last executing test programs: 2m52.19647941s ago: executing program 2 (id=147): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) (fail_nth: 60) 2m52.168823408s ago: executing program 2 (id=148): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xb, 0x0, &(0x7f0000000140)) (async) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="7b3ff5898274a62148cca768b50b721024a025355567c9788d2213a947477fdd25f9de31e54b79efeff19caeed01345d740f46dd9d12ea784082521d", 0x3c}], 0x1, 0x9, 0x4) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @null, @bpq0, 0x6, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2c00000, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x6, 0x6, 0x448, '\x00', 0x8}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0x6, 0x6, 0x2, 0x401, 0x2, 0xbc, 0x80000000, 0x102d, 0x8, 0x1, 0x3, 0x1, 0x1, 0x7, 0x6, 0x200, 0x80, 0x7, 0x7, 0x7, 0x8, 0x2, 0x2, 0x7, 0xffffffffffffffff, 0x3, 0x100000001, 0x403, 0x1, 0x7, 0x101, 0x3, 0x3, 0x1, 0x0, 0x1da5, 0x9, 0x4, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0x9, 0x88b, 0x6, 0x6, 0xffffffffffffffff, 0x400, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x0, 0x5, 0x4, 0x4, 0x82d, 0x9, 0x6, 0x0, 0x9, 0xfffffffffffffffa, 0x3ff, 0x6, 0x2, 0x2f, 0x1, 0x7, 0x40, 0x2, 0x42843379, 0x1, 0x7, 0x200, 0x77a, 0x6997, 0x5, 0x539, 0x623a, 0x6, 0x0, 0x7, 0x4, 0x200, 0x7, 0x8, 0x0, 0x5, 0x93, 0x8, 0x80, 0x2, 0x2775e12f, 0x680000000000, 0x5, 0x7, 0x9, 0x80000004, 0x0, 0xfffffffffffffffa, 0x10001, 0x8, 0x8, 0x1000, 0x0, 0x5, 0x7, 0xfffffffffffff000, 0x10000, 0x7fff, 0xfffffffffffffff7, 0x6, 0x46b, 0x8, 0x5, 0x6, 0x7, 0x0, 0x7f, 0x63a]}) (async) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000200)=0xffffffffffffffff) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x3ff, 0xa, 0x4, 0x4000, 0x8c, {0x77359400}, {0x1, 0xc, 0x4, 0x1, 0x5, 0x10, "548162c3"}, 0x4946, 0x1, {&(0x7f0000000300)=[{0x0, 0x5d, {0xc4}, 0x2}, {0x3, 0x0, {0x6}, 0x4}]}, 0x0, 0x0, r5}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x24, r7, 0x300, 0x1070bd2c, 0x8, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async, rerun: 32) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) r10 = socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$sndmidi(&(0x7f0000000380), 0x3, 0x66043) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'batadv_slave_1\x00', {0xfffffffc}, 0x40}) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r9, 0x40405515, &(0x7f0000000140)) (async) mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f0000000040)='proc\x00', 0x129102a, 0x0) 2m52.078906231s ago: executing program 2 (id=149): r0 = openat$nci(0xffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, 0x0, 0x0) 2m51.963179166s ago: executing program 2 (id=151): mkdir(&(0x7f00000000c0)='./file1\x00', 0x16) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0x9362, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0xebff, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) 2m51.828376192s ago: executing program 2 (id=153): mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x6000, 0xe0) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x6000, 0xe0) (async) 2m51.5480085s ago: executing program 2 (id=158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)={@val={0x1c, 0x886}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x4, 0x0, 0x1c, {[@window={0xe, 0x3}, @md5sig={0x13, 0x12, "c35aa8dd794d9178964bf1fddfb84b33"}, @generic={0x0, 0x2}]}}, {"7302ae64596acd1b0c85f79e959ba407dfe2680a9f3a5624b94b05eb30a8db4c40666ac03a878052cd6f34b42454ed6a1125e62675b21d5a1fba5cf3bedbddc95b7e41e2f08bc48db0daee34e764ee3ee41a0c70477ab54c7b85"}}}}}, 0xa8) 2m51.255159824s ago: executing program 32 (id=158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)={@val={0x1c, 0x886}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x4, 0x0, 0x1c, {[@window={0xe, 0x3}, @md5sig={0x13, 0x12, "c35aa8dd794d9178964bf1fddfb84b33"}, @generic={0x0, 0x2}]}}, {"7302ae64596acd1b0c85f79e959ba407dfe2680a9f3a5624b94b05eb30a8db4c40666ac03a878052cd6f34b42454ed6a1125e62675b21d5a1fba5cf3bedbddc95b7e41e2f08bc48db0daee34e764ee3ee41a0c70477ab54c7b85"}}}}}, 0xa8) 2m0.316488003s ago: executing program 4 (id=512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) 2m0.303925155s ago: executing program 4 (id=513): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (fail_nth: 61) 1m59.7334996s ago: executing program 4 (id=519): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) (fail_nth: 61) 1m59.580404913s ago: executing program 4 (id=522): mkdir(&(0x7f00000000c0)='./file1\x00', 0x16) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0x9362, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0xffeb, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) 1m59.524448685s ago: executing program 4 (id=524): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, 'syz0\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x5, 0x6, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x43, 0x49b5e351, 0xfffffffffffffffc, 0xe8de, 0xfffffffffffffff9, 0x9, 0x1ff, 0x9, 0x1, 0x8, 0x80000000, 0x4, 0x2, 0x8000, 0x8, 0xa36, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x1, 0x1ff, 0x10000, 0x2, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x8, 0x8000000000000000, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x1, 0x8000000000ec7, 0x646, 0xc58e, 0x3, 0x11ad, 0x0, 0x6, 0x8000, 0x100080, 0x7f, 0x9, 0x1, 0x5, 0x8000000001000000, 0x4, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x4, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0xfffffffffffffff9, 0x851a, 0x5e997b8e, 0x0, 0x7, 0xffffffffffffffff, 0x3, 0x800000100, 0x4, 0x3ff, 0x6, 0x0, 0xffffffffffffff95, 0xa, 0x108000001, 0xcc7e, 0x8, 0x0, 0x6, 0x6, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x0, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec2, 0x1, 0x5, 0xfff, 0x0, 0x80]}) 1m59.192721813s ago: executing program 4 (id=526): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) close(r1) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12014101020301090212210100000922b823000000000000000c000a000000000000"], 0x0) close_range(r1, r0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x9, 0x5, 0x2, 0xfffffffd}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x65) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fadf) fcntl$setlease(r4, 0x400, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x2, 0x2) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) close_range(r5, 0xffffffffffffffff, 0x0) close(0x3) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000000c0)={0x60, 0x3, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2, 0x0, 0xfffffddc, 0x10000000000003, 0x28, 0x16, 0x0, 0x58}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x110, r2, 0x45803000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00006a2000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00004a6000/0x2000)=nil) 1m58.899467897s ago: executing program 33 (id=526): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) close(r1) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12014101020301090212210100000922b823000000000000000c000a000000000000"], 0x0) close_range(r1, r0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x9, 0x5, 0x2, 0xfffffffd}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x65) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fadf) fcntl$setlease(r4, 0x400, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$radio(&(0x7f00000002c0), 0x2, 0x2) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) close_range(r5, 0xffffffffffffffff, 0x0) close(0x3) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000000c0)={0x60, 0x3, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2, 0x0, 0xfffffddc, 0x10000000000003, 0x28, 0x16, 0x0, 0x58}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x110, r2, 0x45803000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00006a2000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00004a6000/0x2000)=nil) 1m29.216141759s ago: executing program 5 (id=776): r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) syz_io_uring_setup(0x237, &(0x7f0000000fc0)={0x0, 0x80fd, 0x10, 0x5, 0x2cc}, &(0x7f0000000380), &(0x7f00000002c0)) 1m29.123620607s ago: executing program 5 (id=777): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) (fail_nth: 62) 1m28.910237672s ago: executing program 5 (id=779): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, r0, 0x2000) 1m28.431931134s ago: executing program 5 (id=782): mkdir(&(0x7f00000000c0)='./file1\x00', 0x16) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0x9362, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x33fe0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) 1m28.216388613s ago: executing program 5 (id=784): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) 1m28.010512166s ago: executing program 5 (id=785): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, 'syz0\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x5, 0x6, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x43, 0x49b5e351, 0xfffffffffffffffc, 0xe8de, 0xfffffffffffffff9, 0x9, 0x1ff, 0x9, 0x1, 0x8, 0x80000000, 0x4, 0x2, 0x8000, 0x8, 0xa36, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x1, 0x1ff, 0x10000, 0x2, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x8, 0x8000000000000000, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x1, 0x8000000000ec7, 0x646, 0xc58e, 0x3, 0x11ad, 0x0, 0x6, 0x8000, 0x100080, 0x7f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x4, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x4, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0xfffffffffffffff9, 0x851a, 0x5e997b8e, 0x1000000, 0x7, 0xffffffffffffffff, 0x3, 0x800000100, 0x4, 0x3ff, 0x6, 0x0, 0xffffffffffffff95, 0xa, 0x108000001, 0xcc7e, 0x8, 0x0, 0x6, 0x6, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x0, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec2, 0x1, 0x5, 0xfff, 0x0, 0x80]}) 1m27.38926506s ago: executing program 34 (id=785): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, 'syz0\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x5, 0x6, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x43, 0x49b5e351, 0xfffffffffffffffc, 0xe8de, 0xfffffffffffffff9, 0x9, 0x1ff, 0x9, 0x1, 0x8, 0x80000000, 0x4, 0x2, 0x8000, 0x8, 0xa36, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x1, 0x1ff, 0x10000, 0x2, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x8, 0x8000000000000000, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x1, 0x8000000000ec7, 0x646, 0xc58e, 0x3, 0x11ad, 0x0, 0x6, 0x8000, 0x100080, 0x7f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x4, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x4, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0xfffffffffffffff9, 0x851a, 0x5e997b8e, 0x1000000, 0x7, 0xffffffffffffffff, 0x3, 0x800000100, 0x4, 0x3ff, 0x6, 0x0, 0xffffffffffffff95, 0xa, 0x108000001, 0xcc7e, 0x8, 0x0, 0x6, 0x6, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x0, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec2, 0x1, 0x5, 0xfff, 0x0, 0x80]}) 29.842835682s ago: executing program 3 (id=1212): syz_clone(0x810080, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f00000010c0)={'syz', 0x2}, &(0x7f0000000100)='\x9bn6,\xf5\xf5iA\xf3Q}\xe26\x88\x00\xeb\x00', 0xfffffffffffffffe) futex_waitv(&(0x7f00000011c0)=[{0xfffffffffffffffa, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000001880)={0x77359400}, 0x2) ioprio_set$pid(0x0, 0x0, 0x6000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=' ', 0x1}], 0x1}, 0x1) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x9, 0x4, 0x100, 0x4, 0x2, 0x80000001, 'syz0\x00'}) accept(r1, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f00000000c0)=0x80) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xfffffeeb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c0002800800034000000000080001400000000208000240000008b50900010073797a30000000000900020073797a32"], 0x84}}, 0x4) fstat(r3, &(0x7f0000000380)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000340)='westwood\x00', 0x38) shutdown(r4, 0x1) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f00000024c0)={0x10001, 0x99, 0x1, 0x81, 0x2, "36f4f67709075ab4ef0d05000000000000001d"}) keyctl$get_keyring_id(0x0, r0, 0xfffffffffffffffd) 29.794430169s ago: executing program 3 (id=1213): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000001200000060000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x20040040) 29.660332036s ago: executing program 3 (id=1214): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000bc0), 0x8) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_clone(0x2c078011, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xaece, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000080)=""/14, 0xe}], 0x1, 0x2, 0x9) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f00000004c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x9}) ioprio_set$uid(0x3, r4, 0x4004) sched_setaffinity(r3, 0x8142988c932068bd, &(0x7f0000000000)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f00000003c0)=0x7d) pipe2$watch_queue(&(0x7f0000000200), 0x80) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x100000002) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f00001ba000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="f26f64660f3882080f09360fc76c0067f3a5670f32b800098ed8baf80c66b8c458448266efbafc0c66ed66b90e0300000f320fae3b", 0x35}], 0x1, 0xa, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000340)="ba6100b048eede7a1066b8010000000f01d92e3e0f01c966b80500000066b9003000000f01c1f436d061002ef2f2f30f300f072e660ff21a", 0x38}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 28.822321734s ago: executing program 3 (id=1215): mkdir(&(0x7f00000000c0)='./file1\x00', 0x16) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0x9362, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x3e80, 0x4004000}}], 0x2, 0x0) 28.772421784s ago: executing program 3 (id=1216): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00'}) accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffff20, 0x0, 0x0, 0x8}) socket$inet6_udplite(0xa, 0x2, 0x88) (async) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000040)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (async) close(r1) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00'}) (async) accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffff20, 0x0, 0x0, 0x8}) (async) 28.476096316s ago: executing program 3 (id=1218): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f00000003c0)=0x8000, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000040)=""/19, &(0x7f0000000240)=0x13) (async) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000040)=""/19, &(0x7f0000000240)=0x13) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0xffffff82, 0x15, 0xc2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x14000005) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf251e00000008000300d651a748e961ee685eedb3bb7aa72afb5efa7b6448de154807f20fbd409a941cd14395b6a6", @ANYRES32=r4, @ANYBLOB="10002f800c0002000203aaaaaaaaaaaa"], 0x2c}, 0x1, 0x0, 0x0, 0x20000041}, 0x64048080) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x2, 0x0) fcntl$notify(r5, 0x402, 0x4) (async) fcntl$notify(r5, 0x402, 0x4) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r6, 0x45807000) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 28.310276574s ago: executing program 35 (id=1218): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f00000003c0)=0x8000, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000040)=""/19, &(0x7f0000000240)=0x13) (async) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000040)=""/19, &(0x7f0000000240)=0x13) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0xffffff82, 0x15, 0xc2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x14000005) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf251e00000008000300d651a748e961ee685eedb3bb7aa72afb5efa7b6448de154807f20fbd409a941cd14395b6a6", @ANYRES32=r4, @ANYBLOB="10002f800c0002000203aaaaaaaaaaaa"], 0x2c}, 0x1, 0x0, 0x0, 0x20000041}, 0x64048080) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x2, 0x0) fcntl$notify(r5, 0x402, 0x4) (async) fcntl$notify(r5, 0x402, 0x4) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r6, 0x45807000) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 5.467116913s ago: executing program 6 (id=1373): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0xfe}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000180)={0x80000001, 0xff, 0x1, 'queue0\x00', 0xd}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB='!\x003'], 0x40}}, 0x0) syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x34, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000001c0)=ANY=[]}]}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="a01302000000afbd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="8100000000005b13ba3b11720c511e1f305af89821"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.576781017s ago: executing program 7 (id=1377): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000240)="ea", 0x1) r0 = socket$phonet(0x23, 0x2, 0x1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev, @private, 0x0}, &(0x7f0000000180)=0xc) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="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", 0x1000}], 0x1, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="640101010a01010200000000b40000000000000000000000070000008917b17f000001ac1e0001ac14140ce0000001ac1414aa444c1873e000000100000009e000000100000002ffff983b472c6c132b83db80beffff0000000600000000000000060000000000000000ac1e0001000008000a010100000000097f0000010001000100000000fffffffc89133dac1e00010a010102e0000001ac1e01014410db71307abc34724194d312931aac890afde4d7ddf3ddccfa01441031300000000800000000600000000000000000000014000000000000000000000001000000bf00000000000000"], 0x210}, 0x4000000) r2 = socket$inet(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)="ea00000198000000", 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0x8008ae9d, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000"]) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r5, 0x0) sendmsg(r5, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x10) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x50000, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000080)={0x28, 0x355a80ad4125c70b, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xfffffffffffffffb}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x15, 0x0, 0x0) 2.867621043s ago: executing program 0 (id=1381): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000418000/0x3000)=nil, 0x3000, 0x3) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 2.744398034s ago: executing program 7 (id=1383): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) 2.744183234s ago: executing program 6 (id=1384): syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x8) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='c >'], 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) userfaultfd(0x1) 2.523642069s ago: executing program 7 (id=1385): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf251d00080030002f8008000100b945ffff0c00020002030000aaaaaaaa180003800c00038005000100ffff000008000100000000000c00060001000000010000"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x400c014) 2.208044966s ago: executing program 7 (id=1387): socket$unix(0x1, 0x1, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x2) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000005c0)='./file0/file0\x00', 0x808, 0x0) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x28, 0x0, 0x484c9840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008680)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0xfffffffffffffff7, 0x7, 0x1000007, 0x3, 0x10001, 0x9, 0x8000000, 0x0, 0x4000, 0x10000, 0x0, r4, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x0, {0x4, 0x4, 0x7, 0x28580000000, 0x4, 0x8, {0x5, 0x5, 0xfffffffffffffff9, 0xa90, 0x8, 0x3, 0x0, 0x0, 0x4, 0xc000, 0x72, 0x0, r4, 0x9, 0xcc2d}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.138100221s ago: executing program 6 (id=1388): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x2, 0x10001, 0x1}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x2, 0xe}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x1, 0x7fff0000}]}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1ca60496e0cd0350a63f0544ff5c6dd3ac000000", @ANYRES16=r5, @ANYBLOB="000426bd7000fddbdf255e18010e00000049cf7a3878eaa9dc6710f88767dffbc8f53fe9a29185e160a90099d0542db595687a383063585d55564f05747e3dbe7a8bfb7281b4d2aed20dbda2c2c8582fd351f74ec8d1cb8b0ffdf02de6326a8e2bc5ac19"], 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x20004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x6000, @fd=r3, 0xffffffffffffff32, 0x0, 0x0, 0x1a, 0x1, {0x2}}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000100)=@x86={0x40, 0x8, 0x5, 0x0, 0x3, 0x2, 0x6, 0x1, 0x0, 0xca, 0x6, 0x1, 0x0, 0x278c, 0x4, 0x3, 0x7, 0x5, 0xf, '\x00', 0x38, 0x80000001}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r6) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r7, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0xe148, 0x3, 0x69c9, 0x4, 0x1, 0x385a2d2f, 0x4, 0x100000000}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYRESHEX=r4]) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x14) close_range(r1, r7, 0x2) splice(r6, &(0x7f0000000080)=0x9, r0, &(0x7f0000000140)=0x8, 0x4, 0x7) 1.898512356s ago: executing program 7 (id=1389): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r0, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x300000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r0, r0, 0x0) 1.683875825s ago: executing program 0 (id=1390): creat(&(0x7f0000001380)='./file0\x00', 0x1c) r0 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="85", 0x1, 0xffffffffffffffff) r1 = socket$kcm(0x2b, 0x1, 0x0) listen(r1, 0x180000) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x0, 0x6, 0x8001, r4}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x541b, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000001c0)=0x0) setreuid(0xee00, r5) keyctl$read(0xb, r0, 0x0, 0x0) setreuid(r5, r5) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 1.62013105s ago: executing program 6 (id=1391): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407800904001f0000000001000000fffffff400170023000000", 0x24) 1.606798062s ago: executing program 7 (id=1392): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r2 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000480)={0x0, "d53c0eb582cba9f1bc16e9ca85647283ccf9e9b7cfa617c953f8334fb77453e9d63eafb578307ceb8c0de24e1a2799fbe25a20bdffddd2b9708a52e314708472", 0x3d}, 0x48, r1) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xfffffffffffffffe) socketpair(0x26, 0x80000, 0x5, &(0x7f0000000600)) r3 = socket(0x10, 0x3, 0x0) fsopen(0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001e00010a"], 0x14}}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) splice(r3, 0x0, r5, 0x0, 0x8002, 0x0) dup(0xffffffffffffffff) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100006e40b740e1092151c1400102030109021200010000800000000000003cac2400"], 0x0) r7 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$IPC_INFO(r7, 0x3, &(0x7f0000001180)=""/4096) clock_gettime(0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x52418e567e5a9d8b, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) syz_usb_control_io$printer(r6, 0x0, 0x0) 1.576699149s ago: executing program 1 (id=1393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd070010e337004000000060ec97000fc83c00fe8000000000000000000000000000aaf50200"], 0xffe) 1.364797087s ago: executing program 6 (id=1394): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) (fail_nth: 4) 1.144301713s ago: executing program 0 (id=1395): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="420f015f0b0f01f3c461545902410f0766baf80cb82ad9ea8aef66bafc0c66b8b09c66ef0f01f8dcc2b8010000000f01d9410f005b000f07", 0x38}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) 1.129848069s ago: executing program 1 (id=1396): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="3f030000000000030019a40e7420fc1aaf5b1f00350032092b75ae11a388fb", 0x1f, 0x800, &(0x7f0000000140)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, 0x0) r3 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) ptrace(0x8, r3) ptrace(0x4207, r3) mount(0x0, 0x0, 0x0, 0x84c008, 0x0) 829.548989ms ago: executing program 6 (id=1397): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000740)='/dav/rnullu\xf4y', 0xfffffffffffffffb) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r3 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000480)={0x0, "d53c0eb582cba9f1bc16e9ca85647283ccf9e9b7cfa617c953f8334fb77453e9d63eafb578307ceb8c0de24e1a2799fbe25a20bdffddd2b9708a52e314708472", 0x3d}, 0x48, r2) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x0, 0x1b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000140)={0x0, 0x10, 0x3b, {0x3b, 0x1, "463c6cb7dbc98591a3b95d783518aeb5f0ad87ec0fbffee8eb245e01c7818325a68202477373e9d177029dfd7b7be366dc0164d2976e245ca0"}}, &(0x7f0000000280)={0x0, 0x3, 0x8c, @string={0x8c, 0x3, "8e81c37b03120ea1e3394863e7808886b2867ce566b09e182327f52d5b3a05bade5a839728136d162f158cd3671fc7d86ffae2023de9f133c7771cc9363fc2f032fb06ed2505bd37fe61a2932a3a9962580ea60275a30eda160a3def3ec495261a202f92e5cdd5324f9943979e7617132796e08f152fee8aabc23fac5bb6dec2b98a5306f581ed1c405e"}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000500)={0x20, 0x14, 0xd6, "e1fc8f00a7bd694f45ac207d69a2723a6c88fc01084b1b523922102b5b0c50fde108b9275f5cdcb0042980b5a4ebdade0e147d3fb14fa1c6c9892627a21cf82dbd2f2b688d7e0e0eae3e7931b25bcd63ccb7d7e452b93359b5475632ff0957367699445c3a2983eeee0b805ecb65fa8651e862d05bdb6e8498220ead00d10bb594b4f61ef03802b1e2867cdc42c10da01c20951a1707ec2086fb6f223ac481385802fbed1885008db081db19ca72d0312a466fc05a2cf54bed71c9671f948a10fa5707ec47a34ba4c1cffaf903006eb431ff7d66170b"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xca}, &(0x7f00000003c0)={0x20, 0x81, 0x3, "edacec"}, &(0x7f0000000400)={0x20, 0x82, 0x1, 'U'}, &(0x7f0000000440)={0x20, 0x83, 0x2, "6bd1"}, &(0x7f0000000640)={0x20, 0x84, 0x1, 'q'}, &(0x7f0000000680)={0x20, 0x85, 0x3, "17116b"}}) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0xfffffffffffffffe) socketpair(0x26, 0x80000, 0x5, &(0x7f0000000600)) r4 = socket(0xf, 0x74c54de78d61f9be, 0x8) fsopen(0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001e00010a"], 0x14}}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) splice(r4, 0x0, r6, 0x0, 0x8002, 0x0) r7 = dup(0xffffffffffffffff) r8 = syz_usb_connect(0x2, 0x24, &(0x7f0000000980)=ANY=[@ANYRES32, @ANYRES64=r5, @ANYRES64=r7, @ANYRES8=r2, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="2563cbe0f1e776a95359c95a5c99735ca8f0663f2f2ae511c596b3ab0eca131cea369c8360fdb0a25ba89465eb6c1d03401695615be405457c04634a8decd9ac40a1f45860da4ca143ed3883e82d9005d9b5472327e874", @ANYRES32], 0x0) r9 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmat(r9, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$IPC_INFO(r9, 0x3, &(0x7f0000002180)=""/4096) clock_gettime(0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x52418e567e5a9d8b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) syz_usb_control_io$printer(r8, 0x0, 0x0) 568.38356ms ago: executing program 1 (id=1398): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) (fail_nth: 65) 485.519602ms ago: executing program 0 (id=1399): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080028, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0xfee00900, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) 384.426702ms ago: executing program 1 (id=1400): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) 252.342943ms ago: executing program 1 (id=1401): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x125a80, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x125a80, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="ada87ae9f2abe12b81211871bc9574edebd0598d42e5514b9d7b28ca469518fbd479f25a569ef7636bd231422402c9fe1a807e321d97ba6ad7a0804cfd3b6f18bb0a4143b3c0f881348a849096f26214d6d8a8ff4be0928d02f0f8f1c86b10d779bd64a14e579699fafe49914eb917c9daebcb3bbb93595523262565c29d3653739aac7ab750ef2965899e6cea30cc5b5d822e049270cd137f768fa2c4024ec341b900b73ad74ff8032d4360", 0xac}], 0x1, &(0x7f0000001180)=[{0x1010, 0x29, 0x8001, "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"}, {0x1010, 0x101, 0x5, "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"}, {0xe0, 0x115, 0x9, "254a4cd1ae5788a872efcdf04ecbe746cd31acae780e7371a91a5feea40c95769ec2ac3337dfc735381ca8b57d73dd391030070c33f9d413fffda03f3e494e598c7570df658be6254d6b52c8fce442674901cf72cd753b1852e9ada2a5af8ad783021452585d84c5592a6734805e8d79c462c3fa71853e52d34491556b95751cbd3ed410c0b517aa6880895da1ea20a42908ccd1efc0ccff99bedbd7f28d69954bcbb1740d98af79900cc2f6212450235af056472f0d58b76188ee69a1402062c12ff5b83f1a36910b4b3fbec41745"}, {0x58, 0x84, 0x67fb, "5d439fd67e0c4370c6a5f182ca800e78144237cedf5d85655d461b71749d85a56215bd3dbd9c66d388bd7ac20e57c56ea85befb0f7503cea661147a2fbcdb27495d1a19130"}, {0xc0, 0x10c, 0x7, "449a15d8baf2d1b53fa77517863aa9fc6ee6a73920f6dcd66e7d6e028b69954daca2511a7d7e2d0286af8839f1a51c7101147b2af598cfb3efd3712ae5349bc5e8320028bd54d9cf7f63c94338d84d44f839cfbfeaeab0e4188c45c728b7932bcf1de10d80552195601b28cdf3d07842b0ad3a7ad03fb59986f3f511939f7e1b49b7cb4bd0896d164b95382191f1e2ae588a47babe93d7cd1c9d581170d73a46bfa63ab8bf0b5a1f5f7b"}, {0xb0, 0xff, 0x3, "704f1f14378b09fd7148a7fa4e30404ed60cd1adfebe849cdb8f33e3aec67584233f68543adf7191005ef19c19f7d25c40bbe2a4c7b7397be8c2c041eab8bd8639f58a8342021991d5fd0fcef5afe62eaf95eeb3bcf3341188db4ece10c7b4b35111fab201594653d3a8c1aa1ede5692014a16f29200c9a901eba3415cf3727664ca50dc590f57fa28be966a3de85b485ca24748c163451a4545233fd1"}], 0x22c8}, 0x24040000) sendfile(r1, r0, 0x0, 0xfffc) 188.221787ms ago: executing program 0 (id=1402): mkdir(&(0x7f00000000c0)='./file1\x00', 0x16) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0x9362, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x3ec0, 0x4004000}}], 0x2, 0x0) 90.704112ms ago: executing program 1 (id=1403): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000200)={0x4, 0x0, [{}, {}, {}, {}]}) (async) r1 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="85", 0x1, 0xffffffffffffffff) (async, rerun: 32) r2 = socket$kcm(0x2b, 0x1, 0x0) (rerun: 32) listen(r2, 0x180000) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x541b, 0x0) inotify_init() (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) (async, rerun: 32) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000000)={0x0, 0x0, r5}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) (async) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000001c0)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000cc0), r7) keyctl$read(0xb, r1, &(0x7f0000000340)=""/30, 0x1e) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01002abd6fee8438c6cfb7937737"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40004) (async) setreuid(0xee00, r6) (async) keyctl$read(0x3, r1, 0x0, 0x0) (async) keyctl$read(0xb, r1, 0x0, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000300)={'veth1_macvtap\x00', @local}) 0s ago: executing program 0 (id=1404): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200"]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="601a0000", @ANYRES16=0x0, @ANYBLOB="004826bddb0000280000000000", @ANYRES32=r4, @ANYBLOB="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"], 0x1a60}, 0x1, 0x0, 0x0, 0x8a4}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0xd, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) fcntl$lock(r5, 0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, 0xfffffffffffffffe}) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x1c) kernel console output (not intermixed with test programs): no altsetting 0 [ 201.756125][ T5934] usb 7-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 201.784529][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.816808][ T5934] usb 7-1: config 0 descriptor?? [ 202.134849][ T9355] /dev/rnullb0: Can't open blockdev [ 202.143798][ T980] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 202.264644][ T5934] logitech 0003:046D:C623.000F: hidraw0: USB HID v0.07 Device [HID 046d:c623] on usb-dummy_hcd.6-1/input0 [ 202.303700][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 202.326749][ T980] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 202.338735][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.347055][ T980] usb 4-1: Product: syz [ 202.351224][ T980] usb 4-1: Manufacturer: syz [ 202.356764][ T980] usb 4-1: SerialNumber: syz [ 202.370572][ T980] r8152-cfgselector 4-1: Unknown version 0x0000 [ 202.383536][ T980] r8152-cfgselector 4-1: config 0 descriptor?? [ 202.457467][ T9320] /dev/rnullb0: Can't open blockdev [ 202.464724][ T5835] usb 7-1: USB disconnect, device number 8 [ 202.607415][ T43] usb 1-1: USB disconnect, device number 31 [ 202.635191][ T43] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 202.794960][ T5835] r8152-cfgselector 4-1: USB disconnect, device number 33 [ 202.995403][ T9360] netlink: 'syz.1.914': attribute type 19 has an invalid length. [ 203.012157][ T9360] netlink: 'syz.1.914': attribute type 1 has an invalid length. [ 203.041327][ T9362] dlm: no locking on control device [ 203.285102][ T5835] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 203.461111][ T5835] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.476610][ T5835] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 203.486245][ T9380] FAULT_INJECTION: forcing a failure. [ 203.486245][ T9380] name failslab, interval 1, probability 0, space 0, times 0 [ 203.505417][ T5835] usb 2-1: config 1 has no interface number 0 [ 203.515847][ T9380] CPU: 0 UID: 0 PID: 9380 Comm: syz.3.921 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 203.515874][ T9380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.515884][ T9380] Call Trace: [ 203.515890][ T9380] [ 203.515898][ T9380] dump_stack_lvl+0x189/0x250 [ 203.515920][ T9380] ? __pfx____ratelimit+0x10/0x10 [ 203.515940][ T9380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.515959][ T9380] ? __pfx__printk+0x10/0x10 [ 203.515983][ T9380] ? __pfx___might_resched+0x10/0x10 [ 203.516000][ T9380] ? fs_reclaim_acquire+0x7d/0x100 [ 203.516023][ T9380] should_fail_ex+0x414/0x560 [ 203.516050][ T9380] should_failslab+0xa8/0x100 [ 203.516072][ T9380] __kmalloc_noprof+0xcb/0x4f0 [ 203.516086][ T9380] ? kfree+0x4d/0x440 [ 203.516098][ T9380] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 203.516121][ T9380] tomoyo_realpath_from_path+0xe3/0x5d0 [ 203.516141][ T9380] ? tomoyo_domain+0xd9/0x130 [ 203.516165][ T9380] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 203.516189][ T9380] tomoyo_path_number_perm+0x1e8/0x5a0 [ 203.516215][ T9380] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 203.516257][ T9380] ? __lock_acquire+0xab9/0xd20 [ 203.516306][ T9380] ? __fget_files+0x2a/0x420 [ 203.516331][ T9380] ? __fget_files+0x2a/0x420 [ 203.516350][ T9380] ? __fget_files+0x3a0/0x420 [ 203.516370][ T9380] ? __fget_files+0x2a/0x420 [ 203.516395][ T9380] security_file_ioctl+0xcb/0x2d0 [ 203.516419][ T9380] __se_sys_ioctl+0x47/0x170 [ 203.516440][ T9380] do_syscall_64+0xfa/0x3b0 [ 203.516460][ T9380] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.516478][ T9380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.516492][ T9380] ? clear_bhb_loop+0x60/0xb0 [ 203.516510][ T9380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.516524][ T9380] RIP: 0033:0x7effec98e929 [ 203.516540][ T9380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.516553][ T9380] RSP: 002b:00007effed71f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.516571][ T9380] RAX: ffffffffffffffda RBX: 00007effecbb5fa0 RCX: 00007effec98e929 [ 203.516583][ T9380] RDX: 0000200000000500 RSI: 000000004008ae89 RDI: 0000000000000005 [ 203.516593][ T9380] RBP: 00007effed71f090 R08: 0000000000000000 R09: 0000000000000000 [ 203.516602][ T9380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.516611][ T9380] R13: 0000000000000000 R14: 00007effecbb5fa0 R15: 00007ffe55bc7118 [ 203.516639][ T9380] [ 203.516646][ T9380] ERROR: Out of memory at tomoyo_realpath_from_path. [ 203.522354][ T5835] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.798149][ T9387] netlink: 60 bytes leftover after parsing attributes in process `syz.6.923'. [ 203.814167][ T9387] netlink: 60 bytes leftover after parsing attributes in process `syz.6.923'. [ 203.828660][ T9387] netlink: 60 bytes leftover after parsing attributes in process `syz.6.923'. [ 203.865084][ T5835] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.877266][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.911965][ T5835] usb 2-1: Product: syz [ 203.917102][ T5835] usb 2-1: Manufacturer: syz [ 203.940169][ T5835] usb 2-1: SerialNumber: syz [ 203.952952][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'. [ 203.984290][ T5835] cdc_ncm 2-1:1.1: NCM or ECM functional descriptors missing [ 203.991746][ T5835] cdc_ncm 2-1:1.1: bind() failure [ 204.090704][ T9403] syz.0.929: attempt to access beyond end of device [ 204.090704][ T9403] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 204.116134][ T9403] FAT-fs (loop0): unable to read boot sector [ 204.130315][ T9404] syz.0.929: attempt to access beyond end of device [ 204.130315][ T9404] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 204.158800][ T9404] FAT-fs (loop0): unable to read boot sector [ 204.270858][ T9411] netlink: 'syz.0.932': attribute type 1 has an invalid length. [ 204.278680][ T9411] netlink: 224 bytes leftover after parsing attributes in process `syz.0.932'. [ 204.315397][ T9411] /dev/sg0: Can't lookup blockdev [ 204.409690][ T9416] FAULT_INJECTION: forcing a failure. [ 204.409690][ T9416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.422936][ T9416] CPU: 1 UID: 0 PID: 9416 Comm: syz.6.933 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 204.422951][ T9416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.422957][ T9416] Call Trace: [ 204.422961][ T9416] [ 204.422966][ T9416] dump_stack_lvl+0x189/0x250 [ 204.422982][ T9416] ? __pfx____ratelimit+0x10/0x10 [ 204.422995][ T9416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.423005][ T9416] ? __pfx__printk+0x10/0x10 [ 204.423016][ T9416] ? __might_fault+0xb0/0x130 [ 204.423032][ T9416] should_fail_ex+0x414/0x560 [ 204.423051][ T9416] _copy_from_user+0x2d/0xb0 [ 204.423061][ T9416] snd_rawmidi_kernel_write1+0x3ab/0x650 [ 204.423082][ T9416] snd_rawmidi_write+0x5ad/0xbd0 [ 204.423101][ T9416] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 204.423114][ T9416] ? __pfx_default_wake_function+0x10/0x10 [ 204.423130][ T9416] ? common_file_perm+0x199/0x200 [ 204.423142][ T9416] ? bpf_lsm_file_permission+0x9/0x20 [ 204.423151][ T9416] ? security_file_permission+0x75/0x290 [ 204.423165][ T9416] ? rw_verify_area+0x258/0x650 [ 204.423178][ T9416] vfs_writev+0x4b3/0x960 [ 204.423216][ T9416] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 204.423229][ T9416] ? __pfx_vfs_writev+0x10/0x10 [ 204.423251][ T9416] ? __fget_files+0x2a/0x420 [ 204.423276][ T9416] ? __fget_files+0x3a0/0x420 [ 204.423292][ T9416] ? __fget_files+0x2a/0x420 [ 204.423319][ T9416] do_writev+0x14d/0x2d0 [ 204.423336][ T9416] ? __pfx_do_writev+0x10/0x10 [ 204.423348][ T9416] ? rcu_is_watching+0x15/0xb0 [ 204.423361][ T9416] ? do_syscall_64+0xbe/0x3b0 [ 204.423376][ T9416] do_syscall_64+0xfa/0x3b0 [ 204.423387][ T9416] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.423399][ T9416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.423408][ T9416] ? clear_bhb_loop+0x60/0xb0 [ 204.423420][ T9416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.423428][ T9416] RIP: 0033:0x7f0288d8e929 [ 204.423438][ T9416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.423446][ T9416] RSP: 002b:00007f0289cdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 204.423456][ T9416] RAX: ffffffffffffffda RBX: 00007f0288fb5fa0 RCX: 00007f0288d8e929 [ 204.423463][ T9416] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000004 [ 204.423469][ T9416] RBP: 00007f0289cdc090 R08: 0000000000000000 R09: 0000000000000000 [ 204.423474][ T9416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.423480][ T9416] R13: 0000000000000000 R14: 00007f0288fb5fa0 R15: 00007fffd04d0dc8 [ 204.423494][ T9416] [ 204.543539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 204.545966][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.689127][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.695695][ C1] hrtimer: interrupt took 272191766 ns [ 204.795779][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.088942][ T9424] /dev/rnullb0: Can't open blockdev [ 205.170024][ T9427] /dev/rnullb0: Can't open blockdev [ 205.441499][ T9438] /dev/rnullb0: Can't open blockdev [ 205.745271][ T9448] FAULT_INJECTION: forcing a failure. [ 205.745271][ T9448] name failslab, interval 1, probability 0, space 0, times 0 [ 205.762103][ T9448] CPU: 1 UID: 0 PID: 9448 Comm: syz.0.944 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 205.762127][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.762138][ T9448] Call Trace: [ 205.762145][ T9448] [ 205.762153][ T9448] dump_stack_lvl+0x189/0x250 [ 205.762177][ T9448] ? __pfx____ratelimit+0x10/0x10 [ 205.762198][ T9448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.762216][ T9448] ? __pfx__printk+0x10/0x10 [ 205.762241][ T9448] ? __pfx___might_resched+0x10/0x10 [ 205.762256][ T9448] ? fs_reclaim_acquire+0x7d/0x100 [ 205.762282][ T9448] should_fail_ex+0x414/0x560 [ 205.762312][ T9448] should_failslab+0xa8/0x100 [ 205.762333][ T9448] __kmalloc_noprof+0xcb/0x4f0 [ 205.762358][ T9448] ? get_create_ext+0x2cf/0xc70 [ 205.762373][ T9448] ? security_dentry_init_security+0x83/0x380 [ 205.762400][ T9448] get_create_ext+0x2cf/0xc70 [ 205.762427][ T9448] ? __pfx_get_create_ext+0x10/0x10 [ 205.762444][ T9448] ? __kasan_kmalloc+0x93/0xb0 [ 205.762472][ T9448] create_new_entry+0x25f/0xa20 [ 205.762495][ T9448] ? __pfx_create_new_entry+0x10/0x10 [ 205.762526][ T9448] ? fuse_permission+0x9fa/0xdc0 [ 205.762556][ T9448] fuse_mknod+0x2c2/0x380 [ 205.762571][ T9448] ? __pfx_fuse_permission+0x10/0x10 [ 205.762599][ T9448] ? __pfx_fuse_mknod+0x10/0x10 [ 205.762614][ T9448] ? end_current_label_crit_section+0x152/0x180 [ 205.762654][ T9448] ? make_vfsgid+0x49/0xa0 [ 205.762672][ T9448] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 205.762698][ T9448] ? inode_permission+0x149/0x470 [ 205.762719][ T9448] ? __pfx_fuse_permission+0x10/0x10 [ 205.762740][ T9448] ? bpf_lsm_inode_create+0x9/0x20 [ 205.762764][ T9448] vfs_create+0x24b/0x400 [ 205.762789][ T9448] do_mknodat+0x3c6/0x4d0 [ 205.762814][ T9448] ? __pfx_do_mknodat+0x10/0x10 [ 205.762833][ T9448] ? getname_flags+0x1e5/0x540 [ 205.762859][ T9448] __x64_sys_mknod+0x8c/0xa0 [ 205.762879][ T9448] do_syscall_64+0xfa/0x3b0 [ 205.762899][ T9448] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.762919][ T9448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.762934][ T9448] ? clear_bhb_loop+0x60/0xb0 [ 205.762955][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.762971][ T9448] RIP: 0033:0x7f3e3638e929 [ 205.762985][ T9448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.762999][ T9448] RSP: 002b:00007f3e371ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 205.763016][ T9448] RAX: ffffffffffffffda RBX: 00007f3e365b5fa0 RCX: 00007f3e3638e929 [ 205.763028][ T9448] RDX: 0000000000000700 RSI: 0000000000000808 RDI: 00002000000005c0 [ 205.763038][ T9448] RBP: 00007f3e371ba090 R08: 0000000000000000 R09: 0000000000000000 [ 205.763048][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.763057][ T9448] R13: 0000000000000000 R14: 00007f3e365b5fa0 R15: 00007ffe5b8f2848 [ 205.763086][ T9448] [ 205.765135][ T9450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.998449][ T43] usb 2-1: USB disconnect, device number 26 [ 206.004727][ T9450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.153789][ T5934] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 206.303589][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 206.311109][ T5934] usb 4-1: config 0 has no interfaces? [ 206.320435][ T5934] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 206.330347][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.356652][ T5934] usb 4-1: Product: syz [ 206.368642][ T5934] usb 4-1: Manufacturer: syz [ 206.383563][ T5934] usb 4-1: SerialNumber: syz [ 206.420463][ T5934] usb 4-1: config 0 descriptor?? [ 206.523590][ T43] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 206.694497][ T43] usb 2-1: device descriptor read/64, error -71 [ 206.943440][ T43] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 206.998209][ T9487] syzkaller1: entered promiscuous mode [ 207.005203][ T9487] syzkaller1: entered allmulticast mode [ 207.018474][ T9487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.052968][ T9487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.114720][ T43] usb 2-1: device descriptor read/64, error -71 [ 207.167773][ T5835] usb 4-1: USB disconnect, device number 34 [ 207.223809][ T43] usb usb2-port1: attempt power cycle [ 207.303424][ T5906] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 207.475173][ T5906] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 207.492381][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.506560][ T5906] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 207.517622][ T5906] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 207.543429][ T5906] usb 1-1: Manufacturer: syz [ 207.553079][ T5906] usb 1-1: config 0 descriptor?? [ 207.594231][ T43] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 207.626787][ T43] usb 2-1: device descriptor read/8, error -71 [ 207.674683][ T5906] rc_core: IR keymap rc-hauppauge not found [ 207.703907][ T5906] Registered IR keymap rc-empty [ 207.720714][ T5906] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 207.761631][ T5906] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15 [ 207.778784][ T5835] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.794402][ T9491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.795497][ T9522] /dev/rnullb0: Can't open blockdev [ 207.823986][ T9491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.827384][ T5835] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 207.903492][ T43] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 207.924252][ T43] usb 2-1: device descriptor read/8, error -71 [ 207.935303][ T9491] kvm: kvm [9490]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x7 [ 207.962904][ T9491] /dev/rnullb0: Can't open blockdev [ 208.063656][ T43] usb usb2-port1: unable to enumerate USB device [ 208.112882][ T9528] loop1: detected capacity change from 0 to 7 [ 208.128609][ T43] usb 1-1: USB disconnect, device number 32 [ 208.148964][ T9528] Dev loop1: unable to read RDB block 7 [ 208.163471][ T9528] loop1: AHDI p3 p4 [ 208.167431][ T9528] loop1: partition table partially beyond EOD, truncated [ 208.234302][ T9528] loop1: p3 start 6514546 is beyond EOD, truncated [ 208.691202][ T9545] netlink: 'syz.6.965': attribute type 2 has an invalid length. [ 209.183189][ T9564] netlink: 'syz.3.972': attribute type 10 has an invalid length. [ 209.363395][ T5835] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 209.504821][ T9577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.542047][ T5835] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.561381][ T5835] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 209.580015][ T9582] /dev/rnullb0: Can't open blockdev [ 209.591514][ T5835] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 209.603342][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.611534][ T5835] usb 1-1: Product: syz [ 209.625573][ T5835] usb 1-1: Manufacturer: syz [ 209.633053][ T5835] usb 1-1: SerialNumber: syz [ 209.651175][ T5835] usb 1-1: config 0 descriptor?? [ 209.865324][ T30] audit: type=1800 audit(1751616682.901:7): pid=9559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.970" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 209.868324][ T9559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.913980][ T9559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.096492][ T5934] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 210.215104][ T9] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 210.263804][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 210.280705][ T5934] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 210.293945][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=5, SerialNumber=3 [ 210.302163][ T5934] usb 4-1: Product: syz [ 210.309778][ T5934] usb 4-1: Manufacturer: syz [ 210.315184][ T5934] usb 4-1: SerialNumber: syz [ 210.326686][ T5934] usb 4-1: config 0 descriptor?? [ 210.336138][ T5934] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 210.354941][ T5835] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 210.375281][ T9] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 210.389248][ T9] usb 2-1: config 0 has no interface number 0 [ 210.396042][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 210.412216][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 210.423480][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 210.439086][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 210.451472][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 210.471633][ T9] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 210.492484][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 210.503207][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.513370][ T5835] usb 7-1: Using ep0 maxpacket: 32 [ 210.522290][ T9] usb 2-1: config 0 descriptor?? [ 210.536345][ T9591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.539671][ T9597] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 210.545927][ T5835] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 210.553665][ T9597] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 210.582124][ T5835] usb 7-1: config 0 has no interface number 0 [ 210.588958][ T9591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.594339][ T9] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 210.603766][ T5835] usb 7-1: config 0 interface 12 has no altsetting 0 [ 210.624115][ T5835] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 210.634462][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.642545][ T5835] usb 7-1: Product: syz [ 210.647543][ T5835] usb 7-1: Manufacturer: syz [ 210.652147][ T5835] usb 7-1: SerialNumber: syz [ 210.676023][ T5835] usb 7-1: config 0 descriptor?? [ 210.788247][ T9597] ldusb 2-1:0.55: Write buffer overflow, 1 bytes dropped [ 210.812987][ T9597] /dev/rnullb0: Can't open blockdev [ 210.823201][ T9] usb 2-1: USB disconnect, device number 31 [ 210.857966][ T9] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 211.027608][ T5934] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 211.039453][ T5934] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 211.049940][ T5934] usb 4-1: USB disconnect, device number 35 [ 211.087713][ T9627] /dev/rnullb0: Can't open blockdev [ 211.107032][ T5835] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 211.118314][ T5835] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 211.129547][ T5835] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 211.141547][ T5835] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 211.158789][ T5835] usb 7-1: USB disconnect, device number 9 [ 211.638929][ T9647] binder: BINDER_SET_CONTEXT_MGR already set [ 211.653369][ T9647] binder: 9644:9647 ioctl 4018620d 200000000040 returned -16 [ 211.669209][ T9647] binder: 9644:9647 unknown command 0 [ 211.690181][ T9647] binder: 9644:9647 ioctl c0306201 200000000180 returned -22 [ 211.816309][ T9654] loop4: detected capacity change from 0 to 7 [ 211.884584][ T9659] /dev/rnullb0: Can't open blockdev [ 211.890128][ T9654] Dev loop4: unable to read RDB block 7 [ 211.903826][ T9654] loop4: unable to read partition table [ 211.914739][ T9654] loop4: partition table beyond EOD, truncated [ 211.945690][ T9654] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 212.120981][ T9] usb 1-1: USB disconnect, device number 33 [ 212.213781][ T5934] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 212.281495][ T9675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.993'. [ 212.327605][ T9676] /dev/rnullb0: Can't open blockdev [ 212.375414][ T5934] usb 7-1: Using ep0 maxpacket: 16 [ 212.388962][ T5934] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 212.432042][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.450585][ T5934] usb 7-1: Product: syz [ 212.462059][ T5934] usb 7-1: Manufacturer: syz [ 212.478497][ T5934] usb 7-1: SerialNumber: syz [ 212.493093][ T5934] r8152-cfgselector 7-1: Unknown version 0x0000 [ 212.503242][ T5934] r8152-cfgselector 7-1: config 0 descriptor?? [ 212.984227][ T5934] r8152-cfgselector 7-1: USB disconnect, device number 10 [ 213.216434][ T30] audit: type=1326 audit(1751616686.251:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9717 comm="syz.1.1003" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf9a98e929 code=0x0 [ 213.238004][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.375380][ T9726] netlink: 'syz.0.1005': attribute type 21 has an invalid length. [ 213.712043][ T9742] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 213.742884][ T9742] /dev/rnullb0: Can't open blockdev [ 213.770490][ T9745] syzkaller1: entered promiscuous mode [ 213.789293][ T9745] syzkaller1: entered allmulticast mode [ 214.023368][ T5934] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 214.193427][ T5934] usb 1-1: Using ep0 maxpacket: 16 [ 214.201828][ T5934] usb 1-1: config 1 has an invalid interface number: 230 but max is 0 [ 214.219097][ T5934] usb 1-1: config 1 has no interface number 0 [ 214.230920][ T5934] usb 1-1: config 1 interface 230 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 214.254789][ T5934] usb 1-1: config 1 interface 230 has no altsetting 0 [ 214.280891][ T5934] usb 1-1: New USB device found, idVendor=093a, idProduct=2628, bcdDevice=55.d2 [ 214.298298][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.324478][ T5934] usb 1-1: Product: syz [ 214.328730][ T5934] usb 1-1: Manufacturer: syz [ 214.344042][ T5934] usb 1-1: SerialNumber: syz [ 214.357499][ T9746] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 214.374940][ T5934] gspca_main: gspca_pac7302-2.14.0 probing 093a:2628 [ 214.653498][ T5892] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 214.817634][ T5892] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.830970][ T5892] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 214.842205][ T5892] usb 7-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 214.852595][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.860680][ T5892] usb 7-1: Product: syz [ 214.864905][ T5892] usb 7-1: Manufacturer: syz [ 214.869543][ T5892] usb 7-1: SerialNumber: syz [ 214.877022][ T5892] usb 7-1: config 0 descriptor?? [ 215.180291][ T5934] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 215.991279][ T5932] usb 1-1: USB disconnect, device number 34 [ 216.003736][ T5835] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 216.169190][ T5835] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 216.183509][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.214798][ T5835] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 216.231900][ T5835] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 216.240258][ T5835] usb 2-1: Manufacturer: syz [ 216.254619][ T5835] usb 2-1: config 0 descriptor?? [ 216.319460][ T5844] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 216.319521][ T5844] Bluetooth: hci3: Dropping invalid advertising data [ 216.335174][ T5844] Bluetooth: hci3: Malformed LE Event: 0x02 [ 216.363890][ T5835] rc_core: IR keymap rc-hauppauge not found [ 216.375304][ T5835] Registered IR keymap rc-empty [ 216.396775][ T5835] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 216.439853][ T5835] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input18 [ 216.475156][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 216.695714][ T5892] usb 2-1: USB disconnect, device number 32 [ 216.865835][ T9801] syzkaller1: entered promiscuous mode [ 216.876531][ T9801] syzkaller1: entered allmulticast mode [ 217.446157][ T9813] /dev/rnullb0: Can't open blockdev [ 217.532805][ T5932] usb 7-1: USB disconnect, device number 11 [ 217.630747][ T9821] /dev/rnullb0: Can't open blockdev [ 217.890263][ T9829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.062556][ T9834] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 218.069031][ T9834] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 218.222711][ T9840] netlink: 'syz.3.1043': attribute type 10 has an invalid length. [ 218.751523][ T9846] /dev/sg0: Can't lookup blockdev [ 218.804105][ T9866] /dev/rnullb0: Can't open blockdev [ 218.997849][ T9876] FAULT_INJECTION: forcing a failure. [ 218.997849][ T9876] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 219.040266][ T9876] CPU: 0 UID: 0 PID: 9876 Comm: syz.0.1059 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 219.040292][ T9876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.040302][ T9876] Call Trace: [ 219.040309][ T9876] [ 219.040317][ T9876] dump_stack_lvl+0x189/0x250 [ 219.040339][ T9876] ? __pfx____ratelimit+0x10/0x10 [ 219.040361][ T9876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.040379][ T9876] ? __pfx__printk+0x10/0x10 [ 219.040399][ T9876] ? fs_reclaim_acquire+0x7d/0x100 [ 219.040427][ T9876] should_fail_ex+0x414/0x560 [ 219.040466][ T9876] prepare_alloc_pages+0x213/0x610 [ 219.040494][ T9876] __alloc_frozen_pages_noprof+0x123/0x370 [ 219.040520][ T9876] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 219.040558][ T9876] alloc_pages_bulk_noprof+0x560/0x710 [ 219.040581][ T9876] ? rcu_is_watching+0x15/0xb0 [ 219.040598][ T9876] ? trace_kmalloc+0x1f/0xd0 [ 219.040613][ T9876] ? __kmalloc_noprof+0x29b/0x4f0 [ 219.040629][ T9876] ? copy_splice_read+0x143/0x9b0 [ 219.040653][ T9876] copy_splice_read+0x173/0x9b0 [ 219.040682][ T9876] ? __pfx_iter_file_splice_write+0x10/0x10 [ 219.040703][ T9876] ? __pfx_copy_splice_read+0x10/0x10 [ 219.040721][ T9876] ? rcu_read_lock_any_held+0xb3/0x120 [ 219.040739][ T9876] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 219.040759][ T9876] ? direct_splice_actor+0x10c/0x160 [ 219.040779][ T9876] ? __pfx_iter_file_splice_write+0x10/0x10 [ 219.040801][ T9876] ? file_end_write+0x156/0x250 [ 219.040822][ T9876] ? direct_splice_actor+0x10c/0x160 [ 219.040844][ T9876] ? __pfx_copy_splice_read+0x10/0x10 [ 219.040862][ T9876] splice_direct_to_actor+0x4a9/0xcc0 [ 219.040903][ T9876] ? __pfx_direct_splice_actor+0x10/0x10 [ 219.040923][ T9876] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 219.040955][ T9876] do_splice_direct+0x181/0x270 [ 219.040978][ T9876] ? __pfx_do_splice_direct+0x10/0x10 [ 219.040999][ T9876] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 219.041027][ T9876] ? rw_verify_area+0x258/0x650 [ 219.041049][ T9876] do_sendfile+0x4da/0x7e0 [ 219.041072][ T9876] ? __pfx_vfs_write+0x10/0x10 [ 219.041097][ T9876] ? __pfx_do_sendfile+0x10/0x10 [ 219.041119][ T9876] ? __fget_files+0x3a0/0x420 [ 219.041150][ T9876] __se_sys_sendfile64+0x13e/0x190 [ 219.041175][ T9876] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 219.041193][ T9876] ? rcu_is_watching+0x15/0xb0 [ 219.041214][ T9876] ? do_syscall_64+0xbe/0x3b0 [ 219.041239][ T9876] do_syscall_64+0xfa/0x3b0 [ 219.041258][ T9876] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.041277][ T9876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.041293][ T9876] ? clear_bhb_loop+0x60/0xb0 [ 219.041313][ T9876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.041329][ T9876] RIP: 0033:0x7f3e3638e929 [ 219.041344][ T9876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.041359][ T9876] RSP: 002b:00007f3e371ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 219.041376][ T9876] RAX: ffffffffffffffda RBX: 00007f3e365b5fa0 RCX: 00007f3e3638e929 [ 219.041389][ T9876] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 219.041398][ T9876] RBP: 00007f3e371ba090 R08: 0000000000000000 R09: 0000000000000000 [ 219.041408][ T9876] R10: 0000000000002002 R11: 0000000000000246 R12: 0000000000000001 [ 219.041418][ T9876] R13: 0000000000000000 R14: 00007f3e365b5fa0 R15: 00007ffe5b8f2848 [ 219.041452][ T9876] [ 219.374475][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.779683][ T9901] mmap: syz.3.1067 (9901) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 219.865211][ T5835] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 219.911965][ T9903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.959576][ T9908] netlink: 4860 bytes leftover after parsing attributes in process `syz.0.1069'. [ 220.036612][ T5835] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.060678][ T5835] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 220.095095][ T5835] usb 7-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 220.115546][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.158493][ T5835] usb 7-1: Product: syz [ 220.162689][ T5835] usb 7-1: Manufacturer: syz [ 220.235776][ T5835] usb 7-1: SerialNumber: syz [ 220.289723][ T5835] usb 7-1: config 0 descriptor?? [ 220.553739][ T9919] input: syz0 as /devices/virtual/input/input20 [ 220.608167][ T9923] /dev/rnullb0: Can't open blockdev [ 220.912733][ T9929] netlink: 'syz.0.1078': attribute type 21 has an invalid length. [ 220.923585][ T9929] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1078'. [ 221.118732][ T9942] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 221.125230][ T9942] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 221.213516][ T5892] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 221.390306][ T5892] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 221.413689][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.440234][ T5892] usb 4-1: config 0 descriptor?? [ 221.665958][ T9957] netlink: 'syz.1.1090': attribute type 21 has an invalid length. [ 221.674154][ T9957] netlink: 'syz.1.1090': attribute type 5 has an invalid length. [ 221.681945][ T9957] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1090'. [ 221.696216][ T5892] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 221.712059][ T9957] /dev/rnullb0: Can't open blockdev [ 221.942348][ T9967] /dev/rnullb0: Can't open blockdev [ 222.562027][ T5835] usb 7-1: USB disconnect, device number 12 [ 222.609229][ T9979] tipc: Started in network mode [ 222.614350][ T9979] tipc: Node identity e6be318d39f8, cluster identity 4711 [ 222.622938][ T9979] tipc: Enabled bearer , priority 0 [ 222.632299][ T9979] syzkaller0: MTU too low for tipc bearer [ 222.638793][ T9979] tipc: Disabling bearer [ 222.881828][ T9984] 9pnet_fd: Insufficient options for proto=fd [ 223.019184][ T9988] binder: BINDER_SET_CONTEXT_MGR already set [ 223.061884][ T9988] binder: 9987:9988 ioctl 4018620d 200000000040 returned -16 [ 223.075679][ T9988] binder: 9987:9988 ioctl c0306201 200000000500 returned -22 [ 223.096718][ T9985] /dev/rnullb0: Can't open blockdev [ 223.393048][T10003] binder: 10001:10003 ioctl c0306201 2000000003c0 returned -14 [ 223.669940][T10011] /dev/rnullb0: Can't open blockdev [ 223.753948][T10015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.816856][T10015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.930600][ T5892] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 223.948840][ T5835] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 223.970720][ T5892] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 224.018669][ T5892] asix 4-1:0.0: probe with driver asix failed with error -71 [ 224.047603][ T5892] usb 4-1: USB disconnect, device number 36 [ 224.142558][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 224.168409][ T5835] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 224.211612][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 224.259598][ T5835] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 224.285187][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.302503][ T5835] usb 1-1: Product: syz [ 224.312210][ T5835] usb 1-1: Manufacturer: syz [ 224.329323][ T5835] usb 1-1: SerialNumber: syz [ 224.339102][ T5835] usb 1-1: config 0 descriptor?? [ 224.349244][ T5835] radioshark2 1-1:0.0: Invalid radioSHARK2 device [ 224.371664][ T5835] radioshark2 1-1:0.0: probe with driver radioshark2 failed with error -22 [ 224.387873][ T5835] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 224.497442][ T5932] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 224.560759][ T5835] usb 1-1: USB disconnect, device number 35 [ 224.641016][T10039] can0: slcan on ptm0. [ 224.703380][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 224.718907][ T5932] usb 2-1: unable to get BOS descriptor or descriptor too short [ 224.721400][T10038] can0 (unregistered): slcan off ptm0. [ 224.727965][ T5932] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 224.762440][ T5932] usb 2-1: config 0 has an invalid descriptor of length 165, skipping remainder of the config [ 224.803327][ T5932] usb 2-1: config 0 has no interface number 0 [ 224.810616][ T5932] usb 2-1: too many endpoints for config 0 interface 122 altsetting 158: 52, using maximum allowed: 30 [ 224.844701][ T5932] usb 2-1: config 0 interface 122 altsetting 158 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 224.882141][ T5932] usb 2-1: config 0 interface 122 has no altsetting 0 [ 224.901679][ T5932] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 224.911113][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.947309][ T5932] usb 2-1: Product: syz [ 224.951519][ T5932] usb 2-1: Manufacturer: syz [ 224.976670][ T5932] usb 2-1: SerialNumber: syz [ 224.998354][ T5932] usb 2-1: config 0 descriptor?? [ 225.228844][ T5932] usb 2-1: USB disconnect, device number 33 [ 225.233911][T10060] netlink: 'syz.6.1119': attribute type 4 has an invalid length. [ 225.299834][T10060] netlink: 'syz.6.1119': attribute type 4 has an invalid length. [ 225.507996][T10068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.541884][T10068] FAULT_INJECTION: forcing a failure. [ 225.541884][T10068] name fail_iommufd, interval 1, probability 0, space 0, times 0 [ 225.567004][T10068] CPU: 0 UID: 0 PID: 10068 Comm: syz.6.1121 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 225.567029][T10068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.567040][T10068] Call Trace: [ 225.567047][T10068] [ 225.567054][T10068] dump_stack_lvl+0x189/0x250 [ 225.567078][T10068] ? __pfx____ratelimit+0x10/0x10 [ 225.567099][T10068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.567117][T10068] ? __pfx__printk+0x10/0x10 [ 225.567148][T10068] should_fail_ex+0x414/0x560 [ 225.567175][T10068] pfn_reader_update_pinned+0x127/0x1f0 [ 225.567201][T10068] iopt_area_fill_domains+0x284/0x7e0 [ 225.567221][T10068] ? iommufd_fops_ioctl+0x45e/0x580 [ 225.567245][T10068] ? __pfx_iopt_area_fill_domains+0x10/0x10 [ 225.567309][T10068] ? down_read+0x1ad/0x2e0 [ 225.567333][T10068] iopt_map_pages+0xaa7/0xda0 [ 225.567366][T10068] ? __pfx_iopt_map_pages+0x10/0x10 [ 225.567385][T10068] ? iopt_map_user_pages+0x4e/0xd0 [ 225.567432][T10068] ? aa_get_newest_label+0xf7/0x5d0 [ 225.567459][T10068] iopt_map_common+0x2bb/0x4f0 [ 225.567485][T10068] ? __pfx_iopt_map_common+0x10/0x10 [ 225.567526][T10068] iopt_map_user_pages+0xbc/0xd0 [ 225.567552][T10068] iommufd_ioas_map+0x392/0x4c0 [ 225.567576][T10068] ? __pfx_iommufd_ioas_map+0x10/0x10 [ 225.567599][T10068] iommufd_fops_ioctl+0x45e/0x580 [ 225.567620][T10068] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 225.567639][T10068] ? __fget_files+0x2a/0x420 [ 225.567667][T10068] ? __fget_files+0x2a/0x420 [ 225.567690][T10068] ? bpf_lsm_file_ioctl+0x9/0x20 [ 225.567705][T10068] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 225.567723][T10068] __se_sys_ioctl+0xf9/0x170 [ 225.567745][T10068] do_syscall_64+0xfa/0x3b0 [ 225.567777][T10068] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.567795][T10068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.567811][T10068] ? clear_bhb_loop+0x60/0xb0 [ 225.567830][T10068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.567845][T10068] RIP: 0033:0x7f0288d8e929 [ 225.567860][T10068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.567874][T10068] RSP: 002b:00007f0289cdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.567893][T10068] RAX: ffffffffffffffda RBX: 00007f0288fb5fa0 RCX: 00007f0288d8e929 [ 225.567905][T10068] RDX: 00002000000000c0 RSI: 0000000000003b85 RDI: 0000000000000003 [ 225.567916][T10068] RBP: 00007f0289cdc090 R08: 0000000000000000 R09: 0000000000000000 [ 225.567927][T10068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.567940][T10068] R13: 0000000000000000 R14: 00007f0288fb5fa0 R15: 00007fffd04d0dc8 [ 225.567967][T10068] [ 225.833048][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.246844][T10074] "syz.3.1124" (10074) uses obsolete ecb(arc4) skcipher [ 226.663555][ T5892] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 226.858774][ T5892] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 226.868961][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.882960][ T5892] usb 7-1: Product: syz [ 226.907168][ T5892] usb 7-1: Manufacturer: syz [ 226.911802][ T5892] usb 7-1: SerialNumber: syz [ 226.922348][ T5892] usb 7-1: config 0 descriptor?? [ 227.075437][T10098] /dev/rnullb0: Can't open blockdev [ 227.177621][ T5892] usb 7-1: Firmware version (0.0) predates our first public release. [ 227.219944][ T5892] usb 7-1: Please update to version 0.2 or newer [ 227.300979][ T5892] usb 7-1: USB disconnect, device number 13 [ 227.573622][ T5906] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 227.733410][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 227.734305][ T5906] usb 2-1: too many configurations: 71, using maximum allowed: 8 [ 227.758428][ T5906] usb 2-1: config index 0 descriptor too short (expected 65058, got 17) [ 227.767443][ T5906] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 227.778151][ T5906] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 227.800700][ T5906] usb 2-1: config index 1 descriptor too short (expected 65058, got 17) [ 227.813386][ T5906] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 227.823721][ T5906] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 227.835502][ T5906] usb 2-1: config index 2 descriptor too short (expected 65058, got 17) [ 227.844027][ T5906] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 227.853551][ T5932] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 227.858623][ T5906] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 227.875857][ T5906] usb 2-1: config index 3 descriptor too short (expected 65058, got 17) [ 227.883665][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 227.884389][ T5906] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 227.891842][ T9] usb 4-1: config 1 has an invalid interface number: 166 but max is 0 [ 227.908929][ T5906] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 227.911446][ T9] usb 4-1: config 1 has no interface number 0 [ 227.927040][ T9] usb 4-1: config 1 interface 166 altsetting 2 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 227.934190][ T5906] usb 2-1: config index 4 descriptor too short (expected 65058, got 17) [ 227.938923][ T9] usb 4-1: config 1 interface 166 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 8 [ 227.947610][ T5906] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 227.969028][ T5906] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 227.982994][ T9] usb 4-1: config 1 interface 166 has no altsetting 0 [ 227.991119][ T5906] usb 2-1: config index 5 descriptor too short (expected 65058, got 17) [ 227.993070][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=35.62 [ 228.006967][ T5906] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 228.008904][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.028064][ T9] usb 4-1: Product: syz [ 228.032463][ T9] usb 4-1: Manufacturer: syz [ 228.037142][ T9] usb 4-1: SerialNumber: syz [ 228.038057][ T5906] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 228.043551][ T5932] usb 1-1: Using ep0 maxpacket: 8 [ 228.058598][ T5906] usb 2-1: config index 6 descriptor too short (expected 65058, got 17) [ 228.067832][ T5932] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 228.069119][ T5906] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 228.077259][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.096401][ T5906] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 228.097970][ T5932] usb 1-1: Product: syz [ 228.105652][ T5892] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 228.109812][ T5932] usb 1-1: Manufacturer: syz [ 228.122421][ T5932] usb 1-1: SerialNumber: syz [ 228.127907][ T5906] usb 2-1: config index 7 descriptor too short (expected 65058, got 17) [ 228.132372][ T5932] usb 1-1: config 0 descriptor?? [ 228.149163][ T5906] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 228.160285][ T5906] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 228.175338][ T5906] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 228.185296][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.193597][ T5906] usb 2-1: Product: syz [ 228.198391][ T5906] usb 2-1: Manufacturer: syz [ 228.202996][ T5906] usb 2-1: SerialNumber: syz [ 228.265365][ T5892] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.277933][ T5892] usb 7-1: config 0 interface 0 has no altsetting 0 [ 228.286451][ T5892] usb 7-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 228.297717][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.309259][ T5892] usb 7-1: config 0 descriptor?? [ 228.345862][ T5932] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 228.471067][ T9] keyspan 4-1:1.166: Keyspan 1 port adapter converter detected [ 228.480166][ T9] keyspan 4-1:1.166: found no endpoint descriptor for endpoint 84 [ 228.489996][ T9] keyspan 4-1:1.166: found no endpoint descriptor for endpoint 81 [ 228.498123][ T9] keyspan 4-1:1.166: found no endpoint descriptor for endpoint 82 [ 228.507145][ T9] keyspan 4-1:1.166: found no endpoint descriptor for endpoint 1 [ 228.515315][ T9] keyspan 4-1:1.166: found no endpoint descriptor for endpoint 2 [ 228.523179][ T9] keyspan 4-1:1.166: found no endpoint descriptor for endpoint 83 [ 228.532704][ T9] keyspan 4-1:1.166: found no endpoint descriptor for endpoint 3 [ 228.545055][ T9] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 228.556891][ T5932] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 228.583421][ T9] usb 4-1: USB disconnect, device number 37 [ 228.607363][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 228.621646][ T9] keyspan 4-1:1.166: device disconnected [ 228.738435][ T5892] sunplus 0003:04FC:05D8.0011: unknown main item tag 0x0 [ 228.749308][ T5892] sunplus 0003:04FC:05D8.0011: hidraw0: USB HID v0.05 Device [HID 04fc:05d8] on usb-dummy_hcd.6-1/input0 [ 229.000461][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1143'. [ 229.011324][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1143'. [ 229.028408][T10141] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 229.054959][T10141] CIFS mount error: No usable UNC path provided in device string! [ 229.054959][T10141] [ 229.065844][T10141] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 229.076642][T10141] /dev/rnullb0: Can't open blockdev [ 229.083627][ T5154] Bluetooth: hci2: command 0x0405 tx timeout [ 229.206625][T10144] FAULT_INJECTION: forcing a failure. [ 229.206625][T10144] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 229.220677][T10144] CPU: 0 UID: 0 PID: 10144 Comm: syz.3.1144 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 229.220691][T10144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 229.220700][T10144] Call Trace: [ 229.220704][T10144] [ 229.220708][T10144] dump_stack_lvl+0x189/0x250 [ 229.220727][T10144] ? __pfx____ratelimit+0x10/0x10 [ 229.220747][T10144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.220764][T10144] ? __pfx__printk+0x10/0x10 [ 229.220785][T10144] ? fs_reclaim_acquire+0x7d/0x100 [ 229.220811][T10144] should_fail_ex+0x414/0x560 [ 229.220840][T10144] prepare_alloc_pages+0x213/0x610 [ 229.220865][T10144] __alloc_frozen_pages_noprof+0x123/0x370 [ 229.220891][T10144] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 229.220909][T10144] ? try_to_migrate+0x3bc/0x670 [ 229.220933][T10144] ? __pfx___might_resched+0x10/0x10 [ 229.220949][T10144] ? __pfx_try_to_migrate_one+0x10/0x10 [ 229.220967][T10144] ? __pfx_folio_not_mapped+0x10/0x10 [ 229.220994][T10144] __folio_alloc_noprof+0x18/0x120 [ 229.221018][T10144] migrate_pages_batch+0x7a0/0x2830 [ 229.221058][T10144] ? __pfx_alloc_migration_target+0x10/0x10 [ 229.221080][T10144] ? __pfx_migrate_pages_batch+0x10/0x10 [ 229.221127][T10144] migrate_pages+0x1bcc/0x2930 [ 229.221160][T10144] ? __pfx_alloc_migration_target+0x10/0x10 [ 229.221187][T10144] ? __pfx_migrate_pages+0x10/0x10 [ 229.221203][T10144] ? find_vma+0xe7/0x160 [ 229.221218][T10144] ? __pfx_find_vma+0x10/0x10 [ 229.221237][T10144] ? queue_pages_test_walk+0x423/0x790 [ 229.221261][T10144] ? walk_page_range_mm+0x57e/0x660 [ 229.221287][T10144] ? __pfx___up_read+0x10/0x10 [ 229.221310][T10144] do_migrate_pages+0x5ee/0x800 [ 229.221340][T10144] ? __pfx_do_migrate_pages+0x10/0x10 [ 229.221379][T10144] ? security_capable+0xbd/0x2e0 [ 229.221402][T10144] __se_sys_migrate_pages+0x530/0x660 [ 229.221418][T10144] ? __se_sys_migrate_pages+0x130/0x660 [ 229.221464][T10144] ? __pfx___se_sys_migrate_pages+0x10/0x10 [ 229.221480][T10144] ? rcu_is_watching+0x15/0xb0 [ 229.221498][T10144] ? do_syscall_64+0xbe/0x3b0 [ 229.221520][T10144] do_syscall_64+0xfa/0x3b0 [ 229.221539][T10144] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.221558][T10144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.221573][T10144] ? clear_bhb_loop+0x60/0xb0 [ 229.221593][T10144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.221608][T10144] RIP: 0033:0x7effec98e929 [ 229.221624][T10144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.221637][T10144] RSP: 002b:00007effed71f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 229.221655][T10144] RAX: ffffffffffffffda RBX: 00007effecbb5fa0 RCX: 00007effec98e929 [ 229.221667][T10144] RDX: 0000200000000300 RSI: 0000000000000003 RDI: 0000000000000000 [ 229.221676][T10144] RBP: 00007effed71f090 R08: 0000000000000000 R09: 0000000000000000 [ 229.221686][T10144] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 229.221696][T10144] R13: 0000000000000000 R14: 00007effecbb5fa0 R15: 00007ffe55bc7118 [ 229.221721][T10144] [ 229.522922][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.807899][T10157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 229.976329][T10162] /dev/rnullb0: Can't open blockdev [ 230.342759][ T5835] usb 2-1: USB disconnect, device number 34 [ 230.713553][ T5835] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 230.771975][ T5906] usb 7-1: USB disconnect, device number 14 [ 231.044960][ T5835] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 231.073507][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.096484][ T5835] usb 2-1: config 0 descriptor?? [ 231.106299][ T5835] cp210x 2-1:0.0: cp210x converter detected [ 231.208992][T10179] FAULT_INJECTION: forcing a failure. [ 231.208992][T10179] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 231.224507][T10179] CPU: 0 UID: 0 PID: 10179 Comm: syz.3.1154 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 231.224532][T10179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 231.224543][T10179] Call Trace: [ 231.224550][T10179] [ 231.224558][T10179] dump_stack_lvl+0x189/0x250 [ 231.224583][T10179] ? __pfx____ratelimit+0x10/0x10 [ 231.224606][T10179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.224624][T10179] ? __pfx__printk+0x10/0x10 [ 231.224644][T10179] ? fs_reclaim_acquire+0x7d/0x100 [ 231.224675][T10179] should_fail_ex+0x414/0x560 [ 231.224705][T10179] prepare_alloc_pages+0x213/0x610 [ 231.224735][T10179] __alloc_frozen_pages_noprof+0x123/0x370 [ 231.224762][T10179] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 231.224793][T10179] ? policy_nodemask+0x27c/0x720 [ 231.224819][T10179] alloc_pages_mpol+0x232/0x4a0 [ 231.224843][T10179] vma_alloc_folio_noprof+0xe4/0x200 [ 231.224866][T10179] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 231.224899][T10179] folio_prealloc+0x30/0x180 [ 231.224921][T10179] do_wp_page+0x1231/0x5800 [ 231.224962][T10179] ? __pfx_do_wp_page+0x10/0x10 [ 231.224976][T10179] ? do_raw_spin_lock+0x121/0x290 [ 231.225000][T10179] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 231.225030][T10179] __handle_mm_fault+0x1033/0x5440 [ 231.225065][T10179] ? __pfx___handle_mm_fault+0x10/0x10 [ 231.225098][T10179] ? follow_page_pte+0xd03/0x13e0 [ 231.225126][T10179] handle_mm_fault+0x40a/0x8e0 [ 231.225154][T10179] __get_user_pages+0x1699/0x2ce0 [ 231.225207][T10179] populate_vma_page_range+0x29f/0x3a0 [ 231.225227][T10179] ? __pfx_populate_vma_page_range+0x10/0x10 [ 231.225242][T10179] ? apply_vma_lock_flags+0x344/0x3c0 [ 231.225262][T10179] ? down_read+0x1ad/0x2e0 [ 231.225286][T10179] __mm_populate+0x24c/0x380 [ 231.225306][T10179] ? __pfx___mm_populate+0x10/0x10 [ 231.225324][T10179] ? up_write+0x1c4/0x420 [ 231.225346][T10179] do_mlock+0x625/0x740 [ 231.225379][T10179] ? __pfx_do_mlock+0x10/0x10 [ 231.225408][T10179] ? fput+0xa0/0xd0 [ 231.225424][T10179] ? ksys_write+0x22a/0x250 [ 231.225449][T10179] ? __pfx_ksys_write+0x10/0x10 [ 231.225465][T10179] ? rcu_is_watching+0x15/0xb0 [ 231.225491][T10179] __x64_sys_mlock+0x60/0x70 [ 231.225514][T10179] do_syscall_64+0xfa/0x3b0 [ 231.225533][T10179] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.225553][T10179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.225569][T10179] ? clear_bhb_loop+0x60/0xb0 [ 231.225590][T10179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.225605][T10179] RIP: 0033:0x7effec98e929 [ 231.225621][T10179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.225634][T10179] RSP: 002b:00007effea7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 231.225652][T10179] RAX: ffffffffffffffda RBX: 00007effecbb6080 RCX: 00007effec98e929 [ 231.225665][T10179] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 231.225676][T10179] RBP: 00007effea7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 231.225687][T10179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.225697][T10179] R13: 0000000000000000 R14: 00007effecbb6080 R15: 00007ffe55bc7118 [ 231.225726][T10179] [ 231.398675][ T5835] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 231.399300][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.409390][ T5835] cp210x 2-1:0.0: querying part number failed [ 231.479193][T10173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.601889][ T5835] usb 2-1: cp210x converter now attached to ttyUSB0 [ 231.665903][ T9] usb 1-1: USB disconnect, device number 36 [ 231.909826][T10191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.964717][T10193] /dev/rnullb0: Can't open blockdev [ 232.123601][ T5835] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 232.258135][T10206] /dev/rnullb0: Can't open blockdev [ 232.293834][ T5835] usb 4-1: Using ep0 maxpacket: 32 [ 232.304603][ T5835] usb 4-1: no configurations [ 232.315950][ T5835] usb 4-1: can't read configurations, error -22 [ 232.453534][ T5835] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 232.633399][ T5835] usb 4-1: Using ep0 maxpacket: 32 [ 232.639378][ T5835] usb 4-1: no configurations [ 232.646214][ T5835] usb 4-1: can't read configurations, error -22 [ 232.652868][ T5835] usb usb4-port1: attempt power cycle [ 232.823482][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 232.956318][ T9] usb 7-1: device descriptor read/64, error -71 [ 232.987607][T10218] syzkaller1: entered promiscuous mode [ 232.993117][T10218] syzkaller1: entered allmulticast mode [ 232.995475][ T5835] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 233.030841][ T5835] usb 4-1: Using ep0 maxpacket: 32 [ 233.036709][ T5835] usb 4-1: no configurations [ 233.041354][ T5835] usb 4-1: can't read configurations, error -22 [ 233.163095][T10220] FAULT_INJECTION: forcing a failure. [ 233.163095][T10220] name failslab, interval 1, probability 0, space 0, times 0 [ 233.181351][T10220] CPU: 0 UID: 0 PID: 10220 Comm: syz.0.1170 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 233.181371][T10220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.181377][T10220] Call Trace: [ 233.181382][T10220] [ 233.181387][T10220] dump_stack_lvl+0x189/0x250 [ 233.181403][T10220] ? __pfx____ratelimit+0x10/0x10 [ 233.181417][T10220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.181427][T10220] ? __pfx__printk+0x10/0x10 [ 233.181441][T10220] ? __pfx___might_resched+0x10/0x10 [ 233.181450][T10220] ? fs_reclaim_acquire+0x7d/0x100 [ 233.181466][T10220] should_fail_ex+0x414/0x560 [ 233.181492][T10220] should_failslab+0xa8/0x100 [ 233.181505][T10220] __kmalloc_noprof+0xcb/0x4f0 [ 233.181515][T10220] ? __kasan_kmalloc+0x93/0xb0 [ 233.181524][T10220] ? ovs_nla_copy_actions+0x68/0x3d0 [ 233.181536][T10220] ovs_nla_copy_actions+0x68/0x3d0 [ 233.181544][T10220] ? __asan_memcpy+0x40/0x70 [ 233.181556][T10220] ovs_flow_cmd_new+0x528/0xd80 [ 233.181567][T10220] ? netlink_sendmsg+0x7a1/0xb30 [ 233.181586][T10220] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 233.181630][T10220] ? __nla_parse+0x40/0x60 [ 233.181642][T10220] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 233.181657][T10220] genl_family_rcv_msg_doit+0x215/0x300 [ 233.181670][T10220] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 233.181687][T10220] ? bpf_lsm_capable+0x9/0x20 [ 233.181697][T10220] ? security_capable+0x7e/0x2e0 [ 233.181711][T10220] genl_rcv_msg+0x60e/0x790 [ 233.181724][T10220] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.181732][T10220] ? ref_tracker_free+0x63a/0x7d0 [ 233.181741][T10220] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 233.181754][T10220] ? __pfx_ref_tracker_free+0x10/0x10 [ 233.181769][T10220] netlink_rcv_skb+0x208/0x470 [ 233.181782][T10220] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.181793][T10220] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.181827][T10220] ? down_read+0x1ad/0x2e0 [ 233.181850][T10220] genl_rcv+0x28/0x40 [ 233.181864][T10220] netlink_unicast+0x75b/0x8d0 [ 233.181893][T10220] netlink_sendmsg+0x805/0xb30 [ 233.181912][T10220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.181927][T10220] ? aa_sock_msg_perm+0xf1/0x1d0 [ 233.181939][T10220] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 233.181952][T10220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.181966][T10220] __sock_sendmsg+0x219/0x270 [ 233.181980][T10220] ____sys_sendmsg+0x505/0x830 [ 233.181992][T10220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.182007][T10220] ? import_iovec+0x74/0xa0 [ 233.182018][T10220] ___sys_sendmsg+0x21f/0x2a0 [ 233.182028][T10220] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.182057][T10220] ? __fget_files+0x2a/0x420 [ 233.182069][T10220] ? __fget_files+0x3a0/0x420 [ 233.182088][T10220] __x64_sys_sendmsg+0x19b/0x260 [ 233.182098][T10220] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 233.182113][T10220] ? __pfx_ksys_write+0x10/0x10 [ 233.182123][T10220] ? rcu_is_watching+0x15/0xb0 [ 233.182135][T10220] ? do_syscall_64+0xbe/0x3b0 [ 233.182150][T10220] do_syscall_64+0xfa/0x3b0 [ 233.182162][T10220] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.182173][T10220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.182182][T10220] ? clear_bhb_loop+0x60/0xb0 [ 233.182194][T10220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.182203][T10220] RIP: 0033:0x7f3e3638e929 [ 233.182212][T10220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.182220][T10220] RSP: 002b:00007f3e371ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.182238][T10220] RAX: ffffffffffffffda RBX: 00007f3e365b5fa0 RCX: 00007f3e3638e929 [ 233.182245][T10220] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 233.182251][T10220] RBP: 00007f3e371ba090 R08: 0000000000000000 R09: 0000000000000000 [ 233.182257][T10220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.182262][T10220] R13: 0000000000000000 R14: 00007f3e365b5fa0 R15: 00007ffe5b8f2848 [ 233.182278][T10220] [ 233.182285][T10220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.185915][ T5835] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 233.204539][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 233.343522][ T9] usb 7-1: device descriptor read/64, error -71 [ 233.359812][T10222] FAULT_INJECTION: forcing a failure. [ 233.359812][T10222] name failslab, interval 1, probability 0, space 0, times 0 [ 233.489033][ T9] usb usb7-port1: attempt power cycle [ 233.500526][T10222] CPU: 1 UID: 0 PID: 10222 Comm: syz.0.1171 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 233.500550][T10222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.500560][T10222] Call Trace: [ 233.500567][T10222] [ 233.500575][T10222] dump_stack_lvl+0x189/0x250 [ 233.500597][T10222] ? __pfx____ratelimit+0x10/0x10 [ 233.500624][T10222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.500641][T10222] ? __pfx__printk+0x10/0x10 [ 233.500662][T10222] ? __pfx___might_resched+0x10/0x10 [ 233.500678][T10222] ? fs_reclaim_acquire+0x7d/0x100 [ 233.500703][T10222] should_fail_ex+0x414/0x560 [ 233.500733][T10222] should_failslab+0xa8/0x100 [ 233.500752][T10222] __kmalloc_noprof+0xcb/0x4f0 [ 233.500768][T10222] ? tomoyo_encode+0x28b/0x550 [ 233.500791][T10222] tomoyo_encode+0x28b/0x550 [ 233.500814][T10222] tomoyo_realpath_from_path+0x58d/0x5d0 [ 233.500835][T10222] ? tomoyo_domain+0xd9/0x130 [ 233.500857][T10222] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 233.500880][T10222] tomoyo_path_number_perm+0x1e8/0x5a0 [ 233.500907][T10222] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 233.500945][T10222] ? __lock_acquire+0xab9/0xd20 [ 233.500987][T10222] ? __fget_files+0x2a/0x420 [ 233.501021][T10222] ? __fget_files+0x2a/0x420 [ 233.501039][T10222] ? __fget_files+0x3a0/0x420 [ 233.501057][T10222] ? __fget_files+0x2a/0x420 [ 233.501081][T10222] security_file_ioctl+0xcb/0x2d0 [ 233.501106][T10222] __se_sys_ioctl+0x47/0x170 [ 233.501148][T10222] do_syscall_64+0xfa/0x3b0 [ 233.501167][T10222] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.501186][T10222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.501209][T10222] ? clear_bhb_loop+0x60/0xb0 [ 233.501229][T10222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.501244][T10222] RIP: 0033:0x7f3e3638e929 [ 233.501259][T10222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.501272][T10222] RSP: 002b:00007f3e371ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.501291][T10222] RAX: ffffffffffffffda RBX: 00007f3e365b5fa0 RCX: 00007f3e3638e929 [ 233.501303][T10222] RDX: 0000200000000500 RSI: 000000004008ae89 RDI: 0000000000000005 [ 233.501314][T10222] RBP: 00007f3e371ba090 R08: 0000000000000000 R09: 0000000000000000 [ 233.501324][T10222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.501333][T10222] R13: 0000000000000000 R14: 00007f3e365b5fa0 R15: 00007ffe5b8f2848 [ 233.501360][T10222] [ 233.501578][T10222] ERROR: Out of memory at tomoyo_realpath_from_path. [ 233.875461][ T5835] usb 4-1: Using ep0 maxpacket: 32 [ 233.884371][ T5835] usb 4-1: no configurations [ 233.889005][ T5835] usb 4-1: can't read configurations, error -22 [ 233.896251][ T5835] usb usb4-port1: unable to enumerate USB device [ 233.904287][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 233.918564][ T5835] usb 2-1: USB disconnect, device number 35 [ 233.930615][ T5835] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 233.944022][ T9] usb 7-1: device descriptor read/8, error -71 [ 233.960154][ T5835] cp210x 2-1:0.0: device disconnected [ 234.193447][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 234.230306][T10234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.245542][ T9] usb 7-1: device descriptor read/8, error -71 [ 234.252711][T10234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.367481][ T9] usb usb7-port1: unable to enumerate USB device [ 234.464909][ T5932] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 234.624246][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 234.635592][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.649998][ T5932] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 234.659467][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.674463][ T5932] usb 2-1: config 0 descriptor?? [ 234.683101][ T5932] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 234.729820][T10246] loop6: detected capacity change from 0 to 1 [ 234.743863][ T6452] Dev loop6: unable to read RDB block 1 [ 234.749535][ T6452] loop6: unable to read partition table [ 234.760701][ T6452] loop6: partition table beyond EOD, truncated [ 234.770951][T10246] Dev loop6: unable to read RDB block 1 [ 234.778308][T10246] loop6: unable to read partition table [ 234.787105][T10246] loop6: partition table beyond EOD, truncated [ 234.794400][T10246] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 234.918416][T10249] /dev/rnullb0: Can't open blockdev [ 234.936414][T10249] FAULT_INJECTION: forcing a failure. [ 234.936414][T10249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.949590][T10249] CPU: 1 UID: 0 PID: 10249 Comm: syz.0.1182 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 234.949614][T10249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.949624][T10249] Call Trace: [ 234.949632][T10249] [ 234.949640][T10249] dump_stack_lvl+0x189/0x250 [ 234.949663][T10249] ? __pfx____ratelimit+0x10/0x10 [ 234.949685][T10249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.949703][T10249] ? __pfx__printk+0x10/0x10 [ 234.949722][T10249] ? __might_fault+0xb0/0x130 [ 234.949752][T10249] should_fail_ex+0x414/0x560 [ 234.949780][T10249] _copy_from_iter+0x1db/0x16f0 [ 234.949795][T10249] ? __lock_acquire+0xab9/0xd20 [ 234.949815][T10249] ? __pfx__copy_from_iter+0x10/0x10 [ 234.949831][T10249] ? __lock_acquire+0xab9/0xd20 [ 234.949857][T10249] tun_get_user+0x4ce/0x3ce0 [ 234.949885][T10249] ? aa_file_perm+0x13e/0x11b0 [ 234.949906][T10249] ? aa_file_perm+0x13e/0x11b0 [ 234.949924][T10249] ? aa_file_perm+0x3ed/0x11b0 [ 234.949937][T10249] ? __pfx_tun_get_user+0x10/0x10 [ 234.949951][T10249] ? __lock_acquire+0xab9/0xd20 [ 234.949967][T10249] ? ref_tracker_alloc+0x318/0x460 [ 234.949976][T10249] ? __lock_acquire+0xab9/0xd20 [ 234.949994][T10249] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 234.950016][T10249] ? tun_get+0x1c/0x2f0 [ 234.950039][T10249] ? tun_get+0x1c/0x2f0 [ 234.950055][T10249] ? tun_get+0x1c/0x2f0 [ 234.950075][T10249] tun_chr_write_iter+0x113/0x200 [ 234.950088][T10249] vfs_write+0x54b/0xa90 [ 234.950102][T10249] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 234.950112][T10249] ? __pfx_vfs_write+0x10/0x10 [ 234.950128][T10249] ? __fget_files+0x2a/0x420 [ 234.950152][T10249] ksys_write+0x145/0x250 [ 234.950174][T10249] ? __pfx_ksys_write+0x10/0x10 [ 234.950191][T10249] ? rcu_is_watching+0x15/0xb0 [ 234.950213][T10249] ? do_syscall_64+0xbe/0x3b0 [ 234.950232][T10249] do_syscall_64+0xfa/0x3b0 [ 234.950245][T10249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.950256][T10249] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 234.950271][T10249] ? clear_bhb_loop+0x60/0xb0 [ 234.950289][T10249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.950306][T10249] RIP: 0033:0x7f3e3638e929 [ 234.950327][T10249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.950340][T10249] RSP: 002b:00007f3e371ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.950358][T10249] RAX: ffffffffffffffda RBX: 00007f3e365b5fa0 RCX: 00007f3e3638e929 [ 234.950369][T10249] RDX: 000000000000009e RSI: 00002000000002c0 RDI: 0000000000000004 [ 234.950380][T10249] RBP: 00007f3e371ba090 R08: 0000000000000000 R09: 0000000000000000 [ 234.950390][T10249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.950400][T10249] R13: 0000000000000000 R14: 00007f3e365b5fa0 R15: 00007ffe5b8f2848 [ 234.950421][T10249] [ 235.391721][T10258] netlink: 'syz.0.1185': attribute type 21 has an invalid length. [ 235.399746][T10258] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1185'. [ 235.497363][T10261] Bluetooth: MGMT ver 1.23 [ 235.502607][T10261] /dev/rnullb0: Can't open blockdev [ 235.796317][T10274] syzkaller1: entered promiscuous mode [ 235.802040][T10274] syzkaller1: entered allmulticast mode [ 235.851734][ T5932] gspca_vc032x: reg_w err -71 [ 235.863502][ T5932] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 235.888931][ T5932] usb 2-1: USB disconnect, device number 36 [ 236.246187][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 236.437965][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.473543][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 236.490379][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.526796][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 236.538750][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.574673][ T9] usb 1-1: config 0 descriptor?? [ 236.595836][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 236.673346][ T5932] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 236.772476][T10304] binder: 10303:10304 ioctl 40046210 0 returned -14 [ 236.789938][ T9] usb 1-1: USB disconnect, device number 37 [ 236.801788][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1202'. [ 236.870012][T10300] bond0: (slave bond_slave_0): Releasing backup interface [ 236.873509][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 236.887750][ T5932] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 236.896757][ T5932] usb 4-1: config 254 has no interface number 0 [ 236.903975][ T5932] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 236.914427][ T5932] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 236.928636][ T5932] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 236.941869][ T5932] usb 4-1: config 254 interface 235 has no altsetting 0 [ 236.957822][ T5932] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 236.971089][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 236.979794][ T5932] usb 4-1: Product: syz [ 236.984106][ T5932] usb 4-1: Manufacturer: syz [ 236.989163][ T5932] usb 4-1: SerialNumber: syz [ 236.998462][T10288] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 237.064524][ T5835] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 237.213383][ T5835] usb 7-1: device descriptor read/64, error -71 [ 237.264533][ T5932] usbtest 4-1:254.235: couldn't get endpoints, -71 [ 237.271329][ T5932] usbtest 4-1:254.235: probe with driver usbtest failed with error -71 [ 237.283458][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 237.297721][ T5932] usb 4-1: USB disconnect, device number 42 [ 237.443391][ T9] usb 2-1: device descriptor read/64, error -71 [ 237.453444][ T5835] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 237.475872][T10315] netlink: 'syz.0.1207': attribute type 2 has an invalid length. [ 237.546253][T10317] FAULT_INJECTION: forcing a failure. [ 237.546253][T10317] name failslab, interval 1, probability 0, space 0, times 0 [ 237.559034][T10317] CPU: 1 UID: 0 PID: 10317 Comm: syz.0.1208 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 237.559058][T10317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.559067][T10317] Call Trace: [ 237.559074][T10317] [ 237.559080][T10317] dump_stack_lvl+0x189/0x250 [ 237.559103][T10317] ? __pfx____ratelimit+0x10/0x10 [ 237.559122][T10317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.559139][T10317] ? __pfx__printk+0x10/0x10 [ 237.559163][T10317] ? __lock_acquire+0xab9/0xd20 [ 237.559189][T10317] should_fail_ex+0x414/0x560 [ 237.559225][T10317] should_failslab+0xa8/0x100 [ 237.559244][T10317] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 237.559259][T10317] ? alloc_io_context+0x27/0x290 [ 237.559282][T10317] alloc_io_context+0x27/0x290 [ 237.559301][T10317] set_task_ioprio+0x462/0x5e0 [ 237.559318][T10317] ? set_task_ioprio+0x60/0x5e0 [ 237.559337][T10317] __se_sys_ioprio_set+0x813/0xa30 [ 237.559350][T10317] ? __se_sys_ioprio_set+0xd0/0xa30 [ 237.559363][T10317] ? do_syscall_64+0xbe/0x3b0 [ 237.559381][T10317] do_syscall_64+0xfa/0x3b0 [ 237.559395][T10317] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.559409][T10317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.559421][T10317] ? clear_bhb_loop+0x60/0xb0 [ 237.559435][T10317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.559447][T10317] RIP: 0033:0x7f3e3638e929 [ 237.559467][T10317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.559478][T10317] RSP: 002b:00007f3e371ba038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 237.559492][T10317] RAX: ffffffffffffffda RBX: 00007f3e365b5fa0 RCX: 00007f3e3638e929 [ 237.559506][T10317] RDX: 0000000000006000 RSI: 0000000000000000 RDI: 0000000000000002 [ 237.559514][T10317] RBP: 00007f3e371ba090 R08: 0000000000000000 R09: 0000000000000000 [ 237.559521][T10317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.559533][T10317] R13: 0000000000000000 R14: 00007f3e365b5fa0 R15: 00007ffe5b8f2848 [ 237.559558][T10317] [ 237.693392][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 237.697026][ T5835] usb 7-1: device descriptor read/64, error -71 [ 237.883921][ T5835] usb usb7-port1: attempt power cycle [ 237.893639][ T9] usb 2-1: device descriptor read/64, error -71 [ 238.005840][ T9] usb usb2-port1: attempt power cycle [ 238.060343][T10325] syzkaller0: entered promiscuous mode [ 238.063474][ T5932] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 238.066065][T10325] syzkaller0: entered allmulticast mode [ 238.086605][T10325] /dev/rnullb0: Can't open blockdev [ 238.223766][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 238.231090][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.242866][T10329] netlink: 'syz.3.1213': attribute type 10 has an invalid length. [ 238.248561][ T5835] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 238.252611][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.279568][ T5932] usb 1-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 238.279594][ T5835] usb 7-1: device descriptor read/8, error -71 [ 238.295506][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.318153][ T5932] usb 1-1: config 0 descriptor?? [ 238.343747][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 238.370141][ T9] usb 2-1: device descriptor read/8, error -71 [ 238.533503][ T5835] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 238.566548][ T5835] usb 7-1: device descriptor read/8, error -71 [ 238.623943][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 238.655534][ T9] usb 2-1: device descriptor read/8, error -71 [ 238.674370][ T5835] usb usb7-port1: unable to enumerate USB device [ 238.776526][ T9] usb usb2-port1: unable to enumerate USB device [ 238.942361][ T5932] usbhid 1-1:0.0: can't add hid device: -71 [ 238.955642][ T5932] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 238.979383][ T5932] usb 1-1: USB disconnect, device number 38 [ 240.141684][ T5154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.156217][ T5154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.169384][ T5154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.181329][ T5154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.192879][ T5154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.238564][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.393193][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.441772][T10352] Unsupported ieee802154 address type: 0 [ 240.510813][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.600329][T10354] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 240.609073][T10354] VFS: Can't find a romfs filesystem on dev rnullb0. [ 240.609073][T10354] [ 240.683473][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.167497][ T36] bridge_slave_1: left allmulticast mode [ 241.173170][ T36] bridge_slave_1: left promiscuous mode [ 241.203490][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.256294][ T36] bridge_slave_0: left allmulticast mode [ 241.270842][ T36] bridge_slave_0: left promiscuous mode [ 241.278720][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.573679][ T43] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 241.739987][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 241.748929][ T43] usb 7-1: unable to get BOS descriptor or descriptor too short [ 241.767110][ T43] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.807053][ T43] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.826450][ T43] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.850060][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.882005][ T43] usb 7-1: Product: syz [ 241.889172][ T43] usb 7-1: Manufacturer: syz [ 241.893550][ T5878] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 241.899770][ T43] usb 7-1: SerialNumber: syz [ 242.066644][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.085816][ T5878] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 242.095559][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.118605][ T5878] usb 1-1: config 0 descriptor?? [ 242.166910][T10376] /dev/rnullb0: Can't open blockdev [ 242.285959][ T5154] Bluetooth: hci3: command tx timeout [ 242.428590][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.432469][ T2141] smc: removing ib device syz0 [ 242.451805][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.464866][ T36] bond0 (unregistering): Released all slaves [ 242.585933][ T43] usb 7-1: unknown interface protocol 0x2, assuming v1 [ 242.593331][ T43] usb 7-1: cannot find UAC_HEADER [ 242.652505][ T5878] razer 0003:1532:010E.0012: unknown main item tag 0x0 [ 242.665315][ T5878] razer 0003:1532:010E.0012: unknown main item tag 0x0 [ 242.669008][ T43] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 242.683498][ T5878] razer 0003:1532:010E.0012: unknown main item tag 0x0 [ 242.693208][ T5878] razer 0003:1532:010E.0012: unknown main item tag 0x0 [ 242.709393][ T43] usb 7-1: USB disconnect, device number 23 [ 242.737107][ T5878] razer 0003:1532:010E.0012: unknown main item tag 0x0 [ 242.808457][ T6452] udevd[6452]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.824850][ T5878] razer 0003:1532:010E.0012: failed to enable macro keys: -71 [ 242.861460][T10342] chnl_net:caif_netlink_parms(): no params data found [ 242.933303][ T5878] razer 0003:1532:010E.0012: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.0-1/input0 [ 243.007166][ T5878] usb 1-1: USB disconnect, device number 39 [ 243.274100][T10415] netlink: 'syz.6.1239': attribute type 27 has an invalid length. [ 243.354169][T10420] exFAT-fs (rnullb0): invalid boot record signature [ 243.365930][T10412] syzkaller1: entered promiscuous mode [ 243.382131][T10412] syzkaller1: entered allmulticast mode [ 243.398908][T10420] exFAT-fs (rnullb0): failed to read boot sector [ 243.432968][T10420] exFAT-fs (rnullb0): failed to recognize exfat type [ 243.894996][T10342] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.921793][T10342] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.963578][T10342] bridge_slave_0: entered allmulticast mode [ 244.026914][T10446] FAULT_INJECTION: forcing a failure. [ 244.026914][T10446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.082258][T10446] CPU: 0 UID: 0 PID: 10446 Comm: syz.6.1244 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 244.082284][T10446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.082294][T10446] Call Trace: [ 244.082301][T10446] [ 244.082309][T10446] dump_stack_lvl+0x189/0x250 [ 244.082334][T10446] ? __pfx____ratelimit+0x10/0x10 [ 244.082355][T10446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.082373][T10446] ? __pfx__printk+0x10/0x10 [ 244.082392][T10446] ? __might_fault+0xb0/0x130 [ 244.082422][T10446] should_fail_ex+0x414/0x560 [ 244.082452][T10446] _copy_from_user+0x2d/0xb0 [ 244.082469][T10446] kstrtouint_from_user+0xc4/0x170 [ 244.082493][T10446] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 244.082532][T10446] proc_fail_nth_write+0x88/0x240 [ 244.082549][T10446] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 244.082570][T10446] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 244.082587][T10446] vfs_write+0x27e/0xa90 [ 244.082623][T10446] ? __pfx_vfs_write+0x10/0x10 [ 244.082644][T10446] ? __fget_files+0x2a/0x420 [ 244.082670][T10446] ? __fget_files+0x3a0/0x420 [ 244.082689][T10446] ? __fget_files+0x2a/0x420 [ 244.082725][T10446] ksys_write+0x145/0x250 [ 244.082746][T10446] ? __pfx_ksys_write+0x10/0x10 [ 244.082771][T10446] ? do_syscall_64+0xbe/0x3b0 [ 244.082797][T10446] do_syscall_64+0xfa/0x3b0 [ 244.082815][T10446] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.082835][T10446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.082851][T10446] ? clear_bhb_loop+0x60/0xb0 [ 244.082870][T10446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.082885][T10446] RIP: 0033:0x7f0288d8d3df [ 244.082900][T10446] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 244.082914][T10446] RSP: 002b:00007f0289c9a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 244.082932][T10446] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0288d8d3df [ 244.082944][T10446] RDX: 0000000000000001 RSI: 00007f0289c9a0a0 RDI: 0000000000000005 [ 244.082955][T10446] RBP: 00007f0289c9a090 R08: 0000000000000000 R09: 0000000000000000 [ 244.082965][T10446] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 244.082975][T10446] R13: 0000000000000001 R14: 00007f0288fb6160 R15: 00007fffd04d0dc8 [ 244.083004][T10446] [ 244.343966][T10342] bridge_slave_0: entered promiscuous mode [ 244.377510][ T5154] Bluetooth: hci3: command tx timeout [ 244.418433][T10342] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.453654][T10342] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.497530][T10342] bridge_slave_1: entered allmulticast mode [ 244.542794][T10342] bridge_slave_1: entered promiscuous mode [ 244.633900][ T43] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 244.804530][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 244.826807][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.849171][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.895466][ T43] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 244.918466][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.948121][ T43] usb 1-1: config 0 descriptor?? [ 245.057646][T10458] syzkaller1: entered promiscuous mode [ 245.063176][T10458] syzkaller1: entered allmulticast mode [ 245.273785][T10342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.354921][T10342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.393010][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 245.406052][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 245.431675][ T43] usb 1-1: USB disconnect, device number 40 [ 245.550342][T10342] team0: Port device team_slave_0 added [ 245.586718][T10342] team0: Port device team_slave_1 added [ 245.834068][ T36] tipc: Disabling bearer [ 245.849450][ T36] tipc: Left network mode [ 245.867032][T10342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.879567][T10342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.906777][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.007063][T10342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.155951][T10342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.170439][T10342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.211888][T10342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.443500][ T5154] Bluetooth: hci3: command tx timeout [ 246.581839][T10507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.811826][ T36] hsr_slave_0: left promiscuous mode [ 246.836898][ T36] hsr_slave_1: left promiscuous mode [ 246.845571][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.862880][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.872097][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.880672][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.900274][ T36] veth1_macvtap: left promiscuous mode [ 246.908959][ T36] veth0_macvtap: left promiscuous mode [ 246.916558][ T36] veth1_vlan: left promiscuous mode [ 246.922051][ T36] veth0_vlan: left promiscuous mode [ 247.572193][ T36] team0 (unregistering): Port device team_slave_1 removed [ 247.630263][ T36] team0 (unregistering): Port device team_slave_0 removed [ 248.143073][T10531] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 248.149867][T10531] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 248.534821][ T5154] Bluetooth: hci3: command tx timeout [ 248.535435][T10342] hsr_slave_0: entered promiscuous mode [ 248.548801][T10342] hsr_slave_1: entered promiscuous mode [ 248.555724][T10342] debugfs: 'hsr0' already exists in 'hsr' [ 248.561597][T10342] Cannot create hsr debugfs directory [ 249.344280][T10565] hfs: can't find a HFS filesystem on dev rnullb0 [ 249.613028][T10342] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 249.636419][T10570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1277'. [ 249.642782][T10574] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1279'. [ 249.715994][T10342] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 249.736445][T10342] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 249.760999][T10342] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 250.095661][T10342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.171112][T10342] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.232603][ T4535] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.240109][ T4535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.275307][ T4535] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.282504][ T4535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.576802][T10616] input: syz0 as /devices/virtual/input/input22 [ 250.915944][T10630] vxfs: WRONG superblock magic 00000000 at 1 [ 250.922483][T10630] vxfs: WRONG superblock magic 00000000 at 8 [ 250.984946][T10630] vxfs: can't find superblock. [ 251.018793][T10342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.918000][T10342] veth0_vlan: entered promiscuous mode [ 251.963925][ T5835] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 251.975465][T10342] veth1_vlan: entered promiscuous mode [ 252.076933][ T30] audit: type=1804 audit(1751616725.111:9): pid=10666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1299" name="/newroot/124/cgroup.controllers" dev="tmpfs" ino=689 res=1 errno=0 [ 252.105613][T10342] veth0_macvtap: entered promiscuous mode [ 252.115365][ T30] audit: type=1800 audit(1751616725.131:10): pid=10666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1299" name="cgroup.controllers" dev="tmpfs" ino=689 res=0 errno=0 [ 252.142725][T10342] veth1_macvtap: entered promiscuous mode [ 252.159674][ T5835] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 252.186288][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.208402][ T5835] usb 1-1: Product: syz [ 252.224607][ T5835] usb 1-1: Manufacturer: syz [ 252.231791][ T5835] usb 1-1: SerialNumber: syz [ 252.240400][T10342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.265441][ T5835] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 252.292231][T10342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.301937][ T5906] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 252.369341][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.383838][ T24] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 252.401725][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.433450][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.457394][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.574661][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 252.586011][ T24] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 252.600338][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.621880][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.633718][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.642481][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.657423][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 252.671799][ T24] usb 7-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 252.681539][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.723669][ T24] usb 7-1: config 0 descriptor?? [ 252.726512][ T980] usb 1-1: USB disconnect, device number 41 [ 252.751964][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.760973][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.056644][T10680] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 253.117887][T10680] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 253.177600][ T24] redragon 0003:0C45:760B.0013: Fixing Redragon ASURA report descriptor. [ 253.199154][ T24] redragon 0003:0C45:760B.0013: unknown main item tag 0x6 [ 253.220698][ T24] redragon 0003:0C45:760B.0013: item fetching failed at offset 7/133 [ 253.241937][ T24] redragon 0003:0C45:760B.0013: probe with driver redragon failed with error -22 [ 253.383164][T10666] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.418759][ T5906] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 253.443201][ T5906] ath9k_htc: Failed to initialize the device [ 253.455099][ T980] usb 1-1: ath9k_htc: USB layer deinitialized [ 253.769451][ T5835] kernel write not supported for file /dsp1 (pid: 5835 comm: kworker/1:3) [ 254.024788][ T980] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 254.200927][ T980] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 254.216815][ T980] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 254.228330][ T980] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 254.235633][T10692] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 254.241510][ T980] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.295383][T10706] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 254.340593][ T980] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 254.514902][T10722] syzkaller1: entered promiscuous mode [ 254.521181][T10722] syzkaller1: entered allmulticast mode [ 254.605373][ T980] usb 8-1: USB disconnect, device number 2 [ 254.833767][T10730] binder: 10729:10730 ioctl c0306201 2000000003c0 returned -14 [ 255.043121][ T5835] usb 7-1: USB disconnect, device number 24 [ 255.563608][T10755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.582784][T10755] FAULT_INJECTION: forcing a failure. [ 255.582784][T10755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.602496][T10755] CPU: 1 UID: 0 PID: 10755 Comm: syz.1.1320 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 255.602525][T10755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.602535][T10755] Call Trace: [ 255.602541][T10755] [ 255.602550][T10755] dump_stack_lvl+0x189/0x250 [ 255.602578][T10755] ? __pfx____ratelimit+0x10/0x10 [ 255.602601][T10755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.602619][T10755] ? __pfx__printk+0x10/0x10 [ 255.602650][T10755] should_fail_ex+0x414/0x560 [ 255.602682][T10755] _copy_to_user+0x31/0xb0 [ 255.602702][T10755] simple_read_from_buffer+0xe1/0x170 [ 255.602731][T10755] proc_fail_nth_read+0x1df/0x250 [ 255.602753][T10755] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.602771][T10755] ? rw_verify_area+0x258/0x650 [ 255.602806][T10755] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.602823][T10755] vfs_read+0x200/0x980 [ 255.602847][T10755] ? __pfx___mutex_lock+0x10/0x10 [ 255.602869][T10755] ? __pfx_vfs_read+0x10/0x10 [ 255.602890][T10755] ? __fget_files+0x2a/0x420 [ 255.602916][T10755] ? __fget_files+0x3a0/0x420 [ 255.602936][T10755] ? __fget_files+0x2a/0x420 [ 255.602965][T10755] ksys_read+0x145/0x250 [ 255.602986][T10755] ? __pfx_ksys_read+0x10/0x10 [ 255.603008][T10755] ? do_syscall_64+0xbe/0x3b0 [ 255.603068][T10755] do_syscall_64+0xfa/0x3b0 [ 255.603088][T10755] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.603108][T10755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.603124][T10755] ? clear_bhb_loop+0x60/0xb0 [ 255.603144][T10755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.603159][T10755] RIP: 0033:0x7faf9a98d33c [ 255.603175][T10755] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 255.603189][T10755] RSP: 002b:00007faf9b8ae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 255.603209][T10755] RAX: ffffffffffffffda RBX: 00007faf9abb5fa0 RCX: 00007faf9a98d33c [ 255.603222][T10755] RDX: 000000000000000f RSI: 00007faf9b8ae0a0 RDI: 0000000000000004 [ 255.603235][T10755] RBP: 00007faf9b8ae090 R08: 0000000000000000 R09: 0000000000000000 [ 255.603243][T10755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.603251][T10755] R13: 0000000000000000 R14: 00007faf9abb5fa0 R15: 00007ffff60b2838 [ 255.603272][T10755] [ 255.650299][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.859772][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.100932][T10768] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1325'. [ 256.488905][T10783] Can't find a SQUASHFS superblock on rnullb0 [ 256.792303][T10796] FAULT_INJECTION: forcing a failure. [ 256.792303][T10796] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 256.875982][T10796] CPU: 0 UID: 0 PID: 10796 Comm: syz.6.1330 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 256.876011][T10796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.876023][T10796] Call Trace: [ 256.876030][T10796] [ 256.876039][T10796] dump_stack_lvl+0x189/0x250 [ 256.876067][T10796] ? __pfx____ratelimit+0x10/0x10 [ 256.876091][T10796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.876110][T10796] ? __pfx__printk+0x10/0x10 [ 256.876132][T10796] ? fs_reclaim_acquire+0x7d/0x100 [ 256.876163][T10796] should_fail_ex+0x414/0x560 [ 256.876197][T10796] prepare_alloc_pages+0x213/0x610 [ 256.876227][T10796] __alloc_frozen_pages_noprof+0x123/0x370 [ 256.876254][T10796] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 256.876286][T10796] ? policy_nodemask+0x27c/0x720 [ 256.876301][T10796] ? __lock_acquire+0xab9/0xd20 [ 256.876328][T10796] alloc_pages_mpol+0x232/0x4a0 [ 256.876352][T10796] alloc_pages_noprof+0xa9/0x190 [ 256.876369][T10796] get_free_pages_noprof+0xf/0x80 [ 256.876388][T10796] kasan_populate_vmalloc+0x33/0x1a0 [ 256.876401][T10796] ? do_raw_spin_unlock+0x122/0x240 [ 256.876421][T10796] alloc_vmap_area+0xd51/0x1490 [ 256.876450][T10796] ? __pfx_alloc_vmap_area+0x10/0x10 [ 256.876467][T10796] ? __kasan_kmalloc+0x93/0xb0 [ 256.876483][T10796] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 256.876502][T10796] ? __get_vm_area_node+0x13f/0x300 [ 256.876517][T10796] ? copy_process+0x54b/0x3c00 [ 256.876534][T10796] __get_vm_area_node+0x1f8/0x300 [ 256.876556][T10796] __vmalloc_node_range_noprof+0x301/0x12f0 [ 256.876575][T10796] ? copy_process+0x54b/0x3c00 [ 256.876599][T10796] ? percpu_ref_get_many+0x19/0x140 [ 256.876617][T10796] ? percpu_ref_get_many+0x19/0x140 [ 256.876649][T10796] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 256.876672][T10796] ? memcpy_and_pad+0x48/0x80 [ 256.876695][T10796] __vmalloc_node_noprof+0xc2/0x110 [ 256.876714][T10796] ? copy_process+0x54b/0x3c00 [ 256.876737][T10796] ? copy_process+0x54b/0x3c00 [ 256.876752][T10796] dup_task_struct+0x3e7/0x860 [ 256.876773][T10796] copy_process+0x54b/0x3c00 [ 256.876821][T10796] ? __pfx_copy_process+0x10/0x10 [ 256.876846][T10796] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 256.876867][T10796] vhost_task_create+0x1c4/0x290 [ 256.876887][T10796] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 256.876907][T10796] ? __pfx_vhost_task_create+0x10/0x10 [ 256.876931][T10796] ? __pfx_vhost_task_fn+0x10/0x10 [ 256.876958][T10796] ? kasan_save_track+0x4f/0x80 [ 256.876973][T10796] ? kasan_save_track+0x3e/0x80 [ 256.876994][T10796] kvm_mmu_post_init_vm+0x147/0x2b0 [ 256.877023][T10796] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 256.877049][T10796] ? __mutex_trylock_common+0x153/0x260 [ 256.877071][T10796] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 256.877096][T10796] ? rcu_is_watching+0x15/0xb0 [ 256.877112][T10796] ? look_up_lock_class+0x74/0x170 [ 256.877136][T10796] ? register_lock_class+0x51/0x320 [ 256.877163][T10796] ? __lock_acquire+0xab9/0xd20 [ 256.877221][T10796] kvm_vcpu_ioctl+0x95c/0xe90 [ 256.877247][T10796] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 256.877263][T10796] ? __lock_acquire+0xab9/0xd20 [ 256.877305][T10796] ? __fget_files+0x2a/0x420 [ 256.877330][T10796] ? __fget_files+0x2a/0x420 [ 256.877349][T10796] ? __fget_files+0x3a0/0x420 [ 256.877367][T10796] ? __fget_files+0x2a/0x420 [ 256.877391][T10796] ? bpf_lsm_file_ioctl+0x9/0x20 [ 256.877407][T10796] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 256.877425][T10796] __se_sys_ioctl+0xf9/0x170 [ 256.877445][T10796] do_syscall_64+0xfa/0x3b0 [ 256.877465][T10796] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.877483][T10796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.877499][T10796] ? clear_bhb_loop+0x60/0xb0 [ 256.877520][T10796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.877536][T10796] RIP: 0033:0x7f0288d8e929 [ 256.877551][T10796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.877565][T10796] RSP: 002b:00007f0289cba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.877584][T10796] RAX: ffffffffffffffda RBX: 00007f0288fb6080 RCX: 00007f0288d8e929 [ 256.877597][T10796] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 256.877607][T10796] RBP: 00007f0289cba090 R08: 0000000000000000 R09: 0000000000000000 [ 256.877617][T10796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.877627][T10796] R13: 0000000000000001 R14: 00007f0288fb6080 R15: 00007fffd04d0dc8 [ 256.877655][T10796] [ 256.878272][T10796] syz.6.1330: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 257.514586][T10796] CPU: 0 UID: 0 PID: 10796 Comm: syz.6.1330 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 257.514613][T10796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.514623][T10796] Call Trace: [ 257.514631][T10796] [ 257.514639][T10796] dump_stack_lvl+0x189/0x250 [ 257.514667][T10796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.514687][T10796] ? __pfx__printk+0x10/0x10 [ 257.514706][T10796] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 257.514724][T10796] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 257.514745][T10796] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 257.514764][T10796] warn_alloc+0x214/0x310 [ 257.514784][T10796] ? kasan_quarantine_put+0xdd/0x220 [ 257.514801][T10796] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.514823][T10796] ? __pfx_warn_alloc+0x10/0x10 [ 257.514841][T10796] ? kfree+0x18e/0x440 [ 257.514854][T10796] ? __get_vm_area_node+0x13f/0x300 [ 257.514872][T10796] ? copy_process+0x54b/0x3c00 [ 257.514889][T10796] ? __get_vm_area_node+0x211/0x300 [ 257.514909][T10796] __vmalloc_node_range_noprof+0x326/0x12f0 [ 257.514936][T10796] ? percpu_ref_get_many+0x19/0x140 [ 257.514956][T10796] ? percpu_ref_get_many+0x19/0x140 [ 257.514987][T10796] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 257.515008][T10796] ? memcpy_and_pad+0x48/0x80 [ 257.515033][T10796] __vmalloc_node_noprof+0xc2/0x110 [ 257.515052][T10796] ? copy_process+0x54b/0x3c00 [ 257.515066][T10796] ? copy_process+0x54b/0x3c00 [ 257.515084][T10796] dup_task_struct+0x3e7/0x860 [ 257.515106][T10796] copy_process+0x54b/0x3c00 [ 257.515152][T10796] ? __pfx_copy_process+0x10/0x10 [ 257.515182][T10796] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 257.515202][T10796] vhost_task_create+0x1c4/0x290 [ 257.515222][T10796] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 257.515243][T10796] ? __pfx_vhost_task_create+0x10/0x10 [ 257.515270][T10796] ? __pfx_vhost_task_fn+0x10/0x10 [ 257.515298][T10796] ? kasan_save_track+0x4f/0x80 [ 257.515313][T10796] ? kasan_save_track+0x3e/0x80 [ 257.515333][T10796] kvm_mmu_post_init_vm+0x147/0x2b0 [ 257.515359][T10796] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 257.515386][T10796] ? __mutex_trylock_common+0x153/0x260 [ 257.515408][T10796] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 257.515433][T10796] ? rcu_is_watching+0x15/0xb0 [ 257.515447][T10796] ? look_up_lock_class+0x74/0x170 [ 257.515479][T10796] ? register_lock_class+0x51/0x320 [ 257.515508][T10796] ? __lock_acquire+0xab9/0xd20 [ 257.515556][T10796] kvm_vcpu_ioctl+0x95c/0xe90 [ 257.515582][T10796] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 257.515598][T10796] ? __lock_acquire+0xab9/0xd20 [ 257.515642][T10796] ? __fget_files+0x2a/0x420 [ 257.515667][T10796] ? __fget_files+0x2a/0x420 [ 257.515687][T10796] ? __fget_files+0x3a0/0x420 [ 257.515706][T10796] ? __fget_files+0x2a/0x420 [ 257.515729][T10796] ? bpf_lsm_file_ioctl+0x9/0x20 [ 257.515746][T10796] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 257.515765][T10796] __se_sys_ioctl+0xf9/0x170 [ 257.515787][T10796] do_syscall_64+0xfa/0x3b0 [ 257.515805][T10796] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.515823][T10796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.515838][T10796] ? clear_bhb_loop+0x60/0xb0 [ 257.515856][T10796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.515871][T10796] RIP: 0033:0x7f0288d8e929 [ 257.515886][T10796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.515901][T10796] RSP: 002b:00007f0289cba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.515919][T10796] RAX: ffffffffffffffda RBX: 00007f0288fb6080 RCX: 00007f0288d8e929 [ 257.515930][T10796] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 257.515939][T10796] RBP: 00007f0289cba090 R08: 0000000000000000 R09: 0000000000000000 [ 257.515948][T10796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.515956][T10796] R13: 0000000000000001 R14: 00007f0288fb6080 R15: 00007fffd04d0dc8 [ 257.515981][T10796] [ 257.516000][T10796] Mem-Info: [ 257.970760][T10796] active_anon:7609 inactive_anon:51 isolated_anon:0 [ 257.970760][T10796] active_file:12446 inactive_file:40479 isolated_file:0 [ 257.970760][T10796] unevictable:768 dirty:75 writeback:0 [ 257.970760][T10796] slab_reclaimable:11309 slab_unreclaimable:98455 [ 257.970760][T10796] mapped:25502 shmem:1420 pagetables:1640 [ 257.970760][T10796] sec_pagetables:0 bounce:0 [ 257.970760][T10796] kernel_misc_reclaimable:0 [ 257.970760][T10796] free:1326197 free_pcp:15974 free_cma:0 [ 258.022977][T10796] Node 0 active_anon:30436kB inactive_anon:204kB active_file:49776kB inactive_file:161664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101948kB dirty:300kB writeback:0kB shmem:4144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12472kB pagetables:6320kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 258.055791][T10796] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 258.090532][T10796] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 258.121344][T10796] lowmem_reserve[]: 0 2496 2498 2498 2498 [ 258.173477][T10796] Node 0 DMA32 free:1398844kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30192kB inactive_anon:204kB active_file:49776kB inactive_file:160336kB unevictable:1536kB writepending:296kB present:3129332kB managed:2556912kB mlocked:0kB bounce:0kB free_pcp:39484kB local_pcp:20940kB free_cma:0kB [ 258.334432][T10796] lowmem_reserve[]: 0 0 1 1 1 [ 258.343132][T10796] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:4kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 258.423418][T10796] lowmem_reserve[]: 0 0 0 0 0 [ 258.428277][T10796] Node 1 Normal free:3890576kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:252kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:26416kB local_pcp:12892kB free_cma:0kB [ 258.510422][T10796] lowmem_reserve[]: 0 0 0 0 0 [ 258.530433][T10796] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 258.590343][T10796] Node 0 DMA32: 1604*4kB (UME) 619*8kB (UME) 280*16kB (UME) 573*32kB (UME) 255*64kB (ME) 76*128kB (UME) 50*256kB (UME) 20*512kB (UME) 10*1024kB (UME) 6*2048kB (UE) 312*4096kB (UM) = 1383752kB [ 258.624834][T10796] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 258.638415][T10796] Node 1 Normal: 194*4kB (UM) 51*8kB (UME) 33*16kB (UE) 157*32kB (UME) 43*64kB (UME) 5*128kB (UME) 4*256kB (UME) 1*512kB (E) 4*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3890576kB [ 258.660547][T10796] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.674490][T10796] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 258.702543][T10796] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.726605][T10796] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 258.748202][T10796] 58109 total pagecache pages [ 258.758913][T10796] 51 pages in swap cache [ 258.768930][T10796] Free swap = 124792kB [ 258.777766][T10796] Total swap = 124996kB [ 258.787207][T10796] 2097051 pages RAM [ 258.794687][T10796] 0 pages HighMem/MovableOnly [ 258.800193][T10796] 425845 pages reserved [ 258.807263][T10796] 0 pages cma reserved [ 259.088710][T10845] vxfs: WRONG superblock magic 00000000 at 1 [ 259.095648][T10845] vxfs: WRONG superblock magic 00000000 at 8 [ 259.102219][T10845] vxfs: can't find superblock. [ 259.140570][T10852] input: syz1 as /devices/virtual/input/input23 [ 259.194329][T10852] input: failed to attach handler leds to device input23, error: -6 [ 259.363591][ T5906] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 259.541824][ T5906] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 259.580890][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.610105][ T5906] usb 2-1: Product: syz [ 259.623091][ T5906] usb 2-1: Manufacturer: syz [ 259.629194][ T5906] usb 2-1: SerialNumber: syz [ 259.650520][ T5906] usb 2-1: config 0 descriptor?? [ 260.717556][ T5906] usb 2-1: Firmware version (0.0) predates our first public release. [ 260.756807][ T5906] usb 2-1: Please update to version 0.2 or newer [ 260.861211][T10901] netlink: 666 bytes leftover after parsing attributes in process `syz.7.1359'. [ 260.879110][T10901] tmpfs: Bad value for 'mpol' [ 260.894220][ T5906] usb 2-1: USB disconnect, device number 41 [ 260.958067][T10903] Mount JFS Failure: -22 [ 260.980113][T10903] jfs_mount failed w/return code = -22 [ 261.114567][T10903] tmpfs: Bad value for 'nr_blocks' [ 261.154143][ T43] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 261.332682][ T43] usb 8-1: Using ep0 maxpacket: 16 [ 261.352440][ T43] usb 8-1: config 3 has an invalid interface number: 99 but max is 0 [ 261.378318][ T43] usb 8-1: config 3 has no interface number 0 [ 261.397856][ T43] usb 8-1: config 3 interface 99 has no altsetting 0 [ 261.429106][ T43] usb 8-1: New USB device found, idVendor=b3ef, idProduct=89ef, bcdDevice=c3.f8 [ 261.455621][ T43] usb 8-1: New USB device strings: Mfr=143, Product=11, SerialNumber=244 [ 261.486362][ T43] usb 8-1: Product: syz [ 261.491216][ T43] usb 8-1: Manufacturer: syz [ 261.496712][ T43] usb 8-1: SerialNumber: syz [ 261.715273][T10924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1368'. [ 261.735503][T10901] gfs2: not a GFS2 filesystem [ 261.763086][ T43] usb 8-1: USB disconnect, device number 3 [ 261.804114][ T5892] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 261.991838][ T5892] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.018038][ T5892] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.059278][ T5892] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 262.082321][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.102270][ T5892] usb 2-1: Product: syz [ 262.106942][ T5892] usb 2-1: Manufacturer: syz [ 262.111929][ T5892] usb 2-1: SerialNumber: syz [ 262.538452][ T5892] usb 2-1: cannot find UAC_HEADER [ 262.674799][ T5892] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 262.708942][T10933] dlm: no local IP address has been set [ 262.742123][T10936] qnx4: no qnx4 filesystem (no root dir). [ 262.750578][ T5932] usb 2-1: USB disconnect, device number 42 [ 262.753361][T10933] dlm: cannot start dlm midcomms -107 [ 262.814555][T10935] FAULT_INJECTION: forcing a failure. [ 262.814555][T10935] name failslab, interval 1, probability 0, space 0, times 0 [ 262.829257][ T6452] udevd[6452]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.872188][T10935] CPU: 0 UID: 0 PID: 10935 Comm: syz.7.1374 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 262.872220][T10935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.872230][T10935] Call Trace: [ 262.872237][T10935] [ 262.872244][T10935] dump_stack_lvl+0x189/0x250 [ 262.872268][T10935] ? __pfx____ratelimit+0x10/0x10 [ 262.872288][T10935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.872305][T10935] ? __pfx__printk+0x10/0x10 [ 262.872328][T10935] ? __pfx___might_resched+0x10/0x10 [ 262.872345][T10935] ? fs_reclaim_acquire+0x7d/0x100 [ 262.872374][T10935] should_fail_ex+0x414/0x560 [ 262.872408][T10935] should_failslab+0xa8/0x100 [ 262.872431][T10935] __kmalloc_noprof+0xcb/0x4f0 [ 262.872449][T10935] ? tomoyo_encode+0x28b/0x550 [ 262.872520][T10935] tomoyo_encode+0x28b/0x550 [ 262.872545][T10935] tomoyo_realpath_from_path+0x58d/0x5d0 [ 262.872567][T10935] ? tomoyo_domain+0xd9/0x130 [ 262.872592][T10935] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 262.872616][T10935] tomoyo_path_number_perm+0x1e8/0x5a0 [ 262.872644][T10935] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 262.872685][T10935] ? __lock_acquire+0xab9/0xd20 [ 262.872731][T10935] ? __fget_files+0x2a/0x420 [ 262.872758][T10935] ? __fget_files+0x2a/0x420 [ 262.872775][T10935] ? __fget_files+0x3a0/0x420 [ 262.872791][T10935] ? __fget_files+0x2a/0x420 [ 262.872818][T10935] security_file_ioctl+0xcb/0x2d0 [ 262.872842][T10935] __se_sys_ioctl+0x47/0x170 [ 262.872862][T10935] do_syscall_64+0xfa/0x3b0 [ 262.872881][T10935] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.872901][T10935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.872917][T10935] ? clear_bhb_loop+0x60/0xb0 [ 262.872942][T10935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.872961][T10935] RIP: 0033:0x7fa5d4b8e929 [ 262.872978][T10935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.872993][T10935] RSP: 002b:00007fa5d5a77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.873014][T10935] RAX: ffffffffffffffda RBX: 00007fa5d4db5fa0 RCX: 00007fa5d4b8e929 [ 262.873024][T10935] RDX: 0000200000000500 RSI: 000000004008ae89 RDI: 0000000000000005 [ 262.873033][T10935] RBP: 00007fa5d5a77090 R08: 0000000000000000 R09: 0000000000000000 [ 262.873043][T10935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.873052][T10935] R13: 0000000000000000 R14: 00007fa5d4db5fa0 R15: 00007fff19ebd258 [ 262.873077][T10935] [ 262.873097][T10935] ERROR: Out of memory at tomoyo_realpath_from_path. [ 263.071966][ T24] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 263.397720][ T24] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 263.421652][ T24] usb 7-1: config 0 has no interface number 0 [ 263.429810][ T24] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 263.450783][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.472805][ T24] usb 7-1: config 0 descriptor?? [ 263.512918][ T24] cp210x 7-1:0.1: cp210x converter detected [ 263.634338][T10950] FAULT_INJECTION: forcing a failure. [ 263.634338][T10950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.648169][T10950] CPU: 1 UID: 0 PID: 10950 Comm: syz.1.1379 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 263.648185][T10950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.648192][T10950] Call Trace: [ 263.648197][T10950] [ 263.648202][T10950] dump_stack_lvl+0x189/0x250 [ 263.648223][T10950] ? __pfx____ratelimit+0x10/0x10 [ 263.648239][T10950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.648249][T10950] ? __pfx__printk+0x10/0x10 [ 263.648261][T10950] ? __might_fault+0xb0/0x130 [ 263.648282][T10950] should_fail_ex+0x414/0x560 [ 263.648303][T10950] _copy_from_user+0x2d/0xb0 [ 263.648314][T10950] snd_rawmidi_kernel_write1+0x3ab/0x650 [ 263.648336][T10950] snd_rawmidi_write+0x5ad/0xbd0 [ 263.648356][T10950] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 263.648368][T10950] ? __pfx_default_wake_function+0x10/0x10 [ 263.648385][T10950] ? common_file_perm+0x199/0x200 [ 263.648398][T10950] ? bpf_lsm_file_permission+0x9/0x20 [ 263.648406][T10950] ? security_file_permission+0x75/0x290 [ 263.648424][T10950] ? rw_verify_area+0x258/0x650 [ 263.648438][T10950] vfs_writev+0x4b3/0x960 [ 263.648453][T10950] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 263.648467][T10950] ? __pfx_vfs_writev+0x10/0x10 [ 263.648488][T10950] ? __fget_files+0x2a/0x420 [ 263.648506][T10950] ? __fget_files+0x3a0/0x420 [ 263.648518][T10950] ? __fget_files+0x2a/0x420 [ 263.648535][T10950] do_writev+0x14d/0x2d0 [ 263.648550][T10950] ? __pfx_do_writev+0x10/0x10 [ 263.648562][T10950] ? rcu_is_watching+0x15/0xb0 [ 263.648574][T10950] ? do_syscall_64+0xbe/0x3b0 [ 263.648590][T10950] do_syscall_64+0xfa/0x3b0 [ 263.648602][T10950] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.648614][T10950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.648623][T10950] ? clear_bhb_loop+0x60/0xb0 [ 263.648635][T10950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.648643][T10950] RIP: 0033:0x7faf9a98e929 [ 263.648653][T10950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.648661][T10950] RSP: 002b:00007faf9b8ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 263.648672][T10950] RAX: ffffffffffffffda RBX: 00007faf9abb5fa0 RCX: 00007faf9a98e929 [ 263.648679][T10950] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000004 [ 263.648685][T10950] RBP: 00007faf9b8ae090 R08: 0000000000000000 R09: 0000000000000000 [ 263.648691][T10950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.648696][T10950] R13: 0000000000000000 R14: 00007faf9abb5fa0 R15: 00007ffff60b2838 [ 263.648711][T10950] [ 264.182458][ T24] cp210x 7-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 264.642201][ T24] cp210x 7-1:0.1: failed to get vendor val 0x370c size 15: -121 [ 264.674858][ T24] cp210x 7-1:0.1: GPIO initialisation failed: -121 [ 264.715818][ T24] usb 7-1: cp210x converter now attached to ttyUSB0 [ 264.813762][ T24] usb 7-1: USB disconnect, device number 25 [ 264.859389][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 264.894640][ T24] cp210x 7-1:0.1: device disconnected [ 265.006596][T10964] exFAT-fs (rnullb0): invalid boot record signature [ 265.031996][T10964] exFAT-fs (rnullb0): failed to read boot sector [ 265.040205][T10964] exFAT-fs (rnullb0): failed to recognize exfat type [ 265.361226][T10975] netlink: 'syz.7.1383': attribute type 21 has an invalid length. [ 265.369856][T10975] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1383'. [ 265.666362][T10984] netlink: 'syz.7.1385': attribute type 1 has an invalid length. [ 266.104243][T10993] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 266.801081][T11015] FAULT_INJECTION: forcing a failure. [ 266.801081][T11015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.870028][T11015] CPU: 1 UID: 0 PID: 11015 Comm: syz.6.1394 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 266.870055][T11015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.870065][T11015] Call Trace: [ 266.870073][T11015] [ 266.870080][T11015] dump_stack_lvl+0x189/0x250 [ 266.870103][T11015] ? __pfx____ratelimit+0x10/0x10 [ 266.870131][T11015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.870150][T11015] ? __pfx__printk+0x10/0x10 [ 266.870180][T11015] should_fail_ex+0x414/0x560 [ 266.870211][T11015] _copy_to_user+0x31/0xb0 [ 266.870231][T11015] simple_read_from_buffer+0xe1/0x170 [ 266.870261][T11015] proc_fail_nth_read+0x1df/0x250 [ 266.870280][T11015] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.870299][T11015] ? rw_verify_area+0x258/0x650 [ 266.870317][T11015] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.870335][T11015] vfs_read+0x200/0x980 [ 266.870359][T11015] ? __pfx___mutex_lock+0x10/0x10 [ 266.870382][T11015] ? __pfx_vfs_read+0x10/0x10 [ 266.870402][T11015] ? __fget_files+0x2a/0x420 [ 266.870427][T11015] ? __fget_files+0x3a0/0x420 [ 266.870447][T11015] ? __fget_files+0x2a/0x420 [ 266.870478][T11015] ksys_read+0x145/0x250 [ 266.870499][T11015] ? __pfx_ksys_read+0x10/0x10 [ 266.870523][T11015] ? do_syscall_64+0xbe/0x3b0 [ 266.870548][T11015] do_syscall_64+0xfa/0x3b0 [ 266.870568][T11015] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.870587][T11015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.870602][T11015] ? clear_bhb_loop+0x60/0xb0 [ 266.870619][T11015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.870633][T11015] RIP: 0033:0x7f0288d8d33c [ 266.870647][T11015] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 266.870661][T11015] RSP: 002b:00007f0289cdc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.870680][T11015] RAX: ffffffffffffffda RBX: 00007f0288fb5fa0 RCX: 00007f0288d8d33c [ 266.870692][T11015] RDX: 000000000000000f RSI: 00007f0289cdc0a0 RDI: 0000000000000003 [ 266.870702][T11015] RBP: 00007f0289cdc090 R08: 0000000000000000 R09: 0000000000000000 [ 266.870712][T11015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.870721][T11015] R13: 0000000000000000 R14: 00007f0288fb5fa0 R15: 00007fffd04d0dc8 [ 266.870749][T11015] [ 267.207443][ T5892] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 267.391169][ T5892] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.402178][ T5892] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 267.420979][ T5892] usb 8-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 267.430795][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.439303][ T5892] usb 8-1: Product: syz [ 267.456349][ T5892] usb 8-1: Manufacturer: syz [ 267.469607][ T5892] usb 8-1: SerialNumber: syz [ 267.477789][ T5892] usb 8-1: config 0 descriptor?? [ 267.493547][ T5878] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 267.641748][ T5878] usb 7-1: device descriptor read/64, error -71 [ 267.715901][ T30] audit: type=1800 audit(1919388900.743:11): pid=11007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1392" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 267.899496][ T5878] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 268.027511][T11051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.041287][T10695] [ 268.047851][T10695] ============================================ [ 268.055228][T10695] WARNING: possible recursive locking detected [ 268.062518][T10695] 6.16.0-rc4-next-20250702-syzkaller #0 Not tainted [ 268.069743][T10695] -------------------------------------------- [ 268.076168][T10695] syz.0.1306/10695 is trying to acquire lock: [ 268.082264][T10695] ffff88807eb8c8c8 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: rpc_close_pipes+0x10a/0x730 [ 268.094108][T10695] [ 268.094108][T10695] but task is already holding lock: [ 268.102478][T10695] ffff88807eb891c8 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 268.114249][T10695] [ 268.114249][T10695] other info that might help us debug this: [ 268.125272][T10695] Possible unsafe locking scenario: [ 268.125272][T10695] [ 268.132989][T10695] CPU0 [ 268.136869][T10695] ---- [ 268.140524][T10695] lock(&sb->s_type->i_mutex_key#25); [ 268.146703][T10695] lock(&sb->s_type->i_mutex_key#25); [ 268.153677][T10695] [ 268.153677][T10695] *** DEADLOCK *** [ 268.153677][T10695] [ 268.162458][T10695] May be due to missing lock nesting notation [ 268.162458][T10695] [ 268.170957][T10695] 4 locks held by syz.0.1306/10695: [ 268.177027][T10695] #0: ffff88807b9460e0 (&type->s_umount_key#92){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 268.188489][T10695] #1: ffff88807aeb18a0 (&sn->pipefs_sb_lock){+.+.}-{4:4}, at: rpc_kill_sb+0x77/0x190 [ 268.199292][T10695] #2: ffffffff8f8e2df0 ((rpc_pipefs_notifier_list).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 268.212792][T10695] #3: ffff88807eb891c8 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 268.225800][T10695] [ 268.225800][T10695] stack backtrace: [ 268.232130][T10695] CPU: 1 UID: 0 PID: 10695 Comm: syz.0.1306 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 268.232152][T10695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.232161][T10695] Call Trace: [ 268.232168][T10695] [ 268.232175][T10695] dump_stack_lvl+0x189/0x250 [ 268.232197][T10695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.232210][T10695] ? __pfx__printk+0x10/0x10 [ 268.232224][T10695] ? print_lock_name+0xde/0x100 [ 268.232239][T10695] print_deadlock_bug+0x28b/0x2a0 [ 268.232254][T10695] validate_chain+0x1a3f/0x2140 [ 268.232274][T10695] __lock_acquire+0xab9/0xd20 [ 268.232295][T10695] ? rpc_close_pipes+0x10a/0x730 [ 268.232306][T10695] lock_acquire+0x120/0x360 [ 268.232322][T10695] ? rpc_close_pipes+0x10a/0x730 [ 268.232337][T10695] down_write+0x96/0x1f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 268.232354][T10695] ? rpc_close_pipes+0x10a/0x730 [ 268.232365][T10695] ? __pfx_down_write+0x10/0x10 [ 268.232381][T10695] ? __pfx_find_submount+0x10/0x10 [ 268.232393][T10695] ? _raw_spin_unlock+0x28/0x50 [ 268.232406][T10695] ? d_walk+0x6f4/0x780 [ 268.232423][T10695] rpc_close_pipes+0x10a/0x730 [ 268.232436][T10695] ? d_invalidate+0x204/0x260 [ 268.232447][T10695] ? __pfx_rpc_close_pipes+0x10/0x10 [ 268.232460][T10695] ? up_write+0x1c4/0x420 [ 268.232473][T10695] ? __pfx_rpc_close_pipes+0x10/0x10 [ 268.232485][T10695] __simple_recursive_removal+0x208/0x510 [ 268.232501][T10695] ? __pfx_rpc_close_pipes+0x10/0x10 [ 268.232513][T10695] rpc_unlink+0x56/0x80 [ 268.232524][T10695] rpc_pipefs_event+0xc0/0x170 [ 268.232542][T10695] notifier_call_chain+0x1b3/0x3e0 [ 268.232559][T10695] blocking_notifier_call_chain+0x6a/0x90 [ 268.232572][T10695] rpc_kill_sb+0xd0/0x190 [ 268.232587][T10695] deactivate_locked_super+0xb9/0x130 [ 268.232602][T10695] cleanup_mnt+0x425/0x4c0 [ 268.232614][T10695] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.232630][T10695] task_work_run+0x1d1/0x260 [ 268.232662][T10695] ? __pfx_task_work_run+0x10/0x10 [ 268.232678][T10695] ? kmem_cache_free+0x18f/0x400 [ 268.232760][T10695] do_exit+0x6b5/0x2300 [ 268.232778][T10695] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 268.232791][T10695] ? do_raw_spin_lock+0x121/0x290 [ 268.232806][T10695] ? __pfx_do_exit+0x10/0x10 [ 268.232825][T10695] do_group_exit+0x21c/0x2d0 [ 268.232839][T10695] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.232855][T10695] get_signal+0x1286/0x1340 [ 268.232880][T10695] arch_do_signal_or_restart+0x9a/0x750 [ 268.232898][T10695] ? __pfx_get_timespec64+0x10/0x10 [ 268.232915][T10695] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 268.232937][T10695] ? exit_to_user_mode_loop+0x40/0x110 [ 268.232954][T10695] exit_to_user_mode_loop+0x75/0x110 [ 268.232971][T10695] do_syscall_64+0x2bd/0x3b0 [ 268.232986][T10695] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.233001][T10695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.233014][T10695] ? clear_bhb_loop+0x60/0xb0 [ 268.233027][T10695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.233040][T10695] RIP: 0033:0x0 [ 268.233050][T10695] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 268.233057][T10695] RSP: 002b:00007f3e371b9f80 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 268.233072][T10695] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 268.233080][T10695] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.233087][T10695] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 268.233094][T10695] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 268.233102][T10695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.233114][T10695] [ 268.239548][ T5878] usb 7-1: device descriptor read/64, error -71 [ 268.720243][ T5878] usb usb7-port1: attempt power cycle [ 268.912519][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.971840][ T5932] usb 8-1: USB disconnect, device number 4 [ 268.984286][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.044904][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.078905][ T5878] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 269.127431][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.143665][ T5878] usb 7-1: device descriptor read/8, error -71 [ 269.228087][ T13] bridge_slave_1: left allmulticast mode [ 269.240136][ T13] bridge_slave_1: left promiscuous mode [ 269.247463][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.259126][ T13] bridge_slave_0: left allmulticast mode [ 269.265042][ T13] bridge_slave_0: left promiscuous mode [ 269.271962][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.378149][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.392496][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.403498][ T13] bond0 (unregistering): Released all slaves [ 269.465507][ T13] tipc: Disabling bearer [ 269.475054][ T13] tipc: Left network mode [ 269.642944][ T13] hsr_slave_0: left promiscuous mode [ 269.652176][ T13] hsr_slave_1: left promiscuous mode [ 269.658838][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.667016][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.676310][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.687217][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.703770][ T13] veth1_macvtap: left promiscuous mode [ 269.718679][ T13] veth0_macvtap: left promiscuous mode [ 269.726312][ T13] veth1_vlan: left promiscuous mode [ 269.735024][ T13] veth0_vlan: left promiscuous mode [ 269.899856][ T13] team0 (unregistering): Port device team_slave_1 removed [ 269.914681][ T13] team0 (unregistering): Port device team_slave_0 removed [ 270.381487][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.435455][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.499766][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.564040][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.677716][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.730443][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.794807][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.844105][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.959011][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.014742][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.074437][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.114862][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.233573][ T13] bridge_slave_1: left allmulticast mode [ 271.241745][ T13] bridge_slave_1: left promiscuous mode [ 271.249324][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.259432][ T13] bridge_slave_0: left allmulticast mode [ 271.265472][ T13] bridge_slave_0: left promiscuous mode [ 271.271433][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.281597][ T13] bridge_slave_1: left allmulticast mode [ 271.287369][ T13] bridge_slave_1: left promiscuous mode [ 271.294011][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.304304][ T13] bridge_slave_0: left allmulticast mode [ 271.315253][ T13] bridge_slave_0: left promiscuous mode [ 271.321687][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.332862][ T13] bridge_slave_1: left allmulticast mode [ 271.339329][ T13] bridge_slave_1: left promiscuous mode [ 271.345930][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.355942][ T13] bridge_slave_0: left allmulticast mode [ 271.363339][ T13] bridge_slave_0: left promiscuous mode [ 271.371966][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.524148][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.534266][ T13] bond0 (unregistering): Released all slaves [ 271.616259][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.626566][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.636547][ T13] bond0 (unregistering): Released all slaves [ 271.728104][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.739885][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.749699][ T13] bond0 (unregistering): Released all slaves [ 271.856403][ T13] tipc: Left network mode [ 272.234602][ T13] hsr_slave_0: left promiscuous mode [ 272.240771][ T13] hsr_slave_1: left promiscuous mode [ 272.246738][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.255675][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.268998][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.276605][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.290735][ T13] hsr_slave_0: left promiscuous mode [ 272.296679][ T13] hsr_slave_1: left promiscuous mode [ 272.303268][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.312087][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.320117][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.329700][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.340497][ T13] hsr_slave_0: left promiscuous mode [ 272.346752][ T13] hsr_slave_1: left promiscuous mode [ 272.354433][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.363934][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.375571][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.383425][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.401856][ T13] veth1_macvtap: left promiscuous mode [ 272.408943][ T13] veth0_macvtap: left promiscuous mode [ 272.414565][ T13] veth1_vlan: left promiscuous mode [ 272.421091][ T13] veth0_vlan: left promiscuous mode [ 272.427998][ T13] veth1_macvtap: left promiscuous mode [ 272.433654][ T13] veth0_macvtap: left promiscuous mode [ 272.442860][ T13] veth1_vlan: left promiscuous mode [ 272.448379][ T13] veth0_vlan: left promiscuous mode [ 272.455116][ T13] veth1_macvtap: left promiscuous mode [ 272.460778][ T13] veth0_macvtap: left promiscuous mode [ 272.466374][ T13] veth1_vlan: left promiscuous mode [ 272.471826][ T13] veth0_vlan: left promiscuous mode [ 272.726977][ T13] team0 (unregistering): Port device team_slave_1 removed [ 272.755969][ T13] team0 (unregistering): Port device team_slave_0 removed [ 272.973992][ T13] team0 (unregistering): Port device team_slave_1 removed [ 273.004752][ T13] team0 (unregistering): Port device team_slave_0 removed [ 273.229998][ T13] team0 (unregistering): Port device team_slave_1 removed [ 273.262231][ T13] team0 (unregistering): Port device team_slave_0 removed