last executing test programs: 1m12.414334134s ago: executing program 0 (id=156): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40345410, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000924020073797a32000000000900010073797a3000000000700000001c0a01010000000000000000020000000900010073797a3000000000090002"], 0xc4}}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x40}}) modify_ldt$write2(0x11, &(0x7f0000000680)={0x8, 0x100000, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={0x18, r4, 0x239, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada6853") ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984dcb636b3f33825c376f2b590fc63b5760e50b8a147a10ffe643c81b55035cc0ea76f2e4229349ee5d", 0x44}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x882, 0x0) getpeername$tipc(r6, 0x0, 0x0) 1m12.306054008s ago: executing program 0 (id=157): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x1822404, 0x0) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x6, 0x5, 0x5, 0xa588, 0x10001, 0x400}) 1m12.236664559s ago: executing program 0 (id=158): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x2000005, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000044000701fcffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m12.007659084s ago: executing program 0 (id=162): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open(&(0x7f0000000040)='./file0/../file0\x00', 0x400000, 0x100) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) listxattr(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000300)=""/194, 0xc2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={'bridge_slave_1\x00', @remote}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m11.846930148s ago: executing program 0 (id=165): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40345410, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000924020073797a32000000000900010073797a3000000000700000001c0a01010000000000000000020000000900010073797a3000000000090002"], 0xc4}}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x40}}) modify_ldt$write2(0x11, &(0x7f0000000680)={0x8, 0x100000, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={0x18, r4, 0x239, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada6853") ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984dcb636b3f33825c376f2b590fc63b5760e50b8a147a10ffe643c81b55035cc0ea76f2e4229349ee5d", 0x44}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x882, 0x0) getpeername$tipc(r6, 0x0, 0x0) 1m11.38233361s ago: executing program 0 (id=170): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x2000005, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000044000701fcffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m11.197917783s ago: executing program 32 (id=170): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x2000005, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000044000701fcffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.274461659s ago: executing program 2 (id=796): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="10", 0x1, 0x20008040, &(0x7f0000000100)={0x11, 0x1c, r3, 0x1, 0x4, 0x6, @broadcast}, 0x14) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000180)=[{0x6, 0x60, 0x0, 0x8}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) 5.790408969s ago: executing program 2 (id=799): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="186536410f017d00440f20c03507000000440f22c00f23d80f219d970f23f8660f2263c4c17c77413e1c6767450f01cfb94d0800000f32c422d1b7900000c0fe", 0x40}], 0x1, 0x34, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1000000000000000) 5.414827607s ago: executing program 2 (id=803): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000000000305000400000000000900020073797a32000000000c00078005001400fc000000050005000a0000000c000300686173683a697000050001000700000014326c4f86956a9ba3786cf94f0c8d8a38faff19271d3609103e05372bfc6b2cfca5c6cbc0080df4ed72d3661a05bc0f686c20fc4af17809571a3867c25545bdb9"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001e00)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a9000000000000000000000000000000ec00ffffffffffffffff00000000000000000000010000000000000000000000000a00000000020000000000008040000100000001000000000000000000003859107417702cd9fe3d40021aa9bd0e00000000000000000044000500c11414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/196], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000061c0)=ANY=[@ANYBLOB="cc000000210000080000000000000000fc0200000021cac8defa1a9eae000000ff0200000000000000000000000000014e21000000000000020000006c000000", @ANYRES32=0x0, @ANYBLOB="e9c3e524ee31ac104b2b7de0c495e2d25c5813d82557a6cd604873b2acd5", @ANYBLOB="00000000000000005000110000000000000000000000ffff7f000001fc02000000000000000000000000000064010102000000000000000000000000fc0200000000000000000000000000203c00000000000000080002002c001300e0000001000000000000000000000000200100000000000000000000000000000000000002000000"], 0xcc}, 0x1, 0x0, 0x0, 0x200000cc}, 0x44) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r5, &(0x7f00000004c0)='\x00', 0x1) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='vrans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c756e616d653dd0aedec1aa20ffd81d1bf89329217cb058a396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97bdc355f3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d91906aead5d5aeccc097ef1092ea987c2b00000000000000002c00"]) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000240)={0x1, 0x1fffffe, 0x7, 0x80000000006, 0x9, 0x4, 0xfffdfffffffffffb, 0x0, 0x0, 0x1000000000004, 0xfffffffd, 0x2}) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001d00)=[{{&(0x7f0000000140)=@pptp={0x18, 0x2, {0x3, @multicast1}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000000680)="6f67ef4d4558cd27256e1a46298ffe53bc27b1fd4a1cb51fd63ac6dac99caaffd6d85f22687cfeb2efdf4559ac614033dd092c3939615d1d197300665b4486054487b0178b38b4bb6a3f099b027a0ae5a73fc293e514b197f7895414cdac6284b1ec2e22eb238832bd532119945e496b11182133b181bc5b4894a740eb41cd9e757ae25e39713d0b1d6b4a31385271b3af2459b0ce00cd790b6d47a0c616ce0ec7c3d6eaad572a108e918ccbefc18555313c1edf99eb8bde1a04eb5d75dbfea4b496c101e201c9b9d480332f081d8407ae68e21b2c59567c8b1ecc7854e16fe81c3cf87c", 0xe4}], 0x2, &(0x7f0000002f80)=ANY=[@ANYBLOB="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"/4440], 0x1158}}, {{&(0x7f0000000780)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000800)="31788abfb37e90a343340911ecaf5fff022d4203d4b40e0cf0ac73213c94c1130aa4f4e822351174a9de431c788058affa2658fba7bf8829651dcc78a1314b6abde8c48fd4dd3e08ce107e9ae64d46534628769cd07d03ececce2c6de7", 0x5d}, {&(0x7f0000000880)="1a468662120152c0b9ce2abc9d46a2cd10067117a8d99b02eb91d8befb69a78ec16f59031ab9a963e8d58199a276ff7729006e3ceb7cd81ac0d91d92f555bb6c0afac75872b6284c30a0a7d19655e7622639e08aa0517323b0e65ddcc0d1058943733e7f9ae0a56982a537bb957733ebb42b5ad46631", 0x76}, {&(0x7f00000009c0)="feaf555c7ebf81a9d054693fcdebbcf26dce522de0c61b42d9aeea0b925f8a8911ed6aff3ec235bff9e249f60aad2a9a63df6605c60adbe706c1403c8ccf9f07c34cc4716394ca03c8ece02a2181b48e1a7f32118b10a7941a63f5448f0f4425a558b7769f625288f9aa5c6fcb517f4c0fe18ad91e0efefb01a3bc97ff93258e27b7996181ac6464a59e4775cde83264de9bd0fffe4d5fa696ebd0f153edd4f513cd672e5ffeaf914e2a945a953f8be742190efb5f8472aeb3b538022b01dd12302a17428b60114198ae9d900e2baf97e89f8e27b29f51c6830a68782f97013910bfcd55118aa1f66b", 0xe9}, {&(0x7f0000000c80)="97ed859719f4a6da6bfea220a833170d637d236cdabe5237deab897b9e4ae97b458c48a43a5c4cb067f25087d90a5ba4de9e9f8b508882b94646ed4d12fd0cadca4c5718a8c5842cae6eb01c26a7caf6aa91d7f94e8e568b589e27b9974b71544d58bde94c09c128692308d096b344c08e8cd6f48f72dad843496d6cf387aafecd52cd8bd65d427f3651a526a69891b1f24701be64997729067c407685c1563b27a2d75a9838a449c181ae91a6a973fb84dad9dfd800d864c11157039a7f0d0502c896b3393045e7860ef8d6e949d153", 0xd0}, {&(0x7f0000000ac0)="a8b4bbbb4047c9425a724389154134d0ee91ca106489dea739b7347e1b93fa187dc45687962829ba974de61d69cbef50cf63cd5c14f8df9ba768834f6f6b9ad8176fd7f00f82f9c0117aab4ed0b7c766f8ee7460c93656d589eadb356653604c21c2cc52a16bd3fc4a4f317c12cc2bcf3f33221ed7a1a96d262e9d9e5e20edfd3e758586553237b1245ba541aa9c13137d300a23cdbe435352136cb2a352b042bb98a165", 0xa4}, {&(0x7f0000000d80)="ccd925fff312ab4a7e44c3e29fbb9e5f8b471bde933d5d58dbdf79415d81416b119f09f08f9b5e1de2659ecb9e3e34e2634637c6fde30bc7aa9ba75caa08de8b84777e86d3947d3868f35f0a11637568a5726690c49c1547ed3b0bf0a7e549d896f18046b99ca5630bb48a3e94da4f45c543fe2fda89a967c2f7a52b2c9111ed424cd8fea94c04c65ff619945585e387cf51821dd771569fe4649dcbfbbc12a770ead1fcdde5aef6811b307ed35093f4a874c6b2ae79d294da972206b7ec2a48976d38886c449102f735c151f40441bd9a8055b7aaaca9ce65dffe0077306242a0d9cdc46d354ba68416", 0xea}, {&(0x7f0000000900)="f154d4585a5772b3a527bf80ee3b8241027947bff29dfde7f82f9a557c18e452cd323772a5e380a4d2b14ad6cfcc459be5028bac9e44278b5d89b57084a4fd6d0beff2883846d3e7392d361630f3f456f7dd5c9bfb92a91a4b3cc8b0f6a46884", 0x60}, {&(0x7f0000000e80)="5b1b2ac3476220532df86539e254ace3d599fa118e91efe2d3c4994d6fdd37efff3d8a12f7abe4a621704e01689b568fbc4b04556b022c81c15b304a74ed13bf7fe8f64bfa2e26dea537f6f2f916963b8b6ad09023da39ed531e94e3b282ca0b7e5a34a34fc1a3539f36d6ecbf1a19d54f1ab750c8efaea2826b62326a40cbd1824fa1b7a3003faa80bc8b48e71c2dfb54e7667321759bf99ec9ad5b156f0ffee9085c1d33d8d024bdf4ee232be2eb15e5d305a5436a6c8db86e629b4c78594ed1aaced2643a587cbc17496a86bda02e82c2d7609270fd808a09f2eb1c3d8f6fb1db3be386ac", 0xe6}], 0x8, &(0x7f0000007780)=ANY=[@ANYBLOB="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"/4255], 0x1098}}, {{&(0x7f0000001000)=@pptp={0x18, 0x2, {0x2, @multicast2}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001080)="c280e4f04b3de1cb05def6a30ccc5f02092e22277b5909bf2efd06269f53cf7ccf8bc22a7786e79eb4ddd3a52f0b52211cc751cc91a3c197f83b097e393ee9bb1ffc4834289ecf6b1ea77eef1ec4820903ff67588a8907a2096876bda3741c0a54fd6abf652fdc018463748bf16c8c7be38bb0b9c8c8fa6c278ee496b11179fe66057aad7e18325ababd5be6c501b24a63309870b72392356fcd66a1d80e", 0x9e}, {&(0x7f0000001140)="28e42708b5d7417199a1280c42d897c3210145db6f3be614ede15628acd3ec0fb4de6a40190ce4f4636901e3ec2521581239231160d303eac3fcf6b96cf238630cb2e9871281c2d71bda57a69001166eee44309d7b742f32dd12f396806c0df6fd4487645c71f3b7e43a6fbf5ada29742ee344fcdc7721d8f1cb454eddc95d0437a939f931d2bfa5398d361ca988bb02effababfd8679c50f42a7b841740ab8a47bdc0cab5744ded436e835221fa84704daee66739b2628134eb2e46148df892ce83d7ce00f93f3a", 0xc8}, {&(0x7f0000001240)="6dddeb739edf7392983e9977e08391f7cc2b87dbd04638bd5ff79819733ccba8861884e84d7e3fca1845cd8ab6eded3f36ee170eb45f5dd786f685ab3e258d4e38c24695d0dc4d4fd3032cf4e9cbadfc", 0x50}, {&(0x7f00000012c0)="5149b367be708df80513d215a0ef6a5faae1c935ada4f0e483c76e8fcd74f11c0ce64d6a881e0f686fdde619dac5c62e65b60090605ad28cbdd9cf256666c2de664b4791086cd07aa89f472dca00951baecbcb5f821d11b362298414ae516015f7fa937ff999b3272d7f804071d7beb5683aa9a9af718446285d67f44ea96a63eb13c441875a5d2b7a76602e1bff06b83cba0af57bd6ee15bd20a76d1dc46bbfbd05543ef9244904b74078d7f8faa6179627b5f6ff30d7c0273d4092efa33c59baff600aea187fdd4d55b429c1031f4da3a32213c961218f91557cbb04e670d3a3e496b368", 0xe5}, {&(0x7f0000001480)="eb3235dc0c04b9f81a0d1cb7e7618e998f14b5e231c355cd9b933a9cb37fb005b0585d569e68e24dc8dcf96d30866af92093f868c7b26868c5af5b76b3c6d64a9e40235555ce263c7f3c7ebd21acb045d83c4488f2e893e6f68e9b2898153213fe577af831a83e59a1874d8d6c78a8b68e95809d5577d4822b62a936a09b29f5a8c69286f89b77826e0a33b7905a6db712f17b76f9ddcaf61975ed9330c1f3461d4337bf9adeaa80d2d957f4de03ce8c", 0xb0}, {&(0x7f0000001540)="54c59b6c13ae3afe9259d847e1cda25a172d779f9534ebe8983ad69b6adda90cbd26d6c4041bced0efef3002966661ca77ae982cf85caaf91bc9c3801c2d417f30add843cad8eb60e2dd7fd66e7cd5c3ff0d26e1f444f0927d1ba11b4a32201d64232091b28be891f386e85aced4fb6305500faec96b7a06cc34f11827e634e95523caefbe1e0f15b7", 0x89}, {&(0x7f0000000440)="836c5d5fa0efdf3650b644ee258ff89361018b2e628b44e534f0df9a5544", 0x1e}, {&(0x7f00000013c0)="84feca93c0b52f28b6d3dbebfb9b4226fdc904764f038e90a355ef0bfdf971aec960ab218dc0d67f63f49756da9080acbd175560faeab78368bb74bbd5a0c3dc94f80b563cc00c2fad1a054ded034eb120ed689d255dbd11cb196b5f", 0x5c}, {&(0x7f00000065c0)="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", 0x11b5}], 0x9, &(0x7f00000062c0)=ANY=[@ANYBLOB="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"], 0x2b8}}, {{&(0x7f0000001980)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e23, @broadcast}, 0x3, 0x2}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001a00)="1bf08f", 0x3}, {&(0x7f0000001a40)="7d6bc1862a3cb36aa977ca2b24843b9b0bd06cb0d30a1edf62bbbb2ed7ebd770071eb7f254a57e9fa261dbadd371a323e6fd3b1fa5e0e4405dd34420a9c394aa237c3e4c49e4cb8b5ae7047ef51931e08036717d725f0e1e753a7fee0b4c993520d162d9", 0x64}, {&(0x7f0000001ac0)="aaa6eb54a106c7937646fcc09b7d7387e92c4ea50803454ff2db2f6a6708d59a28c14f067c919f974745c934b14c0371c3166cc20cb07d8f84bfced23f98ffa09ba2153e19ca2ea93e11acd4bbb7884a1db68356e5ceea9fdf18833e12658c842215762832090e787a92fea6a3d6adb2075d17f7490925e7f75806845c03a3a07b4464d42e65a2f49330156edc188d68b8f3e546c655e61e1dfadcd0c765", 0x9e}, {&(0x7f0000001b80)="8cb87e5b17afcdc82acf80a2f865aaed41d1697d8ed0c172c0860f22faccf075beb1d7677167c33a40eff9ab9fb3ad326fdfebaba0ddc1ac772ac0bcac976710bd35c73ed7fcca08f026aa6503475eddb451910c34653f96d7d8e2e10d2c9af6c6d1faf58210b4bd6510ff2a5b6b", 0x6e}], 0x4}}], 0x4, 0xa00) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x7) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x4, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) shutdown(r9, 0x1) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) 4.764908853s ago: executing program 2 (id=812): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fanotify_init(0x10, 0x1000) fanotify_mark(r3, 0x1, 0x101b, r2, 0x0) write$UHID_INPUT(r2, &(0x7f0000000a00)={0x8, {"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", 0x1000}}, 0x1006) read$hiddev(r1, &(0x7f0000000840)=""/73, 0x49) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0xfffffffb, 0x401, 0x124a, {0x6, 0x8}, 0x9, 0x1f}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac059f0200000000000109022400010000d005090400b9010300010009210008050122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00221800000046"], 0x0}, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3.904568715s ago: executing program 4 (id=821): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0xf0ffffff, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000640)=""/251, 0xfb, 0x2, 0x23}, @fda={0x66646185, 0x3, 0x1, 0x19}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 3.803795978s ago: executing program 4 (id=823): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x8980}], 0x1, 0x0, 0xb403}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x0) 3.630490421s ago: executing program 4 (id=824): r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c710000", @ANYRES16=r1, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) 3.51695913s ago: executing program 4 (id=826): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x3, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f00000000c0)=@v2={0x5, 0x3, 0x8, 0x10, 0xe7, "9712175eb9f7788652c02368732f8be65622c016a0a118dfb4168fe3fe9fd588703fcb559a9ac24cbdf73af660fdb66af6d80c31ff848f8ad45002413024eb5c412c0c13e2676bc7ffcccf0d551c874ebe5e7c8c60e0f1dd65c12231b10d5bd7cf15d35023b2c71ddc44ab394b35cfb7e8d544e13be6c5f647276a165d1602c809e46c31925cb2e0db357b398c0648787c759f6352512159fea1112697007a73b2e4fb4a00986da4d23b5f2eef263f81fa301830e94af702d3ec8f4dba23b094b64af19dad378782f0ecc09a000901fafbed9dddaff503da28b0e8bef61f083dff5672e7ae2a41"}, 0xf0, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r3, 0x1, 0x10, 0xfff, 0x55b}, &(0x7f00000000c0)=0x18) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e2200000000600000200"}}) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000600)={0x3ff, 0x800, 0xa, 0x7, '\x00', '\x00', '\x00', 0x1, 0x7, 0xa4f2, 0x81, "11230978c7c964ab43c3e4e05c70a326"}) mount(0x0, 0x0, 0x0, 0x808000, 0x0) 2.974622688s ago: executing program 2 (id=833): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000000)=0x3ff) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a3000c109004c000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000009080002400000000308000b40000000000900010073797a3000"], 0xd4}, 0x1, 0x0, 0x0, 0x8800}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x222200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000240)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, &(0x7f00000002c0)=""/4096, &(0x7f0000000040)=0x1000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000904000001020d00000524060001052400a9b30d240f01020000000300ff000606241a0c001407240a050905580c241b04000200a90c09000304240202042402"], 0x0) r7 = syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x40) syz_usb_connect$cdc_ecm(0x4, 0x7c, &(0x7f0000001580)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x1, 0x1, 0xa, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x2, 0x6, 0x0, 0x80, {{0x7, 0x24, 0x6, 0x0, 0x0, "db17"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x7, 0x40, 0x2}, [@obex={0x5, 0x24, 0x15, 0x7}, @acm={0x4, 0x24, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0x200, 0x7}, @mdlm={0x15, 0x24, 0x12, 0xb718}, @mbim_extended={0x8, 0x24, 0x1c, 0x3691, 0x0, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xf, 0xfe, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x80, 0xf8}}}}}]}}]}}, &(0x7f00000019c0)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x310, 0x46, 0x3, 0x5, 0x40, 0x7}, 0x5a, &(0x7f0000001640)={0x5, 0xf, 0x5a, 0x5, [@ptm_cap={0x3}, @generic={0x33, 0x10, 0x4, "c7e65c95dbaa4ca70b3c6ddbb02b81d5fedf50ef6f408e8a0d2ece2650cdae57913540e397a17e946e0cea6f088b12c4"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2, 0xde, 0xf}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x3, 0x401}, @wireless={0xb, 0x10, 0x1, 0x4, 0x24, 0x7, 0x9c, 0x6, 0x2}]}, 0x4, [{0xcc, &(0x7f0000001740)=@string={0xcc, 0x3, "3f3513343bbc847263727dfbd88c75d41dfbb4bbb87428d3cf1141eb8cbc6f77879e90393047ada637dbf23c41e051762babbbdd6d73a5d533d89f8dc22d277e2a2d1def411fb83bc23dcdc73eb70fa95bca78e5cfb4e7cda1e65766831e7fc8fbd09e215ca01bba04d8b93c063d1adfe6e4a370dc71bd616db351cc27d44503cbb1f946fb2ff5ea5b5a4e02230d9920678dcc77ea85ca8aee245fc051406462d56e1895a1c576b4d604129b139923777a1ab848f64c54764c6fdcce1a17b1befc76d70412071b61453b"}}, {0x56, &(0x7f0000001840)=@string={0x56, 0x3, "eeb3392a6e7403a299f82caa01660c4fc7a83ad318121ddbf2e4f72cefaba4ff99bd0b0bdb7d0d5e661d15be959d909c12bb46c9977ca37cbb27714fada83abfd401600208acbd07eca18d4fd15b9773f24a1f57"}}, {0x88, &(0x7f00000018c0)=@string={0x88, 0x3, "a98780e61fa5fd97ab53720374d200b7659d2e25c8acf359a40d78e9e8554835f3507bbf69006d643d4a54e66fcf27d3af375562176b4dc52a64282a37e4fb0eec2018a1b24a04dc5dd67aeac867dc8895b4033a11051c6acf562531fbeaa08c87bd81ff23b80a86e6625277da6a3bdf5964e660c7c20b4ce5825c47e617cc3e28600e9384ef"}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x81d}}]}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r8, 0xf503, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x9, 0x2000005, 0x0, 0x9, 0x0, 0x1], 0xeeee8000, 0x2503c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io$printer(r7, &(0x7f0000001340)={0x14, &(0x7f00000012c0)={0x0, 0x24, 0x45, {0x45, 0x23, "95f45bd39d5a36669cade04f72452e4d4dba71da1650633ea0c544b29f210f9d2d650f781e2f4dba3ebe79cd9c1af559eeb79e96f5410ea45f66e2ef6a86b8473f6a77"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000001540)={0x34, &(0x7f0000001380)={0x20, 0x2, 0x7a, "a3dc2ca0157d27fe72b1b95d82ca420f83cfc7bf85c57b60663379eb44b459795c48dd00f8551314f204e45c580986c0f625a7864432b25ac2d5be88ea226c5a7223b0a141fb5d85fb059bfa6d178c165f7c774b5bcb6e2ce51bc7040a783df57fd0ecf4ed3958a0a124cdb5525ebfb2a54a0a5d17b3c9003978"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001440)={0x0, 0x8, 0x1, 0xac}, &(0x7f0000001480)={0x20, 0x0, 0xe, {0xc, "2df07c84f8590c14ba2b5abb"}}, &(0x7f00000014c0)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000001500)={0x20, 0x0, 0x1, 0x1}}) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x2e, "f42a97b96d02faffffff75fdda624457697e22bd14ad3d5c3638f76f623a43edba52ff8d5cde1d3b8ad78583afe1"}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.52671423s ago: executing program 1 (id=836): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x401}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbbbbbbbbbbbbb86dd6d002000ff1111ff00000000000000000000000000000000ff0200000000000000000000000000014f194e200006"], 0x4b) 1.972213803s ago: executing program 1 (id=839): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg(r0, &(0x7f0000003d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[{0x10, 0x118}, {0x10, 0x10f, 0xfffffffe}], 0x20}, 0xa0020000}], 0x1, 0x40804) 1.878791614s ago: executing program 4 (id=841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x1000000}}, 0xa0}}, 0x0) 1.845704918s ago: executing program 2 (id=842): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x64000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.762173264s ago: executing program 1 (id=844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="444ee0d1f57098f2325285e6e64999e30b3c9b3109b2de43ed711d00c100", @ANYRES16=r2, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e00000000000000000018000380100003800c000180080001000300000004000100"], 0x44}}, 0x4) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2500, 0x0) r4 = dup(r3) ioctl$KVM_SET_CPUID2(r4, 0xc008ae09, &(0x7f0000000280)=ANY=[]) 1.507120509s ago: executing program 33 (id=842): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x64000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.501981787s ago: executing program 4 (id=846): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x80089203, 0x200000000000000) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x1ad72f7) listen(r1, 0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0x3309, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_4={0x3, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "813e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x3, "5d8c3dda"}]}}, 0x0}, 0x0) write(r3, &(0x7f0000000000)="fb196dec69a10b22", 0x8) r5 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xc0, 0xff, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x0, 0x3, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x63, 0x3}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0xe58fb0df0e277ad3, 0x40, 0x0, 0x3, 0x10, 0xf4}, 0x1f, &(0x7f0000000140)={0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "a6cdeb5addf7a540ffdf226a7264a1a0"}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1403}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41d}}, {0x9e, &(0x7f0000000280)=@string={0x9e, 0x3, "68121e492c3619fc3ea563bf4aaffee4964ee37bddfb0f4d631e8f78ae60eae528635d2036be23e348a4e891ca58a3473dc3d710c19d80fd7a36c50e80bb8986f62471eef405d153bc720bae26d95b707a23507627a568e52d6b73ef9c89226212af16eb71436fc60c1da1eb05d36206cf96d6481152b295dfd9a68f1e6906fb8b77f9fdc6c5919f6f8d537de87a5adba0a7c45b21895d7c25382224"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2009}}]}) r6 = fsopen(&(0x7f0000000040)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f00000005c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) syz_usb_control_io$printer(r5, &(0x7f0000000580)={0x14, &(0x7f0000000400)={0x20, 0x24, 0x100, {0x100, 0x9, "9b4372cb9f768539c9368c25823f32d93c379f67c11378dbc4455111e8efc79c74eaea8fdbaebca27503ca2ae7940a34ec7c61e9bed57d7e16bf7be7034843e6d7f94f8a1e27ff0d11a526d86361f41d8f43af30fc02808bf581e5e08d877ba6bd9a773f4b1f23766aef028bafbd3f8c5f99ef970924c8c674fbac12c3518602cc28a1423007ef9b5fa34e835f7142efbe57db57b350c7c75c94db0b8320ae492d9f535f6cacdc1de172941bdbe69af25dd84c0bf2743a69a511c33338ab1bee63dc0f1587e29324b2111b915003dfa9bbe9c4900c4d1de9fc06213b72d943ff0aee6e38bfc3f9ce20acaca1ed7da9c7a997422964bcf28ae5b6d672b249"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}}, &(0x7f00000007c0)={0x34, &(0x7f00000005c0)={0x20, 0x37e00dc2f6143b5b, 0x53, "ed853190fd02f0e75cb1d75080c4c661477eee485dc8c178e55033bfdc69697b9b247d720820775d0326b6b49ed4c7d140b0759eb78d78e3e04b085711d9a2e55bcbfcc02686e6ac5bb6c4059ddf75f7b42300"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x10}, &(0x7f00000006c0)=ANY=[@ANYBLOB="20005b0000000059170b8187a8ee764f1333884024f2a7090f98e0242c03000000000000007d1cf2973212cb1eb53c90c74725323eb6f70ecb7ec82e73953ff77663b94f9e12109c67907078b22ac916d058e8996f1103b31705fba85c9c093c25"], &(0x7f0000000740)={0x20, 0x1, 0x1, 0x2d}, &(0x7f0000000780)={0x20, 0x0, 0x1}}) syz_usb_connect(0x0, 0x4b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d50010203010902390001000016470904000003080662"], 0x0) pipe2(&(0x7f0000000080), 0x80080) 1.501713361s ago: executing program 1 (id=847): r0 = syz_open_dev$dri(0x0, 0x1, 0x2100) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x2f, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.250866719s ago: executing program 1 (id=852): r0 = socket(0x1f, 0x2, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000140)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x408ac0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000080)={r4, 0x8, 0x4}, 0x8) r5 = dup(r2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000280)={0x2, 'veth1_to_bridge\x00', {0x6}, 0x3}) write$UHID_INPUT(r5, &(0x7f0000002080)={0x9, {"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", 0x1028}}, 0xfffffd00) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001", @ANYRES32=0x0, @ANYRESHEX], 0x110}, 0x1, 0x0, 0x0, 0x20000019}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000880)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)={0x68, 0x0, 0x7, 0x201, 0x0, 0x0, {0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40840}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x22052, r1, 0x2000) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)={0x88, 0x0, 0x7, 0x801, 0x0, 0x0, {0x8, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x200}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xe00a}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x24}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20801}, 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r7 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000080685b107000000"], 0x1c}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) 639.237481ms ago: executing program 3 (id=854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x268842, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000140), 0x0, 0x0, 0x1) creat(&(0x7f0000000080)='./file0/file0\x00', 0x6a) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x2, 0x6, 0xfffffff8}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="c80000001b0001000000000000000000e00000010000000000000000000003007f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000f0000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000200000000000000020000000000000000000000000000000200000018000000000000000000000014000e00"/126], 0xc8}}, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) 522.091788ms ago: executing program 3 (id=855): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/vmcoreinfo', 0x101000, 0x51) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000380)={r6, @in6={{0xa, 0x4e22, 0x4, @empty, 0xc}}, 0x0, 0x2}, &(0x7f0000000340)=0x90) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x1, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x10001}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 338.121587ms ago: executing program 3 (id=856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x1000000, {0x1, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0) 263.962591ms ago: executing program 1 (id=857): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500280008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 230.627564ms ago: executing program 3 (id=858): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './cgroup\x00'}) 74.271856ms ago: executing program 3 (id=859): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mount$overlay(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x2000000000000000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 0s ago: executing program 3 (id=860): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000100000000ee010002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) kernel console output (not intermixed with test programs): 8226][ T24] usb 4-1: config 0 has no interface number 0 [ 93.045960][ T981] usb 3-1: Product: syz [ 93.050459][ T981] usb 3-1: Manufacturer: syz [ 93.056974][ T981] usb 3-1: SerialNumber: syz [ 93.063622][ T24] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 93.073970][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.083659][ T24] usb 4-1: Product: syz [ 93.088921][ T981] usb 3-1: config 0 descriptor?? [ 93.095013][ T24] usb 4-1: Manufacturer: syz [ 93.101617][ T24] usb 4-1: SerialNumber: syz [ 93.125149][ T24] usb 4-1: config 0 descriptor?? [ 93.142266][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 93.270842][ T6425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.300188][ T30] audit: type=1800 audit(1752025024.016:3): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.142" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 93.332865][ T981] usb 3-1: USB disconnect, device number 5 [ 93.755817][ T6434] netlink: 24 bytes leftover after parsing attributes in process `syz.0.156'. [ 93.764728][ T6434] netlink: 68 bytes leftover after parsing attributes in process `syz.0.156'. [ 94.044208][ T6442] binder: 6441:6442 unknown command 0 [ 94.063560][ T6442] binder: 6441:6442 ioctl c0306201 200000000080 returned -22 [ 94.077585][ T6442] binder: 6441:6442 unknown command 0 [ 94.085015][ T6442] binder: 6441:6442 ioctl c0306201 200000000180 returned -22 [ 94.308680][ T6455] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.666824][ T24] gspca_spca1528: reg_w err -110 [ 94.674873][ T24] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 94.832042][ T3528] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.910833][ T3528] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.011979][ T3528] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.122331][ T3528] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.293877][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.303179][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.311157][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.322976][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.333994][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.458845][ T3528] bridge_slave_1: left allmulticast mode [ 95.464678][ T3528] bridge_slave_1: left promiscuous mode [ 95.487684][ T3528] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.488197][ T981] usb 4-1: USB disconnect, device number 3 [ 95.566799][ T3528] bridge_slave_0: left allmulticast mode [ 95.592945][ T3528] bridge_slave_0: left promiscuous mode [ 95.613875][ T3528] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.849654][ T6497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.178'. [ 95.858776][ T6497] netlink: 68 bytes leftover after parsing attributes in process `syz.3.178'. [ 96.278368][ T6508] nbd0: detected capacity change from 0 to 127 [ 96.325200][ T6508] ieee802154 phy0 wpan0: encryption failed: -22 [ 96.383688][ T3528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.397652][ T3528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.409456][ T3528] bond0 (unregistering): Released all slaves [ 96.425475][ T6484] netlink: 'syz.2.175': attribute type 5 has an invalid length. [ 96.433335][ T6484] netlink: 'syz.2.175': attribute type 10 has an invalid length. [ 96.472669][ T5866] block nbd0: Receive control failed (result -104) [ 96.726142][ T6514] Invalid source name [ 96.730166][ T6514] UBIFS error (pid: 6514): cannot open "/dev/sg0", error -22 [ 97.135877][ T3528] hsr_slave_0: left promiscuous mode [ 97.170154][ T3528] hsr_slave_1: left promiscuous mode [ 97.232193][ T3528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.240045][ T3528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.260250][ T3528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.274455][ T3528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.318621][ T3528] veth1_macvtap: left promiscuous mode [ 97.326131][ T3528] veth0_macvtap: left promiscuous mode [ 97.334438][ T3528] veth1_vlan: left promiscuous mode [ 97.340394][ T3528] veth0_vlan: left promiscuous mode [ 97.425968][ T5866] Bluetooth: hci2: command tx timeout [ 97.897732][ T3528] team0 (unregistering): Port device team_slave_1 removed [ 97.927332][ T3528] team0 (unregistering): Port device team_slave_0 removed [ 98.202147][ T6478] chnl_net:caif_netlink_parms(): no params data found [ 98.415129][ T6562] Can't find a SQUASHFS superblock on rnullb0 [ 98.794778][ T6478] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.822975][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.864095][ T6478] bridge_slave_0: entered allmulticast mode [ 98.889909][ T6478] bridge_slave_0: entered promiscuous mode [ 98.921094][ T6478] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.929799][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.952027][ T6478] bridge_slave_1: entered allmulticast mode [ 98.961443][ T6478] bridge_slave_1: entered promiscuous mode [ 99.154439][ T6478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.174657][ T6478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.453289][ T6478] team0: Port device team_slave_0 added [ 99.481261][ T6478] team0: Port device team_slave_1 added [ 99.487661][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 99.505815][ T5866] Bluetooth: hci2: command tx timeout [ 99.663986][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 99.694645][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 99.712403][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.718055][ T6478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.734937][ T24] usb 3-1: Product: syz [ 99.745723][ T6478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.755977][ T24] usb 3-1: Manufacturer: syz [ 99.790471][ T24] usb 3-1: SerialNumber: syz [ 99.815241][ T6478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.816147][ T24] usb 3-1: config 0 descriptor?? [ 99.843921][ T6614] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 99.867350][ T6478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.885998][ T6478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.962436][ T6478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.000597][ T6619] netlink: 68 bytes leftover after parsing attributes in process `syz.1.205'. [ 100.107564][ T6597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.110995][ T6478] hsr_slave_0: entered promiscuous mode [ 100.119795][ T6597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.126923][ T6478] hsr_slave_1: entered promiscuous mode [ 100.147780][ T6621] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20000 [ 100.204358][ T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 100.742267][ T6478] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.781580][ T6478] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.809356][ T6624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.836235][ T6624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.861144][ T6478] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.908967][ T6640] FAULT_INJECTION: forcing a failure. [ 100.908967][ T6640] name failslab, interval 1, probability 0, space 0, times 0 [ 100.922948][ T6478] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.951691][ T6640] CPU: 0 UID: 0 PID: 6640 Comm: syz.3.208 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 100.951715][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.951725][ T6640] Call Trace: [ 100.951732][ T6640] [ 100.951739][ T6640] dump_stack_lvl+0x189/0x250 [ 100.951765][ T6640] ? __pfx____ratelimit+0x10/0x10 [ 100.951784][ T6640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.951805][ T6640] ? __pfx__printk+0x10/0x10 [ 100.951829][ T6640] ? __pfx___might_resched+0x10/0x10 [ 100.951847][ T6640] ? fs_reclaim_acquire+0x7d/0x100 [ 100.951868][ T6640] should_fail_ex+0x414/0x560 [ 100.951893][ T6640] ? __pfx_sock_alloc_inode+0x10/0x10 [ 100.951911][ T6640] should_failslab+0xa8/0x100 [ 100.951936][ T6640] ? __pfx_sock_alloc_inode+0x10/0x10 [ 100.951951][ T6640] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 100.951974][ T6640] ? sock_alloc_inode+0x28/0xc0 [ 100.951995][ T6640] ? __pfx_sock_alloc_inode+0x10/0x10 [ 100.952010][ T6640] sock_alloc_inode+0x28/0xc0 [ 100.952027][ T6640] alloc_inode+0x67/0x1b0 [ 100.952047][ T6640] __sock_create+0x12d/0x9f0 [ 100.952075][ T6640] __sys_socket+0xd7/0x1b0 [ 100.952098][ T6640] __x64_sys_socket+0x7a/0x90 [ 100.952118][ T6640] do_syscall_64+0xfa/0x3b0 [ 100.952135][ T6640] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.952154][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.952171][ T6640] ? clear_bhb_loop+0x60/0xb0 [ 100.952191][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.952208][ T6640] RIP: 0033:0x7f11e1f90847 [ 100.952224][ T6640] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.952238][ T6640] RSP: 002b:00007f11e2ec9eb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 100.952257][ T6640] RAX: ffffffffffffffda RBX: 00007f11e2ec9f80 RCX: 00007f11e1f90847 [ 100.952270][ T6640] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 100.952280][ T6640] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.952289][ T6640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 100.952300][ T6640] R13: 0000000000000048 R14: 00007f11e2ec9fa0 R15: 0000200000000380 [ 100.952328][ T6640] [ 100.952534][ T6640] socket: no more sockets [ 101.172289][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'. [ 101.284161][ T6624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.335313][ T6624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.411459][ T6657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.212'. [ 101.415756][ T6659] NILFS (rnullb0): couldn't find nilfs on the device [ 101.459979][ T6657] netlink: 68 bytes leftover after parsing attributes in process `syz.3.212'. [ 101.523030][ T6478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.580031][ T6478] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.596921][ T5866] Bluetooth: hci2: command tx timeout [ 101.620759][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.627963][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.661987][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.669178][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.066351][ T6681] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.305986][ T981] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.329827][ T6478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.455758][ T981] usb 2-1: device descriptor read/64, error -71 [ 102.696213][ T981] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 102.796202][ T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 102.837425][ T981] usb 2-1: device descriptor read/64, error -71 [ 102.933482][ T6705] ALSA: seq fatal error: cannot create timer (-22) [ 102.950397][ T6478] veth0_vlan: entered promiscuous mode [ 102.959730][ T6704] hpfs: Bad magic ... probably not HPFS [ 102.966442][ T981] usb usb2-port1: attempt power cycle [ 102.996705][ T5895] usb 3-1: USB disconnect, device number 6 [ 103.003585][ T6478] veth1_vlan: entered promiscuous mode [ 103.178555][ T6478] veth0_macvtap: entered promiscuous mode [ 103.201170][ T6478] veth1_macvtap: entered promiscuous mode [ 103.210086][ T6711] netlink: 24 bytes leftover after parsing attributes in process `syz.3.222'. [ 103.223149][ T6478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.230683][ T6711] netlink: 68 bytes leftover after parsing attributes in process `syz.3.222'. [ 103.250073][ T6478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.273387][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.293326][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.310711][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.320508][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.335853][ T981] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.347889][ T5895] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 103.356513][ T981] usb 2-1: device descriptor read/8, error -71 [ 103.444541][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.462130][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.511864][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.533780][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.543176][ T5895] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 103.561737][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.564323][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.616133][ T981] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 103.620510][ T5895] usb 3-1: config 0 descriptor?? [ 103.668822][ T5866] Bluetooth: hci2: command tx timeout [ 103.677153][ T981] usb 2-1: device descriptor read/8, error -71 [ 103.795688][ T981] usb usb2-port1: unable to enumerate USB device [ 103.864301][ T5866] Bluetooth: Wrong link type (-71) [ 104.027203][ T24] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 104.055658][ T6736] netlink: 'syz.3.226': attribute type 21 has an invalid length. [ 104.063475][ T6736] netlink: 'syz.3.226': attribute type 6 has an invalid length. [ 104.072968][ T6736] netlink: 132 bytes leftover after parsing attributes in process `syz.3.226'. [ 104.091315][ T5895] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 104.117424][ T5895] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0002/input/input6 [ 104.169609][ T6739] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 104.176307][ T6739] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 104.191205][ T24] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 104.223505][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.240935][ T6739] vhci_hcd vhci_hcd.0: Device attached [ 104.254756][ T6736] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 104.268489][ T6736] overlayfs: failed to set xattr on upper [ 104.276358][ T6707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.292232][ T6736] overlayfs: ...falling back to redirect_dir=nofollow. [ 104.309716][ T6736] overlayfs: ...falling back to index=off. [ 104.319014][ T6736] overlayfs: ...falling back to uuid=null. [ 104.320535][ T24] usb 5-1: config 0 descriptor?? [ 104.340761][ T6740] vhci_hcd: connection closed [ 104.342583][ T13] vhci_hcd: stop threads [ 104.353123][ T6707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.356110][ T13] vhci_hcd: release socket [ 104.361163][ T5895] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 104.418504][ T5921] vhci_hcd: vhci_device speed not set [ 104.429294][ T13] vhci_hcd: disconnect device [ 104.515761][ T5921] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 104.541992][ T5921] usb 39-1: enqueue for inactive port 0 [ 104.616068][ T5921] vhci_hcd: vhci_device speed not set [ 104.763402][ T6725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.780808][ T5889] usb 3-1: USB disconnect, device number 7 [ 104.799884][ T6725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.308779][ T6767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.230'. [ 105.321356][ T6767] netlink: 68 bytes leftover after parsing attributes in process `syz.1.230'. [ 105.471578][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 105.506194][ T24] asix 5-1:0.0: probe with driver asix failed with error -71 [ 105.545265][ T24] usb 5-1: USB disconnect, device number 2 [ 105.558664][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'. [ 105.671952][ T6780] hpfs: Bad magic ... probably not HPFS [ 105.977044][ T5889] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 106.148071][ T6797] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 106.167541][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.182315][ T6797] UDF-fs: Scanning with blocksize 4096 failed [ 106.196526][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.215978][ T5889] usb 4-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 106.227798][ T6797] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 106.256177][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.273304][ T6797] UDF-fs: Scanning with blocksize 4096 failed [ 106.282838][ T5889] usb 4-1: config 0 descriptor?? [ 106.466098][ T5895] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.477467][ T6809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.240'. [ 106.496648][ T6809] netlink: 68 bytes leftover after parsing attributes in process `syz.1.240'. [ 106.533632][ T6811] : entered promiscuous mode [ 106.661506][ T5895] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 106.678916][ T5895] usb 5-1: can't read configurations, error -22 [ 106.716680][ T5889] chicony 0003:04F2:1236.0003: item fetching failed at offset 0/1 [ 106.739494][ T5889] chicony 0003:04F2:1236.0003: Chicony hid parse failed: -22 [ 106.755956][ T5889] chicony 0003:04F2:1236.0003: probe with driver chicony failed with error -22 [ 106.836125][ T5895] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.915305][ T5889] usb 4-1: USB disconnect, device number 4 [ 107.007991][ T5895] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 107.035245][ T5895] usb 5-1: can't read configurations, error -22 [ 107.052450][ T5895] usb usb5-port1: attempt power cycle [ 107.283546][ T6844] netlink: 24 bytes leftover after parsing attributes in process `syz.1.250'. [ 107.295238][ T6844] netlink: 68 bytes leftover after parsing attributes in process `syz.1.250'. [ 107.425931][ T5895] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 107.460238][ T5895] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 107.480002][ T5895] usb 5-1: can't read configurations, error -22 [ 107.536259][ T5889] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 107.620185][ T5895] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 107.659841][ T5895] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 107.682204][ T5895] usb 5-1: can't read configurations, error -22 [ 107.705165][ T5895] usb usb5-port1: unable to enumerate USB device [ 107.755721][ T5889] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 107.770246][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.792726][ T5889] usb 3-1: config 0 descriptor?? [ 108.227965][ T6874] netlink: 24 bytes leftover after parsing attributes in process `syz.1.259'. [ 108.237862][ T6874] netlink: 68 bytes leftover after parsing attributes in process `syz.1.259'. [ 108.445929][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 108.480787][ T6881] XFS (rnullb0): Invalid superblock magic number [ 108.615883][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 108.622877][ T24] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 108.632090][ T24] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 108.642306][ T24] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 108.650525][ T24] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 108.658897][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 108.667877][ T24] usb 4-1: config 0 has no interface number 0 [ 108.674068][ T24] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 108.686446][ T24] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 108.700965][ T24] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid maxpacket 65517, setting to 64 [ 108.712743][ T24] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 108.726152][ T24] usb 4-1: config 0 interface 125 has no altsetting 0 [ 108.732936][ T24] usb 4-1: config 0 interface 125 has no altsetting 2 [ 108.743254][ T24] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 108.752440][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.761312][ T24] usb 4-1: Product: syz [ 108.765468][ T24] usb 4-1: Manufacturer: syz [ 108.770094][ T24] usb 4-1: SerialNumber: syz [ 108.782887][ T24] usb 4-1: config 0 descriptor?? [ 108.793572][ T24] usb 4-1: selecting invalid altsetting 2 [ 108.995234][ T5866] Bluetooth: hci1: unexpected cc 0x0809 length: 68 > 4 [ 109.002975][ C1] usb 4-1: async_complete: urb error -71 [ 109.008744][ C1] usb 4-1: async_complete: urb error -71 [ 109.014436][ C1] usb 4-1: async_complete: urb error -71 [ 109.020101][ C1] usb 4-1: async_complete: urb error -71 [ 109.026943][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.038970][ T24] get_1284_register: usb error -71 [ 109.046784][ T24] uss720 4-1:0.125: probe with driver uss720 failed with error -71 [ 109.059762][ T24] usb 4-1: USB disconnect, device number 5 [ 109.361597][ T6904] netlink: 'syz.1.264': attribute type 29 has an invalid length. [ 109.471407][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.483759][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.494637][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.516978][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.549028][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.579492][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.597834][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.619608][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.652549][ T6915] binder: 6914:6915 ioctl c0306201 200000000040 returned -14 [ 109.662392][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.680863][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.680917][ T6917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.268'. [ 109.697952][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.708692][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.726932][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.752111][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.778464][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.800736][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.811765][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.823662][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.833029][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.848239][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.861032][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.872991][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.881907][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.890013][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.902454][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.910610][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.918695][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.927170][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.947226][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.978758][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 109.996971][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 110.009444][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 110.017512][ T6910] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 110.035768][ T5895] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.198673][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 110.207300][ T5895] usb 4-1: unable to get BOS descriptor or descriptor too short [ 110.219320][ T5895] usb 4-1: config 129 has an invalid interface number: 178 but max is 0 [ 110.229529][ T5895] usb 4-1: config 129 has no interface number 0 [ 110.240112][ T5895] usb 4-1: config 129 interface 178 has no altsetting 0 [ 110.253839][ T5895] usb 4-1: New USB device found, idVendor=0c45, idProduct=627c, bcdDevice=4c.44 [ 110.267536][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.277330][ T5895] usb 4-1: Product: syz [ 110.281541][ T5895] usb 4-1: Manufacturer: syz [ 110.286700][ T5895] usb 4-1: SerialNumber: syz [ 110.375923][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 110.459582][ T5889] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 110.472010][ T5889] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 110.490823][ T5889] asix 3-1:0.0: probe with driver asix failed with error -71 [ 110.513007][ T5889] usb 3-1: USB disconnect, device number 8 [ 110.549674][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 110.567083][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 110.591141][ T5895] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:627c [ 110.604525][ T6943] __nla_validate_parse: 1 callbacks suppressed [ 110.604540][ T6943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.279'. [ 110.605971][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.615161][ T6943] netlink: 68 bytes leftover after parsing attributes in process `syz.1.279'. [ 110.622804][ T5895] gspca_sn9c20x: Write register 1000 failed -71 [ 110.650583][ T10] usb 5-1: config 0 descriptor?? [ 110.664382][ T5895] gspca_sn9c20x: Device initialization failed [ 110.679594][ T5895] gspca_sn9c20x 4-1:129.178: probe with driver gspca_sn9c20x failed with error -71 [ 110.696288][ T5895] usb 4-1: USB disconnect, device number 6 [ 111.032676][ T5921] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 111.222994][ T5921] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 111.235279][ T10] (null): keene_cmd_main failed (-110) [ 111.243412][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.266134][ T6955] netlink: 796 bytes leftover after parsing attributes in process `syz.3.282'. [ 111.266545][ T10] video4linux radio48: keene_cmd_main failed (-32) [ 111.292280][ T5921] usb 2-1: config 0 descriptor?? [ 111.319095][ T5921] cp210x 2-1:0.0: cp210x converter detected [ 111.330846][ T10] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 111.519659][ T5921] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 111.553253][ T5921] cp210x 2-1:0.0: querying part number failed [ 111.583565][ T5921] usb 2-1: cp210x converter now attached to ttyUSB0 [ 111.588378][ T6964] FAULT_INJECTION: forcing a failure. [ 111.588378][ T6964] name failslab, interval 1, probability 0, space 0, times 0 [ 111.620110][ T6964] CPU: 1 UID: 0 PID: 6964 Comm: syz.2.285 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 111.620134][ T6964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 111.620144][ T6964] Call Trace: [ 111.620151][ T6964] [ 111.620158][ T6964] dump_stack_lvl+0x189/0x250 [ 111.620186][ T6964] ? __pfx____ratelimit+0x10/0x10 [ 111.620205][ T6964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.620228][ T6964] ? __pfx__printk+0x10/0x10 [ 111.620257][ T6964] ? __pfx___might_resched+0x10/0x10 [ 111.620304][ T6964] ? fs_reclaim_acquire+0x7d/0x100 [ 111.620328][ T6964] should_fail_ex+0x414/0x560 [ 111.620357][ T6964] should_failslab+0xa8/0x100 [ 111.620383][ T6964] __kmalloc_noprof+0xcb/0x4f0 [ 111.620404][ T6964] ? kfree+0x4d/0x440 [ 111.620423][ T6964] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 111.620452][ T6964] tomoyo_realpath_from_path+0xe3/0x5d0 [ 111.620478][ T6964] ? tomoyo_domain+0xd9/0x130 [ 111.620507][ T6964] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 111.620528][ T6964] tomoyo_path_number_perm+0x1e8/0x5a0 [ 111.620551][ T6964] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 111.620590][ T6964] ? __lock_acquire+0xab9/0xd20 [ 111.620631][ T6964] ? __fget_files+0x2a/0x420 [ 111.620653][ T6964] ? __fget_files+0x2a/0x420 [ 111.620669][ T6964] ? __fget_files+0x3a0/0x420 [ 111.620686][ T6964] ? __fget_files+0x2a/0x420 [ 111.620708][ T6964] security_file_ioctl+0xcb/0x2d0 [ 111.620730][ T6964] __se_sys_ioctl+0x47/0x170 [ 111.620756][ T6964] do_syscall_64+0xfa/0x3b0 [ 111.620774][ T6964] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.620792][ T6964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.620808][ T6964] ? clear_bhb_loop+0x60/0xb0 [ 111.620838][ T6964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.620854][ T6964] RIP: 0033:0x7f7e1f98e929 [ 111.620869][ T6964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.620883][ T6964] RSP: 002b:00007f7e207d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.620902][ T6964] RAX: ffffffffffffffda RBX: 00007f7e1fbb5fa0 RCX: 00007f7e1f98e929 [ 111.620915][ T6964] RDX: 0000200000000080 RSI: 00000000c0285629 RDI: 0000000000000004 [ 111.620926][ T6964] RBP: 00007f7e207d4090 R08: 0000000000000000 R09: 0000000000000000 [ 111.620937][ T6964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.620947][ T6964] R13: 0000000000000000 R14: 00007f7e1fbb5fa0 R15: 00007ffdd2cee958 [ 111.620976][ T6964] [ 111.620984][ T6964] ERROR: Out of memory at tomoyo_realpath_from_path. [ 112.077589][ T24] usb 5-1: USB disconnect, device number 7 [ 112.182083][ T6971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.288'. [ 112.195322][ T6971] netlink: 68 bytes leftover after parsing attributes in process `syz.2.288'. [ 112.304917][ T6976] netlink: 'syz.2.289': attribute type 5 has an invalid length. [ 112.312923][ T6976] netlink: 'syz.2.289': attribute type 10 has an invalid length. [ 112.329756][ T6966] syzkaller1: entered promiscuous mode [ 112.335374][ T6966] syzkaller1: entered allmulticast mode [ 112.807814][ T6992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.829591][ T6992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.006908][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 113.178199][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.191576][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 113.220704][ T10] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 113.230987][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.239149][ T10] usb 4-1: Product: syz [ 113.244070][ T10] usb 4-1: Manufacturer: syz [ 113.249380][ T10] usb 4-1: SerialNumber: syz [ 113.266219][ T10] usb 4-1: config 0 descriptor?? [ 114.065662][ T5889] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 114.152498][ T43] usb 2-1: USB disconnect, device number 8 [ 114.182036][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 114.206973][ T43] cp210x 2-1:0.0: device disconnected [ 114.226075][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 114.238892][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.278245][ T5889] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.55 [ 114.298833][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.314107][ T5889] usb 5-1: Product: syz [ 114.324076][ T5889] usb 5-1: Manufacturer: syz [ 114.333960][ T5889] usb 5-1: SerialNumber: syz [ 114.356728][ T5889] usb 5-1: config 0 descriptor?? [ 114.376827][ T5889] smsc95xx v2.0.0 [ 114.380494][ T5889] smsc95xx 5-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 114.409592][ T5889] smsc95xx 5-1:0.0: probe with driver smsc95xx failed with error -22 [ 115.145348][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 115.159236][ T7077] openvswitch: : Dropping previously announced user features [ 115.206246][ T7081] netlink: 'syz.1.325': attribute type 4 has an invalid length. [ 115.229678][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 115.299506][ T7085] netlink: 24 bytes leftover after parsing attributes in process `syz.2.327'. [ 115.308932][ T7085] netlink: 68 bytes leftover after parsing attributes in process `syz.2.327'. [ 115.735713][ T5889] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 115.760080][ T981] usb 4-1: USB disconnect, device number 7 [ 115.918439][ T5889] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.932600][ T5889] usb 3-1: config 0 has no interface number 0 [ 115.938978][ T5889] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 115.948119][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.959557][ T5889] usb 3-1: config 0 descriptor?? [ 115.971389][ T5889] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 116.162867][ T7108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.336'. [ 116.171996][ T7108] netlink: 68 bytes leftover after parsing attributes in process `syz.1.336'. [ 116.227173][ T5889] usb 3-1: USB disconnect, device number 9 [ 116.235639][ T981] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 116.349675][ T7115] netlink: 'syz.1.338': attribute type 21 has an invalid length. [ 116.358610][ T7115] netlink: 128 bytes leftover after parsing attributes in process `syz.1.338'. [ 116.397616][ T981] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.411219][ T981] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 116.430844][ T981] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 116.440132][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.452073][ T981] usb 4-1: Product: syz [ 116.456491][ T981] usb 4-1: Manufacturer: syz [ 116.461275][ T981] usb 4-1: SerialNumber: syz [ 116.482173][ T981] usb 4-1: config 0 descriptor?? [ 116.508004][ T7120] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 116.753944][ T7101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.762898][ T7101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.866386][ T984] usb 5-1: USB disconnect, device number 8 [ 116.962589][ T7138] netlink: 24 bytes leftover after parsing attributes in process `syz.2.345'. [ 116.971913][ T7138] netlink: 68 bytes leftover after parsing attributes in process `syz.2.345'. [ 117.255695][ T981] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 117.358277][ T5908] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 117.415836][ T981] usb 2-1: Using ep0 maxpacket: 8 [ 117.486111][ T981] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 117.508370][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.521589][ T981] usb 2-1: Product: syz [ 117.539368][ T981] usb 2-1: Manufacturer: syz [ 117.555637][ T981] usb 2-1: SerialNumber: syz [ 117.576118][ T981] usb 2-1: config 0 descriptor?? [ 117.595509][ T5908] usb 5-1: config 0 has no interfaces? [ 117.601037][ T5908] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 117.630833][ T981] gspca_main: se401-2.14.0 probing 047d:5003 [ 117.659681][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.693099][ T5908] usb 5-1: config 0 descriptor?? [ 117.697798][ T7157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.730596][ T7157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.920479][ T7163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.355'. [ 117.949544][ T7146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.962736][ T984] usb 5-1: USB disconnect, device number 9 [ 118.015913][ T7146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.024752][ T7145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.037856][ T7145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.073485][ T7145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.090910][ T7145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.119711][ T7145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.134552][ T7145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.219928][ T7169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.356'. [ 118.232655][ T7169] netlink: 68 bytes leftover after parsing attributes in process `syz.2.356'. [ 118.867769][ T981] gspca_se401: write req failed req 0x57 val 0x00 error -110 [ 118.908200][ T7201] netlink: 'syz.3.361': attribute type 21 has an invalid length. [ 118.918244][ T981] se401 2-1:0.0: probe with driver se401 failed with error -110 [ 118.957574][ T7201] netlink: 128 bytes leftover after parsing attributes in process `syz.3.361'. [ 119.011032][ T7201] netlink: 'syz.3.361': attribute type 5 has an invalid length. [ 119.028680][ T7201] netlink: 3 bytes leftover after parsing attributes in process `syz.3.361'. [ 119.295667][ T984] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 119.466160][ T984] usb 5-1: Using ep0 maxpacket: 16 [ 119.504731][ T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.534333][ T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.585896][ T984] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 119.626486][ T984] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 119.676510][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.707602][ T984] usb 5-1: config 0 descriptor?? [ 119.875699][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 119.893721][ T5895] usb 2-1: USB disconnect, device number 9 [ 120.052346][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.075525][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 120.102160][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 120.125679][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.182104][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.195087][ T984] microsoft 0003:045E:07DA.0004: reserved main item tag 0xe [ 120.234187][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.243196][ T984] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 120.264103][ T984] microsoft 0003:045E:07DA.0004: item fetching failed at offset 32/34 [ 120.282194][ T984] microsoft 0003:045E:07DA.0004: parse failed [ 120.289496][ T984] microsoft 0003:045E:07DA.0004: probe with driver microsoft failed with error -22 [ 120.300606][ T10] usb 3-1: config 0 descriptor?? [ 120.383810][ T7198] Mount JFS Failure: -22 [ 120.731611][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 120.731651][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 120.731677][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 120.731709][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 120.731736][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 120.731764][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 120.731790][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 120.731817][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 120.731844][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 120.752757][ T10] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 120.851097][ T10] usb 5-1: USB disconnect, device number 10 [ 121.052047][ T984] usb 3-1: USB disconnect, device number 10 [ 121.838669][ T7292] __nla_validate_parse: 3 callbacks suppressed [ 121.838686][ T7292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.378'. [ 121.879531][ T7292] netlink: 68 bytes leftover after parsing attributes in process `syz.3.378'. [ 121.990001][ T7297] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 122.149979][ T7299] FAULT_INJECTION: forcing a failure. [ 122.149979][ T7299] name failslab, interval 1, probability 0, space 0, times 0 [ 122.217094][ T7299] CPU: 1 UID: 0 PID: 7299 Comm: syz.2.381 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 122.217119][ T7299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.217129][ T7299] Call Trace: [ 122.217137][ T7299] [ 122.217144][ T7299] dump_stack_lvl+0x189/0x250 [ 122.217172][ T7299] ? __pfx____ratelimit+0x10/0x10 [ 122.217192][ T7299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.217215][ T7299] ? __pfx__printk+0x10/0x10 [ 122.217244][ T7299] ? __pfx___might_resched+0x10/0x10 [ 122.217273][ T7299] ? fs_reclaim_acquire+0x7d/0x100 [ 122.217296][ T7299] should_fail_ex+0x414/0x560 [ 122.217325][ T7299] should_failslab+0xa8/0x100 [ 122.217352][ T7299] __kmalloc_noprof+0xcb/0x4f0 [ 122.217373][ T7299] ? kfree+0x4d/0x440 [ 122.217391][ T7299] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 122.217421][ T7299] tomoyo_realpath_from_path+0xe3/0x5d0 [ 122.217446][ T7299] ? tomoyo_domain+0xd9/0x130 [ 122.217475][ T7299] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 122.217496][ T7299] tomoyo_path_number_perm+0x1e8/0x5a0 [ 122.217519][ T7299] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 122.217558][ T7299] ? __lock_acquire+0xab9/0xd20 [ 122.217598][ T7299] ? __fget_files+0x2a/0x420 [ 122.217619][ T7299] ? __fget_files+0x2a/0x420 [ 122.217635][ T7299] ? __fget_files+0x3a0/0x420 [ 122.217652][ T7299] ? __fget_files+0x2a/0x420 [ 122.217674][ T7299] security_file_ioctl+0xcb/0x2d0 [ 122.217696][ T7299] __se_sys_ioctl+0x47/0x170 [ 122.217721][ T7299] do_syscall_64+0xfa/0x3b0 [ 122.217741][ T7299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.217757][ T7299] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 122.217774][ T7299] ? clear_bhb_loop+0x60/0xb0 [ 122.217794][ T7299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.217810][ T7299] RIP: 0033:0x7f7e1f98e929 [ 122.217826][ T7299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.217839][ T7299] RSP: 002b:00007f7e207d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.217858][ T7299] RAX: ffffffffffffffda RBX: 00007f7e1fbb5fa0 RCX: 00007f7e1f98e929 [ 122.217871][ T7299] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 122.217881][ T7299] RBP: 00007f7e207d4090 R08: 0000000000000000 R09: 0000000000000000 [ 122.217892][ T7299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.217906][ T7299] R13: 0000000000000000 R14: 00007f7e1fbb5fa0 R15: 00007ffdd2cee958 [ 122.217935][ T7299] [ 122.219127][ T7299] ERROR: Out of memory at tomoyo_realpath_from_path. [ 122.344824][ T7316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.512330][ T7316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.652989][ T7319] hpfs: Bad magic ... probably not HPFS [ 122.962561][ T7330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.386'. [ 123.021479][ T7334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.150302][ T7343] XFS (rnullb0): Invalid superblock magic number [ 123.295128][ T7351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.390'. [ 123.310565][ T7351] netlink: 68 bytes leftover after parsing attributes in process `syz.1.390'. [ 124.005719][ T981] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 124.105514][ T7389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.402'. [ 124.120333][ T7389] netlink: 68 bytes leftover after parsing attributes in process `syz.3.402'. [ 124.259905][ T981] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.262122][ T7395] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 124.279999][ T981] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 124.307407][ T7395] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 124.391095][ T981] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 124.415599][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.444274][ T981] usb 3-1: Product: syz [ 124.455648][ T981] usb 3-1: Manufacturer: syz [ 124.476065][ T981] usb 3-1: SerialNumber: syz [ 124.510875][ T981] usb 3-1: config 0 descriptor?? [ 124.527715][ T7404] hpfs: Bad magic ... probably not HPFS [ 124.782859][ T981] usb 3-1: USB disconnect, device number 11 [ 124.792966][ T7415] FAULT_INJECTION: forcing a failure. [ 124.792966][ T7415] name failslab, interval 1, probability 0, space 0, times 0 [ 124.831854][ T7415] CPU: 1 UID: 0 PID: 7415 Comm: syz.3.408 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 124.831877][ T7415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.831887][ T7415] Call Trace: [ 124.831894][ T7415] [ 124.831902][ T7415] dump_stack_lvl+0x189/0x250 [ 124.831929][ T7415] ? __pfx____ratelimit+0x10/0x10 [ 124.831949][ T7415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.831971][ T7415] ? __pfx__printk+0x10/0x10 [ 124.832000][ T7415] ? __pfx___might_resched+0x10/0x10 [ 124.832020][ T7415] ? fs_reclaim_acquire+0x7d/0x100 [ 124.832044][ T7415] should_fail_ex+0x414/0x560 [ 124.832073][ T7415] should_failslab+0xa8/0x100 [ 124.832099][ T7415] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 124.832124][ T7415] ? __alloc_skb+0x112/0x2d0 [ 124.832150][ T7415] __alloc_skb+0x112/0x2d0 [ 124.832174][ T7415] netlink_ack+0x146/0xa50 [ 124.832191][ T7415] ? __pfx_genl_rcv_msg+0x10/0x10 [ 124.832222][ T7415] ? ref_tracker_free+0x63a/0x7d0 [ 124.832249][ T7415] ? __pfx_ref_tracker_free+0x10/0x10 [ 124.832283][ T7415] netlink_rcv_skb+0x28c/0x470 [ 124.832304][ T7415] ? __pfx_genl_rcv_msg+0x10/0x10 [ 124.832329][ T7415] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 124.832366][ T7415] ? down_read+0x1ad/0x2e0 [ 124.832390][ T7415] genl_rcv+0x28/0x40 [ 124.832411][ T7415] netlink_unicast+0x758/0x8d0 [ 124.832440][ T7415] netlink_sendmsg+0x805/0xb30 [ 124.832470][ T7415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.832494][ T7415] ? aa_sock_msg_perm+0xf1/0x1d0 [ 124.832518][ T7415] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 124.832538][ T7415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.832559][ T7415] __sock_sendmsg+0x21c/0x270 [ 124.832581][ T7415] __sys_sendto+0x3bd/0x520 [ 124.832604][ T7415] ? __pfx___sys_sendto+0x10/0x10 [ 124.832636][ T7415] ? count_memcg_event_mm+0x21/0x260 [ 124.832671][ T7415] ? exc_page_fault+0x76/0xf0 [ 124.832693][ T7415] ? do_user_addr_fault+0xc8a/0x1390 [ 124.832717][ T7415] __x64_sys_sendto+0xde/0x100 [ 124.832741][ T7415] do_syscall_64+0xfa/0x3b0 [ 124.832759][ T7415] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.832777][ T7415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.832794][ T7415] ? clear_bhb_loop+0x60/0xb0 [ 124.832815][ T7415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.832831][ T7415] RIP: 0033:0x7f11e1f907bc [ 124.832847][ T7415] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 124.832861][ T7415] RSP: 002b:00007f11e2ea8ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 124.832880][ T7415] RAX: ffffffffffffffda RBX: 00007f11e2ea8fc0 RCX: 00007f11e1f907bc [ 124.832892][ T7415] RDX: 0000000000000020 RSI: 00007f11e2ea9010 RDI: 0000000000000003 [ 124.832904][ T7415] RBP: 0000000000000000 R08: 00007f11e2ea8f14 R09: 000000000000000c [ 124.832914][ T7415] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 124.832924][ T7415] R13: 00007f11e2ea8f68 R14: 00007f11e2ea9010 R15: 0000000000000000 [ 124.832953][ T7415] [ 125.125347][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.380670][ T7430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.413'. [ 125.425713][ T7430] netlink: 68 bytes leftover after parsing attributes in process `syz.3.413'. [ 125.812602][ T7447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.861106][ T7447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.155019][ T7466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.423'. [ 126.231880][ T7462] exFAT-fs (rnullb0): invalid boot record signature [ 126.258705][ T7462] exFAT-fs (rnullb0): failed to read boot sector [ 126.265087][ T7462] exFAT-fs (rnullb0): failed to recognize exfat type [ 126.394393][ T55] block nbd0: Possible stuck request ffff888025977000: control (read@0,1024B). Runtime 30 seconds [ 126.405478][ T55] block nbd0: Possible stuck request ffff8880259771c0: control (read@1024,1024B). Runtime 30 seconds [ 126.417172][ T55] block nbd0: Possible stuck request ffff888025977380: control (read@2048,1024B). Runtime 30 seconds [ 126.428132][ T55] block nbd0: Possible stuck request ffff888025977540: control (read@3072,1024B). Runtime 30 seconds [ 126.452358][ T5866] Bluetooth: hci2: connection err: -111 [ 126.828041][ T7496] input: syz0 as /devices/virtual/input/input7 [ 126.941050][ T5908] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 127.126701][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 127.151013][ T7512] __nla_validate_parse: 1 callbacks suppressed [ 127.151028][ T7512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.433'. [ 127.170933][ T5908] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 127.180726][ T7512] netlink: 68 bytes leftover after parsing attributes in process `syz.3.433'. [ 127.223160][ T5908] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 127.252286][ T5908] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 127.286969][ T5908] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 127.300856][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 127.322504][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 127.345651][ T5908] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 127.396931][ T5908] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 127.416660][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.417150][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'. [ 127.424669][ T5908] usb 5-1: Product: syz [ 127.424687][ T5908] usb 5-1: Manufacturer: syz [ 127.424701][ T5908] usb 5-1: SerialNumber: syz [ 127.473412][ T5908] usb 5-1: config 0 descriptor?? [ 127.496403][ T5908] hub 5-1:0.0: bad descriptor, ignoring hub [ 127.510625][ T5908] hub 5-1:0.0: probe with driver hub failed with error -5 [ 127.541876][ T5908] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 127.725952][ T5908] usb 5-1: USB disconnect, device number 11 [ 128.101269][ T7537] gfs2: not a GFS2 filesystem [ 128.266964][ T7545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.283693][ T7545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.329986][ T7548] Can't find a SQUASHFS superblock on rnullb0 [ 128.390533][ T7548] 9pnet_fd: Insufficient options for proto=fd [ 128.415002][ T7551] tipc: Started in network mode [ 128.433791][ T7551] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 128.451537][ T7551] tipc: Enabling of bearer rejected, failed to enable media [ 128.497971][ T7554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.444'. [ 128.535681][ T7554] netlink: 68 bytes leftover after parsing attributes in process `syz.1.444'. [ 128.590990][ T7559] omfs: Invalid superblock (0) [ 128.639283][ T7561] FAULT_INJECTION: forcing a failure. [ 128.639283][ T7561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.658675][ T7561] CPU: 1 UID: 0 PID: 7561 Comm: syz.4.445 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 128.658701][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.658710][ T7561] Call Trace: [ 128.658718][ T7561] [ 128.658725][ T7561] dump_stack_lvl+0x189/0x250 [ 128.658753][ T7561] ? __pfx____ratelimit+0x10/0x10 [ 128.658772][ T7561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.658800][ T7561] ? __pfx__printk+0x10/0x10 [ 128.658823][ T7561] ? __might_fault+0xb0/0x130 [ 128.658858][ T7561] should_fail_ex+0x414/0x560 [ 128.658887][ T7561] _copy_from_user+0x2d/0xb0 [ 128.658911][ T7561] input_event_from_user+0xb2/0x280 [ 128.658935][ T7561] ? __pfx_input_event_from_user+0x10/0x10 [ 128.658962][ T7561] ? input_inject_event+0xbc/0x320 [ 128.658984][ T7561] evdev_write+0x2a6/0x480 [ 128.659013][ T7561] ? __pfx_evdev_write+0x10/0x10 [ 128.659036][ T7561] ? bpf_lsm_file_permission+0x9/0x20 [ 128.659056][ T7561] ? security_file_permission+0x75/0x290 [ 128.659077][ T7561] ? rw_verify_area+0x258/0x650 [ 128.659100][ T7561] ? __pfx_evdev_write+0x10/0x10 [ 128.659123][ T7561] vfs_write+0x27e/0xa90 [ 128.659155][ T7561] ? __pfx_vfs_write+0x10/0x10 [ 128.659181][ T7561] ? __fget_files+0x2a/0x420 [ 128.659202][ T7561] ? __fget_files+0x2a/0x420 [ 128.659218][ T7561] ? __fget_files+0x3a0/0x420 [ 128.659235][ T7561] ? __fget_files+0x2a/0x420 [ 128.659260][ T7561] ksys_write+0x145/0x250 [ 128.659279][ T7561] ? __pfx_ksys_write+0x10/0x10 [ 128.659293][ T7561] ? rcu_is_watching+0x15/0xb0 [ 128.659319][ T7561] ? do_syscall_64+0xbe/0x3b0 [ 128.659342][ T7561] do_syscall_64+0xfa/0x3b0 [ 128.659359][ T7561] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.659377][ T7561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.659394][ T7561] ? clear_bhb_loop+0x60/0xb0 [ 128.659415][ T7561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.659431][ T7561] RIP: 0033:0x7fd3ae18e929 [ 128.659447][ T7561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.659460][ T7561] RSP: 002b:00007fd3aefd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 128.659478][ T7561] RAX: ffffffffffffffda RBX: 00007fd3ae3b6080 RCX: 00007fd3ae18e929 [ 128.659491][ T7561] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000003 [ 128.659502][ T7561] RBP: 00007fd3aefd9090 R08: 0000000000000000 R09: 0000000000000000 [ 128.659513][ T7561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 128.659523][ T7561] R13: 0000000000000000 R14: 00007fd3ae3b6080 R15: 00007ffdeadcda98 [ 128.659552][ T7561] [ 128.919534][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.224936][ T5866] Bluetooth: unknown link type 19 [ 129.230566][ T5866] Bluetooth: hci3: connection err: -111 [ 129.489070][ T7580] block nbd1: server does not support multiple connections per device. [ 129.511004][ T7580] block nbd1: shutting down sockets [ 129.715104][ T7591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.456'. [ 129.747123][ T7591] netlink: 68 bytes leftover after parsing attributes in process `syz.3.456'. [ 129.777750][ T7589] Can't find a SQUASHFS superblock on rnullb0 [ 129.949378][ T7599] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 129.960686][ T7599] VFS: Can't find a romfs filesystem on dev rnullb0. [ 129.960686][ T7599] [ 130.145707][ T5908] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 130.253917][ T7607] syzkaller0: entered allmulticast mode [ 130.315742][ T5908] usb 5-1: Using ep0 maxpacket: 16 [ 130.345969][ T5866] Bluetooth: hci2: Dropping invalid advertising data [ 130.353027][ T5866] Bluetooth: hci2: Dropping invalid advertising data [ 130.365701][ T5866] Bluetooth: hci2: Dropping invalid advertising data [ 130.372506][ T5866] Bluetooth: hci2: Dropping invalid advertising data [ 130.385576][ T5866] Bluetooth: hci2: Malformed LE Event: 0x02 [ 130.392238][ T5908] usb 5-1: unable to get BOS descriptor or descriptor too short [ 130.412530][ T5908] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 130.420230][ T5908] usb 5-1: can't read configurations, error -71 [ 130.716343][ T7616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.467'. [ 130.725370][ T7616] netlink: 68 bytes leftover after parsing attributes in process `syz.2.467'. [ 130.875700][ T984] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 131.038635][ T984] usb 2-1: Using ep0 maxpacket: 16 [ 131.063308][ T984] usb 2-1: unable to get BOS descriptor or descriptor too short [ 131.081905][ T984] usb 2-1: config 0 has an invalid interface number: 201 but max is 0 [ 131.094553][ T984] usb 2-1: config 0 has no interface number 0 [ 131.103989][ T984] usb 2-1: config 0 interface 201 has no altsetting 0 [ 131.104551][ T7630] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.120355][ T984] usb 2-1: New USB device found, idVendor=2040, idProduct=1700, bcdDevice=14.96 [ 131.130765][ T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.143533][ T984] usb 2-1: Product: syz [ 131.148985][ T984] usb 2-1: Manufacturer: syz [ 131.152900][ T7630] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 131.155150][ T984] usb 2-1: SerialNumber: syz [ 131.198181][ T7632] capability: warning: `syz.2.472' uses deprecated v2 capabilities in a way that may be insecure [ 131.207474][ T984] usb 2-1: config 0 descriptor?? [ 131.211627][ T7633] FAULT_INJECTION: forcing a failure. [ 131.211627][ T7633] name failslab, interval 1, probability 0, space 0, times 0 [ 131.244295][ T7633] CPU: 1 UID: 0 PID: 7633 Comm: syz.4.473 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 131.244320][ T7633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.244329][ T7633] Call Trace: [ 131.244337][ T7633] [ 131.244344][ T7633] dump_stack_lvl+0x189/0x250 [ 131.244372][ T7633] ? __pfx____ratelimit+0x10/0x10 [ 131.244392][ T7633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.244414][ T7633] ? __pfx__printk+0x10/0x10 [ 131.244442][ T7633] ? __pfx___might_resched+0x10/0x10 [ 131.244463][ T7633] ? fs_reclaim_acquire+0x7d/0x100 [ 131.244487][ T7633] should_fail_ex+0x414/0x560 [ 131.244523][ T7633] should_failslab+0xa8/0x100 [ 131.244550][ T7633] kmem_cache_alloc_noprof+0x73/0x3c0 [ 131.244572][ T7633] ? __kernfs_new_node+0xd7/0x7e0 [ 131.244598][ T7633] __kernfs_new_node+0xd7/0x7e0 [ 131.244619][ T7633] ? __lock_acquire+0xab9/0xd20 [ 131.244642][ T7633] ? __pfx___kernfs_new_node+0x10/0x10 [ 131.244663][ T7633] ? kernfs_root+0x1c/0x230 [ 131.244691][ T7633] ? kernfs_root+0x1c/0x230 [ 131.244710][ T7633] ? kernfs_root+0x1c/0x230 [ 131.244727][ T7633] ? kernfs_root+0x1c/0x230 [ 131.244752][ T7633] kernfs_new_node+0x102/0x210 [ 131.244778][ T7633] kernfs_create_dir_ns+0x44/0x130 [ 131.244804][ T7633] sysfs_create_dir_ns+0x123/0x280 [ 131.244829][ T7633] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 131.244852][ T7633] ? do_raw_spin_unlock+0x122/0x240 [ 131.244880][ T7633] kobject_add_internal+0x59f/0xb40 [ 131.244911][ T7633] kobject_init_and_add+0x125/0x190 [ 131.244939][ T7633] ? __pfx_kobject_init_and_add+0x10/0x10 [ 131.244969][ T7633] ? __raw_spin_lock_init+0x45/0x100 [ 131.244995][ T7633] iommu_group_alloc+0x1e0/0x3a0 [ 131.245012][ T7633] ? generic_device_group+0x9/0x10 [ 131.245033][ T7633] __iommu_probe_device+0x5b0/0x11f0 [ 131.245062][ T7633] iommu_bus_notifier+0x87/0x2c0 [ 131.245083][ T7633] notifier_call_chain+0x1b6/0x3e0 [ 131.245113][ T7633] blocking_notifier_call_chain+0x6a/0x90 [ 131.245139][ T7633] bus_notify+0x143/0x180 [ 131.245167][ T7633] device_add+0x54d/0xb50 [ 131.245190][ T7633] iommufd_test+0x2f95/0x5170 [ 131.245224][ T7633] ? __pfx_iommufd_test+0x10/0x10 [ 131.245246][ T7633] ? __lock_acquire+0xab9/0xd20 [ 131.245276][ T7633] ? __might_fault+0xb0/0x130 [ 131.245324][ T7633] iommufd_fops_ioctl+0x45e/0x580 [ 131.245356][ T7633] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 131.245385][ T7633] ? __fget_files+0x2a/0x420 [ 131.245409][ T7633] ? __fget_files+0x2a/0x420 [ 131.245429][ T7633] ? bpf_lsm_file_ioctl+0x9/0x20 [ 131.245451][ T7633] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 131.245473][ T7633] __se_sys_ioctl+0xf9/0x170 [ 131.245498][ T7633] do_syscall_64+0xfa/0x3b0 [ 131.245522][ T7633] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.245542][ T7633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.245557][ T7633] ? clear_bhb_loop+0x60/0xb0 [ 131.245577][ T7633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.245592][ T7633] RIP: 0033:0x7fd3ae18e929 [ 131.245607][ T7633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.245621][ T7633] RSP: 002b:00007fd3aefd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.245639][ T7633] RAX: ffffffffffffffda RBX: 00007fd3ae3b6080 RCX: 00007fd3ae18e929 [ 131.245650][ T7633] RDX: 00002000000003c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 131.245660][ T7633] RBP: 00007fd3aefd9090 R08: 0000000000000000 R09: 0000000000000000 [ 131.245671][ T7633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.245680][ T7633] R13: 0000000000000001 R14: 00007fd3ae3b6080 R15: 00007ffdeadcda98 [ 131.245709][ T7633] [ 131.597573][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.637758][ T7633] kobject: kobject_add_internal failed for 2 (error: -12 parent: iommu_groups) [ 131.647939][ T7613] input: syz1 as /devices/virtual/input/input9 [ 131.790901][ T984] smsusb:smsusb_probe: board id=5, interface number 201 [ 131.825462][ T984] usb 2-1: USB disconnect, device number 10 [ 131.845390][ T7647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.477'. [ 132.055337][ T7656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.064349][ T7656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.465631][ T981] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 132.559575][ T7668] __nla_validate_parse: 2 callbacks suppressed [ 132.559592][ T7668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.486'. [ 132.575737][ T7668] netlink: 68 bytes leftover after parsing attributes in process `syz.1.486'. [ 132.627470][ T981] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.658388][ T981] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 132.682003][ T981] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 132.711564][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.736915][ T981] usb 5-1: config 0 descriptor?? [ 132.761107][ T7673] netlink: 'syz.2.488': attribute type 16 has an invalid length. [ 132.798738][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.802910][ T7673] netlink: 48 bytes leftover after parsing attributes in process `syz.2.488'. [ 132.813591][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.870324][ T7679] binder: 7677:7679 unknown command 0 [ 132.878667][ T7673] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.879578][ T7679] binder: 7677:7679 ioctl c0306201 200000000080 returned -22 [ 132.954579][ T5908] usb 5-1: USB disconnect, device number 14 [ 133.060918][ T7687] loop6: detected capacity change from 0 to 524287999 [ 133.402364][ T7697] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.659015][ T7704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.497'. [ 133.698582][ T7704] netlink: 68 bytes leftover after parsing attributes in process `syz.2.497'. [ 134.815296][ T7727] /dev/rnullb0: Can't open blockdev [ 134.944684][ T7731] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.967619][ T7733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.508'. [ 134.997842][ T7733] netlink: 68 bytes leftover after parsing attributes in process `syz.2.508'. [ 135.135028][ T7740] syz.3.509: attempt to access beyond end of device [ 135.135028][ T7740] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 135.185438][ T7740] syz.3.509: attempt to access beyond end of device [ 135.185438][ T7740] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 135.246086][ T7740] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 135.296462][ T7740] syz.3.509: attempt to access beyond end of device [ 135.296462][ T7740] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 135.323458][ T7740] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 135.340601][ T7740] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 135.361585][ T7740] UDF-fs: Scanning with blocksize 512 failed [ 135.403340][ T7740] syz.3.509: attempt to access beyond end of device [ 135.403340][ T7740] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 135.437627][ T7740] syz.3.509: attempt to access beyond end of device [ 135.437627][ T7740] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 135.457562][ T7740] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 135.472769][ T7740] syz.3.509: attempt to access beyond end of device [ 135.472769][ T7740] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 135.496864][ T7740] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 135.535378][ T7740] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 135.555091][ T7740] UDF-fs: Scanning with blocksize 1024 failed [ 135.563025][ T7740] syz.3.509: attempt to access beyond end of device [ 135.563025][ T7740] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 135.580343][ T7740] syz.3.509: attempt to access beyond end of device [ 135.580343][ T7740] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 135.636014][ T7740] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 135.679742][ T7740] syz.3.509: attempt to access beyond end of device [ 135.679742][ T7740] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 135.707722][ T7740] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 135.722495][ T7740] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 135.734723][ T7740] UDF-fs: Scanning with blocksize 2048 failed [ 135.765217][ T7740] syz.3.509: attempt to access beyond end of device [ 135.765217][ T7740] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 135.815086][ T7740] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 135.845749][ T7740] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 135.867355][ T7762] netlink: 24 bytes leftover after parsing attributes in process `syz.4.520'. [ 135.890866][ T7740] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 135.892398][ T7762] netlink: 68 bytes leftover after parsing attributes in process `syz.4.520'. [ 135.900612][ T7740] UDF-fs: Scanning with blocksize 4096 failed [ 135.948589][ T7740] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 136.222617][ T7771] NILFS (rnullb0): couldn't find nilfs on the device [ 136.669455][ T7793] netlink: 68 bytes leftover after parsing attributes in process `syz.4.529'. [ 136.828784][ T7803] FAULT_INJECTION: forcing a failure. [ 136.828784][ T7803] name failslab, interval 1, probability 0, space 0, times 0 [ 136.879591][ T7803] CPU: 1 UID: 0 PID: 7803 Comm: syz.2.533 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 136.879616][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.879625][ T7803] Call Trace: [ 136.879632][ T7803] [ 136.879638][ T7803] dump_stack_lvl+0x189/0x250 [ 136.879665][ T7803] ? __pfx____ratelimit+0x10/0x10 [ 136.879684][ T7803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.879714][ T7803] ? __pfx__printk+0x10/0x10 [ 136.879742][ T7803] ? __pfx___might_resched+0x10/0x10 [ 136.879761][ T7803] ? fs_reclaim_acquire+0x7d/0x100 [ 136.879783][ T7803] should_fail_ex+0x414/0x560 [ 136.879809][ T7803] should_failslab+0xa8/0x100 [ 136.879833][ T7803] kmem_cache_alloc_noprof+0x73/0x3c0 [ 136.879854][ T7803] ? security_inode_alloc+0x39/0x330 [ 136.879880][ T7803] security_inode_alloc+0x39/0x330 [ 136.879905][ T7803] inode_init_always_gfp+0x9ed/0xdc0 [ 136.879928][ T7803] ? __pfx_sock_alloc_inode+0x10/0x10 [ 136.879945][ T7803] alloc_inode+0x82/0x1b0 [ 136.879964][ T7803] __sock_create+0x12d/0x9f0 [ 136.879984][ T7803] ? __pfx_fput_close_sync+0x10/0x10 [ 136.880008][ T7803] __sys_socket+0xd7/0x1b0 [ 136.880030][ T7803] __x64_sys_socket+0x7a/0x90 [ 136.880048][ T7803] do_syscall_64+0xfa/0x3b0 [ 136.880066][ T7803] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.880083][ T7803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.880099][ T7803] ? clear_bhb_loop+0x60/0xb0 [ 136.880120][ T7803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.880135][ T7803] RIP: 0033:0x7f7e1f990847 [ 136.880150][ T7803] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.880163][ T7803] RSP: 002b:00007f7e207d2eb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 136.880181][ T7803] RAX: ffffffffffffffda RBX: 00007f7e207d2f80 RCX: 00007f7e1f990847 [ 136.880192][ T7803] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 136.880201][ T7803] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.880209][ T7803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 136.880219][ T7803] R13: 0000000000000048 R14: 00007f7e207d2fa0 R15: 0000200000000380 [ 136.880244][ T7803] [ 136.880636][ T7803] socket: no more sockets [ 137.144812][ T7812] 9p: Unknown uid 00000000004294967295 [ 137.233897][ T7817] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 137.246116][ T7817] UDF-fs: Scanning with blocksize 4096 failed [ 137.473755][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.487135][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.600342][ T7828] Mount JFS Failure: -22 [ 137.675862][ T5908] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 137.822693][ T7843] i2c i2c-0: Invalid block write size 34 [ 137.830832][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 137.836495][ T7844] i2c i2c-0: Invalid block write size 34 [ 137.846537][ T5908] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 137.865368][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.874024][ T5908] usb 5-1: Product: syz [ 137.878328][ T5908] usb 5-1: Manufacturer: syz [ 137.882964][ T5908] usb 5-1: SerialNumber: syz [ 137.894571][ T5908] usb 5-1: config 0 descriptor?? [ 138.114611][ T5908] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 138.282979][ T7855] __nla_validate_parse: 5 callbacks suppressed [ 138.282995][ T7855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.553'. [ 138.305213][ T7855] netlink: 68 bytes leftover after parsing attributes in process `syz.3.553'. [ 138.475646][ T984] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 138.747959][ T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.769215][ T984] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 138.795720][ T984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.828213][ T984] usb 3-1: config 0 descriptor?? [ 138.853079][ T7870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.859307][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.560'. [ 138.865346][ T7870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.892219][ T7870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.901105][ T7870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.242247][ T984] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 139.258141][ T984] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0006/input/input10 [ 139.363262][ T984] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 139.551945][ T7875] netlink: 24 bytes leftover after parsing attributes in process `syz.3.562'. [ 139.561528][ T7875] netlink: 68 bytes leftover after parsing attributes in process `syz.3.562'. [ 139.706169][ T7853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.725217][ T7853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.769769][ T7882] : entered promiscuous mode [ 139.946070][ T5908] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 139.974986][ T5908] usb 5-1: USB disconnect, device number 15 [ 140.080438][ T10] usb 3-1: USB disconnect, device number 12 [ 140.299856][ T7896] netlink: 24 bytes leftover after parsing attributes in process `syz.3.571'. [ 140.311677][ T7896] netlink: 68 bytes leftover after parsing attributes in process `syz.3.571'. [ 140.519252][ T7901] netlink: 372 bytes leftover after parsing attributes in process `syz.4.573'. [ 140.795783][ T7911] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 140.954616][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.580'. [ 140.979779][ T7917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.580'. [ 140.995325][ T7919] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 141.004876][ T7919] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 141.297961][ T7934] netlink: 'syz.2.587': attribute type 29 has an invalid length. [ 141.354820][ T7936] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 141.361819][ T7936] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 141.857981][ T7955] hfs: can't find a HFS filesystem on dev rnullb0 [ 142.574490][ T7984] FAULT_INJECTION: forcing a failure. [ 142.574490][ T7984] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 142.601074][ T7984] CPU: 0 UID: 0 PID: 7984 Comm: syz.3.606 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 142.601099][ T7984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.601110][ T7984] Call Trace: [ 142.601117][ T7984] [ 142.601125][ T7984] dump_stack_lvl+0x189/0x250 [ 142.601153][ T7984] ? __pfx____ratelimit+0x10/0x10 [ 142.601174][ T7984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.601204][ T7984] ? __pfx__printk+0x10/0x10 [ 142.601234][ T7984] ? fs_reclaim_acquire+0x7d/0x100 [ 142.601263][ T7984] should_fail_ex+0x414/0x560 [ 142.601292][ T7984] prepare_alloc_pages+0x213/0x610 [ 142.601319][ T7984] __alloc_frozen_pages_noprof+0x123/0x370 [ 142.601343][ T7984] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 142.601378][ T7984] ? policy_nodemask+0x27c/0x720 [ 142.601400][ T7984] ? __lock_acquire+0xab9/0xd20 [ 142.601425][ T7984] alloc_pages_mpol+0x232/0x4a0 [ 142.601455][ T7984] vma_alloc_folio_noprof+0xe4/0x200 [ 142.601482][ T7984] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 142.601517][ T7984] folio_prealloc+0x30/0x180 [ 142.601544][ T7984] __handle_mm_fault+0x2ab9/0x5440 [ 142.601582][ T7984] ? __pfx___handle_mm_fault+0x10/0x10 [ 142.601618][ T7984] ? follow_page_pte+0x7ef/0x13e0 [ 142.601652][ T7984] handle_mm_fault+0x40a/0x8e0 [ 142.601679][ T7984] __get_user_pages+0x1699/0x2ce0 [ 142.601693][ T7984] ? __lock_acquire+0xab9/0xd20 [ 142.601735][ T7984] __gup_longterm_locked+0xde9/0x1660 [ 142.601762][ T7984] ? sanity_check_pinned_pages+0x1241/0x1300 [ 142.601780][ T7984] ? gup_fast_fallback+0x195f/0x2010 [ 142.601802][ T7984] gup_fast_fallback+0x1e6a/0x2010 [ 142.601846][ T7984] ? __pfx_gup_fast_fallback+0x10/0x10 [ 142.601871][ T7984] ? __lock_acquire+0xab9/0xd20 [ 142.601891][ T7984] ? pin_user_pages_fast+0x4d/0xb0 [ 142.601912][ T7984] iov_iter_extract_pages+0x35a/0x5e0 [ 142.601941][ T7984] bio_iov_iter_get_pages+0x49b/0x11c0 [ 142.601963][ T7984] ? bio_associate_blkg_from_css+0xb3/0xd10 [ 142.602010][ T7984] ? bio_associate_blkg+0x6d/0x230 [ 142.602034][ T7984] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 142.602060][ T7984] ? blk_start_plug+0x6f/0x1b0 [ 142.602082][ T7984] __blkdev_direct_IO+0x5f1/0xf00 [ 142.602128][ T7984] ? __pfx___blkdev_direct_IO+0x10/0x10 [ 142.602157][ T7984] ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0 [ 142.602174][ T7984] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 142.602199][ T7984] ? iov_npages+0x170/0x290 [ 142.602222][ T7984] blkdev_direct_IO+0x1162/0x16f0 [ 142.602254][ T7984] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 142.602278][ T7984] ? current_time+0x222/0x370 [ 142.602302][ T7984] ? __pfx_current_time+0x10/0x10 [ 142.602319][ T7984] ? aa_file_perm+0x3ed/0x11b0 [ 142.602361][ T7984] ? atime_needs_update+0x56b/0x6d0 [ 142.602386][ T7984] ? touch_atime+0xf1/0x6d0 [ 142.602403][ T7984] ? __pfx_aa_file_perm+0x10/0x10 [ 142.602425][ T7984] ? kiocb_write_and_wait+0xad/0x1b0 [ 142.602446][ T7984] blkdev_read_iter+0x23d/0x440 [ 142.602474][ T7984] do_iter_readv_writev+0x56b/0x7f0 [ 142.602494][ T7984] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 142.602509][ T7984] ? common_file_perm+0x1b5/0x230 [ 142.602534][ T7984] ? bpf_lsm_file_permission+0x9/0x20 [ 142.602554][ T7984] ? security_file_permission+0x75/0x290 [ 142.602569][ T7984] ? rw_verify_area+0x258/0x650 [ 142.602590][ T7984] vfs_readv+0x253/0x850 [ 142.602610][ T7984] ? __pfx_vfs_readv+0x10/0x10 [ 142.602636][ T7984] ? __fget_files+0x2a/0x420 [ 142.602653][ T7984] ? __fget_files+0x3a0/0x420 [ 142.602665][ T7984] ? __fget_files+0x2a/0x420 [ 142.602684][ T7984] __se_sys_preadv2+0x179/0x290 [ 142.602700][ T7984] ? __pfx___se_sys_preadv2+0x10/0x10 [ 142.602718][ T7984] ? do_syscall_64+0xbe/0x3b0 [ 142.602732][ T7984] ? __x64_sys_preadv2+0x20/0xc0 [ 142.602746][ T7984] do_syscall_64+0xfa/0x3b0 [ 142.602760][ T7984] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.602773][ T7984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.602785][ T7984] ? clear_bhb_loop+0x60/0xb0 [ 142.602801][ T7984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.602814][ T7984] RIP: 0033:0x7f11e1f8e929 [ 142.602827][ T7984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.602837][ T7984] RSP: 002b:00007f11e2ecb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 142.602852][ T7984] RAX: ffffffffffffffda RBX: 00007f11e21b5fa0 RCX: 00007f11e1f8e929 [ 142.602862][ T7984] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 142.602869][ T7984] RBP: 00007f11e2ecb090 R08: 0000000000000000 R09: 0000000000000000 [ 142.602877][ T7984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.602884][ T7984] R13: 0000000000000000 R14: 00007f11e21b5fa0 R15: 00007ffdc0650528 [ 142.602905][ T7984] [ 143.346342][ T8001] FAULT_INJECTION: forcing a failure. [ 143.346342][ T8001] name failslab, interval 1, probability 0, space 0, times 0 [ 143.361944][ T8001] CPU: 0 UID: 0 PID: 8001 Comm: syz.2.610 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 143.361968][ T8001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.361978][ T8001] Call Trace: [ 143.361985][ T8001] [ 143.361992][ T8001] dump_stack_lvl+0x189/0x250 [ 143.362018][ T8001] ? __pfx____ratelimit+0x10/0x10 [ 143.362048][ T8001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.362070][ T8001] ? __pfx__printk+0x10/0x10 [ 143.362094][ T8001] ? __pfx___might_resched+0x10/0x10 [ 143.362113][ T8001] ? fs_reclaim_acquire+0x7d/0x100 [ 143.362137][ T8001] should_fail_ex+0x414/0x560 [ 143.362165][ T8001] should_failslab+0xa8/0x100 [ 143.362191][ T8001] __kmalloc_noprof+0xcb/0x4f0 [ 143.362213][ T8001] ? tomoyo_encode+0x28b/0x550 [ 143.362240][ T8001] tomoyo_encode+0x28b/0x550 [ 143.362268][ T8001] tomoyo_realpath_from_path+0x58d/0x5d0 [ 143.362302][ T8001] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 143.362323][ T8001] tomoyo_path_number_perm+0x1e8/0x5a0 [ 143.362346][ T8001] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 143.362384][ T8001] ? __lock_acquire+0xab9/0xd20 [ 143.362423][ T8001] ? __fget_files+0x2a/0x420 [ 143.362444][ T8001] ? __fget_files+0x2a/0x420 [ 143.362459][ T8001] ? __fget_files+0x3a0/0x420 [ 143.362475][ T8001] ? __fget_files+0x2a/0x420 [ 143.362497][ T8001] security_file_ioctl+0xcb/0x2d0 [ 143.362518][ T8001] __se_sys_ioctl+0x47/0x170 [ 143.362544][ T8001] do_syscall_64+0xfa/0x3b0 [ 143.362560][ T8001] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.362578][ T8001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.362593][ T8001] ? clear_bhb_loop+0x60/0xb0 [ 143.362614][ T8001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.362628][ T8001] RIP: 0033:0x7f7e1f98e929 [ 143.362643][ T8001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.362658][ T8001] RSP: 002b:00007f7e207d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.362677][ T8001] RAX: ffffffffffffffda RBX: 00007f7e1fbb5fa0 RCX: 00007f7e1f98e929 [ 143.362690][ T8001] RDX: 0000200000000080 RSI: 00000000c0285629 RDI: 0000000000000004 [ 143.362701][ T8001] RBP: 00007f7e207d4090 R08: 0000000000000000 R09: 0000000000000000 [ 143.362712][ T8001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.362722][ T8001] R13: 0000000000000000 R14: 00007f7e1fbb5fa0 R15: 00007ffdd2cee958 [ 143.362750][ T8001] [ 143.362769][ T8001] ERROR: Out of memory at tomoyo_realpath_from_path. [ 143.614698][ T8003] __nla_validate_parse: 9 callbacks suppressed [ 143.614715][ T8003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.612'. [ 143.660833][ T8003] netlink: 68 bytes leftover after parsing attributes in process `syz.3.612'. [ 144.292665][ T8034] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 144.341031][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.623'. [ 144.377503][ T8036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.623'. [ 144.406914][ T8032] kvm: pic: non byte write [ 144.422211][ T8036] netlink: 68 bytes leftover after parsing attributes in process `syz.4.623'. [ 144.624448][ T30] audit: type=1800 audit(1752025075.326:4): pid=8050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.628" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 145.067180][ T5908] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 145.230828][ T5908] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 145.240031][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.248065][ T5908] usb 5-1: Product: syz [ 145.252253][ T5908] usb 5-1: Manufacturer: syz [ 145.256990][ T5908] usb 5-1: SerialNumber: syz [ 145.263296][ T5908] usb 5-1: config 0 descriptor?? [ 145.295678][ T984] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 145.353282][ T8069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.635'. [ 145.365080][ T8069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.635'. [ 145.374937][ T8069] netlink: 68 bytes leftover after parsing attributes in process `syz.1.635'. [ 145.446341][ T984] usb 3-1: Using ep0 maxpacket: 32 [ 145.455344][ T984] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 145.473459][ T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 145.488332][ T8060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.497241][ T8060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.522474][ T5908] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 145.534776][ T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 145.548142][ T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 145.555954][ T5908] asix 5-1:0.0: probe with driver asix failed with error -71 [ 145.564820][ T984] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 145.597795][ T5908] usb 5-1: USB disconnect, device number 16 [ 145.600687][ T984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.649247][ T984] usb 3-1: Product: syz [ 145.653453][ T984] usb 3-1: Manufacturer: syz [ 145.680654][ T984] usb 3-1: SerialNumber: syz [ 145.694969][ T984] usb 3-1: config 0 descriptor?? [ 146.175310][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.644'. [ 146.219542][ T8090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.644'. [ 146.284647][ T8096] netlink: 'syz.3.647': attribute type 21 has an invalid length. [ 146.447951][ T8103] : entered promiscuous mode [ 146.544484][ T8101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.653535][ T8109] omfs: Invalid superblock (0) [ 146.774334][ T8114] hpfs: Bad magic ... probably not HPFS [ 146.932789][ T8119] netlink: 'syz.3.656': attribute type 4 has an invalid length. [ 147.278755][ T8130] openvswitch: netlink: Missing key (keys=44, expected=200000) [ 147.308818][ T8130] gfs2: not a GFS2 filesystem [ 147.422258][ T8134] netlink: 'syz.1.662': attribute type 21 has an invalid length. [ 148.053973][ T5922] usb 3-1: USB disconnect, device number 13 [ 148.146022][ T984] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 148.317805][ T984] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.328549][ T984] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 148.358266][ T984] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 148.371020][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.384908][ T984] usb 5-1: Product: syz [ 148.400381][ T984] usb 5-1: Manufacturer: syz [ 148.415215][ T984] usb 5-1: SerialNumber: syz [ 148.429676][ T984] usb 5-1: config 0 descriptor?? [ 148.430663][ T8173] /dev/rnullb0: Can't open blockdev [ 148.666091][ T8151] No buffer was provided with the request [ 148.862281][ T5922] usb 5-1: USB disconnect, device number 17 [ 149.002165][ T8183] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 149.058775][ T8187] netlink: 'syz.1.682': attribute type 21 has an invalid length. [ 149.070318][ T8187] __nla_validate_parse: 10 callbacks suppressed [ 149.070333][ T8187] netlink: 128 bytes leftover after parsing attributes in process `syz.1.682'. [ 149.113696][ T8187] netlink: 'syz.1.682': attribute type 5 has an invalid length. [ 149.124680][ T8187] netlink: 3 bytes leftover after parsing attributes in process `syz.1.682'. [ 149.430612][ T8196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'. [ 149.459637][ T8198] netlink: 40 bytes leftover after parsing attributes in process `syz.3.687'. [ 149.468680][ T984] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 149.545240][ T8201] openvswitch: netlink: IPv4 tunnel dst address is zero [ 149.636132][ T984] usb 2-1: Using ep0 maxpacket: 32 [ 149.643477][ T984] usb 2-1: unable to get BOS descriptor or descriptor too short [ 149.652754][ T984] usb 2-1: config 5 has an invalid interface number: 103 but max is 0 [ 149.665581][ T984] usb 2-1: config 5 has no interface number 0 [ 149.671707][ T984] usb 2-1: config 5 interface 103 altsetting 4 bulk endpoint 0x5 has invalid maxpacket 1023 [ 149.693263][ T984] usb 2-1: config 5 interface 103 altsetting 4 bulk endpoint 0xC has invalid maxpacket 16 [ 149.704131][ T984] usb 2-1: config 5 interface 103 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 149.735214][ T984] usb 2-1: config 5 interface 103 has no altsetting 0 [ 149.758590][ T984] usb 2-1: New USB device found, idVendor=0711, idProduct=0230, bcdDevice=3c.61 [ 149.768429][ T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.778256][ T984] usb 2-1: Product: syz [ 149.782589][ T984] usb 2-1: Manufacturer: syz [ 149.788824][ T984] usb 2-1: SerialNumber: syz [ 149.795453][ T8209] ./cgroup: Can't lookup blockdev [ 149.836526][ T8191] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 149.864099][ T8191] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 149.871457][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 150.128960][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 150.157975][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 150.176899][ T8214] nbd: must specify an index to disconnect [ 150.184751][ T8214] hpfs: Bad magic ... probably not HPFS [ 150.197488][ T10] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 150.209986][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.228448][ T8190] block nbd1: shutting down sockets [ 150.262553][ T10] usb 5-1: Product: syz [ 150.270379][ T10] usb 5-1: Manufacturer: syz [ 150.286622][ T10] usb 5-1: SerialNumber: syz [ 150.292609][ T984] mct_u232 2-1:5.103: MCT U232 converter detected [ 150.317054][ T984] mct_u232 ttyUSB0: expected endpoint missing [ 150.345983][ T10] usb 5-1: config 0 descriptor?? [ 150.362610][ T984] usb 2-1: USB disconnect, device number 11 [ 150.378539][ T10] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 150.405022][ T984] mct_u232 2-1:5.103: device disconnected [ 150.422665][ T10] usb 5-1: Detected FT232R [ 150.577643][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 150.746023][ T8226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.698'. [ 150.806497][ T10] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 151.020545][ T8201] netlink: 112 bytes leftover after parsing attributes in process `syz.4.688'. [ 151.022488][ T5922] usb 5-1: USB disconnect, device number 18 [ 151.041417][ T5922] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 151.043115][ T5922] ftdi_sio 5-1:0.0: device disconnected [ 151.481682][ T8239] FAULT_INJECTION: forcing a failure. [ 151.481682][ T8239] name failslab, interval 1, probability 0, space 0, times 0 [ 151.496812][ T8239] CPU: 0 UID: 0 PID: 8239 Comm: syz.1.703 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 151.496838][ T8239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.496849][ T8239] Call Trace: [ 151.496856][ T8239] [ 151.496863][ T8239] dump_stack_lvl+0x189/0x250 [ 151.496891][ T8239] ? __pfx____ratelimit+0x10/0x10 [ 151.496912][ T8239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.496934][ T8239] ? __pfx__printk+0x10/0x10 [ 151.496960][ T8239] ? __pfx___might_resched+0x10/0x10 [ 151.496981][ T8239] ? fs_reclaim_acquire+0x7d/0x100 [ 151.497004][ T8239] should_fail_ex+0x414/0x560 [ 151.497033][ T8239] should_failslab+0xa8/0x100 [ 151.497059][ T8239] __kmalloc_noprof+0xcb/0x4f0 [ 151.497081][ T8239] ? tomoyo_encode+0x28b/0x550 [ 151.497109][ T8239] tomoyo_encode+0x28b/0x550 [ 151.497138][ T8239] tomoyo_realpath_from_path+0x58d/0x5d0 [ 151.497164][ T8239] ? tomoyo_domain+0xd9/0x130 [ 151.497193][ T8239] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 151.497214][ T8239] tomoyo_path_number_perm+0x1e8/0x5a0 [ 151.497237][ T8239] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 151.497276][ T8239] ? __lock_acquire+0xab9/0xd20 [ 151.497317][ T8239] ? __fget_files+0x2a/0x420 [ 151.497339][ T8239] ? __fget_files+0x2a/0x420 [ 151.497356][ T8239] ? __fget_files+0x3a0/0x420 [ 151.497372][ T8239] ? __fget_files+0x2a/0x420 [ 151.497395][ T8239] security_file_ioctl+0xcb/0x2d0 [ 151.497416][ T8239] __se_sys_ioctl+0x47/0x170 [ 151.497442][ T8239] do_syscall_64+0xfa/0x3b0 [ 151.497460][ T8239] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.497478][ T8239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.497502][ T8239] ? clear_bhb_loop+0x60/0xb0 [ 151.497524][ T8239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.497541][ T8239] RIP: 0033:0x7fc56978e929 [ 151.497557][ T8239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.497572][ T8239] RSP: 002b:00007fc56a5bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.497592][ T8239] RAX: ffffffffffffffda RBX: 00007fc5699b5fa0 RCX: 00007fc56978e929 [ 151.497605][ T8239] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 151.497617][ T8239] RBP: 00007fc56a5bb090 R08: 0000000000000000 R09: 0000000000000000 [ 151.497628][ T8239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.497638][ T8239] R13: 0000000000000000 R14: 00007fc5699b5fa0 R15: 00007ffc970f9f28 [ 151.497662][ T8239] [ 151.497682][ T8239] ERROR: Out of memory at tomoyo_realpath_from_path. [ 151.955215][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.707'. [ 151.982295][ T8252] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 152.360527][ T8265] netlink: 80 bytes leftover after parsing attributes in process `syz.2.712'. [ 152.572099][ T8270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.612212][ T8270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.751108][ T8275] netlink: 'syz.2.716': attribute type 10 has an invalid length. [ 152.789705][ T8275] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 152.801220][ T8274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.214641][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.720'. [ 153.812072][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.731'. [ 153.888676][ T5866] Bluetooth: hci2: link tx timeout [ 153.894235][ T5866] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.001172][ T8320] qnx4: no qnx4 filesystem (no root dir). [ 154.308595][ T5922] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 154.452262][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 154.461587][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 154.475862][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 154.488141][ T5922] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 154.498661][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.510242][ T5922] usb 5-1: config 0 descriptor?? [ 154.519773][ T5922] gspca_main: sq930x-2.14.0 probing 041e:403c [ 154.617542][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 154.636247][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 154.656350][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 154.672071][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 154.697356][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.705373][ T10] usb 2-1: Product: syz [ 154.717287][ T10] usb 2-1: Manufacturer: syz [ 154.724960][ T10] usb 2-1: SerialNumber: syz [ 154.725024][ T51] Bluetooth: hci3: connection err: -111 [ 154.739980][ T10] usb 2-1: config 0 descriptor?? [ 154.894631][ T8351] FAT-fs (rnullb0): bogus number of reserved sectors [ 154.905047][ T8351] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 154.961210][ T10] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 154.973092][ T8354] FAULT_INJECTION: forcing a failure. [ 154.973092][ T8354] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 154.987370][ T8354] CPU: 1 UID: 0 PID: 8354 Comm: syz.2.748 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 154.987394][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.987404][ T8354] Call Trace: [ 154.987411][ T8354] [ 154.987418][ T8354] dump_stack_lvl+0x189/0x250 [ 154.987450][ T8354] ? __pfx____ratelimit+0x10/0x10 [ 154.987470][ T8354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.987492][ T8354] ? __pfx__printk+0x10/0x10 [ 154.987517][ T8354] ? fs_reclaim_acquire+0x7d/0x100 [ 154.987544][ T8354] should_fail_ex+0x414/0x560 [ 154.987573][ T8354] prepare_alloc_pages+0x213/0x610 [ 154.987599][ T8354] __alloc_frozen_pages_noprof+0x123/0x370 [ 154.987623][ T8354] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 154.987652][ T8354] ? policy_nodemask+0x27c/0x720 [ 154.987674][ T8354] ? __lock_acquire+0xab9/0xd20 [ 154.987698][ T8354] alloc_pages_mpol+0x232/0x4a0 [ 154.987728][ T8354] vma_alloc_folio_noprof+0xe4/0x200 [ 154.987749][ T8354] ? trace_ma_write+0x87/0x1f0 [ 154.987767][ T8354] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 154.987804][ T8354] folio_prealloc+0x30/0x180 [ 154.987830][ T8354] __handle_mm_fault+0x2ab9/0x5440 [ 154.987864][ T8354] ? __pfx___handle_mm_fault+0x10/0x10 [ 154.987896][ T8354] ? follow_page_pte+0x7ef/0x13e0 [ 154.987926][ T8354] handle_mm_fault+0x40a/0x8e0 [ 154.987958][ T8354] __get_user_pages+0x1699/0x2ce0 [ 154.987978][ T8354] ? __lock_acquire+0xab9/0xd20 [ 154.988030][ T8354] __gup_longterm_locked+0xde9/0x1660 [ 154.988063][ T8354] ? sanity_check_pinned_pages+0x1241/0x1300 [ 154.988087][ T8354] ? gup_fast_fallback+0x195f/0x2010 [ 154.988112][ T8354] gup_fast_fallback+0x1e6a/0x2010 [ 154.988172][ T8354] ? __pfx_gup_fast_fallback+0x10/0x10 [ 154.988200][ T8354] ? __lock_acquire+0xab9/0xd20 [ 154.988222][ T8354] ? pin_user_pages_fast+0x4d/0xb0 [ 154.988247][ T8354] iov_iter_extract_pages+0x35a/0x5e0 [ 154.988277][ T8354] bio_iov_iter_get_pages+0x49b/0x11c0 [ 154.988299][ T8354] ? bio_associate_blkg_from_css+0xb3/0xd10 [ 154.988337][ T8354] ? bio_associate_blkg+0x6d/0x230 [ 154.988359][ T8354] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 154.988386][ T8354] ? blk_start_plug+0x6f/0x1b0 [ 154.988408][ T8354] __blkdev_direct_IO+0x5f1/0xf00 [ 154.988453][ T8354] ? __pfx___blkdev_direct_IO+0x10/0x10 [ 154.988482][ T8354] ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0 [ 154.988499][ T8354] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 154.988523][ T8354] ? iov_npages+0x170/0x290 [ 154.988546][ T8354] blkdev_direct_IO+0x1162/0x16f0 [ 154.988578][ T8354] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 154.988601][ T8354] ? current_time+0x222/0x370 [ 154.988624][ T8354] ? __pfx_current_time+0x10/0x10 [ 154.988643][ T8354] ? aa_file_perm+0x3ed/0x11b0 [ 154.988677][ T8354] ? atime_needs_update+0x56b/0x6d0 [ 154.988701][ T8354] ? touch_atime+0xf1/0x6d0 [ 154.988720][ T8354] ? __pfx_aa_file_perm+0x10/0x10 [ 154.988744][ T8354] ? kiocb_write_and_wait+0xad/0x1b0 [ 154.988765][ T8354] blkdev_read_iter+0x23d/0x440 [ 154.988797][ T8354] do_iter_readv_writev+0x56b/0x7f0 [ 154.988818][ T8354] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 154.988832][ T8354] ? common_file_perm+0x1b5/0x230 [ 154.988857][ T8354] ? bpf_lsm_file_permission+0x9/0x20 [ 154.988877][ T8354] ? security_file_permission+0x75/0x290 [ 154.988896][ T8354] ? rw_verify_area+0x258/0x650 [ 154.988923][ T8354] vfs_readv+0x253/0x850 [ 154.988946][ T8354] ? __pfx_vfs_readv+0x10/0x10 [ 154.988980][ T8354] ? __fget_files+0x2a/0x420 [ 154.989004][ T8354] ? __fget_files+0x3a0/0x420 [ 154.989021][ T8354] ? __fget_files+0x2a/0x420 [ 154.989048][ T8354] __se_sys_preadv2+0x179/0x290 [ 154.989068][ T8354] ? __pfx___se_sys_preadv2+0x10/0x10 [ 154.989092][ T8354] ? do_syscall_64+0xbe/0x3b0 [ 154.989110][ T8354] ? __x64_sys_preadv2+0x20/0xc0 [ 154.989135][ T8354] do_syscall_64+0xfa/0x3b0 [ 154.989155][ T8354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.989171][ T8354] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 154.989188][ T8354] ? clear_bhb_loop+0x60/0xb0 [ 154.989208][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.989224][ T8354] RIP: 0033:0x7f7e1f98e929 [ 154.989239][ T8354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.989253][ T8354] RSP: 002b:00007f7e207d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 154.989272][ T8354] RAX: ffffffffffffffda RBX: 00007f7e1fbb5fa0 RCX: 00007f7e1f98e929 [ 154.989283][ T8354] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 154.989295][ T8354] RBP: 00007f7e207d4090 R08: 0000000000000000 R09: 0000000000000000 [ 154.989306][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.989316][ T8354] R13: 0000000000000000 R14: 00007f7e1fbb5fa0 R15: 00007ffdd2cee958 [ 154.989346][ T8354] [ 155.505665][ T5922] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 155.511680][ T5922] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 155.616890][ T5922] usb 2-1: USB disconnect, device number 12 [ 155.855652][ T984] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 155.906152][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 155.966645][ T8372] netlink: 116 bytes leftover after parsing attributes in process `syz.3.753'. [ 155.980775][ T8371] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 155.994657][ T8371] XFS (rnullb0): Invalid superblock magic number [ 156.036023][ T984] usb 3-1: Using ep0 maxpacket: 16 [ 156.049554][ T984] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.073067][ T30] audit: type=1326 audit(1752025086.786:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8370 comm="syz.3.753" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11e1f8e929 code=0x0 [ 156.094723][ T984] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.108032][ T984] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.117694][ T984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.125826][ T984] usb 3-1: Product: syz [ 156.130082][ T984] usb 3-1: Manufacturer: syz [ 156.134680][ T984] usb 3-1: SerialNumber: syz [ 156.214264][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.754'. [ 156.303526][ T8383] input: syz0 as /devices/virtual/input/input11 [ 156.358468][ T984] usb 3-1: 0:2 : does not exist [ 156.371071][ T984] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 156.448613][ T984] usb 3-1: USB disconnect, device number 14 [ 156.489182][ T55] block nbd0: Possible stuck request ffff888025977000: control (read@0,1024B). Runtime 60 seconds [ 156.500566][ T55] block nbd0: Possible stuck request ffff8880259771c0: control (read@1024,1024B). Runtime 60 seconds [ 156.514673][ T55] block nbd0: Possible stuck request ffff888025977380: control (read@2048,1024B). Runtime 60 seconds [ 156.525458][ T6660] udevd[6660]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.527418][ T55] block nbd0: Possible stuck request ffff888025977540: control (read@3072,1024B). Runtime 60 seconds [ 156.593406][ T8387] netlink: 'syz.1.757': attribute type 3 has an invalid length. [ 156.601224][ T8387] netlink: 'syz.1.757': attribute type 4 has an invalid length. [ 156.609377][ T8387] netlink: 'syz.1.757': attribute type 5 has an invalid length. [ 156.617534][ T8387] netlink: 'syz.1.757': attribute type 6 has an invalid length. [ 156.625410][ T8387] netlink: 'syz.1.757': attribute type 7 has an invalid length. [ 156.633261][ T8387] netlink: 'syz.1.757': attribute type 7 has an invalid length. [ 156.641094][ T8387] netlink: 12902 bytes leftover after parsing attributes in process `syz.1.757'. [ 156.971468][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 157.068484][ T984] usb 5-1: USB disconnect, device number 19 [ 157.110403][ T5889] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 157.190475][ T8404] .: Can't lookup blockdev [ 157.263860][ T8406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.764'. [ 157.275691][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 157.287195][ T5889] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 157.296703][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.312601][ T5889] usb 2-1: config 0 descriptor?? [ 157.410472][ T8411] tipc: Enabling of bearer rejected, failed to enable media [ 157.527718][ T5889] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 157.547994][ T30] audit: type=1804 audit(1752025088.266:6): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.760" name="/newroot/194/file0" dev="tmpfs" ino=1039 res=1 errno=0 [ 157.570141][ T5889] asix 2-1:0.0: probe with driver asix failed with error -32 [ 157.592915][ T8416] FAULT_INJECTION: forcing a failure. [ 157.592915][ T8416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.620926][ T5895] usb 2-1: USB disconnect, device number 13 [ 157.627647][ T8416] CPU: 1 UID: 0 PID: 8416 Comm: syz.4.768 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 157.627670][ T8416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.627680][ T8416] Call Trace: [ 157.627687][ T8416] [ 157.627695][ T8416] dump_stack_lvl+0x189/0x250 [ 157.627722][ T8416] ? __pfx____ratelimit+0x10/0x10 [ 157.627742][ T8416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.627764][ T8416] ? __pfx__printk+0x10/0x10 [ 157.627787][ T8416] ? __might_fault+0xb0/0x130 [ 157.627823][ T8416] should_fail_ex+0x414/0x560 [ 157.627852][ T8416] _copy_from_user+0x2d/0xb0 [ 157.627875][ T8416] input_event_from_user+0xb2/0x280 [ 157.627900][ T8416] ? __pfx_input_event_from_user+0x10/0x10 [ 157.627928][ T8416] ? input_inject_event+0xbc/0x320 [ 157.627950][ T8416] evdev_write+0x2a6/0x480 [ 157.627979][ T8416] ? __pfx_evdev_write+0x10/0x10 [ 157.628002][ T8416] ? bpf_lsm_file_permission+0x9/0x20 [ 157.628023][ T8416] ? security_file_permission+0x75/0x290 [ 157.628045][ T8416] ? rw_verify_area+0x258/0x650 [ 157.628068][ T8416] ? __pfx_evdev_write+0x10/0x10 [ 157.628091][ T8416] vfs_write+0x27e/0xa90 [ 157.628124][ T8416] ? __pfx_vfs_write+0x10/0x10 [ 157.628150][ T8416] ? __fget_files+0x2a/0x420 [ 157.628172][ T8416] ? __fget_files+0x2a/0x420 [ 157.628189][ T8416] ? __fget_files+0x3a0/0x420 [ 157.628205][ T8416] ? __fget_files+0x2a/0x420 [ 157.628232][ T8416] ksys_write+0x145/0x250 [ 157.628250][ T8416] ? __pfx_ksys_write+0x10/0x10 [ 157.628262][ T8416] ? rcu_is_watching+0x15/0xb0 [ 157.628288][ T8416] ? do_syscall_64+0xbe/0x3b0 [ 157.628311][ T8416] do_syscall_64+0xfa/0x3b0 [ 157.628329][ T8416] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.628347][ T8416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.628364][ T8416] ? clear_bhb_loop+0x60/0xb0 [ 157.628386][ T8416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.628402][ T8416] RIP: 0033:0x7fd3ae18e929 [ 157.628417][ T8416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.628432][ T8416] RSP: 002b:00007fd3aefd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 157.628451][ T8416] RAX: ffffffffffffffda RBX: 00007fd3ae3b6080 RCX: 00007fd3ae18e929 [ 157.628464][ T8416] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000003 [ 157.628476][ T8416] RBP: 00007fd3aefd9090 R08: 0000000000000000 R09: 0000000000000000 [ 157.628487][ T8416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.628498][ T8416] R13: 0000000000000000 R14: 00007fd3ae3b6080 R15: 00007ffdeadcda98 [ 157.628528][ T8416] [ 158.221912][ T8433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.774'. [ 158.559373][ T8447] tmpfs: Bad value for 'nr_inodes' [ 158.772075][ T8460] Mount JFS Failure: -22 [ 158.957317][ T8464] syzkaller0: entered allmulticast mode [ 158.986920][ T8469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.787'. [ 159.365733][ T5889] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 159.446561][ T5922] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 159.515983][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 159.528757][ T5866] Bluetooth: hci0: Dropping invalid advertising data [ 159.530226][ T5889] usb 2-1: unable to get BOS descriptor or descriptor too short [ 159.535459][ T5866] Bluetooth: hci0: Dropping invalid advertising data [ 159.535497][ T5866] Bluetooth: hci0: Malformed LE Event: 0x02 [ 159.554236][ T5889] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 159.573678][ T5889] usb 2-1: can't read configurations, error -71 [ 159.651171][ T5922] usb 5-1: Using ep0 maxpacket: 8 [ 159.669211][ T8487] XFS (rnullb0): Invalid superblock magic number [ 159.672942][ T5922] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 159.697783][ T5922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.731300][ T5922] usb 5-1: config 0 has no interfaces? [ 159.745722][ T5922] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 159.763779][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.786223][ T5922] usb 5-1: config 0 descriptor?? [ 159.860912][ T8496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.888130][ T8496] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 159.906443][ T8496] FAULT_INJECTION: forcing a failure. [ 159.906443][ T8496] name failslab, interval 1, probability 0, space 0, times 0 [ 159.919419][ T8496] CPU: 0 UID: 0 PID: 8496 Comm: syz.3.795 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 159.919444][ T8496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.919454][ T8496] Call Trace: [ 159.919462][ T8496] [ 159.919469][ T8496] dump_stack_lvl+0x189/0x250 [ 159.919498][ T8496] ? __pfx____ratelimit+0x10/0x10 [ 159.919519][ T8496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.919541][ T8496] ? __pfx__printk+0x10/0x10 [ 159.919571][ T8496] ? __pfx___might_resched+0x10/0x10 [ 159.919591][ T8496] ? fs_reclaim_acquire+0x7d/0x100 [ 159.919615][ T8496] should_fail_ex+0x414/0x560 [ 159.919644][ T8496] should_failslab+0xa8/0x100 [ 159.919670][ T8496] kmem_cache_alloc_noprof+0x73/0x3c0 [ 159.919693][ T8496] ? __kernfs_new_node+0xd7/0x7e0 [ 159.919719][ T8496] __kernfs_new_node+0xd7/0x7e0 [ 159.919740][ T8496] ? __lock_acquire+0xab9/0xd20 [ 159.919766][ T8496] ? __pfx___kernfs_new_node+0x10/0x10 [ 159.919789][ T8496] ? kernfs_root+0x1c/0x230 [ 159.919817][ T8496] ? kernfs_root+0x1c/0x230 [ 159.919836][ T8496] ? kernfs_root+0x1c/0x230 [ 159.919853][ T8496] ? kernfs_root+0x1c/0x230 [ 159.919878][ T8496] kernfs_new_node+0x102/0x210 [ 159.919904][ T8496] kernfs_create_dir_ns+0x44/0x130 [ 159.919931][ T8496] sysfs_create_dir_ns+0x123/0x280 [ 159.919955][ T8496] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 159.919977][ T8496] ? do_raw_spin_unlock+0x122/0x240 [ 159.920006][ T8496] kobject_add_internal+0x59f/0xb40 [ 159.920036][ T8496] kobject_init_and_add+0x125/0x190 [ 159.920063][ T8496] ? __pfx_kobject_init_and_add+0x10/0x10 [ 159.920094][ T8496] ? __raw_spin_lock_init+0x45/0x100 [ 159.920120][ T8496] iommu_group_alloc+0x1e0/0x3a0 [ 159.920138][ T8496] ? generic_device_group+0x9/0x10 [ 159.920159][ T8496] __iommu_probe_device+0x5b0/0x11f0 [ 159.920188][ T8496] iommu_bus_notifier+0x87/0x2c0 [ 159.920209][ T8496] notifier_call_chain+0x1b6/0x3e0 [ 159.920239][ T8496] blocking_notifier_call_chain+0x6a/0x90 [ 159.920264][ T8496] bus_notify+0x143/0x180 [ 159.920299][ T8496] device_add+0x54d/0xb50 [ 159.920322][ T8496] iommufd_test+0x2f95/0x5170 [ 159.920356][ T8496] ? __pfx_iommufd_test+0x10/0x10 [ 159.920380][ T8496] ? __lock_acquire+0xab9/0xd20 [ 159.920409][ T8496] ? __might_fault+0xb0/0x130 [ 159.920457][ T8496] iommufd_fops_ioctl+0x45e/0x580 [ 159.920487][ T8496] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 159.920517][ T8496] ? __fget_files+0x2a/0x420 [ 159.920541][ T8496] ? __fget_files+0x2a/0x420 [ 159.920563][ T8496] ? bpf_lsm_file_ioctl+0x9/0x20 [ 159.920585][ T8496] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 159.920609][ T8496] __se_sys_ioctl+0xf9/0x170 [ 159.920635][ T8496] do_syscall_64+0xfa/0x3b0 [ 159.920653][ T8496] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.920671][ T8496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.920689][ T8496] ? clear_bhb_loop+0x60/0xb0 [ 159.920710][ T8496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.920726][ T8496] RIP: 0033:0x7f11e1f8e929 [ 159.920742][ T8496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.920757][ T8496] RSP: 002b:00007f11e2ecb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.920776][ T8496] RAX: ffffffffffffffda RBX: 00007f11e21b5fa0 RCX: 00007f11e1f8e929 [ 159.920789][ T8496] RDX: 00002000000003c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 159.920801][ T8496] RBP: 00007f11e2ecb090 R08: 0000000000000000 R09: 0000000000000000 [ 159.920813][ T8496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 159.920823][ T8496] R13: 0000000000000000 R14: 00007f11e21b5fa0 R15: 00007ffdc0650528 [ 159.920854][ T8496] [ 159.920884][ T8496] kobject: kobject_add_internal failed for 2 (error: -12 parent: iommu_groups) [ 160.077338][ T8479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.786'. [ 160.320362][ T8502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.797'. [ 160.655762][ T5922] usb 5-1: USB disconnect, device number 20 [ 160.763508][ T8519] netlink: 72 bytes leftover after parsing attributes in process `syz.3.802'. [ 160.788909][ T8519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.796674][ T8521] hfs: can't find a HFS filesystem on dev rnullb0 [ 160.799403][ T8519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.858234][ T8525] 9pnet_fd: Insufficient options for proto=fd [ 160.872084][ T8525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.885865][ T5889] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 161.048695][ T5889] usb 2-1: not running at top speed; connect to a high speed hub [ 161.057870][ T5889] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 161.069034][ T5889] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.089571][ T5889] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 161.105685][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.113694][ T5889] usb 2-1: Product: syz [ 161.134838][ T5889] usb 2-1: Manufacturer: syz [ 161.139602][ T5889] usb 2-1: SerialNumber: syz [ 161.153007][ T8514] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 161.161978][ T8533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.808'. [ 161.381613][ T8541] binder: 8540:8541 unknown command 0 [ 161.395703][ T8541] binder: 8540:8541 ioctl c0306201 200000000080 returned -22 [ 161.429821][ T8514] /dev/rnullb0: Can't open blockdev [ 161.460537][ T5889] usbhid 2-1:1.0: can't add hid device: -71 [ 161.466773][ T5889] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 161.489153][ T5889] usb 2-1: USB disconnect, device number 16 [ 161.595424][ T8547] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.643828][ T8549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.654010][ T8549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.745757][ T43] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 161.897487][ T43] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.908771][ T43] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.918998][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 161.925852][ T43] usb 3-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 161.935495][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.948343][ T43] usb 3-1: config 0 descriptor?? [ 162.283949][ T8558] tipc: Started in network mode [ 162.290695][ T8558] tipc: Node identity 7f000001, cluster identity 4711 [ 162.298022][ T8558] tipc: Enabling of bearer rejected, failed to enable media [ 162.369446][ T43] apple 0003:05AC:029F.0007: item fetching failed at offset 3/5 [ 162.396932][ T43] apple 0003:05AC:029F.0007: parse failed [ 162.402786][ T43] apple 0003:05AC:029F.0007: probe with driver apple failed with error -22 [ 162.558552][ T8573] /dev/rnullb0: Can't open blockdev [ 162.567152][ T43] usb 3-1: USB disconnect, device number 15 [ 162.592765][ T8563] /dev/rnullb0: Can't open blockdev [ 162.859828][ T8582] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.928611][ T8583] loop6: detected capacity change from 0 to 524287999 [ 164.431138][ T8625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.490904][ T8625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.510857][ T8625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.512020][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.532580][ T8625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.708346][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.714814][ T8636] netlink: 68 bytes leftover after parsing attributes in process `syz.1.847'. [ 164.766373][ T8635] random: crng reseeded on system resumption [ 164.769032][ T8638] /dev/rnullb0: Can't open blockdev [ 164.884193][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.988720][ T8643] FAULT_INJECTION: forcing a failure. [ 164.988720][ T8643] name failslab, interval 1, probability 0, space 0, times 0 [ 165.007033][ T8643] CPU: 0 UID: 0 PID: 8643 Comm: syz.3.851 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 165.007057][ T8643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.007067][ T8643] Call Trace: [ 165.007074][ T8643] [ 165.007082][ T8643] dump_stack_lvl+0x189/0x250 [ 165.007109][ T8643] ? __pfx____ratelimit+0x10/0x10 [ 165.007130][ T8643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.007152][ T8643] ? __pfx__printk+0x10/0x10 [ 165.007191][ T8643] should_fail_ex+0x414/0x560 [ 165.007221][ T8643] should_failslab+0xa8/0x100 [ 165.007248][ T8643] kmem_cache_alloc_noprof+0x73/0x3c0 [ 165.007271][ T8643] ? skb_clone+0x212/0x3a0 [ 165.007299][ T8643] skb_clone+0x212/0x3a0 [ 165.007326][ T8643] __netlink_deliver_tap+0x404/0x850 [ 165.007359][ T8643] ? netlink_deliver_tap+0x2e/0x1b0 [ 165.007381][ T8643] netlink_deliver_tap+0x19c/0x1b0 [ 165.007402][ T8643] netlink_sendskb+0x68/0x140 [ 165.007424][ T8643] netlink_rcv_skb+0x28c/0x470 [ 165.007444][ T8643] ? __pfx_genl_rcv_msg+0x10/0x10 [ 165.007469][ T8643] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 165.007507][ T8643] ? down_read+0x1ad/0x2e0 [ 165.007530][ T8643] genl_rcv+0x28/0x40 [ 165.007550][ T8643] netlink_unicast+0x758/0x8d0 [ 165.007580][ T8643] netlink_sendmsg+0x805/0xb30 [ 165.007610][ T8643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.007634][ T8643] ? aa_sock_msg_perm+0xf1/0x1d0 [ 165.007660][ T8643] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 165.007680][ T8643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.007701][ T8643] __sock_sendmsg+0x21c/0x270 [ 165.007723][ T8643] __sys_sendto+0x3bd/0x520 [ 165.007747][ T8643] ? __pfx___sys_sendto+0x10/0x10 [ 165.007782][ T8643] ? fput_close_sync+0x119/0x200 [ 165.007821][ T8643] ? __pfx_fput_close_sync+0x10/0x10 [ 165.007852][ T8643] __x64_sys_sendto+0xde/0x100 [ 165.007877][ T8643] do_syscall_64+0xfa/0x3b0 [ 165.007895][ T8643] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.007913][ T8643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.007930][ T8643] ? clear_bhb_loop+0x60/0xb0 [ 165.007951][ T8643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.007968][ T8643] RIP: 0033:0x7f11e1f907bc [ 165.007984][ T8643] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 165.007999][ T8643] RSP: 002b:00007f11e2ec9e20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 165.008018][ T8643] RAX: ffffffffffffffda RBX: 00007f11e2ec9fa0 RCX: 00007f11e1f907bc [ 165.008031][ T8643] RDX: 0000000000000024 RSI: 00007f11e2ec9ff0 RDI: 0000000000000004 [ 165.008042][ T8643] RBP: 0000000000000000 R08: 00007f11e2ec9e74 R09: 000000000000000c [ 165.008053][ T8643] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 165.008063][ T8643] R13: 0000000000000000 R14: 00007f11e2ec9ff0 R15: 0000000000000000 [ 165.008092][ T8643] [ 165.290144][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.328977][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.330315][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.351419][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.352400][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.360020][ T8646] netlink: 56 bytes leftover after parsing attributes in process `syz.1.852'. [ 165.367923][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.408924][ T5895] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 165.440489][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'. [ 165.458646][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.579762][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.854'. [ 165.619753][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 165.637694][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.652605][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.652634][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 165.652677][ T5895] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 165.652699][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.663143][ T5895] usb 5-1: config 0 descriptor?? [ 165.995886][ T8660] /dev/rnullb0: Can't open blockdev [ 166.127604][ T5895] hid_parser_main: 6 callbacks suppressed [ 166.127627][ T5895] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 166.163056][ T5895] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 166.189824][ T5895] ================================================================== [ 166.197926][ T5895] BUG: KASAN: slab-out-of-bounds in mon_bin_event+0x1211/0x2250 [ 166.205572][ T5895] Read of size 832 at addr ffff888140a980a1 by task kworker/0:3/5895 [ 166.213636][ T5895] [ 166.215969][ T5895] CPU: 0 UID: 0 PID: 5895 Comm: kworker/0:3 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 166.215993][ T5895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.216005][ T5895] Workqueue: usb_hub_wq hub_event [ 166.216029][ T5895] Call Trace: [ 166.216037][ T5895] [ 166.216044][ T5895] dump_stack_lvl+0x189/0x250 [ 166.216070][ T5895] ? __kasan_check_byte+0x12/0x40 [ 166.216097][ T5895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.216120][ T5895] ? lock_release+0x4b/0x3e0 [ 166.216142][ T5895] ? __virt_addr_valid+0x4a5/0x5c0 [ 166.216167][ T5895] print_report+0xca/0x230 [ 166.216185][ T5895] ? mon_bin_event+0x1211/0x2250 [ 166.216208][ T5895] kasan_report+0x118/0x150 [ 166.216233][ T5895] ? mon_bin_event+0x1211/0x2250 [ 166.216259][ T5895] kasan_check_range+0x2b0/0x2c0 [ 166.216283][ T5895] ? mon_bin_event+0x1211/0x2250 [ 166.216307][ T5895] __asan_memcpy+0x29/0x70 [ 166.216328][ T5895] mon_bin_event+0x1211/0x2250 [ 166.216360][ T5895] ? __pfx_mon_bin_event+0x10/0x10 [ 166.216382][ T5895] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 166.216399][ T5895] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 166.216416][ T5895] ? __driver_probe_device+0x18c/0x2f0 [ 166.216435][ T5895] ? __device_attach_driver+0x2ce/0x530 [ 166.216454][ T5895] ? bus_for_each_drv+0x251/0x2e0 [ 166.216475][ T5895] ? __device_attach+0x2b8/0x400 [ 166.216491][ T5895] ? bus_probe_device+0x185/0x260 [ 166.216512][ T5895] ? hid_add_device+0x398/0x540 [ 166.216531][ T5895] ? __pfx_mon_bin_submit+0x10/0x10 [ 166.216554][ T5895] mon_submit+0x196/0x210 [ 166.216576][ T5895] usb_hcd_submit_urb+0x11d/0x1aa0 [ 166.216603][ T5895] usb_start_wait_urb+0x114/0x4c0 [ 166.216623][ T5895] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 166.216649][ T5895] usb_control_msg+0x232/0x3e0 [ 166.216668][ T5895] usbhid_raw_request+0x3cd/0x4e0 [ 166.216695][ T5895] __hid_request+0x1c1/0x370 [ 166.216715][ T5895] hidinput_connect+0x218a/0x3030 [ 166.216748][ T5895] hid_connect+0x499/0x19a0 [ 166.216771][ T5895] ? usbhid_start+0x1a92/0x24b0 [ 166.216795][ T5895] ? __pfx_hid_connect+0x10/0x10 [ 166.216819][ T5895] hid_hw_start+0xa8/0x120 [ 166.216839][ T5895] ms_probe+0x180/0x430 [ 166.216863][ T5895] hid_device_probe+0x39d/0x710 [ 166.216883][ T5895] ? driver_sysfs_add+0x1fe/0x210 [ 166.216902][ T5895] ? __pfx_hid_device_probe+0x10/0x10 [ 166.216930][ T5895] really_probe+0x26a/0x9a0 [ 166.216952][ T5895] __driver_probe_device+0x18c/0x2f0 [ 166.216972][ T5895] driver_probe_device+0x4f/0x430 [ 166.216994][ T5895] __device_attach_driver+0x2ce/0x530 [ 166.217015][ T5895] bus_for_each_drv+0x251/0x2e0 [ 166.217038][ T5895] ? __pfx___device_attach_driver+0x10/0x10 [ 166.217058][ T5895] ? __pfx_bus_for_each_drv+0x10/0x10 [ 166.217079][ T5895] ? __lock_acquire+0xab9/0xd20 [ 166.217103][ T5895] __device_attach+0x2b8/0x400 [ 166.217122][ T5895] ? __pfx___device_attach+0x10/0x10 [ 166.217142][ T5895] ? do_raw_spin_unlock+0x122/0x240 [ 166.217167][ T5895] bus_probe_device+0x185/0x260 [ 166.217191][ T5895] device_add+0x7b6/0xb50 [ 166.217210][ T5895] hid_add_device+0x398/0x540 [ 166.217232][ T5895] usbhid_probe+0xe13/0x12a0 [ 166.217260][ T5895] usb_probe_interface+0x634/0xbf0 [ 166.217285][ T5895] ? __pfx_usb_probe_interface+0x10/0x10 [ 166.217305][ T5895] really_probe+0x26a/0x9a0 [ 166.217327][ T5895] __driver_probe_device+0x18c/0x2f0 [ 166.217346][ T5895] driver_probe_device+0x4f/0x430 [ 166.217367][ T5895] __device_attach_driver+0x2ce/0x530 [ 166.217389][ T5895] bus_for_each_drv+0x251/0x2e0 [ 166.217411][ T5895] ? __pfx___device_attach_driver+0x10/0x10 [ 166.217431][ T5895] ? __pfx_bus_for_each_drv+0x10/0x10 [ 166.217458][ T5895] __device_attach+0x2b8/0x400 [ 166.217476][ T5895] ? __pfx___device_attach+0x10/0x10 [ 166.217495][ T5895] ? do_raw_spin_unlock+0x122/0x240 [ 166.217521][ T5895] bus_probe_device+0x185/0x260 [ 166.217544][ T5895] device_add+0x7b6/0xb50 [ 166.217563][ T5895] usb_set_configuration+0x1a87/0x20e0 [ 166.217592][ T5895] usb_generic_driver_probe+0x8d/0x150 [ 166.217611][ T5895] usb_probe_device+0x1c4/0x390 [ 166.217631][ T5895] ? __pfx_usb_probe_device+0x10/0x10 [ 166.217650][ T5895] really_probe+0x26a/0x9a0 [ 166.217670][ T5895] __driver_probe_device+0x18c/0x2f0 [ 166.217690][ T5895] driver_probe_device+0x4f/0x430 [ 166.217710][ T5895] __device_attach_driver+0x2ce/0x530 [ 166.217732][ T5895] bus_for_each_drv+0x251/0x2e0 [ 166.217754][ T5895] ? __pfx___device_attach_driver+0x10/0x10 [ 166.217773][ T5895] ? __pfx_bus_for_each_drv+0x10/0x10 [ 166.217799][ T5895] __device_attach+0x2b8/0x400 [ 166.217818][ T5895] ? __pfx___device_attach+0x10/0x10 [ 166.217837][ T5895] ? do_raw_spin_unlock+0x122/0x240 [ 166.217863][ T5895] bus_probe_device+0x185/0x260 [ 166.217886][ T5895] device_add+0x7b6/0xb50 [ 166.217905][ T5895] usb_new_device+0xa39/0x16f0 [ 166.217931][ T5895] ? __pfx_usb_new_device+0x10/0x10 [ 166.217949][ T5895] ? _raw_spin_unlock_irq+0x23/0x50 [ 166.217966][ T5895] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.217985][ T5895] hub_event+0x2941/0x4a00 [ 166.218026][ T5895] ? __pfx_hub_event+0x10/0x10 [ 166.218045][ T5895] ? process_scheduled_works+0x9ef/0x17b0 [ 166.218067][ T5895] ? _raw_spin_unlock_irq+0x23/0x50 [ 166.218082][ T5895] ? process_scheduled_works+0x9ef/0x17b0 [ 166.218101][ T5895] ? process_scheduled_works+0x9ef/0x17b0 [ 166.218122][ T5895] process_scheduled_works+0xade/0x17b0 [ 166.218154][ T5895] ? __pfx_process_scheduled_works+0x10/0x10 [ 166.218182][ T5895] worker_thread+0x8a0/0xda0 [ 166.218203][ T5895] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 166.218224][ T5895] ? __kthread_parkme+0x7b/0x200 [ 166.218250][ T5895] kthread+0x711/0x8a0 [ 166.218274][ T5895] ? __pfx_worker_thread+0x10/0x10 [ 166.218294][ T5895] ? __pfx_kthread+0x10/0x10 [ 166.218318][ T5895] ? _raw_spin_unlock_irq+0x23/0x50 [ 166.218335][ T5895] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.218352][ T5895] ? __pfx_kthread+0x10/0x10 [ 166.218375][ T5895] ret_from_fork+0x3fc/0x770 [ 166.218397][ T5895] ? __pfx_ret_from_fork+0x10/0x10 [ 166.218418][ T5895] ? __switch_to_asm+0x39/0x70 [ 166.218435][ T5895] ? __switch_to_asm+0x33/0x70 [ 166.218450][ T5895] ? __pfx_kthread+0x10/0x10 [ 166.218473][ T5895] ret_from_fork_asm+0x1a/0x30 [ 166.218496][ T5895] [ 166.218503][ T5895] [ 166.810452][ T5895] Allocated by task 5895: [ 166.814764][ T5895] kasan_save_track+0x3e/0x80 [ 166.819435][ T5895] __kasan_kmalloc+0x93/0xb0 [ 166.824018][ T5895] __kmalloc_noprof+0x27a/0x4f0 [ 166.828858][ T5895] __hid_request+0x94/0x370 [ 166.833347][ T5895] hidinput_connect+0x218a/0x3030 [ 166.838359][ T5895] hid_connect+0x499/0x19a0 [ 166.842933][ T5895] hid_hw_start+0xa8/0x120 [ 166.847337][ T5895] ms_probe+0x180/0x430 [ 166.851482][ T5895] hid_device_probe+0x39d/0x710 [ 166.856317][ T5895] really_probe+0x26a/0x9a0 [ 166.860805][ T5895] __driver_probe_device+0x18c/0x2f0 [ 166.866078][ T5895] driver_probe_device+0x4f/0x430 [ 166.871088][ T5895] __device_attach_driver+0x2ce/0x530 [ 166.876454][ T5895] bus_for_each_drv+0x251/0x2e0 [ 166.881309][ T5895] __device_attach+0x2b8/0x400 [ 166.886066][ T5895] bus_probe_device+0x185/0x260 [ 166.890914][ T5895] device_add+0x7b6/0xb50 [ 166.895234][ T5895] hid_add_device+0x398/0x540 [ 166.899904][ T5895] usbhid_probe+0xe13/0x12a0 [ 166.904498][ T5895] usb_probe_interface+0x634/0xbf0 [ 166.909615][ T5895] really_probe+0x26a/0x9a0 [ 166.914110][ T5895] __driver_probe_device+0x18c/0x2f0 [ 166.919385][ T5895] driver_probe_device+0x4f/0x430 [ 166.924399][ T5895] __device_attach_driver+0x2ce/0x530 [ 166.929760][ T5895] bus_for_each_drv+0x251/0x2e0 [ 166.934611][ T5895] __device_attach+0x2b8/0x400 [ 166.939485][ T5895] bus_probe_device+0x185/0x260 [ 166.944336][ T5895] device_add+0x7b6/0xb50 [ 166.948653][ T5895] usb_set_configuration+0x1a87/0x20e0 [ 166.954105][ T5895] usb_generic_driver_probe+0x8d/0x150 [ 166.959562][ T5895] usb_probe_device+0x1c4/0x390 [ 166.964409][ T5895] really_probe+0x26a/0x9a0 [ 166.968906][ T5895] __driver_probe_device+0x18c/0x2f0 [ 166.974178][ T5895] driver_probe_device+0x4f/0x430 [ 166.979190][ T5895] __device_attach_driver+0x2ce/0x530 [ 166.984548][ T5895] bus_for_each_drv+0x251/0x2e0 [ 166.989391][ T5895] __device_attach+0x2b8/0x400 [ 166.994139][ T5895] bus_probe_device+0x185/0x260 [ 166.998980][ T5895] device_add+0x7b6/0xb50 [ 167.003295][ T5895] usb_new_device+0xa39/0x16f0 [ 167.008045][ T5895] hub_event+0x2941/0x4a00 [ 167.012460][ T5895] process_scheduled_works+0xade/0x17b0 [ 167.017997][ T5895] worker_thread+0x8a0/0xda0 [ 167.022579][ T5895] kthread+0x711/0x8a0 [ 167.026637][ T5895] ret_from_fork+0x3fc/0x770 [ 167.031217][ T5895] ret_from_fork_asm+0x1a/0x30 [ 167.035965][ T5895] [ 167.038278][ T5895] The buggy address belongs to the object at ffff888140a980a0 [ 167.038278][ T5895] which belongs to the cache kmalloc-8 of size 8 [ 167.051966][ T5895] The buggy address is located 1 bytes inside of [ 167.051966][ T5895] allocated 7-byte region [ffff888140a980a0, ffff888140a980a7) [ 167.065772][ T5895] [ 167.068266][ T5895] The buggy address belongs to the physical page: [ 167.074686][ T5895] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x140a98 [ 167.083663][ T5895] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 167.090894][ T5895] page_type: f5(slab) [ 167.095133][ T5895] raw: 057ff00000000000 ffff88801a841500 dead000000000100 dead000000000122 [ 167.103806][ T5895] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 167.112463][ T5895] page dumped because: kasan: bad access detected [ 167.118861][ T5895] page_owner tracks the page as allocated [ 167.124580][ T5895] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 2956071826, free_ts 0 [ 167.142112][ T5895] post_alloc_hook+0x240/0x2a0 [ 167.146884][ T5895] get_page_from_freelist+0x21e4/0x22c0 [ 167.152419][ T5895] __alloc_frozen_pages_noprof+0x181/0x370 [ 167.158215][ T5895] alloc_pages_mpol+0x232/0x4a0 [ 167.163060][ T5895] allocate_slab+0x8a/0x370 [ 167.167570][ T5895] ___slab_alloc+0xbeb/0x1410 [ 167.172231][ T5895] __kmalloc_noprof+0x305/0x4f0 [ 167.177071][ T5895] acpi_ns_internalize_name+0x2c2/0x3a0 [ 167.182602][ T5895] acpi_ns_get_node+0x1a3/0x350 [ 167.187541][ T5895] acpi_get_handle+0x181/0x2a0 [ 167.192308][ T5895] acpi_has_method+0x86/0xd0 [ 167.196890][ T5895] acpi_bay_match+0x72/0x1e0 [ 167.201480][ T5895] acpi_bus_check_add+0x46d/0x820 [ 167.206493][ T5895] acpi_ns_walk_namespace+0x268/0x690 [ 167.211867][ T5895] acpi_walk_namespace+0xe8/0x130 [ 167.216893][ T5895] acpi_bus_scan+0xe8/0x4b0 [ 167.221390][ T5895] page_owner free stack trace missing [ 167.226759][ T5895] [ 167.229073][ T5895] Memory state around the buggy address: [ 167.234697][ T5895] ffff888140a97f80: 00 00 fc fc 00 00 fc fc 00 00 fc fc fa fb fc fc [ 167.242747][ T5895] ffff888140a98000: 05 fc fc fc 00 fc fc fc 06 fc fc fc 06 fc fc fc [ 167.250792][ T5895] >ffff888140a98080: 05 fc fc fc 07 fc fc fc 07 fc fc fc 06 fc fc fc [ 167.258833][ T5895] ^ [ 167.263923][ T5895] ffff888140a98100: 05 fc fc fc 06 fc fc fc 06 fc fc fc fa fc fc fc [ 167.271966][ T5895] ffff888140a98180: 07 fc fc fc 00 fc fc fc 07 fc fc fc fa fc fc fc [ 167.280010][ T5895] ================================================================== [ 167.288068][ T5895] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 167.295246][ T5895] CPU: 0 UID: 0 PID: 5895 Comm: kworker/0:3 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 167.306768][ T5895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.316814][ T5895] Workqueue: usb_hub_wq hub_event [ 167.321838][ T5895] Call Trace: [ 167.325102][ T5895] [ 167.328022][ T5895] dump_stack_lvl+0x99/0x250 [ 167.332607][ T5895] ? __asan_memcpy+0x40/0x70 [ 167.337188][ T5895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.342379][ T5895] ? __pfx__printk+0x10/0x10 [ 167.346965][ T5895] panic+0x2e2/0x7b0 [ 167.350851][ T5895] ? __pfx_panic+0x10/0x10 [ 167.355256][ T5895] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 167.361135][ T5895] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 167.367447][ T5895] ? print_memory_metadata+0x314/0x400 [ 167.372893][ T5895] ? mon_bin_event+0x1211/0x2250 [ 167.377823][ T5895] check_panic_on_warn+0x89/0xb0 [ 167.382746][ T5895] ? mon_bin_event+0x1211/0x2250 [ 167.387677][ T5895] end_report+0x78/0x160 [ 167.391913][ T5895] kasan_report+0x129/0x150 [ 167.396408][ T5895] ? mon_bin_event+0x1211/0x2250 [ 167.401342][ T5895] kasan_check_range+0x2b0/0x2c0 [ 167.406269][ T5895] ? mon_bin_event+0x1211/0x2250 [ 167.411202][ T5895] __asan_memcpy+0x29/0x70 [ 167.415608][ T5895] mon_bin_event+0x1211/0x2250 [ 167.420370][ T5895] ? __pfx_mon_bin_event+0x10/0x10 [ 167.425470][ T5895] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 167.430827][ T5895] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 167.436709][ T5895] ? __driver_probe_device+0x18c/0x2f0 [ 167.442153][ T5895] ? __device_attach_driver+0x2ce/0x530 [ 167.447682][ T5895] ? bus_for_each_drv+0x251/0x2e0 [ 167.452697][ T5895] ? __device_attach+0x2b8/0x400 [ 167.457616][ T5895] ? bus_probe_device+0x185/0x260 [ 167.462629][ T5895] ? hid_add_device+0x398/0x540 [ 167.467468][ T5895] ? __pfx_mon_bin_submit+0x10/0x10 [ 167.472678][ T5895] mon_submit+0x196/0x210 [ 167.476999][ T5895] usb_hcd_submit_urb+0x11d/0x1aa0 [ 167.482104][ T5895] usb_start_wait_urb+0x114/0x4c0 [ 167.487115][ T5895] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 167.492652][ T5895] usb_control_msg+0x232/0x3e0 [ 167.497403][ T5895] usbhid_raw_request+0x3cd/0x4e0 [ 167.502425][ T5895] __hid_request+0x1c1/0x370 [ 167.507005][ T5895] hidinput_connect+0x218a/0x3030 [ 167.512030][ T5895] hid_connect+0x499/0x19a0 [ 167.516528][ T5895] ? usbhid_start+0x1a92/0x24b0 [ 167.521372][ T5895] ? __pfx_hid_connect+0x10/0x10 [ 167.526303][ T5895] hid_hw_start+0xa8/0x120 [ 167.530710][ T5895] ms_probe+0x180/0x430 [ 167.534858][ T5895] hid_device_probe+0x39d/0x710 [ 167.539712][ T5895] ? driver_sysfs_add+0x1fe/0x210 [ 167.544726][ T5895] ? __pfx_hid_device_probe+0x10/0x10 [ 167.550086][ T5895] really_probe+0x26a/0x9a0 [ 167.554580][ T5895] __driver_probe_device+0x18c/0x2f0 [ 167.559855][ T5895] driver_probe_device+0x4f/0x430 [ 167.564869][ T5895] __device_attach_driver+0x2ce/0x530 [ 167.570229][ T5895] bus_for_each_drv+0x251/0x2e0 [ 167.575070][ T5895] ? __pfx___device_attach_driver+0x10/0x10 [ 167.580951][ T5895] ? __pfx_bus_for_each_drv+0x10/0x10 [ 167.586313][ T5895] ? __lock_acquire+0xab9/0xd20 [ 167.591154][ T5895] __device_attach+0x2b8/0x400 [ 167.595904][ T5895] ? __pfx___device_attach+0x10/0x10 [ 167.601176][ T5895] ? do_raw_spin_unlock+0x122/0x240 [ 167.606366][ T5895] bus_probe_device+0x185/0x260 [ 167.611209][ T5895] device_add+0x7b6/0xb50 [ 167.615527][ T5895] hid_add_device+0x398/0x540 [ 167.620203][ T5895] usbhid_probe+0xe13/0x12a0 [ 167.624787][ T5895] usb_probe_interface+0x634/0xbf0 [ 167.629891][ T5895] ? __pfx_usb_probe_interface+0x10/0x10 [ 167.635515][ T5895] really_probe+0x26a/0x9a0 [ 167.640015][ T5895] __driver_probe_device+0x18c/0x2f0 [ 167.645288][ T5895] driver_probe_device+0x4f/0x430 [ 167.650298][ T5895] __device_attach_driver+0x2ce/0x530 [ 167.655659][ T5895] bus_for_each_drv+0x251/0x2e0 [ 167.660504][ T5895] ? __pfx___device_attach_driver+0x10/0x10 [ 167.666385][ T5895] ? __pfx_bus_for_each_drv+0x10/0x10 [ 167.671752][ T5895] __device_attach+0x2b8/0x400 [ 167.676508][ T5895] ? __pfx___device_attach+0x10/0x10 [ 167.681784][ T5895] ? do_raw_spin_unlock+0x122/0x240 [ 167.686975][ T5895] bus_probe_device+0x185/0x260 [ 167.691818][ T5895] device_add+0x7b6/0xb50 [ 167.696153][ T5895] usb_set_configuration+0x1a87/0x20e0 [ 167.701611][ T5895] usb_generic_driver_probe+0x8d/0x150 [ 167.707062][ T5895] usb_probe_device+0x1c4/0x390 [ 167.711902][ T5895] ? __pfx_usb_probe_device+0x10/0x10 [ 167.717259][ T5895] really_probe+0x26a/0x9a0 [ 167.721757][ T5895] __driver_probe_device+0x18c/0x2f0 [ 167.727034][ T5895] driver_probe_device+0x4f/0x430 [ 167.732050][ T5895] __device_attach_driver+0x2ce/0x530 [ 167.737417][ T5895] bus_for_each_drv+0x251/0x2e0 [ 167.742261][ T5895] ? __pfx___device_attach_driver+0x10/0x10 [ 167.748140][ T5895] ? __pfx_bus_for_each_drv+0x10/0x10 [ 167.753503][ T5895] __device_attach+0x2b8/0x400 [ 167.758255][ T5895] ? __pfx___device_attach+0x10/0x10 [ 167.763526][ T5895] ? do_raw_spin_unlock+0x122/0x240 [ 167.768733][ T5895] bus_probe_device+0x185/0x260 [ 167.773594][ T5895] device_add+0x7b6/0xb50 [ 167.777915][ T5895] usb_new_device+0xa39/0x16f0 [ 167.782677][ T5895] ? __pfx_usb_new_device+0x10/0x10 [ 167.787868][ T5895] ? _raw_spin_unlock_irq+0x23/0x50 [ 167.793055][ T5895] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.798244][ T5895] hub_event+0x2941/0x4a00 [ 167.802678][ T5895] ? __pfx_hub_event+0x10/0x10 [ 167.807429][ T5895] ? process_scheduled_works+0x9ef/0x17b0 [ 167.813139][ T5895] ? _raw_spin_unlock_irq+0x23/0x50 [ 167.818322][ T5895] ? process_scheduled_works+0x9ef/0x17b0 [ 167.824030][ T5895] ? process_scheduled_works+0x9ef/0x17b0 [ 167.829742][ T5895] process_scheduled_works+0xade/0x17b0 [ 167.835292][ T5895] ? __pfx_process_scheduled_works+0x10/0x10 [ 167.841267][ T5895] worker_thread+0x8a0/0xda0 [ 167.845851][ T5895] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 167.852165][ T5895] ? __kthread_parkme+0x7b/0x200 [ 167.857094][ T5895] kthread+0x711/0x8a0 [ 167.861155][ T5895] ? __pfx_worker_thread+0x10/0x10 [ 167.866255][ T5895] ? __pfx_kthread+0x10/0x10 [ 167.870836][ T5895] ? _raw_spin_unlock_irq+0x23/0x50 [ 167.876018][ T5895] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.881202][ T5895] ? __pfx_kthread+0x10/0x10 [ 167.885786][ T5895] ret_from_fork+0x3fc/0x770 [ 167.890366][ T5895] ? __pfx_ret_from_fork+0x10/0x10 [ 167.895467][ T5895] ? __switch_to_asm+0x39/0x70 [ 167.900221][ T5895] ? __switch_to_asm+0x33/0x70 [ 167.904970][ T5895] ? __pfx_kthread+0x10/0x10 [ 167.909550][ T5895] ret_from_fork_asm+0x1a/0x30 [ 167.914304][ T5895] [ 167.917560][ T5895] Kernel Offset: disabled [ 167.921872][ T5895] Rebooting in 86400 seconds..