd96b2c3f23c20bb3c04ccf92c570db4a1555907a79c1ea7fe4085356dbf1d892d86691fcb6ad8b9a7b4b3703afe7e2c2d0da56e31f7d724aa1ece518602235cccf491bc282195054dfebb630b0cbbf7c2a9b82ea6999316dff165c06df46731d1e6a8424cfabac225c32e1fee0a82bcc954f56e5c92da2a1f5d5dc6f6f0b6cf207f0b5986459f5f56643e7b147056c3186753749e6d4ba51a594429a9b4a99b4885fc1888ef784025ad07afe5e7aa8a50dd0d4981905b7f11198b983eb0437ca00e0e642644e63d9d87d64ae75915230887fa8a6e9b446bd4c1d0200a4d77d63782b8d00448849aac5a152df21ef03665613f18f2d4f94f147bd73bf37c7f706a57c9352db92b7359f76a06c63e34fa61037e00457527effd358a21ee7cdee24fb5a8f57494f6e9913935afbd76cc11981b9ed2774c2150312e26d9e17a903b4c34c512a92b608dd46b95e023fe59fc3c343373899d8e52a4460ca1ab875f4dfc16383dd7a1e64e6b97f0adafa0d76dc7ff428cbb3c88aa8ae5e7362a776c565635db3147517477fbe5cc37c0359236dfd5c11e9800747e9419a04a5404c049c831a21837c264418f7ff83ba34ae6a884189d65047842346ef6610659e8eeade4b9c688d27950d08a568ab02f7da11d431dcc291280304d4256cce5a9234c323f490fd6a48dbb95bfc1e16df4e2b6ef940e477bdffc56b330a803c239c3abc18d8ed1f6719d5868a91f99e3477961641c0077a295d7764b18e08e21a2f1806f980a8669949fcaacfc0ee4b1d14984ad5fdc98959d628938a3a3873cc35d5f3053e613487dadf4cc1a0181d4b7b3125151a32b5994bee46a75ec69909a602e3793eff825afa958ca56714038f8b83c01a3561ee0d9f549e48ff0cd5d6dcc2a05f4311f0df694f62f5f3d562135a8a49a64fba30d291e751e968a365339e3925e2b7192e9402e06c27c4f7cab5710fb82f3816049b1cbd84333f440662f0a7cb88e2d5be960be3b67f79d165010dba4b702da28231aada36f2de81c80a1e54cc19d4e77526fb1df86b280d1e15500e7659a92bead43f033d5ee03ea8a229d7dff749026cf6a573c7c613857e9aae44dfc9f9bd85286cd1c698135b8d8948af601722a649ee67c1414d2ee2a767ab71489f69394f4", 0x653}], 0x1) 1m20.604505748s ago: executing program 3 (id=1035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, 0x9, 0x6, 0x1, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}]}]}, 0x38}}, 0x0) 1m20.436356195s ago: executing program 3 (id=1037): syz_usb_connect(0x0, 0x2e, &(0x7f0000000280)=ANY=[@ANYBLOB="32010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) syz_usb_connect(0x0, 0x5a, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1m18.72135098s ago: executing program 3 (id=1041): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) pipe2$9p(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xd3a, &(0x7f0000000380)={0x0, 0x8010001, 0x3a10, 0x200004, 0x2003}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/mtrr\x00', 0x2, 0x0) r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 1m18.402566783s ago: executing program 0 (id=1042): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES8=r1]) 1m17.693070615s ago: executing program 3 (id=1044): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x653}], 0x1) 1m17.214591694s ago: executing program 3 (id=1045): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x22, 0x3, 0x46d, 0xc082, 0x0, 0x0, "0600ff0901a101851075089506090181020901910285117508951309018102090191"}}, 0x13a) write$UHID_INPUT2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c000000d45bd324d5"], 0xd) 1m16.652976312s ago: executing program 40 (id=1045): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x22, 0x3, 0x46d, 0xc082, 0x0, 0x0, "0600ff0901a101851075089506090181020901910285117508951309018102090191"}}, 0x13a) write$UHID_INPUT2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c000000d45bd324d5"], 0xd) 1m16.636754393s ago: executing program 0 (id=1047): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000006c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 1m16.206793097s ago: executing program 0 (id=1049): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1f2) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='27', 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000380], 0x700, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 1m14.510669711s ago: executing program 0 (id=1053): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) pipe2$9p(&(0x7f0000000480), 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xd3a, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/mtrr\x00', 0x2, 0x0) r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 1m13.524018522s ago: executing program 0 (id=1054): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x653}], 0x1) 1m12.95201523s ago: executing program 0 (id=1055): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000001600)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000016c0)="11", 0x1}], 0x1}}], 0x1, 0x40015) 1m12.551168501s ago: executing program 41 (id=1055): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000001600)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000016c0)="11", 0x1}], 0x1}}], 0x1, 0x40015) 1m12.36556583s ago: executing program 1 (id=1057): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1m11.949121043s ago: executing program 42 (id=1019): openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mmap$snddsp_status(&(0x7f0000002000/0x3000)=nil, 0x1000, 0x1, 0x100010, 0xffffffffffffffff, 0x82000000) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) 1m11.924853045s ago: executing program 1 (id=1059): syz_usb_connect(0x2, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x2d, 0x0, 0xe0, 0x8, 0x17ef, 0x721e, 0x410e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x9, 0x80, 0x1, "", [{{0x9, 0x4, 0xfe, 0x80, 0x0, 0x2, 0x6, 0x0, 0xfc}}]}}]}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 1m10.814715649s ago: executing program 1 (id=1060): r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000082, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000300)=@ccm_128={{0x304}, "6a70c78437a4f76b", "d5658bd0bf23145dfbc42709195e63d6", "c3d75107", "5c2aa5f653f1ca80"}, 0x28) sendto$inet6(r2, &(0x7f0000000340)='{', 0x1, 0x8000, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x4040804) sendto$inet6(r2, &(0x7f0000000440)="a03ff864b8bf25b87c6cba753c1c8fbdcd", 0x11, 0x8000, 0x0, 0x0) 1m10.048251117s ago: executing program 1 (id=1061): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) pipe2$9p(&(0x7f0000000480), 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xd3a, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/mtrr\x00', 0x2, 0x0) r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 1m9.052331219s ago: executing program 1 (id=1062): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0x112, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x582, 0xeb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x100, 0x3, 0x1, 0x6, 0x10, 0xa8, {0x8, 0xb, 0x0, 0x0, 0x1, 0x0, 0x30, 0x8d}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x3d, 0x6b000000}, [@cluster_info_segment={0x6, 0x20, 0x0, 0x89, 0x8}, @power_domain={0xf, 0x24, 0x10, 0x2, 0x3, 0x7, 0x0, "3a954390f052"}, @source_unit={0xc, 0x24, 0xb, 0xfd, 0x2, 0x2, 0xf8}, @processing_unit={0x9, 0x24, 0x9, 0x5, 0x4, [0x3]}, @feature_unit={0x9, 0x24, 0x7, 0x4, 0x1, [0x7]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x5, 0x1ff, 0x7, 0x0, 0xc, 0xc, 0x8, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xcf, 0x4, 0x4, 0x7, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0x6, 0x3, {0xa, 0x25, 0x25, 0x9, 0xca, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x2, 0xfffffff8, 0x9, 0x1, 0x5, 0x8, 0x1, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xe9, 0x7, 0x85, 0x1}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xe251, 0x1, 0x2, 'j'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3a0d, 0x0, 0x7, 0x5}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x80, 0x3, 0x3, 0xa6, "827ee0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x4, 0x38, {0xa, 0x25, 0x25, 0x9, 0x77, 0x7}}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1m8.478588957s ago: executing program 1 (id=1063): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x14}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x40, 0x12, 0x4, "03e00382"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000a00)={0x20, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000200)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m7.925309654s ago: executing program 43 (id=1063): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x14}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x40, 0x12, 0x4, "03e00382"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000a00)={0x20, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000200)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.306710751s ago: executing program 2 (id=1277): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) r1 = dup(r0) fadvise64(r0, 0x8000000000000db, 0x14f, 0x5) write$UHID_INPUT(r1, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) 16.889590373s ago: executing program 2 (id=1278): getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000002640)={0x8, 0x7, 0x0, 'syz0\x00'}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={0x0}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000025c0)=@arm64={0x10, 0xa, 0x3a}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000002600)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]}) 16.843713598s ago: executing program 2 (id=1279): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000a00)='27', 0x2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write(0xffffffffffffffff, &(0x7f00000006c0), 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x9080) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, 0x0) setns(0xc9, 0x0) write(0xffffffffffffffff, &(0x7f0000000a80)="29000000140005b7ff00100004", 0xd) 16.662449017s ago: executing program 2 (id=1281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x58, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x21, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x109401, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.526540793s ago: executing program 2 (id=1296): mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000a00)='./sys\x00', &(0x7f0000000a40)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000ac0)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) 15.361669s ago: executing program 2 (id=1298): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='tcp 2', 0x5) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000b00)={0x6, 0x1, 0x0, 0x20000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x44}, @multicast2}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000b40)=0xa, 0x4) 3.714569991s ago: executing program 5 (id=1376): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.278603358s ago: executing program 7 (id=1389): ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='27', 0x2) socket(0x10, 0x4, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, 0x0) 1.922683434s ago: executing program 5 (id=1390): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 1.792047108s ago: executing program 5 (id=1391): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000940)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000980)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 1.47448324s ago: executing program 5 (id=1393): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRESDEC=r0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffff"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x830943, 0x0) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r1, &(0x7f00000019c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000"], 0xfdef) 1.381156749s ago: executing program 7 (id=1395): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001780), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000003940)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @empty, 0x1}}]}]}]}, 0x74}}, 0x40094) 1.318479136s ago: executing program 5 (id=1396): keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7000097c4cb3"], 0xc) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16], 0x14) 1.258951062s ago: executing program 7 (id=1397): syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "25eb00", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x7f, 0xc8, @any, 0x1}}}, 0xe) 1.07806831s ago: executing program 5 (id=1399): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 919.335366ms ago: executing program 4 (id=1403): getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000002640)={0x8, 0x7, 0x0, 'syz0\x00'}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002580), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={0x0}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000025c0)=@arm64={0x10, 0xa, 0x3a}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 786.28774ms ago: executing program 4 (id=1404): mkdirat(0xffffffffffffff9c, &(0x7f0000000d80)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000dc0)='./config\x00', &(0x7f0000000e00)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 698.835859ms ago: executing program 4 (id=1405): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000240)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) sendto(r0, &(0x7f00000002c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) 682.491871ms ago: executing program 4 (id=1406): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) io_setup(0x7, &(0x7f0000000080)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x4c5, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0}]) 641.763855ms ago: executing program 7 (id=1407): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x1, 0x0, 0x24410, 0x0, 0x0, @by_dev={r1}, [@raid={0x32000000, 0x8, 0x0, 0x88, 'raid\x00', {'raid1', 0x20, '3 64 data_offset 8', 0x20, 0x1, [{0x20, @dev=@ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}}]}}]}) 454.759994ms ago: executing program 7 (id=1408): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x18, 0x41, 0x1, 0x70bd29, 0x80000004, {0x1}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 454.597134ms ago: executing program 4 (id=1409): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 424.169517ms ago: executing program 4 (id=1410): syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000480), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000600)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 406.131139ms ago: executing program 7 (id=1411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2901, 0x0) close(r1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) 0s ago: executing program 44 (id=1298): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='tcp 2', 0x5) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000b00)={0x6, 0x1, 0x0, 0x20000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x44}, @multicast2}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000b40)=0xa, 0x4) kernel console output (not intermixed with test programs): packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.784295][T10655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.933141][T10655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.941111][T10655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.967869][T10655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.146941][ T5098] Bluetooth: hci1: command tx timeout [ 414.146967][ T5791] Bluetooth: hci4: command tx timeout [ 414.321715][T10655] hsr_slave_0: entered promiscuous mode [ 414.333794][T10655] hsr_slave_1: entered promiscuous mode [ 414.344377][T10655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.357197][T10655] Cannot create hsr debugfs directory [ 414.366565][ T9792] hsr_slave_0: left promiscuous mode [ 414.387465][ T9792] hsr_slave_1: left promiscuous mode [ 414.395425][ T9792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.407077][ T9792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.423397][ T9792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.433579][ T9792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.442260][ T9792] bridge_slave_1: left allmulticast mode [ 414.454947][ T9792] bridge_slave_1: left promiscuous mode [ 414.460982][ T9792] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.479547][ T9792] bridge_slave_0: left allmulticast mode [ 414.485304][ T9792] bridge_slave_0: left promiscuous mode [ 414.497305][ T9792] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.554743][ T9792] veth1_macvtap: left promiscuous mode [ 414.560523][ T9792] veth0_macvtap: left promiscuous mode [ 414.566251][ T9792] veth1_vlan: left promiscuous mode [ 414.574084][ T9792] veth0_vlan: left promiscuous mode [ 415.282799][ T9792] team0 (unregistering): Port device team_slave_1 removed [ 415.332825][ T9792] team0 (unregistering): Port device team_slave_0 removed [ 415.372865][ T9792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.430497][ T9792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.758261][ T5098] Bluetooth: hci3: command tx timeout [ 415.852720][ T9792] bond0 (unregistering): Released all slaves [ 416.022081][T10609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.228337][ T5098] Bluetooth: hci4: command tx timeout [ 416.239864][ T5098] Bluetooth: hci1: command tx timeout [ 416.341245][T10727] chnl_net:caif_netlink_parms(): no params data found [ 416.413092][T10609] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.506619][ T2880] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.513844][ T2880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.555193][T10660] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 416.598940][ T2880] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.606152][ T2880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.667349][T10660] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 416.681586][T10660] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 416.786014][T10660] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 417.261583][T10727] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.268809][T10727] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.280996][T10727] bridge_slave_0: entered allmulticast mode [ 417.293136][T10727] bridge_slave_0: entered promiscuous mode [ 417.304073][T10727] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.317942][T10727] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.334986][T10727] bridge_slave_1: entered allmulticast mode [ 417.344132][T10727] bridge_slave_1: entered promiscuous mode [ 417.450055][ T2942] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.724479][ T2942] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.934352][T10727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.003359][ T2942] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.038858][T10727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.154576][ T2942] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.244097][T10727] team0: Port device team_slave_0 added [ 418.292330][T10727] team0: Port device team_slave_1 added [ 418.309870][ T5098] Bluetooth: hci1: command tx timeout [ 418.426456][T10727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.443952][T10727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.471036][T10727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.543259][T10660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.551819][T10727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.558808][T10727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.586974][T10727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.684288][T10655] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 418.756681][T10655] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 418.771884][T10609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.784097][T10660] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.806815][T10727] hsr_slave_0: entered promiscuous mode [ 418.818488][T10727] hsr_slave_1: entered promiscuous mode [ 418.831450][T10727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.840099][T10727] Cannot create hsr debugfs directory [ 418.858744][T10655] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 418.874155][T10655] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 418.993693][ T2905] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.000981][ T2905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.079353][ T2880] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.086676][ T2880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.404711][T10609] veth0_vlan: entered promiscuous mode [ 419.664930][T10609] veth1_vlan: entered promiscuous mode [ 419.864034][T10609] veth0_macvtap: entered promiscuous mode [ 419.913599][T10609] veth1_macvtap: entered promiscuous mode [ 419.997210][T10655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.029106][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.049204][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.060046][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.080755][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.102945][T10609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.163967][T10655] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.185287][ T9792] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.192431][ T9792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.215602][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.236101][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.254340][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.270664][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.286501][T10609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.306496][T10609] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.320505][T10609] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.339593][T10609] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.348860][T10609] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.370537][ T9792] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.377714][ T9792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.391764][ T5098] Bluetooth: hci1: command tx timeout [ 420.436951][T10660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.107215][ T2942] hsr_slave_0: left promiscuous mode [ 421.150153][ T2942] hsr_slave_1: left promiscuous mode [ 421.165686][ T2942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.181596][ T2942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.189983][ T2942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.208792][ T2942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.225279][ T2942] bridge_slave_1: left allmulticast mode [ 421.230983][ T2942] bridge_slave_1: left promiscuous mode [ 421.251851][ T2942] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.273433][ T2942] bridge_slave_0: left allmulticast mode [ 421.279149][ T2942] bridge_slave_0: left promiscuous mode [ 421.297068][ T2942] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.338788][ T2942] veth1_macvtap: left promiscuous mode [ 421.344523][ T2942] veth0_macvtap: left promiscuous mode [ 421.350244][ T2942] veth1_vlan: left promiscuous mode [ 421.358703][ T2942] veth0_vlan: left promiscuous mode [ 422.106556][ T2942] team0 (unregistering): Port device team_slave_1 removed [ 422.151369][ T2942] team0 (unregistering): Port device team_slave_0 removed [ 422.198598][ T2942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.255513][ T2942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.616064][ T2942] bond0 (unregistering): Released all slaves [ 422.684368][T10655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 422.987952][T10660] veth0_vlan: entered promiscuous mode [ 423.049751][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.058379][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.143413][T10660] veth1_vlan: entered promiscuous mode [ 423.301865][ T2942] IPVS: stop unused estimator thread 0... [ 423.331057][ T2921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.342107][ T2921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.446025][T10727] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 423.471983][T10727] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 423.493277][T10727] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 423.535650][T10727] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 423.579129][T10660] veth0_macvtap: entered promiscuous mode [ 423.606330][T10880] X25: received unknown 00 with LCI 000 [ 423.620678][T10655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.630439][T10660] veth1_macvtap: entered promiscuous mode [ 423.766112][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.782344][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.804494][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.836088][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.866397][T10660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.911074][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.937280][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.963389][T10660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.985006][T10660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.997987][T10660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.030636][T10660] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.040970][T10660] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.052221][T10660] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.062141][T10660] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.124195][T10892] netlink: 'syz.2.1065': attribute type 4 has an invalid length. [ 424.451460][T10727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.475257][ T2942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.498279][ T2942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.566755][T10727] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.647012][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.660607][ T2921] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.664313][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.667980][ T2921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.735931][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.743199][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.891466][T10655] veth0_vlan: entered promiscuous mode [ 424.977319][ T27] audit: type=1800 audit(1794699928.845:8): pid=10909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1058" name=08 dev="sda1" ino=2045 res=0 errno=0 [ 424.993314][T10655] veth1_vlan: entered promiscuous mode [ 425.116848][T10655] veth0_macvtap: entered promiscuous mode [ 425.147321][T10655] veth1_macvtap: entered promiscuous mode [ 425.186031][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.207200][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.225753][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.265675][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.291096][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.303547][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.320599][T10655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.384624][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.434427][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.457253][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.473888][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.489622][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.524904][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.556029][T10655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.613232][T10655] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.651764][T10655] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.687339][T10655] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.702566][T10655] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.807309][T10727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.934978][ T28] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 425.966472][ T2921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.984592][ T2921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.061963][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.080355][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.167852][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.189948][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.220231][ T28] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 426.245080][ T28] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 426.273600][ T28] usb 3-1: Manufacturer: syz [ 426.291092][ T28] usb 3-1: config 0 descriptor?? [ 426.530314][T10727] veth0_vlan: entered promiscuous mode [ 426.553067][T10727] veth1_vlan: entered promiscuous mode [ 426.575119][ T23] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 426.693047][T10727] veth0_macvtap: entered promiscuous mode [ 426.712906][T10727] veth1_macvtap: entered promiscuous mode [ 426.764925][T10727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.776529][T10727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.789514][T10727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.810702][T10727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.820990][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 426.834106][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.847441][T10727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.858140][ T23] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 426.867889][T10727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.880384][ T23] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 426.893629][T10727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.904517][T10727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.918997][ T23] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 426.929890][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.940351][ T5776] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 426.950743][T10727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.961340][ T23] usb 5-1: Product: syz [ 426.970174][ T23] usb 5-1: Manufacturer: syz [ 426.977712][T10727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.988610][ T23] usb 5-1: SerialNumber: syz [ 426.999633][T10727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.016027][T10727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.028236][T10727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.040051][T10727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.052312][T10727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.062687][T10727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.074181][T10727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.087108][T10727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.112966][T10727] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.138689][T10727] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.149338][T10727] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.159497][T10727] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.169791][ T5776] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.185420][ T5776] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 427.251525][ T5776] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 427.261897][ T5776] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 427.275725][ T5776] usb 6-1: Manufacturer: syz [ 427.283844][ T5776] usb 6-1: config 0 descriptor?? [ 427.333481][ T28] uclogic 0003:256C:006D.000F: failed retrieving string descriptor #100: -71 [ 427.374702][ T28] uclogic 0003:256C:006D.000F: failed retrieving pen parameters: -71 [ 427.385971][ T5776] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 427.404259][ T28] uclogic 0003:256C:006D.000F: failed probing pen v1 parameters: -71 [ 427.414691][ T28] uclogic 0003:256C:006D.000F: failed probing parameters: -71 [ 427.432394][ T28] uclogic: probe of 0003:256C:006D.000F failed with error -71 [ 427.465319][ T28] usb 3-1: USB disconnect, device number 63 [ 427.484585][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.515067][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.567985][ T23] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 427.624105][ T9792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.643132][ T9792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.658975][ T23] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 427.687386][ T23] usb 5-1: USB disconnect, device number 59 [ 427.712854][ T7311] udevd[7311]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 428.667773][T10992] FAULT_INJECTION: forcing a failure. [ 428.667773][T10992] name failslab, interval 1, probability 0, space 0, times 0 [ 428.696382][T10992] CPU: 1 PID: 10992 Comm: syz.7.1078 Not tainted syzkaller #0 [ 428.703919][T10992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 428.714040][T10992] Call Trace: [ 428.717352][T10992] [ 428.720324][T10992] dump_stack_lvl+0x18c/0x250 [ 428.725071][T10992] ? show_regs_print_info+0x20/0x20 [ 428.730310][T10992] ? load_image+0x420/0x420 [ 428.734867][T10992] ? __might_sleep+0xe0/0xe0 [ 428.739514][T10992] ? __lock_acquire+0x7eb0/0x7eb0 [ 428.744575][T10992] should_fail_ex+0x394/0x4c0 [ 428.749287][T10992] should_failslab+0x9/0x20 [ 428.753815][T10992] slab_pre_alloc_hook+0x59/0x300 [ 428.758879][T10992] kmem_cache_alloc+0x5a/0x2d0 [ 428.763666][T10992] ? mempool_init_node+0x1e9/0x480 [ 428.768810][T10992] ? mempool_free+0x320/0x320 [ 428.773528][T10992] mempool_init_node+0x1e9/0x480 [ 428.778499][T10992] ? mempool_alloc_slab+0x60/0x60 [ 428.783561][T10992] ? mempool_free+0x320/0x320 [ 428.788293][T10992] mempool_init+0x3a/0x50 [ 428.792662][T10992] dm_io_client_create+0x78/0xf0 [ 428.797683][T10992] dm_bufio_client_create+0x6b3/0x1400 [ 428.803196][T10992] ? dm_bufio_get_client+0x40/0x40 [ 428.808349][T10992] ? calculate_device_limits+0x954/0xf10 [ 428.814109][T10992] dm_integrity_ctr+0x38ea/0x4bb0 [ 428.819197][T10992] ? sb_check+0x310/0x310 [ 428.823582][T10992] ? dm_split_args+0x92/0x5b0 [ 428.828294][T10992] ? rcu_is_watching+0x15/0xb0 [ 428.833111][T10992] ? dm_split_args+0x505/0x5b0 [ 428.837953][T10992] dm_table_add_target+0x575/0xbc0 [ 428.843219][T10992] table_load+0x2eb/0x7e0 [ 428.847603][T10992] ? dev_wait+0x2f0/0x2f0 [ 428.851987][T10992] ? __might_fault+0xaa/0x120 [ 428.856789][T10992] ? __might_fault+0xc6/0x120 [ 428.861528][T10992] ? __might_fault+0xaa/0x120 [ 428.866245][T10992] ? dev_wait+0x2f0/0x2f0 [ 428.870613][T10992] dm_ctl_ioctl+0x975/0xd00 [ 428.875159][T10992] ? dev_wait+0x2f0/0x2f0 [ 428.879524][T10992] ? dm_poll+0x120/0x120 [ 428.883829][T10992] ? bpf_lsm_file_ioctl+0x9/0x10 [ 428.888804][T10992] ? security_file_ioctl+0x80/0xa0 [ 428.893985][T10992] ? dm_poll+0x120/0x120 [ 428.898290][T10992] __se_sys_ioctl+0xfd/0x170 [ 428.903011][T10992] do_syscall_64+0x55/0xb0 [ 428.907483][T10992] ? clear_bhb_loop+0x40/0x90 [ 428.912195][T10992] ? clear_bhb_loop+0x40/0x90 [ 428.916912][T10992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.922846][T10992] RIP: 0033:0x7fd0bf19fb19 [ 428.927291][T10992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.946931][T10992] RSP: 002b:00007fd0c0052028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.955380][T10992] RAX: ffffffffffffffda RBX: 00007fd0bf425fa0 RCX: 00007fd0bf19fb19 [ 428.963385][T10992] RDX: 0000200000000180 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 428.971383][T10992] RBP: 00007fd0bf237af8 R08: 0000000000000000 R09: 0000000000000000 [ 428.979407][T10992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.987406][T10992] R13: 00007fd0bf426038 R14: 00007fd0bf425fa0 R15: 00007ffda282c088 [ 428.995441][T10992] [ 429.077447][T10992] device-mapper: table: 248:5: integrity: Cannot initialize dm-bufio (-ENOMEM) [ 429.142113][T10992] device-mapper: ioctl: error adding target to table [ 429.313759][T11007] kvm: pic: non byte read [ 429.485439][T11012] FAULT_INJECTION: forcing a failure. [ 429.485439][T11012] name failslab, interval 1, probability 0, space 0, times 0 [ 429.516045][T11012] CPU: 0 PID: 11012 Comm: syz.7.1082 Not tainted syzkaller #0 [ 429.523659][T11012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 429.533776][T11012] Call Trace: [ 429.537120][T11012] [ 429.540091][T11012] dump_stack_lvl+0x18c/0x250 [ 429.544844][T11012] ? show_regs_print_info+0x20/0x20 [ 429.550106][T11012] ? load_image+0x420/0x420 [ 429.554667][T11012] ? __might_sleep+0xe0/0xe0 [ 429.559327][T11012] ? __lock_acquire+0x7eb0/0x7eb0 [ 429.564451][T11012] ? __se_sys_ioctl+0xfd/0x170 [ 429.569304][T11012] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.575450][T11012] should_fail_ex+0x394/0x4c0 [ 429.580210][T11012] should_failslab+0x9/0x20 [ 429.584772][T11012] slab_pre_alloc_hook+0x59/0x300 [ 429.589861][T11012] ? kobj_map+0x74/0x580 [ 429.594369][T11012] ? kobj_map+0x74/0x580 [ 429.598745][T11012] __kmem_cache_alloc_node+0x53/0x260 [ 429.604208][T11012] ? kobj_map+0x74/0x580 [ 429.608512][T11012] __kmalloc+0xa7/0x240 [ 429.612741][T11012] kobj_map+0x74/0x580 [ 429.616897][T11012] ? chrdev_open+0x600/0x600 [ 429.621641][T11012] ? exact_match+0x20/0x20 [ 429.626135][T11012] cdev_add+0x8c/0x160 [ 429.630277][T11012] tty_register_device_attr+0x787/0x9a0 [ 429.635967][T11012] ? tty_register_device+0x30/0x30 [ 429.641147][T11012] ? tty_port_init+0x132/0x1a0 [ 429.646039][T11012] ? gsm_dlci_alloc+0x32a/0x630 [ 429.650974][T11012] ? __might_fault+0xaa/0x120 [ 429.655716][T11012] gsm_activate_mux+0x110/0x2a0 [ 429.660642][T11012] gsmld_ioctl+0xcec/0x1900 [ 429.665211][T11012] ? gsmld_write+0x120/0x120 [ 429.669892][T11012] ? __init_ldsem+0x150/0x150 [ 429.674621][T11012] ? __fget_files+0x28/0x460 [ 429.679294][T11012] ? gsmld_write+0x120/0x120 [ 429.683956][T11012] tty_ioctl+0x9b5/0xdc0 [ 429.688260][T11012] ? tty_get_icount+0xb0/0xb0 [ 429.692992][T11012] __se_sys_ioctl+0xfd/0x170 [ 429.697645][T11012] do_syscall_64+0x55/0xb0 [ 429.702133][T11012] ? clear_bhb_loop+0x40/0x90 [ 429.706875][T11012] ? clear_bhb_loop+0x40/0x90 [ 429.711619][T11012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.717572][T11012] RIP: 0033:0x7fd0bf19fb19 [ 429.722040][T11012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.741717][T11012] RSP: 002b:00007fd0c0052028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.750197][T11012] RAX: ffffffffffffffda RBX: 00007fd0bf425fa0 RCX: 00007fd0bf19fb19 [ 429.758222][T11012] RDX: 0000200000000a00 RSI: 0000000040204706 RDI: 0000000000000004 [ 429.766242][T11012] RBP: 00007fd0bf237af8 R08: 0000000000000000 R09: 0000000000000000 [ 429.768933][ T23] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 429.774241][T11012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.789981][T11012] R13: 00007fd0bf426038 R14: 00007fd0bf425fa0 R15: 00007ffda282c088 [ 429.798119][T11012] [ 429.859461][ T28] usb 6-1: USB disconnect, device number 33 [ 430.018507][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 430.035270][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.046123][ T23] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 430.066403][ T23] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 430.122082][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 430.140552][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.155830][ T23] usb 3-1: Product: syz [ 430.169594][ T23] usb 3-1: Manufacturer: syz [ 430.177124][ T23] usb 3-1: SerialNumber: syz [ 430.487313][ T174] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 430.648430][T11043] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 430.701004][ T174] usb 8-1: unable to get BOS descriptor or descriptor too short [ 430.725568][ T23] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 430.730851][ T174] usb 8-1: config 142 has an invalid interface number: 251 but max is 0 [ 430.759360][ T174] usb 8-1: config 142 has an invalid descriptor of length 0, skipping remainder of the config [ 430.775220][ T174] usb 8-1: config 142 has no interface number 0 [ 430.803087][ T174] usb 8-1: string descriptor 0 read error: -22 [ 430.816450][ T174] usb 8-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 430.845915][ T174] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.866842][ T23] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 430.891600][ T23] usb 3-1: USB disconnect, device number 64 [ 430.903085][ T174] cypress_m8 8-1:142.251: HID->COM RS232 Adapter converter detected [ 430.903548][ T7311] udevd[7311]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.951261][ T174] cyphidcom ttyUSB0: required endpoint is missing [ 431.108889][ T5776] usb 8-1: USB disconnect, device number 11 [ 431.130601][ T5776] cypress_m8 8-1:142.251: device disconnected [ 431.347092][T11059] FAULT_INJECTION: forcing a failure. [ 431.347092][T11059] name failslab, interval 1, probability 0, space 0, times 0 [ 431.377760][T11059] CPU: 0 PID: 11059 Comm: syz.2.1093 Not tainted syzkaller #0 [ 431.385270][T11059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 431.395370][T11059] Call Trace: [ 431.398695][T11059] [ 431.401669][T11059] dump_stack_lvl+0x18c/0x250 [ 431.406380][T11059] ? show_regs_print_info+0x20/0x20 [ 431.411621][T11059] ? load_image+0x420/0x420 [ 431.416171][T11059] ? __might_sleep+0xe0/0xe0 [ 431.420798][T11059] ? __lock_acquire+0x7eb0/0x7eb0 [ 431.425878][T11059] should_fail_ex+0x394/0x4c0 [ 431.430604][T11059] should_failslab+0x9/0x20 [ 431.435153][T11059] slab_pre_alloc_hook+0x59/0x300 [ 431.440224][T11059] ? __lock_acquire+0x7eb0/0x7eb0 [ 431.445296][T11059] ? security_sk_alloc+0x4b/0x130 [ 431.450370][T11059] ? security_sk_alloc+0x4b/0x130 [ 431.455440][T11059] __kmem_cache_alloc_node+0x53/0x260 [ 431.460884][T11059] ? security_sk_alloc+0x4b/0x130 [ 431.465963][T11059] __kmalloc+0xa7/0x240 [ 431.470191][T11059] security_sk_alloc+0x4b/0x130 [ 431.475099][T11059] sk_prot_alloc+0x101/0x210 [ 431.479753][T11059] sk_alloc+0x3a/0x350 [ 431.483877][T11059] inet_create+0x7a9/0xfe0 [ 431.488378][T11059] ? inet_create+0x9d/0xfe0 [ 431.492931][T11059] __sock_create+0x49e/0x940 [ 431.497648][T11059] mptcp_subflow_create_socket+0x10c/0xad0 [ 431.503566][T11059] ? __mptcp_subflow_connect+0x14d0/0x14d0 [ 431.509414][T11059] ? lock_chain_count+0x20/0x20 [ 431.514351][T11059] __mptcp_nmpc_sk+0x157/0x720 [ 431.519208][T11059] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 431.525981][T11059] ? do_raw_spin_unlock+0x121/0x230 [ 431.531205][T11059] mptcp_listen+0xb5/0x3f0 [ 431.535644][T11059] __sys_listen+0x1a4/0x220 [ 431.540189][T11059] __x64_sys_listen+0x5a/0x70 [ 431.544906][T11059] do_syscall_64+0x55/0xb0 [ 431.549363][T11059] ? clear_bhb_loop+0x40/0x90 [ 431.554085][T11059] ? clear_bhb_loop+0x40/0x90 [ 431.558925][T11059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.564863][T11059] RIP: 0033:0x7f319db9fb19 [ 431.569304][T11059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.588939][T11059] RSP: 002b:00007f319ea87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 431.597405][T11059] RAX: ffffffffffffffda RBX: 00007f319de25fa0 RCX: 00007f319db9fb19 [ 431.605417][T11059] RDX: 0000000000000000 RSI: 0000000000000638 RDI: 0000000000000004 [ 431.613429][T11059] RBP: 00007f319dc37af8 R08: 0000000000000000 R09: 0000000000000000 [ 431.621429][T11059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.629432][T11059] R13: 00007f319de26038 R14: 00007f319de25fa0 R15: 00007ffe13467968 [ 431.637471][T11059] [ 431.672849][ T23] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 431.895429][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.929877][ T23] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 431.939362][ T23] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 431.947404][ T23] usb 6-1: Manufacturer: syz [ 431.971665][ T23] usb 6-1: config 0 descriptor?? [ 431.981893][ T23] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 432.008188][ T174] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 432.205995][ T174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.232266][ T174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.251852][ T174] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 432.263246][ T174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.286537][ T174] usb 5-1: config 0 descriptor?? [ 432.365463][ T27] audit: type=1800 audit(1794699936.241:9): pid=11088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1101" name=08 dev="sda1" ino=2045 res=0 errno=0 [ 432.736763][ T174] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 432.765206][ T174] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 432.793694][ T174] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 432.817553][ T174] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 432.833660][ T174] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 432.858132][ T174] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 432.885290][ T174] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 432.916502][ T174] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 433.010696][ T174] cp2112 0003:10C4:EA90.0010: Part Number: 0x00 Device Version: 0x00 [ 433.118899][ T5792] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 433.309097][ T5792] usb 3-1: Using ep0 maxpacket: 8 [ 433.316899][ T5792] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.339045][ T5792] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 433.348290][ T5792] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 433.366721][ T5792] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 433.376602][ T5792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.385405][ T5792] usb 3-1: Product: syz [ 433.390124][ T5792] usb 3-1: Manufacturer: syz [ 433.397149][ T5792] usb 3-1: SerialNumber: syz [ 433.414256][ T174] cp2112 0003:10C4:EA90.0010: error setting SMBus config [ 433.444322][ T174] cp2112: probe of 0003:10C4:EA90.0010 failed with error -71 [ 433.461014][ T174] usb 5-1: USB disconnect, device number 60 [ 433.903951][ T5792] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 433.955875][ T5792] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 433.980155][ T5792] usb 3-1: USB disconnect, device number 65 [ 434.025809][ T6737] udevd[6737]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.138331][T11124] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 434.406491][ T23] usb 6-1: USB disconnect, device number 34 [ 434.969987][ T8] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 435.160006][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 435.172474][ T8] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.193899][ T8] usb 8-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 435.221999][ T8] usb 8-1: config 1 interface 0 has no altsetting 0 [ 435.249042][ T8] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 435.270447][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.278493][ T8] usb 8-1: Product: syz [ 435.301020][ T8] usb 8-1: Manufacturer: syz [ 435.305681][ T8] usb 8-1: SerialNumber: syz [ 435.326767][ T8] usb 8-1: bad CDC descriptors [ 435.576014][ T5792] usb 8-1: USB disconnect, device number 12 [ 435.600188][ T174] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 435.660246][ T8] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 435.816027][ T174] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 435.841521][ T174] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 435.854176][ T174] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 435.862652][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 435.878777][ T174] usb 6-1: Manufacturer: syz [ 435.885050][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.904183][ T174] usb 6-1: config 0 descriptor?? [ 435.915361][ T8] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 435.934092][ T174] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 435.944519][ T8] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 435.966853][ T8] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 435.986339][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.003546][ T8] usb 3-1: Product: syz [ 436.008080][ T8] usb 3-1: Manufacturer: syz [ 436.012908][ T8] usb 3-1: SerialNumber: syz [ 436.071102][T11194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1122'. [ 436.241025][T11199] FAULT_INJECTION: forcing a failure. [ 436.241025][T11199] name failslab, interval 1, probability 0, space 0, times 0 [ 436.260385][T11199] CPU: 1 PID: 11199 Comm: syz.7.1124 Not tainted syzkaller #0 [ 436.268020][T11199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 436.278263][T11199] Call Trace: [ 436.281595][T11199] [ 436.284668][T11199] dump_stack_lvl+0x18c/0x250 [ 436.289416][T11199] ? show_regs_print_info+0x20/0x20 [ 436.294688][T11199] ? load_image+0x420/0x420 [ 436.299252][T11199] ? __might_sleep+0xe0/0xe0 [ 436.303907][T11199] ? __lock_acquire+0x7eb0/0x7eb0 [ 436.309003][T11199] should_fail_ex+0x394/0x4c0 [ 436.313754][T11199] should_failslab+0x9/0x20 [ 436.318311][T11199] slab_pre_alloc_hook+0x59/0x300 [ 436.323394][T11199] ? mas_next_slot+0x910/0x980 [ 436.328294][T11199] kmem_cache_alloc+0x5a/0x2d0 [ 436.333104][T11199] ? vm_area_dup+0x27/0x270 [ 436.337734][T11199] vm_area_dup+0x27/0x270 [ 436.342131][T11199] __split_vma+0x1a8/0xc20 [ 436.346623][T11199] ? mmap_write_unlock+0x160/0x160 [ 436.351803][T11199] ? split_vma+0x8f/0x110 [ 436.356200][T11199] userfaultfd_ioctl+0x3feb/0x4a60 [ 436.361491][T11199] ? userfaultfd_poll+0x1c0/0x1c0 [ 436.367020][T11199] ? do_vfs_ioctl+0x156c/0x1cc0 [ 436.371947][T11199] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 436.377649][T11199] ? tomoyo_path_number_perm+0x217/0x5e0 [ 436.383358][T11199] ? __lock_acquire+0x7eb0/0x7eb0 [ 436.388459][T11199] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 436.394238][T11199] ? __kmem_cache_free+0xba/0x1f0 [ 436.399330][T11199] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 436.405025][T11199] ? tomoyo_path_number_perm+0x217/0x5e0 [ 436.410724][T11199] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 436.416352][T11199] ? bpf_lsm_file_ioctl+0x9/0x10 [ 436.421374][T11199] ? security_file_ioctl+0x80/0xa0 [ 436.426557][T11199] ? userfaultfd_poll+0x1c0/0x1c0 [ 436.431632][T11199] __se_sys_ioctl+0xfd/0x170 [ 436.436286][T11199] do_syscall_64+0x55/0xb0 [ 436.440758][T11199] ? clear_bhb_loop+0x40/0x90 [ 436.445506][T11199] ? clear_bhb_loop+0x40/0x90 [ 436.450256][T11199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 436.456218][T11199] RIP: 0033:0x7fd0bf19fb19 [ 436.460693][T11199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.480465][T11199] RSP: 002b:00007fd0c0052028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.488990][T11199] RAX: ffffffffffffffda RBX: 00007fd0bf425fa0 RCX: 00007fd0bf19fb19 [ 436.497109][T11199] RDX: 0000200000000240 RSI: 00000000c020aa00 RDI: 0000000000000004 [ 436.505143][T11199] RBP: 00007fd0bf237af8 R08: 0000000000000000 R09: 0000000000000000 [ 436.513171][T11199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.521199][T11199] R13: 00007fd0bf426038 R14: 00007fd0bf425fa0 R15: 00007ffda282c088 [ 436.529259][T11199] [ 436.677349][ T8] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 436.778234][ T8] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 436.811147][ T8] usb 3-1: USB disconnect, device number 66 [ 436.828289][ T7311] udevd[7311]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 437.266881][T11227] scsi_nl_rcv_msg: Msgtype 1 failed - err -3 [ 437.365089][T11227] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.548264][T11227] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.669123][T11227] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.787817][T11227] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.370168][ T9] usb 6-1: USB disconnect, device number 35 [ 438.571824][ T8] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 438.612382][ T174] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 438.765199][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.785228][ T8] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 438.794745][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 438.803165][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.812142][ T174] usb 5-1: Using ep0 maxpacket: 8 [ 438.829927][ T174] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.848157][ T8] usb 8-1: config 0 descriptor?? [ 438.855571][ T174] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 438.897035][ T174] usb 5-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 438.919146][ T174] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 438.941069][ T174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.950443][ T174] usb 5-1: Product: syz [ 438.960913][ T174] usb 5-1: Manufacturer: syz [ 438.965894][ T9] usb 6-1: device descriptor read/64, error -71 [ 438.973212][ T174] usb 5-1: SerialNumber: syz [ 439.094677][ T8] usbhid 8-1:0.0: can't add hid device: -71 [ 439.108933][ T8] usbhid: probe of 8-1:0.0 failed with error -71 [ 439.127636][ T8] usb 8-1: USB disconnect, device number 13 [ 439.242249][ T9] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 439.412839][ T9] usb 6-1: device descriptor read/64, error -71 [ 439.494177][ T174] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 439.562653][ T9] usb usb6-port1: attempt power cycle [ 439.569226][ T174] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 439.584408][ T174] usb 5-1: USB disconnect, device number 61 [ 439.625106][ T7311] udevd[7311]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.713330][ T8] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 439.904588][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.921351][ T8] usb 8-1: New USB device found, idVendor=0458, idProduct=3303, bcdDevice= 0.40 [ 439.945272][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.966473][ T8] usb 8-1: config 0 descriptor?? [ 439.989545][ T9] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 440.044525][ T9] usb 6-1: device descriptor read/8, error -71 [ 440.172943][T11314] X25: unknown 0B in state 3 [ 440.323990][ T9] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 440.381500][T11261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.394246][T11261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.407784][ T9] usb 6-1: device descriptor read/8, error -71 [ 440.543888][ T9] usb usb6-port1: unable to enumerate USB device [ 440.985671][T11344] device-mapper: multipath queue-length: repeat_count > 1 is deprecated, using 1 instead [ 440.996610][T11344] device-mapper: table: 248:6: multipath: not enough priority group arguments (-EINVAL) [ 441.007981][T11344] device-mapper: ioctl: error adding target to table [ 441.209802][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.220733][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.553510][ T8] usbhid 8-1:0.0: can't add hid device: -71 [ 441.559637][ T8] usbhid: probe of 8-1:0.0 failed with error -71 [ 441.614121][ T8] usb 8-1: USB disconnect, device number 14 [ 441.683659][ T9] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 441.785981][T11368] block device autoloading is deprecated and will be removed. [ 441.878662][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 441.890749][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.912778][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 441.932919][ T9] usb 5-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 441.943730][ T174] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 441.966842][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 441.984706][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.994623][ T9] usb 5-1: Product: syz [ 442.003274][ T9] usb 5-1: Manufacturer: syz [ 442.013441][ T9] usb 5-1: SerialNumber: syz [ 442.156878][ T174] usb 6-1: unable to get BOS descriptor or descriptor too short [ 442.179244][ T174] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.197868][ T174] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 442.212867][ T174] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 442.276129][ T174] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 442.302948][ T174] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 442.330179][ T174] usb 6-1: Product: syz [ 442.344661][ T174] usb 6-1: Manufacturer: syz [ 442.354439][T11388] Bluetooth: MGMT ver 1.22 [ 442.359100][T11388] Bluetooth: hci0: unsupported parameter 5161 [ 442.373842][ T174] usb 6-1: SerialNumber: syz [ 442.385314][T11392] FAULT_INJECTION: forcing a failure. [ 442.385314][T11392] name failslab, interval 1, probability 0, space 0, times 0 [ 442.404671][T11388] Bluetooth: hci0: unsupported parameter 8192 [ 442.416536][T11392] CPU: 1 PID: 11392 Comm: syz.2.1161 Not tainted syzkaller #0 [ 442.424061][T11392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 442.432844][T11388] Bluetooth: hci0: unsupported parameter 5161 [ 442.434136][T11392] Call Trace: [ 442.434177][T11392] [ 442.434187][T11392] dump_stack_lvl+0x18c/0x250 [ 442.434226][T11392] ? show_regs_print_info+0x20/0x20 [ 442.434257][T11392] ? load_image+0x420/0x420 [ 442.461083][T11392] ? __might_sleep+0xe0/0xe0 [ 442.465768][T11392] ? __lock_acquire+0x7eb0/0x7eb0 [ 442.470903][T11392] should_fail_ex+0x394/0x4c0 [ 442.471508][T11388] Bluetooth: hci0: unsupported parameter 8192 [ 442.475624][T11392] should_failslab+0x9/0x20 [ 442.475648][T11392] slab_pre_alloc_hook+0x59/0x300 [ 442.475671][T11392] ? d_alloc_parallel+0x356/0x1590 [ 442.475702][T11392] kmem_cache_alloc_lru+0x4d/0x2c0 [ 442.501659][T11392] ? proc_alloc_inode+0x2a/0xb0 [ 442.506620][T11392] proc_alloc_inode+0x2a/0xb0 [ 442.511369][T11392] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 442.517747][T11392] new_inode_pseudo+0x63/0x1d0 [ 442.522560][T11392] new_inode+0x22/0x1d0 [ 442.526790][T11392] proc_sys_make_inode+0x4f/0x550 [ 442.531872][T11392] proc_sys_fill_cache+0x36e/0x510 [ 442.537039][T11392] ? proc_sys_link_fill_cache+0x1f0/0x1f0 [ 442.542827][T11392] ? __rwlock_init+0x150/0x150 [ 442.547762][T11392] ? do_raw_spin_unlock+0x121/0x230 [ 442.553115][T11392] proc_sys_readdir+0x49e/0x920 [ 442.558033][T11392] iterate_dir+0x1bd/0x590 [ 442.562515][T11392] __se_sys_getdents64+0xf6/0x270 [ 442.567627][T11392] ? __x64_sys_getdents64+0x80/0x80 [ 442.572882][T11392] ? filldir+0x6b0/0x6b0 [ 442.577187][T11392] ? lockdep_hardirqs_on+0x98/0x150 [ 442.582464][T11392] do_syscall_64+0x55/0xb0 [ 442.586939][T11392] ? clear_bhb_loop+0x40/0x90 [ 442.591670][T11392] ? clear_bhb_loop+0x40/0x90 [ 442.596407][T11392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.602349][T11392] RIP: 0033:0x7f319db9fb19 [ 442.606802][T11392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.626451][T11392] RSP: 002b:00007f319ea87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 442.634909][T11392] RAX: ffffffffffffffda RBX: 00007f319de25fa0 RCX: 00007f319db9fb19 [ 442.642925][T11392] RDX: 0000000000000400 RSI: 0000200000000640 RDI: 0000000000000006 [ 442.650930][T11392] RBP: 00007f319dc37af8 R08: 0000000000000000 R09: 0000000000000000 [ 442.659021][T11392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.667026][T11392] R13: 00007f319de26038 R14: 00007f319de25fa0 R15: 00007ffe13467968 [ 442.675053][T11392] [ 442.691918][ T174] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 442.708492][ T174] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 442.807990][ T5098] Bluetooth: hci3: command 0x0406 tx timeout [ 442.852989][ T9] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 442.865582][ T174] snd-usb-audio: probe of 6-1:1.2 failed with error -22 [ 442.899066][ T174] usb 6-1: USB disconnect, device number 40 [ 442.919817][ T9] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 442.952452][ T9] usb 5-1: USB disconnect, device number 62 [ 443.004590][ T6732] udevd[6732]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.032214][ T7311] udevd[7311]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.415667][ T8] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 443.594979][ T8] usb 3-1: device descriptor read/64, error -71 [ 443.715272][ T174] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 443.802086][T11428] FAULT_INJECTION: forcing a failure. [ 443.802086][T11428] name failslab, interval 1, probability 0, space 0, times 0 [ 443.818238][T11428] CPU: 1 PID: 11428 Comm: syz.5.1171 Not tainted syzkaller #0 [ 443.825776][T11428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 443.835888][T11428] Call Trace: [ 443.839209][T11428] [ 443.842181][T11428] dump_stack_lvl+0x18c/0x250 [ 443.846921][T11428] ? show_regs_print_info+0x20/0x20 [ 443.852182][T11428] ? load_image+0x420/0x420 [ 443.856749][T11428] ? __might_sleep+0xe0/0xe0 [ 443.861407][T11428] ? __lock_acquire+0x7eb0/0x7eb0 [ 443.864931][ T8] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 443.866459][T11428] ? mod_objcg_state+0x521/0x8c0 [ 443.878999][T11428] should_fail_ex+0x394/0x4c0 [ 443.883725][T11428] should_failslab+0x9/0x20 [ 443.888266][T11428] slab_pre_alloc_hook+0x59/0x300 [ 443.893337][T11428] kmem_cache_alloc+0x5a/0x2d0 [ 443.898128][T11428] ? ep_ptable_queue_proc+0x5c/0x200 [ 443.903469][T11428] ep_ptable_queue_proc+0x5c/0x200 [ 443.908627][T11428] ? ep_get_upwards_depth_proc+0x190/0x190 [ 443.914461][T11428] datagram_poll+0x7c/0x420 [ 443.919023][T11428] sock_poll+0x345/0x460 [ 443.919880][ T174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.923295][T11428] ? sock_write_iter+0x420/0x420 [ 443.939204][T11428] ep_insert+0x1165/0x1990 [ 443.943708][T11428] ? ep_loop_check+0x1b0/0x1b0 [ 443.944766][ T174] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 443.948499][T11428] ? do_epoll_ctl+0x405/0xf40 [ 443.948534][T11428] ? mutex_lock_nested+0x20/0x20 [ 443.948573][T11428] ? __fget_files+0x3fc/0x460 [ 443.948602][T11428] ? ep_get_upwards_depth_proc+0x190/0x190 [ 443.948631][T11428] ? __fdget+0x180/0x210 [ 443.948659][T11428] ? do_epoll_ctl+0x3d/0xf40 [ 443.948691][T11428] do_epoll_ctl+0x8bc/0xf40 [ 443.948732][T11428] __x64_sys_epoll_ctl+0x166/0x1b0 [ 443.948769][T11428] ? ep_modify+0xa80/0xa80 [ 443.948805][T11428] ? lockdep_hardirqs_on+0x98/0x150 [ 443.948831][T11428] do_syscall_64+0x55/0xb0 [ 443.948857][T11428] ? clear_bhb_loop+0x40/0x90 [ 443.948887][T11428] ? clear_bhb_loop+0x40/0x90 [ 443.948918][T11428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.948948][T11428] RIP: 0033:0x7fdc68d9fb19 [ 443.948968][T11428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.948987][T11428] RSP: 002b:00007fdc69ce0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 443.949011][T11428] RAX: ffffffffffffffda RBX: 00007fdc69025fa0 RCX: 00007fdc68d9fb19 [ 443.949028][T11428] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000007 [ 443.949042][T11428] RBP: 00007fdc68e37af8 R08: 0000000000000000 R09: 0000000000000000 [ 443.949056][T11428] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000000 [ 443.949071][T11428] R13: 00007fdc69026038 R14: 00007fdc69025fa0 R15: 00007fff8f6e6ea8 [ 443.949104][T11428] [ 444.095917][ T23] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 444.113835][ T174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.126911][ T174] usb 5-1: config 0 descriptor?? [ 444.176124][ T8] usb 3-1: device descriptor read/64, error -71 [ 444.296043][ T8] usb usb3-port1: attempt power cycle [ 444.317049][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.348030][ T23] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 444.367182][ T174] usbhid 5-1:0.0: can't add hid device: -71 [ 444.373318][ T174] usbhid: probe of 5-1:0.0 failed with error -71 [ 444.383893][ T23] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 444.395871][ T23] usb 8-1: Manufacturer: syz [ 444.423150][ T23] usb 8-1: config 0 descriptor?? [ 444.425981][ T174] usb 5-1: USB disconnect, device number 63 [ 444.470651][ T23] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 444.706314][ T8] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 444.744958][T11448] EXT4-fs (sda1): shut down requested (1) [ 444.758086][ T8] usb 3-1: device descriptor read/8, error -71 [ 444.767437][T11448] Aborting journal on device sda1-8. [ 444.954557][ T174] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 445.051332][ T8] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 445.096118][ T8] usb 3-1: device descriptor read/8, error -71 [ 445.185525][ T174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.227428][ T174] usb 5-1: New USB device found, idVendor=0458, idProduct=3303, bcdDevice= 0.40 [ 445.236967][ T8] usb usb3-port1: unable to enumerate USB device [ 445.263794][ T174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.299919][ T174] usb 5-1: config 0 descriptor?? [ 445.738784][T11411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.772299][T11411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.012886][ T5791] block nbd5: Receive control failed (result -32) [ 446.035359][T11517] block nbd5: shutting down sockets [ 446.247545][T11520] FAULT_INJECTION: forcing a failure. [ 446.247545][T11520] name failslab, interval 1, probability 0, space 0, times 0 [ 446.260952][T11520] CPU: 0 PID: 11520 Comm: syz.2.1182 Not tainted syzkaller #0 [ 446.268486][T11520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 446.278588][T11520] Call Trace: [ 446.281917][T11520] [ 446.284932][T11520] dump_stack_lvl+0x18c/0x250 [ 446.289682][T11520] ? show_regs_print_info+0x20/0x20 [ 446.294978][T11520] ? load_image+0x420/0x420 [ 446.299551][T11520] ? __might_sleep+0xe0/0xe0 [ 446.304241][T11520] ? __lock_acquire+0x7eb0/0x7eb0 [ 446.309406][T11520] ? rcu_is_watching+0x15/0xb0 [ 446.314239][T11520] should_fail_ex+0x394/0x4c0 [ 446.317286][ T5899] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 446.318959][T11520] should_failslab+0x9/0x20 [ 446.331060][T11520] slab_pre_alloc_hook+0x59/0x300 [ 446.336154][T11520] ? snd_hrtimer_open+0x51/0xf0 [ 446.341157][T11520] __kmem_cache_alloc_node+0x53/0x260 [ 446.346575][T11520] ? snd_hrtimer_open+0x51/0xf0 [ 446.351469][T11520] kmalloc_trace+0x2a/0xe0 [ 446.355934][T11520] snd_hrtimer_open+0x51/0xf0 [ 446.360659][T11520] snd_timer_open+0xc13/0x10b0 [ 446.365485][T11520] ? kstrdup+0x65/0x80 [ 446.369612][T11520] snd_seq_timer_open+0x2db/0x610 [ 446.374768][T11520] ? snd_seq_timer_set_skew+0xd0/0xd0 [ 446.380166][T11520] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 446.386088][T11520] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 446.391998][T11520] ? _raw_spin_unlock+0x40/0x40 [ 446.396869][T11520] ? snd_seq_timer_defaults+0x35/0x530 [ 446.402350][T11520] snd_seq_queue_alloc+0x3b7/0x740 [ 446.407484][T11520] snd_seq_ioctl_create_queue+0x7f/0x3b0 [ 446.413199][T11520] ? snd_seq_ioctl_unsubscribe_port+0x6e0/0x6e0 [ 446.419470][T11520] snd_seq_oss_open+0x658/0xf10 [ 446.424349][T11520] ? snd_seq_oss_delete_client+0x50/0x50 [ 446.430056][T11520] ? trace_raw_output_contention_end+0xd0/0xd0 [ 446.436227][T11520] ? trace_contention_end+0x39/0xe0 [ 446.441450][T11520] ? soundcore_open+0x274/0x4c0 [ 446.446322][T11520] ? odev_open+0x5c/0xa0 [ 446.450576][T11520] ? __lock_acquire+0x7eb0/0x7eb0 [ 446.455617][T11520] ? snd_seq_oss_process_event+0x29b0/0x29b0 [ 446.461612][T11520] ? async_call_lookup_ports+0x20/0x20 [ 446.467098][T11520] ? do_raw_spin_unlock+0x121/0x230 [ 446.472329][T11520] ? soundcore_open+0x310/0x4c0 [ 446.477212][T11520] odev_open+0x67/0xa0 [ 446.481306][T11520] chrdev_open+0x58c/0x600 [ 446.485761][T11520] ? cd_forget+0x160/0x160 [ 446.490208][T11520] ? fsnotify_perm+0x3ed/0x5e0 [ 446.495023][T11520] do_dentry_open+0x880/0x14b0 [ 446.499821][T11520] ? cd_forget+0x160/0x160 [ 446.504265][T11520] path_openat+0x284f/0x3270 [ 446.508906][T11520] ? do_sys_openat2+0xda/0x1d0 [ 446.513700][T11520] ? __x64_sys_openat+0x139/0x160 [ 446.518779][T11520] ? verify_lock_unused+0x140/0x140 [ 446.524118][T11520] ? do_filp_open+0x430/0x430 [ 446.528927][T11520] do_filp_open+0x1f2/0x430 [ 446.533462][T11520] ? vfs_tmpfile+0x620/0x620 [ 446.538118][T11520] ? _raw_spin_unlock+0x28/0x40 [ 446.543005][T11520] ? alloc_fd+0x590/0x640 [ 446.547370][T11520] do_sys_openat2+0x134/0x1d0 [ 446.552081][T11520] ? do_sys_open+0xe0/0xe0 [ 446.556527][T11520] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 446.562544][T11520] ? lock_chain_count+0x20/0x20 [ 446.567424][T11520] __x64_sys_openat+0x139/0x160 [ 446.572305][T11520] do_syscall_64+0x55/0xb0 [ 446.576742][T11520] ? clear_bhb_loop+0x40/0x90 [ 446.581464][T11520] ? clear_bhb_loop+0x40/0x90 [ 446.586180][T11520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.592115][T11520] RIP: 0033:0x7f319db9fb19 [ 446.596548][T11520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.616282][T11520] RSP: 002b:00007f319ea87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 446.624739][T11520] RAX: ffffffffffffffda RBX: 00007f319de25fa0 RCX: 00007f319db9fb19 [ 446.632742][T11520] RDX: 0000000000080200 RSI: 0000200000000500 RDI: ffffffffffffff9c [ 446.640764][T11520] RBP: 00007f319dc37af8 R08: 0000000000000000 R09: 0000000000000000 [ 446.648768][T11520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.656784][T11520] R13: 00007f319de26038 R14: 00007f319de25fa0 R15: 00007ffe13467968 [ 446.664789][T11520] [ 446.768943][ T23] usb 8-1: USB disconnect, device number 15 [ 446.783382][ T5899] usb 6-1: Using ep0 maxpacket: 32 [ 446.798804][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.830749][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.853093][ T5899] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 446.892141][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.930825][ T174] usbhid 5-1:0.0: can't add hid device: -71 [ 446.944359][ T5899] usb 6-1: config 0 descriptor?? [ 446.949645][ T174] usbhid: probe of 5-1:0.0 failed with error -71 [ 446.970037][ T174] usb 5-1: USB disconnect, device number 64 [ 447.186757][ T8] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 447.386720][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 447.407788][ T5899] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 447.414784][ T5899] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 447.421445][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 447.445247][ T8] usb 3-1: config 4 has an invalid interface number: 184 but max is 0 [ 447.462443][ T8] usb 3-1: config 4 has no interface number 0 [ 447.478756][ T8] usb 3-1: config 4 interface 184 has no altsetting 0 [ 447.494847][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=6240, bcdDevice=7b.12 [ 447.514276][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.535420][ T8] usb 3-1: Product: syz [ 447.543688][ T8] usb 3-1: Manufacturer: syz [ 447.549313][ T8] usb 3-1: SerialNumber: syz [ 447.804114][ T8] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6240 [ 447.846808][ T8] gspca_sn9c20x: Write register 1000 failed -71 [ 447.855086][ T8] gspca_sn9c20x: Device initialization failed [ 447.870360][ T8] gspca_sn9c20x: probe of 3-1:4.184 failed with error -71 [ 447.908802][ T8] usb 3-1: USB disconnect, device number 71 [ 448.323382][ T5876] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 448.398098][ T5899] ft260 0003:0403:6030.0011: failed to retrieve chip version [ 448.406003][ T5899] ft260: probe of 0003:0403:6030.0011 failed with error -71 [ 448.463526][ T5899] usb 6-1: USB disconnect, device number 41 [ 448.527335][ T5876] usb 8-1: device descriptor read/64, error -71 [ 448.818466][ T5876] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 448.877267][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 448.987467][ T5876] usb 8-1: device descriptor read/64, error -71 [ 449.087145][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.118008][ T5876] usb usb8-port1: attempt power cycle [ 449.127663][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 449.137283][ T9] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 449.145685][ T9] usb 5-1: Manufacturer: syz [ 449.158518][ T9] usb 5-1: config 0 descriptor?? [ 449.169430][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 449.568401][ T5876] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 449.615269][ T5876] usb 8-1: device descriptor read/8, error -71 [ 449.887950][ T5876] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 449.944939][ T5876] usb 8-1: device descriptor read/8, error -71 [ 450.079085][ T5876] usb usb8-port1: unable to enumerate USB device [ 450.593495][T11738] netlink: 'syz.2.1204': attribute type 1 has an invalid length. [ 450.603611][T11738] netlink: 'syz.2.1204': attribute type 2 has an invalid length. [ 450.938125][T11760] Bluetooth: MGMT ver 1.22 [ 451.128619][ T5791] Bluetooth: hci2: command tx timeout [ 451.147146][ T27] audit: type=1800 audit(1794699955.011:10): pid=11770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1210" name="features" dev="configfs" ino=32966 res=0 errno=0 [ 451.215051][T11770] device-mapper: table: 248:7: snapshot: Cannot get COW device (-ENOENT) [ 451.265930][T11770] device-mapper: ioctl: error adding target to table [ 451.447026][T11787] gadgetfs: bound to dummy_udc driver [ 451.664327][ T5876] usb 5-1: USB disconnect, device number 65 [ 451.748693][T11801] block device autoloading is deprecated and will be removed. [ 451.778087][T11801] md: invalid raid superblock magic on ram5 [ 451.788783][T11801] md: ram5 does not have a valid v0.0 superblock, not importing! [ 451.796832][T11801] md: md_import_device returned -22 [ 451.859839][T11806] FAULT_INJECTION: forcing a failure. [ 451.859839][T11806] name failslab, interval 1, probability 0, space 0, times 0 [ 451.909061][T11806] CPU: 0 PID: 11806 Comm: syz.4.1218 Not tainted syzkaller #0 [ 451.916697][T11806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 451.926794][T11806] Call Trace: [ 451.930113][T11806] [ 451.933131][T11806] dump_stack_lvl+0x18c/0x250 [ 451.937885][T11806] ? show_regs_print_info+0x20/0x20 [ 451.943150][T11806] ? load_image+0x420/0x420 [ 451.947693][T11806] ? __might_sleep+0xe0/0xe0 [ 451.952352][T11806] ? __lock_acquire+0x7eb0/0x7eb0 [ 451.957447][T11806] should_fail_ex+0x394/0x4c0 [ 451.962182][T11806] should_failslab+0x9/0x20 [ 451.966721][T11806] slab_pre_alloc_hook+0x59/0x300 [ 451.971793][T11806] ? nf_tables_newchain+0xf8e/0x29c0 [ 451.977240][T11806] __kmem_cache_alloc_node+0x53/0x260 [ 451.982668][T11806] ? nf_tables_newchain+0xf8e/0x29c0 [ 451.988000][T11806] kmalloc_trace+0x2a/0xe0 [ 451.992464][T11806] nf_tables_newchain+0xf8e/0x29c0 [ 451.997640][T11806] ? nf_tables_deltable+0xe80/0xe80 [ 452.002943][T11806] ? nft_trans_table_add+0x1e6/0x270 [ 452.008370][T11806] ? nfnl_pernet+0x23/0x230 [ 452.012945][T11806] ? __lock_acquire+0x7eb0/0x7eb0 [ 452.018022][T11806] ? nf_tables_newtable+0xd76/0x17e0 [ 452.023384][T11806] ? __nla_parse+0x40/0x50 [ 452.027889][T11806] nfnetlink_rcv+0x1133/0x2490 [ 452.032757][T11806] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 452.038459][T11806] ? __lock_acquire+0x7eb0/0x7eb0 [ 452.043545][T11806] ? netlink_deliver_tap+0x2e/0x1b0 [ 452.048777][T11806] netlink_unicast+0x856/0x9e0 [ 452.053591][T11806] netlink_sendmsg+0x8d0/0xbf0 [ 452.058395][T11806] ? netlink_getsockopt+0x590/0x590 [ 452.063623][T11806] ? apparmor_socket_sendmsg+0x8e/0x330 [ 452.069226][T11806] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 452.074554][T11806] ? security_socket_sendmsg+0x80/0xa0 [ 452.080050][T11806] ? netlink_getsockopt+0x590/0x590 [ 452.085325][T11806] ____sys_sendmsg+0x61b/0x980 [ 452.090125][T11806] ? __asan_memset+0x22/0x40 [ 452.094760][T11806] ? __sys_sendmsg_sock+0x30/0x30 [ 452.099812][T11806] ? __import_iovec+0x5f2/0x850 [ 452.104740][T11806] ? import_iovec+0x73/0xa0 [ 452.109279][T11806] ___sys_sendmsg+0x2a6/0x360 [ 452.114077][T11806] ? __sys_sendmsg+0x2b0/0x2b0 [ 452.118944][T11806] __se_sys_sendmsg+0x1d0/0x2c0 [ 452.123847][T11806] ? __x64_sys_sendmsg+0x80/0x80 [ 452.128853][T11806] ? lockdep_hardirqs_on+0x98/0x150 [ 452.134095][T11806] do_syscall_64+0x55/0xb0 [ 452.138544][T11806] ? clear_bhb_loop+0x40/0x90 [ 452.143262][T11806] ? clear_bhb_loop+0x40/0x90 [ 452.147992][T11806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.153923][T11806] RIP: 0033:0x7f68cf59fb19 [ 452.158366][T11806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.177995][T11806] RSP: 002b:00007f68d04d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.186474][T11806] RAX: ffffffffffffffda RBX: 00007f68cf825fa0 RCX: 00007f68cf59fb19 [ 452.194472][T11806] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 452.202466][T11806] RBP: 00007f68cf637af8 R08: 0000000000000000 R09: 0000000000000000 [ 452.210464][T11806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.218460][T11806] R13: 00007f68cf826038 R14: 00007f68cf825fa0 R15: 00007ffd913f1f08 [ 452.226470][T11806] [ 452.380592][T11812] device-mapper: table: 248:5: integrity: Not enough provided sectors for requested mapping size (-EINVAL) [ 452.419183][T11812] device-mapper: ioctl: error adding target to table [ 452.450563][ T5899] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 452.619325][ T5899] usb 3-1: device descriptor read/64, error -71 [ 452.634894][T11830] device-mapper: raid: Choosing default region size of 4MiB [ 452.692354][T11830] mdX: WARNING: ram11 appears to be on the same physical disk as ram11. [ 452.715748][T11830] True protection against single-disk failure might be compromised. [ 452.728788][T11830] md/raid10:mdX: unsupported raid10 layout: 0x 2 [ 452.738994][T11830] md: pers->run() failed ... [ 452.794829][T11830] device-mapper: table: 248:8: raid: Failed to run raid array (-EINVAL) [ 452.803778][T11830] device-mapper: ioctl: error adding target to table [ 452.929015][ T5899] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 453.099609][ T5899] usb 3-1: device descriptor read/64, error -71 [ 453.210250][ T5791] Bluetooth: hci2: command 0x0409 tx timeout [ 453.230513][ T5899] usb usb3-port1: attempt power cycle [ 453.233034][ T5792] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 453.289887][ T5874] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 453.432419][ T5792] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.453476][ T5792] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 453.463029][ T5792] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 453.472107][ T5792] usb 8-1: Manufacturer: syz [ 453.487807][ T5792] usb 8-1: config 0 descriptor?? [ 453.500255][ T5874] usb 5-1: Using ep0 maxpacket: 32 [ 453.506111][ T5792] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 453.532500][ T5874] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 453.546572][ T5874] usb 5-1: config 0 has no interface number 0 [ 453.568704][ T5874] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 453.580488][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.588774][ T5874] usb 5-1: Product: syz [ 453.593999][ T5874] usb 5-1: Manufacturer: syz [ 453.598657][ T5874] usb 5-1: SerialNumber: syz [ 453.610791][ T5874] usb 5-1: config 0 descriptor?? [ 453.626197][ T5874] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 453.669902][ T5899] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 453.710606][ T5899] usb 3-1: device descriptor read/8, error -71 [ 453.836196][ T5874] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 453.853360][ T5874] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 454.013247][ T5899] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 454.039656][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 454.063599][ T5899] usb 3-1: device descriptor read/8, error -71 [ 454.205958][ T5899] usb usb3-port1: unable to enumerate USB device [ 454.240671][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 454.249783][ T5899] usb 5-1: USB disconnect, device number 66 [ 454.272204][ T5899] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 454.313405][ T5899] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 454.350458][ T5899] quatech2 5-1:0.51: device disconnected [ 454.905925][ T5098] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 454.920615][ T5098] Bluetooth: hci3: unexpected event for opcode 0x2087 [ 454.998549][ T5792] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 455.020668][ T5792] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 455.077548][T11930] udevd[11930]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 455.235672][T11938] FAULT_INJECTION: forcing a failure. [ 455.235672][T11938] name fail_futex, interval 1, probability 0, space 0, times 0 [ 455.250004][T11938] CPU: 1 PID: 11938 Comm: syz.5.1239 Not tainted syzkaller #0 [ 455.257519][T11938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 455.267618][T11938] Call Trace: [ 455.270968][T11938] [ 455.273954][T11938] dump_stack_lvl+0x18c/0x250 [ 455.278677][T11938] ? show_regs_print_info+0x20/0x20 [ 455.283910][T11938] ? load_image+0x420/0x420 [ 455.288563][T11938] should_fail_ex+0x394/0x4c0 [ 455.293298][T11938] get_futex_key+0x134/0xf40 [ 455.298136][T11938] ? futex_setup_timer+0xc0/0xc0 [ 455.303137][T11938] futex_wake+0x127/0x4f0 [ 455.307559][T11938] ? futex_wake_mark+0x150/0x150 [ 455.312562][T11938] ? __lock_acquire+0x7eb0/0x7eb0 [ 455.317636][T11938] ? vfs_write+0x5de/0x9a0 [ 455.322100][T11938] do_futex+0x35d/0x3e0 [ 455.326310][T11938] ? __ia32_sys_get_robust_list+0x110/0x110 [ 455.332289][T11938] __se_sys_futex+0x3a9/0x440 [ 455.337018][T11938] ? __x64_sys_futex+0xf0/0xf0 [ 455.341840][T11938] ? __x64_sys_futex+0x21/0xf0 [ 455.346659][T11938] do_syscall_64+0x55/0xb0 [ 455.351125][T11938] ? clear_bhb_loop+0x40/0x90 [ 455.355850][T11938] ? clear_bhb_loop+0x40/0x90 [ 455.360587][T11938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.366527][T11938] RIP: 0033:0x7fdc68d9fb19 [ 455.370988][T11938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.390647][T11938] RSP: 002b:00007fdc69ce00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 455.399105][T11938] RAX: ffffffffffffffda RBX: 00007fdc69025fa8 RCX: 00007fdc68d9fb19 [ 455.407149][T11938] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdc69025fac [ 455.415177][T11938] RBP: 00007fdc69025fa0 R08: 0000000000744dc3 R09: 0000000000000000 [ 455.423222][T11938] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 455.431241][T11938] R13: 00007fdc69026038 R14: 00007fff8f6e6dc0 R15: 00007fff8f6e6ea8 [ 455.439279][T11938] [ 455.444067][ T5098] Bluetooth: hci2: command 0x0409 tx timeout [ 455.491353][T11939] mac80211_hwsim hwsim29 ..ãc¤±: renamed from wlan1 (while UP) [ 455.630970][ T5876] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 455.667508][T11946] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1243'. [ 455.752702][T11946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.772910][T11946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.792892][T11946] bond0 (unregistering): Released all slaves [ 455.844474][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 455.858487][ T5876] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.883973][ T5876] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.921183][ T5876] usb 3-1: config 0 interface 0 has no altsetting 0 [ 455.932859][ T5876] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 455.971343][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.981732][ T5792] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 455.983916][ T5876] usb 3-1: config 0 descriptor?? [ 456.045974][ T5874] usb 8-1: USB disconnect, device number 20 [ 456.183856][ T5792] usb 6-1: Using ep0 maxpacket: 8 [ 456.197001][ T5792] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 456.218748][ T5792] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 456.228775][ T5792] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 456.238929][ T5792] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 456.250582][ T5792] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.270826][ T5792] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 456.280183][ T5792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.497057][ T5876] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 456.509547][ T5876] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 456.517080][ T5876] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 456.525317][ T5876] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 456.530692][ T5792] usb 6-1: GET_CAPABILITIES returned 0 [ 456.533579][ T5876] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 456.554850][ T5792] usbtmc 6-1:16.0: can't read capabilities [ 456.558593][ T5876] mcp2221 0003:04D8:00DD.0013: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 456.596536][ T5874] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 456.700605][T11935] i2c i2c-1: unsupported multi-msg i2c transaction [ 456.766788][ T5874] usb 8-1: device descriptor read/64, error -71 [ 456.780965][ T8] usb 6-1: USB disconnect, device number 42 [ 456.788791][ T5876] usb 3-1: USB disconnect, device number 76 [ 457.041679][ T5874] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 457.201767][ T5792] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 457.201784][ T5874] usb 8-1: device descriptor read/64, error -71 [ 457.321996][ T5874] usb usb8-port1: attempt power cycle [ 457.406519][ T5792] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 457.417798][ T5792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.439332][ T5792] usb 5-1: Product: syz [ 457.443960][ T5792] usb 5-1: Manufacturer: syz [ 457.448667][ T5792] usb 5-1: SerialNumber: syz [ 457.462985][ T5792] usb 5-1: config 0 descriptor?? [ 457.639943][ T5876] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 457.696413][ T5792] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 067 [ 457.754050][ T5874] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 457.806193][ T5874] usb 8-1: device descriptor read/8, error -71 [ 457.845825][ T5876] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 457.861538][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.871778][ T5876] usb 6-1: config 0 descriptor?? [ 457.890970][ T5876] cp210x 6-1:0.0: cp210x converter detected [ 458.102646][ T5874] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 458.142940][ T5874] usb 8-1: device descriptor read/8, error -71 [ 458.276383][ T5874] usb usb8-port1: unable to enumerate USB device [ 458.493529][ T5876] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 458.512294][ T5876] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 458.526130][ T5876] usb 6-1: cp210x converter now attached to ttyUSB0 [ 458.535958][ T5876] usb 6-1: USB disconnect, device number 43 [ 458.547634][ T5876] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 458.557422][ T5876] cp210x 6-1:0.0: device disconnected [ 458.721302][ T9] usb 5-1: USB disconnect, device number 67 [ 459.013688][ T5874] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 459.174080][T12023] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1256'. [ 459.225190][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.262410][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.297038][ T5874] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 459.362730][ T5874] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 459.370834][ T5874] usb 3-1: Manufacturer: syz [ 459.414205][ T5874] usb 3-1: config 0 descriptor?? [ 459.673836][ T5792] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 459.806933][ T8] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 459.841704][ T5874] usbhid 3-1:0.0: can't add hid device: -71 [ 459.862973][ T5792] usb 6-1: Using ep0 maxpacket: 32 [ 459.871422][ T5874] usbhid: probe of 3-1:0.0 failed with error -71 [ 459.894717][ T5874] usb 3-1: USB disconnect, device number 77 [ 459.903713][ T5792] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 459.912795][ T5792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.945260][ T5792] usb 6-1: config 0 descriptor?? [ 460.028570][ T8] usb 8-1: unable to get BOS descriptor or descriptor too short [ 460.051718][ T8] usb 8-1: too many configurations: 43, using maximum allowed: 8 [ 460.074228][ T8] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 460.093440][ T8] usb 8-1: can't read configurations, error -71 [ 460.169910][ T5792] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 460.197629][ T5792] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 460.218956][ T5792] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 460.241626][ T5792] usb 6-1: media controller created [ 460.279277][ T5792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 460.381089][ T5792] az6027: usb out operation failed. (-71) [ 460.397828][ T5792] az6027: usb out operation failed. (-71) [ 460.407066][ T5792] stb0899_attach: Driver disabled by Kconfig [ 460.417385][ T5792] az6027: no front-end attached [ 460.417385][ T5792] [ 460.435637][ T5792] az6027: usb out operation failed. (-71) [ 460.456670][ T5792] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 460.475130][ T5792] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input26 [ 460.511717][ T5792] dvb-usb: schedule remote query interval to 400 msecs. [ 460.519111][ T5792] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 460.553534][ T5792] usb 6-1: USB disconnect, device number 44 [ 460.603576][ T28] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 460.625948][ T5792] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 460.783642][ T28] usb 5-1: device descriptor read/64, error -71 [ 461.063641][ T28] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 461.214875][ T28] usb 5-1: device descriptor read/64, error -71 [ 461.334145][ T28] usb usb5-port1: attempt power cycle [ 461.433763][ T8] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 461.483997][ T790] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 461.616058][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.630195][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.641512][ T8] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 461.650862][ T8] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 461.658956][ T8] usb 8-1: Manufacturer: syz [ 461.673220][ T8] usb 8-1: config 0 descriptor?? [ 461.690005][ T790] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.702488][ T790] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 461.717426][ T790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.729091][ T790] usb 6-1: config 0 descriptor?? [ 461.764091][ T28] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 461.808051][ T28] usb 5-1: device descriptor read/8, error -71 [ 461.960231][ T790] usbhid 6-1:0.0: can't add hid device: -71 [ 461.976936][ T790] usbhid: probe of 6-1:0.0 failed with error -71 [ 461.998379][ T790] usb 6-1: USB disconnect, device number 45 [ 462.094263][ T28] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 462.097700][ T8] usbhid 8-1:0.0: can't add hid device: -71 [ 462.118617][ T8] usbhid: probe of 8-1:0.0 failed with error -71 [ 462.133098][ T8] usb 8-1: USB disconnect, device number 27 [ 462.146027][ T28] usb 5-1: device descriptor read/8, error -71 [ 462.274540][ T28] usb usb5-port1: unable to enumerate USB device [ 462.544461][ T790] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 462.737013][ T790] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.754961][ T790] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 462.768060][ T790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.800736][ T790] usb 6-1: config 0 descriptor?? [ 463.524800][ T27] audit: type=1400 audit(1794699967.385:11): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=12137 comm="syz.7.1291" name="p" offset=43 [ 463.636129][ T790] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 463.660377][ T790] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input27 [ 463.847147][T12152] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1294'. [ 463.997427][T12161] nvme nvme0: failed to connect socket: -111 [ 464.063719][ T5874] usb 6-1: USB disconnect, device number 46 [ 464.069843][ C1] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 464.229080][T12171] dvmrp6: entered allmulticast mode [ 464.239896][T12171] dvmrp6: left allmulticast mode [ 464.305288][T10407] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 464.489135][T10407] usb 8-1: Using ep0 maxpacket: 16 [ 464.496364][T10407] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.506898][T10407] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 464.517744][T10407] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 464.527540][T10407] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.538048][T10407] usb 8-1: config 0 descriptor?? [ 464.716104][ T5098] Bluetooth: hci4: Malformed LE Event: 0x0d [ 465.208797][T12179] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 465.215826][T12179] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 465.225140][T12179] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 465.248790][T12179] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 465.254861][T12179] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 465.276999][T12179] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 465.286179][T12179] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 465.292224][T12179] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 465.312216][T12179] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 465.320951][T12179] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 465.336284][T12179] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 465.349292][T12179] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 465.355543][T12179] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 465.370927][T12179] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 465.391253][T12197] loop0: detected capacity change from 0 to 4096 [ 465.468570][T12197] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 465.490699][T12197] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 465.505995][T12197] loop0: [ 465.746084][ T28] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 465.946137][ T28] usb 5-1: Using ep0 maxpacket: 32 [ 465.959663][ T28] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.978655][ T28] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.999860][ T28] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 466.012056][ T28] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 466.028599][ T28] usb 5-1: Product: syz [ 466.032879][ T28] usb 5-1: Manufacturer: syz [ 466.047643][ T28] hub 5-1:4.0: USB hub found [ 466.258340][ T28] hub 5-1:4.0: 4 ports detected [ 466.264948][ T28] hub 5-1:4.0: insufficient power available to use all downstream ports [ 466.466563][ T28] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 466.486377][ T28] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 466.506339][ T5098] Bluetooth: hci0: command 0x0c1a tx timeout [ 466.550452][ T28] usb 5-1: USB disconnect, device number 72 [ 466.676554][T12235] device-mapper: table: 248:8: integrity: Not enough provided sectors for requested mapping size (-EINVAL) [ 466.688160][T12235] device-mapper: ioctl: error adding target to table [ 467.016779][T10407] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 467.066419][T10409] usb 8-1: USB disconnect, device number 28 [ 467.221507][T10407] usb 6-1: too many configurations: 87, using maximum allowed: 8 [ 467.262086][T10407] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 467.272706][T10407] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.281994][T10407] usb 6-1: Product: syz [ 467.286226][T10407] usb 6-1: Manufacturer: syz [ 467.291925][T10407] usb 6-1: SerialNumber: syz [ 467.296913][ T5098] Bluetooth: hci3: command 0x0406 tx timeout [ 467.303014][ T5791] Bluetooth: hci2: command 0x0409 tx timeout [ 467.377078][ T5098] Bluetooth: hci1: command 0x0c1a tx timeout [ 467.383316][ T5098] Bluetooth: hci4: command 0x0c1a tx timeout [ 467.730693][T10407] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 467.830122][T12270] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 467.851183][T12270] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 468.037281][ T28] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 468.055417][ T5876] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 468.078662][ T5876] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 468.147715][T12281] udevd[12281]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 468.269232][ T28] usb 5-1: Using ep0 maxpacket: 16 [ 468.283891][ T28] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.294230][ T28] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 468.303406][ T28] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 468.313143][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.327996][ T28] usb 5-1: config 0 descriptor?? [ 468.395798][T12285] jffs2: notice: (12285) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 468.577530][ T5098] Bluetooth: hci0: command 0x0c1a tx timeout [ 468.605723][ T5098] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 469.378292][ T5791] Bluetooth: hci2: command 0x0409 tx timeout [ 469.384830][ T5098] Bluetooth: hci3: command 0x0406 tx timeout [ 469.458783][ T5791] Bluetooth: hci1: command 0x0c1a tx timeout [ 469.465112][ T5098] Bluetooth: hci4: command 0x0c1a tx timeout [ 469.724011][T12308] FAULT_INJECTION: forcing a failure. [ 469.724011][T12308] name failslab, interval 1, probability 0, space 0, times 0 [ 469.738217][T12308] CPU: 0 PID: 12308 Comm: syz.7.1342 Not tainted syzkaller #0 [ 469.745727][T12308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 469.755803][T12308] Call Trace: [ 469.759091][T12308] [ 469.762053][T12308] dump_stack_lvl+0x18c/0x250 [ 469.766769][T12308] ? show_regs_print_info+0x20/0x20 [ 469.772023][T12308] ? load_image+0x420/0x420 [ 469.776566][T12308] ? __might_sleep+0xe0/0xe0 [ 469.781218][T12308] ? __lock_acquire+0x7eb0/0x7eb0 [ 469.786257][T12308] should_fail_ex+0x394/0x4c0 [ 469.790967][T12308] should_failslab+0x9/0x20 [ 469.795519][T12308] slab_pre_alloc_hook+0x59/0x300 [ 469.800595][T12308] ? __kernfs_new_node+0xaa/0x7f0 [ 469.805677][T12308] ? __kernfs_new_node+0xaa/0x7f0 [ 469.810754][T12308] __kmem_cache_alloc_node+0x53/0x260 [ 469.816163][T12308] ? string+0x257/0x290 [ 469.820335][T12308] ? __kernfs_new_node+0xaa/0x7f0 [ 469.825397][T12308] __kmalloc_node_track_caller+0xa4/0x230 [ 469.831162][T12308] ? vsnprintf+0x1ac7/0x1ba0 [ 469.835778][T12308] kstrdup+0x3b/0x80 [ 469.839738][T12308] __kernfs_new_node+0xaa/0x7f0 [ 469.844659][T12308] ? kvasprintf+0x121/0x1a0 [ 469.849217][T12308] ? kernfs_new_node+0x260/0x260 [ 469.854242][T12308] ? sysfs_do_create_link_sd+0x75/0x110 [ 469.859850][T12308] kernfs_new_node+0x14c/0x260 [ 469.864677][T12308] kernfs_create_link+0xa7/0x200 [ 469.869659][T12308] sysfs_do_create_link_sd+0x83/0x110 [ 469.875064][T12308] iommu_group_alloc_device+0x18b/0x3a0 [ 469.880645][T12308] __iommu_probe_device+0x4b5/0x1040 [ 469.885956][T12308] ? iommu_probe_device+0x24/0x230 [ 469.891099][T12308] ? iommu_probe_device+0x230/0x230 [ 469.896351][T12308] iommu_probe_device+0x2e/0x230 [ 469.901340][T12308] iommu_bus_notifier+0x7b/0x170 [ 469.906318][T12308] notifier_call_chain+0x18f/0x380 [ 469.911467][T12308] blocking_notifier_call_chain+0x6a/0x90 [ 469.917223][T12308] bus_notify+0x13e/0x180 [ 469.921592][T12308] device_add+0x5cb/0xc40 [ 469.925944][T12308] iommufd_test+0x121d/0x2a20 [ 469.930673][T12308] ? iommufd_selftest_destroy+0xf0/0xf0 [ 469.936233][T12308] ? __lock_acquire+0x7eb0/0x7eb0 [ 469.941289][T12308] ? __lock_acquire+0x7eb0/0x7eb0 [ 469.946389][T12308] ? __might_fault+0xaa/0x120 [ 469.951127][T12308] ? __might_fault+0xaa/0x120 [ 469.955848][T12308] iommufd_fops_ioctl+0x48b/0x540 [ 469.960921][T12308] ? iommufd_ctx_put+0x40/0x40 [ 469.965726][T12308] ? __fget_files+0x28/0x460 [ 469.970376][T12308] ? bpf_lsm_file_ioctl+0x9/0x10 [ 469.975368][T12308] ? security_file_ioctl+0x80/0xa0 [ 469.980491][T12308] ? iommufd_ctx_put+0x40/0x40 [ 469.985275][T12308] __se_sys_ioctl+0xfd/0x170 [ 469.989902][T12308] do_syscall_64+0x55/0xb0 [ 469.994374][T12308] ? clear_bhb_loop+0x40/0x90 [ 469.999097][T12308] ? clear_bhb_loop+0x40/0x90 [ 470.003842][T12308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 470.009794][T12308] RIP: 0033:0x7fd0bf19fb19 [ 470.014259][T12308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.033915][T12308] RSP: 002b:00007fd0c0052028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 470.042372][T12308] RAX: ffffffffffffffda RBX: 00007fd0bf425fa0 RCX: 00007fd0bf19fb19 [ 470.050356][T12308] RDX: 0000200000002280 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 470.058356][T12308] RBP: 00007fd0bf237af8 R08: 0000000000000000 R09: 0000000000000000 [ 470.066345][T12308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.074347][T12308] R13: 00007fd0bf426038 R14: 00007fd0bf425fa0 R15: 00007ffda282c088 [ 470.082382][T12308] [ 470.089515][T12308] iommufd_mock iommufd_mock1: Failed to add to iommu group 0: -12 [ 470.287166][T10407] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -71 [ 470.303599][T10407] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e4. ret = -71 [ 470.326981][T10407] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e8. ret = -71 [ 470.343908][T10407] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000ec. ret = -71 [ 470.356195][T10407] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f0. ret = -71 [ 470.373518][T10407] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f4. ret = -71 [ 470.394104][T10407] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000090. ret = -71 [ 470.405892][T10407] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 470.424856][T10407] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 470.447111][T10407] lan78xx: probe of 6-1:1.0 failed with error -71 [ 470.475450][T10407] usb 6-1: USB disconnect, device number 47 [ 470.658556][ T5098] Bluetooth: hci0: command 0x0c1a tx timeout [ 470.784361][ T5792] usb 5-1: USB disconnect, device number 73 [ 470.979244][T10407] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 471.170704][T10407] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 471.188824][T10407] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 471.201161][T10407] usb 8-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 471.210471][T10407] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.299420][ T5792] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 471.467858][ T5098] Bluetooth: hci2: command 0x0409 tx timeout [ 471.503730][ T5792] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.515577][ T5792] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 471.525353][ T5792] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 471.535844][ T5792] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 471.548982][ T5791] Bluetooth: hci1: command 0x0c1a tx timeout [ 471.555120][ T5098] Bluetooth: hci4: command 0x0c1a tx timeout [ 471.562617][ T5792] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 471.573534][ T5792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.632243][T10407] pegasus: probe of 8-1:1.0 failed with error -71 [ 471.649140][T10407] usb 8-1: USB disconnect, device number 29 [ 472.053464][T10409] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 472.211094][T12326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.231472][T12326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.239510][T10409] usb 5-1: Using ep0 maxpacket: 16 [ 472.258913][T12337] Bluetooth: MGMT ver 1.22 [ 472.265399][T10409] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.288255][T10409] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 472.299111][T10409] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 472.315298][T10409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.328793][T10409] usb 5-1: config 0 descriptor?? [ 472.459856][ T5792] gud 6-1:1.0: Failed to get connectors (error=-71) [ 472.467451][ T5792] gud: probe of 6-1:1.0 failed with error -71 [ 472.500068][ T5792] usb 6-1: USB disconnect, device number 48 [ 473.168880][T12348] FAULT_INJECTION: forcing a failure. [ 473.168880][T12348] name failslab, interval 1, probability 0, space 0, times 0 [ 473.182924][T12348] CPU: 0 PID: 12348 Comm: syz.5.1361 Not tainted syzkaller #0 [ 473.190434][T12348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 473.200627][T12348] Call Trace: [ 473.203964][T12348] [ 473.206932][T12348] dump_stack_lvl+0x18c/0x250 [ 473.211665][T12348] ? show_regs_print_info+0x20/0x20 [ 473.216925][T12348] ? load_image+0x420/0x420 [ 473.221489][T12348] ? __might_sleep+0xe0/0xe0 [ 473.226148][T12348] ? __lock_acquire+0x7eb0/0x7eb0 [ 473.231229][T12348] should_fail_ex+0x394/0x4c0 [ 473.235981][T12348] should_failslab+0x9/0x20 [ 473.240545][T12348] slab_pre_alloc_hook+0x59/0x300 [ 473.245626][T12348] ? tomoyo_encode+0x2ad/0x570 [ 473.250447][T12348] ? tomoyo_encode+0x2ad/0x570 [ 473.255267][T12348] __kmem_cache_alloc_node+0x53/0x260 [ 473.260785][T12348] ? tomoyo_encode+0x2ad/0x570 [ 473.265597][T12348] __kmalloc+0xa7/0x240 [ 473.269806][T12348] tomoyo_encode+0x2ad/0x570 [ 473.274459][T12348] tomoyo_realpath_from_path+0x57c/0x5c0 [ 473.280181][T12348] tomoyo_check_open_permission+0x224/0x460 [ 473.286419][T12348] ? tomoyo_check_open_permission+0x1cf/0x460 [ 473.292551][T12348] ? tomoyo_check_path_number_acl+0x280/0x280 [ 473.298693][T12348] ? __asan_memset+0x22/0x40 [ 473.303365][T12348] ? __rwlock_init+0x150/0x150 [ 473.308195][T12348] ? tomoyo_file_open+0xed/0x180 [ 473.313188][T12348] security_file_open+0x62/0xa0 [ 473.318096][T12348] do_dentry_open+0x32b/0x14b0 [ 473.322927][T12348] ? __asan_memcpy+0x40/0x70 [ 473.327565][T12348] path_openat+0x284f/0x3270 [ 473.332229][T12348] ? do_filp_open+0x430/0x430 [ 473.336974][T12348] do_filp_open+0x1f2/0x430 [ 473.341524][T12348] ? vfs_tmpfile+0x620/0x620 [ 473.346263][T12348] ? _raw_spin_unlock+0x28/0x40 [ 473.351163][T12348] ? alloc_fd+0x590/0x640 [ 473.355653][T12348] do_sys_openat2+0x134/0x1d0 [ 473.360399][T12348] ? do_sys_open+0xe0/0xe0 [ 473.364876][T12348] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 473.370902][T12348] ? lock_chain_count+0x20/0x20 [ 473.375831][T12348] __x64_sys_openat+0x139/0x160 [ 473.380743][T12348] do_syscall_64+0x55/0xb0 [ 473.385209][T12348] ? clear_bhb_loop+0x40/0x90 [ 473.389940][T12348] ? clear_bhb_loop+0x40/0x90 [ 473.394693][T12348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.400660][T12348] RIP: 0033:0x7fdc68d6034e [ 473.405137][T12348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 473.424975][T12348] RSP: 002b:00007fdc69cdff18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 473.433456][T12348] RAX: ffffffffffffffda RBX: 00007fdc69ce06c0 RCX: 00007fdc68d6034e [ 473.441500][T12348] RDX: 0000000000000000 RSI: 00007fdc68e37226 RDI: ffffffffffffff9c [ 473.449618][T12348] RBP: 00007fdc68e37af8 R08: 0000000000000000 R09: 0000000000000000 [ 473.457644][T12348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.465807][T12348] R13: 00007fdc69026038 R14: 00007fdc69025fa0 R15: 00007fff8f6e6ea8 [ 473.473862][T12348] [ 473.498239][T12348] ERROR: Out of memory at tomoyo_realpath_from_path. [ 473.519059][T12351] FAULT_INJECTION: forcing a failure. [ 473.519059][T12351] name fail_futex, interval 1, probability 0, space 0, times 0 [ 473.532962][T12351] CPU: 1 PID: 12351 Comm: syz.5.1361 Not tainted syzkaller #0 [ 473.540595][T12351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 473.550733][T12351] Call Trace: [ 473.554068][T12351] [ 473.557052][T12351] dump_stack_lvl+0x18c/0x250 [ 473.561799][T12351] ? show_regs_print_info+0x20/0x20 [ 473.567139][T12351] ? load_image+0x420/0x420 [ 473.571962][T12351] ? __lock_acquire+0x1431/0x7eb0 [ 473.577058][T12351] should_fail_ex+0x394/0x4c0 [ 473.581883][T12351] get_futex_key+0x134/0xf40 [ 473.586529][T12351] ? futex_setup_timer+0xc0/0xc0 [ 473.591533][T12351] futex_wake+0x127/0x4f0 [ 473.595972][T12351] ? futex_wake_mark+0x150/0x150 [ 473.601241][T12351] do_futex+0x35d/0x3e0 [ 473.605462][T12351] ? __might_fault+0xaa/0x120 [ 473.610229][T12351] ? __ia32_sys_get_robust_list+0x110/0x110 [ 473.616308][T12351] ? __might_fault+0xc6/0x120 [ 473.621050][T12351] mm_release+0x184/0x3a0 [ 473.625440][T12351] ? exit_mm_release+0x30/0x30 [ 473.630277][T12351] ? lockdep_hardirqs_on+0x98/0x150 [ 473.635659][T12351] exit_mm+0xa4/0x340 [ 473.639722][T12351] ? sysctl_delayacct+0x220/0x220 [ 473.644977][T12351] ? do_exit+0x2530/0x2530 [ 473.649475][T12351] do_exit+0x909/0x2530 [ 473.653702][T12351] ? put_task_struct+0xc0/0xc0 [ 473.658542][T12351] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 473.664666][T12351] ? get_signal+0x100e/0x1390 [ 473.669397][T12351] ? lock_chain_count+0x20/0x20 [ 473.674303][T12351] ? _raw_spin_lock_irq+0xbb/0xf0 [ 473.679383][T12351] do_group_exit+0x22d/0x2f0 [ 473.684033][T12351] ? lockdep_hardirqs_on+0x98/0x150 [ 473.689267][T12351] get_signal+0x12a6/0x1390 [ 473.693855][T12351] arch_do_signal_or_restart+0xc2/0x7b0 [ 473.699459][T12351] ? __ia32_sys_get_robust_list+0x110/0x110 [ 473.705398][T12351] ? get_sigframe_size+0x20/0x20 [ 473.710417][T12351] ? exit_to_user_mode_loop+0x3b/0x110 [ 473.715947][T12351] exit_to_user_mode_loop+0x70/0x110 [ 473.721358][T12351] exit_to_user_mode_prepare+0xee/0x180 [ 473.726980][T12351] syscall_exit_to_user_mode+0x1a/0x50 [ 473.732522][T12351] do_syscall_64+0x61/0xb0 [ 473.737006][T12351] ? clear_bhb_loop+0x40/0x90 [ 473.741750][T12351] ? clear_bhb_loop+0x40/0x90 [ 473.746582][T12351] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.752529][T12351] RIP: 0033:0x7fdc68d9fb19 [ 473.757026][T12351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.776740][T12351] RSP: 002b:00007fdc69cbf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 473.785232][T12351] RAX: fffffffffffffe00 RBX: 00007fdc69026098 RCX: 00007fdc68d9fb19 [ 473.793271][T12351] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdc69026098 [ 473.801291][T12351] RBP: 00007fdc69026090 R08: 0000000000000000 R09: 0000000000000000 [ 473.809394][T12351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.817423][T12351] R13: 00007fdc69026128 R14: 00007fff8f6e6dc0 R15: 00007fff8f6e6ea8 [ 473.825501][T12351] [ 474.166354][T12364] < [ 474.171322][T10409] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 474.377659][T10409] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.388909][T10409] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 474.398315][T10409] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.418028][T10409] as10x_usb: device has been detected [ 474.425917][T10409] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 474.453288][T10409] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 474.475124][T10409] usb 8-1: loading /lib/firmware/as102_data1_st.hex failed with error -5 [ 474.489809][T10409] usb 8-1: Direct firmware load for as102_data1_st.hex failed with error -5 [ 474.498829][T10409] usb 8-1: Falling back to sysfs fallback for: as102_data1_st.hex [ 474.797834][T12369] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1370'. [ 474.818669][ T28] usb 5-1: USB disconnect, device number 74 [ 474.829258][T12369] FAULT_INJECTION: forcing a failure. [ 474.829258][T12369] name failslab, interval 1, probability 0, space 0, times 0 [ 474.872010][T12369] CPU: 0 PID: 12369 Comm: syz.5.1370 Not tainted syzkaller #0 [ 474.879648][T12369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 474.889721][T12369] Call Trace: [ 474.893017][T12369] [ 474.895994][T12369] dump_stack_lvl+0x18c/0x250 [ 474.900726][T12369] ? show_regs_print_info+0x20/0x20 [ 474.906024][T12369] ? load_image+0x420/0x420 [ 474.910577][T12369] ? __might_sleep+0xe0/0xe0 [ 474.915208][T12369] ? __lock_acquire+0x7eb0/0x7eb0 [ 474.920378][T12369] should_fail_ex+0x394/0x4c0 [ 474.925105][T12369] should_failslab+0x9/0x20 [ 474.929638][T12369] slab_pre_alloc_hook+0x59/0x300 [ 474.934699][T12369] ? __request_module+0x2ed/0x600 [ 474.939788][T12369] ? __request_module+0x2ed/0x600 [ 474.944857][T12369] __kmem_cache_alloc_node+0x53/0x260 [ 474.950281][T12369] ? __request_module+0x2ed/0x600 [ 474.955348][T12369] __kmalloc_node_track_caller+0xa4/0x230 [ 474.961138][T12369] kstrdup+0x3b/0x80 [ 474.965088][T12369] __request_module+0x2ed/0x600 [ 474.969982][T12369] ? module_enforce_rwx_sections+0x150/0x150 [ 474.975997][T12369] ? __up_read+0x2b8/0x6b0 [ 474.980463][T12369] ? __lock_acquire+0x7eb0/0x7eb0 [ 474.985555][T12369] ? __crypto_alg_lookup+0x48a/0x4c0 [ 474.990900][T12369] crypto_alg_mod_lookup+0xde/0x570 [ 474.996149][T12369] crypto_add_alg+0x228/0x370 [ 475.000870][T12369] crypto_user_rcv_msg+0x489/0x5e0 [ 475.006052][T12369] ? crypto_netlink_rcv+0x40/0x40 [ 475.011136][T12369] ? __mutex_trylock_common+0x160/0x270 [ 475.016723][T12369] netlink_rcv_skb+0x235/0x4c0 [ 475.021528][T12369] ? crypto_netlink_rcv+0x40/0x40 [ 475.026591][T12369] ? netlink_ack+0x1160/0x1160 [ 475.031400][T12369] ? __lock_acquire+0x7eb0/0x7eb0 [ 475.036474][T12369] ? net_generic+0x1e/0x240 [ 475.041026][T12369] ? netlink_deliver_tap+0x2e/0x1b0 [ 475.046257][T12369] crypto_netlink_rcv+0x2a/0x40 [ 475.051173][T12369] netlink_unicast+0x856/0x9e0 [ 475.056013][T12369] netlink_sendmsg+0x8d0/0xbf0 [ 475.060834][T12369] ? netlink_getsockopt+0x590/0x590 [ 475.066076][T12369] ? apparmor_socket_sendmsg+0x170/0x330 [ 475.071760][T12369] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 475.077092][T12369] ? security_socket_sendmsg+0x80/0xa0 [ 475.082604][T12369] ? netlink_getsockopt+0x590/0x590 [ 475.087842][T12369] ____sys_sendmsg+0x61b/0x980 [ 475.092667][T12369] ? __asan_memset+0x22/0x40 [ 475.097312][T12369] ? __sys_sendmsg_sock+0x30/0x30 [ 475.102415][T12369] ? __import_iovec+0x5f2/0x850 [ 475.107317][T12369] ? import_iovec+0x73/0xa0 [ 475.111856][T12369] ___sys_sendmsg+0x2a6/0x360 [ 475.116568][T12369] ? __sys_sendmsg+0x2b0/0x2b0 [ 475.121384][T12369] ? __lock_acquire+0x7eb0/0x7eb0 [ 475.126474][T12369] __se_sys_sendmsg+0x1d0/0x2c0 [ 475.131363][T12369] ? __x64_sys_sendmsg+0x80/0x80 [ 475.136364][T12369] ? lockdep_hardirqs_on+0x98/0x150 [ 475.141605][T12369] do_syscall_64+0x55/0xb0 [ 475.146065][T12369] ? clear_bhb_loop+0x40/0x90 [ 475.150785][T12369] ? clear_bhb_loop+0x40/0x90 [ 475.155539][T12369] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.161488][T12369] RIP: 0033:0x7fdc68d9fb19 [ 475.165938][T12369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.185793][T12369] RSP: 002b:00007fdc69ce0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.194591][T12369] RAX: ffffffffffffffda RBX: 00007fdc69025fa0 RCX: 00007fdc68d9fb19 [ 475.202622][T12369] RDX: 00000000200080c0 RSI: 00002000000001c0 RDI: 0000000000000003 [ 475.210629][T12369] RBP: 00007fdc68e37af8 R08: 0000000000000000 R09: 0000000000000000 [ 475.218636][T12369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.226647][T12369] R13: 00007fdc69026038 R14: 00007fdc69025fa0 R15: 00007fff8f6e6ea8 [ 475.234674][T12369] [ 475.266000][T12372] FAULT_INJECTION: forcing a failure. [ 475.266000][T12372] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 475.279396][T12372] CPU: 1 PID: 12372 Comm: syz.4.1371 Not tainted syzkaller #0 [ 475.286926][T12372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 475.297033][T12372] Call Trace: [ 475.300360][T12372] [ 475.303359][T12372] dump_stack_lvl+0x18c/0x250 [ 475.308109][T12372] ? show_regs_print_info+0x20/0x20 [ 475.313369][T12372] ? load_image+0x420/0x420 [ 475.317933][T12372] ? __might_fault+0xaa/0x120 [ 475.322663][T12372] ? __lock_acquire+0x7eb0/0x7eb0 [ 475.327742][T12372] ? __virt_addr_valid+0x10c/0x380 [ 475.332919][T12372] should_fail_ex+0x394/0x4c0 [ 475.337665][T12372] _copy_from_user+0x2f/0xe0 [ 475.342315][T12372] strndup_user+0xb7/0x150 [ 475.346787][T12372] __se_sys_mount+0x9f/0x3d0 [ 475.351433][T12372] ? __x64_sys_mount+0xc0/0xc0 [ 475.356334][T12372] ? __secure_computing+0x111/0x2f0 [ 475.361619][T12372] ? __x64_sys_mount+0x20/0xc0 [ 475.366420][T12372] do_syscall_64+0x55/0xb0 [ 475.370899][T12372] ? clear_bhb_loop+0x40/0x90 [ 475.375632][T12372] ? clear_bhb_loop+0x40/0x90 [ 475.380337][T12372] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.386262][T12372] RIP: 0033:0x7f68cf59fb19 [ 475.390726][T12372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.410371][T12372] RSP: 002b:00007f68d04d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 475.418818][T12372] RAX: ffffffffffffffda RBX: 00007f68cf825fa0 RCX: 00007f68cf59fb19 [ 475.426818][T12372] RDX: 0000200000000640 RSI: 0000200000000240 RDI: 0000000000000000 [ 475.434825][T12372] RBP: 00007f68cf637af8 R08: 0000000000000000 R09: 0000000000000000 [ 475.442826][T12372] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 475.450831][T12372] R13: 00007f68cf826038 R14: 00007f68cf825fa0 R15: 00007ffd913f1f08 [ 475.458843][T12372] [ 475.522427][T12377] UBIFS error (pid: 12377): cannot open "ubi0:testvol", error -19 [ 475.601540][T12379] netlink: 'syz.5.1373': attribute type 46 has an invalid length. [ 475.971236][ T5792] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 476.041521][ T5876] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 476.183146][ T5792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.221382][ T5792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.233413][ T5792] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 476.233701][ T5876] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.252162][ T5792] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 476.266967][ T5876] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.278153][ T5876] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.287378][ T5792] usb 6-1: Manufacturer: syz [ 476.293067][ T5876] usb 5-1: config 0 interface 0 has no altsetting 0 [ 476.311300][ T5876] usb 5-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 476.322330][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.333199][ T5792] usb 6-1: config 0 descriptor?? [ 476.349072][ T5876] usb 5-1: config 0 descriptor?? [ 476.469410][T12400] syz.7.1383 (12400): drop_caches: 2 [ 476.724747][T12404] device-mapper: table: 248:5: linear: Device lookup failed (-ENOENT) [ 476.733996][T12404] device-mapper: ioctl: error adding target to table [ 476.754330][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 476.761922][ T5792] usbhid 6-1:0.0: can't add hid device: -32 [ 476.768083][ T5792] usbhid: probe of 6-1:0.0 failed with error -32 [ 476.786079][ T5792] usb 6-1: USB disconnect, device number 49 [ 476.805088][ T5876] hid-rmi 0003:1532:011D.0015: unbalanced collection at end of report description [ 476.824023][ T5876] hid-rmi 0003:1532:011D.0015: parse failed [ 476.847075][ T5876] hid-rmi: probe of 0003:1532:011D.0015 failed with error -22 [ 477.025219][ T174] usb 5-1: USB disconnect, device number 75 [ 477.108100][T12414] syz.7.1389: vmalloc error: size 12288, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0-1 [ 477.126574][T12414] CPU: 1 PID: 12414 Comm: syz.7.1389 Not tainted syzkaller #0 [ 477.134095][T12414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 477.144200][T12414] Call Trace: [ 477.147529][T12414] [ 477.150505][T12414] dump_stack_lvl+0x18c/0x250 [ 477.155251][T12414] ? show_regs_print_info+0x20/0x20 [ 477.160496][T12414] ? load_image+0x420/0x420 [ 477.165054][T12414] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 477.171517][T12414] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 477.178192][T12414] warn_alloc+0x246/0x340 [ 477.182651][T12414] ? zone_watermark_ok_safe+0x230/0x230 [ 477.188247][T12414] ? mod_memcg_page_state+0x4bd/0x940 [ 477.193788][T12414] __vmalloc_node_range+0x1055/0x1320 [ 477.199226][T12414] ? free_vm_area+0x50/0x50 [ 477.203771][T12414] ? vscnprintf+0x80/0x80 [ 477.208149][T12414] ? alloc_fd+0x590/0x640 [ 477.212538][T12414] ? kvm_dev_ioctl+0x208/0x1810 [ 477.217432][T12414] __vmalloc+0x7a/0x90 [ 477.221545][T12414] ? kvm_dev_ioctl+0x208/0x1810 [ 477.226440][T12414] kvm_dev_ioctl+0x208/0x1810 [ 477.231151][T12414] ? __fget_files+0x28/0x460 [ 477.235790][T12414] ? kvm_resume+0x1e0/0x1e0 [ 477.240424][T12414] ? bpf_lsm_file_ioctl+0x9/0x10 [ 477.245422][T12414] ? security_file_ioctl+0x80/0xa0 [ 477.250584][T12414] ? kvm_resume+0x1e0/0x1e0 [ 477.255121][T12414] __se_sys_ioctl+0xfd/0x170 [ 477.259762][T12414] do_syscall_64+0x55/0xb0 [ 477.264215][T12414] ? clear_bhb_loop+0x40/0x90 [ 477.268928][T12414] ? clear_bhb_loop+0x40/0x90 [ 477.273736][T12414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.279666][T12414] RIP: 0033:0x7fd0bf19fb19 [ 477.284116][T12414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.303932][T12414] RSP: 002b:00007fd0c0052028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.312389][T12414] RAX: ffffffffffffffda RBX: 00007fd0bf425fa0 RCX: 00007fd0bf19fb19 [ 477.320391][T12414] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 477.328396][T12414] RBP: 00007fd0bf237af8 R08: 0000000000000000 R09: 0000000000000000 [ 477.336463][T12414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.344562][T12414] R13: 00007fd0bf426038 R14: 00007fd0bf425fa0 R15: 00007ffda282c088 [ 477.352578][T12414] [ 477.361920][T12414] Mem-Info: [ 477.365145][T12414] active_anon:9640 inactive_anon:1 isolated_anon:0 [ 477.365145][T12414] active_file:14642 inactive_file:45659 isolated_file:0 [ 477.365145][T12414] unevictable:768 dirty:227 writeback:0 [ 477.365145][T12414] slab_reclaimable:7106 slab_unreclaimable:102701 [ 477.365145][T12414] mapped:30299 shmem:1430 pagetables:1052 [ 477.365145][T12414] sec_pagetables:0 bounce:0 [ 477.365145][T12414] kernel_misc_reclaimable:0 [ 477.365145][T12414] free:1313185 free_pcp:7688 free_cma:0 [ 477.423915][T12414] Node 0 active_anon:38556kB inactive_anon:4kB active_file:58568kB inactive_file:182432kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121196kB dirty:908kB writeback:0kB shmem:4180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12612kB pagetables:4208kB sec_pagetables:0kB all_unreclaimable? no [ 477.471023][T12414] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 477.514647][T12414] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 477.548593][T12414] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 477.558722][T12414] Node 0 DMA32 free:1336724kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:38516kB inactive_anon:4kB active_file:58568kB inactive_file:181608kB unevictable:1536kB writepending:908kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:11480kB local_pcp:1700kB free_cma:0kB [ 477.593674][T12414] lowmem_reserve[]: 0 0 0 0 0 [ 477.598516][T12414] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 477.630414][T12414] lowmem_reserve[]: 0 0 0 0 0 [ 477.644161][T12414] Node 1 Normal free:3900656kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19104kB local_pcp:6496kB free_cma:0kB [ 477.681826][T12414] lowmem_reserve[]: 0 0 0 0 0 [ 477.686813][T12414] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 477.719714][T12414] Node 0 DMA32: 815*4kB (UME) 887*8kB (UME) 738*16kB (UME) 484*32kB (UME) 454*64kB (UME) 160*128kB (UME) 77*256kB (UME) 26*512kB (UME) 8*1024kB (UME) 6*2048kB (UME) 292*4096kB (M) = 1336724kB [ 477.748902][T12414] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 477.769463][T12414] Node 1 Normal: 224*4kB (UME) 56*8kB (UE) 47*16kB (UME) 162*32kB (UME) 50*64kB (UE) 8*128kB (UME) 2*256kB (UE) 3*512kB (UME) 0*1024kB 2*2048kB (UE) 948*4096kB (M) = 3900656kB [ 477.794884][T12414] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 477.806930][T12414] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 477.822100][T12414] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 477.831796][T12414] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 477.847549][T12414] 61732 total pagecache pages [ 477.857109][T12414] 1 pages in swap cache [ 477.882083][T12414] Free swap = 124216kB [ 477.886385][T12414] Total swap = 124996kB [ 477.890577][T12414] 2097051 pages RAM [ 477.902174][T12414] 0 pages HighMem/MovableOnly [ 477.907588][T12414] 421729 pages reserved [ 477.919026][T12414] 0 pages cma reserved [ 477.937949][T12423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1393'. [ 478.233993][ T27] audit: type=1807 audit(1794699982.077:12): UNKNOWN=appr res=0 [ 478.242085][ T27] audit: type=1802 audit(1794699982.097:13): pid=12442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.1398" res=0 errno=0 [ 478.260731][T12441] ima: policy update failed [ 478.292545][ T27] audit: type=1802 audit(1794699982.117:14): pid=12441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1398" res=0 errno=0 [ 478.564854][ T5876] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 478.758071][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.771595][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.785238][ T5876] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 478.799038][ T5876] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 478.807509][ T5876] usb 6-1: Manufacturer: syz [ 478.820707][ T5876] usb 6-1: config 0 descriptor?? [ 478.822290][T12461] device-mapper: table: 248:9: raid: Gap in table (-EINVAL) [ 478.833995][T12461] device-mapper: ioctl: error adding target to table [ 479.270955][ T5876] usbhid 6-1:0.0: can't add hid device: -71 [ 479.293025][ T5876] usbhid: probe of 6-1:0.0 failed with error -71 [ 479.326258][ T5876] usb 6-1: USB disconnect, device number 50 SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 480.265399][ T5098] Bluetooth: hci1: command 0x0c1a tx timeout [ 482.348628][ T2969] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.446048][ T2969] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.542170][ T2969] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.610086][ T2969] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.717178][ T2969] hsr_slave_0: left promiscuous mode [ 483.723399][ T2969] hsr_slave_1: left promiscuous mode [ 483.730012][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.737691][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.750230][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.758439][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.767937][ T2969] bridge_slave_1: left allmulticast mode [ 483.773615][ T2969] bridge_slave_1: left promiscuous mode [ 483.779789][ T2969] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.790627][ T2969] bridge_slave_0: left allmulticast mode [ 483.796602][ T2969] bridge_slave_0: left promiscuous mode [ 483.803697][ T2969] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.831378][ T2969] veth1_macvtap: left promiscuous mode [ 483.837134][ T2969] veth0_macvtap: left promiscuous mode [ 483.842757][ T2969] veth1_vlan: left promiscuous mode [ 483.850689][ T2969] veth0_vlan: left promiscuous mode [ 484.524578][ T2969] team0 (unregistering): Port device team_slave_1 removed [ 484.578203][ T2969] team0 (unregistering): Port device team_slave_0 removed [ 485.484997][ T2969] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.550302][ T2969] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.627877][ T2969] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.733043][ T2969] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.809817][ T2969] hsr_slave_0: left promiscuous mode [ 486.816373][ T2969] hsr_slave_1: left promiscuous mode [ 486.842635][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.850207][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.858813][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.866292][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.875312][ T2969] bridge_slave_1: left allmulticast mode [ 486.881153][ T2969] bridge_slave_1: left promiscuous mode [ 486.886989][ T2969] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.896038][ T2969] bridge_slave_0: left allmulticast mode [ 486.902027][ T2969] bridge_slave_0: left promiscuous mode [ 486.907975][ T2969] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.934673][ T2969] veth1_macvtap: left promiscuous mode [ 486.941518][ T2969] veth0_macvtap: left promiscuous mode [ 486.948122][ T2969] veth1_vlan: left promiscuous mode [ 486.953581][ T2969] veth0_vlan: left promiscuous mode [ 487.613819][ T2969] team0 (unregistering): Port device team_slave_1 removed [ 487.665288][ T2969] team0 (unregistering): Port device team_slave_0 removed [ 487.713179][ T2969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.771136][ T2969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.162968][ T2969] bond0 (unregistering): Released all slaves