last executing test programs: 2m42.508858061s ago: executing program 0 (id=1925): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) futex(&(0x7f00000000c0), 0x4, 0x1, 0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x5, 0x5, &(0x7f0000000040)={0x6, "f7ef029d26830df666a56c904a25ee92f7c6e50728a8b603e979f3eff1c95ff925"}}) 2m38.843736379s ago: executing program 0 (id=1938): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd01ffffa88800140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2m38.677071317s ago: executing program 0 (id=1939): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r1, 0x0, &(0x7f0000931000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x300}) 2m38.524086789s ago: executing program 0 (id=1940): r0 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040844}, 0x800) fcntl$getflags(r0, 0x401) 2m37.61267129s ago: executing program 0 (id=1946): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0xfbfb, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r7, &(0x7f00000005c0)={0x6, 0x118, 0xfa00, {{0x200, 0xff, "c8f536153f6e907101a9bcacdcdda3b59dc952a362d05fdb5e65518c48dee2babc42992841d2856a8d2102575a2f286e3907a0c34c73bb43bb23e6b363ef53da38530bc10fc69062ae1af9aedf7ec9d940f6d52bc4bdace86bd069661fe720eb8f3b404e4b39de92674e4ab39d12f72910e28308ddafb39f1cd9192c407b4a50b5cd7ccbc75c966d9957595868afeb6c2ebb4e3757ea3040036d7390dfe6400d45d9f00591458764e28e7168b68645fa4451bb43172ada0ce291e2eef19ef2c00e591ab05ecc1e0418d51231647104475c220f3357bafcc09de6cb294a28541ec96e29dd4a241157500aed368c0e8743fc50f12300b51af2af59ec5aef04b653", 0x8, 0x87, 0x1, 0x80, 0x9, 0x4}}}, 0x120) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r9, 0x1, 0x70bd24, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x31a5098, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_fuse_handle_req(r10, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x4fcb6233, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x801, 0xadf, 0x804, 0xee01, 0x0, 0x2000, '\x00', 0x6, 0x81, 0x1, 0x3, {0x8, 0x8}, {0x4000000000006, 0x9}, {0x6, 0x7}, {0x1000000000, 0xa00}, 0x80008003, 0xa, 0xfffffffe, 0x6}}}}) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) faccessat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x2) 2m37.084350502s ago: executing program 0 (id=1949): r0 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1223, 0x3f07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xc, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="402345000000451161639c545d2ce9daa7602630c686377369efa824c3379300000000b1d2363bdd25b77c5b7708dfd51207b2908fceb485a8995d912500"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@local, 0x9, 0x2, 0xff, 0x2, 0x8000, 0xc}, 0x20) getdents64(r2, 0x0, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000200)='btrfs\x00', 0x0, &(0x7f0000000380)='acl') 2m21.587818586s ago: executing program 32 (id=1949): r0 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1223, 0x3f07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xc, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="402345000000451161639c545d2ce9daa7602630c686377369efa824c3379300000000b1d2363bdd25b77c5b7708dfd51207b2908fceb485a8995d912500"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@local, 0x9, 0x2, 0xff, 0x2, 0x8000, 0xc}, 0x20) getdents64(r2, 0x0, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000200)='btrfs\x00', 0x0, &(0x7f0000000380)='acl') 7.620459775s ago: executing program 3 (id=2492): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x82802, 0xf) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x7}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x10, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfe}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x2000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x7f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3, 0xfe}, {0x0, 0x8000000, 0xa, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0x9, 0xd801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x2000, 0x8000, 0x0, 0x1, 0x0, [{0x1, 0x3, 0x6, '\x00', 0x91}, {0x6c, 0xbc, 0x15, '\x00', 0xf}, {0x5, 0x83, 0x6, '\x00', 0x95}, {0x0, 0x9, 0x8, '\x00', 0xd7}, {0x3, 0x5, 0x7, '\x00', 0x2}, {0x3, 0x3, 0x7f, '\x00', 0x89}, {0xb, 0x2, 0xb4, '\x00', 0x9}, {0x6, 0x0, 0x80, '\x00', 0x3}, {0xb, 0x4, 0x4, '\x00', 0xd}, {0x2, 0x7, 0x1, '\x00', 0x3a}, {0x5, 0xff, 0xc, '\x00', 0x5}, {0x3, 0xf2, 0x3, '\x00', 0x1e}, {0x8, 0x9, 0x8, '\x00', 0x3}, {0x2, 0x7, 0xa4}, {0x1, 0x40, 0x6, '\x00', 0x20}, {0xe, 0x4, 0xb, '\x00', 0x1}, {0x4d, 0xe, 0x6d}, {0xe, 0x8, 0x8, '\x00', 0xd3}, {0x0, 0x5, 0x2, '\x00', 0x2}, {0x7f, 0x0, 0x72, '\x00', 0x5}, {0x9, 0x4, 0x9, '\x00', 0x7}, {0x1, 0xe, 0x1, '\x00', 0x2}, {0x72, 0xe, 0x5}, {0x80, 0xd, 0x40}]}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000f80)=ANY=[@ANYBLOB="12010003000000102509668840000102030509022d0001010120a32d971c6cdd9a44549f02090400210100060122c6080905810300007480a15091aaa6af04030809"], &(0x7f0000000a80)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x81, 0x4, 0x3, 0x10, 0x5}, 0x17, &(0x7f00000001c0)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x2, 0x2}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x72, 0xe6, 0x7, 0xff}]}, 0x6, [{0xbc, &(0x7f0000000840)=@string={0xbc, 0x3, "31d6b9c470254df178c8bb631fb615d79e39f5e0868c407597a569736a6e93f0d6779ec35e0056f925e0bb8d7ee99e7350ba252c390a1d7d5991e4c0318086fd4dc4a72e335ac518b63878ddf85ee44d6dc236bfc067eb7ce2ed5725a2dbe2922390bed610e36df8fdaceff1c01a86f2ec1d1c3cf813b182728bd14e19c60dcb71c77b8aee9754a69a88dbeb1c723b2b23182d762d42b95738469e27daac4c2e48c97f1b1f678d3d2bd7f1a3253a6815de8f54720c5f6578619a"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4c45}}, {0xc, &(0x7f0000000440)=@string={0xc, 0x3, "3926b717dd71e6963e05"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x5c, &(0x7f0000000900)=@string={0x5c, 0x3, "2d77efa1df5ebd05b3886643e4fc39cc2224a9c9f8015096041e6b5347780c6c4b0ace430238e30311d13d58f39308cde6ead38af58374e6cd64e7ca0398fb1d8fdb20f7d4412619a8ee24e69e88f592d293d68a08c7a869ff76"}}, {0xf4, &(0x7f0000000980)=@string={0xf4, 0x3, "2dd2bb6c1e87d7c012e69b87d83cb2bb2a9678cc4a254277fe894f97756f1764b814990b93f6f8beb078db35f775178a30bda5157cd6913f1e81d1d5733fcee26a1258995a48f1a1ec9a94903b41ac460913ae121806fb0c3ac4261546394c07b1f861a8cf9a9fe7f2215303edbb409d91e7a2524aa9bc738dfa99a0302c4d66dac32ae0e8184c67be42142ff315e11a7a0def11dd5e040ce3111bc34ea23b920847ef6013e8dbe5c1c1cb027a372edd21954a8c0470ada917ae5280f029125af20db23d6ae79654649ddb75f98ba6c8047df495ff9aaec6a840651e83e2ff1a43004dd02a3b92a4b4d224cb643f5ca4e085"}}]}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0xd) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000d00)={0x24, &(0x7f0000000b00)={0x40, 0x21, 0xfc, {0xfc, 0x3, "e16b076e8a034601236d06839958e5726d4925b367cf129dc6b49285d31dab214c7cfcfc3b6eae9c88ee38d3c7d7caafe2322fee9f37051cab8e1b80fd9b2b3906524e30027d8227cf99208a6fe9fcf60caa0217cd26a4b10e95d290073b94340f66cba23a6e1fec2dfd72c4e4aa5646f63d5cd6a6b2893f80cfa897c233c285e46d3a7b4a9ddd06982dd93c579bdeb1d2d43569a4b756c6b265a1b26893d3fddd4e258096d2a86f69e82a177d25b92b8b3701095bef048459b37dcd04fb4297bb4c392dc43715dfbe1b0004fd17471b524977eac771fc41ed5b26673ad22c7da2689e13e0dcb3708c451c26d15bdebeb7c17a9861ba4503756f"}}, &(0x7f0000000c40)=ANY=[@ANYBLOB="00030400670004030124"], &(0x7f00000002c0)={0x0, 0x22, 0x1d, {[@global=@item_4={0x3, 0x1, 0x7, "ea5626d9"}, @global=@item_4={0x3, 0x1, 0x0, "556ae513"}, @global=@item_012={0x0, 0x1, 0x7}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @main=@item_4={0x3, 0x0, 0x9, '\vUN]'}, @main=@item_012={0x0, 0x0, 0x1}, @global=@item_4={0x3, 0x1, 0x5, "6b14fd68"}, @global=@item_4={0x3, 0x1, 0x4, "df5a52dd"}]}}, &(0x7f0000000cc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0xf, 0x1, {0x22, 0xc0c}}}}, &(0x7f0000000f40)={0x2c, &(0x7f0000000d40)={0x0, 0x12, 0x7d, "1b725146670f434faf3539f9c4762203384891075eacaac616a5ec03d85b6045bde7eea9b5f0db0fdfce89c52b1ef32baef2f23f9a500eb4a74e8c4077c0c6275ed8450b0b81dbc828f730349eb1362ddca0f056cf75a0742ae409dba7758224fc9f0213c8d7256ec1bbf1a792a63b5a2dbcc03aa44d9984749a01235e"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000e80)={0x20, 0x1, 0x3d, "10942ed1f4e0041b3dfb32ea91e579624e643529491d972432f6d48b9ba08a33ba3fe6b44208d438d5c33167b9b467f38fc86dec4f514fc29775a70fca"}, &(0x7f0000000f00)={0x20, 0x3, 0x1, 0x8}}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r0], 0x9e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0x4, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) 6.690809239s ago: executing program 2 (id=2494): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000897) 6.464816646s ago: executing program 2 (id=2495): unshare(0x22000600) fallocate(0xffffffffffffffff, 0x10, 0x200000000000000, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000120000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 6.367786109s ago: executing program 2 (id=2496): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) mremap(&(0x7f00002d5000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f00002d6000/0x3000)=nil) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="02efffff0100000028bd700000400000"], 0x10}}, 0x0) 6.172990413s ago: executing program 2 (id=2497): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) futex(&(0x7f00000000c0), 0x4, 0x1, 0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x5, 0x5, &(0x7f0000000040)={0x6, "f7ef029d26830df666a56c904a25ee92f7c6e50728a8b603e979f3eff1c95ff925"}}) 5.992879094s ago: executing program 3 (id=2498): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x1, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff9, @ipv4}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r4, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000340)={0x8, r6}) 5.872130747s ago: executing program 3 (id=2500): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) (fail_nth: 19) 5.432457482s ago: executing program 3 (id=2501): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400010000002009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x0, 0x18, 0x5, &(0x7f0000000240)={0x1a, "a52422ffd61175c2fdd2031d46ef090000ab69b7d49cc4492d050600"}}) 4.041772558s ago: executing program 4 (id=2505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x20008010) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x9c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x1, 0x8}}, @void, @void, @val={0x2d, 0x1a, {0x8000, 0x1, 0x6, 0x0, {0x7, 0x5, 0x0, 0x7, 0x0, 0x1}, 0x1, 0x1, 0x9}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004090}, 0x3000000) 3.969079043s ago: executing program 4 (id=2506): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) mremap(&(0x7f00002d5000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f00002d6000/0x3000)=nil) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="02efffff0100000028bd700000400000"], 0x10}}, 0x0) 3.743837121s ago: executing program 4 (id=2507): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = fsopen(&(0x7f0000000100)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='utf8', &(0x7f00000001c0)='\x00\x00\xf2qE', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r1, &(0x7f0000000000)='net/udp\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_off}]}) chdir(&(0x7f0000000440)='./bus\x00') open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) 3.600558714s ago: executing program 4 (id=2508): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x482841, 0x4, 0x1e}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) syz_clone3(&(0x7f0000000240)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f00000001c0)=@ccm_128={{0x303}, "53de84cdfe4c6240", "ee1f009ba3ad4bda60c16dd30502d42c", "b795c079", "74cae7107e24e098"}, 0x28) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x960, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffc}}, 0x0, 0x0, 0x42, 0x0, "0aaa0ff5a212a1bd3bbda613efd9c8b4ca66db4286e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0952e83d41b67cb9ff147c669351b3ed30000000000000700"}, 0xd8) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x32, 0x1, 0x70bd29, 0x25dfdbfa, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0x3fad7e17a27f2d2d, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) connect$netrom(r6, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@null, @default, @default, @default, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0], 0x0) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r9, 0x40086409, &(0x7f0000000100)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x2, 0x5, 0xdddd0000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000440)=[@wr_crn={0x46, 0x20, {0x8, 0x6}}, @rdmsr={0x32, 0x18, {0xa10}}, @code={0xa, 0x66, {"0f08660f38815050b8010000000f01c16766f3466c0f20e035200000000f22e048b800000000008000000f23d80f21f835c00000200f23f8b9800000c00f3235000800000f30410fbc32660f3881550b66460f6812"}}, @uexit={0x0, 0x18, 0x3e}, @wr_crn={0x46, 0x20, {0xf, 0xde}}, @rdmsr={0x32, 0x18, {0x2e0}}, @wr_crn={0x46, 0x20, {0x3, 0x2}}], 0x10e}) r10 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000b00)="1081", 0x2, r10) add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.10487573s ago: executing program 2 (id=2509): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000e40)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000000d80)=[{{&(0x7f0000000040), 0x6e, &(0x7f00000004c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/214, 0xd6}, {&(0x7f00000001c0)=""/207, 0xcf}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f0000000400)=""/142, 0x8e}], 0x7}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000005c0)=""/206, 0xce}, {&(0x7f00000006c0)=""/241, 0xf1}, {&(0x7f00000007c0)=""/123, 0x7b}], 0x3, &(0x7f0000000840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/67, 0x43}, {&(0x7f0000000a00)=""/79, 0x4f}, {&(0x7f0000000a80)=""/132, 0x84}, {&(0x7f0000000b40)=""/41, 0x29}, {&(0x7f0000000b80)=""/199, 0xc7}], 0x5, &(0x7f0000000d00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}], 0x3, 0x40, &(0x7f0000000e80)={r4, r5+60000000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="00110d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x3c, r2, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.844128884s ago: executing program 1 (id=2510): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl(r2, 0xffff0000, &(0x7f0000000240)="c0ea524f6a8888ce1f29caaa3ee5c1b8e4d1d2caf9026cd6770cb80c0b17e07fa26b28c4e97d340bb3702a1d9766a2b23d99a956e042d3286a485859d6fbf57df432d1f0b926507e9c913338dee1af517bbaee63774c0c19e30ec6a788ebd59b2c6d9737d93a43c3815807d95d35f4f2b5587fc29c78ecfaccfd") syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0x0, 0xaba3, {0x45}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.37680007s ago: executing program 3 (id=2511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x300) 2.352265894s ago: executing program 3 (id=2512): setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000fc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001380)={0x40, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000003880)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="001702000000cdff"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000280)={0x40, 0x18}, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x40, 0xa0, 0x4, 0x30c}, &(0x7f0000000480)={0xc0, 0xa2, 0x2f, "c1a93aa4f5aed5dc10cc3efe3e65ff95f014641e2ad505bef289d6a7bd6284dd38ff39ebaa5dd6f580b787f509185e"}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000140)={0x20, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000500)={0x60, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.971822477s ago: executing program 1 (id=2513): syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000015c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYRES16=r0], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) 1.880824593s ago: executing program 1 (id=2514): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x6, 0x9, 0x1}) ioctl(r3, 0xffff0000, &(0x7f0000000240)) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.046269937s ago: executing program 1 (id=2515): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl(r2, 0xffff0000, &(0x7f0000000240)) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 529.765642ms ago: executing program 4 (id=2516): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) mremap(&(0x7f00002d5000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f00002d6000/0x3000)=nil) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="02efffff0100000028bd700000400000"], 0x10}}, 0x0) 296.751902ms ago: executing program 4 (id=2517): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) futex(&(0x7f00000000c0), 0x4, 0x1, 0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x5, 0x5, &(0x7f0000000040)={0x6, "f7ef029d26830df666a56c904a25ee92f7c6e50728a8b603e979f3eff1c95ff925"}}) 155.117829ms ago: executing program 1 (id=2518): r0 = socket(0x11, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='[', 0x1}], 0x1, 0x0, 0x0, 0x30008040}, 0x40080d1) accept(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xc}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24010800}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e210c371303ed6a33f2ff8689b3f20e"]) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 880.848µs ago: executing program 1 (id=2519): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400010000002009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x0, 0x18, 0x5, &(0x7f0000000240)={0x1a, "a52422ffd61175c2fdd2031d46ef090000ab69b7d49cc4492d050600"}}) 0s ago: executing program 2 (id=2520): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x99) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0), 0x0) r3 = syz_open_dev$video(&(0x7f00000002c0), 0x4, 0x82) socket$pppl2tp(0x18, 0x1, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000005e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000005340)={0x78, 0x0, r4, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r5, r6, 0xb, 0x8, 0x1000000}}}, 0x78) lstat(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001880)="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", 0x2000, &(0x7f0000001740)={&(0x7f0000000600)={0x50, 0x0, 0xfd, {0x7, 0x2b, 0x2, 0x80100, 0x1, 0x1, 0x80000000, 0x7, 0x0, 0x0, 0x80, 0x6}}, &(0x7f0000000680)={0x18, 0xfffffffffffffff5, 0x1, {0xf}}, &(0x7f0000000740)={0x18, 0x0, 0x8, {0x9}}, &(0x7f0000000780)={0x18, 0x0, 0x8, {0x6}}, &(0x7f00000007c0)={0x18, 0xfffffffffffffff5, 0x2, {0x2}}, &(0x7f0000000940)={0x28, 0xffffffffffffffda, 0xa733, {{0x1, 0x3, 0x2}}}, &(0x7f0000000980)={0x60, 0x0, 0x8000, {{0x6, 0x2, 0x100000000, 0x5, 0x553f9091, 0x1, 0xa, 0x4}}}, &(0x7f0000000a00)={0x18, 0x0, 0x9c, {0xfffffffb}}, &(0x7f0000000a40)={0x11, 0x0, 0x7, {'\x00'}}, &(0x7f0000000ac0)={0x20, 0x0, 0x84, {0x0, 0xa}}, &(0x7f0000000d00)={0x78, 0x0, 0x9, {0x7, 0x2, 0x0, {0x1, 0x100000000, 0xf7, 0xfff, 0xffffffff80000001, 0x1, 0x1000, 0x629, 0x4, 0xa000, 0x2ee4, 0x0, 0x0, 0x5, 0x4b}}}, &(0x7f0000000fc0)={0x90, 0x0, 0xd5b, {0x6, 0x2, 0x1000000000000, 0x1, 0x2, 0x6, {0x5, 0x80000000, 0x100000000, 0xfffffffffffffffc, 0x7, 0x0, 0x6, 0xffffff5b, 0x2, 0x4000, 0x9, 0x0, 0xee00, 0x81, 0x8}}}, &(0x7f0000001080)={0x30, 0x0, 0x5, [{0x2, 0x1, 0x1, 0x5, '\x00'}]}, &(0x7f0000003880)={0x3d8, 0xfffffffffffffffe, 0xa4cc, [{{0x2, 0x2, 0xa, 0x1, 0xfffffff7, 0x80, {0x6, 0x200, 0x3, 0x81, 0x10000, 0x2, 0x5, 0x5, 0x9, 0x4000, 0xf, 0x0, 0x0, 0x7fffffff, 0x10}}, {0x5, 0xe0, 0x2, 0x4, '}@'}}, {{0x3, 0x1, 0xa4, 0x75, 0x9, 0x2, {0x1, 0x1, 0x7, 0x80000000, 0xba1, 0x8, 0xf893, 0x4, 0x7, 0x4000, 0x9ef7, 0xffffffffffffffff, 0x0, 0x7f, 0x9}}, {0x5, 0x7, 0x1, 0x81, '\x00'}}, {{0x3, 0x1, 0xffff, 0xfffffffffffffffc, 0xf5, 0x81, {0x6, 0x4ff6, 0x7, 0x7, 0x5, 0xfffffffffffff801, 0x7, 0x26ca, 0x1, 0x8000, 0x1, 0x0, 0x0, 0x1, 0x8}}, {0x4, 0x6, 0x9, 0x5, '/dev/kvm\x00'}}, {{0x2, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffc, 0x9, 0x8000, {0x4, 0x800, 0x7, 0x0, 0x32c3, 0x2bb, 0x60000, 0x7fc, 0x7, 0xa000, 0x40, 0x0, 0x0, 0xf8d, 0xffffff39}}, {0x2, 0xee16077, 0xc, 0xcd, '$\'}\x9a.(}\\\']:\\'}}, {{0x0, 0x0, 0x5, 0xc57, 0x5, 0x9, {0x4, 0x1, 0x5, 0x4, 0x6, 0x7, 0x9, 0x9, 0x4, 0xa000, 0xaf, 0x0, 0x0, 0x4, 0x2}}, {0x3, 0x7fffffffffffffff}}, {{0x6, 0x0, 0x100, 0x1, 0x9950, 0x6, {0x1, 0x6, 0x6, 0x2, 0x1000, 0xef4, 0x8, 0x5, 0x7, 0x2000, 0x1, 0x0, 0x0, 0x6, 0x6}}, {0x0, 0x7, 0x1, 0xfffeffff, '\x00'}}]}, &(0x7f00000014c0)={0xa0, 0xfffffffffffffff5, 0x1, {{0x4, 0x2, 0x0, 0x4, 0x334d9ef7, 0x8, {0x0, 0x2d4, 0xb, 0xe, 0xff, 0x0, 0x329, 0x6f7b, 0x40, 0x6000, 0x8, 0x0, r6, 0x3}}, {0x0, 0xc}}}, &(0x7f0000001580)={0x20, 0x0, 0x3, {0x1, 0x0, 0x7ff, 0x1}}, &(0x7f0000003c80)={0x130, 0x0, 0x8486, {0xb, 0x80000000, 0x0, '\x00', {0x20, 0x8, 0x6, 0x80, r7, r8, 0xc000, '\x00', 0x10000, 0x8, 0x7, 0x1, {0x7, 0xffff}, {0x1, 0x27a}, {0x3, 0x3}, {0x2, 0x5f}, 0x2, 0x1, 0x6, 0x5}}}}) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000540)={0x3, 0x7, 0x1, 0x0, 0x6}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'nr0\x00'}) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, 0x0, 0x0, 0x0}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$inet(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r10 = syz_usb_connect$uac1(0x4, 0xb4, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x3, 0x1, 0x5, 0x60, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xa}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x1ff, 0x1, 0x3, 0x5, 0x4, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x3, 0x2, 'd\''}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xfff9, 0x401, 0xe, "0c0a2b143b4572"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x8, 0x4}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0x80, 0x0, '(;'}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0x2d, 0x6, {0x7, 0x25, 0x1, 0x0, 0x40, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x5, 0x3, 0x7, 0x0, "264c156752a2"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x40, 0x3, 0x9, {0x7, 0x25, 0x1, 0x1, 0xc}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0xc71ebacc52e72dbc, 0x2, 0x81, 0x9, 0x20, 0x5}, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x11, 0x9, 0x0, 0x2, 0x5}]}, 0x2, [{0xc9, &(0x7f0000000440)=@string={0xc9, 0x3, "42d99765188169c91e382afc38a996abc179ea2e83d7e0c33d43a338e4fd4638e43c4e8506f10b8af2676bda6b41f37cfd1115126e94806aba6fede8f4b4af27aec1b73ae4bec3767589ec512ed0906746149b476c38c7d306760aaecf9aa65827fcf2b19313e7926cae0145046a54f7f7b4ae52f8d09a9f90c642f5c26dcafd59e4e1f1f7f6c912e8c65509dec18425dcb797cc80bfc6f456a4bdae52f0b64b1372f42ba3865eb3650b74a8944ca3d7b53f4c24956c1578eaa493d4661181a752a06f9bcf34e6"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xf4ff}}]}) syz_usb_control_io(r10, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000580)={0x20, 0xd, 0x2, "11e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000b80)={0x84, &(0x7f00000006c0)={0x0, 0x3, 0x2, "519c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_usb_control_io(r1, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000a80)=ANY=[@ANYBLOB="40015c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): [T12230] ? __pfx_current_check_access_path+0x10/0x10 [ 569.100255][T12230] ? d_alloc_parallel+0x2f0/0x15e0 [ 569.100279][T12230] tomoyo_path_mknod+0x142/0x190 [ 569.100305][T12230] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 569.100339][T12230] security_path_mknod+0x17e/0x3a0 [ 569.100375][T12230] path_openat+0xd56/0x3830 [ 569.100442][T12230] ? __pfx_path_openat+0x10/0x10 [ 569.100490][T12230] do_filp_open+0x1fa/0x410 [ 569.100508][T12230] ? __lock_acquire+0xab9/0xd20 [ 569.100535][T12230] ? __pfx_do_filp_open+0x10/0x10 [ 569.100584][T12230] ? _raw_spin_unlock+0x28/0x50 [ 569.100608][T12230] ? alloc_fd+0x64c/0x6c0 [ 569.100648][T12230] do_sys_openat2+0x121/0x1c0 [ 569.100673][T12230] ? __pfx_do_sys_openat2+0x10/0x10 [ 569.100694][T12230] ? ksys_write+0x22a/0x250 [ 569.100721][T12230] ? __pfx_ksys_write+0x10/0x10 [ 569.100750][T12230] __x64_sys_open+0x11e/0x150 [ 569.100776][T12230] do_syscall_64+0xfa/0xfa0 [ 569.100803][T12230] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.100833][T12230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.100854][T12230] ? clear_bhb_loop+0x60/0xb0 [ 569.100881][T12230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.100900][T12230] RIP: 0033:0x7f025198eba9 [ 569.100920][T12230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.100938][T12230] RSP: 002b:00007f025275d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 569.100961][T12230] RAX: ffffffffffffffda RBX: 00007f0251bd5fa0 RCX: 00007f025198eba9 [ 569.100976][T12230] RDX: 1df2a23c5997fa5f RSI: 0000000000080242 RDI: 0000200000000580 [ 569.100990][T12230] RBP: 00007f025275d090 R08: 0000000000000000 R09: 0000000000000000 [ 569.101003][T12230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.101016][T12230] R13: 00007f0251bd6038 R14: 00007f0251bd5fa0 R15: 00007ffeeeeada08 [ 569.101054][T12230] [ 569.101471][T12230] ERROR: Out of memory at tomoyo_realpath_from_path. [ 569.413031][T12243] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 569.420103][T12243] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 569.715630][T12252] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 569.786443][ T5957] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 569.959155][ T5957] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 569.969643][ T5957] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 569.981155][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.010199][ T5957] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 570.107765][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 570.268190][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.284466][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 570.295783][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 570.310672][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.330286][ T9] usb 5-1: config 0 descriptor?? [ 570.961646][ T5917] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 571.052621][ T5957] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 571.060904][ T5957] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 571.069154][ T5957] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 571.077737][ T5957] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 571.089405][ T5957] usb 2-1: USB disconnect, device number 48 [ 571.119119][ T5917] usb 4-1: not running at top speed; connect to a high speed hub [ 571.131827][ T5917] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.147630][ T5917] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 571.156979][ T5917] usb 4-1: config 1 has no interface number 1 [ 571.175169][ T5917] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 571.195428][ T5917] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 571.217949][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.234690][ T5917] usb 4-1: Product: syz [ 571.238937][ T5917] usb 4-1: Manufacturer: syz [ 571.246396][ T5917] usb 4-1: SerialNumber: syz [ 571.560554][ T5917] usb 4-1: USB disconnect, device number 42 [ 571.643099][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 572.164367][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2223'. [ 572.200739][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2223'. [ 572.588580][ T5957] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 572.799815][ T5957] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.811763][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.823446][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.833679][ T5957] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 572.848420][ T5957] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 572.859492][ T5957] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 572.868607][ T5957] usb 4-1: Manufacturer: syz [ 572.877312][ T5957] usb 4-1: config 0 descriptor?? [ 573.488126][ T9] usb 5-1: USB disconnect, device number 17 [ 573.510846][ T5957] usbhid 4-1:0.0: can't add hid device: -71 [ 573.551561][ T5957] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 573.592008][ T5957] usb 4-1: USB disconnect, device number 43 [ 573.904415][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 574.034915][ T5917] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 574.066818][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.085411][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.105326][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1808, setting to 1024 [ 574.125769][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 574.134906][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.142882][T12295] FAULT_INJECTION: forcing a failure. [ 574.142882][T12295] name failslab, interval 1, probability 0, space 0, times 0 [ 574.155166][ T9] usb 5-1: Product: syz [ 574.156375][T12295] CPU: 1 UID: 0 PID: 12295 Comm: syz.3.2229 Not tainted syzkaller #0 PREEMPT(full) [ 574.156400][T12295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 574.156411][T12295] Call Trace: [ 574.156420][T12295] [ 574.156428][T12295] dump_stack_lvl+0x189/0x250 [ 574.156451][T12295] ? __pfx____ratelimit+0x10/0x10 [ 574.156478][T12295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.156496][T12295] ? __pfx__printk+0x10/0x10 [ 574.156528][T12295] ? __pfx___might_resched+0x10/0x10 [ 574.156549][T12295] ? fs_reclaim_acquire+0x7d/0x100 [ 574.156576][T12295] should_fail_ex+0x414/0x560 [ 574.156603][T12295] should_failslab+0xa8/0x100 [ 574.156627][T12295] __kmalloc_noprof+0xcb/0x7f0 [ 574.156645][T12295] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 574.156669][T12295] ? __local_bh_enable_ip+0x12d/0x1c0 [ 574.156697][T12295] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 574.156726][T12295] genl_family_rcv_msg_doit+0xb8/0x300 [ 574.156755][T12295] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 574.156786][T12295] ? apparmor_capable+0x137/0x1b0 [ 574.156809][T12295] ? bpf_lsm_capable+0x9/0x20 [ 574.156826][T12295] ? security_capable+0x7e/0x2e0 [ 574.156865][T12295] genl_rcv_msg+0x60e/0x790 [ 574.156894][T12295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.156915][T12295] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 574.156935][T12295] ? __pfx_nl80211_new_station+0x10/0x10 [ 574.156957][T12295] ? __pfx_nl80211_post_doit+0x10/0x10 [ 574.156980][T12295] ? __asan_memcpy+0x40/0x70 [ 574.157006][T12295] ? __pfx_ref_tracker_free+0x10/0x10 [ 574.157037][T12295] netlink_rcv_skb+0x205/0x470 [ 574.157062][T12295] ? __lock_acquire+0xab9/0xd20 [ 574.157083][T12295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.157105][T12295] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 574.157152][T12295] ? down_read+0x1ad/0x2e0 [ 574.157174][T12295] genl_rcv+0x28/0x40 [ 574.157193][T12295] netlink_unicast+0x82f/0x9e0 [ 574.157227][T12295] ? __pfx_netlink_unicast+0x10/0x10 [ 574.157254][T12295] ? netlink_sendmsg+0x642/0xb30 [ 574.157269][T12295] ? skb_put+0x11b/0x210 [ 574.157291][T12295] netlink_sendmsg+0x805/0xb30 [ 574.157319][T12295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.157340][T12295] ? aa_sock_msg_perm+0xf1/0x1d0 [ 574.157368][T12295] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 574.157391][T12295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.157410][T12295] __sock_sendmsg+0x219/0x270 [ 574.157437][T12295] ____sys_sendmsg+0x505/0x830 [ 574.157463][T12295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.157493][T12295] ? import_iovec+0x74/0xa0 [ 574.157515][T12295] ___sys_sendmsg+0x21f/0x2a0 [ 574.157537][T12295] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.157596][T12295] ? __fget_files+0x2a/0x420 [ 574.157618][T12295] ? __fget_files+0x3a0/0x420 [ 574.157653][T12295] __x64_sys_sendmsg+0x19b/0x260 [ 574.157676][T12295] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 574.157706][T12295] ? __pfx_ksys_write+0x10/0x10 [ 574.157731][T12295] ? do_syscall_64+0xbe/0xfa0 [ 574.157761][T12295] do_syscall_64+0xfa/0xfa0 [ 574.157785][T12295] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.157810][T12295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.157827][T12295] ? clear_bhb_loop+0x60/0xb0 [ 574.157898][T12295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.157916][T12295] RIP: 0033:0x7fa8ebb8eba9 [ 574.157934][T12295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.157949][T12295] RSP: 002b:00007fa8ec961038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.157969][T12295] RAX: ffffffffffffffda RBX: 00007fa8ebdd5fa0 RCX: 00007fa8ebb8eba9 [ 574.157983][T12295] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 574.157996][T12295] RBP: 00007fa8ec961090 R08: 0000000000000000 R09: 0000000000000000 [ 574.158007][T12295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.158018][T12295] R13: 00007fa8ebdd6038 R14: 00007fa8ebdd5fa0 R15: 00007ffcbb986fd8 [ 574.158050][T12295] [ 574.206030][T12297] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 574.225624][ T9] usb 5-1: Manufacturer: syz [ 574.238853][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 574.244512][ T9] usb 5-1: SerialNumber: syz [ 574.272101][ T5917] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.275029][T12298] FAULT_INJECTION: forcing a failure. [ 574.275029][T12298] name failslab, interval 1, probability 0, space 0, times 0 [ 574.281357][ T56] block nbd0: Possible stuck request ffff888025a8e000: control (read@0,1024B). Runtime 90 seconds [ 574.285874][T12298] CPU: 0 UID: 0 PID: 12298 Comm: syz.3.2230 Not tainted syzkaller #0 PREEMPT(full) [ 574.285899][T12298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 574.285911][T12298] Call Trace: [ 574.285919][T12298] [ 574.285927][T12298] dump_stack_lvl+0x189/0x250 [ 574.285951][T12298] ? __pfx____ratelimit+0x10/0x10 [ 574.285976][T12298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.285995][T12298] ? __pfx__printk+0x10/0x10 [ 574.286023][T12298] ? __pfx___might_resched+0x10/0x10 [ 574.286045][T12298] ? fs_reclaim_acquire+0x7d/0x100 [ 574.286073][T12298] should_fail_ex+0x414/0x560 [ 574.286108][T12298] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 574.286130][T12298] should_failslab+0xa8/0x100 [ 574.286153][T12298] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 574.286172][T12298] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 574.286191][T12298] ? shmem_alloc_inode+0x28/0x40 [ 574.286212][T12298] ? do_raw_spin_lock+0x121/0x290 [ 574.286239][T12298] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 574.286260][T12298] shmem_alloc_inode+0x28/0x40 [ 574.286280][T12298] alloc_inode+0x67/0x1b0 [ 574.286305][T12298] new_inode+0x22/0x170 [ 574.286334][T12298] shmem_get_inode+0x346/0xe90 [ 574.286366][T12298] shmem_mknod+0x18c/0x3e0 [ 574.286394][T12298] ? __pfx_shmem_create+0x10/0x10 [ 574.286416][T12298] path_openat+0x14f4/0x3830 [ 574.286473][T12298] ? __pfx_path_openat+0x10/0x10 [ 574.286515][T12298] do_filp_open+0x1fa/0x410 [ 574.286531][T12298] ? __lock_acquire+0xab9/0xd20 [ 574.286553][T12298] ? __pfx_do_filp_open+0x10/0x10 [ 574.286596][T12298] ? _raw_spin_unlock+0x28/0x50 [ 574.286619][T12298] ? alloc_fd+0x64c/0x6c0 [ 574.286655][T12298] do_sys_openat2+0x121/0x1c0 [ 574.286676][T12298] ? __pfx_do_sys_openat2+0x10/0x10 [ 574.286694][T12298] ? ksys_write+0x22a/0x250 [ 574.286719][T12298] ? __pfx_ksys_write+0x10/0x10 [ 574.286743][T12298] __x64_sys_open+0x11e/0x150 [ 574.286766][T12298] do_syscall_64+0xfa/0xfa0 [ 574.286791][T12298] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.286816][T12298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.286834][T12298] ? clear_bhb_loop+0x60/0xb0 [ 574.286857][T12298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.286874][T12298] RIP: 0033:0x7fa8ebb8eba9 [ 574.286892][T12298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.286907][T12298] RSP: 002b:00007fa8ec940038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 574.286927][T12298] RAX: ffffffffffffffda RBX: 00007fa8ebdd6090 RCX: 00007fa8ebb8eba9 [ 574.286941][T12298] RDX: 1df2a23c5997fa5f RSI: 0000000000080242 RDI: 0000200000000580 [ 574.286954][T12298] RBP: 00007fa8ec940090 R08: 0000000000000000 R09: 0000000000000000 [ 574.286966][T12298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.286977][T12298] R13: 00007fa8ebdd6128 R14: 00007fa8ebdd6090 R15: 00007ffcbb986fd8 [ 574.287010][T12298] [ 574.364236][T12288] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 574.368744][ T56] block nbd0: Possible stuck request ffff888025a8e1c0: control (read@1024,1024B). Runtime 90 seconds [ 574.501078][ C1] vkms_vblank_simulate: vblank timer overrun [ 574.602072][T12288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.609279][ T56] block nbd0: Possible stuck request ffff888025a8e380: control (read@2048,1024B). Runtime 90 seconds [ 574.684864][T12288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.686720][ T56] block nbd0: Possible stuck request ffff888025a8e540: control (read@3072,1024B). Runtime 90 seconds [ 574.960883][ T5917] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 574.971354][ T5917] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 574.982651][ T5917] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 574.993903][ T5917] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 574.994424][ T9] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 575.003047][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.042176][ T5917] hub 2-1:1.0: bad descriptor, ignoring hub [ 575.048154][ T5917] hub 2-1:1.0: probe with driver hub failed with error -5 [ 575.056066][ T5917] cdc_wdm 2-1:1.0: skipping garbage [ 575.068961][ T5917] cdc_wdm 2-1:1.0: skipping garbage [ 575.076329][ T5917] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 575.082515][ T5917] cdc_wdm 2-1:1.0: Unknown control protocol [ 575.167789][ T9] cdc_ncm 5-1:1.0: bind() failure [ 575.235892][ T9] usb 5-1: USB disconnect, device number 18 [ 575.430466][ T5917] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 575.621902][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.639680][ T5917] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 575.649307][ T5917] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 575.658907][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.671224][ T5917] usb 4-1: config 0 descriptor?? [ 575.672318][ T9] usb 2-1: USB disconnect, device number 49 [ 575.862532][ T5952] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 576.041106][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.056148][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.066540][ T5952] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 576.080338][ T5952] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 576.090463][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.101525][T12321] mkiss: ax0: crc mode is auto. [ 576.102357][ T5952] usb 5-1: config 0 descriptor?? [ 578.732111][ T5952] usbhid 5-1:0.0: can't add hid device: -71 [ 578.738658][ T5952] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 578.782168][ T5952] usb 5-1: USB disconnect, device number 19 [ 578.806962][T12342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 578.914180][ T5917] usb 4-1: USB disconnect, device number 44 [ 579.043709][T12346] block nbd3: NBD_DISCONNECT [ 579.095345][ T5952] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 579.186839][T12348] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 579.274323][ T5952] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.285309][ T5952] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 579.307057][ T5952] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 579.334421][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.368458][ T5952] usb 5-1: config 0 descriptor?? [ 580.841964][T12339] Bluetooth: hci4: command 0x0406 tx timeout [ 581.223768][ T5931] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 581.389009][ T5931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.402954][ T5931] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 581.420403][ T5931] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 581.429754][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.451373][ T5931] usb 2-1: config 0 descriptor?? [ 582.076266][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 582.226831][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 582.233980][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 582.242682][ T9] usb 4-1: config 0 has no interface number 0 [ 582.252205][ T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 582.261826][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.270286][ T9] usb 4-1: Product: syz [ 582.274537][ T9] usb 4-1: Manufacturer: syz [ 582.279562][ T9] usb 4-1: SerialNumber: syz [ 582.297326][ T9] usb 4-1: config 0 descriptor?? [ 582.311611][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 582.496492][ T5931] usb 5-1: USB disconnect, device number 20 [ 583.342195][ T9] gspca_spca1528: reg_w err -71 [ 583.355670][ T9] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 583.380280][ T9] usb 4-1: USB disconnect, device number 45 [ 583.638319][T12399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 584.003588][ T5917] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 584.034421][T12403] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 584.047609][T12403] FAULT_INJECTION: forcing a failure. [ 584.047609][T12403] name failslab, interval 1, probability 0, space 0, times 0 [ 584.063320][T12403] CPU: 0 UID: 0 PID: 12403 Comm: syz.3.2263 Not tainted syzkaller #0 PREEMPT(full) [ 584.063349][T12403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 584.063361][T12403] Call Trace: [ 584.063370][T12403] [ 584.063384][T12403] dump_stack_lvl+0x189/0x250 [ 584.063410][T12403] ? __pfx____ratelimit+0x10/0x10 [ 584.063439][T12403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 584.063460][T12403] ? __pfx__printk+0x10/0x10 [ 584.063495][T12403] ? __pfx___might_resched+0x10/0x10 [ 584.063527][T12403] should_fail_ex+0x414/0x560 [ 584.063556][T12403] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 584.063581][T12403] should_failslab+0xa8/0x100 [ 584.063607][T12403] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 584.063630][T12403] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 584.063653][T12403] ? ovl_alloc_inode+0x2c/0xa0 [ 584.063684][T12403] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 584.063708][T12403] ovl_alloc_inode+0x2c/0xa0 [ 584.063733][T12403] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 584.063776][T12403] alloc_inode+0x67/0x1b0 [ 584.063805][T12403] new_inode+0x22/0x170 [ 584.063838][T12403] ovl_new_inode+0x1c/0x50 [ 584.063867][T12403] ovl_create_object+0x158/0x310 [ 584.063893][T12403] ? __pfx_ovl_create_object+0x10/0x10 [ 584.063912][T12403] ? make_vfsgid+0x49/0xa0 [ 584.063933][T12403] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 584.063968][T12403] ? inode_permission+0x149/0x470 [ 584.063994][T12403] ? __pfx_ovl_permission+0x10/0x10 [ 584.064026][T12403] ? bpf_lsm_inode_create+0x9/0x20 [ 584.064055][T12403] ? __pfx_ovl_create+0x10/0x10 [ 584.064074][T12403] path_openat+0x14f4/0x3830 [ 584.064138][T12403] ? __pfx_path_openat+0x10/0x10 [ 584.064185][T12403] do_filp_open+0x1fa/0x410 [ 584.064205][T12403] ? __lock_acquire+0xab9/0xd20 [ 584.064229][T12403] ? __pfx_do_filp_open+0x10/0x10 [ 584.064276][T12403] ? _raw_spin_unlock+0x28/0x50 [ 584.064302][T12403] ? alloc_fd+0x64c/0x6c0 [ 584.064343][T12403] do_sys_openat2+0x121/0x1c0 [ 584.064368][T12403] ? __pfx_do_sys_openat2+0x10/0x10 [ 584.064389][T12403] ? ksys_write+0x22a/0x250 [ 584.064417][T12403] ? __pfx_ksys_write+0x10/0x10 [ 584.064445][T12403] __x64_sys_open+0x11e/0x150 [ 584.064470][T12403] do_syscall_64+0xfa/0xfa0 [ 584.064500][T12403] ? lockdep_hardirqs_on+0x9c/0x150 [ 584.064530][T12403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.064550][T12403] ? clear_bhb_loop+0x60/0xb0 [ 584.064576][T12403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.064597][T12403] RIP: 0033:0x7fa8ebb8eba9 [ 584.064616][T12403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.064634][T12403] RSP: 002b:00007fa8ec961038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 584.064657][T12403] RAX: ffffffffffffffda RBX: 00007fa8ebdd5fa0 RCX: 00007fa8ebb8eba9 [ 584.064673][T12403] RDX: 1df2a23c5997fa5f RSI: 0000000000080242 RDI: 0000200000000580 [ 584.064688][T12403] RBP: 00007fa8ec961090 R08: 0000000000000000 R09: 0000000000000000 [ 584.064702][T12403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 584.064715][T12403] R13: 00007fa8ebdd6038 R14: 00007fa8ebdd5fa0 R15: 00007ffcbb986fd8 [ 584.064754][T12403] [ 584.399096][ T5917] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 584.408525][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.421277][ T5917] usb 5-1: Product: syz [ 584.425628][ T5917] usb 5-1: Manufacturer: syz [ 584.430440][ T5917] usb 5-1: SerialNumber: syz [ 584.448165][ T5917] r8152-cfgselector 5-1: Unknown version 0x0000 [ 584.454539][ T5917] r8152-cfgselector 5-1: config 0 descriptor?? [ 584.546797][ T9] usb 2-1: USB disconnect, device number 50 [ 584.655101][T12407] netlink: 'syz.1.2265': attribute type 1 has an invalid length. [ 584.665310][T12407] netlink: 'syz.1.2265': attribute type 101 has an invalid length. [ 584.680941][T12407] netlink: 832 bytes leftover after parsing attributes in process `syz.1.2265'. [ 584.712605][ T5917] r8152-cfgselector 5-1: Needed 1 retries to read version [ 584.725961][ T5917] r8152-cfgselector 5-1: Unknown version 0x4060 [ 584.750894][ T5917] r8152-cfgselector 5-1: bad CDC descriptors [ 584.806189][ T5957] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 584.843874][T12408] kvm: MWAIT instruction emulated as NOP! [ 584.927022][T12401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.949027][T12401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.959617][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.977613][ T5957] usb 4-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 584.992557][ T5917] r8152-cfgselector 5-1: USB disconnect, device number 21 [ 584.996864][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.028989][ T5957] usb 4-1: config 0 descriptor?? [ 585.146848][ T5875] Bluetooth: hci4: unexpected event for opcode 0x0002 [ 585.154455][ T5875] Bluetooth: hci4: unexpected event for opcode 0x0002 [ 585.510842][ T5957] kye 0003:0458:501B.0044: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 585.541254][ T5957] kye 0003:0458:501B.0044: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.3-1/input0 [ 585.554106][ T5957] kye 0003:0458:501B.0044: tablet-enabling feature report not found [ 585.563580][ T5957] kye 0003:0458:501B.0044: tablet enabling failed [ 585.665540][T12420] netlink: 'syz.4.2269': attribute type 16 has an invalid length. [ 585.689291][T12420] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2269'. [ 586.384986][ T5910] usb 4-1: USB disconnect, device number 46 [ 586.463770][ T5917] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 586.562326][ T5957] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 586.664588][ T5917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.675626][ T5917] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 586.677197][T12436] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 586.693401][ T5917] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 586.702515][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.703378][T12436] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2275'. [ 586.731809][ T5917] usb 5-1: config 0 descriptor?? [ 586.748337][ T5957] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.765403][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.802256][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.823144][ T5957] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 586.861718][ T5957] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 586.876797][ T5957] usb 2-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 586.886000][ T5957] usb 2-1: Manufacturer: syz [ 586.898770][ T5957] usb 2-1: config 0 descriptor?? [ 587.077435][T12439] tmpfs: Bad value for 'nr_inodes' [ 587.100734][T12439] overlay: ./file0/file1 is not a directory [ 587.112699][T12441] FAULT_INJECTION: forcing a failure. [ 587.112699][T12441] name failslab, interval 1, probability 0, space 0, times 0 [ 587.144305][T12441] CPU: 1 UID: 0 PID: 12441 Comm: syz.2.2277 Not tainted syzkaller #0 PREEMPT(full) [ 587.144337][T12441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 587.144350][T12441] Call Trace: [ 587.144359][T12441] [ 587.144368][T12441] dump_stack_lvl+0x189/0x250 [ 587.144396][T12441] ? __pfx____ratelimit+0x10/0x10 [ 587.144426][T12441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.144445][T12441] ? __pfx__printk+0x10/0x10 [ 587.144470][T12441] ? netlink_sendmsg+0x805/0xb30 [ 587.144490][T12441] ? __x64_sys_sendmsg+0x19b/0x260 [ 587.144510][T12441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.144542][T12441] should_fail_ex+0x414/0x560 [ 587.144574][T12441] should_failslab+0xa8/0x100 [ 587.144601][T12441] kmem_cache_alloc_noprof+0x74/0x6e0 [ 587.144623][T12441] ? skb_clone+0x212/0x3a0 [ 587.144653][T12441] skb_clone+0x212/0x3a0 [ 587.144681][T12441] __netlink_deliver_tap+0x404/0x850 [ 587.144728][T12441] ? netlink_deliver_tap+0x2e/0x1b0 [ 587.144757][T12441] netlink_deliver_tap+0x19c/0x1b0 [ 587.144790][T12441] netlink_sendskb+0x68/0x140 [ 587.144829][T12441] netlink_unicast+0x397/0x9e0 [ 587.144855][T12441] ? __asan_memcpy+0x40/0x70 [ 587.144895][T12441] ? __pfx_netlink_unicast+0x10/0x10 [ 587.144935][T12441] netlink_rcv_skb+0x28c/0x470 [ 587.144963][T12441] ? __lock_acquire+0xab9/0xd20 [ 587.144986][T12441] ? __pfx_genl_rcv_msg+0x10/0x10 [ 587.145024][T12441] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 587.145076][T12441] ? down_read+0x1ad/0x2e0 [ 587.145102][T12441] genl_rcv+0x28/0x40 [ 587.145122][T12441] netlink_unicast+0x82f/0x9e0 [ 587.145162][T12441] ? __pfx_netlink_unicast+0x10/0x10 [ 587.145191][T12441] ? netlink_sendmsg+0x642/0xb30 [ 587.145208][T12441] ? skb_put+0x11b/0x210 [ 587.145232][T12441] netlink_sendmsg+0x805/0xb30 [ 587.145274][T12441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 587.145298][T12441] ? aa_sock_msg_perm+0xf1/0x1d0 [ 587.145330][T12441] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 587.145358][T12441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 587.145381][T12441] __sock_sendmsg+0x219/0x270 [ 587.145413][T12441] ____sys_sendmsg+0x505/0x830 [ 587.145443][T12441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 587.145477][T12441] ? import_iovec+0x74/0xa0 [ 587.145503][T12441] ___sys_sendmsg+0x21f/0x2a0 [ 587.145529][T12441] ? __pfx____sys_sendmsg+0x10/0x10 [ 587.145596][T12441] ? __fget_files+0x2a/0x420 [ 587.145622][T12441] ? __fget_files+0x3a0/0x420 [ 587.145661][T12441] __x64_sys_sendmsg+0x19b/0x260 [ 587.145687][T12441] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 587.145722][T12441] ? __pfx_ksys_write+0x10/0x10 [ 587.145750][T12441] ? do_syscall_64+0xbe/0xfa0 [ 587.145783][T12441] do_syscall_64+0xfa/0xfa0 [ 587.145812][T12441] ? lockdep_hardirqs_on+0x9c/0x150 [ 587.145842][T12441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.145861][T12441] ? clear_bhb_loop+0x60/0xb0 [ 587.145887][T12441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.145912][T12441] RIP: 0033:0x7f5f3898eba9 [ 587.145933][T12441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.145951][T12441] RSP: 002b:00007f5f3983e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 587.145974][T12441] RAX: ffffffffffffffda RBX: 00007f5f38bd5fa0 RCX: 00007f5f3898eba9 [ 587.145989][T12441] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 587.146024][T12441] RBP: 00007f5f3983e090 R08: 0000000000000000 R09: 0000000000000000 [ 587.146036][T12441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.146049][T12441] R13: 00007f5f38bd6038 R14: 00007f5f38bd5fa0 R15: 00007fff7fda6de8 [ 587.146086][T12441] [ 587.507156][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.558526][ T5957] keytouch 0003:0926:3333.0045: fixing up Keytouch IEC report descriptor [ 587.573234][ T5957] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0045/input/input124 [ 587.682065][T12444] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 587.705118][ T5957] keytouch 0003:0926:3333.0045: input,hidraw0: USB HID v0.00 Keyboard [syz] on usb-dummy_hcd.1-1/input0 [ 587.744744][T12444] FAULT_INJECTION: forcing a failure. [ 587.744744][T12444] name failslab, interval 1, probability 0, space 0, times 0 [ 587.769535][T12444] CPU: 1 UID: 0 PID: 12444 Comm: syz.2.2278 Not tainted syzkaller #0 PREEMPT(full) [ 587.769565][T12444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 587.769579][T12444] Call Trace: [ 587.769588][T12444] [ 587.769598][T12444] dump_stack_lvl+0x189/0x250 [ 587.769626][T12444] ? __pfx____ratelimit+0x10/0x10 [ 587.769656][T12444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.769676][T12444] ? __pfx__printk+0x10/0x10 [ 587.769723][T12444] ? __pfx___might_resched+0x10/0x10 [ 587.769748][T12444] ? fs_reclaim_acquire+0x7d/0x100 [ 587.769779][T12444] should_fail_ex+0x414/0x560 [ 587.769811][T12444] should_failslab+0xa8/0x100 [ 587.769840][T12444] kmem_cache_alloc_noprof+0x74/0x6e0 [ 587.769861][T12444] ? security_inode_alloc+0x39/0x330 [ 587.769895][T12444] security_inode_alloc+0x39/0x330 [ 587.769928][T12444] inode_init_always_gfp+0x9ed/0xdc0 [ 587.769961][T12444] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 587.769993][T12444] alloc_inode+0x82/0x1b0 [ 587.770018][T12444] new_inode+0x22/0x170 [ 587.770049][T12444] ovl_new_inode+0x1c/0x50 [ 587.770079][T12444] ovl_create_object+0x158/0x310 [ 587.770103][T12444] ? __pfx_ovl_create_object+0x10/0x10 [ 587.770118][T12444] ? make_vfsgid+0x49/0xa0 [ 587.770139][T12444] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 587.770171][T12444] ? inode_permission+0x149/0x470 [ 587.770200][T12444] ? __pfx_ovl_permission+0x10/0x10 [ 587.770224][T12444] ? bpf_lsm_inode_create+0x9/0x20 [ 587.770251][T12444] ? __pfx_ovl_create+0x10/0x10 [ 587.770269][T12444] path_openat+0x14f4/0x3830 [ 587.770329][T12444] ? __pfx_path_openat+0x10/0x10 [ 587.770376][T12444] do_filp_open+0x1fa/0x410 [ 587.770394][T12444] ? __lock_acquire+0xab9/0xd20 [ 587.770418][T12444] ? __pfx_do_filp_open+0x10/0x10 [ 587.770465][T12444] ? _raw_spin_unlock+0x28/0x50 [ 587.770490][T12444] ? alloc_fd+0x64c/0x6c0 [ 587.770527][T12444] do_sys_openat2+0x121/0x1c0 [ 587.770550][T12444] ? __pfx_do_sys_openat2+0x10/0x10 [ 587.770571][T12444] ? ksys_write+0x22a/0x250 [ 587.770597][T12444] ? __pfx_ksys_write+0x10/0x10 [ 587.770624][T12444] __x64_sys_open+0x11e/0x150 [ 587.770647][T12444] do_syscall_64+0xfa/0xfa0 [ 587.770676][T12444] ? lockdep_hardirqs_on+0x9c/0x150 [ 587.770705][T12444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.770735][T12444] ? clear_bhb_loop+0x60/0xb0 [ 587.770762][T12444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.770782][T12444] RIP: 0033:0x7f5f3898eba9 [ 587.770802][T12444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.770821][T12444] RSP: 002b:00007f5f3983e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 587.770845][T12444] RAX: ffffffffffffffda RBX: 00007f5f38bd5fa0 RCX: 00007f5f3898eba9 [ 587.770861][T12444] RDX: 1df2a23c5997fa5f RSI: 0000000000080242 RDI: 0000200000000580 [ 587.770875][T12444] RBP: 00007f5f3983e090 R08: 0000000000000000 R09: 0000000000000000 [ 587.770889][T12444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 587.770910][T12444] R13: 00007f5f38bd6038 R14: 00007f5f38bd5fa0 R15: 00007fff7fda6de8 [ 587.770949][T12444] [ 588.079558][ C1] vkms_vblank_simulate: vblank timer overrun [ 588.111577][ T5957] usb 2-1: USB disconnect, device number 51 [ 588.404039][T12446] fido_id[12446]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 589.321182][T12463] netlink: 'syz.3.2283': attribute type 1 has an invalid length. [ 589.339177][T12463] netlink: 'syz.3.2283': attribute type 101 has an invalid length. [ 589.349916][T12463] netlink: 832 bytes leftover after parsing attributes in process `syz.3.2283'. [ 589.366554][T12461] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 589.540985][T12467] kAFS: unparsable volume name [ 589.903497][ T5931] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 590.066810][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.076727][ T5931] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 590.086140][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.105291][ T5931] usb 4-1: config 0 descriptor?? [ 590.114382][ T5957] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 590.279807][ T5917] usb 5-1: USB disconnect, device number 22 [ 590.294698][ T5957] usb 2-1: Using ep0 maxpacket: 8 [ 590.308221][ T5957] usb 2-1: config 0 has an invalid interface number: 233 but max is 0 [ 590.346186][ T5957] usb 2-1: config 0 has no interface number 0 [ 590.352374][ T5957] usb 2-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=98.7f [ 590.382800][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.408286][ T5957] usb 2-1: config 0 descriptor?? [ 590.588065][ T5931] wacom 0003:056A:0000.0046: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 590.606293][ T5931] wacom 0003:056A:0000.0046: hidraw0: USB HID v0.01 Device [HID 056a:0000] on usb-dummy_hcd.3-1/input0 [ 590.646384][ T5957] usb 2-1: string descriptor 0 read error: -71 [ 590.658152][ T5931] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0000.0046/input/input125 [ 590.667854][ T5957] gspca_main: spca501-2.14.0 probing 0497:c001 [ 590.686268][ T5917] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 590.699795][ T5957] gspca_spca501: reg write: error -71 [ 590.705232][ T5957] spca501 2-1:0.233: Reg write failed for 0x02,0x07,0x05 [ 590.747608][ T5957] spca501 2-1:0.233: probe with driver spca501 failed with error -22 [ 590.800914][T12471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.801216][ T5957] usb 2-1: USB disconnect, device number 52 [ 590.825365][T12471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.872967][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 590.890492][ T5917] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 590.904452][ T5917] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 590.914366][ T5917] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 590.929747][ T5917] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 590.943286][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 590.958569][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 590.976989][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 590.990177][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 591.006245][ T5917] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 591.015854][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.024100][ T5917] usb 5-1: Product: syz [ 591.028767][ T5917] usb 5-1: Manufacturer: syz [ 591.033473][ T5917] usb 5-1: SerialNumber: syz [ 591.043738][ T5917] usb 5-1: config 0 descriptor?? [ 591.050157][T12477] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 591.060040][ T5917] hub 5-1:0.0: bad descriptor, ignoring hub [ 591.066209][ T5917] hub 5-1:0.0: probe with driver hub failed with error -5 [ 591.079062][ T5917] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input128 [ 591.203003][ C1] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -1 [ 591.234255][ C1] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -1 [ 591.337750][ T5931] usb 5-1: USB disconnect, device number 23 [ 591.548975][ T5917] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 591.711890][ T5917] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 591.720770][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.739382][ T5917] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 591.748689][ T5917] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 591.758914][ T5917] usb 2-1: Manufacturer: syz [ 591.781754][ T5917] usb 2-1: config 0 descriptor?? [ 591.871574][ T5917] rc_core: IR keymap rc-hauppauge not found [ 591.893086][ T5917] Registered IR keymap rc-empty [ 591.906460][ T5917] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 591.930949][ T5917] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input129 [ 592.015017][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 592.040323][ T5957] usb 2-1: USB disconnect, device number 53 [ 592.301603][T12493] FAULT_INJECTION: forcing a failure. [ 592.301603][T12493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.320361][T12493] CPU: 1 UID: 0 PID: 12493 Comm: syz.4.2295 Not tainted syzkaller #0 PREEMPT(full) [ 592.320392][T12493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 592.320405][T12493] Call Trace: [ 592.320413][T12493] [ 592.320423][T12493] dump_stack_lvl+0x189/0x250 [ 592.320448][T12493] ? __pfx____ratelimit+0x10/0x10 [ 592.320479][T12493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.320499][T12493] ? __pfx__printk+0x10/0x10 [ 592.320544][T12493] should_fail_ex+0x414/0x560 [ 592.320575][T12493] _copy_to_user+0x31/0xb0 [ 592.320598][T12493] simple_read_from_buffer+0xe1/0x170 [ 592.320630][T12493] proc_fail_nth_read+0x1b3/0x220 [ 592.320654][T12493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 592.320678][T12493] ? rw_verify_area+0x2a6/0x4d0 [ 592.320700][T12493] ? __lock_acquire+0xab9/0xd20 [ 592.320720][T12493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 592.320751][T12493] vfs_read+0x200/0xa30 [ 592.320774][T12493] ? fdget_pos+0x247/0x320 [ 592.320806][T12493] ? __pfx___mutex_lock+0x10/0x10 [ 592.320827][T12493] ? __pfx_vfs_read+0x10/0x10 [ 592.320853][T12493] ? __fget_files+0x2a/0x420 [ 592.320885][T12493] ? __fget_files+0x3a0/0x420 [ 592.320911][T12493] ? __fget_files+0x2a/0x420 [ 592.320949][T12493] ksys_read+0x145/0x250 [ 592.320976][T12493] ? __pfx_ksys_read+0x10/0x10 [ 592.321003][T12493] ? do_syscall_64+0xbe/0xfa0 [ 592.321042][T12493] do_syscall_64+0xfa/0xfa0 [ 592.321069][T12493] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.321097][T12493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.321118][T12493] ? clear_bhb_loop+0x60/0xb0 [ 592.321144][T12493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.321163][T12493] RIP: 0033:0x7f025198d5bc [ 592.321183][T12493] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 592.321202][T12493] RSP: 002b:00007f025275d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 592.321225][T12493] RAX: ffffffffffffffda RBX: 00007f0251bd5fa0 RCX: 00007f025198d5bc [ 592.321241][T12493] RDX: 000000000000000f RSI: 00007f025275d0a0 RDI: 0000000000000006 [ 592.321255][T12493] RBP: 00007f025275d090 R08: 0000000000000000 R09: 0000000000000000 [ 592.321268][T12493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 592.321279][T12493] R13: 00007f0251bd6038 R14: 00007f0251bd5fa0 R15: 00007ffeeeeada08 [ 592.321314][T12493] [ 592.555630][ C1] vkms_vblank_simulate: vblank timer overrun [ 592.707498][T12495] netlink: 'syz.4.2296': attribute type 1 has an invalid length. [ 592.749403][ T5957] usb 4-1: USB disconnect, device number 47 [ 592.785089][T12495] netlink: 'syz.4.2296': attribute type 101 has an invalid length. [ 592.831907][T12495] netlink: 832 bytes leftover after parsing attributes in process `syz.4.2296'. [ 592.852029][T12497] program syz.1.2297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 593.220190][T12507] overlayfs: missing 'lowerdir' [ 593.315521][ T5957] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 593.344617][ T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 593.511680][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 593.530927][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.539580][ T5957] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.558960][ T9] usb 2-1: Product: syz [ 593.563328][ T5957] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 593.572621][ T9] usb 2-1: Manufacturer: syz [ 593.582476][ T9] usb 2-1: SerialNumber: syz [ 593.587461][ T5957] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 593.606590][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.632365][ T5957] usb 4-1: config 0 descriptor?? [ 594.116812][ T5917] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 594.272810][ T5917] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 32 [ 594.285420][ T5917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.295920][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 594.320696][ T5917] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 594.330316][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.338866][ T5917] usb 5-1: Product: syz [ 594.343058][ T5917] usb 5-1: Manufacturer: syz [ 594.348118][ T5917] usb 5-1: SerialNumber: syz [ 594.358637][ T5917] usb 5-1: config 0 descriptor?? [ 594.369693][ T5917] usb-storage 5-1:0.0: USB Mass Storage device detected [ 594.381896][ T5917] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 594.742081][ T5917] usb 5-1: USB disconnect, device number 24 [ 594.833340][T12527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2307'. [ 594.843708][T12527] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2307'. [ 594.959784][T12529] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 594.976636][T12529] FAULT_INJECTION: forcing a failure. [ 594.976636][T12529] name failslab, interval 1, probability 0, space 0, times 0 [ 594.994520][T12529] CPU: 1 UID: 0 PID: 12529 Comm: syz.2.2308 Not tainted syzkaller #0 PREEMPT(full) [ 594.994552][T12529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 594.994564][T12529] Call Trace: [ 594.994575][T12529] [ 594.994585][T12529] dump_stack_lvl+0x189/0x250 [ 594.994610][T12529] ? __pfx____ratelimit+0x10/0x10 [ 594.994641][T12529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 594.994661][T12529] ? __pfx__printk+0x10/0x10 [ 594.994698][T12529] ? __pfx___might_resched+0x10/0x10 [ 594.994728][T12529] should_fail_ex+0x414/0x560 [ 594.994758][T12529] should_failslab+0xa8/0x100 [ 594.994785][T12529] __kmalloc_noprof+0xcb/0x7f0 [ 594.994805][T12529] ? rcu_is_watching+0x15/0xb0 [ 594.994828][T12529] ? security_prepare_creds+0x52/0x390 [ 594.994855][T12529] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 594.994878][T12529] security_prepare_creds+0x52/0x390 [ 594.994915][T12529] prepare_creds+0x497/0x6c0 [ 594.994951][T12529] ovl_setup_cred_for_create+0x20/0x300 [ 594.994979][T12529] ovl_create_or_link+0x1cf/0x1410 [ 594.995024][T12529] ? __pfx_ovl_create_or_link+0x10/0x10 [ 594.995051][T12529] ? __lock_acquire+0xab9/0xd20 [ 594.995094][T12529] ? from_vfsgid+0x72/0xa0 [ 594.995116][T12529] ? inode_init_owner+0x1ee/0x3a0 [ 594.995147][T12529] ovl_create_object+0x234/0x310 [ 594.995170][T12529] ? __pfx_ovl_create_object+0x10/0x10 [ 594.995189][T12529] ? make_vfsgid+0x49/0xa0 [ 594.995209][T12529] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 594.995243][T12529] ? inode_permission+0x149/0x470 [ 594.995270][T12529] ? __pfx_ovl_permission+0x10/0x10 [ 594.995294][T12529] ? bpf_lsm_inode_create+0x9/0x20 [ 594.995321][T12529] ? __pfx_ovl_create+0x10/0x10 [ 594.995340][T12529] path_openat+0x14f4/0x3830 [ 594.995407][T12529] ? __pfx_path_openat+0x10/0x10 [ 594.995453][T12529] do_filp_open+0x1fa/0x410 [ 594.995472][T12529] ? __lock_acquire+0xab9/0xd20 [ 594.995498][T12529] ? __pfx_do_filp_open+0x10/0x10 [ 594.995548][T12529] ? _raw_spin_unlock+0x28/0x50 [ 594.995575][T12529] ? alloc_fd+0x64c/0x6c0 [ 594.995612][T12529] do_sys_openat2+0x121/0x1c0 [ 594.995638][T12529] ? __pfx_do_sys_openat2+0x10/0x10 [ 594.995659][T12529] ? ksys_write+0x22a/0x250 [ 594.995686][T12529] ? __pfx_ksys_write+0x10/0x10 [ 594.995714][T12529] __x64_sys_open+0x11e/0x150 [ 594.995738][T12529] do_syscall_64+0xfa/0xfa0 [ 594.995767][T12529] ? lockdep_hardirqs_on+0x9c/0x150 [ 594.995797][T12529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.995817][T12529] ? clear_bhb_loop+0x60/0xb0 [ 594.995843][T12529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.995863][T12529] RIP: 0033:0x7f5f3898eba9 [ 594.995881][T12529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.995897][T12529] RSP: 002b:00007f5f3983e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 594.995926][T12529] RAX: ffffffffffffffda RBX: 00007f5f38bd5fa0 RCX: 00007f5f3898eba9 [ 594.995942][T12529] RDX: 1df2a23c5997fa5f RSI: 0000000000080242 RDI: 0000200000000580 [ 594.995957][T12529] RBP: 00007f5f3983e090 R08: 0000000000000000 R09: 0000000000000000 [ 594.995970][T12529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 594.995984][T12529] R13: 00007f5f38bd6038 R14: 00007f5f38bd5fa0 R15: 00007fff7fda6de8 [ 594.996020][T12529] [ 595.320034][ C1] vkms_vblank_simulate: vblank timer overrun [ 595.453948][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 595.502501][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 595.532558][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 595.544690][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 595.565220][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 595.576890][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 595.599038][ T9] usb 2-1: USB disconnect, device number 54 [ 595.952253][ T5917] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 596.162870][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 596.170089][ T5917] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 596.182752][ T5917] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 596.196699][ T5917] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 596.207696][ T5917] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 596.222363][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 596.240796][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 596.253997][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 596.269591][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 596.287670][ T5917] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 596.296895][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.304965][ T5917] usb 5-1: Product: syz [ 596.309245][ T5917] usb 5-1: Manufacturer: syz [ 596.313930][ T5917] usb 5-1: SerialNumber: syz [ 596.321862][ T5917] usb 5-1: config 0 descriptor?? [ 596.328563][T12536] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 596.338889][ T5917] hub 5-1:0.0: bad descriptor, ignoring hub [ 596.347420][ T5917] hub 5-1:0.0: probe with driver hub failed with error -5 [ 596.360231][ T5917] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input130 [ 596.373577][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 596.534029][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 596.542340][ T9] usb 2-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 596.554678][ T5931] usb 5-1: USB disconnect, device number 25 [ 596.558221][ T9] usb 2-1: config 242 has 0 interfaces, different from the descriptor's value: 1 [ 596.586186][ T9] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 596.605767][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.614050][ T9] usb 2-1: Product: syz [ 596.625934][ T9] usb 2-1: Manufacturer: syz [ 596.630657][ T9] usb 2-1: SerialNumber: syz [ 596.783947][ T5957] usb 4-1: USB disconnect, device number 48 [ 596.887489][T12540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2312'. [ 597.168415][ T5931] usb 2-1: USB disconnect, device number 55 [ 597.817813][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 597.988299][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 597.995373][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.005939][ T5957] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 598.021294][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 598.031714][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 598.043557][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 598.055382][ T9] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 598.068271][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.107115][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 598.118846][ T9] hub 4-1:1.0: probe with driver hub failed with error -5 [ 598.143245][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 598.152172][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 598.163366][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 598.180270][ T5957] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 598.195206][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 598.201607][ T5957] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.228012][ T5957] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 598.258829][ T5957] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 598.278416][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.286824][ T5957] usb 2-1: Product: syz [ 598.296828][ T5957] usb 2-1: Manufacturer: syz [ 598.305138][ T5957] usb 2-1: SerialNumber: syz [ 598.314082][ T5957] usb 2-1: config 0 descriptor?? [ 598.322371][ T5957] usb-storage 2-1:0.0: USB Mass Storage device detected [ 598.355804][ T5957] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 598.542486][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 598.614497][T12560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.633836][T12560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.657397][T12560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2320'. [ 598.682767][T12560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.700786][T12560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.720880][ T5931] usb 4-1: USB disconnect, device number 49 [ 598.733558][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.733947][ T5917] usb 2-1: USB disconnect, device number 56 [ 598.750317][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 598.764893][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 598.791969][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.838395][ T9] usb 5-1: config 0 descriptor?? [ 599.894138][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 600.034686][ T9] usb 2-1: device descriptor read/64, error -71 [ 600.274620][ T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 600.405016][ T9] usb 2-1: device descriptor read/64, error -71 [ 600.515846][ T9] usb usb2-port1: attempt power cycle [ 600.595679][ T5917] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 600.748567][ T5917] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 600.762087][ T5917] usb 4-1: config 1 has no interface number 0 [ 600.769460][ T5917] usb 4-1: config 1 interface 105 has no altsetting 0 [ 600.784446][ T5917] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 600.797310][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.805838][ T5917] usb 4-1: Product: syz [ 600.818083][ T5917] usb 4-1: Manufacturer: syz [ 600.822746][ T5917] usb 4-1: SerialNumber: syz [ 600.876384][ T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 600.903981][ T9] usb 2-1: device descriptor read/8, error -71 [ 601.157052][ T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 601.197837][ T9] usb 2-1: device descriptor read/8, error -71 [ 601.308009][ T9] usb usb2-port1: unable to enumerate USB device [ 601.683719][ T5917] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 601.699496][ T5917] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: 0 [ 601.918888][T12603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.928493][ T5957] usb 5-1: USB disconnect, device number 26 [ 601.982441][T12603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.042254][ T5917] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 602.105209][ T5917] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f [ 602.140391][ T5917] usb 4-1: USB disconnect, device number 50 [ 602.163464][ T5917] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 602.261521][ T5917] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 602.280437][ T5917] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 602.300796][ T5917] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 602.356826][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2338'. [ 602.400093][T12615] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2338'. [ 602.781669][ T5917] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 602.956033][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 602.972528][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 602.975717][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.023857][ T5917] usb 4-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 603.057438][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.077702][ T5917] usb 4-1: config 0 descriptor?? [ 603.159273][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 603.176840][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.207823][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 603.229151][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 603.252977][ T5957] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 603.273046][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 603.302953][ T9] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 603.332477][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.375321][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 603.381297][ T9] hub 2-1:1.0: probe with driver hub failed with error -5 [ 603.411961][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 603.417646][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 603.436126][ T5957] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 603.456338][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.483985][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 603.492031][ T5957] usb 5-1: Product: syz [ 603.500613][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 603.508439][ T5957] usb 5-1: Manufacturer: syz [ 603.529048][T12621] binder: 12620:12621 ioctl c0306201 200000000080 returned -14 [ 603.530112][ T5957] usb 5-1: SerialNumber: syz [ 603.585290][T12639] binder: 12620:12639 ioctl c0306201 200000000080 returned -14 [ 603.682237][ T5917] viewsonic 0003:2133:0018.0047: hidraw0: USB HID v0.00 Device [HID 2133:0018] on usb-dummy_hcd.3-1/input0 [ 604.036900][ T5917] usb 2-1: USB disconnect, device number 61 [ 604.726648][ T5917] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 604.914192][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.924891][ T5917] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 604.939340][ T5917] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 604.951486][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.968299][ T5917] usb 2-1: config 0 descriptor?? [ 605.078252][ T56] block nbd0: Possible stuck request ffff888025a8e000: control (read@0,1024B). Runtime 120 seconds [ 605.089255][ T56] block nbd0: Possible stuck request ffff888025a8e1c0: control (read@1024,1024B). Runtime 120 seconds [ 605.100405][ T56] block nbd0: Possible stuck request ffff888025a8e380: control (read@2048,1024B). Runtime 120 seconds [ 605.111507][ T56] block nbd0: Possible stuck request ffff888025a8e540: control (read@3072,1024B). Runtime 120 seconds [ 605.403926][ T5957] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 605.426602][ T5957] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 605.446331][ T5957] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 605.464056][ T5957] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 605.475439][ T5957] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 605.492585][ T5957] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 605.518966][ T5957] usb 5-1: USB disconnect, device number 27 [ 605.576047][ T5952] usb 4-1: USB disconnect, device number 51 [ 605.667186][T12663] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 605.682393][T12663] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 606.021006][T12670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2348'. [ 606.110840][ T5952] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 606.270625][ T5952] usb 4-1: Using ep0 maxpacket: 16 [ 606.301414][ T5952] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 606.314682][ T5952] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.332822][ T5952] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 606.353633][ T5952] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 606.375809][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.390761][ T5952] usb 4-1: Product: syz [ 606.394977][ T5952] usb 4-1: Manufacturer: syz [ 606.406093][ T5952] usb 4-1: SerialNumber: syz [ 606.691703][ T5917] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 606.876614][ T5917] usb 5-1: Invalid ep0 maxpacket: 32 [ 606.930163][ T5952] usb 4-1: 0:2 : does not exist [ 606.941884][T12687] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 607.032413][ T5917] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 607.202798][ T5917] usb 5-1: Invalid ep0 maxpacket: 32 [ 607.208711][ T5917] usb usb5-port1: attempt power cycle [ 607.573730][ T5917] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 607.604594][ T5917] usb 5-1: Invalid ep0 maxpacket: 32 [ 607.637157][ T5952] usb 4-1: USB disconnect, device number 52 [ 607.682599][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 607.764340][ T5917] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 607.799256][ T5917] usb 5-1: Invalid ep0 maxpacket: 32 [ 607.807975][ T5917] usb usb5-port1: unable to enumerate USB device [ 608.042114][ T5917] usb 2-1: USB disconnect, device number 62 [ 608.378879][T12696] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 608.526187][ T5917] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 608.715016][ T5917] usb 4-1: config 5 has an invalid interface number: 23 but max is 0 [ 608.723328][ T5917] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 608.723863][ T5957] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 608.734603][ T5917] usb 4-1: config 5 has no interface number 0 [ 608.748288][ T5917] usb 4-1: config 5 interface 23 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 608.758494][ T5917] usb 4-1: config 5 interface 23 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 608.771806][ T5917] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=f1.4a [ 608.781372][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.925241][ T5957] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 608.939171][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.947880][ T5957] usb 2-1: Product: syz [ 608.952206][ T5957] usb 2-1: Manufacturer: syz [ 608.956826][ T5957] usb 2-1: SerialNumber: syz [ 609.020367][T12694] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2355'. [ 609.030237][T12694] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2355'. [ 609.045122][T12694] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2355'. [ 609.057201][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2355'. [ 609.069217][ T930] usb 4-1: USB disconnect, device number 53 [ 609.969724][ T930] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 610.145753][ T930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.157028][ T930] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 610.167386][ T930] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 610.176868][ T930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.194374][ T930] usb 4-1: config 0 descriptor?? [ 610.196131][ T5957] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 610.228895][ T5957] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 610.239928][ T5957] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 610.258280][ T5957] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 611.527227][ T930] usb 2-1: USB disconnect, device number 63 [ 613.116046][T12722] loop2: detected capacity change from 0 to 7 [ 613.146362][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 613.155895][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 613.166891][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 613.176208][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 613.186415][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 613.195627][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 613.203998][ T5952] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 613.211127][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 613.220856][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 613.229472][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 613.238795][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 613.250981][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 613.260203][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 613.268485][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 613.277659][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 613.286131][ T5859] ldm_validate_partition_table(): Disk read failed. [ 613.297509][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 613.306754][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 613.316235][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 613.325485][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 613.333813][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 613.343144][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 613.356002][ T5859] Dev loop2: unable to read RDB block 0 [ 613.367554][ T5952] usb 2-1: Using ep0 maxpacket: 16 [ 613.376608][ T5952] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 613.394530][ T5952] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 613.404723][ T5917] usb 4-1: USB disconnect, device number 54 [ 613.415805][ T5859] loop2: unable to read partition table [ 613.427722][ T5952] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 613.438997][ T5859] loop2: partition table beyond EOD, truncated [ 613.455535][ T5952] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 613.459218][T12722] ldm_validate_partition_table(): Disk read failed. [ 613.468008][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.500553][T12722] Dev loop2: unable to read RDB block 0 [ 613.504088][ T5952] usb 2-1: Product: syz [ 613.519825][T12722] loop2: unable to read partition table [ 613.526935][ T5952] usb 2-1: Manufacturer: syz [ 613.534995][ T5952] usb 2-1: SerialNumber: syz [ 613.538548][T12722] loop2: partition table beyond EOD, truncated [ 613.566414][T12722] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 613.611111][ T5233] ldm_validate_partition_table(): Disk read failed. [ 613.625897][ T5233] Dev loop2: unable to read RDB block 0 [ 613.635821][ T5233] loop2: unable to read partition table [ 613.648856][ T5233] loop2: partition table beyond EOD, truncated [ 613.700839][T12730] overlayfs: missing 'lowerdir' [ 614.022626][ T5952] usb 2-1: 0:2 : does not exist [ 614.210141][T12735] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 614.244523][ T5957] IPVS: starting estimator thread 0... [ 614.360307][T12737] IPVS: using max 28 ests per chain, 67200 per kthread [ 614.648275][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 614.749488][ T5952] usb 2-1: USB disconnect, device number 64 [ 614.785795][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 614.867370][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 614.882079][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.897610][ T10] usb 5-1: Product: syz [ 614.902607][ T10] usb 5-1: Manufacturer: syz [ 614.907450][ T10] usb 5-1: SerialNumber: syz [ 616.153689][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 616.171052][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 616.181277][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 616.198376][ T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 616.895176][ T5952] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 617.048949][ T5952] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 617.067525][ T5952] usb 2-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00 [ 617.079625][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.094372][ T5952] usb 2-1: config 0 descriptor?? [ 617.454127][ T10] usb 5-1: USB disconnect, device number 32 [ 617.523325][ T5952] hid (null): invalid report_size 134283244 [ 617.732695][ T930] usb 2-1: USB disconnect, device number 65 [ 617.887387][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 618.037861][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 618.066162][ T10] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 618.077815][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.099021][ T10] usb 5-1: config 0 descriptor?? [ 618.108911][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 618.466520][T12763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 618.558726][ T5952] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 618.719322][ T5952] usb 2-1: Using ep0 maxpacket: 32 [ 618.732804][ T5952] usb 2-1: config 0 has an invalid interface number: 152 but max is 0 [ 618.746008][ T5952] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.765958][ T5952] usb 2-1: config 0 has no interface number 0 [ 618.775495][ T5952] usb 2-1: config 0 interface 152 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 618.807282][ T5952] usb 2-1: config 0 interface 152 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 618.828163][ T5952] usb 2-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice= 6.d2 [ 618.838240][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.858499][ T5952] usb 2-1: config 0 descriptor?? [ 618.883943][ T5952] s2255 2-1:0.152: Could not find bulk-in endpoint [ 618.890994][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 618.904202][ T5952] Sensoray 2255 driver load failed: 0xfffffff4 [ 618.915913][ T5952] s2255 2-1:0.152: probe with driver s2255 failed with error -12 [ 619.063099][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.085888][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.114188][ T5952] usb 2-1: USB disconnect, device number 66 [ 619.127003][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 619.146747][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.167630][ T9] usb 4-1: config 0 descriptor?? [ 619.742449][ T10] gspca_nw80x: reg_w err -71 [ 619.747238][ T10] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 619.807236][T12771] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 619.808364][ T9] usbhid 4-1:0.0: can't add hid device: -32 [ 619.821650][ T10] usb 5-1: USB disconnect, device number 33 [ 619.847981][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 619.859852][T12771] FAULT_INJECTION: forcing a failure. [ 619.859852][T12771] name failslab, interval 1, probability 0, space 0, times 0 [ 619.900943][ T9] usb 4-1: USB disconnect, device number 55 [ 619.918219][T12771] CPU: 1 UID: 0 PID: 12771 Comm: syz.1.2385 Not tainted syzkaller #0 PREEMPT(full) [ 619.918250][T12771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 619.918263][T12771] Call Trace: [ 619.918271][T12771] [ 619.918281][T12771] dump_stack_lvl+0x189/0x250 [ 619.918309][T12771] ? __pfx____ratelimit+0x10/0x10 [ 619.918339][T12771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.918360][T12771] ? __pfx__printk+0x10/0x10 [ 619.918397][T12771] ? __pfx___might_resched+0x10/0x10 [ 619.918429][T12771] should_fail_ex+0x414/0x560 [ 619.918460][T12771] should_failslab+0xa8/0x100 [ 619.918489][T12771] kmem_cache_alloc_noprof+0x74/0x6e0 [ 619.918512][T12771] ? security_inode_alloc+0x39/0x330 [ 619.918559][T12771] security_inode_alloc+0x39/0x330 [ 619.918593][T12771] inode_init_always_gfp+0x9ed/0xdc0 [ 619.918629][T12771] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 619.918653][T12771] alloc_inode+0x82/0x1b0 [ 619.918682][T12771] new_inode+0x22/0x170 [ 619.918715][T12771] shmem_get_inode+0x346/0xe90 [ 619.918755][T12771] shmem_mknod+0x18c/0x3e0 [ 619.918790][T12771] vfs_create+0x24e/0x400 [ 619.918819][T12771] ovl_do_create+0x8d/0xd0 [ 619.918843][T12771] ovl_create_real+0x226/0x820 [ 619.918867][T12771] ? __pfx_ovl_create_real+0x10/0x10 [ 619.918889][T12771] ? d_lookup+0x8a/0xa0 [ 619.918908][T12771] ? lookup_one+0x163/0x280 [ 619.918933][T12771] ovl_create_or_link+0x625/0x1410 [ 619.918980][T12771] ? __pfx_ovl_create_or_link+0x10/0x10 [ 619.919008][T12771] ? __lock_acquire+0xab9/0xd20 [ 619.919056][T12771] ? inode_init_owner+0x1ee/0x3a0 [ 619.919085][T12771] ovl_create_object+0x234/0x310 [ 619.919112][T12771] ? __pfx_ovl_create_object+0x10/0x10 [ 619.919129][T12771] ? make_vfsgid+0x49/0xa0 [ 619.919149][T12771] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 619.919183][T12771] ? inode_permission+0x149/0x470 [ 619.919214][T12771] ? __pfx_ovl_permission+0x10/0x10 [ 619.919239][T12771] ? bpf_lsm_inode_create+0x9/0x20 [ 619.919267][T12771] ? __pfx_ovl_create+0x10/0x10 [ 619.919287][T12771] path_openat+0x14f4/0x3830 [ 619.919356][T12771] ? __pfx_path_openat+0x10/0x10 [ 619.919405][T12771] do_filp_open+0x1fa/0x410 [ 619.919425][T12771] ? __lock_acquire+0xab9/0xd20 [ 619.919449][T12771] ? __pfx_do_filp_open+0x10/0x10 [ 619.919510][T12771] ? _raw_spin_unlock+0x28/0x50 [ 619.919536][T12771] ? alloc_fd+0x64c/0x6c0 [ 619.919586][T12771] do_sys_openat2+0x121/0x1c0 [ 619.919610][T12771] ? __pfx_do_sys_openat2+0x10/0x10 [ 619.919631][T12771] ? ksys_write+0x22a/0x250 [ 619.919658][T12771] ? __pfx_ksys_write+0x10/0x10 [ 619.919687][T12771] __x64_sys_open+0x11e/0x150 [ 619.919713][T12771] do_syscall_64+0xfa/0xfa0 [ 619.919744][T12771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.919764][T12771] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 619.919784][T12771] ? clear_bhb_loop+0x60/0xb0 [ 619.919809][T12771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.919829][T12771] RIP: 0033:0x7f423cb8eba9 [ 619.919850][T12771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.919868][T12771] RSP: 002b:00007f423da8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 619.919891][T12771] RAX: ffffffffffffffda RBX: 00007f423cdd5fa0 RCX: 00007f423cb8eba9 [ 619.919906][T12771] RDX: 1df2a23c5997fa5f RSI: 0000000000080242 RDI: 0000200000000580 [ 619.919921][T12771] RBP: 00007f423da8b090 R08: 0000000000000000 R09: 0000000000000000 [ 619.919935][T12771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 619.919947][T12771] R13: 00007f423cdd6038 R14: 00007f423cdd5fa0 R15: 00007ffc413800e8 [ 619.919986][T12771] [ 620.274895][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.053949][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 621.154115][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 621.206621][ T9] usb 2-1: config 0 has an invalid interface number: 118 but max is 0 [ 621.219871][ T9] usb 2-1: config 0 has no interface number 0 [ 621.231067][ T9] usb 2-1: too many endpoints for config 0 interface 118 altsetting 10: 56, using maximum allowed: 30 [ 621.261397][ T9] usb 2-1: config 0 interface 118 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 621.285032][ T9] usb 2-1: config 0 interface 118 has no altsetting 0 [ 621.292117][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 621.309061][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.321550][ T9] usb 2-1: config 0 descriptor?? [ 621.334945][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 621.344502][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.352548][ T10] usb 5-1: Product: syz [ 621.358313][ T10] usb 5-1: Manufacturer: syz [ 621.362969][ T10] usb 5-1: SerialNumber: syz [ 621.553231][ T9] usb 2-1: string descriptor 0 read error: -71 [ 621.582927][ T9] cp210x 2-1:0.118: cp210x converter detected [ 621.591718][ T9] cp210x 2-1:0.118: failed to get vendor val 0x370b size 1: -71 [ 621.600193][ T9] cp210x 2-1:0.118: querying part number failed [ 621.629674][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 621.656893][ T9] usb 2-1: USB disconnect, device number 67 [ 621.681484][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 621.707360][ T9] cp210x 2-1:0.118: device disconnected [ 622.506610][ T5931] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 622.595760][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 622.615022][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 622.626600][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 622.647979][ T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 622.664041][ T5931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.683216][ T5931] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 622.701644][ T5931] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 622.711340][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.733706][ T5931] usb 2-1: config 0 descriptor?? [ 623.945718][ T5931] usb 5-1: USB disconnect, device number 34 [ 624.258326][T12808] overlayfs: failed to resolve './file1': -2 [ 624.791085][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 624.947197][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.965363][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.972187][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.982212][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.993427][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 625.003235][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.019879][ T9] usb 4-1: config 0 descriptor?? [ 625.651925][ T9] usbhid 4-1:0.0: can't add hid device: -32 [ 625.661716][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 625.685124][ T9] usb 4-1: USB disconnect, device number 56 [ 625.833442][ T5931] usb 2-1: USB disconnect, device number 68 [ 626.284048][ T5931] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 626.444065][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 626.451224][ T5931] usb 2-1: config index 0 descriptor too short (expected 58660, got 36) [ 626.460560][ T5931] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 626.468991][ T5931] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 626.479045][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.490549][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.500904][ T5931] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 626.510524][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.522249][ T5931] usb 2-1: config 0 descriptor?? [ 626.654587][ T5917] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 626.814893][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 626.822533][ T5917] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 626.839771][ T5917] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.853553][ T5917] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 626.872698][ T5917] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 626.883672][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.896159][ T5917] usb 4-1: Product: syz [ 626.900397][ T5917] usb 4-1: Manufacturer: syz [ 626.905847][ T5917] usb 4-1: SerialNumber: syz [ 626.956953][ T5931] usbhid 2-1:0.0: can't add hid device: -71 [ 626.969754][ T5931] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 626.989025][ T5931] usb 2-1: USB disconnect, device number 69 [ 627.418504][ T5917] usb 4-1: 0:2 : does not exist [ 627.510898][T12846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2409'. [ 627.520267][T12846] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2409'. [ 627.720198][T12851] netlink: 580 bytes leftover after parsing attributes in process `syz.1.2411'. [ 628.150032][ T5917] usb 4-1: USB disconnect, device number 57 [ 628.507815][ T930] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 628.672969][ T930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.698354][ T930] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 628.709941][ T930] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 628.720482][ T930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.736885][ T930] usb 2-1: config 0 descriptor?? [ 629.076200][T12869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 629.479528][ T930] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 629.644019][ T930] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 629.663866][ T930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.682462][ T930] usb 5-1: Product: syz [ 629.691140][ T930] usb 5-1: Manufacturer: syz [ 629.700331][ T930] usb 5-1: SerialNumber: syz [ 630.178592][T12339] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 630.190861][T12339] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 630.199628][T12339] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 630.210522][T12339] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 630.220126][T12339] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 630.323356][T12885] wg0 speed is unknown, defaulting to 1000 [ 630.745994][T12885] chnl_net:caif_netlink_parms(): no params data found [ 630.869647][T12885] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.877011][T12885] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.884790][T12885] bridge_slave_0: entered allmulticast mode [ 630.892926][T12885] bridge_slave_0: entered promiscuous mode [ 630.911436][T12885] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.918834][T12885] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.926709][T12885] bridge_slave_1: entered allmulticast mode [ 630.935237][T12885] bridge_slave_1: entered promiscuous mode [ 630.953921][ T930] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 630.966136][ T930] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 630.977778][ T930] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 630.995649][ T930] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 631.019330][T12885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.035414][T12885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.075786][T12885] team0: Port device team_slave_0 added [ 631.085281][T12885] team0: Port device team_slave_1 added [ 631.124024][T12885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.131103][T12885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.157236][ C1] vkms_vblank_simulate: vblank timer overrun [ 631.164338][T12885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.178367][T12885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.185677][T12885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.211595][ C1] vkms_vblank_simulate: vblank timer overrun [ 631.217978][T12885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.270379][T12885] hsr_slave_0: entered promiscuous mode [ 631.277952][T12885] hsr_slave_1: entered promiscuous mode [ 631.284695][T12885] debugfs: 'hsr0' already exists in 'hsr' [ 631.290532][T12885] Cannot create hsr debugfs directory [ 631.475684][T12885] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.555686][T12885] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.653619][T12885] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.726594][T12885] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.806843][ T5931] usb 2-1: USB disconnect, device number 70 [ 631.996457][T12900] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 632.008906][T12900] FAULT_INJECTION: forcing a failure. [ 632.008906][T12900] name failslab, interval 1, probability 0, space 0, times 0 [ 632.023598][T12900] CPU: 1 UID: 0 PID: 12900 Comm: syz.2.2425 Not tainted syzkaller #0 PREEMPT(full) [ 632.023626][T12900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 632.023639][T12900] Call Trace: [ 632.023648][T12900] [ 632.023657][T12900] dump_stack_lvl+0x189/0x250 [ 632.023682][T12900] ? __pfx____ratelimit+0x10/0x10 [ 632.023711][T12900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.023731][T12900] ? __pfx__printk+0x10/0x10 [ 632.023772][T12900] ? __pfx___might_resched+0x10/0x10 [ 632.023802][T12900] should_fail_ex+0x414/0x560 [ 632.023833][T12900] should_failslab+0xa8/0x100 [ 632.023861][T12900] __kmalloc_noprof+0xcb/0x7f0 [ 632.023882][T12900] ? security_inode_init_security+0x107/0x3f0 [ 632.023914][T12900] ? __pfx___get_acl+0x10/0x10 [ 632.023941][T12900] security_inode_init_security+0x107/0x3f0 [ 632.023974][T12900] ? __pfx_shmem_initxattrs+0x10/0x10 [ 632.024007][T12900] ? __pfx_security_inode_init_security+0x10/0x10 [ 632.024038][T12900] ? set_cached_acl+0xd2/0x180 [ 632.024059][T12900] ? simple_acl_create+0x184/0x1b0 [ 632.024088][T12900] shmem_mknod+0x1f6/0x3e0 [ 632.024123][T12900] vfs_create+0x24e/0x400 [ 632.024154][T12900] ovl_do_create+0x8d/0xd0 [ 632.024178][T12900] ovl_create_real+0x226/0x820 [ 632.024202][T12900] ? __pfx_ovl_create_real+0x10/0x10 [ 632.024223][T12900] ? d_lookup+0x8a/0xa0 [ 632.024244][T12900] ? lookup_one+0x163/0x280 [ 632.024266][T12900] ovl_create_or_link+0x625/0x1410 [ 632.024312][T12900] ? __pfx_ovl_create_or_link+0x10/0x10 [ 632.024340][T12900] ? __lock_acquire+0xab9/0xd20 [ 632.024388][T12900] ? inode_init_owner+0x1ee/0x3a0 [ 632.024427][T12900] ovl_create_object+0x234/0x310 [ 632.024453][T12900] ? __pfx_ovl_create_object+0x10/0x10 [ 632.024472][T12900] ? make_vfsgid+0x49/0xa0 [ 632.024493][T12900] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 632.024526][T12900] ? inode_permission+0x149/0x470 [ 632.024552][T12900] ? __pfx_ovl_permission+0x10/0x10 [ 632.024576][T12900] ? bpf_lsm_inode_create+0x9/0x20 [ 632.024605][T12900] ? __pfx_ovl_create+0x10/0x10 [ 632.024626][T12900] path_openat+0x14f4/0x3830 [ 632.024703][T12900] ? __pfx_path_openat+0x10/0x10 [ 632.024752][T12900] do_filp_open+0x1fa/0x410 [ 632.024772][T12900] ? __lock_acquire+0xab9/0xd20 [ 632.024796][T12900] ? __pfx_do_filp_open+0x10/0x10 [ 632.024849][T12900] ? _raw_spin_unlock+0x28/0x50 [ 632.024876][T12900] ? alloc_fd+0x64c/0x6c0 [ 632.024919][T12900] do_sys_openat2+0x121/0x1c0 [ 632.024944][T12900] ? __pfx_do_sys_openat2+0x10/0x10 [ 632.024965][T12900] ? ksys_write+0x22a/0x250 [ 632.024993][T12900] ? __pfx_ksys_write+0x10/0x10 [ 632.025023][T12900] __x64_sys_open+0x11e/0x150 [ 632.025049][T12900] do_syscall_64+0xfa/0xfa0 [ 632.025078][T12900] ? lockdep_hardirqs_on+0x9c/0x150 [ 632.025108][T12900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.025128][T12900] ? clear_bhb_loop+0x60/0xb0 [ 632.025154][T12900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.025174][T12900] RIP: 0033:0x7f5f3898eba9 [ 632.025194][T12900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.025212][T12900] RSP: 002b:00007f5f3983e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 632.025236][T12900] RAX: ffffffffffffffda RBX: 00007f5f38bd5fa0 RCX: 00007f5f3898eba9 [ 632.025251][T12900] RDX: 1df2a23c5997fa5f RSI: 0000000000080242 RDI: 0000200000000580 [ 632.025266][T12900] RBP: 00007f5f3983e090 R08: 0000000000000000 R09: 0000000000000000 [ 632.025279][T12900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 632.025292][T12900] R13: 00007f5f38bd6038 R14: 00007f5f38bd5fa0 R15: 00007fff7fda6de8 [ 632.025330][T12900] [ 632.027645][T12885] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 632.194333][ T5931] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 632.296149][ T9780] usb 5-1: USB disconnect, device number 35 [ 632.298119][ T5875] Bluetooth: hci5: command tx timeout [ 632.335880][T12885] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 632.506409][ T5931] usb 2-1: Using ep0 maxpacket: 16 [ 632.514949][ T5931] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 632.524798][ T5931] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.537538][ T5931] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 632.544262][T12885] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 632.566913][T12885] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 632.576852][ T5931] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 632.593306][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.601991][ T5931] usb 2-1: Product: syz [ 632.606699][ T5931] usb 2-1: Manufacturer: syz [ 632.611874][ T5931] usb 2-1: SerialNumber: syz [ 632.787964][T12885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.814765][T12885] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.834640][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.841983][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.882891][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.890220][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.101027][ T5931] usb 2-1: 0:2 : does not exist [ 633.212232][T12885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.275817][T12885] veth0_vlan: entered promiscuous mode [ 633.290554][T12885] veth1_vlan: entered promiscuous mode [ 633.333488][T12885] veth0_macvtap: entered promiscuous mode [ 633.350051][T12885] veth1_macvtap: entered promiscuous mode [ 633.373623][T12885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.396889][T12885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.414763][ T3492] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.428811][ T3492] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.442592][ T3492] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.453209][ T3492] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.546078][ T5931] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 633.622308][ T3569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.638490][ T5931] usb 2-1: USB disconnect, device number 71 [ 633.642255][ T3569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.792513][T12384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.807864][T12384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.187712][ T5910] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 634.347293][ T5910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.357935][ T5910] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 634.366965][ T5910] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 634.376444][ T5931] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 634.384182][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.405409][ T5910] usb 5-1: config 0 descriptor?? [ 634.418292][ T5875] Bluetooth: hci5: command tx timeout [ 634.562861][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.573977][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.585702][ T5931] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 634.595340][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.609711][ T5931] usb 2-1: config 0 descriptor?? [ 635.224274][ T56] block nbd0: Possible stuck request ffff888025a8e000: control (read@0,1024B). Runtime 150 seconds [ 635.235906][ T56] block nbd0: Possible stuck request ffff888025a8e1c0: control (read@1024,1024B). Runtime 150 seconds [ 635.247618][ T56] block nbd0: Possible stuck request ffff888025a8e380: control (read@2048,1024B). Runtime 150 seconds [ 635.250180][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 635.259227][ T5931] usbhid 2-1:0.0: can't add hid device: -32 [ 635.272653][ T56] block nbd0: Possible stuck request ffff888025a8e540: control (read@3072,1024B). Runtime 150 seconds [ 635.284184][ T5931] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 635.300659][ T5931] usb 2-1: USB disconnect, device number 72 [ 635.433006][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 635.442268][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.451043][ T10] usb 4-1: Product: syz [ 635.456578][ T10] usb 4-1: Manufacturer: syz [ 635.461705][ T10] usb 4-1: SerialNumber: syz [ 635.697740][T12947] loop2: detected capacity change from 0 to 8 [ 635.707711][T12947] Dev loop2: unable to read RDB block 8 [ 635.714017][T12947] loop2: unable to read partition table [ 635.720690][T12947] loop2: partition table beyond EOD, truncated [ 635.727006][T12947] loop_reread_partitions: partition scan of loop2 (þ被xü^>Ñà– ) failed (rc=-5) [ 635.852669][T12950] netlink: 'syz.2.2436': attribute type 1 has an invalid length. [ 635.865456][T12950] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2436'. [ 635.952763][T12950] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 635.973543][T12954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2438'. [ 636.502290][ T5875] Bluetooth: hci5: command tx timeout [ 636.694572][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 636.706833][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 636.718098][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 636.729150][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 637.459493][ T10] usb 5-1: USB disconnect, device number 36 [ 637.843833][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 638.008790][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.020657][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.031209][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 638.041771][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.043188][ T930] usb 4-1: USB disconnect, device number 58 [ 638.082836][ T10] usb 5-1: config 0 descriptor?? [ 638.132145][T12979] netlink: 'syz.3.2446': attribute type 1 has an invalid length. [ 638.140815][T12979] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2446'. [ 638.299713][T12986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2448'. [ 638.309400][T12986] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2448'. [ 638.586205][ T5875] Bluetooth: hci5: command tx timeout [ 638.597391][T13000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 638.705871][ T10] usbhid 5-1:0.0: can't add hid device: -32 [ 638.712219][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 638.724712][ T10] usb 5-1: USB disconnect, device number 37 [ 638.927299][ T5877] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 639.097487][ T5877] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.107826][ T5877] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 639.118342][ T5877] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 639.128665][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.141305][ T5877] usb 2-1: config 0 descriptor?? [ 639.545912][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 639.712868][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 639.725321][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.733913][ T10] usb 5-1: Product: syz [ 639.739462][ T10] usb 5-1: Manufacturer: syz [ 639.744089][ T10] usb 5-1: SerialNumber: syz [ 639.928865][T13021] XFS (nbd2): no-recovery mounts must be read-only. [ 640.452187][T13024] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 641.028082][ T5877] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 641.185294][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.197005][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.207305][ T5877] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 641.216482][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.227891][ T5877] usb 4-1: config 0 descriptor?? [ 641.589750][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 641.605567][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 641.618095][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 641.630871][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 641.643533][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 641.649819][ T5877] cp2112 0003:10C4:EA90.0049: unknown main item tag 0x0 [ 641.662788][ T5877] cp2112 0003:10C4:EA90.0049: unknown main item tag 0x0 [ 641.664172][ T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 641.673485][ T5877] cp2112 0003:10C4:EA90.0049: unknown main item tag 0x0 [ 641.686290][ T5877] cp2112 0003:10C4:EA90.0049: unknown main item tag 0x0 [ 641.691233][ T10] usb 5-1: USB disconnect, device number 38 [ 641.704698][ T5877] cp2112 0003:10C4:EA90.0049: unknown main item tag 0x0 [ 641.716906][ T5877] cp2112 0003:10C4:EA90.0049: unknown main item tag 0x0 [ 641.724574][ T5877] cp2112 0003:10C4:EA90.0049: unknown main item tag 0x0 [ 641.739168][ T5877] cp2112 0003:10C4:EA90.0049: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 641.844316][ T5877] cp2112 0003:10C4:EA90.0049: error requesting version [ 641.858731][ T5877] cp2112 0003:10C4:EA90.0049: probe with driver cp2112 failed with error -32 [ 642.201834][ T5877] usb 2-1: USB disconnect, device number 73 [ 642.440210][ T5875] Bluetooth: hci3: command 0x0406 tx timeout [ 643.050696][T13057] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 643.061231][T13057] overlayfs: missing 'lowerdir' [ 643.070684][T13057] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 643.228200][T13059] block nbd4: Attempted send on invalid socket [ 643.239389][T13059] blk_print_req_error: 40 callbacks suppressed [ 643.239414][T13059] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 643.257937][T13059] block nbd4: Attempted send on invalid socket [ 643.264409][T13059] I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 643.273849][T13059] Mount JFS Failure: -5 [ 643.279579][T13059] jfs_mount failed w/return code = -5 [ 643.339332][T13063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.359453][T13063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.592531][ T930] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 643.751943][ T930] usb 5-1: Using ep0 maxpacket: 32 [ 643.762655][ T930] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 643.771348][ T930] usb 5-1: config 0 has no interface number 0 [ 643.781732][ T930] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 643.784696][ T10] usb 4-1: USB disconnect, device number 59 [ 643.792425][ T930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.818290][ T930] usb 5-1: Product: syz [ 643.823597][ T930] usb 5-1: Manufacturer: syz [ 643.828716][ T930] usb 5-1: SerialNumber: syz [ 643.835752][ T5877] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 643.866061][ T930] usb 5-1: config 0 descriptor?? [ 643.879190][ T930] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 644.042278][ T5877] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 644.062796][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.072001][ T5877] usb 2-1: Product: syz [ 644.079075][ T930] usb 5-1: qt2_attach - failed to power on unit: -71 [ 644.091405][ T5877] usb 2-1: Manufacturer: syz [ 644.101237][ T930] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 644.111873][ T5877] usb 2-1: SerialNumber: syz [ 644.136889][ T930] usb 5-1: USB disconnect, device number 39 [ 644.172650][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 644.354137][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.364633][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 644.379002][ T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 644.394437][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.409986][ T10] usb 4-1: config 0 descriptor?? [ 645.446573][T13090] FAULT_INJECTION: forcing a failure. [ 645.446573][T13090] name failslab, interval 1, probability 0, space 0, times 0 [ 645.459525][T13090] CPU: 0 UID: 0 PID: 13090 Comm: syz.2.2481 Not tainted syzkaller #0 PREEMPT(full) [ 645.459554][T13090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 645.459568][T13090] Call Trace: [ 645.459576][T13090] [ 645.459585][T13090] dump_stack_lvl+0x189/0x250 [ 645.459612][T13090] ? __pfx____ratelimit+0x10/0x10 [ 645.459643][T13090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 645.459663][T13090] ? __pfx__printk+0x10/0x10 [ 645.459699][T13090] ? __pfx___might_resched+0x10/0x10 [ 645.459729][T13090] should_fail_ex+0x414/0x560 [ 645.459760][T13090] should_failslab+0xa8/0x100 [ 645.459786][T13090] __kmalloc_noprof+0xcb/0x7f0 [ 645.459806][T13090] ? kfree+0x4d/0x6d0 [ 645.459822][T13090] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 645.459861][T13090] tomoyo_realpath_from_path+0xe3/0x5d0 [ 645.459892][T13090] ? tomoyo_domain+0xd9/0x130 [ 645.459919][T13090] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 645.459946][T13090] tomoyo_path_number_perm+0x1e8/0x5a0 [ 645.459976][T13090] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 645.460047][T13090] ? __fget_files+0x2a/0x420 [ 645.460080][T13090] ? __fget_files+0x3a0/0x420 [ 645.460105][T13090] ? __fget_files+0x2a/0x420 [ 645.460137][T13090] security_file_ioctl+0xcb/0x2d0 [ 645.460165][T13090] __se_sys_ioctl+0x47/0x170 [ 645.460190][T13090] do_syscall_64+0xfa/0xfa0 [ 645.460219][T13090] ? lockdep_hardirqs_on+0x9c/0x150 [ 645.460250][T13090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.460271][T13090] ? clear_bhb_loop+0x60/0xb0 [ 645.460297][T13090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.460316][T13090] RIP: 0033:0x7f5f3898eba9 [ 645.460345][T13090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.460365][T13090] RSP: 002b:00007f5f3983e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 645.460389][T13090] RAX: ffffffffffffffda RBX: 00007f5f38bd5fa0 RCX: 00007f5f3898eba9 [ 645.460404][T13090] RDX: 0000200000000240 RSI: 00000000ffff0000 RDI: 0000000000000005 [ 645.460418][T13090] RBP: 00007f5f3983e090 R08: 0000000000000000 R09: 0000000000000000 [ 645.460431][T13090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.460444][T13090] R13: 00007f5f38bd6038 R14: 00007f5f38bd5fa0 R15: 00007fff7fda6de8 [ 645.460478][T13090] [ 645.460488][T13090] ERROR: Out of memory at tomoyo_realpath_from_path. [ 645.971859][ T5877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 645.985101][ T5877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 645.997404][ T5877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 646.009622][ T5877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 646.020336][ T5877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 646.025001][ T5952] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 646.044341][ T5877] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 646.071133][ T5877] usb 2-1: USB disconnect, device number 74 [ 646.197386][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.208508][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.219154][ T5952] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 646.229748][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.246475][ T5952] usb 5-1: config 0 descriptor?? [ 646.592835][T13102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2485'. [ 646.602043][T13102] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2485'. [ 646.672106][ T5952] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 646.682764][ T5952] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 646.695258][ T5952] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 646.708268][ T5952] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 646.721955][ T5952] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 646.734372][ T5952] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 646.750669][ T5952] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 646.768504][ T5952] cp2112 0003:10C4:EA90.004A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 646.876401][ T5952] cp2112 0003:10C4:EA90.004A: error requesting version [ 646.889952][ T5952] cp2112 0003:10C4:EA90.004A: probe with driver cp2112 failed with error -32 [ 647.400679][T13068] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 647.463418][ T930] usb 4-1: USB disconnect, device number 60 [ 647.569092][T13068] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.579580][T13068] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 647.590905][T13068] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 647.604119][T13068] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 647.613356][T13068] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.623660][T13068] usb 2-1: config 0 descriptor?? [ 648.427696][T13121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 648.758849][T13068] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 648.781223][ T5952] usb 5-1: USB disconnect, device number 40 [ 648.922466][T13068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.932435][T13068] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 648.941549][T13068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.953113][T13068] usb 4-1: config 0 descriptor?? [ 648.964252][T13068] hub 4-1:0.0: bad descriptor, ignoring hub [ 648.970340][T13068] hub 4-1:0.0: probe with driver hub failed with error -5 [ 648.984098][T13068] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 649.163881][ T5952] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 649.186319][T13123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.196000][T13123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.267537][T13123] loop7: detected capacity change from 0 to 7 [ 649.293912][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 649.312274][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 649.321657][ C1] buffer_io_error: 40 callbacks suppressed [ 649.321675][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 649.336361][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 649.345681][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 649.354893][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 649.364205][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 649.364922][ T5952] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 649.380397][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 649.390400][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 649.400744][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.402213][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 649.417967][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 649.453457][ T5952] usb 5-1: Product: syz [ 649.471079][ T5952] usb 5-1: Manufacturer: syz [ 649.483474][ T5952] usb 5-1: SerialNumber: syz [ 649.497972][ T10] usb 4-1: USB disconnect, device number 61 [ 650.138047][ T10] usb 2-1: USB disconnect, device number 75 [ 650.196533][T13139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 650.293405][T13143] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 650.303694][T13143] FAULT_INJECTION: forcing a failure. [ 650.303694][T13143] name failslab, interval 1, probability 0, space 0, times 0 [ 650.316645][T13143] CPU: 1 UID: 0 PID: 13143 Comm: syz.3.2500 Not tainted syzkaller #0 PREEMPT(full) [ 650.316672][T13143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 650.316685][T13143] Call Trace: [ 650.316693][T13143] [ 650.316703][T13143] dump_stack_lvl+0x189/0x250 [ 650.316729][T13143] ? __pfx____ratelimit+0x10/0x10 [ 650.316759][T13143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 650.316778][T13143] ? __pfx__printk+0x10/0x10 [ 650.316812][T13143] ? __pfx___might_resched+0x10/0x10 [ 650.316844][T13143] should_fail_ex+0x414/0x560 [ 650.316874][T13143] should_failslab+0xa8/0x100 [ 650.316898][T13143] __kmalloc_noprof+0xcb/0x7f0 [ 650.316917][T13143] ? kfree+0x4d/0x6d0 [ 650.316933][T13143] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 650.316969][T13143] tomoyo_realpath_from_path+0xe3/0x5d0 [ 650.317010][T13143] tomoyo_check_open_permission+0x1c1/0x3b0 [ 650.317034][T13143] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 650.317056][T13143] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 650.317122][T13143] ? mnt_get_write_access+0x66/0x280 [ 650.317143][T13143] ? tomoyo_file_open+0x165/0x220 [ 650.317167][T13143] security_file_open+0xb1/0x270 [ 650.317191][T13143] do_dentry_open+0x384/0x13f0 [ 650.317226][T13143] ? vfs_open+0x31/0x340 [ 650.317258][T13143] vfs_open+0x3b/0x340 [ 650.317282][T13143] ? path_openat+0x2ecd/0x3830 [ 650.317306][T13143] path_openat+0x2ee5/0x3830 [ 650.317367][T13143] ? __pfx_path_openat+0x10/0x10 [ 650.317412][T13143] do_filp_open+0x1fa/0x410 [ 650.317431][T13143] ? __lock_acquire+0xab9/0xd20 [ 650.317457][T13143] ? __pfx_do_filp_open+0x10/0x10 [ 650.317505][T13143] ? _raw_spin_unlock+0x28/0x50 [ 650.317543][T13143] ? alloc_fd+0x64c/0x6c0 [ 650.317581][T13143] do_sys_openat2+0x121/0x1c0 [ 650.317604][T13143] ? __pfx_do_sys_openat2+0x10/0x10 [ 650.317624][T13143] ? ksys_write+0x22a/0x250 [ 650.317650][T13143] ? __pfx_ksys_write+0x10/0x10 [ 650.317675][T13143] __x64_sys_open+0x11e/0x150 [ 650.317699][T13143] do_syscall_64+0xfa/0xfa0 [ 650.317729][T13143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.317747][T13143] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 650.317765][T13143] ? clear_bhb_loop+0x60/0xb0 [ 650.317789][T13143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.317807][T13143] RIP: 0033:0x7f421818eba9 [ 650.317827][T13143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.317844][T13143] RSP: 002b:00007f4218f56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 650.317866][T13143] RAX: ffffffffffffffda RBX: 00007f42183d5fa0 RCX: 00007f421818eba9 [ 650.317881][T13143] RDX: 1df2a23c5997fa5f RSI: 0000000000080242 RDI: 0000200000000580 [ 650.317895][T13143] RBP: 00007f4218f56090 R08: 0000000000000000 R09: 0000000000000000 [ 650.317907][T13143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 650.317919][T13143] R13: 00007f42183d6038 R14: 00007f42183d5fa0 R15: 00007ffc2b3404d8 [ 650.317953][T13143] [ 650.317962][T13143] ERROR: Out of memory at tomoyo_realpath_from_path. [ 650.924829][ T9780] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 651.084527][ T9780] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.095957][ T9780] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.106351][ T9780] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 651.115763][ T9780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.133136][ T9780] usb 4-1: config 0 descriptor?? [ 651.355143][ T5952] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 651.368641][ T5952] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 651.388064][ T5952] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 651.400200][ T5952] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 651.410704][ T5952] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 651.419818][ T9] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 651.429111][ T5952] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 651.444236][ T5952] usb 5-1: USB disconnect, device number 41 [ 651.552272][ T9780] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 651.559445][ T9780] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 651.567287][ T9780] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 651.576557][ T9780] cp2112 0003:10C4:EA90.004B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 651.589118][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 651.598189][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 651.608857][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.622617][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 651.635269][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 651.644741][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.653444][ T9] usb 2-1: Product: syz [ 651.657725][ T9] usb 2-1: Manufacturer: syz [ 651.662947][ T9] usb 2-1: SerialNumber: syz [ 651.749969][ T9780] cp2112 0003:10C4:EA90.004B: error requesting version [ 651.759899][ T9780] cp2112 0003:10C4:EA90.004B: probe with driver cp2112 failed with error -32 [ 652.157479][ T9] usb 2-1: 0:2 : does not exist [ 652.448765][T13166] overlayfs: missing 'workdir' [ 652.588739][T13169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2508'. [ 652.790770][ T9] usb 2-1: USB disconnect, device number 76 [ 652.835060][ T930] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 652.973976][ T930] usb 5-1: device descriptor read/64, error -71 [ 653.217654][ T930] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 653.364532][ T930] usb 5-1: device descriptor read/64, error -71 [ 653.476434][ T930] usb usb5-port1: attempt power cycle [ 653.707731][ T5952] usb 4-1: USB disconnect, device number 62 [ 653.815333][ T930] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 653.836365][ T930] usb 5-1: device descriptor read/8, error -71 [ 654.075309][ T930] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 654.096714][ T930] usb 5-1: device descriptor read/8, error -71 [ 654.115896][ T5952] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 654.218455][ T930] usb usb5-port1: unable to enumerate USB device [ 654.274209][ T5952] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 654.283775][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.293540][ T5952] usb 4-1: Product: syz [ 654.299065][ T5952] usb 4-1: Manufacturer: syz [ 654.303688][ T5952] usb 4-1: SerialNumber: syz [ 656.011836][T13197] netlink: 'syz.1.2518': attribute type 10 has an invalid length. [ 656.033682][T13197] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.043250][T13197] bond0: (slave team0): Enslaving as an active interface with an up link [ 656.117846][T13068] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 656.153584][ T5952] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 656.190162][ T5952] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 656.206650][ T5952] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 656.219470][ T5952] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 656.232056][ T5952] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 656.242568][ T5952] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 656.259787][ T5952] usb 4-1: USB disconnect, device number 63 [ 656.302164][T13068] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.313831][T13068] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 656.323168][T13068] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 656.332269][T13068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.342976][T13068] usb 5-1: config 0 descriptor?? [ 656.368163][ T31] INFO: task syz.0.1949:11485 blocked for more than 143 seconds. [ 656.376215][ T31] Not tainted syzkaller #0 [ 656.381588][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 656.392669][ T31] task:syz.0.1949 state:D stack:28232 pid:11485 tgid:11478 ppid:5861 task_flags:0x400140 flags:0x00004004 [ 656.406028][ T31] Call Trace: [ 656.409409][ T31] [ 656.412361][ T31] __schedule+0x1798/0x4cc0 [ 656.417050][ T31] ? __lock_acquire+0xab9/0xd20 [ 656.422140][ T9780] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 656.424542][ T31] ? __lock_acquire+0xab9/0xd20 [ 656.434784][ T31] ? __pfx___schedule+0x10/0x10 [ 656.439855][ T31] ? schedule+0x91/0x360 [ 656.444171][ T31] schedule+0x165/0x360 [ 656.448706][ T31] schedule_preempt_disabled+0x13/0x30 [ 656.454544][ T31] __mutex_lock+0x7e6/0x1350 [ 656.459266][ T31] ? __mutex_lock+0x5bb/0x1350 [ 656.464083][ T31] ? bdev_open+0xe0/0xd30 [ 656.468847][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 656.474361][ T31] ? alloc_file_pseudo_noaccount+0x203/0x2c0 [ 656.480674][ T31] ? disk_block_events+0xab/0x120 [ 656.485744][ T31] ? bdev_open+0xaf/0xd30 [ 656.490202][ T31] bdev_open+0xe0/0xd30 [ 656.494456][ T31] bdev_file_open_by_dev+0x1be/0x240 [ 656.500618][ T31] bdev_file_open_by_path+0x1cc/0x4d0 [ 656.506544][ T31] ? __pfx_bdev_file_open_by_path+0x10/0x10 [ 656.515080][ T31] btrfs_scan_one_device+0xa6/0x650 [ 656.520985][ T31] btrfs_get_tree+0x438/0x1830 [ 656.525783][ T31] ? apparmor_capable+0x137/0x1b0 [ 656.531536][ T31] vfs_get_tree+0x8f/0x2b0 [ 656.536002][ T31] do_new_mount+0x302/0xa10 [ 656.540633][ T31] ? apparmor_capable+0x137/0x1b0 [ 656.545783][ T31] ? __pfx_do_new_mount+0x10/0x10 [ 656.551047][ T31] ? ns_capable+0x8a/0xf0 [ 656.555437][ T31] ? kmem_cache_free+0x19a/0x690 [ 656.560623][ T31] __se_sys_mount+0x313/0x410 [ 656.565343][ T31] ? __pfx___se_sys_mount+0x10/0x10 [ 656.571004][ T31] ? do_syscall_64+0xbe/0xfa0 [ 656.576177][ T31] ? __x64_sys_mount+0x20/0xc0 [ 656.581130][ T31] do_syscall_64+0xfa/0xfa0 [ 656.585670][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.591659][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.597822][ T31] ? clear_bhb_loop+0x60/0xb0 [ 656.602934][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.609820][ T31] RIP: 0033:0x7fac7938eba9 [ 656.614979][ T31] RSP: 002b:00007fac7a26b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 656.625091][ T9780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.636133][ T31] RAX: ffffffffffffffda RBX: 00007fac795d6090 RCX: 00007fac7938eba9 [ 656.646332][ T31] RDX: 0000200000000200 RSI: 0000200000000300 RDI: 0000200000000280 [ 656.654444][ T9780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.654833][ T31] RBP: 00007fac79411e19 R08: 0000200000000380 R09: 0000000000000000 [ 656.674607][ T9780] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 656.678545][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.694647][ T9780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.697721][ T31] R13: 00007fac795d6128 R14: 00007fac795d6090 R15: 00007ffe579dfe48 [ 656.717004][ T31] [ 656.719067][ T9780] usb 2-1: config 0 descriptor?? [ 656.721593][ T31] [ 656.721593][ T31] Showing all locks held in the system: [ 656.735962][ T31] 1 lock held by khungtaskd/31: [ 656.742852][ T31] #0: ffffffff8e53c560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 656.753401][ T31] 3 locks held by kworker/u8:9/4927: [ 656.760286][ T31] 2 locks held by getty/5621: [ 656.765113][ T31] #0: ffff88803404e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 656.776663][ T31] #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 656.787831][ T31] 1 lock held by udevd/5863: [ 656.793093][ T31] #0: ffff8880254f9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 656.803257][ T31] 5 locks held by kworker/0:2/9780: [ 656.808909][ T31] #0: ffff8880216e5548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 656.821032][ T31] #1: ffffc90019e37ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 656.833455][ T31] #2: ffff8880283d0198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 656.842786][ T31] #3: ffff888031c8b198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 656.852991][ T31] #4: ffff888029b82160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 656.862718][ T31] 2 locks held by syz.0.1949/11485: [ 656.867961][ T31] #0: ffffffff8eaee628 (uuid_mutex){+.+.}-{4:4}, at: btrfs_get_tree+0x40d/0x1830 [ 656.877331][ T31] #1: ffff8880254f9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 656.888739][ T31] 2 locks held by kworker/u8:2/12384: [ 656.894155][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 656.904422][ T31] #1: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 656.913851][ T31] 1 lock held by syz.4.2517/13194: [ 656.919993][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 656.930905][ T31] [ 656.933341][ T31] ============================================= [ 656.933341][ T31] [ 656.942718][ T31] NMI backtrace for cpu 1 [ 656.942736][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 656.942759][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 656.942771][ T31] Call Trace: [ 656.942780][ T31] [ 656.942788][ T31] dump_stack_lvl+0x189/0x250 [ 656.942817][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.942836][ T31] ? __pfx__printk+0x10/0x10 [ 656.942878][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 656.942909][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 656.942937][ T31] ? __pfx__printk+0x10/0x10 [ 656.942970][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 656.942996][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 656.943023][ T31] watchdog+0xf60/0xfa0 [ 656.943063][ T31] ? watchdog+0x1e2/0xfa0 [ 656.943090][ T31] kthread+0x711/0x8a0 [ 656.943123][ T31] ? __pfx_watchdog+0x10/0x10 [ 656.943143][ T31] ? __pfx_kthread+0x10/0x10 [ 656.943172][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 656.943200][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.943236][ T31] ? __pfx_kthread+0x10/0x10 [ 656.943267][ T31] ret_from_fork+0x47c/0x820 [ 656.943293][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 656.943323][ T31] ? __switch_to_asm+0x39/0x70 [ 656.943345][ T31] ? __switch_to_asm+0x33/0x70 [ 656.943364][ T31] ? __pfx_kthread+0x10/0x10 [ 656.943394][ T31] ret_from_fork_asm+0x1a/0x30 [ 656.943433][ T31] [ 656.943441][ T31] Sending NMI from CPU 1 to CPUs 0: [ 657.090481][ C0] NMI backtrace for cpu 0 [ 657.090499][ C0] CPU: 0 UID: 0 PID: 12384 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 657.090520][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 657.090532][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 657.090561][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 657.090582][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 eb 89 a6 f5 cc [ 657.090597][ C0] RSP: 0018:ffffc9000b09e5d0 EFLAGS: 00000082 [ 657.090612][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: bc4f34eec9c12800 [ 657.090623][ C0] RDX: 0000000000000000 RSI: ffffffff8dcb0f29 RDI: ffffffff8c04f000 [ 657.090635][ C0] RBP: ffffffff8173fd35 R08: 0000000000000000 R09: 0000000000000000 [ 657.090646][ C0] R10: ffffc9000b09e7a8 R11: fffff52001613d01 R12: 0000000000000002 [ 657.090657][ C0] R13: ffffffff8e53c560 R14: 0000000000000000 R15: 0000000000000246 [ 657.090669][ C0] FS: 0000000000000000(0000) GS:ffff8881257b1000(0000) knlGS:0000000000000000 [ 657.090682][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 657.090694][ C0] CR2: 0000001b30223ffc CR3: 000000000e338000 CR4: 00000000003526f0 [ 657.090711][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 657.090722][ C0] DR3: 000000000000000c DR6: 00000000ffff4ff0 DR7: 0000000000000400 [ 657.090732][ C0] Call Trace: [ 657.090739][ C0] [ 657.090747][ C0] lock_acquire+0xe7/0x360 [ 657.090767][ C0] ? unwind_next_frame+0xa5/0x2390 [ 657.090789][ C0] ? __unwind_start+0xf8/0x760 [ 657.090809][ C0] ? unwind_next_frame+0xa5/0x2390 [ 657.090827][ C0] unwind_next_frame+0xc2/0x2390 [ 657.090846][ C0] ? unwind_next_frame+0xa5/0x2390 [ 657.090864][ C0] ? unwind_next_frame+0xa5/0x2390 [ 657.090885][ C0] ? unwind_next_frame+0xa5/0x2390 [ 657.090904][ C0] ? get_stack_info_noinstr+0x1b/0x130 [ 657.090926][ C0] __unwind_start+0x5b9/0x760 [ 657.090947][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 657.090969][ C0] arch_stack_walk+0xe4/0x150 [ 657.090993][ C0] ? __unwind_start+0xf8/0x760 [ 657.091014][ C0] stack_trace_save+0x9c/0xe0 [ 657.091034][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 657.091057][ C0] ? unwind_next_frame+0xa5/0x2390 [ 657.091076][ C0] ? unwind_next_frame+0x19ae/0x2390 [ 657.091096][ C0] kasan_save_track+0x3e/0x80 [ 657.091133][ C0] ? cfg80211_inform_bss_data+0x1fb/0x3b30 [ 657.091155][ C0] __kasan_kmalloc+0x93/0xb0 [ 657.091172][ C0] __kmalloc_noprof+0x411/0x7f0 [ 657.091188][ C0] ? ieee802_11_parse_elems_full+0x152/0x2ab0 [ 657.091238][ C0] ieee802_11_parse_elems_full+0x152/0x2ab0 [ 657.091264][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 657.091287][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 657.091307][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 657.091334][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 657.091355][ C0] ? cfg80211_update_known_bss+0xa29/0x13c0 [ 657.091378][ C0] ieee80211_inform_bss+0x10c/0x10a0 [ 657.091399][ C0] ? __cfg80211_bss_update+0x101a/0x2120 [ 657.091419][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 657.091436][ C0] ? do_raw_spin_lock+0x121/0x290 [ 657.091460][ C0] ? __kmalloc_noprof+0x432/0x7f0 [ 657.091483][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 657.091503][ C0] cfg80211_inform_single_bss_data+0xd05/0x1ac0 [ 657.091527][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 657.091555][ C0] ? _ieee802_11_parse_elems_full+0x44aa/0x4550 [ 657.091578][ C0] ? cfg80211_inform_bss_data+0x1e8/0x3b30 [ 657.091599][ C0] cfg80211_inform_bss_data+0x1fb/0x3b30 [ 657.091630][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 657.091662][ C0] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 657.091693][ C0] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 657.091715][ C0] ? ieee80211_bss_info_update+0x2dc/0x9e0 [ 657.091735][ C0] ieee80211_bss_info_update+0x746/0x9e0 [ 657.091757][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 657.091774][ C0] ? sta_info_get+0x4f/0x270 [ 657.091798][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf93/0x2ae0 [ 657.091819][ C0] ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 657.091846][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf93/0x2ae0 [ 657.091865][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 657.091886][ C0] ? __lock_acquire+0xab9/0xd20 [ 657.091917][ C0] ieee80211_iface_work+0x85f/0x12d0 [ 657.091941][ C0] cfg80211_wiphy_work+0x2bb/0x470 [ 657.091963][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 657.091982][ C0] process_scheduled_works+0xae1/0x17b0 [ 657.092012][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 657.092037][ C0] worker_thread+0x8a0/0xda0 [ 657.092057][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 657.092081][ C0] ? __kthread_parkme+0x7b/0x200 [ 657.092104][ C0] kthread+0x711/0x8a0 [ 657.092127][ C0] ? __pfx_worker_thread+0x10/0x10 [ 657.092145][ C0] ? __pfx_kthread+0x10/0x10 [ 657.092167][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 657.092187][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 657.092208][ C0] ? __pfx_kthread+0x10/0x10 [ 657.092230][ C0] ret_from_fork+0x47c/0x820 [ 657.092249][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 657.092270][ C0] ? __switch_to_asm+0x39/0x70 [ 657.092287][ C0] ? __switch_to_asm+0x33/0x70 [ 657.092303][ C0] ? __pfx_kthread+0x10/0x10 [ 657.092325][ C0] ret_from_fork_asm+0x1a/0x30 [ 657.092349][ C0] [ 657.092701][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 657.631593][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 657.640730][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 657.650814][ T31] Call Trace: [ 657.654160][ T31] [ 657.657111][ T31] dump_stack_lvl+0x99/0x250 [ 657.661717][ T31] ? __asan_memcpy+0x40/0x70 [ 657.666322][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.671611][ T31] ? __pfx__printk+0x10/0x10 [ 657.676227][ T31] vpanic+0x237/0x6d0 [ 657.680220][ T31] ? __pfx_vpanic+0x10/0x10 [ 657.684730][ T31] ? preempt_schedule_common+0x83/0xd0 [ 657.690215][ T31] panic+0xb9/0xc0 [ 657.693949][ T31] ? __pfx_panic+0x10/0x10 [ 657.698433][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 657.703824][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 657.709992][ T31] watchdog+0xf9f/0xfa0 [ 657.714161][ T31] ? watchdog+0x1e2/0xfa0 [ 657.718508][ T31] kthread+0x711/0x8a0 [ 657.722595][ T31] ? __pfx_watchdog+0x10/0x10 [ 657.727275][ T31] ? __pfx_kthread+0x10/0x10 [ 657.731877][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 657.737176][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 657.742395][ T31] ? __pfx_kthread+0x10/0x10 [ 657.747007][ T31] ret_from_fork+0x47c/0x820 [ 657.751612][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 657.756743][ T31] ? __switch_to_asm+0x39/0x70 [ 657.761597][ T31] ? __switch_to_asm+0x33/0x70 [ 657.766364][ T31] ? __pfx_kthread+0x10/0x10 [ 657.770965][ T31] ret_from_fork_asm+0x1a/0x30 [ 657.775758][ T31] [ 657.779083][ T31] Kernel Offset: disabled [ 657.783438][ T31] Rebooting in 86400 seconds..