last executing test programs: 5.879865668s ago: executing program 1 (id=5454): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000012006bab9a3ff3d86e17aa0a056b876c1d00489200000080000000002a5ad6f7007ea60864160af34afe5f5e1be7ff5bdf1931a0e64f88c1976627dc80fd4460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002000)}, 0x40010022) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10182) 5.812606522s ago: executing program 1 (id=5455): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044014}, 0x840) mmap(&(0x7f000072a000/0x1000)=nil, 0x1000, 0x6, 0x13, 0xffffffffffffffff, 0x57787000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000500)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf256a00000008000300", @ANYRES32=r2, @ANYBLOB="0500d200050000000500d200010000000a00060008021100000100000a00060008021100000000000a00060008021100000100000a0006000802110000010000256d2a79477af7fc0ce310095d9540ca2639541f6d325e102e4400"], 0x5c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x12000000) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000004000000a6"]) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000300)=0x21) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="0100"], 0x44}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, 0x0, &(0x7f00000000c0)) pipe2$watch_queue(&(0x7f0000000340), 0x80) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002214e1f6f0d408904bcb0662aed0334475e8332c4c22572a3f7910102030109022400010c06a0090904460e02ff01010409058a02268951b1ca18b1c4e53c545d418b6949da93edfd4121d7009fd44af71f565027f8813417371486"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000900)={'ip6gre0\x00', &(0x7f0000000880)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x8a, 0x5, 0x1, @empty, @empty, 0x8, 0x7800, 0x5, 0x7}}) syz_usb_connect(0x5, 0x34, &(0x7f0000000e80)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb35010203010902220001080540040904ce0109000000000705f71f22890b09050c020002"], 0x0) 4.496403576s ago: executing program 3 (id=5459): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x81, @mcast2, 0xffffffff}, 0x1c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) 4.404527573s ago: executing program 3 (id=5460): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32, @ANYRES32], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 4.297877357s ago: executing program 3 (id=5464): openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) epoll_create(0xff9) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r3, r0, 0x0) epoll_create1(0x80000) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 4.066424397s ago: executing program 3 (id=5466): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013000a000000e3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee5", 0x2e}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) (async) setreuid(0x0, 0xee00) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) r1 = geteuid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) (async) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000040)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000e00)={'veth0_to_team\x00', &(0x7f0000000dc0)=@ethtool_ts_info}) setfsuid(r1) 3.543847714s ago: executing program 0 (id=5470): socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) socket$netlink(0x10, 0x3, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x1c, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x24008000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000004c0)='1', 0x1) sendto$packet(r0, &(0x7f00000000c0)="05000806", 0x4, 0x0, &(0x7f0000000000)={0x11, 0x8100, r2}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800000000fe, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x7fffffff, 0x7, 0x4000000000000e52, 0x7, 0x132069e5, 0x1041, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x0, 0x800040068], 0x2000, 0x40110}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.339753013s ago: executing program 0 (id=5471): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.338862924s ago: executing program 0 (id=5472): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32, @ANYRES32], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 3.25112806s ago: executing program 0 (id=5473): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000012006bab9a3ff3d86e17aa0a056b876c1d00489200000080000000002a5ad6f7007ea60864160af34afe5f5e1be7ff5bdf1931a0e64f88c1976627dc80fd4460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002000)}, 0x40010022) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10182) 3.145507216s ago: executing program 3 (id=5474): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$vga_arbiter(r3, &(0x7f00000001c0)=@other={'trylock', ' ', 'io'}, 0xb) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000800}, 0x0, 0x3f0, 0x2000000, 0xd613, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0xeae1b53287e34a38, 0x3, 0xdd, {0xdd, 0x23, "e72a4a779b47bbc09cc862ae43957631fe9fb0a112a51ed0ab5f18e45560dd472a96c427c7ce283b8e89ce93829ff0e28a0fe0047365a98d52a9b2bbdb864927587c8c4bed485a0772349fd0c51f41a96e73c13a9144d28d95757875217f44793b39321eb7c45e24de0daff21c6b3cd8ea1fb87f9669ce10f0db6b027df946f902495b96aa8d8716e405cc361b05004612d82a93fe20b9b20f52e1b2a545a0c9a7ee1872f8fb424741705bbb16c01f9db7a5a85ce2de28889b60709063dec5028df08c5c13a2a99a695d6d9da8503b71b7ba4ed46bf20030fd6a65"}}, &(0x7f0000000580)=ANY=[@ANYBLOB="000304000000040339047f139b18479c373de956424998645741b511c85c8f83f885160259a4557814b652b894a933fd870616b56f37bbeb0757bdca0153425283a5b42d7fc1c8fe344c2ca1a2bedaa7c7cf508bb6636b6d4629e2008682c25933085b4b9a8e026699c0f86281bfdfdfdad1f3ccb55a0951d9bbe1a6a0409e2f934f2906eea2ad1c02dbbbfe5b4f080db5b72d8638d60d75c9f7bef6d8d6e566714cb01e97e217e63da232fefc6d1334f69b70d7f7471fb4aee5f4a58b53a19d4eac6d9eb7bc28b4c48918121736c76073de6e42979245d07ad4cbd24919c3ec63"], &(0x7f0000000080)={0x0, 0x22, 0x19, {[@main=@item_4={0x3, 0x0, 0x8, "bbcf6a9f"}, @local=@item_012={0x1, 0x2, 0x4, '%'}, @main=@item_4={0x3, 0x0, 0xb, "c3597024"}, @global=@item_4={0x3, 0x1, 0x5, "e27835a2"}, @main=@item_4={0x3, 0x0, 0x9, "119fba5b"}, @global=@item_012={0x2, 0x1, 0x9, "d04f"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff, 0xfd, 0x1, {0x22, 0xbe0}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000280)={0x20, 0x15, 0x5d, "035a48a8d2eb66c574bc93ae47a92339756aa94b9cbcf5f82eabe331b30ef6646de6319767bb2a5cdb73d0d5c2f674c6702e85c82f89215c8962c585ff0f810d967184c6f7653b4badba4a21f738140a82332efd9f158250eb94fe3f49"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000440)={0x20, 0x1, 0xb2, "532888a7e531d236cd029e353906958405c912390511ef04e474de82dbf2964aa3d9de93bf1ba1215ce99727ab8fc5ed9b598ecaa83bed7ba9b1d9bb9a4ba29f3947ed180087dddcf42f4c405c5d85477206a06ebfc0923bce753da238d5905ec5c3f985e4b58923dc2cb47de88a40aaf9d4945ddc76230bccfd004db082e5dd7bf7f6d4cfb9d8edd77ac209b2a5930feb2abda93af6a8d6327f281638b53031f7ab8e10ae4172f34a86ad8035585c10f5ed"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x9}}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0x7b9, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000740)={0x1be, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)}) 3.144095528s ago: executing program 0 (id=5475): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000280)={0x9, {0x9, 0x8, 0x6, 0x29, 0x1388, 0x4}}) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000080)={0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0xffffffffffffff3c, {0x5, 0x28, 0xe4d, 0x1, 0x7ff, 0x3861, 0x2, 0xa, 0x44, 0x11, 0x200, 0x2}}, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f029}) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) read$char_usb(r4, &(0x7f00000001c0)=""/170, 0xaa) syz_usb_control_io(r0, 0x0, 0x0) 2.680287433s ago: executing program 1 (id=5476): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) (fail_nth: 2) 2.493308786s ago: executing program 1 (id=5477): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(0x0, 0xf01c, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x10080, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.198346169s ago: executing program 2 (id=5479): socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) socket$netlink(0x10, 0x3, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x1c, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x24008000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000004c0)='1', 0x1) sendto$packet(r0, &(0x7f00000000c0)="05000806", 0x4, 0x0, &(0x7f0000000000)={0x11, 0x8100, r2}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800000000fe, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x7fffffff, 0x7, 0x4000000000000e52, 0x7, 0x132069e5, 0x1041, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x0, 0x800040068], 0x2000, 0x40110}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.075205622s ago: executing program 1 (id=5480): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) r1 = socket(0x10, 0x803, 0x6) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40012160, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) fchmod(r3, 0x20049549e2a2d659) write$FUSE_GETXATTR(r3, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x0, {0x7}}, 0x28) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000840)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={0x0, @phonet={0x23, 0x0, 0x7, 0x2}, @generic={0x2b, "0c85a847b3d0ca09961226c7fbfd"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x4, 0x2}}, 0x8, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)='veth1_to_batadv\x00', 0xa, 0x400, 0x8001}) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x3, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x6000000000000000) r5 = syz_open_procfs(r0, &(0x7f0000000140)='net/icmp6\x00') preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$l2tp6(r5, &(0x7f0000000240)={0xa, 0x0, 0x10, @private2, 0xff, 0x4}, 0x20) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x21, 0x80, 0x33, 0x20, 0x50d, 0x1004, 0x840f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x1, 0xf0, 0x8, [{{0x9, 0x4, 0xa8, 0x8, 0x0, 0xda, 0xf1, 0xdd, 0x4c}}]}}]}}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f4000000000000"]) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f0000000180)=""/184) openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x16) epoll_create1(0x0) socket(0x1e, 0x805, 0x0) 1.869125782s ago: executing program 2 (id=5481): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @local}, 0x1c) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) mmap(&(0x7f000024e000/0x1000)=nil, 0x1000, 0x2000005, 0x28011, r3, 0x77aa000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363168a2559f334d436138406b699de69db13fd737428808940bcd0940dc930c81aaad8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be60c4fe6987ebfdb041df6bbc2d10b61eb755df569c9cb7c4951ddb54505f67244cd16e376fbbdebc994d22a474b7bc494cafcac137748c8ebff7807053222d67c3ee79861e8cf4ff092236fccfbe08dcb5d7c2ba08b25883740695452a401800e631b0309b9a6963cc00e9e52df03723ce3", 0xcf}, {&(0x7f0000000f80)="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", 0x20b}], 0x2}, 0x0) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r5) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x218000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.40122771s ago: executing program 2 (id=5482): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32, @ANYRES32], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 1.326746273s ago: executing program 2 (id=5483): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x10008, &(0x7f0000000300)={[{@nr_inodes={'nr_inodes', 0x3d, [0x4b]}}]}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) read$FUSE(r4, &(0x7f00000045c0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r7, 0x1, 0x1) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) ptrace(0x10, r3) ptrace$setregs(0xf, r3, 0xba, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = syz_open_dev$dri(&(0x7f0000000380), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r9, 0xc018643a, &(0x7f0000000040)={0x40000000}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000005d78db6758d52b8e5564d04a17b680b9daab0995ba37af661e8025730417de9a90c7eb49fc5e3664391948771ef291db8484399a38572781e3f9858387d4f99874cd20191625c071565a5843af4d1fcb7c1aab3cb6c04971e2b81d5bedd20ffb382aa8c5affe58a5782379fb98f34ce9293d25983b245101243a78bbe6a51477e39906fcf7c51ca0f68e47d8a5ef50740fe6d9be19643480dcb72bbda6aacb09fa520b574c32c43b929246e6db62a846cefcd485375b1a821ac75bf652141a298082958b71aacc9a6f3040073243e59ea2", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c9d4152", @ANYRES16=r1, @ANYBLOB="050000000000040000000f00000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x1d4}}, 0x0) 1.168392424s ago: executing program 2 (id=5484): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000012006bab9a3ff3d86e17aa0a056b876c1d00489200000080000000002a5ad6f7007ea60864160af34afe5f5e1be7ff5bdf1931a0e64f88c1976627dc80fd4460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f00000009c0)=""/185, 0xb9}, {&(0x7f0000000a80)=""/92, 0x5c}, {&(0x7f0000000480)=""/199, 0xc7}, {&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000100)=""/146, 0x92}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000240)=""/81, 0x51}], 0x8}, 0x40010022) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10182) 1.162731451s ago: executing program 2 (id=5485): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="de212206000000010006010003000000002a90a0753883c83e25031bdde840503a0c6893292441290fd2baef95cee6fa6c91b2aec69daf4a59b0d9a1ea0b2e105726c0cd091f5c4d9464bc548e3a6127e2cb27"], 0x0}, 0x0) 982.289061ms ago: executing program 1 (id=5486): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r2 = memfd_secret(0x80000) fcntl$lock(r2, 0x5, &(0x7f0000000d00)={0x2, 0x0, 0x200, 0x4}) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r6, &(0x7f0000005e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r6, &(0x7f0000005340)={0x78, 0x0, r7, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r8, r9, 0xb, 0x8, 0x1000000}}}, 0x78) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xffffffffffffffda, 0xfffffffffffffffd, {0xfffffffffffffffb, 0x3, 0xfe, 0x0, 0x100, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x4, 0x0, 0x7, 0xfffffffe, 0x3, 0x6000, 0x4, 0x0, r9, 0x20000902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101401, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x40100, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r10], 0x0) 70.148562ms ago: executing program 3 (id=5487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x81, @mcast2, 0xffffffff}, 0x1c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) 0s ago: executing program 0 (id=5488): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x45bcd9837daf8e4f, 0x0, 0x0) r1 = inotify_init() r2 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001e40)=0x0) fstat(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001f00)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001f40)='./file0\x00', &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0x0}}, './file0\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f0000001b80)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)=[{&(0x7f0000002180)={0x12e8, 0x1a, 0x8, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x9e, 0x10, 0x0, 0x0, @binary="b4f90c442cd85ab8b06c36ea08ab4dfc6525ccc913e498f36c56e3fc68e09227a93c454f09b8a5b5478aacf833b0441b08aa0780796c9cb8ccf3b03c115a8d14c102da6bb25e1d2372ae99fa624978fa7e4323c1ef4107b84b247f074f52c30a16542241267a860f404a25ff6fb53cec57f8ef127aa11c7ac855d6ecb83fe8244a2642daf398c3c9b7936e786a54288d3044f778d3018bdf2245"}, @nested={0x20, 0x10f, 0x0, 0x1, [@typed={0x8, 0xb2, 0x0, 0x0, @ipv4=@local}, @typed={0x14, 0x115, 0x0, 0x0, @ipv6=@mcast2}]}, @generic, @nested={0xb7, 0x68, 0x0, 0x1, [@generic="48299a995d9d90e13072d562dd6955ba7289c855dd27402d4410462fd6def18e260493cfe0ba0dcaf76d9d4127fa75f44008840555494de5d34236004f402858e1b28352978600bc6a269e111eeb837c87a904339f8d37d56926d84265f145f144850245fe90f1874d9c5f33a3a17572a5a589a40ad473c4f1e6dea6e4e1e7f77b667df58c335f2f6f6d18b48f910ee62e5778c945e8e99aa41577b1e2c0e1ab483f4f36986cf6d61b5686a63959317c1267e4"]}, @typed={0x1004, 0x10f, 0x0, 0x0, @binary="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"}, @generic="a4798f6701c2b94ec7e5f33b66b3fe84", @generic="2f179346035ccaf74f59a1ccdb5ef141c5aaa2038c15e8cdc15e798eed23d795b67cb26c4b0cd55b144749388e173007d348899e39b959b88dd7c3d44dcbf6f3962a53c3e64b845119", @generic="1b50dd4ec50266559b02e16031645c1c968a1742f90c74f18b3a535a29bcce3d851bed1d9d5de77c3fd5821f9c9ac0111aea3882e9ca887dee6bf938ae25cd27f4ca239c3997a4695634d526853e173e3ebd9928847278be6615beb7b7b18b6ba1d220722c6cce8eec6d30ba0233d6eebc0f02ddf98c18b8827674fea7ef0103d5ab4bfd8ce5149df2673c95afd5b31d3dc44ad07d31d8c673f59b085c2459983410996230e55f07bdd8d3cee6683297a92bd3ea1519914203dc5dd074c96f5c383020a90091c3277e7353c8e51cad0c94d605b3bca41f5f5346be0db19e6466b42f26136b74450332703f8ca935f74b95f326e8dcec", @typed={0xc, 0x25, 0x0, 0x0, @u64=0x1ff}]}, 0x12e8}, {&(0x7f0000001a80)={0xf0, 0x21, 0x800, 0x70bd2a, 0x25dfdbff, "", [@nested={0xc, 0x61, 0x0, 0x1, [@typed={0x8, 0xb3, 0x0, 0x0, @u32=0x2283}]}, @generic="7f5d50b366aaacede176dcee8bc0504c17f325e1877b1d6fc3045842bea473bea7ed2fb7cf065263632e6ea8383312659a0c40477389be409e70bff94950f4042b743861c5a09b0ac8e4c8dede0116b299a6d16f5ef4ffa1f5fb729a41cf1007021a9fb941c47011e3aeef229e95ea5e0b8afd67e0f7364b92bea77690f6b50bffa10857706f8e5f5954e88754c0552020cf4be41624018785b2ddb002def5b2ee16c8e7777ba57893c2984176cf143287747ffb91e09db5562082dd07f00e828dea9ea5e5771b6681b26d502273525f8628e88f"]}, 0xf0}], 0x2, &(0x7f0000002040)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0xd0, 0x20000000}, 0x840) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x4e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c, 0x1, 0x1, 0xb, 0xa0, 0x40, [{{0x9, 0x4, 0x0, 0xf, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x6, 0x24, 0x6, 0x0, 0x0, "81"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x5, 0x9, 0x80}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x9, 0xad}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xe, 0x8, 0x7d}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x2, 0x7, 0x4, 0x20, 0x2}, 0xab, &(0x7f0000000100)={0x5, 0xf, 0xab, 0x5, [@generic={0x14, 0x10, 0xb, "69afb2f3e9cba134782f40a671e2ec3656"}, @generic={0x68, 0x10, 0x4, "eb13cb9cd38a6948527d643c2b72e399e8da277597310cccc5e5a29fa69c2d0e166fcea8c94530b6ab47835f43c7d1d6c71828c67d915e8058273777eb592c38903491c919b1672d57588e20ba7445943f44ab92cfaf9d0510132ca6241eb7ebbaff306555"}, @ssp_cap={0x1c, 0x10, 0xa, 0x80, 0x4, 0xd, 0xf00f, 0x1, [0xff000f, 0x30, 0x30, 0x0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x9, 0x7, 0x9}, @ptm_cap={0x3}]}, 0x6, [{0xde, &(0x7f00000001c0)=@string={0xde, 0x3, "ca0e42940b30514620b68685834a509855d4d8346901bfb46d7186375f55a969a9a9906edd4e57469657d07abd862c4ddadf90c8d40ce40d008fb93b58110af42bd8d60aa52b64631c13e32a0786963c5531506a139e98d901a3b4b675142ce4caaf14b827e7f595cae9c30649a027434066b366cff7a8a517dd56f8a7fa9ec2d7465c8a2af9c42031168b5930385ad2d21b4303d194a9d0025748ad3e8588f268ac885b44020035e5bb7ad37d3fd56572225e6bb0ea0c58209944a4f27a74920794ebc040e5faa144d33a3b8f0738e42000ae57529f19e0973703ba"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x820}}, {0x12, &(0x7f0000000300)=@string={0x12, 0x3, "0d3742a7adda406c302d8cff9e260027"}}, {0x56, &(0x7f0000000340)=@string={0x56, 0x3, "e621e35682b3066e8e4b4730c9f46d56c8c5f29bcd4b7e1040cd94584ca46c6c29c86a158958cab03ee86982a6c18b3776ee87eb1da82217314fa8ff8ecfd8265c3d0a18b4a56c5051806a56997b7c8869b6a2b6"}}, {0xdb, &(0x7f0000000440)=@string={0xdb, 0x3, "80c9daf41c02e956a33928343fd2f34ccc761ae3e4dc354238eeb8ece15c27968bba3926b1da52964612d49a1f39c1a138a75b9801a8f82d2029df68492848c0801be632fbab3ae112236e9e6eeecd6c1ae626343f83bb90d86d621ade43b96811c7e6d8846216008c5545341beca49b669654db80dd0b75c9418dbace117c1ec03d21d9bcbf9468c7986d75e91a5fbf80f7726fb7f177006462b4876f56c7e86221db3add67c664c5fb6b6193e20b8d7d4874eb026bda558709d1de70fcc18b4a4a9625b73aac0e7cb8178c327bceff56a5b614245075d241"}}, {0xf0, &(0x7f0000000680)=@string={0xf0, 0x3, "f03ac9f44c04818eab1e6aae8e83ed82f5b60487347d23373bd13cda72cdd1f4ff05da45de734587f185dd5a6cc456cdc4f766c6ea907aa18533a63b8ffd0c733bf40b80e48b691b3c8beba197627c503a76edd15091f62b98d9c393edb42be80ece8546a7ea523c000a371454b83f53ce7425e337fa1625b3c1774f799fefd8026c04f3e7cae8f5f9d0bcbc38112e966ba15ea691cf9c8aabb727cf96ace881bc9b440cad3132788505148b19d316593c75e3e16f386415efcdc29a6a88b9ececf46950f9c9b76430fd8856ca6110cb9ac9e9980697b5b1e5063a2b6d8ebffe92f69ad5680e2fa65d54ca191165"}}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000540)={0x20, 0x16, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): [T19273] ? __lock_acquire+0xab9/0xd20 [ 810.064037][T19273] ? __pfx_seq_read+0x10/0x10 [ 810.064073][T19273] vfs_read+0x200/0xa30 [ 810.064106][T19273] ? fdget_pos+0x247/0x320 [ 810.064138][T19273] ? __pfx___mutex_lock+0x10/0x10 [ 810.064169][T19273] ? __pfx_vfs_read+0x10/0x10 [ 810.064205][T19273] ? __fget_files+0x2a/0x420 [ 810.064240][T19273] ? __fget_files+0x3a0/0x420 [ 810.064266][T19273] ? __fget_files+0x2a/0x420 [ 810.064304][T19273] ksys_read+0x145/0x250 [ 810.064341][T19273] ? __pfx_ksys_read+0x10/0x10 [ 810.064379][T19273] ? do_syscall_64+0xbe/0xfa0 [ 810.064412][T19273] do_syscall_64+0xfa/0xfa0 [ 810.064441][T19273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.064465][T19273] ? clear_bhb_loop+0x60/0xb0 [ 810.064493][T19273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.064516][T19273] RIP: 0033:0x7fb5c4f8f749 [ 810.064538][T19273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.064558][T19273] RSP: 002b:00007fb5c5df3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 810.064583][T19273] RAX: ffffffffffffffda RBX: 00007fb5c51e5fa0 RCX: 00007fb5c4f8f749 [ 810.064601][T19273] RDX: 0000000000002020 RSI: 00002000000021c0 RDI: 0000000000000004 [ 810.064615][T19273] RBP: 00007fb5c5df3090 R08: 0000000000000000 R09: 0000000000000000 [ 810.064631][T19273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.064646][T19273] R13: 00007fb5c51e6038 R14: 00007fb5c51e5fa0 R15: 00007ffcbc98d5f8 [ 810.064685][T19273] [ 810.104325][ T5879] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 810.111127][ T5821] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 810.313604][ T5879] usb 3-1: device descriptor read/64, error -71 [ 810.316776][ T5821] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 810.372128][T15987] usbhid 1-1:0.0: can't add hid device: -71 [ 810.378637][T15987] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 810.390745][T15987] usb 1-1: USB disconnect, device number 78 [ 810.403118][ T5821] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 810.413879][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.443914][ T5879] usb usb3-port1: attempt power cycle [ 810.636477][ T5821] usb 4-1: GET_CAPABILITIES returned 0 [ 810.643813][ T5821] usbtmc 4-1:16.0: can't read capabilities [ 810.693598][T19281] loop6: detected capacity change from 0 to 2640 [ 810.702159][T19281] ldm_validate_partition_table(): Disk read failed. [ 810.712360][T19281] Dev loop6: unable to read RDB block 0 [ 810.718518][T19281] loop6: unable to read partition table [ 810.724655][T19281] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 810.759889][ T10] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 810.799900][ T5879] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 810.823774][ T5879] usb 3-1: device descriptor read/8, error -71 [ 810.922119][ T10] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 810.930414][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.941477][ T10] usb 2-1: config 0 has no interface number 0 [ 810.947821][ T10] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 810.962881][ T10] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 810.978366][ T10] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 810.988079][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.996236][ T10] usb 2-1: Product: syz [ 811.000778][ T10] usb 2-1: Manufacturer: syz [ 811.005430][ T10] usb 2-1: SerialNumber: syz [ 811.013318][ T10] usb 2-1: config 0 descriptor?? [ 811.019236][T19279] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 811.042766][ T10] vmk80xx 2-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 811.063703][ T10] vmk80xx 2-1:0.6: probe with driver vmk80xx failed with error -22 [ 811.090380][ T5879] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 811.120983][ T5879] usb 3-1: device descriptor read/8, error -71 [ 811.231515][ T5821] usb 2-1: USB disconnect, device number 99 [ 811.232501][ T5879] usb usb3-port1: unable to enumerate USB device [ 811.963733][T19294] loop7: detected capacity change from 0 to 7 [ 811.974613][ C0] blk_print_req_error: 11 callbacks suppressed [ 811.974630][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 812.000909][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 812.010499][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 812.020021][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 812.032946][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 812.043115][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 812.052927][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 812.062575][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 812.071927][T18060] ldm_validate_partition_table(): Disk read failed. [ 812.078988][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 812.088701][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 812.099127][ T5879] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 812.109550][T18060] Dev loop7: unable to read RDB block 0 [ 812.116288][T18060] loop7: unable to read partition table [ 812.123384][T18060] loop7: partition table beyond EOD, truncated [ 812.134951][T19294] ldm_validate_partition_table(): Disk read failed. [ 812.143307][T19294] Dev loop7: unable to read RDB block 0 [ 812.149606][T19294] loop7: unable to read partition table [ 812.155994][T19294] loop7: partition table beyond EOD, truncated [ 812.162591][T19294] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 812.279316][T19297] loop7: detected capacity change from 0 to 7 [ 812.287554][ T5879] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 255, using maximum allowed: 30 [ 812.293759][T18060] ldm_validate_partition_table(): Disk read failed. [ 812.302613][ T5879] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.318044][T18060] Dev loop7: unable to read RDB block 0 [ 812.325283][T18060] loop7: unable to read partition table [ 812.338543][T18060] loop7: partition table beyond EOD, truncated [ 812.345212][ T5879] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 812.362261][T19297] ldm_validate_partition_table(): Disk read failed. [ 812.373044][T19297] Dev loop7: unable to read RDB block 0 [ 812.380836][T19297] loop7: unable to read partition table [ 812.383009][ T5879] usb 2-1: config 0 interface 0 has no altsetting 0 [ 812.387424][T19297] loop7: partition table beyond EOD, truncated [ 812.394340][ T5879] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 812.404331][T19297] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 812.416772][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.482436][ T5879] usb 2-1: config 0 descriptor?? [ 812.524552][T19300] kernel read not supported for file /file1 (pid: 19300 comm: syz.2.5272) [ 812.533864][ T30] audit: type=1800 audit(1763652759.678:28): pid=19300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5272" name="file1" dev="mqueue" ino=83875 res=0 errno=0 [ 812.608744][ T5925] usb 4-1: USB disconnect, device number 18 [ 812.784063][T19308] loop7: detected capacity change from 0 to 7 [ 812.812265][T19308] ldm_validate_partition_table(): Disk read failed. [ 812.829558][T19308] Dev loop7: unable to read RDB block 0 [ 812.839917][T19308] loop7: unable to read partition table [ 812.845866][T19308] loop7: partition table beyond EOD, truncated [ 812.864144][T19310] FAULT_INJECTION: forcing a failure. [ 812.864144][T19310] name failslab, interval 1, probability 0, space 0, times 0 [ 812.914615][T19308] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 812.936579][T19292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.957719][T19292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.973194][T19310] CPU: 1 UID: 0 PID: 19310 Comm: syz.3.5274 Not tainted syzkaller #0 PREEMPT(full) [ 812.973225][T19310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 812.973239][T19310] Call Trace: [ 812.973249][T19310] [ 812.973259][T19310] dump_stack_lvl+0x189/0x250 [ 812.973291][T19310] ? __pfx____ratelimit+0x10/0x10 [ 812.973314][T19310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 812.973340][T19310] ? __pfx__printk+0x10/0x10 [ 812.973370][T19310] ? __pfx___might_resched+0x10/0x10 [ 812.973400][T19310] should_fail_ex+0x414/0x560 [ 812.973432][T19310] should_failslab+0xa8/0x100 [ 812.973458][T19310] kmem_cache_alloc_noprof+0x88/0x700 [ 812.973490][T19310] ? io_submit_one+0x11f/0x1430 [ 812.973525][T19310] io_submit_one+0x11f/0x1430 [ 812.973560][T19310] ? __lock_acquire+0xab9/0xd20 [ 812.973591][T19310] ? __pfx_io_submit_one+0x10/0x10 [ 812.973622][T19310] ? __might_fault+0xb0/0x130 [ 812.973665][T19310] ? __might_fault+0xb0/0x130 [ 812.973709][T19310] __se_sys_io_submit+0x185/0x320 [ 812.973739][T19310] ? __pfx___se_sys_io_submit+0x10/0x10 [ 812.973764][T19310] ? ksys_write+0x22a/0x250 [ 812.973817][T19310] ? do_syscall_64+0xbe/0xfa0 [ 812.973847][T19310] do_syscall_64+0xfa/0xfa0 [ 812.973872][T19310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.973893][T19310] ? clear_bhb_loop+0x60/0xb0 [ 812.973919][T19310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.973938][T19310] RIP: 0033:0x7fc32758f749 [ 812.973958][T19310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.973977][T19310] RSP: 002b:00007fc328415038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 812.973999][T19310] RAX: ffffffffffffffda RBX: 00007fc3277e6090 RCX: 00007fc32758f749 [ 812.974014][T19310] RDX: 0000200000001640 RSI: 0000000000000016 RDI: 00007fc3283f4000 [ 812.974029][T19310] RBP: 00007fc328415090 R08: 0000000000000000 R09: 0000000000000000 [ 812.974042][T19310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.974055][T19310] R13: 00007fc3277e6128 R14: 00007fc3277e6090 R15: 00007ffd4546aa08 [ 812.974089][T19310] [ 813.349859][T14451] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 813.447808][ T5879] uclogic 0003:28BD:0071.006C: interface is invalid, ignoring [ 813.499966][T14451] usb 1-1: Using ep0 maxpacket: 8 [ 813.507329][T14451] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 813.517417][T14451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.538325][T14451] pvrusb2: Hardware description: Terratec Grabster AV400 [ 813.545981][T14451] pvrusb2: ********** [ 813.550215][T14451] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 813.560584][T14451] pvrusb2: Important functionality might not be entirely working. [ 813.568533][T14451] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 813.580152][T14451] pvrusb2: ********** [ 813.632062][ T5879] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 813.715073][ T10] usb 2-1: USB disconnect, device number 100 [ 813.739316][ T2344] pvrusb2: Invalid write control endpoint [ 813.802442][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 813.811245][ T2344] pvrusb2: Invalid write control endpoint [ 813.818768][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 813.830884][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 813.844274][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 813.855148][ T2344] pvrusb2: Device being rendered inoperable [ 813.861623][ T5879] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 813.872116][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 813.879527][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 813.888507][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.900880][ T2344] pvrusb2: Attached sub-driver cx25840 [ 813.907121][ T5879] pvrusb2: Hardware description: Terratec Grabster AV400 [ 813.914525][ T5879] pvrusb2: ********** [ 813.918615][ T5879] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 813.919045][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 813.933357][ T5879] pvrusb2: Important functionality might not be entirely working. [ 813.947165][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 813.951965][ T5879] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 813.971812][T19315] pvrusb2: Attempted to execute control transfer when device not ok [ 813.982831][ T5879] pvrusb2: ********** [ 813.983993][T14451] usb 1-1: USB disconnect, device number 79 [ 814.076716][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.084656][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.107887][ T2344] pvrusb2: Invalid write control endpoint [ 814.156377][ T2344] pvrusb2: Invalid write control endpoint [ 814.162479][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 814.172854][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 814.184312][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 814.194612][ T2344] pvrusb2: Device being rendered inoperable [ 814.203271][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 814.210831][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 814.222637][ T2344] pvrusb2: Attached sub-driver cx25840 [ 814.228634][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 814.239403][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 814.270925][T19326] fuse: Bad value for 'fd' [ 814.281530][T19326] hugetlbfs: syz.2.5280 (19326): Using mlock ulimits for SHM_HUGETLB is obsolete [ 814.309014][T19321] pvrusb2: Attempted to execute control transfer when device not ok [ 814.320644][ T5821] usb 4-1: USB disconnect, device number 19 [ 814.641001][T14451] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 814.799954][T14451] usb 2-1: Using ep0 maxpacket: 8 [ 814.805144][ T5950] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 814.815270][T14451] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 814.825174][T14451] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.842402][T14451] pvrusb2: Hardware description: Terratec Grabster AV400 [ 814.853012][T14451] pvrusb2: ********** [ 814.862769][T14451] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 814.889823][T14451] pvrusb2: Important functionality might not be entirely working. [ 814.897806][T14451] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 814.912146][T14451] pvrusb2: ********** [ 814.992113][ T5950] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 815.001738][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.012923][ T5950] usb 1-1: config 0 descriptor?? [ 815.024323][ T5950] gspca_main: spca508-2.14.0 probing 8086:0110 [ 815.047121][ T2344] pvrusb2: Invalid write control endpoint [ 815.103166][ T2344] pvrusb2: Invalid write control endpoint [ 815.113788][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 815.126259][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 815.135208][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 815.145782][ T2344] pvrusb2: Device being rendered inoperable [ 815.151941][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 815.159677][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 815.169964][ T5879] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 815.178019][ T2344] pvrusb2: Attached sub-driver cx25840 [ 815.185036][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 815.195776][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 815.225262][T19338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.234360][T19338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.250434][T19333] pvrusb2: Attempted to execute control transfer when device not ok [ 815.260420][T14451] usb 2-1: USB disconnect, device number 101 [ 815.341959][ T5879] usb 4-1: too many endpoints for config 0 interface 0 altsetting 2: 255, using maximum allowed: 30 [ 815.354112][ T5879] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.364121][ T5879] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 815.379371][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 815.386209][ T5879] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 815.395640][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.408678][ T5879] usb 4-1: config 0 descriptor?? [ 815.444875][ T5950] gspca_spca508: reg_read err -71 [ 815.451021][ T5950] gspca_spca508: reg_read err -71 [ 815.457337][ T5950] gspca_spca508: reg_read err -71 [ 815.464098][ T5950] gspca_spca508: reg_read err -71 [ 815.470791][ T5950] gspca_spca508: reg write: error -71 [ 815.479821][ T5950] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 815.490664][ T5950] usb 1-1: USB disconnect, device number 80 [ 815.765321][T19348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.774405][T19348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.836340][T19356] FAULT_INJECTION: forcing a failure. [ 815.836340][T19356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 815.853117][T19356] CPU: 1 UID: 0 PID: 19356 Comm: syz.1.5292 Not tainted syzkaller #0 PREEMPT(full) [ 815.853147][T19356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 815.853161][T19356] Call Trace: [ 815.853170][T19356] [ 815.853179][T19356] dump_stack_lvl+0x189/0x250 [ 815.853213][T19356] ? __pfx____ratelimit+0x10/0x10 [ 815.853237][T19356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 815.853263][T19356] ? __pfx__printk+0x10/0x10 [ 815.853301][T19356] should_fail_ex+0x414/0x560 [ 815.853334][T19356] _copy_to_user+0x31/0xb0 [ 815.853358][T19356] simple_read_from_buffer+0xe1/0x170 [ 815.853388][T19356] proc_fail_nth_read+0x1b3/0x220 [ 815.853412][T19356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 815.853437][T19356] ? rw_verify_area+0x2a6/0x4d0 [ 815.853476][T19356] ? __lock_acquire+0xab9/0xd20 [ 815.853497][T19356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 815.853520][T19356] vfs_read+0x200/0xa30 [ 815.853549][T19356] ? fdget_pos+0x247/0x320 [ 815.853578][T19356] ? __pfx___mutex_lock+0x10/0x10 [ 815.853605][T19356] ? __pfx_vfs_read+0x10/0x10 [ 815.853638][T19356] ? __fget_files+0x2a/0x420 [ 815.853667][T19356] ? __fget_files+0x3a0/0x420 [ 815.853690][T19356] ? __fget_files+0x2a/0x420 [ 815.853724][T19356] ksys_read+0x145/0x250 [ 815.853758][T19356] ? __pfx_ksys_read+0x10/0x10 [ 815.853794][T19356] ? do_syscall_64+0xbe/0xfa0 [ 815.853823][T19356] do_syscall_64+0xfa/0xfa0 [ 815.853848][T19356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.853869][T19356] ? clear_bhb_loop+0x60/0xb0 [ 815.853895][T19356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.853915][T19356] RIP: 0033:0x7fb5c4f8e15c [ 815.853935][T19356] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 815.853955][T19356] RSP: 002b:00007fb5c5df3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 815.853978][T19356] RAX: ffffffffffffffda RBX: 00007fb5c51e5fa0 RCX: 00007fb5c4f8e15c [ 815.853994][T19356] RDX: 000000000000000f RSI: 00007fb5c5df30a0 RDI: 0000000000000004 [ 815.854007][T19356] RBP: 00007fb5c5df3090 R08: 0000000000000000 R09: 0000000000000000 [ 815.854020][T19356] R10: 00000000060440d0 R11: 0000000000000246 R12: 0000000000000001 [ 815.854034][T19356] R13: 00007fb5c51e6038 R14: 00007fb5c51e5fa0 R15: 00007ffcbc98d5f8 [ 815.854070][T19356] [ 816.124325][ T5879] uclogic 0003:28BD:0071.006D: interface is invalid, ignoring [ 816.154848][ T5821] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 816.280037][T19366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5296'. [ 816.298954][T19366] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 816.359845][ T5821] usb 3-1: Using ep0 maxpacket: 8 [ 816.367043][ T5821] usb 3-1: config 5 has an invalid interface number: 151 but max is 0 [ 816.379876][ T5821] usb 3-1: config 5 has no interface number 0 [ 816.387992][T14451] usb 4-1: USB disconnect, device number 20 [ 816.397346][ T5821] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=1e.b5 [ 816.413923][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.430444][ T5821] usb 3-1: Product: syz [ 816.434693][ T5821] usb 3-1: Manufacturer: syz [ 816.439427][ T5821] usb 3-1: SerialNumber: syz [ 816.544013][T19371] FAULT_INJECTION: forcing a failure. [ 816.544013][T19371] name failslab, interval 1, probability 0, space 0, times 0 [ 816.557654][T19371] CPU: 1 UID: 0 PID: 19371 Comm: syz.0.5297 Not tainted syzkaller #0 PREEMPT(full) [ 816.557694][T19371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 816.557707][T19371] Call Trace: [ 816.557717][T19371] [ 816.557726][T19371] dump_stack_lvl+0x189/0x250 [ 816.557758][T19371] ? __pfx____ratelimit+0x10/0x10 [ 816.557783][T19371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 816.557810][T19371] ? __pfx__printk+0x10/0x10 [ 816.557838][T19371] ? __pfx___might_resched+0x10/0x10 [ 816.557863][T19371] ? fs_reclaim_acquire+0x7d/0x100 [ 816.557890][T19371] should_fail_ex+0x414/0x560 [ 816.557922][T19371] should_failslab+0xa8/0x100 [ 816.557945][T19371] __kmalloc_cache_noprof+0x84/0x700 [ 816.557973][T19371] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 816.557995][T19371] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 816.558017][T19371] tcp_sendmsg_locked+0x4cd0/0x5550 [ 816.558036][T19371] ? tcp_sendmsg_locked+0x2d1/0x5550 [ 816.558076][T19371] ? __lock_acquire+0xab9/0xd20 [ 816.558104][T19371] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 816.558118][T19371] ? __local_bh_enable_ip+0x12d/0x1c0 [ 816.558141][T19371] ? __local_bh_enable_ip+0x12d/0x1c0 [ 816.558169][T19371] tcp_sendmsg+0x2f/0x50 [ 816.558185][T19371] __sock_sendmsg+0x19c/0x270 [ 816.558209][T19371] __sys_sendto+0x3bd/0x520 [ 816.558236][T19371] ? __pfx___sys_sendto+0x10/0x10 [ 816.558258][T19371] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 816.558290][T19371] ? __fget_files+0x3a0/0x420 [ 816.558319][T19371] ? ksys_write+0x22a/0x250 [ 816.558346][T19371] ? __pfx_ksys_write+0x10/0x10 [ 816.558374][T19371] __x64_sys_sendto+0xde/0x100 [ 816.558402][T19371] do_syscall_64+0xfa/0xfa0 [ 816.558423][T19371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.558441][T19371] ? clear_bhb_loop+0x60/0xb0 [ 816.558462][T19371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.558478][T19371] RIP: 0033:0x7f3a9758f749 [ 816.558494][T19371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 816.558509][T19371] RSP: 002b:00007f3a984ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 816.558527][T19371] RAX: ffffffffffffffda RBX: 00007f3a977e5fa0 RCX: 00007f3a9758f749 [ 816.558540][T19371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 816.558550][T19371] RBP: 00007f3a984ca090 R08: 0000200000e68000 R09: 0000000000000010 [ 816.558562][T19371] R10: 00000000200007bd R11: 0000000000000246 R12: 0000000000000001 [ 816.558572][T19371] R13: 00007f3a977e6038 R14: 00007f3a977e5fa0 R15: 00007ffc89a08608 [ 816.558600][T19371] [ 816.834814][T19354] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5291'. [ 816.844648][T19354] netlink: 'syz.2.5291': attribute type 5 has an invalid length. [ 816.859611][ T5879] usb 3-1: USB disconnect, device number 66 [ 816.913486][T19375] input: syz0 as /devices/virtual/input/input67 [ 817.114521][ T52] Bluetooth: hci2: SCO packet for unknown connection handle 346 [ 817.604362][T19384] FAULT_INJECTION: forcing a failure. [ 817.604362][T19384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.630311][T19384] CPU: 1 UID: 0 PID: 19384 Comm: syz.2.5302 Not tainted syzkaller #0 PREEMPT(full) [ 817.630342][T19384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 817.630356][T19384] Call Trace: [ 817.630365][T19384] [ 817.630376][T19384] dump_stack_lvl+0x189/0x250 [ 817.630407][T19384] ? __pfx____ratelimit+0x10/0x10 [ 817.630431][T19384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 817.630457][T19384] ? __pfx__printk+0x10/0x10 [ 817.630495][T19384] should_fail_ex+0x414/0x560 [ 817.630527][T19384] _copy_to_user+0x31/0xb0 [ 817.630551][T19384] msr_read+0x177/0x250 [ 817.630583][T19384] ? __pfx_msr_read+0x10/0x10 [ 817.630609][T19384] ? security_file_permission+0x75/0x290 [ 817.630636][T19384] ? rw_verify_area+0x2a6/0x4d0 [ 817.630665][T19384] ? __lock_acquire+0xab9/0xd20 [ 817.630687][T19384] ? __pfx_msr_read+0x10/0x10 [ 817.630716][T19384] vfs_read+0x200/0xa30 [ 817.630756][T19384] ? __pfx_vfs_read+0x10/0x10 [ 817.630788][T19384] ? __fget_files+0x2a/0x420 [ 817.630816][T19384] ? __fget_files+0x2a/0x420 [ 817.630839][T19384] ? __fget_files+0x3a0/0x420 [ 817.630867][T19384] ? __fget_files+0x2a/0x420 [ 817.630900][T19384] ksys_read+0x145/0x250 [ 817.630934][T19384] ? __pfx_ksys_read+0x10/0x10 [ 817.630969][T19384] ? do_syscall_64+0xbe/0xfa0 [ 817.631007][T19384] do_syscall_64+0xfa/0xfa0 [ 817.631033][T19384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.631055][T19384] ? clear_bhb_loop+0x60/0xb0 [ 817.631081][T19384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.631102][T19384] RIP: 0033:0x7fd3d5b8f749 [ 817.631122][T19384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.631141][T19384] RSP: 002b:00007fd3d6ac5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 817.631163][T19384] RAX: ffffffffffffffda RBX: 00007fd3d5de5fa0 RCX: 00007fd3d5b8f749 [ 817.631179][T19384] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000003 [ 817.631193][T19384] RBP: 00007fd3d6ac5090 R08: 0000000000000000 R09: 0000000000000000 [ 817.631207][T19384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.631220][T19384] R13: 00007fd3d5de6038 R14: 00007fd3d5de5fa0 R15: 00007ffd2518fa28 [ 817.631255][T19384] [ 818.067992][T19390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5305'. [ 818.078629][T19390] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 818.270380][ T5879] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 818.440368][ T5879] usb 4-1: Using ep0 maxpacket: 32 [ 818.449560][ T5879] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.461625][ T5879] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.472343][T14451] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 818.482634][ T5879] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 818.500003][ T5879] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 818.508640][ T5879] usb 4-1: Product: syz [ 818.513029][ T5879] usb 4-1: Manufacturer: syz [ 818.536724][ T5879] hub 4-1:4.0: USB hub found [ 818.629995][ T5950] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 818.637865][T14451] usb 1-1: Using ep0 maxpacket: 16 [ 818.650627][T14451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.663345][T14451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.673408][T14451] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 818.682543][T14451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.700861][T14451] usb 1-1: config 0 descriptor?? [ 818.765028][T19386] netlink: 'syz.3.5303': attribute type 21 has an invalid length. [ 818.773595][T19386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5303'. [ 818.785459][ T5879] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 818.822104][ T5950] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 255, using maximum allowed: 30 [ 818.833121][ T5950] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.844180][ T5950] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 818.859652][ T5950] usb 3-1: config 0 interface 0 has no altsetting 0 [ 818.866423][ T5950] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 818.876193][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.887971][ T5950] usb 3-1: config 0 descriptor?? [ 818.987174][T19386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.002638][T19386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.040041][ T10] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 819.134431][T14451] mcp2200 0003:04D8:00DF.006E: item fetching failed at offset 2/5 [ 819.147325][T14451] mcp2200 0003:04D8:00DF.006E: can't parse reports [ 819.150294][ T5879] usb 4-1: USB disconnect, device number 21 [ 819.154723][T14451] mcp2200 0003:04D8:00DF.006E: probe with driver mcp2200 failed with error -22 [ 819.211719][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 819.234655][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.245601][ T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 819.255070][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.269388][ T10] usb 2-1: config 0 descriptor?? [ 819.315817][T19418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.329117][ T5879] usb 1-1: USB disconnect, device number 81 [ 819.338375][T19418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.607605][ T5950] uclogic 0003:28BD:0071.006F: interface is invalid, ignoring [ 819.681804][T19408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.690925][T19408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.764299][ T10] elan 0003:04F3:0755.0070: failed to start in urb: -90 [ 819.776120][ T10] elan 0003:04F3:0755.0070: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 819.857969][ T5950] usb 3-1: USB disconnect, device number 67 [ 820.050546][T19424] FAULT_INJECTION: forcing a failure. [ 820.050546][T19424] name failslab, interval 1, probability 0, space 0, times 0 [ 820.063673][T19424] CPU: 0 UID: 0 PID: 19424 Comm: syz.0.5314 Not tainted syzkaller #0 PREEMPT(full) [ 820.063704][T19424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 820.063719][T19424] Call Trace: [ 820.063728][T19424] [ 820.063737][T19424] dump_stack_lvl+0x189/0x250 [ 820.063770][T19424] ? __pfx____ratelimit+0x10/0x10 [ 820.063794][T19424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 820.063820][T19424] ? __pfx__printk+0x10/0x10 [ 820.063852][T19424] ? __pfx___might_resched+0x10/0x10 [ 820.063874][T19424] ? fs_reclaim_acquire+0x7d/0x100 [ 820.063901][T19424] should_fail_ex+0x414/0x560 [ 820.063932][T19424] should_failslab+0xa8/0x100 [ 820.063957][T19424] __kmalloc_noprof+0xdf/0x800 [ 820.063988][T19424] ? tomoyo_encode+0x28b/0x550 [ 820.064024][T19424] tomoyo_encode+0x28b/0x550 [ 820.064061][T19424] tomoyo_realpath_from_path+0x58d/0x5d0 [ 820.064095][T19424] ? tomoyo_domain+0xd8/0x130 [ 820.064121][T19424] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 820.064148][T19424] tomoyo_path_number_perm+0x1e8/0x5a0 [ 820.064178][T19424] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 820.064248][T19424] ? __fget_files+0x2a/0x420 [ 820.064278][T19424] ? __fget_files+0x3a0/0x420 [ 820.064301][T19424] ? __fget_files+0x2a/0x420 [ 820.064330][T19424] security_file_ioctl+0xcb/0x2d0 [ 820.064357][T19424] __se_sys_ioctl+0x47/0x170 [ 820.064399][T19424] do_syscall_64+0xfa/0xfa0 [ 820.064426][T19424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.064448][T19424] ? clear_bhb_loop+0x60/0xb0 [ 820.064473][T19424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.064494][T19424] RIP: 0033:0x7f3a9758f749 [ 820.064513][T19424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.064531][T19424] RSP: 002b:00007f3a984ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 820.064554][T19424] RAX: ffffffffffffffda RBX: 00007f3a977e5fa0 RCX: 00007f3a9758f749 [ 820.064569][T19424] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 820.064582][T19424] RBP: 00007f3a984ca090 R08: 0000000000000000 R09: 0000000000000000 [ 820.064597][T19424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.064610][T19424] R13: 00007f3a977e6038 R14: 00007f3a977e5fa0 R15: 00007ffc89a08608 [ 820.064649][T19424] [ 820.064741][T19424] ERROR: Out of memory at tomoyo_realpath_from_path. [ 820.497978][T19436] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5316'. [ 820.532506][T19436] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 820.883011][T19454] FAULT_INJECTION: forcing a failure. [ 820.883011][T19454] name failslab, interval 1, probability 0, space 0, times 0 [ 820.901445][T19454] CPU: 0 UID: 0 PID: 19454 Comm: syz.0.5322 Not tainted syzkaller #0 PREEMPT(full) [ 820.901475][T19454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 820.901488][T19454] Call Trace: [ 820.901497][T19454] [ 820.901507][T19454] dump_stack_lvl+0x189/0x250 [ 820.901538][T19454] ? __pfx____ratelimit+0x10/0x10 [ 820.901562][T19454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 820.901588][T19454] ? __pfx__printk+0x10/0x10 [ 820.901618][T19454] ? __pfx___might_resched+0x10/0x10 [ 820.901636][T19454] ? fs_reclaim_acquire+0x7d/0x100 [ 820.901655][T19454] should_fail_ex+0x414/0x560 [ 820.901678][T19454] should_failslab+0xa8/0x100 [ 820.901696][T19454] __kmalloc_noprof+0xdf/0x800 [ 820.901718][T19454] ? tomoyo_encode+0x28b/0x550 [ 820.901743][T19454] tomoyo_encode+0x28b/0x550 [ 820.901769][T19454] tomoyo_realpath_from_path+0x58d/0x5d0 [ 820.901792][T19454] ? tomoyo_domain+0xd8/0x130 [ 820.901810][T19454] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 820.901829][T19454] tomoyo_path_number_perm+0x1e8/0x5a0 [ 820.901851][T19454] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 820.901898][T19454] ? __fget_files+0x2a/0x420 [ 820.901919][T19454] ? __fget_files+0x3a0/0x420 [ 820.901935][T19454] ? __fget_files+0x2a/0x420 [ 820.901955][T19454] security_file_ioctl+0xcb/0x2d0 [ 820.901974][T19454] __se_sys_ioctl+0x47/0x170 [ 820.901998][T19454] do_syscall_64+0xfa/0xfa0 [ 820.902017][T19454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.902032][T19454] ? clear_bhb_loop+0x60/0xb0 [ 820.902052][T19454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.902067][T19454] RIP: 0033:0x7f3a9758f749 [ 820.902081][T19454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.902094][T19454] RSP: 002b:00007f3a984ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 820.902111][T19454] RAX: ffffffffffffffda RBX: 00007f3a977e5fa0 RCX: 00007f3a9758f749 [ 820.902122][T19454] RDX: 0800000000000001 RSI: 0000000000009360 RDI: 0000000000000003 [ 820.902132][T19454] RBP: 00007f3a984ca090 R08: 0000000000000000 R09: 0000000000000000 [ 820.902142][T19454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.902151][T19454] R13: 00007f3a977e6038 R14: 00007f3a977e5fa0 R15: 00007ffc89a08608 [ 820.902175][T19454] [ 820.902193][T19454] ERROR: Out of memory at tomoyo_realpath_from_path. [ 821.099274][T19459] FAULT_INJECTION: forcing a failure. [ 821.099274][T19459] name failslab, interval 1, probability 0, space 0, times 0 [ 821.166653][T19459] CPU: 1 UID: 0 PID: 19459 Comm: syz.3.5324 Not tainted syzkaller #0 PREEMPT(full) [ 821.166683][T19459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 821.166697][T19459] Call Trace: [ 821.166706][T19459] [ 821.166716][T19459] dump_stack_lvl+0x189/0x250 [ 821.166749][T19459] ? __pfx____ratelimit+0x10/0x10 [ 821.166774][T19459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 821.166801][T19459] ? __pfx__printk+0x10/0x10 [ 821.166835][T19459] ? __pfx___might_resched+0x10/0x10 [ 821.166861][T19459] ? fs_reclaim_acquire+0x7d/0x100 [ 821.166889][T19459] should_fail_ex+0x414/0x560 [ 821.166921][T19459] should_failslab+0xa8/0x100 [ 821.166946][T19459] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 821.166979][T19459] ? __alloc_skb+0x255/0x430 [ 821.167089][T19459] ? napi_skb_cache_get+0x445/0x6e0 [ 821.167118][T19459] ? napi_skb_cache_get+0x151/0x6e0 [ 821.167153][T19459] __alloc_skb+0x255/0x430 [ 821.167186][T19459] ? __pfx___alloc_skb+0x10/0x10 [ 821.167222][T19459] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 821.167249][T19459] netlink_sendmsg+0x5c6/0xb30 [ 821.167277][T19459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.167302][T19459] ? aa_sock_msg_perm+0xf1/0x1d0 [ 821.167337][T19459] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 821.167356][T19459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.167380][T19459] __sock_sendmsg+0x21c/0x270 [ 821.167423][T19459] ____sys_sendmsg+0x505/0x870 [ 821.167448][T19459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 821.167479][T19459] ? import_iovec+0x74/0xa0 [ 821.167503][T19459] ___sys_sendmsg+0x21f/0x2a0 [ 821.167527][T19459] ? __pfx____sys_sendmsg+0x10/0x10 [ 821.167587][T19459] ? __fget_files+0x2a/0x420 [ 821.167611][T19459] ? __fget_files+0x3a0/0x420 [ 821.167648][T19459] __x64_sys_sendmsg+0x19b/0x260 [ 821.167679][T19459] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 821.167711][T19459] ? __pfx_ksys_write+0x10/0x10 [ 821.167748][T19459] ? do_syscall_64+0xbe/0xfa0 [ 821.167777][T19459] do_syscall_64+0xfa/0xfa0 [ 821.167804][T19459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.167825][T19459] ? clear_bhb_loop+0x60/0xb0 [ 821.167851][T19459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.167871][T19459] RIP: 0033:0x7fc32758f749 [ 821.167890][T19459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.167909][T19459] RSP: 002b:00007fc328436038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.167932][T19459] RAX: ffffffffffffffda RBX: 00007fc3277e5fa0 RCX: 00007fc32758f749 [ 821.167948][T19459] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 821.167962][T19459] RBP: 00007fc328436090 R08: 0000000000000000 R09: 0000000000000000 [ 821.167975][T19459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.167989][T19459] R13: 00007fc3277e6038 R14: 00007fc3277e5fa0 R15: 00007ffd4546aa08 [ 821.168053][T19459] [ 821.523792][T19462] loop4: detected capacity change from 0 to 7 [ 821.537290][T19462] Dev loop4: unable to read RDB block 7 [ 821.544033][T19462] loop4: unable to read partition table [ 821.552152][T19462] loop4: partition table beyond EOD, truncated [ 821.558583][T19462] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 821.685405][T19469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5328'. [ 821.695541][T19469] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 821.779880][T14451] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 821.814380][ T5950] usb 2-1: USB disconnect, device number 102 [ 821.932159][T14451] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 255, using maximum allowed: 30 [ 821.958804][T14451] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.981330][T14451] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 822.021379][T14451] usb 1-1: config 0 interface 0 has no altsetting 0 [ 822.031701][T14451] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 822.049561][T14451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.064658][T14451] usb 1-1: config 0 descriptor?? [ 822.081237][T19482] FAULT_INJECTION: forcing a failure. [ 822.081237][T19482] name failslab, interval 1, probability 0, space 0, times 0 [ 822.094380][T19482] CPU: 1 UID: 0 PID: 19482 Comm: syz.2.5332 Not tainted syzkaller #0 PREEMPT(full) [ 822.094412][T19482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 822.094427][T19482] Call Trace: [ 822.094441][T19482] [ 822.094452][T19482] dump_stack_lvl+0x189/0x250 [ 822.094484][T19482] ? __pfx____ratelimit+0x10/0x10 [ 822.094508][T19482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 822.094535][T19482] ? __pfx__printk+0x10/0x10 [ 822.094571][T19482] ? __pfx___might_resched+0x10/0x10 [ 822.094595][T19482] ? fs_reclaim_acquire+0x7d/0x100 [ 822.094623][T19482] should_fail_ex+0x414/0x560 [ 822.094657][T19482] should_failslab+0xa8/0x100 [ 822.094686][T19482] __kvmalloc_node_noprof+0x175/0x910 [ 822.094712][T19482] ? traverse+0xde/0x580 [ 822.094749][T19482] traverse+0xde/0x580 [ 822.094784][T19482] ? aa_file_perm+0x139/0x1540 [ 822.094826][T19482] ? aa_file_perm+0x139/0x1540 [ 822.094849][T19482] seq_read_iter+0xd08/0xe20 [ 822.094880][T19482] ? _parse_integer_limit+0x1ae/0x1f0 [ 822.094918][T19482] ? __asan_memset+0x22/0x50 [ 822.094954][T19482] seq_read+0x369/0x480 [ 822.094997][T19482] ? __pfx_seq_read+0x10/0x10 [ 822.095056][T19482] ? __pfx_seq_read+0x10/0x10 [ 822.095089][T19482] proc_reg_read+0x1e9/0x2e0 [ 822.095114][T19482] ? __pfx_proc_reg_read+0x10/0x10 [ 822.095140][T19482] vfs_read+0x200/0xa30 [ 822.095181][T19482] ? __pfx_vfs_read+0x10/0x10 [ 822.095222][T19482] ? __fget_files+0x2a/0x420 [ 822.095251][T19482] ? __fget_files+0x2a/0x420 [ 822.095274][T19482] ? __fget_files+0x3a0/0x420 [ 822.095297][T19482] ? __fget_files+0x2a/0x420 [ 822.095331][T19482] __x64_sys_pread64+0x193/0x220 [ 822.095357][T19482] ? __pfx___x64_sys_pread64+0x10/0x10 [ 822.095382][T19482] ? do_syscall_64+0xbe/0xfa0 [ 822.095412][T19482] do_syscall_64+0xfa/0xfa0 [ 822.095439][T19482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.095461][T19482] ? clear_bhb_loop+0x60/0xb0 [ 822.095487][T19482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.095509][T19482] RIP: 0033:0x7fd3d5b8f749 [ 822.095530][T19482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.095549][T19482] RSP: 002b:00007fd3d6ac5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 822.095573][T19482] RAX: ffffffffffffffda RBX: 00007fd3d5de5fa0 RCX: 00007fd3d5b8f749 [ 822.095588][T19482] RDX: 0000000000018fe2 RSI: 0000200000000c80 RDI: 0000000000000003 [ 822.095603][T19482] RBP: 00007fd3d6ac5090 R08: 0000000000000000 R09: 0000000000000000 [ 822.095618][T19482] R10: 000000000000041e R11: 0000000000000246 R12: 0000000000000001 [ 822.095631][T19482] R13: 00007fd3d5de6038 R14: 00007fd3d5de5fa0 R15: 00007ffd2518fa28 [ 822.095668][T19482] [ 822.531007][T19487] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5335'. [ 822.545237][T19489] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5336'. [ 822.579172][T19463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.591852][T19489] block nbd0: reconnected socket [ 822.610058][T19489] nbd: socks must be embedded in a SOCK_ITEM attr [ 822.619894][ T5950] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 822.628932][T19463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.639097][ T52] block nbd0: Receive control failed (result -32) [ 822.771961][ T5950] usb 2-1: config 0 has an invalid interface number: 199 but max is 0 [ 822.782968][ T5950] usb 2-1: config 0 has no interface number 0 [ 822.789311][ T5950] usb 2-1: config 0 interface 199 has no altsetting 0 [ 822.800056][ T5950] usb 2-1: New USB device found, idVendor=05a9, idProduct=2641, bcdDevice=1c.1b [ 822.818660][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.828628][ T5950] usb 2-1: Product: syz [ 822.834643][ T5950] usb 2-1: Manufacturer: syz [ 822.840705][ T5950] usb 2-1: SerialNumber: syz [ 822.875057][ T5950] usb 2-1: config 0 descriptor?? [ 822.883947][T14451] uclogic 0003:28BD:0071.0071: interface is invalid, ignoring [ 823.126608][ T5899] usb 1-1: USB disconnect, device number 82 [ 823.229835][ T5879] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 823.334811][ T5950] uvcvideo 2-1:0.199: Found Unit with invalid ID 0 [ 823.350689][ T5950] uvcvideo 2-1:0.199: probe with driver uvcvideo failed with error -22 [ 823.375795][ T5950] usb 2-1: USB disconnect, device number 103 [ 823.389833][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 823.397697][ T5879] usb 4-1: config 127 has an invalid interface number: 171 but max is 1 [ 823.411304][ T5879] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 823.426133][ T5879] usb 4-1: config 127 has no interface number 1 [ 823.433226][ T5879] usb 4-1: config 127 interface 171 has no altsetting 0 [ 823.451206][ T5879] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 823.463212][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.471675][ T5879] usb 4-1: Product: syz [ 823.476402][ T5879] usb 4-1: Manufacturer: syz [ 823.481470][ T5879] usb 4-1: SerialNumber: syz [ 823.499078][T12360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.554451][T12360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.556168][T19500] FAULT_INJECTION: forcing a failure. [ 823.556168][T19500] name failslab, interval 1, probability 0, space 0, times 0 [ 823.581786][T19500] CPU: 1 UID: 0 PID: 19500 Comm: syz.2.5339 Not tainted syzkaller #0 PREEMPT(full) [ 823.581816][T19500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 823.581829][T19500] Call Trace: [ 823.581839][T19500] [ 823.581849][T19500] dump_stack_lvl+0x189/0x250 [ 823.581880][T19500] ? __pfx____ratelimit+0x10/0x10 [ 823.581917][T19500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 823.581944][T19500] ? __pfx__printk+0x10/0x10 [ 823.581971][T19500] ? __pfx___might_resched+0x10/0x10 [ 823.581995][T19500] ? fs_reclaim_acquire+0x7d/0x100 [ 823.582019][T19500] should_fail_ex+0x414/0x560 [ 823.582042][T19500] should_failslab+0xa8/0x100 [ 823.582062][T19500] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 823.582098][T19500] ? __alloc_skb+0x255/0x430 [ 823.582125][T19500] ? napi_skb_cache_get+0x445/0x6e0 [ 823.582152][T19500] ? napi_skb_cache_get+0x151/0x6e0 [ 823.582180][T19500] __alloc_skb+0x255/0x430 [ 823.582204][T19500] ? __pfx___alloc_skb+0x10/0x10 [ 823.582235][T19500] ? netlink_autobind+0xdb/0x300 [ 823.582257][T19500] ? netlink_autobind+0x2c2/0x300 [ 823.582284][T19500] netlink_sendmsg+0x5c6/0xb30 [ 823.582315][T19500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.582333][T19500] ? aa_sock_msg_perm+0xf1/0x1d0 [ 823.582357][T19500] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 823.582375][T19500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.582398][T19500] __sock_sendmsg+0x21c/0x270 [ 823.582428][T19500] ____sys_sendmsg+0x505/0x870 [ 823.582454][T19500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 823.582481][T19500] ? import_iovec+0x74/0xa0 [ 823.582497][T19500] ___sys_sendmsg+0x21f/0x2a0 [ 823.582514][T19500] ? __pfx____sys_sendmsg+0x10/0x10 [ 823.582572][T19500] ? __fget_files+0x2a/0x420 [ 823.582596][T19500] ? __fget_files+0x3a0/0x420 [ 823.582628][T19500] __x64_sys_sendmsg+0x19b/0x260 [ 823.582646][T19500] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 823.582667][T19500] ? __pfx_ksys_write+0x10/0x10 [ 823.582704][T19500] ? do_syscall_64+0xbe/0xfa0 [ 823.582732][T19500] do_syscall_64+0xfa/0xfa0 [ 823.582757][T19500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.582777][T19500] ? clear_bhb_loop+0x60/0xb0 [ 823.582795][T19500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.582809][T19500] RIP: 0033:0x7fd3d5b8f749 [ 823.582824][T19500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 823.582843][T19500] RSP: 002b:00007fd3d6ac5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.582867][T19500] RAX: ffffffffffffffda RBX: 00007fd3d5de5fa0 RCX: 00007fd3d5b8f749 [ 823.582882][T19500] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004 [ 823.582902][T19500] RBP: 00007fd3d6ac5090 R08: 0000000000000000 R09: 0000000000000000 [ 823.582914][T19500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.582928][T19500] R13: 00007fd3d5de6038 R14: 00007fd3d5de5fa0 R15: 00007ffd2518fa28 [ 823.582953][T19500] [ 823.901350][T12360] bond0 (unregistering): Released all slaves [ 824.046925][T19505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5342'. [ 824.059397][T19505] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 824.697398][T19524] FAULT_INJECTION: forcing a failure. [ 824.697398][T19524] name failslab, interval 1, probability 0, space 0, times 0 [ 824.712343][T19524] CPU: 1 UID: 0 PID: 19524 Comm: syz.2.5348 Not tainted syzkaller #0 PREEMPT(full) [ 824.712374][T19524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 824.712388][T19524] Call Trace: [ 824.712398][T19524] [ 824.712409][T19524] dump_stack_lvl+0x189/0x250 [ 824.712441][T19524] ? __pfx____ratelimit+0x10/0x10 [ 824.712465][T19524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 824.712492][T19524] ? __pfx__printk+0x10/0x10 [ 824.712524][T19524] ? __pfx___might_resched+0x10/0x10 [ 824.712548][T19524] ? fs_reclaim_acquire+0x7d/0x100 [ 824.712575][T19524] should_fail_ex+0x414/0x560 [ 824.712608][T19524] should_failslab+0xa8/0x100 [ 824.712635][T19524] __kmalloc_noprof+0xdf/0x800 [ 824.712667][T19524] ? tomoyo_encode+0x28b/0x550 [ 824.712703][T19524] tomoyo_encode+0x28b/0x550 [ 824.712738][T19524] tomoyo_realpath_from_path+0x58d/0x5d0 [ 824.712816][T19524] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 824.712844][T19524] tomoyo_path_number_perm+0x1e8/0x5a0 [ 824.712874][T19524] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 824.712945][T19524] ? __fget_files+0x2a/0x420 [ 824.712974][T19524] ? __fget_files+0x3a0/0x420 [ 824.712998][T19524] ? __fget_files+0x2a/0x420 [ 824.713025][T19524] security_file_ioctl+0xcb/0x2d0 [ 824.713053][T19524] __se_sys_ioctl+0x47/0x170 [ 824.713087][T19524] do_syscall_64+0xfa/0xfa0 [ 824.713114][T19524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.713135][T19524] ? clear_bhb_loop+0x60/0xb0 [ 824.713169][T19524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.713191][T19524] RIP: 0033:0x7fd3d5b8f749 [ 824.713216][T19524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.713235][T19524] RSP: 002b:00007fd3d6ac5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 824.713258][T19524] RAX: ffffffffffffffda RBX: 00007fd3d5de5fa0 RCX: 00007fd3d5b8f749 [ 824.713274][T19524] RDX: 0000200000001100 RSI: 0000000000003b85 RDI: 0000000000000003 [ 824.713289][T19524] RBP: 00007fd3d6ac5090 R08: 0000000000000000 R09: 0000000000000000 [ 824.713303][T19524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.713316][T19524] R13: 00007fd3d5de6038 R14: 00007fd3d5de5fa0 R15: 00007ffd2518fa28 [ 824.713352][T19524] [ 824.713455][T19524] ERROR: Out of memory at tomoyo_realpath_from_path. [ 824.978140][T12360] hsr_slave_0: left promiscuous mode [ 825.047673][T12360] hsr_slave_1: left promiscuous mode [ 825.055390][T12360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 825.064758][T12360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.084673][T12360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 825.093790][T12360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.142608][T12360] veth1_macvtap: left promiscuous mode [ 825.148550][T12360] veth0_macvtap: left promiscuous mode [ 825.155755][T12360] veth1_vlan: left promiscuous mode [ 825.161858][T12360] veth0_vlan: left promiscuous mode [ 825.360016][ T948] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 825.447352][T12360] ipvlan1 (unregistering): left allmulticast mode [ 825.454140][T12360] veth0_vlan (unregistering): left allmulticast mode [ 825.536630][ T948] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 825.557883][ T948] usb 3-1: config 0 has no interface number 0 [ 825.567420][ T948] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 825.577287][ T5821] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 825.621772][ T948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.630701][ T948] usb 3-1: Product: syz [ 825.647025][ T948] usb 3-1: Manufacturer: syz [ 825.652214][ T948] usb 3-1: SerialNumber: syz [ 825.671222][ T948] usb 3-1: config 0 descriptor?? [ 825.754072][ T5821] usb 1-1: Using ep0 maxpacket: 16 [ 825.812501][ T5821] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 825.825312][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.835941][ T5879] xr_serial 4-1:127.171: xr_serial converter detected [ 825.855360][ T5821] usb 1-1: Product: syz [ 825.859688][ T5821] usb 1-1: Manufacturer: syz [ 825.864508][ T5821] usb 1-1: SerialNumber: syz [ 825.872228][ T5879] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 825.894281][ T5879] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 825.894444][ T948] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 825.920311][ T5821] usb 1-1: config 0 descriptor?? [ 825.940744][ T5879] usb 4-1: USB disconnect, device number 22 [ 825.959304][T19539] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5353'. [ 825.971343][ T5879] xr_serial 4-1:127.171: device disconnected [ 825.975895][ T948] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 825.981341][T19539] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 826.010908][ T948] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 826.050101][ T948] usb 3-1: media controller created [ 826.096401][ T948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 826.210369][ T5950] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 826.233667][T19530] nbd1: detected capacity change from 0 to 127 [ 826.336351][ T5821] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 826.377361][ T5821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 826.388704][ T5821] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 826.397534][ T5821] usb 1-1: media controller created [ 826.414120][ T52] block nbd1: Receive control failed (result -104) [ 826.419885][ T5950] usb 2-1: Using ep0 maxpacket: 8 [ 826.434601][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 826.441343][ T5879] usb 3-1: USB disconnect, device number 68 [ 826.471739][ T5950] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 826.486732][T12360] team0 (unregistering): Port device team_slave_1 removed [ 826.487241][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 826.504480][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.526739][ T5950] usb 2-1: config 0 descriptor?? [ 826.576627][ T5821] zl10353_read_register: readreg error (reg=127, ret==0) [ 826.584036][ T5821] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 826.593545][ T5821] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 826.604804][T12360] team0 (unregistering): Port device team_slave_0 removed [ 826.608313][ T5821] usb 1-1: USB disconnect, device number 83 [ 826.649856][ T948] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 826.699123][ T5821] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 826.758990][ T5950] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 826.791257][ T948] usb 4-1: device descriptor read/64, error -71 [ 826.953491][ T5821] usb 2-1: USB disconnect, device number 104 [ 827.034038][ T948] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 827.184605][ T948] usb 4-1: device descriptor read/64, error -71 [ 827.306414][ T948] usb usb4-port1: attempt power cycle [ 827.317044][ T10] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 827.390991][ T5879] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 827.493928][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 827.512057][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 827.523690][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 827.533679][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.563665][ T10] usb 3-1: config 0 descriptor?? [ 827.594645][ T5879] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 827.607455][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.618582][ T5879] usb 1-1: Product: syz [ 827.634828][ T5879] usb 1-1: Manufacturer: syz [ 827.640915][ T5879] usb 1-1: SerialNumber: syz [ 827.651316][ T948] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 827.677868][ T5879] usb 1-1: config 0 descriptor?? [ 827.699545][ T948] usb 4-1: device descriptor read/8, error -71 [ 827.734760][T12360] IPVS: stop unused estimator thread 0... [ 827.812162][T19547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.829595][T19547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.853612][T19547] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5356'. [ 827.903231][ T10] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 827.914323][ T5879] usb 1-1: USB disconnect, device number 84 [ 827.949909][ T948] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 827.982450][ T948] usb 4-1: device descriptor read/8, error -71 [ 828.090094][ T948] usb usb4-port1: unable to enumerate USB device [ 828.108904][ T948] usb 3-1: USB disconnect, device number 69 [ 828.257037][T19555] netlink: 'syz.1.5359': attribute type 10 has an invalid length. [ 828.265532][T19555] lo: entered promiscuous mode [ 828.275612][T19555] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 828.498459][T19566] FAULT_INJECTION: forcing a failure. [ 828.498459][T19566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 828.511984][T19566] CPU: 0 UID: 0 PID: 19566 Comm: syz.0.5362 Not tainted syzkaller #0 PREEMPT(full) [ 828.512006][T19566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 828.512016][T19566] Call Trace: [ 828.512023][T19566] [ 828.512030][T19566] dump_stack_lvl+0x189/0x250 [ 828.512054][T19566] ? __pfx____ratelimit+0x10/0x10 [ 828.512072][T19566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 828.512091][T19566] ? __pfx__printk+0x10/0x10 [ 828.512109][T19566] ? __might_fault+0xb0/0x130 [ 828.512140][T19566] should_fail_ex+0x414/0x560 [ 828.512163][T19566] _copy_from_iter+0x1cd/0x1630 [ 828.512195][T19566] ? __pfx__copy_from_iter+0x10/0x10 [ 828.512217][T19566] ? rcu_is_watching+0x15/0xb0 [ 828.512238][T19566] ? trace_kmalloc+0x1f/0xd0 [ 828.512259][T19566] ? __kmalloc_noprof+0x43e/0x800 [ 828.512280][T19566] ? rcu_read_lock_any_held+0xb3/0x120 [ 828.512300][T19566] ? kernfs_fop_write_iter+0x158/0x540 [ 828.512318][T19566] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 828.512342][T19566] kernfs_fop_write_iter+0x19b/0x540 [ 828.512367][T19566] vfs_write+0x5c9/0xb30 [ 828.512394][T19566] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 828.512414][T19566] ? __pfx_vfs_write+0x10/0x10 [ 828.512444][T19566] ? __fget_files+0x2a/0x420 [ 828.512469][T19566] ksys_write+0x145/0x250 [ 828.512493][T19566] ? __pfx_ksys_write+0x10/0x10 [ 828.512519][T19566] ? do_syscall_64+0xbe/0xfa0 [ 828.512540][T19566] do_syscall_64+0xfa/0xfa0 [ 828.512565][T19566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.512581][T19566] ? clear_bhb_loop+0x60/0xb0 [ 828.512599][T19566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.512614][T19566] RIP: 0033:0x7f3a9758f749 [ 828.512627][T19566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 828.512640][T19566] RSP: 002b:00007f3a984ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 828.512656][T19566] RAX: ffffffffffffffda RBX: 00007f3a977e5fa0 RCX: 00007f3a9758f749 [ 828.512667][T19566] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000004 [ 828.512677][T19566] RBP: 00007f3a984ca090 R08: 0000000000000000 R09: 0000000000000000 [ 828.512687][T19566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.512696][T19566] R13: 00007f3a977e6038 R14: 00007f3a977e5fa0 R15: 00007ffc89a08608 [ 828.512721][T19566] [ 828.823901][T19569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5364'. [ 828.834190][T19569] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 829.359872][ T948] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 829.513547][ T948] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 829.526890][ T948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.538713][ T948] usb 1-1: Product: syz [ 829.543384][ T948] usb 1-1: Manufacturer: syz [ 829.548480][ T948] usb 1-1: SerialNumber: syz [ 829.562004][ T948] usb 1-1: config 0 descriptor?? [ 829.771979][T19579] FAULT_INJECTION: forcing a failure. [ 829.771979][T19579] name failslab, interval 1, probability 0, space 0, times 0 [ 829.792794][T19579] CPU: 1 UID: 0 PID: 19579 Comm: syz.0.5367 Not tainted syzkaller #0 PREEMPT(full) [ 829.792823][T19579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 829.792837][T19579] Call Trace: [ 829.792847][T19579] [ 829.792856][T19579] dump_stack_lvl+0x189/0x250 [ 829.792889][T19579] ? __pfx____ratelimit+0x10/0x10 [ 829.792912][T19579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 829.792939][T19579] ? __pfx__printk+0x10/0x10 [ 829.792970][T19579] ? __pfx___might_resched+0x10/0x10 [ 829.792994][T19579] ? fs_reclaim_acquire+0x7d/0x100 [ 829.793022][T19579] should_fail_ex+0x414/0x560 [ 829.793054][T19579] should_failslab+0xa8/0x100 [ 829.793080][T19579] __kmalloc_noprof+0xdf/0x800 [ 829.793112][T19579] ? tomoyo_encode+0x28b/0x550 [ 829.793149][T19579] tomoyo_encode+0x28b/0x550 [ 829.793186][T19579] tomoyo_realpath_from_path+0x58d/0x5d0 [ 829.793230][T19579] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 829.793256][T19579] tomoyo_path_number_perm+0x1e8/0x5a0 [ 829.793287][T19579] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 829.793356][T19579] ? __fget_files+0x2a/0x420 [ 829.793386][T19579] ? __fget_files+0x3a0/0x420 [ 829.793409][T19579] ? __fget_files+0x2a/0x420 [ 829.793438][T19579] security_file_ioctl+0xcb/0x2d0 [ 829.793465][T19579] __se_sys_ioctl+0x47/0x170 [ 829.793498][T19579] do_syscall_64+0xfa/0xfa0 [ 829.793524][T19579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.793545][T19579] ? clear_bhb_loop+0x60/0xb0 [ 829.793571][T19579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.793591][T19579] RIP: 0033:0x7f3a9758f749 [ 829.793610][T19579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.793638][T19579] RSP: 002b:00007f3a984ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 829.793660][T19579] RAX: ffffffffffffffda RBX: 00007f3a977e5fa0 RCX: 00007f3a9758f749 [ 829.793676][T19579] RDX: 0000200000000040 RSI: 00000000c0045520 RDI: 0000000000000004 [ 829.793690][T19579] RBP: 00007f3a984ca090 R08: 0000000000000000 R09: 0000000000000000 [ 829.793705][T19579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.793718][T19579] R13: 00007f3a977e6038 R14: 00007f3a977e5fa0 R15: 00007ffc89a08608 [ 829.793753][T19579] [ 829.793776][T19579] ERROR: Out of memory at tomoyo_realpath_from_path. [ 829.849864][ T5879] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 829.856793][ T5821] usb 1-1: USB disconnect, device number 85 [ 830.040582][ T5879] usb 4-1: device descriptor read/64, error -71 [ 830.300309][ T5879] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 830.312113][T19606] FAULT_INJECTION: forcing a failure. [ 830.312113][T19606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.330084][T19606] CPU: 1 UID: 0 PID: 19606 Comm: syz.1.5375 Not tainted syzkaller #0 PREEMPT(full) [ 830.330115][T19606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 830.330129][T19606] Call Trace: [ 830.330138][T19606] [ 830.330149][T19606] dump_stack_lvl+0x189/0x250 [ 830.330182][T19606] ? __pfx____ratelimit+0x10/0x10 [ 830.330205][T19606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 830.330231][T19606] ? __pfx__printk+0x10/0x10 [ 830.330270][T19606] should_fail_ex+0x414/0x560 [ 830.330302][T19606] strncpy_from_user+0x36/0x2c0 [ 830.330332][T19606] getname_flags+0xf3/0x540 [ 830.330374][T19606] __x64_sys_execveat+0xad/0xe0 [ 830.330408][T19606] do_syscall_64+0xfa/0xfa0 [ 830.330435][T19606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.330456][T19606] ? clear_bhb_loop+0x60/0xb0 [ 830.330482][T19606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.330502][T19606] RIP: 0033:0x7fb5c4f8f749 [ 830.330522][T19606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.330541][T19606] RSP: 002b:00007fb5c5dd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 830.330562][T19606] RAX: ffffffffffffffda RBX: 00007fb5c51e6090 RCX: 00007fb5c4f8f749 [ 830.330578][T19606] RDX: 0000000000000000 RSI: 0000200000001400 RDI: ffffffffffffff9c [ 830.330593][T19606] RBP: 00007fb5c5dd2090 R08: 0000000000000000 R09: 0000000000000000 [ 830.330607][T19606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.330619][T19606] R13: 00007fb5c51e6128 R14: 00007fb5c51e6090 R15: 00007ffcbc98d5f8 [ 830.330653][T19606] [ 830.553302][T19609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5376'. [ 830.560179][ T5879] usb 4-1: device descriptor read/64, error -71 [ 830.573714][T19609] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 830.680501][ T5879] usb usb4-port1: attempt power cycle [ 830.899854][T14451] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 830.971488][T19622] netlink: 'syz.0.5380': attribute type 3 has an invalid length. [ 830.979498][T19622] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5380'. [ 831.030740][ T5879] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 831.060849][ T5879] usb 4-1: device descriptor read/8, error -71 [ 831.071537][T14451] usb 2-1: config 0 has an invalid interface number: 26 but max is 2 [ 831.080074][T14451] usb 2-1: config 0 has an invalid interface number: 84 but max is 2 [ 831.088454][T14451] usb 2-1: config 0 has an invalid interface number: 30 but max is 2 [ 831.097215][T14451] usb 2-1: config 0 has an invalid descriptor of length 16, skipping remainder of the config [ 831.108192][T14451] usb 2-1: config 0 has no interface number 0 [ 831.114576][T14451] usb 2-1: config 0 has no interface number 1 [ 831.120797][T14451] usb 2-1: config 0 has no interface number 2 [ 831.126948][T14451] usb 2-1: config 0 interface 26 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 831.137916][T14451] usb 2-1: config 0 interface 26 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 831.150102][T14451] usb 2-1: config 0 interface 26 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 831.161014][T14451] usb 2-1: config 0 interface 26 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 831.174196][T14451] usb 2-1: config 0 interface 26 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 831.185007][T14451] usb 2-1: config 0 interface 26 altsetting 2 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 831.199815][T14451] usb 2-1: config 0 interface 26 altsetting 2 bulk endpoint 0xA has invalid maxpacket 64 [ 831.210349][T14451] usb 2-1: config 0 interface 26 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 831.221122][T14451] usb 2-1: config 0 interface 84 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 831.231810][T14451] usb 2-1: config 0 interface 84 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 831.246151][T14451] usb 2-1: too many endpoints for config 0 interface 30 altsetting 99: 63, using maximum allowed: 30 [ 831.257139][T14451] usb 2-1: config 0 interface 30 altsetting 99 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 831.268096][T14451] usb 2-1: config 0 interface 30 altsetting 99 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 831.279141][T14451] usb 2-1: config 0 interface 30 altsetting 99 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 831.291059][T14451] usb 2-1: config 0 interface 30 altsetting 99 endpoint 0x83 has invalid maxpacket 16446, setting to 1024 [ 831.302650][T14451] usb 2-1: config 0 interface 30 altsetting 99 bulk endpoint 0x83 has invalid maxpacket 1024 [ 831.314401][ T5879] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 831.314881][T14451] usb 2-1: config 0 interface 30 altsetting 99 has 3 endpoint descriptors, different from the interface descriptor's value: 63 [ 831.335828][T14451] usb 2-1: config 0 interface 26 has no altsetting 0 [ 831.342718][T14451] usb 2-1: config 0 interface 84 has no altsetting 0 [ 831.350456][ T5879] usb 4-1: device descriptor read/8, error -71 [ 831.350927][T14451] usb 2-1: config 0 interface 30 has no altsetting 0 [ 831.365445][T14451] usb 2-1: New USB device found, idVendor=067b, idProduct=3507, bcdDevice= 0.a4 [ 831.374879][T14451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.383021][T14451] usb 2-1: Product: syz [ 831.387292][T14451] usb 2-1: Manufacturer: syz [ 831.392021][T14451] usb 2-1: SerialNumber: syz [ 831.399099][T14451] usb 2-1: config 0 descriptor?? [ 831.405913][T19614] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 831.464557][ T5879] usb usb4-port1: unable to enumerate USB device [ 831.632991][T19614] binder: 19613:19614 ioctl 4038ae7a 0 returned -22 [ 831.644768][T14451] usb-storage 2-1:0.26: USB Mass Storage device detected [ 831.670135][T14451] usb-storage 2-1:0.26: Quirks match for vid 067b pid 3507: 110 [ 831.741982][T14451] usb-storage 2-1:0.84: USB Mass Storage device detected [ 831.768599][T14451] usb-storage 2-1:0.84: Quirks match for vid 067b pid 3507: 110 [ 831.807458][T14451] usb-storage 2-1:0.30: USB Mass Storage device detected [ 831.829525][T14451] usb-storage 2-1:0.30: Quirks match for vid 067b pid 3507: 110 [ 831.867806][T14451] usb 2-1: USB disconnect, device number 105 [ 832.685560][T19636] FAULT_INJECTION: forcing a failure. [ 832.685560][T19636] name failslab, interval 1, probability 0, space 0, times 0 [ 832.720045][T19636] CPU: 0 UID: 0 PID: 19636 Comm: syz.2.5383 Not tainted syzkaller #0 PREEMPT(full) [ 832.720076][T19636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 832.720091][T19636] Call Trace: [ 832.720099][T19636] [ 832.720110][T19636] dump_stack_lvl+0x189/0x250 [ 832.720142][T19636] ? __pfx____ratelimit+0x10/0x10 [ 832.720174][T19636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 832.720202][T19636] ? __pfx__printk+0x10/0x10 [ 832.720230][T19636] ? __pfx___might_resched+0x10/0x10 [ 832.720255][T19636] ? fs_reclaim_acquire+0x7d/0x100 [ 832.720282][T19636] should_fail_ex+0x414/0x560 [ 832.720315][T19636] should_failslab+0xa8/0x100 [ 832.720342][T19636] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 832.720376][T19636] ? __alloc_skb+0x255/0x430 [ 832.720405][T19636] ? napi_skb_cache_get+0x445/0x6e0 [ 832.720434][T19636] ? napi_skb_cache_get+0x151/0x6e0 [ 832.720469][T19636] __alloc_skb+0x255/0x430 [ 832.720503][T19636] ? __pfx___alloc_skb+0x10/0x10 [ 832.720536][T19636] ? netlink_autobind+0xdb/0x300 [ 832.720559][T19636] ? netlink_autobind+0x2c2/0x300 [ 832.720600][T19636] netlink_sendmsg+0x5c6/0xb30 [ 832.720632][T19636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.720658][T19636] ? aa_sock_msg_perm+0xf1/0x1d0 [ 832.720690][T19636] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 832.720710][T19636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.720734][T19636] __sock_sendmsg+0x21c/0x270 [ 832.720762][T19636] ____sys_sendmsg+0x505/0x870 [ 832.720787][T19636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 832.720830][T19636] ? import_iovec+0x74/0xa0 [ 832.720854][T19636] ___sys_sendmsg+0x21f/0x2a0 [ 832.720878][T19636] ? __pfx____sys_sendmsg+0x10/0x10 [ 832.720937][T19636] ? __fget_files+0x2a/0x420 [ 832.720961][T19636] ? __fget_files+0x3a0/0x420 [ 832.720997][T19636] __x64_sys_sendmsg+0x19b/0x260 [ 832.721023][T19636] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 832.721055][T19636] ? __pfx_ksys_write+0x10/0x10 [ 832.721091][T19636] ? do_syscall_64+0xbe/0xfa0 [ 832.721121][T19636] do_syscall_64+0xfa/0xfa0 [ 832.721147][T19636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.721179][T19636] ? clear_bhb_loop+0x60/0xb0 [ 832.721205][T19636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.721226][T19636] RIP: 0033:0x7fd3d5b8f749 [ 832.721245][T19636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.721264][T19636] RSP: 002b:00007fd3d6ac5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 832.721287][T19636] RAX: ffffffffffffffda RBX: 00007fd3d5de5fa0 RCX: 00007fd3d5b8f749 [ 832.721303][T19636] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004 [ 832.721317][T19636] RBP: 00007fd3d6ac5090 R08: 0000000000000000 R09: 0000000000000000 [ 832.721331][T19636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.721344][T19636] R13: 00007fd3d5de6038 R14: 00007fd3d5de5fa0 R15: 00007ffd2518fa28 [ 832.721378][T19636] [ 833.426495][T19652] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5388'. [ 833.437789][T19652] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 833.526036][T19650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5387'. [ 833.618884][T19660] netlink: 'syz.0.5390': attribute type 4 has an invalid length. [ 833.630293][T19660] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5390'. [ 833.795047][T19668] FAULT_INJECTION: forcing a failure. [ 833.795047][T19668] name failslab, interval 1, probability 0, space 0, times 0 [ 833.813092][T19668] CPU: 1 UID: 0 PID: 19668 Comm: syz.0.5393 Not tainted syzkaller #0 PREEMPT(full) [ 833.813119][T19668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 833.813129][T19668] Call Trace: [ 833.813136][T19668] [ 833.813143][T19668] dump_stack_lvl+0x189/0x250 [ 833.813167][T19668] ? __pfx____ratelimit+0x10/0x10 [ 833.813185][T19668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 833.813203][T19668] ? __pfx__printk+0x10/0x10 [ 833.813223][T19668] ? __pfx___might_resched+0x10/0x10 [ 833.813246][T19668] ? fs_reclaim_acquire+0x7d/0x100 [ 833.813272][T19668] should_fail_ex+0x414/0x560 [ 833.813304][T19668] should_failslab+0xa8/0x100 [ 833.813329][T19668] kmem_cache_alloc_noprof+0x88/0x700 [ 833.813360][T19668] ? mas_alloc_nodes+0x291/0x350 [ 833.813385][T19668] mas_alloc_nodes+0x291/0x350 [ 833.813404][T19668] mas_preallocate+0x2e0/0x670 [ 833.813425][T19668] ? __pfx_mas_preallocate+0x10/0x10 [ 833.813449][T19668] ? __mas_set_range+0x12f/0x3c0 [ 833.813473][T19668] __split_vma+0x2fa/0xa00 [ 833.813499][T19668] ? __pfx___split_vma+0x10/0x10 [ 833.813526][T19668] ? can_vma_merge_left+0x195/0x6b0 [ 833.813549][T19668] vma_modify+0x952/0x1a70 [ 833.813580][T19668] vma_modify_flags+0x208/0x2e0 [ 833.813601][T19668] ? __pfx_vma_modify_flags+0x10/0x10 [ 833.813628][T19668] ? mas_next_slot+0xc20/0xcf0 [ 833.813649][T19668] mlock_fixup+0x29c/0x410 [ 833.813672][T19668] ? __pfx_mlock_fixup+0x10/0x10 [ 833.813691][T19668] ? mas_find+0xb0e/0xd30 [ 833.813711][T19668] apply_vma_lock_flags+0x285/0x390 [ 833.813730][T19668] ? vfs_write+0x956/0xb30 [ 833.813755][T19668] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 833.813782][T19668] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 833.813802][T19668] ? __pfx_vfs_write+0x10/0x10 [ 833.813826][T19668] do_mlock+0x524/0x720 [ 833.813851][T19668] ? __pfx_do_mlock+0x10/0x10 [ 833.813868][T19668] ? fput+0xa0/0xd0 [ 833.813886][T19668] ? ksys_write+0x22a/0x250 [ 833.813910][T19668] ? __pfx_ksys_write+0x10/0x10 [ 833.813954][T19668] __x64_sys_mlock+0x60/0x70 [ 833.813972][T19668] do_syscall_64+0xfa/0xfa0 [ 833.813991][T19668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.814005][T19668] ? clear_bhb_loop+0x60/0xb0 [ 833.814024][T19668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.814038][T19668] RIP: 0033:0x7f3a9758f749 [ 833.814052][T19668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.814066][T19668] RSP: 002b:00007f3a984ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 833.814082][T19668] RAX: ffffffffffffffda RBX: 00007f3a977e5fa0 RCX: 00007f3a9758f749 [ 833.814100][T19668] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 833.814110][T19668] RBP: 00007f3a984ca090 R08: 0000000000000000 R09: 0000000000000000 [ 833.814120][T19668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.814129][T19668] R13: 00007f3a977e6038 R14: 00007f3a977e5fa0 R15: 00007ffc89a08608 [ 833.814154][T19668] [ 834.169859][ T5879] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 834.330662][ T5879] usb 3-1: device descriptor read/64, error -71 [ 834.543755][T19672] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 834.564514][T19672] overlayfs: failed to set xattr on upper [ 834.574422][T19672] overlayfs: ...falling back to index=off. [ 834.589950][ T5879] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 834.600371][T19672] overlayfs: ...falling back to uuid=null. [ 834.743175][ T5879] usb 3-1: device descriptor read/64, error -71 [ 834.865174][ T5879] usb usb3-port1: attempt power cycle [ 835.018477][T19685] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5398'. [ 835.039959][T19685] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5398'. [ 835.229944][ T5879] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 835.271961][ T5879] usb 3-1: device descriptor read/8, error -71 [ 835.276765][T19693] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5401'. [ 835.288926][T19693] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 835.412221][T19696] netlink: 'syz.3.5402': attribute type 4 has an invalid length. [ 835.421359][T19696] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5402'. [ 835.519954][ T5879] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 835.560544][ T5879] usb 3-1: device descriptor read/8, error -71 [ 835.584487][T19701] FAULT_INJECTION: forcing a failure. [ 835.584487][T19701] name failslab, interval 1, probability 0, space 0, times 0 [ 835.597646][T19701] CPU: 0 UID: 0 PID: 19701 Comm: syz.0.5404 Not tainted syzkaller #0 PREEMPT(full) [ 835.597678][T19701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 835.597693][T19701] Call Trace: [ 835.597703][T19701] [ 835.597713][T19701] dump_stack_lvl+0x189/0x250 [ 835.597745][T19701] ? __pfx____ratelimit+0x10/0x10 [ 835.597769][T19701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 835.597796][T19701] ? __pfx__printk+0x10/0x10 [ 835.597827][T19701] ? __pfx___might_resched+0x10/0x10 [ 835.597857][T19701] should_fail_ex+0x414/0x560 [ 835.597889][T19701] should_failslab+0xa8/0x100 [ 835.597915][T19701] __kmalloc_noprof+0xdf/0x800 [ 835.597946][T19701] ? kfree+0x4d/0x680 [ 835.597971][T19701] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 835.598010][T19701] tomoyo_realpath_from_path+0xe3/0x5d0 [ 835.598044][T19701] ? tomoyo_domain+0xd8/0x130 [ 835.598069][T19701] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 835.598096][T19701] tomoyo_path_number_perm+0x1e8/0x5a0 [ 835.598126][T19701] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 835.598194][T19701] ? __fget_files+0x2a/0x420 [ 835.598233][T19701] ? __fget_files+0x3a0/0x420 [ 835.598257][T19701] ? __fget_files+0x2a/0x420 [ 835.598285][T19701] security_file_ioctl+0xcb/0x2d0 [ 835.598313][T19701] __se_sys_ioctl+0x47/0x170 [ 835.598347][T19701] do_syscall_64+0xfa/0xfa0 [ 835.598374][T19701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.598395][T19701] ? clear_bhb_loop+0x60/0xb0 [ 835.598422][T19701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.598443][T19701] RIP: 0033:0x7f3a9758f749 [ 835.598462][T19701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.598481][T19701] RSP: 002b:00007f3a984ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 835.598504][T19701] RAX: ffffffffffffffda RBX: 00007f3a977e5fa0 RCX: 00007f3a9758f749 [ 835.598520][T19701] RDX: 0000200000000140 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 835.598535][T19701] RBP: 00007f3a984ca090 R08: 0000000000000000 R09: 0000000000000000 [ 835.598548][T19701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.598562][T19701] R13: 00007f3a977e6038 R14: 00007f3a977e5fa0 R15: 00007ffc89a08608 [ 835.598597][T19701] [ 835.598608][T19701] ERROR: Out of memory at tomoyo_realpath_from_path. [ 835.838524][ T5879] usb usb3-port1: unable to enumerate USB device [ 835.974842][T19709] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5407'. [ 835.999372][T19709] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5407'. [ 836.064877][T19713] FAULT_INJECTION: forcing a failure. [ 836.064877][T19713] name failslab, interval 1, probability 0, space 0, times 0 [ 836.078486][T19713] CPU: 1 UID: 0 PID: 19713 Comm: syz.1.5409 Not tainted syzkaller #0 PREEMPT(full) [ 836.078516][T19713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 836.078530][T19713] Call Trace: [ 836.078540][T19713] [ 836.078549][T19713] dump_stack_lvl+0x189/0x250 [ 836.078582][T19713] ? __pfx____ratelimit+0x10/0x10 [ 836.078606][T19713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 836.078633][T19713] ? __pfx__printk+0x10/0x10 [ 836.078660][T19713] ? __pfx___might_resched+0x10/0x10 [ 836.078686][T19713] ? fs_reclaim_acquire+0x7d/0x100 [ 836.078713][T19713] should_fail_ex+0x414/0x560 [ 836.078744][T19713] should_failslab+0xa8/0x100 [ 836.078770][T19713] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 836.078801][T19713] ? __alloc_skb+0x255/0x430 [ 836.078830][T19713] ? napi_skb_cache_get+0x445/0x6e0 [ 836.078858][T19713] ? napi_skb_cache_get+0x151/0x6e0 [ 836.078893][T19713] __alloc_skb+0x255/0x430 [ 836.078939][T19713] ? __pfx___alloc_skb+0x10/0x10 [ 836.078972][T19713] ? netlink_autobind+0xdb/0x300 [ 836.078993][T19713] ? netlink_autobind+0x2c2/0x300 [ 836.079021][T19713] netlink_sendmsg+0x5c6/0xb30 [ 836.079051][T19713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 836.079078][T19713] ? aa_sock_msg_perm+0xf1/0x1d0 [ 836.079111][T19713] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 836.079131][T19713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 836.079154][T19713] __sock_sendmsg+0x21c/0x270 [ 836.079184][T19713] ____sys_sendmsg+0x505/0x870 [ 836.079211][T19713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 836.079243][T19713] ? import_iovec+0x74/0xa0 [ 836.079266][T19713] ___sys_sendmsg+0x21f/0x2a0 [ 836.079289][T19713] ? __pfx____sys_sendmsg+0x10/0x10 [ 836.079347][T19713] ? __fget_files+0x2a/0x420 [ 836.079371][T19713] ? __fget_files+0x3a0/0x420 [ 836.079405][T19713] __x64_sys_sendmsg+0x19b/0x260 [ 836.079429][T19713] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 836.079460][T19713] ? __pfx_ksys_write+0x10/0x10 [ 836.079495][T19713] ? do_syscall_64+0xbe/0xfa0 [ 836.079524][T19713] do_syscall_64+0xfa/0xfa0 [ 836.079549][T19713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.079571][T19713] ? clear_bhb_loop+0x60/0xb0 [ 836.079596][T19713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.079617][T19713] RIP: 0033:0x7fb5c4f8f749 [ 836.079637][T19713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.079655][T19713] RSP: 002b:00007fb5c5df3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.079678][T19713] RAX: ffffffffffffffda RBX: 00007fb5c51e5fa0 RCX: 00007fb5c4f8f749 [ 836.079697][T19713] RDX: 0000000000004000 RSI: 0000200000000380 RDI: 0000000000000003 [ 836.079709][T19713] RBP: 00007fb5c5df3090 R08: 0000000000000000 R09: 0000000000000000 [ 836.079722][T19713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.079735][T19713] R13: 00007fb5c51e6038 R14: 00007fb5c51e5fa0 R15: 00007ffcbc98d5f8 [ 836.079769][T19713] [ 836.235314][T19720] bpf: Bad value for 'gid' [ 836.389382][T19723] netlink: 'syz.1.5412': attribute type 4 has an invalid length. [ 836.397773][T19723] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5412'. [ 836.532796][T19725] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 836.809820][ T5886] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 836.979988][ T5886] usb 1-1: Using ep0 maxpacket: 8 [ 836.987069][ T5886] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 836.997399][ T5886] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 837.007482][ T5886] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 837.017702][ T5886] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 837.031135][ T5886] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 837.041250][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.099857][ T5925] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 837.258346][ T5886] usb 1-1: GET_CAPABILITIES returned 0 [ 837.264762][ T5886] usbtmc 1-1:16.0: can't read capabilities [ 837.270967][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 837.279202][ T5925] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 837.297575][ T5925] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 837.307799][ T5925] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 837.318011][ T5925] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 837.332218][ T5925] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 837.341689][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.379895][ T5821] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 837.461900][ T5950] usb 1-1: USB disconnect, device number 86 [ 837.483429][T19747] netlink: 'syz.1.5422': attribute type 4 has an invalid length. [ 837.549960][ T5821] usb 4-1: Using ep0 maxpacket: 16 [ 837.559199][ T5925] usb 3-1: GET_CAPABILITIES returned 0 [ 837.565226][ T5925] usbtmc 3-1:16.0: can't read capabilities [ 837.572015][ T5821] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 837.592684][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.608498][ T5821] usb 4-1: Product: syz [ 837.613398][ T5821] usb 4-1: Manufacturer: syz [ 837.618565][ T5821] usb 4-1: SerialNumber: syz [ 837.627904][ T5821] usb 4-1: config 0 descriptor?? [ 837.804224][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.813505][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.823251][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.823289][ T5925] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 837.832484][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.832534][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.833699][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.869251][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.878408][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.887522][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.900834][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.910013][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.919753][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.928898][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.938083][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.947483][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.958129][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.989919][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 837.996932][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.009767][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.020405][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 838.035602][ T5925] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 838.045348][ T5925] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 838.053811][ T5925] usb 2-1: Manufacturer: syz [ 838.062106][ T5925] usb 2-1: config 0 descriptor?? [ 838.153074][ T5821] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 838.163619][ T5821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 838.174188][ T5821] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 838.182297][ T5821] usb 4-1: media controller created [ 838.200838][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 838.339954][ T5886] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 838.490002][ T5925] playstation 0003:054C:0DF2.0072: unknown main item tag 0x0 [ 838.497502][ T5925] playstation 0003:054C:0DF2.0072: unknown main item tag 0x0 [ 838.505487][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 838.510872][ T5925] playstation 0003:054C:0DF2.0072: unknown main item tag 0x0 [ 838.521435][ T5925] playstation 0003:054C:0DF2.0072: unknown main item tag 0x0 [ 838.529027][ T5925] playstation 0003:054C:0DF2.0072: unknown main item tag 0x0 [ 838.541848][ T5886] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 838.551120][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.559806][ T5886] usb 1-1: Product: syz [ 838.564043][ T5886] usb 1-1: Manufacturer: syz [ 838.568682][ T5886] usb 1-1: SerialNumber: syz [ 838.573776][ T5925] playstation 0003:054C:0DF2.0072: hidraw0: USB HID v0.09 Device [syz] on usb-dummy_hcd.1-1/input0 [ 838.588886][ T5886] usb 1-1: config 0 descriptor?? [ 838.691338][ T5925] playstation 0003:054C:0DF2.0072: Invalid reportID received, expected 9 got 43 [ 838.701151][ T5925] playstation 0003:054C:0DF2.0072: Failed to retrieve DualSense pairing info: -22 [ 838.710599][ T5925] playstation 0003:054C:0DF2.0072: Failed to get MAC address from DualSense [ 838.722224][ T5925] playstation 0003:054C:0DF2.0072: Failed to create dualsense. [ 838.734511][ T5925] playstation 0003:054C:0DF2.0072: probe with driver playstation failed with error -22 [ 838.750441][ T5821] zl10353_read_register: readreg error (reg=127, ret==0) [ 838.760670][ T5821] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 838.768724][ T5821] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 838.787627][ T5821] usb 4-1: USB disconnect, device number 31 [ 838.861243][ T5821] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 838.903031][T14451] usb 2-1: USB disconnect, device number 106 [ 838.935568][T19754] fido_id[19754]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 838.997289][ T5886] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 839.007537][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 839.018325][ T5886] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 839.028213][ T5886] usb 1-1: media controller created [ 839.044850][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 839.206816][T19752] FAULT_INJECTION: forcing a failure. [ 839.206816][T19752] name failslab, interval 1, probability 0, space 0, times 0 [ 839.220073][T19752] CPU: 0 UID: 0 PID: 19752 Comm: syz.0.5424 Not tainted syzkaller #0 PREEMPT(full) [ 839.220102][T19752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 839.220116][T19752] Call Trace: [ 839.220125][T19752] [ 839.220135][T19752] dump_stack_lvl+0x189/0x250 [ 839.220167][T19752] ? __pfx____ratelimit+0x10/0x10 [ 839.220191][T19752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 839.220217][T19752] ? __pfx__printk+0x10/0x10 [ 839.220250][T19752] ? __pfx___might_resched+0x10/0x10 [ 839.220273][T19752] ? fs_reclaim_acquire+0x7d/0x100 [ 839.220300][T19752] should_fail_ex+0x414/0x560 [ 839.220333][T19752] should_failslab+0xa8/0x100 [ 839.220358][T19752] __kmalloc_noprof+0xdf/0x800 [ 839.220390][T19752] ? tomoyo_encode+0x28b/0x550 [ 839.220427][T19752] tomoyo_encode+0x28b/0x550 [ 839.220464][T19752] tomoyo_realpath_from_path+0x58d/0x5d0 [ 839.220507][T19752] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 839.220533][T19752] tomoyo_path_number_perm+0x1e8/0x5a0 [ 839.220564][T19752] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 839.220633][T19752] ? __fget_files+0x2a/0x420 [ 839.220664][T19752] ? __fget_files+0x3a0/0x420 [ 839.220687][T19752] ? __fget_files+0x2a/0x420 [ 839.220716][T19752] security_file_ioctl+0xcb/0x2d0 [ 839.220743][T19752] __se_sys_ioctl+0x47/0x170 [ 839.220777][T19752] do_syscall_64+0xfa/0xfa0 [ 839.220811][T19752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.220833][T19752] ? clear_bhb_loop+0x60/0xb0 [ 839.220859][T19752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.220879][T19752] RIP: 0033:0x7f3a9758f749 [ 839.220899][T19752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 839.220917][T19752] RSP: 002b:00007f3a984ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 839.220939][T19752] RAX: ffffffffffffffda RBX: 00007f3a977e5fa0 RCX: 00007f3a9758f749 [ 839.220956][T19752] RDX: 00002000000002c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 839.220970][T19752] RBP: 00007f3a984ca090 R08: 0000000000000000 R09: 0000000000000000 [ 839.220984][T19752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.220996][T19752] R13: 00007f3a977e6038 R14: 00007f3a977e5fa0 R15: 00007ffc89a08608 [ 839.221032][T19752] [ 839.221082][T19752] ERROR: Out of memory at tomoyo_realpath_from_path. [ 839.576367][T19760] __nla_validate_parse: 4 callbacks suppressed [ 839.576385][T19760] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5427'. [ 839.594185][ T5886] zl10353_read_register: readreg error (reg=127, ret==0) [ 839.598083][T19760] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5427'. [ 839.601373][ T5886] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 839.618900][ T5886] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 839.631802][T19760] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5427'. [ 839.632585][ T5886] usb 1-1: USB disconnect, device number 87 [ 839.650026][ T5821] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 839.723964][ T5886] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 839.750447][T19762] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5428'. [ 839.763122][T19762] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 839.789865][ T5821] usb 4-1: device descriptor read/64, error -71 [ 839.870971][T14451] usb 3-1: USB disconnect, device number 74 [ 840.029900][ T5821] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 840.179906][ T5821] usb 4-1: device descriptor read/64, error -71 [ 840.189077][T19770] netlink: 'syz.0.5431': attribute type 3 has an invalid length. [ 840.200493][T19770] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5431'. [ 840.219837][ T5886] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 840.282528][T19772] binder: 19771:19772 ioctl c0306201 200000000640 returned -22 [ 840.310561][ T5821] usb usb4-port1: attempt power cycle [ 840.367339][T19779] FAULT_INJECTION: forcing a failure. [ 840.367339][T19779] name failslab, interval 1, probability 0, space 0, times 0 [ 840.381540][T19779] CPU: 1 UID: 0 PID: 19779 Comm: syz.2.5434 Not tainted syzkaller #0 PREEMPT(full) [ 840.381562][T19779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 840.381572][T19779] Call Trace: [ 840.381579][T19779] [ 840.381585][T19779] dump_stack_lvl+0x189/0x250 [ 840.381609][T19779] ? __pfx____ratelimit+0x10/0x10 [ 840.381626][T19779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 840.381644][T19779] ? __pfx__printk+0x10/0x10 [ 840.381673][T19779] ? __pfx___might_resched+0x10/0x10 [ 840.381690][T19779] ? fs_reclaim_acquire+0x7d/0x100 [ 840.381709][T19779] should_fail_ex+0x414/0x560 [ 840.381732][T19779] should_failslab+0xa8/0x100 [ 840.381749][T19779] __kmalloc_noprof+0xdf/0x800 [ 840.381772][T19779] ? tomoyo_encode+0x28b/0x550 [ 840.381798][T19779] tomoyo_encode+0x28b/0x550 [ 840.381824][T19779] tomoyo_realpath_from_path+0x58d/0x5d0 [ 840.381854][T19779] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 840.381873][T19779] tomoyo_path_number_perm+0x1e8/0x5a0 [ 840.381894][T19779] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 840.381943][T19779] ? __fget_files+0x2a/0x420 [ 840.381964][T19779] ? __fget_files+0x3a0/0x420 [ 840.381980][T19779] ? __fget_files+0x2a/0x420 [ 840.382000][T19779] security_file_ioctl+0xcb/0x2d0 [ 840.382019][T19779] __se_sys_ioctl+0x47/0x170 [ 840.382043][T19779] do_syscall_64+0xfa/0xfa0 [ 840.382061][T19779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.382076][T19779] ? clear_bhb_loop+0x60/0xb0 [ 840.382094][T19779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.382108][T19779] RIP: 0033:0x7fd3d5b8f749 [ 840.382123][T19779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.382136][T19779] RSP: 002b:00007fd3d6ac5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 840.382152][T19779] RAX: ffffffffffffffda RBX: 00007fd3d5de5fa0 RCX: 00007fd3d5b8f749 [ 840.382163][T19779] RDX: 0000200000000640 RSI: 00000000c0306201 RDI: 0000000000000003 [ 840.382173][T19779] RBP: 00007fd3d6ac5090 R08: 0000000000000000 R09: 0000000000000000 [ 840.382183][T19779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.382192][T19779] R13: 00007fd3d5de6038 R14: 00007fd3d5de5fa0 R15: 00007ffd2518fa28 [ 840.382222][T19779] [ 840.382869][T19779] ERROR: Out of memory at tomoyo_realpath_from_path. [ 840.390874][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 840.400941][T19779] binder: 19778:19779 ioctl c0306201 200000000640 returned -22 [ 840.415239][ T5886] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 840.646175][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.656382][ T5886] usb 2-1: Product: syz [ 840.660785][ T5886] usb 2-1: Manufacturer: syz [ 840.665454][ T5821] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 840.674441][ T5886] usb 2-1: SerialNumber: syz [ 840.681923][ T5821] usb 4-1: device descriptor read/8, error -71 [ 840.690454][ T5886] usb 2-1: config 0 descriptor?? [ 840.718157][T19783] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5436'. [ 840.728767][T19783] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5436'. [ 840.738837][T19783] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5436'. [ 840.919928][ T5821] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 840.941893][ T5821] usb 4-1: device descriptor read/8, error -71 [ 841.050720][ T5821] usb usb4-port1: unable to enumerate USB device [ 841.188557][ T5886] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 841.201211][ T5886] usb 2-1: USB disconnect, device number 107 [ 841.566052][T19786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5438'. [ 841.576296][T19786] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 841.766174][T19791] binder: 19790:19791 ioctl c0306201 200000000640 returned -22 [ 841.808011][T19793] netlink: 'syz.2.5440': attribute type 3 has an invalid length. [ 841.816535][T19793] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5440'. [ 841.825711][ T5886] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 842.001162][ T5886] usb 1-1: Using ep0 maxpacket: 8 [ 842.014212][ T5886] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 842.035360][ T5886] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 842.045781][ T5886] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 842.055930][ T5886] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 842.069130][ T5886] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 842.078552][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.306381][ T5886] usb 1-1: GET_CAPABILITIES returned 0 [ 842.313234][ T5886] usbtmc 1-1:16.0: can't read capabilities [ 842.576354][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 842.576417][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 842.576476][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 842.576523][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 842.576741][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 842.576788][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 842.576830][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 842.576877][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 842.577092][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 842.577140][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 842.577188][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 842.577235][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 842.577465][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 842.577515][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 842.577558][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 842.577603][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 842.603120][ T30] audit: type=1326 audit(1763652789.748:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.2.5446" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3d5b8f749 code=0x0 [ 842.680716][T19815] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 842.726631][T19814] FAULT_INJECTION: forcing a failure. [ 842.726631][T19814] name failslab, interval 1, probability 0, space 0, times 0 [ 842.726669][T19814] CPU: 0 UID: 0 PID: 19814 Comm: syz.3.5448 Not tainted syzkaller #0 PREEMPT(full) [ 842.726700][T19814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 842.726713][T19814] Call Trace: [ 842.726722][T19814] [ 842.726731][T19814] dump_stack_lvl+0x189/0x250 [ 842.726762][T19814] ? __pfx____ratelimit+0x10/0x10 [ 842.726785][T19814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 842.726811][T19814] ? __pfx__printk+0x10/0x10 [ 842.726841][T19814] ? __pfx___might_resched+0x10/0x10 [ 842.726864][T19814] ? fs_reclaim_acquire+0x7d/0x100 [ 842.726889][T19814] should_fail_ex+0x414/0x560 [ 842.726920][T19814] should_failslab+0xa8/0x100 [ 842.726945][T19814] __kmalloc_noprof+0xdf/0x800 [ 842.726976][T19814] ? tomoyo_encode+0x28b/0x550 [ 842.727010][T19814] tomoyo_encode+0x28b/0x550 [ 842.727051][T19814] tomoyo_realpath_from_path+0x58d/0x5d0 [ 842.727084][T19814] ? tomoyo_domain+0xd8/0x130 [ 842.727108][T19814] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 842.727134][T19814] tomoyo_path_number_perm+0x1e8/0x5a0 [ 842.727163][T19814] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 842.727229][T19814] ? __fget_files+0x2a/0x420 [ 842.727257][T19814] ? __fget_files+0x3a0/0x420 [ 842.727280][T19814] ? __fget_files+0x2a/0x420 [ 842.727308][T19814] security_file_ioctl+0xcb/0x2d0 [ 842.727334][T19814] __se_sys_ioctl+0x47/0x170 [ 842.727367][T19814] do_syscall_64+0xfa/0xfa0 [ 842.727391][T19814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.727411][T19814] ? clear_bhb_loop+0x60/0xb0 [ 842.727436][T19814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.727456][T19814] RIP: 0033:0x7fc32758f749 [ 842.727473][T19814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 842.727492][T19814] RSP: 002b:00007fc328436038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 842.727514][T19814] RAX: ffffffffffffffda RBX: 00007fc3277e5fa0 RCX: 00007fc32758f749 [ 842.727529][T19814] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 842.727542][T19814] RBP: 00007fc328436090 R08: 0000000000000000 R09: 0000000000000000 [ 842.727556][T19814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.727568][T19814] R13: 00007fc3277e6038 R14: 00007fc3277e5fa0 R15: 00007ffd4546aa08 [ 842.727602][T19814] [ 842.727727][T19814] ERROR: Out of memory at tomoyo_realpath_from_path. [ 842.844652][T19821] netlink: 'syz.1.5450': attribute type 3 has an invalid length. [ 843.169888][ T5950] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 843.252522][T19832] program syz.1.5455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 843.389953][ T5950] usb 4-1: Using ep0 maxpacket: 8 [ 843.397203][ T5950] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 843.405673][ T5950] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.416063][ T5950] usb 4-1: config 0 has no interface number 0 [ 843.422335][ T5950] usb 4-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 843.436272][ T5950] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 843.446290][ T5950] usb 4-1: config 0 interface 1 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 843.457004][ T5950] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 843.472284][ T5950] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 843.481600][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 843.489655][ T5950] usb 4-1: SerialNumber: syz [ 843.497720][ T5950] usb 4-1: config 0 descriptor?? [ 843.511323][ T5821] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 843.523049][ T5950] hso 4-1:0.1: Failed to find BULK OUT ep [ 843.670045][ T5821] usb 2-1: device descriptor read/64, error -71 [ 843.716674][T19823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.726100][T19823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.738396][T14451] usb 4-1: USB disconnect, device number 36 [ 843.829902][ T52] Bluetooth: hci2: command tx timeout [ 843.909968][ T5821] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 844.039863][ T5821] usb 2-1: device descriptor read/64, error -71 [ 844.151294][ T5821] usb usb2-port1: attempt power cycle [ 844.420715][T19842] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 844.489892][ T5821] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 844.522853][ T5821] usb 2-1: device descriptor read/8, error -71 [ 844.613121][T14451] usb 1-1: USB disconnect, device number 88 [ 844.728106][T19852] __nla_validate_parse: 12 callbacks suppressed [ 844.728130][T19852] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5463'. [ 844.752787][T19852] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5463'. [ 844.764581][T19852] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5463'. [ 844.770021][ T5821] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 844.810535][ T5821] usb 2-1: device descriptor read/8, error -71 [ 844.852729][ T30] audit: type=1804 audit(1763652791.998:30): pid=19854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.5464" name="/newroot/434/file1" dev="fuse" ino=1 res=1 errno=0 [ 844.931223][ T5821] usb usb2-port1: unable to enumerate USB device [ 844.960150][T19864] program syz.3.5466 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 844.971652][ T30] audit: type=1804 audit(1763652792.118:31): pid=19857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5465" name="/newroot/182/file1" dev="fuse" ino=1 res=1 errno=0 [ 844.972538][T19857] FAULT_INJECTION: forcing a failure. [ 844.972538][T19857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.005802][T19857] CPU: 0 UID: 0 PID: 19857 Comm: syz.2.5465 Not tainted syzkaller #0 PREEMPT(full) [ 845.005833][T19857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 845.005847][T19857] Call Trace: [ 845.005856][T19857] [ 845.005866][T19857] dump_stack_lvl+0x189/0x250 [ 845.005905][T19857] ? __pfx____ratelimit+0x10/0x10 [ 845.005928][T19857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 845.005954][T19857] ? __pfx__printk+0x10/0x10 [ 845.005983][T19857] ? __might_fault+0xb0/0x130 [ 845.006022][T19857] should_fail_ex+0x414/0x560 [ 845.006047][T19857] _copy_from_user+0x2d/0xb0 [ 845.006065][T19857] core_sys_select+0x609/0xa20 [ 845.006091][T19857] ? __pfx_core_sys_select+0x10/0x10 [ 845.006127][T19857] ? __pfx_set_user_sigmask+0x10/0x10 [ 845.006155][T19857] __se_sys_pselect6+0x27a/0x300 [ 845.006177][T19857] ? __pfx___se_sys_pselect6+0x10/0x10 [ 845.006194][T19857] ? __pfx_ksys_write+0x10/0x10 [ 845.006222][T19857] ? __x64_sys_pselect6+0x21/0xf0 [ 845.006242][T19857] do_syscall_64+0xfa/0xfa0 [ 845.006263][T19857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.006280][T19857] ? clear_bhb_loop+0x60/0xb0 [ 845.006301][T19857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.006317][T19857] RIP: 0033:0x7fd3d5b8f749 [ 845.006332][T19857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 845.006347][T19857] RSP: 002b:00007fd3d6ac5038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 845.006365][T19857] RAX: ffffffffffffffda RBX: 00007fd3d5de5fa0 RCX: 00007fd3d5b8f749 [ 845.006377][T19857] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 845.006388][T19857] RBP: 00007fd3d6ac5090 R08: 0000000000000000 R09: 0000000000000000 [ 845.006398][T19857] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 845.006409][T19857] R13: 00007fd3d5de6038 R14: 00007fd3d5de5fa0 R15: 00007ffd2518fa28 [ 845.006436][T19857] [ 845.302431][T19869] CUSE: info not properly terminated [ 845.467298][T19873] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5470'. [ 845.478931][T19873] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 845.550176][ T5879] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 845.677067][T19877] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5472'. [ 845.712143][ T5879] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 845.726226][ T5879] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 845.737874][ T5879] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 845.747567][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 845.756026][ T5879] usb 3-1: SerialNumber: syz [ 845.776732][T19879] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5473'. [ 845.801120][T19879] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5473'. [ 845.810942][T19879] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5473'. [ 845.979454][ T5879] usb 3-1: 0:2 : does not exist [ 845.985041][ T5879] usb 3-1: unit 255 not found! [ 846.006070][ T5879] usb 3-1: USB disconnect, device number 75 [ 846.031755][T17969] udevd[17969]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 846.109867][ T5950] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 846.109867][ T5886] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 846.270458][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 846.271949][ T5950] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.287279][ T5950] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 846.305919][ T5950] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 846.307548][ T5886] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 846.315829][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.335504][ T5950] usb 1-1: Product: syz [ 846.339471][ T5886] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 846.341260][ T5950] usb 1-1: Manufacturer: syz [ 846.354551][ T5886] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 846.355277][ T5950] usb 1-1: SerialNumber: syz [ 846.365204][ T5886] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 846.384078][T19885] FAULT_INJECTION: forcing a failure. [ 846.384078][T19885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.385902][ T5950] cdc_mbim 1-1:1.0: skipping garbage [ 846.399452][T19885] CPU: 0 UID: 0 PID: 19885 Comm: syz.1.5476 Not tainted syzkaller #0 PREEMPT(full) [ 846.399484][T19885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 846.399510][T19885] Call Trace: [ 846.399520][T19885] [ 846.399530][T19885] dump_stack_lvl+0x189/0x250 [ 846.399567][T19885] ? __pfx____ratelimit+0x10/0x10 [ 846.399594][T19885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 846.399623][T19885] ? __pfx__printk+0x10/0x10 [ 846.399651][T19885] ? __might_fault+0xb0/0x130 [ 846.399705][T19885] should_fail_ex+0x414/0x560 [ 846.399741][T19885] _copy_from_iter+0x1cd/0x1630 [ 846.399789][T19885] ? __pfx__copy_from_iter+0x10/0x10 [ 846.399825][T19885] ? rcu_is_watching+0x15/0xb0 [ 846.399857][T19885] ? trace_kmalloc+0x1f/0xd0 [ 846.399888][T19885] ? __kmalloc_noprof+0x43e/0x800 [ 846.399920][T19885] ? rcu_read_lock_any_held+0xb3/0x120 [ 846.399951][T19885] ? kernfs_fop_write_iter+0x158/0x540 [ 846.399978][T19885] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 846.400016][T19885] kernfs_fop_write_iter+0x19b/0x540 [ 846.400058][T19885] vfs_write+0x5c9/0xb30 [ 846.400099][T19885] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 846.400131][T19885] ? __pfx_vfs_write+0x10/0x10 [ 846.400179][T19885] ? __fget_files+0x2a/0x420 [ 846.400234][T19885] ksys_write+0x145/0x250 [ 846.400277][T19885] ? __pfx_ksys_write+0x10/0x10 [ 846.400317][T19885] ? do_syscall_64+0xbe/0xfa0 [ 846.400349][T19885] do_syscall_64+0xfa/0xfa0 [ 846.400379][T19885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.400401][T19885] ? clear_bhb_loop+0x60/0xb0 [ 846.400437][T19885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.400459][T19885] RIP: 0033:0x7fb5c4f8f749 [ 846.400482][T19885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 846.400510][T19885] RSP: 002b:00007fb5c5df3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 846.400535][T19885] RAX: ffffffffffffffda RBX: 00007fb5c51e5fa0 RCX: 00007fb5c4f8f749 [ 846.400554][T19885] RDX: 000000000000006a RSI: 00002000000000c0 RDI: 0000000000000005 [ 846.400568][T19885] RBP: 00007fb5c5df3090 R08: 0000000000000000 R09: 0000000000000000 [ 846.400584][T19885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.400599][T19885] R13: 00007fb5c51e6038 R14: 00007fb5c51e5fa0 R15: 00007ffcbc98d5f8 [ 846.400638][T19885] [ 846.424468][ T5886] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 846.424504][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.671731][T19883] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 846.721592][ T5886] usb 4-1: GET_CAPABILITIES returned 0 [ 846.727184][ T5886] usbtmc 4-1:16.0: can't read capabilities [ 846.841328][T19893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5479'. [ 846.851660][T19893] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 846.948972][T19896] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5480'. [ 847.002000][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 847.002065][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 847.002303][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 847.002358][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 847.002407][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 847.002714][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 847.002765][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 847.002812][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 847.002862][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 847.003085][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 847.003138][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 847.003357][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 847.003407][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 847.003457][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 847.003691][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 847.003740][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 847.229900][ T5886] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 847.348681][T19900] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 847.361413][ T5950] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 847.377127][ T5950] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 847.389846][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 847.403939][ T5886] usb 2-1: unable to get BOS descriptor or descriptor too short [ 847.412886][ T5886] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 847.424599][ T5886] usb 2-1: can't read configurations, error -71 [ 848.099968][ T5821] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 848.126839][T19912] CUSE: info not properly terminated [ 848.269915][ T5821] usb 3-1: Using ep0 maxpacket: 16 [ 848.278951][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.290335][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.300242][ T5821] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 848.313658][ T5821] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 848.323028][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.334595][ T5821] usb 3-1: config 0 descriptor?? [ 848.479934][ T5886] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 848.633649][ T5886] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 848.644114][ T5886] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 848.656201][ T5886] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 848.665807][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 848.674200][ T5886] usb 2-1: SerialNumber: syz [ 848.755525][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 848.763375][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 848.771089][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 848.779050][ T5821] usbhid 3-1:0.0: can't add hid device: -32 [ 848.785413][ T5821] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 848.797795][ T5821] usb 3-1: USB disconnect, device number 76 [ 848.892521][ T5879] usb 4-1: USB disconnect, device number 37 [ 848.903939][ T5886] usb 2-1: 0:2 : does not exist [ 848.917827][ T5886] usb 2-1: unit 255 not found! [ 848.934533][ T5950] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 848.975685][ T5950] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 848.988382][ T5886] usb 2-1: USB disconnect, device number 113 [ 849.008094][ T5950] [ 849.010539][ T5950] ====================================================== [ 849.017603][ T5950] WARNING: possible circular locking dependency detected [ 849.024685][ T5950] syzkaller #0 Not tainted [ 849.029153][ T5950] ------------------------------------------------------ [ 849.036241][ T5950] kworker/1:6/5950 is trying to acquire lock: [ 849.042359][ T5950] ffffffff8e448520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x700 [ 849.051944][ T5950] [ 849.051944][ T5950] but task is already holding lock: [ 849.059357][ T5950] ffffffff8ecda808 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 849.060722][T18092] udevd[18092]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 849.068379][ T5950] [ 849.068379][ T5950] which lock already depends on the new lock. [ 849.068379][ T5950] [ 849.068405][ T5950] [ 849.068405][ T5950] the existing dependency chain (in reverse order) is: [ 849.068414][ T5950] [ 849.068414][ T5950] -> #7 (gdp_mutex){+.+.}-{4:4}: [ 849.111048][ T5950] lock_acquire+0x117/0x350 [ 849.116094][ T5950] __mutex_lock+0x187/0x1350 [ 849.121240][ T5950] get_device_parent+0x16f/0x3a0 [ 849.126721][ T5950] device_add+0x2e1/0xb80 [ 849.131586][ T5950] device_create+0x25b/0x2f0 [ 849.136812][ T5950] msr_device_create+0x33/0x50 [ 849.142117][ T5950] cpuhp_invoke_callback+0x445/0x860 [ 849.147963][ T5950] cpuhp_thread_fun+0x3f4/0x850 [ 849.153358][ T5950] smpboot_thread_fn+0x542/0xa60 [ 849.158953][ T5950] kthread+0x711/0x8a0 [ 849.163756][ T5950] ret_from_fork+0x599/0xb30 [ 849.168990][ T5950] ret_from_fork_asm+0x1a/0x30 [ 849.174310][ T5950] [ 849.174310][ T5950] -> #6 (cpuhp_state-up){+.+.}-{0:0}: [ 849.182027][ T5950] lock_acquire+0x117/0x350 [ 849.187093][ T5950] cpuhp_thread_fun+0x182/0x850 [ 849.192594][ T5950] smpboot_thread_fn+0x542/0xa60 [ 849.198370][ T5950] kthread+0x711/0x8a0 [ 849.203115][ T5950] ret_from_fork+0x599/0xb30 [ 849.208377][ T5950] ret_from_fork_asm+0x1a/0x30 [ 849.213791][ T5950] [ 849.213791][ T5950] -> #5 (cpu_hotplug_lock){++++}-{0:0}: [ 849.221644][ T5950] lock_acquire+0x117/0x350 [ 849.226684][ T5950] cpus_read_lock+0x42/0x160 [ 849.231800][ T5950] static_key_slow_inc+0x12/0x30 [ 849.237277][ T5950] nbd_genl_reconfigure+0x10d8/0x1a50 [ 849.243191][ T5950] genl_family_rcv_msg_doit+0x215/0x300 [ 849.249268][ T5950] genl_rcv_msg+0x60e/0x790 [ 849.254308][ T5950] netlink_rcv_skb+0x208/0x470 [ 849.259599][ T5950] genl_rcv+0x28/0x40 [ 849.264115][ T5950] netlink_unicast+0x82f/0x9e0 [ 849.269420][ T5950] netlink_sendmsg+0x805/0xb30 [ 849.274725][ T5950] __sock_sendmsg+0x21c/0x270 [ 849.279955][ T5950] ____sys_sendmsg+0x505/0x870 [ 849.285272][ T5950] ___sys_sendmsg+0x21f/0x2a0 [ 849.290482][ T5950] __x64_sys_sendmsg+0x19b/0x260 [ 849.295952][ T5950] do_syscall_64+0xfa/0xfa0 [ 849.300992][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.307413][ T5950] [ 849.307413][ T5950] -> #4 (&nsock->tx_lock){+.+.}-{4:4}: [ 849.315170][ T5950] lock_acquire+0x117/0x350 [ 849.320235][ T5950] __mutex_lock+0x187/0x1350 [ 849.325498][ T5950] nbd_queue_rq+0x257/0xf10 [ 849.330552][ T5950] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 849.336645][ T5950] __blk_mq_sched_dispatch_requests+0xdac/0x1570 [ 849.343525][ T5950] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 849.350152][ T5950] blk_mq_run_hw_queue+0x348/0x4f0 [ 849.355907][ T5950] blk_mq_dispatch_list+0xd0c/0xe00 [ 849.361662][ T5950] blk_mq_flush_plug_list+0x469/0x550 [ 849.367602][ T5950] __blk_flush_plug+0x3d3/0x4b0 [ 849.373058][ T5950] __submit_bio+0x2d3/0x5a0 [ 849.378107][ T5950] submit_bio_noacct_nocheck+0x2eb/0xa50 [ 849.384401][ T5950] block_read_full_folio+0x599/0x830 [ 849.390333][ T5950] filemap_read_folio+0x117/0x380 [ 849.395933][ T5950] do_read_cache_folio+0x358/0x590 [ 849.401592][ T5950] read_part_sector+0xb6/0x2b0 [ 849.406899][ T5950] adfspart_check_ICS+0xa4/0xa50 [ 849.412382][ T5950] bdev_disk_changed+0x75f/0x14b0 [ 849.418032][ T5950] blkdev_get_whole+0x380/0x510 [ 849.423455][ T5950] bdev_open+0x31e/0xd30 [ 849.428233][ T5950] blkdev_open+0x457/0x600 [ 849.433187][ T5950] do_dentry_open+0x7ce/0x1420 [ 849.438848][ T5950] vfs_open+0x3b/0x340 [ 849.443579][ T5950] path_openat+0x33ce/0x3d90 [ 849.448716][ T5950] do_filp_open+0x1fa/0x410 [ 849.453755][ T5950] do_sys_openat2+0x121/0x1c0 [ 849.458964][ T5950] __x64_sys_openat+0x138/0x170 [ 849.464364][ T5950] do_syscall_64+0xfa/0xfa0 [ 849.469504][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.475945][ T5950] [ 849.475945][ T5950] -> #3 (&cmd->lock){+.+.}-{4:4}: [ 849.483188][ T5950] lock_acquire+0x117/0x350 [ 849.488314][ T5950] __mutex_lock+0x187/0x1350 [ 849.493456][ T5950] nbd_queue_rq+0xc8/0xf10 [ 849.498409][ T5950] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 849.504491][ T5950] __blk_mq_sched_dispatch_requests+0xdac/0x1570 [ 849.511618][ T5950] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 849.518227][ T5950] blk_mq_run_hw_queue+0x348/0x4f0 [ 849.523874][ T5950] blk_mq_dispatch_list+0xd0c/0xe00 [ 849.529627][ T5950] blk_mq_flush_plug_list+0x469/0x550 [ 849.535541][ T5950] __blk_flush_plug+0x3d3/0x4b0 [ 849.540930][ T5950] __submit_bio+0x2d3/0x5a0 [ 849.545960][ T5950] submit_bio_noacct_nocheck+0x2eb/0xa50 [ 849.552250][ T5950] block_read_full_folio+0x599/0x830 [ 849.558179][ T5950] filemap_read_folio+0x117/0x380 [ 849.563738][ T5950] do_read_cache_folio+0x358/0x590 [ 849.569470][ T5950] read_part_sector+0xb6/0x2b0 [ 849.574777][ T5950] adfspart_check_ICS+0xa4/0xa50 [ 849.580357][ T5950] bdev_disk_changed+0x75f/0x14b0 [ 849.585921][ T5950] blkdev_get_whole+0x380/0x510 [ 849.591395][ T5950] bdev_open+0x31e/0xd30 [ 849.596286][ T5950] blkdev_open+0x457/0x600 [ 849.601249][ T5950] do_dentry_open+0x7ce/0x1420 [ 849.606650][ T5950] vfs_open+0x3b/0x340 [ 849.611362][ T5950] path_openat+0x33ce/0x3d90 [ 849.616492][ T5950] do_filp_open+0x1fa/0x410 [ 849.621638][ T5950] do_sys_openat2+0x121/0x1c0 [ 849.626848][ T5950] __x64_sys_openat+0x138/0x170 [ 849.632278][ T5950] do_syscall_64+0xfa/0xfa0 [ 849.637844][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.644457][ T5950] [ 849.644457][ T5950] -> #2 (set->srcu){.+.?}-{0:0}: [ 849.651808][ T5950] lock_sync+0xba/0x160 [ 849.656513][ T5950] __synchronize_srcu+0x96/0x3a0 [ 849.662070][ T5950] blk_throtl_init+0x298/0x410 [ 849.667469][ T5950] tg_set_conf+0x1c6/0x4b0 [ 849.672428][ T5950] cgroup_file_write+0x3a1/0x740 [ 849.678090][ T5950] kernfs_fop_write_iter+0x3af/0x540 [ 849.683924][ T5950] vfs_write+0x5c9/0xb30 [ 849.689031][ T5950] ksys_write+0x145/0x250 [ 849.693921][ T5950] do_syscall_64+0xfa/0xfa0 [ 849.698983][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.705613][ T5950] [ 849.705613][ T5950] -> #1 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 849.714542][ T5950] lock_acquire+0x117/0x350 [ 849.719695][ T5950] blk_alloc_queue+0x538/0x620 [ 849.725199][ T5950] __blk_mq_alloc_disk+0x15c/0x340 [ 849.730850][ T5950] loop_add+0x411/0xad0 [ 849.735571][ T5950] loop_init+0xd9/0x170 [ 849.740259][ T5950] do_one_initcall+0x1fb/0x870 [ 849.745649][ T5950] do_initcall_level+0x104/0x190 [ 849.751219][ T5950] do_initcalls+0x59/0xa0 [ 849.756214][ T5950] kernel_init_freeable+0x334/0x4b0 [ 849.762068][ T5950] kernel_init+0x1d/0x1d0 [ 849.766994][ T5950] ret_from_fork+0x599/0xb30 [ 849.772136][ T5950] ret_from_fork_asm+0x1a/0x30 [ 849.777445][ T5950] [ 849.777445][ T5950] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 849.784678][ T5950] validate_chain+0xb9b/0x2130 [ 849.789999][ T5950] __lock_acquire+0xab9/0xd20 [ 849.795304][ T5950] lock_acquire+0x117/0x350 [ 849.800443][ T5950] fs_reclaim_acquire+0x72/0x100 [ 849.805952][ T5950] __kmalloc_cache_noprof+0x40/0x700 [ 849.811877][ T5950] get_device_parent+0x255/0x3a0 [ 849.817612][ T5950] device_add+0x2e1/0xb80 [ 849.822576][ T5950] wwan_create_dev+0x15a/0x1f0 [ 849.827877][ T5950] wwan_create_port+0xe0/0xa20 [ 849.833172][ T5950] wdm_wwan_init+0x80/0x180 [ 849.838331][ T5950] wdm_create+0x12be/0x1720 [ 849.843577][ T5950] usb_cdc_wdm_register+0x33/0x60 [ 849.849189][ T5950] cdc_mbim_bind+0x3e1/0x640 [ 849.854412][ T5950] usbnet_probe+0xab5/0x28f0 [ 849.859688][ T5950] usb_probe_interface+0x668/0xc90 [ 849.865360][ T5950] really_probe+0x26d/0xad0 [ 849.870411][ T5950] __driver_probe_device+0x18c/0x320 [ 849.876258][ T5950] driver_probe_device+0x4f/0x240 [ 849.881824][ T5950] __device_attach_driver+0x279/0x430 [ 849.887759][ T5950] bus_for_each_drv+0x251/0x2e0 [ 849.893169][ T5950] __device_attach+0x2b8/0x430 [ 849.898476][ T5950] bus_probe_device+0x185/0x260 [ 849.903866][ T5950] device_add+0x7b6/0xb80 [ 849.908729][ T5950] usb_set_configuration+0x1a87/0x2110 [ 849.914718][ T5950] usb_generic_driver_probe+0x8d/0x150 [ 849.920719][ T5950] usb_probe_device+0x1c4/0x3c0 [ 849.926114][ T5950] really_probe+0x26d/0xad0 [ 849.931154][ T5950] __driver_probe_device+0x18c/0x320 [ 849.936985][ T5950] driver_probe_device+0x4f/0x240 [ 849.942551][ T5950] __device_attach_driver+0x279/0x430 [ 849.948450][ T5950] bus_for_each_drv+0x251/0x2e0 [ 849.953946][ T5950] __device_attach+0x2b8/0x430 [ 849.959260][ T5950] bus_probe_device+0x185/0x260 [ 849.964661][ T5950] device_add+0x7b6/0xb80 [ 849.969549][ T5950] usb_new_device+0xa39/0x1720 [ 849.974885][ T5950] hub_event+0x29b1/0x4ef0 [ 849.979874][ T5950] process_one_work+0x93a/0x15e0 [ 849.985355][ T5950] worker_thread+0x9b0/0xee0 [ 849.990492][ T5950] kthread+0x711/0x8a0 [ 849.995103][ T5950] ret_from_fork+0x599/0xb30 [ 850.000223][ T5950] ret_from_fork_asm+0x1a/0x30 [ 850.005526][ T5950] [ 850.005526][ T5950] other info that might help us debug this: [ 850.005526][ T5950] [ 850.016288][ T5950] Chain exists of: [ 850.016288][ T5950] fs_reclaim --> cpuhp_state-up --> gdp_mutex [ 850.016288][ T5950] [ 850.028301][ T5950] Possible unsafe locking scenario: [ 850.028301][ T5950] [ 850.035762][ T5950] CPU0 CPU1 [ 850.041662][ T5950] ---- ---- [ 850.047061][ T5950] lock(gdp_mutex); [ 850.051041][ T5950] lock(cpuhp_state-up); [ 850.058050][ T5950] lock(gdp_mutex); [ 850.064484][ T5950] lock(fs_reclaim); [ 850.068482][ T5950] [ 850.068482][ T5950] *** DEADLOCK *** [ 850.068482][ T5950] [ 850.076732][ T5950] 7 locks held by kworker/1:6/5950: [ 850.082039][ T5950] #0: ffff8880202a3d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x841/0x15e0 [ 850.092796][ T5950] #1: ffffc900046bfb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x868/0x15e0 [ 850.104066][ T5950] #2: ffff88802896d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 850.113064][ T5950] #3: ffff88807f14d198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 850.122331][ T5950] #4: ffff88806b989160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 850.131623][ T5950] #5: ffffffff8ef587e8 (wwan_register_lock){+.+.}-{4:4}, at: wwan_create_dev+0x1c/0x1f0 [ 850.141491][ T5950] #6: ffffffff8ecda808 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 850.150861][ T5950] [ 850.150861][ T5950] stack backtrace: [ 850.156812][ T5950] CPU: 1 UID: 0 PID: 5950 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 850.156838][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 850.156853][ T5950] Workqueue: usb_hub_wq hub_event [ 850.156879][ T5950] Call Trace: [ 850.156889][ T5950] [ 850.156898][ T5950] dump_stack_lvl+0x189/0x250 [ 850.156923][ T5950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 850.156945][ T5950] ? __pfx__printk+0x10/0x10 [ 850.156965][ T5950] ? print_lock_name+0xde/0x100 [ 850.156985][ T5950] print_circular_bug+0x2ee/0x310 [ 850.157010][ T5950] check_noncircular+0x134/0x160 [ 850.157035][ T5950] validate_chain+0xb9b/0x2130 [ 850.157058][ T5950] ? lockdep_unlock+0x89/0x120 [ 850.157074][ T5950] ? validate_chain+0x897/0x2130 [ 850.157098][ T5950] __lock_acquire+0xab9/0xd20 [ 850.157118][ T5950] ? __kmalloc_cache_noprof+0x40/0x700 [ 850.157144][ T5950] lock_acquire+0x117/0x350 [ 850.157161][ T5950] ? __kmalloc_cache_noprof+0x40/0x700 [ 850.157200][ T5950] fs_reclaim_acquire+0x72/0x100 [ 850.157216][ T5950] ? __kmalloc_cache_noprof+0x40/0x700 [ 850.157241][ T5950] __kmalloc_cache_noprof+0x40/0x700 [ 850.157267][ T5950] ? get_device_parent+0x255/0x3a0 [ 850.157290][ T5950] ? do_raw_spin_unlock+0x122/0x240 [ 850.157315][ T5950] get_device_parent+0x255/0x3a0 [ 850.157340][ T5950] device_add+0x2e1/0xb80 [ 850.157364][ T5950] wwan_create_dev+0x15a/0x1f0 [ 850.157387][ T5950] wwan_create_port+0xe0/0xa20 [ 850.157409][ T5950] ? __pfx_wwan_create_port+0x10/0x10 [ 850.157428][ T5950] ? __dev_printk+0x131/0x190 [ 850.157454][ T5950] ? _dev_info+0x10a/0x160 [ 850.157477][ T5950] ? __pfx__dev_info+0x10/0x10 [ 850.157497][ T5950] ? __pfx_usb_register_dev+0x10/0x10 [ 850.157525][ T5950] wdm_wwan_init+0x80/0x180 [ 850.157553][ T5950] wdm_create+0x12be/0x1720 [ 850.157584][ T5950] ? __pfx_cdc_mbim_wdm_manage_power+0x10/0x10 [ 850.157602][ T5950] ? __pfx_cdc_mbim_wdm_manage_power+0x10/0x10 [ 850.157621][ T5950] usb_cdc_wdm_register+0x33/0x60 [ 850.157647][ T5950] cdc_mbim_bind+0x3e1/0x640 [ 850.157666][ T5950] usbnet_probe+0xab5/0x28f0 [ 850.157692][ T5950] ? usb_unlocked_disable_lpm+0x8c/0xb0 [ 850.157716][ T5950] ? __pfx_usbnet_probe+0x10/0x10 [ 850.157740][ T5950] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 850.157758][ T5950] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 850.157775][ T5950] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 850.157802][ T5950] ? usb_disable_lpm+0x77/0x3e0 [ 850.157820][ T5950] usb_probe_interface+0x668/0xc90 [ 850.157846][ T5950] ? __pfx_usb_probe_interface+0x10/0x10 [ 850.157866][ T5950] really_probe+0x26d/0xad0 [ 850.157884][ T5950] __driver_probe_device+0x18c/0x320 [ 850.157911][ T5950] driver_probe_device+0x4f/0x240 [ 850.157928][ T5950] __device_attach_driver+0x279/0x430 [ 850.157946][ T5950] bus_for_each_drv+0x251/0x2e0 [ 850.157967][ T5950] ? __pfx___device_attach_driver+0x10/0x10 [ 850.157983][ T5950] ? __pfx_bus_for_each_drv+0x10/0x10 [ 850.158006][ T5950] __device_attach+0x2b8/0x430 [ 850.158030][ T5950] ? __pfx___device_attach+0x10/0x10 [ 850.158055][ T5950] ? do_raw_spin_unlock+0x122/0x240 [ 850.158081][ T5950] bus_probe_device+0x185/0x260 [ 850.158102][ T5950] device_add+0x7b6/0xb80 [ 850.158125][ T5950] usb_set_configuration+0x1a87/0x2110 [ 850.158156][ T5950] usb_generic_driver_probe+0x8d/0x150 [ 850.158182][ T5950] usb_probe_device+0x1c4/0x3c0 [ 850.158205][ T5950] ? __pfx_usb_probe_device+0x10/0x10 [ 850.158225][ T5950] really_probe+0x26d/0xad0 [ 850.158242][ T5950] __driver_probe_device+0x18c/0x320 [ 850.158268][ T5950] driver_probe_device+0x4f/0x240 [ 850.158284][ T5950] __device_attach_driver+0x279/0x430 [ 850.158301][ T5950] bus_for_each_drv+0x251/0x2e0 [ 850.158321][ T5950] ? __pfx___device_attach_driver+0x10/0x10 [ 850.158336][ T5950] ? __pfx_bus_for_each_drv+0x10/0x10 [ 850.158358][ T5950] __device_attach+0x2b8/0x430 [ 850.158384][ T5950] ? __pfx___device_attach+0x10/0x10 [ 850.158409][ T5950] ? do_raw_spin_unlock+0x122/0x240 [ 850.158435][ T5950] bus_probe_device+0x185/0x260 [ 850.158455][ T5950] device_add+0x7b6/0xb80 [ 850.158479][ T5950] usb_new_device+0xa39/0x1720 [ 850.158498][ T5950] ? __pfx_usb_new_device+0x10/0x10 [ 850.158514][ T5950] ? _raw_spin_unlock_irq+0x23/0x50 [ 850.158530][ T5950] ? lockdep_hardirqs_on+0x9c/0x150 [ 850.158551][ T5950] hub_event+0x29b1/0x4ef0 [ 850.158588][ T5950] ? __pfx_hub_event+0x10/0x10 [ 850.158605][ T5950] ? process_one_work+0x868/0x15e0 [ 850.158624][ T5950] ? _raw_spin_unlock_irq+0x23/0x50 [ 850.158642][ T5950] ? process_one_work+0x868/0x15e0 [ 850.158658][ T5950] process_one_work+0x93a/0x15e0 [ 850.158675][ T5950] ? __lock_acquire+0xab9/0xd20 [ 850.158699][ T5950] ? __pfx_process_one_work+0x10/0x10 [ 850.158719][ T5950] ? assign_work+0x3a1/0x410 [ 850.158737][ T5950] worker_thread+0x9b0/0xee0 [ 850.158764][ T5950] kthread+0x711/0x8a0 [ 850.158787][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 850.158804][ T5950] ? __pfx_kthread+0x10/0x10 [ 850.158826][ T5950] ? _raw_spin_unlock_irq+0x23/0x50 [ 850.158843][ T5950] ? lockdep_hardirqs_on+0x9c/0x150 [ 850.158861][ T5950] ? __pfx_kthread+0x10/0x10 [ 850.158883][ T5950] ret_from_fork+0x599/0xb30 [ 850.158901][ T5950] ? __pfx_ret_from_fork+0x10/0x10 [ 850.158921][ T5950] ? __switch_to_asm+0x39/0x70 [ 850.158944][ T5950] ? __switch_to_asm+0x33/0x70 [ 850.158966][ T5950] ? __pfx_kthread+0x10/0x10 [ 850.158988][ T5950] ret_from_fork_asm+0x1a/0x30 [ 850.159018][ T5950] [ 850.711484][ T5950] wwan wwan0: port wwan0mbim0 attached [ 850.725554][ T5950] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, b6:b8:b8:38:29:fc [ 850.744033][ T5950] usb 1-1: USB disconnect, device number 89 [ 850.753313][ T5950] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 850.811958][ T5950] wwan wwan0: port wwan0mbim0 disconnected [ 851.119824][ T5950] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 851.273335][ T5950] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 851.282559][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.291185][ T5950] usb 1-1: Product: syz [ 851.295368][ T5950] usb 1-1: Manufacturer: syz [ 851.300152][ T5950] usb 1-1: SerialNumber: syz [ 851.306360][ T5950] usb 1-1: config 0 descriptor?? [ 851.526399][ T5950] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 852.739549][T19916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.750051][T19916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.963964][ T5950] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 852.975510][ T5950] usb 1-1: USB disconnect, device number 90 [ 856.320049][ T25] block nbd1: Possible stuck request ffff888025b40000: control (read@0,1024B). Runtime 30 seconds [ 856.331971][ T25] block nbd1: Possible stuck request ffff888025b40200: control (read@1024,1024B). Runtime 30 seconds [ 856.343219][ T25] block nbd1: Possible stuck request ffff888025b40400: control (read@2048,1024B). Runtime 30 seconds [ 856.354200][ T25] block nbd1: Possible stuck request ffff888025b40600: control (read@3072,1024B). Runtime 30 seconds