last executing test programs: 7.12277511s ago: executing program 3 (id=481): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xf3, 0x61, 0xea, 0x8, 0x4cc, 0x8116, 0x4db9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0xb8, 0x0, 0x54, 0x4, 0x38, 0x6}}]}}]}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec6106000440000400000500070006"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x4000, 0x6000}}, "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", "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"}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x9}, @main=@item_4={0x3, 0x0, 0x8, "d83638a8"}]}}, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(r4, 0xc008aeb0, &(0x7f0000000040)={0x8, [0xffffffffffffff7f, 0x4, 0x101, 0x7ff, 0xff, 0x1ff, 0xf, 0x401]}) 6.510738586s ago: executing program 1 (id=484): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f0000000a00)={0x20, 0x30, 0x1e, "a6c2a85c0c41f3ecf77ec354f25b3a6bc8a7239ef5b85d2fa92558d49ec7"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0xf8}, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0xa, 0x26, {0x26, 0x5, "f74c5bee19e6e33e23ea9aea7861528d76d31213e3be25752c7aa453d211229be2478696"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000100)={0x20, 0x1, 0x8b, "955096b1e600d45a3bd7212aad308cbfa2b1c4a23563354f1ea2b08ba489721e786b05dd738261dd4f6268ba47a2a81c84fcc639895c47ba628117b0c632548b414824a89f6e6897949e41d2408dfe4163a6c1d3d4cc87ec642b19019137ba3da865c07ab78cbbcd1dc6d458671e1842572239d34ae60d44096b41bc0a55252b0c711fe573909a8e7daa67"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x8}}) 4.816527921s ago: executing program 2 (id=491): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) connect(r0, &(0x7f0000000040)=@ethernet={0x0, @local}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.766228241s ago: executing program 2 (id=492): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf251000"], 0x2c}, 0x1, 0x0, 0x0, 0x48854}, 0x24000040) (async) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) (async) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0xd, 0xfff5, 0xfffffff8, 0x5, 0x10, 0x6, 0x51}, &(0x7f0000000440)=0x9c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000540)={r6, 0x2, 0x5a, "cf596bfaec19b011f77c043169fe49c9d513a2c84f59c1ebf919330d0bc85cec8a143778394ff41de12971180d32eb4b62bba9cd8867036dc14d53255423fcacbbe3d6eddc5d1baf37ec9bc6a62d44b8379cba08880fb4061731"}, 0x62) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000400004803c0001800c0000e57061796c6f6164002c00028008000440000000c60800024000000000080005400000000008000340000000000800064000000001140000001100010000000000000000000000000a"], 0x94}}, 0x24008000) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x40000005, 0x9, 0xfffffffd, 0x4, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddc6aae07ef35f17bf01933bdb6fd7ecdd0256395cd541", "07a9310900000010fe1406584af98d74b8830793b848194e1df82d00", [0x6, 0x9]}) 4.626304558s ago: executing program 2 (id=493): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, 0x0, 0x1, 0xd, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x4048800}, 0x20008800) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000200)) io_setup(0xdb1, &(0x7f0000000240)=0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = eventfd2(0x1, 0x1) io_cancel(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x2, r5, &(0x7f00000002c0), 0x0, 0xfffffffffffffff7, 0x0, 0x2, r6}, &(0x7f0000000340)) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x181641, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x4, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x50}, 0x1, 0x0, 0x0, 0x10004004}, 0xc000) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) io_setup(0x68, &(0x7f0000000500)) sendto$packet(r4, &(0x7f0000000540)="b97a0685bfe14b94493bdf20fee3bc596134ddde174e86e85c409c6e15ad6b2d8badf71af76d60f23b86febdb8799e28a8118283726b70dcf1cd2d97ab5499183955f8ae3007ba8dbabb2e2db1edaf7ca5208efbeaca35c8fccf69b3b0d0b717b3c7cbc6bacc3e40ff2825754b1cbc1ca015838f8f", 0x75, 0x80, &(0x7f00000005c0)={0x11, 0x9, r1, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x14) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r4) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r8, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffffffff, 0x69}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r8, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8000, 0x57}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8163}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4048000) ioctl$KDGKBMODE(r7, 0x4b44, &(0x7f0000000880)) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x94, 0x0, 0x7, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x401}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x100}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc62}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1000}]}, @NFACCT_FLAGS={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x84}, 0x4) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x44, r10, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x18}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xb}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004800}, 0x20008001) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000c00), &(0x7f0000000c40), 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000c80)={{{@in=@broadcast, @in6=@dev}}, {{@in=@empty}, 0x0, @in=@private}}, &(0x7f0000000d80)=0xe8) socket$tipc(0x1e, 0x5, 0x0) flock(r7, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000dc0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) 4.455445128s ago: executing program 2 (id=494): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) chdir(&(0x7f0000000140)='./bus\x00') mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) linkat(r0, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000180)='./bus\x00', 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x7) (fail_nth: 33) 4.167313303s ago: executing program 2 (id=495): syz_usb_connect(0x0, 0x508, &(0x7f0000000040)=ANY=[@ANYBLOB="120100abbf31305d031e18ff007579b810e96f2584f4b7f61003a045d7ff6da33f91f5af2db1f9b009c8d5058abdda48c98bcb253f60ff826d6baa1f1ecea6fa41d86f0b6861555f827a75eeb1c864c1f10e7f8b39be645feb1e446cae56a143c8"], 0x0) 3.985256075s ago: executing program 3 (id=496): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@local, @remote, 0x0}, &(0x7f0000000100)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @empty, @dev}, &(0x7f00000001c0)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xec, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x41}, 0x51) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x90, 0x4, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc53b}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'sit0\x00', r3, 0x7800, 0x40, 0x0, 0x1, {{0x9, 0x4, 0x3, 0x4, 0x24, 0x68, 0x0, 0x7, 0x4, 0x0, @private=0xa010100, @local, {[@lsrr={0x83, 0xf, 0xa6, [@multicast2, @rand_addr=0x64010102, @private=0xa010101]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xb4, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xb4}}, 0x20081) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'syztnl1\x00', r2, 0x29, 0x8, 0x8, 0x5, 0x4, @private1, @loopback, 0x700, 0x20, 0x7fff, 0x9}}) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) lsetxattr$trusted_overlay_upper(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), &(0x7f00000008c0)={0x0, 0xfb, 0xe1, 0x4, 0x9, "1209aefdffd56c5484b59892805f3b54", "32752f63e17d2da193341e24a8a446019672b82e91c9702c559b014bb19887afec4e2e51962b1fd5d060d8d37c274a67562aa9393847026f99d7a090b4473c8e9f44fadf6de38eb674192fa09c0968d73b229ff0d4983c98d52ffb0af59244390b0c0b50e779b55002e941939965af65002c74dbce029459da361a2dd3538e6585aa0950b13f54057ad86bf950b169fb1483b61a968e5e6edab6fb3c86d927afc3ae597bee82ef683a2f0408404b756a258a53f653035834ffd2d434d87efb916b41b5c0bd4ef7d3a6d69803"}, 0xe1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000a00)={'ip6gre0\x00', r2, 0x29, 0x3, 0x6, 0x12, 0x8, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8, 0x2, 0x1}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000e00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000ac0)={0x2c8, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x2c8}}, 0x4008814) r11 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffc000/0x2000)=nil) shmat(r11, &(0x7f0000ffb000/0x2000)=nil, 0x4000) fchmod(r8, 0x104) r12 = accept$inet(r0, &(0x7f0000000e40)={0x2, 0x0, @remote}, &(0x7f0000000e80)=0x10) setsockopt$IP_VS_SO_SET_DEL(r12, 0x0, 0x484, &(0x7f0000000ec0)={0x84, @local, 0x4e24, 0x4, 'ovf\x00', 0x3, 0x8, 0x1e}, 0x2c) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000f00)={0x1d, @remote, 0x4e22, 0x1, 'lc\x00', 0xc, 0x7ff8000, 0x44}, 0x2c) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001140)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={&(0x7f0000000f80)={0x17c, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x11c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.-}%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'trusted.overlay.upper\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xbb, 0x4, "6709711d78c68970f86c4b970893bb04b17945db2fff12c05692c182777ab28df04c54a7cd026a5a24277b21d0c08fc7711fb58a6ad7a44554ebcab5150058a764abd2730a31e4df7c7b3be139b8a99b822467a6c8f2dd12a7b7fd707b5c5373521c6a170fcbf7127934c7b46a06872cc287cf8f5f3014722a0b4d5df67163902bbab6504fb91d1a9116156545c6d1afb69e6496bde8d947d67d01513231c3710f2dae497a4c2cf2063251892653599fc5987ba9e200d9"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0xc801}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)) socket(0x6715d49739dca173, 0x4, 0x3) r13 = syz_clone(0x40880000, &(0x7f00000011c0)="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", 0x1000, &(0x7f00000021c0), &(0x7f0000002200), &(0x7f0000002240)="ceb1593868f08b8ce2aaf28a956014ca0c8d9e9befada08c8b4fb8615f329f5010cbcd02fe09c8fd6c91606f0edaae18cee6ae7b15de4d7d8b8cba1021447bb2") move_pages(r13, 0x2, &(0x7f0000002280)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil], 0x0, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000002340)=""/221, 0xdd) 3.702210593s ago: executing program 3 (id=497): brk(0x5) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x400, 0x40) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, @null, @bpq0, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)) brk(0x1aac000000000000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000500)={r1, 0x4e4, 0x58cc}) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000900)={0xb, 0xad0, 0xb, 0x7252}, 0x8) r3 = accept4$rose(r0, &(0x7f0000000940)=@short={0xb, @remote, @bcast}, &(0x7f0000000980)=0x1c, 0x80000) sendto$inet(r0, &(0x7f00000009c0)="17458276c380eae53d34377cfc016e891edb30fc21f49f5470b4d539de1e", 0x1e, 0x0, &(0x7f0000000a00)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000a40)={0x0, 0x1, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x4, 0x7}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000a80)=r4) r6 = syz_usb_connect(0x3, 0x561, &(0x7f0000000ac0)={{0x12, 0x1, 0x110, 0x72, 0xc0, 0xa, 0x7f, 0x413c, 0x81d7, 0x18fb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54f, 0x2, 0x1, 0x7, 0x90, 0xe, [{{0x9, 0x4, 0x1, 0x0, 0x9, 0x9e, 0xd6, 0x76, 0x0, [], [{{0x9, 0x5, 0x3, 0x10, 0x20, 0x4, 0xfd, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x6}]}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0x7, 0x38, 0x31, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xfb, 0x5}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x8, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x10, 0x8001}, @generic={0x50, 0x4, "891f30f0e38778c2de680b74d9c9e8748d6844c8273d4026cb3fdf0cf4447ab5a6d0eddfbe133dded65160d2887e8d7cf1a994d2eb9a14af9b2f778b7d786993b132437162178d2e33011c421c3a"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x40, 0xbf, 0xee}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x8, 0x7, 0x3, [@generic={0x72, 0x21, "0b489dc2a4c0f6611925581933dca8ca60ef182a8488a13d8421280f2428d6ab0d83d979585cd012c3d7b140ab5f14d360b33d2503dc597ccce6373670276289d064bd712a2282fcca6ffb6a1e07b8e5e3beb1a498df8ab8fd5327bf26cca08bb32f8d392b0e9b648545d0740b904ab9"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x200, 0x8, 0x7f, 0xd4, [@generic={0x7a, 0x6, "95f7cd114b2223bf75b57f2812e529d355099610c91bcaa13849450991e739a4b583ec5e7e1257334216cd34f79654b3c9ff7e8529e28c610d4dc647702e6aa4f059a11ff3b8372fd38f4a911ebd5a500d826c8a262714af27f51d2355c3b95f995ff4b026eb42c798a36792fbe4bc9af87997f8d7060261"}, @generic={0x93, 0x9, "6b1f2fc37473170471b8fadc9ead73c5585f08bcc866adbd1a29ae11ba8b9c6fe1544498b151fe8d46b6dac82dbe5979c21ef469d31fae52c06d890542ab56ae4bc0217e31468dfefa84d67c82ef45b4adc5cbabcf9b9dfaf1ab75945013d0a126aeb6a34b8f932b2dfeb3a28423bc92700f5c11fc10df7acf82d86ada70a228cbf6bc5a60370b58fb0251e9288026d634"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x4, 0x2, 0x1, [@generic={0x77, 0xa, "aacbbb99812ce7fdb1e5795f3871dcd0982ee4d3cd5caea6a22b189fb1f5405dcd0e358f6b3ca363ac5b4ad5ab035efb4ac92c7ab43af340bd69483b8926b4da59791eb643dab892ae576024ec9abdb18b02a15bff7384492e5d3827a6373da4e758318a3299e835f9991ab8d328a42575008426f9"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x7, 0x0, 0x2}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x1, 0x9, 0xc1, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x2, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x3}]}}]}}, {{0x9, 0x4, 0xcf, 0x8, 0xc, 0xb3, 0xcb, 0xbf, 0x18, [@generic={0xf1, 0x23, "c4a3cbcd6e96f6b711f780fc795e66950600f2b4c7100fdc4cf2f35dd18ad80f01a298cce4a350a6726664a2721e9ab026a1c5f59ce82750deeb702231992fe51251fb930d7d93d6a6c3297ecd415811c44947b2a396c7554e0b308facb89159cab31b3eaafc11e7653ea1f143a9f50ebe0d6f2b8126873370247b5c7d69f19d3e464ce2b01ddcafce9c01acb3b7e43e1eee977cfe00e42a69ef2b86992ecc44ba36d4714fbaee4eeb21a0a183740871cb2d5ea71253819dd9ef7fad74840a394d81b6d224df541881a91bc98b253923e9b8e156af62f7864174665e94e87efae686cd46f271e2ca5096e75c67ffe1"}], [{{0x9, 0x5, 0x3, 0x1, 0x3ff, 0x45, 0xa0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0x32}]}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x1c00}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x4, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x8001}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x7}]}}, {{0x9, 0x5, 0x2, 0x1, 0x8, 0x4, 0xb, 0xc4, [@generic={0xbb, 0x23, "4bae236ddfda38780950f68ced38019a37959f9361131e3deb4b70157badf11473aed7b1161a6c3e8af63f4af1d5b601f3413f134d6cb7199349d0c3a8e90d01ed3b9d06af4326fd007d4ee0e50d132284c63a28bde8a2e0542e78b7345478536bb7113123ae98f138ed7d828e2060c0af6a4ec826ee7a49baf279ad41a05ca1d39a667acf7c0e137452e4716d7285093e65267a2079e2bb828e2e1e4693c6785425debd523140ba396c28318111f8fdd0a02f02987e25af81"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x400, 0xff, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x40}]}}, {{0x9, 0x5, 0xa, 0x4, 0x8, 0x3, 0xa1, 0x1}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x4, 0x81, 0xfa}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0x6a, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x7}]}}, {{0x9, 0x5, 0xb, 0x3, 0x400, 0x1, 0x7, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x26a}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x6}]}}, {{0x9, 0x5, 0x8, 0x4, 0x8, 0xf6, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0xfff9}]}}, {{0x9, 0x5, 0x80, 0x2, 0x640, 0x5, 0xd0, 0x54}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0xd8, 0x0, 0x9}}]}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x110, 0x1, 0x2, 0x7, 0x20, 0x8}, 0xeb, &(0x7f0000001080)={0x5, 0xf, 0xeb, 0x2, [@generic={0xdc, 0x10, 0x2, "9a5836c104bf9d31152f81c69bb6cd9e9498e1cedb1aa940e5e5e99b543aeff21ea97e97fc02d3dcccc36f66e14cd3c820cc6a17cb2c9c1112c77420502f39cadd0b5ac3e5904f8aa1f4add5bca072a3ab4334c75ebdd3515ab3a2cff435abcdab9c2d3716c9838c07b6e14427b4552603a4046536b5e890c001c55a70b75889ad58b63c637947ec138c199d7a52ee8f200146d0bcfce2f8428f6842f431a7a2e2f2cb323baf1bfc929c50034cce7fc7b414ea2016ab6cfa664244ff7e44cd76e252a0aca6cc8779603dd6248f2c2fdd446f17148b18734ce5"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x81, 0xb5, 0x7}]}}) statx(r0, &(0x7f0000001640)='./file0\x00', 0x4000, 0x800, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001e00)='./file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000001f00)=[{{&(0x7f00000011c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001240)="9d68a55c297b884201dc7ac28406e4ed00f10e95cd1af430c02c2f6e4f7d4f9c1b3df588", 0x24}], 0x1, &(0x7f00000012c0)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r3, r3, r0]}}], 0x28, 0x40448d5}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001300)="38ee391b028991925a8c8de73c820970b54b7f05590e", 0x16}, {&(0x7f0000001340)="3928994ec155d743499ea6112a6015f43e71b00386470dc6c1069442", 0x1c}, {&(0x7f0000001380)="5f58cd849f32f8b1aae95ec810da8924dbf9475ed5794b9ff3ec637caeca615e029b00e688e41cb4b2fe65aa68e1b4af0defa6e0cd4c60c5fb40a09b6b69013da0f9f592d65e4d7b9a", 0x49}, {&(0x7f0000001400)="5071b1451975a23fc6038fecaebb51150346ab41f1cd637d778c30b24a75ad85d0c373dea14208910bf6cd9c49a0d5844346e4a3626e4e7f4f26087103c7e555fe0b970cd6775c5be82a3e4947f6c5bd6dc0de29310a2b5fe3d7a1644dd0cb2189e3bffdcad9d62e38d930e57a37b02d67204a1bdfb4168f6edc11d2c2bba3db", 0x80}, {&(0x7f0000001480)="ef7cfc58b2f4b5b09036055850e72f25a2a52101ad376cbcd44ec1a642eae95df62e11e6fe55ee33f982877e6505cffdb16fa8e041a4393214b962ee3eab0c55e350163a12ac53881eb44eeec3ffc5c21ae5ddbfa1ce8cd1d54c4ba3a0df28124e718fb49d60dad2acd4b344366764c3adf29c58e8d5fff302a8ee0cd3d61b84fdd03c49f9dea5dd1430aef5f197fbde", 0x90}, {&(0x7f0000001540)="b9a1bd0bd005cf005bfdbcd0ce24a22fa3870da4bb0ef7b98cc210e936c0c430b8bef7f5e277bdd5846fbe868a7d9ecceda65515b90ba1b4fc97d01fb935ed3ecc6b4f091e6d4ba5df61368bfe0c996f3a2b96eabc839f1296f0be", 0x5b}], 0x6, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r8}}}], 0x20, 0x4004000}}, {{&(0x7f00000017c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001840)="4439fdfaa1fbbdbb8fcc9c29a2ef746ac10ced6af04c90581ca672c4fb24d8fd8721cb51fdae4bb52f889a28035fb6b116f5735a5660c77ab8eb634c5c6f1c0db9c4af834ea42d64e4559ec1e82bd75687fe8e7606cb2020baa5f3b98e1b09aac4f2337c0ac81e2ed1bfa2152b6c29586d0c5d64f5a3c59843b06a11860a57bbdeb85e70f0d8c0c32a76945fc404a291531673354c098265d2aa907e926edef6cd299dbbe3a7e1cdf0d9fcedb2b7c69c06f84c9767b432d02a5e30d76d0ffcb09d933f055fe412fb914e377af86c570c0f4807950a4a8fde8190671e9f", 0xdd}, {&(0x7f0000001940)="96818ec39907f080512df4b421a6431e6d0434d0d0ae23b469e022c3e6e192824f0b781079a450fca980f5f2305e7557a000dcd98e568bac378b254e1e58a005a0c6653e51207233fe3ea71ffc68e0ac4b48c70d3be60c41e3416e987ef293af349d73d85f265d79e960cca5f095a130c61cb3ed2e5bfa11b5fa90b06d3cb4f50bd6ec5175cc8e3b0597", 0x8a}, {&(0x7f0000001a00)="1beddef61095d35c32db6c9f60744076063ed52d215193cb5a67728ae00853e686fd5a64ccc431470b5dbe9466c08d3d69e2b7c1020c64cd48e82d102e64313c9d3fe4c5cd849b78b375056f1f7c84fa5673d493bf850fa850eaf3955b17eecf63f1746d7217afc3e56f909a5e3cddcf0e2663aec3449f662904c4cbc05cd26da9a3e2d63c60eff9", 0x88}, {&(0x7f0000001ac0)="19c1681f4a0b62c6bd7f9b258fc2383fdcaf423bf3fb3585ecd027153ed1d230e6a3293c42cb6af579e00b1cd06001a4b7fa427f845ea72bcea7f2ad50a84094fb537b77c1b6871415fa8f9271f285138d79ef77fb1bc7667716aff7df3fef29584c224e087573e56ac41654e8ec1689dd512432a0e2a67502f840dd9e0525aae1785c60b8601874ffc2619281a8e70bf43988779f2cb755cba07ba8f393d41f5eee2c64c20393b71e135013d6757041133227a9b915c06ab54f781230ee69a3d303e7f34d454803d6f84a8e6396e147c51234a7f024afe0e0f0247ab26ee92ea3ff6c9df8261fd02ccce3078784a999062ebd00e2719f7a7921f991a9", 0xfd}, {&(0x7f0000001bc0)="6f5b3eef414c9f700b73f84497dbf2f6d616ae1ad711a869bf0a1702d9c293639d0d87b04aefacd2182cd586fa51cd637f1d1d22a99ad8793e817515675f3e82341e19e204f9e93ead5c6a8cb4412992c2f0079c1d04d4f41849ca5f4095a7eff4b03cd6588d9d1671ef26299b303b98a94e3f53ad7ecc13e5469da5ab73994e1502a0428b41e7463c683791fd103823e9899758c8990c64bcc6d09d798ee9cb4c63d2066a32dcebf23f79dace500cbd802a931dfa64335ad3d1007e6ed186253ca3e395e56d0acb40a2a1eedfbe296f3a3798700e3a", 0xd6}, {&(0x7f0000001cc0)="6ccca7c13f0381a73952aaad2ff9dc023283efd4", 0x14}, {&(0x7f0000001d00)="0eac535323f681839df0fd2b13e5423e00c7bbfb6ac428607c8586c7da92169f04d38d7a8d8030653e900e70f70ce06215539aa8714ae53c294419bf53c4b528beb4fb56133c641a4430db996c69e167c1bbfbec30d0fd873d8321dc3f6b240a4291f1878ba8dbbf7a0e4c64b1ba3f43532a10", 0x73}], 0x7, &(0x7f0000001ec0)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r9}}}], 0x20, 0x80}}], 0x3, 0x4084) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001fc0)={0x1, 0x2, @start={r2, 0x0, "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", "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"}, [0x8, 0x6, 0x6, 0x3, 0x800000, 0xfffffffffffffffe, 0xfffffffffffffff8, 0xc4, 0x1, 0x6, 0x8, 0xc966, 0x37e, 0x1, 0x101, 0x2, 0x7ff, 0x8, 0x8000000000000001, 0xffffffffffffff81, 0x1ff, 0x8, 0x4, 0x2c80000000000, 0xfffffffffffffff7, 0x7, 0x100, 0x6, 0x400, 0x200000000000, 0xfff, 0x1, 0x0, 0x4, 0xa4d8, 0x0, 0x3, 0x2fa6, 0xd8, 0xe4, 0x8, 0x1ff, 0x7fffffffffffffff, 0x5, 0x6, 0x1, 0x2, 0x7f, 0x5, 0x0, 0x8001, 0x4, 0x3, 0xfff, 0x3ff, 0x8001, 0x7, 0x1, 0x1, 0x5, 0xfff, 0xd, 0x9, 0x6416]}) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r7, 0x0) brk(0x80000001) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000002a80)={0x14, &(0x7f0000002a00)={0x0, 0x3, 0x32, {0x32, 0xa, "1600033950b7f4a648296768012dc569851790393bbd6dd966015441d755eae1fe4c30d409efa4c07e833b1403827675"}}, &(0x7f0000002a40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002d40)={0x44, &(0x7f0000002ac0)={0x20, 0x14, 0xae, "a03df660d6a55dfc27d7ca1d540e550ba187d06147036ee056b19b786a5e4fd08f110b9135d1e4f8875375ece550696c8c4cc7eaea103ebc972a0f2d95f8a1eb7d2828478b76d1fe8e1b15ff989479f971e8920f1fc8ee018c99040f83adc5b4dead982cbcf6ac6af4d89e167e2ffac6a891cf29bb9c1cf77b571ed2b05022bba6580fe27cd1f66ea361ff09abd923cefc0a0e7eeda8fefd3221edcf8eaa4c3ac4c4073c9fa7aa7abc4d3028c31a"}, &(0x7f0000002b80)={0x0, 0xa, 0x1, 0xa0}, &(0x7f0000002bc0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002c00)={0x20, 0x80, 0x1c, {0x82, 0x9, 0x2, 0x72dd, 0xe4, 0xff00, 0x65, 0x5, 0x3, 0x1, 0x3, 0x6}}, &(0x7f0000002c40)={0x20, 0x85, 0x4, 0x7f04624e}, &(0x7f0000002c80)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000002cc0)={0x20, 0x87, 0x2, 0xbb7}, &(0x7f0000002d00)={0x20, 0x89, 0x2}}) syz_usb_control_io$hid(r6, &(0x7f0000002f80)={0x24, &(0x7f0000002dc0)={0x20, 0x3, 0xd0, {0xd0, 0x5, "1d4afbcd877ead8b662f2d5200659c35ab94844a2dce3fb62b504979431592ff2fd6f940743a2f60b393d5419ee0f6f38394a8b7cafc8e56fba122fba5cdb76a106ef821f0fd10e2c2ba6558fec86103a7a2cc2e21ce5d3033867215ca1bcf4f49d1db73dca0ea45720269335b3ccd37267954071ca71ca296796da39fe67c717139ca56eb7f1032ab684ce6280d5ad1aabcb92de451f58e000ddf657a88ace44c4fc31e90980d699e1b96e45c35649d0333f211871c9d7ab2f6e772f6c02e0e039e022fdae98be3aa8295b2739b"}}, &(0x7f0000002ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}, &(0x7f0000002f00)={0x0, 0x22, 0x9, {[@global=@item_012={0x0, 0x1, 0xb}, @local=@item_012={0x2, 0x2, 0x7, '\\&'}, @main=@item_4={0x3, 0x0, 0xb, 'cE s'}]}}, &(0x7f0000002f40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x40, 0x1, {0x22, 0x570}}}}, &(0x7f00000031c0)={0x2c, &(0x7f0000002fc0)={0x0, 0x31, 0xd1, "85c4486cfb4b14a022ce0b361701f5a7766aed5d1c84e54e4c15c2ffc2fa964422f492916cedf3f887590e99e8307206f32c202d56f5bf628d7d4ad8cdadcaa31496f371313c9a6d199ff78578befd43135836e54fe165546d4d897d5592ca5834e8d5d147aa2719bbfb54b4ce5270190e93bf1a88ef68c51d9311df5c660568dda46579a45a0cdbe98aaa05707cded6d31ee9abedf829e6ed8ca21be78cc495e28f57526d92dd3e4c4be1a4b7529d91ecb20d5e36c7b826964734c2acdaa3e3827a96ee586ef2700cd10e9582a93fa028"}, &(0x7f00000030c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000003100)={0x0, 0x8, 0x1, 0xfe}, &(0x7f0000003140)={0x20, 0x1, 0x14, "060dd6be91d770a79a0bce8b36e8f3cfde09278f"}, &(0x7f0000003180)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io$rtl8150(r6, &(0x7f0000003300)={0x14, &(0x7f0000003200)={0x20, 0xd, 0x5b, {0x5b, 0xe, "ad1f0aae485891a223709e1e9cbbce95554adf490c1da54b1bdefca10d1c54598f40fc1a5b1388aaa243bd5de0c53e7752c347e13a08b108fa00cb08b0cb9e05b687c83c585622d5c1374059a65766bc4821da8f9cae3c102b"}}, &(0x7f0000003280)={0x0, 0x3, 0x6b, @string={0x6b, 0x3, "5866f061f11649515056f14d15e6c5fdcf89801059c22e76d39ac1be03313ea80d1b71882ea946bbdd8ce292a8f1a36e327dc86c0587d8d2151d51bf1fd1afc67dccc199fae569ed781e24f63c7769247f97011ea3a6a77adf2af9c0ccf1dc4b41ab119bd6c2025f0f"}}}, &(0x7f0000003480)={0x2c, &(0x7f0000003340)={0x0, 0x30, 0x1, "1d"}, &(0x7f0000003380)={0x0, 0xa, 0x1, 0xd5}, &(0x7f00000033c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000003400)={0xc0, 0x5, 0x2, "8182"}, &(0x7f0000003440)={0x40, 0x5, 0x2, "0c17"}}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000034c0)={'wlan1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000003500)={0x1, 0x9, 0x3, 0x7, 0x7, 0xaea}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000003700)={'sit0\x00', &(0x7f0000003600)={'sit0\x00', 0x0, 0x8, 0x40, 0x1, 0x8000000, {{0x38, 0x4, 0x1, 0x33, 0xe0, 0x65, 0x0, 0x3, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x8, 0xd3, 0x0, 0x3, [0x7]}, @end, @cipso={0x86, 0x43, 0x3, [{0x6, 0x9, "87a412fb9c0d86"}, {0x7, 0xb, "0ca08e89f7676aa2f9"}, {0x6, 0x5, "bfef64"}, {0x7, 0xb, "f4865a2b60c1a2ad50"}, {0x5, 0xa, "06f2efd93191946a"}, {0x2, 0xf, "80e17a0df7e88b14a310047a1e"}]}, @lsrr={0x83, 0x17, 0xb2, [@dev={0xac, 0x14, 0x14, 0x3d}, @broadcast, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x3c}]}, @timestamp_prespec={0x44, 0xc, 0xa5, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x2d}, 0x10000}]}, @rr={0x7, 0xb, 0x9f, [@local, @dev={0xac, 0x14, 0x14, 0x14}]}, @rr={0x7, 0x13, 0x7b, [@private=0xa010101, @private=0xa010100, @broadcast, @private=0xa010100]}, @rr={0x7, 0x1f, 0x81, [@loopback, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010101, @multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @rr={0x7, 0x1f, 0xdd, [@dev={0xac, 0x14, 0x14, 0x39}, @local, @loopback, @multicast2, @empty, @empty, @remote]}]}}}}}) sendto(r3, &(0x7f0000003580)="89e9f01d2d19348e6645ac744ae297d7511344d5a7064c9b188590511dc7ea1a57aa96478f6d23cb68aeaa460373eba1976def529c7036a76ff65ecabd474559e8e84b24e33a81c9f8414107f354c548e39ed60d0643816564d39925afd94ab5de", 0x61, 0x44004, &(0x7f0000003740)=@ll={0x11, 0x5, r10, 0x1, 0x25}, 0x80) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000037c0)={0x0, 0x7fffffff}, &(0x7f0000003800)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000003840)={r11, 0x7}, 0x8) syz_open_dev$evdev(&(0x7f0000003880), 0x9082, 0x1000) brk(0x8000) 3.471106417s ago: executing program 0 (id=500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES64], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000003c0), 0x108c08, &(0x7f0000000280)=ANY=[@ANYBLOB="71756f74612c75737271756f74615f696e6f656569f6c874909096012def55ce1b3700bf5cc66172646c696d69743d372c00f1987e4b42b6752146b929acee331229652e15dc915966cae1580b9623ea9ec8f7b7280ba7e8c0cdf00348b6568fa53398c60b740c40a5e48991cee3852b27d77022962b03cc5022f977ffb1ff3cf93bcd85bbfb0765399abd"]) chdir(&(0x7f0000000240)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.self_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, 0x0, 0x118) openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000040)={r6, 0x7fff}, &(0x7f00000000c0)=0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$X86_IOC_RDMSR_REGS(r8, 0xc02063a0, &(0x7f00000001c0)=[0x2, 0x246, 0x9, 0x9, 0x3, 0x3, 0x2, 0x6]) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r6, 0x7, 0x30}, 0xc) 3.4649976s ago: executing program 0 (id=501): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000440)={0x1, 0x204, 0xc684, 0x9}, 0x10) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000440)={0x1, 0x204, 0xc684, 0x9}, 0x10) write$cgroup_pid(r1, &(0x7f00000004c0), 0x24) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e23, 0x158, @empty, 0xc}}, 0x9, 0x1}, &(0x7f0000000280)=0x90) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e23, 0x158, @empty, 0xc}}, 0x9, 0x1}, &(0x7f0000000280)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) connect$ax25(r1, &(0x7f0000000000)={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) connect$ax25(r1, &(0x7f0000000000)={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040800) 3.424744162s ago: executing program 1 (id=502): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x4}, {0x63, 0x2}, @period={0x58, 0x0, 0x0, 0x3, 0x80, {0x1, 0x8001, 0xf, 0x1}, 0x0, 0x0}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000380)={'pcl726\x00', [0x4f26, 0x0, 0x2, 0x6, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x0, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0x9f92, 0x6, 0x4, 0xfffffff9, 0x393, 0x80001089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x40003e, 0x1000008, 0x0, 0x8000000]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d0300"], 0x40}}, 0x0) 3.335137868s ago: executing program 0 (id=503): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x1b0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0xd0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_EXPECT_MASK={0xac, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e14da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmmsg(r2, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="8fc2ed052f4f28d95163d0eb249691fdeefde17f8b77c459996365536664c4ee676bfb422f2e32d53ba141d175ea4d600e9e719f10303ccf548cd7443234a260c192c03a456e5ec449ed6ae8bc22d3ac909f0ca89d26acf91236d5446904c449315f03d3114b58965104414547b35dcfc7ad6f9551d9aa75b518826a", 0x7c}, {&(0x7f0000000680)="9ce5bd46a39e11a8eb0e391fe9aaee9bc61752dd72982e1dc633811a4141a76d64d4b422d20765f36618354e27688f34942736f16d76dbf701b895689a23356d559edc4c17c998f90a2215ebe7a29fb9de392abe3a1a388c675436197f1ae7fc3ae05501bbfef47065273cb7beaf30304025c7958ef12c377315c9f4f706ce985ddf12", 0x83}], 0x2}}], 0x1, 0x4004) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="00222200000096010006e53f0b13743ff62a9000070d00be0083"], 0x0}, 0x0) syz_usb_connect(0x5, 0x34, &(0x7f0000000e80)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb35010203010902220001080540040904ce0109000000000705f71f22890b09050c020002"], 0x0) 3.33171319s ago: executing program 1 (id=504): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000580)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x628}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, '5t'}]}, 0x44}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x3, 0x2be282) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc0205649, &(0x7f00000000c0)={0x0, 0x0, 0x1009}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_helper', 0x4240, 0x1) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r6, 0x107, 0xf, 0x0, &(0x7f0000000040)) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r7, 0x0, 0x2a, &(0x7f0000000140)="cceb3ede3c22e87d679ee15481c4ce6856e65b5d71f0eeb691cef3438ff2a0b62763c26bd6d7797c834e91296a378f30bcbf10cd716b08d2771c99c4b2900b120b0e3f7caf00dad060b489c0c7d904783ad72c2d70571a28de941bed2f048e6b41266f47dbd3346e24ffeef4a619ba652d96f5575edd186b02185be02f01dda005d96aee180a7ae0387c3f90d8bbfd98f3dfc7d47ba4bdb70c3a3f7b", 0x9c) socket$tipc(0x1e, 0x2, 0x0) r8 = request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='%\x00', 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0)={r8, 0xd3, 0xe3}, &(0x7f0000000340)={'enc=', 'oaep', ' hash=', {'sha256\x00'}}, &(0x7f00000003c0)="4a9bb90503b57dc9df5ff2925241af004b085e67ab7739c25744921d519de3af046b6ccacfcc51f70ccc40a875aba89ef30e5fceb85492ba33cdd843fd9cf7314d53af9811b0fae689d04c5d80167d811bb43e7d5b20d17b7fa226d20992dd9d84677e92f2079067292205451f22e33832f7c5ca37d7d7628c82a6305fe502fc9d3e8ac4762be296c32a1f15944453a070e5ec01614d6e4d271cbf9000cd89d49c6c71da4e76bf451ca504ca85c1cdbee331b2df6dfd936c297854a2281e3b85b1f91cfb742b8b717d109dfa6f97bd6fe2bbfc", &(0x7f0000000600)="dff816036f0c973b98811f4c6f2d6bc7e5718a3e9d73daf0f2a2f5b4a644c9bef2fd396a3e622805a09502aa71f056cd316c2b9885ff03c827c0180600b6066c1015b17569bb269646d16f3b1c760f75723165d49b9d4f38c03e4cebcaf3aa16a689672995d1fe4bad22cb7fd889aad03267a080d35087f5d0bdd86859437622ef05dd075c6126f00affd5c6298bcb22c81e7a1786bfc073307b322c856d12f326461ac6a804df3a49ceb0bca56b3ad63ac22bc71e731c9ec43e1f86bbf2625880645a929276fbefa1c4905e9b7dd05591fe3fc8d2e6f3c33860ac16e9f429e09f2a7d") bind$tipc(r5, 0x0, 0x4c) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009968810524667cdd722b14711004f3201f5020109021b0001000000000904010001ff01320009050d158d0beeac0f8259c2645fbbc9cb23e7440aae221acfe20f90a718768341d6ffb7cdb6ef0760d00bf26e178daf94485c04344e", @ANYRES32=0x0], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000580)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x628}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, '5t'}]}, 0x44}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000100), 0x3, 0x2be282) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc0205649, &(0x7f00000000c0)={0x0, 0x0, 0x1009}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_helper', 0x4240, 0x1) (async) socket$packet(0x11, 0x3, 0x300) (async) getsockopt$packet_int(r6, 0x107, 0xf, 0x0, &(0x7f0000000040)) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$inet_buf(r7, 0x0, 0x2a, &(0x7f0000000140)="cceb3ede3c22e87d679ee15481c4ce6856e65b5d71f0eeb691cef3438ff2a0b62763c26bd6d7797c834e91296a378f30bcbf10cd716b08d2771c99c4b2900b120b0e3f7caf00dad060b489c0c7d904783ad72c2d70571a28de941bed2f048e6b41266f47dbd3346e24ffeef4a619ba652d96f5575edd186b02185be02f01dda005d96aee180a7ae0387c3f90d8bbfd98f3dfc7d47ba4bdb70c3a3f7b", 0x9c) (async) socket$tipc(0x1e, 0x2, 0x0) (async) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='%\x00', 0xfffffffffffffff9) (async) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0)={r8, 0xd3, 0xe3}, &(0x7f0000000340)={'enc=', 'oaep', ' hash=', {'sha256\x00'}}, &(0x7f00000003c0)="4a9bb90503b57dc9df5ff2925241af004b085e67ab7739c25744921d519de3af046b6ccacfcc51f70ccc40a875aba89ef30e5fceb85492ba33cdd843fd9cf7314d53af9811b0fae689d04c5d80167d811bb43e7d5b20d17b7fa226d20992dd9d84677e92f2079067292205451f22e33832f7c5ca37d7d7628c82a6305fe502fc9d3e8ac4762be296c32a1f15944453a070e5ec01614d6e4d271cbf9000cd89d49c6c71da4e76bf451ca504ca85c1cdbee331b2df6dfd936c297854a2281e3b85b1f91cfb742b8b717d109dfa6f97bd6fe2bbfc", &(0x7f0000000600)="dff816036f0c973b98811f4c6f2d6bc7e5718a3e9d73daf0f2a2f5b4a644c9bef2fd396a3e622805a09502aa71f056cd316c2b9885ff03c827c0180600b6066c1015b17569bb269646d16f3b1c760f75723165d49b9d4f38c03e4cebcaf3aa16a689672995d1fe4bad22cb7fd889aad03267a080d35087f5d0bdd86859437622ef05dd075c6126f00affd5c6298bcb22c81e7a1786bfc073307b322c856d12f326461ac6a804df3a49ceb0bca56b3ad63ac22bc71e731c9ec43e1f86bbf2625880645a929276fbefa1c4905e9b7dd05591fe3fc8d2e6f3c33860ac16e9f429e09f2a7d") (async) bind$tipc(r5, 0x0, 0x4c) (async) socket$netlink(0x10, 0x3, 0x10) (async) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009968810524667cdd722b14711004f3201f5020109021b0001000000000904010001ff01320009050d158d0beeac0f8259c2645fbbc9cb23e7440aae221acfe20f90a718768341d6ffb7cdb6ef0760d00bf26e178daf94485c04344e", @ANYRES32=0x0], 0x0) (async) 1.073894474s ago: executing program 2 (id=505): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000000)=0x3, 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x200, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) (async) getdents64(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') (async) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) (async) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000000)=0x3, 0x4) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x200, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) 709.237407ms ago: executing program 3 (id=506): r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000240)={0x4229, 'syz1\x00'}) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @default}, [@bcast, @null, @null, @bcast, @netrom, @remote, @remote, @default]}, &(0x7f00000002c0)=0x48, 0x0) r4 = userfaultfd(0x801) socket$netlink(0x10, 0x3, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) setsockopt$ax25_int(r3, 0x101, 0xc, &(0x7f0000000400)=0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x8, 0x8, 0x7, 0x7fff, {{0x26, 0x4, 0x3, 0x36, 0x98, 0x67, 0x0, 0x5, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x13}, {[@lsrr={0x83, 0x13, 0x61, [@multicast2, @broadcast, @remote, @broadcast]}, @timestamp={0x44, 0x28, 0x5b, 0x0, 0x4, [0x5, 0x4, 0x4, 0x6, 0x7fffffff, 0x6, 0x7, 0xffffffc0, 0x2]}, @generic={0x86, 0x6, "a77c1a83"}, @cipso={0x86, 0xb, 0xffffffffffffffff, [{0x0, 0x5, "2d8874"}]}, @cipso={0x86, 0x37, 0x2, [{0x1a0dbbb6fc0d9d6c, 0x12, "54f6edebca6f93f9c46eaa69d3661059"}, {0x5, 0x7, "202ff509c7"}, {0x1, 0x11, "cb405ad21d9853e18dfd164be4340d"}, {0x1, 0x7, "98c8a28083"}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ipvlan1\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x56}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x44}}, 0x800) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x64, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_LANES={0x0, 0x9, 0xa}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xc}]}, 0xfffffffffffffc97}, 0x1, 0x0, 0x0, 0x8014}, 0x8000) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="58099b00", @ANYRES16=r0, @ANYBLOB="010027bd7000fedbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830000000000"], 0x58}, 0x1, 0x0, 0x0, 0x8041}, 0x8054) 611.236626ms ago: executing program 3 (id=507): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000240)=0xfdfffffe, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000440)={0x1, r3, r2}) 607.51007ms ago: executing program 3 (id=508): r0 = socket$pppl2tp(0x18, 0x1, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'pimreg0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe80000000"], 0xffe) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x700, 0x0, [@sadb_key={0x1, 0x9}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @private=0x80}}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x58}, 0x1, 0x7}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x110, 0x35, 0xe2, 0x96, 0x8, 0x6d0, 0x622, 0x60da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x8, 0x80, 0x5, [{{0x9, 0x4, 0xa1, 0x5, 0x0, 0xc3, 0x31, 0xdb, 0x6}}]}}]}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x40, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c010}, 0x30) 338.695344ms ago: executing program 0 (id=509): r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0xf1, 0x840) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0) 267.762595ms ago: executing program 1 (id=510): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x2, @pix={0x0, 0x2, 0x4745504a}}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x10200, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x14c, r2, 0xc293415c6bc3d29d, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4625930b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x99c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1420}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb4}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x32, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) 131.307323ms ago: executing program 1 (id=511): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) creat(&(0x7f0000000200)='./file5\x00', 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file5\x00', 0x2) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000100), &(0x7f0000000280)='./file0\x00', 0x8, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:* rwr'], 0x9) name_to_handle_at(r2, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@xfs_parent={0x1c, 0x82, {0x5, 0xfffffffc, 0x1, 0x8001}}, &(0x7f0000000340), 0x400) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x111000, 0x0) ppoll(&(0x7f00000003c0)=[{r4, 0x80}], 0x1, &(0x7f0000000400), &(0x7f0000000440)={[0x8]}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="050027bd7000fedbdf250600000008000300", @ANYRES32=r6, @ANYBLOB="0800050006000000100017800400020500000000000000000c00178004000200040006001c00178004000400040003"], 0x80}, 0x1, 0x0, 0x0, 0x40048}, 0x0) 92.34179ms ago: executing program 0 (id=512): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffff9}}, './file0\x00'}) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "4a054f9ecda4b623", "54250b8d63efc802b937a938bf549c5a", "5883db1d", "553eb9cfc71d68ae"}, 0x28) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000040)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000080)=""/13) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) (async) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x201, 0x4000003e, r4, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff0000000108000700263a0909140002", @ANYRES64=r7, @ANYRESHEX, @ANYRESHEX=0x0], 0x44}, 0x1, 0x1000000}, 0x0) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000040)=r8) fanotify_mark(r5, 0x441, 0x103f, r4, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r10, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) (async) unshare(0x2040400) (async) fcntl$lock(r10, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x1b9, 0x1fd}) (async) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async) mkdir(&(0x7f0000000300)='./file0\x00', 0x80) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r11, 0x80605414, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003a00010439e4c9a01433900a0a"], 0x14}}, 0x4000000) 2.759616ms ago: executing program 1 (id=513): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="10000000071401"], 0x10}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) ioperm(0x3, 0x7, 0x7) (async) ioperm(0x3, 0x7, 0x7) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 0 (id=514): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffffffffffb, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x1011, 0xffffffffffffffff, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540), 0x0, 0x5, 0x0, 0x0, r3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r5, 0x89ee, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r6, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3b5, 0x1fd}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000240)=0xc) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0x1d, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0xffffffff, 0x7ff], [0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "06010000"}]}, 0x54}}, 0x20004010) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001200130628b57000fdd3df2506ff01fc00004e2200239e8927000600000009000000090000007d00014afb909eac16394b7e7100e61e70783e85d29f65c6c92e1f"], 0x4c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4000000) kernel console output (not intermixed with test programs): ? current_time+0x222/0x370 [ 147.270977][ T8252] ? evm_inode_setattr+0x1ad/0x7d0 [ 147.271001][ T8252] ovl_setattr+0x11b/0x580 [ 147.271024][ T8252] ? try_break_deleg+0x79/0x120 [ 147.271038][ T8252] ? __pfx_ovl_setattr+0x10/0x10 [ 147.271060][ T8252] notify_change+0xc1a/0xf40 [ 147.271076][ T8252] do_truncate+0x1a4/0x220 [ 147.271087][ T8252] ? __pfx_do_truncate+0x10/0x10 [ 147.271094][ T8252] ? apparmor_path_truncate+0x238/0x2d0 [ 147.271119][ T8252] vfs_truncate+0x493/0x520 [ 147.271141][ T8252] ? __pfx_vfs_truncate+0x10/0x10 [ 147.271169][ T8252] do_sys_truncate+0xdb/0x190 [ 147.271186][ T8252] ? __pfx_do_sys_truncate+0x10/0x10 [ 147.271204][ T8252] ? __pfx_ksys_write+0x10/0x10 [ 147.271219][ T8252] __x64_sys_truncate+0x5b/0x70 [ 147.271229][ T8252] do_syscall_64+0xfa/0xfa0 [ 147.271241][ T8252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.271251][ T8252] ? clear_bhb_loop+0x60/0xb0 [ 147.271263][ T8252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.271274][ T8252] RIP: 0033:0x7f1bc438f749 [ 147.271291][ T8252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.271305][ T8252] RSP: 002b:00007f1bc517d038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 147.271325][ T8252] RAX: ffffffffffffffda RBX: 00007f1bc45e5fa0 RCX: 00007f1bc438f749 [ 147.271338][ T8252] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000280 [ 147.271349][ T8252] RBP: 00007f1bc517d090 R08: 0000000000000000 R09: 0000000000000000 [ 147.271359][ T8252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 147.271365][ T8252] R13: 00007f1bc45e6038 R14: 00007f1bc45e5fa0 R15: 00007fff292661f8 [ 147.271383][ T8252] [ 147.638884][ T980] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 147.680030][ T980] usb 3-1: USB disconnect, device number 30 [ 147.761842][ T8263] kvm: pic: single mode not supported [ 147.762134][ T8263] kvm: pic: non byte write [ 147.773239][ T8263] kvm: pic: single mode not supported [ 147.773385][ T8263] kvm: pic: single mode not supported [ 147.779455][ T8263] kvm: pic: non byte write [ 147.789850][ T8263] kvm: pic: non byte write [ 147.794782][ T8263] kvm: pic: non byte write [ 147.799807][ T8263] kvm: pic: level sensitive irq not supported [ 147.800218][ T8263] kvm: pic: non byte write [ 147.811086][ T8263] kvm: pic: single mode not supported [ 147.811217][ T8263] kvm: pic: non byte write [ 147.987811][ T5883] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 148.022016][ T8287] FAULT_INJECTION: forcing a failure. [ 148.022016][ T8287] name failslab, interval 1, probability 0, space 0, times 0 [ 148.039259][ T8287] CPU: 0 UID: 0 PID: 8287 Comm: syz.2.332 Not tainted syzkaller #0 PREEMPT(full) [ 148.039284][ T8287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.039295][ T8287] Call Trace: [ 148.039301][ T8287] [ 148.039306][ T8287] dump_stack_lvl+0x189/0x250 [ 148.039323][ T8287] ? __pfx____ratelimit+0x10/0x10 [ 148.039335][ T8287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.039347][ T8287] ? __pfx__printk+0x10/0x10 [ 148.039362][ T8287] ? __pfx___might_resched+0x10/0x10 [ 148.039376][ T8287] should_fail_ex+0x414/0x560 [ 148.039393][ T8287] should_failslab+0xa8/0x100 [ 148.039405][ T8287] __kvmalloc_node_noprof+0x175/0x910 [ 148.039415][ T8287] ? do_raw_spin_lock+0x121/0x290 [ 148.039429][ T8287] ? simple_xattr_set+0x80/0x380 [ 148.039446][ T8287] simple_xattr_set+0x80/0x380 [ 148.039458][ T8287] ? do_raw_spin_unlock+0x122/0x240 [ 148.039474][ T8287] shmem_xattr_handler_set+0x1a0/0x2d0 [ 148.039487][ T8287] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 148.039497][ T8287] __vfs_setxattr+0x43c/0x480 [ 148.039516][ T8287] __vfs_setxattr_noperm+0x12d/0x660 [ 148.039532][ T8287] vfs_setxattr+0x16b/0x2f0 [ 148.039546][ T8287] ? __pfx_vfs_setxattr+0x10/0x10 [ 148.039564][ T8287] ovl_check_setxattr+0x13f/0x310 [ 148.039581][ T8287] ovl_set_impure+0x113/0x190 [ 148.039594][ T8287] ovl_copy_up_flags+0xdb0/0x37f0 [ 148.039605][ T8287] ? __lock_acquire+0xab9/0xd20 [ 148.039631][ T8287] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 148.039641][ T8287] ? __lock_acquire+0xab9/0xd20 [ 148.039662][ T8287] ? is_bpf_text_address+0x26/0x2b0 [ 148.039676][ T8287] ? __lock_acquire+0xab9/0xd20 [ 148.039692][ T8287] ? __lock_acquire+0xab9/0xd20 [ 148.039706][ T8287] ? do_raw_spin_lock+0x121/0x290 [ 148.039723][ T8287] ? dput+0x37/0x1a0 [ 148.039735][ T8287] ? cap_inode_getsecurity+0x241/0x830 [ 148.039747][ T8287] ? rcu_is_watching+0x15/0xb0 [ 148.039759][ T8287] ? cap_inode_getsecurity+0x241/0x830 [ 148.039769][ T8287] ? kfree+0x4d/0x680 [ 148.039780][ T8287] ? dput+0x37/0x1a0 [ 148.039832][ T8287] ? setattr_prepare+0x1e7/0xac0 [ 148.039842][ T8287] ? current_time+0x222/0x370 [ 148.039854][ T8287] ? evm_inode_setattr+0x1ad/0x7d0 [ 148.039868][ T8287] ovl_setattr+0x11b/0x580 [ 148.039881][ T8287] ? try_break_deleg+0x79/0x120 [ 148.039888][ T8287] ? __pfx_ovl_setattr+0x10/0x10 [ 148.039901][ T8287] notify_change+0xc1a/0xf40 [ 148.039916][ T8287] do_truncate+0x1a4/0x220 [ 148.039927][ T8287] ? __pfx_do_truncate+0x10/0x10 [ 148.039934][ T8287] ? apparmor_path_truncate+0x238/0x2d0 [ 148.039958][ T8287] vfs_truncate+0x493/0x520 [ 148.039970][ T8287] ? __pfx_vfs_truncate+0x10/0x10 [ 148.039985][ T8287] do_sys_truncate+0xdb/0x190 [ 148.039994][ T8287] ? __pfx_do_sys_truncate+0x10/0x10 [ 148.040003][ T8287] ? __pfx_ksys_write+0x10/0x10 [ 148.040016][ T8287] __x64_sys_truncate+0x5b/0x70 [ 148.040026][ T8287] do_syscall_64+0xfa/0xfa0 [ 148.040039][ T8287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.040048][ T8287] ? clear_bhb_loop+0x60/0xb0 [ 148.040062][ T8287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.040071][ T8287] RIP: 0033:0x7f2c4b78f749 [ 148.040081][ T8287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.040089][ T8287] RSP: 002b:00007f2c4c6a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 148.040101][ T8287] RAX: ffffffffffffffda RBX: 00007f2c4b9e5fa0 RCX: 00007f2c4b78f749 [ 148.040108][ T8287] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000280 [ 148.040114][ T8287] RBP: 00007f2c4c6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 148.040120][ T8287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.040125][ T8287] R13: 00007f2c4b9e6038 R14: 00007f2c4b9e5fa0 R15: 00007ffc0d0b91a8 [ 148.040142][ T8287] [ 148.427492][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 148.434302][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.445402][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 148.456465][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 148.466183][ T5883] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 148.476012][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.539301][ T5883] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 148.576539][ T5883] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 148.607525][ T5883] usb 4-1: Manufacturer: syz [ 148.642358][ T5883] usb 4-1: config 0 descriptor?? [ 148.683682][ T8302] overlay: filesystem on ./bus not supported [ 148.822126][ T8305] FAULT_INJECTION: forcing a failure. [ 148.822126][ T8305] name failslab, interval 1, probability 0, space 0, times 0 [ 148.842369][ T8305] CPU: 1 UID: 0 PID: 8305 Comm: syz.1.336 Not tainted syzkaller #0 PREEMPT(full) [ 148.842394][ T8305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.842405][ T8305] Call Trace: [ 148.842416][ T8305] [ 148.842424][ T8305] dump_stack_lvl+0x189/0x250 [ 148.842450][ T8305] ? __pfx____ratelimit+0x10/0x10 [ 148.842471][ T8305] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.842493][ T8305] ? __pfx__printk+0x10/0x10 [ 148.842520][ T8305] ? __pfx___might_resched+0x10/0x10 [ 148.842539][ T8305] ? fs_reclaim_acquire+0x7d/0x100 [ 148.842563][ T8305] should_fail_ex+0x414/0x560 [ 148.842591][ T8305] should_failslab+0xa8/0x100 [ 148.842612][ T8305] kmem_cache_alloc_noprof+0x88/0x700 [ 148.842637][ T8305] ? security_file_alloc+0x34/0x330 [ 148.842662][ T8305] security_file_alloc+0x34/0x330 [ 148.842684][ T8305] init_file+0x93/0x2f0 [ 148.842709][ T8305] alloc_empty_file+0x6e/0x1d0 [ 148.842730][ T8305] dentry_open+0x44/0xa0 [ 148.842751][ T8305] ovl_sync_file+0x17/0x50 [ 148.842772][ T8305] ovl_copy_up_metadata+0x831/0xb60 [ 148.842800][ T8305] ? __pfx_ovl_copy_up_metadata+0x10/0x10 [ 148.842838][ T8305] ? __lock_acquire+0xab9/0xd20 [ 148.842871][ T8305] ? rcu_read_lock_any_held+0xb3/0x120 [ 148.842894][ T8305] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 148.842920][ T8305] ? ovl_copy_up_flags+0x168f/0x37f0 [ 148.842950][ T8305] ovl_copy_up_flags+0x1a1c/0x37f0 [ 148.843008][ T8305] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 148.843027][ T8305] ? __lock_acquire+0xab9/0xd20 [ 148.843068][ T8305] ? is_bpf_text_address+0x26/0x2b0 [ 148.843093][ T8305] ? __lock_acquire+0xab9/0xd20 [ 148.843122][ T8305] ? __lock_acquire+0xab9/0xd20 [ 148.843161][ T8305] ? dput+0x37/0x1a0 [ 148.843182][ T8305] ? cap_inode_getsecurity+0x241/0x830 [ 148.843202][ T8305] ? rcu_is_watching+0x15/0xb0 [ 148.843222][ T8305] ? cap_inode_getsecurity+0x241/0x830 [ 148.843241][ T8305] ? kfree+0x4d/0x680 [ 148.843260][ T8305] ? dput+0x37/0x1a0 [ 148.843347][ T8305] ? setattr_prepare+0x1e7/0xac0 [ 148.843365][ T8305] ? current_time+0x222/0x370 [ 148.843386][ T8305] ? evm_inode_setattr+0x1ad/0x7d0 [ 148.843410][ T8305] ovl_setattr+0x11b/0x580 [ 148.843432][ T8305] ? try_break_deleg+0x79/0x120 [ 148.843446][ T8305] ? __pfx_ovl_setattr+0x10/0x10 [ 148.843469][ T8305] notify_change+0xc1a/0xf40 [ 148.843498][ T8305] do_truncate+0x1a4/0x220 [ 148.843518][ T8305] ? __pfx_do_truncate+0x10/0x10 [ 148.843532][ T8305] ? apparmor_path_truncate+0x238/0x2d0 [ 148.843574][ T8305] vfs_truncate+0x493/0x520 [ 148.843597][ T8305] ? __pfx_vfs_truncate+0x10/0x10 [ 148.843626][ T8305] do_sys_truncate+0xdb/0x190 [ 148.843643][ T8305] ? __pfx_do_sys_truncate+0x10/0x10 [ 148.843659][ T8305] ? __pfx_ksys_write+0x10/0x10 [ 148.843684][ T8305] __x64_sys_truncate+0x5b/0x70 [ 148.843702][ T8305] do_syscall_64+0xfa/0xfa0 [ 148.843723][ T8305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.843741][ T8305] ? clear_bhb_loop+0x60/0xb0 [ 148.843763][ T8305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.843780][ T8305] RIP: 0033:0x7f965678f749 [ 148.843796][ T8305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.843810][ T8305] RSP: 002b:00007f96575c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 148.843829][ T8305] RAX: ffffffffffffffda RBX: 00007f96569e5fa0 RCX: 00007f965678f749 [ 148.843842][ T8305] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000280 [ 148.843854][ T8305] RBP: 00007f96575c2090 R08: 0000000000000000 R09: 0000000000000000 [ 148.843865][ T8305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.843875][ T8305] R13: 00007f96569e6038 R14: 00007f96569e5fa0 R15: 00007ffe79cb2f68 [ 148.843908][ T8305] [ 149.406232][ T8318] netlink: 'syz.2.338': attribute type 1 has an invalid length. [ 149.414470][ T5883] rc_core: IR keymap rc-hauppauge not found [ 149.418617][ T8316] tipc: Enabling of bearer rejected, failed to enable media [ 149.420708][ T5883] Registered IR keymap rc-empty [ 149.434160][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 149.458221][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 149.479595][ T5883] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 149.495717][ T5883] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 149.533998][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 149.557734][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 149.577703][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 149.598004][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 149.617548][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 149.622549][ T8330] FAULT_INJECTION: forcing a failure. [ 149.622549][ T8330] name failslab, interval 1, probability 0, space 0, times 0 [ 149.637350][ T8330] CPU: 0 UID: 0 PID: 8330 Comm: syz.0.342 Not tainted syzkaller #0 PREEMPT(full) [ 149.637365][ T8330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.637372][ T8330] Call Trace: [ 149.637378][ T8330] [ 149.637383][ T8330] dump_stack_lvl+0x189/0x250 [ 149.637411][ T8330] ? __pfx____ratelimit+0x10/0x10 [ 149.637429][ T8330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.637448][ T8330] ? __pfx__printk+0x10/0x10 [ 149.637473][ T8330] ? __pfx___might_resched+0x10/0x10 [ 149.637492][ T8330] ? fs_reclaim_acquire+0x7d/0x100 [ 149.637514][ T8330] should_fail_ex+0x414/0x560 [ 149.637541][ T8330] should_failslab+0xa8/0x100 [ 149.637562][ T8330] kmem_cache_alloc_noprof+0x88/0x700 [ 149.637569][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 149.637586][ T8330] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 149.637609][ T8330] ? alloc_empty_file_noaccount+0x23/0xc0 [ 149.637633][ T8330] alloc_empty_file_noaccount+0x23/0xc0 [ 149.637652][ T8330] kernel_tmpfile_open+0x2a/0x90 [ 149.637677][ T8330] ovl_copy_up_flags+0x1670/0x37f0 [ 149.637698][ T8330] ? __lock_acquire+0xab9/0xd20 [ 149.637746][ T8330] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 149.637764][ T8330] ? __lock_acquire+0xab9/0xd20 [ 149.637803][ T8330] ? is_bpf_text_address+0x26/0x2b0 [ 149.637827][ T8330] ? __lock_acquire+0xab9/0xd20 [ 149.637862][ T8330] ? __lock_acquire+0xab9/0xd20 [ 149.637898][ T8330] ? dput+0x37/0x1a0 [ 149.637920][ T8330] ? cap_inode_getsecurity+0x241/0x830 [ 149.637940][ T8330] ? rcu_is_watching+0x15/0xb0 [ 149.637960][ T8330] ? cap_inode_getsecurity+0x241/0x830 [ 149.637977][ T8330] ? kfree+0x4d/0x680 [ 149.637996][ T8330] ? dput+0x37/0x1a0 [ 149.638078][ T8330] ? setattr_prepare+0x1e7/0xac0 [ 149.638096][ T8330] ? current_time+0x222/0x370 [ 149.638116][ T8330] ? evm_inode_setattr+0x1ad/0x7d0 [ 149.638139][ T8330] ovl_setattr+0x11b/0x580 [ 149.638161][ T8330] ? try_break_deleg+0x79/0x120 [ 149.638174][ T8330] ? __pfx_ovl_setattr+0x10/0x10 [ 149.638196][ T8330] notify_change+0xc1a/0xf40 [ 149.638224][ T8330] do_truncate+0x1a4/0x220 [ 149.638243][ T8330] ? __pfx_do_truncate+0x10/0x10 [ 149.638256][ T8330] ? apparmor_path_truncate+0x238/0x2d0 [ 149.638296][ T8330] vfs_truncate+0x493/0x520 [ 149.638318][ T8330] ? __pfx_vfs_truncate+0x10/0x10 [ 149.638345][ T8330] do_sys_truncate+0xdb/0x190 [ 149.638361][ T8330] ? __pfx_do_sys_truncate+0x10/0x10 [ 149.638378][ T8330] ? __pfx_ksys_write+0x10/0x10 [ 149.638401][ T8330] __x64_sys_truncate+0x5b/0x70 [ 149.638418][ T8330] do_syscall_64+0xfa/0xfa0 [ 149.638439][ T8330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.638456][ T8330] ? clear_bhb_loop+0x60/0xb0 [ 149.638477][ T8330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.638493][ T8330] RIP: 0033:0x7f85e2d8f749 [ 149.638509][ T8330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.638523][ T8330] RSP: 002b:00007f85e3bee038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 149.638542][ T8330] RAX: ffffffffffffffda RBX: 00007f85e2fe5fa0 RCX: 00007f85e2d8f749 [ 149.638554][ T8330] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000280 [ 149.638565][ T8330] RBP: 00007f85e3bee090 R08: 0000000000000000 R09: 0000000000000000 [ 149.638576][ T8330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.638586][ T8330] R13: 00007f85e2fe6038 R14: 00007f85e2fe5fa0 R15: 00007fffb44d6ba8 [ 149.638617][ T8330] [ 149.678741][ T8329] binder_alloc: 8326: pid 8326 spamming oneway? 1 buffers allocated for a total size of 4096 [ 150.007578][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 150.028448][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 150.047562][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 150.067758][ T5883] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 150.110380][ T5883] mceusb 4-1:0.0: Registered І with mce emulator interface version 1 [ 150.118807][ T5883] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 150.138565][ T5883] usb 4-1: USB disconnect, device number 33 [ 150.188006][ T980] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 150.281200][ T8368] binder: 8367:8368 ioctl 400c620e 2000000014c0 returned -22 [ 150.352635][ T8371] FAULT_INJECTION: forcing a failure. [ 150.352635][ T8371] name failslab, interval 1, probability 0, space 0, times 0 [ 150.366308][ T8371] CPU: 0 UID: 0 PID: 8371 Comm: syz.0.348 Not tainted syzkaller #0 PREEMPT(full) [ 150.366332][ T8371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.366343][ T8371] Call Trace: [ 150.366349][ T8371] [ 150.366359][ T8371] dump_stack_lvl+0x189/0x250 [ 150.366378][ T8371] ? __pfx____ratelimit+0x10/0x10 [ 150.366390][ T8371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.366402][ T8371] ? __pfx__printk+0x10/0x10 [ 150.366417][ T8371] ? __pfx___might_resched+0x10/0x10 [ 150.366428][ T8371] ? fs_reclaim_acquire+0x7d/0x100 [ 150.366442][ T8371] should_fail_ex+0x414/0x560 [ 150.366458][ T8371] should_failslab+0xa8/0x100 [ 150.366470][ T8371] kmem_cache_alloc_noprof+0x88/0x700 [ 150.366485][ T8371] ? security_file_alloc+0x34/0x330 [ 150.366499][ T8371] security_file_alloc+0x34/0x330 [ 150.366511][ T8371] init_file+0x93/0x2f0 [ 150.366525][ T8371] alloc_empty_file+0x6e/0x1d0 [ 150.366537][ T8371] dentry_open+0x44/0xa0 [ 150.366549][ T8371] ovl_sync_file+0x17/0x50 [ 150.366561][ T8371] ovl_copy_up_metadata+0x831/0xb60 [ 150.366577][ T8371] ? __pfx_ovl_copy_up_metadata+0x10/0x10 [ 150.366597][ T8371] ? __lock_acquire+0xab9/0xd20 [ 150.366618][ T8371] ? rcu_read_lock_any_held+0xb3/0x120 [ 150.366631][ T8371] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 150.366646][ T8371] ? ovl_copy_up_flags+0x168f/0x37f0 [ 150.366662][ T8371] ovl_copy_up_flags+0x1a1c/0x37f0 [ 150.366672][ T8371] ? __lock_acquire+0xab9/0xd20 [ 150.366698][ T8371] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 150.366708][ T8371] ? __lock_acquire+0xab9/0xd20 [ 150.366729][ T8371] ? is_bpf_text_address+0x26/0x2b0 [ 150.366742][ T8371] ? __lock_acquire+0xab9/0xd20 [ 150.366758][ T8371] ? __lock_acquire+0xab9/0xd20 [ 150.366778][ T8371] ? dput+0x37/0x1a0 [ 150.366790][ T8371] ? cap_inode_getsecurity+0x241/0x830 [ 150.366802][ T8371] ? rcu_is_watching+0x15/0xb0 [ 150.366813][ T8371] ? cap_inode_getsecurity+0x241/0x830 [ 150.366824][ T8371] ? kfree+0x4d/0x680 [ 150.366834][ T8371] ? dput+0x37/0x1a0 [ 150.366885][ T8371] ? setattr_prepare+0x1e7/0xac0 [ 150.366895][ T8371] ? current_time+0x222/0x370 [ 150.366907][ T8371] ? evm_inode_setattr+0x1ad/0x7d0 [ 150.366921][ T8371] ovl_setattr+0x11b/0x580 [ 150.366934][ T8371] ? try_break_deleg+0x79/0x120 [ 150.366942][ T8371] ? __pfx_ovl_setattr+0x10/0x10 [ 150.366954][ T8371] notify_change+0xc1a/0xf40 [ 150.366970][ T8371] do_truncate+0x1a4/0x220 [ 150.366981][ T8371] ? __pfx_do_truncate+0x10/0x10 [ 150.366988][ T8371] ? apparmor_path_truncate+0x238/0x2d0 [ 150.367012][ T8371] vfs_truncate+0x493/0x520 [ 150.367024][ T8371] ? __pfx_vfs_truncate+0x10/0x10 [ 150.367039][ T8371] do_sys_truncate+0xdb/0x190 [ 150.367048][ T8371] ? __pfx_do_sys_truncate+0x10/0x10 [ 150.367057][ T8371] ? __pfx_ksys_write+0x10/0x10 [ 150.367070][ T8371] __x64_sys_truncate+0x5b/0x70 [ 150.367080][ T8371] do_syscall_64+0xfa/0xfa0 [ 150.367092][ T8371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.367101][ T8371] ? clear_bhb_loop+0x60/0xb0 [ 150.367114][ T8371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.367123][ T8371] RIP: 0033:0x7f85e2d8f749 [ 150.367133][ T8371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.367142][ T8371] RSP: 002b:00007f85e3bee038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 150.367153][ T8371] RAX: ffffffffffffffda RBX: 00007f85e2fe5fa0 RCX: 00007f85e2d8f749 [ 150.367161][ T8371] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000280 [ 150.367167][ T8371] RBP: 00007f85e3bee090 R08: 0000000000000000 R09: 0000000000000000 [ 150.367173][ T8371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.367178][ T8371] R13: 00007f85e2fe6038 R14: 00007f85e2fe5fa0 R15: 00007fffb44d6ba8 [ 150.367196][ T8371] [ 150.762950][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.773276][ T980] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 150.783022][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.851472][ T980] usb 3-1: config 0 descriptor?? [ 150.902254][ T8381] FAULT_INJECTION: forcing a failure. [ 150.902254][ T8381] name failslab, interval 1, probability 0, space 0, times 0 [ 150.927544][ T8381] CPU: 0 UID: 0 PID: 8381 Comm: syz.0.351 Not tainted syzkaller #0 PREEMPT(full) [ 150.927569][ T8381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.927580][ T8381] Call Trace: [ 150.927588][ T8381] [ 150.927594][ T8381] dump_stack_lvl+0x189/0x250 [ 150.927619][ T8381] ? __pfx____ratelimit+0x10/0x10 [ 150.927642][ T8381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.927663][ T8381] ? __pfx__printk+0x10/0x10 [ 150.927703][ T8381] ? __pfx___might_resched+0x10/0x10 [ 150.927729][ T8381] should_fail_ex+0x414/0x560 [ 150.927757][ T8381] should_failslab+0xa8/0x100 [ 150.927778][ T8381] kmem_cache_alloc_noprof+0x88/0x700 [ 150.927811][ T8381] ? security_file_alloc+0x34/0x330 [ 150.927834][ T8381] security_file_alloc+0x34/0x330 [ 150.927855][ T8381] init_file+0x93/0x2f0 [ 150.927880][ T8381] alloc_empty_file_noaccount+0x38/0xc0 [ 150.927902][ T8381] kernel_tmpfile_open+0x2a/0x90 [ 150.927929][ T8381] ovl_copy_up_flags+0x1670/0x37f0 [ 150.927949][ T8381] ? __lock_acquire+0xab9/0xd20 [ 150.927999][ T8381] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 150.928018][ T8381] ? __lock_acquire+0xab9/0xd20 [ 150.928057][ T8381] ? is_bpf_text_address+0x26/0x2b0 [ 150.928083][ T8381] ? __lock_acquire+0xab9/0xd20 [ 150.928112][ T8381] ? __lock_acquire+0xab9/0xd20 [ 150.928150][ T8381] ? dput+0x37/0x1a0 [ 150.928172][ T8381] ? cap_inode_getsecurity+0x241/0x830 [ 150.928191][ T8381] ? rcu_is_watching+0x15/0xb0 [ 150.928212][ T8381] ? cap_inode_getsecurity+0x241/0x830 [ 150.928230][ T8381] ? kfree+0x4d/0x680 [ 150.928250][ T8381] ? dput+0x37/0x1a0 [ 150.928336][ T8381] ? setattr_prepare+0x1e7/0xac0 [ 150.928355][ T8381] ? current_time+0x222/0x370 [ 150.928375][ T8381] ? evm_inode_setattr+0x1ad/0x7d0 [ 150.928399][ T8381] ovl_setattr+0x11b/0x580 [ 150.928422][ T8381] ? try_break_deleg+0x79/0x120 [ 150.928437][ T8381] ? __pfx_ovl_setattr+0x10/0x10 [ 150.928460][ T8381] notify_change+0xc1a/0xf40 [ 150.928490][ T8381] do_truncate+0x1a4/0x220 [ 150.928510][ T8381] ? __pfx_do_truncate+0x10/0x10 [ 150.928524][ T8381] ? apparmor_path_truncate+0x238/0x2d0 [ 150.928566][ T8381] vfs_truncate+0x493/0x520 [ 150.928590][ T8381] ? __pfx_vfs_truncate+0x10/0x10 [ 150.928619][ T8381] do_sys_truncate+0xdb/0x190 [ 150.928635][ T8381] ? __pfx_do_sys_truncate+0x10/0x10 [ 150.928653][ T8381] ? __pfx_ksys_write+0x10/0x10 [ 150.928678][ T8381] __x64_sys_truncate+0x5b/0x70 [ 150.928697][ T8381] do_syscall_64+0xfa/0xfa0 [ 150.928718][ T8381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.928736][ T8381] ? clear_bhb_loop+0x60/0xb0 [ 150.928759][ T8381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.928775][ T8381] RIP: 0033:0x7f85e2d8f749 [ 150.928798][ T8381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.928813][ T8381] RSP: 002b:00007f85e3bee038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 150.928833][ T8381] RAX: ffffffffffffffda RBX: 00007f85e2fe5fa0 RCX: 00007f85e2d8f749 [ 150.928847][ T8381] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000280 [ 150.928858][ T8381] RBP: 00007f85e3bee090 R08: 0000000000000000 R09: 0000000000000000 [ 150.928868][ T8381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.928879][ T8381] R13: 00007f85e2fe6038 R14: 00007f85e2fe5fa0 R15: 00007fffb44d6ba8 [ 150.928912][ T8381] [ 151.384163][ T8399] overlayfs: missing 'lowerdir' [ 151.473594][ T8403] FAULT_INJECTION: forcing a failure. [ 151.473594][ T8403] name failslab, interval 1, probability 0, space 0, times 0 [ 151.486316][ T8403] CPU: 1 UID: 0 PID: 8403 Comm: syz.0.359 Not tainted syzkaller #0 PREEMPT(full) [ 151.486340][ T8403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.486351][ T8403] Call Trace: [ 151.486358][ T8403] [ 151.486366][ T8403] dump_stack_lvl+0x189/0x250 [ 151.486393][ T8403] ? __pfx____ratelimit+0x10/0x10 [ 151.486413][ T8403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.486434][ T8403] ? __pfx__printk+0x10/0x10 [ 151.486456][ T8403] ? __pfx___might_resched+0x10/0x10 [ 151.486472][ T8403] ? fs_reclaim_acquire+0x7d/0x100 [ 151.486501][ T8403] should_fail_ex+0x414/0x560 [ 151.486530][ T8403] should_failslab+0xa8/0x100 [ 151.486551][ T8403] __kmalloc_noprof+0xdf/0x800 [ 151.486568][ T8403] ? tomoyo_encode+0x28b/0x550 [ 151.486585][ T8403] tomoyo_encode+0x28b/0x550 [ 151.486602][ T8403] tomoyo_realpath_from_path+0x58d/0x5d0 [ 151.486632][ T8403] tomoyo_check_open_permission+0x1c1/0x3b0 [ 151.486653][ T8403] ? ovl_copy_up_metadata+0x831/0xb60 [ 151.486674][ T8403] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 151.486695][ T8403] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 151.486710][ T8403] ? __x64_sys_truncate+0x5b/0x70 [ 151.486743][ T8403] ? tomoyo_file_open+0x164/0x220 [ 151.486756][ T8403] security_file_open+0xb1/0x270 [ 151.486772][ T8403] do_dentry_open+0x34e/0x1420 [ 151.486809][ T8403] vfs_open+0x3b/0x340 [ 151.486833][ T8403] dentry_open+0x61/0xa0 [ 151.486853][ T8403] ovl_sync_file+0x17/0x50 [ 151.486864][ T8403] ovl_copy_up_metadata+0x831/0xb60 [ 151.486879][ T8403] ? __pfx_ovl_copy_up_metadata+0x10/0x10 [ 151.486899][ T8403] ? __lock_acquire+0xab9/0xd20 [ 151.486923][ T8403] ? rcu_read_lock_any_held+0xb3/0x120 [ 151.486946][ T8403] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 151.486973][ T8403] ? ovl_copy_up_flags+0x168f/0x37f0 [ 151.487002][ T8403] ovl_copy_up_flags+0x1a1c/0x37f0 [ 151.487013][ T8403] ? __lock_acquire+0xab9/0xd20 [ 151.487039][ T8403] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 151.487049][ T8403] ? __lock_acquire+0xab9/0xd20 [ 151.487081][ T8403] ? is_bpf_text_address+0x26/0x2b0 [ 151.487107][ T8403] ? __lock_acquire+0xab9/0xd20 [ 151.487137][ T8403] ? __lock_acquire+0xab9/0xd20 [ 151.487163][ T8403] ? dput+0x37/0x1a0 [ 151.487175][ T8403] ? cap_inode_getsecurity+0x241/0x830 [ 151.487187][ T8403] ? rcu_is_watching+0x15/0xb0 [ 151.487199][ T8403] ? cap_inode_getsecurity+0x241/0x830 [ 151.487210][ T8403] ? kfree+0x4d/0x680 [ 151.487229][ T8403] ? dput+0x37/0x1a0 [ 151.487308][ T8403] ? setattr_prepare+0x1e7/0xac0 [ 151.487318][ T8403] ? current_time+0x222/0x370 [ 151.487330][ T8403] ? evm_inode_setattr+0x1ad/0x7d0 [ 151.487343][ T8403] ovl_setattr+0x11b/0x580 [ 151.487355][ T8403] ? try_break_deleg+0x79/0x120 [ 151.487368][ T8403] ? __pfx_ovl_setattr+0x10/0x10 [ 151.487395][ T8403] notify_change+0xc1a/0xf40 [ 151.487423][ T8403] do_truncate+0x1a4/0x220 [ 151.487441][ T8403] ? __pfx_do_truncate+0x10/0x10 [ 151.487453][ T8403] ? apparmor_path_truncate+0x238/0x2d0 [ 151.487498][ T8403] vfs_truncate+0x493/0x520 [ 151.487521][ T8403] ? __pfx_vfs_truncate+0x10/0x10 [ 151.487548][ T8403] do_sys_truncate+0xdb/0x190 [ 151.487565][ T8403] ? __pfx_do_sys_truncate+0x10/0x10 [ 151.487582][ T8403] ? __pfx_ksys_write+0x10/0x10 [ 151.487607][ T8403] __x64_sys_truncate+0x5b/0x70 [ 151.487624][ T8403] do_syscall_64+0xfa/0xfa0 [ 151.487645][ T8403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.487663][ T8403] ? clear_bhb_loop+0x60/0xb0 [ 151.487684][ T8403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.487700][ T8403] RIP: 0033:0x7f85e2d8f749 [ 151.487717][ T8403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.487730][ T8403] RSP: 002b:00007f85e3bee038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 151.487749][ T8403] RAX: ffffffffffffffda RBX: 00007f85e2fe5fa0 RCX: 00007f85e2d8f749 [ 151.487761][ T8403] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000280 [ 151.487771][ T8403] RBP: 00007f85e3bee090 R08: 0000000000000000 R09: 0000000000000000 [ 151.487782][ T8403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.487792][ T8403] R13: 00007f85e2fe6038 R14: 00007f85e2fe5fa0 R15: 00007fffb44d6ba8 [ 151.487825][ T8403] [ 151.647553][ T5897] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 151.674395][ T8403] ERROR: Out of memory at tomoyo_realpath_from_path. [ 151.889713][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 151.930352][ T980] usbhid 3-1:0.0: can't add hid device: -71 [ 151.938798][ T980] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 151.958616][ T980] usb 3-1: USB disconnect, device number 31 [ 151.979838][ T5897] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 151.988989][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.008795][ T5897] usb 2-1: config 0 descriptor?? [ 152.179123][ T8428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.189172][ T8428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.377658][ T980] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 152.420975][ T5897] glorious 0003:258A:0036.000A: unexpected long global item [ 152.428851][ T5897] glorious 0003:258A:0036.000A: probe with driver glorious failed with error -22 [ 152.501895][ T8439] FAULT_INJECTION: forcing a failure. [ 152.501895][ T8439] name failslab, interval 1, probability 0, space 0, times 0 [ 152.515289][ T8439] CPU: 1 UID: 0 PID: 8439 Comm: syz.2.365 Not tainted syzkaller #0 PREEMPT(full) [ 152.515312][ T8439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.515322][ T8439] Call Trace: [ 152.515337][ T8439] [ 152.515343][ T8439] dump_stack_lvl+0x189/0x250 [ 152.515361][ T8439] ? __pfx____ratelimit+0x10/0x10 [ 152.515372][ T8439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.515384][ T8439] ? __pfx__printk+0x10/0x10 [ 152.515397][ T8439] ? __pfx___might_resched+0x10/0x10 [ 152.515409][ T8439] ? fs_reclaim_acquire+0x7d/0x100 [ 152.515422][ T8439] should_fail_ex+0x414/0x560 [ 152.515438][ T8439] should_failslab+0xa8/0x100 [ 152.515450][ T8439] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 152.515464][ T8439] ? capable_wrt_inode_uidgid+0x1e7/0x290 [ 152.515475][ T8439] ? __d_alloc+0x37/0x6f0 [ 152.515490][ T8439] __d_alloc+0x37/0x6f0 [ 152.515506][ T8439] d_alloc+0x4b/0x190 [ 152.515520][ T8439] vfs_tmpfile+0x19d/0x890 [ 152.515540][ T8439] kernel_tmpfile_open+0x4d/0x90 [ 152.515555][ T8439] ovl_copy_up_flags+0x1670/0x37f0 [ 152.515566][ T8439] ? __lock_acquire+0xab9/0xd20 [ 152.515594][ T8439] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 152.515605][ T8439] ? __lock_acquire+0xab9/0xd20 [ 152.515626][ T8439] ? is_bpf_text_address+0x26/0x2b0 [ 152.515640][ T8439] ? __lock_acquire+0xab9/0xd20 [ 152.515656][ T8439] ? __lock_acquire+0xab9/0xd20 [ 152.515676][ T8439] ? dput+0x37/0x1a0 [ 152.515688][ T8439] ? cap_inode_getsecurity+0x241/0x830 [ 152.515699][ T8439] ? rcu_is_watching+0x15/0xb0 [ 152.515712][ T8439] ? cap_inode_getsecurity+0x241/0x830 [ 152.515721][ T8439] ? kfree+0x4d/0x680 [ 152.515732][ T8439] ? dput+0x37/0x1a0 [ 152.515777][ T8439] ? setattr_prepare+0x1e7/0xac0 [ 152.515787][ T8439] ? current_time+0x222/0x370 [ 152.515798][ T8439] ? evm_inode_setattr+0x1ad/0x7d0 [ 152.515811][ T8439] ovl_setattr+0x11b/0x580 [ 152.515824][ T8439] ? try_break_deleg+0x79/0x120 [ 152.515832][ T8439] ? __pfx_ovl_setattr+0x10/0x10 [ 152.515844][ T8439] notify_change+0xc1a/0xf40 [ 152.515859][ T8439] do_truncate+0x1a4/0x220 [ 152.515870][ T8439] ? __pfx_do_truncate+0x10/0x10 [ 152.515878][ T8439] ? apparmor_path_truncate+0x238/0x2d0 [ 152.515900][ T8439] vfs_truncate+0x493/0x520 [ 152.515913][ T8439] ? __pfx_vfs_truncate+0x10/0x10 [ 152.515927][ T8439] do_sys_truncate+0xdb/0x190 [ 152.515936][ T8439] ? __pfx_do_sys_truncate+0x10/0x10 [ 152.515950][ T8439] ? __pfx_ksys_write+0x10/0x10 [ 152.515973][ T8439] __x64_sys_truncate+0x5b/0x70 [ 152.515990][ T8439] do_syscall_64+0xfa/0xfa0 [ 152.516012][ T8439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.516024][ T8439] ? clear_bhb_loop+0x60/0xb0 [ 152.516036][ T8439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.516045][ T8439] RIP: 0033:0x7f2c4b78f749 [ 152.516055][ T8439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.516063][ T8439] RSP: 002b:00007f2c4c6a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 152.516074][ T8439] RAX: ffffffffffffffda RBX: 00007f2c4b9e5fa0 RCX: 00007f2c4b78f749 [ 152.516081][ T8439] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000280 [ 152.516087][ T8439] RBP: 00007f2c4c6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 152.516093][ T8439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 152.516099][ T8439] R13: 00007f2c4b9e6038 R14: 00007f2c4b9e5fa0 R15: 00007ffc0d0b91a8 [ 152.516116][ T8439] [ 152.857129][ T980] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 152.877501][ T5940] usb 2-1: USB disconnect, device number 37 [ 152.909334][ T980] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 157, changing to 11 [ 152.951796][ T980] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 42356, setting to 1024 [ 152.971630][ T980] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 152.987970][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.003606][ T8422] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 153.146152][ T8464] FAULT_INJECTION: forcing a failure. [ 153.146152][ T8464] name failslab, interval 1, probability 0, space 0, times 0 [ 153.162650][ T8464] CPU: 0 UID: 0 PID: 8464 Comm: syz.2.369 Not tainted syzkaller #0 PREEMPT(full) [ 153.162675][ T8464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.162685][ T8464] Call Trace: [ 153.162693][ T8464] [ 153.162701][ T8464] dump_stack_lvl+0x189/0x250 [ 153.162727][ T8464] ? __pfx____ratelimit+0x10/0x10 [ 153.162749][ T8464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.162768][ T8464] ? __pfx__printk+0x10/0x10 [ 153.162790][ T8464] ? __pfx___might_resched+0x10/0x10 [ 153.162807][ T8464] ? fs_reclaim_acquire+0x7d/0x100 [ 153.162828][ T8464] should_fail_ex+0x414/0x560 [ 153.162856][ T8464] should_failslab+0xa8/0x100 [ 153.162877][ T8464] __kmalloc_noprof+0xdf/0x800 [ 153.162901][ T8464] ? tomoyo_encode+0x28b/0x550 [ 153.162930][ T8464] tomoyo_encode+0x28b/0x550 [ 153.162960][ T8464] tomoyo_realpath_from_path+0x58d/0x5d0 [ 153.162998][ T8464] tomoyo_check_open_permission+0x1c1/0x3b0 [ 153.163018][ T8464] ? ovl_copy_up_metadata+0x831/0xb60 [ 153.163039][ T8464] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 153.163059][ T8464] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 153.163078][ T8464] ? __x64_sys_truncate+0x5b/0x70 [ 153.163132][ T8464] ? tomoyo_file_open+0x164/0x220 [ 153.163148][ T8464] security_file_open+0xb1/0x270 [ 153.163161][ T8464] do_dentry_open+0x34e/0x1420 [ 153.163181][ T8464] vfs_open+0x3b/0x340 [ 153.163194][ T8464] dentry_open+0x61/0xa0 [ 153.163205][ T8464] ovl_sync_file+0x17/0x50 [ 153.163216][ T8464] ovl_copy_up_metadata+0x831/0xb60 [ 153.163231][ T8464] ? __pfx_ovl_copy_up_metadata+0x10/0x10 [ 153.163251][ T8464] ? __lock_acquire+0xab9/0xd20 [ 153.163270][ T8464] ? rcu_read_lock_any_held+0xb3/0x120 [ 153.163283][ T8464] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 153.163304][ T8464] ? ovl_copy_up_flags+0x168f/0x37f0 [ 153.163321][ T8464] ovl_copy_up_flags+0x1a1c/0x37f0 [ 153.163331][ T8464] ? __lock_acquire+0xab9/0xd20 [ 153.163357][ T8464] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 153.163367][ T8464] ? __lock_acquire+0xab9/0xd20 [ 153.163389][ T8464] ? is_bpf_text_address+0x26/0x2b0 [ 153.163402][ T8464] ? __lock_acquire+0xab9/0xd20 [ 153.163418][ T8464] ? __lock_acquire+0xab9/0xd20 [ 153.163437][ T8464] ? dput+0x37/0x1a0 [ 153.163450][ T8464] ? cap_inode_getsecurity+0x241/0x830 [ 153.163462][ T8464] ? rcu_is_watching+0x15/0xb0 [ 153.163473][ T8464] ? cap_inode_getsecurity+0x241/0x830 [ 153.163483][ T8464] ? kfree+0x4d/0x680 [ 153.163494][ T8464] ? dput+0x37/0x1a0 [ 153.163540][ T8464] ? setattr_prepare+0x1e7/0xac0 [ 153.163552][ T8464] ? current_time+0x222/0x370 [ 153.163564][ T8464] ? evm_inode_setattr+0x1ad/0x7d0 [ 153.163577][ T8464] ovl_setattr+0x11b/0x580 [ 153.163590][ T8464] ? try_break_deleg+0x79/0x120 [ 153.163598][ T8464] ? __pfx_ovl_setattr+0x10/0x10 [ 153.163610][ T8464] notify_change+0xc1a/0xf40 [ 153.163626][ T8464] do_truncate+0x1a4/0x220 [ 153.163636][ T8464] ? __pfx_do_truncate+0x10/0x10 [ 153.163644][ T8464] ? apparmor_path_truncate+0x238/0x2d0 [ 153.163667][ T8464] vfs_truncate+0x493/0x520 [ 153.163679][ T8464] ? __pfx_vfs_truncate+0x10/0x10 [ 153.163694][ T8464] do_sys_truncate+0xdb/0x190 [ 153.163704][ T8464] ? __pfx_do_sys_truncate+0x10/0x10 [ 153.163719][ T8464] ? __pfx_ksys_write+0x10/0x10 [ 153.163732][ T8464] __x64_sys_truncate+0x5b/0x70 [ 153.163742][ T8464] do_syscall_64+0xfa/0xfa0 [ 153.163754][ T8464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.163764][ T8464] ? clear_bhb_loop+0x60/0xb0 [ 153.163776][ T8464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.163785][ T8464] RIP: 0033:0x7f2c4b78f749 [ 153.163795][ T8464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.163803][ T8464] RSP: 002b:00007f2c4c6a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 153.163814][ T8464] RAX: ffffffffffffffda RBX: 00007f2c4b9e5fa0 RCX: 00007f2c4b78f749 [ 153.163821][ T8464] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000280 [ 153.163827][ T8464] RBP: 00007f2c4c6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 153.163833][ T8464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 153.163839][ T8464] R13: 00007f2c4b9e6038 R14: 00007f2c4b9e5fa0 R15: 00007ffc0d0b91a8 [ 153.163856][ T8464] [ 153.163889][ T8464] ERROR: Out of memory at tomoyo_realpath_from_path. [ 153.777640][ T5897] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 153.929827][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.940307][ T5897] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 153.950671][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.964638][ T5897] usb 2-1: config 0 descriptor?? [ 153.988559][ T5897] pwc: Askey VC010 type 2 USB webcam detected. [ 153.998854][ T980] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 154.019244][ T980] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input15 [ 154.112490][ T980] usb 4-1: USB disconnect, device number 34 [ 154.112546][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 154.184579][ T5897] pwc: send_video_command error -71 [ 154.200772][ T5897] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 154.213769][ T5897] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 154.232920][ T5897] usb 2-1: USB disconnect, device number 38 [ 154.373840][ T8505] netlink: 48 bytes leftover after parsing attributes in process `syz.3.372'. [ 154.393991][ T8505] futex_wake_op: syz.3.372 tries to shift op by -1; fix this program [ 154.408246][ T8505] Context (ID=0x0) not attached to queue pair (handle=0x2:0x2) [ 154.609686][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 154.621103][ T8509] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.373'. [ 154.635044][ T8509] input: syz0 as /devices/virtual/input/input16 [ 154.665056][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 154.747218][ T8517] FAULT_INJECTION: forcing a failure. [ 154.747218][ T8517] name failslab, interval 1, probability 0, space 0, times 0 [ 154.760085][ T8517] CPU: 0 UID: 0 PID: 8517 Comm: syz.2.374 Not tainted syzkaller #0 PREEMPT(full) [ 154.760108][ T8517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 154.760117][ T8517] Call Trace: [ 154.760123][ T8517] [ 154.760129][ T8517] dump_stack_lvl+0x189/0x250 [ 154.760152][ T8517] ? __pfx____ratelimit+0x10/0x10 [ 154.760168][ T8517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.760184][ T8517] ? __pfx__printk+0x10/0x10 [ 154.760202][ T8517] ? __pfx___might_resched+0x10/0x10 [ 154.760218][ T8517] ? fs_reclaim_acquire+0x7d/0x100 [ 154.760236][ T8517] should_fail_ex+0x414/0x560 [ 154.760258][ T8517] should_failslab+0xa8/0x100 [ 154.760276][ T8517] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 154.760297][ T8517] ? shmem_alloc_inode+0x28/0x40 [ 154.760309][ T8517] ? do_raw_spin_lock+0x121/0x290 [ 154.760336][ T8517] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 154.760348][ T8517] shmem_alloc_inode+0x28/0x40 [ 154.760360][ T8517] alloc_inode+0x6a/0x1b0 [ 154.760377][ T8517] new_inode+0x22/0x170 [ 154.760397][ T8517] shmem_get_inode+0x347/0xe60 [ 154.760418][ T8517] shmem_tmpfile+0x58/0x150 [ 154.760434][ T8517] vfs_tmpfile+0x400/0x890 [ 154.760463][ T8517] kernel_tmpfile_open+0x4d/0x90 [ 154.760484][ T8517] ovl_copy_up_flags+0x1670/0x37f0 [ 154.760500][ T8517] ? __lock_acquire+0xab9/0xd20 [ 154.760536][ T8517] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 154.760550][ T8517] ? __lock_acquire+0xab9/0xd20 [ 154.760580][ T8517] ? is_bpf_text_address+0x26/0x2b0 [ 154.760599][ T8517] ? __lock_acquire+0xab9/0xd20 [ 154.760620][ T8517] ? __lock_acquire+0xab9/0xd20 [ 154.760648][ T8517] ? dput+0x37/0x1a0 [ 154.760665][ T8517] ? cap_inode_getsecurity+0x241/0x830 [ 154.760681][ T8517] ? rcu_is_watching+0x15/0xb0 [ 154.760697][ T8517] ? cap_inode_getsecurity+0x241/0x830 [ 154.760711][ T8517] ? kfree+0x4d/0x680 [ 154.760727][ T8517] ? dput+0x37/0x1a0 [ 154.760789][ T8517] ? setattr_prepare+0x1e7/0xac0 [ 154.760803][ T8517] ? current_time+0x222/0x370 [ 154.760819][ T8517] ? evm_inode_setattr+0x1ad/0x7d0 [ 154.760837][ T8517] ovl_setattr+0x11b/0x580 [ 154.760855][ T8517] ? try_break_deleg+0x79/0x120 [ 154.760866][ T8517] ? __pfx_ovl_setattr+0x10/0x10 [ 154.760883][ T8517] notify_change+0xc1a/0xf40 [ 154.760904][ T8517] do_truncate+0x1a4/0x220 [ 154.760919][ T8517] ? __pfx_do_truncate+0x10/0x10 [ 154.760929][ T8517] ? apparmor_path_truncate+0x238/0x2d0 [ 154.760961][ T8517] vfs_truncate+0x493/0x520 [ 154.760978][ T8517] ? __pfx_vfs_truncate+0x10/0x10 [ 154.760999][ T8517] do_sys_truncate+0xdb/0x190 [ 154.761011][ T8517] ? __pfx_do_sys_truncate+0x10/0x10 [ 154.761024][ T8517] ? __pfx_ksys_write+0x10/0x10 [ 154.761043][ T8517] __x64_sys_truncate+0x5b/0x70 [ 154.761056][ T8517] do_syscall_64+0xfa/0xfa0 [ 154.761076][ T8517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.761091][ T8517] ? clear_bhb_loop+0x60/0xb0 [ 154.761107][ T8517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.761119][ T8517] RIP: 0033:0x7f2c4b78f749 [ 154.761132][ T8517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.761143][ T8517] RSP: 002b:00007f2c4c6a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 154.761158][ T8517] RAX: ffffffffffffffda RBX: 00007f2c4b9e5fa0 RCX: 00007f2c4b78f749 [ 154.761168][ T8517] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000280 [ 154.761176][ T8517] RBP: 00007f2c4c6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 154.761185][ T8517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.761193][ T8517] R13: 00007f2c4b9e6038 R14: 00007f2c4b9e5fa0 R15: 00007ffc0d0b91a8 [ 154.761217][ T8517] [ 155.235718][ T8530] overlayfs: failed to resolve './file0': -2 [ 155.263554][ T8524] mmap: syz.2.376 (8524): VmData 37597184 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 155.293147][ T8535] ipvlan0: entered promiscuous mode [ 155.300918][ T8535] ipvlan0: entered allmulticast mode [ 155.307068][ T8535] veth0_vlan: entered allmulticast mode [ 155.317359][ T8530] tap0: tun_chr_ioctl cmd 1074025676 [ 155.324892][ T8530] tap0: owner set to 0 [ 155.379188][ T5919] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 155.539221][ T5919] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 155.552883][ T5919] usb 2-1: config 0 has no interface number 0 [ 155.564033][ T5919] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 155.587475][ T5919] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.613167][ T5919] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 155.632949][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.650952][ T5919] usb 2-1: Product: syz [ 155.655562][ T5919] usb 2-1: Manufacturer: syz [ 155.661231][ T5919] usb 2-1: SerialNumber: syz [ 155.672550][ T5919] usb 2-1: config 0 descriptor?? [ 155.680288][ T8519] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.691132][ T8558] FAULT_INJECTION: forcing a failure. [ 155.691132][ T8558] name failslab, interval 1, probability 0, space 0, times 0 [ 155.704830][ T8558] CPU: 1 UID: 0 PID: 8558 Comm: syz.3.384 Not tainted syzkaller #0 PREEMPT(full) [ 155.704857][ T8558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.704867][ T8558] Call Trace: [ 155.704875][ T8558] [ 155.704883][ T8558] dump_stack_lvl+0x189/0x250 [ 155.704909][ T8558] ? __pfx____ratelimit+0x10/0x10 [ 155.704929][ T8558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.704951][ T8558] ? __pfx__printk+0x10/0x10 [ 155.704974][ T8558] ? __pfx___might_resched+0x10/0x10 [ 155.704994][ T8558] ? fs_reclaim_acquire+0x7d/0x100 [ 155.705026][ T8558] should_fail_ex+0x414/0x560 [ 155.705055][ T8558] should_failslab+0xa8/0x100 [ 155.705077][ T8558] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 155.705102][ T8558] ? shmem_alloc_inode+0x28/0x40 [ 155.705119][ T8558] ? do_raw_spin_lock+0x121/0x290 [ 155.705145][ T8558] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 155.705162][ T8558] shmem_alloc_inode+0x28/0x40 [ 155.705178][ T8558] alloc_inode+0x6a/0x1b0 [ 155.705200][ T8558] new_inode+0x22/0x170 [ 155.705226][ T8558] shmem_get_inode+0x347/0xe60 [ 155.705254][ T8558] shmem_tmpfile+0x58/0x150 [ 155.705276][ T8558] vfs_tmpfile+0x400/0x890 [ 155.705312][ T8558] kernel_tmpfile_open+0x4d/0x90 [ 155.705339][ T8558] ovl_copy_up_flags+0x1670/0x37f0 [ 155.705359][ T8558] ? __lock_acquire+0xab9/0xd20 [ 155.705406][ T8558] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 155.705424][ T8558] ? __lock_acquire+0xab9/0xd20 [ 155.705465][ T8558] ? is_bpf_text_address+0x26/0x2b0 [ 155.705491][ T8558] ? __lock_acquire+0xab9/0xd20 [ 155.705520][ T8558] ? __lock_acquire+0xab9/0xd20 [ 155.705559][ T8558] ? dput+0x37/0x1a0 [ 155.705580][ T8558] ? cap_inode_getsecurity+0x241/0x830 [ 155.705602][ T8558] ? rcu_is_watching+0x15/0xb0 [ 155.705623][ T8558] ? cap_inode_getsecurity+0x241/0x830 [ 155.705641][ T8558] ? kfree+0x4d/0x680 [ 155.705660][ T8558] ? dput+0x37/0x1a0 [ 155.705748][ T8558] ? setattr_prepare+0x1e7/0xac0 [ 155.705766][ T8558] ? current_time+0x222/0x370 [ 155.705786][ T8558] ? evm_inode_setattr+0x1ad/0x7d0 [ 155.705811][ T8558] ovl_setattr+0x11b/0x580 [ 155.705833][ T8558] ? try_break_deleg+0x79/0x120 [ 155.705848][ T8558] ? __pfx_ovl_setattr+0x10/0x10 [ 155.705870][ T8558] notify_change+0xc1a/0xf40 [ 155.705899][ T8558] do_truncate+0x1a4/0x220 [ 155.705920][ T8558] ? __pfx_do_truncate+0x10/0x10 [ 155.705934][ T8558] ? apparmor_path_truncate+0x238/0x2d0 [ 155.705977][ T8558] vfs_truncate+0x493/0x520 [ 155.706006][ T8558] ? __pfx_vfs_truncate+0x10/0x10 [ 155.706036][ T8558] do_sys_truncate+0xdb/0x190 [ 155.706052][ T8558] ? __pfx_do_sys_truncate+0x10/0x10 [ 155.706070][ T8558] ? __pfx_ksys_write+0x10/0x10 [ 155.706095][ T8558] __x64_sys_truncate+0x5b/0x70 [ 155.706113][ T8558] do_syscall_64+0xfa/0xfa0 [ 155.706134][ T8558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.706152][ T8558] ? clear_bhb_loop+0x60/0xb0 [ 155.706174][ T8558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.706190][ T8558] RIP: 0033:0x7f1bc438f749 [ 155.706207][ T8558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.706222][ T8558] RSP: 002b:00007f1bc517d038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 155.706241][ T8558] RAX: ffffffffffffffda RBX: 00007f1bc45e5fa0 RCX: 00007f1bc438f749 [ 155.706253][ T8558] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000280 [ 155.706265][ T8558] RBP: 00007f1bc517d090 R08: 0000000000000000 R09: 0000000000000000 [ 155.706276][ T8558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.706286][ T8558] R13: 00007f1bc45e6038 R14: 00007f1bc45e5fa0 R15: 00007fff292661f8 [ 155.706320][ T8558] [ 156.094000][ T5919] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 156.108222][ T5919] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 156.281194][ T5919] usb 2-1: USB disconnect, device number 39 [ 156.291670][ T5919] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 156.303131][ T5919] cyberjack 2-1:0.69: device disconnected [ 156.501439][ T8598] netlink: 40 bytes leftover after parsing attributes in process `syz.3.388'. [ 156.651061][ T8612] tipc: Enabling of bearer rejected, media not registered [ 156.689729][ T8614] FAULT_INJECTION: forcing a failure. [ 156.689729][ T8614] name failslab, interval 1, probability 0, space 0, times 0 [ 156.702747][ T8614] CPU: 1 UID: 0 PID: 8614 Comm: syz.3.393 Not tainted syzkaller #0 PREEMPT(full) [ 156.702761][ T8614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.702768][ T8614] Call Trace: [ 156.702772][ T8614] [ 156.702777][ T8614] dump_stack_lvl+0x189/0x250 [ 156.702793][ T8614] ? __pfx____ratelimit+0x10/0x10 [ 156.702806][ T8614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.702817][ T8614] ? __pfx__printk+0x10/0x10 [ 156.702833][ T8614] ? __pfx___might_resched+0x10/0x10 [ 156.702847][ T8614] should_fail_ex+0x414/0x560 [ 156.702863][ T8614] should_failslab+0xa8/0x100 [ 156.702876][ T8614] __kmalloc_noprof+0xdf/0x800 [ 156.702890][ T8614] ? security_inode_init_security+0xfc/0x3d0 [ 156.702905][ T8614] ? __pfx___dquot_initialize+0x10/0x10 [ 156.702922][ T8614] security_inode_init_security+0xfc/0x3d0 [ 156.702936][ T8614] ? __pfx_shmem_initxattrs+0x10/0x10 [ 156.702949][ T8614] ? __pfx_security_inode_init_security+0x10/0x10 [ 156.702970][ T8614] shmem_tmpfile+0x90/0x150 [ 156.702981][ T8614] vfs_tmpfile+0x400/0x890 [ 156.703008][ T8614] kernel_tmpfile_open+0x4d/0x90 [ 156.703023][ T8614] ovl_copy_up_flags+0x1670/0x37f0 [ 156.703034][ T8614] ? __lock_acquire+0xab9/0xd20 [ 156.703061][ T8614] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 156.703071][ T8614] ? __lock_acquire+0xab9/0xd20 [ 156.703092][ T8614] ? is_bpf_text_address+0x26/0x2b0 [ 156.703106][ T8614] ? __lock_acquire+0xab9/0xd20 [ 156.703122][ T8614] ? __lock_acquire+0xab9/0xd20 [ 156.703142][ T8614] ? dput+0x37/0x1a0 [ 156.703154][ T8614] ? cap_inode_getsecurity+0x241/0x830 [ 156.703165][ T8614] ? rcu_is_watching+0x15/0xb0 [ 156.703177][ T8614] ? cap_inode_getsecurity+0x241/0x830 [ 156.703187][ T8614] ? kfree+0x4d/0x680 [ 156.703198][ T8614] ? dput+0x37/0x1a0 [ 156.703243][ T8614] ? setattr_prepare+0x1e7/0xac0 [ 156.703253][ T8614] ? current_time+0x222/0x370 [ 156.703265][ T8614] ? evm_inode_setattr+0x1ad/0x7d0 [ 156.703278][ T8614] ovl_setattr+0x11b/0x580 [ 156.703290][ T8614] ? try_break_deleg+0x79/0x120 [ 156.703298][ T8614] ? __pfx_ovl_setattr+0x10/0x10 [ 156.703310][ T8614] notify_change+0xc1a/0xf40 [ 156.703325][ T8614] do_truncate+0x1a4/0x220 [ 156.703336][ T8614] ? __pfx_do_truncate+0x10/0x10 [ 156.703344][ T8614] ? apparmor_path_truncate+0x238/0x2d0 [ 156.703366][ T8614] vfs_truncate+0x493/0x520 [ 156.703378][ T8614] ? __pfx_vfs_truncate+0x10/0x10 [ 156.703392][ T8614] do_sys_truncate+0xdb/0x190 [ 156.703401][ T8614] ? __pfx_do_sys_truncate+0x10/0x10 [ 156.703410][ T8614] ? __pfx_ksys_write+0x10/0x10 [ 156.703423][ T8614] __x64_sys_truncate+0x5b/0x70 [ 156.703433][ T8614] do_syscall_64+0xfa/0xfa0 [ 156.703445][ T8614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.703455][ T8614] ? clear_bhb_loop+0x60/0xb0 [ 156.703467][ T8614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.703476][ T8614] RIP: 0033:0x7f1bc438f749 [ 156.703486][ T8614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.703494][ T8614] RSP: 002b:00007f1bc517d038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 156.703505][ T8614] RAX: ffffffffffffffda RBX: 00007f1bc45e5fa0 RCX: 00007f1bc438f749 [ 156.703512][ T8614] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000280 [ 156.703518][ T8614] RBP: 00007f1bc517d090 R08: 0000000000000000 R09: 0000000000000000 [ 156.703524][ T8614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 156.703529][ T8614] R13: 00007f1bc45e6038 R14: 00007f1bc45e5fa0 R15: 00007fff292661f8 [ 156.703546][ T8614] [ 157.292850][ T8631] overlay: Unknown parameter 'dont_measure' [ 157.457532][ T8344] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 157.608362][ T8344] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 157.629454][ T8344] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 157.637102][ T8344] usb 4-1: can't read configurations, error -61 [ 157.746201][ T8642] netlink: 32 bytes leftover after parsing attributes in process `syz.2.401'. [ 157.778291][ T8344] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 157.812001][ T8648] FAULT_INJECTION: forcing a failure. [ 157.812001][ T8648] name failslab, interval 1, probability 0, space 0, times 0 [ 157.826518][ T8648] CPU: 1 UID: 0 PID: 8648 Comm: syz.2.402 Not tainted syzkaller #0 PREEMPT(full) [ 157.826533][ T8648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.826540][ T8648] Call Trace: [ 157.826544][ T8648] [ 157.826548][ T8648] dump_stack_lvl+0x189/0x250 [ 157.826565][ T8648] ? __pfx____ratelimit+0x10/0x10 [ 157.826577][ T8648] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.826589][ T8648] ? __pfx__printk+0x10/0x10 [ 157.826604][ T8648] ? __pfx___might_resched+0x10/0x10 [ 157.826619][ T8648] should_fail_ex+0x414/0x560 [ 157.826635][ T8648] should_failslab+0xa8/0x100 [ 157.826648][ T8648] __kmalloc_noprof+0xdf/0x800 [ 157.826662][ T8648] ? kfree+0x4d/0x680 [ 157.826673][ T8648] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 157.826691][ T8648] tomoyo_realpath_from_path+0xe3/0x5d0 [ 157.826713][ T8648] tomoyo_check_open_permission+0x1c1/0x3b0 [ 157.826726][ T8648] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 157.826738][ T8648] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 157.826769][ T8648] ? mnt_get_write_access+0x66/0x280 [ 157.826789][ T8648] security_file_open+0xb1/0x270 [ 157.826817][ T8648] do_dentry_open+0x34e/0x1420 [ 157.826833][ T8648] ? _raw_spin_unlock+0x28/0x50 [ 157.826845][ T8648] vfs_tmpfile+0x400/0x890 [ 157.826866][ T8648] kernel_tmpfile_open+0x4d/0x90 [ 157.826881][ T8648] ovl_copy_up_flags+0x1670/0x37f0 [ 157.826892][ T8648] ? __lock_acquire+0xab9/0xd20 [ 157.826920][ T8648] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 157.826930][ T8648] ? __lock_acquire+0xab9/0xd20 [ 157.826951][ T8648] ? is_bpf_text_address+0x26/0x2b0 [ 157.826965][ T8648] ? __lock_acquire+0xab9/0xd20 [ 157.826981][ T8648] ? __lock_acquire+0xab9/0xd20 [ 157.827001][ T8648] ? dput+0x37/0x1a0 [ 157.827013][ T8648] ? cap_inode_getsecurity+0x241/0x830 [ 157.827025][ T8648] ? rcu_is_watching+0x15/0xb0 [ 157.827037][ T8648] ? cap_inode_getsecurity+0x241/0x830 [ 157.827047][ T8648] ? kfree+0x4d/0x680 [ 157.827058][ T8648] ? dput+0x37/0x1a0 [ 157.827103][ T8648] ? setattr_prepare+0x1e7/0xac0 [ 157.827113][ T8648] ? current_time+0x222/0x370 [ 157.827129][ T8648] ? evm_inode_setattr+0x1ad/0x7d0 [ 157.827143][ T8648] ovl_setattr+0x11b/0x580 [ 157.827155][ T8648] ? try_break_deleg+0x79/0x120 [ 157.827163][ T8648] ? __pfx_ovl_setattr+0x10/0x10 [ 157.827175][ T8648] notify_change+0xc1a/0xf40 [ 157.827191][ T8648] do_truncate+0x1a4/0x220 [ 157.827202][ T8648] ? __pfx_do_truncate+0x10/0x10 [ 157.827209][ T8648] ? apparmor_path_truncate+0x238/0x2d0 [ 157.827233][ T8648] vfs_truncate+0x493/0x520 [ 157.827245][ T8648] ? __pfx_vfs_truncate+0x10/0x10 [ 157.827260][ T8648] do_sys_truncate+0xdb/0x190 [ 157.827269][ T8648] ? __pfx_do_sys_truncate+0x10/0x10 [ 157.827278][ T8648] ? __pfx_ksys_write+0x10/0x10 [ 157.827291][ T8648] __x64_sys_truncate+0x5b/0x70 [ 157.827301][ T8648] do_syscall_64+0xfa/0xfa0 [ 157.827313][ T8648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.827322][ T8648] ? clear_bhb_loop+0x60/0xb0 [ 157.827334][ T8648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.827343][ T8648] RIP: 0033:0x7f2c4b78f749 [ 157.827353][ T8648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.827362][ T8648] RSP: 002b:00007f2c4c6a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 157.827373][ T8648] RAX: ffffffffffffffda RBX: 00007f2c4b9e5fa0 RCX: 00007f2c4b78f749 [ 157.827380][ T8648] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000280 [ 157.827386][ T8648] RBP: 00007f2c4c6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 157.827395][ T8648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.827404][ T8648] R13: 00007f2c4b9e6038 R14: 00007f2c4b9e5fa0 R15: 00007ffc0d0b91a8 [ 157.827431][ T8648] [ 157.987584][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 158.018465][ T8648] ERROR: Out of memory at tomoyo_realpath_from_path. [ 158.210858][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.218392][ T8344] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 158.227464][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.230705][ T8344] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 158.238908][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 158.255978][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 158.257077][ T8344] usb 4-1: can't read configurations, error -61 [ 158.265324][ T9] usb 2-1: SerialNumber: syz [ 158.273251][ T8344] usb usb4-port1: attempt power cycle [ 158.517100][ T9] usb 2-1: 0:2 : does not exist [ 158.523432][ T9] usb 2-1: unit 5 not found! [ 158.523567][ T8667] netlink: 36 bytes leftover after parsing attributes in process `syz.0.404'. [ 158.550919][ T9] usb 2-1: USB disconnect, device number 40 [ 158.559447][ T8667] tipc: Can't bind to reserved service type 0 [ 158.567517][ T5839] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 158.607380][ T6323] udevd[6323]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.637875][ T8344] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 158.690349][ T8344] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 158.698331][ T5839] usb 3-1: device descriptor read/64, error -71 [ 158.706705][ T8344] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 158.715615][ T8344] usb 4-1: can't read configurations, error -61 [ 158.847662][ T8344] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 158.870735][ T8344] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 158.881460][ T8344] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 158.889806][ T8344] usb 4-1: can't read configurations, error -61 [ 158.896348][ T8344] usb usb4-port1: unable to enumerate USB device [ 158.937514][ T5839] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 159.051307][ T8693] overlayfs: failed to resolve './file0': -2 [ 159.061903][ T8693] overlayfs: failed to resolve './file0': -2 [ 159.078426][ T5839] usb 3-1: device descriptor read/64, error -71 [ 159.131186][ T8697] sp0: Synchronizing with TNC [ 159.197845][ T5839] usb usb3-port1: attempt power cycle [ 159.272041][ T8709] FAULT_INJECTION: forcing a failure. [ 159.272041][ T8709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.286268][ T8709] CPU: 0 UID: 0 PID: 8709 Comm: syz.1.408 Not tainted syzkaller #0 PREEMPT(full) [ 159.286292][ T8709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.286303][ T8709] Call Trace: [ 159.286310][ T8709] [ 159.286315][ T8709] dump_stack_lvl+0x189/0x250 [ 159.286331][ T8709] ? __pfx____ratelimit+0x10/0x10 [ 159.286343][ T8709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.286355][ T8709] ? __pfx__printk+0x10/0x10 [ 159.286373][ T8709] should_fail_ex+0x414/0x560 [ 159.286389][ T8709] _copy_to_user+0x31/0xb0 [ 159.286401][ T8709] simple_read_from_buffer+0xe1/0x170 [ 159.286415][ T8709] proc_fail_nth_read+0x1b3/0x220 [ 159.286427][ T8709] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.286438][ T8709] ? rw_verify_area+0x2a6/0x4d0 [ 159.286451][ T8709] ? __lock_acquire+0xab9/0xd20 [ 159.286462][ T8709] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.286472][ T8709] vfs_read+0x200/0xa30 [ 159.286485][ T8709] ? fdget_pos+0x247/0x320 [ 159.286499][ T8709] ? __pfx___mutex_lock+0x10/0x10 [ 159.286511][ T8709] ? __pfx_vfs_read+0x10/0x10 [ 159.286526][ T8709] ? __fget_files+0x2a/0x420 [ 159.286539][ T8709] ? __fget_files+0x3a0/0x420 [ 159.286549][ T8709] ? __fget_files+0x2a/0x420 [ 159.286564][ T8709] ksys_read+0x145/0x250 [ 159.286579][ T8709] ? __pfx_ksys_read+0x10/0x10 [ 159.286595][ T8709] ? do_syscall_64+0xbe/0xfa0 [ 159.286608][ T8709] do_syscall_64+0xfa/0xfa0 [ 159.286619][ T8709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.286629][ T8709] ? clear_bhb_loop+0x60/0xb0 [ 159.286641][ T8709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.286650][ T8709] RIP: 0033:0x7f965678e15c [ 159.286660][ T8709] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 159.286668][ T8709] RSP: 002b:00007f96575c2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.286679][ T8709] RAX: ffffffffffffffda RBX: 00007f96569e5fa0 RCX: 00007f965678e15c [ 159.286686][ T8709] RDX: 000000000000000f RSI: 00007f96575c20a0 RDI: 0000000000000004 [ 159.286694][ T8709] RBP: 00007f96575c2090 R08: 0000000000000000 R09: 0000000000000000 [ 159.286700][ T8709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 159.286706][ T8709] R13: 00007f96569e6038 R14: 00007f96569e5fa0 R15: 00007ffe79cb2f68 [ 159.286722][ T8709] [ 159.577512][ T5839] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 159.598174][ T5839] usb 3-1: device descriptor read/8, error -71 [ 159.638536][ T30] audit: type=1326 audit(1763914444.629:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.1.410" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f965678f749 code=0x0 [ 159.838736][ T5839] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 159.857971][ T5839] usb 3-1: device descriptor read/8, error -71 [ 159.977721][ T5839] usb usb3-port1: unable to enumerate USB device [ 160.242069][ T8719] FAULT_INJECTION: forcing a failure. [ 160.242069][ T8719] name failslab, interval 1, probability 0, space 0, times 0 [ 160.254904][ T8719] CPU: 1 UID: 0 PID: 8719 Comm: syz.3.411 Not tainted syzkaller #0 PREEMPT(full) [ 160.254919][ T8719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.254925][ T8719] Call Trace: [ 160.254930][ T8719] [ 160.254934][ T8719] dump_stack_lvl+0x189/0x250 [ 160.254952][ T8719] ? __pfx____ratelimit+0x10/0x10 [ 160.254964][ T8719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.254976][ T8719] ? __pfx__printk+0x10/0x10 [ 160.254991][ T8719] ? __pfx___might_resched+0x10/0x10 [ 160.255006][ T8719] should_fail_ex+0x414/0x560 [ 160.255022][ T8719] should_failslab+0xa8/0x100 [ 160.255034][ T8719] __kmalloc_noprof+0xdf/0x800 [ 160.255048][ T8719] ? kfree+0x4d/0x680 [ 160.255059][ T8719] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 160.255078][ T8719] tomoyo_realpath_from_path+0xe3/0x5d0 [ 160.255099][ T8719] tomoyo_check_open_permission+0x1c1/0x3b0 [ 160.255112][ T8719] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 160.255124][ T8719] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 160.255155][ T8719] ? mnt_get_write_access+0x66/0x280 [ 160.255174][ T8719] security_file_open+0xb1/0x270 [ 160.255186][ T8719] do_dentry_open+0x34e/0x1420 [ 160.255203][ T8719] ? _raw_spin_unlock+0x28/0x50 [ 160.255215][ T8719] vfs_tmpfile+0x400/0x890 [ 160.255235][ T8719] kernel_tmpfile_open+0x4d/0x90 [ 160.255250][ T8719] ovl_copy_up_flags+0x1670/0x37f0 [ 160.255261][ T8719] ? __lock_acquire+0xab9/0xd20 [ 160.255288][ T8719] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 160.255298][ T8719] ? __lock_acquire+0xab9/0xd20 [ 160.255319][ T8719] ? is_bpf_text_address+0x26/0x2b0 [ 160.255333][ T8719] ? __lock_acquire+0xab9/0xd20 [ 160.255348][ T8719] ? __lock_acquire+0xab9/0xd20 [ 160.255369][ T8719] ? dput+0x37/0x1a0 [ 160.255381][ T8719] ? cap_inode_getsecurity+0x241/0x830 [ 160.255392][ T8719] ? rcu_is_watching+0x15/0xb0 [ 160.255404][ T8719] ? cap_inode_getsecurity+0x241/0x830 [ 160.255414][ T8719] ? kfree+0x4d/0x680 [ 160.255425][ T8719] ? dput+0x37/0x1a0 [ 160.255470][ T8719] ? setattr_prepare+0x1e7/0xac0 [ 160.255480][ T8719] ? current_time+0x222/0x370 [ 160.255491][ T8719] ? evm_inode_setattr+0x1ad/0x7d0 [ 160.255504][ T8719] ovl_setattr+0x11b/0x580 [ 160.255517][ T8719] ? try_break_deleg+0x79/0x120 [ 160.255525][ T8719] ? __pfx_ovl_setattr+0x10/0x10 [ 160.255561][ T8719] notify_change+0xc1a/0xf40 [ 160.255588][ T8719] do_truncate+0x1a4/0x220 [ 160.255607][ T8719] ? __pfx_do_truncate+0x10/0x10 [ 160.255621][ T8719] ? apparmor_path_truncate+0x238/0x2d0 [ 160.255660][ T8719] vfs_truncate+0x493/0x520 [ 160.255674][ T8719] ? __pfx_vfs_truncate+0x10/0x10 [ 160.255689][ T8719] do_sys_truncate+0xdb/0x190 [ 160.255698][ T8719] ? __pfx_do_sys_truncate+0x10/0x10 [ 160.255707][ T8719] ? __pfx_ksys_write+0x10/0x10 [ 160.255720][ T8719] __x64_sys_truncate+0x5b/0x70 [ 160.255730][ T8719] do_syscall_64+0xfa/0xfa0 [ 160.255742][ T8719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.255752][ T8719] ? clear_bhb_loop+0x60/0xb0 [ 160.255764][ T8719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.255773][ T8719] RIP: 0033:0x7f1bc438f749 [ 160.255783][ T8719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.255797][ T8719] RSP: 002b:00007f1bc517d038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 160.255808][ T8719] RAX: ffffffffffffffda RBX: 00007f1bc45e5fa0 RCX: 00007f1bc438f749 [ 160.255816][ T8719] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000280 [ 160.255822][ T8719] RBP: 00007f1bc517d090 R08: 0000000000000000 R09: 0000000000000000 [ 160.255828][ T8719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.255833][ T8719] R13: 00007f1bc45e6038 R14: 00007f1bc45e5fa0 R15: 00007fff292661f8 [ 160.255850][ T8719] [ 160.255855][ T8719] ERROR: Out of memory at tomoyo_realpath_from_path. [ 160.701746][ T8723] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.413'. [ 160.713370][ T30] audit: type=1326 audit(1763914445.699:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.1.413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f965678f749 code=0x0 [ 160.841585][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'. [ 161.358321][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 161.405437][ T8754] msdos: Unknown parameter 'i' [ 161.419741][ T8754] tmpfs: Bad value for 'size' [ 161.473052][ T8757] FAULT_INJECTION: forcing a failure. [ 161.473052][ T8757] name failslab, interval 1, probability 0, space 0, times 0 [ 161.489318][ T8757] CPU: 1 UID: 0 PID: 8757 Comm: syz.2.420 Not tainted syzkaller #0 PREEMPT(full) [ 161.489344][ T8757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.489355][ T8757] Call Trace: [ 161.489362][ T8757] [ 161.489370][ T8757] dump_stack_lvl+0x189/0x250 [ 161.489396][ T8757] ? __pfx____ratelimit+0x10/0x10 [ 161.489416][ T8757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.489437][ T8757] ? __pfx__printk+0x10/0x10 [ 161.489475][ T8757] ? __pfx___might_resched+0x10/0x10 [ 161.489493][ T8757] ? fs_reclaim_acquire+0x7d/0x100 [ 161.489517][ T8757] should_fail_ex+0x414/0x560 [ 161.489549][ T8757] should_failslab+0xa8/0x100 [ 161.489570][ T8757] __kmalloc_noprof+0xdf/0x800 [ 161.489594][ T8757] ? tomoyo_encode+0x28b/0x550 [ 161.489624][ T8757] tomoyo_encode+0x28b/0x550 [ 161.489654][ T8757] tomoyo_realpath_from_path+0x58d/0x5d0 [ 161.489694][ T8757] tomoyo_check_open_permission+0x1c1/0x3b0 [ 161.489717][ T8757] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 161.489738][ T8757] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 161.489791][ T8757] ? mnt_get_write_access+0x66/0x280 [ 161.489821][ T8757] security_file_open+0xb1/0x270 [ 161.489840][ T8757] do_dentry_open+0x34e/0x1420 [ 161.489866][ T8757] ? _raw_spin_unlock+0x28/0x50 [ 161.489887][ T8757] vfs_tmpfile+0x400/0x890 [ 161.489920][ T8757] kernel_tmpfile_open+0x4d/0x90 [ 161.489946][ T8757] ovl_copy_up_flags+0x1670/0x37f0 [ 161.489964][ T8757] ? __lock_acquire+0xab9/0xd20 [ 161.490011][ T8757] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 161.490027][ T8757] ? __lock_acquire+0xab9/0xd20 [ 161.490053][ T8757] ? is_bpf_text_address+0x26/0x2b0 [ 161.490067][ T8757] ? __lock_acquire+0xab9/0xd20 [ 161.490083][ T8757] ? __lock_acquire+0xab9/0xd20 [ 161.490103][ T8757] ? dput+0x37/0x1a0 [ 161.490115][ T8757] ? cap_inode_getsecurity+0x241/0x830 [ 161.490127][ T8757] ? rcu_is_watching+0x15/0xb0 [ 161.490139][ T8757] ? cap_inode_getsecurity+0x241/0x830 [ 161.490149][ T8757] ? kfree+0x4d/0x680 [ 161.490160][ T8757] ? dput+0x37/0x1a0 [ 161.490206][ T8757] ? setattr_prepare+0x1e7/0xac0 [ 161.490215][ T8757] ? current_time+0x222/0x370 [ 161.490227][ T8757] ? evm_inode_setattr+0x1ad/0x7d0 [ 161.490240][ T8757] ovl_setattr+0x11b/0x580 [ 161.490254][ T8757] ? try_break_deleg+0x79/0x120 [ 161.490261][ T8757] ? __pfx_ovl_setattr+0x10/0x10 [ 161.490274][ T8757] notify_change+0xc1a/0xf40 [ 161.490289][ T8757] do_truncate+0x1a4/0x220 [ 161.490300][ T8757] ? __pfx_do_truncate+0x10/0x10 [ 161.490307][ T8757] ? apparmor_path_truncate+0x238/0x2d0 [ 161.490330][ T8757] vfs_truncate+0x493/0x520 [ 161.490342][ T8757] ? __pfx_vfs_truncate+0x10/0x10 [ 161.490357][ T8757] do_sys_truncate+0xdb/0x190 [ 161.490366][ T8757] ? __pfx_do_sys_truncate+0x10/0x10 [ 161.490375][ T8757] ? __pfx_ksys_write+0x10/0x10 [ 161.490387][ T8757] __x64_sys_truncate+0x5b/0x70 [ 161.490397][ T8757] do_syscall_64+0xfa/0xfa0 [ 161.490409][ T8757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.490419][ T8757] ? clear_bhb_loop+0x60/0xb0 [ 161.490430][ T8757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.490439][ T8757] RIP: 0033:0x7f2c4b78f749 [ 161.490449][ T8757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.490457][ T8757] RSP: 002b:00007f2c4c6a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 161.490476][ T8757] RAX: ffffffffffffffda RBX: 00007f2c4b9e5fa0 RCX: 00007f2c4b78f749 [ 161.490484][ T8757] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000280 [ 161.490490][ T8757] RBP: 00007f2c4c6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 161.490496][ T8757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.490501][ T8757] R13: 00007f2c4b9e6038 R14: 00007f2c4b9e5fa0 R15: 00007ffc0d0b91a8 [ 161.490518][ T8757] [ 161.492434][ T8757] ERROR: Out of memory at tomoyo_realpath_from_path. [ 161.520609][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 161.887768][ T8344] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 161.890023][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 161.905129][ T9] usb 2-1: config 1 has no interface number 1 [ 161.911609][ T9] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.923725][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 161.936894][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.983662][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.002608][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.014969][ T9] usb 2-1: Product: syz [ 162.020163][ T9] usb 2-1: Manufacturer: syz [ 162.027539][ T9] usb 2-1: SerialNumber: syz [ 162.090032][ T8344] usb 4-1: unable to get BOS descriptor or descriptor too short [ 162.098394][ T8344] usb 4-1: not running at top speed; connect to a high speed hub [ 162.107068][ T8344] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 162.122167][ T8344] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.131781][ T8344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.140097][ T8344] usb 4-1: Product: syz [ 162.144284][ T8344] usb 4-1: Manufacturer: syz [ 162.149146][ T8344] usb 4-1: SerialNumber: syz [ 162.207608][ T5897] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 162.337510][ T5897] usb 3-1: device descriptor read/64, error -71 [ 162.577525][ T5897] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 162.650512][ T8742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.659636][ T8742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.683636][ T9] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 162.699968][ T9] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 162.708458][ T5897] usb 3-1: device descriptor read/64, error -71 [ 162.745234][ T8344] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 162.755225][ T8800] sp0: Synchronizing with TNC [ 162.764803][ T9] usb 2-1: USB disconnect, device number 41 [ 162.778081][ T8344] usb 4-1: unit 0 not found! [ 162.801567][ T8344] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 162.819066][ T5897] usb usb3-port1: attempt power cycle [ 162.840205][ T8344] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 162.871600][ T8344] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 162.910908][ T8344] usb 4-1: USB disconnect, device number 39 [ 162.971944][ T6478] udevd[6478]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 163.167677][ T5897] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 163.188866][ T5897] usb 3-1: device descriptor read/8, error -71 [ 163.287519][ T9] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 163.287519][ T8344] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 163.427491][ T5897] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 163.435261][ T9] usb 2-1: device descriptor read/64, error -71 [ 163.449682][ T8344] usb 4-1: config 0 interface 0 has no altsetting 0 [ 163.456501][ T8344] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 163.458130][ T5897] usb 3-1: device descriptor read/8, error -71 [ 163.465776][ T8344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.482030][ T8344] usb 4-1: config 0 descriptor?? [ 163.577938][ T5897] usb usb3-port1: unable to enumerate USB device [ 163.677585][ T9] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 163.695502][ T8344] (null): keene_cmd_main failed (-71) [ 163.709134][ T8344] video4linux radio48: keene_cmd_main failed (-71) [ 163.722094][ T8344] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 163.733715][ T8344] usb 4-1: USB disconnect, device number 40 [ 163.808776][ T9] usb 2-1: device descriptor read/64, error -71 [ 163.917868][ T9] usb usb2-port1: attempt power cycle [ 164.257748][ T9] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 164.278876][ T9] usb 2-1: device descriptor read/8, error -71 [ 164.517521][ T5839] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 164.527685][ T9] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 164.547948][ T9] usb 2-1: device descriptor read/8, error -71 [ 164.657696][ T9] usb usb2-port1: unable to enumerate USB device [ 164.667527][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 164.674597][ T5839] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 164.682904][ T5839] usb 4-1: config 0 has no interface number 0 [ 164.689060][ T5839] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 164.699300][ T5839] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 164.709332][ T5839] usb 4-1: config 0 interface 126 has no altsetting 0 [ 164.718065][ T5839] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 164.727304][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.735500][ T5839] usb 4-1: Product: syz [ 164.739753][ T5839] usb 4-1: Manufacturer: syz [ 164.744373][ T5839] usb 4-1: SerialNumber: syz [ 164.751060][ T5839] usb 4-1: config 0 descriptor?? [ 164.756690][ T8867] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 164.764291][ T8867] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 164.982552][ T30] audit: type=1800 audit(1763914449.969:6): pid=8867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.427" name="file1" dev="tmpfs" ino=457 res=0 errno=0 [ 165.026459][ T5839] ir_usb 4-1:0.126: IR Dongle converter detected [ 165.038609][ T5839] usb 4-1: IRDA class descriptor not found, device not bound [ 165.088448][ T5839] usb 4-1: USB disconnect, device number 41 [ 165.098781][ T8884] FAULT_INJECTION: forcing a failure. [ 165.098781][ T8884] name failslab, interval 1, probability 0, space 0, times 0 [ 165.115395][ T8884] CPU: 1 UID: 0 PID: 8884 Comm: syz.0.429 Not tainted syzkaller #0 PREEMPT(full) [ 165.115419][ T8884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.115430][ T8884] Call Trace: [ 165.115437][ T8884] [ 165.115445][ T8884] dump_stack_lvl+0x189/0x250 [ 165.115471][ T8884] ? __pfx____ratelimit+0x10/0x10 [ 165.115491][ T8884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.115511][ T8884] ? __pfx__printk+0x10/0x10 [ 165.115538][ T8884] ? __pfx___might_resched+0x10/0x10 [ 165.115558][ T8884] ? fs_reclaim_acquire+0x7d/0x100 [ 165.115582][ T8884] should_fail_ex+0x414/0x560 [ 165.115611][ T8884] should_failslab+0xa8/0x100 [ 165.115632][ T8884] kmem_cache_alloc_noprof+0x88/0x700 [ 165.115657][ T8884] ? security_file_alloc+0x34/0x330 [ 165.115682][ T8884] security_file_alloc+0x34/0x330 [ 165.115704][ T8884] init_file+0x93/0x2f0 [ 165.115728][ T8884] alloc_empty_file+0x6e/0x1d0 [ 165.115751][ T8884] dentry_open+0x44/0xa0 [ 165.115776][ T8884] ovl_sync_file+0x17/0x50 [ 165.115797][ T8884] ovl_copy_up_metadata+0x831/0xb60 [ 165.115826][ T8884] ? __pfx_ovl_copy_up_metadata+0x10/0x10 [ 165.115863][ T8884] ? __lock_acquire+0xab9/0xd20 [ 165.115897][ T8884] ? rcu_read_lock_any_held+0xb3/0x120 [ 165.115919][ T8884] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 165.115946][ T8884] ? ovl_copy_up_flags+0x168f/0x37f0 [ 165.115975][ T8884] ovl_copy_up_flags+0x1a1c/0x37f0 [ 165.115994][ T8884] ? __lock_acquire+0xab9/0xd20 [ 165.116042][ T8884] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 165.116061][ T8884] ? __lock_acquire+0xab9/0xd20 [ 165.116101][ T8884] ? is_bpf_text_address+0x26/0x2b0 [ 165.116125][ T8884] ? __lock_acquire+0xab9/0xd20 [ 165.116155][ T8884] ? __lock_acquire+0xab9/0xd20 [ 165.116192][ T8884] ? dput+0x37/0x1a0 [ 165.116214][ T8884] ? cap_inode_getsecurity+0x241/0x830 [ 165.116234][ T8884] ? rcu_is_watching+0x15/0xb0 [ 165.116254][ T8884] ? cap_inode_getsecurity+0x241/0x830 [ 165.116272][ T8884] ? kfree+0x4d/0x680 [ 165.116291][ T8884] ? dput+0x37/0x1a0 [ 165.116383][ T8884] ? setattr_prepare+0x1e7/0xac0 [ 165.116402][ T8884] ? current_time+0x222/0x370 [ 165.116423][ T8884] ? evm_inode_setattr+0x1ad/0x7d0 [ 165.116446][ T8884] ovl_setattr+0x11b/0x580 [ 165.116469][ T8884] ? try_break_deleg+0x79/0x120 [ 165.116483][ T8884] ? __pfx_ovl_setattr+0x10/0x10 [ 165.116505][ T8884] notify_change+0xc1a/0xf40 [ 165.116533][ T8884] do_truncate+0x1a4/0x220 [ 165.116553][ T8884] ? __pfx_do_truncate+0x10/0x10 [ 165.116567][ T8884] ? apparmor_path_truncate+0x238/0x2d0 [ 165.116609][ T8884] vfs_truncate+0x493/0x520 [ 165.116632][ T8884] ? __pfx_vfs_truncate+0x10/0x10 [ 165.116660][ T8884] do_sys_truncate+0xdb/0x190 [ 165.116677][ T8884] ? __pfx_do_sys_truncate+0x10/0x10 [ 165.116695][ T8884] ? __pfx_ksys_write+0x10/0x10 [ 165.116719][ T8884] __x64_sys_truncate+0x5b/0x70 [ 165.116737][ T8884] do_syscall_64+0xfa/0xfa0 [ 165.116759][ T8884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.116777][ T8884] ? clear_bhb_loop+0x60/0xb0 [ 165.116798][ T8884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.116815][ T8884] RIP: 0033:0x7f85e2d8f749 [ 165.116831][ T8884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.116846][ T8884] RSP: 002b:00007f85e3bee038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 165.116866][ T8884] RAX: ffffffffffffffda RBX: 00007f85e2fe5fa0 RCX: 00007f85e2d8f749 [ 165.116879][ T8884] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000280 [ 165.116889][ T8884] RBP: 00007f85e3bee090 R08: 0000000000000000 R09: 0000000000000000 [ 165.116900][ T8884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.116911][ T8884] R13: 00007f85e2fe6038 R14: 00007f85e2fe5fa0 R15: 00007fffb44d6ba8 [ 165.116943][ T8884] [ 165.490043][ T6323] udevd[6323]: setting owner of /dev/bus/usb/004/041 to uid=0, gid=0 failed: No such file or directory [ 165.733927][ T8897] netlink: 72 bytes leftover after parsing attributes in process `syz.2.431'. [ 166.159616][ T8922] delete_channel: no stack [ 166.247568][ T980] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 166.402942][ T980] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 166.412214][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.420277][ T980] usb 2-1: Product: syz [ 166.424441][ T980] usb 2-1: Manufacturer: syz [ 166.429203][ T980] usb 2-1: SerialNumber: syz [ 166.511078][ T8935] FAULT_INJECTION: forcing a failure. [ 166.511078][ T8935] name failslab, interval 1, probability 0, space 0, times 0 [ 166.524625][ T8935] CPU: 1 UID: 0 PID: 8935 Comm: syz.0.438 Not tainted syzkaller #0 PREEMPT(full) [ 166.524643][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.524653][ T8935] Call Trace: [ 166.524661][ T8935] [ 166.524669][ T8935] dump_stack_lvl+0x189/0x250 [ 166.524695][ T8935] ? __pfx____ratelimit+0x10/0x10 [ 166.524715][ T8935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.524734][ T8935] ? __pfx__printk+0x10/0x10 [ 166.524750][ T8935] ? __pfx___might_resched+0x10/0x10 [ 166.524764][ T8935] should_fail_ex+0x414/0x560 [ 166.524781][ T8935] should_failslab+0xa8/0x100 [ 166.524797][ T8935] __kmalloc_noprof+0xdf/0x800 [ 166.524822][ T8935] ? kfree+0x4d/0x680 [ 166.524841][ T8935] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 166.524873][ T8935] tomoyo_realpath_from_path+0xe3/0x5d0 [ 166.524899][ T8935] tomoyo_check_open_permission+0x1c1/0x3b0 [ 166.524910][ T8935] ? ovl_copy_up_metadata+0x831/0xb60 [ 166.524922][ T8935] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 166.524934][ T8935] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 166.524960][ T8935] ? __x64_sys_truncate+0x5b/0x70 [ 166.525016][ T8935] ? tomoyo_file_open+0x164/0x220 [ 166.525040][ T8935] security_file_open+0xb1/0x270 [ 166.525062][ T8935] do_dentry_open+0x34e/0x1420 [ 166.525088][ T8935] vfs_open+0x3b/0x340 [ 166.525101][ T8935] dentry_open+0x61/0xa0 [ 166.525120][ T8935] ovl_sync_file+0x17/0x50 [ 166.525141][ T8935] ovl_copy_up_metadata+0x831/0xb60 [ 166.525169][ T8935] ? __pfx_ovl_copy_up_metadata+0x10/0x10 [ 166.525201][ T8935] ? __lock_acquire+0xab9/0xd20 [ 166.525219][ T8935] ? rcu_read_lock_any_held+0xb3/0x120 [ 166.525233][ T8935] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 166.525247][ T8935] ? ovl_copy_up_flags+0x168f/0x37f0 [ 166.525273][ T8935] ovl_copy_up_flags+0x1a1c/0x37f0 [ 166.525293][ T8935] ? __lock_acquire+0xab9/0xd20 [ 166.525343][ T8935] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 166.525354][ T8935] ? __lock_acquire+0xab9/0xd20 [ 166.525375][ T8935] ? is_bpf_text_address+0x26/0x2b0 [ 166.525389][ T8935] ? __lock_acquire+0xab9/0xd20 [ 166.525408][ T8935] ? __lock_acquire+0xab9/0xd20 [ 166.525447][ T8935] ? dput+0x37/0x1a0 [ 166.525469][ T8935] ? cap_inode_getsecurity+0x241/0x830 [ 166.525489][ T8935] ? rcu_is_watching+0x15/0xb0 [ 166.525502][ T8935] ? cap_inode_getsecurity+0x241/0x830 [ 166.525512][ T8935] ? kfree+0x4d/0x680 [ 166.525523][ T8935] ? dput+0x37/0x1a0 [ 166.525585][ T8935] ? setattr_prepare+0x1e7/0xac0 [ 166.525604][ T8935] ? current_time+0x222/0x370 [ 166.525624][ T8935] ? evm_inode_setattr+0x1ad/0x7d0 [ 166.525645][ T8935] ovl_setattr+0x11b/0x580 [ 166.525658][ T8935] ? try_break_deleg+0x79/0x120 [ 166.525666][ T8935] ? __pfx_ovl_setattr+0x10/0x10 [ 166.525678][ T8935] notify_change+0xc1a/0xf40 [ 166.525694][ T8935] do_truncate+0x1a4/0x220 [ 166.525708][ T8935] ? __pfx_do_truncate+0x10/0x10 [ 166.525723][ T8935] ? apparmor_path_truncate+0x238/0x2d0 [ 166.525766][ T8935] vfs_truncate+0x493/0x520 [ 166.525789][ T8935] ? __pfx_vfs_truncate+0x10/0x10 [ 166.525806][ T8935] do_sys_truncate+0xdb/0x190 [ 166.525815][ T8935] ? __pfx_do_sys_truncate+0x10/0x10 [ 166.525824][ T8935] ? __pfx_ksys_write+0x10/0x10 [ 166.525841][ T8935] __x64_sys_truncate+0x5b/0x70 [ 166.525852][ T8935] do_syscall_64+0xfa/0xfa0 [ 166.525873][ T8935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.525891][ T8935] ? clear_bhb_loop+0x60/0xb0 [ 166.525912][ T8935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.525929][ T8935] RIP: 0033:0x7f85e2d8f749 [ 166.525949][ T8935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.525957][ T8935] RSP: 002b:00007f85e3bee038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 166.525968][ T8935] RAX: ffffffffffffffda RBX: 00007f85e2fe5fa0 RCX: 00007f85e2d8f749 [ 166.525975][ T8935] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000280 [ 166.525981][ T8935] RBP: 00007f85e3bee090 R08: 0000000000000000 R09: 0000000000000000 [ 166.525987][ T8935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.525993][ T8935] R13: 00007f85e2fe6038 R14: 00007f85e2fe5fa0 R15: 00007fffb44d6ba8 [ 166.526020][ T8935] [ 166.526055][ T8935] ERROR: Out of memory at tomoyo_realpath_from_path. [ 166.607673][ T5897] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 166.760157][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 166.762444][ T5897] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 166.966673][ T980] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 166.979852][ T980] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 166.992073][ T5897] usb 3-1: config 0 has no interface number 0 [ 166.998391][ T5897] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 167.012870][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.026048][ T5897] usb 3-1: config 0 descriptor?? [ 167.097529][ T5839] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 167.148172][ T5897] viperboard 3-1:0.143: version 0.00 found at bus 003 address 040 [ 167.177110][ T5897] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 167.188887][ T5897] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 167.245059][ T5919] usb 3-1: USB disconnect, device number 40 [ 167.259712][ T5839] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 167.278054][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.304559][ T5839] usb 4-1: config 0 descriptor?? [ 167.327106][ T5839] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19 [ 167.523965][ T5897] usb 4-1: USB disconnect, device number 42 [ 168.347530][ T5897] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 168.497518][ T5897] usb 4-1: device descriptor read/64, error -71 [ 168.615468][ T980] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 168.636381][ T980] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 168.649683][ T980] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 168.663045][ T980] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 168.674118][ T980] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 168.685706][ T980] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 168.703193][ T980] usb 2-1: USB disconnect, device number 46 [ 168.737626][ T5897] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 168.877528][ T5897] usb 4-1: device descriptor read/64, error -71 [ 168.988613][ T5897] usb usb4-port1: attempt power cycle [ 169.151970][ T9047] CIFS mount error: No usable UNC path provided in device string! [ 169.151970][ T9047] [ 169.163125][ T9047] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 169.327742][ T5897] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 169.368157][ T5897] usb 4-1: device descriptor read/8, error -71 [ 169.459166][ T9067] FAULT_INJECTION: forcing a failure. [ 169.459166][ T9067] name failslab, interval 1, probability 0, space 0, times 0 [ 169.475127][ T9067] CPU: 1 UID: 0 PID: 9067 Comm: syz.1.449 Not tainted syzkaller #0 PREEMPT(full) [ 169.475153][ T9067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.475164][ T9067] Call Trace: [ 169.475172][ T9067] [ 169.475180][ T9067] dump_stack_lvl+0x189/0x250 [ 169.475207][ T9067] ? __pfx____ratelimit+0x10/0x10 [ 169.475228][ T9067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.475250][ T9067] ? __pfx__printk+0x10/0x10 [ 169.475277][ T9067] ? __pfx___might_resched+0x10/0x10 [ 169.475296][ T9067] ? fs_reclaim_acquire+0x7d/0x100 [ 169.475320][ T9067] should_fail_ex+0x414/0x560 [ 169.475349][ T9067] should_failslab+0xa8/0x100 [ 169.475370][ T9067] __kmalloc_noprof+0xdf/0x800 [ 169.475396][ T9067] ? tomoyo_encode+0x28b/0x550 [ 169.475426][ T9067] tomoyo_encode+0x28b/0x550 [ 169.475456][ T9067] tomoyo_realpath_from_path+0x58d/0x5d0 [ 169.475498][ T9067] tomoyo_check_open_permission+0x1c1/0x3b0 [ 169.475518][ T9067] ? ovl_copy_up_metadata+0x831/0xb60 [ 169.475539][ T9067] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 169.475561][ T9067] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 169.475580][ T9067] ? __x64_sys_truncate+0x5b/0x70 [ 169.475639][ T9067] ? tomoyo_file_open+0x164/0x220 [ 169.475668][ T9067] security_file_open+0xb1/0x270 [ 169.475689][ T9067] do_dentry_open+0x34e/0x1420 [ 169.475727][ T9067] vfs_open+0x3b/0x340 [ 169.475762][ T9067] dentry_open+0x61/0xa0 [ 169.475783][ T9067] ovl_sync_file+0x17/0x50 [ 169.475804][ T9067] ovl_copy_up_metadata+0x831/0xb60 [ 169.475832][ T9067] ? __pfx_ovl_copy_up_metadata+0x10/0x10 [ 169.475870][ T9067] ? __lock_acquire+0xab9/0xd20 [ 169.475904][ T9067] ? rcu_read_lock_any_held+0xb3/0x120 [ 169.475927][ T9067] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 169.475953][ T9067] ? ovl_copy_up_flags+0x168f/0x37f0 [ 169.475984][ T9067] ovl_copy_up_flags+0x1a1c/0x37f0 [ 169.476003][ T9067] ? __lock_acquire+0xab9/0xd20 [ 169.476053][ T9067] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 169.476072][ T9067] ? __lock_acquire+0xab9/0xd20 [ 169.476113][ T9067] ? is_bpf_text_address+0x26/0x2b0 [ 169.476139][ T9067] ? __lock_acquire+0xab9/0xd20 [ 169.476169][ T9067] ? __lock_acquire+0xab9/0xd20 [ 169.476208][ T9067] ? dput+0x37/0x1a0 [ 169.476230][ T9067] ? cap_inode_getsecurity+0x241/0x830 [ 169.476250][ T9067] ? rcu_is_watching+0x15/0xb0 [ 169.476271][ T9067] ? cap_inode_getsecurity+0x241/0x830 [ 169.476289][ T9067] ? kfree+0x4d/0x680 [ 169.476309][ T9067] ? dput+0x37/0x1a0 [ 169.476398][ T9067] ? setattr_prepare+0x1e7/0xac0 [ 169.476417][ T9067] ? current_time+0x222/0x370 [ 169.476438][ T9067] ? evm_inode_setattr+0x1ad/0x7d0 [ 169.476462][ T9067] ovl_setattr+0x11b/0x580 [ 169.476485][ T9067] ? try_break_deleg+0x79/0x120 [ 169.476499][ T9067] ? __pfx_ovl_setattr+0x10/0x10 [ 169.476522][ T9067] notify_change+0xc1a/0xf40 [ 169.476551][ T9067] do_truncate+0x1a4/0x220 [ 169.476571][ T9067] ? __pfx_do_truncate+0x10/0x10 [ 169.476585][ T9067] ? apparmor_path_truncate+0x238/0x2d0 [ 169.476628][ T9067] vfs_truncate+0x493/0x520 [ 169.476652][ T9067] ? __pfx_vfs_truncate+0x10/0x10 [ 169.476680][ T9067] do_sys_truncate+0xdb/0x190 [ 169.476697][ T9067] ? __pfx_do_sys_truncate+0x10/0x10 [ 169.476715][ T9067] ? __pfx_ksys_write+0x10/0x10 [ 169.476745][ T9067] __x64_sys_truncate+0x5b/0x70 [ 169.476763][ T9067] do_syscall_64+0xfa/0xfa0 [ 169.476785][ T9067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.476802][ T9067] ? clear_bhb_loop+0x60/0xb0 [ 169.476824][ T9067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.476841][ T9067] RIP: 0033:0x7f965678f749 [ 169.476858][ T9067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.476873][ T9067] RSP: 002b:00007f96575c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 169.476892][ T9067] RAX: ffffffffffffffda RBX: 00007f96569e5fa0 RCX: 00007f965678f749 [ 169.476905][ T9067] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000280 [ 169.476916][ T9067] RBP: 00007f96575c2090 R08: 0000000000000000 R09: 0000000000000000 [ 169.476925][ T9067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.476934][ T9067] R13: 00007f96569e6038 R14: 00007f96569e5fa0 R15: 00007ffe79cb2f68 [ 169.476964][ T9067] [ 169.477019][ T9067] ERROR: Out of memory at tomoyo_realpath_from_path. [ 169.525910][ T9068] Zero length message leads to an empty skb [ 169.968163][ T5897] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 169.988142][ T5897] usb 4-1: device descriptor read/8, error -71 [ 170.099294][ T5897] usb usb4-port1: unable to enumerate USB device [ 170.489187][ T5839] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 170.648802][ T5839] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 170.657793][ T5839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.670430][ T5839] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 170.679768][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.689271][ T5839] usb 3-1: Product: syz [ 170.693486][ T5839] usb 3-1: Manufacturer: syz [ 170.698342][ T5839] usb 3-1: SerialNumber: syz [ 170.706395][ T5839] usb 3-1: config 0 descriptor?? [ 170.722816][ T5839] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 170.729244][ T5839] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 170.916753][ T9092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.925815][ T9107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.927024][ T9092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.936347][ T9107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.954191][ T5897] usb 3-1: USB disconnect, device number 41 [ 171.130382][ T9127] FAULT_INJECTION: forcing a failure. [ 171.130382][ T9127] name failslab, interval 1, probability 0, space 0, times 0 [ 171.143461][ T9127] CPU: 1 UID: 0 PID: 9127 Comm: syz.3.458 Not tainted syzkaller #0 PREEMPT(full) [ 171.143477][ T9127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.143484][ T9127] Call Trace: [ 171.143489][ T9127] [ 171.143495][ T9127] dump_stack_lvl+0x189/0x250 [ 171.143520][ T9127] ? __pfx____ratelimit+0x10/0x10 [ 171.143533][ T9127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.143545][ T9127] ? __pfx__printk+0x10/0x10 [ 171.143560][ T9127] ? __pfx___might_resched+0x10/0x10 [ 171.143571][ T9127] ? fs_reclaim_acquire+0x7d/0x100 [ 171.143585][ T9127] should_fail_ex+0x414/0x560 [ 171.143602][ T9127] should_failslab+0xa8/0x100 [ 171.143614][ T9127] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 171.143630][ T9127] ? __d_alloc+0x37/0x6f0 [ 171.143646][ T9127] __d_alloc+0x37/0x6f0 [ 171.143662][ T9127] d_alloc+0x4b/0x190 [ 171.143673][ T9127] ? lookup_one_qstr_excl+0xc8/0x360 [ 171.143687][ T9127] lookup_one_qstr_excl+0xdc/0x360 [ 171.143702][ T9127] start_creating+0xce/0x100 [ 171.143717][ T9127] ovl_copy_up_flags+0x1af9/0x37f0 [ 171.143729][ T9127] ? __lock_acquire+0xab9/0xd20 [ 171.143756][ T9127] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 171.143766][ T9127] ? __lock_acquire+0xab9/0xd20 [ 171.143788][ T9127] ? is_bpf_text_address+0x26/0x2b0 [ 171.143802][ T9127] ? __lock_acquire+0xab9/0xd20 [ 171.143817][ T9127] ? __lock_acquire+0xab9/0xd20 [ 171.143838][ T9127] ? dput+0x37/0x1a0 [ 171.143850][ T9127] ? cap_inode_getsecurity+0x241/0x830 [ 171.143861][ T9127] ? rcu_is_watching+0x15/0xb0 [ 171.143873][ T9127] ? cap_inode_getsecurity+0x241/0x830 [ 171.143883][ T9127] ? kfree+0x4d/0x680 [ 171.143894][ T9127] ? dput+0x37/0x1a0 [ 171.143940][ T9127] ? setattr_prepare+0x1e7/0xac0 [ 171.143951][ T9127] ? current_time+0x222/0x370 [ 171.143962][ T9127] ? evm_inode_setattr+0x1ad/0x7d0 [ 171.143976][ T9127] ovl_setattr+0x11b/0x580 [ 171.143990][ T9127] ? try_break_deleg+0x79/0x120 [ 171.143997][ T9127] ? __pfx_ovl_setattr+0x10/0x10 [ 171.144010][ T9127] notify_change+0xc1a/0xf40 [ 171.144026][ T9127] do_truncate+0x1a4/0x220 [ 171.144037][ T9127] ? __pfx_do_truncate+0x10/0x10 [ 171.144044][ T9127] ? apparmor_path_truncate+0x238/0x2d0 [ 171.144068][ T9127] vfs_truncate+0x493/0x520 [ 171.144080][ T9127] ? __pfx_vfs_truncate+0x10/0x10 [ 171.144095][ T9127] do_sys_truncate+0xdb/0x190 [ 171.144104][ T9127] ? __pfx_do_sys_truncate+0x10/0x10 [ 171.144113][ T9127] ? __pfx_ksys_write+0x10/0x10 [ 171.144127][ T9127] __x64_sys_truncate+0x5b/0x70 [ 171.144136][ T9127] do_syscall_64+0xfa/0xfa0 [ 171.144149][ T9127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.144158][ T9127] ? clear_bhb_loop+0x60/0xb0 [ 171.144170][ T9127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.144180][ T9127] RIP: 0033:0x7f1bc438f749 [ 171.144189][ T9127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.144198][ T9127] RSP: 002b:00007f1bc517d038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 171.144209][ T9127] RAX: ffffffffffffffda RBX: 00007f1bc45e5fa0 RCX: 00007f1bc438f749 [ 171.144216][ T9127] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000280 [ 171.144222][ T9127] RBP: 00007f1bc517d090 R08: 0000000000000000 R09: 0000000000000000 [ 171.144228][ T9127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.144233][ T9127] R13: 00007f1bc45e6038 R14: 00007f1bc45e5fa0 R15: 00007fff292661f8 [ 171.144251][ T9127] [ 171.237629][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 171.523382][ T9131] netlink: 'syz.3.459': attribute type 1 has an invalid length. [ 171.655227][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.684507][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.704190][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.718092][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.728135][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.745399][ T9] usb 2-1: config 0 descriptor?? [ 171.937651][ T980] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 172.097506][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 172.104236][ T980] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 172.112399][ T980] usb 3-1: config 0 has no interface number 0 [ 172.120617][ T980] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 172.129892][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.138238][ T980] usb 3-1: Product: syz [ 172.142448][ T980] usb 3-1: Manufacturer: syz [ 172.147054][ T980] usb 3-1: SerialNumber: syz [ 172.154431][ T980] usb 3-1: config 0 descriptor?? [ 172.163207][ T9] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 172.170936][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 172.182728][ T980] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 172.192120][ T980] usb 3-1: selecting invalid altsetting 1 [ 172.202510][ T980] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 172.209825][ T5897] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 172.220025][ T9] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 172.242772][ T980] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 172.258045][ T980] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 172.266550][ T980] usb 3-1: media controller created [ 172.286526][ T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.368475][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 172.375075][ T5897] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 172.383522][ T5897] usb 4-1: config 0 has no interface number 0 [ 172.388562][ T9144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.390378][ T5897] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 172.401750][ T9144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.409970][ T5897] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 172.428250][ T9144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.437291][ T5897] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 172.439534][ T9144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.453421][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.462756][ T5897] usb 4-1: Product: syz [ 172.466979][ T5897] usb 4-1: Manufacturer: syz [ 172.471804][ T5897] usb 4-1: SerialNumber: syz [ 172.480164][ T5897] usb 4-1: config 0 descriptor?? [ 172.485734][ T9155] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 172.493145][ T9155] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 172.501975][ T5897] usb-storage 4-1:0.20: USB Mass Storage device detected [ 172.520753][ T9182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.524038][ T5897] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 172.536272][ T9182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.538518][ T9178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.558101][ T9178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.708541][ T5897] scsi host1: usb-storage 4-1:0.20 [ 173.345088][ T9155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.355836][ T9155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.408279][ T980] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 173.416343][ T980] zl10353_read_register: readreg error (reg=127, ret==-110) [ 173.424628][ T980] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 173.461048][ T980] usb 3-1: USB disconnect, device number 42 [ 173.498738][ T5919] usb 2-1: reset high-speed USB device number 47 using dummy_hcd [ 174.079844][ T9238] macsec0: entered promiscuous mode [ 174.085108][ T9238] macsec0: left allmulticast mode [ 174.098629][ T9237] veth1_macvtap: entered promiscuous mode [ 174.104614][ T9237] macsec0: left promiscuous mode [ 174.287526][ T5940] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 174.343053][ T9257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.360732][ T9257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.373316][ T9257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.382223][ T9268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.383765][ T9257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.393433][ T9268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.457698][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 174.464976][ T5940] usb 3-1: unable to get BOS descriptor or descriptor too short [ 174.473872][ T5940] usb 3-1: config 4 has an invalid interface number: 108 but max is 0 [ 174.482207][ T5940] usb 3-1: config 4 has no interface number 0 [ 174.488667][ T5940] usb 3-1: config 4 interface 108 has no altsetting 0 [ 174.498339][ T5940] usb 3-1: New USB device found, idVendor=04e8, idProduct=8001, bcdDevice=68.9f [ 174.507578][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.515580][ T5940] usb 3-1: Product: syz [ 174.521947][ T5940] usb 3-1: Manufacturer: syz [ 174.526576][ T5940] usb 3-1: SerialNumber: syz [ 174.667505][ T5919] usb 2-1: device descriptor read/64, error -71 [ 174.754443][ T5940] usb 3-1: active config #4 != 1 ?? [ 174.767547][ T5940] usb 3-1: USB disconnect, device number 43 [ 174.803493][ T980] usb 4-1: USB disconnect, device number 47 [ 174.909108][ T5919] usb 2-1: reset high-speed USB device number 47 using dummy_hcd [ 175.057641][ T5919] usb 2-1: device descriptor read/64, error -71 [ 175.137529][ T980] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 175.288637][ T980] usb 4-1: not running at top speed; connect to a high speed hub [ 175.307895][ T5919] usb 2-1: reset high-speed USB device number 47 using dummy_hcd [ 175.310819][ T980] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 175.320953][ T9292] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 9292 comm: syz.2.475) [ 175.327161][ T980] usb 4-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 175.342714][ T30] audit: type=1800 audit(1763914460.329:7): pid=9292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.475" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=17126 res=0 errno=0 [ 175.354421][ T980] usb 4-1: config 1 interface 0 has no altsetting 0 [ 175.395481][ T5919] usb 2-1: device descriptor read/8, error -71 [ 175.399545][ T980] usb 4-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.40 [ 175.417486][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.425595][ T980] usb 4-1: Product: syz [ 175.429881][ T980] usb 4-1: Manufacturer: syz [ 175.434480][ T980] usb 4-1: SerialNumber: syz [ 175.449038][ T9259] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 175.460800][ T9259] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 175.508090][ T9299] FAULT_INJECTION: forcing a failure. [ 175.508090][ T9299] name failslab, interval 1, probability 0, space 0, times 0 [ 175.523013][ T9299] CPU: 0 UID: 0 PID: 9299 Comm: syz.2.476 Not tainted syzkaller #0 PREEMPT(full) [ 175.523037][ T9299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.523048][ T9299] Call Trace: [ 175.523056][ T9299] [ 175.523063][ T9299] dump_stack_lvl+0x189/0x250 [ 175.523097][ T9299] ? __pfx____ratelimit+0x10/0x10 [ 175.523120][ T9299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.523141][ T9299] ? __pfx__printk+0x10/0x10 [ 175.523169][ T9299] ? __pfx___might_resched+0x10/0x10 [ 175.523187][ T9299] ? fs_reclaim_acquire+0x7d/0x100 [ 175.523211][ T9299] should_fail_ex+0x414/0x560 [ 175.523239][ T9299] should_failslab+0xa8/0x100 [ 175.523260][ T9299] __kmalloc_noprof+0xdf/0x800 [ 175.523286][ T9299] ? tomoyo_encode+0x28b/0x550 [ 175.523316][ T9299] tomoyo_encode+0x28b/0x550 [ 175.523346][ T9299] tomoyo_realpath_from_path+0x58d/0x5d0 [ 175.523387][ T9299] tomoyo_check_open_permission+0x1c1/0x3b0 [ 175.523407][ T9299] ? ovl_copy_up_metadata+0x831/0xb60 [ 175.523428][ T9299] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 175.523449][ T9299] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 175.523469][ T9299] ? __x64_sys_truncate+0x5b/0x70 [ 175.523529][ T9299] ? tomoyo_file_open+0x164/0x220 [ 175.523552][ T9299] security_file_open+0xb1/0x270 [ 175.523573][ T9299] do_dentry_open+0x34e/0x1420 [ 175.523610][ T9299] vfs_open+0x3b/0x340 [ 175.523634][ T9299] dentry_open+0x61/0xa0 [ 175.523654][ T9299] ovl_sync_file+0x17/0x50 [ 175.523674][ T9299] ovl_copy_up_metadata+0x831/0xb60 [ 175.523702][ T9299] ? __pfx_ovl_copy_up_metadata+0x10/0x10 [ 175.523740][ T9299] ? __lock_acquire+0xab9/0xd20 [ 175.523773][ T9299] ? rcu_read_lock_any_held+0xb3/0x120 [ 175.523796][ T9299] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 175.523822][ T9299] ? ovl_copy_up_flags+0x168f/0x37f0 [ 175.523852][ T9299] ovl_copy_up_flags+0x1a1c/0x37f0 [ 175.523871][ T9299] ? __lock_acquire+0xab9/0xd20 [ 175.523922][ T9299] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 175.523940][ T9299] ? __lock_acquire+0xab9/0xd20 [ 175.523982][ T9299] ? irqentry_exit+0x5dd/0x660 [ 175.524002][ T9299] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.524023][ T9299] ? irqentry_exit+0x5dd/0x660 [ 175.524041][ T9299] ? trace_irq_disable+0x37/0x110 [ 175.524083][ T9299] ? __lock_acquire+0xab9/0xd20 [ 175.524122][ T9299] ? dput+0x37/0x1a0 [ 175.524144][ T9299] ? cap_inode_getsecurity+0x241/0x830 [ 175.524164][ T9299] ? rcu_is_watching+0x15/0xb0 [ 175.524184][ T9299] ? cap_inode_getsecurity+0x241/0x830 [ 175.524203][ T9299] ? kfree+0x4d/0x680 [ 175.524222][ T9299] ? dput+0x37/0x1a0 [ 175.524310][ T9299] ? setattr_prepare+0x1e7/0xac0 [ 175.524328][ T9299] ? current_time+0x222/0x370 [ 175.524349][ T9299] ? evm_inode_setattr+0x1ad/0x7d0 [ 175.524373][ T9299] ovl_setattr+0x11b/0x580 [ 175.524396][ T9299] ? try_break_deleg+0x79/0x120 [ 175.524409][ T9299] ? __pfx_ovl_setattr+0x10/0x10 [ 175.524431][ T9299] notify_change+0xc1a/0xf40 [ 175.524461][ T9299] do_truncate+0x1a4/0x220 [ 175.524481][ T9299] ? __pfx_do_truncate+0x10/0x10 [ 175.524495][ T9299] ? apparmor_path_truncate+0x238/0x2d0 [ 175.524537][ T9299] vfs_truncate+0x493/0x520 [ 175.524560][ T9299] ? __pfx_vfs_truncate+0x10/0x10 [ 175.524589][ T9299] do_sys_truncate+0xdb/0x190 [ 175.524606][ T9299] ? __pfx_do_sys_truncate+0x10/0x10 [ 175.524623][ T9299] ? __pfx_ksys_write+0x10/0x10 [ 175.524647][ T9299] __x64_sys_truncate+0x5b/0x70 [ 175.524665][ T9299] do_syscall_64+0xfa/0xfa0 [ 175.524686][ T9299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.524703][ T9299] ? clear_bhb_loop+0x60/0xb0 [ 175.524725][ T9299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.524742][ T9299] RIP: 0033:0x7f2c4b78f749 [ 175.524758][ T9299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.524772][ T9299] RSP: 002b:00007f2c4c6a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 175.524791][ T9299] RAX: ffffffffffffffda RBX: 00007f2c4b9e5fa0 RCX: 00007f2c4b78f749 [ 175.524804][ T9299] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000280 [ 175.524815][ T9299] RBP: 00007f2c4c6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 175.524826][ T9299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.524836][ T9299] R13: 00007f2c4b9e6038 R14: 00007f2c4b9e5fa0 R15: 00007ffc0d0b91a8 [ 175.524869][ T9299] [ 175.524970][ T9299] ERROR: Out of memory at tomoyo_realpath_from_path. [ 175.650790][ T5919] usb 2-1: reset high-speed USB device number 47 using dummy_hcd [ 175.678173][ T5919] usb 2-1: device descriptor read/8, error -71 [ 176.081859][ T5839] usb 2-1: USB disconnect, device number 47 [ 176.130079][ T980] usbhid 4-1:1.0: can't add hid device: -71 [ 176.136186][ T980] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 176.153852][ T980] usb 4-1: USB disconnect, device number 48 [ 176.238411][ T5839] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 176.257523][ T5919] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 176.397662][ T5839] usb 2-1: device descriptor read/64, error -71 [ 176.422021][ T5919] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 176.437458][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.445473][ T5919] usb 3-1: Product: syz [ 176.457453][ T5919] usb 3-1: Manufacturer: syz [ 176.462064][ T5919] usb 3-1: SerialNumber: syz [ 176.473340][ T5919] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 176.498496][ T8344] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 176.637636][ T5839] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 176.797738][ T5839] usb 2-1: device descriptor read/64, error -71 [ 176.908008][ T5839] usb usb2-port1: attempt power cycle [ 176.931391][ T9303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.949164][ T9303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.018492][ T5919] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 177.175709][ T39] usb 3-1: USB disconnect, device number 44 [ 177.207515][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 177.222419][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 177.245480][ T5919] usb 4-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=4d.b9 [ 177.257038][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.257388][ T9354] can: request_module (can-proto-0) failed. [ 177.265293][ T5839] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 177.279041][ T5919] usb 4-1: Product: syz [ 177.283220][ T5919] usb 4-1: Manufacturer: syz [ 177.289525][ T5919] usb 4-1: SerialNumber: syz [ 177.297202][ T5919] usb 4-1: config 0 descriptor?? [ 177.308093][ T5839] usb 2-1: device descriptor read/8, error -71 [ 177.537712][ T9342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.547318][ T9342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.427565][ T5839] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 178.435288][ T8344] usb 3-1: Service connection timeout for: 256 [ 178.442726][ T8344] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 178.453846][ T8344] ath9k_htc: Failed to initialize the device [ 178.460832][ T5839] usb 2-1: Using ep0 maxpacket: 8 [ 178.468270][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 178.478236][ T5839] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 178.488300][ T39] usb 3-1: ath9k_htc: USB layer deinitialized [ 178.498762][ T5839] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 178.508091][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.521668][ T5839] usb 2-1: Product: syz [ 178.531249][ T5839] usb 2-1: Manufacturer: syz [ 178.536489][ T5839] usb 2-1: SerialNumber: syz [ 178.548792][ T5839] usb 2-1: config 0 descriptor?? [ 178.684390][ T9401] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 178.693823][ T9401] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 179.052856][ T9415] netlink: 132 bytes leftover after parsing attributes in process `syz.2.491'. [ 179.429595][ T9427] FAULT_INJECTION: forcing a failure. [ 179.429595][ T9427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.443160][ T9427] CPU: 1 UID: 0 PID: 9427 Comm: syz.2.494 Not tainted syzkaller #0 PREEMPT(full) [ 179.443187][ T9427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.443200][ T9427] Call Trace: [ 179.443212][ T9427] [ 179.443221][ T9427] dump_stack_lvl+0x189/0x250 [ 179.443252][ T9427] ? __pfx____ratelimit+0x10/0x10 [ 179.443276][ T9427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.443299][ T9427] ? __pfx__printk+0x10/0x10 [ 179.443334][ T9427] should_fail_ex+0x414/0x560 [ 179.443365][ T9427] _copy_to_user+0x31/0xb0 [ 179.443387][ T9427] simple_read_from_buffer+0xe1/0x170 [ 179.443416][ T9427] proc_fail_nth_read+0x1b3/0x220 [ 179.443440][ T9427] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.443463][ T9427] ? rw_verify_area+0x2a6/0x4d0 [ 179.443488][ T9427] ? __lock_acquire+0xab9/0xd20 [ 179.443506][ T9427] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.443527][ T9427] vfs_read+0x200/0xa30 [ 179.443553][ T9427] ? fdget_pos+0x247/0x320 [ 179.443584][ T9427] ? __pfx___mutex_lock+0x10/0x10 [ 179.443608][ T9427] ? __pfx_vfs_read+0x10/0x10 [ 179.443636][ T9427] ? __fget_files+0x2a/0x420 [ 179.443663][ T9427] ? __fget_files+0x3a0/0x420 [ 179.443684][ T9427] ? __fget_files+0x2a/0x420 [ 179.443714][ T9427] ksys_read+0x145/0x250 [ 179.443743][ T9427] ? __pfx_ksys_read+0x10/0x10 [ 179.443774][ T9427] ? do_syscall_64+0xbe/0xfa0 [ 179.443800][ T9427] do_syscall_64+0xfa/0xfa0 [ 179.443823][ T9427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.443844][ T9427] ? clear_bhb_loop+0x60/0xb0 [ 179.443867][ T9427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.443885][ T9427] RIP: 0033:0x7f2c4b78e15c [ 179.443904][ T9427] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 179.443921][ T9427] RSP: 002b:00007f2c4c6a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 179.443942][ T9427] RAX: ffffffffffffffda RBX: 00007f2c4b9e5fa0 RCX: 00007f2c4b78e15c [ 179.443956][ T9427] RDX: 000000000000000f RSI: 00007f2c4c6a70a0 RDI: 0000000000000004 [ 179.443969][ T9427] RBP: 00007f2c4c6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 179.443987][ T9427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.443998][ T9427] R13: 00007f2c4b9e6038 R14: 00007f2c4b9e5fa0 R15: 00007ffc0d0b91a8 [ 179.444031][ T9427] [ 179.864724][ T5919] pwc: Sotec Afina Eye USB webcam detected. [ 179.872676][ T5919] pwc: Failed to set LED on/off time (-71) [ 179.879870][ T5919] pwc: send_video_command error -71 [ 179.885227][ T5919] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 179.893499][ T5919] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 179.906135][ T5919] usb 4-1: USB disconnect, device number 49 [ 180.020665][ T980] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 180.158128][ T980] usb 3-1: device descriptor read/64, error -71 [ 180.377735][ T5897] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 180.406629][ T5833] usb 2-1: USB disconnect, device number 51 [ 180.413690][ T980] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 180.482790][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 180.517508][ T5897] usb 4-1: device descriptor read/64, error -71 [ 180.557571][ T980] usb 3-1: device descriptor read/64, error -71 [ 180.667844][ T980] usb usb3-port1: attempt power cycle [ 180.777558][ T5897] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 180.877604][ T5833] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 180.907652][ T5897] usb 4-1: device descriptor read/64, error -71 [ 181.007951][ T980] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 181.017876][ T5897] usb usb4-port1: attempt power cycle [ 181.028459][ T980] usb 3-1: device descriptor read/8, error -71 [ 181.034717][ T5833] usb 2-1: no configurations [ 181.039487][ T5833] usb 2-1: can't read configurations, error -22 [ 181.167572][ T5833] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 181.277529][ T980] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 181.298065][ T980] usb 3-1: device descriptor read/8, error -71 [ 181.318236][ T5833] usb 2-1: no configurations [ 181.322873][ T5833] usb 2-1: can't read configurations, error -22 [ 181.329826][ T5833] usb usb2-port1: attempt power cycle [ 181.357622][ T5897] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 181.378010][ T5897] usb 4-1: device descriptor read/8, error -71 [ 181.408054][ T980] usb usb3-port1: unable to enumerate USB device [ 181.617540][ T5897] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 181.637967][ T5897] usb 4-1: device descriptor read/8, error -71 [ 181.667578][ T5833] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 181.688646][ T5833] usb 2-1: no configurations [ 181.693278][ T5833] usb 2-1: can't read configurations, error -22 [ 181.747864][ T5897] usb usb4-port1: unable to enumerate USB device [ 181.827573][ T5833] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 181.848676][ T5833] usb 2-1: no configurations [ 181.853302][ T5833] usb 2-1: can't read configurations, error -22 [ 181.860118][ T5833] usb usb2-port1: unable to enumerate USB device [ 183.187618][ T5833] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 183.339408][ T5833] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 183.351127][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 183.364213][ T5833] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 183.373404][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.385162][ T5833] usb 3-1: config 0 descriptor?? [ 183.391098][ T9512] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 183.400596][ T5833] hub 3-1:0.0: USB hub found [ 183.507557][ T39] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 183.599606][ T5833] hub 3-1:0.0: 2 ports detected [ 183.657499][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 183.679409][ T39] usb 4-1: config 8 has an invalid interface number: 161 but max is 0 [ 183.697464][ T39] usb 4-1: config 8 has no interface number 0 [ 183.703687][ T39] usb 4-1: config 8 interface 161 has no altsetting 0 [ 183.721554][ T39] usb 4-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=60.da [ 183.733725][ T9546] netlink: 36 bytes leftover after parsing attributes in process `syz.1.511'. [ 183.737677][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.746231][ T9546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.511'. [ 183.755252][ T39] usb 4-1: Product: syz [ 183.764040][ T39] usb 4-1: Manufacturer: syz [ 183.769068][ T39] usb 4-1: SerialNumber: syz [ 183.807736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 183.868346][ T9512] [ 183.870700][ T9512] ====================================================== [ 183.877720][ T9512] WARNING: possible circular locking dependency detected [ 183.884748][ T9512] syzkaller #0 Not tainted [ 183.889152][ T9512] ------------------------------------------------------ [ 183.896150][ T9512] syz.2.505/9512 is trying to acquire lock: [ 183.902025][ T9512] ffff888025b57b18 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0x82/0x3a0 [ 183.910910][ T9512] [ 183.910910][ T9512] but task is already holding lock: [ 183.918262][ T9512] ffff888141751e18 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: blk_throtl_init+0x27a/0x410 [ 183.928432][ T9512] [ 183.928432][ T9512] which lock already depends on the new lock. [ 183.928432][ T9512] [ 183.938817][ T9512] [ 183.938817][ T9512] the existing dependency chain (in reverse order) is: [ 183.947814][ T9512] [ 183.947814][ T9512] -> #2 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 183.956407][ T9512] lock_acquire+0x117/0x350 [ 183.961422][ T9512] blk_alloc_queue+0x538/0x620 [ 183.966701][ T9512] __blk_mq_alloc_disk+0x15c/0x340 [ 183.972316][ T9512] loop_add+0x411/0xad0 [ 183.976983][ T9512] loop_init+0xd9/0x170 [ 183.981646][ T9512] do_one_initcall+0x1fb/0x870 [ 183.986936][ T9512] do_initcall_level+0x104/0x190 [ 183.992395][ T9512] do_initcalls+0x59/0xa0 [ 183.997259][ T9512] kernel_init_freeable+0x334/0x4b0 [ 184.002977][ T9512] kernel_init+0x1d/0x1d0 [ 184.007829][ T9512] ret_from_fork+0x599/0xb30 [ 184.012931][ T9512] ret_from_fork_asm+0x1a/0x30 [ 184.018215][ T9512] [ 184.018215][ T9512] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 184.025424][ T9512] lock_acquire+0x117/0x350 [ 184.030460][ T9512] fs_reclaim_acquire+0x72/0x100 [ 184.035908][ T9512] mempool_alloc_noprof+0xa7/0x380 [ 184.041530][ T9512] bio_alloc_bioset+0x241/0x12a0 [ 184.046978][ T9512] blkdev_direct_IO+0x9c0/0x17e0 [ 184.052426][ T9512] blkdev_read_iter+0x23d/0x440 [ 184.057799][ T9512] lo_submit_rw_aio+0x488/0x620 [ 184.063170][ T9512] loop_queue_rq+0x6c5/0x8d0 [ 184.068377][ T9512] blk_mq_request_issue_directly+0x3c1/0x710 [ 184.074886][ T9512] blk_mq_issue_direct+0x2a0/0x660 [ 184.080517][ T9512] blk_mq_dispatch_queue_requests+0x621/0x800 [ 184.087105][ T9512] blk_mq_flush_plug_list+0x432/0x550 [ 184.092994][ T9512] __blk_flush_plug+0x3d3/0x4b0 [ 184.098356][ T9512] __submit_bio+0x2d3/0x5a0 [ 184.103369][ T9512] submit_bio_noacct_nocheck+0x2eb/0xa50 [ 184.109513][ T9512] block_read_full_folio+0x7b7/0x830 [ 184.115315][ T9512] filemap_read_folio+0x117/0x380 [ 184.120856][ T9512] do_read_cache_folio+0x358/0x590 [ 184.126475][ T9512] read_part_sector+0xb6/0x2b0 [ 184.131752][ T9512] adfspart_check_ICS+0xa4/0xa50 [ 184.137224][ T9512] bdev_disk_changed+0x75f/0x14b0 [ 184.142762][ T9512] blkdev_get_whole+0x380/0x510 [ 184.148123][ T9512] bdev_open+0x31e/0xd30 [ 184.152886][ T9512] blkdev_open+0x457/0x600 [ 184.157810][ T9512] do_dentry_open+0x7ce/0x1420 [ 184.163087][ T9512] vfs_open+0x3b/0x340 [ 184.167665][ T9512] path_openat+0x33ce/0x3d90 [ 184.172773][ T9512] do_filp_open+0x1fa/0x410 [ 184.177788][ T9512] do_sys_openat2+0x121/0x1c0 [ 184.182979][ T9512] __x64_sys_openat+0x138/0x170 [ 184.188337][ T9512] do_syscall_64+0xfa/0xfa0 [ 184.193353][ T9512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.199755][ T9512] [ 184.199755][ T9512] -> #0 (set->srcu){.+.+}-{0:0}: [ 184.206871][ T9512] validate_chain+0xb9b/0x2130 [ 184.212147][ T9512] __lock_acquire+0xab9/0xd20 [ 184.217335][ T9512] lock_sync+0xba/0x160 [ 184.222001][ T9512] __synchronize_srcu+0x96/0x3a0 [ 184.227450][ T9512] blk_throtl_init+0x298/0x410 [ 184.232725][ T9512] tg_set_conf+0x1c6/0x4b0 [ 184.237648][ T9512] cgroup_file_write+0x3a1/0x740 [ 184.243095][ T9512] kernfs_fop_write_iter+0x3af/0x540 [ 184.248892][ T9512] vfs_write+0x5c9/0xb30 [ 184.253645][ T9512] ksys_write+0x145/0x250 [ 184.258481][ T9512] do_syscall_64+0xfa/0xfa0 [ 184.263494][ T9512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.269897][ T9512] [ 184.269897][ T9512] other info that might help us debug this: [ 184.269897][ T9512] [ 184.280109][ T9512] Chain exists of: [ 184.280109][ T9512] set->srcu --> fs_reclaim --> &q->q_usage_counter(io)#17 [ 184.280109][ T9512] [ 184.293141][ T9512] Possible unsafe locking scenario: [ 184.293141][ T9512] [ 184.300578][ T9512] CPU0 CPU1 [ 184.305928][ T9512] ---- ---- [ 184.311279][ T9512] lock(&q->q_usage_counter(io)#17); [ 184.316647][ T9512] lock(fs_reclaim); [ 184.323135][ T9512] lock(&q->q_usage_counter(io)#17); [ 184.331017][ T9512] sync(set->srcu); [ 184.334899][ T9512] [ 184.334899][ T9512] *** DEADLOCK *** [ 184.334899][ T9512] [ 184.343026][ T9512] 7 locks held by syz.2.505/9512: [ 184.348031][ T9512] #0: ffff88803136a638 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 184.357076][ T9512] #1: ffff888033382420 (sb_writers#10){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 184.366046][ T9512] #2: ffff888030e09488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 184.375782][ T9512] #3: ffff888077ee3788 (kn->active#78){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 184.385789][ T9512] #4: ffff888141752020 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x2a2/0x3d0 [ 184.395883][ T9512] #5: ffff888141751e18 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: blk_throtl_init+0x27a/0x410 [ 184.406583][ T9512] #6: ffff888141751e50 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: blk_throtl_init+0x27a/0x410 [ 184.417187][ T9512] [ 184.417187][ T9512] stack backtrace: [ 184.423079][ T9512] CPU: 0 UID: 0 PID: 9512 Comm: syz.2.505 Not tainted syzkaller #0 PREEMPT(full) [ 184.423097][ T9512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.423109][ T9512] Call Trace: [ 184.423117][ T9512] [ 184.423123][ T9512] dump_stack_lvl+0x189/0x250 [ 184.423142][ T9512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.423158][ T9512] ? __pfx__printk+0x10/0x10 [ 184.423177][ T9512] print_circular_bug+0x2ee/0x310 [ 184.423195][ T9512] check_noncircular+0x134/0x160 [ 184.423217][ T9512] validate_chain+0xb9b/0x2130 [ 184.423245][ T9512] __lock_acquire+0xab9/0xd20 [ 184.423260][ T9512] ? __synchronize_srcu+0x82/0x3a0 [ 184.423274][ T9512] lock_sync+0xba/0x160 [ 184.423287][ T9512] ? __synchronize_srcu+0x82/0x3a0 [ 184.423302][ T9512] __synchronize_srcu+0x96/0x3a0 [ 184.423317][ T9512] ? __pfx___synchronize_srcu+0x10/0x10 [ 184.423330][ T9512] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 184.423347][ T9512] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 184.423362][ T9512] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 184.423376][ T9512] ? __pfx_autoremove_wake_function+0x10/0x10 [ 184.423394][ T9512] ? read_tsc+0x9/0x20 [ 184.423412][ T9512] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 184.423433][ T9512] ? synchronize_srcu+0x295/0x2c0 [ 184.423448][ T9512] blk_throtl_init+0x298/0x410 [ 184.423464][ T9512] tg_set_conf+0x1c6/0x4b0 [ 184.423481][ T9512] ? __pfx_tg_set_conf+0x10/0x10 [ 184.423499][ T9512] ? kernfs_root+0x1c/0x230 [ 184.423512][ T9512] ? kernfs_root+0x1c/0x230 [ 184.423524][ T9512] ? kernfs_root+0x1c/0x230 [ 184.423535][ T9512] ? kernfs_root+0x1ea/0x230 [ 184.423547][ T9512] ? __pfx_tg_set_conf_uint+0x10/0x10 [ 184.423562][ T9512] cgroup_file_write+0x3a1/0x740 [ 184.423581][ T9512] ? __pfx_cgroup_file_write+0x10/0x10 [ 184.423597][ T9512] ? rcu_is_watching+0x15/0xb0 [ 184.423617][ T9512] ? __pfx_cgroup_file_write+0x10/0x10 [ 184.423635][ T9512] kernfs_fop_write_iter+0x3af/0x540 [ 184.423654][ T9512] vfs_write+0x5c9/0xb30 [ 184.423675][ T9512] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 184.423692][ T9512] ? __pfx_vfs_write+0x10/0x10 [ 184.423712][ T9512] ? __fget_files+0x2a/0x420 [ 184.423730][ T9512] ksys_write+0x145/0x250 [ 184.423744][ T9512] ? __pfx_ksys_write+0x10/0x10 [ 184.423759][ T9512] ? do_syscall_64+0xbe/0xfa0 [ 184.423777][ T9512] do_syscall_64+0xfa/0xfa0 [ 184.423792][ T9512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.423806][ T9512] ? clear_bhb_loop+0x60/0xb0 [ 184.423820][ T9512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.423833][ T9512] RIP: 0033:0x7f2c4b78f749 [ 184.423852][ T9512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.423864][ T9512] RSP: 002b:00007f2c4c6a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.423879][ T9512] RAX: ffffffffffffffda RBX: 00007f2c4b9e5fa0 RCX: 00007f2c4b78f749 [ 184.423893][ T9512] RDX: 000000000000006a RSI: 00002000000000c0 RDI: 0000000000000008 [ 184.423903][ T9512] RBP: 00007f2c4b813f91 R08: 0000000000000000 R09: 0000000000000000 [ 184.423912][ T9512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.423921][ T9512] R13: 00007f2c4b9e6038 R14: 00007f2c4b9e5fa0 R15: 00007ffc0d0b91a8 [ 184.423936][ T9512] [ 184.757467][ T5833] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 184.763824][ T5833] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 184.771333][ T39] net1080 4-1:8.161: probe with driver net1080 failed with error -22 [ 184.773837][ T5833] usbhid 3-1:0.0: can't add hid device: -32 [ 184.786599][ T5833] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 184.822691][ T39] usb 4-1: USB disconnect, device number 54 [ 185.167254][ T9568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.177598][ T9568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.297820][ T39] usb 3-1: USB disconnect, device number 49