last executing test programs: 8.060523398s ago: executing program 3 (id=456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x4, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x17, 0xcb}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "8ab8c8", 0x0, 0x0, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x12}}}}}, 0x0) (fail_nth: 5) 7.915639862s ago: executing program 4 (id=457): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e23, 0x3, 'lc\x00', 0x8, 0xd48, 0x55}, {@remote, 0x4e27, 0x2000, 0x3, 0x12d5c, 0x12d5c}}, 0x44) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x140f, 0x1, 0x800000, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xfffffffffffffdb8, 0x45, 'issm\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000000000)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800000000d6e5394b00", "e7198360", "f7a5c1777af05eaa"}, 0x38) sendto$inet6(r7, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r7, 0x0, 0xfdef) sendto$inet6(r7, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0ae32f", 0x11, 0x8040, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') inotify_init1(0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 7.492391259s ago: executing program 3 (id=458): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) read$FUSE(r1, &(0x7f0000002500)={0x2020}, 0x1200) 7.288552998s ago: executing program 3 (id=461): syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x88, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x2c000815}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0xa}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x9, 0x0, 0x111, 0xf}}, 0x20) shutdown(r0, 0x1) 6.840720228s ago: executing program 2 (id=464): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@caif=@dgm={0x25, 0x11}, 0x80, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='-0'], 0x6) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) setsockopt$sock_attach_bpf(r1, 0x1, 0x4a, &(0x7f0000000040), 0x4) syz_usb_connect(0x3, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x10, 0x55, 0x75, 0x10, 0xf11, 0x2030, 0xa9fd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xde, 0xd, 0x0, 0x8, [{{0x9, 0x4, 0x1f, 0xb, 0x2, 0x51, 0x1b, 0xdc, 0xfc, [], [{{0x9, 0x5, 0x8e, 0x3, 0x200, 0x3, 0x7, 0x9}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x24, 0x3, 0x3}}]}}]}}]}}, 0x0) 6.015487798s ago: executing program 4 (id=465): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0xfff, 0xfffffffa}, 0x10) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000440)={0x1, 0x204, 0xc684, 0x9}, 0x10) write$cgroup_pid(r1, &(0x7f00000004c0), 0x24) write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 5.806689542s ago: executing program 3 (id=467): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pread64(r2, &(0x7f0000000000)=""/15, 0xf, 0x80000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000023c0), 0xa0482, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xfc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000ffffff014d564b"]) unshare(0x2040400) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) r12 = socket(0x21, 0x2, 0x2) setsockopt$sock_int(r12, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r13 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r13, 0x3, r12, &(0x7f00000005c0)={0x2000a210}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r8, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r9, 0x47f5, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f00000001c0)=@arm64_core={0x6030000000100048, &(0x7f0000000000)=0x3}) 5.169971969s ago: executing program 1 (id=469): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0x7}, {0x0, 0x4}, {0x4, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd5, 0xfc, 0x200, 0xb7, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x8, 0xfff, 0xe9d, 0x2, 0x40, 0x4}}, {0x4}}]}]}, 0x68}}, 0x0) (fail_nth: 5) 4.662373698s ago: executing program 1 (id=471): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x8, 0x4e22, 0x20, 0xa, 0x0, 0x80, 0x3c}, {0x0, 0x5, 0x33, 0x200, 0xb801, 0xa6f, 0x3, 0x2a}, {0x81, 0x390b8798, 0x3, 0xdca7}, 0xfffffffe, 0x10, 0x2, 0x0, 0x1, 0x1}, {{@in6=@mcast2, 0x4d5, 0x2b}, 0xa, @in=@loopback, 0x3585, 0x4, 0x520f297193e84447, 0x2, 0x8d1, 0x73b4, 0x417c5be3}}, 0xe4) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000002440)='v2\x00ul\x00\x00\x00]\xa67\x97 \xc9\xfc|\x85\xc6\x16>\xb7\xc4\a\xa2C\xe1:\x13\x00\x00\x00\x00\x00\x00\x00\n\xaf?4\xafq\x1d\xf6(\x81\x00\x00\x00\x00\x00\x00\x00\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x85\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xc4G!mm\xec\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x00\x02\x00\x00\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\xd3O8mFC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8\x97\bmm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000340)={0x4, 0x1, 0x9, 0x3}) 4.65086689s ago: executing program 4 (id=472): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000040)=[{0x1, 0x2, 0x4, 0x1, @tick=0x3844, {0x9, 0x4}, {0x9, 0x7}, @quote={{0x7f, 0x7}, 0xd0f, &(0x7f0000000080)={0x7f, 0xff, 0x1c, 0xff, @time={0x300000, 0x8}, {0x2}, {0xf7, 0x9}, @note={0xde, 0x4, 0x1, 0xa, 0x4}}}}], 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x2, 0x200000000000001, 0x106) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 3.948542016s ago: executing program 0 (id=476): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="53df2b456239", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x4, 0x1000}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0x7}, {0x0, 0x4}, {0x4, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd5, 0xfc, 0x200, 0xb7, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x8, 0xfff, 0xe9d, 0x2, 0x40, 0x4}}, {0x4}}]}]}, 0x68}}, 0x0) 3.761867843s ago: executing program 0 (id=477): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000088a8"], 0xfdef) (fail_nth: 5) 3.74680513s ago: executing program 4 (id=478): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000480)={0xa, 0x1, 0x7}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000007b01"]) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0xb480000000000000, 0xeeef0000, 0x8000000000000000}) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x101400) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000040)={0x71b17947, 0x0, '\x00', {0x0, @bt={0x3, 0x1, 0x1, 0x2, 0x2, 0x4, 0x8, 0x1, 0x101, 0x2, 0x5, 0x34, 0x8, 0x9, 0x12, 0x2e, {0xff76, 0x2}, 0x9, 0xf}}}) 3.528511116s ago: executing program 3 (id=479): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000400)={0x4}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x8, 0x4e22, 0x20, 0xa, 0x0, 0x80, 0x3c}, {0x0, 0x5, 0x33, 0x200, 0xb801, 0xa6f, 0x3, 0x2a}, {0x81, 0x390b8798, 0x3, 0xdca7}, 0xfffffffe, 0x10, 0x2, 0x0, 0x1, 0x1}, {{@in6=@mcast2, 0x4d5, 0x2b}, 0xa, @in=@loopback, 0x3585, 0x4, 0x520f297193e84447, 0x2, 0x8d1, 0x73b4, 0x417c5be3}}, 0xe4) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000002440)='v2\x00ul\x00\x00\x00]\xa67\x97 \xc9\xfc|\x85\xc6\x16>\xb7\xc4\a\xa2C\xe1:\x13\x00\x00\x00\x00\x00\x00\x00\n\xaf?4\xafq\x1d\xf6(\x81\x00\x00\x00\x00\x00\x00\x00\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x85\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xc4G!mm\xec\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x00\x02\x00\x00\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\xd3O8mFC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8\x97\bmm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000340)={0x4, 0x1, 0x9, 0x3}) 3.52788241s ago: executing program 2 (id=480): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0xfff, 0xfffffffa}, 0x10) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000600)={[0x1000, 0x8000000000000001, 0x4, 0x1000, 0x62a2fb0, 0x7ff, 0x4, 0x3, 0x4, 0x4, 0x7, 0x9, 0x10, 0x879, 0x5, 0x6], 0x4000, 0x88001}) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r2) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x18, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x40) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000440)={0x1, 0x204, 0xc684, 0x9}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a0b1600000000000000000200000838000480340001e30c0001007061796c6f6164002400028008000440000000b7080003404000004b080002400000000008000540000000040900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) write$cgroup_pid(r1, &(0x7f00000004c0), 0x24) write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0186416, &(0x7f0000000100)={0xc151, 0x8, 0x7, 0x8, 0x7, 0x2}) 3.494241878s ago: executing program 4 (id=481): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 3.022830596s ago: executing program 4 (id=482): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x10000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x0, r2}) (fail_nth: 5) 2.880612477s ago: executing program 0 (id=483): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef096ec866400fe2de0fae4e0afaf24e6ff00fc01ebbf3470fa7c063df", 0xdc000006, 0x0, {[0x39a]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) getxattr(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)=@random={'osx.', '![\x00'}, 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xcf4e74310708dfc4, 0xc}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006000806"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.563363346s ago: executing program 0 (id=484): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000388a8"], 0xfdef) 1.532523559s ago: executing program 1 (id=485): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x80000001, 0x7) 795.724996ms ago: executing program 2 (id=486): r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x121000, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x4, 0x5, 0xda22, 0x4, 0x8}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x10, 0x9, 0x0, 0x4, 0x4}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={r1, 0x1, 0x5d, 0x3, 0x3, 0x1ff, 0x1, 0x10001, {r2, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x2, 0x22, 0x7fff, 0xffffffff, 0x4}}, &(0x7f0000000200)=0xb0) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000240)=0x2) connect$qrtr(r0, &(0x7f0000000280)={0x2a, 0x4, 0x7ffe}, 0xc) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000001540)={&(0x7f0000002000)={[{&(0x7f00000002c0)="78151172e3ce81747d7afce81b5e3f6945d5172b223a00f8c7", 0x19, 0x3}, {&(0x7f0000000300)="b93dc8dfa551e1fb2cd94b86d8d89a971ce82fc1790ea102b6af43a25ba2468b04dd90effca56e6b82b29f755285e4cd7c0a0e27def62e6185bfb1343bc737df5db1474f794a76f329a61faa45f62b6db8a75d22f5acb86da299cfb77dc5156029b303d0cecdd1bde5457eb1ad60c86a5ed3f8bea29311d6907b99375c3e5093cdb5483d46c0bc589e8bc663efba1038ecf860fecd29174e18775bb142264477caa28b1877890784220b79c57a83f19f78cbb046cef92c26aa944fb9bbec6dcc01ccfdfbe3d2d10c298e7e86a642712e6a22000e17e02067b7e723", 0xdb, 0x1}, {&(0x7f0000000400)="30c214bdad9ef536fbf29d7478a4439f36f6946a80162a420455e0d0ab66460d8e8709692ef85c81d151024878159de0cd4479ebf7c764ded506ee098fea852e90f8f6751233b458e26ffeae8a69d9013ffa8ad0533065b047806ae5e0355e43742f38a4b90c156922fa20c55227363aa1994f9a8b77bb", 0x77, 0x2}, {&(0x7f0000000480)="ba4670e4ea519178ed9ade0fb62ba1e9a153f8a8695c8024220d5fbc4e2eccb9a7cd0a3bd0701c6670a9bc38d294b6644aba7ac238d82fe85bf2fae1814298835c80f6e037c168f4bd2bcc200126a9ab9867d37071e1613445fc80a0c7f1a766a95bdde6a8096187ee69191913c67d1e946b8651e489eba126ebc19061ea39f845cf0408112f0d3950a9ff9a708dd87d90d24d918419114bf90451c5f518560ad1d591dafa81f4d93a1e755dbe35cc1df0bfc4c41e97", 0xb6, 0x2}, {&(0x7f0000000540)="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", 0x1000, 0x1}]}, 0x5, 0x3}, 0x1) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000001580), &(0x7f00000015c0)=0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000001600)={0x4, 0x0, 0x1, {0x2, @sliced={0x0, [0xd, 0x8, 0x3, 0x0, 0x2, 0xdb, 0x12, 0x8, 0x286, 0x3, 0x2, 0x2, 0x3, 0x40, 0x6c6, 0x5, 0x7fff, 0x6, 0x4, 0x87, 0x8, 0x7, 0x0, 0x1, 0x0, 0x0, 0xfff7, 0x2, 0x0, 0x2, 0xff01, 0xffff, 0x3, 0x8, 0x8, 0x3, 0xfff, 0x7, 0x6, 0xd0, 0x4, 0xffff, 0xf001, 0x1000, 0x7, 0x6, 0x1, 0x1], 0x1000}}, 0xa2e9}) r4 = socket(0x3, 0x800, 0x71) connect$unix(r0, &(0x7f0000001700)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r5 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x3, &(0x7f0000001780)) listen(r0, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001ec0)={'syztnl0\x00', &(0x7f0000001e00)={'erspan0\x00', 0x0, 0x7, 0x10, 0x8, 0xac13, {{0x1b, 0x4, 0x0, 0x8, 0x6c, 0x67, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @multicast2, {[@cipso={0x86, 0x55, 0xffffffffffffffff, [{0x0, 0xe, "91f5ef7976231192dcd6b3ed"}, {0x2, 0x3, ','}, {0x6, 0x6, "587c8b57"}, {0x5, 0xd, "6f74db04e5084d3472dd9d"}, {0x0, 0x6, "8b6c0538"}, {0x7, 0x10, "676038b2e631bc1c4a130325e267"}, {0x6, 0x8, "ae53944f2234"}, {0x0, 0x6, "8f4b66da"}, {0x6, 0x7, "6110e9d6b5"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000003480)={'syztnl2\x00', &(0x7f0000003380)={'ip_vti0\x00', 0x0, 0x10, 0x8, 0x7fff, 0x3, {{0x2a, 0x4, 0x2, 0x12, 0xa8, 0x68, 0x0, 0x62, 0x4, 0x0, @rand_addr=0x64010102, @multicast2, {[@lsrr={0x83, 0xf, 0xd5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2]}, @timestamp_prespec={0x44, 0x34, 0x44, 0x3, 0x6, [{@loopback, 0xa}, {@rand_addr=0x64010101, 0x400}, {@multicast1, 0x7}, {@multicast2, 0x79}, {@multicast2, 0x8}, {@broadcast, 0xffffff99}]}, @cipso={0x86, 0x11, 0xffffffffffffffff, [{0x5, 0xb, "dcb3debe5b5baf551d"}]}, @generic={0x44, 0x2}, @end, @generic={0x83, 0xe, "a5a6146cb2859a986845be64"}, @timestamp_prespec={0x44, 0xc, 0xfc, 0x3, 0x1, [{@multicast1, 0x9}]}, @timestamp={0x44, 0x20, 0x1e, 0x0, 0xb, [0x1, 0x5, 0x5, 0x1, 0x6, 0x3, 0x4]}]}}}}}) sendmmsg$inet(r6, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000017c0)="c243ef9ff32627a9da3b777798d8592655e86ec30af39841c2a109adf7c646735a9bd7471248cfd9ef7da32f73493cfb351da95094105f73a7f2b8320c4c6b39faf8c1df3c192b8ae2371bc3b2b885509b91b40eff6e1104af78aca293552f8623412a2377db7f457dbd58854fa5444a72585d340b6f773cbbbbe519147dec4e0bea020d3e1e1cc5e59f2c7fce641545c8753d62d0025ff39e0069744f8ee0c998e2f3f9494c2d56146ec286db445996517b4470763dd08acd6f63dc8dd2122c6e9168df80ef1ea1863489ffd1e5c21c1b28944cedcf", 0xd6}, {&(0x7f00000018c0)="7a119a35acf6c4e54e9d88245bf3", 0xe}, {&(0x7f0000001900)="0b6071fc24197bbd306d0df7b9ffdcf162f8f0cf2f05be2650706d645a4b01b4133b4a67d0c3c087f29a7f2de769a1323b5ded781a774b4634c671aeb18e4302396ffad43aa1180737a9b07f0761e39998fd99761122246688f131f58857cf255c49ea5facf2f7b8c3e7a4212fa440f0f3fd6535659f8e5157ffc38dec45fe39c736", 0x82}, {&(0x7f00000019c0)="2dd7fae3870240d6309745963710a1746c9c7a75e24c0cc2d2ec9e5ab09be2a8017fa2a19c39544db294bc170b9facab1591828bf29606c24d832e965b115cbaadf96965dac310f0d242e06c48fdae4d4c34379df9bb1242239ef72d70a9e8dc0e4c9d6e84f58288c942d12d998870ec0781d22508d6a71adac400a7835bf03451510ecf7fa124a7088cacc174bdea9649f2466b04cbd90c65945d65c344f61ffdd07251ba3b0ef913c7add81635727017f88a2922472680ecfe577d205fcbfe2407d1d7f94d856409485f03d40f2473a1f5476dcb2650d193f13fe9fe", 0xdd}, {&(0x7f0000001ac0)="fd17a3e94d3b054f8e0b1c3471f7b9356f35e758b60ecccb09dfb8678cd5bf5cba87fd1562f35ccfafe708e7befd753437c9ae42f5d0d11ac6ad3a750a814c9da98a46cb0af2ab8069c4a5d167fd071ca2f94182ddb664de30eab07fcac325fc46a645918a61a70a71c52fd02ab140e3ddee238ddcb542566e909a66bcee41f9c0a5926ca969324ffdde841041ed9637e8f94eabada212476e696e51fbfe9eb5b47dbe35f60a369ab8da2d75f7123bb9cc33440719ccce7abb764f329cb91680e8c536b6e2429c63d9d5f8", 0xcb}, {&(0x7f0000001bc0)="56228e8e3852d1a95ab07f4751adaafbf88f8b408cd717f202c58e670ff1b3cc558fe373a559fc544092c38c54bf75d0343eef5f26b47bc2e04fae845438d9cdc4698923671357b1955050431e587fd9c77df5f62881d7e3f6366d3c1b155405f036a701bbc38711a4eb12b12077e29337164c3f0058f274d733fe6046380e80926ec10f1237fc007b024f8e20eebbc6a9fa135bbd29", 0x96}, {&(0x7f0000001c80)="091f20deade50029c48b98fe4554184ded09ab8d66ffeb8e6ebad8d1ab8f1d8c73edb427d2765d62ad953a1b75b8b52b053b9c3935ac249597b78b9aebe401efc4dc2a8079f0a8aab3473708b1cbfccc831ee671898653cce8b236991ecb29bda0bc9ce397304a0663b51f623072f484bf02d00368e3dc72646e2cfdbc47543223f25175ea351ae800105e6695adbe0cdc898e0e934ca300a6e0f24225fa20fb491f704dc87c5f677e3036ca2a7f54ce46e30cea187ccfedc139fc74214f65aaa918fe1b348df149de7680204bc9fd64e334c4ba3b752003143e78d8b5100c75ae3471b5f4", 0xe5}, {&(0x7f0000001d80)="d80c94accb7f", 0x6}], 0x8, &(0x7f0000003000)=[@ip_retopts={{0x80, 0x0, 0x7, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x22, [@local, @multicast1, @multicast1, @loopback]}, @noop, @end, @timestamp={0x44, 0x1c, 0xf, 0x0, 0xe, [0x3, 0x3, 0xe, 0x1, 0xfffffff6, 0x3]}, @timestamp_addr={0x44, 0x3c, 0x40, 0x1, 0x7, [{@multicast1, 0x3}, {@remote, 0x80000000}, {@remote, 0x2}, {@broadcast, 0x10001}, {@local, 0x800000}, {@multicast1, 0x1000}, {@rand_addr=0x64010102, 0x3}]}]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r7, @multicast1, @local}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x10001}}, @ip_retopts={{0x74, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x2e, [@remote, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}]}, @cipso={0x86, 0x1b, 0x2, [{0x2, 0x2}, {0x6, 0x6, "047344c5"}, {0x0, 0xd, "d33488f7956fa5985fa1f1"}]}, @noop, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0x5f, [@dev={0xac, 0x14, 0x14, 0x28}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x28, [@remote]}, @timestamp_prespec={0x44, 0x1c, 0xb7, 0x3, 0x8, [{@remote, 0x7}, {@loopback, 0x2}, {@local, 0x9}]}]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x5}}, @ip_ttl={{0x10, 0x0, 0x2, 0x8b}}], 0x15c}}, {{&(0x7f0000001f00)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001fc0)=[{&(0x7f0000001f40)="e78bd16c64ea0f7ce6749700b204424f83beb973fcac2dabfe75b72215aa860474ec75f1e67db49f63f5de4e48c3592743753bd8c9f7bd34a74a27ba36b90bcf94", 0x41}], 0x1, &(0x7f0000003180)=[@ip_retopts={{0xe0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0xdd, 0x3, 0x7, [{@broadcast, 0x1e37}, {@private=0xa010101, 0x4}, {@multicast1, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x6}, {@rand_addr=0x64010101, 0xb}, {@private=0xa010102, 0x8}]}, @timestamp={0x44, 0x14, 0x5e, 0x0, 0x9, [0x0, 0x1, 0x7, 0x80000000]}, @rr={0x7, 0x1b, 0xf5, [@broadcast, @empty, @empty, @empty, @private=0xa010101, @local]}, @timestamp_addr={0x44, 0x34, 0xd8, 0x1, 0x4, [{@remote, 0x4}, {@broadcast, 0x3}, {@multicast1, 0x7}, {@broadcast, 0x4}, {@broadcast, 0x6}, {@broadcast, 0x3}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0x9a, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@multicast2, 0x7f}, {@private=0xa010101, 0xcfee}, {@rand_addr=0x64010100, 0x4}, {@rand_addr=0x64010101, 0xb5}, {@broadcast, 0x400}]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x902}}, @ip_ttl={{0x10}}, @ip_ttl={{0x10, 0x0, 0x2, 0x6cfe}}], 0x110}}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f00000032c0)="bbc5f4337093877b184b4584839df2681d7b7a5573bcf3dad1427363525024994072f7ae659151fde9cc87b698628dc73da4de0eae696643b1f0d13cc88a8ae1263ba54fc6ba88460dbaeefb7cdcbefa98acaaffe811003220a55a38ffeb23757851bac0ee7fe196717261fd4624f1b8b60ad93fd46209", 0x77}], 0x1, &(0x7f00000034c0)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x72}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r8, @remote, @multicast1}}}], 0x38}}], 0x3, 0x40891) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000003580), r4) write$tcp_congestion(r6, &(0x7f00000035c0)='dctcp\x00', 0x6) r10 = syz_io_uring_complete(0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r10, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000036c0)={&(0x7f0000003640)={0x4c, r9, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfe7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040881}, 0x4000) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000003740), r11) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000005a80)={0x0, 0x0}, &(0x7f0000005ac0)=0xc) lstat(&(0x7f0000005b00)='./file0\x00', &(0x7f0000005b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r10, 0xc0186405, &(0x7f0000005c40)={0x8, 0x8, {r5}, {0x0}, 0x7, 0x40}) syz_fuse_handle_req(r10, &(0x7f0000003780)="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", 0x2000, &(0x7f000000af00)={&(0x7f0000005780)={0x50, 0x0, 0xdb3, {0x7, 0x2b, 0x3, 0x14000a0, 0x81, 0x4, 0x3905, 0xaa8, 0x0, 0x0, 0x8, 0x7ff}}, &(0x7f0000005800)={0x18, 0x0, 0x0, {0x200000000}}, &(0x7f0000005840)={0x18, 0x0, 0x8, {0xdf}}, &(0x7f0000005880)={0x18, 0xfffffffffffffff5, 0x893b, {0xa9}}, &(0x7f00000058c0)={0x18, 0x0, 0x7ff, {0x1}}, &(0x7f0000005900)={0x28, 0x0, 0x3, {{0x7fff, 0x1000, 0x1, r5}}}, &(0x7f0000005940)={0x60, 0xffffffffffffffda, 0xe, {{0x8, 0x5, 0x8000000000000001, 0xc2, 0x3, 0x2, 0x6, 0x10}}}, &(0x7f00000059c0)={0x18, 0x0, 0x0, {0x5}}, &(0x7f0000005a00)={0x14, 0x0, 0x7, {'#\\(\x00'}}, &(0x7f0000005a40)={0x20, 0xffffffffffffffda, 0x100000001}, &(0x7f0000005bc0)={0x78, 0x0, 0x7ff, {0x8, 0x4136259c, 0x0, {0x5, 0xffff, 0x80000001, 0x5, 0x7b6b, 0x9, 0x9, 0x1, 0x3ff, 0x1000, 0xc45, r12, r13, 0xa, 0x2}}}, &(0x7f0000005cc0)={0x90, 0x0, 0x0, {0x2, 0x0, 0xf0f, 0x2, 0x3, 0x0, {0x6, 0x5, 0x100000000, 0xa, 0x3ff, 0x5, 0x80, 0x80000001, 0xc2, 0x6000, 0x9, r14, 0x0, 0x5, 0xde}}}, &(0x7f0000005d80)={0x50, 0x0, 0x5, [{0x3, 0x2, 0x5, 0xffff, '\\#$[-'}, {0x1, 0x7fffffffffffffff, 0x8, 0x80000001, 'ethtool\x00'}]}, &(0x7f0000008680)={0x5b0, 0x0, 0x6, [{{0x2, 0x3, 0x4, 0x9, 0x4, 0x9, {0x0, 0x0, 0x6ab4e01c, 0x1, 0x80000001, 0xffff, 0x5, 0x0, 0x8, 0x6000, 0x3, 0x0, 0x0, 0x0, 0x7}}, {0x4, 0xe, 0x1, 0x5, '\x00'}}, {{0x0, 0x1, 0xc, 0x1ff, 0x5, 0x100, {0x6, 0x1, 0x8, 0x1, 0x0, 0xf, 0x4, 0x1fe00, 0xe642, 0x8000, 0xea, 0x0, 0x0, 0x1, 0x1}}, {0x4, 0x51, 0x0, 0x16}}, {{0x1, 0x2, 0x81, 0x6, 0x7, 0x4, {0x2, 0x716e, 0x4, 0x7, 0x9, 0x1, 0x4, 0x4, 0x7ff, 0x6000, 0x40, 0xee01, 0x0, 0x7, 0x6}}, {0x4, 0xfffffffffffffffa, 0x5, 0x67d, '.]$$:'}}, {{0x6, 0x0, 0x22c6, 0x8, 0xfffffffa, 0x9, {0x3, 0x9, 0x480000000000, 0x9, 0x8000000000000000, 0x81, 0xe0, 0x4, 0x1, 0x4000, 0x1fffe0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x9, 0x8, 0x2, 'ip_vti0\x00'}}, {{0x6, 0x2, 0x9, 0x1ff, 0x5a97, 0xe, {0x5, 0x844c, 0x100000001, 0x50be65e0, 0x2c, 0x1, 0x5, 0x10001, 0x7, 0x8000, 0xf8a1, 0x0, 0x0, 0x1000, 0x10}}, {0x4, 0x0, 0x8, 0x6, 'erspan0\x00'}}, {{0x6, 0x2, 0x10, 0x72a8, 0x2000000, 0x4, {0x4, 0x6, 0x0, 0x200, 0x2b, 0x2c, 0xcf1, 0x401, 0xf5, 0x8000, 0x80, 0x0, 0x0, 0xed48, 0x3}}, {0x5, 0x2b77, 0x9, 0x4, '-./.\'.-+['}}, {{0x6, 0x2, 0xffffffffffffdf11, 0xfffffffffffffffe, 0x6, 0x4, {0x6, 0x0, 0x2, 0xc80c, 0xab, 0x1, 0xb3, 0x747780f6, 0x8, 0x2000, 0x9, 0x0, 0x0, 0x5, 0xc02}}, {0x5, 0x40, 0x4, 0x5, ']*)W'}}, {{0x0, 0x2, 0x7af, 0xc00, 0x100, 0x8, {0x2, 0x2, 0x9, 0x1, 0x8000, 0x1, 0x9b, 0xd, 0x5, 0xa000, 0x4, 0xffffffffffffffff, 0x0, 0x4, 0x7ff}}, {0x1, 0x7, 0x8, 0x6, 'devlink\x00'}}, {{0x3, 0x3, 0x688, 0x3, 0x85ff, 0x1, {0x6, 0x3, 0x4, 0x4, 0x1200000, 0x5b4e, 0x0, 0xee46, 0x7fffffff, 0x2000, 0x8001, 0x0, 0x0, 0x1, 0x7fff}}, {0x5, 0x0, 0x5, 0x7fff, '%+^/^'}}]}, &(0x7f000000ac80)={0xa0, 0x0, 0x0, {{0x0, 0x1, 0x9, 0x6, 0x1, 0x8, {0x1, 0xd9, 0x85, 0x0, 0x43fc3f59, 0x8, 0x9, 0x4, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x101, 0x7}}, {0x0, 0x13}}}, &(0x7f000000ad40)={0x20, 0x0, 0x2, {0x80000000, 0x0, 0x2, 0x4}}, &(0x7f000000adc0)={0x130, 0x0, 0x4, {0x7fd, 0x55d64375, 0x0, '\x00', {0x4000, 0xee92, 0x9dd8, 0xffff, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0xe07, 0x8, 0x100000001, 0x3, {0x159, 0x8}, {0x5, 0x9d3}, {0x2}, {0x5, 0x7}, 0xa, 0xa44, 0x2, 0x5}}}}) 773.395644ms ago: executing program 1 (id=487): creat(&(0x7f0000000000)='./file0\x00', 0x60) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c5ba868878d6ff3a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x8, {0x0, 0x3572111cb2a712f5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x280, 0x2) (fail_nth: 5) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 695.921306ms ago: executing program 2 (id=488): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1900, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000040), 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setns(r2, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x9, 0x72}, 0x49) 678.897021ms ago: executing program 3 (id=489): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 481.806783ms ago: executing program 0 (id=490): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1000000}}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000100)=[{0x7fff, 0x68, 0x7, 0xc}, {0x9, 0x5, 0x4, 0x766}]}) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0xc5d116e9899720b9, {{0x42}}}, 0x10) r4 = dup(r1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'veth1_to_hsr\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000088a8"], 0xfdef) 233.8842ms ago: executing program 1 (id=491): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0808001000ffff2dbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000631803001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r1, @ANYBLOB="080004000808"], 0x4c}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) 233.391136ms ago: executing program 2 (id=492): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 53.446937ms ago: executing program 2 (id=493): r0 = socket(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}}) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='system.advise\x00', 0x0, 0xfffffffffffffe80) syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x16004818, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000006400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000280)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0x3f, "a5f95af55442bc5c852dc68b07e591cc97e6f80de8165e8c3e4dbbbf473840ecab40d2299ae7d69309c5cb6658aeca81791871304bbe2de963d712e458c2f6"}, &(0x7f00000002c0)=0x47) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={r5, 0x9}, 0x8) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc89e00360db70100000040fad95667e006dcabced7ad654fac9609f4fb", 0xd8}], 0x1}, 0x4004) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 618.098µs ago: executing program 0 (id=494): openat$sequencer2(0xffffff9c, &(0x7f0000000240), 0x11, 0x0) 0s ago: executing program 1 (id=495): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x12280) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x800000a}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) read(r2, &(0x7f0000001480)=""/4096, 0x38) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x8001, 0x0, 0x0) kernel console output (not intermixed with test programs): 139.318652][ T6776] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.318678][ T6776] RIP: 0023:0xf701d539 [ 139.318694][ T6776] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 139.318710][ T6776] RSP: 002b:00000000f53ec490 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 139.318730][ T6776] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53ec4e0 [ 139.318743][ T6776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73b5ff4 [ 139.318754][ T6776] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.318765][ T6776] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 139.318776][ T6776] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.318803][ T6776] [ 139.327825][ T5921] usb 2-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=e8.e7 [ 139.361463][ T6778] FAULT_INJECTION: forcing a failure. [ 139.361463][ T6778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.529449][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.650472][ T6778] CPU: 1 UID: 0 PID: 6778 Comm: syz.4.230 Not tainted syzkaller #0 PREEMPT(full) [ 139.650495][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 139.650507][ T6778] Call Trace: [ 139.650514][ T6778] [ 139.650523][ T6778] dump_stack_lvl+0x189/0x250 [ 139.650554][ T6778] ? __pfx____ratelimit+0x10/0x10 [ 139.650578][ T6778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.650606][ T6778] ? __pfx__printk+0x10/0x10 [ 139.650636][ T6778] should_fail_ex+0x414/0x560 [ 139.650671][ T6778] _copy_to_user+0x31/0xb0 [ 139.650697][ T6778] simple_read_from_buffer+0xe1/0x170 [ 139.650729][ T6778] proc_fail_nth_read+0x1b3/0x220 [ 139.650757][ T6778] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.650784][ T6778] ? rw_verify_area+0x2a6/0x4d0 [ 139.650810][ T6778] ? __lock_acquire+0xab9/0xd20 [ 139.650827][ T6778] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.650853][ T6778] vfs_read+0x200/0xa30 [ 139.650878][ T6778] ? fdget_pos+0x247/0x320 [ 139.650901][ T6778] ? __pfx___mutex_lock+0x10/0x10 [ 139.650929][ T6778] ? __pfx_vfs_read+0x10/0x10 [ 139.650957][ T6778] ? __fget_files+0x2a/0x420 [ 139.650980][ T6778] ? __fget_files+0x3a0/0x420 [ 139.650997][ T6778] ? __fget_files+0x2a/0x420 [ 139.651024][ T6778] ksys_read+0x145/0x250 [ 139.651050][ T6778] ? exc_page_fault+0x82/0x100 [ 139.651075][ T6778] ? __pfx_ksys_read+0x10/0x10 [ 139.651105][ T6778] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 139.651133][ T6778] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.651161][ T6778] __do_fast_syscall_32+0xb6/0x2b0 [ 139.651189][ T6778] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.651218][ T6778] do_fast_syscall_32+0x34/0x80 [ 139.651246][ T6778] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.651269][ T6778] RIP: 0023:0xf7f23539 [ 139.651286][ T6778] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 139.651303][ T6778] RSP: 002b:00000000f5416590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 139.651324][ T6778] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5416620 [ 139.651338][ T6778] RDX: 000000000000000f RSI: 00000000f73b5ff4 RDI: 0000000000000000 [ 139.651350][ T6778] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 139.651372][ T6778] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 139.651390][ T6778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.651417][ T6778] [ 139.957401][ T5921] usb 2-1: Product: syz [ 139.961713][ T5921] usb 2-1: Manufacturer: syz [ 139.967412][ T5921] usb 2-1: SerialNumber: syz [ 140.060704][ T30] audit: type=1326 audit(1761672615.802:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 140.084934][ T30] audit: type=1326 audit(1761672615.802:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 140.130680][ T30] audit: type=1326 audit(1761672615.802:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 140.157788][ T30] audit: type=1326 audit(1761672615.802:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 140.181844][ T30] audit: type=1326 audit(1761672615.802:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 140.203677][ T30] audit: type=1326 audit(1761672615.812:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 140.257832][ T6784] capability: warning: `syz.4.232' uses deprecated v2 capabilities in a way that may be insecure [ 140.272252][ T6785] Cannot find del_set index 0 as target [ 140.282104][ T30] audit: type=1326 audit(1761672615.812:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 140.318907][ T6781] IPVS: Scheduler module ip_vs_ not found [ 140.341540][ T5921] rndis_host 2-1:102.21: More than one union descriptor, skipping ... [ 140.401106][ T5921] usb 2-1: bad CDC descriptors [ 140.450163][ T6790] netlink: 100 bytes leftover after parsing attributes in process `syz.2.233'. [ 140.457994][ T5921] cdc_acm 2-1:102.21: More than one union descriptor, skipping ... [ 140.460298][ T30] audit: type=1326 audit(1761672615.812:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 140.516494][ T6790] netlink: 100 bytes leftover after parsing attributes in process `syz.2.233'. [ 140.517888][ T5921] usb 2-1: USB disconnect, device number 5 [ 140.566075][ T30] audit: type=1326 audit(1761672615.812:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 140.826642][ T6798] bond0: Removing last arp target with arp_interval on [ 140.838708][ T6798] bond0: entered allmulticast mode [ 140.844337][ T6798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.271139][ T6812] syz.4.237 uses obsolete (PF_INET,SOCK_PACKET) [ 141.589599][ T6821] program syz.0.240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.821340][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 141.902620][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 142.458922][ T6834] EXT4-fs: Conflicting test_dummy_encryption options [ 143.067588][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 143.127762][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 143.300828][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 143.368526][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 143.376513][ T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 140, changing to 11 [ 143.405953][ T9] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.428200][ T10] usb 1-1: config 1 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.450827][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.461030][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 143.471311][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 143.582769][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.602368][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.40 [ 143.642627][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.663841][ T9] usb 5-1: config 0 descriptor?? [ 143.693447][ T10] usb 1-1: Product: syz [ 143.712419][ T10] usb 1-1: Manufacturer: ᭤鿋ᶂ쭄㥙_ჵ [ 143.729466][ T10] usb 1-1: SerialNumber: syz [ 144.146600][ T9] corsair 0003:1B1C:1B09.0003: hidraw0: USB HID v0.02 Device [HID 1b1c:1b09] on usb-dummy_hcd.4-1/input0 [ 144.872524][ T5922] usb 5-1: USB disconnect, device number 9 [ 144.967365][ T10] usbhid 1-1:1.0: can't add hid device: -71 [ 144.973393][ T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 145.069055][ T10] usb 1-1: USB disconnect, device number 6 [ 145.325435][ T6883] EXT4-fs: Conflicting test_dummy_encryption options [ 146.054947][ T6873] hub 9-0:1.0: USB hub found [ 146.061221][ T6873] hub 9-0:1.0: 1 port detected [ 146.636641][ T6880] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 148.217353][ T5922] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 148.407044][ T5922] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 148.456115][ T5922] usb 4-1: config 0 has no interface number 0 [ 148.500446][ T5922] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 148.527761][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.563920][ T5922] usb 4-1: Product: syz [ 148.581578][ T5922] usb 4-1: Manufacturer: syz [ 148.597315][ T5922] usb 4-1: SerialNumber: syz [ 148.614584][ T5922] usb 4-1: config 0 descriptor?? [ 148.842935][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'. [ 149.106310][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 149.106327][ T30] audit: type=1326 audit(1761672624.862:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 149.107648][ T5922] usb 4-1: Firmware: major: 22, minor: 220, hardware type: UNKNOWN (68) [ 149.154589][ T30] audit: type=1326 audit(1761672624.862:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 149.183241][ T30] audit: type=1326 audit(1761672624.862:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 149.205064][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.230028][ T30] audit: type=1326 audit(1761672624.862:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 149.251840][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.284055][ T30] audit: type=1326 audit(1761672624.862:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=402 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 149.306029][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.330262][ T5922] usb 4-1: no permanent extended address found, random address set [ 149.337595][ T30] audit: type=1326 audit(1761672624.862:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 149.338597][ T5922] usb 4-1: atusb_probe: initialization failed, error = -524 [ 149.426341][ T30] audit: type=1326 audit(1761672624.862:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 149.554962][ T5922] atusb 4-1:0.128: probe with driver atusb failed with error -524 [ 149.603137][ T30] audit: type=1326 audit(1761672624.862:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 149.621994][ T5922] usb 4-1: USB disconnect, device number 14 [ 149.625362][ T5923] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 149.680967][ T30] audit: type=1326 audit(1761672624.862:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=453 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 149.707385][ T30] audit: type=1326 audit(1761672624.862:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 149.868974][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 149.886910][ T5923] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 149.906360][ T5923] usb 1-1: config 0 has no interface number 0 [ 149.917669][ T5923] usb 1-1: config 0 interface 12 has no altsetting 0 [ 149.930768][ T5923] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 149.946151][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.955234][ T5923] usb 1-1: Product: syz [ 149.960685][ T5923] usb 1-1: Manufacturer: syz [ 149.965458][ T5923] usb 1-1: SerialNumber: syz [ 150.159111][ T5924] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 150.230258][ T6935] hub 9-0:1.0: USB hub found [ 150.237298][ T6935] hub 9-0:1.0: 1 port detected [ 150.378331][ T5923] usb 1-1: config 0 descriptor?? [ 150.410949][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 150.429275][ T5924] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 150.538418][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.559666][ T5924] usb 3-1: Product: syz [ 150.574083][ T5924] usb 3-1: Manufacturer: syz [ 150.597070][ T5924] usb 3-1: SerialNumber: syz [ 150.616573][ T5924] usb 3-1: config 0 descriptor?? [ 150.834414][ T5924] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 151.043237][ T6942] FAULT_INJECTION: forcing a failure. [ 151.043237][ T6942] name failslab, interval 1, probability 0, space 0, times 0 [ 151.081881][ T6942] CPU: 1 UID: 0 PID: 6942 Comm: syz.3.269 Not tainted syzkaller #0 PREEMPT(full) [ 151.081900][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 151.081909][ T6942] Call Trace: [ 151.081914][ T6942] [ 151.081919][ T6942] dump_stack_lvl+0x189/0x250 [ 151.081944][ T6942] ? __pfx____ratelimit+0x10/0x10 [ 151.081961][ T6942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.081979][ T6942] ? __pfx__printk+0x10/0x10 [ 151.082000][ T6942] ? __pfx___might_resched+0x10/0x10 [ 151.082019][ T6942] ? fs_reclaim_acquire+0x7d/0x100 [ 151.082053][ T6942] should_fail_ex+0x414/0x560 [ 151.082087][ T6942] should_failslab+0xa8/0x100 [ 151.082103][ T6942] __kmalloc_noprof+0xcb/0x7f0 [ 151.082121][ T6942] ? ethnl_default_set_doit+0x168/0x890 [ 151.082139][ T6942] ethnl_default_set_doit+0x168/0x890 [ 151.082153][ T6942] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 151.082169][ T6942] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 151.082190][ T6942] genl_family_rcv_msg_doit+0x215/0x300 [ 151.082210][ T6942] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 151.082234][ T6942] ? bpf_lsm_capable+0x9/0x20 [ 151.082250][ T6942] ? security_capable+0x7e/0x2e0 [ 151.082271][ T6942] genl_rcv_msg+0x60e/0x790 [ 151.082290][ T6942] ? __pfx_genl_rcv_msg+0x10/0x10 [ 151.082305][ T6942] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 151.082320][ T6942] ? __asan_memcpy+0x40/0x70 [ 151.082336][ T6942] ? __pfx_ref_tracker_free+0x10/0x10 [ 151.082354][ T6942] netlink_rcv_skb+0x208/0x470 [ 151.082372][ T6942] ? __lock_acquire+0xab9/0xd20 [ 151.082384][ T6942] ? __pfx_genl_rcv_msg+0x10/0x10 [ 151.082401][ T6942] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 151.082432][ T6942] ? down_read+0x1ad/0x2e0 [ 151.082452][ T6942] genl_rcv+0x28/0x40 [ 151.082466][ T6942] netlink_unicast+0x82f/0x9e0 [ 151.082489][ T6942] ? __pfx_netlink_unicast+0x10/0x10 [ 151.082508][ T6942] ? netlink_sendmsg+0x642/0xb30 [ 151.082519][ T6942] ? skb_put+0x11b/0x210 [ 151.082533][ T6942] netlink_sendmsg+0x805/0xb30 [ 151.082553][ T6942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.082567][ T6942] ? __import_iovec+0x5d4/0x7f0 [ 151.082581][ T6942] ? aa_sock_msg_perm+0xf1/0x1d0 [ 151.082601][ T6942] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 151.082613][ T6942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.082626][ T6942] __sock_sendmsg+0x21c/0x270 [ 151.082645][ T6942] ____sys_sendmsg+0x505/0x830 [ 151.082662][ T6942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.082685][ T6942] ___sys_sendmsg+0x21f/0x2a0 [ 151.082700][ T6942] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.082735][ T6942] ? __fget_files+0x2a/0x420 [ 151.082747][ T6942] ? __fget_files+0x3a0/0x420 [ 151.082765][ T6942] __sys_sendmsg+0x164/0x220 [ 151.082780][ T6942] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.082805][ T6942] ? __pfx_ksys_write+0x10/0x10 [ 151.082825][ T6942] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 151.082844][ T6942] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.082862][ T6942] __do_fast_syscall_32+0xb6/0x2b0 [ 151.082881][ T6942] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.082902][ T6942] do_fast_syscall_32+0x34/0x80 [ 151.082920][ T6942] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.082936][ T6942] RIP: 0023:0xf70cd539 [ 151.082948][ T6942] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 151.082959][ T6942] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 151.082973][ T6942] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000540 [ 151.082982][ T6942] RDX: 0000000000088010 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.082989][ T6942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.082996][ T6942] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 151.083004][ T6942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.083023][ T6942] [ 151.460734][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.593716][ T6950] EXT4-fs: Conflicting test_dummy_encryption options [ 151.945135][ T5924] gspca_sunplus: reg_w_riv err -110 [ 151.956334][ T5924] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 152.038338][ T5924] usb 3-1: USB disconnect, device number 11 [ 152.288770][ T6957] syzkaller0: entered promiscuous mode [ 152.294401][ T6957] syzkaller0: entered allmulticast mode [ 153.026935][ T6976] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 153.094387][ T10] IPVS: starting estimator thread 0... [ 153.189661][ T6978] IPVS: using max 31 ests per chain, 74400 per kthread [ 153.257064][ T5923] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 153.265676][ T5923] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 153.282790][ T5923] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 153.456733][ T5923] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 153.499643][ T5923] usb 1-1: USB disconnect, device number 7 [ 153.944245][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 153.964906][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 153.979810][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 153.990603][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 154.097280][ T5922] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 154.258970][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.274608][ T5922] usb 1-1: config 0 has no interfaces? [ 154.291560][ T5922] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 154.308335][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 154.327549][ T5922] usb 1-1: Product: syz [ 154.336628][ T5922] usb 1-1: config 0 descriptor?? [ 154.442444][ T6995] EXT4-fs: Conflicting test_dummy_encryption options [ 154.577601][ T6984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.620326][ T6984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.630370][ T5923] usb 1-1: USB disconnect, device number 8 [ 154.907484][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 154.942540][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 155.036377][ T7009] EXT4-fs: Conflicting test_dummy_encryption options [ 155.129558][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.288'. [ 155.140877][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 155.179155][ T7005] netlink: 'syz.3.288': attribute type 19 has an invalid length. [ 155.200336][ T7005] netlink: 'syz.3.288': attribute type 20 has an invalid length. [ 155.822427][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.291'. [ 156.120066][ T7012] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 157.607558][ T5900] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 157.907514][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 157.921475][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.932564][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.963007][ T5900] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 157.989638][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.996648][ T7048] netlink: 60 bytes leftover after parsing attributes in process `syz.3.297'. [ 158.042936][ T5900] usb 3-1: config 0 descriptor?? [ 158.565557][ T5900] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 158.767126][ T7052] pim6reg: entered allmulticast mode [ 158.788984][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 158.789001][ T30] audit: type=1326 audit(1761672634.502:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 158.850831][ T5923] usb 3-1: USB disconnect, device number 12 [ 158.858144][ T30] audit: type=1326 audit(1761672634.502:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 158.880350][ T30] audit: type=1326 audit(1761672634.512:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 158.902171][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.950034][ T30] audit: type=1326 audit(1761672634.512:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 158.971959][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.075170][ T7062] netlink: 44 bytes leftover after parsing attributes in process `syz.3.301'. [ 159.077265][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 159.115854][ T7062] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.191135][ T7065] netlink: 20 bytes leftover after parsing attributes in process `syz.3.301'. [ 159.217274][ T30] audit: type=1326 audit(1761672634.512:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 159.239156][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.304499][ T30] audit: type=1326 audit(1761672634.512:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 159.488245][ T30] audit: type=1326 audit(1761672634.512:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 159.700079][ T7075] EXT4-fs: Conflicting test_dummy_encryption options [ 160.187384][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 160.187414][ T10] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 160.187433][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 160.187475][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 160.187501][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 160.458749][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 160.468016][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 160.476084][ T10] usb 2-1: Product: syz [ 160.480436][ T30] audit: type=1326 audit(1761672634.512:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 160.502238][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.517328][ T10] usb 2-1: Manufacturer: syz [ 160.528397][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 160.533627][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 160.556697][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 160.567453][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 160.574002][ T30] audit: type=1326 audit(1761672634.512:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 160.665045][ T30] audit: type=1326 audit(1761672634.512:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 160.686930][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.724733][ T7079] fuse: Unknown parameter '0x0000000000000005' [ 161.153924][ T7094] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 161.299475][ T7100] program syz.4.311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.323562][ T7102] netlink: 36 bytes leftover after parsing attributes in process `syz.0.312'. [ 161.354463][ T7102] netlink: 44 bytes leftover after parsing attributes in process `syz.0.312'. [ 161.799572][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 161.799917][ T9] usb 2-1: USB disconnect, device number 6 [ 161.806481][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 161.818218][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 161.893274][ T5923] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 161.900905][ T5900] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 162.066464][ T7056] pim6reg: left allmulticast mode [ 162.127834][ T5900] usb 5-1: device descriptor read/64, error -71 [ 162.147533][ T5923] usb 1-1: Using ep0 maxpacket: 8 [ 162.155337][ T5923] usb 1-1: unable to get BOS descriptor or descriptor too short [ 162.165700][ T5923] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 162.177294][ T5923] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 162.210929][ T5923] usb 1-1: config 4 has no interface number 0 [ 162.241729][ T5923] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 162.257274][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.286838][ T5923] usb 1-1: Product: syz [ 162.299504][ T5923] usb 1-1: Manufacturer: syz [ 162.307068][ T5923] usb 1-1: SerialNumber: syz [ 162.377672][ T5900] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 162.449696][ T7125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.465883][ T7125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.527925][ T5900] usb 5-1: device descriptor read/64, error -71 [ 162.542848][ T7114] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 162.549576][ T7114] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 162.565856][ T7114] vhci_hcd vhci_hcd.0: Device attached [ 162.648256][ T5900] usb usb5-port1: attempt power cycle [ 162.657401][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 162.687341][ T6826] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 162.737992][ T24] vhci_hcd: vhci_device speed not set [ 162.797302][ T24] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 162.827225][ T6826] usb 2-1: device descriptor read/64, error -71 [ 162.827326][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 162.840561][ T9] usb 3-1: config 0 has an invalid interface number: 125 but max is 0 [ 162.848925][ T9] usb 3-1: config 0 has no interface number 0 [ 162.855123][ T9] usb 3-1: config 0 interface 125 has no altsetting 0 [ 162.864915][ T9] usb 3-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 162.874985][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.883538][ T9] usb 3-1: Product: syz [ 162.887971][ T9] usb 3-1: Manufacturer: syz [ 162.892580][ T9] usb 3-1: SerialNumber: syz [ 162.904139][ T9] usb 3-1: config 0 descriptor?? [ 162.997427][ T5900] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 163.027839][ T5900] usb 5-1: device descriptor read/8, error -71 [ 163.077399][ T6826] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 163.122366][ T9] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 163.210135][ T6826] usb 2-1: device descriptor read/64, error -71 [ 163.267251][ T5900] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 163.287842][ T5900] usb 5-1: device descriptor read/8, error -71 [ 163.317723][ T6826] usb usb2-port1: attempt power cycle [ 163.400653][ T5900] usb usb5-port1: unable to enumerate USB device [ 163.667296][ T6826] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 163.688254][ T6826] usb 2-1: device descriptor read/8, error -71 [ 163.717295][ T5900] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 163.757829][ T9] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 163.903472][ T5900] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 163.914192][ T5900] usb 4-1: config 0 interface 0 has no altsetting 0 [ 163.929286][ T5900] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 163.938464][ T6826] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 163.946065][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 163.954431][ T5900] usb 4-1: Product: syz [ 163.958998][ T5900] usb 4-1: Manufacturer: syz [ 163.963636][ T5900] usb 4-1: SerialNumber: syz [ 163.973250][ T5900] usb 4-1: config 0 descriptor?? [ 163.982731][ T6826] usb 2-1: device descriptor read/8, error -71 [ 163.993356][ T5900] usb 4-1: selecting invalid altsetting 0 [ 164.098234][ T6826] usb usb2-port1: unable to enumerate USB device [ 164.328187][ T9] ueagle-atm 3-1:0.125: usbatm_usb_probe: bind failed: -19! [ 164.349056][ T9] usb 3-1: USB disconnect, device number 13 [ 164.593634][ T7131] vhci_hcd: connection reset by peer [ 164.602017][ T12] vhci_hcd: stop threads [ 164.608024][ T12] vhci_hcd: release socket [ 164.614050][ T12] vhci_hcd: disconnect device [ 164.687803][ T5923] uvcvideo 1-1:4.147: probe with driver uvcvideo failed with error -22 [ 164.714781][ T5923] usb 1-1: USB disconnect, device number 9 [ 164.814835][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 164.898173][ T7154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.326'. [ 165.017885][ T5900] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 165.040970][ T7156] Failed to get privilege flags for destination (handle=0x2:0x40) [ 165.147293][ T6826] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 165.187247][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 165.194249][ T5900] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 165.202231][ T5900] usb 5-1: can't read configurations, error -61 [ 165.317260][ T6826] usb 3-1: Using ep0 maxpacket: 8 [ 165.324029][ T6826] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.335081][ T6826] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 165.344153][ T5900] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 165.355249][ T6826] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.371386][ T6826] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 165.381292][ T6826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.396217][ T6826] hub 3-1:1.0: bad descriptor, ignoring hub [ 165.406892][ T6826] hub 3-1:1.0: probe with driver hub failed with error -5 [ 165.416973][ T6826] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 165.517852][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 165.525851][ T5900] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 165.534032][ T5900] usb 5-1: can't read configurations, error -61 [ 165.546717][ T5900] usb usb5-port1: attempt power cycle [ 165.606982][ T7154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.619398][ T7154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.738127][ T5922] usb 3-1: USB disconnect, device number 14 [ 165.776515][ T7169] input: syz1 as /devices/virtual/input/input8 [ 165.808351][ T7169] fuse: Invalid uid '00000000000000000003' [ 165.908683][ T5900] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 165.958005][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 165.982633][ T5900] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 166.009028][ T5900] usb 5-1: can't read configurations, error -61 [ 166.137735][ T5900] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 166.178747][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 166.218051][ T5900] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 166.246116][ T5900] usb 5-1: can't read configurations, error -61 [ 166.253944][ T5900] usb usb5-port1: unable to enumerate USB device [ 166.278292][ T7180] EXT4-fs: Conflicting test_dummy_encryption options [ 166.327496][ T7181] EXT4-fs: Conflicting test_dummy_encryption options [ 166.599091][ T5922] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 166.779746][ T5922] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 166.788208][ T5922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.811711][ T5922] usb 3-1: config 0 has no interface number 0 [ 166.822374][ T5922] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 166.835888][ T5922] usb 3-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 166.851576][ T5900] usb 4-1: USB disconnect, device number 15 [ 166.876123][ T5922] usb 3-1: config 0 interface 197 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.928438][ T5922] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 166.981032][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.131810][ T5922] usb 3-1: Product: syz [ 167.137783][ T5922] usb 3-1: Manufacturer: syz [ 167.142780][ T5922] usb 3-1: SerialNumber: syz [ 167.196137][ T5922] usb 3-1: config 0 descriptor?? [ 167.217082][ T7184] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 167.601485][ T7194] netlink: 40 bytes leftover after parsing attributes in process `syz.2.337'. [ 167.623502][ T7193] veth1_to_batadv: entered promiscuous mode [ 167.791878][ T7196] syz_tun: entered allmulticast mode [ 167.938610][ T7196] lo: entered allmulticast mode [ 167.967312][ T24] vhci_hcd: vhci_device speed not set [ 168.010765][ T7195] syz_tun: left allmulticast mode [ 168.016006][ T7195] lo: left allmulticast mode [ 168.349504][ T5922] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 168.394662][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'. [ 168.424222][ T7208] binder: 7207:7208 ioctl c0709411 80000300 returned -22 [ 168.524728][ T7217] netlink: 76 bytes leftover after parsing attributes in process `syz.1.347'. [ 168.701215][ T5922] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.718603][ T5922] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 168.727765][ T5922] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 168.741573][ T5922] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 168.750741][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.765476][ T7199] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 168.793617][ T5922] hub 5-1:1.0: bad descriptor, ignoring hub [ 168.803284][ T5922] hub 5-1:1.0: probe with driver hub failed with error -5 [ 168.820420][ T5922] cdc_wdm 5-1:1.0: skipping garbage [ 168.866597][ T5922] cdc_wdm 5-1:1.0: skipping garbage [ 168.873879][ T7220] netlink: 48 bytes leftover after parsing attributes in process `syz.1.348'. [ 168.932062][ T5922] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 168.938374][ T5922] cdc_wdm 5-1:1.0: Unknown control protocol [ 169.060127][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 169.066740][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 169.073133][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 169.079721][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 169.085961][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 169.092547][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 169.098800][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 169.105383][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 169.111606][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 169.118180][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 169.124434][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 169.131015][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 169.137366][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 169.143947][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 169.150993][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 169.157580][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 169.164053][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 169.170631][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 169.176863][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 169.183442][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 169.317257][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 169.428252][ T5922] usb 5-1: USB disconnect, device number 18 [ 169.491997][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.507522][ T9] usb 3-1: USB disconnect, device number 15 [ 169.529684][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 1024 [ 169.572043][ T24] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a31, bcdDevice= 0.00 [ 169.601812][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.647055][ T24] usb 2-1: config 0 descriptor?? [ 169.667967][ T7220] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 169.740679][ T7231] batadv_slave_0: entered promiscuous mode [ 169.751359][ T7231] batman_adv: batadv0: Adding interface: macsec1 [ 169.758074][ T7231] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.786151][ T7231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.796739][ T7231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.806683][ T7231] batman_adv: batadv0: Interface activated: macsec1 [ 169.987283][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 170.138222][ T24] hid-corsair-void 0003:1B1C:0A31.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:0a31] on usb-dummy_hcd.1-1/input0 [ 170.224575][ T7246] FAULT_INJECTION: forcing a failure. [ 170.224575][ T7246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.238808][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 170.267338][ T7246] CPU: 1 UID: 0 PID: 7246 Comm: syz.0.356 Not tainted syzkaller #0 PREEMPT(full) [ 170.267368][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.267380][ T7246] Call Trace: [ 170.267387][ T7246] [ 170.267399][ T7246] dump_stack_lvl+0x189/0x250 [ 170.267437][ T7246] ? __pfx____ratelimit+0x10/0x10 [ 170.267462][ T7246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.267489][ T7246] ? __pfx__printk+0x10/0x10 [ 170.267522][ T7246] should_fail_ex+0x414/0x560 [ 170.267555][ T7246] __kvm_read_guest_page+0x18d/0x240 [ 170.267587][ T7246] kvm_fetch_guest_virt+0x12b/0x170 [ 170.267614][ T7246] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 170.267637][ T7246] __do_insn_fetch_bytes+0x2fc/0x6d0 [ 170.267672][ T7246] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 170.267707][ T7246] ? x86_decode_insn+0x11f5/0x5470 [ 170.267740][ T7246] x86_decode_insn+0x31d/0x5470 [ 170.267798][ T7246] ? __pfx_x86_decode_insn+0x10/0x10 [ 170.267828][ T7246] ? __kvm_io_bus_write+0x5bd/0x680 [ 170.267861][ T7246] ? __asan_memset+0x22/0x50 [ 170.267886][ T7246] ? init_decode_cache+0x78/0x90 [ 170.267939][ T7246] ? init_emulate_ctxt+0x4d6/0x660 [ 170.267969][ T7246] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 170.268005][ T7246] ? trace_rcu_utilization+0x47/0x1d0 [ 170.268033][ T7246] x86_emulate_instruction+0x61b/0x1f90 [ 170.268077][ T7246] ? vmx_set_rflags+0x43b/0x5d0 [ 170.268103][ T7246] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 170.268129][ T7246] ? __get_current_cr3_fast+0x90/0x150 [ 170.268159][ T7246] ? clear_bhb_loop+0x60/0xb0 [ 170.268179][ T7246] ? clear_bhb_loop+0x60/0xb0 [ 170.268200][ T7246] ? vmx_vcpu_run+0xe92/0x2b70 [ 170.268222][ T7246] ? __vmx_complete_interrupts+0xe7/0x690 [ 170.268257][ T7246] handle_ud+0x142/0x590 [ 170.268285][ T7246] ? __pfx_handle_ud+0x10/0x10 [ 170.268308][ T7246] ? vmx_handle_exit_irqoff+0x61e/0x940 [ 170.268338][ T7246] ? __lock_acquire+0xab9/0xd20 [ 170.268363][ T7246] ? __pfx_handle_exception_nmi+0x10/0x10 [ 170.268389][ T7246] vmx_handle_exit+0x10a4/0x18c0 [ 170.268413][ T7246] ? vcpu_run+0x361b/0x7040 [ 170.268451][ T7246] vcpu_run+0x43aa/0x7040 [ 170.268483][ T7246] ? vcpu_run+0x361b/0x7040 [ 170.268556][ T7246] ? __pfx_vcpu_run+0x10/0x10 [ 170.268581][ T7246] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 170.268621][ T7246] ? rcu_is_watching+0x15/0xb0 [ 170.268649][ T7246] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 170.268685][ T7246] ? __mutex_trylock_common+0x153/0x260 [ 170.268715][ T7246] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 170.268746][ T7246] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 170.268780][ T7246] ? rcu_is_watching+0x15/0xb0 [ 170.268804][ T7246] ? trace_contention_end+0x39/0x120 [ 170.268829][ T7246] ? __mutex_lock+0x335/0x1350 [ 170.268867][ T7246] ? __lock_acquire+0xab9/0xd20 [ 170.268916][ T7246] kvm_vcpu_ioctl+0x95c/0xe90 [ 170.268951][ T7246] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 170.268978][ T7246] ? do_vfs_ioctl+0xbe8/0x1430 [ 170.269006][ T7246] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 170.269046][ T7246] ? __lock_acquire+0xab9/0xd20 [ 170.269085][ T7246] kvm_vcpu_compat_ioctl+0x203/0x390 [ 170.269118][ T7246] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 170.269148][ T7246] ? __fget_files+0x3a0/0x420 [ 170.269176][ T7246] ? __fget_files+0x2a/0x420 [ 170.269197][ T7246] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 170.269223][ T7246] __ia32_compat_sys_ioctl+0x543/0x840 [ 170.269250][ T7246] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 170.269275][ T7246] ? __fget_files+0x3a0/0x420 [ 170.269298][ T7246] ? fput+0xa0/0xd0 [ 170.269340][ T7246] ? ksys_write+0x22a/0x250 [ 170.269366][ T7246] ? exc_page_fault+0x82/0x100 [ 170.269390][ T7246] ? __pfx_ksys_write+0x10/0x10 [ 170.269425][ T7246] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 170.269452][ T7246] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.269479][ T7246] __do_fast_syscall_32+0xb6/0x2b0 [ 170.269507][ T7246] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.269536][ T7246] do_fast_syscall_32+0x34/0x80 [ 170.269562][ T7246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 170.269584][ T7246] RIP: 0023:0xf707d539 [ 170.269601][ T7246] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 170.269618][ T7246] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 170.269638][ T7246] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 170.269650][ T7246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.269661][ T7246] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 170.269672][ T7246] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 170.269683][ T7246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 170.269712][ T7246] [ 170.734705][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.809459][ T5922] usb 2-1: USB disconnect, device number 11 [ 170.829414][ T5923] hid-corsair-void 0003:1B1C:0A31.0005: failed to request battery (reason: -19) [ 170.887268][ T24] hid-corsair-void 0003:1B1C:0A31.0005: failed to request firmware (reason: -71) [ 170.896060][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 170.905356][ T7251] fido_id[7251]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 170.940744][ T9] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 170.960158][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.988387][ T9] usb 3-1: Product: syz [ 171.013698][ T9] usb 3-1: Manufacturer: syz [ 171.020364][ T9] usb 3-1: SerialNumber: syz [ 171.131028][ T9] usb 3-1: config 0 descriptor?? [ 171.497237][ T5923] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 171.609930][ T9] gs_usb 3-1:0.0: Configuring for 2 interfaces [ 171.638129][ T5923] usb 5-1: device descriptor read/64, error -71 [ 171.917603][ T5923] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 172.047268][ T5923] usb 5-1: device descriptor read/64, error -71 [ 172.168158][ T5923] usb usb5-port1: attempt power cycle [ 172.239448][ T7228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.350'. [ 172.291987][ T7274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.350'. [ 172.445410][ T7277] FAULT_INJECTION: forcing a failure. [ 172.445410][ T7277] name failslab, interval 1, probability 0, space 0, times 0 [ 172.557415][ T7277] CPU: 0 UID: 0 PID: 7277 Comm: syz.0.362 Not tainted syzkaller #0 PREEMPT(full) [ 172.557442][ T7277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 172.557454][ T7277] Call Trace: [ 172.557461][ T7277] [ 172.557469][ T7277] dump_stack_lvl+0x189/0x250 [ 172.557497][ T7277] ? __pfx____ratelimit+0x10/0x10 [ 172.557520][ T7277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.557545][ T7277] ? __pfx__printk+0x10/0x10 [ 172.557567][ T7277] ? __pfx___might_resched+0x10/0x10 [ 172.557586][ T7277] ? fs_reclaim_acquire+0x7d/0x100 [ 172.557619][ T7277] should_fail_ex+0x414/0x560 [ 172.557652][ T7277] should_failslab+0xa8/0x100 [ 172.557672][ T7277] kmem_cache_alloc_node_noprof+0x77/0x710 [ 172.557698][ T7277] ? __alloc_skb+0x112/0x2d0 [ 172.557724][ T7277] ? netlink_autobind+0xdb/0x300 [ 172.557746][ T7277] __alloc_skb+0x112/0x2d0 [ 172.557778][ T7277] netlink_sendmsg+0x5c6/0xb30 [ 172.557803][ T7277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.557822][ T7277] ? __import_iovec+0x5d4/0x7f0 [ 172.557843][ T7277] ? aa_sock_msg_perm+0xf1/0x1d0 [ 172.557871][ T7277] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 172.557888][ T7277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.557906][ T7277] __sock_sendmsg+0x21c/0x270 [ 172.557933][ T7277] ____sys_sendmsg+0x505/0x830 [ 172.557958][ T7277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.557990][ T7277] ___sys_sendmsg+0x21f/0x2a0 [ 172.558011][ T7277] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.558061][ T7277] ? __fget_files+0x2a/0x420 [ 172.558078][ T7277] ? __fget_files+0x3a0/0x420 [ 172.558105][ T7277] __sys_sendmsg+0x164/0x220 [ 172.558126][ T7277] ? __pfx___sys_sendmsg+0x10/0x10 [ 172.558153][ T7277] ? __pfx_ksys_write+0x10/0x10 [ 172.558181][ T7277] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 172.558208][ T7277] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.558234][ T7277] __do_fast_syscall_32+0xb6/0x2b0 [ 172.558260][ T7277] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.558287][ T7277] do_fast_syscall_32+0x34/0x80 [ 172.558319][ T7277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.558341][ T7277] RIP: 0023:0xf707d539 [ 172.558357][ T7277] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 172.558374][ T7277] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 172.558393][ T7277] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 172.558405][ T7277] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.558415][ T7277] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.558425][ T7277] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 172.558436][ T7277] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.558463][ T7277] [ 172.627478][ T5923] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 172.942326][ T5923] usb 5-1: device descriptor read/8, error -71 [ 173.302376][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 177.096322][ T9] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 1 (-EPIPE) [ 177.184795][ T9] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -32 [ 177.190797][ T7293] veth1_to_batadv: entered promiscuous mode [ 177.219749][ T9] usb 3-1: USB disconnect, device number 16 [ 177.239200][ T7304] syzkaller0: entered promiscuous mode [ 177.268060][ T7304] syzkaller0: entered allmulticast mode [ 177.541548][ T7319] syz_tun: entered allmulticast mode [ 177.672991][ T7315] lo: entered allmulticast mode [ 177.754269][ T7314] syz_tun: left allmulticast mode [ 177.769969][ T7314] lo: left allmulticast mode [ 178.228789][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 178.388838][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 178.405906][ T9] usb 4-1: config 0 has an invalid interface number: 61 but max is 1 [ 178.430733][ T9] usb 4-1: config 0 has an invalid interface number: 98 but max is 1 [ 178.444487][ T7353] FAULT_INJECTION: forcing a failure. [ 178.444487][ T7353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.450138][ T9] usb 4-1: config 0 has no interface number 0 [ 178.469371][ T7353] CPU: 1 UID: 0 PID: 7353 Comm: syz.2.382 Not tainted syzkaller #0 PREEMPT(full) [ 178.469396][ T7353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 178.469409][ T7353] Call Trace: [ 178.469416][ T7353] [ 178.469424][ T7353] dump_stack_lvl+0x189/0x250 [ 178.469455][ T7353] ? __pfx____ratelimit+0x10/0x10 [ 178.469479][ T7353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.469506][ T7353] ? __pfx__printk+0x10/0x10 [ 178.469538][ T7353] should_fail_ex+0x414/0x560 [ 178.469578][ T7353] _copy_to_user+0x31/0xb0 [ 178.469606][ T7353] simple_read_from_buffer+0xe1/0x170 [ 178.469640][ T7353] proc_fail_nth_read+0x1b3/0x220 [ 178.469668][ T7353] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.469696][ T7353] ? rw_verify_area+0x2a6/0x4d0 [ 178.469722][ T7353] ? __lock_acquire+0xab9/0xd20 [ 178.469739][ T7353] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.469765][ T7353] vfs_read+0x200/0xa30 [ 178.469790][ T7353] ? fdget_pos+0x247/0x320 [ 178.469813][ T7353] ? __pfx___mutex_lock+0x10/0x10 [ 178.469840][ T7353] ? __pfx_vfs_read+0x10/0x10 [ 178.469868][ T7353] ? __fget_files+0x2a/0x420 [ 178.469890][ T7353] ? __fget_files+0x3a0/0x420 [ 178.469908][ T7353] ? __fget_files+0x2a/0x420 [ 178.469934][ T7353] ksys_read+0x145/0x250 [ 178.469960][ T7353] ? exc_page_fault+0x82/0x100 [ 178.469994][ T7353] ? __pfx_ksys_read+0x10/0x10 [ 178.470022][ T7353] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 178.470049][ T7353] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.470076][ T7353] __do_fast_syscall_32+0xb6/0x2b0 [ 178.470103][ T7353] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.470131][ T7353] do_fast_syscall_32+0x34/0x80 [ 178.470154][ T7353] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 178.470176][ T7353] RIP: 0023:0xf701d539 [ 178.470192][ T7353] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 178.470207][ T7353] RSP: 002b:00000000f540d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 178.470227][ T7353] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f540d620 [ 178.470240][ T7353] RDX: 000000000000000f RSI: 00000000f73b5ff4 RDI: 0000000000000000 [ 178.470251][ T7353] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 178.470261][ T7353] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 178.470271][ T7353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.470298][ T7353] [ 178.472551][ T9] usb 4-1: config 0 has no interface number 1 [ 178.731160][ T9] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 178.747450][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.760524][ T9] usb 4-1: Product: syz [ 178.764737][ T9] usb 4-1: Manufacturer: syz [ 178.780918][ T9] usb 4-1: SerialNumber: syz [ 178.787489][ T7359] macvtap1: entered promiscuous mode [ 178.794749][ T9] usb 4-1: config 0 descriptor?? [ 178.918125][ T9] viperboard 4-1:0.61: version 0.00 found at bus 004 address 016 [ 178.952515][ T9] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 178.983813][ T7364] veth1_to_batadv: entered promiscuous mode [ 179.080814][ T9] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 179.125092][ T9] viperboard 4-1:0.98: version 0.00 found at bus 004 address 016 [ 179.141716][ T9] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 179.155181][ T9] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 179.155903][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'. [ 179.235515][ T9] usb 4-1: USB disconnect, device number 16 [ 179.950157][ T7381] syz_tun: entered allmulticast mode [ 180.006887][ T7381] lo: entered allmulticast mode [ 180.029818][ T7380] syz_tun: left allmulticast mode [ 180.035067][ T7380] lo: left allmulticast mode [ 180.397669][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 180.420434][ T811] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 180.504589][ T7402] netlink: 'syz.3.396': attribute type 1 has an invalid length. [ 180.577244][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 180.584784][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 180.597272][ T9] usb 3-1: config 179 has no interface number 0 [ 180.604238][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 180.619316][ T811] usb 1-1: unable to get BOS descriptor or descriptor too short [ 180.627292][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 180.638854][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 180.651375][ T811] usb 1-1: not running at top speed; connect to a high speed hub [ 180.659482][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 180.671199][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 180.684943][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 180.694727][ T811] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.705061][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.713207][ T811] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 544, setting to 64 [ 180.730276][ T7385] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 180.744880][ T811] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.777450][ T5922] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 180.785749][ T811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.802922][ T811] usb 1-1: Product: syz [ 180.807350][ T811] usb 1-1: Manufacturer: syz [ 180.812160][ T811] usb 1-1: SerialNumber: syz [ 180.825987][ T7387] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 180.927569][ T5922] usb 2-1: device descriptor read/64, error -71 [ 181.042993][ T5945] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input9 [ 181.147253][ T7427] input: syz1 as /devices/virtual/input/input10 [ 181.241638][ T5922] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 181.398494][ T5922] usb 2-1: device descriptor read/64, error -71 [ 181.485460][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 181.485462][ T5923] usb 3-1: USB disconnect, device number 17 [ 181.500371][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 181.527727][ T5922] usb usb2-port1: attempt power cycle [ 181.974875][ T5922] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 182.026535][ T5922] usb 2-1: device descriptor read/8, error -71 [ 182.277254][ T5922] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 182.298106][ T5922] usb 2-1: device descriptor read/8, error -71 [ 182.430811][ T5922] usb usb2-port1: unable to enumerate USB device [ 182.543856][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 182.646131][ T7440] fuse: Unknown parameter '0x0000000000000005' [ 182.654927][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.4.403'. [ 182.666722][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.4.403'. [ 182.683949][ T7440] gretap0: entered promiscuous mode [ 182.691570][ T7440] gretap0: left promiscuous mode [ 182.775666][ T7444] syz_tun: entered allmulticast mode [ 182.782100][ T7444] lo: entered allmulticast mode [ 182.804465][ T7443] syz_tun: left allmulticast mode [ 182.811800][ T7443] lo: left allmulticast mode [ 182.888679][ T7446] FAULT_INJECTION: forcing a failure. [ 182.888679][ T7446] name failslab, interval 1, probability 0, space 0, times 0 [ 182.903900][ T7446] CPU: 1 UID: 0 PID: 7446 Comm: syz.2.405 Not tainted syzkaller #0 PREEMPT(full) [ 182.903926][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 182.903938][ T7446] Call Trace: [ 182.903947][ T7446] [ 182.903954][ T7446] dump_stack_lvl+0x189/0x250 [ 182.903992][ T7446] ? __pfx____ratelimit+0x10/0x10 [ 182.904014][ T7446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.904032][ T7446] ? __pfx__printk+0x10/0x10 [ 182.904048][ T7446] ? __pfx___might_resched+0x10/0x10 [ 182.904063][ T7446] ? fs_reclaim_acquire+0x7d/0x100 [ 182.904099][ T7446] should_fail_ex+0x414/0x560 [ 182.904131][ T7446] should_failslab+0xa8/0x100 [ 182.904150][ T7446] __kmalloc_noprof+0xcb/0x7f0 [ 182.904171][ T7446] ? tomoyo_encode+0x28b/0x550 [ 182.904194][ T7446] tomoyo_encode+0x28b/0x550 [ 182.904220][ T7446] tomoyo_realpath_from_path+0x58d/0x5d0 [ 182.904252][ T7446] ? tomoyo_domain+0xd9/0x130 [ 182.904289][ T7446] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 182.904311][ T7446] tomoyo_path_number_perm+0x1e8/0x5a0 [ 182.904329][ T7446] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 182.904356][ T7446] ? __lock_acquire+0xab9/0xd20 [ 182.904393][ T7446] ? __fget_files+0x2a/0x420 [ 182.904414][ T7446] ? __fget_files+0x3a0/0x420 [ 182.904429][ T7446] ? __fget_files+0x2a/0x420 [ 182.904449][ T7446] security_file_ioctl_compat+0xcb/0x2d0 [ 182.904469][ T7446] __ia32_compat_sys_ioctl+0x128/0x840 [ 182.904488][ T7446] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 182.904506][ T7446] ? __fget_files+0x3a0/0x420 [ 182.904528][ T7446] ? fput+0xa0/0xd0 [ 182.904550][ T7446] ? ksys_write+0x22a/0x250 [ 182.904573][ T7446] ? exc_page_fault+0x82/0x100 [ 182.904596][ T7446] ? __pfx_ksys_write+0x10/0x10 [ 182.904638][ T7446] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 182.904658][ T7446] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.904685][ T7446] __do_fast_syscall_32+0xb6/0x2b0 [ 182.904713][ T7446] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.904741][ T7446] do_fast_syscall_32+0x34/0x80 [ 182.904766][ T7446] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.904782][ T7446] RIP: 0023:0xf701d539 [ 182.904800][ T7446] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 182.904812][ T7446] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 182.904841][ T7446] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c008ae88 [ 182.904855][ T7446] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.904868][ T7446] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.904879][ T7446] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 182.904890][ T7446] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.904919][ T7446] [ 182.904947][ T7446] ERROR: Out of memory at tomoyo_realpath_from_path. [ 183.190704][ T43] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 183.226021][ T811] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 183.235954][ T811] cdc_ncm 1-1:1.0: bind() failure [ 183.263972][ T811] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 183.286221][ T811] cdc_ncm 1-1:1.1: bind() failure [ 183.357063][ T811] usb 1-1: USB disconnect, device number 10 [ 183.370155][ T43] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 8 [ 183.412394][ T43] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 183.422855][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.436094][ T7442] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 183.447624][ T7453] FAULT_INJECTION: forcing a failure. [ 183.447624][ T7453] name failslab, interval 1, probability 0, space 0, times 0 [ 183.494482][ T7453] CPU: 0 UID: 0 PID: 7453 Comm: syz.2.407 Not tainted syzkaller #0 PREEMPT(full) [ 183.494508][ T7453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.494520][ T7453] Call Trace: [ 183.494527][ T7453] [ 183.494536][ T7453] dump_stack_lvl+0x189/0x250 [ 183.494566][ T7453] ? __pfx____ratelimit+0x10/0x10 [ 183.494590][ T7453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.494615][ T7453] ? __pfx__printk+0x10/0x10 [ 183.494640][ T7453] ? __lock_acquire+0xab9/0xd20 [ 183.494665][ T7453] should_fail_ex+0x414/0x560 [ 183.494698][ T7453] should_failslab+0xa8/0x100 [ 183.494720][ T7453] kmem_cache_alloc_noprof+0x74/0x6e0 [ 183.494748][ T7453] ? skb_clone+0x212/0x3a0 [ 183.494773][ T7453] skb_clone+0x212/0x3a0 [ 183.494797][ T7453] __netlink_deliver_tap+0x404/0x850 [ 183.494838][ T7453] ? netlink_deliver_tap+0x2e/0x1b0 [ 183.494869][ T7453] netlink_deliver_tap+0x19c/0x1b0 [ 183.494899][ T7453] netlink_unicast+0x7fa/0x9e0 [ 183.494933][ T7453] ? __pfx_netlink_unicast+0x10/0x10 [ 183.494961][ T7453] ? netlink_sendmsg+0x642/0xb30 [ 183.494976][ T7453] ? skb_put+0x11b/0x210 [ 183.494997][ T7453] netlink_sendmsg+0x805/0xb30 [ 183.495023][ T7453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.495042][ T7453] ? __import_iovec+0x5d4/0x7f0 [ 183.495063][ T7453] ? aa_sock_msg_perm+0xf1/0x1d0 [ 183.495104][ T7453] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 183.495123][ T7453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.495142][ T7453] __sock_sendmsg+0x21c/0x270 [ 183.495169][ T7453] ____sys_sendmsg+0x505/0x830 [ 183.495194][ T7453] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.495235][ T7453] ___sys_sendmsg+0x21f/0x2a0 [ 183.495257][ T7453] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.495310][ T7453] ? __fget_files+0x2a/0x420 [ 183.495327][ T7453] ? __fget_files+0x3a0/0x420 [ 183.495352][ T7453] __sys_sendmsg+0x164/0x220 [ 183.495372][ T7453] ? __pfx___sys_sendmsg+0x10/0x10 [ 183.495396][ T7453] ? __pfx_ksys_write+0x10/0x10 [ 183.495424][ T7453] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 183.495452][ T7453] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.495477][ T7453] __do_fast_syscall_32+0xb6/0x2b0 [ 183.495503][ T7453] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.495522][ T7453] do_fast_syscall_32+0x34/0x80 [ 183.495540][ T7453] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.495573][ T7453] RIP: 0023:0xf701d539 [ 183.495591][ T7453] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 183.495609][ T7453] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 183.495630][ T7453] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 183.495643][ T7453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.495655][ T7453] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.495677][ T7453] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 183.495688][ T7453] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.495717][ T7453] [ 183.497000][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 183.842464][ T43] usb 5-1: string descriptor 0 read error: -71 [ 183.861584][ T43] hub 5-1:32.0: USB hub found [ 183.890622][ T43] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 184.048300][ T43] usb 5-1: USB disconnect, device number 23 [ 184.414859][ T7462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.410'. [ 184.473944][ T7463] FAULT_INJECTION: forcing a failure. [ 184.473944][ T7463] name failslab, interval 1, probability 0, space 0, times 0 [ 184.486583][ T7463] CPU: 1 UID: 0 PID: 7463 Comm: syz.1.412 Not tainted syzkaller #0 PREEMPT(full) [ 184.486598][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 184.486607][ T7463] Call Trace: [ 184.486612][ T7463] [ 184.486618][ T7463] dump_stack_lvl+0x189/0x250 [ 184.486640][ T7463] ? __pfx____ratelimit+0x10/0x10 [ 184.486656][ T7463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.486674][ T7463] ? __pfx__printk+0x10/0x10 [ 184.486689][ T7463] ? __pfx_fib_validate_source+0x10/0x10 [ 184.486714][ T7463] should_fail_ex+0x414/0x560 [ 184.486737][ T7463] should_failslab+0xa8/0x100 [ 184.486751][ T7463] kmem_cache_alloc_noprof+0x74/0x6e0 [ 184.486770][ T7463] ? dst_alloc+0x105/0x170 [ 184.486788][ T7463] dst_alloc+0x105/0x170 [ 184.486805][ T7463] ip_route_input_rcu+0x1ec2/0x30d0 [ 184.486831][ T7463] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 184.486862][ T7463] ? ipt_do_table+0x13dd/0x1640 [ 184.486878][ T7463] ? ip_route_input_noref+0x98/0x250 [ 184.486896][ T7463] ip_route_input_noref+0x167/0x250 [ 184.486914][ T7463] ? __pfx_ip_route_input_noref+0x10/0x10 [ 184.486935][ T7463] ? ipt_do_table+0x2a3/0x1640 [ 184.486948][ T7463] ? __pfx_ipt_do_table+0x10/0x10 [ 184.486964][ T7463] ip_rcv_finish_core+0x5af/0x1c00 [ 184.486984][ T7463] ip_rcv_finish+0x14c/0x2f0 [ 184.486999][ T7463] NF_HOOK+0x30c/0x3a0 [ 184.487012][ T7463] ? __pfx_ip_rcv_finish+0x10/0x10 [ 184.487023][ T7463] ? NF_HOOK+0x9a/0x3a0 [ 184.487035][ T7463] ? __pfx_NF_HOOK+0x10/0x10 [ 184.487045][ T7463] ? ip_rcv_core+0x7f7/0xd00 [ 184.487057][ T7463] ? __pfx_ip_rcv_finish+0x10/0x10 [ 184.487075][ T7463] ? __pfx_ip_rcv+0x10/0x10 [ 184.487086][ T7463] __netif_receive_skb+0x143/0x380 [ 184.487107][ T7463] ? netif_receive_skb+0x115/0x790 [ 184.487123][ T7463] netif_receive_skb+0x1cb/0x790 [ 184.487150][ T7463] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 184.487171][ T7463] ? __pfx_netif_receive_skb+0x10/0x10 [ 184.487200][ T7463] ? tun_rx_batched+0x160/0x730 [ 184.487224][ T7463] tun_rx_batched+0x1b9/0x730 [ 184.487246][ T7463] ? __lock_acquire+0xab9/0xd20 [ 184.487262][ T7463] ? __pfx_tun_rx_batched+0x10/0x10 [ 184.487279][ T7463] ? tun_get_user+0x272f/0x3e90 [ 184.487303][ T7463] tun_get_user+0x2b65/0x3e90 [ 184.487323][ T7463] ? tun_get_user+0x6f6/0x3e90 [ 184.487338][ T7463] ? tun_get_user+0x272f/0x3e90 [ 184.487355][ T7463] ? aa_file_perm+0x44d/0x1550 [ 184.487367][ T7463] ? __pfx_tun_get_user+0x10/0x10 [ 184.487393][ T7463] ? __lock_acquire+0xab9/0xd20 [ 184.487409][ T7463] ? ref_tracker_alloc+0x318/0x460 [ 184.487420][ T7463] ? __lock_acquire+0xab9/0xd20 [ 184.487433][ T7463] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 184.487449][ T7463] ? tun_get+0x1c/0x2f0 [ 184.487467][ T7463] ? tun_get+0x1c/0x2f0 [ 184.487481][ T7463] ? tun_get+0x1c/0x2f0 [ 184.487498][ T7463] tun_chr_write_iter+0x113/0x200 [ 184.487515][ T7463] vfs_write+0x5c9/0xb30 [ 184.487537][ T7463] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 184.487552][ T7463] ? __pfx_vfs_write+0x10/0x10 [ 184.487577][ T7463] ? __fget_files+0x2a/0x420 [ 184.487595][ T7463] ksys_write+0x145/0x250 [ 184.487612][ T7463] ? exc_page_fault+0x82/0x100 [ 184.487629][ T7463] ? __pfx_ksys_write+0x10/0x10 [ 184.487649][ T7463] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 184.487668][ T7463] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.487686][ T7463] __do_fast_syscall_32+0xb6/0x2b0 [ 184.487705][ T7463] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.487724][ T7463] do_fast_syscall_32+0x34/0x80 [ 184.487741][ T7463] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.487757][ T7463] RIP: 0023:0xf70ad539 [ 184.487768][ T7463] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 184.487779][ T7463] RSP: 002b:00000000f549d520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 184.487793][ T7463] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000480 [ 184.487802][ T7463] RDX: 0000000000000046 RSI: 00000000f7445ff4 RDI: 0000000000000000 [ 184.487810][ T7463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.487817][ T7463] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 184.487824][ T7463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.487843][ T7463] [ 185.347215][ T43] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 185.483132][ T7473] FAULT_INJECTION: forcing a failure. [ 185.483132][ T7473] name failslab, interval 1, probability 0, space 0, times 0 [ 185.544667][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 185.577220][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.595785][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 185.612532][ T7473] CPU: 1 UID: 0 PID: 7473 Comm: syz.4.415 Not tainted syzkaller #0 PREEMPT(full) [ 185.612556][ T7473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 185.612568][ T7473] Call Trace: [ 185.612575][ T7473] [ 185.612583][ T7473] dump_stack_lvl+0x189/0x250 [ 185.612613][ T7473] ? __pfx____ratelimit+0x10/0x10 [ 185.612636][ T7473] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.612661][ T7473] ? __pfx__printk+0x10/0x10 [ 185.612685][ T7473] ? __lock_acquire+0xab9/0xd20 [ 185.612709][ T7473] should_fail_ex+0x414/0x560 [ 185.612741][ T7473] should_failslab+0xa8/0x100 [ 185.612762][ T7473] kmem_cache_alloc_noprof+0x74/0x6e0 [ 185.612788][ T7473] ? skb_clone+0x212/0x3a0 [ 185.612813][ T7473] skb_clone+0x212/0x3a0 [ 185.612836][ T7473] __netlink_deliver_tap+0x404/0x850 [ 185.612876][ T7473] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.612906][ T7473] netlink_deliver_tap+0x19c/0x1b0 [ 185.612936][ T7473] netlink_unicast+0x7fa/0x9e0 [ 185.612970][ T7473] ? __pfx_netlink_unicast+0x10/0x10 [ 185.612998][ T7473] ? netlink_sendmsg+0x642/0xb30 [ 185.613013][ T7473] ? skb_put+0x11b/0x210 [ 185.613032][ T7473] netlink_sendmsg+0x805/0xb30 [ 185.613080][ T7473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.613100][ T7473] ? __import_iovec+0x5d4/0x7f0 [ 185.613121][ T7473] ? aa_sock_msg_perm+0xf1/0x1d0 [ 185.613150][ T7473] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 185.613168][ T7473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.613186][ T7473] __sock_sendmsg+0x21c/0x270 [ 185.613213][ T7473] ____sys_sendmsg+0x505/0x830 [ 185.613237][ T7473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.613271][ T7473] ___sys_sendmsg+0x21f/0x2a0 [ 185.613293][ T7473] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.613346][ T7473] ? __fget_files+0x2a/0x420 [ 185.613362][ T7473] ? __fget_files+0x3a0/0x420 [ 185.613389][ T7473] __sys_sendmsg+0x164/0x220 [ 185.613411][ T7473] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.613439][ T7473] ? __pfx_ksys_write+0x10/0x10 [ 185.613469][ T7473] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 185.613496][ T7473] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.613523][ T7473] __do_fast_syscall_32+0xb6/0x2b0 [ 185.613549][ T7473] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.613577][ T7473] do_fast_syscall_32+0x34/0x80 [ 185.613603][ T7473] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.613625][ T7473] RIP: 0023:0xf7f23539 [ 185.613641][ T7473] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 185.613657][ T7473] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 185.613677][ T7473] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000c00 [ 185.613689][ T7473] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.613700][ T7473] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.613710][ T7473] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 185.613721][ T7473] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.613748][ T7473] [ 185.914607][ T43] usb 4-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 185.928897][ T43] usb 4-1: config 0 interface 0 has no altsetting 1 [ 185.954367][ T43] usb 4-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 185.965741][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.975495][ T43] usb 4-1: Product: syz [ 185.979711][ T43] usb 4-1: Manufacturer: syz [ 185.984330][ T43] usb 4-1: SerialNumber: syz [ 185.994146][ T43] usb 4-1: config 0 descriptor?? [ 186.298897][ T7464] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 186.333145][ T43] usb 4-1: USB disconnect, device number 17 [ 186.529082][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.973164][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 186.973182][ T30] audit: type=1326 audit(1761672662.732:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.0.422" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0 [ 187.323270][ T7511] FAULT_INJECTION: forcing a failure. [ 187.323270][ T7511] name failslab, interval 1, probability 0, space 0, times 0 [ 187.360870][ T7511] CPU: 0 UID: 0 PID: 7511 Comm: syz.3.426 Not tainted syzkaller #0 PREEMPT(full) [ 187.360896][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 187.360908][ T7511] Call Trace: [ 187.360914][ T7511] [ 187.360921][ T7511] dump_stack_lvl+0x189/0x250 [ 187.360943][ T7511] ? __pfx____ratelimit+0x10/0x10 [ 187.360960][ T7511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.360977][ T7511] ? __pfx__printk+0x10/0x10 [ 187.360993][ T7511] ? __pfx___might_resched+0x10/0x10 [ 187.361007][ T7511] ? fs_reclaim_acquire+0x7d/0x100 [ 187.361030][ T7511] should_fail_ex+0x414/0x560 [ 187.361052][ T7511] should_failslab+0xa8/0x100 [ 187.361066][ T7511] __kmalloc_cache_noprof+0x6f/0x6f0 [ 187.361084][ T7511] ? __pfx___mutex_lock+0x10/0x10 [ 187.361101][ T7511] ? __inet_diag_dump_start+0x8b/0xbf0 [ 187.361121][ T7511] ? netlink_lookup+0x30/0x200 [ 187.361142][ T7511] __inet_diag_dump_start+0x8b/0xbf0 [ 187.361162][ T7511] ? netlink_lookup+0x30/0x200 [ 187.361184][ T7511] ? netlink_lookup+0x30/0x200 [ 187.361201][ T7511] ? netlink_lookup+0x30/0x200 [ 187.361223][ T7511] __netlink_dump_start+0x469/0x7e0 [ 187.361247][ T7511] inet_diag_handler_cmd+0x1bf/0x290 [ 187.361269][ T7511] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 187.361288][ T7511] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 187.361309][ T7511] ? __pfx_inet_diag_dump+0x10/0x10 [ 187.361326][ T7511] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 187.361346][ T7511] ? sock_diag_lock_handler+0x19/0x290 [ 187.361364][ T7511] ? sock_diag_lock_handler+0x19/0x290 [ 187.361385][ T7511] sock_diag_rcv_msg+0x4cc/0x600 [ 187.361407][ T7511] netlink_rcv_skb+0x208/0x470 [ 187.361428][ T7511] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 187.361447][ T7511] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.361473][ T7511] ? netlink_deliver_tap+0x2e/0x1b0 [ 187.361498][ T7511] netlink_unicast+0x82f/0x9e0 [ 187.361521][ T7511] ? __pfx_netlink_unicast+0x10/0x10 [ 187.361541][ T7511] ? netlink_sendmsg+0x642/0xb30 [ 187.361557][ T7511] ? skb_put+0x11b/0x210 [ 187.361578][ T7511] netlink_sendmsg+0x805/0xb30 [ 187.361604][ T7511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.361626][ T7511] ? aa_sock_msg_perm+0xf1/0x1d0 [ 187.361647][ T7511] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.361660][ T7511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.361672][ T7511] __sock_sendmsg+0x21c/0x270 [ 187.361691][ T7511] sock_write_iter+0x279/0x360 [ 187.361709][ T7511] ? __pfx_sock_write_iter+0x10/0x10 [ 187.361739][ T7511] do_iter_readv_writev+0x623/0x8c0 [ 187.361763][ T7511] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 187.361781][ T7511] ? common_file_perm+0x1b5/0x230 [ 187.361802][ T7511] ? bpf_lsm_file_permission+0x9/0x20 [ 187.361815][ T7511] ? security_file_permission+0x75/0x290 [ 187.361831][ T7511] ? rw_verify_area+0x255/0x4d0 [ 187.361850][ T7511] vfs_writev+0x31a/0x960 [ 187.361866][ T7511] ? __lock_acquire+0xab9/0xd20 [ 187.361880][ T7511] ? __pfx_vfs_writev+0x10/0x10 [ 187.361903][ T7511] ? __fget_files+0x2a/0x420 [ 187.361918][ T7511] ? __fget_files+0x3a0/0x420 [ 187.361931][ T7511] ? __fget_files+0x2a/0x420 [ 187.361948][ T7511] do_writev+0x14d/0x2d0 [ 187.361963][ T7511] ? __pfx_do_writev+0x10/0x10 [ 187.361978][ T7511] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 187.361997][ T7511] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.362016][ T7511] __do_fast_syscall_32+0xb6/0x2b0 [ 187.362034][ T7511] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.362053][ T7511] do_fast_syscall_32+0x34/0x80 [ 187.362071][ T7511] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.362087][ T7511] RIP: 0023:0xf70cd539 [ 187.362098][ T7511] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 187.362109][ T7511] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 187.362123][ T7511] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000780 [ 187.362132][ T7511] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.362139][ T7511] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.362147][ T7511] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 187.362154][ T7511] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.362177][ T7511] [ 187.921471][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 187.930980][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 188.288970][ T7519] EXT4-fs: Conflicting test_dummy_encryption options [ 188.313523][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 188.334459][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 188.334510][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.334532][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.334555][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 188.334577][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.334615][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 188.334636][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.468464][ T7528] EXT4-fs: Conflicting test_dummy_encryption options [ 188.485680][ T30] audit: type=1800 audit(1761672664.202:191): pid=7527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.430" name="bus" dev="tmpfs" ino=299 res=0 errno=0 [ 188.621716][ T24] usb 2-1: GET_CAPABILITIES returned 0 [ 188.627566][ T24] usbtmc 2-1:16.0: can't read capabilities [ 188.794504][ T7532] netlink: 14 bytes leftover after parsing attributes in process `syz.0.431'. [ 188.922758][ T24] usb 2-1: USB disconnect, device number 16 [ 189.038097][ T7512] netlink: 'syz.1.425': attribute type 1 has an invalid length. [ 189.338480][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 189.361017][ T7532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.381146][ T7532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.398374][ T7532] bond0 (unregistering): Released all slaves [ 189.667879][ T7512] bond1: entered promiscuous mode [ 189.697819][ T7512] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.834440][ T7534] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.943495][ T7534] bond1: (slave bond2): making interface the new active one [ 189.954469][ T7534] bond2: entered promiscuous mode [ 190.014094][ T7534] bond1: (slave bond2): Enslaving as an active interface with an up link [ 190.059746][ T7535] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 190.086029][ T7535] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 190.291252][ T7541] warning: `syz.4.432' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 190.388834][ T7551] netlink: 'syz.2.433': attribute type 1 has an invalid length. [ 190.457423][ T7551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.481006][ T7551] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 190.917231][ T5900] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 191.021272][ T7573] random: crng reseeded on system resumption [ 191.098210][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 191.104935][ T5900] usb 3-1: config 0 has an invalid interface number: 26 but max is 0 [ 191.115026][ T5900] usb 3-1: config 0 has no interface number 0 [ 191.127907][ T5900] usb 3-1: too many endpoints for config 0 interface 26 altsetting 250: 52, using maximum allowed: 30 [ 191.157732][ T5900] usb 3-1: config 0 interface 26 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 191.217301][ T5900] usb 3-1: config 0 interface 26 has no altsetting 0 [ 191.246667][ T5900] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 191.275233][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.309952][ T5900] usb 3-1: config 0 descriptor?? [ 191.372908][ T7580] FAULT_INJECTION: forcing a failure. [ 191.372908][ T7580] name failslab, interval 1, probability 0, space 0, times 0 [ 191.417577][ T7580] CPU: 1 UID: 0 PID: 7580 Comm: syz.3.443 Not tainted syzkaller #0 PREEMPT(full) [ 191.417603][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 191.417614][ T7580] Call Trace: [ 191.417622][ T7580] [ 191.417630][ T7580] dump_stack_lvl+0x189/0x250 [ 191.417664][ T7580] ? __pfx____ratelimit+0x10/0x10 [ 191.417687][ T7580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.417713][ T7580] ? __pfx__printk+0x10/0x10 [ 191.417737][ T7580] ? __pfx___might_resched+0x10/0x10 [ 191.417761][ T7580] should_fail_ex+0x414/0x560 [ 191.417794][ T7580] should_failslab+0xa8/0x100 [ 191.417814][ T7580] kmem_cache_alloc_noprof+0x74/0x6e0 [ 191.417841][ T7580] ? security_file_alloc+0x34/0x330 [ 191.417868][ T7580] security_file_alloc+0x34/0x330 [ 191.417896][ T7580] init_file+0x93/0x2f0 [ 191.417919][ T7580] alloc_empty_file+0x6e/0x1d0 [ 191.417941][ T7580] path_openat+0x107/0x3830 [ 191.417973][ T7580] ? stack_trace_save+0x9c/0xe0 [ 191.418000][ T7580] ? stack_depot_save_flags+0x40/0x860 [ 191.418034][ T7580] ? kasan_save_track+0x4f/0x80 [ 191.418061][ T7580] ? getname_flags+0xb8/0x540 [ 191.418077][ T7580] ? do_sys_openat2+0xbc/0x1c0 [ 191.418096][ T7580] ? __ia32_compat_sys_openat+0x131/0x160 [ 191.418117][ T7580] ? do_fast_syscall_32+0x34/0x80 [ 191.418142][ T7580] ? __pfx_path_openat+0x10/0x10 [ 191.418183][ T7580] do_filp_open+0x1fa/0x410 [ 191.418205][ T7580] ? __lock_acquire+0xab9/0xd20 [ 191.418225][ T7580] ? __pfx_do_filp_open+0x10/0x10 [ 191.418268][ T7580] ? _raw_spin_unlock+0x28/0x50 [ 191.418288][ T7580] ? alloc_fd+0x64c/0x6c0 [ 191.418326][ T7580] do_sys_openat2+0x121/0x1c0 [ 191.418349][ T7580] ? __pfx_do_sys_openat2+0x10/0x10 [ 191.418371][ T7580] ? ksys_write+0x22a/0x250 [ 191.418396][ T7580] ? exc_page_fault+0x82/0x100 [ 191.418420][ T7580] ? __pfx_ksys_write+0x10/0x10 [ 191.418449][ T7580] __ia32_compat_sys_openat+0x131/0x160 [ 191.418477][ T7580] __do_fast_syscall_32+0xb6/0x2b0 [ 191.418503][ T7580] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.418531][ T7580] do_fast_syscall_32+0x34/0x80 [ 191.418557][ T7580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 191.418578][ T7580] RIP: 0023:0xf70cd539 [ 191.418594][ T7580] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 191.418610][ T7580] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 191.418631][ T7580] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240 [ 191.418644][ T7580] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.418655][ T7580] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.418665][ T7580] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 191.418676][ T7580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.418703][ T7580] [ 191.847751][ T5900] usb 3-1: string descriptor 0 read error: -32 [ 191.871713][ T5900] asix 3-1:0.26 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 191.911882][ T7587] EXT4-fs: Conflicting test_dummy_encryption options [ 191.921772][ T5900] asix 3-1:0.26: probe with driver asix failed with error -32 [ 191.924835][ T5900] usb 3-1: USB disconnect, device number 18 [ 191.989542][ T7590] EXT4-fs: Conflicting test_dummy_encryption options [ 192.182899][ T7593] FAULT_INJECTION: forcing a failure. [ 192.182899][ T7593] name failslab, interval 1, probability 0, space 0, times 0 [ 192.203660][ T7593] CPU: 1 UID: 0 PID: 7593 Comm: syz.1.446 Not tainted syzkaller #0 PREEMPT(full) [ 192.203684][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 192.203693][ T7593] Call Trace: [ 192.203698][ T7593] [ 192.203704][ T7593] dump_stack_lvl+0x189/0x250 [ 192.203727][ T7593] ? __pfx____ratelimit+0x10/0x10 [ 192.203743][ T7593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.203761][ T7593] ? __pfx__printk+0x10/0x10 [ 192.203777][ T7593] ? __pfx___might_resched+0x10/0x10 [ 192.203792][ T7593] ? fs_reclaim_acquire+0x7d/0x100 [ 192.203815][ T7593] should_fail_ex+0x414/0x560 [ 192.203839][ T7593] should_failslab+0xa8/0x100 [ 192.203853][ T7593] kmem_cache_alloc_node_noprof+0x77/0x710 [ 192.203871][ T7593] ? __alloc_skb+0x112/0x2d0 [ 192.203890][ T7593] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 192.203907][ T7593] __alloc_skb+0x112/0x2d0 [ 192.203929][ T7593] ppp_write+0xb1/0x400 [ 192.203947][ T7593] vfs_writev+0x4b6/0x960 [ 192.203963][ T7593] ? __pfx_ppp_write+0x10/0x10 [ 192.203981][ T7593] ? __pfx_vfs_writev+0x10/0x10 [ 192.204003][ T7593] ? __fget_files+0x2a/0x420 [ 192.204018][ T7593] ? __fget_files+0x3a0/0x420 [ 192.204029][ T7593] ? __fget_files+0x2a/0x420 [ 192.204046][ T7593] __ia32_compat_sys_pwritev+0x1bf/0x2c0 [ 192.204061][ T7593] ? __pfx___ia32_compat_sys_pwritev+0x10/0x10 [ 192.204076][ T7593] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 192.204104][ T7593] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.204132][ T7593] __do_fast_syscall_32+0xb6/0x2b0 [ 192.204151][ T7593] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.204170][ T7593] do_fast_syscall_32+0x34/0x80 [ 192.204188][ T7593] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.204204][ T7593] RIP: 0023:0xf70ad539 [ 192.204214][ T7593] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 192.204225][ T7593] RSP: 002b:00000000f547c55c EFLAGS: 00000206 ORIG_RAX: 000000000000014e [ 192.204239][ T7593] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 192.204248][ T7593] RDX: 0000000000000002 RSI: 0000000000007fff RDI: 0000000000000001 [ 192.204256][ T7593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.204263][ T7593] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 192.204270][ T7593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.204288][ T7593] [ 192.456292][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 192.617243][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 192.647552][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 192.664681][ T24] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 192.674633][ T24] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 192.683013][ T24] usb 4-1: Product: syz [ 192.687361][ T24] usb 4-1: Manufacturer: syz [ 192.691977][ T24] usb 4-1: SerialNumber: syz [ 192.707782][ T24] usb 4-1: config 0 descriptor?? [ 192.708582][ T7595] FAULT_INJECTION: forcing a failure. [ 192.708582][ T7595] name failslab, interval 1, probability 0, space 0, times 0 [ 192.717364][ T7589] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 192.733995][ T24] hub 4-1:0.0: bad descriptor, ignoring hub [ 192.740055][ T24] hub 4-1:0.0: probe with driver hub failed with error -5 [ 192.817290][ T7595] CPU: 1 UID: 0 PID: 7595 Comm: syz.1.448 Not tainted syzkaller #0 PREEMPT(full) [ 192.817316][ T7595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 192.817327][ T7595] Call Trace: [ 192.817335][ T7595] [ 192.817343][ T7595] dump_stack_lvl+0x189/0x250 [ 192.817373][ T7595] ? __pfx____ratelimit+0x10/0x10 [ 192.817395][ T7595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.817418][ T7595] ? __pfx__printk+0x10/0x10 [ 192.817441][ T7595] ? __pfx___might_resched+0x10/0x10 [ 192.817461][ T7595] ? fs_reclaim_acquire+0x7d/0x100 [ 192.817498][ T7595] should_fail_ex+0x414/0x560 [ 192.817531][ T7595] should_failslab+0xa8/0x100 [ 192.817552][ T7595] kmem_cache_alloc_node_noprof+0x77/0x710 [ 192.817579][ T7595] ? __alloc_skb+0x112/0x2d0 [ 192.817606][ T7595] ? __pfx___mutex_trylock_common+0x10/0x10 [ 192.817634][ T7595] __alloc_skb+0x112/0x2d0 [ 192.817666][ T7595] netlink_dump+0x1b7/0xe90 [ 192.817699][ T7595] ? __netlink_lookup+0xbd/0x8a0 [ 192.817721][ T7595] ? __pfx_netlink_dump+0x10/0x10 [ 192.817746][ T7595] ? __netlink_lookup+0x7db/0x8a0 [ 192.817785][ T7595] ? netlink_lookup+0x30/0x200 [ 192.817812][ T7595] ? netlink_lookup+0x30/0x200 [ 192.817836][ T7595] ? netlink_lookup+0x30/0x200 [ 192.817868][ T7595] __netlink_dump_start+0x5cb/0x7e0 [ 192.817903][ T7595] rtnetlink_rcv_msg+0x9eb/0xb70 [ 192.817957][ T7595] ? __pfx_neigh_dump_info+0x10/0x10 [ 192.817978][ T7595] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 192.818010][ T7595] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 192.818036][ T7595] ? ref_tracker_free+0x63a/0x7d0 [ 192.818053][ T7595] ? __pfx_neigh_dump_info+0x10/0x10 [ 192.818076][ T7595] ? __skb_clone+0x63/0x7a0 [ 192.818105][ T7595] netlink_rcv_skb+0x208/0x470 [ 192.818135][ T7595] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 192.818166][ T7595] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 192.818207][ T7595] ? netlink_deliver_tap+0x2e/0x1b0 [ 192.818245][ T7595] netlink_unicast+0x82f/0x9e0 [ 192.818280][ T7595] ? __pfx_netlink_unicast+0x10/0x10 [ 192.818310][ T7595] ? netlink_sendmsg+0x642/0xb30 [ 192.818326][ T7595] ? skb_put+0x11b/0x210 [ 192.818345][ T7595] netlink_sendmsg+0x805/0xb30 [ 192.818373][ T7595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.818405][ T7595] ? aa_sock_msg_perm+0xf1/0x1d0 [ 192.818435][ T7595] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 192.818453][ T7595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.818472][ T7595] __sock_sendmsg+0x21c/0x270 [ 192.818499][ T7595] sock_write_iter+0x279/0x360 [ 192.818524][ T7595] ? __pfx_sock_write_iter+0x10/0x10 [ 192.818568][ T7595] do_iter_readv_writev+0x623/0x8c0 [ 192.818603][ T7595] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 192.818629][ T7595] ? common_file_perm+0x1b5/0x230 [ 192.818660][ T7595] ? bpf_lsm_file_permission+0x9/0x20 [ 192.818679][ T7595] ? security_file_permission+0x75/0x290 [ 192.818703][ T7595] ? rw_verify_area+0x255/0x4d0 [ 192.818731][ T7595] vfs_writev+0x31a/0x960 [ 192.818755][ T7595] ? __lock_acquire+0xab9/0xd20 [ 192.818781][ T7595] ? __pfx_vfs_writev+0x10/0x10 [ 192.818814][ T7595] ? __fget_files+0x2a/0x420 [ 192.818835][ T7595] ? __fget_files+0x3a0/0x420 [ 192.818852][ T7595] ? __fget_files+0x2a/0x420 [ 192.818877][ T7595] do_writev+0x14d/0x2d0 [ 192.818900][ T7595] ? __pfx_do_writev+0x10/0x10 [ 192.818922][ T7595] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 192.818949][ T7595] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.818976][ T7595] __do_fast_syscall_32+0xb6/0x2b0 [ 192.819003][ T7595] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.819030][ T7595] do_fast_syscall_32+0x34/0x80 [ 192.819056][ T7595] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.819079][ T7595] RIP: 0023:0xf70ad539 [ 192.819095][ T7595] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 192.819112][ T7595] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 192.819131][ T7595] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 192.819144][ T7595] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.819154][ T7595] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.819165][ T7595] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 192.819175][ T7595] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.819201][ T7595] [ 193.451765][ T7600] vivid-007: ================= START STATUS ================= [ 193.451824][ T7600] vivid-007: Enable Output Cropping: true [ 193.451905][ T7600] vivid-007: Enable Output Composing: true [ 193.451921][ T7600] vivid-007: Enable Output Scaler: true [ 193.451936][ T7600] vivid-007: Tx RGB Quantization Range: Automatic [ 193.451952][ T7600] vivid-007: Transmit Mode: HDMI [ 193.451968][ T7600] vivid-007: Hotplug Present: 0x00000000 [ 193.451984][ T7600] vivid-007: RxSense Present: 0x00000000 [ 193.451999][ T7600] vivid-007: EDID Present: 0x00000000 [ 193.452015][ T7600] vivid-007: ================== END STATUS ================== [ 193.469048][ T5922] usb 4-1: USB disconnect, device number 18 [ 194.053396][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.061863][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.063464][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 194.075436][ T7613] FAULT_INJECTION: forcing a failure. [ 194.075436][ T7613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.208068][ T7613] CPU: 1 UID: 0 PID: 7613 Comm: syz.3.456 Not tainted syzkaller #0 PREEMPT(full) [ 194.208088][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.208097][ T7613] Call Trace: [ 194.208102][ T7613] [ 194.208108][ T7613] dump_stack_lvl+0x189/0x250 [ 194.208130][ T7613] ? __pfx____ratelimit+0x10/0x10 [ 194.208147][ T7613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.208165][ T7613] ? __pfx__printk+0x10/0x10 [ 194.208185][ T7613] should_fail_ex+0x414/0x560 [ 194.208208][ T7613] _copy_to_user+0x31/0xb0 [ 194.208227][ T7613] simple_read_from_buffer+0xe1/0x170 [ 194.208250][ T7613] proc_fail_nth_read+0x1b3/0x220 [ 194.208272][ T7613] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 194.208290][ T7613] ? rw_verify_area+0x2a6/0x4d0 [ 194.208325][ T7613] ? __lock_acquire+0xab9/0xd20 [ 194.208337][ T7613] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 194.208355][ T7613] vfs_read+0x200/0xa30 [ 194.208372][ T7613] ? fdget_pos+0x247/0x320 [ 194.208388][ T7613] ? __pfx___mutex_lock+0x10/0x10 [ 194.208407][ T7613] ? __pfx_vfs_read+0x10/0x10 [ 194.208427][ T7613] ? __fget_files+0x2a/0x420 [ 194.208442][ T7613] ? __fget_files+0x3a0/0x420 [ 194.208454][ T7613] ? __fget_files+0x2a/0x420 [ 194.208472][ T7613] ksys_read+0x145/0x250 [ 194.208490][ T7613] ? exc_page_fault+0x82/0x100 [ 194.208525][ T7613] ? __pfx_ksys_read+0x10/0x10 [ 194.208548][ T7613] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 194.208569][ T7613] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.208590][ T7613] __do_fast_syscall_32+0xb6/0x2b0 [ 194.208611][ T7613] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.208633][ T7613] do_fast_syscall_32+0x34/0x80 [ 194.208653][ T7613] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.208677][ T7613] RIP: 0023:0xf70cd539 [ 194.208690][ T7613] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 194.208714][ T7613] RSP: 002b:00000000f54bd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 194.208729][ T7613] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54bd620 [ 194.208738][ T7613] RDX: 000000000000000f RSI: 00000000f7465ff4 RDI: 0000000000000000 [ 194.208746][ T7613] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 194.208754][ T7613] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 194.208761][ T7613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.208781][ T7613] [ 194.730714][ T7625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.457'. [ 195.027315][ T811] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 195.178004][ T811] usb 4-1: Using ep0 maxpacket: 16 [ 195.185109][ T811] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.220521][ T7639] EXT4-fs: Conflicting test_dummy_encryption options [ 195.263699][ T811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.263733][ T811] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 195.263754][ T811] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.267397][ T811] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 195.267424][ T811] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 195.267443][ T811] usb 4-1: Manufacturer: syz [ 195.270426][ T811] usb 4-1: config 0 descriptor?? [ 195.558575][ T5945] usb 4-1: USB disconnect, device number 19 [ 195.789212][ T43] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 195.957295][ T43] usb 3-1: device descriptor read/64, error -71 [ 196.197290][ T43] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 196.377292][ T43] usb 3-1: device descriptor read/64, error -71 [ 196.488796][ T43] usb usb3-port1: attempt power cycle [ 196.857234][ T43] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 196.901194][ T43] usb 3-1: device descriptor read/8, error -71 [ 196.966090][ T7661] FAULT_INJECTION: forcing a failure. [ 196.966090][ T7661] name failslab, interval 1, probability 0, space 0, times 0 [ 197.013151][ T7661] CPU: 0 UID: 0 PID: 7661 Comm: syz.1.469 Not tainted syzkaller #0 PREEMPT(full) [ 197.013178][ T7661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 197.013190][ T7661] Call Trace: [ 197.013198][ T7661] [ 197.013205][ T7661] dump_stack_lvl+0x189/0x250 [ 197.013237][ T7661] ? __pfx____ratelimit+0x10/0x10 [ 197.013260][ T7661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.013285][ T7661] ? __pfx__printk+0x10/0x10 [ 197.013308][ T7661] ? __lock_acquire+0xab9/0xd20 [ 197.013333][ T7661] should_fail_ex+0x414/0x560 [ 197.013366][ T7661] should_failslab+0xa8/0x100 [ 197.013387][ T7661] kmem_cache_alloc_noprof+0x74/0x6e0 [ 197.013413][ T7661] ? skb_clone+0x212/0x3a0 [ 197.013437][ T7661] skb_clone+0x212/0x3a0 [ 197.013459][ T7661] __netlink_deliver_tap+0x404/0x850 [ 197.013499][ T7661] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.013529][ T7661] netlink_deliver_tap+0x19c/0x1b0 [ 197.013568][ T7661] netlink_unicast+0x7fa/0x9e0 [ 197.013602][ T7661] ? __pfx_netlink_unicast+0x10/0x10 [ 197.013630][ T7661] ? netlink_sendmsg+0x642/0xb30 [ 197.013645][ T7661] ? skb_put+0x11b/0x210 [ 197.013664][ T7661] netlink_sendmsg+0x805/0xb30 [ 197.013691][ T7661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.013710][ T7661] ? __import_iovec+0x5d4/0x7f0 [ 197.013731][ T7661] ? aa_sock_msg_perm+0xf1/0x1d0 [ 197.013759][ T7661] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.013777][ T7661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.013795][ T7661] __sock_sendmsg+0x21c/0x270 [ 197.013821][ T7661] ____sys_sendmsg+0x505/0x830 [ 197.013845][ T7661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.013880][ T7661] ___sys_sendmsg+0x21f/0x2a0 [ 197.013901][ T7661] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.013951][ T7661] ? __fget_files+0x2a/0x420 [ 197.013968][ T7661] ? __fget_files+0x3a0/0x420 [ 197.013995][ T7661] __sys_sendmsg+0x164/0x220 [ 197.014017][ T7661] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.014045][ T7661] ? __pfx_ksys_write+0x10/0x10 [ 197.014073][ T7661] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 197.014115][ T7661] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.014143][ T7661] __do_fast_syscall_32+0xb6/0x2b0 [ 197.014170][ T7661] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.014197][ T7661] do_fast_syscall_32+0x34/0x80 [ 197.014222][ T7661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.014245][ T7661] RIP: 0023:0xf70ad539 [ 197.014269][ T7661] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 197.014285][ T7661] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 197.014305][ T7661] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 197.014317][ T7661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.014345][ T7661] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.014356][ T7661] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 197.014368][ T7661] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.014398][ T7661] [ 197.311719][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.388528][ T43] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 197.439732][ T43] usb 3-1: device descriptor read/8, error -71 [ 197.559445][ T7673] EXT4-fs: Conflicting test_dummy_encryption options [ 197.567604][ T43] usb usb3-port1: unable to enumerate USB device [ 197.846629][ T7676] netlink: 'syz.0.474': attribute type 8 has an invalid length. [ 198.932602][ T7695] EXT4-fs: Conflicting test_dummy_encryption options [ 199.246783][ T7699] FAULT_INJECTION: forcing a failure. [ 199.246783][ T7699] name failslab, interval 1, probability 0, space 0, times 0 [ 199.288680][ T30] audit: type=1326 audit(1761672675.052:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.0.483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 199.489670][ T7699] CPU: 0 UID: 0 PID: 7699 Comm: syz.4.482 Not tainted syzkaller #0 PREEMPT(full) [ 199.489696][ T7699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 199.489707][ T7699] Call Trace: [ 199.489714][ T7699] [ 199.489722][ T7699] dump_stack_lvl+0x189/0x250 [ 199.489751][ T7699] ? __pfx____ratelimit+0x10/0x10 [ 199.489772][ T7699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.489796][ T7699] ? __pfx__printk+0x10/0x10 [ 199.489819][ T7699] ? __pfx___might_resched+0x10/0x10 [ 199.489838][ T7699] ? fs_reclaim_acquire+0x7d/0x100 [ 199.489871][ T7699] should_fail_ex+0x414/0x560 [ 199.489902][ T7699] should_failslab+0xa8/0x100 [ 199.489923][ T7699] __kmalloc_cache_node_noprof+0x74/0x6f0 [ 199.489950][ T7699] ? __get_vm_area_node+0x13f/0x300 [ 199.489973][ T7699] ? look_up_lock_class+0x74/0x170 [ 199.490002][ T7699] __get_vm_area_node+0x13f/0x300 [ 199.490033][ T7699] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 199.490071][ T7699] ? kvm_arch_prepare_memory_region+0x33b/0xed0 [ 199.490111][ T7699] ? rcu_is_watching+0x15/0xb0 [ 199.490133][ T7699] ? trace_contention_end+0x39/0x120 [ 199.490157][ T7699] ? __mutex_lock+0x335/0x1350 [ 199.490186][ T7699] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 199.490224][ T7699] ? kvm_arch_prepare_memory_region+0x33b/0xed0 [ 199.490245][ T7699] __vmalloc_noprof+0xb1/0xf0 [ 199.490271][ T7699] ? kvm_arch_prepare_memory_region+0x33b/0xed0 [ 199.490297][ T7699] kvm_arch_prepare_memory_region+0x33b/0xed0 [ 199.490324][ T7699] ? kvm_gmem_bind+0x21d/0x490 [ 199.490354][ T7699] kvm_set_memslot+0x599/0x1310 [ 199.490375][ T7699] ? kvm_check_memslot_overlap+0x301/0x380 [ 199.490405][ T7699] kvm_set_memory_region+0x966/0xb90 [ 199.490441][ T7699] kvm_vm_ioctl_set_memory_region+0x6f/0xd0 [ 199.490467][ T7699] kvm_vm_ioctl+0x957/0xc60 [ 199.490492][ T7699] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 199.490513][ T7699] ? __kasan_save_free_info+0x46/0x50 [ 199.490534][ T7699] ? __kasan_slab_free+0x5c/0x80 [ 199.490559][ T7699] ? kfree+0x19a/0x6d0 [ 199.490580][ T7699] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 199.490602][ T7699] ? security_file_ioctl_compat+0xcb/0x2d0 [ 199.490623][ T7699] ? __ia32_compat_sys_ioctl+0x128/0x840 [ 199.490645][ T7699] ? __do_fast_syscall_32+0xb6/0x2b0 [ 199.490670][ T7699] ? do_fast_syscall_32+0x34/0x80 [ 199.490697][ T7699] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.490760][ T7699] ? kasan_quarantine_put+0xdd/0x220 [ 199.490785][ T7699] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.490818][ T7699] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 199.490843][ T7699] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 199.490870][ T7699] ? do_vfs_ioctl+0xbe8/0x1430 [ 199.490896][ T7699] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 199.490934][ T7699] ? __lock_acquire+0xab9/0xd20 [ 199.490964][ T7699] kvm_vm_compat_ioctl+0x265/0x330 [ 199.490993][ T7699] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 199.491020][ T7699] ? __fget_files+0x3a0/0x420 [ 199.491037][ T7699] ? __fget_files+0x2a/0x420 [ 199.491058][ T7699] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 199.491089][ T7699] __ia32_compat_sys_ioctl+0x543/0x840 [ 199.491117][ T7699] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 199.491143][ T7699] ? __fget_files+0x3a0/0x420 [ 199.491167][ T7699] ? fput+0xa0/0xd0 [ 199.491188][ T7699] ? ksys_write+0x22a/0x250 [ 199.491212][ T7699] ? exc_page_fault+0x82/0x100 [ 199.491236][ T7699] ? __pfx_ksys_write+0x10/0x10 [ 199.491265][ T7699] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 199.491292][ T7699] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.491320][ T7699] __do_fast_syscall_32+0xb6/0x2b0 [ 199.491347][ T7699] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.491375][ T7699] do_fast_syscall_32+0x34/0x80 [ 199.491401][ T7699] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.491423][ T7699] RIP: 0023:0xf7f23539 [ 199.491439][ T7699] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 199.491472][ T7699] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 199.491492][ T7699] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040a0ae49 [ 199.491506][ T7699] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 199.491518][ T7699] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 199.491530][ T7699] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 199.491554][ T7699] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 199.491582][ T7699] [ 199.926864][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.984874][ T7699] syz.4.482: vmalloc error: size 4, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 200.000586][ T7699] CPU: 0 UID: 0 PID: 7699 Comm: syz.4.482 Not tainted syzkaller #0 PREEMPT(full) [ 200.000610][ T7699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 200.000621][ T7699] Call Trace: [ 200.000628][ T7699] [ 200.000636][ T7699] dump_stack_lvl+0x189/0x250 [ 200.000668][ T7699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.000695][ T7699] ? __pfx__printk+0x10/0x10 [ 200.000714][ T7699] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 200.000740][ T7699] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 200.000768][ T7699] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 200.000796][ T7699] warn_alloc+0x214/0x310 [ 200.000830][ T7699] ? __pfx_warn_alloc+0x10/0x10 [ 200.000858][ T7699] ? look_up_lock_class+0x74/0x170 [ 200.000888][ T7699] ? __get_vm_area_node+0x2b5/0x300 [ 200.000921][ T7699] __vmalloc_node_range_noprof+0x331/0x12d0 [ 200.000964][ T7699] ? rcu_is_watching+0x15/0xb0 [ 200.000986][ T7699] ? trace_contention_end+0x39/0x120 [ 200.001010][ T7699] ? __mutex_lock+0x335/0x1350 [ 200.001044][ T7699] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 200.001081][ T7699] ? kvm_arch_prepare_memory_region+0x33b/0xed0 [ 200.001102][ T7699] __vmalloc_noprof+0xb1/0xf0 [ 200.001127][ T7699] ? kvm_arch_prepare_memory_region+0x33b/0xed0 [ 200.001152][ T7699] kvm_arch_prepare_memory_region+0x33b/0xed0 [ 200.001180][ T7699] ? kvm_gmem_bind+0x21d/0x490 [ 200.001208][ T7699] kvm_set_memslot+0x599/0x1310 [ 200.001230][ T7699] ? kvm_check_memslot_overlap+0x301/0x380 [ 200.001258][ T7699] kvm_set_memory_region+0x966/0xb90 [ 200.001294][ T7699] kvm_vm_ioctl_set_memory_region+0x6f/0xd0 [ 200.001319][ T7699] kvm_vm_ioctl+0x957/0xc60 [ 200.001342][ T7699] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 200.001361][ T7699] ? __kasan_save_free_info+0x46/0x50 [ 200.001382][ T7699] ? __kasan_slab_free+0x5c/0x80 [ 200.001408][ T7699] ? kfree+0x19a/0x6d0 [ 200.001427][ T7699] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 200.001447][ T7699] ? security_file_ioctl_compat+0xcb/0x2d0 [ 200.001468][ T7699] ? __ia32_compat_sys_ioctl+0x128/0x840 [ 200.001490][ T7699] ? __do_fast_syscall_32+0xb6/0x2b0 [ 200.001513][ T7699] ? do_fast_syscall_32+0x34/0x80 [ 200.001535][ T7699] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.001593][ T7699] ? kasan_quarantine_put+0xdd/0x220 [ 200.001618][ T7699] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.001649][ T7699] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 200.001672][ T7699] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 200.001697][ T7699] ? do_vfs_ioctl+0xbe8/0x1430 [ 200.001723][ T7699] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 200.001760][ T7699] ? __lock_acquire+0xab9/0xd20 [ 200.001790][ T7699] kvm_vm_compat_ioctl+0x265/0x330 [ 200.001817][ T7699] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 200.001842][ T7699] ? __fget_files+0x3a0/0x420 [ 200.001857][ T7699] ? __fget_files+0x2a/0x420 [ 200.001877][ T7699] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 200.001901][ T7699] __ia32_compat_sys_ioctl+0x543/0x840 [ 200.001928][ T7699] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 200.001953][ T7699] ? __fget_files+0x3a0/0x420 [ 200.001976][ T7699] ? fput+0xa0/0xd0 [ 200.001996][ T7699] ? ksys_write+0x22a/0x250 [ 200.002029][ T7699] ? exc_page_fault+0x82/0x100 [ 200.002052][ T7699] ? __pfx_ksys_write+0x10/0x10 [ 200.002081][ T7699] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 200.002107][ T7699] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.002134][ T7699] __do_fast_syscall_32+0xb6/0x2b0 [ 200.002159][ T7699] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.002186][ T7699] do_fast_syscall_32+0x34/0x80 [ 200.002212][ T7699] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.002233][ T7699] RIP: 0023:0xf7f23539 [ 200.002249][ T7699] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 200.002265][ T7699] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 200.002284][ T7699] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040a0ae49 [ 200.002297][ T7699] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.002308][ T7699] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 200.002318][ T7699] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 200.002328][ T7699] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.002356][ T7699] [ 200.002373][ T7699] Mem-Info: [ 200.431515][ T30] audit: type=1326 audit(1761672675.052:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.0.483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 200.453588][ T30] audit: type=1326 audit(1761672675.092:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.0.483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 200.478800][ T30] audit: type=1326 audit(1761672675.092:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.0.483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 200.501615][ T7699] active_anon:6642 inactive_anon:0 isolated_anon:0 [ 200.501615][ T7699] active_file:12900 inactive_file:39951 isolated_file:0 [ 200.501615][ T7699] unevictable:768 dirty:332 writeback:0 [ 200.501615][ T7699] slab_reclaimable:10552 slab_unreclaimable:97987 [ 200.501615][ T7699] mapped:34676 shmem:1357 pagetables:1345 [ 200.501615][ T7699] sec_pagetables:0 bounce:0 [ 200.501615][ T7699] kernel_misc_reclaimable:0 [ 200.501615][ T7699] free:1312680 free_pcp:16620 free_cma:0 [ 200.548907][ T30] audit: type=1326 audit(1761672675.092:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.0.483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 200.570719][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.628039][ T30] audit: type=1326 audit(1761672675.092:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.0.483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 200.650163][ T7699] Node 0 active_anon:26668kB inactive_anon:0kB active_file:51600kB inactive_file:159604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138704kB dirty:1328kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12696kB pagetables:5144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 200.681986][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.836988][ T7699] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 200.873047][ T30] audit: type=1326 audit(1761672675.252:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.0.483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 200.901729][ T30] audit: type=1326 audit(1761672675.252:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.0.483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 200.923563][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.933067][ T30] audit: type=1326 audit(1761672675.252:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.0.483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 200.954895][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.971732][ T7699] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 201.022501][ T30] audit: type=1326 audit(1761672675.252:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.0.483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 201.047598][ T7699] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 201.053400][ T7699] Node 0 DMA32 free:1354028kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26768kB inactive_anon:0kB active_file:51600kB inactive_file:159604kB unevictable:1536kB writepending:1328kB zspages:0kB present:3129332kB managed:2565184kB mlocked:0kB bounce:0kB free_pcp:39812kB local_pcp:18652kB free_cma:0kB [ 201.315833][ T7699] lowmem_reserve[]: 0 0 0 0 0 [ 201.338155][ T7699] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 201.405915][ T7699] lowmem_reserve[]: 0 0 0 0 0 [ 201.410970][ T7699] Node 1 Normal free:3882352kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:27176kB local_pcp:16852kB free_cma:0kB [ 201.454911][ T7719] FAULT_INJECTION: forcing a failure. [ 201.454911][ T7719] name failslab, interval 1, probability 0, space 0, times 0 [ 201.471084][ T7719] CPU: 1 UID: 0 PID: 7719 Comm: syz.1.487 Not tainted syzkaller #0 PREEMPT(full) [ 201.471108][ T7719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.471120][ T7719] Call Trace: [ 201.471127][ T7719] [ 201.471136][ T7719] dump_stack_lvl+0x189/0x250 [ 201.471166][ T7719] ? __pfx____ratelimit+0x10/0x10 [ 201.471189][ T7719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.471215][ T7719] ? __pfx__printk+0x10/0x10 [ 201.471246][ T7719] ? __pfx___might_resched+0x10/0x10 [ 201.471272][ T7719] should_fail_ex+0x414/0x560 [ 201.471305][ T7719] should_failslab+0xa8/0x100 [ 201.471325][ T7719] __kmalloc_noprof+0xcb/0x7f0 [ 201.471350][ T7719] ? kfree+0x4d/0x6d0 [ 201.471369][ T7719] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 201.471403][ T7719] tomoyo_realpath_from_path+0xe3/0x5d0 [ 201.471443][ T7719] tomoyo_check_open_permission+0x1c1/0x3b0 [ 201.471468][ T7719] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 201.471491][ T7719] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 201.471542][ T7719] ? lockref_get+0x15/0x60 [ 201.471569][ T7719] ? tomoyo_file_open+0x165/0x220 [ 201.471590][ T7719] security_file_open+0xb1/0x270 [ 201.471613][ T7719] do_dentry_open+0x384/0x13f0 [ 201.471639][ T7719] ? vfs_open+0x31/0x340 [ 201.471662][ T7719] vfs_open+0x3b/0x340 [ 201.471679][ T7719] ? path_openat+0x2ecd/0x3830 [ 201.471705][ T7719] path_openat+0x2ee5/0x3830 [ 201.471760][ T7719] ? __pfx_path_openat+0x10/0x10 [ 201.471803][ T7719] do_filp_open+0x1fa/0x410 [ 201.471825][ T7719] ? __lock_acquire+0xab9/0xd20 [ 201.471844][ T7719] ? __pfx_do_filp_open+0x10/0x10 [ 201.471890][ T7719] ? _raw_spin_unlock+0x28/0x50 [ 201.471910][ T7719] ? alloc_fd+0x64c/0x6c0 [ 201.471948][ T7719] do_sys_openat2+0x121/0x1c0 [ 201.471972][ T7719] ? __pfx_do_sys_openat2+0x10/0x10 [ 201.471994][ T7719] ? ksys_write+0x22a/0x250 [ 201.472019][ T7719] ? exc_page_fault+0x82/0x100 [ 201.472042][ T7719] ? __pfx_ksys_write+0x10/0x10 [ 201.472071][ T7719] __ia32_compat_sys_openat+0x131/0x160 [ 201.472099][ T7719] __do_fast_syscall_32+0xb6/0x2b0 [ 201.472126][ T7719] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.472153][ T7719] do_fast_syscall_32+0x34/0x80 [ 201.472179][ T7719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.472202][ T7719] RIP: 0023:0xf70ad539 [ 201.472217][ T7719] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 201.472233][ T7719] RSP: 002b:00000000f547c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 201.472271][ T7719] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 201.472284][ T7719] RDX: 0000000000000280 RSI: 0000000000000002 RDI: 0000000000000000 [ 201.472295][ T7719] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.472306][ T7719] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 201.472316][ T7719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.472344][ T7719] [ 201.472352][ T7719] ERROR: Out of memory at tomoyo_realpath_from_path. [ 201.637310][ T7699] lowmem_reserve[]: 0 0 0 0 0 [ 201.795415][ T7699] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 201.808716][ T7699] Node 0 DMA32: 479*4kB (UME) 320*8kB (UME) 228*16kB (UME) 230*32kB (UME) 120*64kB (UME) 101*128kB (UME) 62*256kB (UM) 22*512kB (UME) 8*1024kB (UME) 4*2048kB (UME) 313*4096kB (M) = 1361660kB [ 201.831202][ T7699] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 201.845198][ T7699] Node 1 Normal: 6*4kB (UME) 22*8kB (UME) 50*16kB (UME) 76*32kB (UME) 22*64kB (UME) 11*128kB (UME) 7*256kB (UME) 8*512kB (UME) 0*1024kB 2*2048kB (ME) 944*4096kB (M) = 3882856kB [ 201.891002][ T7699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.900841][ T7699] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 201.910476][ T7699] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.921255][ T5945] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 201.932729][ T7699] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 201.942292][ T7699] 54205 total pagecache pages [ 201.946994][ T7699] 0 pages in swap cache [ 201.956024][ T7699] Free swap = 124996kB [ 201.960980][ T7699] Total swap = 124996kB [ 201.979158][ T7699] 2097051 pages RAM [ 201.994616][ T7699] 0 pages HighMem/MovableOnly [ 202.018809][ T7699] 424113 pages reserved [ 202.035095][ T7699] 0 pages cma reserved [ 202.050103][ T7697] ================================================================== [ 202.058189][ T7697] BUG: KASAN: slab-use-after-free in kvm_gmem_release+0x176/0x440 [ 202.066007][ T7697] Write of size 8 at addr ffff8880585a8508 by task syz.4.482/7697 [ 202.073817][ T7697] [ 202.076147][ T7697] CPU: 1 UID: 0 PID: 7697 Comm: syz.4.482 Not tainted syzkaller #0 PREEMPT(full) [ 202.076166][ T7697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 202.076177][ T7697] Call Trace: [ 202.076185][ T7697] [ 202.076192][ T7697] dump_stack_lvl+0x189/0x250 [ 202.076217][ T7697] ? __kasan_check_byte+0x12/0x40 [ 202.076233][ T7697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.076254][ T7697] ? lock_release+0x4b/0x3e0 [ 202.076272][ T7697] ? __virt_addr_valid+0x4a5/0x5c0 [ 202.076295][ T7697] print_report+0xca/0x240 [ 202.076314][ T7697] ? kvm_gmem_release+0x176/0x440 [ 202.076333][ T7697] kasan_report+0x118/0x150 [ 202.076348][ T7697] ? kvm_gmem_release+0x176/0x440 [ 202.076370][ T7697] kvm_gmem_release+0x176/0x440 [ 202.076402][ T7697] ? __pfx_kvm_gmem_release+0x10/0x10 [ 202.076423][ T7697] ? evm_file_release+0x101/0x1e0 [ 202.076441][ T7697] ? __pfx_kvm_gmem_release+0x10/0x10 [ 202.076459][ T7697] __fput+0x44c/0xa70 [ 202.076479][ T7697] task_work_run+0x1d4/0x260 [ 202.076503][ T7697] ? __pfx_task_work_run+0x10/0x10 [ 202.076527][ T7697] ? exit_to_user_mode_loop+0x40/0x130 [ 202.076541][ T7697] exit_to_user_mode_loop+0xe9/0x130 [ 202.076555][ T7697] __do_fast_syscall_32+0x1f4/0x2b0 [ 202.076578][ T7697] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.076598][ T7697] do_fast_syscall_32+0x34/0x80 [ 202.076619][ T7697] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.076637][ T7697] RIP: 0023:0xf7f23539 [ 202.076650][ T7697] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 202.076664][ T7697] RSP: 002b:00000000f750faec EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 202.076680][ T7697] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 202.076689][ T7697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.076698][ T7697] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 202.076706][ T7697] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 202.076715][ T7697] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.076731][ T7697] [ 202.076736][ T7697] [ 202.289136][ T7697] Allocated by task 7699: [ 202.293464][ T7697] kasan_save_track+0x3e/0x80 [ 202.298144][ T7697] __kasan_kmalloc+0x93/0xb0 [ 202.302731][ T7697] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 202.308113][ T7697] kvm_set_memory_region+0x747/0xb90 [ 202.313411][ T7697] kvm_vm_ioctl_set_memory_region+0x6f/0xd0 [ 202.319306][ T7697] kvm_vm_ioctl+0x957/0xc60 [ 202.323811][ T7697] kvm_vm_compat_ioctl+0x265/0x330 [ 202.328933][ T7697] __ia32_compat_sys_ioctl+0x543/0x840 [ 202.334397][ T7697] __do_fast_syscall_32+0xb6/0x2b0 [ 202.339519][ T7697] do_fast_syscall_32+0x34/0x80 [ 202.344371][ T7697] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.350694][ T7697] [ 202.353012][ T7697] Freed by task 7699: [ 202.356985][ T7697] kasan_save_track+0x3e/0x80 [ 202.361683][ T7697] __kasan_save_free_info+0x46/0x50 [ 202.366895][ T7697] __kasan_slab_free+0x5c/0x80 [ 202.371786][ T7697] kfree+0x19a/0x6d0 [ 202.375725][ T7697] kvm_set_memory_region+0x9c4/0xb90 [ 202.381016][ T7697] kvm_vm_ioctl_set_memory_region+0x6f/0xd0 [ 202.386913][ T7697] kvm_vm_ioctl+0x957/0xc60 [ 202.391414][ T7697] kvm_vm_compat_ioctl+0x265/0x330 [ 202.396534][ T7697] __ia32_compat_sys_ioctl+0x543/0x840 [ 202.402008][ T7697] __do_fast_syscall_32+0xb6/0x2b0 [ 202.407153][ T7697] do_fast_syscall_32+0x34/0x80 [ 202.412017][ T7697] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.418340][ T7697] [ 202.420659][ T7697] The buggy address belongs to the object at ffff8880585a8400 [ 202.420659][ T7697] which belongs to the cache kmalloc-cg-512 of size 512 [ 202.435063][ T7697] The buggy address is located 264 bytes inside of [ 202.435063][ T7697] freed 512-byte region [ffff8880585a8400, ffff8880585a8600) [ 202.448870][ T7697] [ 202.451187][ T7697] The buggy address belongs to the physical page: [ 202.457607][ T7697] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x585a8 [ 202.466362][ T7697] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 202.474851][ T7697] memcg:ffff88802fe57501 [ 202.479087][ T7697] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 202.487067][ T7697] page_type: f5(slab) [ 202.491047][ T7697] raw: 00fff00000000040 ffff88801a030140 0000000000000000 dead000000000001 [ 202.499626][ T7697] raw: 0000000000000000 0000000000100010 00000000f5000000 ffff88802fe57501 [ 202.508213][ T7697] head: 00fff00000000040 ffff88801a030140 0000000000000000 dead000000000001 [ 202.516878][ T7697] head: 0000000000000000 0000000000100010 00000000f5000000 ffff88802fe57501 [ 202.525544][ T7697] head: 00fff00000000002 ffffea0001616a01 00000000ffffffff 00000000ffffffff [ 202.534205][ T7697] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 202.542870][ T7697] page dumped because: kasan: bad access detected [ 202.549287][ T7697] page_owner tracks the page as allocated [ 202.554988][ T7697] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5831, tgid 5831 (udevd), ts 84785938708, free_ts 24999344729 [ 202.575733][ T7697] post_alloc_hook+0x240/0x2a0 [ 202.580502][ T7697] get_page_from_freelist+0x2365/0x2440 [ 202.586039][ T7697] __alloc_frozen_pages_noprof+0x181/0x370 [ 202.591840][ T7697] alloc_pages_mpol+0x232/0x4a0 [ 202.596682][ T7697] allocate_slab+0x96/0x350 [ 202.601176][ T7697] ___slab_alloc+0xe94/0x18a0 [ 202.605843][ T7697] __slab_alloc+0x65/0x100 [ 202.610248][ T7697] __kmalloc_node_track_caller_noprof+0x5c7/0x800 [ 202.616659][ T7697] kmalloc_reserve+0x136/0x290 [ 202.621426][ T7697] __alloc_skb+0x142/0x2d0 [ 202.625845][ T7697] alloc_skb_with_frags+0xca/0x890 [ 202.630951][ T7697] sock_alloc_send_pskb+0x84d/0x980 [ 202.636140][ T7697] unix_dgram_sendmsg+0x461/0x1850 [ 202.641247][ T7697] __sock_sendmsg+0x21c/0x270 [ 202.645919][ T7697] sock_write_iter+0x279/0x360 [ 202.650677][ T7697] vfs_write+0x5c9/0xb30 [ 202.654917][ T7697] page last free pid 1 tgid 1 stack trace: [ 202.660709][ T7697] __free_frozen_pages+0xbc4/0xd30 [ 202.665818][ T7697] free_contig_range+0x1bd/0x4a0 [ 202.670772][ T7697] destroy_args+0x69/0x660 [ 202.675184][ T7697] debug_vm_pgtable+0x39f/0x3b0 [ 202.680028][ T7697] do_one_initcall+0x236/0x820 [ 202.684789][ T7697] do_initcall_level+0x104/0x190 [ 202.689725][ T7697] do_initcalls+0x59/0xa0 [ 202.694047][ T7697] kernel_init_freeable+0x334/0x4b0 [ 202.699244][ T7697] kernel_init+0x1d/0x1d0 [ 202.703563][ T7697] ret_from_fork+0x4bc/0x870 [ 202.708144][ T7697] ret_from_fork_asm+0x1a/0x30 [ 202.712906][ T7697] [ 202.715220][ T7697] Memory state around the buggy address: [ 202.720842][ T7697] ffff8880585a8400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.728895][ T7697] ffff8880585a8480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.736956][ T7697] >ffff8880585a8500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.745014][ T7697] ^ [ 202.749333][ T7697] ffff8880585a8580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.757383][ T7697] ffff8880585a8600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 202.765432][ T7697] ================================================================== [ 202.805968][ T7697] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 202.813200][ T7697] CPU: 1 UID: 0 PID: 7697 Comm: syz.4.482 Not tainted syzkaller #0 PREEMPT(full) [ 202.822402][ T7697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 202.832462][ T7697] Call Trace: [ 202.835752][ T7697] [ 202.838694][ T7697] dump_stack_lvl+0x99/0x250 [ 202.843308][ T7697] ? __asan_memcpy+0x40/0x70 [ 202.847912][ T7697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.853110][ T7697] ? __pfx__printk+0x10/0x10 [ 202.857712][ T7697] vpanic+0x237/0x6d0 [ 202.861692][ T7697] ? __pfx_vpanic+0x10/0x10 [ 202.866191][ T7697] ? preempt_schedule+0xae/0xc0 [ 202.871034][ T7697] ? __pfx_preempt_schedule+0x10/0x10 [ 202.876408][ T7697] panic+0xb9/0xc0 [ 202.880129][ T7697] ? __pfx_panic+0x10/0x10 [ 202.884547][ T7697] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 202.890438][ T7697] ? kvm_gmem_release+0x176/0x440 [ 202.895464][ T7697] check_panic_on_warn+0x89/0xb0 [ 202.900403][ T7697] ? kvm_gmem_release+0x176/0x440 [ 202.905421][ T7697] end_report+0x78/0x160 [ 202.909657][ T7697] kasan_report+0x129/0x150 [ 202.914152][ T7697] ? kvm_gmem_release+0x176/0x440 [ 202.919177][ T7697] kvm_gmem_release+0x176/0x440 [ 202.924023][ T7697] ? __pfx_kvm_gmem_release+0x10/0x10 [ 202.929394][ T7697] ? evm_file_release+0x101/0x1e0 [ 202.934415][ T7697] ? __pfx_kvm_gmem_release+0x10/0x10 [ 202.939782][ T7697] __fput+0x44c/0xa70 [ 202.943766][ T7697] task_work_run+0x1d4/0x260 [ 202.948359][ T7697] ? __pfx_task_work_run+0x10/0x10 [ 202.953473][ T7697] ? exit_to_user_mode_loop+0x40/0x130 [ 202.958926][ T7697] exit_to_user_mode_loop+0xe9/0x130 [ 202.964209][ T7697] __do_fast_syscall_32+0x1f4/0x2b0 [ 202.969411][ T7697] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.974619][ T7697] do_fast_syscall_32+0x34/0x80 [ 202.979470][ T7697] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.985799][ T7697] RIP: 0023:0xf7f23539 [ 202.989866][ T7697] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 203.009471][ T7697] RSP: 002b:00000000f750faec EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 203.017886][ T7697] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 203.025852][ T7697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.033817][ T7697] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 203.041778][ T7697] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 203.049741][ T7697] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.057716][ T7697] [ 203.061091][ T7697] Kernel Offset: disabled [ 203.065407][ T7697] Rebooting in 86400 seconds..