last executing test programs: 5.640506372s ago: executing program 3 (id=1199): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) preadv(r2, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0xb) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x10f4c2a, 0x0) 5.424896496s ago: executing program 3 (id=1201): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d0072413"], 0x0) 3.866454978s ago: executing program 3 (id=1206): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000083175c465f0000"], 0x0}, 0x0) 3.675292742s ago: executing program 1 (id=1207): r0 = socket$xdp(0x2c, 0x3, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$bt_hci(r1, 0x0, 0x3, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000580)={0x1fe, 0x1, 0x0, 0x2000, &(0x7f00004ef000/0x2000)=nil}) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) mmap(&(0x7f0000789000/0x1000)=nil, 0x1000, 0xe06c68a70e29a90c, 0x4010, r0, 0x7dfff000) 3.41756114s ago: executing program 1 (id=1209): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r3, &(0x7f00000002c0)=""/75, 0x4b, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040029bd7000fbdbdf250b00000008000300", @ANYRESHEX=r4, @ANYRES8=r2], 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000140)={0xb}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000008c0)={0x5, 0x0, [{0xeeee0000, 0x58, &(0x7f0000000540)=""/88}, {0x80a0000, 0x79, &(0x7f00000005c0)=""/121}, {0x2, 0xeb, &(0x7f0000000640)=""/235}, {0x2, 0x68, &(0x7f0000000740)=""/104}, {0x10000, 0xc4, &(0x7f00000007c0)=""/196}]}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000000240)={0x0, 0x7}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) ioctl$BINDER_FREEZE(r7, 0x400c620e, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 3.048865212s ago: executing program 0 (id=1211): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x57, 0x7fc00100}]}) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x6083, 0x3) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) 3.047927232s ago: executing program 1 (id=1212): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES8=0x0], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="3d000e0080000000ffffffffffff0802"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0xffffffff}, 0x10) r3 = socket(0x10, 0x0, 0x2) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050003000000000000c7de0b00482e82fb34b2697073f6242b3c2a00292f8300", @ANYRES32=r6, @ANYBLOB="0a0018000303030303030000"], 0x28}}, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000240)='ns/cgroup\x00') sched_setscheduler(r0, 0x2, &(0x7f00000004c0)=0x5e) r7 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000000c0), 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, &(0x7f0000000340)=""/97, 0x61, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r11, 0xc008ae88, &(0x7f0000000100)) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x6a6a00, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = dup(r13) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x5000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2) 2.615187454s ago: executing program 0 (id=1213): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000280)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000a, 0x11, r0, 0x7b28e000) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000a, 0x11, r0, 0x7b28e000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="16c9c4a1c6b00aa404a2102b7803043d99a49267e1dcb21a22045796e4387e6eb04bf02aa89417f076a3ce0a4b8a8e4ec88f6110cd37b84f1ce371dc82138602c1c2594ec52ed32c5ce47988ddfdaf8f25affb19188e6a0eba356563e9cfaa22c2a23f379d5da86329bc5833e742551db7210d347f2ec31e034992957dd743037734a04cba32dde78ddd47d9e0859a698ef0f0be6ed4db0d5cc13f1bf170bddd1a009f7cdffda5ac6851177d0d1f27407d09524d12439a2a06f2c978d6ca066ea2d72960a4886a8161cb", 0xca}, {&(0x7f0000000400)="af0713699227cb3de7ca3981b7b2805db44ec7eebabd8ded9ee0e3726f4c80bdf55f5a9e22af736ead5f04fe16674d25f1bcfdaef5c1a7e2107d041a346da4c75f545ff3c195200b30982e4e1222039a2e79eefae18e687e17475e9cfcb7862a153c2625b5c20c4ec99a910bee1d5c1389472c29f0eb9d6434566786a63807b5a0df639392a12e3aa34c41e8fe24c1f2e4d89b51d138cdeba703c3837ab82fc544d6f14a6d29b5afe7eb1498c3b8717ac8b9add6d655000b504fdd3eda3df64ec98770773425980caa83f6ae59cad05f7f10c0baa776109b35174ae7cacf45fb554c48f83132ff98e0a5a32a", 0xec}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x400c800) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') 2.369901689s ago: executing program 0 (id=1214): r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$qrtr(0x2a, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) (async, rerun: 64) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) (async, rerun: 64) syz_usb_connect(0x0, 0x24, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x6f, 0xb6, 0x84, 0x40, 0x1de1, 0xc102, 0x7d08, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x43, 0xda, 0x91}}]}}]}}, 0x0) (async) read(r0, &(0x7f0000002340)=""/232, 0xe8) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="002324000000240c46a468c1"], 0x0}, 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x9c, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x2, 0x1, 0x5, 0x90, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "8d"}, {0x5, 0x24, 0x0, 0xdf0d}, {0xd, 0x24, 0xf, 0x1, 0xf3d0, 0x8, 0x1a22}, {0x6, 0x24, 0x1a, 0x1, 0x3}, [@mbim_extended={0x8, 0x24, 0x1c, 0xf800, 0xd, 0x4}, @country_functional={0x10, 0x24, 0x7, 0x9, 0x3, [0xe, 0xff, 0x7, 0x9, 0x8000]}, @mdlm_detail={0x15, 0x24, 0x13, 0x7, "e7512878c6c61d092e10fb6c730c67089c"}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xfd, 0x5, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x9, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xf, 0x4, 0xff}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x6, 0x8, 0x1, 0xff, 0x1}, 0x8, &(0x7f00000001c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x80a}}, {0x2c, &(0x7f0000000280)=@string={0x2c, 0x3, "4421e0c340fcd5573f14e3e6a8f607beb202bc59791e38768b8a08aae49b3d2b1df91e076ac59a4c0d53"}}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000440)={0x14, &(0x7f0000000300)={0x0, 0x1, 0xf8, {0xf8, 0x2, "e7b069fd9c2e7dcaf56fe73b06867900b3633c9837f9643b869ef0a4837d2a60edbe0a36afc39278a843b6878ca0fd52b831460120fb7d815c865b5319f4baaad1c9ad445b27750d67017c9d8c4a7213e5bcb1c1ebe75a381766de3dd85433e9edfbc7744dcc49ff99d4b80a5472848895b70a67d4b217d8969508039d0c1e7327e9bd6592c40b45012fb096aae1afbc2f08360070cb6a112c90036738dcf54d5ac31cc8d7daf9dbde1360c05c8278315ff9150db4830e09b48ca86dc377ef509e7f8054574fb59387e38cdeab1fa2a6a01651fe91f9c947691e5bb318a6f1ef76097230c05fe3a0753356175ed57fbf502547764612"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000480)={0x0, 0xb, 0x38, "99fec2425e85b71e2fb8f849e80ea9f4a414f7f0daff04adbb9530722ef5acf068c9cc5e225940f46bfa80456f4fc75fe6d92f0c50c96857"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x4, 0xfff9, 0x6, 0x8, 0x1000, 0x7ff, 0x8, 0x8, 0xe999, 0x8, 0x5, 0xc}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0x2}, &(0x7f00000005c0)={0x20, 0x83, 0x2}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000640)={0x20, 0x89, 0x2, 0x1}}) 2.260299841s ago: executing program 0 (id=1215): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0xffc4) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000180)={0xf000, 0x3000, 0x2000000}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r4 = getpid() r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000", 0x42}], 0x1) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x80) r6 = syz_pidfd_open(r4, 0x0) setns(r6, 0x24020000) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000380)=@ethtool_wolinfo={0x6, 0x0, 0x8, "edf958e7e942"}}) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) mount(0x0, &(0x7f00000010c0)='./file2\x00', 0x0, 0x32e1c38, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x182) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r10 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r10, &(0x7f0000001fc0)=""/184, 0xb8) 2.250279143s ago: executing program 3 (id=1216): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x10) getdents64(r0, &(0x7f0000000500)=""/179, 0xb3) lseek(r0, 0x10000, 0x4) 2.053041941s ago: executing program 0 (id=1217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05604, &(0x7f0000000400)={0x2}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001380)={0x48, r1, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x20, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x2}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x30048011}, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x1ff, 0x2}}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000240)={0x1c, &(0x7f00000000c0)={0x20, 0x6, 0x4, "a9f915ce"}, 0x0, 0x0}) 1.949941007s ago: executing program 3 (id=1218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', @ifru_names='vxcan1\x00'}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r2 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup(r3) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x74, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6b2ca88b991e23fc3127845b87079d41a698275747a9578f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x2040) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x48b}]}) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108"], 0x2cc}}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0xca6, 0x20001) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000000180)) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000008450c0b7600000000000109022400010000000009040000ff0300000009210400000122850009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="002185000000850a62fe9785d8f2d201a703e47d72a005b7cea16727d1d4cede0b47e356248835a54ad4e3d5c08ba5ba0a78d9b7e5b1fbec62d57262e0ba20670850163c9c42a9fd97b34d82c413c60118ad8a7b46323d1f26161c2585465e3c686fd889c2e4d36a95cd81", @ANYRESOCT=r6], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.737692919s ago: executing program 1 (id=1219): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) (async) clock_nanosleep(0x1, 0x1, &(0x7f0000000e80)={0x0, 0x3938700}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) (async) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402", @ANYRESOCT], &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x752f) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b04000000000080070001006374000014000280080001400000001708000240000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.732859899s ago: executing program 2 (id=1220): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async, rerun: 32) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a69427f0000001dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a69766070043a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dffacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x8, 0x4000, 0xff98, {0x2, 0x0, 0x1, 0xfffffffffffffffe, 0x3, 0x14, 0x0, 0x2, 0x3ff, 0x6000, 0x0, 0x0, r2, 0x800, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x4, 0x3, 0x6, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0xa}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$SG_IO(r3, 0x2285, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) (async) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async, rerun: 64) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.500949936s ago: executing program 2 (id=1221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}}, 0x40) 1.35733828s ago: executing program 2 (id=1222): getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f00000001c0)={'broute\x00', 0x0, 0x4, 0x0, [0x2, 0xa, 0x8, 0x9, 0x480000000, 0x2], 0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000001c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004"], 0xec}}, 0x8050) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req={0x3, 0x80, 0x38e}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f00000001c0)={'broute\x00', 0x0, 0x4, 0x0, [0x2, 0xa, 0x8, 0x9, 0x480000000, 0x2], 0x0, 0x0, 0x0}, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000001c0)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004"], 0xec}}, 0x8050) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req={0x3, 0x80, 0x38e}, 0x10) (async) 1.330964766s ago: executing program 0 (id=1223): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) (async) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0x200002e6) unshare(0x62040200) (async) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="440000001400010000000000000000000200000004000000140004000000000600000000000000000000000115000280", @ANYBLOB="e099"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc65, 0x5, &(0x7f0000006680)) (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0xfffffffc) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0xffff}}, './file0\x00'}) getsockopt$netlink(r6, 0x10e, 0x1, &(0x7f0000000080)=""/113, &(0x7f0000000100)=0x71) (async) sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000044c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf254a00000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x398}, 0x1, 0x0, 0x0, 0x14040}, 0x4000810) (async) socket(0x1e, 0x5, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000a00)={&(0x7f0000000640), 0x6e, &(0x7f0000000940)=[{&(0x7f0000004940)=""/138, 0x8a}, {&(0x7f0000000780)=""/185, 0xb9}, {&(0x7f0000002280)=""/41, 0x29}, {&(0x7f0000000840)=""/49, 0x31}, {&(0x7f0000004a00)=""/153, 0x99}, {&(0x7f0000000900)=""/50, 0x32}], 0x6, &(0x7f00000009c0)=[@cred={{0x1c}}], 0x20}, 0x2000) (async) read$FUSE(r2, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) (async) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20441, 0x0) bind$802154_dgram(r2, &(0x7f00000022c0)={0x24, @none={0x0, 0xffff}}, 0x14) (async) ioctl$BLKDISCARD(r8, 0x125f, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1.084795288s ago: executing program 2 (id=1224): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x80, 0x0, 0x0) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x100e2) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r3 = accept$alg(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000140)={0x1, "ceae18906f2673d0e0d337f1e5f3b7083a14450911c4918858035f85a4f365d0", 0x3, 0xc0e8, 0x3, 0x40000, 0x40002, 0x2}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sendmmsg$sock(r6, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="e879", 0x2}], 0x1}}], 0x1, 0x40005) recvmsg$qrtr(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x2140}, 0x38, 0x141) ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000280)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x31) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x53}], 0x1, 0x0, 0xffffffba}, 0x81) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r9, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) close_range(r9, r5, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[], 0x34}}, 0x4008092) 250.378798ms ago: executing program 1 (id=1225): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0xffc4) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000180)={0xf000, 0x3000, 0x2000000}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r4 = getpid() r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000", 0x42}], 0x1) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x80) r6 = syz_pidfd_open(r4, 0x0) setns(r6, 0x24020000) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000380)=@ethtool_wolinfo={0x6, 0x0, 0x8, "edf958e7e942"}}) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) mount(0x0, &(0x7f00000010c0)='./file2\x00', 0x0, 0x32e1c38, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x182) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r10 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r10, &(0x7f0000001fc0)=""/184, 0xb8) 249.690068ms ago: executing program 2 (id=1226): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="3303200071fd140000007ef52f3d", 0xe, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x62, 0x6, @random="51147f25fba5"}, 0x14) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 248.871313ms ago: executing program 1 (id=1227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)="c6"}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) 248.487903ms ago: executing program 2 (id=1228): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d345000905010210000000"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x1b, {0x1b, 0x7, "a2b7b0b2d6e28d41298b6a85ae6c34df5bf2579db1329b6f7b"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, &(0x7f0000000380)={0x34, &(0x7f00000000c0)={0x40, 0xe, 0x9f, "6934c77f0ec6f0800c149640d48a7057078aadb3441ef5faf1ce1059bd8d0bdd90eff445a87840bbcd222e7c15209c097d995302befa9d9960524dda5f2610053f3dc6dd74ff5721783d09fb1f4496b9c5eb1a12e7ccebfacfc1071fa7ede63a4250a850473a4735f29a08cd8f60a613791fa63c38aaa97f02dad04b607cd351878f2154630138bd59e193689d2a1ea46ed9554c469bbee16da20428634282"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000200)={0x20, 0x0, 0xf5, {0xf3, "d6fef385d6cc2b070f21f3edc8bbada372a93801c3050f7eb11d499a6381f088600d12ddce767a99f353d9a46c527afbae12c740c95de36f3dbc3b41781d132c373c0bd4d276ce956fb9819159bb7d6aaddaa2ee097f5e49b0938fd22583b4615c8b9002198743206d455189eebbf57822b5d521dfc440ee41c9a88f98f087aaea880e151d6c7753b7ef10c2c7cb9e80e8341f9b777f93a76dbd22d3ef3d0cebb7dfd76d0a02a66999edd89bb4ec1b855623897017b817ef2df4b44dab8e323eed72d1051e65af35ac36d6e953bab8cd815706a5e43a87f55749cd26fd52360c8f2fbb46a180c2e0bb8fed79f17409dc74516e"}}, &(0x7f0000000300)={0x20, 0x1, 0x1, 0x23}, &(0x7f0000000340)={0x20, 0x0, 0x1, 0x6}}) 0s ago: executing program 3 (id=1229): socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002180)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x800, @private0, 0x7f15}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x3b}}}}], 0x28}}], 0x1, 0x4008090) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000202d0501f8b3b8320000000000010902240001000060b109040000010300010009210101080122030009058103ff030c0003"], 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000b80)={0x3, 'wlan1\x00', {0xc7b9}, 0x123}) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x3, 0x20, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, 'f|'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xa, 0xff9a, 0xe, 0x7}, {0x6, 0x24, 0x1a, 0xff, 0x28}, [@obex={0x5, 0x24, 0x15, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x25, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x6, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0xf5, 0xff}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x300, 0x8, 0x0, 0xa6, 0x40, 0x11}, 0xc2, &(0x7f00000004c0)={0x5, 0xf, 0xc2, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x9, 0xd, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x1, 0x7, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "ab4fdae8a9a13677be3218e6f903b2aa"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "f24e003811d2bc65363768be8181450e"}, @generic={0x84, 0x10, 0x1, "3f46e82d0e97fd3f5e3410de1f81906e42fcb8c1159e4b0e06ff63bc0345deec33f52a85d90b2e8334699f98f362ea9bd4153666b39ece17618fd6f6158bb5040c52aecb689a0fb71c560233474e7ed4c06ad3a69a25881a88f43def5d0f797e1a464e2481d7dfcf40b96e21f0a658846bd315097e1bc0662758303369d44d6aa5"}]}, 0x1, [{0xe5, &(0x7f00000005c0)=@string={0xe5, 0x3, "05c879d920414feb1dc535d4501f5c57cd16ae360c599d559ae0d97fe15c0076530e5045f1d24429f8346efeffeeb5b493d893397f184447176ebbc6ff6ce745f09c093e0b75d5d9eaecb87459c8f23183b216cc95074e9e7bfcdcee6ebbedf4738232fba874a88a1dd70a948a1d9ffa8212dd5fea31365cf3db6e9af23d6b2dc79e6be9e97511b861be85c53e672985a6a7f921910a5e7bb958104497290206d18fe7a1ca38fdc69eb21ea27556faae7badbb6721f3a36cfa4b09ded75dcefe1b2fdb66f1c558f4ae43f62104ace00ef0aeab0cf13d28bc48e987f8c6ce61efad0cb0"}}]}) (async) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x3, 0x20, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, 'f|'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xa, 0xff9a, 0xe, 0x7}, {0x6, 0x24, 0x1a, 0xff, 0x28}, [@obex={0x5, 0x24, 0x15, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x25, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x6, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0xf5, 0xff}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x300, 0x8, 0x0, 0xa6, 0x40, 0x11}, 0xc2, &(0x7f00000004c0)={0x5, 0xf, 0xc2, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x9, 0xd, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x1, 0x7, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "ab4fdae8a9a13677be3218e6f903b2aa"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "f24e003811d2bc65363768be8181450e"}, @generic={0x84, 0x10, 0x1, "3f46e82d0e97fd3f5e3410de1f81906e42fcb8c1159e4b0e06ff63bc0345deec33f52a85d90b2e8334699f98f362ea9bd4153666b39ece17618fd6f6158bb5040c52aecb689a0fb71c560233474e7ed4c06ad3a69a25881a88f43def5d0f797e1a464e2481d7dfcf40b96e21f0a658846bd315097e1bc0662758303369d44d6aa5"}]}, 0x1, [{0xe5, &(0x7f00000005c0)=@string={0xe5, 0x3, "05c879d920414feb1dc535d4501f5c57cd16ae360c599d559ae0d97fe15c0076530e5045f1d24429f8346efeffeeb5b493d893397f184447176ebbc6ff6ce745f09c093e0b75d5d9eaecb87459c8f23183b216cc95074e9e7bfcdcee6ebbedf4738232fba874a88a1dd70a948a1d9ffa8212dd5fea31365cf3db6e9af23d6b2dc79e6be9e97511b861be85c53e672985a6a7f921910a5e7bb958104497290206d18fe7a1ca38fdc69eb21ea27556faae7badbb6721f3a36cfa4b09ded75dcefe1b2fdb66f1c558f4ae43f62104ace00ef0aeab0cf13d28bc48e987f8c6ce61efad0cb0"}}]}) syz_usb_control_io(r1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) syz_usb_connect$uac1(0x1, 0xb7, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0x20, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x8}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x2, 0x5, "5229e048f8"}, @mixer_unit={0xa, 0x24, 0x4, 0x1, 0x1, "1e1af88856"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x100, 0x1, 0xec, 0x7, 0xfa, 0xb}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x66, "e7"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x204, 0x2, 0x7, 0x7, 0x1, 0x1}, @mixer_unit={0xb, 0x24, 0x4, 0x3, 0x7f, "d671b2c71dc8"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xa, 0x2, {0x7, 0x25, 0x1, 0x3, 0xc, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xac, 0x0, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x1, 0x7, {0x7, 0x25, 0x1, 0x0, 0x0, 0x6}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x3, 0x8, 0x0, 0x10, 0x7}, 0x95, &(0x7f0000000180)={0x5, 0xf, 0x95, 0x1, [@generic={0x90, 0x10, 0x1, "f9cc2288c4a32b9f231ca94284198206906aa2089fc897fec546fb41e8b730d18318a4fdff4ff07370c2af32a6a5b126f01a62c3cf8a55ad9705589c36b070d027b031131f935001d6b1135061b62c27b889b8e04ef3de02aa76d3588453d74ca9433f411cc6ea54194f6a92868dd433a4fa86ab23473bda71943164d63d0eedc48c85fed155447078c848abe6"}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x430}}, {0xb1, &(0x7f0000000700)=ANY=[@ANYBLOB="b103bef5f0d30b52458e910ef481eb704b8ca38dfacc1af01d3f60a90144d17139c6ec4daa494f8fe3556fcebde3eac54d89ffffd2541a9c28cd9fe6b4d0184ac1c7f8a76f85c5137abe4317ec1c77cfc85207e93d24f1c1d3da5bdce151060d1ed8a7a4557aa95f192c332a9c4aa4a764a4e62d74124319c6742c94ef9dffd8098f8f4b73cb08fe108b1b9a30ae88f8c9e2b3d34837afbcaab2eaa918309ffbffffff3d0b745f78cc15638e5a8ae0d1bc9b7611447a58332d"]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x445}}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000500)=""/45, 0x2d) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000bc0)=0x140, 0x4) getdents64(r3, 0x0, 0x18) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r3, 0x40096100, &(0x7f0000000b40)={{&(0x7f0000000ac0)={'Accelerator0\x00', {&(0x7f0000000880)=@adf_dec={@bank={'Bank', '5', 'InterruptCoalescingTimerNs\x00'}, {0x2}, {&(0x7f00000007c0)=@adf_hex={@format={'Cy', '5', 'RingTx\x00'}, {0x5}}}}}, {&(0x7f00000002c0)={'KERNEL\x00', {&(0x7f0000000a00)=@adf_dec={@bank={'Bank', '3', 'CoreAffinity\x00'}, {0x6}, {&(0x7f0000000940)=@adf_hex={@normal='NumberDcInstances\x00', {0x4}}}}}}}}}}) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r3, 0x40096100, &(0x7f0000000b40)={{&(0x7f0000000ac0)={'Accelerator0\x00', {&(0x7f0000000880)=@adf_dec={@bank={'Bank', '5', 'InterruptCoalescingTimerNs\x00'}, {0x2}, {&(0x7f00000007c0)=@adf_hex={@format={'Cy', '5', 'RingTx\x00'}, {0x5}}}}}, {&(0x7f00000002c0)={'KERNEL\x00', {&(0x7f0000000a00)=@adf_dec={@bank={'Bank', '3', 'CoreAffinity\x00'}, {0x6}, {&(0x7f0000000940)=@adf_hex={@normal='NumberDcInstances\x00', {0x4}}}}}}}}}}) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): /0x120 [ 230.148891][ T8873] ? look_up_lock_class+0x74/0x170 [ 230.148916][ T8873] ? register_lock_class+0x51/0x320 [ 230.148944][ T8873] ? __lock_acquire+0xab9/0xd20 [ 230.148995][ T8873] kvm_vcpu_ioctl+0x95c/0xe90 [ 230.149021][ T8873] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 230.149062][ T8873] ? __fget_files+0x2a/0x420 [ 230.149089][ T8873] ? __fget_files+0x3a0/0x420 [ 230.149110][ T8873] ? __fget_files+0x2a/0x420 [ 230.149136][ T8873] ? bpf_lsm_file_ioctl+0x9/0x20 [ 230.149159][ T8873] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 230.149178][ T8873] __se_sys_ioctl+0xfc/0x170 [ 230.149216][ T8873] do_syscall_64+0xfa/0xfa0 [ 230.149237][ T8873] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.149259][ T8873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.149277][ T8873] ? clear_bhb_loop+0x60/0xb0 [ 230.149301][ T8873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.149319][ T8873] RIP: 0033:0x7fa938d8eec9 [ 230.149336][ T8873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.149352][ T8873] RSP: 002b:00007fa939b49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.149373][ T8873] RAX: ffffffffffffffda RBX: 00007fa938fe6090 RCX: 00007fa938d8eec9 [ 230.149388][ T8873] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 230.149400][ T8873] RBP: 00007fa939b49090 R08: 0000000000000000 R09: 0000000000000000 [ 230.149411][ T8873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.149423][ T8873] R13: 00007fa938fe6128 R14: 00007fa938fe6090 R15: 00007ffe8e0191a8 [ 230.149455][ T8873] [ 230.467282][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.504203][ T8875] binder: BINDER_SET_CONTEXT_MGR already set [ 230.510382][ T8875] binder: 8874:8875 ioctl 4018620d 200000000140 returned -16 [ 230.568528][ T8875] overlayfs: failed to resolve './file1': -2 [ 230.839716][ T5980] usb 4-1: Using ep0 maxpacket: 16 [ 230.846891][ T5980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.857964][ T5980] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 230.885189][ T5980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.896154][ T5980] usb 4-1: config 0 descriptor?? [ 231.023053][ T8878] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.875'. [ 231.101526][ T8880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.150558][ T8855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.161105][ T8855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.169791][ T8880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.279806][ T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 231.297909][ T8885] i2c i2c-0: Invalid block write size 34 [ 231.332545][ T8885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.363339][ T8885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.430096][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 231.442498][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 231.454471][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 231.476780][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 231.497162][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.529223][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 231.549723][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 231.570988][ T24] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 231.580414][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.588427][ T24] usb 3-1: Product: syz [ 231.599702][ T24] usb 3-1: Manufacturer: syz [ 231.609816][ T24] usb 3-1: SerialNumber: syz [ 231.623590][ T24] usb 3-1: config 0 descriptor?? [ 231.635780][ T5980] usbhid 4-1:0.0: can't add hid device: -71 [ 231.642114][ T5980] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 231.674889][ T5980] usb 4-1: USB disconnect, device number 73 [ 231.844328][ T24] usb 3-1: USB disconnect, device number 65 [ 231.882586][ T8888] netlink: 36 bytes leftover after parsing attributes in process `syz.0.879'. [ 231.899742][ T8888] netlink: 36 bytes leftover after parsing attributes in process `syz.0.879'. [ 231.929056][ T8888] netlink: 36 bytes leftover after parsing attributes in process `syz.0.879'. [ 232.034234][ T8893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.062612][ T8895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.072957][ T8893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.084454][ T8888] netlink: 36 bytes leftover after parsing attributes in process `syz.0.879'. [ 232.102734][ T8888] netlink: 36 bytes leftover after parsing attributes in process `syz.0.879'. [ 232.105833][ T8895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.122182][ T8888] netlink: 36 bytes leftover after parsing attributes in process `syz.0.879'. [ 232.127128][ T8893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.201976][ T8893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.243601][ T8895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.270062][ T8895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.278898][ T8895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.302701][ T8893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.332279][ T8895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.348936][ T8888] netlink: 36 bytes leftover after parsing attributes in process `syz.0.879'. [ 232.352970][ T8893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.369692][ T8888] netlink: 36 bytes leftover after parsing attributes in process `syz.0.879'. [ 232.470066][ T24] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 232.481060][ T8903] random: crng reseeded on system resumption [ 232.722043][ T8907] FAULT_INJECTION: forcing a failure. [ 232.722043][ T8907] name failslab, interval 1, probability 0, space 0, times 0 [ 232.752704][ T8907] CPU: 0 UID: 0 PID: 8907 Comm: syz.0.884 Not tainted syzkaller #0 PREEMPT(full) [ 232.752734][ T8907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 232.752747][ T8907] Call Trace: [ 232.752755][ T8907] [ 232.752764][ T8907] dump_stack_lvl+0x189/0x250 [ 232.752801][ T8907] ? __pfx____ratelimit+0x10/0x10 [ 232.752827][ T8907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.752864][ T8907] ? __pfx__printk+0x10/0x10 [ 232.752898][ T8907] ? __pfx___might_resched+0x10/0x10 [ 232.752923][ T8907] ? fs_reclaim_acquire+0x7d/0x100 [ 232.752954][ T8907] should_fail_ex+0x414/0x560 [ 232.752999][ T8907] should_failslab+0xa8/0x100 [ 232.753024][ T8907] __kmalloc_noprof+0xcb/0x7f0 [ 232.753052][ T8907] ? security_task_alloc+0x4d/0x360 [ 232.753071][ T8907] ? perf_event_init_task+0x12d/0x4b0 [ 232.753102][ T8907] security_task_alloc+0x4d/0x360 [ 232.753125][ T8907] copy_process+0x1530/0x3c00 [ 232.753184][ T8907] ? copy_process+0x97f/0x3c00 [ 232.753224][ T8907] ? __pfx_copy_process+0x10/0x10 [ 232.753277][ T8907] vhost_task_create+0x1ce/0x320 [ 232.753313][ T8907] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 232.753344][ T8907] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 232.753375][ T8907] ? __pfx_vhost_task_create+0x10/0x10 [ 232.753414][ T8907] ? __pfx_vhost_task_fn+0x10/0x10 [ 232.753462][ T8907] kvm_mmu_post_init_vm+0x14c/0x300 [ 232.753486][ T8907] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 232.753510][ T8907] ? __mutex_trylock_common+0x153/0x260 [ 232.753557][ T8907] ? __pfx___mutex_trylock_common+0x10/0x10 [ 232.753591][ T8907] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 232.753619][ T8907] ? rcu_is_watching+0x15/0xb0 [ 232.753648][ T8907] ? trace_contention_end+0x39/0x120 [ 232.753675][ T8907] ? look_up_lock_class+0x74/0x170 [ 232.753702][ T8907] ? register_lock_class+0x51/0x320 [ 232.753731][ T8907] ? __lock_acquire+0xab9/0xd20 [ 232.753796][ T8907] kvm_vcpu_ioctl+0x95c/0xe90 [ 232.753824][ T8907] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 232.753867][ T8907] ? __fget_files+0x2a/0x420 [ 232.753897][ T8907] ? __fget_files+0x3a0/0x420 [ 232.753919][ T8907] ? __fget_files+0x2a/0x420 [ 232.753947][ T8907] ? bpf_lsm_file_ioctl+0x9/0x20 [ 232.753972][ T8907] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 232.753991][ T8907] __se_sys_ioctl+0xfc/0x170 [ 232.754026][ T8907] do_syscall_64+0xfa/0xfa0 [ 232.754049][ T8907] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.754071][ T8907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.754091][ T8907] ? clear_bhb_loop+0x60/0xb0 [ 232.754117][ T8907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.754137][ T8907] RIP: 0033:0x7fcf2cd8eec9 [ 232.754157][ T8907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.754175][ T8907] RSP: 002b:00007fcf2dcf5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.754198][ T8907] RAX: ffffffffffffffda RBX: 00007fcf2cfe5fa0 RCX: 00007fcf2cd8eec9 [ 232.754213][ T8907] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 232.754225][ T8907] RBP: 00007fcf2dcf5090 R08: 0000000000000000 R09: 0000000000000000 [ 232.754237][ T8907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.754250][ T8907] R13: 00007fcf2cfe6038 R14: 00007fcf2cfe5fa0 R15: 00007ffd153edb98 [ 232.754283][ T8907] [ 233.084664][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.151547][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.162699][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 233.183607][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.210263][ T24] usb 4-1: config 0 descriptor?? [ 233.246209][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 233.433114][ T8909] overlayfs: failed to resolve './file1': -2 [ 233.607913][ T8915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.622623][ T8915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.641719][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 233.649055][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 233.656543][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 233.668325][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 233.676611][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 233.684208][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 233.691586][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 233.760038][ T5864] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 233.805413][ T8919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.818683][ T8919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.899849][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 233.907005][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 233.915691][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 233.923522][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.935563][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 233.947396][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 233.954682][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 233.966115][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 233.972940][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.986138][ T5864] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.999249][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.020827][ T5864] usb 3-1: config 0 descriptor?? [ 234.027904][ T8913] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 234.197479][ T24] pwc: recv_control_msg error -32 req 04 val 1100 [ 234.198768][ T8898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.233212][ T24] pwc: recv_control_msg error -32 req 04 val 1200 [ 234.246775][ T8923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.247129][ T8898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.257935][ T8923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.272789][ T24] pwc: Registered as video103. [ 234.292689][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 234.328298][ T982] usb 4-1: USB disconnect, device number 74 [ 234.456195][ T5864] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 234.490540][ T5864] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 234.508576][ T5864] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 234.538428][ T5864] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 234.554232][ T5864] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 234.562287][ T30] audit: type=1326 audit(2000000047.312:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8932 comm="syz.3.893" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8bbd18eec9 code=0x0 [ 234.585669][ T5864] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 234.594661][ T5864] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 234.602259][ T5864] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 234.619580][ T5864] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 234.627162][ T5864] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 234.653418][ T5864] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 234.658006][ T8934] could not allocate digest TFM handle md5-generic [ 234.712854][ T8939] netlink: 'syz.0.894': attribute type 2 has an invalid length. [ 234.739760][ T8913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.764764][ T8913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.790628][ T8913] overlay: ./file0 is not a directory [ 234.828548][ T5864] usb 3-1: USB disconnect, device number 66 [ 234.950337][ T8945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.964490][ T8945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.001189][ T8946] overlayfs: failed to resolve './file1': -2 [ 235.049550][ T982] usb 4-1: new low-speed USB device number 75 using dummy_hcd [ 235.089475][ T8952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.104907][ T8952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.211350][ T982] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 235.223642][ T982] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 235.244317][ T982] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 235.269549][ T982] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 235.289565][ T982] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 235.301375][ T982] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 235.308854][ T982] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 235.329447][ T982] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 235.362768][ T982] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 235.500991][ T982] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 235.530912][ T982] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 235.555240][ T982] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 235.575627][ T982] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 235.600659][ T982] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 235.628205][ T982] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 235.654803][ T982] usb 4-1: string descriptor 0 read error: -22 [ 235.663821][ T982] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 235.684372][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.720561][ T982] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 235.849831][ T5864] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 235.925279][ T24] usb 4-1: USB disconnect, device number 75 [ 236.013735][ T5864] usb 3-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 236.027641][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.039715][ T5864] usb 3-1: config 0 descriptor?? [ 236.056262][ T5864] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 236.429562][ T8967] FAULT_INJECTION: forcing a failure. [ 236.429562][ T8967] name failslab, interval 1, probability 0, space 0, times 0 [ 236.442387][ T8967] CPU: 0 UID: 0 PID: 8967 Comm: syz.1.903 Not tainted syzkaller #0 PREEMPT(full) [ 236.442412][ T8967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 236.442424][ T8967] Call Trace: [ 236.442432][ T8967] [ 236.442440][ T8967] dump_stack_lvl+0x189/0x250 [ 236.442474][ T8967] ? __pfx____ratelimit+0x10/0x10 [ 236.442497][ T8967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.442524][ T8967] ? __pfx__printk+0x10/0x10 [ 236.442551][ T8967] ? __pfx___might_resched+0x10/0x10 [ 236.442581][ T8967] should_fail_ex+0x414/0x560 [ 236.442619][ T8967] should_failslab+0xa8/0x100 [ 236.442639][ T8967] __kvmalloc_node_noprof+0x158/0x910 [ 236.442656][ T8967] ? __kvm_mmu_topup_memory_cache+0x463/0x610 [ 236.442686][ T8967] __kvm_mmu_topup_memory_cache+0x463/0x610 [ 236.442723][ T8967] mmu_topup_memory_caches+0x21/0x170 [ 236.442752][ T8967] kvm_mmu_load+0x9d/0x2300 [ 236.442779][ T8967] ? kvm_msr_allowed+0x9a/0x490 [ 236.442796][ T8967] ? kvm_msr_allowed+0x9a/0x490 [ 236.442813][ T8967] ? kvm_msr_allowed+0x9a/0x490 [ 236.442831][ T8967] ? kvm_msr_allowed+0x9a/0x490 [ 236.442847][ T8967] ? kvm_apic_has_interrupt+0x744/0x770 [ 236.442876][ T8967] vcpu_run+0x48a8/0x7040 [ 236.442965][ T8967] ? __pfx_vcpu_run+0x10/0x10 [ 236.442992][ T8967] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 236.443020][ T8967] ? rcu_is_watching+0x15/0xb0 [ 236.443047][ T8967] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 236.443072][ T8967] ? __mutex_trylock_common+0x153/0x260 [ 236.443099][ T8967] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 236.443117][ T8967] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 236.443138][ T8967] ? rcu_is_watching+0x15/0xb0 [ 236.443160][ T8967] ? trace_contention_end+0x39/0x120 [ 236.443182][ T8967] ? look_up_lock_class+0x74/0x170 [ 236.443203][ T8967] ? register_lock_class+0x51/0x320 [ 236.443227][ T8967] ? __lock_acquire+0xab9/0xd20 [ 236.443272][ T8967] kvm_vcpu_ioctl+0x95c/0xe90 [ 236.443294][ T8967] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 236.443328][ T8967] ? __fget_files+0x2a/0x420 [ 236.443352][ T8967] ? __fget_files+0x3a0/0x420 [ 236.443369][ T8967] ? __fget_files+0x2a/0x420 [ 236.443391][ T8967] ? bpf_lsm_file_ioctl+0x9/0x20 [ 236.443414][ T8967] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 236.443430][ T8967] __se_sys_ioctl+0xfc/0x170 [ 236.443456][ T8967] do_syscall_64+0xfa/0xfa0 [ 236.443475][ T8967] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.443494][ T8967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.443509][ T8967] ? clear_bhb_loop+0x60/0xb0 [ 236.443529][ T8967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.443547][ T8967] RIP: 0033:0x7ff7bbb8eec9 [ 236.443563][ T8967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.443578][ T8967] RSP: 002b:00007ff7bc996038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.443596][ T8967] RAX: ffffffffffffffda RBX: 00007ff7bbde6090 RCX: 00007ff7bbb8eec9 [ 236.443619][ T8967] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 236.443628][ T8967] RBP: 00007ff7bc996090 R08: 0000000000000000 R09: 0000000000000000 [ 236.443639][ T8967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.443649][ T8967] R13: 00007ff7bbde6128 R14: 00007ff7bbde6090 R15: 00007ffd181db008 [ 236.443678][ T8967] [ 236.464072][ T8960] __vm_enough_memory: pid: 8960, comm: syz.2.901, bytes: 4503599627366400 not enough memory for the allocation [ 236.845098][ T8975] __nla_validate_parse: 2 callbacks suppressed [ 236.845118][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.905'. [ 236.945013][ T30] audit: type=1326 audit(2000000049.702:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.1.906" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7bbb8eec9 code=0x0 [ 237.297442][ T5864] pwc: send_video_command error -71 [ 237.304553][ T5864] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 237.316677][ T5864] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 237.327330][ T5915] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 237.337667][ T5864] usb 3-1: USB disconnect, device number 67 [ 237.490884][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.501215][ T5915] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 237.510492][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.521011][ T5915] usb 4-1: config 0 descriptor?? [ 237.530826][ T5915] pwc: Askey VC010 type 2 USB webcam detected. [ 237.679638][ T5864] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 237.729192][ T5915] pwc: recv_control_msg error -32 req 02 val 2b00 [ 237.737060][ T5915] pwc: recv_control_msg error -32 req 02 val 2700 [ 237.757717][ T5915] pwc: recv_control_msg error -71 req 02 val 2c00 [ 237.766480][ T5915] pwc: recv_control_msg error -71 req 04 val 1000 [ 237.776692][ T5915] pwc: recv_control_msg error -71 req 04 val 1300 [ 237.802412][ T5915] pwc: recv_control_msg error -71 req 04 val 1400 [ 237.818838][ T5915] pwc: recv_control_msg error -71 req 02 val 2000 [ 237.830114][ T5915] pwc: recv_control_msg error -71 req 02 val 2100 [ 237.838097][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.853367][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.863735][ T5915] pwc: recv_control_msg error -71 req 04 val 1500 [ 237.871331][ T8992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.871999][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.894404][ T8992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.896894][ T5915] pwc: recv_control_msg error -71 req 02 val 2500 [ 237.909880][ T5864] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.919140][ T5915] pwc: recv_control_msg error -71 req 02 val 2400 [ 237.925834][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.933957][ T5915] pwc: recv_control_msg error -71 req 02 val 2600 [ 237.940846][ T5915] pwc: recv_control_msg error -71 req 02 val 2900 [ 237.948440][ T5915] pwc: recv_control_msg error -71 req 02 val 2800 [ 237.956000][ T5864] usb 3-1: config 0 descriptor?? [ 237.967478][ T5915] pwc: recv_control_msg error -71 req 04 val 1100 [ 237.980471][ T5915] pwc: recv_control_msg error -71 req 04 val 1200 [ 238.006015][ T5915] pwc: Registered as video103. [ 238.017243][ T5915] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 238.034613][ T5915] usb 4-1: USB disconnect, device number 76 [ 238.150992][ T9003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.165928][ T9003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.172424][ T5864] plantronics 0003:047F:FFFF.001A: item 0 0 0 9 parsing failed [ 238.182450][ T5864] plantronics 0003:047F:FFFF.001A: parse failed [ 238.188826][ T5864] plantronics 0003:047F:FFFF.001A: probe with driver plantronics failed with error -22 [ 238.407999][ T9006] FAULT_INJECTION: forcing a failure. [ 238.407999][ T9006] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 238.424272][ T9006] CPU: 1 UID: 0 PID: 9006 Comm: syz.3.914 Not tainted syzkaller #0 PREEMPT(full) [ 238.424303][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 238.424316][ T9006] Call Trace: [ 238.424323][ T9006] [ 238.424332][ T9006] dump_stack_lvl+0x189/0x250 [ 238.424367][ T9006] ? __pfx____ratelimit+0x10/0x10 [ 238.424388][ T9006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.424417][ T9006] ? __pfx__printk+0x10/0x10 [ 238.424446][ T9006] ? fs_reclaim_acquire+0x7d/0x100 [ 238.424476][ T9006] should_fail_ex+0x414/0x560 [ 238.424512][ T9006] prepare_alloc_pages+0x213/0x610 [ 238.424540][ T9006] __alloc_frozen_pages_noprof+0x123/0x370 [ 238.424567][ T9006] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 238.424609][ T9006] alloc_pages_bulk_noprof+0x560/0x710 [ 238.424644][ T9006] ? alloc_pages_noprof+0xbe/0x190 [ 238.424670][ T9006] kasan_populate_vmalloc+0xd1/0x270 [ 238.424699][ T9006] ? do_raw_spin_unlock+0x122/0x240 [ 238.424735][ T9006] alloc_vmap_area+0xd7a/0x14c0 [ 238.424779][ T9006] ? __pfx_alloc_vmap_area+0x10/0x10 [ 238.424804][ T9006] ? __kasan_kmalloc+0x93/0xb0 [ 238.424826][ T9006] ? __get_vm_area_node+0x13f/0x300 [ 238.424854][ T9006] ? copy_process+0x54b/0x3c00 [ 238.424880][ T9006] __get_vm_area_node+0x1f8/0x300 [ 238.424915][ T9006] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 238.424945][ T9006] ? copy_process+0x54b/0x3c00 [ 238.424979][ T9006] ? percpu_ref_get_many+0x19/0x140 [ 238.425009][ T9006] ? __memcg_slab_post_alloc_hook+0x517/0x7d0 [ 238.425044][ T9006] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 238.425078][ T9006] ? memcpy_and_pad+0x48/0x80 [ 238.425101][ T9006] __vmalloc_node_noprof+0xc2/0x110 [ 238.425130][ T9006] ? copy_process+0x54b/0x3c00 [ 238.425153][ T9006] ? copy_process+0x54b/0x3c00 [ 238.425180][ T9006] dup_task_struct+0x3d4/0x830 [ 238.425205][ T9006] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.425231][ T9006] copy_process+0x54b/0x3c00 [ 238.425286][ T9006] ? __pfx_copy_process+0x10/0x10 [ 238.425325][ T9006] vhost_task_create+0x1ce/0x320 [ 238.425353][ T9006] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 238.425383][ T9006] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 238.425412][ T9006] ? __pfx_vhost_task_create+0x10/0x10 [ 238.425449][ T9006] ? __pfx_vhost_task_fn+0x10/0x10 [ 238.425498][ T9006] kvm_mmu_post_init_vm+0x14c/0x300 [ 238.425522][ T9006] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 238.425548][ T9006] ? __mutex_trylock_common+0x153/0x260 [ 238.425579][ T9006] ? __pfx___mutex_trylock_common+0x10/0x10 [ 238.425606][ T9006] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 238.425635][ T9006] ? rcu_is_watching+0x15/0xb0 [ 238.425661][ T9006] ? trace_contention_end+0x39/0x120 [ 238.425688][ T9006] ? look_up_lock_class+0x74/0x170 [ 238.425712][ T9006] ? register_lock_class+0x51/0x320 [ 238.425741][ T9006] ? __lock_acquire+0xab9/0xd20 [ 238.425793][ T9006] kvm_vcpu_ioctl+0x95c/0xe90 [ 238.425819][ T9006] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 238.425862][ T9006] ? __fget_files+0x2a/0x420 [ 238.425891][ T9006] ? __fget_files+0x3a0/0x420 [ 238.425912][ T9006] ? __fget_files+0x2a/0x420 [ 238.425940][ T9006] ? bpf_lsm_file_ioctl+0x9/0x20 [ 238.425964][ T9006] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 238.425983][ T9006] __se_sys_ioctl+0xfc/0x170 [ 238.426015][ T9006] do_syscall_64+0xfa/0xfa0 [ 238.426037][ T9006] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.426060][ T9006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.426079][ T9006] ? clear_bhb_loop+0x60/0xb0 [ 238.426103][ T9006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.426122][ T9006] RIP: 0033:0x7f8bbd18eec9 [ 238.426140][ T9006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.426157][ T9006] RSP: 002b:00007f8bbdf71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.426178][ T9006] RAX: ffffffffffffffda RBX: 00007f8bbd3e5fa0 RCX: 00007f8bbd18eec9 [ 238.426193][ T9006] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 238.426205][ T9006] RBP: 00007f8bbdf71090 R08: 0000000000000000 R09: 0000000000000000 [ 238.426218][ T9006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.426230][ T9006] R13: 00007f8bbd3e6038 R14: 00007f8bbd3e5fa0 R15: 00007fffee8036e8 [ 238.426264][ T9006] [ 238.426852][ T9006] syz.3.914: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 238.554100][ T9008] overlayfs: failed to resolve './file1': -2 [ 238.557270][ T9006] ,cpuset=/,mems_allowed=0-1 [ 238.871623][ T9006] CPU: 1 UID: 0 PID: 9006 Comm: syz.3.914 Not tainted syzkaller #0 PREEMPT(full) [ 238.871648][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 238.871667][ T9006] Call Trace: [ 238.871674][ T9006] [ 238.871682][ T9006] dump_stack_lvl+0x189/0x250 [ 238.871714][ T9006] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 238.871735][ T9006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.871761][ T9006] ? __pfx__printk+0x10/0x10 [ 238.871784][ T9006] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 238.871810][ T9006] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 238.871843][ T9006] warn_alloc+0x214/0x310 [ 238.871859][ T9006] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.871886][ T9006] ? __pfx_warn_alloc+0x10/0x10 [ 238.871908][ T9006] ? copy_process+0x54b/0x3c00 [ 238.871931][ T9006] ? __get_vm_area_node+0x211/0x300 [ 238.871965][ T9006] __vmalloc_node_range_noprof+0x331/0x12d0 [ 238.872001][ T9006] ? percpu_ref_get_many+0x19/0x140 [ 238.872027][ T9006] ? __memcg_slab_post_alloc_hook+0x517/0x7d0 [ 238.872059][ T9006] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 238.872089][ T9006] ? memcpy_and_pad+0x48/0x80 [ 238.872110][ T9006] __vmalloc_node_noprof+0xc2/0x110 [ 238.872138][ T9006] ? copy_process+0x54b/0x3c00 [ 238.872159][ T9006] ? copy_process+0x54b/0x3c00 [ 238.872184][ T9006] dup_task_struct+0x3d4/0x830 [ 238.872207][ T9006] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.872232][ T9006] copy_process+0x54b/0x3c00 [ 238.872283][ T9006] ? __pfx_copy_process+0x10/0x10 [ 238.872320][ T9006] vhost_task_create+0x1ce/0x320 [ 238.872348][ T9006] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 238.872376][ T9006] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 238.872405][ T9006] ? __pfx_vhost_task_create+0x10/0x10 [ 238.872439][ T9006] ? __pfx_vhost_task_fn+0x10/0x10 [ 238.872481][ T9006] kvm_mmu_post_init_vm+0x14c/0x300 [ 238.872502][ T9006] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 238.872527][ T9006] ? __mutex_trylock_common+0x153/0x260 [ 238.872555][ T9006] ? __pfx___mutex_trylock_common+0x10/0x10 [ 238.872580][ T9006] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 238.872603][ T9006] ? rcu_is_watching+0x15/0xb0 [ 238.872626][ T9006] ? trace_contention_end+0x39/0x120 [ 238.872652][ T9006] ? look_up_lock_class+0x74/0x170 [ 238.872682][ T9006] ? register_lock_class+0x51/0x320 [ 238.872707][ T9006] ? __lock_acquire+0xab9/0xd20 [ 238.872755][ T9006] kvm_vcpu_ioctl+0x95c/0xe90 [ 238.872780][ T9006] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 238.872820][ T9006] ? __fget_files+0x2a/0x420 [ 238.872846][ T9006] ? __fget_files+0x3a0/0x420 [ 238.872866][ T9006] ? __fget_files+0x2a/0x420 [ 238.872891][ T9006] ? bpf_lsm_file_ioctl+0x9/0x20 [ 238.872920][ T9006] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 238.872937][ T9006] __se_sys_ioctl+0xfc/0x170 [ 238.872962][ T9006] do_syscall_64+0xfa/0xfa0 [ 238.872979][ T9006] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.872999][ T9006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.873014][ T9006] ? clear_bhb_loop+0x60/0xb0 [ 238.873035][ T9006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.873053][ T9006] RIP: 0033:0x7f8bbd18eec9 [ 238.873068][ T9006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.873084][ T9006] RSP: 002b:00007f8bbdf71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.873104][ T9006] RAX: ffffffffffffffda RBX: 00007f8bbd3e5fa0 RCX: 00007f8bbd18eec9 [ 238.873117][ T9006] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 238.873128][ T9006] RBP: 00007f8bbdf71090 R08: 0000000000000000 R09: 0000000000000000 [ 238.873140][ T9006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.873156][ T9006] R13: 00007f8bbd3e6038 R14: 00007f8bbd3e5fa0 R15: 00007fffee8036e8 [ 238.873189][ T9006] [ 238.873203][ T9006] Mem-Info: [ 238.961487][ T5980] usb 3-1: USB disconnect, device number 68 [ 238.965510][ T9013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.035816][ T9006] active_anon:66128 inactive_anon:0 isolated_anon:0 [ 239.035816][ T9006] active_file:18162 inactive_file:40018 isolated_file:0 [ 239.035816][ T9006] unevictable:768 dirty:115 writeback:0 [ 239.035816][ T9006] slab_reclaimable:11710 slab_unreclaimable:95243 [ 239.035816][ T9006] mapped:25232 shmem:59478 pagetables:1474 [ 239.035816][ T9006] sec_pagetables:0 bounce:0 [ 239.035816][ T9006] kernel_misc_reclaimable:0 [ 239.035816][ T9006] free:1249866 free_pcp:24923 free_cma:0 [ 239.062930][ T9013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.067465][ T9012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.093198][ T9006] Node 0 active_anon:264540kB inactive_anon:0kB active_file:72648kB inactive_file:159872kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100928kB dirty:460kB writeback:0kB shmem:236308kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12140kB pagetables:5660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 239.111927][ T9012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.169240][ T9006] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 239.313672][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.362025][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.400288][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.424859][ T9006] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.477528][ T9006] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 239.483457][ T9006] Node 0 DMA32 free:1124184kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB free_highatomic:0KB active_anon:242440kB inactive_anon:0kB active_file:72648kB inactive_file:159872kB unevictable:1536kB writepending:460kB zspages:0kB present:3129332kB managed:2549276kB mlocked:0kB bounce:0kB free_pcp:73260kB local_pcp:51184kB free_cma:0kB [ 239.517067][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.541643][ T9006] lowmem_reserve[]: 0 0 0 0 0 [ 239.549759][ T9006] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.579787][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.629389][ T9006] lowmem_reserve[]: 0 0 0 0 0 [ 239.634170][ T9006] Node 1 Normal free:3886020kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22180kB local_pcp:9764kB free_cma:0kB [ 239.666601][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.674063][ T9006] lowmem_reserve[]: 0 0 0 0 0 [ 239.678832][ T9006] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 239.699251][ T9006] Node 0 DMA32: 2114*4kB (UM) 902*8kB (UM) 443*16kB (UM) 271*32kB (UME) 96*64kB (UME) 138*128kB (UME) 100*256kB (UME) 29*512kB (UME) 11*1024kB (UM) 13*2048kB (M) 244*4096kB (M) = 1133000kB [ 239.729268][ T9006] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 239.747561][ T9006] Node 1 Normal: 155*4kB (UME) 27*8kB (UME) 38*16kB (UME) 127*32kB (UME) 31*64kB (UME) 11*128kB (UME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (ME) 0*2048kB 945*4096kB (M) = 3886020kB [ 239.781145][ T9033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.790348][ T9033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.798177][ T9006] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 239.814652][ T9033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.823327][ T9006] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 239.833971][ T9033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.842125][ T9006] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 239.852475][ T9006] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 239.881176][ T9006] 108239 total pagecache pages [ 239.887679][ T9006] 0 pages in swap cache [ 239.892407][ T9006] Free swap = 124996kB [ 239.896571][ T9006] Total swap = 124996kB [ 239.901419][ T9006] 2097051 pages RAM [ 239.905418][ T9006] 0 pages HighMem/MovableOnly [ 239.910952][ T9006] 428026 pages reserved [ 239.915241][ T9006] 0 pages cma reserved [ 240.110222][ T9042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.119485][ T5864] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 240.283476][ T5864] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 240.303255][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.319343][ T5864] usb 3-1: Product: syz [ 240.329265][ T5864] usb 3-1: Manufacturer: syz [ 240.339444][ T5864] usb 3-1: SerialNumber: syz [ 240.364397][ T5864] usb 3-1: config 0 descriptor?? [ 240.392838][ T5864] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 240.442662][ T9044] overlayfs: failed to resolve './file1': -2 [ 240.806185][ T9035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.831686][ T9035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.913254][ T9035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.959840][ T9035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.983151][ T5864] gspca_sunplus: reg_w_riv err -71 [ 240.988387][ T5864] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 241.048601][ T5864] usb 3-1: USB disconnect, device number 69 [ 241.226396][ T9062] program syz.3.930 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.717348][ T9078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.748733][ T9078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.849293][ T5980] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 241.875664][ T30] audit: type=1326 audit(2000000054.623:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.1.934" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7bbb8eec9 code=0x0 [ 242.099966][ T5980] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 242.110896][ T5980] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 242.132738][ T5980] usb 4-1: config 8 has no interface number 0 [ 242.139313][ T5980] usb 4-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 242.161897][ T5980] usb 4-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 242.175904][ T5980] usb 4-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 242.186116][ T5980] usb 4-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 242.199879][ T5980] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 242.226423][ T5980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.255427][ T5980] usb 4-1: NFC: intf ffff88801bb24000 id ffffffff8ef835e0 [ 242.260334][ T9086] overlayfs: failed to resolve './file1': -2 [ 242.343113][ T5980] nfcmrvl 4-1:8.80: NFC: registered with nci successfully [ 242.497788][ T5864] usb 4-1: USB disconnect, device number 77 [ 242.528118][ T5864] usb 4-1: NFC: intf ffff88801bb24000 [ 242.564534][ T9096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.613593][ T9096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.978045][ T9110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.017273][ T9110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.301809][ T9119] netlink: 'syz.3.945': attribute type 4 has an invalid length. [ 243.329730][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.945'. [ 243.988975][ T5980] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 244.043462][ T9137] netlink: 'syz.0.950': attribute type 21 has an invalid length. [ 244.060451][ T9137] netlink: 128 bytes leftover after parsing attributes in process `syz.0.950'. [ 244.077919][ T9137] netlink: 'syz.0.950': attribute type 4 has an invalid length. [ 244.087051][ T9137] netlink: 'syz.0.950': attribute type 3 has an invalid length. [ 244.097137][ T9137] netlink: 3 bytes leftover after parsing attributes in process `syz.0.950'. [ 244.160736][ T5980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.171900][ T5980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.186309][ T5980] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 244.210731][ T5980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.232903][ T5980] usb 4-1: config 0 descriptor?? [ 244.725512][ T9146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.735052][ T9146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.852857][ T5980] usbhid 4-1:0.0: can't add hid device: -71 [ 244.859661][ T5980] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 244.881827][ T5980] usb 4-1: USB disconnect, device number 78 [ 245.209007][ T5864] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 245.306131][ T9154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.315326][ T9154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.361254][ T5864] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 245.388872][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 245.428863][ T5864] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 245.498969][ T5864] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 245.508054][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.532891][ T5864] usb 3-1: Product: syz [ 245.537198][ T5864] usb 3-1: Manufacturer: syz [ 245.548901][ T5864] usb 3-1: SerialNumber: syz [ 245.568765][ T5864] usb 3-1: config 0 descriptor?? [ 245.581797][ T9151] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 245.589631][ T9151] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 245.610981][ T5864] usb 3-1: ucan: probing device on interface #0 [ 245.783363][ T9172] FAULT_INJECTION: forcing a failure. [ 245.783363][ T9172] name failslab, interval 1, probability 0, space 0, times 0 [ 245.801562][ T9172] CPU: 0 UID: 0 PID: 9172 Comm: syz.1.961 Not tainted syzkaller #0 PREEMPT(full) [ 245.801588][ T9172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 245.801611][ T9172] Call Trace: [ 245.801619][ T9172] [ 245.801627][ T9172] dump_stack_lvl+0x189/0x250 [ 245.801668][ T9172] ? __pfx____ratelimit+0x10/0x10 [ 245.801690][ T9172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.801717][ T9172] ? __pfx__printk+0x10/0x10 [ 245.801748][ T9172] ? __pfx___might_resched+0x10/0x10 [ 245.801783][ T9172] should_fail_ex+0x414/0x560 [ 245.801818][ T9172] should_failslab+0xa8/0x100 [ 245.801841][ T9172] __kmalloc_noprof+0xcb/0x7f0 [ 245.801867][ T9172] ? kfree+0x4d/0x6d0 [ 245.801888][ T9172] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 245.801915][ T9172] tomoyo_realpath_from_path+0xe3/0x5d0 [ 245.801940][ T9172] ? tomoyo_domain+0xd9/0x130 [ 245.801969][ T9172] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 245.801989][ T9172] tomoyo_path_number_perm+0x1e8/0x5a0 [ 245.802012][ T9172] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 245.802070][ T9172] ? __fget_files+0x2a/0x420 [ 245.802096][ T9172] ? __fget_files+0x3a0/0x420 [ 245.802115][ T9172] ? __fget_files+0x2a/0x420 [ 245.802140][ T9172] security_file_ioctl+0xcb/0x2d0 [ 245.802171][ T9172] __se_sys_ioctl+0x47/0x170 [ 245.802200][ T9172] do_syscall_64+0xfa/0xfa0 [ 245.802221][ T9172] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.802242][ T9172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.802261][ T9172] ? clear_bhb_loop+0x60/0xb0 [ 245.802287][ T9172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.802304][ T9172] RIP: 0033:0x7ff7bbb8eec9 [ 245.802322][ T9172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.802340][ T9172] RSP: 002b:00007ff7bc9b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.802360][ T9172] RAX: ffffffffffffffda RBX: 00007ff7bbde5fa0 RCX: 00007ff7bbb8eec9 [ 245.802375][ T9172] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 245.802386][ T9172] RBP: 00007ff7bc9b7090 R08: 0000000000000000 R09: 0000000000000000 [ 245.802399][ T9172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.802409][ T9172] R13: 00007ff7bbde6038 R14: 00007ff7bbde5fa0 R15: 00007ffd181db008 [ 245.802441][ T9172] [ 245.803825][ T9172] ERROR: Out of memory at tomoyo_realpath_from_path. [ 246.001948][ T5864] usb 3-1: ucan: device reported invalid tx-fifo size [ 246.080102][ T5864] usb 3-1: ucan: probe failed; try to update the device firmware [ 246.260828][ T5915] usb 3-1: USB disconnect, device number 70 [ 246.320122][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.965'. [ 246.329307][ T9187] : left allmulticast mode [ 246.334281][ T9187] : left promiscuous mode [ 246.339716][ T9187] bridge0: port 2() entered disabled state [ 246.362765][ T9187] bridge_slave_0: left allmulticast mode [ 246.368458][ T9187] bridge_slave_0: left promiscuous mode [ 246.375929][ T5864] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 246.386826][ T9187] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.423384][ T9192] Invalid logical block size (6) [ 246.506582][ T9197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.522176][ T9197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.537328][ T9197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.546448][ T9197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.556800][ T9197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.565822][ T9197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.592320][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.607459][ T5864] usb 4-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 246.626995][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.648465][ T5864] usb 4-1: config 0 descriptor?? [ 246.743688][ T9200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.758306][ T9202] netlink: 'syz.2.969': attribute type 2 has an invalid length. [ 246.759118][ T9201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.777997][ T9200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.780655][ T9202] netlink: 'syz.2.969': attribute type 1 has an invalid length. [ 246.787797][ T9201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.836689][ T9201] netlink: 'syz.1.970': attribute type 2 has an invalid length. [ 246.885039][ T9200] netlink: 'syz.1.970': attribute type 2 has an invalid length. [ 247.208959][ T5902] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 247.263741][ T9182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.272754][ T9182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.282849][ T9182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.291648][ T9182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.302555][ T9182] netlink: 136 bytes leftover after parsing attributes in process `syz.3.963'. [ 247.318171][ T982] usb 4-1: USB disconnect, device number 79 [ 247.360901][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 247.368231][ T5902] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 247.376826][ T5902] usb 3-1: config 0 has no interface number 0 [ 247.383352][ T5902] usb 3-1: config 0 interface 12 has no altsetting 0 [ 247.392518][ T5902] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 247.401786][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.410110][ T5902] usb 3-1: Product: syz [ 247.414379][ T5902] usb 3-1: Manufacturer: syz [ 247.419290][ T5902] usb 3-1: SerialNumber: syz [ 247.424319][ T9207] FAULT_INJECTION: forcing a failure. [ 247.424319][ T9207] name failslab, interval 1, probability 0, space 0, times 0 [ 247.437402][ T9207] CPU: 1 UID: 0 PID: 9207 Comm: syz.0.972 Not tainted syzkaller #0 PREEMPT(full) [ 247.437428][ T9207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 247.437440][ T9207] Call Trace: [ 247.437448][ T9207] [ 247.437457][ T9207] dump_stack_lvl+0x189/0x250 [ 247.437491][ T9207] ? __pfx____ratelimit+0x10/0x10 [ 247.437514][ T9207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.437542][ T9207] ? __pfx__printk+0x10/0x10 [ 247.437573][ T9207] ? __pfx___might_resched+0x10/0x10 [ 247.437596][ T9207] ? fs_reclaim_acquire+0x7d/0x100 [ 247.437620][ T9207] should_fail_ex+0x414/0x560 [ 247.437666][ T9207] should_failslab+0xa8/0x100 [ 247.437687][ T9207] __kmalloc_noprof+0xcb/0x7f0 [ 247.437715][ T9207] ? tomoyo_encode+0x28b/0x550 [ 247.437751][ T9207] tomoyo_encode+0x28b/0x550 [ 247.437780][ T9207] tomoyo_realpath_from_path+0x58d/0x5d0 [ 247.437807][ T9207] ? tomoyo_domain+0xd9/0x130 [ 247.437837][ T9207] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 247.437857][ T9207] tomoyo_path_number_perm+0x1e8/0x5a0 [ 247.437879][ T9207] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 247.437937][ T9207] ? __fget_files+0x2a/0x420 [ 247.437965][ T9207] ? __fget_files+0x3a0/0x420 [ 247.437987][ T9207] ? __fget_files+0x2a/0x420 [ 247.438013][ T9207] security_file_ioctl+0xcb/0x2d0 [ 247.438044][ T9207] __se_sys_ioctl+0x47/0x170 [ 247.438076][ T9207] do_syscall_64+0xfa/0xfa0 [ 247.438098][ T9207] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.438120][ T9207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.438139][ T9207] ? clear_bhb_loop+0x60/0xb0 [ 247.438162][ T9207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.438181][ T9207] RIP: 0033:0x7fcf2cd8eec9 [ 247.438196][ T9207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.438212][ T9207] RSP: 002b:00007fcf2dcd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.438231][ T9207] RAX: ffffffffffffffda RBX: 00007fcf2cfe6090 RCX: 00007fcf2cd8eec9 [ 247.438246][ T9207] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 247.438257][ T9207] RBP: 00007fcf2dcd4090 R08: 0000000000000000 R09: 0000000000000000 [ 247.438270][ T9207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.438282][ T9207] R13: 00007fcf2cfe6128 R14: 00007fcf2cfe6090 R15: 00007ffd153edb98 [ 247.438314][ T9207] [ 247.438337][ T9207] ERROR: Out of memory at tomoyo_realpath_from_path. [ 247.476500][ T5902] usb 3-1: config 0 descriptor?? [ 247.621618][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.838369][ T9220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.851372][ T9220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.856409][ T9217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.872171][ T9217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.987556][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.977'. [ 248.310270][ T5902] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 248.318677][ T5902] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 248.326174][ T5902] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 248.333929][ T5902] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 248.347472][ T5902] usb 3-1: USB disconnect, device number 71 [ 248.585601][ T9237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.598049][ T9237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.609379][ T9239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.618226][ T9239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.628126][ T9239] Invalid source name [ 248.632332][ T9239] UBIFS error (pid: 9239): cannot open "./file0", error -22 [ 248.817666][ T9241] FAULT_INJECTION: forcing a failure. [ 248.817666][ T9241] name failslab, interval 1, probability 0, space 0, times 0 [ 248.838810][ T9241] CPU: 0 UID: 0 PID: 9241 Comm: syz.3.984 Not tainted syzkaller #0 PREEMPT(full) [ 248.838836][ T9241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 248.838848][ T9241] Call Trace: [ 248.838855][ T9241] [ 248.838864][ T9241] dump_stack_lvl+0x189/0x250 [ 248.838897][ T9241] ? __pfx____ratelimit+0x10/0x10 [ 248.838920][ T9241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.838949][ T9241] ? __pfx__printk+0x10/0x10 [ 248.838977][ T9241] ? __pfx___might_resched+0x10/0x10 [ 248.839001][ T9241] ? fs_reclaim_acquire+0x7d/0x100 [ 248.839025][ T9241] should_fail_ex+0x414/0x560 [ 248.839060][ T9241] should_failslab+0xa8/0x100 [ 248.839083][ T9241] __kmalloc_cache_noprof+0x6f/0x6f0 [ 248.839108][ T9241] ? trace_contention_end+0x39/0x120 [ 248.839133][ T9241] ? vhost_task_create+0xf8/0x320 [ 248.839164][ T9241] vhost_task_create+0xf8/0x320 [ 248.839190][ T9241] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 248.839219][ T9241] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 248.839248][ T9241] ? __pfx_vhost_task_create+0x10/0x10 [ 248.839280][ T9241] ? __pfx_vhost_task_fn+0x10/0x10 [ 248.839324][ T9241] kvm_mmu_post_init_vm+0x14c/0x300 [ 248.839347][ T9241] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 248.839373][ T9241] ? __mutex_trylock_common+0x153/0x260 [ 248.839401][ T9241] ? __pfx___mutex_trylock_common+0x10/0x10 [ 248.839427][ T9241] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 248.839456][ T9241] ? rcu_is_watching+0x15/0xb0 [ 248.839481][ T9241] ? trace_contention_end+0x39/0x120 [ 248.839502][ T9241] ? look_up_lock_class+0x74/0x170 [ 248.839515][ T9241] ? register_lock_class+0x51/0x320 [ 248.839530][ T9241] ? __lock_acquire+0xab9/0xd20 [ 248.839557][ T9241] kvm_vcpu_ioctl+0x95c/0xe90 [ 248.839570][ T9241] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 248.839592][ T9241] ? __fget_files+0x2a/0x420 [ 248.839607][ T9241] ? __fget_files+0x3a0/0x420 [ 248.839618][ T9241] ? __fget_files+0x2a/0x420 [ 248.839632][ T9241] ? bpf_lsm_file_ioctl+0x9/0x20 [ 248.839645][ T9241] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 248.839654][ T9241] __se_sys_ioctl+0xfc/0x170 [ 248.839671][ T9241] do_syscall_64+0xfa/0xfa0 [ 248.839683][ T9241] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.839697][ T9241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.839707][ T9241] ? clear_bhb_loop+0x60/0xb0 [ 248.839719][ T9241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.839729][ T9241] RIP: 0033:0x7f8bbd18eec9 [ 248.839740][ T9241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.839749][ T9241] RSP: 002b:00007f8bbdf71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.839761][ T9241] RAX: ffffffffffffffda RBX: 00007f8bbd3e5fa0 RCX: 00007f8bbd18eec9 [ 248.839769][ T9241] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 248.839775][ T9241] RBP: 00007f8bbdf71090 R08: 0000000000000000 R09: 0000000000000000 [ 248.839782][ T9241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.839787][ T9241] R13: 00007f8bbd3e6038 R14: 00007f8bbd3e5fa0 R15: 00007fffee8036e8 [ 248.839804][ T9241] [ 249.151943][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.468803][ T5864] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 249.515466][ T9255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.525687][ T9255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.628809][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 249.635545][ T5864] usb 4-1: config 1 has an invalid interface number: 155 but max is 0 [ 249.644109][ T5864] usb 4-1: config 1 has no interface number 0 [ 249.650397][ T5864] usb 4-1: config 1 interface 155 altsetting 7 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 249.658723][ T5980] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 249.661521][ T5864] usb 4-1: config 1 interface 155 has no altsetting 0 [ 249.677669][ T5864] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice=3a.77 [ 249.686801][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.694853][ T5864] usb 4-1: Product: syz [ 249.699141][ T5864] usb 4-1: Manufacturer: syz [ 249.703752][ T5864] usb 4-1: SerialNumber: syz [ 249.818854][ T5980] usb 3-1: Using ep0 maxpacket: 8 [ 249.825886][ T5980] usb 3-1: config 162 has an invalid interface number: 246 but max is 1 [ 249.834785][ T5980] usb 3-1: config 162 has an invalid interface number: 245 but max is 1 [ 249.849485][ T5980] usb 3-1: config 162 has no interface number 0 [ 249.855890][ T5980] usb 3-1: config 162 has no interface number 1 [ 249.862460][ T5980] usb 3-1: config 162 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 249.876334][ T5980] usb 3-1: config 162 interface 245 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 249.887432][ T5980] usb 3-1: config 162 interface 245 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 249.899447][ T5980] usb 3-1: config 162 interface 245 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 249.911341][ T5980] usb 3-1: config 162 interface 245 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 249.922229][ T5980] usb 3-1: config 162 interface 245 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 249.928115][ T9245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.935833][ T5980] usb 3-1: config 162 interface 246 has no altsetting 0 [ 249.947646][ T9245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.952984][ T5980] usb 3-1: config 162 interface 245 has no altsetting 0 [ 249.970603][ T5980] usb 3-1: New USB device found, idVendor=8087, idProduct=0a5a, bcdDevice=5f.2c [ 249.974144][ T5864] appletouch 4-1:1.155: Could not find int-in endpoint [ 249.980007][ T5980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.987032][ T5864] appletouch 4-1:1.155: probe with driver appletouch failed with error -5 [ 249.997650][ T5980] usb 3-1: Product: syz [ 250.009661][ T5980] usb 3-1: Manufacturer: syz [ 250.014710][ T5980] usb 3-1: SerialNumber: syz [ 250.015516][ T5864] usbhid 4-1:1.155: couldn't find an input interrupt endpoint [ 250.041571][ T5864] usb 4-1: USB disconnect, device number 80 [ 250.094730][ T9257] netlink: 'syz.0.992': attribute type 10 has an invalid length. [ 250.096446][ T9258] QAT: Invalid ioctl 21531 [ 250.103643][ T9257] lo: entered promiscuous mode [ 250.113061][ T9259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.120617][ T9257] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 250.124291][ T9259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.182070][ T9262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.191184][ T9262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.234236][ T5980] Bluetooth: failed to set interface 0, alt 0 -22 [ 250.240966][ T5980] btusb 3-1:162.245: probe with driver btusb failed with error -22 [ 250.259031][ T5980] usb 3-1: USB disconnect, device number 72 [ 250.540162][ T9264] FAULT_INJECTION: forcing a failure. [ 250.540162][ T9264] name failslab, interval 1, probability 0, space 0, times 0 [ 250.553080][ T9264] CPU: 1 UID: 0 PID: 9264 Comm: syz.3.994 Not tainted syzkaller #0 PREEMPT(full) [ 250.553095][ T9264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 250.553103][ T9264] Call Trace: [ 250.553107][ T9264] [ 250.553111][ T9264] dump_stack_lvl+0x189/0x250 [ 250.553132][ T9264] ? __pfx____ratelimit+0x10/0x10 [ 250.553145][ T9264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.553160][ T9264] ? __pfx__printk+0x10/0x10 [ 250.553178][ T9264] ? __pfx___might_resched+0x10/0x10 [ 250.553196][ T9264] ? fs_reclaim_acquire+0x7d/0x100 [ 250.553209][ T9264] should_fail_ex+0x414/0x560 [ 250.553228][ T9264] should_failslab+0xa8/0x100 [ 250.553239][ T9264] kmem_cache_alloc_node_noprof+0x77/0x710 [ 250.553255][ T9264] ? dup_task_struct+0x52/0x830 [ 250.553272][ T9264] dup_task_struct+0x52/0x830 [ 250.553285][ T9264] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.553299][ T9264] copy_process+0x54b/0x3c00 [ 250.553327][ T9264] ? __pfx_copy_process+0x10/0x10 [ 250.553347][ T9264] vhost_task_create+0x1ce/0x320 [ 250.553362][ T9264] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 250.553378][ T9264] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 250.553394][ T9264] ? __pfx_vhost_task_create+0x10/0x10 [ 250.553412][ T9264] ? __pfx_vhost_task_fn+0x10/0x10 [ 250.553439][ T9264] kvm_mmu_post_init_vm+0x14c/0x300 [ 250.553453][ T9264] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 250.553466][ T9264] ? __mutex_trylock_common+0x153/0x260 [ 250.553482][ T9264] ? __pfx___mutex_trylock_common+0x10/0x10 [ 250.553496][ T9264] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 250.553508][ T9264] ? rcu_is_watching+0x15/0xb0 [ 250.553521][ T9264] ? trace_contention_end+0x39/0x120 [ 250.553535][ T9264] ? look_up_lock_class+0x74/0x170 [ 250.553548][ T9264] ? register_lock_class+0x51/0x320 [ 250.553562][ T9264] ? __lock_acquire+0xab9/0xd20 [ 250.553588][ T9264] kvm_vcpu_ioctl+0x95c/0xe90 [ 250.553601][ T9264] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 250.553622][ T9264] ? __fget_files+0x2a/0x420 [ 250.553637][ T9264] ? __fget_files+0x3a0/0x420 [ 250.553648][ T9264] ? __fget_files+0x2a/0x420 [ 250.553662][ T9264] ? bpf_lsm_file_ioctl+0x9/0x20 [ 250.553674][ T9264] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 250.553684][ T9264] __se_sys_ioctl+0xfc/0x170 [ 250.553701][ T9264] do_syscall_64+0xfa/0xfa0 [ 250.553712][ T9264] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.553723][ T9264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.553733][ T9264] ? clear_bhb_loop+0x60/0xb0 [ 250.553745][ T9264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.553754][ T9264] RIP: 0033:0x7f8bbd18eec9 [ 250.553764][ T9264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.553773][ T9264] RSP: 002b:00007f8bbdf71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.553785][ T9264] RAX: ffffffffffffffda RBX: 00007f8bbd3e5fa0 RCX: 00007f8bbd18eec9 [ 250.553792][ T9264] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 250.553798][ T9264] RBP: 00007f8bbdf71090 R08: 0000000000000000 R09: 0000000000000000 [ 250.553805][ T9264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.553810][ T9264] R13: 00007f8bbd3e6038 R14: 00007f8bbd3e5fa0 R15: 00007fffee8036e8 [ 250.553827][ T9264] [ 250.963250][ T9268] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 251.269736][ T9282] Failed to get privilege flags for destination (handle=0x2:0xffffffff) [ 251.294050][ T9282] fuse: Unknown parameter '000000000000000000000x000000000000000b' [ 251.518650][ T5862] Bluetooth: hci4: command 0x1003 tx timeout [ 251.519056][ T5184] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 251.539249][ T9293] FAULT_INJECTION: forcing a failure. [ 251.539249][ T9293] name failslab, interval 1, probability 0, space 0, times 0 [ 251.563313][ T9293] CPU: 0 UID: 0 PID: 9293 Comm: syz.2.1003 Not tainted syzkaller #0 PREEMPT(full) [ 251.563338][ T9293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 251.563349][ T9293] Call Trace: [ 251.563356][ T9293] [ 251.563363][ T9293] dump_stack_lvl+0x189/0x250 [ 251.563394][ T9293] ? __pfx____ratelimit+0x10/0x10 [ 251.563413][ T9293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.563438][ T9293] ? __pfx__printk+0x10/0x10 [ 251.563465][ T9293] ? __pfx___might_resched+0x10/0x10 [ 251.563485][ T9293] ? fs_reclaim_acquire+0x7d/0x100 [ 251.563507][ T9293] should_fail_ex+0x414/0x560 [ 251.563538][ T9293] should_failslab+0xa8/0x100 [ 251.563557][ T9293] __kmalloc_cache_node_noprof+0x74/0x6f0 [ 251.563584][ T9293] ? __get_vm_area_node+0x13f/0x300 [ 251.563614][ T9293] __get_vm_area_node+0x13f/0x300 [ 251.563642][ T9293] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 251.563668][ T9293] ? copy_process+0x54b/0x3c00 [ 251.563698][ T9293] ? percpu_ref_get_many+0x19/0x140 [ 251.563725][ T9293] ? __memcg_slab_post_alloc_hook+0x517/0x7d0 [ 251.563756][ T9293] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 251.563783][ T9293] ? memcpy_and_pad+0x48/0x80 [ 251.563803][ T9293] __vmalloc_node_noprof+0xc2/0x110 [ 251.563829][ T9293] ? copy_process+0x54b/0x3c00 [ 251.563847][ T9293] ? copy_process+0x54b/0x3c00 [ 251.563870][ T9293] dup_task_struct+0x3d4/0x830 [ 251.563891][ T9293] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.563915][ T9293] copy_process+0x54b/0x3c00 [ 251.563964][ T9293] ? __pfx_copy_process+0x10/0x10 [ 251.563998][ T9293] vhost_task_create+0x1ce/0x320 [ 251.564023][ T9293] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 251.564049][ T9293] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 251.564074][ T9293] ? __pfx_vhost_task_create+0x10/0x10 [ 251.564116][ T9293] ? __pfx_vhost_task_fn+0x10/0x10 [ 251.564158][ T9293] kvm_mmu_post_init_vm+0x14c/0x300 [ 251.564178][ T9293] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 251.564202][ T9293] ? __mutex_trylock_common+0x153/0x260 [ 251.564229][ T9293] ? __pfx___mutex_trylock_common+0x10/0x10 [ 251.564252][ T9293] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 251.564272][ T9293] ? rcu_is_watching+0x15/0xb0 [ 251.564294][ T9293] ? trace_contention_end+0x39/0x120 [ 251.564317][ T9293] ? look_up_lock_class+0x74/0x170 [ 251.564339][ T9293] ? register_lock_class+0x51/0x320 [ 251.564364][ T9293] ? __lock_acquire+0xab9/0xd20 [ 251.564411][ T9293] kvm_vcpu_ioctl+0x95c/0xe90 [ 251.564433][ T9293] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 251.564470][ T9293] ? __fget_files+0x2a/0x420 [ 251.564495][ T9293] ? __fget_files+0x3a0/0x420 [ 251.564513][ T9293] ? __fget_files+0x2a/0x420 [ 251.564536][ T9293] ? bpf_lsm_file_ioctl+0x9/0x20 [ 251.564557][ T9293] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 251.564573][ T9293] __se_sys_ioctl+0xfc/0x170 [ 251.564602][ T9293] do_syscall_64+0xfa/0xfa0 [ 251.564621][ T9293] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.564640][ T9293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.564656][ T9293] ? clear_bhb_loop+0x60/0xb0 [ 251.564677][ T9293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.564693][ T9293] RIP: 0033:0x7fa938d8eec9 [ 251.564710][ T9293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.564724][ T9293] RSP: 002b:00007fa939b49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.564743][ T9293] RAX: ffffffffffffffda RBX: 00007fa938fe6090 RCX: 00007fa938d8eec9 [ 251.564755][ T9293] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 251.564765][ T9293] RBP: 00007fa939b49090 R08: 0000000000000000 R09: 0000000000000000 [ 251.564775][ T9293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.564785][ T9293] R13: 00007fa938fe6128 R14: 00007fa938fe6090 R15: 00007ffe8e0191a8 [ 251.564816][ T9293] [ 251.564827][ T9293] syz.2.1003: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 251.662534][ T9295] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1004'. [ 251.665893][ T9293] ,cpuset= [ 251.751883][ T9295] netlink: 'syz.3.1004': attribute type 6 has an invalid length. [ 251.751929][ T9295] netlink: 'syz.3.1004': attribute type 5 has an invalid length. [ 251.751942][ T9295] netlink: 'syz.3.1004': attribute type 4 has an invalid length. [ 252.005784][ T9293] /,mems_allowed=0-1 [ 252.012555][ T9293] CPU: 0 UID: 0 PID: 9293 Comm: syz.2.1003 Not tainted syzkaller #0 PREEMPT(full) [ 252.012580][ T9293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.012590][ T9293] Call Trace: [ 252.012598][ T9293] [ 252.012604][ T9293] dump_stack_lvl+0x189/0x250 [ 252.012632][ T9293] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 252.012654][ T9293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.012679][ T9293] ? __pfx__printk+0x10/0x10 [ 252.012704][ T9293] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 252.012733][ T9293] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 252.012771][ T9293] warn_alloc+0x214/0x310 [ 252.012797][ T9293] ? __pfx_warn_alloc+0x10/0x10 [ 252.012824][ T9293] ? __get_vm_area_node+0x2b5/0x300 [ 252.012859][ T9293] __vmalloc_node_range_noprof+0x331/0x12d0 [ 252.012898][ T9293] ? percpu_ref_get_many+0x19/0x140 [ 252.012926][ T9293] ? __memcg_slab_post_alloc_hook+0x517/0x7d0 [ 252.012960][ T9293] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 252.012992][ T9293] ? memcpy_and_pad+0x48/0x80 [ 252.013015][ T9293] __vmalloc_node_noprof+0xc2/0x110 [ 252.013043][ T9293] ? copy_process+0x54b/0x3c00 [ 252.013063][ T9293] ? copy_process+0x54b/0x3c00 [ 252.013097][ T9293] dup_task_struct+0x3d4/0x830 [ 252.013121][ T9293] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.013147][ T9293] copy_process+0x54b/0x3c00 [ 252.013201][ T9293] ? __pfx_copy_process+0x10/0x10 [ 252.013239][ T9293] vhost_task_create+0x1ce/0x320 [ 252.013265][ T9293] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 252.013292][ T9293] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 252.013318][ T9293] ? __pfx_vhost_task_create+0x10/0x10 [ 252.013348][ T9293] ? __pfx_vhost_task_fn+0x10/0x10 [ 252.013394][ T9293] kvm_mmu_post_init_vm+0x14c/0x300 [ 252.013417][ T9293] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 252.013444][ T9293] ? __mutex_trylock_common+0x153/0x260 [ 252.013473][ T9293] ? __pfx___mutex_trylock_common+0x10/0x10 [ 252.013501][ T9293] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 252.013523][ T9293] ? rcu_is_watching+0x15/0xb0 [ 252.013549][ T9293] ? trace_contention_end+0x39/0x120 [ 252.013574][ T9293] ? look_up_lock_class+0x74/0x170 [ 252.013598][ T9293] ? register_lock_class+0x51/0x320 [ 252.013626][ T9293] ? __lock_acquire+0xab9/0xd20 [ 252.013677][ T9293] kvm_vcpu_ioctl+0x95c/0xe90 [ 252.013701][ T9293] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 252.013742][ T9293] ? __fget_files+0x2a/0x420 [ 252.013771][ T9293] ? __fget_files+0x3a0/0x420 [ 252.013793][ T9293] ? __fget_files+0x2a/0x420 [ 252.013820][ T9293] ? bpf_lsm_file_ioctl+0x9/0x20 [ 252.013844][ T9293] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 252.013863][ T9293] __se_sys_ioctl+0xfc/0x170 [ 252.013894][ T9293] do_syscall_64+0xfa/0xfa0 [ 252.013915][ T9293] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.013936][ T9293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.013955][ T9293] ? clear_bhb_loop+0x60/0xb0 [ 252.013978][ T9293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.013996][ T9293] RIP: 0033:0x7fa938d8eec9 [ 252.014014][ T9293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.014030][ T9293] RSP: 002b:00007fa939b49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.014051][ T9293] RAX: ffffffffffffffda RBX: 00007fa938fe6090 RCX: 00007fa938d8eec9 [ 252.014065][ T9293] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 252.014077][ T9293] RBP: 00007fa939b49090 R08: 0000000000000000 R09: 0000000000000000 [ 252.014095][ T9293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.014106][ T9293] R13: 00007fa938fe6128 R14: 00007fa938fe6090 R15: 00007ffe8e0191a8 [ 252.014139][ T9293] [ 252.014147][ T9293] Mem-Info: [ 252.033863][ T9301] overlay: Unknown parameter '/' [ 252.036947][ T9293] active_anon:55685 inactive_anon:0 isolated_anon:0 [ 252.036947][ T9293] active_file:20082 inactive_file:40026 isolated_file:0 [ 252.036947][ T9293] unevictable:768 dirty:27 writeback:0 [ 252.036947][ T9293] slab_reclaimable:11743 slab_unreclaimable:95079 [ 252.036947][ T9293] mapped:25376 shmem:48824 pagetables:1585 [ 252.036947][ T9293] sec_pagetables:0 bounce:0 [ 252.036947][ T9293] kernel_misc_reclaimable:0 [ 252.036947][ T9293] free:1257177 free_pcp:26019 free_cma:0 [ 252.072986][ T9303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.073666][ T9293] Node 0 active_anon:222340kB inactive_anon:0kB active_file:80328kB inactive_file:159900kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101604kB dirty:108kB writeback:0kB shmem:193360kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12200kB pagetables:6188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 252.133038][ T9303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.136953][ T9293] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 252.433653][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.474173][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.511878][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.548526][ T9293] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.557468][ T5915] libceph: connect (1)[c::]:6789 error -101 [ 252.578745][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.599654][ T9293] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 252.605896][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 252.615254][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 252.624956][ T9293] Node 0 DMA32 free:1133304kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB free_highatomic:0KB active_anon:219740kB inactive_anon:0kB active_file:80328kB inactive_file:159900kB unevictable:1536kB writepending:108kB zspages:0kB present:3129332kB managed:2549276kB mlocked:0kB bounce:0kB free_pcp:77348kB local_pcp:56956kB free_cma:0kB [ 252.661811][ T5915] libceph: mon0 (1)[c::]:6789 connect error [ 252.667868][ T9293] lowmem_reserve[]: 0 0 0 0 0 [ 252.682968][ T9293] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.715243][ T9293] lowmem_reserve[]: 0 0 0 0 0 [ 252.720962][ T9293] Node 1 Normal free:3886276kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21924kB local_pcp:12160kB free_cma:0kB [ 252.758211][ T9293] lowmem_reserve[]: 0 0 0 0 0 [ 252.763497][ T9293] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 252.776815][ T9293] Node 0 DMA32: 1853*4kB (UM) 1799*8kB (UM) 954*16kB (UM) 693*32kB (UME) 321*64kB (UME) 152*128kB (UME) 61*256kB (UME) 26*512kB (UME) 7*1024kB (UM) 7*2048kB (UM) 240*4096kB (UM) = 1132716kB [ 252.816852][ T9293] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 252.834263][ T9293] Node 1 Normal: 155*4kB (UME) 27*8kB (UME) 38*16kB (UME) 133*32kB (UME) 32*64kB (UME) 11*128kB (UME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (ME) 0*2048kB 945*4096kB (M) = 3886276kB [ 252.873259][ T9293] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 252.893665][ T9293] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 252.913964][ T9293] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 252.926430][ T5915] libceph: connect (1)[c::]:6789 error -101 [ 252.932780][ T5915] libceph: mon0 (1)[c::]:6789 connect error [ 252.939265][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 252.945367][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 252.966312][ T9293] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 252.996640][ T9293] 110851 total pagecache pages [ 253.001898][ T9293] 0 pages in swap cache [ 253.019701][ T9293] Free swap = 124996kB [ 253.027526][ T9293] Total swap = 124996kB [ 253.035207][ T9293] 2097051 pages RAM [ 253.043729][ T9293] 0 pages HighMem/MovableOnly [ 253.049589][ T9305] ceph: No mds server is up or the cluster is laggy [ 253.068499][ T9293] 428026 pages reserved [ 253.072787][ T9309] ceph: No mds server is up or the cluster is laggy [ 253.080505][ T9293] 0 pages cma reserved [ 253.543396][ T9330] netlink: 37 bytes leftover after parsing attributes in process `syz.2.1014'. [ 254.018414][ T939] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 254.180877][ T939] usb 3-1: not running at top speed; connect to a high speed hub [ 254.206625][ T939] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 254.221408][ T939] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.249163][ T939] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 254.272922][ T939] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 254.283313][ T939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.297361][ T939] usb 3-1: Product: ᰔ橝᮴뵐꿱靖쾀㊲卸辴쐆괢当Ｖ఍텈팁⑀咋轢虧꓆滰젘丹ˢﴩ䪿躳闎ῥꢤ痄骛ᛧ퐬ۗ淴㜌ꁟ썯蜈莜암ޏꈷ첤௞ [ 254.334374][ T939] usb 3-1: Manufacturer: ဌ [ 254.349585][ T939] usb 3-1: SerialNumber: 睊 [ 254.555416][ T9361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.579331][ T9361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.584488][ T939] usb 3-1: 0:2 : does not exist [ 254.588237][ T9361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.644882][ T939] usb 3-1: USB disconnect, device number 73 [ 254.702080][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.726273][ T9361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.854495][ T9371] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1022'. [ 254.891649][ T9374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.918720][ T982] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 254.937238][ T9374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.080922][ T982] usb 4-1: unable to get BOS descriptor or descriptor too short [ 255.090434][ T982] usb 4-1: config 6 has an invalid interface number: 200 but max is 0 [ 255.100397][ T982] usb 4-1: config 6 has no interface number 0 [ 255.106654][ T982] usb 4-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 255.132987][ T982] usb 4-1: config 6 interface 200 has no altsetting 0 [ 255.136421][ T9378] binder: 9376:9378 ioctl 4018620d 0 returned -22 [ 255.152162][ T982] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 255.161611][ T982] usb 4-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 255.171590][ T982] usb 4-1: Product: syz [ 255.178382][ T982] usb 4-1: Manufacturer: syz [ 255.186027][ T982] usb 4-1: SerialNumber: syz [ 255.220605][ T9378] overlayfs: failed to resolve './file1': -2 [ 255.615681][ T982] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 255.628336][ T939] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 255.659226][ T9383] cgroup: Name too long [ 255.778280][ T939] usb 3-1: device descriptor read/64, error -71 [ 255.829774][ T982] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 255.849060][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.855401][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.889144][ T982] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 255.897047][ T982] usb 4-1: media controller created [ 255.975576][ T982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 255.984378][ T9390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.009240][ T9390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.018411][ T939] usb 3-1: new low-speed USB device number 75 using dummy_hcd [ 256.056147][ T982] dvb-usb: recv bulk message failed: -22 [ 256.158411][ T939] usb 3-1: device descriptor read/64, error -71 [ 256.278689][ T939] usb usb3-port1: attempt power cycle [ 256.844425][ T9397] Invalid option length (0) for dns_resolver key [ 257.288682][ T939] usb 3-1: new low-speed USB device number 76 using dummy_hcd [ 257.318812][ T939] usb 3-1: device descriptor read/8, error -71 [ 257.555597][ T9412] binder: 9411:9412 ioctl 4018620d 0 returned -22 [ 257.568686][ T939] usb 3-1: new low-speed USB device number 77 using dummy_hcd [ 257.609819][ T939] usb 3-1: device descriptor read/8, error -71 [ 257.646023][ T982] dvb-usb: bulk message failed: -71 (6/0) [ 257.663974][ T982] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 257.700896][ T982] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input33 [ 257.702480][ T9416] overlayfs: failed to resolve './file1': -2 [ 257.721110][ T982] dvb-usb: schedule remote query interval to 150 msecs. [ 257.728898][ T982] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 257.738545][ T939] usb usb3-port1: unable to enumerate USB device [ 257.757033][ T982] usb 4-1: USB disconnect, device number 81 [ 258.010469][ T982] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 258.227637][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 258.396169][ T982] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 258.571476][ T982] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 258.581812][ T982] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.592359][ T982] usb 4-1: config 0 has no interface number 0 [ 258.608309][ T982] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 258.617654][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.665729][ T982] usb 4-1: config 0 descriptor?? [ 258.671785][ T9439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1044'. [ 258.683462][ T9439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.683561][ T982] ttusbir 4-1:0.83: cannot find expected altsetting [ 258.716048][ T9439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.738184][ T5915] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 258.768900][ T9439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1044'. [ 258.894898][ T9448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.917586][ T9446] binder: 9445:9446 ioctl 4018620d 0 returned -22 [ 258.924778][ T5915] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 258.926465][ T9448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.933153][ T9418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.953258][ T5915] usb 3-1: config 0 has no interface number 0 [ 258.965073][ T9450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.974557][ T9418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.986127][ T5915] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 258.995984][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.007773][ T5864] usb 4-1: USB disconnect, device number 82 [ 259.018171][ T5915] usb 3-1: Product: syz [ 259.022487][ T5915] usb 3-1: Manufacturer: syz [ 259.027108][ T5915] usb 3-1: SerialNumber: syz [ 259.033869][ T9446] overlayfs: failed to resolve './file1': -2 [ 259.053925][ T5915] usb 3-1: config 0 descriptor?? [ 259.064655][ T9450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.102134][ T9448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.150176][ T9448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.398112][ T5864] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 259.560077][ T5864] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 259.568649][ T5864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.591515][ T5864] usb 4-1: config 0 has no interface number 0 [ 259.597726][ T5864] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 259.622601][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.641418][ T5864] usb 4-1: config 0 descriptor?? [ 259.661856][ T5864] ttusbir 4-1:0.83: cannot find expected altsetting [ 259.920712][ T982] usb 4-1: USB disconnect, device number 83 [ 260.319171][ T5915] usb 3-1: Firmware version (0.0) predates our first public release. [ 260.327404][ T5915] usb 3-1: Please update to version 0.2 or newer [ 260.399531][ T9474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1053'. [ 260.408709][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'. [ 260.624892][ T9478] netlink: 'syz.0.1055': attribute type 33 has an invalid length. [ 260.648023][ T9478] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1055'. [ 260.735795][ T5902] hid_parser_main: 5 callbacks suppressed [ 260.735818][ T5902] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 260.765842][ T5902] hid-generic 0000:0000:0000.001C: hidraw1: HID v0.00 Device [syz1] on syz0 [ 260.775976][ T982] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 260.940530][ T982] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 260.958788][ T982] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 260.991974][ T982] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.008028][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.016262][ T982] usb 4-1: Product: syz [ 261.026402][ T982] usb 4-1: Manufacturer: syz [ 261.031379][ T982] usb 4-1: SerialNumber: syz [ 261.054187][ T9489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.054704][ T9476] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 261.085707][ T9489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.289530][ T9476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.299033][ T9476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.323850][ T982] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 261.346670][ T982] usb 4-1: USB disconnect, device number 84 [ 261.503843][ T5902] usb 3-1: USB disconnect, device number 78 [ 261.935376][ T9496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.204694][ T9504] tmpfs: Bad value for 'mpol' [ 262.210933][ T9503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.219993][ T9503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.448022][ T5902] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 262.599727][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 262.611721][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.621685][ T5902] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 262.630865][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.648961][ T5902] usb 3-1: config 0 descriptor?? [ 262.768133][ T982] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 262.785325][ T9516] loop2: detected capacity change from 0 to 8 [ 262.793998][ T5875] Dev loop2: unable to read RDB block 8 [ 262.803833][ T5875] loop2: unable to read partition table [ 262.810074][ T5875] loop2: partition table beyond EOD, truncated [ 262.818233][ T9516] Dev loop2: unable to read RDB block 8 [ 262.823950][ T9516] loop2: unable to read partition table [ 262.830314][ T9516] loop2: partition table beyond EOD, truncated [ 262.836681][ T9516] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 262.919525][ T9521] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1069'. [ 262.928992][ T9521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1069'. [ 262.933997][ T982] usb 4-1: unable to get BOS descriptor or descriptor too short [ 262.938983][ T9521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1069'. [ 262.953344][ T982] usb 4-1: not running at top speed; connect to a high speed hub [ 262.979462][ T982] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 262.997940][ T982] usb 4-1: config 1 has no interface number 1 [ 263.004195][ T982] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 263.021256][ T982] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 263.035721][ T982] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.047931][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.056522][ T982] usb 4-1: Product: syz [ 263.062968][ T982] usb 4-1: Manufacturer: syz [ 263.071625][ T982] usb 4-1: SerialNumber: syz [ 263.078440][ T5902] bigben 0003:146B:0902.001D: unexpected rdesc, please submit for review [ 263.139025][ T5902] bigben 0003:146B:0902.001D: hidraw1: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.2-1/input0 [ 263.165403][ T5902] bigben 0003:146B:0902.001D: missing HID_OUTPUT_REPORT 0 [ 263.182864][ T5902] bigben 0003:146B:0902.001D: no output report found [ 263.197717][ T9532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.227601][ T9532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.320316][ T5902] usb 3-1: USB disconnect, device number 79 [ 263.343558][ T982] usb 4-1: 2:1 : unsupported format bits 0x80 [ 263.391414][ T982] usb 4-1: USB disconnect, device number 85 [ 263.404334][ T9541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.414829][ T9541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.430622][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.904244][ T9547] loop2: detected capacity change from 0 to 8 [ 263.911953][ T9547] Dev loop2: unable to read RDB block 8 [ 263.917572][ T9547] loop2: unable to read partition table [ 263.923566][ T9547] loop2: partition table beyond EOD, truncated [ 263.929820][ T9547] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 264.077897][ T5864] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 264.120315][ T9554] tipc: Started in network mode [ 264.125387][ T9554] tipc: Node identity 4, cluster identity 4711 [ 264.132494][ T9554] tipc: Node number set to 4 [ 264.237833][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 264.251770][ T5864] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 264.266813][ T5864] usb 4-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 264.292662][ T5864] usb 4-1: config 0 has no interface number 0 [ 264.305385][ T5864] usb 4-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 264.325014][ T5864] usb 4-1: New USB device found, idVendor=1435, idProduct=3185, bcdDevice=ae.1a [ 264.334876][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.343539][ T5864] usb 4-1: Product: syz [ 264.352051][ T5864] usb 4-1: Manufacturer: syz [ 264.356724][ T5864] usb 4-1: SerialNumber: syz [ 264.364149][ T5864] usb 4-1: config 0 descriptor?? [ 264.425034][ T9567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.440462][ T9567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.468910][ T9569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.567536][ T9572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.574245][ T24] usb 4-1: USB disconnect, device number 86 [ 264.578088][ T9572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.603110][ T9572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.612602][ T9572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.623407][ T9572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.634002][ T9572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.003213][ T9574] loop2: detected capacity change from 0 to 8 [ 265.010557][ T9574] Dev loop2: unable to read RDB block 8 [ 265.016233][ T9574] loop2: unable to read partition table [ 265.022519][ T9574] loop2: partition table beyond EOD, truncated [ 265.029302][ T9574] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 265.117850][ T30] audit: type=1326 audit(2000000077.874:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.0.1089" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf2cd8eec9 code=0x0 [ 265.139611][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.178282][ T9578] kvm: user requested TSC rate below hardware speed [ 265.186263][ T9578] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 265.211516][ T9578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.238121][ T9578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.262559][ T9587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.274144][ T9587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.291635][ T9587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.310441][ T9587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.447823][ T24] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 265.613007][ T24] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 265.622052][ T24] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 265.633078][ T24] usb 3-1: config 220 has no interface number 2 [ 265.639510][ T24] usb 3-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0x6F, changing to 0xF [ 265.651347][ T24] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 265.662381][ T24] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 265.675523][ T24] usb 3-1: config 220 interface 0 has no altsetting 0 [ 265.683992][ T24] usb 3-1: config 220 interface 76 has no altsetting 0 [ 265.691885][ T24] usb 3-1: config 220 interface 1 has no altsetting 0 [ 265.700935][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 265.710057][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.718138][ T24] usb 3-1: Product: syz [ 265.722318][ T24] usb 3-1: Manufacturer: syz [ 265.726960][ T24] usb 3-1: SerialNumber: syz [ 265.847802][ T982] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 265.877249][ T9603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.886261][ T9603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.002287][ T982] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.004728][ T24] usb 3-1: selecting invalid altsetting 0 [ 266.027847][ T982] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 266.031716][ T24] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 266.045772][ T24] uvcvideo 3-1:220.0: No valid video chain found. [ 266.049938][ T982] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 266.062201][ T24] usb 3-1: selecting invalid altsetting 0 [ 266.062561][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.072610][ T24] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 266.077595][ T982] usb 4-1: Product: syz [ 266.098069][ T982] usb 4-1: Manufacturer: syz [ 266.102785][ T982] usb 4-1: SerialNumber: syz [ 266.120708][ T9607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.121166][ T982] usb 4-1: config 0 descriptor?? [ 266.132595][ T24] usb 3-1: USB disconnect, device number 80 [ 266.145738][ T9607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.582343][ T9609] loop2: detected capacity change from 0 to 8 [ 266.590807][ T5863] Dev loop2: unable to read RDB block 8 [ 266.596509][ T5863] loop2: unable to read partition table [ 266.604620][ T5863] loop2: partition table beyond EOD, truncated [ 266.612298][ T9609] Dev loop2: unable to read RDB block 8 [ 266.618038][ T9609] loop2: unable to read partition table [ 266.623921][ T9609] loop2: partition table beyond EOD, truncated [ 266.630681][ T9609] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 266.815379][ T9619] C: renamed from team_slave_0 (while UP) [ 266.827131][ T9624] netlink: 'syz.2.1103': attribute type 75 has an invalid length. [ 266.838391][ T9619] netlink: 'syz.0.1101': attribute type 4 has an invalid length. [ 266.846480][ T9619] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1101'. [ 266.856145][ T9619] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 266.992450][ T9633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.001466][ T9633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.072383][ T9635] syzkaller1: entered promiscuous mode [ 267.078269][ T9635] syzkaller1: entered allmulticast mode [ 267.204269][ T9639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.214430][ T9639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.234744][ T9639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.244848][ T9639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.283839][ T9641] loop2: detected capacity change from 0 to 8 [ 267.291041][ T9641] Dev loop2: unable to read RDB block 8 [ 267.296647][ T9641] loop2: unable to read partition table [ 267.302968][ T9641] loop2: partition table beyond EOD, truncated [ 267.309550][ T9641] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 267.328208][ T9642] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.341900][ T9642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.366793][ T9642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.560818][ T9651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.570241][ T9653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.570577][ T9651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.588842][ T9653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.172704][ T9660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.187218][ T9660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.644596][ T24] usb 4-1: USB disconnect, device number 87 [ 268.818743][ T5902] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 269.048196][ T5902] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 269.059566][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.068753][ T5902] usb 3-1: Product: syz [ 269.073460][ T5902] usb 3-1: Manufacturer: syz [ 269.079152][ T5902] usb 3-1: SerialNumber: syz [ 269.088941][ T5902] usb 3-1: config 0 descriptor?? [ 269.167157][ T9703] nfs4: Unknown parameter 'overlay' [ 269.183940][ T9703] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 269.206122][ T9703] overlayfs: missing 'lowerdir' [ 269.338798][ T5902] usb-storage 3-1:0.0: USB Mass Storage device detected [ 269.411254][ T9709] netlink: 'syz.0.1127': attribute type 25 has an invalid length. [ 269.569251][ T5902] usb 3-1: USB disconnect, device number 81 [ 269.710251][ T9714] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 269.729623][ T9714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.742444][ T9714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.117486][ T982] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 270.281195][ T982] usb 4-1: Using ep0 maxpacket: 32 [ 270.309479][ T982] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 270.336522][ T982] usb 4-1: config 0 has no interface number 0 [ 270.348212][ T982] usb 4-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 270.391391][ T982] usb 4-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 270.417615][ T982] usb 4-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 270.448061][ T982] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 270.459956][ T9727] random: crng reseeded on system resumption [ 270.470290][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.490343][ T982] usb 4-1: Product: syz [ 270.494555][ T982] usb 4-1: Manufacturer: syz [ 270.507430][ T982] usb 4-1: SerialNumber: syz [ 270.514922][ T982] usb 4-1: config 0 descriptor?? [ 270.531782][ T982] redrat3 4-1:0.83: Couldn't find all endpoints [ 270.653084][ T9733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.775408][ T9733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.792904][ T9740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.813059][ T9740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.827660][ T9733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.836582][ T9733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.866228][ T9741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.876747][ T9741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.000990][ T9747] loop2: detected capacity change from 0 to 8 [ 271.011129][ T9747] Dev loop2: unable to read RDB block 8 [ 271.016747][ T9747] loop2: unable to read partition table [ 271.023587][ T9747] loop2: partition table beyond EOD, truncated [ 271.032003][ T9747] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 271.243698][ T5902] usb 4-1: USB disconnect, device number 88 [ 271.327749][ T24] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 271.479162][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 271.500151][ T24] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 271.508807][ T24] usb 3-1: config 179 has no interface number 0 [ 271.517938][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 271.537836][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 271.549432][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 271.566899][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 271.591821][ T24] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 271.618464][ T24] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 271.628855][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.648347][ T9753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.649755][ T9749] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 271.683629][ T9753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.716126][ T9759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.728258][ T9759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.771193][ T9759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.787196][ T9759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.091113][ T9749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.100901][ T9749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.130012][ T5902] usb 3-1: USB disconnect, device number 82 [ 272.130015][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 272.130150][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 272.170115][ T982] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 272.252956][ T9774] loop2: detected capacity change from 0 to 8 [ 272.267743][ T9774] Dev loop2: unable to read RDB block 8 [ 272.273408][ T9774] loop2: unable to read partition table [ 272.280087][ T9774] loop2: partition table beyond EOD, truncated [ 272.297465][ T9774] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 272.337413][ T982] usb 4-1: Using ep0 maxpacket: 8 [ 272.349824][ T982] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.373683][ T982] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08 [ 272.384836][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.393858][ T982] usb 4-1: Product: syz [ 272.399922][ T982] usb 4-1: Manufacturer: syz [ 272.404741][ T982] usb 4-1: SerialNumber: syz [ 272.433549][ T982] usb 4-1: config 0 descriptor?? [ 272.463770][ T982] comedi comedi5: Wrong number of endpoints [ 272.477191][ T982] dt9812 4-1:0.0: driver 'dt9812' failed to auto-configure device. [ 272.643309][ T9788] overlayfs: failed to resolve './file1': -2 [ 272.678097][ T982] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 272.839265][ T982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.850064][ T982] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 272.878267][ T982] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.912628][ T982] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 272.927458][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.943892][ T982] usb 3-1: Product: syz [ 272.963915][ T982] usb 3-1: Manufacturer: syz [ 272.970979][ T982] usb 3-1: SerialNumber: syz [ 272.984286][ T9803] loop2: detected capacity change from 0 to 8 [ 272.986181][ T982] usb 3-1: config 0 descriptor?? [ 273.001354][ T982] dm9601 3-1:0.0: probe with driver dm9601 failed with error -22 [ 273.008750][ T9803] Dev loop2: unable to read RDB block 8 [ 273.025095][ T9803] loop2: unable to read partition table [ 273.047949][ T9803] loop2: partition table beyond EOD, truncated [ 273.105221][ T9803] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 273.134548][ T9807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.157720][ T9807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.205817][ T9807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.214784][ T9807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.277682][ T9812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.286600][ T9812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.298715][ T9812] blk_print_req_error: 138 callbacks suppressed [ 273.298733][ T9812] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.315609][ T9812] buffer_io_error: 138 callbacks suppressed [ 273.315623][ T9812] Buffer I/O error on dev nbd0, logical block 0, async page read [ 273.330100][ T9812] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.340094][ T9812] Buffer I/O error on dev nbd0, logical block 1, async page read [ 273.349184][ T9812] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.367468][ T9812] Buffer I/O error on dev nbd0, logical block 2, async page read [ 273.375861][ T9812] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.385589][ T9812] Buffer I/O error on dev nbd0, logical block 3, async page read [ 273.394160][ T9812] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.404462][ T9812] Buffer I/O error on dev nbd0, logical block 0, async page read [ 273.417495][ T9812] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.426939][ T9812] Buffer I/O error on dev nbd0, logical block 1, async page read [ 273.435651][ T9812] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.445276][ T9812] Buffer I/O error on dev nbd0, logical block 2, async page read [ 273.454440][ T9812] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.464097][ T9812] Buffer I/O error on dev nbd0, logical block 3, async page read [ 273.472610][ T9812] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.501913][ T9812] Buffer I/O error on dev nbd0, logical block 0, async page read [ 273.511520][ T9812] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.521319][ T9812] Buffer I/O error on dev nbd0, logical block 1, async page read [ 273.536035][ T9812] ldm_validate_partition_table(): Disk read failed. [ 273.545589][ T9812] Dev nbd0: unable to read RDB block 0 [ 273.553921][ T9812] nbd0: unable to read partition table [ 273.738499][ T5915] usb 4-1: USB disconnect, device number 89 [ 273.790778][ T9820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.801642][ T9820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.819688][ T9820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.830651][ T9820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.892758][ T9823] overlayfs: failed to resolve './file1': -2 [ 274.221755][ T9830] comedi comedi4: bad chanlist[0]=0x00080002 chan=2 range length=2 [ 274.344184][ T9834] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1169'. [ 274.380848][ T9832] : renamed from dummy0 (while UP) [ 274.435358][ T9837] : renamed from lo (while UP) [ 275.073106][ T9867] overlayfs: failed to resolve './file1': -2 [ 275.097358][ T5915] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 275.237374][ T5915] usb 4-1: device descriptor read/64, error -71 [ 275.479334][ T982] usb 3-1: USB disconnect, device number 83 [ 275.487228][ T5915] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 275.542651][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1177'. [ 275.615425][ T9892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.677391][ T5915] usb 4-1: device descriptor read/64, error -71 [ 275.695711][ T9892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.760472][ T9892] program syz.1.1175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.802135][ T5915] usb usb4-port1: attempt power cycle [ 275.905135][ T9885] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1175'. [ 275.929949][ T9902] loop2: detected capacity change from 0 to 8 [ 275.941523][ T9902] Dev loop2: unable to read RDB block 8 [ 275.948234][ T9902] loop2: unable to read partition table [ 275.954237][ T9902] loop2: partition table beyond EOD, truncated [ 276.007356][ T9902] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 276.136084][ T9904] loop2: detected capacity change from 0 to 7 [ 276.157374][ T982] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 276.165208][ T9904] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 276.177185][ T5915] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 276.189391][ T9904] loop2: partition table partially beyond EOD, truncated [ 276.207241][ T9904] loop2: p1 size 4294377484 extends beyond EOD, truncated [ 276.217869][ T5915] usb 4-1: device descriptor read/8, error -71 [ 276.287405][ T982] usb 3-1: device descriptor read/64, error -71 [ 276.321790][ T5875] udevd[5875]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 276.467163][ T5915] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 276.536170][ T5915] usb 4-1: device descriptor read/8, error -71 [ 276.547206][ T982] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 276.647407][ T5915] usb usb4-port1: unable to enumerate USB device [ 276.697113][ T982] usb 3-1: device descriptor read/64, error -71 [ 276.812060][ T982] usb usb3-port1: attempt power cycle [ 277.087995][ T9913] overlayfs: failed to resolve './file1': -2 [ 277.167468][ T982] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 277.210264][ T982] usb 3-1: device descriptor read/8, error -71 [ 277.277209][ T9919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.289317][ T9919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.356505][ T9921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.367813][ T9921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.388146][ T9921] netlink: 'syz.1.1185': attribute type 10 has an invalid length. [ 277.396007][ T9921] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1185'. [ 277.468196][ T982] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 277.497837][ T982] usb 3-1: device descriptor read/8, error -71 [ 277.618987][ T982] usb usb3-port1: unable to enumerate USB device [ 277.948091][ T9927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.000879][ T9927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.248582][ T9938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.277425][ T9938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.556895][ T9944] overlayfs: failed to resolve './file1': -2 [ 278.646164][ T9951] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1195'. [ 278.679977][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1195'. [ 279.406992][ T5864] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 279.544604][ T9975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.696479][ T9975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.756988][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 279.775641][ T5864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.794246][ T5864] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 279.815494][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.832867][ T5864] usb 4-1: Product: syz [ 279.863430][ T5864] usb 4-1: Manufacturer: syz [ 279.876955][ T5864] usb 4-1: SerialNumber: syz [ 279.888352][ T5864] usb 4-1: config 0 descriptor?? [ 279.918541][ T5864] usb 4-1: bad CDC descriptors [ 279.927988][ T5864] usb 4-1: unsupported MDLM descriptors [ 279.987249][ T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 280.129835][ T982] usb 4-1: USB disconnect, device number 94 [ 280.159901][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.181906][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 280.202419][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.248277][ T9] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 280.267012][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.275081][ T9] usb 3-1: Product: syz [ 280.287109][ T9] usb 3-1: Manufacturer: syz [ 280.291874][ T9] usb 3-1: SerialNumber: syz [ 280.309658][ T9] usb 3-1: config 0 descriptor?? [ 280.315382][ T9977] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 280.339640][ T9] dm9601 3-1:0.0: probe with driver dm9601 failed with error -22 [ 280.576479][ T9983] binder: BINDER_SET_CONTEXT_MGR already set [ 280.589576][ T9983] binder: 9982:9983 ioctl 4018620d 200000000140 returned -16 [ 280.683559][ T9983] overlayfs: failed to resolve './file1': -2 [ 281.017064][ T9] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 281.198137][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 281.214938][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.244749][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.266844][ T9] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 281.286877][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.308194][ T9] usb 4-1: config 0 descriptor?? [ 281.351495][ T9995] binder: 9994:9995 ioctl 400c620e 0 returned -14 [ 281.746979][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 281.753057][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 281.780060][ T9] usb 4-1: USB disconnect, device number 95 [ 281.991153][T10012] binder: 10011:10012 ioctl c018620c 200000000280 returned -1 [ 282.006182][T10012] binder: binder_mmap: 10011 200000ffe000-200000fff000 bad vm_flags failed -1 [ 282.028491][T10013] binder: binder_mmap: 10011 200000ffe000-200000fff000 bad vm_flags failed -1 [ 282.057547][T10012] CIFS mount error: No usable UNC path provided in device string! [ 282.057547][T10012] [ 282.076021][T10012] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 282.399966][T10020] overlayfs: failed to resolve './file1': -2 [ 282.578759][T10025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.601625][T10025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.723605][T10027] netlink: 696 bytes leftover after parsing attributes in process `syz.3.1218'. [ 282.782069][ T9] usb 3-1: USB disconnect, device number 88 [ 282.897118][T10031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.908073][T10031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.998132][ T5915] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 283.206761][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 283.219711][ T5915] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 283.246831][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.260081][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.273437][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 283.288642][ T5915] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 283.297796][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.306487][T10039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1222'. [ 283.315655][T10039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1222'. [ 283.335849][ T5915] usb 4-1: config 0 descriptor?? [ 283.758722][ T5915] redragon 0003:0C45:760B.001E: unknown main item tag 0x6 [ 283.772863][ T5915] redragon 0003:0C45:760B.001E: item fetching failed at offset 7/133 [ 283.797552][ T5915] redragon 0003:0C45:760B.001E: probe with driver redragon failed with error -22 [ 283.832471][T10055] overlayfs: failed to resolve './file1': -2 [ 283.962258][ T9] usb 4-1: USB disconnect, device number 96 [ 283.968934][T10026] block nbd3: shutting down sockets [ 284.050993][T10060] binder: 10059:10060 ioctl 40046205 0 returned -22 [ 284.113268][T10041] lo speed is unknown, defaulting to 1000 [ 284.144837][T10063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.175858][T10063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.356961][ T982] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 284.508677][ T982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.526712][ T982] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 284.537802][ T982] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.579195][ T982] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 284.592418][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.606812][ T982] usb 3-1: Product: syz [ 284.616686][ T982] usb 3-1: Manufacturer: syz [ 284.627120][ T982] usb 3-1: SerialNumber: syz [ 284.639614][ T982] usb 3-1: config 0 descriptor?? [ 284.656255][T10062] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 284.669116][ T982] dm9601 3-1:0.0: probe with driver dm9601 failed with error -22 [ 284.826729][ T5915] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 284.860603][T10041] [ 284.862970][T10041] ====================================================== [ 284.870086][T10041] WARNING: possible circular locking dependency detected [ 284.877135][T10041] syzkaller #0 Not tainted [ 284.881652][T10041] ------------------------------------------------------ [ 284.889039][T10041] syz.0.1223/10041 is trying to acquire lock: [ 284.895217][T10041] ffffffff8f958928 (xps_map_mutex){+.+.}-{4:4}, at: netif_reset_xps_queues_gt+0x73/0xc0 [ 284.904991][T10041] [ 284.904991][T10041] but task is already holding lock: [ 284.912539][T10041] ffffffff8e3d53b0 (cpu_hotplug_lock){++++}-{0:0}, at: netif_reset_xps_queues_gt+0x65/0xc0 [ 284.922607][T10041] [ 284.922607][T10041] which lock already depends on the new lock. [ 284.922607][T10041] [ 284.933526][T10041] [ 284.933526][T10041] the existing dependency chain (in reverse order) is: [ 284.942618][T10041] [ 284.942618][T10041] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 284.950351][T10041] lock_acquire+0x120/0x360 [ 284.955554][T10041] cpus_read_lock+0x42/0x160 [ 284.960664][T10041] static_key_slow_inc+0x12/0x30 [ 284.966140][T10041] setup_udp_tunnel_sock+0x34f/0x550 [ 284.971952][T10041] l2tp_tunnel_register+0xcb6/0x1320 [ 284.977764][T10041] pppol2tp_connect+0x87c/0x1750 [ 284.983224][T10041] __sys_connect+0x316/0x440 [ 284.988532][T10041] __x64_sys_connect+0x7a/0x90 [ 284.993980][T10041] do_syscall_64+0xfa/0xfa0 [ 284.999079][T10041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.005479][T10041] [ 285.005479][T10041] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 285.013133][T10041] lock_acquire+0x120/0x360 [ 285.018155][T10041] lock_sock_nested+0x48/0x100 [ 285.023451][T10041] inet_shutdown+0x6a/0x390 [ 285.028493][T10041] nbd_mark_nsock_dead+0x2e9/0x560 [ 285.034131][T10041] sock_shutdown+0x15e/0x260 [ 285.039262][T10041] nbd_config_put+0x342/0x790 [ 285.044472][T10041] nbd_release+0xfe/0x140 [ 285.049323][T10041] bdev_release+0x536/0x650 [ 285.054344][T10041] blkdev_release+0x15/0x20 [ 285.059374][T10041] __fput+0x44c/0xa70 [ 285.063881][T10041] task_work_run+0x1d4/0x260 [ 285.068991][T10041] exit_to_user_mode_loop+0xe9/0x130 [ 285.074796][T10041] do_syscall_64+0x2bd/0xfa0 [ 285.079895][T10041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.086301][T10041] [ 285.086301][T10041] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 285.094044][T10041] lock_acquire+0x120/0x360 [ 285.099063][T10041] __mutex_lock+0x187/0x1350 [ 285.104163][T10041] nbd_queue_rq+0x257/0xf10 [ 285.109190][T10041] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 285.115259][T10041] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 285.122193][T10041] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 285.128688][T10041] blk_mq_run_hw_queue+0x348/0x4f0 [ 285.134310][T10041] blk_mq_dispatch_list+0xd0c/0xe00 [ 285.140016][T10041] blk_mq_flush_plug_list+0x469/0x550 [ 285.145982][T10041] __blk_flush_plug+0x3d3/0x4b0 [ 285.151347][T10041] __submit_bio+0x2d3/0x5a0 [ 285.156381][T10041] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 285.162529][T10041] block_read_full_folio+0x599/0x830 [ 285.168328][T10041] filemap_read_folio+0x117/0x380 [ 285.174035][T10041] do_read_cache_folio+0x350/0x590 [ 285.179659][T10041] read_part_sector+0xb6/0x2b0 [ 285.185022][T10041] adfspart_check_ICS+0xa4/0xa50 [ 285.190468][T10041] bdev_disk_changed+0x75f/0x14b0 [ 285.196096][T10041] blkdev_get_whole+0x380/0x510 [ 285.201481][T10041] bdev_open+0x31e/0xd30 [ 285.206246][T10041] blkdev_open+0x457/0x600 [ 285.211266][T10041] do_dentry_open+0x953/0x13f0 [ 285.216980][T10041] vfs_open+0x3b/0x340 [ 285.221576][T10041] path_openat+0x2ee5/0x3830 [ 285.226697][T10041] do_filp_open+0x1fa/0x410 [ 285.231908][T10041] do_sys_openat2+0x121/0x1c0 [ 285.237215][T10041] __x64_sys_openat+0x138/0x170 [ 285.242769][T10041] do_syscall_64+0xfa/0xfa0 [ 285.247845][T10041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.254269][T10041] [ 285.254269][T10041] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 285.261492][T10041] lock_acquire+0x120/0x360 [ 285.266607][T10041] __mutex_lock+0x187/0x1350 [ 285.271727][T10041] nbd_queue_rq+0xc8/0xf10 [ 285.276689][T10041] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 285.282758][T10041] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 285.289611][T10041] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 285.296109][T10041] blk_mq_run_hw_queue+0x348/0x4f0 [ 285.301731][T10041] blk_mq_dispatch_list+0xd0c/0xe00 [ 285.307537][T10041] blk_mq_flush_plug_list+0x469/0x550 [ 285.313420][T10041] __blk_flush_plug+0x3d3/0x4b0 [ 285.318779][T10041] __submit_bio+0x2d3/0x5a0 [ 285.324146][T10041] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 285.330284][T10041] block_read_full_folio+0x599/0x830 [ 285.336072][T10041] filemap_read_folio+0x117/0x380 [ 285.341602][T10041] do_read_cache_folio+0x350/0x590 [ 285.347342][T10041] read_part_sector+0xb6/0x2b0 [ 285.352633][T10041] adfspart_check_ICS+0xa4/0xa50 [ 285.358202][T10041] bdev_disk_changed+0x75f/0x14b0 [ 285.363842][T10041] blkdev_get_whole+0x380/0x510 [ 285.369247][T10041] bdev_open+0x31e/0xd30 [ 285.374000][T10041] blkdev_open+0x457/0x600 [ 285.378963][T10041] do_dentry_open+0x953/0x13f0 [ 285.384251][T10041] vfs_open+0x3b/0x340 [ 285.388839][T10041] path_openat+0x2ee5/0x3830 [ 285.393942][T10041] do_filp_open+0x1fa/0x410 [ 285.399041][T10041] do_sys_openat2+0x121/0x1c0 [ 285.404233][T10041] __x64_sys_openat+0x138/0x170 [ 285.409626][T10041] do_syscall_64+0xfa/0xfa0 [ 285.414642][T10041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.421052][T10041] [ 285.421052][T10041] -> #4 (set->srcu){.+.+}-{0:0}: [ 285.428603][T10041] lock_sync+0xba/0x160 [ 285.433272][T10041] __synchronize_srcu+0x96/0x3a0 [ 285.438720][T10041] elevator_switch+0x12b/0x640 [ 285.444091][T10041] elevator_change+0x315/0x4c0 [ 285.449367][T10041] elevator_set_default+0x186/0x260 [ 285.455112][T10041] blk_register_queue+0x34e/0x3f0 [ 285.460760][T10041] __add_disk+0x677/0xd50 [ 285.465604][T10041] add_disk_fwnode+0xfc/0x480 [ 285.470796][T10041] nbd_dev_add+0x717/0xae0 [ 285.475728][T10041] nbd_init+0x168/0x1f0 [ 285.480396][T10041] do_one_initcall+0x236/0x820 [ 285.485676][T10041] do_initcall_level+0x104/0x190 [ 285.491315][T10041] do_initcalls+0x59/0xa0 [ 285.496256][T10041] kernel_init_freeable+0x334/0x4b0 [ 285.501991][T10041] kernel_init+0x1d/0x1d0 [ 285.506868][T10041] ret_from_fork+0x4bc/0x870 [ 285.512335][T10041] ret_from_fork_asm+0x1a/0x30 [ 285.517620][T10041] [ 285.517620][T10041] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 285.525443][T10041] lock_acquire+0x120/0x360 [ 285.530468][T10041] __mutex_lock+0x187/0x1350 [ 285.535575][T10041] elevator_change+0x1e5/0x4c0 [ 285.540847][T10041] elevator_set_none+0x42/0xb0 [ 285.546294][T10041] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 285.552710][T10041] nbd_start_device+0x17f/0xb10 [ 285.558481][T10041] nbd_genl_connect+0x135b/0x18f0 [ 285.564040][T10041] genl_family_rcv_msg_doit+0x215/0x300 [ 285.570230][T10041] genl_rcv_msg+0x60e/0x790 [ 285.575436][T10041] netlink_rcv_skb+0x208/0x470 [ 285.580720][T10041] genl_rcv+0x28/0x40 [ 285.585219][T10041] netlink_unicast+0x82f/0x9e0 [ 285.590501][T10041] netlink_sendmsg+0x805/0xb30 [ 285.595839][T10041] __sock_sendmsg+0x21c/0x270 [ 285.601083][T10041] ____sys_sendmsg+0x505/0x830 [ 285.606374][T10041] ___sys_sendmsg+0x21f/0x2a0 [ 285.611560][T10041] __x64_sys_sendmsg+0x19b/0x260 [ 285.617190][T10041] do_syscall_64+0xfa/0xfa0 [ 285.622379][T10041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.628809][T10041] [ 285.628809][T10041] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 285.637408][T10041] lock_acquire+0x120/0x360 [ 285.642444][T10041] blk_alloc_queue+0x538/0x620 [ 285.647739][T10041] __blk_mq_alloc_disk+0x15c/0x340 [ 285.653364][T10041] nbd_dev_add+0x46c/0xae0 [ 285.658322][T10041] nbd_init+0x168/0x1f0 [ 285.663000][T10041] do_one_initcall+0x236/0x820 [ 285.668293][T10041] do_initcall_level+0x104/0x190 [ 285.673748][T10041] do_initcalls+0x59/0xa0 [ 285.678593][T10041] kernel_init_freeable+0x334/0x4b0 [ 285.684302][T10041] kernel_init+0x1d/0x1d0 [ 285.689144][T10041] ret_from_fork+0x4bc/0x870 [ 285.694241][T10041] ret_from_fork_asm+0x1a/0x30 [ 285.699512][T10041] [ 285.699512][T10041] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 285.706710][T10041] lock_acquire+0x120/0x360 [ 285.711721][T10041] fs_reclaim_acquire+0x72/0x100 [ 285.717167][T10041] __kmalloc_noprof+0x9c/0x7f0 [ 285.722498][T10041] __netif_set_xps_queue+0x51a/0x1ea0 [ 285.728394][T10041] virtnet_set_affinity+0x5b3/0x6f0 [ 285.734768][T10041] init_vqs+0x1173/0x12d0 [ 285.741478][T10041] virtnet_probe+0x219a/0x46e0 [ 285.747037][T10041] virtio_dev_probe+0xcb0/0xfe0 [ 285.752397][T10041] really_probe+0x26d/0x9e0 [ 285.757507][T10041] __driver_probe_device+0x18c/0x2f0 [ 285.763482][T10041] driver_probe_device+0x4f/0x430 [ 285.769549][T10041] __driver_attach+0x452/0x700 [ 285.774825][T10041] bus_for_each_dev+0x233/0x2b0 [ 285.780367][T10041] bus_add_driver+0x345/0x640 [ 285.785578][T10041] driver_register+0x23a/0x320 [ 285.790854][T10041] virtio_net_driver_init+0x71/0xa0 [ 285.796562][T10041] do_one_initcall+0x236/0x820 [ 285.801837][T10041] do_initcall_level+0x104/0x190 [ 285.807285][T10041] do_initcalls+0x59/0xa0 [ 285.812125][T10041] kernel_init_freeable+0x334/0x4b0 [ 285.817834][T10041] kernel_init+0x1d/0x1d0 [ 285.822681][T10041] ret_from_fork+0x4bc/0x870 [ 285.827784][T10041] ret_from_fork_asm+0x1a/0x30 [ 285.833248][T10041] [ 285.833248][T10041] -> #0 (xps_map_mutex){+.+.}-{4:4}: [ 285.840906][T10041] validate_chain+0xb9b/0x2140 [ 285.846377][T10041] __lock_acquire+0xab9/0xd20 [ 285.852194][T10041] lock_acquire+0x120/0x360 [ 285.858361][T10041] __mutex_lock+0x187/0x1350 [ 285.863500][T10041] netif_reset_xps_queues_gt+0x73/0xc0 [ 285.869564][T10041] unregister_netdevice_many_notify+0x1a75/0x1ff0 [ 285.876676][T10041] ops_undo_list+0x3dc/0x990 [ 285.881780][T10041] setup_net+0x2d6/0x320 [ 285.886546][T10041] copy_net_ns+0x34e/0x4e0 [ 285.891471][T10041] create_new_namespaces+0x3f3/0x720 [ 285.897876][T10041] unshare_nsproxy_namespaces+0x11c/0x170 [ 285.904469][T10041] ksys_unshare+0x4c8/0x8c0 [ 285.909493][T10041] __x64_sys_unshare+0x38/0x50 [ 285.914956][T10041] do_syscall_64+0xfa/0xfa0 [ 285.920076][T10041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.926567][T10041] [ 285.926567][T10041] other info that might help us debug this: [ 285.926567][T10041] [ 285.936781][T10041] Chain exists of: [ 285.936781][T10041] xps_map_mutex --> sk_lock-AF_INET --> cpu_hotplug_lock [ 285.936781][T10041] [ 285.950245][T10041] Possible unsafe locking scenario: [ 285.950245][T10041] [ 285.957734][T10041] CPU0 CPU1 [ 285.964037][T10041] ---- ---- [ 285.969466][T10041] rlock(cpu_hotplug_lock); [ 285.974135][T10041] lock(sk_lock-AF_INET); [ 285.981438][T10041] lock(cpu_hotplug_lock); [ 285.988462][T10041] lock(xps_map_mutex); [ 285.992696][T10041] [ 285.992696][T10041] *** DEADLOCK *** [ 285.992696][T10041] [ 286.000822][T10041] 3 locks held by syz.0.1223/10041: [ 286.006098][T10041] #0: ffffffff8f954710 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 286.015686][T10041] #1: ffffffff8f961848 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 286.024908][T10041] #2: ffffffff8e3d53b0 (cpu_hotplug_lock){++++}-{0:0}, at: netif_reset_xps_queues_gt+0x65/0xc0 [ 286.035356][T10041] [ 286.035356][T10041] stack backtrace: [ 286.041237][T10041] CPU: 1 UID: 0 PID: 10041 Comm: syz.0.1223 Not tainted syzkaller #0 PREEMPT(full) [ 286.041261][T10041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.041271][T10041] Call Trace: [ 286.041280][T10041] [ 286.041287][T10041] dump_stack_lvl+0x189/0x250 [ 286.041317][T10041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.041341][T10041] ? __pfx__printk+0x10/0x10 [ 286.041362][T10041] ? print_lock_name+0xde/0x100 [ 286.041384][T10041] print_circular_bug+0x2ee/0x310 [ 286.041408][T10041] check_noncircular+0x134/0x160 [ 286.041431][T10041] validate_chain+0xb9b/0x2140 [ 286.041455][T10041] ? __mutex_trylock_common+0x153/0x260 [ 286.041477][T10041] ? __pfx___mutex_trylock_common+0x10/0x10 [ 286.041501][T10041] __lock_acquire+0xab9/0xd20 [ 286.041521][T10041] ? netif_reset_xps_queues_gt+0x73/0xc0 [ 286.041539][T10041] lock_acquire+0x120/0x360 [ 286.041556][T10041] ? netif_reset_xps_queues_gt+0x73/0xc0 [ 286.041579][T10041] __mutex_lock+0x187/0x1350 [ 286.041599][T10041] ? netif_reset_xps_queues_gt+0x73/0xc0 [ 286.041620][T10041] ? __lock_acquire+0xab9/0xd20 [ 286.041637][T10041] ? netif_reset_xps_queues_gt+0x73/0xc0 [ 286.041656][T10041] ? __pfx___mutex_lock+0x10/0x10 [ 286.041677][T10041] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 286.041699][T10041] ? __pfx_device_del+0x10/0x10 [ 286.041717][T10041] netif_reset_xps_queues_gt+0x73/0xc0 [ 286.041743][T10041] unregister_netdevice_many_notify+0x1a75/0x1ff0 [ 286.041776][T10041] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 286.041801][T10041] ? net_generic+0x1e/0x240 [ 286.041820][T10041] ? net_generic+0x1e/0x240 [ 286.041842][T10041] ops_undo_list+0x3dc/0x990 [ 286.041861][T10041] ? __pfx_ops_undo_list+0x10/0x10 [ 286.041877][T10041] ? ops_init+0x469/0x5c0 [ 286.041895][T10041] setup_net+0x2d6/0x320 [ 286.041911][T10041] ? __pfx_setup_net+0x10/0x10 [ 286.041926][T10041] ? copy_net_ns+0x337/0x4e0 [ 286.041940][T10041] ? down_read_killable+0x1d1/0x350 [ 286.041961][T10041] ? preinit_net+0x47d/0x740 [ 286.041976][T10041] copy_net_ns+0x34e/0x4e0 [ 286.041992][T10041] create_new_namespaces+0x3f3/0x720 [ 286.042013][T10041] ? security_capable+0x7e/0x2e0 [ 286.042033][T10041] unshare_nsproxy_namespaces+0x11c/0x170 [ 286.042053][T10041] ksys_unshare+0x4c8/0x8c0 [ 286.042076][T10041] ? __pfx_ksys_unshare+0x10/0x10 [ 286.042104][T10041] __x64_sys_unshare+0x38/0x50 [ 286.042125][T10041] do_syscall_64+0xfa/0xfa0 [ 286.042144][T10041] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.042162][T10041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.042177][T10041] ? clear_bhb_loop+0x60/0xb0 [ 286.042195][T10041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.042211][T10041] RIP: 0033:0x7fcf2cd8eec9 [ 286.042226][T10041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.042240][T10041] RSP: 002b:00007fcf2dcf5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 286.042258][T10041] RAX: ffffffffffffffda RBX: 00007fcf2cfe5fa0 RCX: 00007fcf2cd8eec9 [ 286.042271][T10041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 286.042281][T10041] RBP: 00007fcf2ce11f91 R08: 0000000000000000 R09: 0000000000000000 [ 286.042292][T10041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.042301][T10041] R13: 00007fcf2cfe6038 R14: 00007fcf2cfe5fa0 R15: 00007ffd153edb98 [ 286.042319][T10041] [ 286.461141][ T5915] usb 4-1: no configurations [ 286.465845][ T5915] usb 4-1: can't read configurations, error -22 [ 286.596626][ T5915] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 286.757046][ T5915] usb 4-1: no configurations [ 286.761835][ T5915] usb 4-1: can't read configurations, error -22 [ 286.768590][ T5915] usb usb4-port1: attempt power cycle [ 287.106637][ T5915] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 287.127966][ T5915] usb 4-1: no configurations [ 287.132717][ T5915] usb 4-1: can't read configurations, error -22 [ 287.266593][ T5915] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 287.287843][ T5915] usb 4-1: no configurations [ 287.292471][ T5915] usb 4-1: can't read configurations, error -22 [ 287.299206][ T5915] usb usb4-port1: unable to enumerate USB device [ 287.420435][ T5915] usb 3-1: USB disconnect, device number 89