last executing test programs: 6.638762108s ago: executing program 1 (id=1940): r0 = gettid() r1 = syz_open_procfs$userns(r0, &(0x7f0000000000)) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000040)={0x1, "b1"}, 0x2) r3 = inotify_init() close_range(r1, r3, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000480)=ANY=[], 0x0) 6.560348092s ago: executing program 2 (id=1942): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x8, 0x70bd27, 0x25dfdbff, {0x0, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000810}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x1, 0x8000, 0x6, 0xffff, {{0x7, 0x4, 0x3, 0x7, 0x1c, 0x64, 0x0, 0x9, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp={0x44, 0x8, 0x9b, 0x0, 0x8, [0x2]}]}}}}}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @initdev}, &(0x7f0000000240)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@initdev, 0x0}, &(0x7f00000002c0)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x3, 0xfffffffc, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, @mcast2, 0x80, 0x20, 0xb}}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @broadcast, @dev}, &(0x7f0000000400)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000440)={@initdev, 0x0}, &(0x7f0000000480)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x5, 0x7, {{0xa, 0x4, 0x0, 0x7, 0x28, 0x64, 0x0, 0x2, 0x0, 0x0, @private=0xa010102, @empty, {[@end, @timestamp={0x44, 0x10, 0xc0, 0x0, 0x3, [0x6, 0x1, 0x1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'erspan0\x00', &(0x7f0000000600)={'gre0\x00', 0x0, 0x40, 0x1, 0x200, 0x3, {{0x1f, 0x4, 0x2, 0xe, 0x7c, 0x68, 0x0, 0x9, 0x29, 0x0, @remote, @broadcast, {[@rr={0x7, 0xb, 0x1f, [@local, @empty]}, @cipso={0x86, 0x1d, 0x0, [{0x6, 0xc, "06df2618edad3e2ab1d8"}, {0x1, 0xb, "68bb9b24e3d53540ab"}]}, @timestamp={0x44, 0x10, 0x90, 0x0, 0x0, [0x5, 0x5, 0x2]}, @ssrr={0x89, 0xb, 0xfa, [@rand_addr=0x64010102, @multicast2]}, @noop, @cipso={0x86, 0x1c, 0x1, [{0x7, 0x4, "b932"}, {0x5, 0xa, "33e0bcc3630c89a8"}, {0x6, 0x6, "13da3291"}, {0x6, 0x2}]}, @lsrr={0x83, 0x7, 0x4c, [@loopback]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000700)={@multicast1, @local, 0x0}, &(0x7f0000000740)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'tunl0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x8, 0x1, 0x4, 0x80000000, {{0x25, 0x4, 0x1, 0x7, 0x94, 0x66, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast2, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xc2, 0x3, 0xb, [{@empty, 0xffff7fff}, {@local, 0x2}]}, @ra={0x94, 0x4}, @noop, @rr={0x7, 0x13, 0x10, [@multicast2, @rand_addr=0x64010101, @local, @multicast1]}, @timestamp_addr={0x44, 0x34, 0x26, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb}, {@rand_addr=0x64010101}]}, @lsrr={0x83, 0x1b, 0xf4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @rand_addr=0x64010102, @rand_addr=0x64010102, @private=0xa010101]}, @end]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000009c0)={'gre0\x00', &(0x7f0000000940)={'sit0\x00', 0x0, 0x8, 0x20, 0x4, 0x6, {{0xa, 0x4, 0x2, 0x0, 0x28, 0x66, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x8, 0xde, 0x0, 0x6, [0x9033]}, @lsrr={0x83, 0xb, 0xc5, [@loopback, @loopback]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000a00)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000010c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000000a40)={0x624, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x19}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe08}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8, 0x6, r17}}}]}}]}, 0x624}, 0x1, 0x0, 0x0, 0x67c5736e6819837e}, 0x4000) (async) r18 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001140), r1) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x74, r18, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd44a}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) r19 = socket$nl_generic(0x10, 0x3, 0x10) r20 = socket$nl_generic(0x10, 0x3, 0x10) (async) r21 = syz_genetlink_get_family_id$tipc(&(0x7f00000012c0), r19) sendmsg$TIPC_CMD_GET_NETID(r20, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r21, 0x620, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000002) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r19, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x745687cc622aac92}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x50, r18, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2a}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8041) r22 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom(r22, &(0x7f0000001500)=""/91, 0x5b, 0x40002020, &(0x7f0000001580)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x80) (async) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x80, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff25a}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffd119}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x30}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) 6.51265498s ago: executing program 2 (id=1944): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edee501030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="4016cb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x0, 0x6, 0x5, {0x5, 0xe, "11863a"}}, &(0x7f0000000580)=ANY=[@ANYRES8, @ANYRESHEX]}, &(0x7f00000003c0)={0x34, &(0x7f0000000600)={0x20, 0x31, 0x98, "764be17df108c704ee1269f492aaeccc101e7f3396be958e7964a0233b9398bb5c97c5135da59006223e857c833d5538b99fbf589d7b0864f1f7c701e4b9354eca539f96f72779fa3af6ef9bd8a34594a473b5428e29030bec11def7be06edc09000a92072f9cbcedc28eb5937cc2ffb86a5627c333d390895baafd878abbe9d32297c9fe542622f4fc8171d3aa6cf2378787a9fd384750a"}, &(0x7f0000000200)={0x0, 0xa, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xca}, &(0x7f0000000300)={0xc0, 0xa1, 0x4}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0xfffffff7}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "3483cc9873a510a27ff1f81ce8546294428f6212103268f1faf9bc00000000000000000000000000000200"}}) 4.631457364s ago: executing program 3 (id=1953): r0 = socket$inet_udp(0x2, 0x2, 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/53, 0x35}, {&(0x7f0000000140)=""/84, 0x54}, {&(0x7f00000002c0)=""/238, 0xee}, {&(0x7f00000003c0)=""/163, 0xa3}, {&(0x7f0000000480)=""/135, 0x87}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000000540)=""/132, 0x84}, {&(0x7f0000000600)=""/143, 0x8f}], 0x9, 0xfffff801, 0x9) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) r4 = msgget$private(0x0, 0x108) msgsnd(r4, &(0x7f00000010c0)=ANY=[@ANYBLOB="020000eaff"], 0x8, 0x0) (async) msgrcv(r4, &(0x7f0000000040)={0x0, ""/4096}, 0x1008, 0x0, 0x5800) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}}, 0x90) (rerun: 64) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000000a0a050000000000000000000a0000090900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 4.5284514s ago: executing program 3 (id=1954): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r1], 0x1c}}, 0x804) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3735d694329e67b}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r5, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x78}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r2, 0x65aebf9dafbebb59, 0xfffffffe, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 4.527485904s ago: executing program 3 (id=1955): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/66, 0x42}, {&(0x7f00000001c0)=""/18, 0x12}, {&(0x7f00000014c0)=""/258, 0x102}, {&(0x7f00000004c0)=""/4082, 0xff2}], 0x4}}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x88800, 0x0) (async) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x88800, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x193001, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000140)={0x45}, 0x1) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffff7, 0x7, 0x0, 0x4, 0x10003, 0xffffffffffffffff, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x0, 0x4000000000002, 0x1, 0xb9, 0x8d], 0xeeee8000}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffff7, 0x7, 0x0, 0x4, 0x10003, 0xffffffffffffffff, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x0, 0x4000000000002, 0x1, 0xb9, 0x8d], 0xeeee8000}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000280)={0x1, @sliced={0x81, [0xff, 0x727f, 0x3, 0x1, 0xd, 0x2, 0xff, 0x5, 0x200, 0x9, 0x1, 0xfffe, 0x0, 0xf, 0x1, 0x1, 0x2, 0x8, 0x6, 0x447, 0x4, 0x2, 0xf0, 0x5, 0x2, 0x4, 0x2, 0x100, 0x9, 0x5c, 0x2, 0x2, 0x4, 0x7, 0x7f, 0x7, 0x5, 0x8, 0x200, 0x3ff, 0x7, 0x5, 0x4, 0x8, 0xe, 0x8001, 0x7f, 0x1], 0x7}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x9c) sendmmsg$inet6(r7, &(0x7f0000002180)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x8, @mcast1, 0xe}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000380)="a0abc1e517eea3cec85aa7bbe32a84636d01d1ceb22ac537d90d57b4a4199ed623b1064ac0019437e0e1b7e52329b5c4a74a1b362e7df37f1829b1e9af79ed43e8488731930d5f5190631b527a3bf1d9e45e3e0c3eb8e5ebf38b258869cc1eae0dd3b9d2227ae6571a54a80073755a1f92a8f1deccab691b2a0b4306d9ecdaad03a117ea1d6c90ec9515861b838fa5554ce1649469e87f901412dc5a119529ebe531e3f61e4f5baa67ade54867ed940168cfeed8decf", 0xb6}, {&(0x7f0000000440)="36d52d48f6a0313f04e42c08ee943078d97805f8ee2f0e3196532eb1f11335134753958293295e55b1fad7ab9a0f9cb2fa23dfd0b55f0c80847f161fecc56d4b6b63c357fee0628a3adc459a3a2aba1102d7ac680e8305da637b2164147024384f11631e88f57496823fdbd83c79ac76f45713d6f58f15a4afb41207b2cb75269f891617200e0dda3782d855531d16d59907e54171b058a35104caca6f9d1fb12d45df69b4222351cd", 0xa9}, {&(0x7f0000000500)="982b2de3dda368e0e46c54e139f498670cdbf11f1a5d65d790d3f5c9d06ce6abe39969021ab0ad737ff70fbd78bd4475f099b3a67ddf3159c065640f3b96ceea4191a56f04ce75e85481d8", 0x4b}, {&(0x7f0000000580)="d9f00594101a82eb9cf2223a2b043b276b2b789f5a4a8d548de5f577c9f539bc98afb34c528e5d9ebc89aac9928ae8053010485be1dd215d36f5d35862d8d34a2dee0605cc8b8e1e5dd812173ea9f755d6161a88a413f0349f13803a389f158d333c6c4a62c1899cc395cdbd8197ad5b6c3fad88e6c764aa6ce2d3e8cba8ea94fc801924fbd3938a7e0f3248c9c588c20175b22963fea720841b4f0586c5c5094fafe90665703812e7681a28500365361cb86d3d657958e8290aee178f24229ce50a11d0053b3b9148827ebb9005e783b499fb43bcd2d6ff818e8c557b40e5", 0xdf}, {&(0x7f0000000680)="9e63b292b3035f2660c3e05744aa5151d4412916c2d0596d4a9949c24d48d587cf2d8431958d384106028face3ba0253d65daf65c3835f114c41ccd3f51af4169593ca658d932d7ac0a37a6b0d24da05409fe1671579224b2eff1574ee7d6f188fd870f3", 0x64}], 0x5, &(0x7f0000000780)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffcfb}}], 0x18}}, {{&(0x7f00000007c0)={0xa, 0x4e22, 0x7, @empty, 0x1}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000800)="b1793c84419521d09dc23b398e95b2c5dbef18eadb0c5d53e29c2d1bfa2c000b313e7ca2c23f9690b6d6f5f7735b336f3fc94e459ee2ed3a1f74cf616a7882fbb290c0a20ba38ad9a4186748e57bf6eb2002b47f869b31299276b58abb06b20063ae1264fe752284bd47fa924e673d1194603fbafa8b676571695b5cec17a29d9a30b3c2be5cee81b4394b9a9945d1d6b967315c0e74c0eff3f2565ca23a0d8f6dea17f52c936eb3fc1061d5fe6d1cae5ae4c9", 0xb3}, {&(0x7f00000008c0)="0e2fc87cc9c3285aefe4420b9d40dcc6d8b0fe96e4153b06ad71d060f3295199cb9e", 0x22}], 0x2, &(0x7f0000000940)=[@dstopts_2292={{0x68, 0x29, 0x4, {0x88, 0xa, '\x00', [@pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0xe}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x7fff}, @calipso={0x7, 0x38, {0x1, 0xc, 0x6, 0x0, [0x6, 0x9, 0x2, 0x8, 0x8, 0x3]}}]}}}], 0x68}}, {{&(0x7f00000009c0)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0x94}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000ac0)="aee8c0a31cb5fd76df336504007ef8bc3452a54dd54710d43c65a1040b7a48b36db7af0febc648b90f5adb5ff79ed99acb0b98a6607e8e467f91da84105e9a86db5ae802bc6f3d90c96f", 0x4a}, {&(0x7f0000000c00)="0766a82360f5bc126d46f5e625715e810260f927bccc6878c7e2fe556c4b3f85ac28251f920db3db37a43fb8374cf31d80ecd83f60cc4d55141e52eb9a53c844b7e6445f82f1a4db40653b62914ae8756167705227a59d7aa36d0cc80b082fa1b31d7cfb555c99df4436de2e66dd02f9716ac5dda4cbe175e891ccc1c08f72c51f16ea526c0ed52a1991400f815a525df0c41687e8b4d7d42131e84f8a4099fd42464091cb54558d337a2d29277a39f91d0fbe9702c6db304dfbf707d7b33c9a9fb882cabb8190d7c2777fa8ba1c83819632aa3671d6e7e2f718ad96789f309a", 0xe0}, {&(0x7f0000000b40)="a285a28b1c49192b563c75d58cf7a90bd848ad5be5f70f451d75884de044ced94f299f87", 0x24}, {&(0x7f0000000d00)="5d0598d07bf562031839e30200609c47ea0d4e6d56d977ed80fcdc3c5204a9f075740af7074538ac8bd331f70b29fdbb6286b2ca9b5b5a9281387e1bc6d8bc7a8fbc47f63fdfe75581751345af01c9c21a74ad2be32e463820d88384b4123a9261ff1e67aa6aaf438b66124b892c4df733ef903cdc701620c5a9a7454603841759488a83b8ccb50458f5efacea9c02c98fd6f49795580a6294767a1106709fc0262eaed2876bdff3d84f", 0xaa}, {&(0x7f0000000b80)="bc3eddb0769fe9aa9dbc6b08a7bd765b96", 0x11}], 0x5, &(0x7f0000000ec0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x8, 0x4, 0x1, 0x9, 0x0, [@remote, @loopback]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x10001}}, @hopopts={{0x1b0, 0x29, 0x36, {0x2f, 0x33, '\x00', [@hao={0xc9, 0x10, @private0}, @ra={0x5, 0x2, 0x4ce}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @ra={0x5, 0x2, 0xfffd}, @generic={0x4, 0x70, "718450af5378d0222b5a38acec28194c6300cf506aefa51fd277976cd75789b8443bf36037dbf9f6e16ddb2180d735164d44fecdc4d647468f78e16acf581d47bea83fe60cade68e4060dda4ecfc7bf439e7ce4a5ded5692d4631d73c626c0d18cb06b3b83595c5def5f2575f49a5b21"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}}, @generic={0x0, 0xe6, "93872b013e2b2020dd0cf7c07bb4bb1c188baadeac883136de733b885bee2eab7bb555f31d0c1753a1e31c078249ac729fec43276c2017536803e01c2c77bca85b1b9e1dc41714a7b947834b0b2a9706c03f140b13b5c6195050d78e1bca63decf30f0f19f2c75664dc1e4d64be71adbc540cb07239b443bc0237d51d0593843a1a47fb362c843adee1e672c9856a941c613cf601d07fcefdfed361047cee0da3708713378ba3d4426f6e74e2aabc045c7bd4f98fd62b17bae171fc8cf30967ba96581df7352ddcf49b9394b5fc85ce36b2ff46532ccf7ac3ce625d30f3d3c19f7f0a66c6aae"}]}}}, @dstopts={{0x1020, 0x29, 0x37, {0x8, 0x200, '\x00', [@generic={0x4, 0x1000, "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"}, @ra]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x6c, 0x4, 0x0, 0x0, 0x0, [@private2, @mcast2]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x4b, 0x2, 0x0, 0x0, 0x0, [@local]}}}], 0x1298}}], 0x3, 0x8000) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x24, &(0x7f0000000bc0)={0x20, 0x15, 0x3, "c39242"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x24, &(0x7f0000000bc0)={0x20, 0x15, 0x3, "c39242"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.963252036s ago: executing program 1 (id=1961): prctl$PR_MCE_KILL(0x29, 0x1, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000cc0000/0x2000)=nil, 0x2000, 0x3000002, 0x810, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) 3.422728564s ago: executing program 2 (id=1964): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000002bc0), r1) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8800) openat$cgroup_int(r3, &(0x7f00000052c0)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="370426bd7000fcdbdf250400000005000a00010000000800010034"], 0x24}}, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000020ef0e01000000000300010902240001000080000904000001f2ff0100092100000001220500090581083f"], 0x0) 3.264247554s ago: executing program 1 (id=1965): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x40187013, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x220301, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) r5 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {r4, r5}}, './file0\x00'}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f00000018c0)="23ad3214f03cd610fa9b109f2f435852a8f46075d298400c33f6187a643a66c24712bbeb9bc9f10c0ea4c02684cbc0176b1528990d6fd7348c75eb8f4022bc31448920e9e5e54ea7dc114814ca19aa759c605b0b0fef03ddb8dbd84987ac54af7a85398278312836f1e833df5c76188c93ee8ec7916ec4b50ee5ddbe50aeb173b52ff24eccc17fdb16c540ea0ea9c68793144b6f22ac0331b098b451fa7c78b5b6d7c6a0818c8798dbae08affef20657ab1dbf61aee634200f38f193e8f07bf3d1caa14d567d5273273f58395577fc4b50e89f194e876105328c98cbba8ce6d7744c9d4d2df415c439886abfe6b57215cadee816772e9fdbdcd5957a150b3b3d3a6b21e40eaf0f6687602728846296766ccc2844dcad2ec507730a6c31a66f298fa8efa0e22af49f5d2dd50fadaf74006ac234dd293b87c10483c1f38144d87fa92b0407fdd7fc390918a5ef45d71e52b4204bab8ad353da141bacc160513f29e44a37720ad647042cfc30b4d2d7b2c8e14ed452f891b8b58f85e450b284be95735c89660c0f7def8ba76bc417ad05ce8609f79af75ae750ffef07c36df8e3437c2608a634ae06e82774b0dcf78547d63961b78b295eb7591b52c38d4b1f882b84a4d50674569af07feaef1169c463d6bac8fc5561a94ac783e22c2541187bf330afe88684fcc99b8bb6873702bd5299acf37e370297d3ead43ce8b6c16aff87d3d64dbbc038187f9b2fe9ed7335ec0e365593a63547cadbdd6f5257aa0597182850d7bd970ac30f6b96250cf39dba99c44e5e5d786b2f381300f30f74dfe81ae22c2059c22114238b5293a1f1db4ac7e82cd104cb0f963d4534c8e7a92a8a41ffe6353ce861e34e7525badb04b8a3e71d44c00a0b4ae27afa457695ee399af9db9d396f1be99dc75a50ac691b739c29ab9cf596d6e34409657637ace7d4de4a58a6f3dd804502c4614803d1dc186d7fa3d8321896388cbec4ffbe38894b34c25c72e42fbd5195a9424f32200463ac1c19136c6675380ba8d55da83fc01a371906ac17c917e084608cc3cc3acf08a00e077c1e0a33882d79333f0781b37b7209717393ffc38930ae98dcece7a8c8c1aba49237fba2f45828b78cc2d2deef29bed8d8a3ea2387bbf21b35a9a8cfa751e700c86a2544f90ff59c0461e099da752ee5619c8b518d2f69c07ec0dac4e7f5b3f8cb42988761fdf0f921cca9ad2c1884320a11dfb3db751d9d6d5d4d493fa1f70e282a11e91627ebc17f91ec8174e232900de4a23500ea40a7d0552444633904bc0f7a63aba3aba24b1b432eadf4f24555b0a4f26ed21d4e210b667d840527926aa3527db0d31f17e00d0964221b4151cada4a3deedd3cb9bbf4b4910f3b14161030c5dcc07607252f269fe4a4c2f92078a37a7875f22896504121c0edc5e9bd23fd470e23ff31845094863a32b24b1c35102253b9397154eee41cfe07fb51ab6b28ffbd5e7be34b015c6a380730f3464f7999ab513ce4d812a79e2c9642c5e486d52e04946e4f3ed4475bebc14b9a8196e84fee220e949aab233b639dec73222264989e23247704a6a9348244c46ec889458602d0a0e0981fe30f40df993b4edac6b046267eb7538df0c50753e058c947e5e5c21cad269381e78c858a3c0da681ee6a5c0d6438fd419bdfca032d7d1c31dd693c85bfc637f4debd3509f8bbdb7126b46f0205106282eaf20fa70e472779a0df3adf9421953c9be90e1dc6035f968ae45688d15737ff3289a3caaa35efb34aa0e1c65e3d6175db8fbb5740eca4bc6d39505bbafb8d0d87ed0895cb0f416416dbc75426c392cc54666252a032eef46828b98b45f73554ad1ca54a3cbdae1e4f58bc0ef324259b337c6e9cb34d0c59bbdf0ee45ce5b935bbe65e46ce5bcc909d9e46e518cedc01a1812bf46259a2feb5f282774f87c8dab3a4eede10f6e595b6645c2753d30fe09290dc4a066f125bc14028f629c89825e2b5ed2f095714277db1d4cee170d289369994aea4c75891b10b2abc2ba2c297e3c72660ff6bf3081d7abcea3dcef97c0175a4b1f8e076e77375f09e82b0", 0x5b7}], 0x1) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="720e08733a245d4d89a5c41888a6cdeb07316aa2c9c12e47f60e788da5638bf22207c42671fab2b6f17b7e187cb6aa02b05ad6d1fab5bd3589e6091fab3c3d7c86f8e3f2e618ff21d9a2e399df37abd9a6b1eb0bc6b01c63d8f31c87b2f8f08d5ea0ab80795043c222e7ec1ffdad384f11227446bbc2573a9371f273b3b5893e3b17e19510ebed3d75b6c01ab0358ac2f6f5c8c41ca2ad82bf21b4bd1a920017914db1de44b01ece759c7b0449b7ccd185ad9a3cad60b40ad1461deea4dda78e50ea0fd87bdb053e61d2215aa81d031d0de6b6deb86ab1b55bd95237c7902f71424f175bd99f6e68e7fe215f1800833de1057c0a2d9db0d056f59dc6dd2ecb75bf9190407e35734790a15839563f6e3a2fc10c8c0b7caa231f2cbf4544cb16e2813a7807a0e54b772652dc8e4ed41489f91e5d8ee740f11a8402bc15e8b6c85ce8c5f380604334", 0x147}], 0x1) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e040a260c"], 0x7) 2.030885481s ago: executing program 2 (id=1969): prctl$PR_MCE_KILL(0x29, 0x1, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) socket$netlink(0x10, 0x3, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xdb, 0x2}, 0x48) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000000080), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000e0601020000000b09ff0ac9ae255d0405000100070000000900020073797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x844}, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000300)={0x7, 0x0, [{0x908, 0x0, 0x9c4a}, {0xba0, 0x0, 0xb}, {0x8af, 0x0, 0x7fffffffffffffff}, {0xbc3, 0x0, 0x7}, {0xa2a, 0x0, 0x2}, {0xade, 0x0, 0x3}, {0x8af, 0x0, 0x8}]}) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYRESOCT]) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000f1401002cbd7000fadbdf250c00450169625f7372707400"], 0x1c}, 0x1, 0x0, 0x0, 0x40051}, 0x4004) r9 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 2.029956274s ago: executing program 0 (id=1977): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x40187013, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x220301, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) r5 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {r4, r5}}, './file0\x00'}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f00000018c0)="23ad3214f03cd610fa9b109f2f435852a8f46075d298400c33f6187a643a66c24712bbeb9bc9f10c0ea4c02684cbc0176b1528990d6fd7348c75eb8f4022bc31448920e9e5e54ea7dc114814ca19aa759c605b0b0fef03ddb8dbd84987ac54af7a85398278312836f1e833df5c76188c93ee8ec7916ec4b50ee5ddbe50aeb173b52ff24eccc17fdb16c540ea0ea9c68793144b6f22ac0331b098b451fa7c78b5b6d7c6a0818c8798dbae08affef20657ab1dbf61aee634200f38f193e8f07bf3d1caa14d567d5273273f58395577fc4b50e89f194e876105328c98cbba8ce6d7744c9d4d2df415c439886abfe6b57215cadee816772e9fdbdcd5957a150b3b3d3a6b21e40eaf0f6687602728846296766ccc2844dcad2ec507730a6c31a66f298fa8efa0e22af49f5d2dd50fadaf74006ac234dd293b87c10483c1f38144d87fa92b0407fdd7fc390918a5ef45d71e52b4204bab8ad353da141bacc160513f29e44a37720ad647042cfc30b4d2d7b2c8e14ed452f891b8b58f85e450b284be95735c89660c0f7def8ba76bc417ad05ce8609f79af75ae750ffef07c36df8e3437c2608a634ae06e82774b0dcf78547d63961b78b295eb7591b52c38d4b1f882b84a4d50674569af07feaef1169c463d6bac8fc5561a94ac783e22c2541187bf330afe88684fcc99b8bb6873702bd5299acf37e370297d3ead43ce8b6c16aff87d3d64dbbc038187f9b2fe9ed7335ec0e365593a63547cadbdd6f5257aa0597182850d7bd970ac30f6b96250cf39dba99c44e5e5d786b2f381300f30f74dfe81ae22c2059c22114238b5293a1f1db4ac7e82cd104cb0f963d4534c8e7a92a8a41ffe6353ce861e34e7525badb04b8a3e71d44c00a0b4ae27afa457695ee399af9db9d396f1be99dc75a50ac691b739c29ab9cf596d6e34409657637ace7d4de4a58a6f3dd804502c4614803d1dc186d7fa3d8321896388cbec4ffbe38894b34c25c72e42fbd5195a9424f32200463ac1c19136c6675380ba8d55da83fc01a371906ac17c917e084608cc3cc3acf08a00e077c1e0a33882d79333f0781b37b7209717393ffc38930ae98dcece7a8c8c1aba49237fba2f45828b78cc2d2deef29bed8d8a3ea2387bbf21b35a9a8cfa751e700c86a2544f90ff59c0461e099da752ee5619c8b518d2f69c07ec0dac4e7f5b3f8cb42988761fdf0f921cca9ad2c1884320a11dfb3db751d9d6d5d4d493fa1f70e282a11e91627ebc17f91ec8174e232900de4a23500ea40a7d0552444633904bc0f7a63aba3aba24b1b432eadf4f24555b0a4f26ed21d4e210b667d840527926aa3527db0d31f17e00d0964221b4151cada4a3deedd3cb9bbf4b4910f3b14161030c5dcc07607252f269fe4a4c2f92078a37a7875f22896504121c0edc5e9bd23fd470e23ff31845094863a32b24b1c35102253b9397154eee41cfe07fb51ab6b28ffbd5e7be34b015c6a380730f3464f7999ab513ce4d812a79e2c9642c5e486d52e04946e4f3ed4475bebc14b9a8196e84fee220e949aab233b639dec73222264989e23247704a6a9348244c46ec889458602d0a0e0981fe30f40df993b4edac6b046267eb7538df0c50753e058c947e5e5c21cad269381e78c858a3c0da681ee6a5c0d6438fd419bdfca032d7d1c31dd693c85bfc637f4debd3509f8bbdb7126b46f0205106282eaf20fa70e472779a0df3adf9421953c9be90e1dc6035f968ae45688d15737ff3289a3caaa35efb34aa0e1c65e3d6175db8fbb5740eca4bc6d39505bbafb8d0d87ed0895cb0f416416dbc75426c392cc54666252a032eef46828b98b45f73554ad1ca54a3cbdae1e4f58bc0ef324259b337c6e9cb34d0c59bbdf0ee45ce5b935bbe65e46ce5bcc909d9e46e518cedc01a1812bf46259a2feb5f282774f87c8dab3a4eede10f6e595b6645c2753d30fe09290dc4a066f125bc14028f629c89825e2b5ed2f095714277db1d4cee170d289369994aea4c75891b10b2abc2ba2c297e3c72660ff6bf3081d7abcea3dcef97c0175a4b1f8e076e77375f09e82b0", 0x5b7}], 0x1) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x280}, 0x1, 0x0, 0x0, 0x48000}, 0xc845) read$alg(r7, &(0x7f0000000540)=""/4104, 0x1008) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e040a260c"], 0x7) 1.814216137s ago: executing program 2 (id=1970): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x34) r1 = dup(r0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f00000000c0)={0x3ff, 'syz0\x00'}) socket$packet(0x11, 0x2, 0x300) r2 = syz_socket_connect_nvme_tcp() setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0x6}, {0x6, 0xa5, 0x0, 0x6}]}, 0x10) sendto$inet6(r0, &(0x7f0000000340)='g', 0x11, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) socket(0x11, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="68000000020601080000000600000000000000000e00030000000000000900020073797a30000000002000078005001400040000000c0001800800014080ffffff0500030001000000050005000200000005000100060000003b3dacda314afaed786d16f4106ee8268be6148e09da82869b1178b674390ffbb3000000000000000000ae8e5f801e5725b226f42a20"], 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000040)={0x0, 0x20}) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x41, 0x0, 0x0) 1.786575143s ago: executing program 1 (id=1971): r0 = socket(0xa, 0x1, 0x0) r1 = fsopen(&(0x7f00000005c0)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000600)='#\x00', &(0x7f0000000640)='./file0\x00', 0xffffffffffffff9c) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl(r0, 0x8936, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000000) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4078, 0xe97}], 0x1, 0x42, 0x80) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f0000000040)) r6 = socket$key(0xf, 0x3, 0x2) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$rfkill(r7, &(0x7f00000000c0), 0x8) sendmmsg(r6, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) 1.556434998s ago: executing program 1 (id=1972): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000000041420012dbd7000fddbdf2508001600000000005a42795526044e7f10bcf72f23801c3644c15b45ebc647c955b2c234103e452538cc4e84f705be820330a5032b13c5e07b7e82fd266c1d691ac76fc3868d9be220676791b140bcf8e4a0f33e26bbdd0eecc0e79d78b5f2f106d2a972b62a4efe6619db57d2be15a3b8c4bfe81e2be2934ff3c53348fa5fdd8c6291e37d0012e2cd43f79cd464ebc6d1f345503a5ac5b68dc33be23e2947dd770b9b81f551ba"], 0x18}, 0x1, 0x0, 0x0, 0x24060080}, 0x4004) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f0130090904ab020002af27cf052406000005240008000d240f0106000000018002000d0904"], 0x0) 1.522166034s ago: executing program 2 (id=1973): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010902240001000000640904000040000122070009058103080000040400000000000000a200"/54], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder1\x00', 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0xb8, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6, 0x2, 0x1, 0x5, 0x80, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "1ec784e5ee"}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x7f, 0x1, 0x45}, {0x6, 0x24, 0x1a, 0x80, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0xd2e, 0x2, 0x1, 0x3, 0x7ff, 0x8}, @mdlm={0x15, 0x24, 0x12, 0xd4c}, @dmm={0x7, 0x24, 0x14, 0x5, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xf7, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x5, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0xfd, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x0, 0x20}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x40, 0xf9, 0xff, 0x7, 0x8, 0x5}, 0x33, &(0x7f0000000080)={0x5, 0xf, 0x33, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0x9, 0x366}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x3, 0x7, 0x1}, @ssp_cap={0x20, 0x10, 0xa, 0xae, 0x5, 0x7fffff7, 0xff00, 0x9, [0xffc0c0, 0xc00f, 0xff3f00, 0xff3ff0, 0x0]}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x418}}, {0x99, &(0x7f0000000240)=@string={0x99, 0x3, "ef00f9fa3bd885763f311282119b54314af223e02a392ff40c340f18533474d0d033b3e762204a738e999e47d90ef6f322334929d4d09e64fc3031dae1218c66cad44dafee3c4650d9afcb7848739f1a934d72c912360c4a35896adafa200aa2ad3abac875df98efa9cf51df16068fbe7e055366fa47965ccd266ac493776b84cd2de035972aa41d78a984a0442273b8e3815136bc3c9d"}}]}) 1.431511855s ago: executing program 0 (id=1974): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc0605, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000200)=0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x8}) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000073797a31070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006b00250dd10000000600000003000000a7b90000acf82e422f3c29d27a3039f9638643299f28abd4e3b07043a239a041789222c2461f07f621192865bbf14d187fcad238993b1f3073e3112b91be10f0b332b110ed8ed4c3eacaa58ee2f92646233b613f41601c013758fcfb3357a6a4c2f493a7e28e2547ad4cefe7a32a1000"/387], 0x183) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r4 = fanotify_init(0x40, 0x40000) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/174, 0xae}, {&(0x7f0000000240)=""/111}], 0x36) fanotify_mark(r4, 0x1, 0x40001019, r3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) getdents64(r3, &(0x7f0000000300)=""/187, 0xbb) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f0000000040)={0x2, 0x1, 0x6}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000080)) 1.360462528s ago: executing program 3 (id=1975): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) io_submit(0x0, 0x1, &(0x7f00000014c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x3969, 0xffffffffffffffff, &(0x7f00000002c0)="a2e8a747ee35d0888bd8a219c32d856174fb2206e004f1c7", 0x18, 0x1, 0x0, 0x1}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000002c0)={'macvlan1\x00', @random="0100061f8145"}) sendto$inet6(r0, &(0x7f0000847fff)="18", 0xffffffd5, 0x610, &(0x7f0000000000)={0xa, 0x4e24, 0x4, @loopback, 0x6}, 0x1c) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) 1.271127263s ago: executing program 0 (id=1976): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f0000000d40)=ANY=[], 0xfe60) r2 = fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 890.493552ms ago: executing program 3 (id=1978): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200", [0x3f00]}}) 732.546021ms ago: executing program 3 (id=1979): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000680)=ANY=[@ANYRES32=0x0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) ioctl$FS_IOC_GETVERSION(r2, 0x5b16, 0x0) 648.485811ms ago: executing program 0 (id=1980): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESOCT=0x0], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x4, "f787d807"}, 0x0}) creat(&(0x7f00000000c0)='./file0\x00', 0x1f4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000001980)=0x80000, 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 220.389111ms ago: executing program 1 (id=1981): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x40187013, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x220301, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) r5 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {r4, r5}}, './file0\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="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", 0x147}], 0x1) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e040a260c"], 0x7) 530.816µs ago: executing program 0 (id=1982): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0xfffff30b, 0x4}) 0s ago: executing program 0 (id=1983): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5608, 0x3) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009593d1044062180b738010203010902120001000000000904"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCXONC(r0, 0x5608, 0x3) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009593d1044062180b738010203010902120001000000000904"], 0x0) (async) kernel console output (not intermixed with test programs): config 220 interface 0 has no altsetting 0 [ 397.379514][ T5954] usb 2-1: config 220 interface 76 has no altsetting 0 [ 397.386378][ T5954] usb 2-1: config 220 interface 1 has no altsetting 0 [ 397.394883][ T5954] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 397.403960][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.412235][ T5954] usb 2-1: Product: syz [ 397.416410][ T5954] usb 2-1: Manufacturer: syz [ 397.419002][ T48] usb 4-1: Invalid ep0 maxpacket: 64 [ 397.421432][ T5954] usb 2-1: SerialNumber: syz [ 397.427046][ T48] usb usb4-port1: attempt power cycle [ 397.644885][T11334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1733'. [ 397.666020][ T5954] usb 2-1: selecting invalid altsetting 0 [ 397.672359][ T5954] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 397.678741][ T5954] usb 2-1: No valid video chain found. [ 397.693738][ T5954] usb 2-1: selecting invalid altsetting 0 [ 397.700783][ T5954] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 397.719474][ T5954] usb 2-1: USB disconnect, device number 14 [ 397.741648][ T52] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 397.752395][ T52] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 397.762102][T11347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1735'. [ 397.779965][ T48] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 397.800984][ T48] usb 4-1: Invalid ep0 maxpacket: 64 [ 397.926327][T11355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.935164][T11355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.943040][ T48] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 397.971557][ T48] usb 4-1: Invalid ep0 maxpacket: 64 [ 397.977386][ T48] usb usb4-port1: unable to enumerate USB device [ 398.211362][T11357] FAULT_INJECTION: forcing a failure. [ 398.211362][T11357] name failslab, interval 1, probability 0, space 0, times 0 [ 398.211963][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/274.tmp-b7:1' failed: Read-only file system [ 398.224703][T11357] CPU: 1 UID: 0 PID: 11357 Comm: syz.1.1738 Not tainted syzkaller #0 PREEMPT(full) [ 398.224731][T11357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 398.224745][T11357] Call Trace: [ 398.224754][T11357] [ 398.224764][T11357] dump_stack_lvl+0x189/0x250 [ 398.224804][T11357] ? __pfx____ratelimit+0x10/0x10 [ 398.224833][T11357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.224867][T11357] ? __pfx__printk+0x10/0x10 [ 398.224901][T11357] ? __pfx___might_resched+0x10/0x10 [ 398.224927][T11357] ? fs_reclaim_acquire+0x7d/0x100 [ 398.224958][T11357] should_fail_ex+0x414/0x560 [ 398.224988][T11357] should_failslab+0xa8/0x100 [ 398.225015][T11357] __kmalloc_cache_noprof+0x6f/0x6f0 [ 398.225039][T11357] ? snd_pcm_oss_change_params_locked+0x172/0x3e40 [ 398.225076][T11357] snd_pcm_oss_change_params_locked+0x172/0x3e40 [ 398.225108][T11357] ? __pfx___mutex_trylock_common+0x10/0x10 [ 398.225142][T11357] ? rcu_is_watching+0x15/0xb0 [ 398.225169][T11357] ? trace_contention_end+0x39/0x120 [ 398.225197][T11357] ? __mutex_lock+0x335/0x1350 [ 398.225231][T11357] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 398.225263][T11357] ? do_vfs_ioctl+0xbe8/0x1430 [ 398.225285][T11357] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 398.225316][T11357] ? __pfx___mutex_lock+0x10/0x10 [ 398.225372][T11357] snd_pcm_oss_make_ready+0x11b/0x340 [ 398.225405][T11357] snd_pcm_oss_get_odelay+0x98/0x310 [ 398.225438][T11357] ? __pfx_snd_pcm_oss_get_odelay+0x10/0x10 [ 398.225471][T11357] ? __fget_files+0x3a0/0x420 [ 398.225503][T11357] snd_pcm_oss_ioctl+0x76f/0xdd0 [ 398.225546][T11357] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 398.225574][T11357] __se_sys_ioctl+0xfc/0x170 [ 398.225611][T11357] do_syscall_64+0xfa/0xfa0 [ 398.225644][T11357] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.225675][T11357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.225698][T11357] ? clear_bhb_loop+0x60/0xb0 [ 398.225725][T11357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.225749][T11357] RIP: 0033:0x7f9fa178ebe9 [ 398.225769][T11357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.225789][T11357] RSP: 002b:00007f9fa2656038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 398.225813][T11357] RAX: ffffffffffffffda RBX: 00007f9fa19c5fa0 RCX: 00007f9fa178ebe9 [ 398.225842][T11357] RDX: 0000200000000080 RSI: 0000000080045017 RDI: 0000000000000003 [ 398.225857][T11357] RBP: 00007f9fa2656090 R08: 0000000000000000 R09: 0000000000000000 [ 398.225869][T11357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.225883][T11357] R13: 00007f9fa19c6038 R14: 00007f9fa19c5fa0 R15: 00007fff10ff08f8 [ 398.225951][T11357] [ 398.361854][ T48] usb 3-1: USB disconnect, device number 55 [ 398.500209][ T6029] udevd[6029]: symlink '../../loop9' '/dev/disk/by-diskseq/273.tmp-b7:9' failed: Read-only file system [ 398.537469][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/274.tmp-b7:1' failed: Read-only file system [ 398.575537][ T6029] udevd[6029]: symlink '../../loop9' '/dev/disk/by-diskseq/273.tmp-b7:9' failed: Read-only file system [ 398.588115][T11366] netlink: 'syz.1.1741': attribute type 3 has an invalid length. [ 398.595978][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 398.636247][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 398.655585][ T6029] udevd[6029]: symlink '../../loop9' '/dev/disk/by-diskseq/276.tmp-b7:9' failed: Read-only file system [ 398.696540][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 398.726413][T11368] netlink: 'syz.1.1742': attribute type 10 has an invalid length. [ 398.744159][T11368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.758572][T11368] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 399.040892][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 399.059012][ T5937] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 399.200376][ T48] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 399.209216][ T5937] usb 2-1: Using ep0 maxpacket: 8 [ 399.215871][ T5937] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 399.223615][ T5937] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 399.235337][ T5937] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 399.247306][ T5937] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 399.258974][ T5937] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 399.271710][ T5937] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 399.279285][ T5937] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 399.290688][ T5937] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 399.302442][ T5937] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 399.313616][ T5937] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 399.326184][ T5937] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 399.333708][ T5937] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 399.345001][ T5937] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 399.356702][ T5937] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 399.361168][ T48] usb 3-1: config 0 has an invalid interface number: 228 but max is 0 [ 399.367890][ T5937] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 399.387821][ T48] usb 3-1: config 0 has no interface number 0 [ 399.392346][ T5937] usb 2-1: string descriptor 0 read error: -22 [ 399.397378][ T48] usb 3-1: config 0 interface 228 has no altsetting 0 [ 399.400524][ T5937] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 399.412392][ T48] usb 3-1: New USB device found, idVendor=0bda, idProduct=818c, bcdDevice=15.c7 [ 399.416197][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.427982][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.450218][ T5937] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 399.464370][ T48] usb 3-1: config 0 descriptor?? [ 399.649898][ T5937] usb 2-1: USB disconnect, device number 15 [ 400.159131][ T5937] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 400.205616][T11387] netlink: 'syz.1.1750': attribute type 3 has an invalid length. [ 400.299072][ T5937] usb 4-1: device descriptor read/64, error -71 [ 400.539104][ T5937] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 400.669002][ T5937] usb 4-1: device descriptor read/64, error -71 [ 400.779372][ T5937] usb usb4-port1: attempt power cycle [ 401.068320][T11396] netlink: 'syz.0.1754': attribute type 1 has an invalid length. [ 401.130551][ T5937] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 401.169674][ T5937] usb 4-1: device descriptor read/8, error -71 [ 401.196467][T11400] netlink: 'syz.1.1756': attribute type 2 has an invalid length. [ 401.206868][T11400] netlink: 'syz.1.1756': attribute type 2 has an invalid length. [ 401.406597][T11409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1759'. [ 401.419410][ T5937] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 401.420438][T11409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1759'. [ 401.459956][ T5937] usb 4-1: device descriptor read/8, error -71 [ 401.516708][T11411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.525819][T11411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.569718][ T5937] usb usb4-port1: unable to enumerate USB device [ 401.609166][ T5955] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 401.759109][ T5955] usb 2-1: Using ep0 maxpacket: 8 [ 401.768709][ T5955] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 401.777137][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 401.790723][ T5955] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 401.802474][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 401.813765][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 401.826277][ T5955] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 401.834210][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 401.845735][ T5955] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 401.857501][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 401.868661][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 401.881716][ T5955] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 401.889424][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 401.900810][ T5955] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 401.912887][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 401.924328][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 401.938697][ T5955] usb 2-1: string descriptor 0 read error: -22 [ 401.946008][ T5955] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 401.955638][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.978374][ T5955] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 401.978575][ T5937] usb 3-1: USB disconnect, device number 56 [ 402.004911][ T5861] udevd[5861]: setting mode of /dev/adutux0 to 020600 failed: Read-only file system [ 402.016550][ T5861] udevd[5861]: setting owner of /dev/adutux0 to uid=0, gid=0 failed: Read-only file system [ 402.174937][ T5923] usb 2-1: USB disconnect, device number 16 [ 402.240630][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 402.429017][ T5937] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 402.581491][ T5937] usb 3-1: unable to get BOS descriptor or descriptor too short [ 402.590622][ T5937] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 402.599093][ T5937] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 402.609426][ T5937] usb 3-1: config 63 has no interface number 0 [ 402.615651][ T5937] usb 3-1: config 63 interface 66 has no altsetting 0 [ 402.628456][ T5937] usb 3-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 402.640148][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.648184][ T5937] usb 3-1: Product: syz [ 402.652603][ T5937] usb 3-1: Manufacturer: syz [ 402.657228][ T5937] usb 3-1: SerialNumber: syz [ 402.755084][ T6029] udevd[6029]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 402.997344][T11426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.007440][T11426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.019186][ T5923] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 403.199210][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 403.208683][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.223634][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.234235][ T5923] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 403.245421][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.259236][ T5923] usb 2-1: config 0 descriptor?? [ 403.510364][T11434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 403.525858][T11434] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 403.645041][T11441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.660393][T11441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.687929][ T52] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 403.706562][ T5923] usbhid 2-1:0.0: can't add hid device: -71 [ 403.719049][ T5923] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 403.744106][ T5923] usb 2-1: USB disconnect, device number 17 [ 403.987662][T11452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.004885][T11452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.025532][ T48] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 404.035318][ T48] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 404.043500][ T50] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 404.050684][ T50] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 404.058257][ T50] wlan1: authentication with 08:02:11:00:00:00 timed out [ 404.067455][T11452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.131629][T11452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.243850][ T52] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 404.295832][ T6029] udevd[6029]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 404.337738][ T30] audit: type=1400 audit(1757444469.549:383): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=11457 comm="syz.0.1780" [ 404.370288][T11459] netlink: 'syz.0.1780': attribute type 291 has an invalid length. [ 404.424999][T11461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.437350][T11461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.789864][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 404.827421][ T6029] udevd[6029]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 404.875030][T11467] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1784'. [ 405.089774][T11474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.101409][T11474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.124689][ T5954] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 405.132979][ T5937] usb 3-1: Found UVC 0.07 device syz (174f:8a31) [ 405.145154][ T5937] usb 3-1: No valid video chain found. [ 405.165345][ T5937] usb 3-1: USB disconnect, device number 57 [ 405.323186][ T5954] usb 2-1: config 13 has an invalid interface number: 190 but max is 1 [ 405.331803][ T5954] usb 2-1: config 13 has an invalid descriptor of length 37, skipping remainder of the config [ 405.342226][ T5954] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 2 [ 405.351313][ T5954] usb 2-1: config 13 has no interface number 0 [ 405.357594][ T5954] usb 2-1: config 13 interface 190 altsetting 7 endpoint 0x6 has an invalid bInterval 220, changing to 4 [ 405.370031][ T5954] usb 2-1: config 13 interface 190 altsetting 7 endpoint 0x6 has invalid maxpacket 47762, setting to 0 [ 405.381228][ T5954] usb 2-1: config 13 interface 190 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 405.394580][ T5954] usb 2-1: config 13 interface 190 has no altsetting 0 [ 405.404678][ T5954] usb 2-1: New USB device found, idVendor=157e, idProduct=3013, bcdDevice=ce.96 [ 405.414108][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.422339][ T5954] usb 2-1: Product: ᠉ [ 405.426524][ T5954] usb 2-1: Manufacturer: я [ 405.431327][ T5954] usb 2-1: SerialNumber: Р [ 405.609050][ T5937] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 405.659258][ T5954] usb 2-1: USB disconnect, device number 18 [ 405.759131][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 405.767756][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.782724][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.793625][ T5937] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 405.802915][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.813908][ T5937] usb 3-1: config 0 descriptor?? [ 406.101685][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029666400: rx timeout, send abort [ 406.111702][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888029666400: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 406.213572][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 406.245517][ T5937] usbhid 3-1:0.0: can't add hid device: -71 [ 406.247727][ T52] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 406.267808][ T5937] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 406.298494][ T5937] usb 3-1: USB disconnect, device number 58 [ 406.371705][ T6029] udevd[6029]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 406.487027][T11496] FAULT_INJECTION: forcing a failure. [ 406.487027][T11496] name failslab, interval 1, probability 0, space 0, times 0 [ 406.499924][T11496] CPU: 1 UID: 0 PID: 11496 Comm: syz.0.1795 Not tainted syzkaller #0 PREEMPT(full) [ 406.499954][T11496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 406.499968][T11496] Call Trace: [ 406.499976][T11496] [ 406.499986][T11496] dump_stack_lvl+0x189/0x250 [ 406.500025][T11496] ? __pfx____ratelimit+0x10/0x10 [ 406.500055][T11496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.500098][T11496] ? __pfx__printk+0x10/0x10 [ 406.500132][T11496] ? __pfx___might_resched+0x10/0x10 [ 406.500156][T11496] ? fs_reclaim_acquire+0x7d/0x100 [ 406.500187][T11496] should_fail_ex+0x414/0x560 [ 406.500216][T11496] should_failslab+0xa8/0x100 [ 406.500242][T11496] __kmalloc_cache_noprof+0x6f/0x6f0 [ 406.500263][T11496] ? __asan_memset+0x22/0x50 [ 406.500292][T11496] ? snd_pcm_oss_change_params_locked+0xb09/0x3e40 [ 406.500318][T11496] ? snd_pcm_oss_change_params_locked+0x7a0/0x3e40 [ 406.500352][T11496] snd_pcm_oss_change_params_locked+0xb09/0x3e40 [ 406.500399][T11496] ? __mutex_lock+0x335/0x1350 [ 406.500445][T11496] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 406.500504][T11496] snd_pcm_oss_make_ready+0x11b/0x340 [ 406.500538][T11496] snd_pcm_oss_get_odelay+0x98/0x310 [ 406.500571][T11496] ? __pfx_snd_pcm_oss_get_odelay+0x10/0x10 [ 406.500605][T11496] ? __fget_files+0x3a0/0x420 [ 406.500637][T11496] snd_pcm_oss_ioctl+0x76f/0xdd0 [ 406.500664][T11496] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 406.500689][T11496] __se_sys_ioctl+0xfc/0x170 [ 406.500714][T11496] do_syscall_64+0xfa/0xfa0 [ 406.500743][T11496] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.500772][T11496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.500794][T11496] ? clear_bhb_loop+0x60/0xb0 [ 406.500819][T11496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.500841][T11496] RIP: 0033:0x7f743218ebe9 [ 406.500860][T11496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.500878][T11496] RSP: 002b:00007f7432f7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 406.500901][T11496] RAX: ffffffffffffffda RBX: 00007f74323c5fa0 RCX: 00007f743218ebe9 [ 406.500917][T11496] RDX: 0000200000000080 RSI: 0000000080045017 RDI: 0000000000000003 [ 406.500931][T11496] RBP: 00007f7432f7c090 R08: 0000000000000000 R09: 0000000000000000 [ 406.500944][T11496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.500956][T11496] R13: 00007f74323c6038 R14: 00007f74323c5fa0 R15: 00007fff2cb92148 [ 406.500992][T11496] [ 406.754302][ T5954] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 406.921367][ T5954] usb 4-1: Using ep0 maxpacket: 32 [ 406.928579][ T5954] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 406.939983][ T5954] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 406.950373][ T5954] usb 4-1: config 0 interface 0 has no altsetting 0 [ 406.962687][ T5954] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 406.988957][ T5954] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 407.007535][ T5954] usb 4-1: Product: syz [ 407.018653][ T5954] usb 4-1: Manufacturer: syz [ 407.060303][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 407.073915][ T5954] usb 4-1: SerialNumber: syz [ 407.087485][T11504] FAULT_INJECTION: forcing a failure. [ 407.087485][T11504] name failslab, interval 1, probability 0, space 0, times 0 [ 407.095586][ T5954] usb 4-1: config 0 descriptor?? [ 407.108869][T11504] CPU: 1 UID: 0 PID: 11504 Comm: syz.0.1805 Not tainted syzkaller #0 PREEMPT(full) [ 407.108900][T11504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 407.108913][T11504] Call Trace: [ 407.108922][T11504] [ 407.108931][T11504] dump_stack_lvl+0x189/0x250 [ 407.108969][T11504] ? __pfx____ratelimit+0x10/0x10 [ 407.108998][T11504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.109030][T11504] ? __pfx__printk+0x10/0x10 [ 407.109067][T11504] ? __pfx___might_resched+0x10/0x10 [ 407.109106][T11504] should_fail_ex+0x414/0x560 [ 407.109136][T11504] should_failslab+0xa8/0x100 [ 407.109162][T11504] __kmalloc_noprof+0xcb/0x7f0 [ 407.109183][T11504] ? snd_pcm_hw_refine+0x967/0x1640 [ 407.109222][T11504] snd_pcm_hw_refine+0x967/0x1640 [ 407.109272][T11504] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 407.109342][T11504] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 407.109362][T11504] ? __asan_memset+0x22/0x50 [ 407.109401][T11504] snd_pcm_oss_change_params_locked+0xd22/0x3e40 [ 407.109448][T11504] ? __mutex_lock+0x335/0x1350 [ 407.109493][T11504] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 407.109553][T11504] snd_pcm_oss_make_ready+0x11b/0x340 [ 407.109586][T11504] snd_pcm_oss_get_odelay+0x98/0x310 [ 407.109616][T11504] ? __pfx_snd_pcm_oss_get_odelay+0x10/0x10 [ 407.109649][T11504] ? __fget_files+0x3a0/0x420 [ 407.109680][T11504] snd_pcm_oss_ioctl+0x76f/0xdd0 [ 407.109707][T11504] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 407.109732][T11504] __se_sys_ioctl+0xfc/0x170 [ 407.109756][T11504] do_syscall_64+0xfa/0xfa0 [ 407.109784][T11504] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.109812][T11504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.109832][T11504] ? clear_bhb_loop+0x60/0xb0 [ 407.109858][T11504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.109879][T11504] RIP: 0033:0x7f743218ebe9 [ 407.109897][T11504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.109915][T11504] RSP: 002b:00007f7432f7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.109938][T11504] RAX: ffffffffffffffda RBX: 00007f74323c5fa0 RCX: 00007f743218ebe9 [ 407.109954][T11504] RDX: 0000200000000080 RSI: 0000000080045017 RDI: 0000000000000003 [ 407.109969][T11504] RBP: 00007f7432f7c090 R08: 0000000000000000 R09: 0000000000000000 [ 407.109982][T11504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.109995][T11504] R13: 00007f74323c6038 R14: 00007f74323c5fa0 R15: 00007fff2cb92148 [ 407.110031][T11504] [ 407.438340][T11507] loop6: detected capacity change from 0 to 63 [ 407.462374][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.480407][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.492706][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.502081][ T5955] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 407.502758][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.510674][ T6078] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 407.525134][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.540311][ T5861] udevd[5861]: symlink '../../loop6' '/dev/disk/by-diskseq/277.tmp-b7:6' failed: Read-only file system [ 407.608168][ T5861] udevd[5861]: symlink '../../loop6' '/dev/disk/by-diskseq/277.tmp-b7:6' failed: Read-only file system [ 407.636838][ T5861] udevd[5861]: symlink '../../loop6' '/dev/disk/by-diskseq/277.tmp-b7:6' failed: Read-only file system [ 407.669063][ T5955] usb 2-1: Using ep0 maxpacket: 8 [ 407.674314][ T6078] usb 3-1: Using ep0 maxpacket: 32 [ 407.682442][ T5955] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 407.691036][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 407.703777][ T6078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.716249][ T5955] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 407.728759][ T6078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.739228][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 407.750837][ T6078] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 407.760160][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 407.772100][ T6078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.783191][ T6078] usb 3-1: config 0 descriptor?? [ 407.792369][ T5955] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 407.803779][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 407.807105][ T5954] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 407.815412][ T5955] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 407.815445][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 407.815495][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 407.845222][ T5955] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 407.845282][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 407.845335][ T5955] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 407.845363][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 407.845389][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 407.851867][ T5955] usb 2-1: string descriptor 0 read error: -22 [ 407.917193][ T5955] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 407.926432][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.968050][ T5955] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 407.983875][ T5861] udevd[5861]: setting mode of /dev/adutux0 to 020600 failed: Read-only file system [ 408.001442][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 408.021367][ T5861] udevd[5861]: setting owner of /dev/adutux0 to uid=0, gid=0 failed: Read-only file system [ 408.033633][ T5954] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 408.046724][ T5954] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -32 [ 408.226181][ T52] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 408.243026][ T5955] usb 2-1: USB disconnect, device number 19 [ 408.255785][ T6078] usbhid 3-1:0.0: can't add hid device: -71 [ 408.266898][ T6078] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 408.286145][ T6078] usb 3-1: USB disconnect, device number 59 [ 408.738665][T11521] lo speed is unknown, defaulting to 1000 [ 408.812139][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 409.093184][ T5954] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 409.129356][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 409.259303][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 409.266413][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.286779][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.297991][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.311093][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.347485][ T5937] usb 4-1: USB disconnect, device number 28 [ 409.373830][ T5954] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 409.388216][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 409.407780][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.417433][ T9] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 409.436399][ T5954] usb 2-1: config 0 descriptor?? [ 409.447465][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.476366][ T9] usb 3-1: config 0 descriptor?? [ 409.507854][T11535] FAULT_INJECTION: forcing a failure. [ 409.507854][T11535] name failslab, interval 1, probability 0, space 0, times 0 [ 409.526474][T11535] CPU: 1 UID: 0 PID: 11535 Comm: syz.3.1810 Not tainted syzkaller #0 PREEMPT(full) [ 409.526503][T11535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 409.526515][T11535] Call Trace: [ 409.526523][T11535] [ 409.526532][T11535] dump_stack_lvl+0x189/0x250 [ 409.526570][T11535] ? __pfx____ratelimit+0x10/0x10 [ 409.526596][T11535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.526626][T11535] ? __pfx__printk+0x10/0x10 [ 409.526659][T11535] ? __pfx___might_resched+0x10/0x10 [ 409.526687][T11535] should_fail_ex+0x414/0x560 [ 409.526715][T11535] should_failslab+0xa8/0x100 [ 409.526740][T11535] __kmalloc_cache_noprof+0x6f/0x6f0 [ 409.526760][T11535] ? kasan_quarantine_put+0xdd/0x220 [ 409.526776][T11535] ? snd_pcm_hw_param_near+0x7f/0x500 [ 409.526800][T11535] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.526832][T11535] snd_pcm_hw_param_near+0x7f/0x500 [ 409.526854][T11535] ? snd_pcm_oss_change_params_locked+0xff9/0x3e40 [ 409.526877][T11535] ? kfree+0x199/0x6d0 [ 409.526904][T11535] ? snd_pcm_hw_param_value+0x2b9/0x510 [ 409.526933][T11535] snd_pcm_oss_change_params_locked+0x1048/0x3e40 [ 409.526976][T11535] ? __mutex_lock+0x335/0x1350 [ 409.527024][T11535] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 409.527078][T11535] snd_pcm_oss_make_ready+0x11b/0x340 [ 409.527111][T11535] snd_pcm_oss_get_odelay+0x98/0x310 [ 409.527140][T11535] ? __pfx_snd_pcm_oss_get_odelay+0x10/0x10 [ 409.527170][T11535] ? __fget_files+0x3a0/0x420 [ 409.527200][T11535] snd_pcm_oss_ioctl+0x76f/0xdd0 [ 409.527224][T11535] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 409.527247][T11535] __se_sys_ioctl+0xfc/0x170 [ 409.527274][T11535] do_syscall_64+0xfa/0xfa0 [ 409.527299][T11535] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.527325][T11535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.527344][T11535] ? clear_bhb_loop+0x60/0xb0 [ 409.527368][T11535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.527387][T11535] RIP: 0033:0x7f5b8bd8ebe9 [ 409.527405][T11535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.527421][T11535] RSP: 002b:00007f5b89fee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.527443][T11535] RAX: ffffffffffffffda RBX: 00007f5b8bfc5fa0 RCX: 00007f5b8bd8ebe9 [ 409.527458][T11535] RDX: 0000200000000080 RSI: 0000000080045017 RDI: 0000000000000003 [ 409.527470][T11535] RBP: 00007f5b89fee090 R08: 0000000000000000 R09: 0000000000000000 [ 409.527482][T11535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.527511][T11535] R13: 00007f5b8bfc6038 R14: 00007f5b8bfc5fa0 R15: 00007ffd4b8c5828 [ 409.527559][T11535] [ 409.859457][T11537] loop6: detected capacity change from 0 to 63 [ 409.873421][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 409.883690][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 409.884208][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 409.884727][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 409.885279][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 409.887429][ T5861] udevd[5861]: symlink '../../loop6' '/dev/disk/by-diskseq/279.tmp-b7:6' failed: Read-only file system [ 409.920938][ T9] dragonrise 0003:0079:0011.0024: item fetching failed at offset 2/5 [ 409.935650][ T52] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 409.963219][ T6029] udevd[6029]: symlink '../../loop6' '/dev/disk/by-diskseq/279.tmp-b7:6' failed: Read-only file system [ 409.966068][ T5954] usbhid 2-1:0.0: can't add hid device: -71 [ 409.984899][ T6029] udevd[6029]: symlink '../../loop6' '/dev/disk/by-diskseq/279.tmp-b7:6' failed: Read-only file system [ 409.989934][ T5954] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 410.012735][ T9] dragonrise 0003:0079:0011.0024: parse failed [ 410.030677][ T9] dragonrise 0003:0079:0011.0024: probe with driver dragonrise failed with error -22 [ 410.071522][ T5954] usb 2-1: USB disconnect, device number 20 [ 410.119191][ T6078] usb 3-1: USB disconnect, device number 60 [ 410.192177][T11544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.204299][T11544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.459187][ T5955] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 410.549877][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 410.589320][ T5955] usb 4-1: device descriptor read/64, error -71 [ 410.764049][T11557] FAULT_INJECTION: forcing a failure. [ 410.764049][T11557] name failslab, interval 1, probability 0, space 0, times 0 [ 410.781661][T11557] CPU: 1 UID: 0 PID: 11557 Comm: syz.0.1819 Not tainted syzkaller #0 PREEMPT(full) [ 410.781691][T11557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 410.781704][T11557] Call Trace: [ 410.781713][T11557] [ 410.781723][T11557] dump_stack_lvl+0x189/0x250 [ 410.781762][T11557] ? __pfx____ratelimit+0x10/0x10 [ 410.781791][T11557] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.781823][T11557] ? __pfx__printk+0x10/0x10 [ 410.781860][T11557] ? __pfx___might_resched+0x10/0x10 [ 410.781891][T11557] should_fail_ex+0x414/0x560 [ 410.781920][T11557] should_failslab+0xa8/0x100 [ 410.781952][T11557] __kmalloc_noprof+0xcb/0x7f0 [ 410.781974][T11557] ? snd_pcm_hw_refine+0x967/0x1640 [ 410.782018][T11557] snd_pcm_hw_refine+0x967/0x1640 [ 410.782055][T11557] ? __kasan_kmalloc+0x93/0xb0 [ 410.782078][T11557] ? snd_pcm_oss_make_ready+0x11b/0x340 [ 410.782110][T11557] ? __se_sys_ioctl+0xfc/0x170 [ 410.782131][T11557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.782155][T11557] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 410.782238][T11557] snd_pcm_hw_param_first+0x3e9/0xaf0 [ 410.782275][T11557] snd_pcm_hw_param_near+0x460/0x500 [ 410.782312][T11557] ? kfree+0x199/0x6d0 [ 410.782341][T11557] ? snd_pcm_hw_param_value+0x2b9/0x510 [ 410.782371][T11557] snd_pcm_oss_change_params_locked+0x1048/0x3e40 [ 410.782415][T11557] ? __mutex_lock+0x335/0x1350 [ 410.782458][T11557] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 410.782514][T11557] snd_pcm_oss_make_ready+0x11b/0x340 [ 410.782546][T11557] snd_pcm_oss_get_odelay+0x98/0x310 [ 410.782577][T11557] ? __pfx_snd_pcm_oss_get_odelay+0x10/0x10 [ 410.782609][T11557] ? __fget_files+0x3a0/0x420 [ 410.782640][T11557] snd_pcm_oss_ioctl+0x76f/0xdd0 [ 410.782665][T11557] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 410.782689][T11557] __se_sys_ioctl+0xfc/0x170 [ 410.782712][T11557] do_syscall_64+0xfa/0xfa0 [ 410.782738][T11557] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.782766][T11557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.782786][T11557] ? clear_bhb_loop+0x60/0xb0 [ 410.782811][T11557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.782831][T11557] RIP: 0033:0x7f743218ebe9 [ 410.782850][T11557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.782867][T11557] RSP: 002b:00007f7432f7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.782889][T11557] RAX: ffffffffffffffda RBX: 00007f74323c5fa0 RCX: 00007f743218ebe9 [ 410.782905][T11557] RDX: 0000200000000080 RSI: 0000000080045017 RDI: 0000000000000003 [ 410.782918][T11557] RBP: 00007f7432f7c090 R08: 0000000000000000 R09: 0000000000000000 [ 410.782931][T11557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 410.782942][T11557] R13: 00007f74323c6038 R14: 00007f74323c5fa0 R15: 00007fff2cb92148 [ 410.782977][T11557] [ 410.798736][T11559] loop6: detected capacity change from 0 to 63 [ 410.835960][ T5955] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 411.149090][ T48] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 411.221120][ T5955] usb 4-1: device descriptor read/64, error -71 [ 411.252642][T11569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.261820][T11569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.281219][ T52] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 411.299184][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 411.306101][ T48] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 411.316304][ T48] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 411.327133][ T48] usb 2-1: config 0 interface 0 has no altsetting 0 [ 411.334723][ T5955] usb usb4-port1: attempt power cycle [ 411.342639][ T48] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 411.351862][ T48] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 411.360205][ T48] usb 2-1: Product: syz [ 411.364384][ T48] usb 2-1: Manufacturer: syz [ 411.369082][ T48] usb 2-1: SerialNumber: syz [ 411.376026][ T48] usb 2-1: config 0 descriptor?? [ 411.451380][ T6078] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 411.610997][ T6078] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 411.622661][ T6078] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 411.632737][ T6078] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 411.642023][ T6078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.659883][T11567] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 411.671666][ T6078] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 411.679079][ T5955] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 411.710259][ T5955] usb 4-1: device descriptor read/8, error -71 [ 411.787095][ T48] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 411.886009][T11573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.896609][T11573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.959504][ T5955] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 411.987898][ T48] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 411.996742][ T5955] usb 4-1: device descriptor read/8, error -71 [ 412.003192][ T48] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32 [ 412.109858][ T5955] usb usb4-port1: unable to enumerate USB device [ 412.432488][ T5954] usb 3-1: USB disconnect, device number 61 [ 412.579057][T11578] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.1827'. [ 412.588452][T11578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1827'. [ 412.602164][T11578] netlink: 125920 bytes leftover after parsing attributes in process `syz.2.1827'. [ 412.959127][ T5955] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 413.110070][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 413.125878][ T5955] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 413.135986][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.144444][ T5955] usb 3-1: Product: syz [ 413.149243][ T5955] usb 3-1: Manufacturer: syz [ 413.153965][ T5955] usb 3-1: SerialNumber: syz [ 413.170492][ T5955] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 413.196075][ T48] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 413.442741][T11588] loop6: detected capacity change from 0 to 63 [ 413.456543][ T5861] buffer_io_error: 5 callbacks suppressed [ 413.456561][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 413.485809][ T5955] usb 3-1: USB disconnect, device number 62 [ 413.495561][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 413.496097][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 413.496613][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 413.497197][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 413.511626][ T5861] udevd[5861]: symlink '../../loop6' '/dev/disk/by-diskseq/283.tmp-b7:6' failed: Read-only file system [ 413.582240][T11590] FAULT_INJECTION: forcing a failure. [ 413.582240][T11590] name failslab, interval 1, probability 0, space 0, times 0 [ 413.582497][ T5861] udevd[5861]: symlink '../../loop6' '/dev/disk/by-diskseq/283.tmp-b7:6' failed: Read-only file system [ 413.595142][T11590] CPU: 1 UID: 0 PID: 11590 Comm: syz.2.1831 Not tainted syzkaller #0 PREEMPT(full) [ 413.595164][T11590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 413.595175][T11590] Call Trace: [ 413.595181][T11590] [ 413.595190][T11590] dump_stack_lvl+0x189/0x250 [ 413.595226][T11590] ? __pfx____ratelimit+0x10/0x10 [ 413.595256][T11590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.595289][T11590] ? __pfx__printk+0x10/0x10 [ 413.595322][T11590] ? __pfx___might_resched+0x10/0x10 [ 413.595352][T11590] should_fail_ex+0x414/0x560 [ 413.595381][T11590] should_failslab+0xa8/0x100 [ 413.595407][T11590] __kmalloc_cache_noprof+0x6f/0x6f0 [ 413.595428][T11590] ? _snd_pcm_hw_param_set+0x354/0x530 [ 413.595452][T11590] ? kfree+0x199/0x6d0 [ 413.595478][T11590] ? snd_pcm_hw_param_near+0x7f/0x500 [ 413.595508][T11590] snd_pcm_hw_param_near+0x7f/0x500 [ 413.595532][T11590] ? __asan_memset+0x22/0x50 [ 413.595569][T11590] snd_pcm_oss_change_params_locked+0x2135/0x3e40 [ 413.595628][T11590] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 413.595683][T11590] snd_pcm_oss_make_ready+0x11b/0x340 [ 413.595714][T11590] snd_pcm_oss_get_odelay+0x98/0x310 [ 413.595744][T11590] ? __pfx_snd_pcm_oss_get_odelay+0x10/0x10 [ 413.595792][T11590] ? __fget_files+0x3a0/0x420 [ 413.595825][T11590] snd_pcm_oss_ioctl+0x76f/0xdd0 [ 413.595851][T11590] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 413.595876][T11590] __se_sys_ioctl+0xfc/0x170 [ 413.595901][T11590] do_syscall_64+0xfa/0xfa0 [ 413.595940][T11590] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.595968][T11590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.595990][T11590] ? clear_bhb_loop+0x60/0xb0 [ 413.596016][T11590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.596036][T11590] RIP: 0033:0x7f40f1d8ebe9 [ 413.596056][T11590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.596074][T11590] RSP: 002b:00007f40f2c63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 413.596101][T11590] RAX: ffffffffffffffda RBX: 00007f40f1fc5fa0 RCX: 00007f40f1d8ebe9 [ 413.596117][T11590] RDX: 0000200000000080 RSI: 0000000080045017 RDI: 0000000000000003 [ 413.596132][T11590] RBP: 00007f40f2c63090 R08: 0000000000000000 R09: 0000000000000000 [ 413.596146][T11590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 413.596158][T11590] R13: 00007f40f1fc6038 R14: 00007f40f1fc5fa0 R15: 00007ffce5875f68 [ 413.596194][T11590] [ 413.681285][ T6078] usb 2-1: USB disconnect, device number 21 [ 413.764580][ T5861] udevd[5861]: symlink '../../loop6' '/dev/disk/by-diskseq/283.tmp-b7:6' failed: Read-only file system [ 413.791362][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 413.998629][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.009417][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.017103][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.025157][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.033193][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.041174][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.048829][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.058043][T11604] binder: 11603:11604 unknown command 269026052 [ 414.064414][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.072215][T11604] binder: 11603:11604 unknown command 269026052 [ 414.078502][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.086324][T11604] binder: 11603:11604 unknown command 269026052 [ 414.092713][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.100549][T11604] binder: 11603:11604 unknown command 269026052 [ 414.106809][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.114515][T11604] binder: 11603:11604 unknown command 269026052 [ 414.120854][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.128522][T11604] binder: 11603:11604 unknown command 269026052 [ 414.135252][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.143044][T11604] binder: 11603:11604 unknown command 269026052 [ 414.149480][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.157145][T11604] binder: 11603:11604 unknown command 269026052 [ 414.163476][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.171512][T11604] binder: 11603:11604 unknown command 269026052 [ 414.178217][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.190759][T11604] binder: 11603:11604 unknown command 269026052 [ 414.197179][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.207414][T11604] binder: 11603:11604 unknown command 269026052 [ 414.215658][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.224177][T11604] binder: 11603:11604 unknown command 269026052 [ 414.230949][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.238726][T11604] binder: 11603:11604 unknown command 269026052 [ 414.246515][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.254517][T11604] binder: 11603:11604 unknown command 269026052 [ 414.260859][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.268589][T11604] binder: 11603:11604 unknown command 269026052 [ 414.275000][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.282738][T11604] binder: 11603:11604 unknown command 269026052 [ 414.289074][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.296715][T11604] binder: 11603:11604 unknown command 269026052 [ 414.303046][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.310919][ T48] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 414.315518][T11604] binder: 11603:11604 unknown command 269026052 [ 414.325706][ T48] ath9k_htc: Failed to initialize the device [ 414.326084][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.332821][ T5955] usb 3-1: ath9k_htc: USB layer deinitialized [ 414.342879][T11604] binder: 11603:11604 unknown command 269026052 [ 414.352777][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.360924][T11604] binder: 11603:11604 unknown command 269026052 [ 414.367204][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.375324][T11604] binder: 11603:11604 unknown command 269026052 [ 414.381917][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.390384][T11604] binder: 11603:11604 unknown command 269026052 [ 414.396652][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.405219][T11604] binder: 11603:11604 unknown command 269026052 [ 414.411672][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.419515][T11604] binder: 11603:11604 unknown command 269026052 [ 414.425886][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.433964][T11604] binder: 11603:11604 unknown command 269026052 [ 414.440372][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.448168][T11604] binder: 11603:11604 unknown command 269026052 [ 414.454571][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.462426][T11604] binder: 11603:11604 unknown command 269026052 [ 414.468837][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.476938][T11604] binder: 11603:11604 unknown command 269026052 [ 414.483363][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.491179][T11604] binder: 11603:11604 unknown command 269026052 [ 414.497526][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.505366][T11604] binder: 11603:11604 unknown command 269026052 [ 414.512487][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.520391][T11604] binder: 11603:11604 unknown command 269026052 [ 414.526669][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.536858][T11604] binder: 11603:11604 unknown command 269026052 [ 414.546203][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.557530][T11604] binder: 11603:11604 unknown command 269026052 [ 414.561504][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 414.565485][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.585381][T11604] binder: 11603:11604 unknown command 269026052 [ 414.592089][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.600311][T11604] binder: 11603:11604 unknown command 269026052 [ 414.606603][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.614939][T11604] binder: 11603:11604 unknown command 269026052 [ 414.621601][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.629415][T11604] binder: 11603:11604 unknown command 269026052 [ 414.635702][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.643445][ T5955] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 414.644036][T11604] binder: 11603:11604 unknown command 269026052 [ 414.657497][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.665427][T11604] binder: 11603:11604 unknown command 269026052 [ 414.671916][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.679844][T11604] binder: 11603:11604 unknown command 269026052 [ 414.686201][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.694341][T11604] binder: 11603:11604 unknown command 269026052 [ 414.700766][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.708531][T11604] binder: 11603:11604 unknown command 269026052 [ 414.716548][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.724622][T11604] binder: 11603:11604 unknown command 269026052 [ 414.731131][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.739151][T11604] binder: 11603:11604 unknown command 269026052 [ 414.745447][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.753239][T11604] binder: 11603:11604 unknown command 269026052 [ 414.761444][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.769274][T11604] binder: 11603:11604 unknown command 269026052 [ 414.775544][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.783274][T11604] binder: 11603:11604 unknown command 269026052 [ 414.789850][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.797720][T11604] binder: 11603:11604 unknown command 269026052 [ 414.804665][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.812541][T11604] binder: 11603:11604 unknown command 269026052 [ 414.818806][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.826648][ T5955] usb 3-1: Using ep0 maxpacket: 32 [ 414.827234][T11604] binder: 11603:11604 unknown command 269026052 [ 414.837412][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.838364][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.853011][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.857277][T11604] binder: 11603:11604 unknown command 269026052 [ 414.868251][ T5955] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 414.873320][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.889398][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.890332][T11604] binder: 11603:11604 unknown command 269026052 [ 414.901589][ T5955] usb 3-1: config 0 descriptor?? [ 414.904213][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.920317][T11604] binder: 11603:11604 unknown command 269026052 [ 414.926631][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.934855][T11604] binder: 11603:11604 unknown command 269026052 [ 414.941701][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.949614][T11604] binder: 11603:11604 unknown command 269026052 [ 414.955910][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.964008][T11604] binder: 11603:11604 unknown command 269026052 [ 414.970687][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.978383][T11604] binder: 11603:11604 unknown command 269026052 [ 414.984822][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 414.992662][T11604] binder: 11603:11604 unknown command 269026052 [ 414.999025][T11604] binder: 11603:11604 ioctl c0306201 200000000640 returned -22 [ 415.333172][ T52] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 415.345180][ T5955] usbhid 3-1:0.0: can't add hid device: -71 [ 415.351482][ T5955] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 415.366723][ T5955] usb 3-1: USB disconnect, device number 63 [ 416.069263][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 416.077107][T11606] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 416.310713][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 416.993585][T11606] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 417.000003][T11606] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 417.006155][T11606] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 417.013791][T11608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.040105][T11608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.289082][ T5955] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 417.389043][ T48] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 417.441088][ T5955] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 417.449220][ T5955] usb 2-1: can't read configurations, error -22 [ 417.539125][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 417.549080][ T48] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 417.559165][ T48] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 417.579286][ T5955] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 417.586963][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 417.604289][ T48] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 417.615220][ T48] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 417.623620][ T48] usb 3-1: Product: syz [ 417.627957][ T48] usb 3-1: Manufacturer: syz [ 417.632831][ T48] usb 3-1: SerialNumber: syz [ 417.647138][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 417.652694][ T48] usb 3-1: config 0 descriptor?? [ 417.755460][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 417.791650][ T52] Bluetooth: hci0: unexpected event for opcode 0x200f [ 417.861863][T11631] netlink: 624 bytes leftover after parsing attributes in process `syz.0.1845'. [ 417.924824][T11636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.940910][T11636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.993453][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 418.025573][T11640] FAULT_INJECTION: forcing a failure. [ 418.025573][T11640] name failslab, interval 1, probability 0, space 0, times 0 [ 418.041597][T11640] CPU: 0 UID: 0 PID: 11640 Comm: syz.3.1848 Not tainted syzkaller #0 PREEMPT(full) [ 418.041628][T11640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 418.041649][T11640] Call Trace: [ 418.041658][T11640] [ 418.041667][T11640] dump_stack_lvl+0x189/0x250 [ 418.041705][T11640] ? __pfx____ratelimit+0x10/0x10 [ 418.041746][T11640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.041796][T11640] ? __pfx__printk+0x10/0x10 [ 418.041845][T11640] ? __pfx___might_resched+0x10/0x10 [ 418.041874][T11640] should_fail_ex+0x414/0x560 [ 418.041903][T11640] should_failslab+0xa8/0x100 [ 418.041929][T11640] __kmalloc_cache_noprof+0x6f/0x6f0 [ 418.041951][T11640] ? kfree+0x199/0x6d0 [ 418.041978][T11640] ? snd_pcm_hw_param_near+0x7f/0x500 [ 418.042010][T11640] snd_pcm_hw_param_near+0x7f/0x500 [ 418.042045][T11640] snd_pcm_oss_change_params_locked+0x2199/0x3e40 [ 418.042107][T11640] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 418.042164][T11640] snd_pcm_oss_make_ready+0x11b/0x340 [ 418.042197][T11640] snd_pcm_oss_get_odelay+0x98/0x310 [ 418.042229][T11640] ? __pfx_snd_pcm_oss_get_odelay+0x10/0x10 [ 418.042261][T11640] ? __fget_files+0x3a0/0x420 [ 418.042292][T11640] snd_pcm_oss_ioctl+0x76f/0xdd0 [ 418.042317][T11640] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 418.042342][T11640] __se_sys_ioctl+0xfc/0x170 [ 418.042366][T11640] do_syscall_64+0xfa/0xfa0 [ 418.042393][T11640] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.042420][T11640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.042440][T11640] ? clear_bhb_loop+0x60/0xb0 [ 418.042465][T11640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.042486][T11640] RIP: 0033:0x7f5b8bd8ebe9 [ 418.042503][T11640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.042520][T11640] RSP: 002b:00007f5b89fee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.042542][T11640] RAX: ffffffffffffffda RBX: 00007f5b8bfc5fa0 RCX: 00007f5b8bd8ebe9 [ 418.042557][T11640] RDX: 0000200000000080 RSI: 0000000080045017 RDI: 0000000000000003 [ 418.042571][T11640] RBP: 00007f5b89fee090 R08: 0000000000000000 R09: 0000000000000000 [ 418.042584][T11640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 418.042597][T11640] R13: 00007f5b8bfc6038 R14: 00007f5b8bfc5fa0 R15: 00007ffd4b8c5828 [ 418.042631][T11640] [ 418.074984][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 418.157277][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 418.179144][ T48] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 418.362335][ T48] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 418.371041][ T48] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -32 [ 418.692112][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 418.757123][T11660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.772174][T11660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.852235][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 418.863670][ T5955] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 418.878729][ T3549] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 418.882622][T11664] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1856'. [ 418.948482][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 418.974367][ T52] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 418.999137][ T5955] usb 4-1: device descriptor read/64, error -71 [ 419.029064][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 419.029100][ T5875] Bluetooth: hci2: command 0x0406 tx timeout [ 419.124640][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 419.126778][T11670] FAULT_INJECTION: forcing a failure. [ 419.126778][T11670] name failslab, interval 1, probability 0, space 0, times 0 [ 419.151355][T11670] CPU: 1 UID: 0 PID: 11670 Comm: syz.1.1858 Not tainted syzkaller #0 PREEMPT(full) [ 419.151383][T11670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 419.151396][T11670] Call Trace: [ 419.151405][T11670] [ 419.151414][T11670] dump_stack_lvl+0x189/0x250 [ 419.151451][T11670] ? __pfx____ratelimit+0x10/0x10 [ 419.151479][T11670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.151510][T11670] ? __pfx__printk+0x10/0x10 [ 419.151545][T11670] ? __pfx___might_resched+0x10/0x10 [ 419.151573][T11670] should_fail_ex+0x414/0x560 [ 419.151611][T11670] should_failslab+0xa8/0x100 [ 419.151637][T11670] __kmalloc_noprof+0xcb/0x7f0 [ 419.151656][T11670] ? stack_trace_save+0x9c/0xe0 [ 419.151683][T11670] ? snd_pcm_hw_refine+0x967/0x1640 [ 419.151722][T11670] snd_pcm_hw_refine+0x967/0x1640 [ 419.151760][T11670] ? __kasan_kmalloc+0x93/0xb0 [ 419.151781][T11670] ? snd_pcm_oss_change_params_locked+0x2199/0x3e40 [ 419.151806][T11670] ? snd_pcm_oss_get_odelay+0x98/0x310 [ 419.151832][T11670] ? __se_sys_ioctl+0xfc/0x170 [ 419.151850][T11670] ? do_syscall_64+0xfa/0xfa0 [ 419.151879][T11670] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 419.151950][T11670] ? snd_pcm_hw_param_near+0x7f/0x500 [ 419.151972][T11670] snd_pcm_hw_param_last+0x488/0xb60 [ 419.151998][T11670] snd_pcm_hw_param_near+0x337/0x500 [ 419.152022][T11670] snd_pcm_oss_change_params_locked+0x2199/0x3e40 [ 419.152065][T11670] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 419.152104][T11670] snd_pcm_oss_make_ready+0x11b/0x340 [ 419.152125][T11670] snd_pcm_oss_get_odelay+0x98/0x310 [ 419.152147][T11670] ? __pfx_snd_pcm_oss_get_odelay+0x10/0x10 [ 419.152169][T11670] ? __fget_files+0x3a0/0x420 [ 419.152190][T11670] snd_pcm_oss_ioctl+0x76f/0xdd0 [ 419.152208][T11670] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 419.152224][T11670] __se_sys_ioctl+0xfc/0x170 [ 419.152241][T11670] do_syscall_64+0xfa/0xfa0 [ 419.152259][T11670] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.152279][T11670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.152293][T11670] ? clear_bhb_loop+0x60/0xb0 [ 419.152310][T11670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.152331][T11670] RIP: 0033:0x7f9fa178ebe9 [ 419.152344][T11670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.152356][T11670] RSP: 002b:00007f9fa2656038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 419.152373][T11670] RAX: ffffffffffffffda RBX: 00007f9fa19c5fa0 RCX: 00007f9fa178ebe9 [ 419.152384][T11670] RDX: 0000200000000080 RSI: 0000000080045017 RDI: 0000000000000003 [ 419.152393][T11670] RBP: 00007f9fa2656090 R08: 0000000000000000 R09: 0000000000000000 [ 419.152403][T11670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 419.152411][T11670] R13: 00007f9fa19c6038 R14: 00007f9fa19c5fa0 R15: 00007fff10ff08f8 [ 419.152435][T11670] [ 419.436905][ C1] vkms_vblank_simulate: vblank timer overrun [ 419.513699][ T5955] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 419.531385][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 419.623496][T11674] tmpfs: Unknown parameter 'usrquota0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.623496][T11674] 0 [ 419.649210][ T5955] usb 4-1: device descriptor read/64, error -71 [ 419.807337][ C1] vkms_vblank_simulate: vblank timer overrun [ 419.879187][ T6078] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 419.889739][ T30] audit: type=1804 audit(1757444485.109:384): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1860" name="/newroot/520/file1" dev="fuse" ino=1 res=1 errno=0 [ 419.910988][ T30] audit: type=1800 audit(1757444485.109:385): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1860" name="/" dev="fuse" ino=1 res=0 errno=0 [ 419.931679][ T5955] usb usb4-port1: attempt power cycle [ 419.938230][ T30] audit: type=1800 audit(1757444485.109:386): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1860" name="/" dev="fuse" ino=1 res=0 errno=0 [ 420.039100][ T6078] usb 2-1: Using ep0 maxpacket: 8 [ 420.046632][ T6078] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 420.050175][T11679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.054986][ T6078] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 420.068833][T11679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.075601][ T6078] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 420.094752][ T6078] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 420.105988][T11679] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1862'. [ 420.106521][ T6078] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 420.119180][T11679] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1862'. [ 420.128651][ T6078] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 420.139052][T11679] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1862'. [ 420.143775][ T6078] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 420.163712][ T6078] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 420.175859][ T6078] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 420.193742][ T9] usb 3-1: USB disconnect, device number 64 [ 420.199733][ T6078] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 420.201425][ T6078] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 420.219722][ T6078] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 420.235933][ T6078] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 420.270593][ T6078] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 420.283379][ T5955] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 420.301768][ T6078] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 420.309624][T11679] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1862'. [ 420.314052][ T5955] usb 4-1: device descriptor read/8, error -71 [ 420.335613][ T6078] usb 2-1: string descriptor 0 read error: -22 [ 420.342014][T11679] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1862'. [ 420.352841][T11679] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1862'. [ 420.362291][ T6078] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 420.371943][ T6078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.407255][ T6078] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 420.424242][ T5861] udevd[5861]: setting mode of /dev/adutux0 to 020600 failed: Read-only file system [ 420.462859][ T5861] udevd[5861]: setting owner of /dev/adutux0 to uid=0, gid=0 failed: Read-only file system [ 420.504777][T11679] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1862'. [ 420.516202][T11679] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1862'. [ 420.569053][ T5955] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 420.599744][ T5955] usb 4-1: device descriptor read/8, error -71 [ 420.616444][ T10] usb 2-1: USB disconnect, device number 24 [ 420.709520][ T5955] usb usb4-port1: unable to enumerate USB device [ 420.989085][ T5955] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 421.112113][T11691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.122799][T11691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.139133][ T5955] usb 3-1: Using ep0 maxpacket: 32 [ 421.145809][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.157564][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.168730][ T5955] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 421.181623][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.202144][ T5955] usb 3-1: config 0 descriptor?? [ 421.230970][ T6029] udevd[6029]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 421.356335][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 421.363130][T11698] FAULT_INJECTION: forcing a failure. [ 421.363130][T11698] name failslab, interval 1, probability 0, space 0, times 0 [ 421.381202][T11698] CPU: 1 UID: 0 PID: 11698 Comm: syz.1.1868 Not tainted syzkaller #0 PREEMPT(full) [ 421.381230][T11698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 421.381244][T11698] Call Trace: [ 421.381253][T11698] [ 421.381262][T11698] dump_stack_lvl+0x189/0x250 [ 421.381300][T11698] ? __pfx____ratelimit+0x10/0x10 [ 421.381332][T11698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.381364][T11698] ? __pfx__printk+0x10/0x10 [ 421.381400][T11698] ? __pfx___might_resched+0x10/0x10 [ 421.381428][T11698] should_fail_ex+0x414/0x560 [ 421.381457][T11698] should_failslab+0xa8/0x100 [ 421.381483][T11698] __kmalloc_noprof+0xcb/0x7f0 [ 421.381503][T11698] ? snd_pcm_hw_refine+0x967/0x1640 [ 421.381550][T11698] snd_pcm_hw_refine+0x967/0x1640 [ 421.381588][T11698] ? stack_trace_save+0x9c/0xe0 [ 421.381623][T11698] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 421.381653][T11698] ? __lock_acquire+0xab9/0xd20 [ 421.381684][T11698] ? do_raw_spin_lock+0x121/0x290 [ 421.381716][T11698] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 421.381766][T11698] ? _raw_spin_unlock_irq+0x23/0x50 [ 421.381792][T11698] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.381823][T11698] snd_pcm_hw_params+0x4b6/0x1d30 [ 421.381850][T11698] ? kasan_quarantine_put+0xdd/0x220 [ 421.381881][T11698] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 421.381907][T11698] ? snd_pcm_hw_param_near+0x373/0x500 [ 421.381936][T11698] ? snd_pcm_kernel_ioctl+0x230/0x3b0 [ 421.381960][T11698] snd_pcm_oss_change_params_locked+0x21cb/0x3e40 [ 421.382020][T11698] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 421.382078][T11698] snd_pcm_oss_make_ready+0x11b/0x340 [ 421.382110][T11698] snd_pcm_oss_get_odelay+0x98/0x310 [ 421.382140][T11698] ? __pfx_snd_pcm_oss_get_odelay+0x10/0x10 [ 421.382172][T11698] ? __fget_files+0x3a0/0x420 [ 421.382203][T11698] snd_pcm_oss_ioctl+0x76f/0xdd0 [ 421.382228][T11698] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 421.382252][T11698] __se_sys_ioctl+0xfc/0x170 [ 421.382296][T11698] do_syscall_64+0xfa/0xfa0 [ 421.382324][T11698] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.382352][T11698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.382373][T11698] ? clear_bhb_loop+0x60/0xb0 [ 421.382399][T11698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.382420][T11698] RIP: 0033:0x7f9fa178ebe9 [ 421.382439][T11698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.382458][T11698] RSP: 002b:00007f9fa2656038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.382482][T11698] RAX: ffffffffffffffda RBX: 00007f9fa19c5fa0 RCX: 00007f9fa178ebe9 [ 421.382497][T11698] RDX: 0000200000000080 RSI: 0000000080045017 RDI: 0000000000000003 [ 421.382517][T11698] RBP: 00007f9fa2656090 R08: 0000000000000000 R09: 0000000000000000 [ 421.382531][T11698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 421.382544][T11698] R13: 00007f9fa19c6038 R14: 00007f9fa19c5fa0 R15: 00007fff10ff08f8 [ 421.382581][T11698] [ 421.676919][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.731467][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 421.782634][T11703] netlink: 'syz.1.1869': attribute type 33 has an invalid length. [ 421.915134][ T5875] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 421.933059][ T5955] usbhid 3-1:0.0: can't add hid device: -71 [ 421.939192][ T5955] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 421.949708][ T5955] usb 3-1: USB disconnect, device number 65 [ 422.069571][ T3562] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 422.080699][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 422.088472][ T9] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 422.245157][T11710] loop6: detected capacity change from 0 to 63 [ 422.259575][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 422.271339][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 422.290131][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 422.301292][ T9] usb 4-1: config 9 has an invalid interface number: 133 but max is 0 [ 422.314590][ T10] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 422.324716][ T9] usb 4-1: config 9 has no interface number 0 [ 422.331817][ T9] usb 4-1: config 9 interface 133 has no altsetting 0 [ 422.338730][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 422.351409][ T10] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 422.362347][ T10] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 422.371335][ T10] usb 2-1: Product: syz [ 422.375707][ T9] usb 4-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=93.9b [ 422.386165][ T10] usb 2-1: Manufacturer: syz [ 422.387383][T11712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.391065][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.402645][T11712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.411057][ T10] usb 2-1: SerialNumber: syz [ 422.422978][ T9] usb 4-1: Product: syz [ 422.427184][ T9] usb 4-1: Manufacturer: syz [ 422.427205][ T9] usb 4-1: SerialNumber: syz [ 422.432946][ T10] usb 2-1: config 0 descriptor?? [ 422.723261][T11722] FAULT_INJECTION: forcing a failure. [ 422.723261][T11722] name failslab, interval 1, probability 0, space 0, times 0 [ 422.723298][T11722] CPU: 0 UID: 0 PID: 11722 Comm: syz.2.1877 Not tainted syzkaller #0 PREEMPT(full) [ 422.723322][T11722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 422.723339][T11722] Call Trace: [ 422.723347][T11722] [ 422.723356][T11722] dump_stack_lvl+0x189/0x250 [ 422.723401][T11722] ? __pfx____ratelimit+0x10/0x10 [ 422.723429][T11722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.723461][T11722] ? __pfx__printk+0x10/0x10 [ 422.723498][T11722] ? __pfx___might_resched+0x10/0x10 [ 422.723529][T11722] should_fail_ex+0x414/0x560 [ 422.723558][T11722] should_failslab+0xa8/0x100 [ 422.723585][T11722] __kmalloc_noprof+0xcb/0x7f0 [ 422.723606][T11722] ? snd_pcm_hw_refine+0x967/0x1640 [ 422.723645][T11722] snd_pcm_hw_refine+0x967/0x1640 [ 422.723695][T11722] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 422.723738][T11722] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 422.723808][T11722] snd_pcm_hw_param_first+0x3e9/0xaf0 [ 422.723845][T11722] snd_pcm_hw_params+0x575/0x1d30 [ 422.723888][T11722] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 422.723922][T11722] ? snd_pcm_kernel_ioctl+0x230/0x3b0 [ 422.723946][T11722] snd_pcm_oss_change_params_locked+0x21cb/0x3e40 [ 422.724009][T11722] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 422.724068][T11722] snd_pcm_oss_make_ready+0x11b/0x340 [ 422.724101][T11722] snd_pcm_oss_get_odelay+0x98/0x310 [ 422.724133][T11722] ? __pfx_snd_pcm_oss_get_odelay+0x10/0x10 [ 422.724166][T11722] ? __fget_files+0x3a0/0x420 [ 422.724198][T11722] snd_pcm_oss_ioctl+0x76f/0xdd0 [ 422.724224][T11722] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 422.724249][T11722] __se_sys_ioctl+0xfc/0x170 [ 422.724273][T11722] do_syscall_64+0xfa/0xfa0 [ 422.724313][T11722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.724332][T11722] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.724352][T11722] ? clear_bhb_loop+0x60/0xb0 [ 422.724375][T11722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.724401][T11722] RIP: 0033:0x7f40f1d8ebe9 [ 422.724418][T11722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.724436][T11722] RSP: 002b:00007f40f2c63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.724457][T11722] RAX: ffffffffffffffda RBX: 00007f40f1fc5fa0 RCX: 00007f40f1d8ebe9 [ 422.724472][T11722] RDX: 0000200000000080 RSI: 0000000080045017 RDI: 0000000000000003 [ 422.724485][T11722] RBP: 00007f40f2c63090 R08: 0000000000000000 R09: 0000000000000000 [ 422.724497][T11722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 422.724508][T11722] R13: 00007f40f1fc6038 R14: 00007f40f1fc5fa0 R15: 00007ffce5875f68 [ 422.724541][T11722] [ 422.842686][ T10] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 423.716778][ T10] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 423.725920][ T10] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32 [ 423.744961][T11734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.773928][T11734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.989593][ T3549] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 424.703091][T11748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.712828][T11748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.734431][ T5875] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 424.808857][ T9] pegasus 4-1:9.133: probe with driver pegasus failed with error -71 [ 424.831009][ T9] usb 4-1: USB disconnect, device number 37 [ 424.842995][ T10] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 424.876658][T11750] loop6: detected capacity change from 0 to 63 [ 424.887815][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.904144][ T5937] usb 2-1: USB disconnect, device number 25 [ 424.918389][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.930138][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.941775][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.962967][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.987451][ T7563] udevd[7563]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 424.991600][ T5861] udevd[5861]: symlink '../../loop6' '/dev/disk/by-diskseq/288.tmp-b7:6' failed: Read-only file system [ 425.034200][ T5861] udevd[5861]: symlink '../../loop6' '/dev/disk/by-diskseq/288.tmp-b7:6' failed: Read-only file system [ 425.049781][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 425.062312][ T5861] udevd[5861]: symlink '../../loop6' '/dev/disk/by-diskseq/288.tmp-b7:6' failed: Read-only file system [ 425.072410][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 425.088999][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 425.121379][ T6029] udevd[6029]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 425.133709][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 425.152989][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 425.165769][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 425.212388][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 425.220105][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 425.231589][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 425.234473][T11759] netlink: 'syz.3.1889': attribute type 83 has an invalid length. [ 425.247840][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 425.265875][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 425.280862][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 425.307312][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 425.329157][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 425.341883][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 425.372701][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 425.387937][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 425.422690][ T10] usb 3-1: string descriptor 0 read error: -22 [ 425.425082][T11761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.437994][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 425.444022][T11761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.450967][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.467918][T11765] No control pipe specified [ 425.482388][ T10] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 425.506662][ T5861] udevd[5861]: setting mode of /dev/adutux0 to 020600 failed: Read-only file system [ 425.525403][ T5861] udevd[5861]: setting owner of /dev/adutux0 to uid=0, gid=0 failed: Read-only file system [ 425.679105][ T5937] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 425.702644][ T10] usb 3-1: USB disconnect, device number 66 [ 425.849063][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 425.863423][ T5937] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 425.872890][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.881614][ T5937] usb 2-1: Product: syz [ 425.885949][ T5937] usb 2-1: Manufacturer: syz [ 425.891769][ T5937] usb 2-1: SerialNumber: syz [ 425.899820][ T5937] usb 2-1: config 0 descriptor?? [ 425.908087][ T5937] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 426.099137][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 426.125795][T11772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.136211][T11772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.269151][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 426.283607][T11774] loop6: detected capacity change from 0 to 63 [ 426.289841][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 426.289900][ T9] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 426.289926][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 426.292902][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 426.315976][ T6029] Buffer I/O error on dev loop6, logical block 0, async page read [ 426.335580][ T6029] Buffer I/O error on dev loop6, logical block 0, async page read [ 426.339313][ T9] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 426.373602][ T9] usb 4-1: Product: syz [ 426.386621][ T6029] Buffer I/O error on dev loop6, logical block 0, async page read [ 426.388250][ T9] usb 4-1: Manufacturer: syz [ 426.405238][ T6029] Buffer I/O error on dev loop6, logical block 0, async page read [ 426.416117][ T9] usb 4-1: SerialNumber: syz [ 426.425522][ T6029] Buffer I/O error on dev loop6, logical block 0, async page read [ 426.435015][ T9] usb 4-1: config 0 descriptor?? [ 426.453579][ T6029] udevd[6029]: symlink '../../loop6' '/dev/disk/by-diskseq/290.tmp-b7:6' failed: Read-only file system [ 426.500890][ T6029] udevd[6029]: symlink '../../loop6' '/dev/disk/by-diskseq/290.tmp-b7:6' failed: Read-only file system [ 426.512775][ T5937] gspca_stk1135: reg_w 0x3 err -71 [ 426.522995][ T5937] gspca_stk1135: serial bus timeout: status=0x00 [ 426.542251][ T5937] gspca_stk1135: Sensor write failed [ 426.547710][ T5937] gspca_stk1135: serial bus timeout: status=0x00 [ 426.572785][ T5937] gspca_stk1135: Sensor write failed [ 426.588728][ T5937] gspca_stk1135: serial bus timeout: status=0x00 [ 426.608792][ T5937] gspca_stk1135: Sensor read failed [ 426.617099][ T5937] gspca_stk1135: serial bus timeout: status=0x00 [ 426.624976][ T5937] gspca_stk1135: Sensor read failed [ 426.637047][ T5937] gspca_stk1135: Detected sensor type unknown (0x0) [ 426.646424][ T5937] gspca_stk1135: serial bus timeout: status=0x00 [ 426.661507][ T5937] gspca_stk1135: Sensor read failed [ 426.689099][ T5937] gspca_stk1135: serial bus timeout: status=0x00 [ 426.695797][ T5937] gspca_stk1135: Sensor read failed [ 426.711013][ T5937] gspca_stk1135: serial bus timeout: status=0x00 [ 426.731630][ T5937] gspca_stk1135: Sensor write failed [ 426.737071][ T5937] gspca_stk1135: serial bus timeout: status=0x00 [ 426.754115][ T5937] gspca_stk1135: Sensor write failed [ 426.764386][ T5937] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 426.787559][ T5937] usb 2-1: USB disconnect, device number 26 [ 426.867004][ T9] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 427.074373][ T9] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 427.094740][ T9] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -32 [ 427.109098][ T6078] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 427.140795][T11789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.157793][T11789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.171677][T11789] netlink: 'syz.0.1902': attribute type 33 has an invalid length. [ 427.180334][T11789] __nla_validate_parse: 2 callbacks suppressed [ 427.180356][T11789] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1902'. [ 427.197032][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 427.221013][T11789] binder: 11787:11789 ioctl c018620c 200000000080 returned -22 [ 427.232203][T11789] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 427.238696][T11789] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 427.247617][T11789] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 427.281373][ T6078] usb 3-1: Using ep0 maxpacket: 32 [ 427.289449][ T6078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.300756][ T6078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.311599][ T6078] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 427.320960][ T6078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.339376][ T6078] usb 3-1: config 0 descriptor?? [ 427.389178][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 427.545482][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 427.557804][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 427.571747][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.592749][ T9] usb 2-1: config 0 descriptor?? [ 427.772854][ T5875] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 427.784553][ T6078] usbhid 3-1:0.0: can't add hid device: -71 [ 427.807414][ T6078] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 427.842551][ T6078] usb 3-1: USB disconnect, device number 67 [ 428.087270][ T9] logitech 0003:046D:C626.0025: unbalanced delimiter at end of report description [ 428.099751][ T9] logitech 0003:046D:C626.0025: parse failed [ 428.106049][ T9] logitech 0003:046D:C626.0025: probe with driver logitech failed with error -22 [ 428.253579][T11800] loop6: detected capacity change from 0 to 63 [ 428.301012][ T9] usb 2-1: USB disconnect, device number 27 [ 428.401772][T11803] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1908'. [ 428.412997][T11803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.423105][T11803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.629091][ T48] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 428.779059][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 428.788016][ T48] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 428.795640][ T48] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 428.807028][ T48] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 428.819015][ T48] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 428.830185][ T48] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 428.842923][ T48] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 428.850718][ T48] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 428.869235][ T48] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 428.915108][ T6078] usb 4-1: USB disconnect, device number 38 [ 428.938334][ T48] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 428.951283][T11808] FAULT_INJECTION: forcing a failure. [ 428.951283][T11808] name failslab, interval 1, probability 0, space 0, times 0 [ 428.968252][ T48] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 428.971646][T11808] CPU: 0 UID: 0 PID: 11808 Comm: syz.3.1910 Not tainted syzkaller #0 PREEMPT(full) [ 428.971680][T11808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 428.971701][T11808] Call Trace: [ 428.971711][T11808] [ 428.971724][T11808] dump_stack_lvl+0x189/0x250 [ 428.971766][T11808] ? __pfx____ratelimit+0x10/0x10 [ 428.971797][T11808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.971833][T11808] ? __pfx__printk+0x10/0x10 [ 428.971873][T11808] ? __pfx___might_resched+0x10/0x10 [ 428.971907][T11808] should_fail_ex+0x414/0x560 [ 428.971941][T11808] should_failslab+0xa8/0x100 [ 428.971970][T11808] __kmalloc_noprof+0xcb/0x7f0 [ 428.971993][T11808] ? kfree+0x199/0x6d0 [ 428.972023][T11808] ? snd_pcm_hw_refine+0x967/0x1640 [ 428.972074][T11808] snd_pcm_hw_refine+0x967/0x1640 [ 428.972130][T11808] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 428.972231][T11808] snd_pcm_hw_param_first+0x3e9/0xaf0 [ 428.972270][T11808] snd_pcm_hw_params+0x575/0x1d30 [ 428.972313][T11808] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 428.972348][T11808] ? snd_pcm_kernel_ioctl+0x230/0x3b0 [ 428.972372][T11808] snd_pcm_oss_change_params_locked+0x21cb/0x3e40 [ 428.972438][T11808] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 428.972517][T11808] snd_pcm_oss_make_ready+0x11b/0x340 [ 428.972553][T11808] snd_pcm_oss_get_odelay+0x98/0x310 [ 428.972589][T11808] ? __pfx_snd_pcm_oss_get_odelay+0x10/0x10 [ 428.972625][T11808] ? __fget_files+0x3a0/0x420 [ 428.972662][T11808] snd_pcm_oss_ioctl+0x76f/0xdd0 [ 428.972692][T11808] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 428.972719][T11808] __se_sys_ioctl+0xfc/0x170 [ 428.972746][T11808] do_syscall_64+0xfa/0xfa0 [ 428.972778][T11808] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.972809][T11808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.972831][T11808] ? clear_bhb_loop+0x60/0xb0 [ 428.972859][T11808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.972887][T11808] RIP: 0033:0x7f5b8bd8ebe9 [ 428.972909][T11808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.972929][T11808] RSP: 002b:00007f5b89fee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.972955][T11808] RAX: ffffffffffffffda RBX: 00007f5b8bfc5fa0 RCX: 00007f5b8bd8ebe9 [ 428.972972][T11808] RDX: 0000200000000080 RSI: 0000000080045017 RDI: 0000000000000003 [ 428.972987][T11808] RBP: 00007f5b89fee090 R08: 0000000000000000 R09: 0000000000000000 [ 428.973001][T11808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 428.973015][T11808] R13: 00007f5b8bfc6038 R14: 00007f5b8bfc5fa0 R15: 00007ffd4b8c5828 [ 428.973059][T11808] [ 429.243744][ T48] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 429.251559][ T48] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 429.292817][ T48] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 429.331136][ T48] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 429.343311][ T48] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 429.364353][ T48] usb 3-1: string descriptor 0 read error: -22 [ 429.372414][ T48] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 429.396692][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.441066][ T48] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 429.482259][T11820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.493138][T11820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.529326][ T6078] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 429.669217][ T5923] usb 3-1: USB disconnect, device number 68 [ 429.680116][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 429.696253][ T6078] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 429.712947][ T6078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.724039][ T6078] usb 4-1: config 0 descriptor?? [ 429.736884][ T6078] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 429.750552][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 429.838991][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 429.846403][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.858748][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.869062][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 429.880392][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.892764][ T9] usb 2-1: config 0 descriptor?? [ 430.141085][ T6078] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 430.301267][T11818] netlink: 'syz.1.1913': attribute type 46 has an invalid length. [ 430.317741][T11818] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1913'. [ 430.345170][ T9] hid_parser_main: 1 callbacks suppressed [ 430.345194][ T9] savu 0003:1E7D:2D5A.0026: unknown main item tag 0x0 [ 430.353134][ T6078] gspca_cpia1: usb_control_msg 01, error -71 [ 430.365228][ T9] savu 0003:1E7D:2D5A.0026: unknown main item tag 0x0 [ 430.365266][ T9] savu 0003:1E7D:2D5A.0026: unknown main item tag 0x0 [ 430.365294][ T9] savu 0003:1E7D:2D5A.0026: unknown main item tag 0x0 [ 430.365323][ T9] savu 0003:1E7D:2D5A.0026: unknown main item tag 0x0 [ 430.365350][ T9] savu 0003:1E7D:2D5A.0026: unbalanced collection at end of report description [ 430.366174][ T9] savu 0003:1E7D:2D5A.0026: parse failed [ 430.374312][ T6078] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 430.390336][ T9] savu 0003:1E7D:2D5A.0026: probe with driver savu failed with error -22 [ 430.405404][ T6078] usb 4-1: USB disconnect, device number 39 [ 430.569034][ T48] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 430.719074][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 430.725663][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.736756][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.746626][ T48] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 430.755785][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.766063][ T48] usb 3-1: config 0 descriptor?? [ 431.188391][ T5875] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 431.197634][ T48] usbhid 3-1:0.0: can't add hid device: -71 [ 431.203921][ T48] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 431.209174][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 431.216969][ T48] usb 3-1: USB disconnect, device number 69 [ 431.378980][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 431.385639][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.396909][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.407135][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 431.416319][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.426869][ T9] usb 4-1: config 0 descriptor?? [ 431.844970][ T5875] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 431.855472][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 431.861678][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 431.873134][ T9] usb 4-1: USB disconnect, device number 40 [ 431.999217][ T48] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 432.149810][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 432.156639][ T48] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 432.166861][ T48] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 432.176842][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 432.186052][ T48] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 432.195319][ T48] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 432.203639][ T48] usb 3-1: Product: syz [ 432.207841][ T48] usb 3-1: Manufacturer: syz [ 432.212603][ T48] usb 3-1: SerialNumber: syz [ 432.220586][ T48] usb 3-1: config 0 descriptor?? [ 432.309841][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.341855][ T5923] usb 2-1: USB disconnect, device number 28 [ 432.395956][ T5864] udevd[5864]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 432.540441][T11837] FAULT_INJECTION: forcing a failure. [ 432.540441][T11837] name failslab, interval 1, probability 0, space 0, times 0 [ 432.553626][T11837] CPU: 1 UID: 0 PID: 11837 Comm: syz.0.1921 Not tainted syzkaller #0 PREEMPT(full) [ 432.553659][T11837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 432.553672][T11837] Call Trace: [ 432.553680][T11837] [ 432.553689][T11837] dump_stack_lvl+0x189/0x250 [ 432.553726][T11837] ? __pfx____ratelimit+0x10/0x10 [ 432.553754][T11837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.553785][T11837] ? __pfx__printk+0x10/0x10 [ 432.553829][T11837] ? __pfx___might_resched+0x10/0x10 [ 432.553854][T11837] ? fs_reclaim_acquire+0x7d/0x100 [ 432.553882][T11837] should_fail_ex+0x414/0x560 [ 432.553911][T11837] should_failslab+0xa8/0x100 [ 432.553937][T11837] kmem_cache_alloc_noprof+0x74/0x6e0 [ 432.553971][T11837] ? vm_area_dup+0x2b/0x680 [ 432.554001][T11837] vm_area_dup+0x2b/0x680 [ 432.554031][T11837] __split_vma+0x1a9/0xa00 [ 432.554063][T11837] ? mas_next_slot+0xc20/0xcf0 [ 432.554096][T11837] ? __pfx___split_vma+0x10/0x10 [ 432.554138][T11837] ? mas_find+0xb0e/0xd30 [ 432.554173][T11837] vms_gather_munmap_vmas+0x4c6/0x12e0 [ 432.554201][T11837] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.554250][T11837] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 432.554291][T11837] ? mas_find+0xa7d/0xd30 [ 432.554337][T11837] mmap_region+0x71e/0x2100 [ 432.554386][T11837] ? __pfx_mmap_region+0x10/0x10 [ 432.554414][T11837] ? trace_irq_disable+0x37/0x110 [ 432.554434][T11837] ? preempt_schedule_irq+0xde/0x150 [ 432.554462][T11837] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 432.554555][T11837] ? mm_get_unmapped_area+0xa7/0xd0 [ 432.554581][T11837] ? shmem_get_unmapped_area+0x2cf/0x910 [ 432.554619][T11837] ? cap_mmap_addr+0xb0/0x100 [ 432.554643][T11837] ? bpf_lsm_mmap_addr+0x9/0x20 [ 432.554673][T11837] ? security_mmap_addr+0x71/0x270 [ 432.554706][T11837] do_mmap+0xc45/0x10d0 [ 432.554751][T11837] ? __pfx_do_mmap+0x10/0x10 [ 432.554778][T11837] ? down_write_killable+0x178/0x230 [ 432.554806][T11837] ? __pfx_vfs_write+0x10/0x10 [ 432.554829][T11837] ? __pfx_down_write_killable+0x10/0x10 [ 432.554870][T11837] ? apparmor_mmap_file+0xc4/0xe0 [ 432.554901][T11837] vm_mmap_pgoff+0x2a6/0x4d0 [ 432.554941][T11837] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 432.554980][T11837] ? ksys_mmap_pgoff+0xf4/0x760 [ 432.555001][T11837] ? __x64_sys_mmap+0x7f/0x140 [ 432.555030][T11837] do_syscall_64+0xfa/0xfa0 [ 432.555059][T11837] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.555088][T11837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.555109][T11837] ? clear_bhb_loop+0x60/0xb0 [ 432.555135][T11837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.555156][T11837] RIP: 0033:0x7f743218ebe9 [ 432.555175][T11837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.555194][T11837] RSP: 002b:00007f7432f7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 432.555217][T11837] RAX: ffffffffffffffda RBX: 00007f74323c5fa0 RCX: 00007f743218ebe9 [ 432.555244][T11837] RDX: b635773f06ebbeeb RSI: 0000000000b36000 RDI: 0000200000000000 [ 432.555258][T11837] RBP: 00007f7432f7c090 R08: ffffffffffffffff R09: 0000000000000000 [ 432.555272][T11837] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 432.555284][T11837] R13: 00007f74323c6038 R14: 00007f74323c5fa0 R15: 00007fff2cb92148 [ 432.555318][T11837] [ 432.959223][ T48] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 433.020056][ T5937] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 433.027891][T11842] nbd_handle_cmd: 32 callbacks suppressed [ 433.027945][T11842] block nbd0: Attempted send on invalid socket [ 433.045312][T11842] blk_print_req_error: 32 callbacks suppressed [ 433.045361][T11842] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 433.066850][T11842] block nbd0: Attempted send on invalid socket [ 433.073402][T11842] I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 433.087872][T11842] Mount JFS Failure: -5 [ 433.092522][ T48] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 433.104778][ T48] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 433.191407][ T5937] usb 4-1: Using ep0 maxpacket: 16 [ 433.191739][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 433.201573][ T5937] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.242084][ T5937] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.265193][ T5937] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 433.279281][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.287951][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 433.313771][ T5937] usb 4-1: Product: syz [ 433.318192][ T5937] usb 4-1: Manufacturer: syz [ 433.324021][ T5937] usb 4-1: SerialNumber: syz [ 433.436495][T11853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.447672][T11853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.470795][T11853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.497537][T11853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.504365][ T5864] udevd[5864]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 433.527976][ T48] IPVS: starting estimator thread 0... [ 433.550542][ T5937] usb 4-1: 0:2 : does not exist [ 433.563844][ T5937] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 433.575497][ T5864] udevd[5864]: symlink '../../loop7' '/dev/disk/by-diskseq/134.tmp-b7:7' failed: Read-only file system [ 433.604054][ T5937] usb 4-1: USB disconnect, device number 41 [ 433.619345][T11857] IPVS: using max 34 ests per chain, 81600 per kthread [ 433.641712][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.749028][ T5923] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 433.913766][ T5923] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 433.922993][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.933645][ T5923] usb 2-1: config 0 descriptor?? [ 434.067957][T11859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.078039][T11859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.100814][ T5875] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 434.158815][ T5923] kaweth 2-1:0.0: Firmware present in device. [ 434.165528][ T5923] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 434.176122][ T5923] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 434.196089][ T5923] usb 2-1: USB disconnect, device number 29 [ 434.338685][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1933'. [ 434.639046][ T6078] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 434.680220][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 434.766739][ T5923] usb 3-1: USB disconnect, device number 70 [ 434.772021][ T6078] usb 4-1: device descriptor read/64, error -71 [ 434.852402][T11876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.864698][T11876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.873255][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 434.892949][ T5875] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 434.995816][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 435.030978][ T6078] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 435.032936][T11883] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1938'. [ 435.052191][T11883] hsr_slave_0: left promiscuous mode [ 435.058749][T11883] hsr_slave_1: left promiscuous mode [ 435.171955][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 435.183252][ T6078] usb 4-1: device descriptor read/64, error -71 [ 435.299748][ T6078] usb usb4-port1: attempt power cycle [ 435.439078][ T48] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 435.448785][T11889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.460056][T11889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.579139][ T48] usb 2-1: device descriptor read/64, error -71 [ 435.639060][ T6078] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 435.668335][ T6078] usb 4-1: device descriptor read/8, error -71 [ 435.819153][ T48] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 435.909005][ T6078] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 435.930167][ T6078] usb 4-1: device descriptor read/8, error -71 [ 435.949022][ T48] usb 2-1: device descriptor read/64, error -71 [ 435.979032][ T6337] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 436.039282][ T6078] usb usb4-port1: unable to enumerate USB device [ 436.059360][ T48] usb usb2-port1: attempt power cycle [ 436.129161][ T6337] usb 3-1: Using ep0 maxpacket: 32 [ 436.141114][ T6337] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 436.151138][ T6337] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 436.163825][ T6337] usb 3-1: config 0 interface 0 has no altsetting 0 [ 436.173127][ T6337] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 436.182895][ T6337] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 436.191451][ T6337] usb 3-1: Product: syz [ 436.195711][ T6337] usb 3-1: Manufacturer: syz [ 436.201201][ T6337] usb 3-1: SerialNumber: syz [ 436.217900][ T6337] usb 3-1: config 0 descriptor?? [ 436.399074][ T48] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 436.419606][ T48] usb 2-1: device descriptor read/8, error -71 [ 436.461414][T11912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.472711][T11912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.635586][ T6337] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 436.669088][ T48] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 436.701105][ T48] usb 2-1: device descriptor read/8, error -71 [ 436.811430][ T48] usb usb2-port1: unable to enumerate USB device [ 436.842485][ T6337] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 436.851397][ T6337] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 437.204996][T11921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.214295][T11921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.234007][ T5875] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 437.969246][ T5937] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 438.016351][T11945] loop6: detected capacity change from 0 to 63 [ 438.037664][ T5861] buffer_io_error: 5 callbacks suppressed [ 438.037688][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 438.056190][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 438.065442][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 438.073990][ T3549] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 438.077377][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 438.093874][ T5861] Buffer I/O error on dev loop6, logical block 0, async page read [ 438.104095][ T5861] udevd[5861]: symlink '../../loop6' '/dev/disk/by-diskseq/294.tmp-b7:6' failed: Read-only file system [ 438.133358][T11948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.142390][T11948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.149950][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 438.154675][T11948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.161700][ T5861] udevd[5861]: symlink '../../loop6' '/dev/disk/by-diskseq/294.tmp-b7:6' failed: Read-only file system [ 438.173371][T11948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.184607][ T5937] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 438.198101][ T5937] usb 4-1: config 0 has no interface number 0 [ 438.203550][ T5861] udevd[5861]: symlink '../../loop6' '/dev/disk/by-diskseq/294.tmp-b7:6' failed: Read-only file system [ 438.210641][ T5937] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 438.225767][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.234907][ T5937] usb 4-1: Product: syz [ 438.240660][ T5937] usb 4-1: Manufacturer: syz [ 438.245376][ T5937] usb 4-1: SerialNumber: syz [ 438.254647][ T5937] usb 4-1: config 0 descriptor?? [ 438.273142][ T5937] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 438.289334][ T5937] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 438.306092][ T6029] udevd[6029]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 438.480860][T11936] syz.3.1955 uses old SIOCAX25GETINFO [ 438.565109][ T5937] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 438.577833][ T5937] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 438.796390][ T5937] usb 3-1: USB disconnect, device number 71 [ 438.982678][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 439.149435][T11973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.158444][T11973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.229147][ T5937] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 439.249101][ T5923] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 439.378996][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 439.387196][ T5937] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 439.398976][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 439.407008][ T5937] usb 3-1: Product: syz [ 439.411402][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 439.418399][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.431435][ T5937] usb 3-1: config 0 descriptor?? [ 439.436444][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.446538][ T5923] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 439.456036][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.469871][ T5923] usb 2-1: config 0 descriptor?? [ 439.666964][ T5937] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 439.692551][ T5937] usb 3-1: USB disconnect, device number 72 [ 439.893804][ T5875] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 439.905817][ T5923] usbhid 2-1:0.0: can't add hid device: -71 [ 439.912146][ T5923] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 439.923775][ T5923] usb 2-1: USB disconnect, device number 34 [ 440.002334][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.002828][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 440.222780][T11976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.235475][T11976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.262933][ T5875] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 440.484551][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 440.511416][T11981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1970'. [ 440.532240][T11983] netlink: 'syz.1.1971': attribute type 10 has an invalid length. [ 440.544252][T11983] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1971'. [ 440.567674][T11983] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 440.577379][T11983] team0: Failed to send options change via netlink (err -105) [ 440.585699][T11983] team0: Port device geneve0 added [ 440.668634][ T5861] udevd[5861]: symlink '../../loop1' '/dev/disk/by-diskseq/275.tmp-b7:1' failed: Read-only file system [ 440.813561][ T5937] usb 4-1: USB disconnect, device number 46 [ 440.885678][ T9] hid-generic 0000:B9A700:2EF8AC00.0027: unexpected long global item [ 440.895960][ T5923] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 440.908657][ T9] hid-generic 0000:B9A700:2EF8AC00.0027: probe with driver hid-generic failed with error -22 [ 440.969482][ T6337] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 441.005220][T11999] netlink: 'syz.0.1976': attribute type 10 has an invalid length. [ 441.013276][T11999] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1976'. [ 441.054198][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 441.087237][ T5923] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 441.102853][ T5923] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 441.109048][ T6337] usb 3-1: device descriptor read/64, error -71 [ 441.125593][ T5923] usb 2-1: config 127 has no interface number 1 [ 441.141230][ T5923] usb 2-1: config 127 interface 171 has no altsetting 0 [ 441.175505][ T5923] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 441.200496][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.227201][ T5923] usb 2-1: Product: syz [ 441.231691][ T5923] usb 2-1: Manufacturer: syz [ 441.252911][ T5923] usb 2-1: SerialNumber: syz [ 441.394517][T12002] loop6: detected capacity change from 0 to 63 [ 441.399914][ T6337] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 441.431256][ T6029] udevd[6029]: symlink '../../loop6' '/dev/disk/by-diskseq/296.tmp-b7:6' failed: Read-only file system [ 441.465882][ T6029] udevd[6029]: symlink '../../loop6' '/dev/disk/by-diskseq/296.tmp-b7:6' failed: Read-only file system [ 441.474827][ T5923] xr_serial 2-1:127.171: xr_serial converter detected [ 441.513872][ T5923] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 441.514953][ T6029] udevd[6029]: symlink '../../loop6' '/dev/disk/by-diskseq/296.tmp-b7:6' failed: Read-only file system [ 441.528476][ T5923] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 441.550008][ T6337] usb 3-1: device descriptor read/64, error -71 [ 441.555426][ T5923] usb 2-1: USB disconnect, device number 35 [ 441.573159][ T5923] xr_serial 2-1:127.171: device disconnected [ 441.632449][T12006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.642482][T12006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.656731][T12006] overlay: ./file0 is not a directory [ 441.663088][ T6337] usb usb3-port1: attempt power cycle [ 441.789039][ T5937] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 441.919245][ T5937] usb 4-1: device descriptor read/64, error -71 [ 442.014459][ T6337] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 442.054911][ T6337] usb 3-1: device descriptor read/8, error -71 [ 442.159138][ T5937] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 442.246023][T12012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.257432][T12012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.266404][T12013] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000b2: 0000 [#1] SMP KASAN PTI [ 442.266429][T12013] KASAN: null-ptr-deref in range [0x0000000000000590-0x0000000000000597] [ 442.266448][T12013] CPU: 0 UID: 0 PID: 12013 Comm: syz.0.1983 Not tainted syzkaller #0 PREEMPT(full) [ 442.266471][T12013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 442.266485][T12013] RIP: 0010:vc_deallocate+0x303/0x3e0 [ 442.266514][T12013] Code: e8 52 c2 cf fc 49 c7 07 00 00 00 00 eb 0e e8 74 bf 6b fc eb 05 e8 6d bf 6b fc 31 db 4c 8d b3 90 05 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 2e c1 cf fc 4d 8b 3e 4d 85 ff 74 [ 442.266533][T12013] RSP: 0018:ffffc9001b26fbe0 EFLAGS: 00010206 [ 442.266555][T12013] RAX: ffffffff85543ca3 RBX: 0000000000000000 RCX: ffff888025501e40 [ 442.266571][T12013] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000003f [ 442.266584][T12013] RBP: ffffc9001b26fc90 R08: ffffffff8fe506cf R09: 1ffffffff1fca0d9 [ 442.266600][T12013] R10: dffffc0000000000 R11: fffffbfff1fca0da R12: 00000000000000b2 [ 442.266614][T12013] R13: dffffc0000000000 R14: 0000000000000590 R15: ffffffff9a272c00 [ 442.266630][T12013] FS: 00007f7432f5b6c0(0000) GS:ffff8881257b3000(0000) knlGS:0000000000000000 [ 442.266647][T12013] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 442.266661][T12013] CR2: 00007f7432f5af98 CR3: 000000002e970000 CR4: 00000000003526f0 [ 442.266678][T12013] Call Trace: [ 442.266686][T12013] [ 442.266694][T12013] ? vt_disallocate+0x10/0xa0 [ 442.266715][T12013] ? __pfx_vc_deallocate+0x10/0x10 [ 442.266737][T12013] ? is_console_locked+0x9/0x20 [ 442.266763][T12013] vt_disallocate+0x49/0xa0 [ 442.266782][T12013] vt_ioctl+0x13f5/0x1f20 [ 442.266806][T12013] ? __pfx_vt_ioctl+0x10/0x10 [ 442.266847][T12013] ? __fget_files+0x2a/0x420 [ 442.266873][T12013] ? tty_jobctrl_ioctl+0x369/0xb70 [ 442.266894][T12013] ? __fget_files+0x3a0/0x420 [ 442.266918][T12013] ? __fget_files+0x2a/0x420 [ 442.266960][T12013] tty_ioctl+0x929/0xde0 [ 442.267011][T12013] ? __pfx_tty_ioctl+0x10/0x10 [ 442.267035][T12013] __se_sys_ioctl+0xfc/0x170 [ 442.267055][T12013] do_syscall_64+0xfa/0xfa0 [ 442.267080][T12013] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.267107][T12013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.267125][T12013] ? clear_bhb_loop+0x60/0xb0 [ 442.267146][T12013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.267177][T12013] RIP: 0033:0x7f743218ebe9 [ 442.267191][T12013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.267214][T12013] RSP: 002b:00007f7432f5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.267234][T12013] RAX: ffffffffffffffda RBX: 00007f74323c6090 RCX: 00007f743218ebe9 [ 442.267248][T12013] RDX: 0000000000000003 RSI: 0000000000005608 RDI: 0000000000000003 [ 442.267259][T12013] RBP: 00007f7432211e19 R08: 0000000000000000 R09: 0000000000000000 [ 442.267271][T12013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.267283][T12013] R13: 00007f74323c6128 R14: 00007f74323c6090 R15: 00007fff2cb92148 [ 442.267303][T12013] [ 442.267317][T12013] Modules linked in: [ 442.267339][T12013] ---[ end trace 0000000000000000 ]--- [ 442.267348][T12012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.267348][T12013] RIP: 0010:vc_deallocate+0x303/0x3e0 [ 442.267370][T12013] Code: e8 52 c2 cf fc 49 c7 07 00 00 00 00 eb 0e e8 74 bf 6b fc eb 05 e8 6d bf 6b fc 31 db 4c 8d b3 90 05 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 2e c1 cf fc 4d 8b 3e 4d 85 ff 74 [ 442.267402][T12013] RSP: 0018:ffffc9001b26fbe0 EFLAGS: 00010206 [ 442.267420][T12013] RAX: ffffffff85543ca3 RBX: 0000000000000000 RCX: ffff888025501e40 [ 442.267434][T12013] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000003f [ 442.267446][T12013] RBP: ffffc9001b26fc90 R08: ffffffff8fe506cf R09: 1ffffffff1fca0d9 [ 442.267460][T12013] R10: dffffc0000000000 R11: fffffbfff1fca0da R12: 00000000000000b2 [ 442.267473][T12013] R13: dffffc0000000000 R14: 0000000000000590 R15: ffffffff9a272c00 [ 442.267487][T12013] FS: 00007f7432f5b6c0(0000) GS:ffff8881257b3000(0000) knlGS:0000000000000000 [ 442.267504][T12013] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 442.267517][T12013] CR2: 00007f7432f5af98 CR3: 000000002e970000 CR4: 00000000003526f0 [ 442.267535][T12013] Kernel panic - not syncing: Fatal exception [ 442.267877][T12013] Kernel Offset: disabled