last executing test programs: 6.765136043s ago: executing program 1 (id=2221): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000b2000040"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x4c882, 0x0) preadv2(r3, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/194, 0x7ffff000}, {0x0}], 0x2, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000def300fd820800"/24]) r4 = creat(&(0x7f0000001380)='./file0\x00', 0x4) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) write$UHID_INPUT(r4, &(0x7f0000001480)={0x8, {"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", 0x1000}}, 0x1006) 6.658572432s ago: executing program 1 (id=2222): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1000, 0xfffffffe}) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x7f, @tick=0x1f4, {0x0, 0xfd}, {}, @raw32={[0x2600]}}], 0x1c) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) 5.687463857s ago: executing program 3 (id=2232): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xc, 0x9fd, 0x6, 0x101, 0x100, 0x1}}) 5.545578111s ago: executing program 3 (id=2233): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80042, 0x0) r1 = socket(0x5, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040)=0x1006, 0x4) sendto$inet(r1, 0x0, 0x0, 0x80, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000002c0)=@generic={0x0, 0x6}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r3, 0x89f2, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x7ff, 0xa, "5dee000000594000"}) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x2}, 0x0, [0x0, 0x3, 0x403, 0x100000, 0x8, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ec7c00, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0xa9a4, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x21bd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffc, 0x0, 0xfffffffb, 0x82, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x10, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffe, 0x1, 0x7, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xfffffffd, 0x2, 0x0, 0x6492, 0x8], [0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x200000, 0x1, 0x0, 0x10, 0x0, 0x2, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x2000005, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x800, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000400)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x7cc9c5b0ac252cf0, r5, 0x2c487000) r8 = getuid() setreuid(0x0, r8) quotactl_fd$Q_GETFMT(r6, 0xffffffff80000401, r8, &(0x7f0000000040)) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, &(0x7f0000000380)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) 4.946760555s ago: executing program 3 (id=2238): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f0300", 0x4}], 0x1, 0x0, 0x34000}, 0x0) 4.759549964s ago: executing program 3 (id=2239): socket(0x28, 0x4, 0x6) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) syz_usb_connect(0x0, 0x24, &(0x7f0000001080)=ANY=[@ANYBLOB="1201000005af9e08d2106528c9a4000000010902120001000000000904"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000002000f000000050030000000000005002f000000000008000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, 0x0, 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[], 0xa) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x6a040000) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000000540)="43210098") r9 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r6}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2.899300437s ago: executing program 3 (id=2245): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x1, 0x2, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = getpid() tkill(r2, 0x24) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195958c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f01a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b588776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000840)="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", 0x1a4}, {&(0x7f00000001c0)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000000680)="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", 0x13a}, {&(0x7f0000000580)="ac6aed94fbb8c7fecccf1fad0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc2a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb9c44e588728dbe44a49301998f8bb11356809ab4bfbc85cd9eed4820e2a821913e94e49c898fca38824fef2d62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb03d6549353921bb4a52b3230008f967ddc1ad8635d5", 0xdb}, {&(0x7f0000002300)="0b41dae71fdbfbd927", 0x9}], 0x7}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002400)="036157dd45d9a56c0f33f53edcee705d061adaaf88a1fb96", 0x18}, {&(0x7f0000002480)="9467776b9ec22f06151761843173440c3e9448d40384f222fec952053bd200bbc7ccef8e7c88fb0ae01fa531ad6deb000578a6c82661d5bf15bffe28cf236057bacc915533a7a58c9253414b4eea351e504828a7279ced0949ed778c25ae266f71689f85decb0b7cd62083d9dc4ff648d4fdd2e18f549308c1612433ea604d426ce3fe6b120bb7", 0x87}], 0x2}}], 0x3, 0x2000c044) sendto$inet(r1, 0x0, 0x0, 0x16000000, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x30, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x40c0080) 2.80170844s ago: executing program 1 (id=2246): syz_open_dev$vim2m(0x0, 0x2, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x5e9c41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0), 0x0, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) 2.757222858s ago: executing program 3 (id=2247): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x200, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x10fe}}) pipe(&(0x7f0000000080)) write$binfmt_misc(r2, &(0x7f0000000e00)="32ef1b0f2bcab97d8dbc26dfc5ba03c9518a45b5c10e5de1bcc9a3920f20ce9a413c48bfcd2c5d5e910aab845ac967f7a74284eb216cc5ffe9db7306518aead6d1c07f0e7af682b73efce8b2432d493a0daaaab44a67ebe9792ed65dbd05df9eecfe80d81100000000", 0xffffff36) close(0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff, 0x1000000000, 0x5, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x1}, 0x0, 0x0) syz_usb_disconnect(r1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x180000) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000300)='./file0\x00', r5, r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2020, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="0000121be60000daac7bc52d8fc9c8d24bfbb4a0dc682442618ffa5a4c9e39ed0ff3d4a6730d589d17914c7f7b70", @ANYRESHEX=r0, @ANYBLOB=',cache=loose,aname=/dev/rnullb0\x00,directio,mmap,version=9p2000,\x00']) mremap(&(0x7f0000714000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f0000ffe000/0x1000)=nil) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000000100)={{&(0x7f00009ca000/0x3000)=nil, 0x3000}, 0x1}) chdir(&(0x7f00000002c0)='./file0\x00') 2.640154483s ago: executing program 1 (id=2249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000380)="ebe3a0e961837b796cfd1647e2080000000000000080b3720022205e81f4a7f71c197baae1efd7e8004a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000006c0)="e8710e444d50a969ff678371e3214aeee71dee3819271482a4975a52c18b9b8b4db3945d1032005eabe97b4dc33a47d3a158da98255ccdd4c15eb6c9857345444d8456d30026b433a2efdd5b00186f35cdcdb93a4722bf356a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8927d2a8103ef2f4b93766b756b66f74f46cf801704d27a8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511ce678c0bb8e26d7b48241847bf9e343ef4e55d45e2a0000000000000000000", 0xfffffe7f}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de990e40a896805e49ce1e13103d82fffe82237f587e63d95e01ef451eaba2dd01c56e7f23c1fcccbea54dae8e295f2e533e4a34175026a9964eebc1aaae05e44a19a27bee2f591abe2f456448754670a7c3e2e4b47a71bc7"}, {&(0x7f0000000300)}], 0x3}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) (async, rerun: 32) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r5, 0x2000) 2.309075231s ago: executing program 0 (id=2251): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/30, 0x1e, 0x40000022, &(0x7f0000000040)=@generic={0x18, "6e86748340794e2a75e444cee8abff9aa1b2cf055815b3aa6e95098f4648210096a15cbf5e2cc03373c813db3e69b9af358fe405de2fda0614cde6935884babe487f64410076cf8c2846adc8a8eb1b26b4f52482aceeca1438658df4f49a18fe077b0c8cd835322ea64cf78fd46230af102ff27cf1e3144c60bed4317557"}, 0x80) (async) fadvise64(r0, 0x65f, 0x2, 0x5) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x93, 0x10000) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) (async) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000040)={0x3, r8, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000640)={&(0x7f0000000600)=[r2, r3, r4, r5, r8], 0x5, 0x80800}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) mlock(&(0x7f00002a3000/0x3000)=nil, 0x3000) 1.981034425s ago: executing program 0 (id=2253): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x80000001, 0x40}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000280), 0x7, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000002a00)={0x7, 'vlan0\x00', {0xb}, 0xc}) writev(r2, &(0x7f0000000340)=[{&(0x7f00000002c0)="5f95d739905141069a0292135c8f13c72eff94c381920de2e69f29d5bc2dd74f1b37f6380d1ae0c33debaa89c4ff39ecf41e2cc50d7e9fe39e7270102af1121a96737d988ee49c17599e9cf2af357ff36b410d879d2a2ccfb2c87dfce0feaf58a42c", 0x62}, {&(0x7f0000001180)="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", 0x1000}], 0x2) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, &(0x7f0000000240)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000180)={'raw\x00', 0x0, [0x6, 0x9, 0x7, 0x2, 0x8]}, &(0x7f0000000200)=0x54) r5 = socket(0x22, 0x4, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001900010000000000000000001d0109004d00128008002100", @ANYRES32=0x0, @ANYBLOB="428184a477201acb0f24d8c531680464ff1e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3da0000000c000d"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x804) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="02002dbd7000fddbdf270b000000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) 1.838544127s ago: executing program 0 (id=2255): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xffc3, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000001200000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x20040040) 1.724427226s ago: executing program 0 (id=2257): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) setresuid(0x0, r1, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0x4b, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) 1.723979156s ago: executing program 1 (id=2258): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r3, 0x0, &(0x7f00000000c0)="42453d54690c4aed5bda484e7b39b2d63a6f25166f553e00bcff1d5b8cb2b89fb290c0", 0x23}) 1.682155379s ago: executing program 2 (id=2259): ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0xc, 0x9fd, 0x6, 0x101, 0x100, 0x1}}) 1.639908285s ago: executing program 0 (id=2260): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xbf, 0xc70, 0xf00b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x40, {0x9, 0x21, 0x8, 0x2, 0x1, {0x22, 0x41}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x1, 0x5}}}}}]}}]}}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 9) 1.573083318s ago: executing program 1 (id=2261): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x80015b1a, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000280)={0x14, &(0x7f0000000100)={0x20, 0x3, 0xed, {0xed, 0x5, "3e2e6246555993cd29c86b500f9ec349313db29b70a28a9a761bbb9eff76b7b53c06301d36624e1cfbfa18154d59b6074230b07638c1c3c7ba065bcab45eba8ce63dac317cc45fe51d41bc71397293578a4f8deefc2eb400e914c01025805cd709618c5a56dffc21aba823b4b556b0d0d0a587a253b6338a3c74f465fbc53843848aea11456056993a8607861416b0dc23efa5d5c9ffe57f802db6693b36c4000aaea5f10b7a89a6f0d167239fca31d8de6d4b7d04e98220bf2bcafbc57ba3b0b5dbe705bfeb44dfe6b2b44997302e2d0a209e9b8b5be56eb3a2df89948198448c147d2165ca78de1b61b3"}}, &(0x7f0000000200)={0x0, 0x3, 0x17, @string={0x17, 0x3, "853fe8e4ad9de655cd79c7680e8b8a5a67674c9863"}}}, &(0x7f0000000580)={0x44, &(0x7f00000002c0)={0x20, 0x6, 0xc2, "a912b0c48ea81ce59ddae2b0e9c3c99f1ba1a8aa76001c7bf2816fc4e18d3d4b2b2d9fcaceb311c94f4a67260e4e4015ee5bb549789e5748acbe74ee7920fa5a40fc7dd44c2d8ed7b604a54ab2ee886d05e3e30a4451872d560f6ee4a6e27ec238cd166de99fa9bafd294fc24aada470dad9287d71aa5132342450debefe2f1a7a9963d5cdd47974905c788b2e3b672f69cdc94356930924a4abd60ab08d27368c365b87d54c21ab0c6a876fa73042a753c4c46fc8c946c6517f76f52491ff40dc8e"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000440)={0x20, 0x81, 0x1, "96"}, &(0x7f0000000480)={0x20, 0x82, 0x2, '\ak'}, &(0x7f00000004c0)={0x20, 0x83, 0x2, 'GQ'}, &(0x7f0000000500)={0x20, 0x84, 0x4, "a9e1e228"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "b9cc01"}}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = eventfd(0x9) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x214, 0x8000000, 0x4, r4, 0x6}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) 1.571689476s ago: executing program 2 (id=2262): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x2a}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e0", 0x13}], 0x3}, 0x0) syz_io_uring_setup(0x2421, &(0x7f0000000140)={0x0, 0x0, 0x400}, &(0x7f0000000100), &(0x7f0000000080)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) mprotect(&(0x7f0000feb000/0x13000)=nil, 0x13000, 0x2000008) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 1.476955569s ago: executing program 2 (id=2263): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) r0 = syz_clone(0x88d100, &(0x7f0000000080)="9028752bc49522acd61182e450a16cd9ad8dc60e4fa2fd8e98f924e545816018aac7fa2c7b8c8949411299cb39c802972257461b0481f50b74d968f054c35f3556422a41f0fd2e6b5077d221e9ef7639d4a6be8c7d538bd9d4dcdb2a96b3f5c11675aa6a8b761f45da109e506647fc7082c93f20f9ab1a86f21532835910504a44ed9fe3c8cae9e78a1e2d9828efc4f21532b73763c46bddda3a125ded2c67414c4352e51fe77d80175b12a43f82024dfad236847ce02ec4cfdcd162914ab70300964cc76e69fa0a8d3ada9330588c05d9d6", 0xd2, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="b6c534c0f295b54726a3107732bea864b2ff95df2b30455e616fa3491f0c49ce010fb2807676012c6db4c7228d8bf18b2ec8cf") syz_open_procfs$namespace(r0, &(0x7f0000000280)='ns/cgroup\x00') 566.340728ms ago: executing program 2 (id=2264): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) clock_adjtime(0x1000000, &(0x7f0000000080)={0x3, 0x3, 0x7, 0x8000, 0xdbf, 0x3, 0x5, 0x8000, 0x0, 0x401, 0x8000, 0x6, 0x6, 0x1, 0x7, 0xb, 0x8000000000000001, 0x6, 0x1, 0x4, 0x7, 0x4, 0x28000, 0x4, 0x2, 0x10001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) 221.049679ms ago: executing program 0 (id=2265): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r0, 0x14, 0x1) clock_adjtime(0x0, &(0x7f0000000080)={0x3, 0x3, 0x7, 0x8000, 0xdbf, 0x3, 0x800, 0x8000, 0x0, 0x401, 0x8000, 0x6, 0x6, 0x8, 0x9, 0xb, 0x8000000000000001, 0x6, 0x1, 0x4, 0x7, 0x4, 0x28000, 0x4, 0x2, 0x10001}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x4048aec9, &(0x7f0000000080)={[{0x4, 0x0, 0x0, 0x40, 0x0, 0xb, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x80}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xfe, 0xfd, 0x0, 0x0, 0x0, 0x40}, {0x200002, 0xa, 0xa, 0x3, 0x8, 0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}], 0x2000006}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = syz_usb_connect(0x1, 0x24, &(0x7f0000000980)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r6, 0x4068aea3, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) r9 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000400000a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f0100080000000300000004240200090581031000000000090582"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r9) r10 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) 84.665837ms ago: executing program 2 (id=2266): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/211, 0xd3}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000100)=0x1, 0x3f) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BLKSSZGET(r3, 0x1268, &(0x7f0000000180)) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045519, &(0x7f0000000480)=0x1) 0s ago: executing program 2 (id=2267): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x500, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0xffffffe2}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364"}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a"}, {&(0x7f00000001c0)}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) kernel console output (not intermixed with test programs): different from the descriptor's value: 3 [ 353.768589][ T5917] usb 2-1: config 1 has no interface number 1 [ 353.774765][ T5917] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 353.805704][ T5917] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 353.821135][T11456] /dev/rnullb0: Can't open blockdev [ 353.829118][ T5917] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.838196][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.846736][ T5917] usb 2-1: Product: syz [ 353.851285][ T5917] usb 2-1: Manufacturer: syz [ 353.855907][ T5917] usb 2-1: SerialNumber: syz [ 354.138549][ T5903] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 354.298591][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 354.305889][ T5903] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 354.314777][ T5903] usb 4-1: config 0 has no interface number 0 [ 354.323987][ T5903] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 354.335807][T11460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.345962][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.355138][T11460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.361297][ T43] usb 3-1: USB disconnect, device number 93 [ 354.364477][ T5903] usb 4-1: Product: syz [ 354.382898][ T5903] usb 4-1: Manufacturer: syz [ 354.404401][ T5903] usb 4-1: SerialNumber: syz [ 354.420502][ T5903] usb 4-1: config 0 descriptor?? [ 354.434295][ T5903] smsc95xx v2.0.0 [ 354.455540][T11462] tipc: Enabling of bearer rejected, already enabled [ 354.464417][T11462] FAULT_INJECTION: forcing a failure. [ 354.464417][T11462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.478114][T11462] CPU: 1 UID: 0 PID: 11462 Comm: syz.2.1937 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 354.478141][T11462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 354.478156][T11462] Call Trace: [ 354.478164][T11462] [ 354.478172][T11462] dump_stack_lvl+0x189/0x250 [ 354.478210][T11462] ? __pfx____ratelimit+0x10/0x10 [ 354.478233][T11462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.478251][T11462] ? __pfx__printk+0x10/0x10 [ 354.478285][T11462] should_fail_ex+0x414/0x560 [ 354.478314][T11462] _copy_to_user+0x31/0xb0 [ 354.478334][T11462] simple_read_from_buffer+0xe1/0x170 [ 354.478360][T11462] proc_fail_nth_read+0x1df/0x250 [ 354.478381][T11462] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.478399][T11462] ? rw_verify_area+0x258/0x650 [ 354.478417][T11462] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.478434][T11462] vfs_read+0x200/0x980 [ 354.478459][T11462] ? __pfx___mutex_lock+0x10/0x10 [ 354.478479][T11462] ? __pfx_vfs_read+0x10/0x10 [ 354.478496][T11462] ? __fget_files+0x2a/0x420 [ 354.478523][T11462] ? __fget_files+0x3a0/0x420 [ 354.478542][T11462] ? __fget_files+0x2a/0x420 [ 354.478571][T11462] ksys_read+0x145/0x250 [ 354.478592][T11462] ? __pfx_ksys_read+0x10/0x10 [ 354.478608][T11462] ? rcu_is_watching+0x15/0xb0 [ 354.478629][T11462] ? do_syscall_64+0xbe/0x3b0 [ 354.478654][T11462] do_syscall_64+0xfa/0x3b0 [ 354.478674][T11462] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.478695][T11462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.478713][T11462] ? clear_bhb_loop+0x60/0xb0 [ 354.478735][T11462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.478752][T11462] RIP: 0033:0x7f902c98d33c [ 354.478769][T11462] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 354.478785][T11462] RSP: 002b:00007f902d8a9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 354.478804][T11462] RAX: ffffffffffffffda RBX: 00007f902cbb5fa0 RCX: 00007f902c98d33c [ 354.478817][T11462] RDX: 000000000000000f RSI: 00007f902d8a90a0 RDI: 0000000000000004 [ 354.478828][T11462] RBP: 00007f902d8a9090 R08: 0000000000000000 R09: 0000000000000000 [ 354.478838][T11462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 354.478848][T11462] R13: 0000000000000000 R14: 00007f902cbb5fa0 R15: 00007ffd8dd304b8 [ 354.478875][T11462] [ 354.833972][ T5903] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 354.862992][ T5903] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 355.270932][ T5940] usb 38-1: device descriptor read/8, error -110 [ 355.320213][T11474] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 355.659851][ T5940] usb usb38-port1: attempt power cycle [ 355.714285][ T5903] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 355.760399][ T5903] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 355.788020][ T5903] usb 4-1: USB disconnect, device number 89 [ 355.904440][T11481] FAULT_INJECTION: forcing a failure. [ 355.904440][T11481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.923646][T11481] CPU: 0 UID: 0 PID: 11481 Comm: syz.2.1945 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 355.923674][T11481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 355.923684][T11481] Call Trace: [ 355.923693][T11481] [ 355.923701][T11481] dump_stack_lvl+0x189/0x250 [ 355.923727][T11481] ? __pfx____ratelimit+0x10/0x10 [ 355.923749][T11481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.923768][T11481] ? __pfx__printk+0x10/0x10 [ 355.923800][T11481] should_fail_ex+0x414/0x560 [ 355.923832][T11481] _copy_to_user+0x31/0xb0 [ 355.923850][T11481] simple_read_from_buffer+0xe1/0x170 [ 355.923878][T11481] proc_fail_nth_read+0x1df/0x250 [ 355.923897][T11481] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.923915][T11481] ? rw_verify_area+0x258/0x650 [ 355.923935][T11481] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.923952][T11481] vfs_read+0x200/0x980 [ 355.923975][T11481] ? __pfx___mutex_lock+0x10/0x10 [ 355.923995][T11481] ? __pfx_vfs_read+0x10/0x10 [ 355.924014][T11481] ? __fget_files+0x2a/0x420 [ 355.924037][T11481] ? __fget_files+0x3a0/0x420 [ 355.924064][T11481] ? __fget_files+0x2a/0x420 [ 355.924090][T11481] ksys_read+0x145/0x250 [ 355.924107][T11481] ? __fget_files+0x3a0/0x420 [ 355.924129][T11481] ? __pfx_ksys_read+0x10/0x10 [ 355.924152][T11481] ? do_syscall_64+0xbe/0x3b0 [ 355.924181][T11481] do_syscall_64+0xfa/0x3b0 [ 355.924201][T11481] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.924221][T11481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.924238][T11481] ? clear_bhb_loop+0x60/0xb0 [ 355.924258][T11481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.924275][T11481] RIP: 0033:0x7f902c98d33c [ 355.924292][T11481] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 355.924307][T11481] RSP: 002b:00007f902d8a9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 355.924325][T11481] RAX: ffffffffffffffda RBX: 00007f902cbb5fa0 RCX: 00007f902c98d33c [ 355.924338][T11481] RDX: 000000000000000f RSI: 00007f902d8a90a0 RDI: 0000000000000004 [ 355.924350][T11481] RBP: 00007f902d8a9090 R08: 0000000000000000 R09: 0000000000000000 [ 355.924360][T11481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.924370][T11481] R13: 0000000000000000 R14: 00007f902cbb5fa0 R15: 00007ffd8dd304b8 [ 355.924397][T11481] [ 355.945444][ T5917] usb 2-1: USB disconnect, device number 82 [ 356.223831][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.309113][T11488] /dev/rnullb0: Can't open blockdev [ 356.330630][T11489] /dev/rnullb0: Can't open blockdev [ 356.344559][T11493] FAULT_INJECTION: forcing a failure. [ 356.344559][T11493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.359037][T11493] CPU: 1 UID: 0 PID: 11493 Comm: syz.1.1950 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 356.359066][T11493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 356.359076][T11493] Call Trace: [ 356.359084][T11493] [ 356.359092][T11493] dump_stack_lvl+0x189/0x250 [ 356.359119][T11493] ? __pfx____ratelimit+0x10/0x10 [ 356.359141][T11493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.359159][T11493] ? __pfx__printk+0x10/0x10 [ 356.359175][T11493] ? __might_fault+0xb0/0x130 [ 356.359200][T11493] should_fail_ex+0x414/0x560 [ 356.359235][T11493] _copy_from_user+0x2d/0xb0 [ 356.359252][T11493] ___sys_sendmsg+0x158/0x2a0 [ 356.359270][T11493] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.359316][T11493] ? __fget_files+0x2a/0x420 [ 356.359336][T11493] ? __fget_files+0x3a0/0x420 [ 356.359362][T11493] __x64_sys_sendmsg+0x19b/0x260 [ 356.359381][T11493] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 356.359406][T11493] ? __pfx_ksys_write+0x10/0x10 [ 356.359428][T11493] ? do_syscall_64+0xbe/0x3b0 [ 356.359451][T11493] do_syscall_64+0xfa/0x3b0 [ 356.359469][T11493] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.359488][T11493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.359504][T11493] ? clear_bhb_loop+0x60/0xb0 [ 356.359524][T11493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.359541][T11493] RIP: 0033:0x7f78b158e929 [ 356.359558][T11493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.359572][T11493] RSP: 002b:00007f78b23a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.359591][T11493] RAX: ffffffffffffffda RBX: 00007f78b17b5fa0 RCX: 00007f78b158e929 [ 356.359602][T11493] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 356.359612][T11493] RBP: 00007f78b23a4090 R08: 0000000000000000 R09: 0000000000000000 [ 356.359622][T11493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.359631][T11493] R13: 0000000000000000 R14: 00007f78b17b5fa0 R15: 00007ffc5beb0498 [ 356.359656][T11493] [ 356.583271][ T5940] usb usb38-port1: unable to enumerate USB device [ 356.760839][T11505] tipc: Enabling of bearer rejected, already enabled [ 356.838235][T11510] /dev/rnullb0: Can't open blockdev [ 356.952906][T11517] FAULT_INJECTION: forcing a failure. [ 356.952906][T11517] name failslab, interval 1, probability 0, space 0, times 0 [ 356.961768][T11518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.971875][T11517] CPU: 0 UID: 0 PID: 11517 Comm: syz.3.1961 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 356.971905][T11517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 356.971916][T11517] Call Trace: [ 356.971925][T11517] [ 356.971934][T11517] dump_stack_lvl+0x189/0x250 [ 356.971963][T11517] ? __pfx____ratelimit+0x10/0x10 [ 356.971986][T11517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.972004][T11517] ? __pfx__printk+0x10/0x10 [ 356.972040][T11517] ? __pfx___might_resched+0x10/0x10 [ 356.972058][T11517] ? fs_reclaim_acquire+0x7d/0x100 [ 356.972084][T11517] should_fail_ex+0x414/0x560 [ 356.972115][T11517] should_failslab+0xa8/0x100 [ 356.972138][T11517] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 356.972157][T11517] ? __alloc_skb+0x112/0x2d0 [ 356.972185][T11517] __alloc_skb+0x112/0x2d0 [ 356.972210][T11517] netlink_ack+0x146/0xa50 [ 356.972231][T11517] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.972246][T11517] ? ref_tracker_free+0x63a/0x7d0 [ 356.972261][T11517] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 356.972278][T11517] ? __pfx_nl80211_post_doit+0x10/0x10 [ 356.972296][T11517] ? __pfx_ref_tracker_free+0x10/0x10 [ 356.972323][T11517] netlink_rcv_skb+0x28c/0x470 [ 356.972346][T11517] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.972365][T11517] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 356.972403][T11517] ? down_read+0x1ad/0x2e0 [ 356.972428][T11517] genl_rcv+0x28/0x40 [ 356.972444][T11517] netlink_unicast+0x75b/0x8d0 [ 356.972475][T11517] netlink_sendmsg+0x805/0xb30 [ 356.972506][T11517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.972531][T11517] ? aa_sock_msg_perm+0xf1/0x1d0 [ 356.972553][T11517] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 356.972575][T11517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.972598][T11517] __sock_sendmsg+0x219/0x270 [ 356.972622][T11517] ____sys_sendmsg+0x505/0x830 [ 356.972644][T11517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.972669][T11517] ? import_iovec+0x74/0xa0 [ 356.972690][T11517] ___sys_sendmsg+0x21f/0x2a0 [ 356.972709][T11517] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.972761][T11517] ? __fget_files+0x2a/0x420 [ 356.972783][T11517] ? __fget_files+0x3a0/0x420 [ 356.972813][T11517] __x64_sys_sendmsg+0x19b/0x260 [ 356.972832][T11517] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 356.972859][T11517] ? __pfx_ksys_write+0x10/0x10 [ 356.972875][T11517] ? rcu_is_watching+0x15/0xb0 [ 356.972897][T11517] ? do_syscall_64+0xbe/0x3b0 [ 356.972922][T11517] do_syscall_64+0xfa/0x3b0 [ 356.972941][T11517] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.972961][T11517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.972978][T11517] ? clear_bhb_loop+0x60/0xb0 [ 356.972997][T11517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.973019][T11517] RIP: 0033:0x7f31d6d8e929 [ 356.973037][T11517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.973051][T11517] RSP: 002b:00007f31d7c73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.973070][T11517] RAX: ffffffffffffffda RBX: 00007f31d6fb5fa0 RCX: 00007f31d6d8e929 [ 356.973082][T11517] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000003 [ 356.973093][T11517] RBP: 00007f31d7c73090 R08: 0000000000000000 R09: 0000000000000000 [ 356.973104][T11517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.973114][T11517] R13: 0000000000000000 R14: 00007f31d6fb5fa0 R15: 00007ffe434d3548 [ 356.973142][T11517] [ 357.309622][T11518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.388673][T11525] FAULT_INJECTION: forcing a failure. [ 357.388673][T11525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.402037][T11525] CPU: 1 UID: 0 PID: 11525 Comm: syz.3.1965 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 357.402066][T11525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.402078][T11525] Call Trace: [ 357.402086][T11525] [ 357.402094][T11525] dump_stack_lvl+0x189/0x250 [ 357.402122][T11525] ? __pfx____ratelimit+0x10/0x10 [ 357.402145][T11525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.402164][T11525] ? __pfx__printk+0x10/0x10 [ 357.402191][T11525] ? __might_fault+0xb0/0x130 [ 357.402224][T11525] should_fail_ex+0x414/0x560 [ 357.402256][T11525] _copy_from_user+0x2d/0xb0 [ 357.402275][T11525] kstrtouint_from_user+0xc4/0x170 [ 357.402301][T11525] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 357.402342][T11525] proc_fail_nth_write+0x88/0x240 [ 357.402361][T11525] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 357.402384][T11525] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 357.402402][T11525] vfs_write+0x27e/0xa90 [ 357.402434][T11525] ? __pfx_vfs_write+0x10/0x10 [ 357.402456][T11525] ? __fget_files+0x2a/0x420 [ 357.402485][T11525] ? __fget_files+0x3a0/0x420 [ 357.402506][T11525] ? __fget_files+0x2a/0x420 [ 357.402538][T11525] ksys_write+0x145/0x250 [ 357.402557][T11525] ? __fget_files+0x3a0/0x420 [ 357.402579][T11525] ? __pfx_ksys_write+0x10/0x10 [ 357.402605][T11525] ? do_syscall_64+0xbe/0x3b0 [ 357.402632][T11525] do_syscall_64+0xfa/0x3b0 [ 357.402652][T11525] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.402673][T11525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.402691][T11525] ? clear_bhb_loop+0x60/0xb0 [ 357.402712][T11525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.402729][T11525] RIP: 0033:0x7f31d6d8d3df [ 357.402746][T11525] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 357.402761][T11525] RSP: 002b:00007f31d7c73030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 357.402781][T11525] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f31d6d8d3df [ 357.402793][T11525] RDX: 0000000000000001 RSI: 00007f31d7c730a0 RDI: 0000000000000005 [ 357.402804][T11525] RBP: 00007f31d7c73090 R08: 0000000000000000 R09: 0000000000000000 [ 357.402815][T11525] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 357.402826][T11525] R13: 0000000000000000 R14: 00007f31d6fb5fa0 R15: 00007ffe434d3548 [ 357.402855][T11525] [ 357.648322][ T5917] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 357.756335][T11533] FAULT_INJECTION: forcing a failure. [ 357.756335][T11533] name failslab, interval 1, probability 0, space 0, times 0 [ 357.770568][T11533] CPU: 0 UID: 0 PID: 11533 Comm: syz.3.1968 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 357.770593][T11533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.770600][T11533] Call Trace: [ 357.770605][T11533] [ 357.770610][T11533] dump_stack_lvl+0x189/0x250 [ 357.770629][T11533] ? __pfx____ratelimit+0x10/0x10 [ 357.770644][T11533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.770655][T11533] ? __pfx__printk+0x10/0x10 [ 357.770669][T11533] ? __pfx___might_resched+0x10/0x10 [ 357.770680][T11533] ? fs_reclaim_acquire+0x7d/0x100 [ 357.770698][T11533] should_fail_ex+0x414/0x560 [ 357.770718][T11533] should_failslab+0xa8/0x100 [ 357.770732][T11533] __kmalloc_noprof+0xcb/0x4f0 [ 357.770744][T11533] ? tomoyo_encode+0x28b/0x550 [ 357.770758][T11533] tomoyo_encode+0x28b/0x550 [ 357.770774][T11533] tomoyo_realpath_from_path+0x58d/0x5d0 [ 357.770801][T11533] ? tomoyo_mount_permission+0x27a/0x970 [ 357.770817][T11533] tomoyo_mount_permission+0x377/0x970 [ 357.770835][T11533] ? tomoyo_mount_permission+0x27a/0x970 [ 357.770852][T11533] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 357.770915][T11533] security_sb_mount+0xec/0x350 [ 357.770947][T11533] path_mount+0xbc/0xfe0 [ 357.770962][T11533] ? user_path_at+0x44/0x60 [ 357.770972][T11533] ? kmem_cache_free+0x18f/0x400 [ 357.770988][T11533] __se_sys_mount+0x317/0x410 [ 357.771005][T11533] ? __pfx___se_sys_mount+0x10/0x10 [ 357.771021][T11533] ? do_syscall_64+0xbe/0x3b0 [ 357.771034][T11533] ? __x64_sys_mount+0x20/0xc0 [ 357.771049][T11533] do_syscall_64+0xfa/0x3b0 [ 357.771061][T11533] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.771073][T11533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.771083][T11533] ? clear_bhb_loop+0x60/0xb0 [ 357.771095][T11533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.771105][T11533] RIP: 0033:0x7f31d6d8e929 [ 357.771115][T11533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.771124][T11533] RSP: 002b:00007f31d7c73038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 357.771136][T11533] RAX: ffffffffffffffda RBX: 00007f31d6fb5fa0 RCX: 00007f31d6d8e929 [ 357.771143][T11533] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 357.771150][T11533] RBP: 00007f31d7c73090 R08: 0000200000000100 R09: 0000000000000000 [ 357.771157][T11533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.771163][T11533] R13: 0000000000000000 R14: 00007f31d6fb5fa0 R15: 00007ffe434d3548 [ 357.771178][T11533] [ 357.771369][T11533] ERROR: Out of memory at tomoyo_realpath_from_path. [ 357.828422][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 358.036581][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.047744][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.057744][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 358.070979][ T5917] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 358.080140][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.091909][ T5917] usb 3-1: config 0 descriptor?? [ 358.230632][T11538] sd 0:0:1:0: PR command failed: 1026 [ 358.236114][T11538] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 358.244692][T11538] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 358.254333][T11538] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1971'. [ 358.291096][T11547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1973'. [ 358.512639][T11518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.541298][T11518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.678782][T11567] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 358.796868][ T5917] hid-u2fzero 0003:10C4:8ACF.0011: item fetching failed at offset 2/5 [ 358.826669][ T5917] hid-u2fzero 0003:10C4:8ACF.0011: probe with driver hid-u2fzero failed with error -22 [ 359.007779][T11519] /dev/rnullb0: Can't open blockdev [ 359.018230][ T5917] usb 3-1: USB disconnect, device number 94 [ 359.580913][T11602] /dev/rnullb0: Can't open blockdev [ 359.647974][T11606] FAULT_INJECTION: forcing a failure. [ 359.647974][T11606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.685010][T11606] CPU: 1 UID: 0 PID: 11606 Comm: syz.2.1984 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 359.685049][T11606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 359.685060][T11606] Call Trace: [ 359.685067][T11606] [ 359.685075][T11606] dump_stack_lvl+0x189/0x250 [ 359.685103][T11606] ? __pfx____ratelimit+0x10/0x10 [ 359.685126][T11606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.685145][T11606] ? __pfx__printk+0x10/0x10 [ 359.685177][T11606] should_fail_ex+0x414/0x560 [ 359.685210][T11606] _copy_to_user+0x31/0xb0 [ 359.685231][T11606] simple_read_from_buffer+0xe1/0x170 [ 359.685259][T11606] proc_fail_nth_read+0x1df/0x250 [ 359.685280][T11606] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 359.685299][T11606] ? rw_verify_area+0x258/0x650 [ 359.685319][T11606] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 359.685337][T11606] vfs_read+0x200/0x980 [ 359.685362][T11606] ? __pfx___mutex_lock+0x10/0x10 [ 359.685385][T11606] ? __pfx_vfs_read+0x10/0x10 [ 359.685407][T11606] ? __fget_files+0x2a/0x420 [ 359.685434][T11606] ? __fget_files+0x3a0/0x420 [ 359.685454][T11606] ? __fget_files+0x2a/0x420 [ 359.685485][T11606] ksys_read+0x145/0x250 [ 359.685508][T11606] ? __pfx_ksys_read+0x10/0x10 [ 359.685525][T11606] ? rcu_is_watching+0x15/0xb0 [ 359.685549][T11606] ? do_syscall_64+0xbe/0x3b0 [ 359.685574][T11606] do_syscall_64+0xfa/0x3b0 [ 359.685594][T11606] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.685614][T11606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.685629][T11606] ? clear_bhb_loop+0x60/0xb0 [ 359.685647][T11606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.685661][T11606] RIP: 0033:0x7f902c98d33c [ 359.685675][T11606] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 359.685688][T11606] RSP: 002b:00007f902d8a9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 359.685705][T11606] RAX: ffffffffffffffda RBX: 00007f902cbb5fa0 RCX: 00007f902c98d33c [ 359.685716][T11606] RDX: 000000000000000f RSI: 00007f902d8a90a0 RDI: 0000000000000005 [ 359.685725][T11606] RBP: 00007f902d8a9090 R08: 0000000000000000 R09: 0000000000000000 [ 359.685734][T11606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 359.685743][T11606] R13: 0000000000000000 R14: 00007f902cbb5fa0 R15: 00007ffd8dd304b8 [ 359.685769][T11606] [ 359.984963][T11610] FAULT_INJECTION: forcing a failure. [ 359.984963][T11610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.048595][T11610] CPU: 0 UID: 0 PID: 11610 Comm: syz.3.1986 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 360.048623][T11610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 360.048635][T11610] Call Trace: [ 360.048644][T11610] [ 360.048651][T11610] dump_stack_lvl+0x189/0x250 [ 360.048678][T11610] ? __pfx____ratelimit+0x10/0x10 [ 360.048702][T11610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.048721][T11610] ? __pfx__printk+0x10/0x10 [ 360.048741][T11610] ? __might_fault+0xb0/0x130 [ 360.048773][T11610] should_fail_ex+0x414/0x560 [ 360.048804][T11610] _copy_from_user+0x2d/0xb0 [ 360.048824][T11610] kstrtouint_from_user+0xc4/0x170 [ 360.048850][T11610] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 360.048898][T11610] proc_fail_nth_write+0x88/0x240 [ 360.048918][T11610] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 360.048941][T11610] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 360.048959][T11610] vfs_write+0x27e/0xa90 [ 360.048990][T11610] ? __pfx_vfs_write+0x10/0x10 [ 360.049012][T11610] ? __fget_files+0x2a/0x420 [ 360.049040][T11610] ? __fget_files+0x3a0/0x420 [ 360.049060][T11610] ? __fget_files+0x2a/0x420 [ 360.049091][T11610] ksys_write+0x145/0x250 [ 360.049109][T11610] ? __fget_files+0x3a0/0x420 [ 360.049133][T11610] ? __pfx_ksys_write+0x10/0x10 [ 360.049157][T11610] ? do_syscall_64+0xbe/0x3b0 [ 360.049184][T11610] do_syscall_64+0xfa/0x3b0 [ 360.049203][T11610] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.049224][T11610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.049240][T11610] ? clear_bhb_loop+0x60/0xb0 [ 360.049260][T11610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.049276][T11610] RIP: 0033:0x7f31d6d8d3df [ 360.049292][T11610] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 360.049306][T11610] RSP: 002b:00007f31d7c73030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 360.049324][T11610] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f31d6d8d3df [ 360.049335][T11610] RDX: 0000000000000001 RSI: 00007f31d7c730a0 RDI: 0000000000000003 [ 360.049344][T11610] RBP: 00007f31d7c73090 R08: 0000000000000000 R09: 0000000000000000 [ 360.049353][T11610] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 360.049364][T11610] R13: 0000000000000000 R14: 00007f31d6fb5fa0 R15: 00007ffe434d3548 [ 360.049392][T11610] [ 360.092940][T11614] /dev/rnullb0: Can't open blockdev [ 360.155052][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1987'. [ 360.404282][T11625] Invalid ELF header magic: != ELF [ 360.497115][T11629] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1995'. [ 360.614346][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'. [ 360.623582][T11638] FAULT_INJECTION: forcing a failure. [ 360.623582][T11638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.642070][T11638] CPU: 0 UID: 0 PID: 11638 Comm: syz.1.2000 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 360.642096][T11638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 360.642107][T11638] Call Trace: [ 360.642115][T11638] [ 360.642123][T11638] dump_stack_lvl+0x189/0x250 [ 360.642150][T11638] ? __pfx____ratelimit+0x10/0x10 [ 360.642171][T11638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.642187][T11638] ? __pfx__printk+0x10/0x10 [ 360.642214][T11638] should_fail_ex+0x414/0x560 [ 360.642244][T11638] _copy_to_user+0x31/0xb0 [ 360.642264][T11638] simple_read_from_buffer+0xe1/0x170 [ 360.642292][T11638] proc_fail_nth_read+0x1df/0x250 [ 360.642310][T11638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 360.642329][T11638] ? rw_verify_area+0x258/0x650 [ 360.642346][T11638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 360.642363][T11638] vfs_read+0x200/0x980 [ 360.642387][T11638] ? __pfx___mutex_lock+0x10/0x10 [ 360.642407][T11638] ? __pfx_vfs_read+0x10/0x10 [ 360.642429][T11638] ? __fget_files+0x2a/0x420 [ 360.642454][T11638] ? __fget_files+0x3a0/0x420 [ 360.642472][T11638] ? __fget_files+0x2a/0x420 [ 360.642500][T11638] ksys_read+0x145/0x250 [ 360.642520][T11638] ? __pfx_ksys_read+0x10/0x10 [ 360.642537][T11638] ? rcu_is_watching+0x15/0xb0 [ 360.642559][T11638] ? do_syscall_64+0xbe/0x3b0 [ 360.642582][T11638] do_syscall_64+0xfa/0x3b0 [ 360.642600][T11638] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.642618][T11638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.642634][T11638] ? clear_bhb_loop+0x60/0xb0 [ 360.642654][T11638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.642669][T11638] RIP: 0033:0x7f78b158d33c [ 360.642685][T11638] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 360.642699][T11638] RSP: 002b:00007f78b23a4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 360.642718][T11638] RAX: ffffffffffffffda RBX: 00007f78b17b5fa0 RCX: 00007f78b158d33c [ 360.642731][T11638] RDX: 000000000000000f RSI: 00007f78b23a40a0 RDI: 0000000000000004 [ 360.642740][T11638] RBP: 00007f78b23a4090 R08: 0000000000000000 R09: 0000000000000000 [ 360.642752][T11638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 360.642754][T11640] /dev/rnullb0: Can't open blockdev [ 360.642762][T11638] R13: 0000000000000000 R14: 00007f78b17b5fa0 R15: 00007ffc5beb0498 [ 360.642787][T11638] [ 360.824096][ T5903] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 360.986233][ T5903] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 361.023950][ T5903] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 361.041869][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.059026][ T5903] usb 4-1: Product: syz [ 361.063257][ T5903] usb 4-1: Manufacturer: syz [ 361.067868][ T5903] usb 4-1: SerialNumber: syz [ 361.083339][ T5903] usb 4-1: config 0 descriptor?? [ 361.102898][ T5903] usb 4-1: Waiting for MOTU Microbook II to boot up... [ 361.129771][ T5903] usb 4-1: failed setting the sample rate for Motu MicroBook II: -22 [ 361.137981][ T5903] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 361.256759][T11659] FAULT_INJECTION: forcing a failure. [ 361.256759][T11659] name failslab, interval 1, probability 0, space 0, times 0 [ 361.271690][T11659] CPU: 1 UID: 0 PID: 11659 Comm: syz.2.2009 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 361.271709][T11659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 361.271715][T11659] Call Trace: [ 361.271720][T11659] [ 361.271725][T11659] dump_stack_lvl+0x189/0x250 [ 361.271745][T11659] ? __pfx____ratelimit+0x10/0x10 [ 361.271761][T11659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.271772][T11659] ? __pfx__printk+0x10/0x10 [ 361.271786][T11659] ? __pfx___might_resched+0x10/0x10 [ 361.271800][T11659] should_fail_ex+0x414/0x560 [ 361.271820][T11659] should_failslab+0xa8/0x100 [ 361.271836][T11659] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 361.271848][T11659] ? __alloc_skb+0x112/0x2d0 [ 361.271862][T11659] ? __pfx___mutex_trylock_common+0x10/0x10 [ 361.271876][T11659] __alloc_skb+0x112/0x2d0 [ 361.271892][T11659] netlink_dump+0x22b/0xe20 [ 361.271908][T11659] ? __netlink_lookup+0xbd/0x810 [ 361.271927][T11659] ? __pfx_netlink_dump+0x10/0x10 [ 361.271946][T11659] ? netlink_lookup+0x30/0x200 [ 361.271958][T11659] ? netlink_lookup+0x30/0x200 [ 361.271969][T11659] ? netlink_lookup+0x30/0x200 [ 361.271984][T11659] __netlink_dump_start+0x5cb/0x7e0 [ 361.272002][T11659] rtnetlink_rcv_msg+0x9eb/0xb70 [ 361.272017][T11659] ? __pfx_rtnl_bridge_getlink+0x10/0x10 [ 361.272030][T11659] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 361.272042][T11659] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 361.272054][T11659] ? ref_tracker_free+0x63a/0x7d0 [ 361.272064][T11659] ? __pfx_rtnl_dumpit+0x10/0x10 [ 361.272077][T11659] ? __pfx_rtnl_bridge_getlink+0x10/0x10 [ 361.272091][T11659] ? __skb_clone+0x63/0x7a0 [ 361.272104][T11659] netlink_rcv_skb+0x208/0x470 [ 361.272118][T11659] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 361.272132][T11659] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 361.272152][T11659] ? netlink_deliver_tap+0x2e/0x1b0 [ 361.272165][T11659] ? netlink_deliver_tap+0x2e/0x1b0 [ 361.272181][T11659] netlink_unicast+0x75b/0x8d0 [ 361.272199][T11659] netlink_sendmsg+0x805/0xb30 [ 361.272217][T11659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.272233][T11659] ? aa_sock_msg_perm+0xf1/0x1d0 [ 361.272246][T11659] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 361.272261][T11659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.272275][T11659] __sock_sendmsg+0x219/0x270 [ 361.272290][T11659] ____sys_sendmsg+0x505/0x830 [ 361.272304][T11659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.272319][T11659] ? import_iovec+0x74/0xa0 [ 361.272330][T11659] ___sys_sendmsg+0x21f/0x2a0 [ 361.272341][T11659] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.272371][T11659] ? __fget_files+0x2a/0x420 [ 361.272385][T11659] ? __fget_files+0x3a0/0x420 [ 361.272404][T11659] __x64_sys_sendmsg+0x19b/0x260 [ 361.272415][T11659] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 361.272429][T11659] ? __pfx_ksys_write+0x10/0x10 [ 361.272445][T11659] ? do_syscall_64+0xbe/0x3b0 [ 361.272461][T11659] do_syscall_64+0xfa/0x3b0 [ 361.272473][T11659] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.272485][T11659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.272495][T11659] ? clear_bhb_loop+0x60/0xb0 [ 361.272507][T11659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.272516][T11659] RIP: 0033:0x7f902c98e929 [ 361.272526][T11659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.272535][T11659] RSP: 002b:00007f902d8a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.272547][T11659] RAX: ffffffffffffffda RBX: 00007f902cbb5fa0 RCX: 00007f902c98e929 [ 361.272554][T11659] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 361.272560][T11659] RBP: 00007f902d8a9090 R08: 0000000000000000 R09: 0000000000000000 [ 361.272567][T11659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.272573][T11659] R13: 0000000000000000 R14: 00007f902cbb5fa0 R15: 00007ffd8dd304b8 [ 361.272588][T11659] [ 361.303167][T11635] sg_write: process 1329 (syz.3.1998) changed security contexts after opening file descriptor, this is not allowed. [ 361.494475][T11665] FAULT_INJECTION: forcing a failure. [ 361.494475][T11665] name failslab, interval 1, probability 0, space 0, times 0 [ 361.499103][ T5903] usb 4-1: USB disconnect, device number 90 [ 361.500857][ T43] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 361.511714][T11665] CPU: 0 UID: 0 PID: 11665 Comm: syz.2.2012 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 361.511742][T11665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 361.511755][T11665] Call Trace: [ 361.511763][T11665] [ 361.511770][T11665] dump_stack_lvl+0x189/0x250 [ 361.511798][T11665] ? __pfx____ratelimit+0x10/0x10 [ 361.511821][T11665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.511840][T11665] ? __pfx__printk+0x10/0x10 [ 361.511864][T11665] ? __pfx___might_resched+0x10/0x10 [ 361.511881][T11665] ? fs_reclaim_acquire+0x7d/0x100 [ 361.511909][T11665] should_fail_ex+0x414/0x560 [ 361.511940][T11665] should_failslab+0xa8/0x100 [ 361.511963][T11665] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 361.511982][T11665] ? __alloc_skb+0x112/0x2d0 [ 361.512010][T11665] __alloc_skb+0x112/0x2d0 [ 361.512036][T11665] netlink_ack+0x146/0xa50 [ 361.512057][T11665] ? __pfx_genl_rcv_msg+0x10/0x10 [ 361.512073][T11665] ? ref_tracker_free+0x63a/0x7d0 [ 361.512089][T11665] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 361.512108][T11665] ? __pfx_nl80211_post_doit+0x10/0x10 [ 361.512126][T11665] ? __pfx_ref_tracker_free+0x10/0x10 [ 361.512153][T11665] netlink_rcv_skb+0x28c/0x470 [ 361.512175][T11665] ? __pfx_genl_rcv_msg+0x10/0x10 [ 361.512194][T11665] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 361.512232][T11665] ? down_read+0x1ad/0x2e0 [ 361.512257][T11665] genl_rcv+0x28/0x40 [ 361.512273][T11665] netlink_unicast+0x75b/0x8d0 [ 361.512304][T11665] netlink_sendmsg+0x805/0xb30 [ 361.512335][T11665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.512361][T11665] ? aa_sock_msg_perm+0xf1/0x1d0 [ 361.512381][T11665] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 361.512403][T11665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.512426][T11665] __sock_sendmsg+0x219/0x270 [ 361.512450][T11665] ____sys_sendmsg+0x505/0x830 [ 361.512472][T11665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.512499][T11665] ? import_iovec+0x74/0xa0 [ 361.512527][T11665] ___sys_sendmsg+0x21f/0x2a0 [ 361.512547][T11665] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.512599][T11665] ? __fget_files+0x2a/0x420 [ 361.512621][T11665] ? __fget_files+0x3a0/0x420 [ 361.512653][T11665] __x64_sys_sendmsg+0x19b/0x260 [ 361.512672][T11665] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 361.512698][T11665] ? __pfx_ksys_write+0x10/0x10 [ 361.512715][T11665] ? rcu_is_watching+0x15/0xb0 [ 361.512738][T11665] ? do_syscall_64+0xbe/0x3b0 [ 361.512763][T11665] do_syscall_64+0xfa/0x3b0 [ 361.512782][T11665] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.512801][T11665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.512818][T11665] ? clear_bhb_loop+0x60/0xb0 [ 361.512837][T11665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.512853][T11665] RIP: 0033:0x7f902c98e929 [ 361.512870][T11665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.512884][T11665] RSP: 002b:00007f902d8a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.512903][T11665] RAX: ffffffffffffffda RBX: 00007f902cbb5fa0 RCX: 00007f902c98e929 [ 361.512915][T11665] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000003 [ 361.512926][T11665] RBP: 00007f902d8a9090 R08: 0000000000000000 R09: 0000000000000000 [ 361.512937][T11665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.512946][T11665] R13: 0000000000000000 R14: 00007f902cbb5fa0 R15: 00007ffd8dd304b8 [ 361.512973][T11665] [ 362.090655][T11669] /dev/rnullb0: Can't open blockdev [ 362.188389][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 362.240902][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 362.298363][T11673] FAULT_INJECTION: forcing a failure. [ 362.298363][T11673] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 362.360340][ T43] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 362.385601][T11673] CPU: 1 UID: 0 PID: 11673 Comm: syz.2.2016 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 362.385636][T11673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 362.385647][T11673] Call Trace: [ 362.385659][T11673] [ 362.385670][T11673] dump_stack_lvl+0x189/0x250 [ 362.385698][T11673] ? __pfx____ratelimit+0x10/0x10 [ 362.385722][T11673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.385741][T11673] ? __pfx__printk+0x10/0x10 [ 362.385769][T11673] ? fs_reclaim_acquire+0x7d/0x100 [ 362.385812][T11673] should_fail_ex+0x414/0x560 [ 362.385845][T11673] prepare_alloc_pages+0x213/0x610 [ 362.385875][T11673] __alloc_frozen_pages_noprof+0x123/0x370 [ 362.385902][T11673] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 362.385942][T11673] alloc_pages_mpol+0x232/0x4a0 [ 362.385969][T11673] alloc_pages_noprof+0xa9/0x190 [ 362.385991][T11673] pte_alloc_one+0x21/0x170 [ 362.386011][T11673] __pte_alloc+0x25/0x1a0 [ 362.386033][T11673] ? walk_to_pmd+0x2b8/0x460 [ 362.386059][T11673] insert_page+0x28f/0x2c0 [ 362.386086][T11673] ? __pfx_insert_page+0x10/0x10 [ 362.386106][T11673] ? __kasan_kmalloc+0x93/0xb0 [ 362.386127][T11673] ? vm_insert_page+0x1f1/0x390 [ 362.386148][T11673] ? binder_alloc_new_buf+0x1d8e/0x2ef0 [ 362.386175][T11673] binder_alloc_new_buf+0x1ecf/0x2ef0 [ 362.386218][T11673] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 362.386248][T11673] binder_transaction+0x22d0/0x6470 [ 362.386319][T11673] ? __pfx_binder_transaction+0x10/0x10 [ 362.386349][T11673] ? __lock_acquire+0xab9/0xd20 [ 362.386384][T11673] ? __might_fault+0xb0/0x130 [ 362.386424][T11673] binder_ioctl_write_read+0xd6a/0xa000 [ 362.386462][T11673] ? is_bpf_text_address+0x26/0x2b0 [ 362.386490][T11673] ? kernel_text_address+0xa5/0xe0 [ 362.386515][T11673] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 362.386546][T11673] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 362.386566][T11673] ? stack_trace_save+0x9c/0xe0 [ 362.386587][T11673] ? stack_depot_save_flags+0x40/0x900 [ 362.386614][T11673] ? kasan_save_track+0x4f/0x80 [ 362.386629][T11673] ? kasan_save_track+0x3e/0x80 [ 362.386643][T11673] ? kasan_save_free_info+0x46/0x50 [ 362.386664][T11673] ? __kasan_slab_free+0x62/0x70 [ 362.386680][T11673] ? kfree+0x18e/0x440 [ 362.386695][T11673] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 362.386717][T11673] ? security_file_ioctl+0xcb/0x2d0 [ 362.386739][T11673] ? __se_sys_ioctl+0x47/0x170 [ 362.386755][T11673] ? do_syscall_64+0xfa/0x3b0 [ 362.386785][T11673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.386821][T11673] ? __pfx_binder_debug+0x10/0x10 [ 362.386841][T11673] ? do_raw_spin_lock+0x121/0x290 [ 362.386877][T11673] ? _raw_spin_unlock+0x28/0x50 [ 362.386896][T11673] ? binder_get_thread+0x178/0x6d0 [ 362.386923][T11673] binder_ioctl+0x3e0/0x19c0 [ 362.386947][T11673] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 362.386972][T11673] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 362.386999][T11673] ? do_vfs_ioctl+0xbe8/0x1430 [ 362.387017][T11673] ? __pfx_binder_ioctl+0x10/0x10 [ 362.387039][T11673] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 362.387070][T11673] ? hook_file_ioctl+0xec/0x530 [ 362.387108][T11673] ? __fget_files+0x2a/0x420 [ 362.387134][T11673] ? __fget_files+0x2a/0x420 [ 362.387154][T11673] ? __fget_files+0x3a0/0x420 [ 362.387174][T11673] ? __fget_files+0x2a/0x420 [ 362.387194][T11673] ? bpf_lsm_file_ioctl+0x9/0x20 [ 362.387208][T11673] ? __pfx_binder_ioctl+0x10/0x10 [ 362.387230][T11673] __se_sys_ioctl+0xf9/0x170 [ 362.387249][T11673] do_syscall_64+0xfa/0x3b0 [ 362.387271][T11673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.387286][T11673] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 362.387302][T11673] ? clear_bhb_loop+0x60/0xb0 [ 362.387323][T11673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.387340][T11673] RIP: 0033:0x7f902c98e929 [ 362.387357][T11673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.387372][T11673] RSP: 002b:00007f902d8a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.387392][T11673] RAX: ffffffffffffffda RBX: 00007f902cbb5fa0 RCX: 00007f902c98e929 [ 362.387405][T11673] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 362.387416][T11673] RBP: 00007f902d8a9090 R08: 0000000000000000 R09: 0000000000000000 [ 362.387427][T11673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 362.387437][T11673] R13: 0000000000000000 R14: 00007f902cbb5fa0 R15: 00007ffd8dd304b8 [ 362.387466][T11673] [ 362.387985][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.838653][T11673] binder_alloc: 11672: binder_install_single_page failed to insert page at offset 0 with -12 [ 363.027918][T11676] /dev/rnullb0: Can't open blockdev [ 363.076507][ T43] usb 2-1: Product: syz [ 363.081710][ T43] usb 2-1: Manufacturer: syz [ 363.086454][ T43] usb 2-1: SerialNumber: syz [ 363.132481][ T43] usb 2-1: config 0 descriptor?? [ 363.164254][ T43] hub 2-1:0.0: bad descriptor, ignoring hub [ 363.172503][ T43] hub 2-1:0.0: probe with driver hub failed with error -5 [ 363.186898][ T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 363.319356][ T5917] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 363.412489][T11689] loop3: detected capacity change from 0 to 1 [ 363.428591][T11689] Dev loop3: unable to read RDB block 1 [ 363.434231][T11689] loop3: AHDI p1 p2 [ 363.438157][T11689] loop3: partition table partially beyond EOD, truncated [ 363.468787][T11689] input: syz0 as /devices/virtual/input/input43 [ 363.488425][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 363.503432][ T5917] usb 4-1: no configurations [ 363.516659][ T5917] usb 4-1: can't read configurations, error -22 [ 363.576734][T11655] /dev/rnullb0: Can't open blockdev [ 363.646402][ T43] usb 2-1: USB disconnect, device number 83 [ 363.667785][T11694] FAULT_INJECTION: forcing a failure. [ 363.667785][T11694] name failslab, interval 1, probability 0, space 0, times 0 [ 363.707080][T11694] CPU: 0 UID: 0 PID: 11694 Comm: syz.0.2024 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 363.707109][T11694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 363.707124][T11694] Call Trace: [ 363.707131][T11694] [ 363.707140][T11694] dump_stack_lvl+0x189/0x250 [ 363.707165][T11694] ? __pfx____ratelimit+0x10/0x10 [ 363.707188][T11694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.707204][T11694] ? __pfx__printk+0x10/0x10 [ 363.707229][T11694] ? __pfx___might_resched+0x10/0x10 [ 363.707246][T11694] ? fs_reclaim_acquire+0x7d/0x100 [ 363.707270][T11694] should_fail_ex+0x414/0x560 [ 363.707301][T11694] should_failslab+0xa8/0x100 [ 363.707325][T11694] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 363.707343][T11694] ? __d_alloc+0x36/0x7a0 [ 363.707358][T11694] ? arch_stack_walk+0xfc/0x150 [ 363.707381][T11694] __d_alloc+0x36/0x7a0 [ 363.707401][T11694] d_alloc_parallel+0xe5/0x15e0 [ 363.707421][T11694] ? stack_depot_save_flags+0x40/0x900 [ 363.707464][T11694] ? __pfx_d_alloc_parallel+0x10/0x10 [ 363.707487][T11694] ? __raw_spin_lock_init+0x45/0x100 [ 363.707510][T11694] ? __init_waitqueue_head+0xa9/0x150 [ 363.707533][T11694] __lookup_slow+0x116/0x3d0 [ 363.707553][T11694] ? __pfx___lookup_slow+0x10/0x10 [ 363.707587][T11694] ? down_read+0x1ad/0x2e0 [ 363.707611][T11694] lookup_one_unlocked+0x127/0x250 [ 363.707628][T11694] ? ovl_lookup_index+0x1d4/0x790 [ 363.707650][T11694] lookup_one_positive_unlocked+0x26/0xb0 [ 363.707670][T11694] ovl_lookup_index+0x27a/0x790 [ 363.707695][T11694] ? ovl_lookup_layer+0x377/0x450 [ 363.707713][T11694] ? __pfx_ovl_lookup_index+0x10/0x10 [ 363.707732][T11694] ? trace_kmalloc+0x1f/0xd0 [ 363.707748][T11694] ? ovl_lookup+0x5f7/0x1bc0 [ 363.707767][T11694] ovl_lookup+0x13f1/0x1bc0 [ 363.707799][T11694] ? d_alloc_parallel+0x14ae/0x15e0 [ 363.707830][T11694] ? __pfx_ovl_lookup+0x10/0x10 [ 363.707848][T11694] ? __lock_acquire+0xab9/0xd20 [ 363.707871][T11694] ? __pfx_d_alloc_parallel+0x10/0x10 [ 363.707893][T11694] ? __raw_spin_lock_init+0x45/0x100 [ 363.707914][T11694] ? __init_waitqueue_head+0xa9/0x150 [ 363.707940][T11694] __lookup_slow+0x297/0x3d0 [ 363.707960][T11694] ? __pfx___lookup_slow+0x10/0x10 [ 363.707994][T11694] ? down_read+0x1ad/0x2e0 [ 363.708018][T11694] lookup_slow+0x53/0x70 [ 363.708035][T11694] link_path_walk+0x935/0xea0 [ 363.708076][T11694] path_openat+0x28c/0x3830 [ 363.708092][T11694] ? arch_stack_walk+0xfc/0x150 [ 363.708144][T11694] ? __pfx_path_openat+0x10/0x10 [ 363.708160][T11694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.708199][T11694] do_filp_open+0x1fa/0x410 [ 363.708215][T11694] ? __lock_acquire+0xab9/0xd20 [ 363.708239][T11694] ? __pfx_do_filp_open+0x10/0x10 [ 363.708289][T11694] ? _raw_spin_unlock+0x28/0x50 [ 363.708305][T11694] ? alloc_fd+0x64c/0x6c0 [ 363.708333][T11694] do_sys_openat2+0x121/0x1c0 [ 363.708353][T11694] ? __pfx_do_sys_openat2+0x10/0x10 [ 363.708368][T11694] ? ksys_write+0x22a/0x250 [ 363.708389][T11694] ? __pfx_ksys_write+0x10/0x10 [ 363.708406][T11694] ? rcu_is_watching+0x15/0xb0 [ 363.708429][T11694] __x64_sys_creat+0x8f/0xc0 [ 363.708463][T11694] do_syscall_64+0xfa/0x3b0 [ 363.708484][T11694] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.708504][T11694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.708519][T11694] ? clear_bhb_loop+0x60/0xb0 [ 363.708538][T11694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.708559][T11694] RIP: 0033:0x7fc726b8e929 [ 363.708575][T11694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.708591][T11694] RSP: 002b:00007fc727a19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 363.708612][T11694] RAX: ffffffffffffffda RBX: 00007fc726db5fa0 RCX: 00007fc726b8e929 [ 363.708625][T11694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 363.708637][T11694] RBP: 00007fc727a19090 R08: 0000000000000000 R09: 0000000000000000 [ 363.708647][T11694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 363.708658][T11694] R13: 0000000000000000 R14: 00007fc726db5fa0 R15: 00007ffcb7947708 [ 363.708688][T11694] [ 364.108008][ T5917] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 364.125106][T11694] overlayfs: failed inode index lookup (ino=2949, key=00fb210001ddaab739da684a9ca3fad8d39f059b92cc275034850b000000000000, err=-12); [ 364.125106][T11694] overlayfs: mount with '-o index=off' to disable inodes index. [ 364.278429][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 364.284944][ T5917] usb 4-1: no configurations [ 364.843979][ T5917] usb 4-1: can't read configurations, error -22 [ 365.004555][ T5917] usb usb4-port1: attempt power cycle [ 365.030505][T11699] /dev/rnullb0: Can't open blockdev [ 365.125549][T11703] syzkaller1: entered promiscuous mode [ 365.132284][T11703] syzkaller1: entered allmulticast mode [ 365.313232][T11713] /dev/rnullb0: Can't open blockdev [ 365.359858][ T5917] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 365.361186][T11715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.388577][T11715] fuse: Unknown parameter '£:' [ 365.393873][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 365.399823][T11715] syzkaller1: entered promiscuous mode [ 365.400190][ T5917] usb 4-1: no configurations [ 365.405320][T11715] syzkaller1: entered allmulticast mode [ 365.416353][ T5917] usb 4-1: can't read configurations, error -22 [ 365.785671][ T5917] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 366.434037][ T5917] usb 4-1: device descriptor read/8, error -71 [ 366.447945][T11722] FAULT_INJECTION: forcing a failure. [ 366.447945][T11722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.465614][T11722] CPU: 0 UID: 0 PID: 11722 Comm: syz.2.2037 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 366.465644][T11722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 366.465655][T11722] Call Trace: [ 366.465664][T11722] [ 366.465672][T11722] dump_stack_lvl+0x189/0x250 [ 366.465699][T11722] ? __pfx____ratelimit+0x10/0x10 [ 366.465723][T11722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.465742][T11722] ? __pfx__printk+0x10/0x10 [ 366.465773][T11722] should_fail_ex+0x414/0x560 [ 366.465801][T11722] _copy_to_user+0x31/0xb0 [ 366.465819][T11722] simple_read_from_buffer+0xe1/0x170 [ 366.465847][T11722] proc_fail_nth_read+0x1df/0x250 [ 366.465866][T11722] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 366.465882][T11722] ? rw_verify_area+0x258/0x650 [ 366.465902][T11722] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 366.465918][T11722] vfs_read+0x200/0x980 [ 366.465943][T11722] ? __pfx___mutex_lock+0x10/0x10 [ 366.465966][T11722] ? __pfx_vfs_read+0x10/0x10 [ 366.465987][T11722] ? __fget_files+0x2a/0x420 [ 366.466015][T11722] ? __fget_files+0x3a0/0x420 [ 366.466035][T11722] ? __fget_files+0x2a/0x420 [ 366.466061][T11722] ksys_read+0x145/0x250 [ 366.466084][T11722] ? __pfx_ksys_read+0x10/0x10 [ 366.466108][T11722] ? do_syscall_64+0xbe/0x3b0 [ 366.466133][T11722] do_syscall_64+0xfa/0x3b0 [ 366.466152][T11722] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.466180][T11722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.466197][T11722] ? clear_bhb_loop+0x60/0xb0 [ 366.466217][T11722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.466233][T11722] RIP: 0033:0x7f902c98d33c [ 366.466251][T11722] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 366.466267][T11722] RSP: 002b:00007f902d8a9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 366.466287][T11722] RAX: ffffffffffffffda RBX: 00007f902cbb5fa0 RCX: 00007f902c98d33c [ 366.466300][T11722] RDX: 000000000000000f RSI: 00007f902d8a90a0 RDI: 0000000000000005 [ 366.466312][T11722] RBP: 00007f902d8a9090 R08: 0000000000000000 R09: 0000000000000000 [ 366.466323][T11722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 366.466333][T11722] R13: 0000000000000000 R14: 00007f902cbb5fa0 R15: 00007ffd8dd304b8 [ 366.466362][T11722] [ 366.729453][T11726] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 366.742425][ T5917] usb usb4-port1: unable to enumerate USB device [ 366.905073][T11734] FAULT_INJECTION: forcing a failure. [ 366.905073][T11734] name failslab, interval 1, probability 0, space 0, times 0 [ 366.917941][T11734] CPU: 0 UID: 0 PID: 11734 Comm: syz.1.2043 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 366.917967][T11734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 366.917977][T11734] Call Trace: [ 366.917983][T11734] [ 366.917989][T11734] dump_stack_lvl+0x189/0x250 [ 366.918013][T11734] ? __pfx____ratelimit+0x10/0x10 [ 366.918031][T11734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.918048][T11734] ? __pfx__printk+0x10/0x10 [ 366.918073][T11734] ? __pfx___might_resched+0x10/0x10 [ 366.918088][T11734] ? fs_reclaim_acquire+0x7d/0x100 [ 366.918116][T11734] should_fail_ex+0x414/0x560 [ 366.918144][T11734] ? __pfx_proc_alloc_inode+0x10/0x10 [ 366.918162][T11734] should_failslab+0xa8/0x100 [ 366.918183][T11734] ? __pfx_proc_alloc_inode+0x10/0x10 [ 366.918198][T11734] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 366.918218][T11734] ? proc_alloc_inode+0x2a/0xc0 [ 366.918237][T11734] ? __pfx_proc_alloc_inode+0x10/0x10 [ 366.918253][T11734] proc_alloc_inode+0x2a/0xc0 [ 366.918278][T11734] alloc_inode+0x67/0x1b0 [ 366.918306][T11734] new_inode+0x22/0x170 [ 366.918329][T11734] proc_get_inode+0x22/0x6a0 [ 366.918348][T11734] proc_lookup_de+0x251/0x340 [ 366.918370][T11734] proc_tgid_net_lookup+0x63/0xf0 [ 366.918392][T11734] path_openat+0x10fe/0x3830 [ 366.918409][T11734] ? arch_stack_walk+0xfc/0x150 [ 366.918463][T11734] ? __pfx_path_openat+0x10/0x10 [ 366.918479][T11734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.918519][T11734] do_filp_open+0x1fa/0x410 [ 366.918535][T11734] ? __lock_acquire+0xab9/0xd20 [ 366.918562][T11734] ? __pfx_do_filp_open+0x10/0x10 [ 366.918590][T11734] ? __pfx_kfree_link+0x10/0x10 [ 366.918623][T11734] ? _raw_spin_unlock+0x28/0x50 [ 366.918641][T11734] ? alloc_fd+0x64c/0x6c0 [ 366.918672][T11734] do_sys_openat2+0x121/0x1c0 [ 366.918690][T11734] ? __pfx_do_sys_openat2+0x10/0x10 [ 366.918707][T11734] ? ksys_write+0x22a/0x250 [ 366.918730][T11734] ? __pfx_ksys_write+0x10/0x10 [ 366.918746][T11734] ? rcu_is_watching+0x15/0xb0 [ 366.918768][T11734] __x64_sys_openat+0x138/0x170 [ 366.918790][T11734] do_syscall_64+0xfa/0x3b0 [ 366.918811][T11734] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.918831][T11734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.918848][T11734] ? clear_bhb_loop+0x60/0xb0 [ 366.918879][T11734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.918895][T11734] RIP: 0033:0x7f78b158d290 [ 366.918912][T11734] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 366.918947][T11734] RSP: 002b:00007f78b23a3f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 366.918967][T11734] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f78b158d290 [ 366.918980][T11734] RDX: 0000000000000002 RSI: 00007f78b23a3fa0 RDI: 00000000ffffff9c [ 366.918991][T11734] RBP: 00007f78b23a3fa0 R08: 0000000000000000 R09: 0000000000000000 [ 366.919002][T11734] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 366.919013][T11734] R13: 0000000000000000 R14: 00007f78b17b5fa0 R15: 00007ffc5beb0498 [ 366.919043][T11734] [ 367.179000][ T43] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 367.458478][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.482471][ T43] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 367.498088][ T43] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 367.507546][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.527874][ T43] usb 3-1: Product: syz [ 367.534624][ T43] usb 3-1: Manufacturer: syz [ 367.540010][ T43] usb 3-1: SerialNumber: syz [ 367.553764][ T43] usb 3-1: config 0 descriptor?? [ 367.765014][ T5904] usb 3-1: USB disconnect, device number 95 [ 367.778800][ T5917] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 367.948470][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 367.958612][ T5917] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 367.967836][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.977511][ T5917] usb 4-1: Product: syz [ 367.981910][ T5917] usb 4-1: Manufacturer: syz [ 367.986511][ T5917] usb 4-1: SerialNumber: syz [ 367.994203][ T5917] usb 4-1: config 0 descriptor?? [ 368.005661][ T5917] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 368.132288][T11749] /dev/rnullb0: Can't open blockdev [ 368.263587][T11756] /dev/rnullb0: Can't open blockdev [ 368.436685][T11765] FAULT_INJECTION: forcing a failure. [ 368.436685][T11765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.450276][T11765] CPU: 1 UID: 0 PID: 11765 Comm: syz.1.2057 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 368.450312][T11765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 368.450324][T11765] Call Trace: [ 368.450332][T11765] [ 368.450340][T11765] dump_stack_lvl+0x189/0x250 [ 368.450370][T11765] ? __pfx____ratelimit+0x10/0x10 [ 368.450392][T11765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.450409][T11765] ? __pfx__printk+0x10/0x10 [ 368.450427][T11765] ? __might_fault+0xb0/0x130 [ 368.450455][T11765] should_fail_ex+0x414/0x560 [ 368.450484][T11765] _copy_from_user+0x2d/0xb0 [ 368.450502][T11765] kstrtouint_from_user+0xc4/0x170 [ 368.450526][T11765] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 368.450560][T11765] proc_fail_nth_write+0x88/0x240 [ 368.450576][T11765] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 368.450596][T11765] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 368.450613][T11765] vfs_write+0x27e/0xa90 [ 368.450643][T11765] ? __pfx_vfs_write+0x10/0x10 [ 368.450663][T11765] ? __fget_files+0x2a/0x420 [ 368.450687][T11765] ? __fget_files+0x3a0/0x420 [ 368.450703][T11765] ? __fget_files+0x2a/0x420 [ 368.450729][T11765] ksys_write+0x145/0x250 [ 368.450746][T11765] ? __pfx_ksys_write+0x10/0x10 [ 368.450761][T11765] ? rcu_is_watching+0x15/0xb0 [ 368.450781][T11765] ? do_syscall_64+0xbe/0x3b0 [ 368.450803][T11765] do_syscall_64+0xfa/0x3b0 [ 368.450821][T11765] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.450841][T11765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.450858][T11765] ? clear_bhb_loop+0x60/0xb0 [ 368.450878][T11765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.450894][T11765] RIP: 0033:0x7f78b158d3df [ 368.450911][T11765] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 368.450925][T11765] RSP: 002b:00007f78b23a4030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 368.450943][T11765] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f78b158d3df [ 368.450956][T11765] RDX: 0000000000000001 RSI: 00007f78b23a40a0 RDI: 0000000000000005 [ 368.450966][T11765] RBP: 00007f78b23a4090 R08: 0000000000000000 R09: 0000000000000000 [ 368.450976][T11765] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 368.450986][T11765] R13: 0000000000000000 R14: 00007f78b17b5fa0 R15: 00007ffc5beb0498 [ 368.451012][T11765] [ 369.506619][ T5917] gspca_stk1135: reg_w 0xf err -71 [ 369.512981][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 369.523594][ T5917] gspca_stk1135: Sensor write failed [ 369.529720][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 369.536514][ T5917] gspca_stk1135: Sensor write failed [ 369.542169][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 369.548615][ T5917] gspca_stk1135: Sensor read failed [ 369.553931][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 369.561305][ T5917] gspca_stk1135: Sensor read failed [ 369.566626][ T5917] gspca_stk1135: Detected sensor type unknown (0x0) [ 369.573311][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 369.579778][ T5917] gspca_stk1135: Sensor read failed [ 369.585169][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 369.592375][ T5917] gspca_stk1135: Sensor read failed [ 369.597619][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 369.604321][ T5917] gspca_stk1135: Sensor write failed [ 369.612449][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 369.621239][ T5917] gspca_stk1135: Sensor write failed [ 369.626652][ T5917] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 369.638203][ T5917] usb 4-1: USB disconnect, device number 95 [ 369.790832][T11786] /dev/rnullb0: Can't open blockdev [ 370.098425][ T5917] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 370.271438][ T5917] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.282515][ T5917] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 370.293641][ T5917] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 370.311371][ T5917] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.320653][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.328743][ T5917] usb 2-1: Product: syz [ 370.333041][ T5917] usb 2-1: Manufacturer: syz [ 370.337655][ T5917] usb 2-1: SerialNumber: syz [ 370.478451][ T5903] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 370.628499][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 370.645501][ T5903] usb 4-1: config 0 has an invalid interface number: 125 but max is 0 [ 370.656399][ T5903] usb 4-1: config 0 has no interface number 0 [ 370.665307][ T5903] usb 4-1: config 0 interface 125 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 370.677301][ T5903] usb 4-1: config 0 interface 125 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 370.691303][ T5903] usb 4-1: config 0 interface 125 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 370.706088][ T5903] usb 4-1: New USB device found, idVendor=3277, idProduct=009e, bcdDevice=2e.0f [ 370.715630][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.723894][ T5903] usb 4-1: Product: syz [ 370.728207][ T5903] usb 4-1: Manufacturer: syz [ 370.733375][ T5903] usb 4-1: SerialNumber: syz [ 370.743788][ T5903] usb 4-1: config 0 descriptor?? [ 370.749854][T11795] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 370.761677][ T5903] usb 4-1: Found UVC 0.00 device syz (3277:009e) [ 370.768084][ T5903] usb 4-1: No valid video chain found. [ 370.794876][T11804] ./bus: Can't lookup blockdev [ 370.898817][T11806] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 370.962781][ T5903] usb 4-1: USB disconnect, device number 96 [ 371.157033][T11816] /dev/rnullb0: Can't open blockdev [ 371.365099][ T5917] cdc_ncm 2-1:1.0: bind() failure [ 371.380594][ T5917] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 371.392976][ T5917] usb 2-1: USB disconnect, device number 84 [ 371.448644][ T5940] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 371.575434][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2076'. [ 371.627434][ T5940] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 371.638700][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.646770][ T5940] usb 3-1: Product: syz [ 371.653489][ T5940] usb 3-1: Manufacturer: syz [ 371.658334][ T5940] usb 3-1: SerialNumber: syz [ 371.678560][ T5940] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 371.715118][ T5917] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 371.942831][T11818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.974856][T11818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.004833][ T5904] usb 3-1: USB disconnect, device number 96 [ 372.805088][ T5917] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 372.829686][ T5917] ath9k_htc: Failed to initialize the device [ 372.844385][ T5904] usb 3-1: ath9k_htc: USB layer deinitialized [ 373.068691][ T5940] hid (null): global environment stack underflow [ 373.081037][ T5940] hid (null): report_id 0 is invalid [ 373.103665][ T5940] hid-generic 0003:FFFFFFFB:00FB.0012: unknown main item tag 0x4 [ 373.112783][ T5940] hid-generic 0003:FFFFFFFB:00FB.0012: unknown main item tag 0x6 [ 373.120720][ T5940] hid-generic 0003:FFFFFFFB:00FB.0012: reserved main item tag 0xd [ 373.129170][ T5940] hid-generic 0003:FFFFFFFB:00FB.0012: unknown main item tag 0x5 [ 373.137043][ T5940] hid-generic 0003:FFFFFFFB:00FB.0012: reserved main item tag 0xd [ 373.145023][ T5940] hid-generic 0003:FFFFFFFB:00FB.0012: global environment stack underflow [ 373.153598][ T5940] hid-generic 0003:FFFFFFFB:00FB.0012: item 0 2 1 11 parsing failed [ 373.158594][ T5904] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 373.162535][ T5940] hid-generic 0003:FFFFFFFB:00FB.0012: probe with driver hid-generic failed with error -22 [ 373.236189][T11864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.319106][ T5904] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 373.341306][ T5904] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 373.352121][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 373.360585][ T5904] usb 3-1: Product: syz [ 373.364768][ T5904] usb 3-1: Manufacturer: syz [ 373.369584][ T5904] usb 3-1: SerialNumber: syz [ 373.377732][ T5904] usb 3-1: config 0 descriptor?? [ 373.600729][ T5904] usb 3-1: bad CDC descriptors [ 373.616070][ T5904] usb 3-1: USB disconnect, device number 97 [ 373.653495][T11871] /dev/rnullb0: Can't open blockdev [ 373.898549][ T5883] usb 2-1: new low-speed USB device number 85 using dummy_hcd [ 374.051919][ T5883] usb 2-1: No LPM exit latency info found, disabling LPM. [ 374.061226][ T5883] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 374.073347][ T5883] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 374.083933][ T5883] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 374.097088][ T5883] usb 2-1: string descriptor 0 read error: -22 [ 374.103623][ T5883] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 374.124312][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.138800][T11871] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 374.352416][ T5883] cdc_ncm 2-1:1.0: bind() failure [ 374.375677][ T5883] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 374.387022][ T5883] cdc_ncm 2-1:1.1: bind() failure [ 374.397579][ T5883] usb 2-1: USB disconnect, device number 85 [ 374.823357][T11889] loop8: detected capacity change from 0 to 79 [ 375.001497][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2100'. [ 375.340195][T11908] C: renamed from team_slave_0 (while UP) [ 375.346349][T11906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2104'. [ 375.360323][T11908] netlink: 'syz.1.2105': attribute type 1 has an invalid length. [ 375.377284][T11908] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 375.768617][ T5883] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 375.819692][ T5904] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 375.918547][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 375.926779][ T5883] usb 2-1: unable to get BOS descriptor or descriptor too short [ 375.935911][ T5883] usb 2-1: config 2 has an invalid interface number: 151 but max is 0 [ 375.944294][ T5883] usb 2-1: config 2 has no interface number 0 [ 375.950660][ T5883] usb 2-1: config 2 interface 151 has no altsetting 0 [ 375.962092][ T5883] usb 2-1: string descriptor 0 read error: -22 [ 375.968868][ T5883] usb 2-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=40.1f [ 375.978631][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.990168][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 376.009718][ T5904] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 376.028436][ T5904] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 376.041816][ T5904] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 376.052942][ T5904] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 376.064269][ T5904] usb 3-1: config 0 interface 0 has no altsetting 0 [ 376.081534][ T5904] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 376.093735][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.102145][ T5904] usb 3-1: Product: syz [ 376.106403][ T5904] usb 3-1: Manufacturer: syz [ 376.111222][ T5904] usb 3-1: SerialNumber: syz [ 376.127725][ T5904] usb 3-1: config 0 descriptor?? [ 376.134220][T11915] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 376.157755][T11921] 9pnet_fd: Insufficient options for proto=fd [ 376.159604][T11922] /dev/rnullb0: Can't open blockdev [ 376.217967][ T5883] mos7840 2-1:2.151: required endpoints missing [ 376.241896][ T5883] usb 2-1: USB disconnect, device number 86 [ 376.368064][T11912] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 376.397526][ T5904] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input44 [ 376.589609][T11912] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 376.612105][ T5904] usb 3-1: USB disconnect, device number 98 [ 376.620034][ T5192] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 376.643751][ T5192] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 376.819427][T11940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 376.839322][T11940] FAULT_INJECTION: forcing a failure. [ 376.839322][T11940] name failslab, interval 1, probability 0, space 0, times 0 [ 376.841141][T11942] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2112'. [ 376.868031][T11940] CPU: 0 UID: 0 PID: 11940 Comm: syz.1.2113 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 376.868057][T11940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 376.868067][T11940] Call Trace: [ 376.868075][T11940] [ 376.868084][T11940] dump_stack_lvl+0x189/0x250 [ 376.868108][T11940] ? __pfx____ratelimit+0x10/0x10 [ 376.868129][T11940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.868147][T11940] ? __pfx__printk+0x10/0x10 [ 376.868167][T11940] ? __pfx___might_resched+0x10/0x10 [ 376.868183][T11940] ? fs_reclaim_acquire+0x7d/0x100 [ 376.868206][T11940] should_fail_ex+0x414/0x560 [ 376.868236][T11940] should_failslab+0xa8/0x100 [ 376.868273][T11940] __kmalloc_noprof+0xcb/0x4f0 [ 376.868289][T11940] ? tomoyo_encode+0x28b/0x550 [ 376.868309][T11940] tomoyo_encode+0x28b/0x550 [ 376.868330][T11940] tomoyo_realpath_from_path+0x58d/0x5d0 [ 376.868356][T11940] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 376.868377][T11940] tomoyo_path_number_perm+0x1e8/0x5a0 [ 376.868400][T11940] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 376.868440][T11940] ? __lock_acquire+0xab9/0xd20 [ 376.868486][T11940] ? __fget_files+0x2a/0x420 [ 376.868510][T11940] ? __fget_files+0x2a/0x420 [ 376.868535][T11940] ? __fget_files+0x3a0/0x420 [ 376.868554][T11940] ? __fget_files+0x2a/0x420 [ 376.868579][T11940] security_file_ioctl+0xcb/0x2d0 [ 376.868606][T11940] __se_sys_ioctl+0x47/0x170 [ 376.868626][T11940] do_syscall_64+0xfa/0x3b0 [ 376.868644][T11940] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.868664][T11940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.868680][T11940] ? clear_bhb_loop+0x60/0xb0 [ 376.868700][T11940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.868716][T11940] RIP: 0033:0x7f78b158e929 [ 376.868732][T11940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.868745][T11940] RSP: 002b:00007f78b23a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 376.868762][T11940] RAX: ffffffffffffffda RBX: 00007f78b17b5fa0 RCX: 00007f78b158e929 [ 376.868775][T11940] RDX: 0000200000001340 RSI: 0000000000003b85 RDI: 0000000000000003 [ 376.868786][T11940] RBP: 00007f78b23a4090 R08: 0000000000000000 R09: 0000000000000000 [ 376.868797][T11940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.868808][T11940] R13: 0000000000000000 R14: 00007f78b17b5fa0 R15: 00007ffc5beb0498 [ 376.868838][T11940] [ 377.123835][T11940] ERROR: Out of memory at tomoyo_realpath_from_path. [ 377.323741][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2116'. [ 377.419352][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2116'. [ 377.534988][T11956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 377.785637][T11963] /dev/rnullb0: Can't open blockdev [ 378.568414][ T5883] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 378.710063][ T5925] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 378.738580][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 378.746271][ T5883] usb 3-1: config 0 has no interfaces? [ 378.752432][ T5883] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 378.762178][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.774893][ T5883] usb 3-1: config 0 descriptor?? [ 378.868590][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 378.877667][ T5925] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 378.887544][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.898019][ T5925] usb 4-1: Product: syz [ 378.905207][ T5925] usb 4-1: Manufacturer: syz [ 378.913206][ T5925] usb 4-1: SerialNumber: syz [ 378.923305][ T5925] usb 4-1: config 0 descriptor?? [ 378.935078][ T5925] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 379.059154][ T5940] usb 3-1: USB disconnect, device number 99 [ 379.192508][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.200744][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.357644][T12007] FAULT_INJECTION: forcing a failure. [ 380.357644][T12007] name failslab, interval 1, probability 0, space 0, times 0 [ 380.370837][T12007] CPU: 0 UID: 0 PID: 12007 Comm: syz.1.2137 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 380.370866][T12007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 380.370878][T12007] Call Trace: [ 380.370886][T12007] [ 380.370894][T12007] dump_stack_lvl+0x189/0x250 [ 380.370924][T12007] ? __pfx____ratelimit+0x10/0x10 [ 380.370947][T12007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.370966][T12007] ? __pfx__printk+0x10/0x10 [ 380.371002][T12007] ? __pfx___might_resched+0x10/0x10 [ 380.371026][T12007] should_fail_ex+0x414/0x560 [ 380.371058][T12007] should_failslab+0xa8/0x100 [ 380.371081][T12007] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 380.371103][T12007] ? __alloc_skb+0x112/0x2d0 [ 380.371130][T12007] __alloc_skb+0x112/0x2d0 [ 380.371156][T12007] netlink_sendmsg+0x5c6/0xb30 [ 380.371190][T12007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.371216][T12007] ? aa_sock_msg_perm+0xf1/0x1d0 [ 380.371245][T12007] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 380.371274][T12007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.371297][T12007] __sock_sendmsg+0x219/0x270 [ 380.371326][T12007] __sys_sendto+0x3bd/0x520 [ 380.371356][T12007] ? __pfx___sys_sendto+0x10/0x10 [ 380.371376][T12007] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 380.371411][T12007] ? __fget_files+0x3a0/0x420 [ 380.371445][T12007] ? ksys_write+0x22a/0x250 [ 380.371469][T12007] ? __pfx_ksys_write+0x10/0x10 [ 380.371494][T12007] __x64_sys_sendto+0xde/0x100 [ 380.371521][T12007] do_syscall_64+0xfa/0x3b0 [ 380.371542][T12007] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.371562][T12007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.371579][T12007] ? clear_bhb_loop+0x60/0xb0 [ 380.371600][T12007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.371617][T12007] RIP: 0033:0x7f78b158e929 [ 380.371635][T12007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.371651][T12007] RSP: 002b:00007f78b23a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 380.371670][T12007] RAX: ffffffffffffffda RBX: 00007f78b17b5fa0 RCX: 00007f78b158e929 [ 380.371681][T12007] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000003 [ 380.371690][T12007] RBP: 00007f78b23a4090 R08: 0000000000000000 R09: 0000000000000000 [ 380.371699][T12007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.371709][T12007] R13: 0000000000000000 R14: 00007f78b17b5fa0 R15: 00007ffc5beb0498 [ 380.371733][T12007] [ 380.388596][ T5940] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 380.789600][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 380.797912][ T5940] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 380.818397][ T5940] usb 3-1: config 252 has no interface number 0 [ 380.824725][ T5940] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 380.851061][ T5940] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 380.868696][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.876811][ T5940] usb 3-1: Product: syz [ 380.896404][ T5940] usb 3-1: Manufacturer: syz [ 380.901259][ T5940] usb 3-1: SerialNumber: syz [ 380.921700][ T5940] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 380.963590][ T5925] gspca_ov534_9: reg_r err -71 [ 381.126655][ T5883] usb 3-1: USB disconnect, device number 100 [ 381.133719][ T1321] usb 3-1: Failed to submit usb control message: -71 [ 381.150154][ T1321] usb 3-1: unable to send the bmi data to the device: -71 [ 381.158097][ T1321] usb 3-1: unable to get target info from device [ 381.166293][ T1321] usb 3-1: could not get target info (-71) [ 381.173730][ T1321] usb 3-1: could not probe fw (-71) [ 381.197842][ T5925] gspca_ov534_9: Unknown sensor 0000 [ 381.197928][ T5925] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 381.217805][ T5925] usb 4-1: USB disconnect, device number 97 [ 381.546777][T12028] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 381.553358][T12028] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 381.574237][T12028] vhci_hcd vhci_hcd.0: Device attached [ 381.602396][T12028] vhci_hcd vhci_hcd.0: port 0 already used [ 381.868581][ T5925] usb 34-1: SetAddress Request (14) to port 0 [ 381.878461][ T5925] usb 34-1: new SuperSpeed USB device number 14 using vhci_hcd [ 382.028463][T12055] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2150'. [ 382.028543][ T5883] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 382.037683][T12055] netlink: 'syz.2.2150': attribute type 5 has an invalid length. [ 382.102310][T12055] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 382.115915][T12055] qnx6: wrong signature (magic) in superblock #1. [ 382.122515][T12055] qnx6: unable to read the first superblock [ 382.228510][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 382.236474][ T5883] usb 2-1: config 0 has no interfaces? [ 382.242383][ T5883] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 382.254212][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.290116][ T5883] usb 2-1: config 0 descriptor?? [ 382.398426][T12029] vhci_hcd: connection reset by peer [ 382.428492][ T61] vhci_hcd: stop threads [ 382.432928][ T61] vhci_hcd: release socket [ 382.438194][ T61] vhci_hcd: disconnect device [ 382.511878][T12046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.530708][T12046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.545401][T12065] FAULT_INJECTION: forcing a failure. [ 382.545401][T12065] name failslab, interval 1, probability 0, space 0, times 0 [ 382.560569][T12065] CPU: 1 UID: 0 PID: 12065 Comm: syz.3.2153 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 382.560596][T12065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 382.560608][T12065] Call Trace: [ 382.560616][T12065] [ 382.560624][T12065] dump_stack_lvl+0x189/0x250 [ 382.560652][T12065] ? __pfx____ratelimit+0x10/0x10 [ 382.560675][T12065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.560693][T12065] ? __pfx__printk+0x10/0x10 [ 382.560720][T12065] ? __pfx___might_resched+0x10/0x10 [ 382.560737][T12065] ? fs_reclaim_acquire+0x7d/0x100 [ 382.560763][T12065] should_fail_ex+0x414/0x560 [ 382.560798][T12065] should_failslab+0xa8/0x100 [ 382.560822][T12065] __kmalloc_noprof+0xcb/0x4f0 [ 382.560840][T12065] ? ovl_lookup+0x5f7/0x1bc0 [ 382.560861][T12065] ovl_lookup+0x5f7/0x1bc0 [ 382.560885][T12065] ? d_alloc_parallel+0x2f0/0x15e0 [ 382.560906][T12065] ? d_alloc_parallel+0x14ae/0x15e0 [ 382.560937][T12065] ? __pfx_ovl_lookup+0x10/0x10 [ 382.560957][T12065] ? __pfx_d_alloc_parallel+0x10/0x10 [ 382.560987][T12065] path_openat+0x10fe/0x3830 [ 382.561003][T12065] ? arch_stack_walk+0xfc/0x150 [ 382.561064][T12065] ? __pfx_path_openat+0x10/0x10 [ 382.561080][T12065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.561121][T12065] do_filp_open+0x1fa/0x410 [ 382.561137][T12065] ? __lock_acquire+0xab9/0xd20 [ 382.561164][T12065] ? __pfx_do_filp_open+0x10/0x10 [ 382.561205][T12065] ? _raw_spin_unlock+0x28/0x50 [ 382.561225][T12065] ? alloc_fd+0x64c/0x6c0 [ 382.561260][T12065] do_sys_openat2+0x121/0x1c0 [ 382.561281][T12065] ? __pfx_do_sys_openat2+0x10/0x10 [ 382.561298][T12065] ? ksys_write+0x22a/0x250 [ 382.561322][T12065] ? __pfx_ksys_write+0x10/0x10 [ 382.561339][T12065] ? rcu_is_watching+0x15/0xb0 [ 382.561362][T12065] __x64_sys_open+0x11e/0x150 [ 382.561384][T12065] do_syscall_64+0xfa/0x3b0 [ 382.561405][T12065] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.561423][T12065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.561437][T12065] ? clear_bhb_loop+0x60/0xb0 [ 382.561454][T12065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.561469][T12065] RIP: 0033:0x7f31d6d8e929 [ 382.561483][T12065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.561495][T12065] RSP: 002b:00007f31d7c73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 382.561512][T12065] RAX: ffffffffffffffda RBX: 00007f31d6fb5fa0 RCX: 00007f31d6d8e929 [ 382.561524][T12065] RDX: 0000000000000014 RSI: 0000000000000080 RDI: 0000200000000400 [ 382.561533][T12065] RBP: 00007f31d7c73090 R08: 0000000000000000 R09: 0000000000000000 [ 382.561544][T12065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.561553][T12065] R13: 0000000000000000 R14: 00007f31d6fb5fa0 R15: 00007ffe434d3548 [ 382.561581][T12065] [ 382.922284][ T43] usb 2-1: USB disconnect, device number 87 [ 382.954925][T12072] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 382.991356][T12074] FAULT_INJECTION: forcing a failure. [ 382.991356][T12074] name failslab, interval 1, probability 0, space 0, times 0 [ 383.004184][T12074] CPU: 1 UID: 0 PID: 12074 Comm: syz.3.2156 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 383.004212][T12074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 383.004223][T12074] Call Trace: [ 383.004233][T12074] [ 383.004241][T12074] dump_stack_lvl+0x189/0x250 [ 383.004268][T12074] ? __pfx____ratelimit+0x10/0x10 [ 383.004292][T12074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.004311][T12074] ? __pfx__printk+0x10/0x10 [ 383.004338][T12074] ? ref_tracker_alloc+0x318/0x460 [ 383.004360][T12074] should_fail_ex+0x414/0x560 [ 383.004391][T12074] should_failslab+0xa8/0x100 [ 383.004414][T12074] kmem_cache_alloc_noprof+0x73/0x3c0 [ 383.004433][T12074] ? skb_clone+0x212/0x3a0 [ 383.004457][T12074] skb_clone+0x212/0x3a0 [ 383.004478][T12074] __netlink_deliver_tap+0x404/0x850 [ 383.004514][T12074] ? netlink_deliver_tap+0x2e/0x1b0 [ 383.004537][T12074] netlink_deliver_tap+0x19c/0x1b0 [ 383.004561][T12074] netlink_unicast+0x72f/0x8d0 [ 383.004594][T12074] netlink_sendmsg+0x805/0xb30 [ 383.004626][T12074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.004652][T12074] ? aa_sock_msg_perm+0xf1/0x1d0 [ 383.004673][T12074] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 383.004696][T12074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.004719][T12074] __sock_sendmsg+0x219/0x270 [ 383.004744][T12074] ____sys_sendmsg+0x52d/0x830 [ 383.004773][T12074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.004800][T12074] ? import_iovec+0x74/0xa0 [ 383.004820][T12074] ___sys_sendmsg+0x21f/0x2a0 [ 383.004839][T12074] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.004893][T12074] ? __fget_files+0x2a/0x420 [ 383.004914][T12074] ? __fget_files+0x3a0/0x420 [ 383.004946][T12074] __sys_sendmmsg+0x227/0x430 [ 383.004969][T12074] ? __pfx___sys_sendmmsg+0x10/0x10 [ 383.004983][T12074] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 383.005030][T12074] ? ksys_write+0x22a/0x250 [ 383.005053][T12074] ? __pfx_ksys_write+0x10/0x10 [ 383.005069][T12074] ? rcu_is_watching+0x15/0xb0 [ 383.005093][T12074] __x64_sys_sendmmsg+0xa0/0xc0 [ 383.005112][T12074] do_syscall_64+0xfa/0x3b0 [ 383.005134][T12074] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.005154][T12074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.005171][T12074] ? clear_bhb_loop+0x60/0xb0 [ 383.005191][T12074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.005208][T12074] RIP: 0033:0x7f31d6d8e929 [ 383.005225][T12074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.005241][T12074] RSP: 002b:00007f31d7c73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 383.005260][T12074] RAX: ffffffffffffffda RBX: 00007f31d6fb5fa0 RCX: 00007f31d6d8e929 [ 383.005273][T12074] RDX: 0000000000000001 RSI: 0000200000005200 RDI: 0000000000000003 [ 383.005285][T12074] RBP: 00007f31d7c73090 R08: 0000000000000000 R09: 0000000000000000 [ 383.005295][T12074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.005306][T12074] R13: 0000000000000000 R14: 00007f31d6fb5fa0 R15: 00007ffe434d3548 [ 383.005335][T12074] [ 383.005360][T12074] netlink: 'syz.3.2156': attribute type 21 has an invalid length. [ 383.313169][T12074] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2156'. [ 383.349024][T12078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2157'. [ 383.358718][T12077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2157'. [ 383.417416][T12081] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2158'. [ 383.498617][T12081] input: syz1 as /devices/virtual/input/input46 [ 383.524135][T12087] /dev/rnullb0: Can't open blockdev [ 383.608206][T12089] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 383.615555][T12089] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 383.657129][T12091] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 383.669284][T12091] overlayfs: missing 'lowerdir' [ 383.827727][T12098] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 383.834299][T12098] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 383.871788][T12098] vhci_hcd vhci_hcd.0: Device attached [ 383.894757][T12106] vhci_hcd vhci_hcd.0: port 0 already used [ 384.158940][ T43] usb 40-1: SetAddress Request (26) to port 0 [ 384.165139][ T43] usb 40-1: new SuperSpeed USB device number 26 using vhci_hcd [ 384.394848][T12124] FAULT_INJECTION: forcing a failure. [ 384.394848][T12124] name failslab, interval 1, probability 0, space 0, times 0 [ 384.407704][T12124] CPU: 1 UID: 0 PID: 12124 Comm: syz.0.2172 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 384.407732][T12124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 384.407742][T12124] Call Trace: [ 384.407749][T12124] [ 384.407756][T12124] dump_stack_lvl+0x189/0x250 [ 384.407784][T12124] ? __pfx____ratelimit+0x10/0x10 [ 384.407807][T12124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.407824][T12124] ? __pfx__printk+0x10/0x10 [ 384.407851][T12124] ? __pfx___might_resched+0x10/0x10 [ 384.407869][T12124] ? fs_reclaim_acquire+0x7d/0x100 [ 384.407897][T12124] should_fail_ex+0x414/0x560 [ 384.407930][T12124] should_failslab+0xa8/0x100 [ 384.407955][T12124] kmem_cache_alloc_noprof+0x73/0x3c0 [ 384.407973][T12124] ? __kernfs_new_node+0xd7/0x7e0 [ 384.407997][T12124] __kernfs_new_node+0xd7/0x7e0 [ 384.408013][T12124] ? __lock_acquire+0xab9/0xd20 [ 384.408045][T12124] ? __pfx___kernfs_new_node+0x10/0x10 [ 384.408063][T12124] ? kernfs_root+0x1c/0x230 [ 384.408087][T12124] ? kernfs_root+0x1c/0x230 [ 384.408102][T12124] ? kernfs_root+0x1c/0x230 [ 384.408115][T12124] ? kernfs_root+0x1c/0x230 [ 384.408136][T12124] kernfs_new_node+0x102/0x210 [ 384.408158][T12124] __kernfs_create_file+0x4b/0x2e0 [ 384.408183][T12124] sysfs_add_file_mode_ns+0x238/0x300 [ 384.408215][T12124] sysfs_create_file_ns+0x128/0x1a0 [ 384.408236][T12124] ? __pfx___up_read+0x10/0x10 [ 384.408258][T12124] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 384.408276][T12124] ? acpi_device_notify+0x171/0x380 [ 384.408292][T12124] ? __dev_fwnode+0x50/0x80 [ 384.408309][T12124] ? device_create_file+0xf4/0x1c0 [ 384.408329][T12124] device_add+0x440/0xb50 [ 384.408349][T12124] input_register_device+0x9ca/0x10b0 [ 384.408382][T12124] uinput_create_device+0x422/0x670 [ 384.408399][T12124] ? __lock_acquire+0xab9/0xd20 [ 384.408429][T12124] uinput_ioctl_handler+0x3f0/0x1570 [ 384.408451][T12124] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 384.408480][T12124] ? __fget_files+0x2a/0x420 [ 384.408502][T12124] ? __fget_files+0x3a0/0x420 [ 384.408529][T12124] ? bpf_lsm_file_ioctl+0x9/0x20 [ 384.408547][T12124] ? __pfx_uinput_ioctl+0x10/0x10 [ 384.408570][T12124] __se_sys_ioctl+0xf9/0x170 [ 384.408593][T12124] do_syscall_64+0xfa/0x3b0 [ 384.408614][T12124] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.408635][T12124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.408652][T12124] ? clear_bhb_loop+0x60/0xb0 [ 384.408673][T12124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.408690][T12124] RIP: 0033:0x7fc726b8e929 [ 384.408707][T12124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.408723][T12124] RSP: 002b:00007fc727a19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 384.408744][T12124] RAX: ffffffffffffffda RBX: 00007fc726db5fa0 RCX: 00007fc726b8e929 [ 384.408757][T12124] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 384.408768][T12124] RBP: 00007fc727a19090 R08: 0000000000000000 R09: 0000000000000000 [ 384.408779][T12124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 384.408790][T12124] R13: 0000000000000000 R14: 00007fc726db5fa0 R15: 00007ffcb7947708 [ 384.408818][T12124] [ 384.848531][T12100] vhci_hcd: connection reset by peer [ 384.881278][ T61] vhci_hcd: stop threads [ 384.885913][ T61] vhci_hcd: release socket [ 384.891125][ T61] vhci_hcd: disconnect device [ 385.270047][T12145] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2180'. [ 385.283460][T12145] /dev/rnullb0: Can't open blockdev [ 385.289437][ T5917] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 385.448983][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 385.455791][ T5917] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 385.472335][ T5917] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 385.483853][ T5940] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 385.501097][T12149] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 385.507754][T12149] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 385.520594][ T5917] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 385.541271][T12149] vhci_hcd vhci_hcd.0: Device attached [ 385.546983][ T5917] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 385.560448][ T5917] usb 2-1: config 0 interface 0 has no altsetting 0 [ 385.576101][T12154] vhci_hcd vhci_hcd.0: port 0 already used [ 385.592129][ T5917] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 385.605744][ T5917] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 385.615696][ T5917] usb 2-1: Product: syz [ 385.621242][ T5917] usb 2-1: Manufacturer: syz [ 385.625893][ T5917] usb 2-1: SerialNumber: syz [ 385.633647][ T5917] usb 2-1: config 0 descriptor?? [ 385.641053][ T5917] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 385.653465][ T5917] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 385.670458][ T5940] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 385.679309][ T5940] usb 3-1: config 8 has an invalid descriptor of length 115, skipping remainder of the config [ 385.689853][ T5940] usb 3-1: config 8 has no interface number 0 [ 385.695992][ T5940] usb 3-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 385.709270][ T5940] usb 3-1: config 8 interface 177 has no altsetting 0 [ 385.716078][ T5940] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 385.725312][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.792334][T12163] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2183'. [ 385.805669][T12163] /dev/rnullb0: Can't open blockdev [ 385.911207][ T5905] usb 2-1: USB disconnect, device number 88 [ 385.913516][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 385.923665][ T5905] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 385.943788][ T5940] usb 3-1: string descriptor 0 read error: -71 [ 385.962331][ T5940] ir_toy 3-1:8.177: required endpoints not found [ 385.981127][ T5940] usb 3-1: USB disconnect, device number 101 [ 386.287748][T12150] vhci_hcd: connection closed [ 386.288114][ T2985] vhci_hcd: stop threads [ 386.297203][ T2985] vhci_hcd: release socket [ 386.301944][ T2985] vhci_hcd: disconnect device [ 386.757525][T12177] overlayfs: statfs failed on './file0' [ 386.848471][ T5883] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 386.988523][ T5905] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 387.008434][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 387.016022][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.027139][ T5883] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 387.036421][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.039657][ T5925] usb 34-1: device descriptor read/8, error -110 [ 387.047536][ T5883] usb 4-1: config 0 descriptor?? [ 387.154578][ T5905] usb 3-1: unable to get BOS descriptor or descriptor too short [ 387.165386][ T5905] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 387.175542][ T5905] usb 3-1: can't read configurations, error -71 [ 387.440280][ T5925] usb usb34-port1: attempt power cycle [ 387.461172][T12169] netlink: 'syz.3.2185': attribute type 4 has an invalid length. [ 387.485746][ T5883] corsair 0003:1B1C:1B3E.0013: unknown main item tag 0x0 [ 387.493132][ T5883] corsair 0003:1B1C:1B3E.0013: unknown main item tag 0x0 [ 387.501729][ T5883] corsair 0003:1B1C:1B3E.0013: unknown main item tag 0x0 [ 387.512474][ T5883] corsair 0003:1B1C:1B3E.0013: unknown main item tag 0x0 [ 387.533760][ T5883] corsair 0003:1B1C:1B3E.0013: unknown main item tag 0x0 [ 387.552335][ T5883] corsair 0003:1B1C:1B3E.0013: hidraw0: USB HID v0.05 Device [HID 1b1c:1b3e] on usb-dummy_hcd.3-1/input0 [ 387.700161][T12169] /dev/rnullb0: Can't open blockdev [ 387.760277][ T5917] usb 4-1: USB disconnect, device number 98 [ 387.821596][ T30] audit: type=1326 audit(1751599467.261:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.1.2193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78b158e929 code=0x0 [ 387.901500][T12191] blk_print_req_error: 138 callbacks suppressed [ 387.901516][T12191] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.917501][T12191] buffer_io_error: 138 callbacks suppressed [ 387.917515][T12191] Buffer I/O error on dev nbd1, logical block 0, async page read [ 387.932421][T12191] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.941733][T12191] Buffer I/O error on dev nbd1, logical block 1, async page read [ 387.968769][T12191] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.977869][T12191] Buffer I/O error on dev nbd1, logical block 2, async page read [ 388.007469][T12191] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 388.020023][ T5925] usb usb34-port1: unable to enumerate USB device [ 388.051219][T12191] Buffer I/O error on dev nbd1, logical block 3, async page read [ 388.073397][T12191] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 388.108435][T12191] Buffer I/O error on dev nbd1, logical block 0, async page read [ 388.120782][T12191] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 388.144495][T12191] Buffer I/O error on dev nbd1, logical block 1, async page read [ 388.168689][T12191] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 388.177888][T12191] Buffer I/O error on dev nbd1, logical block 2, async page read [ 388.244279][T12191] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 388.334323][T12191] Buffer I/O error on dev nbd1, logical block 3, async page read [ 388.395967][T12191] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 388.458483][T12191] Buffer I/O error on dev nbd1, logical block 0, async page read [ 388.476991][T12191] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 388.518593][T12191] Buffer I/O error on dev nbd1, logical block 1, async page read [ 388.543587][T12191] ldm_validate_partition_table(): Disk read failed. [ 388.563538][T12191] Dev nbd1: unable to read RDB block 0 [ 388.593188][T12191] nbd1: unable to read partition table [ 388.603518][T12205] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 388.611673][T12205] /dev/rnullb0: Can't open blockdev [ 388.694335][T12205] syz.2.2195 (12205): drop_caches: 2 [ 388.903499][T12191] block nbd1: NBD_DISCONNECT [ 388.950928][T12191] block nbd1: Send disconnect failed -32 [ 389.003928][T12212] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 389.010510][T12212] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 389.019284][T12212] vhci_hcd vhci_hcd.0: Device attached [ 389.038698][T12212] vhci_hcd vhci_hcd.0: port 0 already used [ 389.267649][T12218] FAULT_INJECTION: forcing a failure. [ 389.267649][T12218] name failslab, interval 1, probability 0, space 0, times 0 [ 389.290581][T12218] CPU: 1 UID: 0 PID: 12218 Comm: syz.2.2198 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 389.290612][T12218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 389.290625][T12218] Call Trace: [ 389.290634][T12218] [ 389.290643][T12218] dump_stack_lvl+0x189/0x250 [ 389.290672][T12218] ? __pfx____ratelimit+0x10/0x10 [ 389.290695][T12218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.290714][T12218] ? __pfx__printk+0x10/0x10 [ 389.290740][T12218] ? ref_tracker_alloc+0x318/0x460 [ 389.290763][T12218] should_fail_ex+0x414/0x560 [ 389.290795][T12218] should_failslab+0xa8/0x100 [ 389.290820][T12218] kmem_cache_alloc_noprof+0x73/0x3c0 [ 389.290840][T12218] ? skb_clone+0x212/0x3a0 [ 389.290863][T12218] skb_clone+0x212/0x3a0 [ 389.290884][T12218] __netlink_deliver_tap+0x404/0x850 [ 389.290921][T12218] ? netlink_deliver_tap+0x2e/0x1b0 [ 389.290945][T12218] netlink_deliver_tap+0x19c/0x1b0 [ 389.290968][T12218] netlink_unicast+0x72f/0x8d0 [ 389.291001][T12218] netlink_sendmsg+0x805/0xb30 [ 389.291033][T12218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.291063][T12218] ? aa_sock_msg_perm+0xf1/0x1d0 [ 389.291085][T12218] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 389.291109][T12218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.291132][T12218] __sock_sendmsg+0x219/0x270 [ 389.291158][T12218] ____sys_sendmsg+0x505/0x830 [ 389.291182][T12218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 389.291207][T12218] ? import_iovec+0x74/0xa0 [ 389.291229][T12218] ___sys_sendmsg+0x21f/0x2a0 [ 389.291249][T12218] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.291303][T12218] ? __fget_files+0x2a/0x420 [ 389.291325][T12218] ? __fget_files+0x3a0/0x420 [ 389.291357][T12218] __x64_sys_sendmsg+0x19b/0x260 [ 389.291377][T12218] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 389.291403][T12218] ? __pfx_ksys_write+0x10/0x10 [ 389.291421][T12218] ? rcu_is_watching+0x15/0xb0 [ 389.291444][T12218] ? do_syscall_64+0xbe/0x3b0 [ 389.291476][T12218] do_syscall_64+0xfa/0x3b0 [ 389.291496][T12218] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.291517][T12218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.291534][T12218] ? clear_bhb_loop+0x60/0xb0 [ 389.291555][T12218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.291572][T12218] RIP: 0033:0x7f902c98e929 [ 389.291589][T12218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.291604][T12218] RSP: 002b:00007f902d8a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.291624][T12218] RAX: ffffffffffffffda RBX: 00007f902cbb5fa0 RCX: 00007f902c98e929 [ 389.291637][T12218] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 389.291648][T12218] RBP: 00007f902d8a9090 R08: 0000000000000000 R09: 0000000000000000 [ 389.291658][T12218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.291668][T12218] R13: 0000000000000000 R14: 00007f902cbb5fa0 R15: 00007ffd8dd304b8 [ 389.291696][T12218] [ 389.587903][T12218] netlink: 'syz.2.2198': attribute type 21 has an invalid length. [ 389.596990][T12218] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2198'. [ 389.649150][T12213] vhci_hcd: connection reset by peer [ 389.665417][ T1004] vhci_hcd: stop threads [ 389.675108][ T1004] vhci_hcd: release socket [ 389.698353][ T43] usb 40-1: device descriptor read/8, error -110 [ 389.704992][ T1004] vhci_hcd: disconnect device [ 389.932006][ T5917] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 390.089566][ T43] usb usb40-port1: attempt power cycle [ 390.101422][T12223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2200'. [ 390.111005][ T5917] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 390.126607][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.143141][ T5917] usb 3-1: config 0 descriptor?? [ 390.152580][ T5917] cp210x 3-1:0.0: cp210x converter detected [ 390.195243][T12225] loop9: detected capacity change from 0 to 8 [ 390.215824][T12225] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 390.223281][T12225] loop9: partition table partially beyond EOD, truncated [ 390.235520][T12225] loop9: p1 size 81768186 extends beyond EOD, truncated [ 390.334762][T12230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2202'. [ 390.354223][ T5917] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 390.359113][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 390.364594][ T5917] cp210x 3-1:0.0: querying part number failed [ 390.395659][ T5917] usb 3-1: cp210x converter now attached to ttyUSB0 [ 390.568108][T12220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2199'. [ 390.579587][ T5905] usb 3-1: USB disconnect, device number 104 [ 390.594623][ T5905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 390.603133][ T5905] cp210x 3-1:0.0: device disconnected [ 390.618914][ T5925] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 390.670275][ T43] usb usb40-port1: unable to enumerate USB device [ 390.718602][ T5904] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 390.768401][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 390.776865][ T5925] usb 4-1: unable to get BOS descriptor or descriptor too short [ 390.788486][ T5925] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 390.796112][ T5925] usb 4-1: can't read configurations, error -71 [ 390.878488][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 390.887722][ T5904] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 390.907990][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.917758][ T5904] usb 2-1: Product: syz [ 390.922802][ T5904] usb 2-1: Manufacturer: syz [ 390.927450][ T5904] usb 2-1: SerialNumber: syz [ 390.939264][ T5904] usb 2-1: config 0 descriptor?? [ 390.956027][T12236] fuse: Bad value for 'user_id' [ 390.961143][T12236] fuse: Bad value for 'user_id' [ 391.151559][ T5904] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 391.280783][T12246] FAULT_INJECTION: forcing a failure. [ 391.280783][T12246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.295210][T12246] CPU: 1 UID: 0 PID: 12246 Comm: syz.2.2210 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 391.295248][T12246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 391.295260][T12246] Call Trace: [ 391.295268][T12246] [ 391.295277][T12246] dump_stack_lvl+0x189/0x250 [ 391.295303][T12246] ? __pfx____ratelimit+0x10/0x10 [ 391.295326][T12246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.295345][T12246] ? __pfx__printk+0x10/0x10 [ 391.295365][T12246] ? __might_fault+0xb0/0x130 [ 391.295397][T12246] should_fail_ex+0x414/0x560 [ 391.295427][T12246] _copy_from_user+0x2d/0xb0 [ 391.295446][T12246] get_timespec64+0x8e/0x1a0 [ 391.295468][T12246] ? __pfx_get_timespec64+0x10/0x10 [ 391.295490][T12246] ? __fget_files+0x3a0/0x420 [ 391.295521][T12246] __x64_sys_utimensat+0x11c/0x230 [ 391.295539][T12246] ? __pfx___x64_sys_utimensat+0x10/0x10 [ 391.295562][T12246] ? do_syscall_64+0xbe/0x3b0 [ 391.295587][T12246] do_syscall_64+0xfa/0x3b0 [ 391.295606][T12246] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.295626][T12246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.295643][T12246] ? clear_bhb_loop+0x60/0xb0 [ 391.295663][T12246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.295681][T12246] RIP: 0033:0x7f902c98e929 [ 391.295698][T12246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.295714][T12246] RSP: 002b:00007f902d8a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 391.295734][T12246] RAX: ffffffffffffffda RBX: 00007f902cbb5fa0 RCX: 00007f902c98e929 [ 391.295747][T12246] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 391.295758][T12246] RBP: 00007f902d8a9090 R08: 0000000000000000 R09: 0000000000000000 [ 391.295769][T12246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.295780][T12246] R13: 0000000000000000 R14: 00007f902cbb5fa0 R15: 00007ffd8dd304b8 [ 391.295808][T12246] [ 391.617473][T12250] overlayfs: failed to resolve './file1': -2 [ 391.737462][T12253] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2213'. [ 391.747855][T12253] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2213'. [ 391.760732][T12253] overlayfs: missing 'lowerdir' [ 391.812047][T12255] /dev/rnullb0: Can't open blockdev [ 391.865119][T12257] fuse: Bad value for 'user_id' [ 391.870758][T12257] fuse: Bad value for 'user_id' [ 392.358517][ T5883] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 392.364849][T12234] /dev/rnullb0: Can't open blockdev [ 392.375879][ T5904] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 392.399630][ T5904] usb 2-1: USB disconnect, device number 89 [ 392.520470][ T5883] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 392.530033][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.541702][ T5883] usb 4-1: config 0 descriptor?? [ 392.552307][ T5883] cp210x 4-1:0.0: cp210x converter detected [ 392.751214][ T5883] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 392.759127][ T5883] cp210x 4-1:0.0: querying part number failed [ 392.768075][ T5883] usb 4-1: cp210x converter now attached to ttyUSB0 [ 392.898412][ T5904] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 392.927119][T12265] netlink: 'syz.1.2218': attribute type 17 has an invalid length. [ 392.935206][T12265] netlink: 'syz.1.2218': attribute type 16 has an invalid length. [ 392.945133][T12265] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2218'. [ 392.963847][T12260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2216'. [ 392.975196][ T5925] usb 4-1: USB disconnect, device number 101 [ 392.991754][ T5925] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 393.009024][ T5925] cp210x 4-1:0.0: device disconnected [ 393.048526][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 393.061344][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.079114][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.098657][ T5904] usb 3-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 393.107974][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.122974][ T5904] usb 3-1: config 0 descriptor?? [ 393.232493][T12271] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2220'. [ 393.353180][T12273] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 393.361896][T12273] /dev/rnullb0: Can't open blockdev [ 393.567724][ T5904] kye 0003:0458:5017.0014: control desc unexpectedly large [ 393.592800][ T5904] kye 0003:0458:5017.0014: control desc unexpectedly large [ 393.619802][ T5904] input: HID 0458:5017 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5017.0014/input/input48 [ 393.725374][T12280] fuse: Bad value for 'user_id' [ 393.747709][T12280] fuse: Bad value for 'user_id' [ 393.773100][ T5904] kye 0003:0458:5017.0014: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5017] on usb-dummy_hcd.2-1/input0 [ 393.812598][ T5904] usb 3-1: USB disconnect, device number 105 [ 393.901372][T12281] fido_id[12281]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 394.034743][T12285] /dev/rnullb0: Can't open blockdev [ 394.744290][T12307] loop3: detected capacity change from 0 to 1 [ 394.755851][T12307] Dev loop3: unable to read RDB block 1 [ 394.761678][T12307] loop3: AHDI p1 p2 [ 394.769385][T12307] loop3: partition table partially beyond EOD, truncated [ 394.811011][T12301] input: syz0 as /devices/virtual/input/input49 [ 394.918416][ T5904] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 395.108530][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 395.136492][ T5904] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 395.181696][ T5904] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 395.221395][ T5904] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 395.245980][ T5904] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 395.315052][ T5904] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.345248][ T5904] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 395.375874][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.626982][ T5904] usb 3-1: usb_control_msg returned -32 [ 395.647436][ T5904] usbtmc 3-1:16.0: can't read capabilities [ 395.711259][ T5925] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 395.892322][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 395.902708][ T5925] usb 4-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 395.914846][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.958448][ T5925] usb 4-1: config 0 descriptor?? [ 395.974085][ T5925] usblcd 4-1:0.0: USBLCD model not supported. [ 396.016230][T12335] usbtmc 3-1:16.0: stb usb_control_msg returned -32 [ 396.309039][T12346] 9pnet_fd: Insufficient options for proto=fd [ 396.410986][T12335] /dev/rnullb0: Can't open blockdev [ 396.433329][ T5917] usb 4-1: USB disconnect, device number 102 [ 396.692946][T12353] overlayfs: failed to verify upper (572/file0, ino=3193, err=-116) [ 396.717191][T12353] overlayfs: failed to verify index dir 'upper' xattr [ 396.735146][T12353] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 396.924509][T12362] FAULT_INJECTION: forcing a failure. [ 396.924509][T12362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.938123][T12362] CPU: 0 UID: 0 PID: 12362 Comm: syz.0.2244 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 396.938152][T12362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 396.938164][T12362] Call Trace: [ 396.938173][T12362] [ 396.938181][T12362] dump_stack_lvl+0x189/0x250 [ 396.938211][T12362] ? __pfx____ratelimit+0x10/0x10 [ 396.938235][T12362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.938259][T12362] ? __pfx__printk+0x10/0x10 [ 396.938295][T12362] should_fail_ex+0x414/0x560 [ 396.938325][T12362] _copy_to_user+0x31/0xb0 [ 396.938343][T12362] simple_read_from_buffer+0xe1/0x170 [ 396.938368][T12362] proc_fail_nth_read+0x1df/0x250 [ 396.938386][T12362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.938406][T12362] ? rw_verify_area+0x258/0x650 [ 396.938424][T12362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.938442][T12362] vfs_read+0x200/0x980 [ 396.938462][T12362] ? __pfx___mutex_lock+0x10/0x10 [ 396.938483][T12362] ? __pfx_vfs_read+0x10/0x10 [ 396.938503][T12362] ? __fget_files+0x2a/0x420 [ 396.938528][T12362] ? __fget_files+0x3a0/0x420 [ 396.938547][T12362] ? __fget_files+0x2a/0x420 [ 396.938578][T12362] ksys_read+0x145/0x250 [ 396.938597][T12362] ? __fget_files+0x3a0/0x420 [ 396.938620][T12362] ? __pfx_ksys_read+0x10/0x10 [ 396.938645][T12362] ? do_syscall_64+0xbe/0x3b0 [ 396.938668][T12362] do_syscall_64+0xfa/0x3b0 [ 396.938687][T12362] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.938706][T12362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.938723][T12362] ? clear_bhb_loop+0x60/0xb0 [ 396.938745][T12362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.938761][T12362] RIP: 0033:0x7fc726b8d33c [ 396.938779][T12362] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 396.938804][T12362] RSP: 002b:00007fc727a19030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 396.938825][T12362] RAX: ffffffffffffffda RBX: 00007fc726db5fa0 RCX: 00007fc726b8d33c [ 396.938839][T12362] RDX: 000000000000000f RSI: 00007fc727a190a0 RDI: 0000000000000008 [ 396.938851][T12362] RBP: 00007fc727a19090 R08: 0000000000000000 R09: 0000000000000000 [ 396.938862][T12362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 396.938873][T12362] R13: 0000000000000000 R14: 00007fc726db5fa0 R15: 00007ffcb7947708 [ 396.938903][T12362] [ 397.771326][ T5905] usb 3-1: USB disconnect, device number 106 [ 397.810246][ T43] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 397.948667][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2252'. [ 397.988734][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 398.013538][ T43] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 398.037018][ T43] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 398.060201][ T43] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 398.076778][ T43] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 398.107465][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 398.119983][ T43] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 398.132201][ T43] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 398.158411][ T43] usb 4-1: Product: syz [ 398.159112][T12389] /dev/rnullb0: Can't open blockdev [ 398.162887][ T43] usb 4-1: Manufacturer: syz [ 398.183599][ T43] usb 4-1: SerialNumber: syz [ 398.206816][ T43] usb 4-1: config 0 descriptor?? [ 398.217567][ T43] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 398.231562][ T43] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 398.288171][T12392] netlink: 'syz.0.2255': attribute type 10 has an invalid length. [ 398.371084][T12394] /dev/rnullb0: Can't open blockdev [ 398.537658][ T5925] usb 4-1: USB disconnect, device number 103 [ 398.543845][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 398.555682][ T5925] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 398.645666][T12408] kvm: pic: level sensitive irq not supported [ 398.646069][T12408] FAULT_INJECTION: forcing a failure. [ 398.646069][T12408] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 398.649805][T12414] /dev/rnullb0: Can't open blockdev [ 398.652525][T12408] CPU: 0 UID: 0 PID: 12408 Comm: syz.0.2260 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 398.652550][T12408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.652562][T12408] Call Trace: [ 398.652571][T12408] [ 398.652579][T12408] dump_stack_lvl+0x189/0x250 [ 398.652613][T12408] ? __pfx____ratelimit+0x10/0x10 [ 398.652637][T12408] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.652655][T12408] ? __pfx__printk+0x10/0x10 [ 398.652677][T12408] ? fs_reclaim_acquire+0x7d/0x100 [ 398.652708][T12408] should_fail_ex+0x414/0x560 [ 398.652741][T12408] prepare_alloc_pages+0x213/0x610 [ 398.652770][T12408] __alloc_frozen_pages_noprof+0x123/0x370 [ 398.652796][T12408] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 398.652828][T12408] ? policy_nodemask+0x27c/0x720 [ 398.652846][T12408] ? __lock_acquire+0xab9/0xd20 [ 398.652876][T12408] alloc_pages_mpol+0x232/0x4a0 [ 398.652901][T12408] vma_alloc_folio_noprof+0xe4/0x200 [ 398.652924][T12408] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 398.652955][T12408] folio_prealloc+0x30/0x180 [ 398.652977][T12408] __handle_mm_fault+0x2ab9/0x5440 [ 398.653012][T12408] ? __pfx___handle_mm_fault+0x10/0x10 [ 398.653047][T12408] ? follow_page_pte+0x7ef/0x13e0 [ 398.653073][T12408] handle_mm_fault+0x40a/0x8e0 [ 398.653102][T12408] __get_user_pages+0x1699/0x2ce0 [ 398.653116][T12408] ? __lock_acquire+0xab9/0xd20 [ 398.653175][T12408] get_user_pages_unlocked+0x1e3/0x720 [ 398.653204][T12408] hva_to_pfn+0x313/0xc90 [ 398.653238][T12408] ? __pfx_hva_to_pfn+0x10/0x10 [ 398.653263][T12408] ? xas_start+0x390/0x770 [ 398.653285][T12408] ? xa_load+0x60/0x210 [ 398.653314][T12408] ? kvm_follow_pfn+0x21a/0x3c0 [ 398.653336][T12408] __kvm_faultin_pfn+0xaa/0x100 [ 398.653361][T12408] kvm_mmu_faultin_pfn+0x765/0x1d10 [ 398.653395][T12408] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 398.653412][T12408] ? __pfx_fast_page_fault+0x10/0x10 [ 398.653428][T12408] ? __kvm_mmu_topup_memory_cache+0x31a/0x610 [ 398.653458][T12408] kvm_tdp_page_fault+0x273/0x370 [ 398.653481][T12408] kvm_mmu_do_page_fault+0x2c5/0x640 [ 398.653500][T12408] ? vmx_vcpu_run+0xe91/0x2900 [ 398.653522][T12408] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 398.653555][T12408] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 398.653571][T12408] ? __pfx_current_save_fsgs+0x10/0x10 [ 398.653602][T12408] kvm_mmu_page_fault+0x22f/0xb70 [ 398.653628][T12408] ? __pfx_handle_ept_violation+0x10/0x10 [ 398.653648][T12408] vmx_handle_exit+0x1093/0x18a0 [ 398.653666][T12408] ? vcpu_run+0x35f2/0x6fa0 [ 398.653701][T12408] vcpu_run+0x434f/0x6fa0 [ 398.653740][T12408] ? vcpu_run+0x35f2/0x6fa0 [ 398.653808][T12408] ? __pfx_vcpu_run+0x10/0x10 [ 398.653834][T12408] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 398.653861][T12408] ? rcu_is_watching+0x15/0xb0 [ 398.653883][T12408] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 398.653914][T12408] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 398.653933][T12408] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 398.653962][T12408] ? rcu_is_watching+0x15/0xb0 [ 398.653978][T12408] ? trace_contention_end+0x39/0x120 [ 398.653996][T12408] ? __mutex_lock+0x330/0xe80 [ 398.654021][T12408] ? kasan_quarantine_put+0xdd/0x220 [ 398.654042][T12408] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 398.654064][T12408] ? __pfx___mutex_lock+0x10/0x10 [ 398.654085][T12408] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 398.654115][T12408] ? do_vfs_ioctl+0xf1c/0x1430 [ 398.654136][T12408] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 398.654158][T12408] kvm_vcpu_ioctl+0x95c/0xe90 [ 398.654183][T12408] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 398.654200][T12408] ? __lock_acquire+0xab9/0xd20 [ 398.654243][T12408] ? __fget_files+0x2a/0x420 [ 398.654268][T12408] ? __fget_files+0x2a/0x420 [ 398.654287][T12408] ? __fget_files+0x3a0/0x420 [ 398.654306][T12408] ? __fget_files+0x2a/0x420 [ 398.654330][T12408] ? bpf_lsm_file_ioctl+0x9/0x20 [ 398.654346][T12408] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 398.654365][T12408] __se_sys_ioctl+0xf9/0x170 [ 398.654385][T12408] do_syscall_64+0xfa/0x3b0 [ 398.654405][T12408] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.654425][T12408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.654441][T12408] ? clear_bhb_loop+0x60/0xb0 [ 398.654461][T12408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.654477][T12408] RIP: 0033:0x7fc726b8e929 [ 398.654494][T12408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.654510][T12408] RSP: 002b:00007fc727a19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 398.654529][T12408] RAX: ffffffffffffffda RBX: 00007fc726db5fa0 RCX: 00007fc726b8e929 [ 398.654541][T12408] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 398.654552][T12408] RBP: 00007fc727a19090 R08: 0000000000000000 R09: 0000000000000000 [ 398.654563][T12408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.654573][T12408] R13: 0000000000000000 R14: 00007fc726db5fa0 R15: 00007ffcb7947708 [ 398.654606][T12408] [ 398.654908][T12408] kvm: pic: level sensitive irq not supported [ 399.161245][T12408] kvm: pic: level sensitive irq not supported [ 399.167983][T12408] kvm: pic: level sensitive irq not supported [ 399.174436][T12408] kvm: pic: level sensitive irq not supported [ 399.219733][ T5904] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 399.378406][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 399.386746][ T5904] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 399.397786][ T5904] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 399.410712][ T5904] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 399.421069][ T5904] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 399.433868][ T5904] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.452646][ T5904] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 399.462254][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.697633][ T5904] usb 2-1: usb_control_msg returned -32 [ 399.706169][ T5904] usbtmc 2-1:16.0: can't read capabilities [ 400.075263][T12423] usbtmc 2-1:16.0: stb usb_control_msg returned -32 [ 400.356338][T11846] [ 400.358820][T11846] ============================================ [ 400.364981][T11846] WARNING: possible recursive locking detected [ 400.371785][T11846] 6.16.0-rc4-next-20250702-syzkaller #0 Not tainted [ 400.378918][T11846] -------------------------------------------- [ 400.385113][T11846] syz.2.2083/11846 is trying to acquire lock: [ 400.391453][T11846] ffff888069ba48c8 (&sb->s_type->i_mutex_key#29){+.+.}-{4:4}, at: rpc_close_pipes+0x10a/0x730 [ 400.401920][T11846] [ 400.401920][T11846] but task is already holding lock: [ 400.409536][T11846] ffff888069ba11c8 (&sb->s_type->i_mutex_key#29){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 400.420761][T11846] [ 400.420761][T11846] other info that might help us debug this: [ 400.428808][T11846] Possible unsafe locking scenario: [ 400.428808][T11846] [ 400.436243][T11846] CPU0 [ 400.439510][T11846] ---- [ 400.442773][T11846] lock(&sb->s_type->i_mutex_key#29); [ 400.448231][T11846] lock(&sb->s_type->i_mutex_key#29); [ 400.453692][T11846] [ 400.453692][T11846] *** DEADLOCK *** [ 400.453692][T11846] [ 400.461822][T11846] May be due to missing lock nesting notation [ 400.461822][T11846] [ 400.470126][T11846] 4 locks held by syz.2.2083/11846: [ 400.475310][T11846] #0: ffff88807f7720e0 (&type->s_umount_key#106){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 400.485594][T11846] #1: ffff888032a4b0a0 (&sn->pipefs_sb_lock){+.+.}-{4:4}, at: rpc_kill_sb+0x77/0x190 [ 400.495246][T11846] #2: ffffffff8f8e2df0 ((rpc_pipefs_notifier_list).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 400.507329][T11846] #3: ffff888069ba11c8 (&sb->s_type->i_mutex_key#29){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 400.519078][T11846] [ 400.519078][T11846] stack backtrace: [ 400.524961][T11846] CPU: 1 UID: 0 PID: 11846 Comm: syz.2.2083 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 400.524979][T11846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 400.524989][T11846] Call Trace: [ 400.525000][T11846] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 400.525008][T11846] dump_stack_lvl+0x189/0x250 [ 400.525029][T11846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.525042][T11846] ? __pfx__printk+0x10/0x10 [ 400.525058][T11846] ? print_lock_name+0xde/0x100 [ 400.525073][T11846] print_deadlock_bug+0x28b/0x2a0 [ 400.525089][T11846] validate_chain+0x1a3f/0x2140 [ 400.525109][T11846] __lock_acquire+0xab9/0xd20 [ 400.525130][T11846] ? rpc_close_pipes+0x10a/0x730 [ 400.525143][T11846] lock_acquire+0x120/0x360 [ 400.525159][T11846] ? rpc_close_pipes+0x10a/0x730 [ 400.525175][T11846] down_write+0x96/0x1f0 [ 400.525193][T11846] ? rpc_close_pipes+0x10a/0x730 [ 400.525204][T11846] ? __pfx_down_write+0x10/0x10 [ 400.525220][T11846] ? __pfx_find_submount+0x10/0x10 [ 400.525233][T11846] ? _raw_spin_unlock+0x28/0x50 [ 400.525246][T11846] ? d_walk+0x6f4/0x780 [ 400.525264][T11846] rpc_close_pipes+0x10a/0x730 [ 400.525277][T11846] ? d_invalidate+0x204/0x260 [ 400.525288][T11846] ? __pfx_rpc_close_pipes+0x10/0x10 [ 400.525301][T11846] ? up_write+0x1c4/0x420 [ 400.525314][T11846] ? __pfx_rpc_close_pipes+0x10/0x10 [ 400.525327][T11846] __simple_recursive_removal+0x208/0x510 [ 400.525343][T11846] ? __pfx_rpc_close_pipes+0x10/0x10 [ 400.525356][T11846] rpc_unlink+0x56/0x80 [ 400.525373][T11846] rpc_pipefs_event+0xc0/0x170 [ 400.525393][T11846] notifier_call_chain+0x1b3/0x3e0 [ 400.525410][T11846] blocking_notifier_call_chain+0x6a/0x90 [ 400.525424][T11846] rpc_kill_sb+0xd0/0x190 [ 400.525439][T11846] deactivate_locked_super+0xb9/0x130 [ 400.525454][T11846] cleanup_mnt+0x425/0x4c0 [ 400.525468][T11846] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.525484][T11846] task_work_run+0x1d1/0x260 [ 400.525501][T11846] ? __pfx_task_work_run+0x10/0x10 [ 400.525517][T11846] ? kmem_cache_free+0x18f/0x400 [ 400.525533][T11846] do_exit+0x6b5/0x2300 [ 400.525551][T11846] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 400.525566][T11846] ? do_raw_spin_lock+0x121/0x290 [ 400.525581][T11846] ? __pfx_do_exit+0x10/0x10 [ 400.525600][T11846] do_group_exit+0x21c/0x2d0 [ 400.525615][T11846] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.525631][T11846] get_signal+0x1286/0x1340 [ 400.525657][T11846] arch_do_signal_or_restart+0x9a/0x750 [ 400.525676][T11846] ? __pfx_get_timespec64+0x10/0x10 [ 400.525695][T11846] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 400.525716][T11846] ? exit_to_user_mode_loop+0x40/0x110 [ 400.525735][T11846] exit_to_user_mode_loop+0x75/0x110 [ 400.525753][T11846] do_syscall_64+0x2bd/0x3b0 [ 400.525769][T11846] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.525784][T11846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.525797][T11846] ? clear_bhb_loop+0x60/0xb0 [ 400.525812][T11846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.525825][T11846] RIP: 0033:0x7f902c9c11e5 [ 400.525838][T11846] Code: Unable to access opcode bytes at 0x7f902c9c11bb. [ 400.525845][T11846] RSP: 002b:00007f902d8a8f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 400.525860][T11846] RAX: fffffffffffffdfc RBX: 00007f902cbb5fa0 RCX: 00007f902c9c11e5 [ 400.525870][T11846] RDX: 00007f902d8a8fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 400.525879][T11846] RBP: 00007f902ca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 400.525888][T11846] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 400.525896][T11846] R13: 0000000000000000 R14: 00007f902cbb5fa0 R15: 00007ffd8dd304b8 [ 400.525910][T11846] [ 400.559363][T12423] /dev/rnullb0: Can't open blockdev [ 400.563718][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.880335][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.338459][ T8066] vivid-000: reconnect [ 401.368641][ T5925] usb 2-1: USB disconnect, device number 90 [ 401.776682][ T3498] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.866622][ T3498] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.953804][ T3498] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.022632][ T3498] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.121035][ T3498] dummy0: left allmulticast mode [ 402.126073][ T3498] dummy0: left promiscuous mode [ 402.133604][ T3498] bridge0: port 3(dummy0) entered disabled state [ 402.143584][ T3498] bridge_slave_1: left allmulticast mode [ 402.149600][ T3498] bridge_slave_1: left promiscuous mode [ 402.155547][ T3498] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.164621][ T3498] bridge_slave_0: left allmulticast mode [ 402.171003][ T3498] bridge_slave_0: left promiscuous mode [ 402.176877][ T3498] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.295022][ T3498] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 402.304338][ T3498] bridge0 (unregistering): left promiscuous mode [ 402.313191][ T3498] bridge0 (unregistering): left allmulticast mode [ 402.555532][ T3498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.564964][ T3498] bond_slave_0: left promiscuous mode [ 402.570641][ T3498] bond_slave_0: left allmulticast mode [ 402.577287][ T3498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.586763][ T3498] bond_slave_1: left promiscuous mode [ 402.592350][ T3498] bond_slave_1: left allmulticast mode [ 402.599407][ T3498] bond0 (unregistering): Released all slaves [ 402.663441][ T3498] tipc: Disabling bearer [ 402.668936][ T3498] tipc: Left network mode [ 402.891543][ T3498] hsr_slave_0: left promiscuous mode [ 402.897820][ T3498] hsr_slave_1: left promiscuous mode [ 402.907800][ T3498] veth1_macvtap: left promiscuous mode [ 402.915858][ T3498] veth0_macvtap: left promiscuous mode [ 402.921547][ T3498] veth1_vlan: left promiscuous mode [ 402.926823][ T3498] veth0_vlan: left promiscuous mode [ 402.964676][ T3498] pimreg (unregistering): left allmulticast mode [ 403.099956][ T3498] team0 (unregistering): Port device team_slave_1 removed [ 403.133289][ T3498] team0 (unregistering): Port device team_slave_0 removed [ 403.451219][ T3498] IPVS: stop unused estimator thread 0... [ 403.514434][ T3498] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.553978][ T3498] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.616845][ T3498] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.676901][ T3498] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.779415][ T3498] bridge_slave_1: left allmulticast mode [ 403.785212][ T3498] bridge_slave_1: left promiscuous mode [ 403.797174][ T3498] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.806306][ T3498] bridge_slave_0: left allmulticast mode [ 403.812938][ T3498] bridge_slave_0: left promiscuous mode [ 403.819021][ T3498] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.910904][ T3498] team0: Port device geneve1 removed [ 403.973204][ T3498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.984495][ T3498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.994442][ T3498] bond0 (unregistering): Released all slaves [ 404.050309][ T3498] tipc: Disabling bearer [ 404.063218][ T3498] tipc: Left network mode [ 404.235820][ T3498] hsr_slave_0: left promiscuous mode [ 404.242801][ T3498] hsr_slave_1: left promiscuous mode [ 404.252833][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.261269][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.269570][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.277025][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.289595][ T3498] veth1_macvtap: left promiscuous mode [ 404.295179][ T3498] veth0_macvtap: left promiscuous mode [ 404.301409][ T3498] veth1_vlan: left promiscuous mode [ 404.306692][ T3498] veth0_vlan: left promiscuous mode [ 404.499432][ T3498] team0 (unregistering): Port device team_slave_1 removed [ 404.527547][ T3498] team0 (unregistering): Port device C removed [ 404.870998][ T3498] IPVS: stop unused estimator thread 0...