last executing test programs: 2m31.75373047s ago: executing program 2 (id=921): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'ipvlan0\x00', @broadcast}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f0000000000)='./file0\x00', 0x1) 2m30.749574301s ago: executing program 2 (id=927): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200002000aab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r1, &(0x7f0000001900)=[{{&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x77}]}}}], 0x18}}], 0x1, 0x800) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x821, 0x4) 2m30.643857261s ago: executing program 2 (id=928): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r0, 0x1, 0x4e9c2bce0451ea52, &(0x7f0000000080)=0xfffffff7, 0x4) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fcntl$lock(r1, 0x7, &(0x7f0000002080)={0x1, 0x1, 0x9}) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x229) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000020c0)={0x1, &(0x7f00000004c0)=[{0x406, 0x0, 0x12, 0xfd}]}, 0x10) r3 = syz_open_dev$usbmon(&(0x7f0000000800), 0x3, 0x8800) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000060001c0"]) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000100)=ANY=[]) r7 = socket$netlink(0x10, 0x3, 0x9) write(r7, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(0x4) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r11, 0x8910, &(0x7f0000000680)={'veth1_to_bond\x00', @ifru_flags=0x1000}) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x13) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) 2m30.403430154s ago: executing program 2 (id=931): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x0, 0x0}) mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x7f}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) ioctl$sock_bt_hci(r4, 0x800448d5, 0x0) syz_usb_connect(0x5, 0xf4, &(0x7f0000000080)=ANY=[@ANYRES64=r4, @ANYRES16=r3, @ANYRESOCT=r4], 0x0) 2m29.559562666s ago: executing program 2 (id=940): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0xb, 0x2, @SEQ_CONTROLLER=0xfe, 0x10, 0x7, 0x8b}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m29.279830488s ago: executing program 2 (id=942): sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000", @ANYRES16, @ANYBLOB="01000000000000000000130000000500030001200000069d7a92"], 0x1c}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0), 0x0) 2m28.943384974s ago: executing program 32 (id=942): sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000", @ANYRES16, @ANYBLOB="01000000000000000000130000000500030001200000069d7a92"], 0x1c}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0), 0x0) 6.206823455s ago: executing program 3 (id=2095): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/clear_refs\x00', 0x1, 0x0) dup2(r4, r4) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000080)={r1, 0xffffffffffff50cf, 0x4, 0xe1b}) write$sysctl(r6, &(0x7f00000000c0)='4\x00', 0x2) 5.810310209s ago: executing program 4 (id=2098): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a010100"/46, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465"], 0x144}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x0, 0x201, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xc00000000000000) 5.615430375s ago: executing program 4 (id=2101): memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2e, &(0x7f0000000040)=0xffffffdd, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000002c0)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)=[{&(0x7f0000000700)={0x16a8, 0x35, 0x100, 0x70bd26, 0x25dfdbfb, "", [@typed={0x14, 0xbf, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @nested={0x1179, 0x8d, 0x0, 0x1, [@generic="534c011c39e2d4c229c6955a9180d8df760f1caaa16f5901eef5e175f6e5b3bd10df5072137f73ad58e2ce330a7aa75e04cd7b26e8b4ce8a239988b1b2714d55c96f03c57c5c8733aba11c67874d56b76ef32e025b0eb49909146cf510568a302b60160b9f8590cdc248139b1968da241e85db62bf91980a2e37377b742a3c599543e145c8a9d958e4753437d7da769a36c9129f5cac9154a16e4d2ed127fded2c5027fd69d34fa368638fdbcb187619cbfc36b46c3357bc", @nested={0x4, 0x25}, @nested={0x4, 0x101}, @typed={0x8, 0x117, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="ff5ac661292084783c22004ebd9a58807c1820194dea4ab635d8e11beae51d0abbdd54ae955fde7879d39ba29d721fbbeb6580cfd0a19c75659d88cb9575696d3eea3f5b6363905cf1addb65a77992bacb0ddbf1833ef4f024810ebdd5be2d415e6f2ea2881bd65af0bd6c97571f1d6ed99fc496e7a59b20f091f302830b5893a5eced71490a11a65256ce3f2b59a467efd38d48a3c8d505dcf28db108ea2639d9dde10045e12c17485512f6e6", @generic="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"]}, @generic="f8e24ac1b2f5063000e6bed37e4e49797b6f15580fc5c4d5ae3941a9ed5d4fc124eda77b9faabd2be6a94d64c5c4fd075e0361d58877913da93f5169a78c53e727fdb9104fdb14c20036b21e5cbc79d30f82f995689485d91f7f59702d8112ff004650d6635cba4dec87e4563de98f0a72c077d3b06769736ec5d1a4c91a26181405a91c92314cfe423d2f27ec5d4ed1dcfa975fd8211f4c2beecfc03bd3b8e21a48cd0e36552cf0bae5b98514070bb377b15fda203c1553049b93b340334a03bd", @nested={0x24, 0xf0, 0x0, 0x1, [@nested={0x4, 0x149}, @typed={0x14, 0x11d, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x5, 0xae, 0x0, 0x0, @str='\x00'}]}, @generic="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", @nested={0x10d, 0xc2, 0x0, 0x1, [@nested={0x4, 0x133}, @generic="8c1112180ab612d658dc47d7fb1a195cd773e34aad346c90a9e393efb67979b02679fef7dcce1b0a16f9e4191df67f2ae108fee2641c87a811f36b3bd3862a416ceea798811268fb6996100b1f36fd8272", @typed={0x8, 0x5a, 0x0, 0x0, @ipv4=@local}, @typed={0xa3, 0x95, 0x0, 0x0, @binary="060dd37d82ace85d5e6740661efef973e6fae3e1f908e5b5dd3b0e64c7351268738a48164e63a7d7f4ec872aba7dfa7456aae5c71568cbffa352974bd1b44ee2cfb1c3b742eb9bdf99b7bedfdd9436b538eb75ac9d06238320a7338a8c82763d00b33ac28ae970f551e01d55c74c919e9e7ec1a8d23c0b4e52f83f274dff1cb849ada1d29ef2b3fe73260ca70625af2643345ad5d893d2523e44c1f26afd3c"}, @typed={0x8, 0x21, 0x0, 0x0, @fd=r3}]}, @nested={0x211, 0x122, 0x0, 0x1, [@typed={0xc, 0xbd, 0x0, 0x0, @u64=0x8000}, @nested={0x4, 0x1f}, @typed={0x4, 0xde}, @nested={0x4, 0x88}, @generic="94e2d399244c139c6a0029c52f249a7d53771c05378793baa920eb845244c90dc12dc94f38e055b4f2f6d95f151131af762fc8e21cf7fa41ae43c695", @generic="9adffbd60e0f42e2c5b5cd8217160f1d44c099d2d870a9df4703fb9e835c0bf42747c824ff9f45f4192c6f748bb63391bae11cbcca6ccd54db2f17344d6aae9eef04e45a120248bb7b63e731dfe6c3af561130de6a4cd90c7e499a06024dbb7c00a93c971a30af6f667bbd877e740c917d10e925ab4b0f115a0b73c3dee3c9fc5d541963594275105224b4315fe94305fa51ea863a64b480a88c3d38d82e27b14f9443db9fa4afff298bdc7a6506b6396f", @generic="5c0295dea17f20e7694f5cd562e0035f6201ed34b94d5244a20a237bd138aefc3070982f5e4a9f6cba6e12b88934ccf1cd2bb0868b96783cf69b4b29e22bb8acf43040df37190e7d8270087d6c82fc590a4e0b9f93c3c1abc2fe1b14bdba16f95980b0e31e9664d2aef2fe6d3faf456236aa3e4c9599eca19b236219c7a5c9740c5dfead357f4a6d6dfe9d2d749bda24a28049096240f64d47b5de39e706534801eaf73442a61e652c543c6e951d2698aa6aef2ca4ca1b4e54e41d6d3fb8ec2732fac9", @generic="5951be33acf70629adf0482e6bb745e598f63a1be47c371fde02d34f93552ea8ec01c2fd88c1c7a324279288b7acbfd0d93d549178d5522233368e9d17d50bd191022a8c4a"]}]}, 0x16a8}], 0x1, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x4004}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0xc0086202, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x100) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, &(0x7f0000000040)={0xfdfd, 0x34343452, 0x500, 0x2d0, 0x3, @stepwise={{0x1ff, 0x6}, {0x3, 0x200}, {0x7ff, 0x81}}}) io_pgetevents(0x0, 0xe8bc, 0x0, 0x0, &(0x7f00000006c0), 0x0) r7 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_open_dev$vivid(&(0x7f0000000300), 0x1, 0x2) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"]) 5.068411657s ago: executing program 4 (id=2104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa1e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x440, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x6, {0x6, 0xa, "a7ea3163"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl']) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000e80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x0, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0xffffffffffffffd8, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r2 = syz_usb_connect$cdc_ecm(0x2, 0x81, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x1, 0x42, 0xd0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x7, 0x24, 0x6, 0x0, 0x0, "f242"}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x8, 0x2, 0x20}, [@dmm={0x7, 0x24, 0x14, 0x8, 0x6}, @acm={0x4}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x2, 0x1, 0x9}, @country_functional={0x10, 0x24, 0x7, 0x98, 0x9, [0x4, 0x8, 0x1, 0x3, 0x9]}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0xfd, 0x3, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc1, 0xf, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x40, 0xc, 0x3}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x67, 0x40, 0x3f, 0xff, 0x80}, 0xae, &(0x7f0000000400)={0x5, 0xf, 0xae, 0x1, [@generic={0xa9, 0x10, 0x1, "4e519589cdc496417bd7a823e9ba418362174cf474e44c4328a3eb6c3d7931babc0c220e1f5b202f01107dba21744dc96da94c0988322a7c99a34d1008b027e2f0f753a2e1cfa25a40a29674822290a58034250f723d753e73504a9b4b5fd3932556d6bfad40052bcfe59d7a064afd181b8d44e255d4e70a2ecf0c7766500dc7099ce1c04910aa90f2c8d103440ae93272364cafa7c82dab5ccc48d94eaf139fc50349add5ef"}]}, 0x4, [{0x8d, &(0x7f00000004c0)=@string={0x8d, 0x3, "df8a1eb8b52756c07599fe82d348706bd93a1f2e1fb7ac10b5dd18f646fa0b78dbe6ce0a19b66c4441924c0ac1396b44bb42bf72c1b276a090662484c1b6c7f23506bdbbfd9d169799f9c38eb6d3a003d9ddd8aa99eedb0182d9ca71c0c28aba7aa7305eae58c6bdec0b700bd6cb0718b4f23858ef9300bf7da77b144d73a283225c2cb814d0fe8b901746"}}, {0x4, &(0x7f0000001f00)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc69}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000840)={0x14, &(0x7f00000007c0)={0x20, 0x4, 0x26, {0x26, 0x9, "7018a255eeae6652ae9f2f55b90a490fae62bc23b76868ec4b5c6268c28679fe1d117236"}}, &(0x7f0000000800)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e40)={0x1c, &(0x7f0000000940)={0x0, 0x8, 0xe5, "12d6a26cf8dec455a581821db75a1b23c6414697d710f1fe43519fa65faa1ef56d740ac38a1c71054f356332d9ea8d1f03a9947fe81797082e61cf492870bc166c00cdc8198a449dbd36f759138d40f12fc1d8ce2852b04e07a938c6d0858613b09d936fa54efb5a98084124eddb4ed0fb272c459fe2e3f1777179c179d41ab3ff9b3b41855470f892f3af711397b595f2869e8bcd2180c262c18c9d951c3c39627183c0d4f3613b731d72f91b3fdbe1a865635edfd5d09cbfc3df310ef0ca4a544503b0d52c0c2058b912529d8a0ac80173dc108b18c26a7772fc2df467bc0c173a3af28e"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0xf8}}) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000b00)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435b2156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd540810275770aa531098c572f714f6852063afc8358fb33cc7ef5c52565d58643e6805bb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c7be309200691488d6616780cd4e9020865ef41a22175dc52d35dac1232ae1164d7fee64a50651978436207fca4a9026a8a903e7857324458b7e8a143e6fdac0823c8d1a3ac864ad2d0402344aee2511247e716436fe118e65455da74ef25627785638dfa4bf365840fe12fbf73f0d42bcc66efc8693855156f6151e49471e1b7cccbfb01344f76cca177551c73147c32615b53f74a0b7c7ac25b86a01ce3", 0x18e}, {&(0x7f0000000cc0)="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"/349, 0x15d}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125", 0xab}], 0x5, &(0x7f0000000580)}, 0x0) socket(0x22, 0x2, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) syz_usb_control_io$hid(r2, &(0x7f00000016c0)={0x24, &(0x7f0000000f00)={0x40, 0xd, 0xf5, {0xf5, 0xe, "df61fdc92880dbf7273e9060c439663b0521344d4f0cbccd9f87f644779be5964130d9709631d675db6bf3193280d9aa79986e781feaf14d241fb7c47260e786c88817c1aa6348f7d3717fb3db9330775cafcaebc1f5263ab3924e87663179bd699987ff9504a7628822ed90336de0e8eb914bc3d2ced5e60cfa13594ef34134b4ce1fa27d2355c3c0dbf2bb16f3292cf3825a6198b68ed51a456a0933ab57b04554ed35e22f72a4950b166682efd223ae911431995fd86596c938493b4c7f4450957399582af0655303e8a43d7f3801c864e6d884e86d9f31de8fc6941cf3dfdb3c5e1c82aac93ca7f46387092798511048e9"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}, &(0x7f0000001640)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0x0, "dfc80a35"}, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_4={0x3, 0x1, 0x2, "b8ff0db8"}, @global=@item_4={0x3, 0x1, 0x2, "d61f6d6a"}, @local=@item_012={0x0, 0x2, 0xa}, @global=@item_4={0x3, 0x1, 0xa, "92fc1671"}, @local=@item_4={0x3, 0x2, 0x7, "e95f603c"}]}}, &(0x7f0000001680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x44, 0x1, {0x22, 0xed1}}}}, &(0x7f0000001880)={0x2c, &(0x7f0000001700)={0x20, 0x0, 0x84, "53227ac86cecdbdc93a23f71e650c7eb81cc660409a0accac359b49d19292c10abe9865a1499edc620bc2c88eb56379dec7dd3d95da09ff0b04fc854c2a6105437f9feceb7c4803018f351b3a04e236da380644b065700bee1fbd80479d4cee69a31a425fb4f14b99d58bc6ea4fc47cdff953fb1b810c9d98c84c3041303a4e8639aefef"}, &(0x7f00000017c0)={0x0, 0xa, 0x1, 0x60}, &(0x7f0000001800)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001e00)={0x20, 0x1, 0xcb, "37000f4ad878ff9d274b3b3387fa8d93338d5cb29dcd7cbd9a8e67c71053a300875a2f590a02a78438ac4eff2425a11673d7a209090e671fac2e944dda356079a00be8a96ccd46083fa24ad49de7ba8cd30c31092e087be19bcee62f37db774023ac345720790dd2c1863b985bb46d369d6bc5cbce10a17acabe605eae1db44c2ad315e6c2bcba05b34d3fae83391a42e344a6eb3e49e3d51e496de1dc220587cb20757fbfc8b650c8110450ba5069db7244ee8e75385edc9e2a788c215e0730adf7f816287111fdd7ee45"}, &(0x7f0000001840)={0x20, 0x3, 0x1, 0x4}}) syz_usb_connect(0x3, 0x527, &(0x7f00000018c0)={{0x12, 0x1, 0x200, 0x57, 0xa3, 0xe0, 0x8, 0x46d, 0x823, 0xfcf3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x515, 0x3, 0x5, 0xf8, 0x10, 0x5, [{{0x9, 0x4, 0x8f, 0x1e, 0xb, 0xe, 0x1, 0x0, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x8000}, [@mixer_unit={0xa, 0x24, 0x4, 0x6, 0x7, "7a3a2da561"}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x6, 0x4, [0x5, 0xa, 0xc, 0x1], 0xf7}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x300, 0x5, 0x5, 0xc}]}], [{{0x9, 0x5, 0x6, 0x10, 0x20, 0x6, 0x2, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x5a4}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x1a, 0x4, 0x9}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x8, 0xa, 0x9}}, {{0x9, 0x5, 0xf, 0x8, 0x400, 0x6, 0x0, 0x3}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0xc, 0x7, 0x0, [@generic={0xb6, 0x0, "2796ee955079a2ee5c6ac2b39e0ce2d75ca1cd51a1cb7810f0f6602f393baeb2a872f750879ac3c1c28cec506e6442c8712dc9ffefc1ac096574ba7d114198c4f2c4e8cf3141c593c45c86f65fe28b7099c660f6a2b75e08248dc9bcfc5e55194d0142869dab2536f17ac16f661a1ff27c4f1ee8d9b877b9725f4bbeafdf6921dded9e9edc58c4235d6db5c2adcb1381ed7ef3a7755782e27de3e7d3f8e040e869002b481c25183c9d606b617f1f1c5867d9274c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xff}]}}, {{0x9, 0x5, 0x7, 0x3, 0x240, 0x3, 0x11, 0x97, [@generic={0x81, 0x30, "aaf8d2d99212551117bd029f4c868a57670411887cc48c2a4a43804088c7f5a34a790944fb5578c247651ab5649fd631b679a8af93b3ed79ee483094eec20a1cc9d15d9a3489692478e0169b820e7d345360506f241db862336826455492269ab1a8082500643ce7d3ff85c203d187a08601ab4a868f9394860149e6338d96"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x0, 0x1b, 0x6, 0x5}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x81, 0x76, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xe}, @generic={0xb9, 0x8, "c5d34b66f635d87356684618d45fe96beee8ed81c447794a2de8f51c4049287b8bb0511101597cbf836876cdba0415917b4250d56d63b581c817d5910e4decd33a130f1013720cab8e248ce3bcf492fd37cc7b24e167e4f77f35227f5555020a35951509a58e9c0414ee6a40f76899d2dd91ba6675661524fdd99e1513ef7b06f5150400bac710cca2179112d84260ae17e459cb500c5dc7934a2c73511aafc95805c14f0139a7df96fce1d7983e3768aeae2c12e39f36"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x6, 0x27, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xbd, 0x5}, @generic={0x7d, 0x7, "d9248acabb91cbf9b21597bd4b6c4c937cf61be1fcf89efe9bf305693087868894d8462fd377ae125bf0aff3c9b17a537e05c356c115cd8d5f8b949bd4d53539fd91f81d6a93c292e4249b2e1b96ca786bcabe2fd5738a585e82eec82135bcbd9c4fb96e627101382ab4bbc7d62506380ff587d5c248daada9d482"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x200, 0x2, 0x3b, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x4}]}}, {{0x9, 0x5, 0x2, 0x4, 0x60, 0x40, 0x51, 0x1}}]}}, {{0x9, 0x4, 0x3f, 0x8, 0x4, 0x8e, 0xa2, 0xfd, 0x7f, [], [{{0x9, 0x5, 0x4, 0x2, 0x3ff, 0xd, 0x7, 0x3b, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4}]}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0x4, 0x8, 0x5, [@generic={0xb5, 0x27, "2c137ab32b700cb5827fdc6f26e75a66f9bc80cfbea5315ac6296256d189897bdcdf8aa3b3a616e2ab5870d5df1ef878b2a8de42282100d78ce6c48a1d1faf1baedab8df1c2d3db482f92f699ce76467d3415904d224082fb5cccff67c3bcc5e2821ad08ca79f878b285cc336e7a13404637f4685e830e8095aa64c7a9eea28164beb6ec1153c0020a784f304dda76fccf056bb47d41d091e4b0bbeb9135374432a02bb93d135b34eb10b2e43697796bbc82fd"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0xff, 0xe, 0x25, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x7}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x6, 0x2, 0x7}}]}}, {{0x9, 0x4, 0x94, 0x10, 0x4, 0xff, 0xff, 0xff, 0xfe, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "66679727eb"}, {0x5, 0x24, 0x0, 0x3a}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x2, 0x7}, [@dmm={0x7, 0x24, 0x14, 0x8, 0x6}, @obex={0x5, 0x24, 0x15, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x40}, @mdlm={0x15, 0x24, 0x12, 0xa37}]}], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0x5, 0x10, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x7}]}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0xff, 0xeb, 0x80}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0xf8, 0xf9, 0x3}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x0, 0x6, 0x9, [@generic={0x78, 0x21, "2414f0df8d72904d9a9f65281f085215c10debc54e710be25619acf9d92507a756157f3e327ed987b3a99ada1c5d7eb351a52201a9e50022d7859ede58a466355ed9853a2e748e3938c58b5c1ff0ab0574e63f06c9ce87a4ba4e22fb859b820494c6976306106afafbe6ad84a7ba2f53936c1362e115"}]}}]}}]}}]}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 4.996024432s ago: executing program 3 (id=2105): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "d513f68e67bd2219737cc08c4cfd51c0db6cad15e8f186801b3ccbd7d201ade648ec3e17cf934867e0233afbfc7c79f325d6fdc6424e5709f6b2ebef3bcd0c9b", 0x3b}, 0x48, 0xfffffffffffffff8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xfffffffc}}, './file0\x00'}) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x41) 4.94184693s ago: executing program 3 (id=2106): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x7}, 0x8) 4.862032885s ago: executing program 3 (id=2107): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xb, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r2, &(0x7f0000000340)="896102aecdfcc44f", 0xfdef, 0x2, 0x300000000000000, 0xf400}]) 3.261837929s ago: executing program 4 (id=2117): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') futimesat(r1, 0x0, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400080, 0xb0) (async) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r2, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={{r3, r4/1000+10000}, {0x77359400}}) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00') recvmmsg$unix(r5, &(0x7f0000002800)=[{{&(0x7f0000002340)=@abs, 0x6e, &(0x7f0000002740)=[{&(0x7f0000000340)=""/4, 0x4}, {&(0x7f00000023c0)=""/217, 0xd9}, {&(0x7f00000024c0)=""/72, 0x48}, {&(0x7f0000002540)=""/233, 0xe9}, {&(0x7f0000002640)=""/140, 0x8c}, {&(0x7f0000002700)=""/21, 0x15}], 0x6, &(0x7f00000027c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x10000, 0x0) (async) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000001340)=""/4093, 0xffd}], 0x1, 0x7, 0x46c1) (async) ioctl$TIOCGICOUNT(r5, 0x545d, 0x0) (async) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8c", 0x1d, 0x20000000, 0x0, 0x0) (async) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, 0x0, 0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) (async) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) (async) dup3(r8, r6, 0x0) r9 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}]}], {0x14}}, 0xe0}}, 0x0) preadv(r9, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {0x0, 0xfffffeef}], 0x2, 0x1, 0x9) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000206050000000000000000000000000a05000400000000000900020073797a30000000000c00078008000600000000d2050005000000000005000100060000000d000300686173683a6d6163"], 0x54}}, 0x0) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) 3.201556522s ago: executing program 4 (id=2120): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x322123, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00'}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000040)={0x0, 0x23, 0x2, {0x2, 0xf}}, 0x0, &(0x7f0000000340)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x6a, 0x0, 0x2, 0x54, 0x9, 0x1a}}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004c8, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3, 0x5], 0xeeee8000, 0x202}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000000c0)=@x86={0x9, 0x16, 0xff, 0x0, 0x3, 0x3, 0x6, 0xff, 0x8, 0x4, 0x8, 0x81, 0x0, 0x4, 0x5, 0x81, 0x0, 0x5, 0xfa, '\x00', 0x8, 0x3ff}) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0000000000000000100000001"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000009f0800400100000000000000000000000b000000000000000900000000000000090000000000000001000000060010002a000000010000000100000000000000000001000300000000000000b908000000000000000000000000000000000200"]) 2.874106306s ago: executing program 1 (id=2128): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r3, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10020, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r4 = dup3(r1, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0xa26b1a4fb20b8820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0xe, @rand_addr=' \x01\x00', 0x7b}, 0x1c) 1.936769616s ago: executing program 1 (id=2130): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0xfe, 0x10, 0x0, 0x0, 0x0, 0x7e4, 0x0, 0x0, 0x45, [0x7fff, 0x10000000]}}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}], 0x7}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac1a190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r4, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd1}, 0x40048c2) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000020a01040000000000000000010000000900030073797a31000000000900010073797a3100000040000000000000004000000005080002401b2fd2c5140003006970366772653000000000000000000028000000000a05000000000000000000010000080900010073797a31"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1.695758134s ago: executing program 3 (id=2131): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)={0x233, 0x7d, 0x2, {{0x500, 0xf2, 0x0, 0x4, {0x0, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0xf, '\xcf\xc2m\xd7\xc5\xb4\x99\xbf\xb4+\x93\x80~\x8bZ', 0x5d, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\xa6\x1dR\xc3l\xde{\a\xdb\xda\xb2\x88K\xaf\x05\x00~\x04\xe6\x9d\xb0\xc3\xca\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x9e\x95?\xa5\xe0R\x15t\x80\xe8\x00'/93}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4U\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x233) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f00000003c0)=0x1, 0x4) syz_usb_connect$cdc_ncm(0x5, 0x94, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x2, 0x1, 0xf8, 0x0, 0xfb, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfbff}, {0xd, 0x24, 0xf, 0x1, 0x6be1, 0x140, 0x8, 0xcf}, {0x6, 0x24, 0x1a, 0x9, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x2, 0x6}, @acm={0x4, 0x24, 0x2, 0x10}, @mdlm={0x15, 0x24, 0x12, 0x9}, @obex={0x5, 0x24, 0x15, 0xdee}]}, {{0x9, 0x5, 0x81, 0x3, 0x238, 0x7f, 0x8, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x8c, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0x1, 0x7f}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x0, 0x9, 0x9, 0x5, 0x20, 0x6}, 0x4b, &(0x7f0000000580)={0x5, 0xf, 0x4b, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x89, 0x2, 0x1, 0xec, 0x7}, @ssp_cap={0x20, 0x10, 0xa, 0xe, 0x5, 0x401, 0xf, 0x6, [0x0, 0xff3f0f, 0xffc0c0, 0x3f00, 0xff001e]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x5, 0x8001}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x9, 0x0, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x4, 0x6, 0x4}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x403}}, {0xb5, &(0x7f0000000280)=@string={0xb5, 0x3, "7e35616605fcc122c6fe11928d56893ba1515f63855dbffba9581bcb266b2c72d8d0c9c52cc8b4e03b6ce7ce26f7462964e52a826672334fa78d484a6982558a937c52b099de0887e823821f17a6a98b35eb38b02185ab1d56cb0e64d68ab369e2143dd46dc2beb84d57afe50a8a204f4c5b507985a9c84cedf87f54631fd17cb34d6b7b9a84f68a2a1793ae33193d0489983ec28b55d311257345fb8813f229e782d91ede9b5057a3c3025c2ef9f26753b906"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2009}}, {0x9c, &(0x7f0000000640)=ANY=[@ANYBLOB="9c03868ef469914140b276e78265a1af7e968b7331341b8e87b28c59e0ef87c616d87a1fb95030dc1c4e65ee4452c8cb4ac927342ae3193050532d40e930216509f8789de616fa48a495e9ad319e174c50d0fc1e5c7e07fa98fdf2cba8c13d641742b85bfa82c1fe9f587d7370453a310b129c477b6b4f24f6cad75b68be5bceb5be4b0bd9adf5708acdfb418287173cc784bf695c97e648c3c28c6011ec11f5066fe4ba64948064"]}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'hsr0\x00', {}, 0x2}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000000c0)={0x0, 'veth0_to_bond\x00', {0x2}, 0x800}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000540)={@my=0x0, 0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) (async) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) (async) write$P9_RSTATu(r0, &(0x7f0000000080)={0x233, 0x7d, 0x2, {{0x500, 0xf2, 0x0, 0x4, {0x0, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0xf, '\xcf\xc2m\xd7\xc5\xb4\x99\xbf\xb4+\x93\x80~\x8bZ', 0x5d, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\xa6\x1dR\xc3l\xde{\a\xdb\xda\xb2\x88K\xaf\x05\x00~\x04\xe6\x9d\xb0\xc3\xca\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x9e\x95?\xa5\xe0R\x15t\x80\xe8\x00'/93}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4U\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x233) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f00000003c0)=0x1, 0x4) (async) syz_usb_connect$cdc_ncm(0x5, 0x94, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x2, 0x1, 0xf8, 0x0, 0xfb, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfbff}, {0xd, 0x24, 0xf, 0x1, 0x6be1, 0x140, 0x8, 0xcf}, {0x6, 0x24, 0x1a, 0x9, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x2, 0x6}, @acm={0x4, 0x24, 0x2, 0x10}, @mdlm={0x15, 0x24, 0x12, 0x9}, @obex={0x5, 0x24, 0x15, 0xdee}]}, {{0x9, 0x5, 0x81, 0x3, 0x238, 0x7f, 0x8, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x8c, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0x1, 0x7f}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x0, 0x9, 0x9, 0x5, 0x20, 0x6}, 0x4b, &(0x7f0000000580)={0x5, 0xf, 0x4b, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x89, 0x2, 0x1, 0xec, 0x7}, @ssp_cap={0x20, 0x10, 0xa, 0xe, 0x5, 0x401, 0xf, 0x6, [0x0, 0xff3f0f, 0xffc0c0, 0x3f00, 0xff001e]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x5, 0x8001}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x9, 0x0, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x4, 0x6, 0x4}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x403}}, {0xb5, &(0x7f0000000280)=@string={0xb5, 0x3, "7e35616605fcc122c6fe11928d56893ba1515f63855dbffba9581bcb266b2c72d8d0c9c52cc8b4e03b6ce7ce26f7462964e52a826672334fa78d484a6982558a937c52b099de0887e823821f17a6a98b35eb38b02185ab1d56cb0e64d68ab369e2143dd46dc2beb84d57afe50a8a204f4c5b507985a9c84cedf87f54631fd17cb34d6b7b9a84f68a2a1793ae33193d0489983ec28b55d311257345fb8813f229e782d91ede9b5057a3c3025c2ef9f26753b906"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2009}}, {0x9c, &(0x7f0000000640)=ANY=[@ANYBLOB="9c03868ef469914140b276e78265a1af7e968b7331341b8e87b28c59e0ef87c616d87a1fb95030dc1c4e65ee4452c8cb4ac927342ae3193050532d40e930216509f8789de616fa48a495e9ad319e174c50d0fc1e5c7e07fa98fdf2cba8c13d641742b85bfa82c1fe9f587d7370453a310b129c477b6b4f24f6cad75b68be5bceb5be4b0bd9adf5708acdfb418287173cc784bf695c97e648c3c28c6011ec11f5066fe4ba64948064"]}]}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'hsr0\x00', {}, 0x2}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000000c0)={0x0, 'veth0_to_bond\x00', {0x2}, 0x800}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000540)={@my=0x0, 0x1}) (async) 1.281926157s ago: executing program 1 (id=2135): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x481) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 1.250789945s ago: executing program 1 (id=2136): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2e981, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0xb29, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002cbd700004000000050000000800090002000000050021000100000006001b004e24000006001a004e24f290"], 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{}, {0x77359400}}, &(0x7f0000000380)) (async) timer_settime(r6, 0x0, &(0x7f0000000340)={{}, {0x77359400}}, &(0x7f0000000380)) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r7, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f00000002c0)) (async) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f00000002c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r8, 0x3, r1, 0x5}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r8, 0x3, r1, 0x5}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a090400000000000000000200000028000480240001800900010068617368000000000a000000000000000000000908000240000000110900010073797a30000000000900020073687a3200000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r10, @ANYBLOB="000b27bd7000fcdbdf250b000000280007800c00040005000000000000000c00030005000000000000000c00040007000000000000001400098008000200000000000800010000000080a40002800400040008000100199d000034000380080001000100000008000200020000000800010000040000080002000400000008000100010000000800010054b10000040004000400040008000100050000002c00038008000100010000000800010000000000080001007f000000080001000400000008000200020000002400038008000200fdffffff0800020000010000080001000800000008000100090000008fe6f41f01bfd9ecb952df3454ab19211b900512acdf6328f180f3df2e83ca8bfeb598fdfe816e763c43c7c640beab20f2d788d3b3a83368989971046da0eb6aaf2581833ba402301b78088d0046aaa7142dc2949de78cdc7df7f0f73d45bbd0fe48fef52b104a91dbd47a16f54b48818182b094c81e047556fdca03d82261e87a39c543f03530748625aa4714eee6bb71d860c5708a32dcee96ada03d62593f6ddcbfb22879bd5978a30f277416d900e0aa8f8633b60621b2f972f211ef47072d878e22384ad588a4dd0d9aa2c1dc3a798f5d29a66ce5bb362749618b905ddddc1cabcb4b992336659420485280699bea4d74418ef6"], 0xf4}, 0x1, 0x0, 0x0, 0x48080}, 0x1) 953.939271ms ago: executing program 0 (id=2139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}}], {0x14}}, 0xb0}}, 0x0) 881.840988ms ago: executing program 1 (id=2140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}}], {0x14}}, 0xb0}}, 0x0) (fail_nth: 3) 817.71854ms ago: executing program 3 (id=2141): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x880, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x20010, r0, 0xd38da000) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_usb_connect(0x1, 0x64, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000002ffa94008191513000001020301090246e620187656000100000000090400000425130d000a240100000002010205240450f7a8c98f4443da48753fa35c8ddd2c3911a75d53b86d25d85a2889133118ceea0aa63e07e3d2dd7732011dcf34b0280d0862a94624a16f19fd063f93d8683c0963233dcb652cb4eefb78ccaae995"], 0x0) 778.062453ms ago: executing program 1 (id=2142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x2, 0x480000) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffb, 0x0, 0xb0, @scatter={0x0, 0x40000000, 0x0}, 0x0, 0x0, 0x3, 0x10000, 0x22, 0x0}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7", 0x0, 0xa7}) getpeername$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 762.772197ms ago: executing program 0 (id=2143): r0 = socket(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x40801) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}]}, 0x404c080) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2004}], 0x1, 0x40000002, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r2, 0x0) 663.744798ms ago: executing program 0 (id=2145): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x2}, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'macvlan1\x00', &(0x7f0000000000)=@ethtool_eeprom={0x43, 0x1ff, 0xfffffff9}}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7ffd}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) r4 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000034c0)=""/4092, 0xffc}, {&(0x7f0000000200)=""/131, 0x83}, {&(0x7f0000001cc0)=""/205, 0xcd}, {&(0x7f00000044c0)=""/4091, 0xffb}, {&(0x7f0000000600)=""/95, 0x5f}, {&(0x7f0000000780)=""/253, 0xfd}, {&(0x7f0000001c40)=""/73, 0x49}, {&(0x7f0000000440)=""/61, 0x3d}, {&(0x7f0000000a00)=""/204, 0xcc}, {&(0x7f0000001dc0)=""/143, 0x8f}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0xb}, 0x40016002) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0xd5}], 0x1}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000)=0x80, 0x9, 0x3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDADDIO(r5, 0x4b34, 0x4) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x13) 451.521899ms ago: executing program 0 (id=2146): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mount$cgroup(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x2400, &(0x7f00000005c0)={[{}], [{@flag='nolazytime'}, {@permit_directio}, {@audit}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000080)={0x104, 0x2, {0xffffffffffffffff, 0x3, 0x4, 0x3, 0xffffffff}, 0x4}) r6 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100280000000000000002000000200001"], 0x34}}, 0x0) r7 = pidfd_getfd(r3, r3, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x5e1e, 0x0, @mcast2, 0x1}, 0x1c) getsockopt$sock_buf(r8, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) setns(r7, 0x66020000) umount2(&(0x7f0000000600)='./file0\x00', 0x19) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000040)={0x80, "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"}) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x412400, 0x0) process_madvise(r9, &(0x7f00000004c0)=[{&(0x7f00000002c0)="6de4fc1a25b355c5f5f1ebd4d949d17346173c904426e7a277c2ded072b1bff7e0c6e51e259ad9b2af3240f9408a1c3ca44c6f2d864632e53dcac271824b5b3f9e9527e41f0f999721faf224b0f391ba9c2b7569134947c1156f1db80e54e521f3fcb15512d37ec8d998dbada96d11763b9a11fc8ee99477a873fc8e81d517ced59cc453bb7289d8329ea532bcc4acdeec8504a9c17c69ecb860d21f7d866c445e532b30cbc8aa4c20a996d02bd7c55b9f83440c10442037912f1f84471651a0a3b7f3884d", 0xc5}, {&(0x7f00000003c0)="ffe7520af83977b6cc6a221841574e8dc4cd8b4f53ceb4d316fe9adbce5b34a169c100926941311f330e2d6eb18932", 0x2f}, {&(0x7f0000000400)="e0", 0x1}, {&(0x7f0000000440)="d3718a87676f6ac355223c", 0xb}, {&(0x7f0000000480)="cbb37df517c5503f8deb6dfff8ea982292a290bcb4e35447cbb64bf8975a99506303", 0x22}], 0x5, 0x0, 0x0) 362.845794ms ago: executing program 0 (id=2147): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x6000000) 13.76729ms ago: executing program 4 (id=2148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r1, 0x80079a0) lseek(r1, 0x0, 0x4) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x12, {[@main=@item_4={0x3, 0x0, 0x9, "250156ba"}, @main=@item_4={0x3, 0x0, 0x9, "c9a46a31"}, @global=@item_012={0x1, 0x1, 0x1, ' '}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) setxattr$incfs_metadata(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0), 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}}], {0x14}}, 0xb0}}, 0x0) 0s ago: executing program 0 (id=2149): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x78, 0x0, 0x2e0426e9, {0x8000, 0xd1, 0x0, {0x2, 0x0, 0xdc5f65a, 0xc17, 0x5, 0x9b, 0xf79c000, 0x2339fdf8, 0x5, 0x8000, 0x538, 0x0, 0xffffffffffffffff, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1020) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0xfffffffffffffffd, 0x5, 0xfffffff8}}, 0x30) write$FUSE_DIRENTPLUS(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="b0"], 0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) kernel console output (not intermixed with test programs): 5-1: can't read configurations, error -61 [ 288.247825][ T5956] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 288.276309][ T5956] usb 5-1: Using ep0 maxpacket: 16 [ 288.290460][ T5956] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 288.304357][ T5956] usb 5-1: can't read configurations, error -61 [ 288.322082][ T5956] usb usb5-port1: unable to enumerate USB device [ 288.949474][T10647] tipc: Started in network mode [ 288.974015][T10647] tipc: Node identity 9, cluster identity 4711 [ 288.996368][T10647] tipc: Node number set to 9 [ 289.388673][ T5956] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 289.558518][ T5956] usb 4-1: Using ep0 maxpacket: 32 [ 289.568901][ T5956] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 289.577733][ T5956] usb 4-1: config 0 has no interface number 0 [ 289.587357][ T5956] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 289.607250][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.628769][ T5956] usb 4-1: Product: syz [ 289.632974][ T5956] usb 4-1: Manufacturer: syz [ 289.638013][ T5956] usb 4-1: SerialNumber: syz [ 289.658640][ T5956] usb 4-1: config 0 descriptor?? [ 289.676895][ T5956] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 289.914815][ T5956] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 289.923108][T10686] netlink: 328 bytes leftover after parsing attributes in process `syz.0.1564'. [ 289.953851][T10688] C: renamed from team_slave_0 (while UP) [ 289.966322][ T5956] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 289.994154][T10688] netlink: 'syz.4.1565': attribute type 4 has an invalid length. [ 290.016083][T10688] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1565'. [ 290.043570][T10688] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 290.305172][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 290.305858][ T5896] usb 4-1: USB disconnect, device number 86 [ 290.372216][ T5896] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 290.413365][ T5896] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 290.447200][ T5896] quatech2 4-1:0.51: device disconnected [ 290.458084][ T5863] Bluetooth: hci0: unexpected event for opcode 0x042e [ 290.466184][ T5863] Bluetooth: hci0: unexpected event for opcode 0x042e [ 290.534634][T10701] netlink: 'syz.0.1569': attribute type 4 has an invalid length. [ 290.551650][T10701] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1569'. [ 290.588539][T10701] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 290.741816][T10704] FAULT_INJECTION: forcing a failure. [ 290.741816][T10704] name failslab, interval 1, probability 0, space 0, times 0 [ 290.757359][T10704] CPU: 1 UID: 0 PID: 10704 Comm: syz.0.1569 Not tainted syzkaller #0 PREEMPT(full) [ 290.757384][T10704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.757395][T10704] Call Trace: [ 290.757403][T10704] [ 290.757411][T10704] dump_stack_lvl+0x189/0x250 [ 290.757443][T10704] ? __pfx____ratelimit+0x10/0x10 [ 290.757465][T10704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.757490][T10704] ? __pfx__printk+0x10/0x10 [ 290.757520][T10704] ? __pfx___might_resched+0x10/0x10 [ 290.757544][T10704] should_fail_ex+0x414/0x560 [ 290.757567][T10704] should_failslab+0xa8/0x100 [ 290.757588][T10704] __kmalloc_noprof+0xcb/0x7f0 [ 290.757604][T10704] ? kfree+0x4d/0x6d0 [ 290.757625][T10704] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 290.757657][T10704] tomoyo_realpath_from_path+0xe3/0x5d0 [ 290.757682][T10704] ? tomoyo_domain+0xd9/0x130 [ 290.757713][T10704] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 290.757734][T10704] tomoyo_path_number_perm+0x1e8/0x5a0 [ 290.757758][T10704] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 290.757820][T10704] ? __fget_files+0x2a/0x420 [ 290.757846][T10704] ? __fget_files+0x3a0/0x420 [ 290.757866][T10704] ? __fget_files+0x2a/0x420 [ 290.757892][T10704] security_file_ioctl+0xcb/0x2d0 [ 290.757913][T10704] __se_sys_ioctl+0x47/0x170 [ 290.757934][T10704] do_syscall_64+0xfa/0xfa0 [ 290.757958][T10704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.757974][T10704] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 290.757992][T10704] ? clear_bhb_loop+0x60/0xb0 [ 290.758013][T10704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.758030][T10704] RIP: 0033:0x7f6c6d98ebe9 [ 290.758047][T10704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.758062][T10704] RSP: 002b:00007f6c6e851038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.758081][T10704] RAX: ffffffffffffffda RBX: 00007f6c6dbc6090 RCX: 00007f6c6d98ebe9 [ 290.758094][T10704] RDX: 0000200000000100 RSI: 0000000000005412 RDI: 0000000000000003 [ 290.758106][T10704] RBP: 00007f6c6e851090 R08: 0000000000000000 R09: 0000000000000000 [ 290.758117][T10704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.758127][T10704] R13: 00007f6c6dbc6128 R14: 00007f6c6dbc6090 R15: 00007ffcb6336508 [ 290.758166][T10704] [ 290.758175][T10704] ERROR: Out of memory at tomoyo_realpath_from_path. [ 291.100081][T10720] FAULT_INJECTION: forcing a failure. [ 291.100081][T10720] name failslab, interval 1, probability 0, space 0, times 0 [ 291.100113][T10720] CPU: 1 UID: 0 PID: 10720 Comm: syz.4.1573 Not tainted syzkaller #0 PREEMPT(full) [ 291.100132][T10720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.100142][T10720] Call Trace: [ 291.100151][T10720] [ 291.100158][T10720] dump_stack_lvl+0x189/0x250 [ 291.100188][T10720] ? __pfx____ratelimit+0x10/0x10 [ 291.100211][T10720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.100234][T10720] ? __pfx__printk+0x10/0x10 [ 291.100263][T10720] ? __pfx___might_resched+0x10/0x10 [ 291.100282][T10720] ? fs_reclaim_acquire+0x7d/0x100 [ 291.100306][T10720] should_fail_ex+0x414/0x560 [ 291.100331][T10720] should_failslab+0xa8/0x100 [ 291.100351][T10720] kmem_cache_alloc_noprof+0x74/0x6e0 [ 291.100376][T10720] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 291.100405][T10720] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 291.100440][T10720] mmu_topup_memory_caches+0x21/0x170 [ 291.100465][T10720] kvm_mmu_load+0x9d/0x2300 [ 291.100487][T10720] ? queue_delayed_work_on+0x1f7/0x280 [ 291.100513][T10720] ? kvm_end_pvclock_update+0x2c4/0x3b0 [ 291.100534][T10720] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 291.100555][T10720] ? kvm_apic_has_interrupt+0x744/0x770 [ 291.100571][T10720] ? vmx_flush_tlb_guest+0x27a/0x4c0 [ 291.100607][T10720] vcpu_run+0x48a8/0x7020 [ 291.100704][T10720] ? __pfx_vcpu_run+0x10/0x10 [ 291.100729][T10720] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 291.100762][T10720] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 291.100786][T10720] ? osq_unlock+0x92/0x260 [ 291.100811][T10720] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 291.100828][T10720] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 291.100848][T10720] ? rcu_is_watching+0x15/0xb0 [ 291.100875][T10720] ? trace_contention_end+0x39/0x120 [ 291.100897][T10720] ? look_up_lock_class+0x74/0x170 [ 291.100922][T10720] ? register_lock_class+0x51/0x320 [ 291.100947][T10720] ? __lock_acquire+0xab9/0xd20 [ 291.100994][T10720] kvm_vcpu_ioctl+0x95c/0xe90 [ 291.101018][T10720] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 291.101058][T10720] ? __fget_files+0x2a/0x420 [ 291.101085][T10720] ? __fget_files+0x3a0/0x420 [ 291.101104][T10720] ? __fget_files+0x2a/0x420 [ 291.101128][T10720] ? bpf_lsm_file_ioctl+0x9/0x20 [ 291.101151][T10720] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 291.101168][T10720] __se_sys_ioctl+0xfc/0x170 [ 291.101188][T10720] do_syscall_64+0xfa/0xfa0 [ 291.101207][T10720] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.101228][T10720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.101245][T10720] ? clear_bhb_loop+0x60/0xb0 [ 291.101265][T10720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.101280][T10720] RIP: 0033:0x7f39a1f8ebe9 [ 291.101296][T10720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.101311][T10720] RSP: 002b:00007f39a2d94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.101331][T10720] RAX: ffffffffffffffda RBX: 00007f39a21c6090 RCX: 00007f39a1f8ebe9 [ 291.101345][T10720] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 291.101356][T10720] RBP: 00007f39a2d94090 R08: 0000000000000000 R09: 0000000000000000 [ 291.101367][T10720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 291.101377][T10720] R13: 00007f39a21c6128 R14: 00007f39a21c6090 R15: 00007ffe0491a968 [ 291.101409][T10720] [ 291.525684][ T5944] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 291.683439][ T5944] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.814640][ T5944] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 291.834974][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.847226][ T5944] usb 5-1: Product: syz [ 291.851453][ T5944] usb 5-1: Manufacturer: syz [ 291.857743][ T5944] usb 5-1: SerialNumber: syz [ 291.866381][ T5944] usb 5-1: config 0 descriptor?? [ 291.877681][ T5944] powermate 5-1:0.0: probe with driver powermate failed with error -22 [ 291.941241][T10741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1582'. [ 292.076490][ T5944] usb 5-1: USB disconnect, device number 32 [ 292.178677][T10745] syzkaller1: entered promiscuous mode [ 292.184251][T10745] syzkaller1: entered allmulticast mode [ 292.954177][T10773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.980808][T10773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.514218][T10789] syzkaller1: entered promiscuous mode [ 293.521490][T10789] syzkaller1: entered allmulticast mode [ 293.656958][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1602'. [ 294.457749][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1621'. [ 294.580084][T10845] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 294.592344][T10845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.767998][T10850] fuse: Bad value for 'fd' [ 294.902441][ T5956] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 295.065644][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 295.077175][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.096015][ T5956] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 295.109755][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.127363][ T5956] usb 4-1: config 0 descriptor?? [ 295.175781][ T5910] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 295.318156][ T5910] usb 5-1: device descriptor read/64, error -71 [ 295.371162][T10876] pim6reg: entered allmulticast mode [ 295.559119][ T5956] mcp2221 0003:04D8:00DD.0010: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 295.571095][ T5910] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 295.587242][T10872] netlink: 'syz.0.1631': attribute type 4 has an invalid length. [ 295.595178][T10872] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1631'. [ 295.726227][ T5910] usb 5-1: device descriptor read/64, error -71 [ 295.840110][ T5910] usb usb5-port1: attempt power cycle [ 296.074963][ T5896] usb 4-1: USB disconnect, device number 87 [ 296.195941][ T5910] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 296.247892][ T5910] usb 5-1: device descriptor read/8, error -71 [ 296.496072][ T5910] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 296.526222][T10903] syz.1.1647 (10903) used greatest stack depth: 17832 bytes left [ 296.548549][ T5910] usb 5-1: device descriptor read/8, error -71 [ 296.579306][T10915] FAULT_INJECTION: forcing a failure. [ 296.579306][T10915] name failslab, interval 1, probability 0, space 0, times 0 [ 296.612510][T10915] CPU: 1 UID: 0 PID: 10915 Comm: syz.0.1649 Not tainted syzkaller #0 PREEMPT(full) [ 296.612536][T10915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.612548][T10915] Call Trace: [ 296.612555][T10915] [ 296.612564][T10915] dump_stack_lvl+0x189/0x250 [ 296.612594][T10915] ? __pfx____ratelimit+0x10/0x10 [ 296.612617][T10915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.612642][T10915] ? __pfx__printk+0x10/0x10 [ 296.612676][T10915] ? __pfx___might_resched+0x10/0x10 [ 296.612697][T10915] ? fs_reclaim_acquire+0x7d/0x100 [ 296.612722][T10915] should_fail_ex+0x414/0x560 [ 296.612749][T10915] should_failslab+0xa8/0x100 [ 296.612772][T10915] kmem_cache_alloc_noprof+0x74/0x6e0 [ 296.612798][T10915] ? fuse_get_req+0x7b9/0x10b0 [ 296.612820][T10915] ? stack_trace_save+0x9c/0xe0 [ 296.612848][T10915] fuse_get_req+0x7b9/0x10b0 [ 296.612869][T10915] ? stack_depot_save_flags+0x40/0x860 [ 296.612891][T10915] ? is_bpf_text_address+0x292/0x2b0 [ 296.612915][T10915] ? kasan_save_track+0x4f/0x80 [ 296.612933][T10915] ? __pfx_fuse_get_req+0x10/0x10 [ 296.612954][T10915] ? fuse_atomic_open+0x173/0x440 [ 296.612972][T10915] ? path_openat+0xf66/0x3830 [ 296.612988][T10915] ? do_filp_open+0x1fa/0x410 [ 296.613003][T10915] ? do_sys_openat2+0x121/0x1c0 [ 296.613025][T10915] ? __x64_sys_open+0x11e/0x150 [ 296.613047][T10915] ? do_syscall_64+0xfa/0xfa0 [ 296.613068][T10915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.613100][T10915] __fuse_simple_request+0x2aa/0x18d0 [ 296.613136][T10915] ? __pfx___fuse_simple_request+0x10/0x10 [ 296.613181][T10915] ? __kasan_kmalloc+0x93/0xb0 [ 296.613200][T10915] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 296.613217][T10915] ? __pfx___mutex_trylock_common+0x10/0x10 [ 296.613249][T10915] fuse_lookup_name+0x34c/0x860 [ 296.613283][T10915] ? __pfx_fuse_lookup_name+0x10/0x10 [ 296.613303][T10915] ? fuse_lock_inode+0xd3/0x120 [ 296.613355][T10915] fuse_lookup+0x1e9/0x640 [ 296.613383][T10915] ? __pfx_fuse_lookup+0x10/0x10 [ 296.613417][T10915] ? __pfx_d_alloc_parallel+0x10/0x10 [ 296.613442][T10915] fuse_atomic_open+0x173/0x440 [ 296.613467][T10915] ? __pfx_fuse_atomic_open+0x10/0x10 [ 296.613490][T10915] path_openat+0xf66/0x3830 [ 296.613548][T10915] ? __pfx_path_openat+0x10/0x10 [ 296.613589][T10915] do_filp_open+0x1fa/0x410 [ 296.613605][T10915] ? __lock_acquire+0xab9/0xd20 [ 296.613626][T10915] ? __pfx_do_filp_open+0x10/0x10 [ 296.613675][T10915] ? _raw_spin_unlock+0x28/0x50 [ 296.613695][T10915] ? alloc_fd+0x64c/0x6c0 [ 296.613727][T10915] do_sys_openat2+0x121/0x1c0 [ 296.613755][T10915] ? __pfx_do_sys_openat2+0x10/0x10 [ 296.613780][T10915] ? ksys_write+0x22a/0x250 [ 296.613803][T10915] ? __pfx_ksys_write+0x10/0x10 [ 296.613825][T10915] __x64_sys_open+0x11e/0x150 [ 296.613855][T10915] do_syscall_64+0xfa/0xfa0 [ 296.613876][T10915] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.613898][T10915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.613915][T10915] ? clear_bhb_loop+0x60/0xb0 [ 296.613936][T10915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.613954][T10915] RIP: 0033:0x7f6c6d98ebe9 [ 296.613971][T10915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.613985][T10915] RSP: 002b:00007f6c6e851038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 296.614004][T10915] RAX: ffffffffffffffda RBX: 00007f6c6dbc6090 RCX: 00007f6c6d98ebe9 [ 296.614018][T10915] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00002000000001c0 [ 296.614029][T10915] RBP: 00007f6c6e851090 R08: 0000000000000000 R09: 0000000000000000 [ 296.614040][T10915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.614051][T10915] R13: 00007f6c6dbc6128 R14: 00007f6c6dbc6090 R15: 00007ffcb6336508 [ 296.614084][T10915] [ 296.987588][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 297.015192][ T5910] usb usb5-port1: unable to enumerate USB device [ 297.553952][T10931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.569322][T10931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.675826][ T5910] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 297.825617][ T5910] usb 4-1: device descriptor read/64, error -71 [ 297.915397][T10936] netlink: 'syz.1.1658': attribute type 6 has an invalid length. [ 298.065644][ T5910] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 298.196680][ T5910] usb 4-1: device descriptor read/64, error -71 [ 298.244415][T10949] FAULT_INJECTION: forcing a failure. [ 298.244415][T10949] name failslab, interval 1, probability 0, space 0, times 0 [ 298.260590][T10949] CPU: 0 UID: 0 PID: 10949 Comm: syz.4.1663 Not tainted syzkaller #0 PREEMPT(full) [ 298.260615][T10949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.260627][T10949] Call Trace: [ 298.260634][T10949] [ 298.260642][T10949] dump_stack_lvl+0x189/0x250 [ 298.260673][T10949] ? __pfx____ratelimit+0x10/0x10 [ 298.260696][T10949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.260721][T10949] ? __pfx__printk+0x10/0x10 [ 298.260751][T10949] ? __pfx___might_resched+0x10/0x10 [ 298.260776][T10949] should_fail_ex+0x414/0x560 [ 298.260801][T10949] should_failslab+0xa8/0x100 [ 298.260823][T10949] __kmalloc_noprof+0xcb/0x7f0 [ 298.260840][T10949] ? kfree+0x4d/0x6d0 [ 298.260861][T10949] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 298.260892][T10949] tomoyo_realpath_from_path+0xe3/0x5d0 [ 298.260918][T10949] ? tomoyo_domain+0xd9/0x130 [ 298.260947][T10949] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 298.260969][T10949] tomoyo_path_number_perm+0x1e8/0x5a0 [ 298.260993][T10949] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 298.261056][T10949] ? __fget_files+0x2a/0x420 [ 298.261082][T10949] ? __fget_files+0x3a0/0x420 [ 298.261102][T10949] ? __fget_files+0x2a/0x420 [ 298.261128][T10949] security_file_ioctl+0xcb/0x2d0 [ 298.261151][T10949] __se_sys_ioctl+0x47/0x170 [ 298.261173][T10949] do_syscall_64+0xfa/0xfa0 [ 298.261194][T10949] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.261217][T10949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.261234][T10949] ? clear_bhb_loop+0x60/0xb0 [ 298.261256][T10949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.261280][T10949] RIP: 0033:0x7f39a1f8ebe9 [ 298.261297][T10949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.261311][T10949] RSP: 002b:00007f39a2db5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.261330][T10949] RAX: ffffffffffffffda RBX: 00007f39a21c5fa0 RCX: 00007f39a1f8ebe9 [ 298.261344][T10949] RDX: 0000200000000500 RSI: 00000000c058565d RDI: 0000000000000003 [ 298.261356][T10949] RBP: 00007f39a2db5090 R08: 0000000000000000 R09: 0000000000000000 [ 298.261367][T10949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.261378][T10949] R13: 00007f39a21c6038 R14: 00007f39a21c5fa0 R15: 00007ffe0491a968 [ 298.261409][T10949] [ 298.261417][T10949] ERROR: Out of memory at tomoyo_realpath_from_path. [ 298.365194][ T30] audit: type=1326 audit(1757429487.758:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.1.1665" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e3478ebe9 code=0x0 [ 298.375681][ T5910] usb usb4-port1: attempt power cycle [ 298.740563][T10966] FAULT_INJECTION: forcing a failure. [ 298.740563][T10966] name failslab, interval 1, probability 0, space 0, times 0 [ 298.753566][T10966] CPU: 0 UID: 0 PID: 10966 Comm: syz.0.1669 Not tainted syzkaller #0 PREEMPT(full) [ 298.753589][T10966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.753600][T10966] Call Trace: [ 298.753607][T10966] [ 298.753614][T10966] dump_stack_lvl+0x189/0x250 [ 298.753645][T10966] ? __pfx____ratelimit+0x10/0x10 [ 298.753669][T10966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.753694][T10966] ? __pfx__printk+0x10/0x10 [ 298.753724][T10966] ? __pfx___might_resched+0x10/0x10 [ 298.753750][T10966] should_fail_ex+0x414/0x560 [ 298.753776][T10966] should_failslab+0xa8/0x100 [ 298.753799][T10966] __kmalloc_noprof+0xcb/0x7f0 [ 298.753817][T10966] ? iter_file_splice_write+0x1c6/0x10e0 [ 298.753846][T10966] iter_file_splice_write+0x1c6/0x10e0 [ 298.753866][T10966] ? __vfs_getxattr+0x3f4/0x430 [ 298.753913][T10966] ? __pfx_iter_file_splice_write+0x10/0x10 [ 298.753944][T10966] ? rcu_read_lock_any_held+0xb3/0x120 [ 298.753964][T10966] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 298.753985][T10966] ? ovl_real_file_path+0x145/0x310 [ 298.754015][T10966] backing_file_splice_write+0x3c1/0x5e0 [ 298.754053][T10966] ovl_splice_write+0x43d/0x580 [ 298.754075][T10966] ? __lock_acquire+0xab9/0xd20 [ 298.754099][T10966] ? __pfx_ovl_splice_write+0x10/0x10 [ 298.754123][T10966] ? __pfx_ovl_file_end_write+0x10/0x10 [ 298.754148][T10966] ? rcu_read_lock_any_held+0xb3/0x120 [ 298.754183][T10966] ? __pfx_ovl_splice_write+0x10/0x10 [ 298.754208][T10966] direct_splice_actor+0xfe/0x160 [ 298.754233][T10966] splice_direct_to_actor+0x5a8/0xcc0 [ 298.754277][T10966] ? __pfx_direct_splice_actor+0x10/0x10 [ 298.754298][T10966] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 298.754332][T10966] do_splice_direct+0x181/0x270 [ 298.754356][T10966] ? __pfx_do_splice_direct+0x10/0x10 [ 298.754379][T10966] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 298.754409][T10966] ? rw_verify_area+0x255/0x4d0 [ 298.754432][T10966] do_sendfile+0x4da/0x7e0 [ 298.754465][T10966] ? __pfx_do_sendfile+0x10/0x10 [ 298.754503][T10966] __se_sys_sendfile64+0xd9/0x190 [ 298.754529][T10966] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 298.754565][T10966] ? do_syscall_64+0xbe/0xfa0 [ 298.754593][T10966] do_syscall_64+0xfa/0xfa0 [ 298.754614][T10966] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.754636][T10966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.754654][T10966] ? clear_bhb_loop+0x60/0xb0 [ 298.754676][T10966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.754693][T10966] RIP: 0033:0x7f6c6d98ebe9 [ 298.754710][T10966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.754724][T10966] RSP: 002b:00007f6c6e872038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 298.754743][T10966] RAX: ffffffffffffffda RBX: 00007f6c6dbc5fa0 RCX: 00007f6c6d98ebe9 [ 298.754756][T10966] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 298.754768][T10966] RBP: 00007f6c6e872090 R08: 0000000000000000 R09: 0000000000000000 [ 298.754779][T10966] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 298.754791][T10966] R13: 00007f6c6dbc6038 R14: 00007f6c6dbc5fa0 R15: 00007ffcb6336508 [ 298.754824][T10966] [ 299.455649][ T5910] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 299.507222][ T5910] usb 4-1: device descriptor read/8, error -71 [ 299.765996][ T5910] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 299.796334][ T5910] usb 4-1: device descriptor read/8, error -71 [ 299.918120][ T5910] usb usb4-port1: unable to enumerate USB device [ 299.965311][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'. [ 300.086053][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'. [ 300.385630][ T5910] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 300.441605][T11016] netlink: 'syz.0.1691': attribute type 6 has an invalid length. [ 300.555744][ T5910] usb 5-1: Using ep0 maxpacket: 16 [ 300.567342][ T5910] usb 5-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 300.580548][ T5910] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.592183][ T5910] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 300.601925][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.622300][ T5910] usb 5-1: Product: syz [ 300.626850][ T5910] usb 5-1: Manufacturer: syz [ 300.631455][ T5910] usb 5-1: SerialNumber: syz [ 300.858884][ T5910] usb 5-1: 0:2 : does not exist [ 300.883585][ T5910] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 300.925477][ T5910] usb 5-1: USB disconnect, device number 37 [ 300.960529][ T6375] udevd[6375]: setting mode of /dev/bus/usb/005/037 to 020664 failed: No such file or directory [ 300.974339][ T6375] udevd[6375]: setting owner of /dev/bus/usb/005/037 to uid=0, gid=0 failed: No such file or directory [ 301.040508][ T6375] udevd[6375]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 301.045767][T11028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1696'. [ 301.266692][ T5863] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 301.283557][ T5863] CPU: 0 UID: 0 PID: 5863 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 301.283583][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 301.283597][ T5863] Workqueue: hci0 hci_rx_work [ 301.283622][ T5863] Call Trace: [ 301.283631][ T5863] [ 301.283640][ T5863] dump_stack_lvl+0x189/0x250 [ 301.283673][ T5863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.283700][ T5863] ? __pfx__printk+0x10/0x10 [ 301.283731][ T5863] ? kernfs_path_from_node+0x250/0x290 [ 301.283747][ T5863] ? kernfs_path_from_node+0x2f/0x290 [ 301.283768][ T5863] sysfs_create_dir_ns+0x259/0x280 [ 301.283796][ T5863] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 301.283825][ T5863] ? do_raw_spin_unlock+0x122/0x240 [ 301.283855][ T5863] kobject_add_internal+0x59f/0xb40 [ 301.283890][ T5863] kobject_add+0x155/0x220 [ 301.283921][ T5863] ? __pfx_kobject_add+0x10/0x10 [ 301.283947][ T5863] ? _raw_spin_unlock+0x28/0x50 [ 301.283973][ T5863] ? get_device_parent+0x366/0x3a0 [ 301.283998][ T5863] device_add+0x408/0xb50 [ 301.284023][ T5863] hci_conn_add_sysfs+0xd5/0x1e0 [ 301.284047][ T5863] le_conn_complete_evt+0xc3a/0x1220 [ 301.284097][ T5863] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 301.284123][ T5863] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 301.284147][ T5863] ? __asan_memcpy+0x40/0x70 [ 301.284178][ T5863] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 301.284201][ T5863] ? skb_pull_data+0xfb/0x200 [ 301.284227][ T5863] hci_le_conn_complete_evt+0x187/0x450 [ 301.284260][ T5863] hci_event_packet+0x78f/0x1200 [ 301.284286][ T5863] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 301.284312][ T5863] ? __pfx_hci_event_packet+0x10/0x10 [ 301.284335][ T5863] ? kcov_remote_start+0x4d3/0x7f0 [ 301.284353][ T5863] ? local_clock_noinstr+0xe0/0xe0 [ 301.284380][ T5863] ? hci_send_to_monitor+0xe2/0x570 [ 301.284409][ T5863] hci_rx_work+0x46a/0xe80 [ 301.284439][ T5863] ? process_scheduled_works+0x9ef/0x17b0 [ 301.284462][ T5863] process_scheduled_works+0xae1/0x17b0 [ 301.284515][ T5863] ? __pfx_process_scheduled_works+0x10/0x10 [ 301.284555][ T5863] worker_thread+0x8a0/0xda0 [ 301.284579][ T5863] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 301.284611][ T5863] ? __kthread_parkme+0x7b/0x200 [ 301.284643][ T5863] kthread+0x711/0x8a0 [ 301.284671][ T5863] ? __pfx_worker_thread+0x10/0x10 [ 301.284691][ T5863] ? __pfx_kthread+0x10/0x10 [ 301.284717][ T5863] ? _raw_spin_unlock_irq+0x23/0x50 [ 301.284738][ T5863] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.284758][ T5863] ? __pfx_kthread+0x10/0x10 [ 301.284783][ T5863] ret_from_fork+0x47c/0x820 [ 301.284806][ T5863] ? __pfx_ret_from_fork+0x10/0x10 [ 301.284836][ T5863] ? __switch_to_asm+0x39/0x70 [ 301.284852][ T5863] ? __switch_to_asm+0x33/0x70 [ 301.284869][ T5863] ? __pfx_kthread+0x10/0x10 [ 301.284894][ T5863] ret_from_fork_asm+0x1a/0x30 [ 301.284931][ T5863] [ 301.284962][ T5863] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 301.578090][ T5863] Bluetooth: hci0: failed to register connection device [ 301.635623][ T5956] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 301.787716][ T5956] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 301.808934][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 301.832457][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 301.852802][ T5956] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 301.885658][ T5956] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 301.905116][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.927413][ T5956] usb 4-1: config 0 descriptor?? [ 302.241892][T11067] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1708'. [ 302.349843][ T5956] plantronics 0003:047F:FFFF.0011: ignoring exceeding usage max [ 302.405373][ T5956] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 303.161308][T11110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.178903][T11110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.188290][T11113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1724'. [ 303.694349][T11137] fuse: Unknown parameter '000000000000000000000000x0000000000000003' [ 303.708422][T11137] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1734'. [ 303.776990][ T5956] usb 4-1: reset high-speed USB device number 92 using dummy_hcd [ 303.787069][ T5924] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 303.950304][ T5924] usb 5-1: config 39 has an invalid interface number: 208 but max is 1 [ 303.959411][ T5924] usb 5-1: config 39 has an invalid interface number: 30 but max is 1 [ 303.968090][ T5924] usb 5-1: config 39 has no interface number 0 [ 303.974272][ T5924] usb 5-1: config 39 has no interface number 1 [ 303.984284][ T5924] usb 5-1: config 39 interface 208 has no altsetting 0 [ 303.993274][ T5924] usb 5-1: config 39 interface 30 has no altsetting 0 [ 304.010017][ T5924] usb 5-1: New USB device found, idVendor=0733, idProduct=0402, bcdDevice=c8.4a [ 304.019510][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.027781][ T5924] usb 5-1: Product: syz [ 304.031949][ T5924] usb 5-1: Manufacturer: syz [ 304.036823][ T5924] usb 5-1: SerialNumber: syz [ 304.277843][ T5924] usb 5-1: USB disconnect, device number 38 [ 304.405317][T11167] netlink: 'syz.1.1742': attribute type 10 has an invalid length. [ 304.513246][T11176] netlink: 'syz.3.1744': attribute type 10 has an invalid length. [ 304.524025][T11176] FAULT_INJECTION: forcing a failure. [ 304.524025][T11176] name failslab, interval 1, probability 0, space 0, times 0 [ 304.542468][T11176] CPU: 1 UID: 0 PID: 11176 Comm: syz.3.1744 Not tainted syzkaller #0 PREEMPT(full) [ 304.542494][T11176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.542509][T11176] Call Trace: [ 304.542517][T11176] [ 304.542526][T11176] dump_stack_lvl+0x189/0x250 [ 304.542556][T11176] ? __pfx____ratelimit+0x10/0x10 [ 304.542579][T11176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.542604][T11176] ? __pfx__printk+0x10/0x10 [ 304.542625][T11176] ? __sock_sendmsg+0x21c/0x270 [ 304.542646][T11176] ? do_syscall_64+0xfa/0xfa0 [ 304.542678][T11176] should_fail_ex+0x414/0x560 [ 304.542703][T11176] should_failslab+0xa8/0x100 [ 304.542724][T11176] kmem_cache_alloc_noprof+0x74/0x6e0 [ 304.542750][T11176] ? skb_clone+0x212/0x3a0 [ 304.542772][T11176] skb_clone+0x212/0x3a0 [ 304.542794][T11176] __netlink_deliver_tap+0x404/0x850 [ 304.542832][T11176] ? netlink_deliver_tap+0x2e/0x1b0 [ 304.542856][T11176] netlink_deliver_tap+0x19c/0x1b0 [ 304.542880][T11176] netlink_sendskb+0x68/0x140 [ 304.542902][T11176] netlink_unicast+0x397/0x9e0 [ 304.542921][T11176] ? __asan_memcpy+0x40/0x70 [ 304.542953][T11176] ? __pfx_netlink_unicast+0x10/0x10 [ 304.542985][T11176] netlink_rcv_skb+0x28c/0x470 [ 304.543016][T11176] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 304.543042][T11176] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 304.543076][T11176] ? netlink_deliver_tap+0x2e/0x1b0 [ 304.543108][T11176] netlink_unicast+0x82c/0x9e0 [ 304.543136][T11176] ? __pfx_netlink_unicast+0x10/0x10 [ 304.543160][T11176] ? netlink_sendmsg+0x642/0xb30 [ 304.543180][T11176] ? skb_put+0x11b/0x210 [ 304.543208][T11176] netlink_sendmsg+0x805/0xb30 [ 304.543242][T11176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.543269][T11176] ? aa_sock_msg_perm+0xf1/0x1d0 [ 304.543296][T11176] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 304.543318][T11176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.543342][T11176] __sock_sendmsg+0x21c/0x270 [ 304.543365][T11176] ____sys_sendmsg+0x505/0x830 [ 304.543388][T11176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.543414][T11176] ? import_iovec+0x74/0xa0 [ 304.543443][T11176] ___sys_sendmsg+0x21f/0x2a0 [ 304.543463][T11176] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.543514][T11176] ? __fget_files+0x2a/0x420 [ 304.543536][T11176] ? __fget_files+0x3a0/0x420 [ 304.543567][T11176] __x64_sys_sendmsg+0x19b/0x260 [ 304.543588][T11176] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.543614][T11176] ? __pfx_ksys_write+0x10/0x10 [ 304.543638][T11176] ? do_syscall_64+0xbe/0xfa0 [ 304.543664][T11176] do_syscall_64+0xfa/0xfa0 [ 304.543684][T11176] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.543707][T11176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.543724][T11176] ? clear_bhb_loop+0x60/0xb0 [ 304.543745][T11176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.543768][T11176] RIP: 0033:0x7efcdb98ebe9 [ 304.543786][T11176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.543799][T11176] RSP: 002b:00007efcdc8af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.543818][T11176] RAX: ffffffffffffffda RBX: 00007efcdbbc5fa0 RCX: 00007efcdb98ebe9 [ 304.543830][T11176] RDX: 000000000404c080 RSI: 0000200000000040 RDI: 0000000000000003 [ 304.543841][T11176] RBP: 00007efcdc8af090 R08: 0000000000000000 R09: 0000000000000000 [ 304.543853][T11176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.543864][T11176] R13: 00007efcdbbc6038 R14: 00007efcdbbc5fa0 R15: 00007ffffda69318 [ 304.543896][T11176] [ 304.938543][ T5910] usb 4-1: USB disconnect, device number 92 [ 305.625771][ T5862] usb 4-1: new low-speed USB device number 93 using dummy_hcd [ 305.765747][ T5862] usb 4-1: device descriptor read/64, error -71 [ 306.017127][ T5862] usb 4-1: new low-speed USB device number 94 using dummy_hcd [ 306.185656][ T5862] usb 4-1: device descriptor read/64, error -71 [ 306.295926][ T5862] usb usb4-port1: attempt power cycle [ 306.636022][ T5862] usb 4-1: new low-speed USB device number 95 using dummy_hcd [ 306.666870][ T5862] usb 4-1: device descriptor read/8, error -71 [ 306.699598][T11237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1757'. [ 306.906317][ T5862] usb 4-1: new low-speed USB device number 96 using dummy_hcd [ 306.956616][ T5862] usb 4-1: device descriptor read/8, error -71 [ 307.077937][ T5862] usb usb4-port1: unable to enumerate USB device [ 307.087534][T11248] sp0: Synchronizing with TNC [ 307.279101][T11263] tmpfs: Bad value for 'mpol' [ 307.287535][T11263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1767'. [ 307.593381][T11275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.604925][T11275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.938192][T11291] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.1778'. [ 307.949757][T11291] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 308.269428][T11303] FAULT_INJECTION: forcing a failure. [ 308.269428][T11303] name failslab, interval 1, probability 0, space 0, times 0 [ 308.282907][T11303] CPU: 0 UID: 0 PID: 11303 Comm: syz.4.1784 Not tainted syzkaller #0 PREEMPT(full) [ 308.282932][T11303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.282942][T11303] Call Trace: [ 308.282950][T11303] [ 308.282958][T11303] dump_stack_lvl+0x189/0x250 [ 308.282987][T11303] ? __pfx____ratelimit+0x10/0x10 [ 308.283009][T11303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.283032][T11303] ? __pfx__printk+0x10/0x10 [ 308.283060][T11303] ? __pfx___might_resched+0x10/0x10 [ 308.283078][T11303] ? fs_reclaim_acquire+0x7d/0x100 [ 308.283103][T11303] should_fail_ex+0x414/0x560 [ 308.283126][T11303] should_failslab+0xa8/0x100 [ 308.283146][T11303] kmem_cache_alloc_node_noprof+0x77/0x710 [ 308.283164][T11303] ? dup_task_struct+0x52/0x830 [ 308.283191][T11303] dup_task_struct+0x52/0x830 [ 308.283208][T11303] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.283223][T11303] copy_process+0x54b/0x3c00 [ 308.283251][T11303] ? __pfx_copy_process+0x10/0x10 [ 308.283269][T11303] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 308.283284][T11303] vhost_task_create+0x1c4/0x290 [ 308.283296][T11303] ? arch_stack_walk+0xfc/0x150 [ 308.283309][T11303] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 308.283323][T11303] ? __pfx_vhost_task_create+0x10/0x10 [ 308.283340][T11303] ? __pfx_vhost_task_fn+0x10/0x10 [ 308.283363][T11303] kvm_mmu_post_init_vm+0x14c/0x300 [ 308.283374][T11303] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 308.283388][T11303] ? __mutex_trylock_common+0x153/0x260 [ 308.283402][T11303] ? __pfx___mutex_trylock_common+0x10/0x10 [ 308.283414][T11303] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 308.283432][T11303] ? rcu_is_watching+0x15/0xb0 [ 308.283444][T11303] ? trace_contention_end+0x39/0x120 [ 308.283456][T11303] ? look_up_lock_class+0x74/0x170 [ 308.283469][T11303] ? register_lock_class+0x51/0x320 [ 308.283483][T11303] ? __lock_acquire+0xab9/0xd20 [ 308.283509][T11303] kvm_vcpu_ioctl+0x95c/0xe90 [ 308.283523][T11303] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 308.283545][T11303] ? __fget_files+0x2a/0x420 [ 308.283560][T11303] ? __fget_files+0x3a0/0x420 [ 308.283571][T11303] ? __fget_files+0x2a/0x420 [ 308.283584][T11303] ? bpf_lsm_file_ioctl+0x9/0x20 [ 308.283598][T11303] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 308.283607][T11303] __se_sys_ioctl+0xfc/0x170 [ 308.283619][T11303] do_syscall_64+0xfa/0xfa0 [ 308.283632][T11303] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.283644][T11303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.283654][T11303] ? clear_bhb_loop+0x60/0xb0 [ 308.283666][T11303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.283678][T11303] RIP: 0033:0x7f39a1f8ebe9 [ 308.283688][T11303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.283696][T11303] RSP: 002b:00007f39a2db5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.283708][T11303] RAX: ffffffffffffffda RBX: 00007f39a21c5fa0 RCX: 00007f39a1f8ebe9 [ 308.283716][T11303] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 308.283722][T11303] RBP: 00007f39a2db5090 R08: 0000000000000000 R09: 0000000000000000 [ 308.283729][T11303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.283734][T11303] R13: 00007f39a21c6038 R14: 00007f39a21c5fa0 R15: 00007ffe0491a968 [ 308.283752][T11303] [ 308.838876][T11315] netlink: 41 bytes leftover after parsing attributes in process `syz.3.1790'. [ 308.995628][ T5924] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 309.125805][ T5924] usb 5-1: device descriptor read/64, error -71 [ 309.335657][ T43] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 309.375796][ T5924] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 309.454589][T11338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.467641][T11338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.486010][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 309.503766][ T43] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 309.505685][ T5924] usb 5-1: device descriptor read/64, error -71 [ 309.518518][ T43] usb 4-1: config 0 has no interface number 0 [ 309.525276][ T43] usb 4-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 309.537085][ T43] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 48, changing to 9 [ 309.548240][ T43] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 51046, setting to 1024 [ 309.559561][ T43] usb 4-1: config 0 interface 200 has no altsetting 0 [ 309.568364][ T43] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 309.577493][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.586035][ T43] usb 4-1: Product: syz [ 309.590206][ T43] usb 4-1: Manufacturer: syz [ 309.594773][ T43] usb 4-1: SerialNumber: syz [ 309.603109][ T43] usb 4-1: config 0 descriptor?? [ 309.609047][T11323] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 309.637482][ T5924] usb usb5-port1: attempt power cycle [ 309.832011][ T43] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input29 [ 309.845329][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 309.852983][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 309.862417][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 309.869783][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 309.878510][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 309.886443][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 309.893897][ T43] usb 4-1: USB disconnect, device number 97 [ 309.900086][ C1] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 309.900108][ C1] usb 4-1: hanwang_irq - usb_submit_urb failed with result -19 [ 309.975698][ T5924] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 310.000509][ T5924] usb 5-1: device descriptor read/8, error -71 [ 310.032735][T11344] netlink: 'syz.0.1801': attribute type 10 has an invalid length. [ 310.042289][T11344] lo: entered promiscuous mode [ 310.055448][T11344] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 310.068497][T11344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.079910][T11344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.249892][ T5924] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 310.282550][ T5924] usb 5-1: device descriptor read/8, error -71 [ 310.392950][T11352] overlayfs: failed to clone upperpath [ 310.408690][ T5924] usb usb5-port1: unable to enumerate USB device [ 310.513081][ T30] audit: type=1326 audit(1757429499.898:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11357 comm="syz.1.1808" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e3478ebe9 code=0x0 [ 310.775645][ T43] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 310.935619][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 310.944398][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.955124][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 310.966400][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 310.977022][ T43] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 310.987009][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.001437][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 311.010973][ T43] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 311.019653][ T43] usb 4-1: Manufacturer: syz [ 311.027589][ T43] usb 4-1: config 0 descriptor?? [ 311.181180][T11368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.192901][T11368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.237465][T11360] tipc: New replicast peer: 255.255.255.255 [ 311.244797][T11360] tipc: Enabled bearer , priority 10 [ 311.252144][T11360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1809'. [ 311.261526][T11360] tipc: Disabling bearer [ 311.317875][ T43] rc_core: IR keymap rc-hauppauge not found [ 311.323832][ T43] Registered IR keymap rc-empty [ 311.331021][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.355995][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.376981][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 311.389979][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input31 [ 311.404134][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.425688][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.445674][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.465780][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.485702][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.506379][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.525803][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.545689][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.565692][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.585694][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.608407][ T43] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 311.618330][ T43] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 311.681991][ T43] usb 4-1: USB disconnect, device number 98 [ 311.903667][T11379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.914392][T11379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.480734][T11391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.498554][T11391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.224129][ T30] audit: type=1400 audit(1757429502.608:90): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=11401 comm="syz.4.1825" [ 313.233712][T11402] input: syz0 as /devices/virtual/input/input32 [ 313.408867][T11407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.435370][T11407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.438370][T11434] overlayfs: failed to resolve './file1': -2 [ 315.255962][ T5910] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 315.369083][T11477] netlink: 352 bytes leftover after parsing attributes in process `syz.1.1853'. [ 315.378533][T11478] netlink: 352 bytes leftover after parsing attributes in process `syz.1.1853'. [ 315.411438][ T5910] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.440700][ T5910] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.460830][ T5910] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 315.474550][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 315.486724][ T5910] usb 5-1: SerialNumber: syz [ 315.574502][T11490] overlayfs: failed to resolve './file0': -2 [ 315.646004][T11494] netlink: 'syz.3.1858': attribute type 5 has an invalid length. [ 315.714754][ T5910] usb 5-1: 0:2 : does not exist [ 315.720224][ T5910] usb 5-1: unit 5: unexpected type 0x0c [ 315.748680][ T5910] usb 5-1: USB disconnect, device number 43 [ 315.781042][T11500] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 315.786705][ T6375] udevd[6375]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.794061][T11500] overlayfs: missing 'lowerdir' [ 316.405785][ T5944] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 316.565680][ T5944] usb 4-1: Using ep0 maxpacket: 8 [ 316.577400][ T5944] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 316.589627][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.601715][ T5944] usb 4-1: config 0 descriptor?? [ 316.607781][ T5910] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 316.773065][ T5910] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 316.782600][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.791172][ T5910] usb 5-1: Product: syz [ 316.795508][ T5910] usb 5-1: Manufacturer: syz [ 316.800498][ T5910] usb 5-1: SerialNumber: syz [ 316.816558][ T5910] usb 5-1: config 0 descriptor?? [ 316.825557][ T5944] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 316.826419][ T5910] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 316.934917][ T5862] usb 1-1: USB disconnect, device number 8 [ 317.108569][T11527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1872'. [ 317.124305][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.131519][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.249972][ T5944] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 317.270077][ T5944] asix 4-1:0.0: probe with driver asix failed with error -32 [ 317.280770][ T5944] usb 4-1: USB disconnect, device number 99 [ 317.461467][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.476173][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.484725][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.512378][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.520577][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.838133][T11546] overlayfs: failed to clone upperpath [ 317.886180][ T5910] gspca_sunplus: reg_r err -71 [ 317.893487][ T5910] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 317.923517][ T5910] usb 5-1: USB disconnect, device number 44 [ 317.953060][T11533] chnl_net:caif_netlink_parms(): no params data found [ 318.109412][T11533] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.116825][T11533] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.124109][T11533] bridge_slave_0: entered allmulticast mode [ 318.132914][T11533] bridge_slave_0: entered promiscuous mode [ 318.141836][T11533] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.149668][T11533] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.157162][T11533] bridge_slave_1: entered allmulticast mode [ 318.164183][T11533] bridge_slave_1: entered promiscuous mode [ 318.199427][T11533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.213111][T11533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.277997][T11533] team0: Port device team_slave_0 added [ 318.285690][T11533] team0: Port device team_slave_1 added [ 318.313670][T11533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.321633][T11533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.348249][T11533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.361522][T11533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.368790][T11533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.395019][T11533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.415027][T11561] mkiss: ax0: crc mode is auto. [ 318.509369][T11533] hsr_slave_0: entered promiscuous mode [ 318.518694][T11533] hsr_slave_1: entered promiscuous mode [ 318.545876][T11533] debugfs: 'hsr0' already exists in 'hsr' [ 318.555399][T11533] Cannot create hsr debugfs directory [ 318.963141][ T43] IPVS: starting estimator thread 0... [ 318.991875][T11581] netlink: 'syz.1.1887': attribute type 6 has an invalid length. [ 319.000802][T11581] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1887'. [ 319.056944][T11579] IPVS: using max 33 ests per chain, 79200 per kthread [ 319.077032][T11533] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.221861][ T52] Bluetooth: hci1: unexpected event 0x34 length: 10 > 6 [ 319.221973][T11533] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.306807][T11533] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.374670][T11533] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.596872][ T52] Bluetooth: hci4: command tx timeout [ 319.604478][T11533] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 319.624235][T11533] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 319.642895][T11533] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 319.654990][T11533] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 319.797789][T11533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.826689][T11533] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.839648][ T4579] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.846846][ T4579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.892266][ T4579] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.899484][ T4579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.394910][T11533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.504361][T11533] veth0_vlan: entered promiscuous mode [ 320.523117][T11533] veth1_vlan: entered promiscuous mode [ 320.528923][ T5944] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 320.607258][T11533] veth0_macvtap: entered promiscuous mode [ 320.624150][T11533] veth1_macvtap: entered promiscuous mode [ 320.653755][T11533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.682015][T11533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.690670][ T5944] usb 4-1: Using ep0 maxpacket: 32 [ 320.704580][ T5944] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 320.719798][ T5944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.723376][T11623] overlayfs: failed to clone upperpath [ 320.737966][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.751012][ T5944] usb 4-1: config 0 has no interface number 0 [ 320.756058][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.768590][ T5944] usb 4-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 320.783479][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.792192][ T5944] usb 4-1: config 0 interface 196 has no altsetting 0 [ 320.794540][ T5944] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 320.803476][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.817631][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.839271][ T5944] usb 4-1: Product: syz [ 320.843486][ T5944] usb 4-1: Manufacturer: syz [ 320.849202][ T5944] usb 4-1: SerialNumber: syz [ 320.869531][ T5944] usb 4-1: config 0 descriptor?? [ 320.876592][ T5862] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 320.887855][ T5944] ipheth 4-1:0.196: Unable to find endpoints [ 320.928631][T11625] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1900'. [ 320.940140][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.949119][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.011413][ T4596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.021029][ T4596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.049813][ T5862] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.062716][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 321.071190][ T5862] usb 5-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 321.084139][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.112351][ T5862] usb 5-1: config 0 descriptor?? [ 321.267258][ T5944] usb 4-1: USB disconnect, device number 100 [ 321.354354][ T5862] usbhid 5-1:0.0: can't add hid device: -71 [ 321.375864][ T5862] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 321.392155][ T5862] usb 5-1: USB disconnect, device number 45 [ 321.495660][ T5896] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 321.660774][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.682652][ T52] Bluetooth: hci4: command tx timeout [ 321.683406][ T5896] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 321.708909][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.726397][ T5896] usb 1-1: config 0 descriptor?? [ 322.341223][T11636] netlink: 'syz.0.1902': attribute type 1 has an invalid length. [ 322.349284][T11636] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1902'. [ 322.362292][ T5896] razer 0003:1532:010E.0012: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.0-1/input0 [ 322.730062][ T5910] usb 1-1: USB disconnect, device number 9 [ 322.884505][T11683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1916'. [ 322.926216][T11683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1916'. [ 323.262019][ T5910] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 323.454330][ T5910] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 323.474392][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.494148][ T5910] usb 4-1: config 0 descriptor?? [ 323.513382][ T5910] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 323.725024][ T5910] gp8psk: usb in 128 operation failed. [ 323.742090][ T5910] gp8psk: usb in 137 operation failed. [ 323.756211][ T5863] Bluetooth: hci4: command tx timeout [ 323.771885][ T5910] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 323.787754][ T5910] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 323.801218][ T5910] usb 4-1: USB disconnect, device number 101 [ 323.927063][T11705] vivid-004: disconnect [ 323.942146][T11705] vivid-004: reconnect [ 324.154766][ T5863] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 324.291795][T11717] tmpfs: Bad value for 'mpol' [ 324.307808][ T5910] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 324.317762][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 324.475742][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 324.494905][ T5910] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 324.507230][ T5910] usb 5-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 324.527797][ T5910] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 324.541429][T11721] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1931'. [ 324.545662][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.575944][ T5910] usb 5-1: Product: syz [ 324.580157][ T5910] usb 5-1: Manufacturer: syz [ 324.605749][ T5910] usb 5-1: SerialNumber: syz [ 324.655200][T11723] loop4: detected capacity change from 0 to 2560 [ 324.685495][ T5858] buffer_io_error: 136 callbacks suppressed [ 324.711153][ T5858] Buffer I/O error on dev loop4, logical block 0, async page read [ 324.744658][ T5858] Buffer I/O error on dev loop4, logical block 0, async page read [ 324.756594][ T5858] Buffer I/O error on dev loop4, logical block 0, async page read [ 324.788521][ T5858] loop4: unable to read partition table [ 324.794732][T11728] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 324.806294][T11723] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 324.818437][T11727] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 324.832443][T11708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.845843][T11727] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 324.860996][T11708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.880359][T11727] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 324.912317][ T5910] xr_serial 5-1:127.0: failed to claim sibling interface: -16 [ 324.926072][T11727] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 324.934560][ T5910] xr_serial 5-1:127.0: probe with driver xr_serial failed with error -16 [ 324.962311][ T5910] usb 5-1: USB disconnect, device number 46 [ 324.995951][T11727] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 325.077137][T11723] ldm_validate_partition_table(): Disk read failed. [ 325.100655][T11723] Dev loop4: unable to read RDB block 0 [ 325.106955][T11723] loop4: unable to read partition table [ 325.122971][T11723] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 325.222400][T11735] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 325.306381][T11735] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 325.695651][ T5910] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 325.838901][ T52] Bluetooth: hci4: command tx timeout [ 325.857537][T11751] FAULT_INJECTION: forcing a failure. [ 325.857537][T11751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.900875][ T5910] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 325.910272][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.922049][ T5910] usb 4-1: Product: syz [ 325.928696][ T5910] usb 4-1: Manufacturer: syz [ 325.933367][T11751] CPU: 1 UID: 0 PID: 11751 Comm: syz.4.1943 Not tainted syzkaller #0 PREEMPT(full) [ 325.933389][T11751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 325.933399][T11751] Call Trace: [ 325.933406][T11751] [ 325.933413][T11751] dump_stack_lvl+0x189/0x250 [ 325.933442][T11751] ? __pfx____ratelimit+0x10/0x10 [ 325.933464][T11751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.933488][T11751] ? __pfx__printk+0x10/0x10 [ 325.933509][T11751] ? __might_fault+0xb0/0x130 [ 325.933535][T11751] should_fail_ex+0x414/0x560 [ 325.933559][T11751] _copy_from_user+0x2d/0xb0 [ 325.933586][T11751] comedi_unlocked_ioctl+0x356/0x1020 [ 325.933610][T11751] ? kasan_quarantine_put+0xdd/0x220 [ 325.933634][T11751] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 325.933713][T11751] ? __fget_files+0x2a/0x420 [ 325.933741][T11751] ? __fget_files+0x3a0/0x420 [ 325.933760][T11751] ? __fget_files+0x2a/0x420 [ 325.933784][T11751] ? bpf_lsm_file_ioctl+0x9/0x20 [ 325.933809][T11751] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 325.933833][T11751] __se_sys_ioctl+0xfc/0x170 [ 325.933853][T11751] do_syscall_64+0xfa/0xfa0 [ 325.933871][T11751] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.933893][T11751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.933911][T11751] ? clear_bhb_loop+0x60/0xb0 [ 325.933932][T11751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.933959][T11751] RIP: 0033:0x7f39a1f8ebe9 [ 325.933976][T11751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.933991][T11751] RSP: 002b:00007f39a2db5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.934011][T11751] RAX: ffffffffffffffda RBX: 00007f39a21c5fa0 RCX: 00007f39a1f8ebe9 [ 325.934024][T11751] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 325.934036][T11751] RBP: 00007f39a2db5090 R08: 0000000000000000 R09: 0000000000000000 [ 325.934047][T11751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.934058][T11751] R13: 00007f39a21c6038 R14: 00007f39a21c5fa0 R15: 00007ffe0491a968 [ 325.934090][T11751] [ 325.955596][ T5910] usb 4-1: SerialNumber: syz [ 326.282432][ T5910] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 326.394794][T11764] overlayfs: failed to clone upperpath [ 326.415630][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 326.475771][ T5956] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 326.645590][ T5956] usb 5-1: Using ep0 maxpacket: 32 [ 326.659650][ T5956] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 326.669594][ T5956] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 326.677793][ T5956] usb 5-1: config 0 has no interface number 0 [ 326.686433][ T5956] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 326.694574][ T5956] usb 5-1: config 0 has no interface number 0 [ 326.710068][ T5956] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 326.725930][ T5956] usb 5-1: config 0 has no interface number 0 [ 326.735892][ T5956] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 326.746301][ T5956] usb 5-1: config 0 has no interface number 0 [ 326.764578][ T5956] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 326.780995][ T5956] usb 5-1: config 0 has no interface number 0 [ 326.799588][ T5956] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 326.808101][ T5956] usb 5-1: config 0 has no interface number 0 [ 326.858966][ T5910] usb 4-1: USB disconnect, device number 102 [ 326.885400][ T5956] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 326.903046][ T5956] usb 5-1: config 0 has no interface number 0 [ 326.910676][ T5956] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 326.929393][ T5956] usb 5-1: config 0 has no interface number 0 [ 326.947901][ T5956] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 326.957771][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.975593][ T5956] usb 5-1: Product: syz [ 326.985919][ T5956] usb 5-1: Manufacturer: syz [ 326.994851][ T5956] usb 5-1: SerialNumber: syz [ 327.011073][ T5956] usb 5-1: config 0 descriptor?? [ 327.025353][ T5956] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 327.525647][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 327.532778][ T9] ath9k_htc: Failed to initialize the device [ 327.546419][ T5910] usb 4-1: ath9k_htc: USB layer deinitialized [ 327.576643][T11780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.586174][T11780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.602995][T11781] netlink: 56537 bytes leftover after parsing attributes in process `syz.4.1945'. [ 327.801546][T11785] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 327.941614][T11795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1958'. [ 328.206754][ T5903] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 328.661184][ T5903] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 328.675854][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.694837][ T5903] usb 1-1: Product: syz [ 328.705573][ T5903] usb 1-1: Manufacturer: syz [ 328.710245][ T5903] usb 1-1: SerialNumber: syz [ 328.728897][ T5903] usb 1-1: config 0 descriptor?? [ 329.045731][ T5903] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 329.075926][ T5903] asix 1-1:0.0: probe with driver asix failed with error -71 [ 329.103870][ T5903] usb 1-1: USB disconnect, device number 10 [ 329.217489][ T5956] etas_es58x 5-1:0.2: could not retrieve the product info string [ 329.330342][ T5956] usb 5-1: USB disconnect, device number 47 [ 329.377987][T11820] FAULT_INJECTION: forcing a failure. [ 329.377987][T11820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.402844][T11820] CPU: 1 UID: 0 PID: 11820 Comm: syz.4.1967 Not tainted syzkaller #0 PREEMPT(full) [ 329.402869][T11820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 329.402880][T11820] Call Trace: [ 329.402888][T11820] [ 329.402895][T11820] dump_stack_lvl+0x189/0x250 [ 329.402924][T11820] ? __pfx____ratelimit+0x10/0x10 [ 329.402945][T11820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.402968][T11820] ? __pfx__printk+0x10/0x10 [ 329.403003][T11820] should_fail_ex+0x414/0x560 [ 329.403027][T11820] _copy_to_user+0x31/0xb0 [ 329.403046][T11820] simple_read_from_buffer+0xe1/0x170 [ 329.403074][T11820] proc_fail_nth_read+0x1b3/0x220 [ 329.403102][T11820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 329.403131][T11820] ? rw_verify_area+0x2a6/0x4d0 [ 329.403148][T11820] ? __lock_acquire+0xab9/0xd20 [ 329.403164][T11820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 329.403190][T11820] vfs_read+0x200/0xa30 [ 329.403208][T11820] ? fdget_pos+0x247/0x320 [ 329.403234][T11820] ? __pfx___mutex_lock+0x10/0x10 [ 329.403258][T11820] ? __pfx_vfs_read+0x10/0x10 [ 329.403279][T11820] ? __fget_files+0x2a/0x420 [ 329.403305][T11820] ? __fget_files+0x3a0/0x420 [ 329.403325][T11820] ? __fget_files+0x2a/0x420 [ 329.403355][T11820] ksys_read+0x145/0x250 [ 329.403373][T11820] ? __fget_files+0x2a/0x420 [ 329.403395][T11820] ? __pfx_ksys_read+0x10/0x10 [ 329.403418][T11820] ? do_syscall_64+0xbe/0xfa0 [ 329.403443][T11820] do_syscall_64+0xfa/0xfa0 [ 329.403463][T11820] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.403483][T11820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.403497][T11820] ? clear_bhb_loop+0x60/0xb0 [ 329.403517][T11820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.403533][T11820] RIP: 0033:0x7f39a1f8d5fc [ 329.403552][T11820] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 329.403565][T11820] RSP: 002b:00007f39a2db5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 329.403584][T11820] RAX: ffffffffffffffda RBX: 00007f39a21c5fa0 RCX: 00007f39a1f8d5fc [ 329.403597][T11820] RDX: 000000000000000f RSI: 00007f39a2db50a0 RDI: 0000000000000007 [ 329.403608][T11820] RBP: 00007f39a2db5090 R08: 0000000000000000 R09: 0000000000000000 [ 329.403618][T11820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.403628][T11820] R13: 00007f39a21c6038 R14: 00007f39a21c5fa0 R15: 00007ffe0491a968 [ 329.403658][T11820] [ 329.672286][ T5956] etas_es58x 5-1:0.2: Disconnecting syz syz [ 329.968705][ T5903] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 330.125816][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 330.136294][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 330.167500][ T5903] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 330.194300][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 330.229834][ T5903] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 330.240113][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.265767][ T5903] usb 1-1: Product: syz [ 330.266865][T11839] overlayfs: failed to clone upperpath [ 330.270575][ T5903] usb 1-1: Manufacturer: syz [ 330.270595][ T5903] usb 1-1: SerialNumber: syz [ 330.286624][ T5903] usb 1-1: config 0 descriptor?? [ 330.287489][T11840] FAULT_INJECTION: forcing a failure. [ 330.287489][T11840] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 330.309158][ T5903] redrat3 1-1:0.0: Couldn't find all endpoints [ 330.315200][T11840] CPU: 1 UID: 0 PID: 11840 Comm: syz.3.1975 Not tainted syzkaller #0 PREEMPT(full) [ 330.315224][T11840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 330.315235][T11840] Call Trace: [ 330.315243][T11840] [ 330.315251][T11840] dump_stack_lvl+0x189/0x250 [ 330.315280][T11840] ? __pfx____ratelimit+0x10/0x10 [ 330.315303][T11840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.315325][T11840] ? __pfx__printk+0x10/0x10 [ 330.315349][T11840] ? fs_reclaim_acquire+0x7d/0x100 [ 330.315377][T11840] should_fail_ex+0x414/0x560 [ 330.315402][T11840] prepare_alloc_pages+0x213/0x610 [ 330.315430][T11840] __alloc_frozen_pages_noprof+0x123/0x370 [ 330.315455][T11840] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 330.315482][T11840] ? policy_nodemask+0x27c/0x720 [ 330.315501][T11840] ? __lock_acquire+0xab9/0xd20 [ 330.315527][T11840] alloc_pages_mpol+0x232/0x4a0 [ 330.315552][T11840] alloc_pages_noprof+0xa9/0x190 [ 330.315573][T11840] get_free_pages_noprof+0xf/0x80 [ 330.315593][T11840] kasan_populate_vmalloc+0x38/0x270 [ 330.315618][T11840] ? do_raw_spin_unlock+0x122/0x240 [ 330.315646][T11840] alloc_vmap_area+0xd62/0x14a0 [ 330.315682][T11840] ? __get_vm_area_node+0x13f/0x300 [ 330.315701][T11840] ? __pfx_alloc_vmap_area+0x10/0x10 [ 330.315715][T11840] ? __kasan_kmalloc+0x93/0xb0 [ 330.315736][T11840] ? __get_vm_area_node+0x13f/0x300 [ 330.315753][T11840] ? copy_process+0x54b/0x3c00 [ 330.315773][T11840] __get_vm_area_node+0x1f8/0x300 [ 330.315797][T11840] __vmalloc_node_range_noprof+0x301/0x12f0 [ 330.315816][T11840] ? copy_process+0x54b/0x3c00 [ 330.315834][T11840] ? percpu_ref_get_many+0x19/0x140 [ 330.315858][T11840] ? percpu_ref_get_many+0x19/0x140 [ 330.315885][T11840] ? __memcg_slab_post_alloc_hook+0x518/0x7d0 [ 330.315915][T11840] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 330.315936][T11840] ? memcpy_and_pad+0x48/0x80 [ 330.315961][T11840] __vmalloc_node_noprof+0xc2/0x110 [ 330.315980][T11840] ? copy_process+0x54b/0x3c00 [ 330.315998][T11840] ? copy_process+0x54b/0x3c00 [ 330.316021][T11840] dup_task_struct+0x3d5/0x830 [ 330.316042][T11840] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.316067][T11840] copy_process+0x54b/0x3c00 [ 330.316119][T11840] ? __pfx_copy_process+0x10/0x10 [ 330.316152][T11840] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 330.316177][T11840] vhost_task_create+0x1c4/0x290 [ 330.316199][T11840] ? arch_stack_walk+0xfc/0x150 [ 330.316220][T11840] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 330.316245][T11840] ? __pfx_vhost_task_create+0x10/0x10 [ 330.316276][T11840] ? __pfx_vhost_task_fn+0x10/0x10 [ 330.316319][T11840] kvm_mmu_post_init_vm+0x14c/0x300 [ 330.316342][T11840] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 330.316366][T11840] ? __mutex_trylock_common+0x153/0x260 [ 330.316391][T11840] ? __pfx___mutex_trylock_common+0x10/0x10 [ 330.316413][T11840] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 330.316456][T11840] ? rcu_is_watching+0x15/0xb0 [ 330.316476][T11840] ? trace_contention_end+0x39/0x120 [ 330.316497][T11840] ? look_up_lock_class+0x74/0x170 [ 330.316521][T11840] ? register_lock_class+0x51/0x320 [ 330.316545][T11840] ? __lock_acquire+0xab9/0xd20 [ 330.316593][T11840] kvm_vcpu_ioctl+0x95c/0xe90 [ 330.316616][T11840] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 330.316657][T11840] ? __fget_files+0x2a/0x420 [ 330.316688][T11840] ? __fget_files+0x3a0/0x420 [ 330.316708][T11840] ? __fget_files+0x2a/0x420 [ 330.316732][T11840] ? bpf_lsm_file_ioctl+0x9/0x20 [ 330.316756][T11840] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 330.316773][T11840] __se_sys_ioctl+0xfc/0x170 [ 330.316793][T11840] do_syscall_64+0xfa/0xfa0 [ 330.316814][T11840] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.316836][T11840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.316853][T11840] ? clear_bhb_loop+0x60/0xb0 [ 330.316874][T11840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.316891][T11840] RIP: 0033:0x7efcdb98ebe9 [ 330.316906][T11840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.316920][T11840] RSP: 002b:00007efcdc88e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.316938][T11840] RAX: ffffffffffffffda RBX: 00007efcdbbc6090 RCX: 00007efcdb98ebe9 [ 330.316951][T11840] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 330.316962][T11840] RBP: 00007efcdc88e090 R08: 0000000000000000 R09: 0000000000000000 [ 330.316973][T11840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.316983][T11840] R13: 00007efcdbbc6128 R14: 00007efcdbbc6090 R15: 00007ffffda69318 [ 330.317015][T11840] [ 330.320346][T11840] syz.3.1975: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 330.767360][ T5903] usb 1-1: USB disconnect, device number 11 [ 330.779037][T11840] CPU: 1 UID: 0 PID: 11840 Comm: syz.3.1975 Not tainted syzkaller #0 PREEMPT(full) [ 330.779060][T11840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 330.779070][T11840] Call Trace: [ 330.779077][T11840] [ 330.779086][T11840] dump_stack_lvl+0x189/0x250 [ 330.779115][T11840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.779137][T11840] ? __pfx__printk+0x10/0x10 [ 330.779159][T11840] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 330.779183][T11840] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 330.779208][T11840] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 330.779233][T11840] warn_alloc+0x214/0x310 [ 330.779252][T11840] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.779279][T11840] ? __pfx_warn_alloc+0x10/0x10 [ 330.779305][T11840] ? copy_process+0x54b/0x3c00 [ 330.779325][T11840] ? __get_vm_area_node+0x211/0x300 [ 330.779350][T11840] __vmalloc_node_range_noprof+0x326/0x12f0 [ 330.779369][T11840] ? percpu_ref_get_many+0x19/0x140 [ 330.779396][T11840] ? percpu_ref_get_many+0x19/0x140 [ 330.779423][T11840] ? __memcg_slab_post_alloc_hook+0x518/0x7d0 [ 330.779454][T11840] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 330.779476][T11840] ? memcpy_and_pad+0x48/0x80 [ 330.779500][T11840] __vmalloc_node_noprof+0xc2/0x110 [ 330.779517][T11840] ? copy_process+0x54b/0x3c00 [ 330.779534][T11840] ? copy_process+0x54b/0x3c00 [ 330.779562][T11840] dup_task_struct+0x3d5/0x830 [ 330.779582][T11840] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.779607][T11840] copy_process+0x54b/0x3c00 [ 330.779664][T11840] ? __pfx_copy_process+0x10/0x10 [ 330.779696][T11840] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 330.779720][T11840] vhost_task_create+0x1c4/0x290 [ 330.779741][T11840] ? arch_stack_walk+0xfc/0x150 [ 330.779762][T11840] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 330.779787][T11840] ? __pfx_vhost_task_create+0x10/0x10 [ 330.779817][T11840] ? __pfx_vhost_task_fn+0x10/0x10 [ 330.779859][T11840] kvm_mmu_post_init_vm+0x14c/0x300 [ 330.779879][T11840] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 330.779903][T11840] ? __mutex_trylock_common+0x153/0x260 [ 330.779928][T11840] ? __pfx___mutex_trylock_common+0x10/0x10 [ 330.779950][T11840] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 330.779971][T11840] ? rcu_is_watching+0x15/0xb0 [ 330.779991][T11840] ? trace_contention_end+0x39/0x120 [ 330.780011][T11840] ? look_up_lock_class+0x74/0x170 [ 330.780036][T11840] ? register_lock_class+0x51/0x320 [ 330.780059][T11840] ? __lock_acquire+0xab9/0xd20 [ 330.780107][T11840] kvm_vcpu_ioctl+0x95c/0xe90 [ 330.780131][T11840] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 330.780171][T11840] ? __fget_files+0x2a/0x420 [ 330.780197][T11840] ? __fget_files+0x3a0/0x420 [ 330.780216][T11840] ? __fget_files+0x2a/0x420 [ 330.780240][T11840] ? bpf_lsm_file_ioctl+0x9/0x20 [ 330.780264][T11840] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 330.780281][T11840] __se_sys_ioctl+0xfc/0x170 [ 330.780301][T11840] do_syscall_64+0xfa/0xfa0 [ 330.780322][T11840] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.780344][T11840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.780361][T11840] ? clear_bhb_loop+0x60/0xb0 [ 330.780382][T11840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.780398][T11840] RIP: 0033:0x7efcdb98ebe9 [ 330.780414][T11840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.780428][T11840] RSP: 002b:00007efcdc88e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.780446][T11840] RAX: ffffffffffffffda RBX: 00007efcdbbc6090 RCX: 00007efcdb98ebe9 [ 330.780459][T11840] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 330.780470][T11840] RBP: 00007efcdc88e090 R08: 0000000000000000 R09: 0000000000000000 [ 330.780480][T11840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.780491][T11840] R13: 00007efcdbbc6128 R14: 00007efcdbbc6090 R15: 00007ffffda69318 [ 330.780522][T11840] [ 330.781220][T11840] Mem-Info: [ 331.173541][T11840] active_anon:29413 inactive_anon:0 isolated_anon:0 [ 331.173541][T11840] active_file:19925 inactive_file:40410 isolated_file:0 [ 331.173541][T11840] unevictable:16154 dirty:59 writeback:0 [ 331.173541][T11840] slab_reclaimable:7316 slab_unreclaimable:96767 [ 331.173541][T11840] mapped:27951 shmem:24590 pagetables:1533 [ 331.173541][T11840] sec_pagetables:0 bounce:0 [ 331.173541][T11840] kernel_misc_reclaimable:0 [ 331.173541][T11840] free:1283065 free_pcp:17097 free_cma:0 [ 331.220152][T11840] Node 0 active_anon:110952kB inactive_anon:0kB active_file:79612kB inactive_file:161412kB unevictable:63080kB isolated(anon):0kB isolated(file):0kB mapped:111704kB dirty:208kB writeback:0kB shmem:90124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12368kB pagetables:5980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 331.252951][T11840] Node 1 active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:28kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 331.322709][T11840] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 331.407586][T11840] lowmem_reserve[]: 0 2495 2496 2496 2496 [ 331.413465][T11840] Node 0 DMA32 free:1245308kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:103808kB inactive_anon:0kB active_file:79612kB inactive_file:160328kB unevictable:63080kB writepending:204kB zspages:0kB present:3129332kB managed:2555404kB mlocked:0kB bounce:0kB free_pcp:42832kB local_pcp:16408kB free_cma:0kB [ 331.476256][T11840] lowmem_reserve[]: 0 0 1 1 1 [ 331.495773][T11840] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1084kB unevictable:0kB writepending:4kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 331.531408][T11840] lowmem_reserve[]: 0 0 0 0 0 [ 331.550683][T11840] Node 1 Normal free:3884292kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:228kB unevictable:1536kB writepending:28kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:28204kB local_pcp:17568kB free_cma:0kB [ 331.591462][T11840] lowmem_reserve[]: 0 0 0 0 0 [ 331.613339][T11840] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 331.667982][T11840] Node 0 DMA32: 811*4kB (UM) 382*8kB (UME) 440*16kB (UM) 357*32kB (UM) 144*64kB (UME) 149*128kB (UME) 81*256kB (UME) 32*512kB (UME) 15*1024kB (UME) 3*2048kB (UM) 279*4096kB (UM) = 1254460kB [ 331.687398][T11840] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 331.706189][T11840] Node 1 Normal: 237*4kB (UME) 66*8kB (UME) 62*16kB (UME) 167*32kB (UME) 40*64kB (UME) 15*128kB (UME) 3*256kB (UM) 7*512kB (UME) 3*1024kB (ME) 3*2048kB (UME) 942*4096kB (M) = 3884292kB [ 331.728741][T11840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 331.738366][T11840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 331.749399][T11840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 331.760014][T11840] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 331.784794][T11840] 93482 total pagecache pages [ 331.815775][T11840] 0 pages in swap cache [ 331.819969][T11840] Free swap = 124996kB [ 331.824126][T11840] Total swap = 124996kB [ 331.845102][T11840] 2097051 pages RAM [ 331.845116][T11840] 0 pages HighMem/MovableOnly [ 331.845126][T11840] 426302 pages reserved [ 331.845134][T11840] 0 pages cma reserved [ 332.150441][T11870] FAULT_INJECTION: forcing a failure. [ 332.150441][T11870] name failslab, interval 1, probability 0, space 0, times 0 [ 332.164752][T11870] CPU: 1 UID: 0 PID: 11870 Comm: syz.4.1986 Not tainted syzkaller #0 PREEMPT(full) [ 332.164777][T11870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.164787][T11870] Call Trace: [ 332.164795][T11870] [ 332.164803][T11870] dump_stack_lvl+0x189/0x250 [ 332.164834][T11870] ? __pfx____ratelimit+0x10/0x10 [ 332.164857][T11870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.164882][T11870] ? __pfx__printk+0x10/0x10 [ 332.164912][T11870] ? __pfx___might_resched+0x10/0x10 [ 332.164931][T11870] ? fs_reclaim_acquire+0x7d/0x100 [ 332.164956][T11870] should_fail_ex+0x414/0x560 [ 332.164983][T11870] should_failslab+0xa8/0x100 [ 332.165009][T11870] __kmalloc_noprof+0xcb/0x7f0 [ 332.165027][T11870] ? tomoyo_encode+0x28b/0x550 [ 332.165057][T11870] tomoyo_encode+0x28b/0x550 [ 332.165087][T11870] tomoyo_realpath_from_path+0x58d/0x5d0 [ 332.165114][T11870] ? tomoyo_domain+0xd9/0x130 [ 332.165144][T11870] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 332.165165][T11870] tomoyo_path_number_perm+0x1e8/0x5a0 [ 332.165189][T11870] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 332.165250][T11870] ? __fget_files+0x2a/0x420 [ 332.165277][T11870] ? __fget_files+0x3a0/0x420 [ 332.165297][T11870] ? __fget_files+0x2a/0x420 [ 332.165323][T11870] security_file_ioctl+0xcb/0x2d0 [ 332.165345][T11870] __se_sys_ioctl+0x47/0x170 [ 332.165366][T11870] do_syscall_64+0xfa/0xfa0 [ 332.165388][T11870] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.165410][T11870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.165428][T11870] ? clear_bhb_loop+0x60/0xb0 [ 332.165449][T11870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.165466][T11870] RIP: 0033:0x7f39a1f8ebe9 [ 332.165482][T11870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.165497][T11870] RSP: 002b:00007f39a2db5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.165515][T11870] RAX: ffffffffffffffda RBX: 00007f39a21c5fa0 RCX: 00007f39a1f8ebe9 [ 332.165527][T11870] RDX: 00002000000002c0 RSI: 00000000c008ae88 RDI: 0000000000000006 [ 332.165537][T11870] RBP: 00007f39a2db5090 R08: 0000000000000000 R09: 0000000000000000 [ 332.165548][T11870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.165557][T11870] R13: 00007f39a21c6038 R14: 00007f39a21c5fa0 R15: 00007ffe0491a968 [ 332.165587][T11870] [ 332.225879][ T5903] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 332.230474][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.409611][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.415603][ C1] hrtimer: interrupt took 250002230 ns [ 332.433066][T11870] ERROR: Out of memory at tomoyo_realpath_from_path. [ 332.515653][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.521572][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 332.552666][ T5903] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 332.563681][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.590866][ T5903] usb 1-1: config 0 descriptor?? [ 332.806804][ T5903] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 332.826446][ T5903] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 332.846038][ T5903] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 332.873538][ T5903] usb 1-1: media controller created [ 332.942293][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 333.020189][T11866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.033714][T11866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.123847][ T5903] az6027: usb out operation failed. (-71) [ 333.139998][ T5903] az6027: usb out operation failed. (-71) [ 333.146015][ T5903] stb0899_attach: Driver disabled by Kconfig [ 333.152773][ T5903] az6027: no front-end attached [ 333.152773][ T5903] [ 333.155646][ T5862] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 333.162956][ T5903] az6027: usb out operation failed. (-71) [ 333.173203][ T5903] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 333.190170][ T5903] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input33 [ 333.212625][ T5903] dvb-usb: schedule remote query interval to 400 msecs. [ 333.219713][ T5903] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 333.233790][ T5903] usb 1-1: USB disconnect, device number 12 [ 333.329868][ T5862] usb 5-1: config 0 has an invalid interface number: 156 but max is 0 [ 333.352704][T11887] netlink: 'syz.1.1994': attribute type 27 has an invalid length. [ 333.360825][ T5862] usb 5-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 333.369517][ T5903] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 333.390149][T11887] /dev/nullb0: Can't lookup blockdev [ 333.396441][ T5862] usb 5-1: config 0 has no interface number 0 [ 333.405042][ T5862] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 93, changing to 10 [ 333.434065][ T5862] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid maxpacket 25088, setting to 1024 [ 333.474423][ T5862] usb 5-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.499592][ T5862] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice=d6.b9 [ 333.513459][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.524955][ T5862] usb 5-1: config 0 descriptor?? [ 333.550354][ T5862] gspca_main: spca561-2.14.0 probing abcd:cdee [ 333.748716][T11880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.797402][T11880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.865263][ T5862] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 333.887753][ T5862] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 333.894776][ T5862] usb 5-1: MIDIStreaming interface descriptor not found [ 333.946338][T11903] netlink: 'syz.1.1999': attribute type 4 has an invalid length. [ 333.994422][ T5862] usb 5-1: USB disconnect, device number 48 [ 334.259756][T11911] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2001'. [ 334.273333][T11911] xt_socket: unknown flags 0xd0 [ 334.415903][T11918] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2004'. [ 334.659849][T11928] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2005'. [ 335.014840][T11910] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 335.022094][T11910] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 335.044288][T11910] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 335.052440][T11910] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 335.059109][T11910] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 335.070359][T11910] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 335.077400][T11910] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 335.089467][T11910] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 335.201517][T11932] netlink: 'syz.1.2009': attribute type 39 has an invalid length. [ 335.976256][ T5862] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 336.038847][T11975] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2025'. [ 336.145611][ T5862] usb 4-1: Using ep0 maxpacket: 32 [ 336.155078][ T5862] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 336.174969][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.198293][ T5862] usb 4-1: config 0 descriptor?? [ 336.305758][ T43] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 336.318322][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 336.333986][ T30] audit: type=1804 audit(1757429525.718:91): pid=11987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2030" name="/newroot/201/cgroup.controllers" dev="tmpfs" ino=1098 res=1 errno=0 [ 336.357910][ T30] audit: type=1800 audit(1757429525.718:92): pid=11987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2030" name="cgroup.controllers" dev="tmpfs" ino=1098 res=0 errno=0 [ 336.414821][ T5862] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 336.427316][ T5862] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 336.438646][T11989] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2030'. [ 336.439136][ T5862] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 336.456154][ T5862] usb 4-1: media controller created [ 336.474595][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 336.483216][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 336.490907][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.502073][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 336.524216][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 336.537769][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 336.549078][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 336.559828][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 336.570312][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 336.582309][ T43] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 336.592561][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.600898][ T43] usb 1-1: Product: syz [ 336.605085][ T43] usb 1-1: Manufacturer: syz [ 336.609719][ T43] usb 1-1: SerialNumber: syz [ 336.618585][T11959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.626331][ T43] usb 1-1: config 0 descriptor?? [ 336.631009][T11959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.634846][T11975] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 336.651350][ T43] usb 1-1: NFC: Reader power on cmd error -90 [ 336.657518][ T43] pn533_usb 1-1:0.0: NFC: Couldn't poweron the reader (error -90) [ 336.665987][ T43] pn533_usb 1-1:0.0: probe with driver pn533_usb failed with error -90 [ 336.744681][ T5862] az6027: usb out operation failed. (-71) [ 336.751607][ T5862] az6027: usb out operation failed. (-71) [ 336.758310][ T5862] stb0899_attach: Driver disabled by Kconfig [ 336.764310][ T5862] az6027: no front-end attached [ 336.764310][ T5862] [ 336.775645][ T5862] az6027: usb out operation failed. (-71) [ 336.781424][ T5862] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 336.792334][ T5862] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input34 [ 336.806157][ T5862] dvb-usb: schedule remote query interval to 400 msecs. [ 336.813149][ T5862] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 336.849615][ T5862] usb 4-1: USB disconnect, device number 103 [ 336.856648][T11992] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2025'. [ 336.859473][T11993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.881041][T11993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.893253][ T43] usb 1-1: USB disconnect, device number 13 [ 336.994470][ T5862] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 337.116012][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 337.123444][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 337.191498][T12005] netlink: 'syz.1.2037': attribute type 10 has an invalid length. [ 337.572428][T12021] FAULT_INJECTION: forcing a failure. [ 337.572428][T12021] name failslab, interval 1, probability 0, space 0, times 0 [ 337.588037][T12021] CPU: 1 UID: 0 PID: 12021 Comm: syz.4.2044 Not tainted syzkaller #0 PREEMPT(full) [ 337.588062][T12021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.588074][T12021] Call Trace: [ 337.588082][T12021] [ 337.588090][T12021] dump_stack_lvl+0x189/0x250 [ 337.588120][T12021] ? __pfx____ratelimit+0x10/0x10 [ 337.588142][T12021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.588167][T12021] ? __pfx__printk+0x10/0x10 [ 337.588197][T12021] ? __pfx___might_resched+0x10/0x10 [ 337.588215][T12021] ? fs_reclaim_acquire+0x7d/0x100 [ 337.588246][T12021] should_fail_ex+0x414/0x560 [ 337.588271][T12021] should_failslab+0xa8/0x100 [ 337.588294][T12021] __kmalloc_noprof+0xcb/0x7f0 [ 337.588311][T12021] ? tomoyo_encode+0x28b/0x550 [ 337.588341][T12021] tomoyo_encode+0x28b/0x550 [ 337.588370][T12021] tomoyo_realpath_from_path+0x58d/0x5d0 [ 337.588397][T12021] ? tomoyo_domain+0xd9/0x130 [ 337.588427][T12021] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 337.588448][T12021] tomoyo_path_number_perm+0x1e8/0x5a0 [ 337.588472][T12021] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 337.588534][T12021] ? __fget_files+0x2a/0x420 [ 337.588561][T12021] ? __fget_files+0x3a0/0x420 [ 337.588580][T12021] ? __fget_files+0x2a/0x420 [ 337.588606][T12021] security_file_ioctl+0xcb/0x2d0 [ 337.588629][T12021] __se_sys_ioctl+0x47/0x170 [ 337.588650][T12021] do_syscall_64+0xfa/0xfa0 [ 337.588672][T12021] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.588695][T12021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.588713][T12021] ? clear_bhb_loop+0x60/0xb0 [ 337.588735][T12021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.588752][T12021] RIP: 0033:0x7f39a1f8ebe9 [ 337.588769][T12021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.588784][T12021] RSP: 002b:00007f39a2db5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 337.588804][T12021] RAX: ffffffffffffffda RBX: 00007f39a21c5fa0 RCX: 00007f39a1f8ebe9 [ 337.588818][T12021] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 337.588830][T12021] RBP: 00007f39a2db5090 R08: 0000000000000000 R09: 0000000000000000 [ 337.588841][T12021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.588853][T12021] R13: 00007f39a21c6038 R14: 00007f39a21c5fa0 R15: 00007ffe0491a968 [ 337.588886][T12021] [ 337.588907][T12021] ERROR: Out of memory at tomoyo_realpath_from_path. [ 337.994396][T12028] create_pit_timer: 10 callbacks suppressed [ 337.994413][T12028] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 338.235675][ T5903] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 338.396870][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 338.404114][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 338.424541][ T5903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.442151][ T5903] usb 4-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=7f.c5 [ 338.457863][ T5903] usb 4-1: New USB device strings: Mfr=242, Product=2, SerialNumber=3 [ 338.466891][ T5903] usb 4-1: Product: syz [ 338.472102][ T5903] usb 4-1: Manufacturer: syz [ 338.481056][ T5903] usb 4-1: SerialNumber: syz [ 338.492106][ T5903] usb 4-1: config 0 descriptor?? [ 338.522325][ T5903] usb 4-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 338.538913][ T5903] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 338.553045][ T5903] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 338.563996][ T5903] usb 4-1: media controller created [ 338.575705][ T43] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 338.616230][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 338.659857][ T5903] usb 4-1: selecting invalid altsetting 2 [ 338.668503][ T5903] set interface failed [ 338.668934][ T5903] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 338.687165][ T5903] error writing reg: 0xff, val: 0x00 [ 338.725836][ T43] usb 1-1: device descriptor read/64, error -71 [ 338.847247][ T5903] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 338.898286][ T5862] usb 4-1: USB disconnect, device number 104 [ 338.995853][ T43] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 339.137041][ T43] usb 1-1: device descriptor read/64, error -71 [ 339.201996][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 339.208154][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 339.257126][ T43] usb usb1-port1: attempt power cycle [ 339.505746][ T5896] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 339.569840][T12069] FAULT_INJECTION: forcing a failure. [ 339.569840][T12069] name failslab, interval 1, probability 0, space 0, times 0 [ 339.584109][T12069] CPU: 0 UID: 0 PID: 12069 Comm: syz.3.2062 Not tainted syzkaller #0 PREEMPT(full) [ 339.584132][T12069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 339.584143][T12069] Call Trace: [ 339.584151][T12069] [ 339.584159][T12069] dump_stack_lvl+0x189/0x250 [ 339.584189][T12069] ? __pfx____ratelimit+0x10/0x10 [ 339.584212][T12069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.584237][T12069] ? __pfx__printk+0x10/0x10 [ 339.584267][T12069] ? __pfx___might_resched+0x10/0x10 [ 339.584286][T12069] ? fs_reclaim_acquire+0x7d/0x100 [ 339.584311][T12069] should_fail_ex+0x414/0x560 [ 339.584336][T12069] should_failslab+0xa8/0x100 [ 339.584358][T12069] __kmalloc_noprof+0xcb/0x7f0 [ 339.584375][T12069] ? tomoyo_encode+0x28b/0x550 [ 339.584404][T12069] tomoyo_encode+0x28b/0x550 [ 339.584434][T12069] tomoyo_realpath_from_path+0x58d/0x5d0 [ 339.584463][T12069] ? tomoyo_domain+0xd9/0x130 [ 339.584493][T12069] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 339.584514][T12069] tomoyo_path_number_perm+0x1e8/0x5a0 [ 339.584545][T12069] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 339.584614][T12069] ? __fget_files+0x2a/0x420 [ 339.584645][T12069] ? __fget_files+0x3a0/0x420 [ 339.584664][T12069] ? __fget_files+0x2a/0x420 [ 339.584690][T12069] security_file_ioctl+0xcb/0x2d0 [ 339.584713][T12069] __se_sys_ioctl+0x47/0x170 [ 339.584734][T12069] do_syscall_64+0xfa/0xfa0 [ 339.584756][T12069] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.584779][T12069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.584796][T12069] ? clear_bhb_loop+0x60/0xb0 [ 339.584818][T12069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.584835][T12069] RIP: 0033:0x7efcdb98ebe9 [ 339.584852][T12069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.584867][T12069] RSP: 002b:00007efcdc8af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.584887][T12069] RAX: ffffffffffffffda RBX: 00007efcdbbc5fa0 RCX: 00007efcdb98ebe9 [ 339.584901][T12069] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 339.584913][T12069] RBP: 00007efcdc8af090 R08: 0000000000000000 R09: 0000000000000000 [ 339.584924][T12069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.584936][T12069] R13: 00007efcdbbc6038 R14: 00007efcdbbc5fa0 R15: 00007ffffda69318 [ 339.584968][T12069] [ 339.585440][T12069] ERROR: Out of memory at tomoyo_realpath_from_path. [ 339.598714][ T43] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 339.846470][ T43] usb 1-1: device descriptor read/8, error -71 [ 339.854163][ T5896] usb 5-1: config 0 has no interfaces? [ 339.859881][ T5896] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 339.868981][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.879619][ T5896] usb 5-1: config 0 descriptor?? [ 340.085845][ T43] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 340.100459][ T5903] usb 5-1: USB disconnect, device number 49 [ 340.122232][ T43] usb 1-1: device descriptor read/8, error -71 [ 340.246054][ T43] usb usb1-port1: unable to enumerate USB device [ 340.485673][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 340.985843][ T5903] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 341.130832][T12093] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2071'. [ 341.152109][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.176486][ T5903] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 341.186079][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.203940][ T5903] usb 5-1: config 0 descriptor?? [ 341.275681][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 341.395763][ T5862] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 341.426558][T12096] FAULT_INJECTION: forcing a failure. [ 341.426558][T12096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.445841][T12096] CPU: 0 UID: 0 PID: 12096 Comm: syz.0.2072 Not tainted syzkaller #0 PREEMPT(full) [ 341.445866][T12096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.445878][T12096] Call Trace: [ 341.445887][T12096] [ 341.445895][T12096] dump_stack_lvl+0x189/0x250 [ 341.445926][T12096] ? __pfx____ratelimit+0x10/0x10 [ 341.445950][T12096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.445979][T12096] ? __pfx__printk+0x10/0x10 [ 341.446003][T12096] ? __might_fault+0xb0/0x130 [ 341.446035][T12096] should_fail_ex+0x414/0x560 [ 341.446060][T12096] _copy_from_user+0x2d/0xb0 [ 341.446086][T12096] kstrtouint_from_user+0xc4/0x170 [ 341.446111][T12096] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 341.446152][T12096] proc_fail_nth_write+0x88/0x200 [ 341.446178][T12096] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 341.446208][T12096] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 341.446235][T12096] vfs_write+0x27b/0xb30 [ 341.446265][T12096] ? __pfx_vfs_write+0x10/0x10 [ 341.446287][T12096] ? __fget_files+0x2a/0x420 [ 341.446313][T12096] ? __fget_files+0x3a0/0x420 [ 341.446333][T12096] ? __fget_files+0x2a/0x420 [ 341.446364][T12096] ksys_write+0x145/0x250 [ 341.446382][T12096] ? __fget_files+0x2a/0x420 [ 341.446403][T12096] ? __pfx_ksys_write+0x10/0x10 [ 341.446428][T12096] ? do_syscall_64+0xbe/0xfa0 [ 341.446454][T12096] do_syscall_64+0xfa/0xfa0 [ 341.446478][T12096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.446494][T12096] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 341.446512][T12096] ? clear_bhb_loop+0x60/0xb0 [ 341.446533][T12096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.446549][T12096] RIP: 0033:0x7f21ed78d69f [ 341.446565][T12096] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 341.446579][T12096] RSP: 002b:00007f21ee577030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 341.446598][T12096] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f21ed78d69f [ 341.446611][T12096] RDX: 0000000000000001 RSI: 00007f21ee5770a0 RDI: 0000000000000006 [ 341.446622][T12096] RBP: 00007f21ee577090 R08: 0000000000000000 R09: 0000000000000000 [ 341.446639][T12096] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 341.446649][T12096] R13: 00007f21ed9c6128 R14: 00007f21ed9c6090 R15: 00007ffe08f553f8 [ 341.446682][T12096] [ 341.692936][ T5903] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 341.707333][ T5903] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0013/input/input35 [ 341.765636][ T5862] usb 4-1: Using ep0 maxpacket: 8 [ 341.774032][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.786560][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.798106][ T5862] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 341.813376][ T5862] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 341.823140][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.849935][ T5862] usb 4-1: config 0 descriptor?? [ 341.933698][ T5903] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 342.265043][ T5862] logitech 0003:046D:C293.0014: nested delimiters [ 342.273630][ T5862] logitech 0003:046D:C293.0014: item 0 4 2 10 parsing failed [ 342.292446][ T5862] logitech 0003:046D:C293.0014: parse failed [ 342.304766][ T5862] logitech 0003:046D:C293.0014: probe with driver logitech failed with error -22 [ 342.345809][ T5903] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 342.465348][ T5862] usb 4-1: USB disconnect, device number 105 [ 342.529602][ T5903] usb 1-1: unable to get BOS descriptor or descriptor too short [ 342.538678][ T5903] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.559574][ T5903] usb 1-1: New USB device found, idVendor=046d, idProduct=0057, bcdDevice= 0.40 [ 342.568792][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.577028][ T5903] usb 1-1: Product: syz [ 342.581236][ T5903] usb 1-1: SerialNumber: syz [ 342.680906][ T5956] usb 5-1: USB disconnect, device number 50 [ 342.816337][ T5903] usbhid 1-1:1.0: can't add hid device: -71 [ 342.822383][ T5903] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 342.884391][ T5903] usb 1-1: USB disconnect, device number 18 [ 343.558880][T12131] FAULT_INJECTION: forcing a failure. [ 343.558880][T12131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.573852][T12131] CPU: 0 UID: 0 PID: 12131 Comm: syz.3.2085 Not tainted syzkaller #0 PREEMPT(full) [ 343.573877][T12131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 343.573888][T12131] Call Trace: [ 343.573896][T12131] [ 343.573904][T12131] dump_stack_lvl+0x189/0x250 [ 343.573934][T12131] ? __pfx____ratelimit+0x10/0x10 [ 343.573956][T12131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.573980][T12131] ? __pfx__printk+0x10/0x10 [ 343.574019][T12131] should_fail_ex+0x414/0x560 [ 343.574044][T12131] __kvm_read_guest_page+0x18d/0x240 [ 343.574068][T12131] kvm_fetch_guest_virt+0x12b/0x170 [ 343.574094][T12131] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 343.574115][T12131] __do_insn_fetch_bytes+0x2f9/0x6d0 [ 343.574142][T12131] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 343.574163][T12131] ? __bpf_trace_contention_end+0xc0/0x130 [ 343.574186][T12131] ? x86_decode_insn+0x12d7/0x5310 [ 343.574210][T12131] x86_decode_insn+0x33c/0x5310 [ 343.574264][T12131] ? __pfx_x86_decode_insn+0x10/0x10 [ 343.574296][T12131] ? __asan_memset+0x22/0x50 [ 343.574322][T12131] ? init_decode_cache+0x78/0x90 [ 343.574340][T12131] ? init_emulate_ctxt+0x4d6/0x660 [ 343.574368][T12131] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 343.574397][T12131] ? trace_rcu_utilization+0x47/0x1d0 [ 343.574423][T12131] x86_emulate_instruction+0x61b/0x1f90 [ 343.574470][T12131] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 343.574493][T12131] ? __get_current_cr3_fast+0x90/0x150 [ 343.574511][T12131] ? clear_bhb_loop+0x60/0xb0 [ 343.574527][T12131] ? clear_bhb_loop+0x60/0xb0 [ 343.574545][T12131] ? vmx_vcpu_run+0xe92/0x2b70 [ 343.574565][T12131] ? __vmx_complete_interrupts+0xe7/0x690 [ 343.574599][T12131] handle_ud+0x142/0x590 [ 343.574626][T12131] ? __pfx_handle_ud+0x10/0x10 [ 343.574646][T12131] ? vmx_handle_exit_irqoff+0x61e/0x940 [ 343.574666][T12131] ? __pfx_current_save_fsgs+0x10/0x10 [ 343.574699][T12131] ? __lock_acquire+0xab9/0xd20 [ 343.574721][T12131] ? __pfx_handle_exception_nmi+0x10/0x10 [ 343.574744][T12131] vmx_handle_exit+0x10a4/0x18c0 [ 343.574767][T12131] ? vcpu_run+0x3620/0x7020 [ 343.574800][T12131] vcpu_run+0x43aa/0x7020 [ 343.574843][T12131] ? vcpu_run+0x3620/0x7020 [ 343.574921][T12131] ? __pfx_vcpu_run+0x10/0x10 [ 343.574939][T12131] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 343.574964][T12131] ? complete_emulated_mmio+0x18e/0x7a0 [ 343.574990][T12131] ? __asan_memcpy+0x40/0x70 [ 343.575015][T12131] ? complete_emulated_mmio+0x4d2/0x7a0 [ 343.575051][T12131] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 343.575075][T12131] ? __mutex_trylock_common+0x153/0x260 [ 343.575101][T12131] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 343.575120][T12131] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 343.575141][T12131] ? rcu_is_watching+0x15/0xb0 [ 343.575162][T12131] ? trace_contention_end+0x39/0x120 [ 343.575184][T12131] ? __mutex_lock+0x335/0x1350 [ 343.575216][T12131] ? kasan_quarantine_put+0xdd/0x220 [ 343.575234][T12131] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.575256][T12131] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 343.575278][T12131] ? __pfx___mutex_lock+0x10/0x10 [ 343.575302][T12131] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 343.575346][T12131] ? do_vfs_ioctl+0xbe8/0x1430 [ 343.575363][T12131] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 343.575385][T12131] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 343.575408][T12131] kvm_vcpu_ioctl+0x95c/0xe90 [ 343.575433][T12131] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 343.575476][T12131] ? __fget_files+0x2a/0x420 [ 343.575502][T12131] ? __fget_files+0x3a0/0x420 [ 343.575525][T12131] ? __fget_files+0x2a/0x420 [ 343.575547][T12131] ? bpf_lsm_file_ioctl+0x9/0x20 [ 343.575570][T12131] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 343.575586][T12131] __se_sys_ioctl+0xfc/0x170 [ 343.575605][T12131] do_syscall_64+0xfa/0xfa0 [ 343.575626][T12131] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.575648][T12131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.575665][T12131] ? clear_bhb_loop+0x60/0xb0 [ 343.575685][T12131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.575702][T12131] RIP: 0033:0x7efcdb98ebe9 [ 343.575717][T12131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.575731][T12131] RSP: 002b:00007efcdc8af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 343.575751][T12131] RAX: ffffffffffffffda RBX: 00007efcdbbc5fa0 RCX: 00007efcdb98ebe9 [ 343.575764][T12131] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 343.575775][T12131] RBP: 00007efcdc8af090 R08: 0000000000000000 R09: 0000000000000000 [ 343.575786][T12131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 343.575796][T12131] R13: 00007efcdbbc6038 R14: 00007efcdbbc5fa0 R15: 00007ffffda69318 [ 343.575836][T12131] [ 343.635370][T12139] netlink: 'syz.4.2087': attribute type 10 has an invalid length. [ 343.636059][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.834068][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 343.905637][ T43] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 344.062114][T12148] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2091'. [ 344.216814][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 344.236987][ T43] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 344.249488][ T43] usb 1-1: config 4 has no interface number 0 [ 344.258731][ T43] usb 1-1: config 4 interface 51 has no altsetting 0 [ 344.268507][ T43] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 344.280810][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.292546][ T43] usb 1-1: Product: syz [ 344.301273][ T43] usb 1-1: Manufacturer: syz [ 344.307153][ T43] usb 1-1: SerialNumber: syz [ 344.319757][ T43] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -22 [ 344.416592][T12160] pim6reg1: entered promiscuous mode [ 344.423148][T12160] pim6reg1: entered allmulticast mode [ 344.523804][T12127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.533272][T12127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.544429][ T43] usb 1-1: USB disconnect, device number 19 [ 344.631820][T12162] ./cgroup: Can't lookup blockdev [ 344.900644][T12173] tipc: New replicast peer: 255.255.255.255 [ 344.907880][T12173] tipc: Enabled bearer , priority 10 [ 344.917125][T12173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2100'. [ 344.927585][T12173] tipc: Disabling bearer [ 345.590706][T12189] program syz.3.2105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.600439][T12189] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 345.745767][ T43] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 345.899384][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64 [ 345.911262][ T43] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a1e, bcdDevice= 0.00 [ 345.921466][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.944809][ T43] usb 5-1: config 0 descriptor?? [ 345.950757][T12185] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 346.268426][T12204] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 346.280621][T12204] overlayfs: maximum fs stacking depth exceeded [ 346.379027][ T43] hid-corsair-void 0003:1B1C:0A1E.0015: item fetching failed at offset 3/5 [ 346.388653][ T43] hid-corsair-void 0003:1B1C:0A1E.0015: parse failed (reason: -22) [ 346.402745][ T43] hid-corsair-void 0003:1B1C:0A1E.0015: probe with driver hid-corsair-void failed with error -22 [ 346.577267][T12185] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2104'. [ 346.611046][T12185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.621064][T12185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.638113][T12185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.653449][T12185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.669041][ T5903] usb 5-1: USB disconnect, device number 51 [ 346.707083][ T10] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 346.877764][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.888697][ T10] usb 1-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=b5.6d [ 346.898182][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.907124][ T10] usb 1-1: Product: syz [ 346.911294][ T10] usb 1-1: Manufacturer: syz [ 346.916340][ T10] usb 1-1: SerialNumber: syz [ 346.922883][ T10] usb 1-1: config 0 descriptor?? [ 347.048785][ T10] rtsx_usb 1-1:0.0: probe with driver rtsx_usb failed with error -22 [ 347.131989][T12210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.140807][T12210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.162908][T12210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.172862][T12210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.185452][T12210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.196893][T12210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.202882][T12219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.218390][T12219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.320826][ T10] usb 1-1: USB disconnect, device number 20 [ 347.665648][ T5862] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 347.669603][T12243] sp0: Synchronizing with TNC [ 347.716910][T12243] [U] è [ 347.825648][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 347.833479][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 347.852658][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 347.864131][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 347.875453][ T5862] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 347.885457][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.895746][ T5862] usb 5-1: config 0 descriptor?? [ 347.901601][T12231] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 347.911048][ T5862] hub 5-1:0.0: USB hub found [ 348.098740][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 348.111442][ T5862] hub 5-1:0.0: 8 ports detected [ 348.116929][ T5862] hub 5-1:0.0: insufficient power available to use all downstream ports [ 348.258184][ T10] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 348.267383][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.279078][ T10] usb 1-1: config 0 descriptor?? [ 348.492038][ T10] usb 1-1: Cannot read MAC address [ 348.499898][ T10] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 348.516819][ T10] usb 1-1: USB disconnect, device number 21 [ 348.618761][T12257] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2130'. [ 348.631284][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2130'. [ 349.141389][ T43] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 349.216401][ T5862] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 349.231512][ T5862] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 349.244843][ T5862] usbhid 5-1:0.0: can't add hid device: -32 [ 349.251800][ T5862] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 349.290475][ T30] audit: type=1800 audit(1757429538.678:93): pid=12269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2135" name="nullb0" dev="tmpfs" ino=2113 res=0 errno=0 [ 349.324139][ T43] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 349.344027][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.366048][ T43] usb 4-1: config 0 descriptor?? [ 349.370668][T12273] tipc: Started in network mode [ 349.376975][T12273] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 349.390346][T12273] tipc: Enabled bearer , priority 2 [ 349.579074][T12260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.596322][T12260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.650363][T12284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.661947][T12284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.710927][ T43] usb 4-1: Cannot read MAC address [ 349.720803][ T43] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 349.750601][ T43] usb 4-1: USB disconnect, device number 106 [ 349.843897][T12295] overlayfs: failed to resolve './file0': -2 [ 350.115872][ T43] usb 4-1: new low-speed USB device number 107 using dummy_hcd [ 350.162074][T12301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2146'. [ 350.285726][ T43] usb 4-1: Invalid ep0 maxpacket: 64 [ 350.369804][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 350.380864][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 350.391032][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 350.423667][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 350.432574][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 350.451107][ T43] usb 4-1: new low-speed USB device number 108 using dummy_hcd [ 350.509137][ T5903] tipc: Node number set to 10070698 [ 350.616434][ T43] usb 4-1: Invalid ep0 maxpacket: 64 [ 350.628999][ T43] usb usb4-port1: attempt power cycle [ 350.643333][T12309] ------------[ cut here ]------------ [ 350.650291][T12309] WARNING: mm/page_alloc.c:5129 at __alloc_frozen_pages_noprof+0x2c8/0x370, CPU#1: syz.0.2149/12309 [ 350.661748][T12309] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 350.666555][T12309] CPU: 1 UID: 0 PID: 12309 Comm: syz.0.2149 Not tainted syzkaller #0 PREEMPT(full) [ 350.675967][T12309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 350.686083][T12309] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 350.692703][T12309] Code: 74 10 4c 89 e7 89 54 24 0c e8 04 66 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 9a 5f b8 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 350.712485][T12309] RSP: 0018:ffffc9000ba2f880 EFLAGS: 00010246 [ 350.718733][T12309] RAX: ffffc9000ba2f800 RBX: 000000000000001a RCX: 0000000000000000 [ 350.726849][T12309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000ba2f8e8 [ 350.734836][T12309] RBP: ffffc9000ba2f970 R08: ffffc9000ba2f8e7 R09: 0000000000000000 [ 350.742869][T12309] R10: ffffc9000ba2f8c0 R11: fffff52001745f1d R12: 0000000000000000 [ 350.751418][T12309] R13: 1ffff92001745f14 R14: 0000000000040d40 R15: dffffc0000000000 [ 350.759965][T12309] FS: 00007f21ee5986c0(0000) GS:ffff8881258b3000(0000) knlGS:0000000000000000 [ 350.768970][T12309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.774643][ T10] usb 5-1: reset high-speed USB device number 52 using dummy_hcd [ 350.775657][T12309] CR2: 0000555560a5f808 CR3: 0000000057fca000 CR4: 00000000003526f0 [ 350.792134][T12309] Call Trace: [ 350.795425][T12309] [ 350.798457][T12309] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 350.804995][T12309] ? p9_client_clunk+0x1b6/0x250 [ 350.810020][T12309] alloc_pages_mpol+0x232/0x4a0 [ 350.814901][T12309] ___kmalloc_large_node+0x5f/0x1b0 [ 350.820160][T12309] __kmalloc_large_node_noprof+0x18/0x90 [ 350.825877][T12309] __kmalloc_noprof+0x4bd/0x7f0 [ 350.830753][T12309] ? v9fs_fid_get_acl+0x4f/0x100 [ 350.835755][T12309] ? __pfx_v9fs_cache_inode_get_cookie+0x10/0x10 [ 350.842111][T12309] v9fs_fid_get_acl+0x4f/0x100 [ 350.846971][T12309] v9fs_get_acl+0x9a/0x360 [ 350.851855][T12309] v9fs_inode_from_fid_dotl+0x221/0x2b0 [ 350.855736][ T10] usb 5-1: device reset changed ep0 maxpacket size! [ 350.857936][T12309] v9fs_mount+0x6eb/0xa50 [ 350.868559][T12309] ? __pfx_v9fs_mount+0x10/0x10 [ 350.873444][T12309] legacy_get_tree+0xfa/0x1a0 [ 350.878215][T12309] ? __pfx_v9fs_mount+0x10/0x10 [ 350.883094][T12309] vfs_get_tree+0x8f/0x2b0 [ 350.887606][T12309] do_new_mount+0x302/0xa10 [ 350.892132][T12309] ? apparmor_capable+0x137/0x1b0 [ 350.895092][ T10] usb 5-1: USB disconnect, device number 52 [ 350.897282][T12309] ? __pfx_do_new_mount+0x10/0x10 [ 350.908344][T12309] ? ns_capable+0x8a/0xf0 [ 350.912704][T12309] ? path_mount+0x61c/0xfe0 [ 350.917321][T12309] ? kmem_cache_free+0x19a/0x690 [ 350.922307][T12309] __se_sys_mount+0x313/0x410 [ 350.927191][T12309] ? __pfx___se_sys_mount+0x10/0x10 [ 350.932464][T12309] ? do_syscall_64+0xbe/0xfa0 [ 350.937224][T12309] ? __x64_sys_mount+0x20/0xc0 [ 350.942058][T12309] do_syscall_64+0xfa/0xfa0 [ 350.946661][T12309] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.951884][T12309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.958493][T12309] ? clear_bhb_loop+0x60/0xb0 [ 350.963198][T12309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.969612][T12309] RIP: 0033:0x7f21ed78ebe9 [ 350.974049][T12309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.993777][T12309] RSP: 002b:00007f21ee598038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 351.002270][T12309] RAX: ffffffffffffffda RBX: 00007f21ed9c5fa0 RCX: 00007f21ed78ebe9 [ 351.010316][T12309] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 351.018359][T12309] RBP: 00007f21ed811e19 R08: 0000200000000580 R09: 0000000000000000 [ 351.026392][T12309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.034381][T12309] R13: 00007f21ed9c6038 R14: 00007f21ed9c5fa0 R15: 00007ffe08f553f8 [ 351.042460][T12309] [ 351.045498][T12309] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 351.052792][T12309] CPU: 1 UID: 0 PID: 12309 Comm: syz.0.2149 Not tainted syzkaller #0 PREEMPT(full) [ 351.062177][T12309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.072248][T12309] Call Trace: [ 351.075536][T12309] [ 351.078468][T12309] dump_stack_lvl+0x99/0x250 [ 351.083078][T12309] ? __asan_memcpy+0x40/0x70 [ 351.087685][T12309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.092902][T12309] ? __pfx__printk+0x10/0x10 [ 351.097523][T12309] vpanic+0x237/0x6d0 [ 351.101509][T12309] ? __pfx_vpanic+0x10/0x10 [ 351.106003][T12309] ? is_bpf_text_address+0x292/0x2b0 [ 351.111282][T12309] ? is_bpf_text_address+0x26/0x2b0 [ 351.116477][T12309] panic+0xb9/0xc0 [ 351.120186][T12309] ? __pfx_panic+0x10/0x10 [ 351.124602][T12309] __warn+0x334/0x4c0 [ 351.128572][T12309] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 351.134544][T12309] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 351.140511][T12309] report_bug+0x2be/0x4f0 [ 351.144836][T12309] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 351.150864][T12309] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 351.156835][T12309] ? __alloc_frozen_pages_noprof+0x2ca/0x370 [ 351.162812][T12309] handle_bug+0x84/0x160 [ 351.167048][T12309] exc_invalid_op+0x1a/0x50 [ 351.171539][T12309] asm_exc_invalid_op+0x1a/0x20 [ 351.176373][T12309] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 351.182951][T12309] Code: 74 10 4c 89 e7 89 54 24 0c e8 04 66 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 9a 5f b8 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 351.202543][T12309] RSP: 0018:ffffc9000ba2f880 EFLAGS: 00010246 [ 351.208600][T12309] RAX: ffffc9000ba2f800 RBX: 000000000000001a RCX: 0000000000000000 [ 351.216560][T12309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000ba2f8e8 [ 351.224518][T12309] RBP: ffffc9000ba2f970 R08: ffffc9000ba2f8e7 R09: 0000000000000000 [ 351.232477][T12309] R10: ffffc9000ba2f8c0 R11: fffff52001745f1d R12: 0000000000000000 [ 351.240435][T12309] R13: 1ffff92001745f14 R14: 0000000000040d40 R15: dffffc0000000000 [ 351.248498][T12309] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 351.254827][T12309] ? p9_client_clunk+0x1b6/0x250 [ 351.259767][T12309] alloc_pages_mpol+0x232/0x4a0 [ 351.264621][T12309] ___kmalloc_large_node+0x5f/0x1b0 [ 351.269811][T12309] __kmalloc_large_node_noprof+0x18/0x90 [ 351.275442][T12309] __kmalloc_noprof+0x4bd/0x7f0 [ 351.280282][T12309] ? v9fs_fid_get_acl+0x4f/0x100 [ 351.285209][T12309] ? __pfx_v9fs_cache_inode_get_cookie+0x10/0x10 [ 351.291528][T12309] v9fs_fid_get_acl+0x4f/0x100 [ 351.296284][T12309] v9fs_get_acl+0x9a/0x360 [ 351.300693][T12309] v9fs_inode_from_fid_dotl+0x221/0x2b0 [ 351.306236][T12309] v9fs_mount+0x6eb/0xa50 [ 351.310556][T12309] ? __pfx_v9fs_mount+0x10/0x10 [ 351.315399][T12309] legacy_get_tree+0xfa/0x1a0 [ 351.320066][T12309] ? __pfx_v9fs_mount+0x10/0x10 [ 351.324907][T12309] vfs_get_tree+0x8f/0x2b0 [ 351.329311][T12309] do_new_mount+0x302/0xa10 [ 351.333800][T12309] ? apparmor_capable+0x137/0x1b0 [ 351.338817][T12309] ? __pfx_do_new_mount+0x10/0x10 [ 351.343834][T12309] ? ns_capable+0x8a/0xf0 [ 351.348158][T12309] ? path_mount+0x61c/0xfe0 [ 351.352646][T12309] ? kmem_cache_free+0x19a/0x690 [ 351.357580][T12309] __se_sys_mount+0x313/0x410 [ 351.362343][T12309] ? __pfx___se_sys_mount+0x10/0x10 [ 351.367554][T12309] ? do_syscall_64+0xbe/0xfa0 [ 351.372222][T12309] ? __x64_sys_mount+0x20/0xc0 [ 351.376995][T12309] do_syscall_64+0xfa/0xfa0 [ 351.381485][T12309] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.386672][T12309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.392729][T12309] ? clear_bhb_loop+0x60/0xb0 [ 351.397392][T12309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.403267][T12309] RIP: 0033:0x7f21ed78ebe9 [ 351.407670][T12309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.427261][T12309] RSP: 002b:00007f21ee598038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 351.435665][T12309] RAX: ffffffffffffffda RBX: 00007f21ed9c5fa0 RCX: 00007f21ed78ebe9 [ 351.443623][T12309] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 351.451577][T12309] RBP: 00007f21ed811e19 R08: 0000200000000580 R09: 0000000000000000 [ 351.459533][T12309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.467492][T12309] R13: 00007f21ed9c6038 R14: 00007f21ed9c5fa0 R15: 00007ffe08f553f8 [ 351.475469][T12309] [ 351.478743][T12309] Kernel Offset: disabled [ 351.483056][T12309] Rebooting in 86400 seconds..