last executing test programs: 10m6.988915857s ago: executing program 0 (id=370): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x18) fanotify_init(0x8, 0x80000) 10m5.692682851s ago: executing program 0 (id=374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf256200000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x6) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r8 = socket(0x2b, 0x1, 0x1) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) listen(r8, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x2, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0xffffffffffffffff}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10m1.658902318s ago: executing program 0 (id=380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x100) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000500)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0405220c"], 0x7) sendmmsg$inet(r3, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000780)="92", 0x1}], 0x1}}], 0x1, 0x4048451) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004005) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r6, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@updpolicy={0x108, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x0, 0x403, 0x0, 0x0, 0xa, 0x0, 0x20, 0x3c}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3, 0xffffffffffffffff}, 0x20, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@local, 0x3505, 0x2, 0x0, 0x56, 0x0, 0xfffffffd, 0x1}]}, @policy_type={0xa}]}, 0x108}}, 0x24008000) 10m0.009439259s ago: executing program 0 (id=385): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) keyctl$revoke(0x3, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a000310"], 0xf) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) msgrcv(0x0, 0x0, 0x0, 0xbe3d0cceac4330b4, 0x2000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x20040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e000000108000200ac1414000c00028005000100000000000600034000040000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x6c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 9m59.675949664s ago: executing program 0 (id=387): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2204c850, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x400, &(0x7f0000001740)=""/4096) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001040)=0x6) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000081) r6 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r6, 0x0, 0x0, 0x40000101, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000400)) r7 = socket$inet6(0xa, 0x3, 0xff) fcntl$setpipe(r7, 0x407, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16, @ANYBLOB="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"], 0x1c8}}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r7, 0x5000940b, &(0x7f0000000040)={{}, "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"}) 9m58.335341985s ago: executing program 0 (id=390): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xe20, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) 9m42.608686049s ago: executing program 32 (id=390): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xe20, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) 18.293509826s ago: executing program 5 (id=2466): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000040)=0x3, 0x4) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe) futex(&(0x7f0000000000)=0x1, 0x6, 0x22, 0x0, 0x0, 0xfffffffd) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x4ffffff) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, &(0x7f0000000080)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x4814) recvmmsg(r2, 0x0, 0x0, 0x2001, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pread64(r0, &(0x7f0000000100)=""/77, 0x4d, 0x9) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x984995b43da11a7e, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 16.605255143s ago: executing program 5 (id=2473): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) listen(0xffffffffffffffff, 0xda90) r3 = dup(r0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) 16.020840757s ago: executing program 4 (id=2477): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x2940, 0x2, 0x10}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x1, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 15.924908185s ago: executing program 5 (id=2479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x9, [@enum64={0x1, 0xa, 0x0, 0x13, 0x1, 0x1, [{0xc, 0x5, 0x8}, {0x6, 0x10000, 0x514c}, {0x10, 0xfffffffe, 0x8000}, {0x5, 0x5fb3, 0x54f0a4fa}, {0xf, 0x7fffffff, 0x800}, {0x1, 0xfffffffc, 0x3da}, {0x1, 0xa2, 0x3ff}, {0xa, 0x3, 0x1}, {0x5, 0x9, 0xfff}, {0xa, 0x8000, 0x8001}]}, @const={0x6}, @ptr={0x6, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x2e, 0x30, 0x61, 0x5f, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000340)=""/123, 0xbd, 0x7b, 0x0, 0x1}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@struct={0xe, 0x1, 0x0, 0x4, 0x1, 0x5, [{0xa, 0x3, 0x26}]}, @fwd={0x6}]}, {0x0, [0x30, 0x61, 0x5f, 0x5f, 0x5f, 0x61]}}, &(0x7f0000000700)=""/13, 0x44, 0xd, 0x0, 0x6, 0x10000}, 0x28) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) 15.923933812s ago: executing program 1 (id=2480): socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) socket(0x2000000000000021, 0x2, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='smaps_rollup\x00') lseek(r5, 0x401, 0x0) 15.848513314s ago: executing program 4 (id=2481): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x3f7, 0x100, 0x70bd25, 0x25dfdbff, {0x7, 0xd, './file1', './file1/file0'}, ["", "", "", "", "", "", "", "", "", ""]}, 0x2c}}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x300800, &(0x7f0000000080)={[{@uuid_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) 14.753162378s ago: executing program 5 (id=2483): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) r3 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) read(r3, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x804) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) socket(0x18, 0x5, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) sendmmsg(r5, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x84) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) write$sndseq(r8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 14.532453384s ago: executing program 4 (id=2486): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="04ac0f000aac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) poll(&(0x7f0000000080)=[{r0, 0x4143}, {0xffffffffffffffff, 0xe11ed824c32a6827}, {r0, 0x4082}, {0xffffffffffffffff, 0x20}], 0x4, 0x68) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x9}]}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_io_uring_setup(0x416d, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0x0, 0x24e}, &(0x7f0000000480), &(0x7f0000000440)=0x0) syz_io_uring_setup(0xa97, &(0x7f0000000140)={0x0, 0x0, 0x1000, 0x0, 0x269, 0x0, r2}, &(0x7f0000000400)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x48e9, 0x7505, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x6, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001d4}, 0x80) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3135fa", 0x3}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000091043e000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r7 = inotify_init1(0x80000) lseek(r7, 0xb7f0, 0x5) 14.299606422s ago: executing program 1 (id=2487): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x2940, 0x2, 0x10}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x9, 0x4) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f00000004c0)='GPL\x00', 0xd497, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000800)='/dev/dsp1\x00') mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x1, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 14.208178358s ago: executing program 3 (id=2489): syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xae, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x4, 0x5, 0x2}, {0x6, 0x24, 0x1a, 0xf, 0xa}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x4b, 0xbd, 0x7c}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0xeb, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xa, 0x7, 0xff}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000000000000984f9f0b4288724273beee5c97e67af2ad74e8d54beb3dc797938cdf629604ba7e9268edcb87d061ecbc4d08154bd04e7554ad629303bad0b0e05f939e09a3"], 0x3, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x448}}, {0xc4, &(0x7f0000000300)=@string={0xc4, 0x3, "b3926e9b82b0af2d836a0d4e90bf9273426272addce07f3793f0562f87ede0b1cfc538a26b344e257f2ea6c61287000f0d2c8c61f37e22f8286ccae3e9567ba0888ee1c688d349453b0bc1b329db7d874eaee1ebeccd9f41ddfd269bf0035ca5e867736a25fd204810954b9af959da1db3dff0ab69dde8081f275dcd4de95251b4bb6a76e29cac0f7f6948fa4de9a45bc30f4365981eef614a37e16edf14d2001b0d4d924ffa16c08f202865e8c9853c7b042fbcde213545d95b2cb958c592da20df"}}, {0x0, 0x0}]}) 14.207935375s ago: executing program 1 (id=2490): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x101800, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xfffffffffffffffd, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$P9_RSTATu(r4, 0x0, 0x232) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000002c0412800b00010062726964676500001c0002800c001f0007000000000000800c001e000200000000000000c1ac50bdec3c519f93f28fe8ac636ce2be88169406f18ec079820fe249085484611922f8d4c7c403b5aa3d5bff82cc37888868a35ca5885ee79103412e6ec98a900e7fac95c3eea2721ce40000"], 0x4c}}, 0x0) 13.962051135s ago: executing program 4 (id=2491): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) dup(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0x1, 0x0}, 0x8) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) close(r7) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=r6, @ANYRESDEC=r5], 0x20) syz_open_dev$vim2m(0x0, 0x3, 0x2) 13.86262538s ago: executing program 1 (id=2492): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x109) write$cgroup_int(r0, &(0x7f0000000040)=0x8ff, 0x12) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000300)={0x2, 0x0, @ioapic={0xeeee0000, 0x9, 0x6, 0xfffffffc, 0x0, [{0x8, 0x0, 0x55, '\x00', 0x5}, {0x9, 0x1, 0x4b, '\x00', 0x80}, {0x6d, 0x4, 0x81, '\x00', 0xc0}, {0xa4, 0x7, 0x8, '\x00', 0xd}, {0x3, 0x7, 0x8, '\x00', 0x9}, {0x30, 0x98, 0xde, '\x00', 0x37}, {0x7, 0x4, 0x7, '\x00', 0x7f}, {0x4, 0x7, 0xe, '\x00', 0x20}, {0x9, 0x8, 0x3c, '\x00', 0x8b}, {0x9, 0x9, 0x6, '\x00', 0x1}, {0x0, 0x0, 0xf, '\x00', 0x5}, {0x1, 0x6, 0x6, '\x00', 0x7}, {0x7, 0x5, 0x0, '\x00', 0x3}, {0x6, 0x6c, 0x1, '\x00', 0xd}, {0x7, 0x7f, 0x2}, {0xb, 0x8, 0xd0, '\x00', 0x7}, {0x6, 0x6, 0x3, '\x00', 0x4}, {0x1, 0x56, 0x3, '\x00', 0x33}, {0x10, 0x1, 0x7, '\x00', 0x46}, {0x1, 0x0, 0x4, '\x00', 0x86}, {0x5, 0x0, 0x0, '\x00', 0x7}, {0xe, 0x1, 0x58, '\x00', 0xa8}, {0x4, 0x9, 0x4, '\x00', 0xfc}, {0x9, 0x9, 0x2, '\x00', 0x7}]}}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r3, &(0x7f0000000200)}, 0x20) 12.736394636s ago: executing program 4 (id=2493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) gettid() timer_create(0x7, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_j1939(r4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) (fail_nth: 2) ioctl$TCSETS(r5, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x8, 0x200, 0x1b, "3eccd25569e20900"}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 10.69377728s ago: executing program 4 (id=2495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x3) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0405220c"], 0x7) sendmmsg$inet(r3, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000780)="92", 0x1}], 0x1}}], 0x1, 0x4048451) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) mount$9p_rdma(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004005) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r6, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@updpolicy={0x108, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x0, 0x403, 0x0, 0x0, 0xa, 0x0, 0x20, 0x3c}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3, 0xffffffffffffffff}, 0x20, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@local, 0x3505, 0x2, 0x0, 0x56, 0x0, 0xfffffffd, 0x1}]}, @policy_type={0xa}]}, 0x108}}, 0x24008000) 10.223991539s ago: executing program 3 (id=2496): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x3f7, 0x100, 0x70bd25, 0x25dfdbff, {0x7, 0xd, './file1', './file1/file0'}, ["", "", "", "", "", "", "", "", "", ""]}, 0x2c}}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x300800, &(0x7f0000000080)={[{@uuid_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) 10.047708396s ago: executing program 2 (id=2497): socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) socket(0x2000000000000021, 0x2, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='smaps_rollup\x00') lseek(r5, 0x401, 0x0) 10.008034808s ago: executing program 1 (id=2498): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000004c0)=0x107b, 0x4) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000002500), 0xc, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r5, 0x0, &(0x7f0000000100)=""/31}, 0x20) r6 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r8 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@rose, @null, @remote, @null, @null, @default, @bcast, @bcast]}, &(0x7f0000000100)=0x48, 0x80000) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r10 = accept4$alg(r9, 0x0, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="6db50725c08c11bbd2f097b245b4d706b776a9cf888bccd256c6b1a652da6b1254508f0a2d41949416f99928db60b4280aad0c3f014ff4654ffea04c", 0x3c}, {&(0x7f0000000240)="b7a3fad5", 0x4}], 0x2, 0x0, 0x0, 0x4000000}], 0x1, 0xc000) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r11, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r10, &(0x7f0000000040)="be", 0x1}]) ioctl$SIOCNRDECOBS(r8, 0x89e2) ioctl$AUTOFS_IOC_PROTOVER(r7, 0x7c81, 0x0) 9.92483129s ago: executing program 3 (id=2499): fsopen(0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x21cfa, 0x9, 0xfffffff8, 0x3, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffefff, 0x5, 0xe1d9, 0xeb2, 0x4000fb}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000000c0)=0x7f) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000500)='\x00!G%w', 0x5}], 0x1, 0x73a, 0x1) r2 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 8.000053876s ago: executing program 1 (id=2500): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315f9b10102030109026100010000000009040001"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x0, 0xb, 0x2, {0x2, 0x1}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}}, &(0x7f0000000340)={0x2c, &(0x7f0000000100)={0x20, 0xd, 0xd2, "4ef1109e73f6c40e3570a567fd061660e8d8ce5da1a068803c058883b4300382720e672a4a79d56921e020b4be02f7bc249e5d16a1730feb6dc2964125ada9fb0ff293257dc7388babfb7ddd262ac67ba3afe7683968b3e5d3e78ec30b852af76ab44f652e7c1d2fdb0789bf1fae7f0bdebb70bc7bab06d7bcce1ffb11229c7ee95aaa9ced56e45b861b85c2edfe9bc202f810559506aac4a2d9aaca352b39cb7be881f5e1927fa4fb4999ef4bc83b73f0150be18c86bc943ada286932dee20a5d0975d7a969ec281507ba08e2e15e39fe48"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000002c0)={0xc0, 0x5, 0x2, "105f"}, &(0x7f0000000300)={0x40, 0x5, 0x6, "dac5f02c5706"}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, &(0x7f0000000440)={0x0, 0x5, 0xea, {0xea, 0xa, "1c086676be70a42b431d37b4fcf4effe1bebc1b5a6c1e30c7ecf06fd9f3436bea83bed9719b8c2b3bf01188190db8972b61dc476e6fee7ceb2ff393ea15874111959f8614ba45e76d0f9d6580841977ab218fcf4ddabe8e68602a0211849c220eb1ce12c9f20b93bb4ba18e3c708548e29e53821480b32a3d5ca928f48c4d3f5f3c70a9ec3304d28d48c462f04de2fb7fc4e90d9c5ca4c6bdd5331b1b47d4169d3016b90a8d30bdec1843313cd91361c0bbed347afb2c10170aa215021d9a68f803d1d503621830f118f54f749d6916b985958baa670bc006da72a346d19b9621ba3ba63ed4392c9"}}, &(0x7f0000000540)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "45e405723b09adae10eab0971ee360e199847a90a5f67c91a1db2b012468a4be081778364bcccdfa7936ce1780c6d42cb04ee297e0c2fcb344fc39bbef8d88a35e64059b38840486263311a4cf9f8c7854e9bfe25c84c17cfc5ed0a7815ddade0ad8b117a2dcad914e26d084372421d2ddaab85ad2cdbbf6d4670d85e3184195283430e3825d06da491bc92e46e095abff930089a6c35e4c0f86d652bd32cbf7fbaaa7dc818b1524ed27b7dc24f174ac"}}, &(0x7f00000003c0)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0xa, "264e0fac"}, @main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x9, 0x1, {0x22, 0x8ed}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x40, 0xc, 0xad, "527c70edfef89384368ac87a8cb53249a483e1e4ad167989b7bb2aadf33d430dec41d04ef0d30684bf17016df90d2c43ec8f0d49e8f96a78a7ff798ec07559323f7081c6b07511831623b069f23e267723d30e2b3597aebef18266ec0e27a95cd0d06a9ffc3ed50a5fe2a5ec30f273ecb0d0c477848084035dba147c2974ad423279598cefd65b9ca49f7bd1f5b97d189b1d367969eebceb2015c1dcc6a31c88737cdae0e5dd8be0b876cbe7dd"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x7d}, &(0x7f0000000800)={0x20, 0x1, 0x6c, "1d4d1da95c33dd39d58cfbd4246c0dc300d4e3d6b98264f7b1b37df9b5449bc024bc7aec5a702a5c2cc67028f51edb401a191f9c9c6d8105af514fe729be3f16a170b2c9cc78ee4a8e8b10487c29c0911073c9ca83c998c28b3ec38815ba7f77db460c0e6ed04cc100472a3d"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x93}}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000500000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000034700)=""/102396, 0xffffffdc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40801) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008844) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) socket$packet(0x11, 0xa, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [{@flag='posixacl'}]}}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000000940)={@void, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, {"4a14633330aa558320a5c6aa5e6bfb209ac1ba740fa363e5e5f73e8e87cf6a2ad3d455858d133fff5aadb67fd840864a1314540491e9b59018d063a473"}}}}, 0x6f) 7.880996866s ago: executing program 5 (id=2501): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000401c1b510a00000000000109022400010000206409040012c87d23d6cc387d6c0039eb4300eb020003000921000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001680)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000001b00)='cpuacct.stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) r6 = syz_io_uring_setup(0x44b5, &(0x7f00000016c0), &(0x7f0000001740), &(0x7f0000001780)) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x18) process_vm_writev(r1, &(0x7f0000001800)=[{&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000300)=""/229, 0xe5}, {&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000400)=""/9, 0x9}, {&(0x7f0000000440)=""/60, 0x3c}, {&(0x7f0000001580)=""/224, 0xe0}, {&(0x7f0000000480)=""/167, 0xa7}], 0x8, &(0x7f0000002c00)=[{&(0x7f0000001880)=""/144, 0x90}, {&(0x7f0000001940)=""/140, 0x8c}, {&(0x7f0000001a00)=""/119, 0x77}, {&(0x7f0000001a80)=""/68, 0x44}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/125, 0x7d}], 0x6, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f00000017c0)=[0x3ce6], 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)={0x60, 0x3, 0x7e, {0x7e, 0x3e, "3d91419d09660832827565614096a12bbac2704fcc0ce98ee25dd28e956f9af7e672ed4e50d9b3d2f422d4d1874fa493768bfe633f9ae289b5bbe36d157e485f4525995fefd9a98bdaec89f37e62e4d25f1e800d812d9afec823572a53725a968923e4ce4556a9cf54b93f1cbf03c518815a1a3d9d7ae36e3f4475ec"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.879809468s ago: executing program 2 (id=2502): getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r1, 0x31, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x44044}, 0x8040) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04230d00c80001023b00000009"], 0x10) r2 = syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000b04"], 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@empty, 0x4e20, 0x0, 0x0, 0xbfcc, 0xa, 0x10, 0x20, 0x67}, {0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x87a, 0xffffffdfffffffff, 0x0, 0x7, 0x9}, {0x2, 0x3, 0x400, 0x3}, 0x3, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in=@multicast2, 0x0, 0x3c}, 0x2, @in=@local, 0x0, 0x4, 0x2, 0x0, 0x0, 0x20000000}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x1, 0x8000, 0x7000, 0x7, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x64, 0x0, 0x46, 0x29, 0x0, @local, @remote}}}}) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x38, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x30}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40840}, 0x4010) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe0}}, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0xa, 0x49, {0x49, 0x24, "4fc5a010ac0963d240da7e57fdc9966ff97486c40286d0122eec7d11e15675c6e2489416ff23ccf22962aa85d5a7f5d4a20c83e45610a9774425559883758219231f73ef51abb9"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="0011e4000000a58a255a01393553bc288211baf6df3df0cc50573b18c08e0e4d71541cbad8a74c3d23c5ab855472f9fba33ac2493674714afb12c2d64a5f68e9ce7fe29ff8e8edd6d1af4ac2d692e231fcc64900c695462f6316eb88bdf900276ad3c6690e3f0b5a55f28bfaf6224ff4e8b26e1c06843f74699e7fcebe73beb933df48bdc64cd462c259380b147e4119c2f1a6d88d1c4edc9a7cce10dcc8ddd7620420f7c55b1b3235c1e71fa9d085b2441ba9e53f8702abdb56b0c55748a4cebdec8d3cd5bb01b8db79b96ea6e09e53130552bbb096e9ceb5e6518f843de18bff468809831c25cc44d74b56724502f70d066a1b63fc"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}}) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x6100c0, 0x0) ioctl$SIOCRSGL2CALL(r7, 0x89e5, &(0x7f0000000340)=@rose) 7.582658847s ago: executing program 3 (id=2503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) r4 = socket$inet6(0xa, 0x5, 0x7bffffff) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a440, 0x0) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000040)={0x9, "abacd21111cb4e78343775fbae96ab0000000000000000000000000000009300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900"}) 7.027990848s ago: executing program 2 (id=2504): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) eventfd2(0xe5c, 0x80800) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000100), 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 6.378495932s ago: executing program 2 (id=2505): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x24, 0x21, 0x121, 0x70bd26, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x6}]}, 0x24}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000140)={0x0, 0x1e, 0x4, @tid=r1}, &(0x7f00000000c0)) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_RANGEINFO(r2, 0x80106408, &(0x7f00000000c0)={0xffffffff, 0x0}) 6.058060808s ago: executing program 2 (id=2506): mlockall(0x7) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x3, 0x0, 'queue0\x00', 0xfffffffa}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) 5.913562865s ago: executing program 3 (id=2507): syz_open_dev$dri(0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x454, 0x30, 0x20, 0x70b52b, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80000000}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7, 0x3}}}}]}, {0x3e4, 0x1, [@m_nat={0x1f8, 0xc, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x2, 0x8, 0x2, 0x5}, @remote, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0x10c, 0x7, 0x1, 0x8}, @multicast2, @private=0xa010102, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4cb, 0x0, 0x1, 0x7, 0x80000000}, @local, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x2, 0x10000000, 0x10000, 0x7}, @local, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x6, 0x3, 0x100, 0x5e}, @empty, @private=0xa010101, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x800, 0x5, 0x9, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xff}}]}, {0xdf, 0x6, "fcf91b5fbb76af25d54560f341d651c4bc7787dab7d124d0830a23e5babaf73aa91070e3af037713da37a104598989840dc2a1b8bb5c4d94ccdd00c07febb30fecb3d6b34ce1d598e68872b1cd86bc29ca0d8614d0f3f2fe64046fbb79856126e1f3ea8b44bba799ce92c9926cf37b28c342f1c1b47cc496af51a5948792e3872691b076710f99a2c9eeefd1a85c098b7b5492dbd88d7604749a211a36f2a2fd7b0f8df0adaf9019be9bb588a3301a03bbdb082e30fedc964c459842fc5423b18cc275e2fb9c332f694d78b915c61896d254dc1190f27a30ea25e1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x94, 0x6, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_TYPE={0x6, 0x5, 0x7fff}]}, {0x55, 0x6, "5083b9267ed0187b1e45d83e5e8e8133d9fd9584c16ee88954afaef64bf86854328a68ca1a5f364d03dad53c74996bc81668438a0145499c7c1ff9a546c3a5c5378af31386e6cb2311130dfe51daf2a846"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x154, 0x18, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa, 0x6, 0x6, 0x4, 0x4}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb, 0xbd4, 0x3, 0x3, 0x3}, 0xf}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x401, 0x3, 0x1, 0x1ff}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x3, 0x1, 0x7, 0x2}, 0x1}}]}, {0xb4, 0x6, "ddcc0a48a8624ad557492f8245d4318ab6a815d677722263429cd4de80ff4c71cdabe9a54b096530bcb74f7a7347666ad9a8056d8775919e3a536d9f80dc14f54c4580327cd63808dc8ffbd4a128505b159b8c08e62310cd20ded1cf0110bfe4f36f3ce634ced70e9e6fccb61cc2949560b4e1c5dfcd937fec673c926328eb00d4c1842758283581824184420a90fed2e63c3bae3cfdfa734d08a0087d1ce1c9ffcef98a287ffe2f6715555193f60e7d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x454}}, 0x20040000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = memfd_create(0x0, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x30, 0x5, 0x7) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0xffff, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}}}}, 0x32) pread64(r1, 0x0, 0x0, 0x9) mknod(&(0x7f0000000000)='./file0/file0\x00', 0x800, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x219d, 0x81}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0], 0x0) r8 = socket(0x2, 0x80805, 0x0) r9 = socket(0x2, 0x80805, 0x0) ioctl$FITHAW(r7, 0xc0045878) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000580)={r10, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) 5.523982349s ago: executing program 2 (id=2508): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f901220500090581"], 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="183b512140c96bb8b81c4be6329f4e0000000000000000000000000000007118d400000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x5, 0x2, 0x180, 0x4, 0x0, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x7, 0x4, 0xbdb], 0x5000, 0x42900}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000002c0)="66baf80cb88233d58eef66bafc0cec26660f388126c74424003d000000c74424020bf40000ff1c240f20e035000010000f22e0dfc00f229b48b83e000000000000000f23c00f21f835020005000f23f8c4c23505174d0fc76c3876420f09", 0x5e}], 0x1, 0x14, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x2, 0x6, 0x24, 0x4, @tick=0x9, {0x33, 0x4}, {0x20, 0x40}, @connect={{0x7, 0xb}, {0x7f, 0x7}}}], 0x1c) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44044}, 0x40) ptrace(0x10, r5) r6 = syz_open_dev$vim2m(&(0x7f0000006f00), 0x8, 0x2) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200970228bd70000000000007000000", @ANYRES32, @ANYBLOB="00000000df"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000140)={0x21, 0x8, 0x4, {0x2, @sliced={0x8000, [0xeece, 0x3, 0x0, 0xffff, 0x3, 0x40, 0x5, 0x3, 0x5, 0x2, 0x8, 0xd65, 0x9, 0x200, 0x7, 0x4, 0x2237, 0x8, 0x2, 0x8, 0x88, 0x3, 0x7, 0x7fff, 0xa8e, 0x2, 0x10, 0x80, 0x5, 0x2, 0x7, 0x5, 0xd, 0x8, 0x4, 0x7, 0x3d, 0xe8, 0x1, 0x800, 0x8, 0x1, 0x1, 0x2, 0x0, 0x2, 0x3, 0x7], 0x5c1}}, 0x3}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc0585609, &(0x7f0000000040)=@fd={0x3, 0x2, 0xfffffffffffffe2a, 0x40, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xff, 0x0, "1fa90080"}}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x200dc0, 0xd2) close(r8) socket$phonet_pipe(0x23, 0x5, 0x2) getpeername$packet(r8, 0x0, &(0x7f0000000240)) ptrace$setsig(0x4203, r5, 0x2, &(0x7f0000000040)={0x28, 0xd, 0x1e0000}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x400000000000007, 0x7fffffffffffffff, 0x2000000000, 0x43, 0x2000001, 0x10000, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x9, 0x3, 0x0, 0x0, 0x4], 0x2000, 0x202}) 1.541815281s ago: executing program 5 (id=2509): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000040)=0x3, 0x4) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe) futex(&(0x7f0000000000)=0x1, 0x6, 0x22, 0x0, 0x0, 0xfffffffd) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000)=0x6, 0x4ffffff) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x4814) recvmmsg(r2, 0x0, 0x0, 0x2001, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pread64(r0, &(0x7f0000000100)=""/77, 0x4d, 0x9) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x984995b43da11a7e, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 0s ago: executing program 3 (id=2510): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) mlockall(0x7) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x3, 0x0, 'queue0\x00', 0xfffffffa}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000540)=0x9, 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_SET(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000045}, 0x0) recvmmsg(r5, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x100, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7cb, &(0x7f0000000500)={&(0x7f0000001080)={{@any, 0x1}, {@local, 0x6}, 0x400, "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"}, 0x418, 0x1008}) ioctl$IOCTL_VMCI_SET_NOTIFY(r4, 0x7cb, &(0x7f0000000140)={0x2, 0x10000, 0xfffffffd}) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x8, 0x10005, 0x80000001, 0xf0084, 0xff, 0x1, 0xfff, 0x5c95238c, 0xa, 0x3bf, 0x802, 0x15fa, 0x5, 0x20000001, 0x809, 0x2f, 0xfffffff9, 0x7, 0x2, 0x0, 0x8, 0x8004, 0xb, 0x1, 0xfffffffb, 0x800003, 0xef, 0x0, 0x8000a, 0x8000003, 0xdffffffd]}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010102070103082505a8a440000102030109021b00010100c004050400fa0200000004090501022000042c81"], &(0x7f0000000880)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x78, 0x8, 0x10, 0x8, 0x7}, 0xcd, &(0x7f0000000d00)=ANY=[@ANYBLOB="050fcd0001c810014a3f7146d76d3fbc44ec77351d00874b38f5b2be64378442eddda10396445c2529f0ca7d477a54389b28f211ee5d6bb04e80182ccd9d0c93ddaa3d8ceff13aa0d8b67e707b8284da2db660e63569738c04c2c1ffef1451d60d150830fdcf300c1aba0a46d1c96ea384ccd1d1edf6710e1aaaa99cdb292bd285634819aedbcd34635bc5ece639bb7f6fe56203d5bb46019712f11c5cb6bb4e1ad54367bd86fd2eeaf2ee8249682e9070ff5141c9289ffdd9d1fb4a8ac5ad1504def0d4c809a99edfbb7cd670838422eebc5b"], 0xc, [{0x34, &(0x7f0000000300)=@string={0x34, 0x3, "212101686ef9dda1ce39386449492d17ec78ad575581f496b0cf04703282b1e4a876ac83eb5ae8c52d3f87d1931bed1e617c"}}, {0x9a, &(0x7f0000000340)=@string={0x9a, 0x3, "d5f1e0e3bf4659c5c73a89616f3ebdb2c443fa72db4d78b926f070a036409a6529062533b2697ed3d0d0ba487a9ab6a47ef2e27bdba06d7b9c10c399cbad0147d7e0249feab572126a59e16759e4eeb47b9d61dc5e56892c6688bd8c47909487e19a7ff127365798413fe2f14fa29ae48f9104597f72807ecde8c0f8ba6d9561488c84c0ff7a7f92a5203fd6553e4b7b8d56a48c770b3973"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3c01}}, {0xa5, &(0x7f0000000940)=ANY=[@ANYBLOB="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"]}, {0xdb, &(0x7f0000000580)=ANY=[@ANYBLOB="db0339e2bd50a998a824a172dfd5e51f4c342b2ffccd1ab170805f042815d42ac25e4aaa309c4ea29e22b2195c2e10ec5d1dbe0bbcdafa98932414d2c30f099a2d31df79db8ab26259010c7a7c6af662852141a4871b730004725dde1a5aeb7354f435cc54173f006e615865f08b892ef1607471057b217b1b3e07371697c7544b7f8738c1962edab767fa31545ae49010bd5d3041ffa9bae41673eb3ba0279707e934d6ce69c9adcaeeedfbd595e3f0babca4fc7e03626e408aa3554770b246c87777ba3cd385b81d8be789a13fed13017cb80c84d7aee2038e00"]}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x426}}]}) kernel console output (not intermixed with test programs): 670.044620][T11771] dt2824-pgl [ 670.044628][T11771] dt2825 [ 670.044635][T11771] dt2827 [ 670.044643][T11771] dt2828 [ 670.044650][T11771] dt2829 [ 670.044657][T11771] dt21-ez [ 670.044665][T11771] dt23-ez [ 670.044672][T11771] dt24-ez [ 670.044679][T11771] dt24-ez-pgl [ 670.044687][T11771] comedi: valid board names for dt2817 driver are: [ 670.044697][T11771] dt2817 [ 670.044704][T11771] comedi: valid board names for dt2815 driver are: [ 670.044714][T11771] dt2815 [ 670.044721][T11771] comedi: valid board names for dt2814 driver are: [ 670.044731][T11771] dt2814 [ 670.044738][T11771] comedi: valid board names for dt2811 driver are: [ 670.044748][T11771] dt2811-pgh [ 670.044756][T11771] dt2811-pgl [ 670.044763][T11771] comedi: valid board names for dt2801 driver are: [ 670.044771][T11771] dt2801 [ 670.044779][T11771] comedi: valid board names for das6402 driver are: [ 670.044789][T11771] das6402-12 [ 670.044796][T11771] das6402-16 [ 670.044804][T11771] comedi: valid board names for das1800 driver are: [ 670.044814][T11771] das-1701st [ 670.044821][T11771] das-1701st-da [ 670.044829][T11771] das-1702st [ 670.044836][T11771] das-1702st-da [ 670.044844][T11771] das-1702hr [ 670.044852][T11771] das-1702hr-da [ 670.044860][T11771] das-1701ao [ 670.044867][T11771] das-1702ao [ 670.044874][T11771] das-1801st [ 670.044881][T11771] das-1801st-da [ 670.044889][T11771] das-1802st [ 670.044896][T11771] das-1802st-da [ 670.044904][T11771] das-1802hr [ 670.044911][T11771] das-1802hr-da [ 670.044918][T11771] das-1801hc [ 670.044925][T11771] das-1802hc [ 670.044933][T11771] das-1801ao [ 670.044940][T11771] das-1802ao [ 670.044948][T11771] comedi: valid board names for das800 driver are: [ 670.044958][T11771] das-800 [ 670.044966][T11771] cio-das800 [ 670.044973][T11771] das-801 [ 670.044980][T11771] cio-das801 [ 670.044988][T11771] das-802 [ 670.044995][T11771] cio-das802 [ 670.045003][T11771] cio-das802/16 [ 670.045010][T11771] comedi: valid board names for isa-das08 driver are: [ 670.045020][T11771] isa-das08 [ 670.045028][T11771] das08-pgm [ 670.045035][T11771] das08-pgh [ 670.045042][T11771] das08-pgl [ 670.045049][T11771] das08-aoh [ 670.045056][T11771] das08-aol [ 670.045064][T11771] das08-aom [ 670.045070][T11771] das08/jr-ao [ 670.045078][T11771] das08jr-16-ao [ 670.045085][T11771] pc104-das08 [ 670.045092][T11771] das08jr/16 [ 670.045099][T11771] comedi: valid board names for das16m1 driver are: [ 670.045108][T11771] das16m1 [ 670.045115][T11771] comedi: valid board names for dac02 driver are: [ 670.045125][T11771] dac02 [ 670.045132][T11771] comedi: valid board names for rti802 driver are: [ 670.045142][T11771] rti802 [ 670.045148][T11771] comedi: valid board names for rti800 driver are: [ 670.045158][T11771] rti800 [ 670.045164][T11771] rti815 [ 670.045172][T11771] comedi: valid board names for pcm3724 driver are: [ 670.045181][T11771] pcm3724 [ 670.045188][T11771] comedi: valid board names for pcl818 driver are: [ 670.045197][T11771] pcl818l [ 670.045204][T11771] pcl818h [ 670.045211][T11771] pcl818hd [ 670.045218][T11771] pcl818hg [ 670.045226][T11771] pcl818 [ 670.045232][T11771] pcl718 [ 670.045239][T11771] pcm3718 [ 670.045247][T11771] comedi: valid board names for pcl816 driver are: [ 670.045256][T11771] pcl816 [ 670.045263][T11771] pcl814b [ 670.045271][T11771] comedi: valid board names for pcl812 driver are: [ 670.045280][T11771] pcl812 [ 670.045294][T11771] pcl812pg [ 670.045302][T11771] acl8112pg [ 670.045309][T11771] acl8112dg [ 670.045317][T11771] acl8112hg [ 670.045324][T11771] a821pgl [ 670.045331][T11771] a821pglnda [ 670.045338][T11771] a821pgh [ 670.045346][T11771] a822pgl [ 670.045353][T11771] a822pgh [ 670.045361][T11771] a823pgl [ 670.045368][T11771] a823pgh [ 670.045375][T11771] pcl813 [ 670.045382][T11771] pcl813b [ 670.045389][T11771] acl8113 [ 670.045396][T11771] iso813 [ 670.045403][T11771] acl8216 [ 670.045411][T11771] a826pg [ 670.045417][T11771] comedi: valid board names for pcl730 driver are: [ 670.045427][T11771] pcl730 [ 670.045434][T11771] iso730 [ 670.045441][T11771] acl7130 [ 670.045448][T11771] pcm3730 [ 670.045455][T11771] pcl725 [ 670.045462][T11771] p8r8dio [ 670.045469][T11771] acl7225b [ 670.045476][T11771] p16r16dio [ 670.045484][T11771] pcl733 [ 670.045491][T11771] pcl734 [ 670.045497][T11771] opmm-1616-xt [ 670.045504][T11771] pearl-mm-p [ 670.045511][T11771] ir104-pbf [ 670.045518][T11771] comedi: valid board names for pcl726 driver are: [ 670.045527][T11771] pcl726 [ 670.045535][T11771] pcl727 [ 670.045541][T11771] pcl728 [ 670.045549][T11771] acl6126 [ 670.045556][T11771] acl6128 [ 670.045562][T11771] comedi: valid board names for pcl724 driver are: [ 670.045572][T11771] pcl724 [ 670.045579][T11771] pcl722 [ 670.045586][T11771] pcl731 [ 670.045594][T11771] acl7122 [ 670.045601][T11771] acl7124 [ 670.045608][T11771] pet48dio [ 670.045616][T11771] pcmio48 [ 670.045623][T11771] onyx-mm-dio [ 670.045631][T11771] comedi: valid board names for pcl711 driver are: [ 670.045641][T11771] pcl711 [ 670.045648][T11771] pcl711b [ 670.045655][T11771] acl8112hg [ 670.045662][T11771] acl8112dg [ 670.045670][T11771] comedi: valid board names for amplc_pc263 driver are: [ 670.045680][T11771] pc263 [ 670.045687][T11771] comedi: valid board names for amplc_pc236 driver are: [ 670.045698][T11771] pc36at [ 670.045705][T11771] comedi: valid board names for amplc_dio200 driver are: [ 670.045715][T11771] pc212e [ 670.045722][T11771] pc214e [ 670.045729][T11771] pc215e [ 670.045736][T11771] pc218e [ 670.045743][T11771] pc272e [ 670.045750][T11771] comedi: valid board names for comedi_parport driver are: [ 670.045761][T11771] comedi_parport [ 670.045769][T11771] comedi: valid board names for comedi_test driver are: [ 670.045779][T11771] comedi_test [ 670.045787][T11771] comedi: valid board names for comedi_bond driver are: [ 670.045797][T11771] comedi_bond [ 670.062357][T11771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.062889][T11771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.133884][ T5885] usb 6-1: selecting invalid altsetting 0 [ 671.157832][ T5885] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 671.157868][ T5885] uvcvideo 6-1:220.0: No valid video chain found. [ 671.222073][ T5885] usb 6-1: selecting invalid altsetting 0 [ 671.222097][ T5885] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 671.245760][ T5885] usb 6-1: USB disconnect, device number 39 [ 671.318816][ T5807] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 671.342704][ T31] usb 4-1: USB disconnect, device number 33 [ 671.471881][ T5807] usb 2-1: USB disconnect, device number 57 [ 671.581552][ T9] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 672.085077][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 672.085115][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 672.093477][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 672.093506][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 672.093527][ T9] usb 5-1: Product: syz [ 672.093542][ T9] usb 5-1: Manufacturer: syz [ 672.093556][ T9] usb 5-1: SerialNumber: syz [ 672.109004][ T9] usb 5-1: config 0 descriptor?? [ 672.151807][ T9] usb 5-1: selecting invalid altsetting 0 [ 672.362035][ T5807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 672.541215][ T5807] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 672.912692][T11799] fido_id[11799]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 673.495823][T11797] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1888'. [ 673.495844][T11797] tc_dump_action: action bad kind [ 673.692613][T11821] 9pnet_fd: Insufficient options for proto=fd [ 674.226873][ T5807] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 674.390816][ T31] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 674.470285][ T5807] usb 4-1: Using ep0 maxpacket: 32 [ 674.475843][ T5807] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.475877][ T5807] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.546603][ T31] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 674.546634][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.546656][ T31] usb 3-1: Product: syz [ 674.546672][ T31] usb 3-1: Manufacturer: syz [ 674.546688][ T31] usb 3-1: SerialNumber: syz [ 674.586387][ T5807] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 674.586406][ T5807] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 674.586418][ T5807] usb 4-1: Product: syz [ 674.586426][ T5807] usb 4-1: Manufacturer: syz [ 674.597435][ T5807] hub 4-1:4.0: USB hub found [ 674.627224][ T31] usb 3-1: config 0 descriptor?? [ 674.763852][ T31] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 675.267743][ T5885] usb 5-1: USB disconnect, device number 15 [ 675.930883][ T5926] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 675.950897][ T5903] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 675.984311][T11845] FAULT_INJECTION: forcing a failure. [ 675.984311][T11845] name failslab, interval 1, probability 0, space 0, times 0 [ 675.984334][T11845] CPU: 0 UID: 0 PID: 11845 Comm: syz.4.1904 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 675.984351][T11845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 675.984363][T11845] Call Trace: [ 675.984372][T11845] [ 675.984381][T11845] dump_stack_lvl+0x189/0x250 [ 675.984416][T11845] ? __pfx____ratelimit+0x10/0x10 [ 675.984440][T11845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 675.984467][T11845] ? __pfx__printk+0x10/0x10 [ 675.984496][T11845] ? __pfx___might_resched+0x10/0x10 [ 675.984514][T11845] should_fail_ex+0x46c/0x600 [ 675.984545][T11845] should_failslab+0xa8/0x100 [ 675.984574][T11845] __kmalloc_cache_noprof+0x6f/0x6c0 [ 675.984600][T11845] ? snd_pcm_oss_change_params_locked+0x1b3/0x3e40 [ 675.984626][T11845] snd_pcm_oss_change_params_locked+0x1b3/0x3e40 [ 675.984640][T11845] ? register_lock_class+0x51/0x320 [ 675.984657][T11845] ? __lock_acquire+0xab9/0xd20 [ 675.984676][T11845] ? do_raw_spin_lock+0x121/0x290 [ 675.984705][T11845] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 675.984723][T11845] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 675.984756][T11845] ? lockdep_hardirqs_on+0x9c/0x150 [ 675.984782][T11845] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 675.984803][T11845] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 675.984823][T11845] ? mutex_lock_interruptible_nested+0x154/0x1d0 [ 675.984835][T11845] ? snd_pcm_oss_write+0x295/0x11a0 [ 675.984859][T11845] snd_pcm_oss_write+0x301/0x11a0 [ 675.984884][T11845] ? get_pid_task+0x20/0x1f0 [ 675.984930][T11845] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 675.984954][T11845] ? do_raw_spin_lock+0x121/0x290 [ 675.984973][T11845] ? rw_verify_area+0x25b/0x4e0 [ 675.984986][T11845] ? __lock_acquire+0xab9/0xd20 [ 675.985000][T11845] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 675.985021][T11845] vfs_write+0x287/0xb40 [ 675.985053][T11845] ? __pfx_vfs_write+0x10/0x10 [ 675.985078][T11845] ? __fget_files+0x2a/0x420 [ 675.985108][T11845] ? __fget_files+0x2a/0x420 [ 675.985130][T11845] ? __fget_files+0x3a6/0x420 [ 675.985144][T11845] ? __fget_files+0x2a/0x420 [ 675.985163][T11845] ksys_write+0x14b/0x260 [ 675.985179][T11845] ? __pfx_ksys_write+0x10/0x10 [ 675.985205][T11845] ? do_syscall_64+0xbe/0xfa0 [ 675.985234][T11845] do_syscall_64+0xfa/0xfa0 [ 675.985258][T11845] ? lockdep_hardirqs_on+0x9c/0x150 [ 675.985282][T11845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.985298][T11845] ? clear_bhb_loop+0x60/0xb0 [ 675.985311][T11845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.985321][T11845] RIP: 0033:0x7f4ecb3cf6c9 [ 675.985331][T11845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.985341][T11845] RSP: 002b:00007f4ec9636038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 675.985362][T11845] RAX: ffffffffffffffda RBX: 00007f4ecb625fa0 RCX: 00007f4ecb3cf6c9 [ 675.985377][T11845] RDX: 000000000000fdbc RSI: 0000200000000500 RDI: 0000000000000003 [ 675.985389][T11845] RBP: 00007f4ec9636090 R08: 0000000000000000 R09: 0000000000000000 [ 675.985401][T11845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.985413][T11845] R13: 00007f4ecb626038 R14: 00007f4ecb625fa0 R15: 00007fff2824e048 [ 675.985447][T11845] [ 676.127687][ T5807] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 676.162748][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 676.173637][ T5926] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 676.173665][ T5926] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 676.173693][ T5926] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 676.177679][ T5926] usb 6-1: config 220 has no interface number 2 [ 676.183529][ T5807] usb 4-1: USB disconnect, device number 34 [ 676.194775][ T5926] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 676.194809][ T5926] usb 6-1: config 220 interface 0 has no altsetting 0 [ 676.194827][ T5926] usb 6-1: config 220 interface 76 has no altsetting 0 [ 676.206224][ T5926] usb 6-1: config 220 interface 1 has no altsetting 0 [ 676.233309][T11823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.234052][T11823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.256768][ T5903] usb 2-1: config 0 has an invalid interface number: 236 but max is 0 [ 676.256797][ T5903] usb 2-1: config 0 has no interface number 0 [ 676.276264][ T5903] usb 2-1: config 0 interface 236 has no altsetting 0 [ 676.452993][ T5903] usb 2-1: New USB device found, idVendor=0c45, idProduct=60c0, bcdDevice=c2.12 [ 676.453012][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.453024][ T5903] usb 2-1: Product: syz [ 676.453032][ T5903] usb 2-1: Manufacturer: syz [ 676.453040][ T5903] usb 2-1: SerialNumber: syz [ 676.493046][ T5926] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 676.493077][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.493299][ T5926] usb 6-1: Product: syz [ 676.493310][ T5926] usb 6-1: Manufacturer: syz [ 676.493318][ T5926] usb 6-1: SerialNumber: syz [ 676.535461][ T5903] usb 2-1: config 0 descriptor?? [ 677.089287][ T5903] gspca_main: sonixj-2.14.0 probing 0c45:60c0 [ 677.120899][ T5903] gspca_sonixj: reg_w1 err -71 [ 677.127876][ T5903] sonixj 2-1:0.236: probe with driver sonixj failed with error -71 [ 677.269260][ T5903] usb 2-1: USB disconnect, device number 58 [ 677.289444][ T31] gspca_stk1135: reg_w 0x2ff err -71 [ 677.290486][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 677.290501][ T31] gspca_stk1135: Sensor write failed [ 677.290529][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 677.290540][ T31] gspca_stk1135: Sensor write failed [ 677.320606][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 677.320623][ T31] gspca_stk1135: Sensor read failed [ 677.320648][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 677.320659][ T31] gspca_stk1135: Sensor read failed [ 677.320667][ T31] gspca_stk1135: Detected sensor type unknown (0x0) [ 677.337120][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 677.337136][ T31] gspca_stk1135: Sensor read failed [ 677.337165][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 677.337176][ T31] gspca_stk1135: Sensor read failed [ 677.350790][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 677.350807][ T31] gspca_stk1135: Sensor write failed [ 677.350835][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 677.350845][ T31] gspca_stk1135: Sensor write failed [ 677.369771][ T31] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 677.432589][ T31] usb 3-1: USB disconnect, device number 53 [ 677.437220][ T5926] usb 6-1: selecting invalid altsetting 0 [ 677.460295][ T5926] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 677.460318][ T5926] uvcvideo 6-1:220.0: No valid video chain found. [ 677.467052][ T5926] usb 6-1: selecting invalid altsetting 0 [ 677.467088][ T5926] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 677.510528][ T5926] usb 6-1: USB disconnect, device number 40 [ 679.260889][ T5926] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 679.421081][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 679.423196][ T5926] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.423227][ T5926] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.425020][ T5926] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 679.425049][ T5926] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 679.425069][ T5926] usb 6-1: Product: syz [ 679.425083][ T5926] usb 6-1: Manufacturer: syz [ 679.801017][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 679.895100][T11900] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2721965698 (5443931396 ns) > initial count (791010548 ns). Using initial count to start timer. [ 679.933527][ T5926] hub 6-1:4.0: USB hub found [ 679.960884][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 679.963529][ T9] usb 3-1: config 0 has an invalid interface number: 236 but max is 0 [ 679.963555][ T9] usb 3-1: config 0 has no interface number 0 [ 679.963588][ T9] usb 3-1: config 0 interface 236 has no altsetting 0 [ 679.967034][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=60c0, bcdDevice=c2.12 [ 679.967060][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.967079][ T9] usb 3-1: Product: syz [ 679.967093][ T9] usb 3-1: Manufacturer: syz [ 679.967107][ T9] usb 3-1: SerialNumber: syz [ 680.030315][ T9] usb 3-1: config 0 descriptor?? [ 680.230836][ T5903] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 680.260356][ T9] gspca_main: sonixj-2.14.0 probing 0c45:60c0 [ 680.275622][ T9] gspca_sonixj: reg_w1 err -71 [ 680.275722][ T9] sonixj 3-1:0.236: probe with driver sonixj failed with error -71 [ 680.300959][ T9] usb 3-1: USB disconnect, device number 54 [ 680.388700][ T5903] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 680.388779][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.388801][ T5903] usb 2-1: Product: syz [ 680.388815][ T5903] usb 2-1: Manufacturer: syz [ 680.388829][ T5903] usb 2-1: SerialNumber: syz [ 680.440223][ T5903] usb 2-1: config 0 descriptor?? [ 680.927258][ T5903] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 682.232963][ T5926] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 682.514340][ T5926] usb 6-1: USB disconnect, device number 41 [ 683.482567][T11919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.483116][T11919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.980931][T11941] FAULT_INJECTION: forcing a failure. [ 683.980931][T11941] name failslab, interval 1, probability 0, space 0, times 0 [ 683.981026][T11941] CPU: 1 UID: 0 PID: 11941 Comm: syz.3.1938 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 683.981049][T11941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 683.981061][T11941] Call Trace: [ 683.981069][T11941] [ 683.981078][T11941] dump_stack_lvl+0x189/0x250 [ 683.981111][T11941] ? __pfx____ratelimit+0x10/0x10 [ 683.981139][T11941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 683.981165][T11941] ? __pfx__printk+0x10/0x10 [ 683.981194][T11941] ? __pfx___might_resched+0x10/0x10 [ 683.981219][T11941] ? fs_reclaim_acquire+0x7d/0x100 [ 683.981249][T11941] should_fail_ex+0x46c/0x600 [ 683.981281][T11941] should_failslab+0xa8/0x100 [ 683.981307][T11941] __kmalloc_noprof+0xcc/0x7d0 [ 683.981331][T11941] ? tomoyo_encode+0x28b/0x550 [ 683.981359][T11941] tomoyo_encode+0x28b/0x550 [ 683.981386][T11941] tomoyo_realpath_from_path+0x58d/0x5d0 [ 683.981420][T11941] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 683.981448][T11941] tomoyo_path_number_perm+0x1e8/0x5a0 [ 683.981478][T11941] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 683.981510][T11941] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 683.981536][T11941] ? lockdep_hardirqs_on+0x9c/0x150 [ 683.981589][T11941] ? __fget_files+0x2a/0x420 [ 683.981618][T11941] ? __fget_files+0x3a6/0x420 [ 683.981641][T11941] ? __fget_files+0x2a/0x420 [ 683.981669][T11941] security_file_ioctl+0xcb/0x2d0 [ 683.981692][T11941] __se_sys_ioctl+0x47/0x170 [ 683.981716][T11941] do_syscall_64+0xfa/0xfa0 [ 683.981740][T11941] ? lockdep_hardirqs_on+0x9c/0x150 [ 683.981764][T11941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.981782][T11941] ? clear_bhb_loop+0x60/0xb0 [ 683.981804][T11941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.981821][T11941] RIP: 0033:0x7f694dbaf6c9 [ 683.981839][T11941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.981854][T11941] RSP: 002b:00007f694be0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 683.981876][T11941] RAX: ffffffffffffffda RBX: 00007f694de05fa0 RCX: 00007f694dbaf6c9 [ 683.981891][T11941] RDX: 0000200000000c80 RSI: 00000000c2604110 RDI: 0000000000000003 [ 683.981904][T11941] RBP: 00007f694be0e090 R08: 0000000000000000 R09: 0000000000000000 [ 683.981917][T11941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.981929][T11941] R13: 00007f694de06038 R14: 00007f694de05fa0 R15: 00007ffc4fd33108 [ 683.981963][T11941] [ 683.982381][T11941] ERROR: Out of memory at tomoyo_realpath_from_path. [ 683.988748][T11940] overlayfs: conflicting lowerdir path [ 684.478508][ T5903] gspca_stk1135: reg_w 0x2ff err -71 [ 684.479599][ T5903] gspca_stk1135: serial bus timeout: status=0x00 [ 684.479612][ T5903] gspca_stk1135: Sensor write failed [ 684.479640][ T5903] gspca_stk1135: serial bus timeout: status=0x00 [ 684.479650][ T5903] gspca_stk1135: Sensor write failed [ 684.479678][ T5903] gspca_stk1135: serial bus timeout: status=0x00 [ 684.479689][ T5903] gspca_stk1135: Sensor read failed [ 684.479715][ T5903] gspca_stk1135: serial bus timeout: status=0x00 [ 684.479723][ T5903] gspca_stk1135: Sensor read failed [ 684.479731][ T5903] gspca_stk1135: Detected sensor type unknown (0x0) [ 684.479762][ T5903] gspca_stk1135: serial bus timeout: status=0x00 [ 684.479772][ T5903] gspca_stk1135: Sensor read failed [ 684.479797][ T5903] gspca_stk1135: serial bus timeout: status=0x00 [ 684.479807][ T5903] gspca_stk1135: Sensor read failed [ 684.479834][ T5903] gspca_stk1135: serial bus timeout: status=0x00 [ 684.479844][ T5903] gspca_stk1135: Sensor write failed [ 684.479871][ T5903] gspca_stk1135: serial bus timeout: status=0x00 [ 684.479881][ T5903] gspca_stk1135: Sensor write failed [ 684.479971][ T5903] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 684.862096][ T5903] usb 2-1: USB disconnect, device number 59 [ 685.356267][ C1] vkms_vblank_simulate: vblank timer overrun [ 685.670851][ T5926] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 685.836704][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 685.992722][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.994296][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.261139][ C1] vkms_vblank_simulate: vblank timer overrun [ 686.289652][ C1] vkms_vblank_simulate: vblank timer overrun [ 686.786847][ C1] vkms_vblank_simulate: vblank timer overrun [ 686.979552][ T5926] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.979586][ T5926] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.070005][ T5926] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 687.070024][ T5926] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 687.070036][ T5926] usb 3-1: Product: syz [ 687.070045][ T5926] usb 3-1: Manufacturer: syz [ 687.544322][ C1] vkms_vblank_simulate: vblank timer overrun [ 687.589662][ T5926] hub 3-1:4.0: USB hub found [ 687.686399][T11977] overlayfs: conflicting lowerdir path [ 688.162618][T11985] netlink: 'syz.1.1955': attribute type 10 has an invalid length. [ 688.209922][T11985] team0: Port device dummy0 added [ 688.222851][T11985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1955'. [ 688.301885][ T5926] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 689.179628][ T5926] usb 3-1: USB disconnect, device number 55 [ 689.347602][ T5885] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 690.242307][ T5885] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 690.242332][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.242344][ T5885] usb 5-1: Product: syz [ 690.242352][ T5885] usb 5-1: Manufacturer: syz [ 690.242360][ T5885] usb 5-1: SerialNumber: syz [ 690.502083][ T5885] usb 5-1: config 0 descriptor?? [ 690.521412][ T5885] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 690.733179][T12003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1960'. [ 691.011009][ T5807] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 691.175430][ T5807] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 691.175450][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.175461][ T5807] usb 2-1: Product: syz [ 691.175469][ T5807] usb 2-1: Manufacturer: syz [ 691.175477][ T5807] usb 2-1: SerialNumber: syz [ 691.204271][ T5807] usb 2-1: config 0 descriptor?? [ 691.709625][ T5807] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 691.726973][ T5807] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 691.771429][ T5807] usb 2-1: USB disconnect, device number 60 [ 691.875198][T12013] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2721965698 (5443931396 ns) > initial count (791010548 ns). Using initial count to start timer. [ 691.938217][T11994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.943815][T11994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.950790][ T5926] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 692.120825][ T5926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.141017][ T5926] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 692.141047][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 692.141067][ T5926] usb 3-1: Product: syz [ 692.141081][ T5926] usb 3-1: Manufacturer: syz [ 692.141095][ T5926] usb 3-1: SerialNumber: syz [ 692.149827][T12020] overlayfs: conflicting lowerdir path [ 692.190350][ T5926] usb 3-1: config 0 descriptor?? [ 692.240433][ T5926] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 692.331339][T10836] udevd[10836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 692.765777][ T5926] usb 3-1: USB disconnect, device number 56 [ 692.904705][ T5885] gspca_stk1135: reg_w 0x2ff err -71 [ 692.905747][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 692.905763][ T5885] gspca_stk1135: Sensor write failed [ 692.905792][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 692.905802][ T5885] gspca_stk1135: Sensor write failed [ 692.905828][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 692.905839][ T5885] gspca_stk1135: Sensor read failed [ 692.905868][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 692.905878][ T5885] gspca_stk1135: Sensor read failed [ 692.905886][ T5885] gspca_stk1135: Detected sensor type unknown (0x0) [ 692.905916][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 692.905925][ T5885] gspca_stk1135: Sensor read failed [ 692.905949][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 692.905959][ T5885] gspca_stk1135: Sensor read failed [ 692.905986][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 692.905997][ T5885] gspca_stk1135: Sensor write failed [ 692.906025][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 692.906035][ T5885] gspca_stk1135: Sensor write failed [ 692.906124][ T5885] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 692.919374][ T5885] usb 5-1: USB disconnect, device number 16 [ 692.992750][T12033] Invalid logical block size (4) [ 694.579635][ T5885] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 695.244218][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.354361][ T5885] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 695.355083][ T5885] usb 5-1: config 0 interface 0 has no altsetting 0 [ 695.466479][ T5885] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 695.466511][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 695.466533][ T5885] usb 5-1: Product: syz [ 695.466548][ T5885] usb 5-1: Manufacturer: syz [ 695.466564][ T5885] usb 5-1: SerialNumber: syz [ 695.483597][ T5885] usb 5-1: config 0 descriptor?? [ 695.639156][ T5885] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 695.923473][ T9086] udevd[9086]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 697.392583][T12088] overlayfs: conflicting lowerdir path [ 697.461920][ T5926] usb 5-1: USB disconnect, device number 17 [ 700.146058][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 700.146077][ T37] audit: type=1326 audit(1762950285.722:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12109 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ecb3cf6c9 code=0x7ffc0000 [ 700.171256][ T37] audit: type=1326 audit(1762950285.752:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12109 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ecb3cf6c9 code=0x7ffc0000 [ 700.171388][ T37] audit: type=1326 audit(1762950285.752:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12109 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ecb3cf6c9 code=0x7ffc0000 [ 700.171618][ T37] audit: type=1326 audit(1762950285.752:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12109 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ecb3cf6c9 code=0x7ffc0000 [ 700.171782][ T37] audit: type=1326 audit(1762950285.752:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12109 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ecb3cf6c9 code=0x7ffc0000 [ 700.171998][ T37] audit: type=1326 audit(1762950285.752:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12109 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ecb3cf6c9 code=0x7ffc0000 [ 700.376684][ T37] audit: type=1326 audit(1762950285.952:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12109 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ecb3cf6c9 code=0x7ffc0000 [ 700.379588][ T37] audit: type=1326 audit(1762950285.952:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12109 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ecb3cf6c9 code=0x7ffc0000 [ 700.839119][T12134] overlayfs: conflicting lowerdir path [ 700.962194][ T5885] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 701.816645][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.816704][ T5885] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 701.816734][ T5885] usb 3-1: config 0 interface 0 has no altsetting 0 [ 701.853484][ T5885] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 701.853515][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 701.853537][ T5885] usb 3-1: Product: syz [ 701.853552][ T5885] usb 3-1: Manufacturer: syz [ 701.853570][ T5885] usb 3-1: SerialNumber: syz [ 701.921370][ T5885] usb 3-1: config 0 descriptor?? [ 701.956138][ T5885] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 702.100490][T12145] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 702.183096][ T9086] udevd[9086]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 702.600070][ T6004] usb 3-1: USB disconnect, device number 57 [ 705.019863][T12173] overlayfs: conflicting lowerdir path [ 705.177031][ T37] audit: type=1326 audit(1762950290.752:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12174 comm="syz.3.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694dbaf6c9 code=0x7ffc0000 [ 705.177999][ T37] audit: type=1326 audit(1762950290.752:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12174 comm="syz.3.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f694dbaf6c9 code=0x7ffc0000 [ 705.178349][ T37] audit: type=1326 audit(1762950290.752:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12174 comm="syz.3.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694dbaf6c9 code=0x7ffc0000 [ 705.178831][ T37] audit: type=1326 audit(1762950290.752:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12174 comm="syz.3.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f694dbaf6c9 code=0x7ffc0000 [ 705.179521][ T37] audit: type=1326 audit(1762950290.752:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12174 comm="syz.3.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694dbaf6c9 code=0x7ffc0000 [ 705.195100][ T37] audit: type=1326 audit(1762950290.772:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12174 comm="syz.3.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f694dbaf6c9 code=0x7ffc0000 [ 705.231785][ T37] audit: type=1326 audit(1762950290.812:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12174 comm="syz.3.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694dbaf6c9 code=0x7ffc0000 [ 705.235643][ T37] audit: type=1326 audit(1762950290.812:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12174 comm="syz.3.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694dbaf6c9 code=0x7ffc0000 [ 705.282372][ T37] audit: type=1326 audit(1762950290.832:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12174 comm="syz.3.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f694dbaf6c9 code=0x7ffc0000 [ 705.282426][ T37] audit: type=1326 audit(1762950290.832:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12174 comm="syz.3.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694dbaf6c9 code=0x7ffc0000 [ 706.390900][ T8041] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 706.433097][ T5885] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 706.586246][ T8041] usb 4-1: Using ep0 maxpacket: 32 [ 706.609968][ T8041] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.610009][ T8041] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.640074][ T8041] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 706.640093][ T8041] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 706.640104][ T8041] usb 4-1: Product: syz [ 706.640112][ T8041] usb 4-1: Manufacturer: syz [ 706.669977][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 706.699960][ T5885] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.699995][ T5885] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.724979][ T5885] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 706.724998][ T5885] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 706.725009][ T5885] usb 2-1: Product: syz [ 706.725017][ T5885] usb 2-1: Manufacturer: syz [ 706.765262][ T8041] hub 4-1:4.0: USB hub found [ 706.766011][ T5885] hub 2-1:4.0: USB hub found [ 706.998548][T12216] overlayfs: conflicting lowerdir path [ 707.554514][ T31] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 707.706817][ T31] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 707.706847][ T31] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 707.706867][ T31] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 707.706887][ T31] usb 6-1: config 220 has no interface number 2 [ 707.706957][ T31] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 707.706986][ T31] usb 6-1: config 220 interface 0 has no altsetting 0 [ 707.707004][ T31] usb 6-1: config 220 interface 76 has no altsetting 0 [ 707.707021][ T31] usb 6-1: config 220 interface 1 has no altsetting 0 [ 707.763142][ T31] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 707.763173][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.763194][ T31] usb 6-1: Product: syz [ 707.763209][ T31] usb 6-1: Manufacturer: syz [ 707.763223][ T31] usb 6-1: SerialNumber: syz [ 707.789691][T12226] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2036'. [ 708.825450][T12221] comedi: valid board names for 8255 driver are: [ 708.825704][T12221] 8255 [ 708.825715][T12221] comedi: valid board names for vmk80xx driver are: [ 708.825725][T12221] vmk80xx [ 708.825732][T12221] comedi: valid board names for usbduxsigma driver are: [ 708.825743][T12221] usbduxsigma [ 708.825758][T12221] comedi: valid board names for usbduxfast driver are: [ 708.825768][T12221] usbduxfast [ 708.825776][T12221] comedi: valid board names for usbdux driver are: [ 708.825786][T12221] usbdux [ 708.825793][T12221] comedi: valid board names for ni6501 driver are: [ 708.826511][T12221] ni6501 [ 708.826522][T12221] comedi: valid board names for dt9812 driver are: [ 708.826532][T12221] dt9812 [ 708.826540][T12221] comedi: valid board names for ni_labpc_cs driver are: [ 708.826551][T12221] ni_labpc_cs [ 708.826558][T12221] comedi: valid board names for ni_daq_700 driver are: [ 708.826569][T12221] ni_daq_700 [ 708.826576][T12221] comedi: valid board names for labpc_pci driver are: [ 708.826587][T12221] labpc_pci [ 708.827314][T12221] comedi: valid board names for adl_pci9118 driver are: [ 708.827327][T12221] pci9118dg [ 708.827335][T12221] pci9118hg [ 708.827343][T12221] pci9118hr [ 708.827350][T12221] comedi: valid board names for 8255_pci driver are: [ 708.827360][T12221] 8255_pci [ 708.827368][T12221] comedi: valid board names for s526 driver are: [ 708.827378][T12221] s526 [ 708.827385][T12221] comedi: valid board names for multiq3 driver are: [ 708.827395][T12221] multiq3 [ 708.827402][T12221] comedi: valid board names for pcmuio driver are: [ 708.828132][T12221] pcmuio48 [ 708.828143][T12221] pcmuio96 [ 708.828151][T12221] comedi: valid board names for pcmmio driver are: [ 708.828163][T12221] pcmmio [ 708.828171][T12221] comedi: valid board names for pcmda12 driver are: [ 708.828181][T12221] pcmda12 [ 708.828189][T12221] comedi: valid board names for pcmad driver are: [ 708.828199][T12221] pcmad12 [ 708.828207][T12221] pcmad16 [ 708.828214][T12221] comedi: valid board names for ni_labpc driver are: [ 708.828224][T12221] lab-pc-1200 [ 708.828967][T12221] lab-pc-1200ai [ 708.828977][T12221] lab-pc+ [ 708.828985][T12221] comedi: valid board names for atmio16 driver are: [ 708.828996][T12221] atmio16 [ 708.829003][T12221] atmio16d [ 708.829012][T12221] comedi: valid board names for ni_at_ao driver are: [ 708.829022][T12221] at-ao-6 [ 708.829029][T12221] at-ao-10 [ 708.829036][T12221] comedi: valid board names for ni_at_a2150 driver are: [ 708.829595][T12221] ni_at_a2150 [ 708.829606][T12221] comedi: valid board names for adq12b driver are: [ 708.829615][T12221] adq12b [ 708.829623][T12221] comedi: valid board names for mpc624 driver are: [ 708.829633][T12221] mpc624 [ 708.829641][T12221] comedi: valid board names for c6xdigio driver are: [ 708.829652][T12221] c6xdigio [ 708.829659][T12221] comedi: valid board names for aio_iiro_16 driver are: [ 708.829670][T12221] aio_iiro_16 [ 708.829678][T12221] comedi: valid board names for aio_aio12_8 driver are: [ 708.830545][T12221] aio_aio12_8 [ 708.830556][T12221] aio_ai12_8 [ 708.830564][T12221] aio_ao12_4 [ 708.830572][T12221] comedi: valid board names for fl512 driver are: [ 708.830582][T12221] fl512 [ 708.830590][T12221] comedi: valid board names for dmm32at driver are: [ 708.830600][T12221] dmm32at [ 708.830608][T12221] comedi: valid board names for dt282x driver are: [ 708.830618][T12221] dt2821 [ 708.830626][T12221] dt2821-f [ 708.830633][T12221] dt2821-g [ 708.830641][T12221] dt2823 [ 708.834208][T12221] dt2824-pgh [ 708.834594][T12221] dt2824-pgl [ 708.834605][T12221] dt2825 [ 708.834612][T12221] dt2827 [ 708.834620][T12221] dt2828 [ 708.834627][T12221] dt2829 [ 708.834635][T12221] dt21-ez [ 708.834642][T12221] dt23-ez [ 708.834649][T12221] dt24-ez [ 708.834657][T12221] dt24-ez-pgl [ 708.834666][T12221] comedi: valid board names for dt2817 driver are: [ 708.834677][T12221] dt2817 [ 708.834685][T12221] comedi: valid board names for dt2815 driver are: [ 708.838541][T12221] dt2815 [ 708.838552][T12221] comedi: valid board names for dt2814 driver are: [ 708.838564][T12221] dt2814 [ 708.838571][T12221] comedi: valid board names for dt2811 driver are: [ 708.838582][T12221] dt2811-pgh [ 708.838589][T12221] dt2811-pgl [ 708.838597][T12221] comedi: valid board names for dt2801 driver are: [ 708.846982][T12221] dt2801 [ 708.846994][T12221] comedi: valid board names for das6402 driver are: [ 708.847004][T12221] das6402-12 [ 708.847013][T12221] das6402-16 [ 708.847020][T12221] comedi: valid board names for das1800 driver are: [ 708.847031][T12221] das-1701st [ 708.847039][T12221] das-1701st-da [ 708.847046][T12221] das-1702st [ 708.847053][T12221] das-1702st-da [ 708.847061][T12221] das-1702hr [ 708.847068][T12221] das-1702hr-da [ 708.847076][T12221] das-1701ao [ 708.848884][T12221] das-1702ao [ 708.848895][T12221] das-1801st [ 708.848904][T12221] das-1801st-da [ 708.848911][T12221] das-1802st [ 708.848919][T12221] das-1802st-da [ 708.848927][T12221] das-1802hr [ 708.848935][T12221] das-1802hr-da [ 708.848942][T12221] das-1801hc [ 708.848950][T12221] das-1802hc [ 708.848957][T12221] das-1801ao [ 708.848964][T12221] das-1802ao [ 708.848973][T12221] comedi: valid board names for das800 driver are: [ 708.850017][T12221] das-800 [ 708.850026][T12221] cio-das800 [ 708.850035][T12221] das-801 [ 708.850043][T12221] cio-das801 [ 708.850051][T12221] das-802 [ 708.850058][T12221] cio-das802 [ 708.850065][T12221] cio-das802/16 [ 708.850073][T12221] comedi: valid board names for isa-das08 driver are: [ 708.850083][T12221] isa-das08 [ 708.850091][T12221] das08-pgm [ 708.850098][T12221] das08-pgh [ 708.850106][T12221] das08-pgl [ 708.850113][T12221] das08-aoh [ 708.851800][T12221] das08-aol [ 708.851811][T12221] das08-aom [ 708.851819][T12221] das08/jr-ao [ 708.851827][T12221] das08jr-16-ao [ 708.851834][T12221] pc104-das08 [ 708.851842][T12221] das08jr/16 [ 708.851850][T12221] comedi: valid board names for das16m1 driver are: [ 708.851861][T12221] das16m1 [ 708.851869][T12221] comedi: valid board names for dac02 driver are: [ 708.851879][T12221] dac02 [ 708.851886][T12221] comedi: valid board names for rti802 driver are: [ 708.851896][T12221] rti802 [ 708.853069][T12221] comedi: valid board names for rti800 driver are: [ 708.853082][T12221] rti800 [ 708.853091][T12221] rti815 [ 708.853098][T12221] comedi: valid board names for pcm3724 driver are: [ 708.853109][T12221] pcm3724 [ 708.853116][T12221] comedi: valid board names for pcl818 driver are: [ 708.853126][T12221] pcl818l [ 708.853134][T12221] pcl818h [ 708.853142][T12221] pcl818hd [ 708.853149][T12221] pcl818hg [ 708.853157][T12221] pcl818 [ 708.853164][T12221] pcl718 [ 708.854368][T12221] pcm3718 [ 708.854379][T12221] comedi: valid board names for pcl816 driver are: [ 708.854390][T12221] pcl816 [ 708.854398][T12221] pcl814b [ 708.854406][T12221] comedi: valid board names for pcl812 driver are: [ 708.854416][T12221] pcl812 [ 708.854423][T12221] pcl812pg [ 708.854430][T12221] acl8112pg [ 708.854438][T12221] acl8112dg [ 708.854445][T12221] acl8112hg [ 708.854452][T12221] a821pgl [ 708.854459][T12221] a821pglnda [ 708.854466][T12221] a821pgh [ 708.855680][T12221] a822pgl [ 708.855693][T12221] a822pgh [ 708.855700][T12221] a823pgl [ 708.855707][T12221] a823pgh [ 708.855715][T12221] pcl813 [ 708.855722][T12221] pcl813b [ 708.855729][T12221] acl8113 [ 708.855736][T12221] iso813 [ 708.855744][T12221] acl8216 [ 708.855751][T12221] a826pg [ 708.855759][T12221] comedi: valid board names for pcl730 driver are: [ 708.855769][T12221] pcl730 [ 708.857290][T12221] iso730 [ 708.857301][T12221] acl7130 [ 708.857308][T12221] pcm3730 [ 708.857315][T12221] pcl725 [ 708.857322][T12221] p8r8dio [ 708.857329][T12221] acl7225b [ 708.857337][T12221] p16r16dio [ 708.857344][T12221] pcl733 [ 708.857352][T12221] pcl734 [ 708.857359][T12221] opmm-1616-xt [ 708.857367][T12221] pearl-mm-p [ 708.857374][T12221] ir104-pbf [ 708.857382][T12221] comedi: valid board names for pcl726 driver are: [ 708.858321][T12221] pcl726 [ 708.858331][T12221] pcl727 [ 708.858339][T12221] pcl728 [ 708.858347][T12221] acl6126 [ 708.858591][T12221] acl6128 [ 708.858601][T12221] comedi: valid board names for pcl724 driver are: [ 708.858611][T12221] pcl724 [ 708.858618][T12221] pcl722 [ 708.858625][T12221] pcl731 [ 708.858632][T12221] acl7122 [ 708.858640][T12221] acl7124 [ 708.858647][T12221] pet48dio [ 708.858654][T12221] pcmio48 [ 708.858661][T12221] onyx-mm-dio [ 708.858668][T12221] comedi: valid board names for pcl711 driver are: [ 708.858678][T12221] pcl711 [ 708.858685][T12221] pcl711b [ 708.859732][T12221] acl8112hg [ 708.859743][T12221] acl8112dg [ 708.859751][T12221] comedi: valid board names for amplc_pc263 driver are: [ 708.859761][T12221] pc263 [ 708.859768][T12221] comedi: valid board names for amplc_pc236 driver are: [ 708.859777][T12221] pc36at [ 708.859785][T12221] comedi: valid board names for amplc_dio200 driver are: [ 708.859795][T12221] pc212e [ 708.859802][T12221] pc214e [ 708.859809][T12221] pc215e [ 708.859816][T12221] pc218e [ 708.859823][T12221] pc272e [ 708.859830][T12221] comedi: valid board names for comedi_parport driver are: [ 708.862580][T12221] comedi_parport [ 708.862593][T12221] comedi: valid board names for comedi_test driver are: [ 708.862604][T12221] comedi_test [ 708.862612][T12221] comedi: valid board names for comedi_bond driver are: [ 708.862623][T12221] comedi_bond [ 709.068885][T12221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.077243][T12221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.531274][ T6004] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 709.681380][ T6004] usb 3-1: Using ep0 maxpacket: 16 [ 709.714444][ T6004] usb 3-1: unable to get BOS descriptor or descriptor too short [ 709.723669][ T6004] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 709.724077][ T6004] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 709.724099][ T6004] usb 3-1: config 13 has no interface number 0 [ 709.724153][ T6004] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 709.724883][ T6004] usb 3-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 709.724914][ T6004] usb 3-1: config 13 interface 50 has no altsetting 0 [ 709.738527][ T6004] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 709.738558][ T6004] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.739774][ T6004] usb 3-1: Product: syz [ 709.739793][ T6004] usb 3-1: Manufacturer: syz [ 709.739807][ T6004] usb 3-1: SerialNumber: syz [ 709.818344][T12233] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 710.111704][ T8041] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 710.138468][ T6004] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 710.138961][ T6004] usb 3-1: MIDIStreaming interface descriptor not found [ 710.141215][ T5926] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 710.147959][ T5885] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 710.241829][ T8041] usb 4-1: USB disconnect, device number 35 [ 710.261839][ T5885] usb 2-1: USB disconnect, device number 61 [ 710.336156][ T5926] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 710.336185][ T5926] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 710.336205][ T5926] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 710.336224][ T5926] usb 5-1: config 220 has no interface number 2 [ 710.336300][ T5926] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 710.336328][ T5926] usb 5-1: config 220 interface 0 has no altsetting 0 [ 710.336346][ T5926] usb 5-1: config 220 interface 76 has no altsetting 0 [ 710.336364][ T5926] usb 5-1: config 220 interface 1 has no altsetting 0 [ 710.342713][ T5926] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 710.342743][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.342765][ T5926] usb 5-1: Product: syz [ 710.342779][ T5926] usb 5-1: Manufacturer: syz [ 710.342794][ T5926] usb 5-1: SerialNumber: syz [ 710.441713][ T31] usb 6-1: selecting invalid altsetting 0 [ 710.467958][ T31] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 710.467993][ T31] uvcvideo 6-1:220.0: No valid video chain found. [ 711.487519][T12248] vivid-001: kernel_thread() failed [ 711.729309][ T31] usb 6-1: selecting invalid altsetting 0 [ 711.729350][ T31] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 711.833849][ T5926] usb 5-1: can't set config #220, error -71 [ 711.841002][ T31] usb 6-1: USB disconnect, device number 42 [ 711.861155][ T5926] usb 5-1: USB disconnect, device number 18 [ 711.959359][T12259] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2048'. [ 711.965120][T12257] overlayfs: conflicting lowerdir path [ 712.118336][ T6004] usb 3-1: USB disconnect, device number 58 [ 712.127054][ T5885] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 712.180840][ T8041] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 712.263426][ T9016] udevd[9016]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 712.271772][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 712.300485][ T5885] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 712.300516][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.300538][ T5885] usb 2-1: Product: syz [ 712.300554][ T5885] usb 2-1: Manufacturer: syz [ 712.300569][ T5885] usb 2-1: SerialNumber: syz [ 712.340839][ T8041] usb 4-1: Using ep0 maxpacket: 8 [ 712.344176][ T5885] usb 2-1: config 0 descriptor?? [ 712.362901][ T8041] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 712.362931][ T8041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.362953][ T8041] usb 4-1: Product: syz [ 712.362967][ T8041] usb 4-1: Manufacturer: syz [ 712.362981][ T8041] usb 4-1: SerialNumber: syz [ 712.405364][ T8041] usb 4-1: config 0 descriptor?? [ 712.521581][ T6004] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 713.000156][ T5804] Bluetooth: hci5: unexpected event for opcode 0x0c22 [ 713.030855][ T6004] usb 3-1: Using ep0 maxpacket: 32 [ 713.031721][ T6004] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 713.036734][ T6004] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 713.036778][ T6004] usb 3-1: can't read configurations, error -61 [ 713.097390][T12268] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2051'. [ 713.160893][ T6004] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 713.311219][ T6004] usb 3-1: Using ep0 maxpacket: 32 [ 713.312561][ T6004] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 713.315441][ T6004] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 713.315478][ T6004] usb 3-1: can't read configurations, error -61 [ 713.315948][ T6004] usb usb3-port1: attempt power cycle [ 713.344541][ T5926] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 713.819422][ T5926] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 713.819452][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.819472][ T5926] usb 5-1: Product: syz [ 713.819487][ T5926] usb 5-1: Manufacturer: syz [ 713.819502][ T5926] usb 5-1: SerialNumber: syz [ 713.828038][ T5926] usb 5-1: config 0 descriptor?? [ 713.935942][ T5885] usb write operation failed. (-71) [ 713.935961][ T5885] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 713.939613][ T5885] usb 2-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 713.939641][ T5885] usb 2-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 714.060880][ T6004] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 714.083659][ T5926] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 714.102147][ T6004] usb 3-1: Using ep0 maxpacket: 32 [ 714.103168][ T6004] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 714.112576][ T5926] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 714.134147][ T6004] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 714.134186][ T6004] usb 3-1: can't read configurations, error -61 [ 714.186481][ T5926] usb 5-1: USB disconnect, device number 19 [ 714.301220][ T5804] Bluetooth: hci5: unexpected event for opcode 0x0c22 [ 714.321774][ T6004] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 714.344177][ T6004] usb 3-1: Using ep0 maxpacket: 32 [ 714.346143][ T6004] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 714.393691][ T6004] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 714.393731][ T6004] usb 3-1: can't read configurations, error -61 [ 714.394194][ T6004] usb usb3-port1: unable to enumerate USB device [ 714.520212][ T8041] usb write operation failed. (-71) [ 714.520242][ T8041] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 714.712050][T12245] syz.1.2044 (12245) used greatest stack depth: 15560 bytes left [ 714.750801][ T5926] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 715.031107][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 716.121433][ T5926] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.121468][ T5926] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.131776][ T5926] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 716.131806][ T5926] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 716.131836][ T5926] usb 6-1: Product: syz [ 716.131851][ T5926] usb 6-1: Manufacturer: syz [ 716.179034][ T5926] hub 6-1:4.0: USB hub found [ 717.687984][T12308] overlayfs: conflicting lowerdir path [ 717.983342][ T5926] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 718.021787][ T5926] usb 6-1: USB disconnect, device number 43 [ 718.335232][ T5807] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 718.482248][ T5807] usb 5-1: Using ep0 maxpacket: 8 [ 718.488427][ T5807] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 718.488458][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.488481][ T5807] usb 5-1: Product: syz [ 718.488497][ T5807] usb 5-1: Manufacturer: syz [ 718.488513][ T5807] usb 5-1: SerialNumber: syz [ 718.614959][ T5807] usb 5-1: config 0 descriptor?? [ 720.340917][ T1570] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 720.481674][ T1570] usb 6-1: device descriptor read/64, error -71 [ 720.569137][T12347] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2076'. [ 720.721122][ T1570] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 720.764588][ T5926] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 720.867174][ T5807] usb write operation failed. (-71) [ 720.867200][ T5807] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 720.883958][ T1570] usb 6-1: device descriptor read/64, error -71 [ 720.910775][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 720.914931][ T5926] usb 3-1: unable to get BOS descriptor or descriptor too short [ 720.916417][ T5926] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 720.916442][ T5926] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 720.916463][ T5926] usb 3-1: config 13 has no interface number 0 [ 720.916511][ T5926] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 720.916539][ T5926] usb 3-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 720.916566][ T5926] usb 3-1: config 13 interface 50 has no altsetting 0 [ 720.929174][ T5926] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 720.929204][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.929225][ T5926] usb 3-1: Product: syz [ 720.929240][ T5926] usb 3-1: Manufacturer: syz [ 720.929256][ T5926] usb 3-1: SerialNumber: syz [ 720.981866][T12345] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 721.009880][ T1570] usb usb6-port1: attempt power cycle [ 721.294399][ T5926] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 721.294467][ T5926] usb 3-1: MIDIStreaming interface descriptor not found [ 721.370928][ T1570] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 721.391787][ T1570] usb 6-1: device descriptor read/8, error -71 [ 721.632922][ T5926] usb 3-1: USB disconnect, device number 63 [ 722.666708][T12366] overlayfs: conflicting lowerdir path [ 723.001727][ T5804] Bluetooth: hci5: unexpected event for opcode 0x0c22 [ 723.790829][ T6004] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 723.941876][ T6004] usb 6-1: Using ep0 maxpacket: 16 [ 724.074686][ T5926] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 724.656009][ T6004] usb 6-1: unable to get BOS descriptor or descriptor too short [ 724.660586][ T6004] usb 6-1: config 3 has an invalid interface number: 182 but max is 0 [ 724.660612][ T6004] usb 6-1: config 3 has no interface number 0 [ 724.660645][ T6004] usb 6-1: config 3 interface 182 has no altsetting 0 [ 724.692485][ T6004] usb 6-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice=70.ec [ 724.692516][ T6004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.692537][ T6004] usb 6-1: Product: syz [ 724.692553][ T6004] usb 6-1: Manufacturer: syz [ 724.692569][ T6004] usb 6-1: SerialNumber: syz [ 724.803090][ T5926] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 724.803118][ T5926] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 724.803139][ T5926] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 724.803371][ T5926] usb 3-1: config 220 has no interface number 2 [ 724.803454][ T5926] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 724.803692][ T5926] usb 3-1: config 220 interface 0 has no altsetting 0 [ 724.803712][ T5926] usb 3-1: config 220 interface 76 has no altsetting 0 [ 724.803731][ T5926] usb 3-1: config 220 interface 1 has no altsetting 0 [ 724.807726][ T5926] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 724.808027][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.808051][ T5926] usb 3-1: Product: syz [ 724.808067][ T5926] usb 3-1: Manufacturer: syz [ 724.808083][ T5926] usb 3-1: SerialNumber: syz [ 724.918895][ T6004] hub 6-1:3.182: bad descriptor, ignoring hub [ 724.918935][ T6004] hub 6-1:3.182: probe with driver hub failed with error -5 [ 724.920003][ T6004] ums-sddr55 6-1:3.182: USB Mass Storage device detected [ 724.947529][ T6004] ums-sddr55 6-1:3.182: Quirks match for vid 07c4 pid a103: 8 [ 725.042193][ T6004] usb 6-1: USB disconnect, device number 48 [ 725.183653][ T5926] usb 3-1: selecting invalid altsetting 0 [ 725.184025][ T5926] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 725.184058][ T5926] uvcvideo 3-1:220.0: No valid video chain found. [ 725.214142][ T5926] usb 3-1: selecting invalid altsetting 0 [ 725.214201][ T5926] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 725.218576][ T5926] usb 3-1: USB disconnect, device number 64 [ 726.817025][T12413] overlayfs: conflicting lowerdir path [ 726.831075][ T5804] Bluetooth: hci5: unexpected event for opcode 0x0c22 [ 728.304885][T12451] overlayfs: conflicting lowerdir path [ 728.519910][ C1] vkms_vblank_simulate: vblank timer overrun [ 729.183140][ C1] vkms_vblank_simulate: vblank timer overrun [ 729.429727][ C1] vkms_vblank_simulate: vblank timer overrun [ 730.341778][ C1] vkms_vblank_simulate: vblank timer overrun [ 730.382578][T12483] overlayfs: conflicting lowerdir path [ 730.420805][T11136] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 730.694095][ C1] vkms_vblank_simulate: vblank timer overrun [ 731.595109][ C1] vkms_vblank_simulate: vblank timer overrun [ 731.620889][T11136] usb 6-1: Using ep0 maxpacket: 16 [ 731.623837][T11136] usb 6-1: unable to get BOS descriptor or descriptor too short [ 731.625500][T11136] usb 6-1: config 13 has an invalid interface number: 50 but max is 0 [ 731.625525][T11136] usb 6-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 731.625546][T11136] usb 6-1: config 13 has no interface number 0 [ 731.625600][T11136] usb 6-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 731.625627][T11136] usb 6-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 731.625655][T11136] usb 6-1: config 13 interface 50 has no altsetting 0 [ 731.628652][T11136] usb 6-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 731.628678][T11136] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.628699][T11136] usb 6-1: Product: syz [ 731.628714][T11136] usb 6-1: Manufacturer: syz [ 731.628729][T11136] usb 6-1: SerialNumber: syz [ 731.759097][T12480] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 732.001002][T12510] 9pnet_fd: Insufficient options for proto=fd [ 732.580266][T11136] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 732.580326][T11136] usb 6-1: MIDIStreaming interface descriptor not found [ 733.016503][ T1570] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 733.136943][T11136] usb 6-1: USB disconnect, device number 49 [ 733.162598][ T1570] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 733.162616][ T1570] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 733.162627][ T1570] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 733.162638][ T1570] usb 3-1: config 220 has no interface number 2 [ 733.162684][ T1570] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 733.162698][ T1570] usb 3-1: config 220 interface 0 has no altsetting 0 [ 733.162747][ T1570] usb 3-1: config 220 interface 76 has no altsetting 0 [ 733.162757][ T1570] usb 3-1: config 220 interface 1 has no altsetting 0 [ 733.164655][ T1570] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 733.164671][ T1570] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.164683][ T1570] usb 3-1: Product: syz [ 733.164691][ T1570] usb 3-1: Manufacturer: syz [ 733.164698][ T1570] usb 3-1: SerialNumber: syz [ 733.231035][T12528] overlayfs: conflicting lowerdir path [ 734.973264][ T1570] usb 3-1: selecting invalid altsetting 0 [ 734.978766][ T1570] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 734.978800][ T1570] uvcvideo 3-1:220.0: No valid video chain found. [ 735.068374][ T1570] usb 3-1: selecting invalid altsetting 0 [ 735.068415][ T1570] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 735.121485][ T1570] usb 3-1: USB disconnect, device number 65 [ 736.239610][T12560] ptrace attach of "./syz-executor exec"[7303] was attempted by ""[12560] [ 736.241453][T12560] batadv_slave_1: entered promiscuous mode [ 736.248086][T12562] ptrace attach of "./syz-executor exec"[7303] was attempted by ""[12562] [ 736.341342][T12558] batadv_slave_1: left promiscuous mode [ 737.344055][ T1570] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 737.990976][ T1570] usb 3-1: Using ep0 maxpacket: 16 [ 738.001289][ T1570] usb 3-1: unable to get BOS descriptor or descriptor too short [ 738.005018][ T1570] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 738.005045][ T1570] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 738.005065][ T1570] usb 3-1: config 13 has no interface number 0 [ 738.005115][ T1570] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 738.005140][ T1570] usb 3-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 738.005168][ T1570] usb 3-1: config 13 interface 50 has no altsetting 0 [ 738.083476][ T1570] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 738.083495][ T1570] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.083507][ T1570] usb 3-1: Product: syz [ 738.083515][ T1570] usb 3-1: Manufacturer: syz [ 738.083523][ T1570] usb 3-1: SerialNumber: syz [ 738.135010][T12569] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 738.296540][T12580] overlayfs: conflicting lowerdir path [ 738.394547][ T1570] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 738.394605][ T1570] usb 3-1: MIDIStreaming interface descriptor not found [ 738.459509][ T1570] usb 3-1: USB disconnect, device number 66 [ 738.577449][T12362] udevd[12362]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 739.432040][T12592] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2721965698 (5443931396 ns) > initial count (791010548 ns). Using initial count to start timer. [ 743.390633][T12621] overlayfs: conflicting lowerdir path [ 744.558709][ T5926] IPVS: starting estimator thread 0... [ 744.641456][T12640] IPVS: using max 7 ests per chain, 16800 per kthread [ 745.445907][ C1] vkms_vblank_simulate: vblank timer overrun [ 745.512589][T12647] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2179'. [ 745.710371][ C1] vkms_vblank_simulate: vblank timer overrun [ 745.941781][T12657] netlink: 'syz.2.2183': attribute type 2 has an invalid length. [ 745.941809][T12657] netlink: 'syz.2.2183': attribute type 9 has an invalid length. [ 745.941828][T12657] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2183'. [ 746.777716][ C1] vkms_vblank_simulate: vblank timer overrun [ 746.983844][ C1] vkms_vblank_simulate: vblank timer overrun [ 747.169556][T12671] FAULT_INJECTION: forcing a failure. [ 747.169556][T12671] name failslab, interval 1, probability 0, space 0, times 0 [ 747.169591][T12671] CPU: 0 UID: 0 PID: 12671 Comm: syz.5.2188 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 747.169614][T12671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 747.169626][T12671] Call Trace: [ 747.169635][T12671] [ 747.169644][T12671] dump_stack_lvl+0x189/0x250 [ 747.169678][T12671] ? __pfx____ratelimit+0x10/0x10 [ 747.169703][T12671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 747.169729][T12671] ? __pfx__printk+0x10/0x10 [ 747.169759][T12671] ? __pfx___might_resched+0x10/0x10 [ 747.169779][T12671] ? fs_reclaim_acquire+0x7d/0x100 [ 747.169808][T12671] should_fail_ex+0x46c/0x600 [ 747.169840][T12671] should_failslab+0xa8/0x100 [ 747.169868][T12671] __kmalloc_noprof+0xcc/0x7d0 [ 747.169892][T12671] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 747.169914][T12671] ? sock_kmalloc+0xd6/0x160 [ 747.169942][T12671] sock_kmalloc+0xd6/0x160 [ 747.169968][T12671] af_alg_alloc_areq+0x8d/0x260 [ 747.169995][T12671] skcipher_recvmsg+0x359/0x11d0 [ 747.170039][T12671] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 747.170075][T12671] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 747.170099][T12671] ? security_socket_recvmsg+0x7e/0x2e0 [ 747.170126][T12671] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 747.170152][T12671] sock_recvmsg+0x22c/0x270 [ 747.170183][T12671] ____sys_recvmsg+0x1ce/0x470 [ 747.170216][T12671] ? __pfx_____sys_recvmsg+0x10/0x10 [ 747.170257][T12671] ? import_iovec+0x74/0xa0 [ 747.170282][T12671] ___sys_recvmsg+0x1b5/0x510 [ 747.170312][T12671] ? __pfx____sys_recvmsg+0x10/0x10 [ 747.170362][T12671] ? __fget_files+0x3a6/0x420 [ 747.170399][T12671] do_recvmmsg+0x30d/0x770 [ 747.170432][T12671] ? __pfx_do_recvmmsg+0x10/0x10 [ 747.170452][T12671] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 747.170478][T12671] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 747.170516][T12671] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 747.170555][T12671] __x64_sys_recvmmsg+0x190/0x240 [ 747.170581][T12671] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 747.170609][T12671] ? do_syscall_64+0xbe/0xfa0 [ 747.170638][T12671] do_syscall_64+0xfa/0xfa0 [ 747.170663][T12671] ? lockdep_hardirqs_on+0x9c/0x150 [ 747.170685][T12671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.170702][T12671] ? clear_bhb_loop+0x60/0xb0 [ 747.170722][T12671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.170740][T12671] RIP: 0033:0x7f33610cf6c9 [ 747.170758][T12671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.170775][T12671] RSP: 002b:00007f335f32e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 747.170795][T12671] RAX: ffffffffffffffda RBX: 00007f3361325fa0 RCX: 00007f33610cf6c9 [ 747.170809][T12671] RDX: 0000000000000001 RSI: 0000200000003900 RDI: 0000000000000004 [ 747.170821][T12671] RBP: 00007f335f32e090 R08: 0000000000000000 R09: 0000000000000000 [ 747.170834][T12671] R10: 0000000000000041 R11: 0000000000000246 R12: 0000000000000001 [ 747.170846][T12671] R13: 00007f3361326038 R14: 00007f3361325fa0 R15: 00007ffda01fd608 [ 747.170877][T12671] [ 747.321032][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.321104][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.509993][T12678] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2191'. [ 748.650925][ C1] vkms_vblank_simulate: vblank timer overrun [ 748.678548][ C1] vkms_vblank_simulate: vblank timer overrun [ 749.496403][ C1] vkms_vblank_simulate: vblank timer overrun [ 749.760840][ C1] vkms_vblank_simulate: vblank timer overrun [ 753.233698][T12727] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2205'. [ 753.718498][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2208'. [ 754.176135][T12743] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2721965698 (5443931396 ns) > initial count (791010548 ns). Using initial count to start timer. [ 756.009326][T12766] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2220'. [ 756.127235][T12773] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2223'. [ 756.407715][T12783] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2721965698 (5443931396 ns) > initial count (791010548 ns). Using initial count to start timer. [ 756.430316][ C1] vkms_vblank_simulate: vblank timer overrun [ 756.893599][ C1] vkms_vblank_simulate: vblank timer overrun [ 757.726609][ C1] vkms_vblank_simulate: vblank timer overrun [ 758.282480][T12806] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2234'. [ 758.860221][T12809] FAULT_INJECTION: forcing a failure. [ 758.860221][T12809] name failslab, interval 1, probability 0, space 0, times 0 [ 758.860280][T12809] CPU: 0 UID: 0 PID: 12809 Comm: syz.5.2236 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 758.860304][T12809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 758.860317][T12809] Call Trace: [ 758.860327][T12809] [ 758.860336][T12809] dump_stack_lvl+0x189/0x250 [ 758.860358][T12809] ? __pfx____ratelimit+0x10/0x10 [ 758.860373][T12809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 758.860389][T12809] ? __pfx__printk+0x10/0x10 [ 758.860405][T12809] ? __pfx___might_resched+0x10/0x10 [ 758.860416][T12809] ? fs_reclaim_acquire+0x7d/0x100 [ 758.860434][T12809] should_fail_ex+0x46c/0x600 [ 758.860452][T12809] should_failslab+0xa8/0x100 [ 758.860469][T12809] __kmalloc_cache_noprof+0x6f/0x6c0 [ 758.860484][T12809] ? alloc_mnt_ns+0xb0/0x310 [ 758.860501][T12809] alloc_mnt_ns+0xb0/0x310 [ 758.860517][T12809] __se_sys_fsmount+0x583/0x880 [ 758.860535][T12809] ? __pfx___se_sys_fsmount+0x10/0x10 [ 758.860556][T12809] do_syscall_64+0xfa/0xfa0 [ 758.860572][T12809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.860582][T12809] ? asm_sysvec_call_function_single+0x1a/0x20 [ 758.860593][T12809] ? clear_bhb_loop+0x60/0xb0 [ 758.860605][T12809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.860616][T12809] RIP: 0033:0x7f33610cf6c9 [ 758.860627][T12809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 758.860636][T12809] RSP: 002b:00007f335f30d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 758.860655][T12809] RAX: ffffffffffffffda RBX: 00007f3361326090 RCX: 00007f33610cf6c9 [ 758.860668][T12809] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 758.860679][T12809] RBP: 00007f335f30d090 R08: 0000000000000000 R09: 0000000000000000 [ 758.860691][T12809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.860699][T12809] R13: 00007f3361326128 R14: 00007f3361326090 R15: 00007ffda01fd608 [ 758.860717][T12809] [ 759.305444][ C1] vkms_vblank_simulate: vblank timer overrun [ 759.799748][ C1] vkms_vblank_simulate: vblank timer overrun [ 760.325065][ C1] vkms_vblank_simulate: vblank timer overrun [ 761.529494][ C1] vkms_vblank_simulate: vblank timer overrun [ 761.560985][ C1] vkms_vblank_simulate: vblank timer overrun [ 761.602436][ C1] vkms_vblank_simulate: vblank timer overrun [ 761.704902][ C1] vkms_vblank_simulate: vblank timer overrun [ 761.808447][T12823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2238'. [ 761.815538][ C1] vkms_vblank_simulate: vblank timer overrun [ 761.899076][ C1] vkms_vblank_simulate: vblank timer overrun [ 762.051931][ C1] vkms_vblank_simulate: vblank timer overrun [ 762.406096][ C1] vkms_vblank_simulate: vblank timer overrun [ 762.942299][T12827] FAULT_INJECTION: forcing a failure. [ 762.942299][T12827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 762.942353][T12827] CPU: 0 UID: 0 PID: 12827 Comm: syz.4.2242 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 762.942377][T12827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 762.942389][T12827] Call Trace: [ 762.942397][T12827] [ 762.942407][T12827] dump_stack_lvl+0x189/0x250 [ 762.942429][T12827] ? __pfx____ratelimit+0x10/0x10 [ 762.942445][T12827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 762.942460][T12827] ? __pfx__printk+0x10/0x10 [ 762.942480][T12827] should_fail_ex+0x46c/0x600 [ 762.942498][T12827] strncpy_from_user+0x36/0x290 [ 762.942511][T12827] ? strncpy_from_user+0x7/0x290 [ 762.942525][T12827] getname_flags+0xf3/0x540 [ 762.942548][T12827] __x64_sys_mkdir+0x5d/0x80 [ 762.942562][T12827] do_syscall_64+0xfa/0xfa0 [ 762.942578][T12827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.942588][T12827] ? asm_sysvec_call_function_single+0x1a/0x20 [ 762.942599][T12827] ? clear_bhb_loop+0x60/0xb0 [ 762.942611][T12827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.942621][T12827] RIP: 0033:0x7f4ecb3cf6c9 [ 762.942632][T12827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.942641][T12827] RSP: 002b:00007f4ec9615038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 762.942653][T12827] RAX: ffffffffffffffda RBX: 00007f4ecb626090 RCX: 00007f4ecb3cf6c9 [ 762.942661][T12827] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000200000000300 [ 762.942669][T12827] RBP: 00007f4ec9615090 R08: 0000000000000000 R09: 0000000000000000 [ 762.942675][T12827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.942682][T12827] R13: 00007f4ecb626128 R14: 00007f4ecb626090 R15: 00007fff2824e048 [ 762.942699][T12827] [ 763.351649][ C1] vkms_vblank_simulate: vblank timer overrun [ 763.393780][ C1] vkms_vblank_simulate: vblank timer overrun [ 763.420794][ C1] vkms_vblank_simulate: vblank timer overrun [ 763.452740][ C1] vkms_vblank_simulate: vblank timer overrun [ 763.776723][ C1] vkms_vblank_simulate: vblank timer overrun [ 764.050059][ C1] vkms_vblank_simulate: vblank timer overrun [ 764.792844][T12838] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2248'. [ 767.157126][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2254'. [ 767.787383][T12873] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2260'. [ 767.899229][T12878] vlan1: entered promiscuous mode [ 767.899463][T12878] vlan1: entered allmulticast mode [ 767.899478][T12878] veth0_vlan: entered allmulticast mode [ 769.546565][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2270'. [ 770.663309][ C0] vkms_vblank_simulate: vblank timer overrun [ 770.751251][ T5972] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 770.921135][ T5972] usb 3-1: Using ep0 maxpacket: 32 [ 771.017988][ T5972] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.018374][ T5972] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.108712][ T5972] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 771.123090][ T5972] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 771.126841][ T5972] usb 3-1: Product: syz [ 771.127809][ T5972] usb 3-1: Manufacturer: syz [ 771.239277][ T5972] hub 3-1:4.0: USB hub found [ 771.350421][ C0] vkms_vblank_simulate: vblank timer overrun [ 772.364507][ C0] vkms_vblank_simulate: vblank timer overrun [ 772.542199][ C0] vkms_vblank_simulate: vblank timer overrun [ 773.091558][ T5972] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 773.185947][ T5972] usb 3-1: USB disconnect, device number 67 [ 773.582534][T12937] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2721965698 (5443931396 ns) > initial count (791010548 ns). Using initial count to start timer. [ 773.650257][T12936] overlayfs: failed to resolve './file0': -2 [ 774.126127][T12945] trusted_key: syz.2.2283 sent an empty control message without MSG_MORE. [ 775.222280][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2286'. [ 778.034016][ T5885] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 778.034138][ T5885] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 778.038384][ T8041] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 778.038511][ T8041] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 778.039996][ T5807] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 778.040105][ T5807] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 778.060077][ T5885] usb 2-1: USB disconnect, device number 62 [ 778.060776][ T8041] usb 4-1: USB disconnect, device number 36 [ 778.062950][ T5807] usb 5-1: USB disconnect, device number 20 [ 778.706239][T12994] FAULT_INJECTION: forcing a failure. [ 778.706239][T12994] name failslab, interval 1, probability 0, space 0, times 0 [ 778.706273][T12994] CPU: 1 UID: 0 PID: 12994 Comm: syz.2.2296 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 778.706296][T12994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 778.706308][T12994] Call Trace: [ 778.706316][T12994] [ 778.706325][T12994] dump_stack_lvl+0x189/0x250 [ 778.706357][T12994] ? __pfx____ratelimit+0x10/0x10 [ 778.706383][T12994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 778.706408][T12994] ? __pfx__printk+0x10/0x10 [ 778.706435][T12994] ? __pfx___might_resched+0x10/0x10 [ 778.706461][T12994] should_fail_ex+0x46c/0x600 [ 778.706489][T12994] ? io_submit_one+0x11f/0x1310 [ 778.706507][T12994] should_failslab+0xa8/0x100 [ 778.706534][T12994] ? io_submit_one+0x11f/0x1310 [ 778.706551][T12994] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 778.706583][T12994] io_submit_one+0x11f/0x1310 [ 778.706617][T12994] ? __pfx_io_submit_one+0x10/0x10 [ 778.706637][T12994] ? __might_fault+0xb0/0x130 [ 778.706676][T12994] ? __might_fault+0xb0/0x130 [ 778.706704][T12994] __se_sys_io_submit+0x185/0x2f0 [ 778.706732][T12994] ? __pfx___se_sys_io_submit+0x10/0x10 [ 778.706765][T12994] ? ksys_write+0x230/0x260 [ 778.706796][T12994] ? do_syscall_64+0xbe/0xfa0 [ 778.706826][T12994] do_syscall_64+0xfa/0xfa0 [ 778.706849][T12994] ? lockdep_hardirqs_on+0x9c/0x150 [ 778.706874][T12994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.706893][T12994] ? clear_bhb_loop+0x60/0xb0 [ 778.706916][T12994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.706935][T12994] RIP: 0033:0x7f35c49ef6c9 [ 778.706953][T12994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.706970][T12994] RSP: 002b:00007f35c2c56038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 778.706990][T12994] RAX: ffffffffffffffda RBX: 00007f35c4c45fa0 RCX: 00007f35c49ef6c9 [ 778.707004][T12994] RDX: 0000200000004540 RSI: 0000000000000001 RDI: 00007f35c5784000 [ 778.707017][T12994] RBP: 00007f35c2c56090 R08: 0000000000000000 R09: 0000000000000000 [ 778.707029][T12994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.707041][T12994] R13: 00007f35c4c46038 R14: 00007f35c4c45fa0 R15: 00007ffc26af65c8 [ 778.707075][T12994] [ 779.052174][ T5885] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 779.181205][ T5885] usb 2-1: device descriptor read/64, error -71 [ 779.429630][ T5885] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 779.591371][ T5885] usb 2-1: device descriptor read/64, error -71 [ 779.701953][ T5885] usb usb2-port1: attempt power cycle [ 780.036476][ C0] vkms_vblank_simulate: vblank timer overrun [ 780.107866][ C0] vkms_vblank_simulate: vblank timer overrun [ 780.472754][ C0] vkms_vblank_simulate: vblank timer overrun [ 780.761560][ C0] vkms_vblank_simulate: vblank timer overrun [ 781.366641][ C0] vkms_vblank_simulate: vblank timer overrun [ 781.834842][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.051051][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.205898][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.271614][ T5885] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 782.513216][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.595635][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.753930][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.859262][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.889838][ T5885] usb 2-1: device not accepting address 65, error -71 [ 783.351521][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.410799][ T5972] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 783.411014][ T5885] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 783.563315][ T5972] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 783.563347][ T5972] usb 5-1: config 0 interface 0 has no altsetting 0 [ 783.566447][ T5972] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 783.566477][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 783.566499][ T5972] usb 5-1: Product: syz [ 783.566514][ T5972] usb 5-1: Manufacturer: syz [ 783.566537][ T5972] usb 5-1: SerialNumber: syz [ 783.665758][ T5885] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 783.665790][ T5885] usb 2-1: config 0 interface 0 has no altsetting 0 [ 783.694355][ T5885] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 783.694386][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 783.694407][ T5885] usb 2-1: Product: syz [ 783.694422][ T5885] usb 2-1: Manufacturer: syz [ 783.694437][ T5885] usb 2-1: SerialNumber: syz [ 783.736284][ T5972] usb 5-1: config 0 descriptor?? [ 783.763042][ T5885] usb 2-1: config 0 descriptor?? [ 783.769392][ T5972] usb 5-1: selecting invalid altsetting 0 [ 783.849321][ T5885] usb 2-1: selecting invalid altsetting 0 [ 783.976001][T13041] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2721965698 (5443931396 ns) > initial count (791010548 ns). Using initial count to start timer. [ 784.382062][ C0] vkms_vblank_simulate: vblank timer overrun [ 785.169819][ C0] vkms_vblank_simulate: vblank timer overrun [ 785.337550][T13067] FAULT_INJECTION: forcing a failure. [ 785.337550][T13067] name failslab, interval 1, probability 0, space 0, times 0 [ 785.337585][T13067] CPU: 0 UID: 0 PID: 13067 Comm: syz.2.2319 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 785.337608][T13067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 785.337621][T13067] Call Trace: [ 785.337633][T13067] [ 785.337642][T13067] dump_stack_lvl+0x189/0x250 [ 785.337676][T13067] ? __pfx____ratelimit+0x10/0x10 [ 785.337701][T13067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 785.337728][T13067] ? __pfx__printk+0x10/0x10 [ 785.337758][T13067] ? __pfx___might_resched+0x10/0x10 [ 785.337778][T13067] ? fs_reclaim_acquire+0x7d/0x100 [ 785.337808][T13067] should_fail_ex+0x46c/0x600 [ 785.337839][T13067] should_failslab+0xa8/0x100 [ 785.337867][T13067] __kmalloc_noprof+0xcc/0x7d0 [ 785.337892][T13067] ? tomoyo_encode+0x28b/0x550 [ 785.337920][T13067] tomoyo_encode+0x28b/0x550 [ 785.337949][T13067] tomoyo_realpath_from_path+0x58d/0x5d0 [ 785.337984][T13067] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 785.338012][T13067] tomoyo_path_number_perm+0x1e8/0x5a0 [ 785.338043][T13067] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 785.338076][T13067] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 785.338103][T13067] ? lockdep_hardirqs_on+0x9c/0x150 [ 785.338159][T13067] ? __fget_files+0x2a/0x420 [ 785.338190][T13067] ? __fget_files+0x3a6/0x420 [ 785.338213][T13067] ? __fget_files+0x2a/0x420 [ 785.338242][T13067] security_file_ioctl+0xcb/0x2d0 [ 785.338265][T13067] __se_sys_ioctl+0x47/0x170 [ 785.338290][T13067] do_syscall_64+0xfa/0xfa0 [ 785.338314][T13067] ? lockdep_hardirqs_on+0x9c/0x150 [ 785.338337][T13067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.338363][T13067] ? clear_bhb_loop+0x60/0xb0 [ 785.338387][T13067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.338406][T13067] RIP: 0033:0x7f35c49ef6c9 [ 785.338423][T13067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.338439][T13067] RSP: 002b:00007f35c2c56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 785.338460][T13067] RAX: ffffffffffffffda RBX: 00007f35c4c45fa0 RCX: 00007f35c49ef6c9 [ 785.338475][T13067] RDX: 0000200000000180 RSI: 0000000080506409 RDI: 0000000000000003 [ 785.338488][T13067] RBP: 00007f35c2c56090 R08: 0000000000000000 R09: 0000000000000000 [ 785.338501][T13067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.338514][T13067] R13: 00007f35c4c46038 R14: 00007f35c4c45fa0 R15: 00007ffc26af65c8 [ 785.338549][T13067] [ 785.339826][T13067] ERROR: Out of memory at tomoyo_realpath_from_path. [ 786.447809][ C0] vkms_vblank_simulate: vblank timer overrun [ 786.523253][ T5885] usb 5-1: USB disconnect, device number 21 [ 786.544233][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2318'. [ 786.807099][T13074] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2322'. [ 787.030167][ T5926] usb 2-1: USB disconnect, device number 66 [ 787.250835][ T5885] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 787.431688][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.431727][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.431770][ T5885] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 787.431796][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.586779][ T5885] usb 3-1: config 0 descriptor?? [ 787.811345][ C0] vkms_vblank_simulate: vblank timer overrun [ 788.134117][ C0] vkms_vblank_simulate: vblank timer overrun [ 788.190992][ C0] vkms_vblank_simulate: vblank timer overrun [ 788.481571][ T5885] stadia 0003:18D1:9400.0007: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.2-1/input0 [ 788.481608][ T5885] stadia 0003:18D1:9400.0007: no inputs found [ 788.481623][ T5885] stadia 0003:18D1:9400.0007: force feedback init failed [ 788.595653][ C0] vkms_vblank_simulate: vblank timer overrun [ 788.705704][T13076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.706536][T13076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.721536][ T6004] usb 3-1: USB disconnect, device number 68 [ 789.078713][T13104] netlink: 'syz.3.2330': attribute type 213 has an invalid length. [ 789.411903][ C0] vkms_vblank_simulate: vblank timer overrun [ 789.430800][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.176518][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.263208][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.314279][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2330'. [ 791.452366][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.800898][ T31] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 791.930771][ T31] usb 2-1: device descriptor read/64, error -71 [ 792.067510][T13119] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2334'. [ 792.134826][ C1] vkms_vblank_simulate: vblank timer overrun [ 792.558618][ C1] vkms_vblank_simulate: vblank timer overrun [ 793.421949][ C1] vkms_vblank_simulate: vblank timer overrun [ 794.678385][ C1] vkms_vblank_simulate: vblank timer overrun [ 795.619023][ C1] vkms_vblank_simulate: vblank timer overrun [ 795.926221][T13169] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2349'. [ 795.983369][T13166] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2721965698 (5443931396 ns) > initial count (791010548 ns). Using initial count to start timer. [ 796.636985][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.848324][ C1] vkms_vblank_simulate: vblank timer overrun [ 797.031930][ C1] vkms_vblank_simulate: vblank timer overrun [ 797.131247][T13168] comedi comedi0: reset error (fatal) [ 797.331690][ C1] vkms_vblank_simulate: vblank timer overrun [ 797.443249][ C1] vkms_vblank_simulate: vblank timer overrun [ 797.735952][ C1] vkms_vblank_simulate: vblank timer overrun [ 798.628881][ C1] vkms_vblank_simulate: vblank timer overrun [ 799.017774][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.122965][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.150876][T13211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2361'. [ 800.239894][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.787790][T13222] FAULT_INJECTION: forcing a failure. [ 800.787790][T13222] name failslab, interval 1, probability 0, space 0, times 0 [ 800.787824][T13222] CPU: 1 UID: 0 PID: 13222 Comm: syz.1.2365 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 800.787847][T13222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 800.787859][T13222] Call Trace: [ 800.787868][T13222] [ 800.787876][T13222] dump_stack_lvl+0x189/0x250 [ 800.787915][T13222] ? __pfx____ratelimit+0x10/0x10 [ 800.787939][T13222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 800.787963][T13222] ? __pfx__printk+0x10/0x10 [ 800.787991][T13222] ? __pfx___might_resched+0x10/0x10 [ 800.788011][T13222] ? fs_reclaim_acquire+0x7d/0x100 [ 800.788041][T13222] should_fail_ex+0x46c/0x600 [ 800.788073][T13222] should_failslab+0xa8/0x100 [ 800.788101][T13222] __kmalloc_noprof+0xcc/0x7d0 [ 800.788125][T13222] ? tomoyo_encode+0x28b/0x550 [ 800.788154][T13222] tomoyo_encode+0x28b/0x550 [ 800.788182][T13222] tomoyo_realpath_from_path+0x58d/0x5d0 [ 800.788217][T13222] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 800.788245][T13222] tomoyo_path_number_perm+0x1e8/0x5a0 [ 800.788275][T13222] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 800.788308][T13222] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 800.788333][T13222] ? lockdep_hardirqs_on+0x9c/0x150 [ 800.788390][T13222] ? __fget_files+0x2a/0x420 [ 800.788421][T13222] ? __fget_files+0x3a6/0x420 [ 800.788445][T13222] ? __fget_files+0x2a/0x420 [ 800.788474][T13222] security_file_ioctl+0xcb/0x2d0 [ 800.788496][T13222] __se_sys_ioctl+0x47/0x170 [ 800.788520][T13222] do_syscall_64+0xfa/0xfa0 [ 800.788544][T13222] ? lockdep_hardirqs_on+0x9c/0x150 [ 800.788568][T13222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.788587][T13222] ? clear_bhb_loop+0x60/0xb0 [ 800.788611][T13222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.788629][T13222] RIP: 0033:0x7f33d39af6c9 [ 800.788647][T13222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.788665][T13222] RSP: 002b:00007f33d1c16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 800.788687][T13222] RAX: ffffffffffffffda RBX: 00007f33d3c05fa0 RCX: 00007f33d39af6c9 [ 800.788702][T13222] RDX: 0000200000000000 RSI: 0000000000004b6a RDI: 0000000000000004 [ 800.788716][T13222] RBP: 00007f33d1c16090 R08: 0000000000000000 R09: 0000000000000000 [ 800.788728][T13222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.788740][T13222] R13: 00007f33d3c06038 R14: 00007f33d3c05fa0 R15: 00007ffda9f707d8 [ 800.788775][T13222] [ 800.788795][T13222] ERROR: Out of memory at tomoyo_realpath_from_path. [ 801.806077][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.018635][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.092257][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.553220][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.637792][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.846625][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.875035][T13246] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2374'. [ 803.863325][T13257] FAULT_INJECTION: forcing a failure. [ 803.863325][T13257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.863376][T13257] CPU: 0 UID: 0 PID: 13257 Comm: syz.2.2379 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 803.863400][T13257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 803.863420][T13257] Call Trace: [ 803.863428][T13257] [ 803.863435][T13257] dump_stack_lvl+0x189/0x250 [ 803.863457][T13257] ? __pfx____ratelimit+0x10/0x10 [ 803.863472][T13257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 803.863488][T13257] ? __pfx__printk+0x10/0x10 [ 803.863508][T13257] should_fail_ex+0x46c/0x600 [ 803.863526][T13257] strncpy_from_user+0x36/0x290 [ 803.863542][T13257] __se_sys_memfd_create+0x244/0x7a0 [ 803.863555][T13257] do_syscall_64+0xfa/0xfa0 [ 803.863571][T13257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.863581][T13257] ? asm_sysvec_call_function_single+0x1a/0x20 [ 803.863592][T13257] ? clear_bhb_loop+0x60/0xb0 [ 803.863604][T13257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.863620][T13257] RIP: 0033:0x7f35c49ef6c9 [ 803.863631][T13257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.863641][T13257] RSP: 002b:00007f35c2c35038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 803.863653][T13257] RAX: ffffffffffffffda RBX: 00007f35c4c46090 RCX: 00007f35c49ef6c9 [ 803.863661][T13257] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000200000000740 [ 803.863668][T13257] RBP: 00007f35c2c35090 R08: 0000000000000000 R09: 0000000000000000 [ 803.863675][T13257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.863681][T13257] R13: 00007f35c4c46128 R14: 00007f35c4c46090 R15: 00007ffc26af65c8 [ 803.863698][T13257] [ 805.750868][ T5885] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 805.842058][ T5804] Bluetooth: hci5: unexpected event for opcode 0x0c22 [ 806.753133][ T5885] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 806.753164][ T5885] usb 2-1: config 0 interface 0 has no altsetting 0 [ 806.756370][ T5885] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 806.756399][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 806.756420][ T5885] usb 2-1: Product: syz [ 806.756436][ T5885] usb 2-1: Manufacturer: syz [ 806.756450][ T5885] usb 2-1: SerialNumber: syz [ 806.826690][ T5885] usb 2-1: config 0 descriptor?? [ 806.874010][ T5885] usb 2-1: selecting invalid altsetting 0 [ 808.206436][ T5926] usb 2-1: USB disconnect, device number 69 [ 808.726147][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.726320][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.194053][T13330] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2406'. [ 811.682126][T13341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 815.174591][T13366] FAULT_INJECTION: forcing a failure. [ 815.174591][T13366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 815.174626][T13366] CPU: 1 UID: 0 PID: 13366 Comm: syz.5.2415 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 815.174649][T13366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 815.174662][T13366] Call Trace: [ 815.174670][T13366] [ 815.174680][T13366] dump_stack_lvl+0x189/0x250 [ 815.174712][T13366] ? __pfx____ratelimit+0x10/0x10 [ 815.174737][T13366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 815.174762][T13366] ? __pfx__printk+0x10/0x10 [ 815.174802][T13366] should_fail_ex+0x46c/0x600 [ 815.174833][T13366] _copy_to_user+0x31/0xb0 [ 815.174857][T13366] simple_read_from_buffer+0xe1/0x170 [ 815.174892][T13366] proc_fail_nth_read+0x1b6/0x220 [ 815.174917][T13366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 815.174942][T13366] ? rw_verify_area+0x2ac/0x4e0 [ 815.174964][T13366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 815.174987][T13366] vfs_read+0x206/0xa30 [ 815.175020][T13366] ? __pfx_vfs_read+0x10/0x10 [ 815.175039][T13366] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 815.175073][T13366] ? mutex_lock_nested+0x154/0x1d0 [ 815.175093][T13366] ? fdget_pos+0x253/0x320 [ 815.175128][T13366] ksys_read+0x14b/0x260 [ 815.175153][T13366] ? __pfx_ksys_read+0x10/0x10 [ 815.175180][T13366] ? do_syscall_64+0xbe/0xfa0 [ 815.175210][T13366] do_syscall_64+0xfa/0xfa0 [ 815.175233][T13366] ? lockdep_hardirqs_on+0x9c/0x150 [ 815.175264][T13366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.175283][T13366] ? clear_bhb_loop+0x60/0xb0 [ 815.175305][T13366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.175324][T13366] RIP: 0033:0x7f33610ce0dc [ 815.175342][T13366] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 815.175360][T13366] RSP: 002b:00007f335f32e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 815.175381][T13366] RAX: ffffffffffffffda RBX: 00007f3361325fa0 RCX: 00007f33610ce0dc [ 815.175396][T13366] RDX: 000000000000000f RSI: 00007f335f32e0a0 RDI: 0000000000000004 [ 815.175409][T13366] RBP: 00007f335f32e090 R08: 0000000000000000 R09: 0000000000000000 [ 815.175422][T13366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.175434][T13366] R13: 00007f3361326038 R14: 00007f3361325fa0 R15: 00007ffda01fd608 [ 815.175469][T13366] [ 815.770775][ T31] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 815.840861][ T5885] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 815.923934][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 815.924550][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 815.925732][ T31] usb 3-1: config 12 has an invalid interface number: 184 but max is 0 [ 815.925757][ T31] usb 3-1: config 12 has no interface number 0 [ 815.925809][ T31] usb 3-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 815.959709][ T31] usb 3-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 815.959739][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.959759][ T31] usb 3-1: Product: syz [ 815.959774][ T31] usb 3-1: Manufacturer: syz [ 815.959788][ T31] usb 3-1: SerialNumber: syz [ 816.003462][ T5885] usb 6-1: Using ep0 maxpacket: 32 [ 816.005713][ T5885] usb 6-1: config 0 has an invalid interface number: 236 but max is 0 [ 816.005738][ T5885] usb 6-1: config 0 has no interface number 0 [ 816.005772][ T5885] usb 6-1: config 0 interface 236 has no altsetting 0 [ 816.010349][ T5885] usb 6-1: New USB device found, idVendor=0c45, idProduct=60c0, bcdDevice=c2.12 [ 816.010378][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.010408][ T5885] usb 6-1: Product: syz [ 816.010424][ T5885] usb 6-1: Manufacturer: syz [ 816.010439][ T5885] usb 6-1: SerialNumber: syz [ 816.082964][ T5885] usb 6-1: config 0 descriptor?? [ 816.262918][ T31] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 816.313140][ T5885] gspca_main: sonixj-2.14.0 probing 0c45:60c0 [ 816.326989][ T5885] gspca_sonixj: reg_w1 err -71 [ 816.327087][ T5885] sonixj 6-1:0.236: probe with driver sonixj failed with error -71 [ 816.541622][T13381] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2423'. [ 816.681644][ T5885] usb 6-1: USB disconnect, device number 50 [ 817.384733][ T31] usb 3-1: USB disconnect, device number 69 [ 818.800302][ T9013] udevd[9013]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 819.870779][ T5972] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 820.831839][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2430'. [ 820.831854][T13398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2430'. [ 820.840721][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2430'. [ 820.840736][T13398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2430'. [ 820.885900][ T5972] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.885937][ T5972] usb 3-1: config 0 interface 0 has no altsetting 0 [ 820.885971][ T5972] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 820.885995][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.894612][ T5972] usb 3-1: config 0 descriptor?? [ 820.933860][ T5972] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 821.935308][T13424] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2435'. [ 822.707422][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 822.707439][ T37] audit: type=1326 audit(1762950408.282:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13421 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d39af6c9 code=0x7ffc0000 [ 822.713915][ T37] audit: type=1326 audit(1762950408.282:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13421 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33d39af6c9 code=0x7ffc0000 [ 822.728115][ T37] audit: type=1326 audit(1762950408.302:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13421 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d39af6c9 code=0x7ffc0000 [ 822.729182][ T37] audit: type=1326 audit(1762950408.302:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13421 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33d39af6c9 code=0x7ffc0000 [ 822.891005][ T37] audit: type=1326 audit(1762950408.462:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13421 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d39af6c9 code=0x7ffc0000 [ 822.891064][ T37] audit: type=1326 audit(1762950408.462:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13421 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d39af6c9 code=0x7ffc0000 [ 822.979304][ T37] audit: type=1326 audit(1762950408.552:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13421 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f33d39af6c9 code=0x7ffc0000 [ 822.989751][ T37] audit: type=1326 audit(1762950408.562:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13421 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d39af6c9 code=0x7ffc0000 [ 822.993700][ T37] audit: type=1326 audit(1762950408.562:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13421 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d39af6c9 code=0x7ffc0000 [ 822.993747][ T37] audit: type=1326 audit(1762950408.572:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13421 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33d39af6c9 code=0x7ffc0000 [ 823.091059][ T5807] usb 3-1: USB disconnect, device number 70 [ 825.003382][ T5926] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 825.492466][ T5807] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 825.798795][ T5926] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 825.798827][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.798849][ T5926] usb 6-1: Product: syz [ 825.798864][ T5926] usb 6-1: Manufacturer: syz [ 825.798879][ T5926] usb 6-1: SerialNumber: syz [ 826.275349][ T5926] usb 6-1: config 0 descriptor?? [ 826.304962][ T5807] usb 2-1: Using ep0 maxpacket: 32 [ 826.307227][ T5807] usb 2-1: config 0 has an invalid interface number: 236 but max is 0 [ 826.307254][ T5807] usb 2-1: config 0 has no interface number 0 [ 826.307327][ T5807] usb 2-1: config 0 interface 236 has no altsetting 0 [ 826.310055][ T5807] usb 2-1: New USB device found, idVendor=0c45, idProduct=60c0, bcdDevice=c2.12 [ 826.310084][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.310104][ T5807] usb 2-1: Product: syz [ 826.310113][ T5807] usb 2-1: Manufacturer: syz [ 826.310121][ T5807] usb 2-1: SerialNumber: syz [ 826.384541][ T5926] usb 6-1: can't set config #0, error -71 [ 826.393162][ T5807] usb 2-1: config 0 descriptor?? [ 826.507060][ T5926] usb 6-1: USB disconnect, device number 51 [ 826.978856][ T5807] gspca_main: sonixj-2.14.0 probing 0c45:60c0 [ 827.006975][ T5807] gspca_sonixj: reg_w1 err -71 [ 827.007076][ T5807] sonixj 2-1:0.236: probe with driver sonixj failed with error -71 [ 827.022941][ T5807] usb 2-1: USB disconnect, device number 70 [ 828.365030][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 828.365049][ T37] audit: type=1326 audit(1762950413.942:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d39af6c9 code=0x7ffc0000 [ 828.365097][ T37] audit: type=1326 audit(1762950413.942:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33d39af6c9 code=0x7ffc0000 [ 828.365139][ T37] audit: type=1326 audit(1762950413.942:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d39af6c9 code=0x7ffc0000 [ 828.365182][ T37] audit: type=1326 audit(1762950413.942:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33d39af6c9 code=0x7ffc0000 [ 828.365231][ T37] audit: type=1326 audit(1762950413.942:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d39af6c9 code=0x7ffc0000 [ 828.365546][ T37] audit: type=1326 audit(1762950413.942:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33d39af6c9 code=0x7ffc0000 [ 828.584438][ T37] audit: type=1326 audit(1762950414.162:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d39af6c9 code=0x7ffc0000 [ 828.584490][ T37] audit: type=1326 audit(1762950414.162:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d39af6c9 code=0x7ffc0000 [ 828.589507][ T37] audit: type=1326 audit(1762950414.162:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33d39af6c9 code=0x7ffc0000 [ 828.590834][ T37] audit: type=1326 audit(1762950414.162:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d39af6c9 code=0x7ffc0000 [ 829.299906][T13480] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2453'. [ 829.780818][ T5807] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 829.936457][ T5807] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.936516][ T5807] usb 2-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 829.936545][ T5807] usb 2-1: config 0 interface 0 has no altsetting 0 [ 829.936581][ T5807] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 829.936606][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.992925][ T5807] usb 2-1: config 0 descriptor?? [ 830.032272][ T5807] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 830.346047][ T5926] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 830.460978][T13501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2459'. [ 831.151972][T13502] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2460'. [ 831.575071][ T5926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.575132][ T5926] usb 3-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 831.575162][ T5926] usb 3-1: config 0 interface 0 has no altsetting 0 [ 831.575199][ T5926] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 831.575225][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.679310][ T5926] usb 3-1: config 0 descriptor?? [ 831.702477][ T5926] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 831.856677][T13503] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 831.858923][T13510] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2461'. [ 831.893286][T13503] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 831.899030][T13503] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 831.916069][T13503] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 831.924639][T13503] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 831.929792][T13503] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 831.942897][T13503] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 831.947513][T13503] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 831.970102][T13503] kvm: requested 65371 ns i8254 timer period limited to 200000 ns [ 831.970940][T13503] kvm: requested 84647 ns i8254 timer period limited to 200000 ns [ 833.011207][ T5926] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 833.204817][ T8041] usb 3-1: USB disconnect, device number 71 [ 833.231081][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 833.303291][ T5926] usb 5-1: unable to get BOS descriptor or descriptor too short [ 833.328944][ T5926] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 833.328976][ T5926] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 833.328997][ T5926] usb 5-1: config 13 has no interface number 0 [ 833.329070][ T5926] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 833.329096][ T5926] usb 5-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 833.329125][ T5926] usb 5-1: config 13 interface 50 has no altsetting 0 [ 833.342929][ T5926] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 833.342960][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.342981][ T5926] usb 5-1: Product: syz [ 833.342996][ T5926] usb 5-1: Manufacturer: syz [ 833.343012][ T5926] usb 5-1: SerialNumber: syz [ 833.416687][ T37] kauditd_printk_skb: 24 callbacks suppressed [ 833.416711][ T37] audit: type=1326 audit(1762950418.992:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13521 comm="syz.5.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33610cf6c9 code=0x7ffc0000 [ 833.416755][ T37] audit: type=1326 audit(1762950418.992:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13521 comm="syz.5.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33610cf6c9 code=0x7ffc0000 [ 833.416796][ T37] audit: type=1326 audit(1762950418.992:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13521 comm="syz.5.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33610cf6c9 code=0x7ffc0000 [ 833.422484][ T37] audit: type=1326 audit(1762950419.002:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13521 comm="syz.5.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33610cf6c9 code=0x7ffc0000 [ 833.422533][ T37] audit: type=1326 audit(1762950419.002:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13521 comm="syz.5.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33610cf6c9 code=0x7ffc0000 [ 833.423819][ T37] audit: type=1326 audit(1762950419.002:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13521 comm="syz.5.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33610cf6c9 code=0x7ffc0000 [ 833.445123][ T37] audit: type=1326 audit(1762950419.022:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13521 comm="syz.5.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33610cf6c9 code=0x7ffc0000 [ 833.451636][ T37] audit: type=1326 audit(1762950419.032:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13521 comm="syz.5.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f33610cf6c9 code=0x7ffc0000 [ 833.460520][ T37] audit: type=1326 audit(1762950419.032:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13521 comm="syz.5.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33610cf6c9 code=0x7ffc0000 [ 833.462860][ T37] audit: type=1326 audit(1762950419.032:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13521 comm="syz.5.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33610cf6c9 code=0x7ffc0000 [ 833.592059][T13530] overlayfs: failed to resolve './file1/file0': -2 [ 833.669575][T13517] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 833.814499][ T8041] usb 2-1: USB disconnect, device number 71 [ 833.956576][ T5926] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 833.956635][ T5926] usb 5-1: MIDIStreaming interface descriptor not found [ 834.090063][ T5926] usb 5-1: USB disconnect, device number 22 [ 834.090078][ C0] vkms_vblank_simulate: vblank timer overrun [ 834.270933][ C0] vkms_vblank_simulate: vblank timer overrun [ 834.441210][ C0] vkms_vblank_simulate: vblank timer overrun [ 834.465606][ C0] vkms_vblank_simulate: vblank timer overrun [ 834.622691][ T9016] udevd[9016]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 834.946013][T13548] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2475'. [ 834.972234][T13547] overlayfs: conflicting lowerdir path [ 835.099968][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.276344][ T6004] kernel write not supported for file bpf-prog (pid: 6004 comm: kworker/1:8) [ 835.621122][T13560] overlayfs: failed to resolve './file1/file0': -2 [ 835.722847][T13566] 9pnet_fd: Insufficient options for proto=fd [ 835.730285][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.223454][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.780886][ T6004] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 836.932266][T13578] 9pnet_fd: Insufficient options for proto=fd [ 836.988294][ T6004] usb 6-1: Using ep0 maxpacket: 8 [ 837.014488][ T6004] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 837.014521][ T6004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.014543][ T6004] usb 6-1: Product: syz [ 837.014558][ T6004] usb 6-1: Manufacturer: syz [ 837.014574][ T6004] usb 6-1: SerialNumber: syz [ 837.044249][ T6004] usb 6-1: config 0 descriptor?? [ 837.141404][T13586] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2490'. [ 839.715333][T13596] FAULT_INJECTION: forcing a failure. [ 839.715333][T13596] name failslab, interval 1, probability 0, space 0, times 0 [ 839.715394][T13596] CPU: 1 UID: 0 PID: 13596 Comm: syz.4.2493 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 839.715419][T13596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 839.715432][T13596] Call Trace: [ 839.715441][T13596] [ 839.715451][T13596] dump_stack_lvl+0x189/0x250 [ 839.715482][T13596] ? __pfx____ratelimit+0x10/0x10 [ 839.715508][T13596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 839.715534][T13596] ? __pfx__printk+0x10/0x10 [ 839.715564][T13596] ? __pfx___might_resched+0x10/0x10 [ 839.715584][T13596] ? fs_reclaim_acquire+0x7d/0x100 [ 839.715615][T13596] should_fail_ex+0x46c/0x600 [ 839.715646][T13596] should_failslab+0xa8/0x100 [ 839.715675][T13596] __kmalloc_noprof+0xcc/0x7d0 [ 839.715699][T13596] ? tomoyo_encode+0x19c/0x550 [ 839.715719][T13596] ? tomoyo_encode+0x28b/0x550 [ 839.715747][T13596] tomoyo_encode+0x28b/0x550 [ 839.715775][T13596] tomoyo_realpath_from_path+0x58d/0x5d0 [ 839.715810][T13596] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 839.715839][T13596] tomoyo_path_number_perm+0x1e8/0x5a0 [ 839.715870][T13596] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 839.715899][T13596] ? __pfx___schedule+0x10/0x10 [ 839.715921][T13596] ? __schedule+0x1709/0x4c20 [ 839.715981][T13596] ? __fget_files+0x2a/0x420 [ 839.716012][T13596] ? __fget_files+0x3a6/0x420 [ 839.716036][T13596] ? __fget_files+0x2a/0x420 [ 839.716065][T13596] security_file_ioctl+0xcb/0x2d0 [ 839.716088][T13596] __se_sys_ioctl+0x47/0x170 [ 839.716113][T13596] do_syscall_64+0xfa/0xfa0 [ 839.716139][T13596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.716158][T13596] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 839.716182][T13596] ? clear_bhb_loop+0x60/0xb0 [ 839.716206][T13596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.716225][T13596] RIP: 0033:0x7f4ecb3cf6c9 [ 839.716243][T13596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 839.716261][T13596] RSP: 002b:00007f4ec95f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 839.716282][T13596] RAX: ffffffffffffffda RBX: 00007f4ecb626180 RCX: 00007f4ecb3cf6c9 [ 839.716298][T13596] RDX: 0000200000000000 RSI: 0000000000005423 RDI: 0000000000000008 [ 839.716312][T13596] RBP: 00007f4ec95f4090 R08: 0000000000000000 R09: 0000000000000000 [ 839.716326][T13596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.716338][T13596] R13: 00007f4ecb626218 R14: 00007f4ecb626180 R15: 00007fff2824e048 [ 839.716373][T13596] [ 839.716494][T13596] ERROR: Out of memory at tomoyo_realpath_from_path. [ 840.560839][ T5885] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 843.212724][ T6004] usb write operation failed. (-71) [ 843.212750][ T6004] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 843.214283][ T6004] usb 6-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 843.214307][ T6004] usb 6-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 844.842411][ T5972] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 845.032570][ T5972] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 845.032625][ T5972] usb 2-1: config 0 interface 0 has no altsetting 0 [ 845.062880][ T5972] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 845.062913][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.062935][ T5972] usb 2-1: Product: syz [ 845.062950][ T5972] usb 2-1: Manufacturer: syz [ 845.062966][ T5972] usb 2-1: SerialNumber: syz [ 845.113396][ T5972] usb 2-1: config 0 descriptor?? [ 845.146294][ T5972] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 845.160386][ T5972] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 845.171221][ T5972] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 845.171262][ T5972] usb 2-1: media controller created [ 845.216034][ T5972] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 845.398711][ T5972] DVB: Unable to find symbol tda10046_attach() [ 845.399365][ T5972] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 845.399382][ T5972] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 845.695931][T13637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.701094][T13637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.062086][ T5926] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 847.812043][T13654] syzkaller1: entered promiscuous mode [ 847.812201][T13654] syzkaller1: entered allmulticast mode [ 848.041223][ T5926] usb 4-1: device descriptor read/64, error -71 [ 849.842258][ T5972] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -110 [ 850.979062][ T5885] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 853.635494][ T5972] =========[ 853.635494][ T5972] ================================================================== [ 853.635521][ T5972] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 853.635549][ T5972] Read of size 8 at addr ffffc9000e385008 by task kworker/0:6/5972 [ 853.635563][ T5972] [ 853.635573][ T5972] CPU: 0 UID: 0 PID: 5972 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 853.635590][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 853.635602][ T5972] Workqueue: usb_hub_wq hub_event [ 853.635621][ T5972] Call Trace: [ 853.635628][ T5972] [ 853.635636][ T5972] dump_stack_lvl+0x189/0x250 [ 853.635661][ T5972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 853.635682][ T5972] ? __pfx__printk+0x10/0x10 [ 853.635699][ T5972] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 853.635722][ T5972] ? __virt_addr_valid+0xdc/0x5c0 [ 853.635743][ T5972] ? __virt_addr_valid+0xdc/0x5c0 [ 853.635765][ T5972] print_report+0xca/0x240 [ 853.635786][ T5972] ? __list_add_valid_or_report+0x4e/0x130 [ 853.635804][ T5972] kasan_report+0x118/0x150 [ 853.635826][ T5972] ? __list_add_valid_or_report+0x4e/0x130 [ 853.635847][ T5972] __list_add_valid_or_report+0x4e/0x130 [ 853.635865][ T5972] kcov_remote_stop+0x52d/0x660 [ 853.635886][ T5972] hub_event+0x45d2/0x4a20 [ 853.635920][ T5972] ? __pfx_hub_event+0x10/0x10 [ 853.635935][ T5972] ? process_scheduled_works+0x9ef/0x17b0 [ 853.635955][ T5972] ? _raw_spin_unlock_irq+0x23/0x50 [ 853.635974][ T5972] ? process_scheduled_works+0x9ef/0x17b0 [ 853.635991][ T5972] ? process_scheduled_works+0x9ef/0x17b0 [ 853.636008][ T5972] process_scheduled_works+0xae1/0x17b0 [ 853.636035][ T5972] ? __pfx_process_scheduled_works+0x10/0x10 [ 853.636059][ T5972] worker_thread+0x8a0/0xda0 [ 853.636085][ T5972] kthread+0x711/0x8a0 [ 853.636106][ T5972] ? __pfx_worker_thread+0x10/0x10 [ 853.636123][ T5972] ? __pfx_kthread+0x10/0x10 [ 853.636142][ T5972] ? rt_spin_unlock+0x150/0x200 [ 853.636160][ T5972] ? rt_spin_unlock+0x161/0x200 [ 853.636176][ T5972] ? __pfx_kthread+0x10/0x10 [ 853.636196][ T5972] ret_from_fork+0x4bc/0x870 [ 853.636216][ T5972] ? __pfx_ret_from_fork+0x10/0x10 [ 853.636239][ T5972] ? __switch_to_asm+0x39/0x70 [ 853.636257][ T5972] ? __switch_to_asm+0x33/0x70 [ 853.636273][ T5972] ? __pfx_kthread+0x10/0x10 [ 853.636296][ T5972] ret_from_fork_asm+0x1a/0x30 [ 853.636320][ T5972] [ 853.636327][ T5972] [ 853.636332][ T5972] The buggy address belongs to a vmalloc virtual mapping [ 853.636348][ T5972] Memory state around the buggy address: [ 853.636365][ T5972] ffffc9000e384f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 853.636376][ T5972] ffffc9000e384f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 853.636388][ T5972] >ffffc9000e385000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 853.636399][ T5972] ^ [ 853.636408][ T5972] ffffc9000e385080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 853.636419][ T5972] ffffc9000e385100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 853.636428][ T5972] ================================================================== [ 853.731958][ T5972] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 853.731972][ T5972] CPU: 0 UID: 0 PID: 5972 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 853.731986][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 853.731995][ T5972] Workqueue: usb_hub_wq hub_event [ 853.732011][ T5972] Call Trace: [ 853.732016][ T5972] [ 853.732021][ T5972] dump_stack_lvl+0x99/0x250 [ 853.732042][ T5972] ? __asan_memcpy+0x40/0x70 [ 853.732054][ T5972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 853.732069][ T5972] ? __pfx__printk+0x10/0x10 [ 853.732084][ T5972] vpanic+0x237/0x6d0 [ 853.732094][ T5972] ? __pfx_vpanic+0x10/0x10 [ 853.732103][ T5972] ? preempt_schedule_common+0x83/0xd0 [ 853.732117][ T5972] ? preempt_schedule+0xae/0xc0 [ 853.732132][ T5972] panic+0xb9/0xc0 [ 853.732141][ T5972] ? __pfx_panic+0x10/0x10 [ 853.732152][ T5972] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 853.732168][ T5972] ? __list_add_valid_or_report+0x4e/0x130 [ 853.732181][ T5972] check_panic_on_warn+0x89/0xb0 [ 853.732191][ T5972] ? __list_add_valid_or_report+0x4e/0x130 [ 853.732204][ T5972] end_report+0x78/0x160 [ 853.732218][ T5972] kasan_report+0x129/0x150 [ 853.732232][ T5972] ? __list_add_valid_or_report+0x4e/0x130 [ 853.732246][ T5972] __list_add_valid_or_report+0x4e/0x130 [ 853.732260][ T5972] kcov_remote_stop+0x52d/0x660 [ 853.732276][ T5972] hub_event+0x45d2/0x4a20 [ 853.732298][ T5972] ? __pfx_hub_event+0x10/0x10 [ 853.732309][ T5972] ? process_scheduled_works+0x9ef/0x17b0 [ 853.732323][ T5972] ? _raw_spin_unlock_irq+0x23/0x50 [ 853.732337][ T5972] ? process_scheduled_works+0x9ef/0x17b0 [ 853.732349][ T5972] ? process_scheduled_works+0x9ef/0x17b0 [ 853.732361][ T5972] process_scheduled_works+0xae1/0x17b0 [ 853.732380][ T5972] ? __pfx_process_scheduled_works+0x10/0x10 [ 853.732396][ T5972] worker_thread+0x8a0/0xda0 [ 853.732414][ T5972] kthread+0x711/0x8a0 [ 853.732430][ T5972] ? __pfx_worker_thread+0x10/0x10 [ 853.732443][ T5972] ? __pfx_kthread+0x10/0x10 [ 853.732456][ T5972] ? rt_spin_unlock+0x150/0x200 [ 853.732469][ T5972] ? rt_spin_unlock+0x161/0x200 [ 853.732479][ T5972] ? __pfx_kthread+0x10/0x10 [ 853.732494][ T5972] ret_from_fork+0x4bc/0x870 [ 853.732513][ T5972] ? __pfx_ret_from_fork+0x10/0x10 [ 853.732526][ T5972] ? __switch_to_asm+0x39/0x70 [ 853.732536][ T5972] ? __switch_to_asm+0x33/0x70 [ 853.732546][ T5972] ? __pfx_kthread+0x10/0x10 [ 853.732560][ T5972] ret_from_fork_asm+0x1a/0x30 [ 853.732574][ T5972] [ 853.732868][ T5972] Kernel Offset: disabled