last executing test programs: 1m59.31904865s ago: executing program 0 (id=131): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x8000) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) 1m59.25796982s ago: executing program 0 (id=132): creat(&(0x7f0000000140)='./file0\x00', 0x130) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_pts(0xffffffffffffffff, 0xe02) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x8, 0x0) (async) listen(r3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, &(0x7f00000000c0)=0x5193c11c) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x80045010, &(0x7f0000000940)) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r10, 0x89ea, &(0x7f0000000080)) (async) r11 = socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000500)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x65, r13}) (async) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuseblk\x00', 0x208083, 0x0) 1m59.120948051s ago: executing program 0 (id=133): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000000000)='\x00', 0x1, 0x7fff800000000002}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000380)={0x28, 0x2, r1, r1, 0x1000, 0x5, 0x9}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) r3 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04131906c900040000452c00c9000104c9000000c8000000c9000300"], 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x6, 0x9, &(0x7f0000000200)={{0x2, @local, 0x0, 0x0, 'lc\x00'}, {@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x44) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000180)=0xffff0018) ioctl$SOUND_PCM_READ_BITS(r4, 0x80045005, 0x0) write(r3, &(0x7f0000000280), 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m59.103963605s ago: executing program 0 (id=134): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x77682a85, 0x0, 0x0, 0x70, 0x1, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xf90, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1m59.073330921s ago: executing program 0 (id=135): r0 = socket$nl_rdma(0x10, 0x3, 0x14) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x140, 0x40000000, 0x41000000}], 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='coda\x00', 0x3202404, 0x0) 1m59.017309581s ago: executing program 0 (id=136): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) sendfile(r3, r0, 0x0, 0x7ffff000) 1m43.989724561s ago: executing program 32 (id=136): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) sendfile(r3, r0, 0x0, 0x7ffff000) 5.760951785s ago: executing program 3 (id=1070): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x64342, 0x0) syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x0, 0x108}, &(0x7f0000000000), &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r1, 0x14, 0x1) getdents(r1, 0xffffffffffffffff, 0x5a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 5.172633165s ago: executing program 3 (id=1075): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x7000000, 0x0, 0x58, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x4000002}, @flat=@weak_binder={0x77622a85, 0x100, 0x1}, @flat=@handle={0x73682a85, 0x100b, 0x77682a85}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 5.024943552s ago: executing program 3 (id=1076): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_pts(0xffffffffffffffff, 0xe02) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x234e000000000000) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0800000000000000830000c0"]) 5.012389262s ago: executing program 3 (id=1078): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x502, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) read$FUSE(r0, &(0x7f00000031c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4212, r4, 0x200, &(0x7f00000001c0)={&(0x7f00000000c0)=""/102, 0x66}) newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./bus\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r5, r5, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000005200)='./bus\x00', &(0x7f0000005240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_pidfd_open(0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000007ac0)=[{{&(0x7f0000000380)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000300)="bc40804f6fa9af3801b208cb6e4a201d5af1ba68f7df93f45e5031997059d41d541b0c6a9ac2d4e325d9", 0x2a}, {&(0x7f0000000580)="35fc9e6d3938c645dcc8a3fc4381640dd19f5dbc003cf49595bf361464df2291a82be663e028f58dd2fd2743afa93d2a12cf2be198ae95309dd871595d82d75b9be5f2f2e5ff0132c875b59e92184ee204bb3913a5ef422b348cd9eb585154720d178414cd7e84d67803eb839caac82e9bf24e60aca6f891cdad773750371171950847dd41aa8d65dd676bbc53ff6bac693f469e3c3f960a2ff94c03ae2f46569db92c9472b99b175416c3409e961994e0d791ca33bde637e098800c9adec386f165a010314dd6d11f3b6d691633071893f0c26e83db467bbb538f", 0xdb}, {&(0x7f0000000680)="72a3d1352103ba803394a5e4b2ab14446fff7ad209b68d1a5af26b0e81dc06e9da4a2709cdeec0c4a8c9ddeac2424526c07e9d50fcf77dcd4b24858fa6df54da75961881d202b3dc6f1664f7c54cab6d913de7b2748dc553423bb4884ce0c4bc61e7bee022688895d8b68985925eab70b55f3962ac45f4dd7f60ed0d690811598824e31fa6e02ce1234bfb04946672d114cc2fe4ae32cc0a5a0793a018dbba6fe6d3", 0xa2}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000000440)="47f51ae7dad6cc61878829e5a655161273cfdfee8177b9e50d6fcae80f499341a45f2e58ce", 0x25}, {&(0x7f0000000740)="21301b4ff8df0bf56fcd541b02f309da21ff34f8d1a8384fb1811d30270d87bb56d8df40012fb6256245ba811f93c0c77b4560e9508768cf08529529c79421b783c1c860b6799580449ac8ce95667ac0344de3fbad192c019a4ac344d15a26bf9df34bc3545fa9bb2a3b7dd0382c2da64b3429eb855e29d5970b4da485056de1a60cddea064010718b54b916ff7e86007f4e05071aa33134f9864a1a483f8d4ca90a2bcfc212e482fd20e15f0474bb707c", 0xb1}, {&(0x7f0000000480)="0504bce05c67c515cbbd71f3c297e071d34aa471929ab86d3382a83c5f07628a5bd7e5", 0x23}, {&(0x7f0000001940)="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", 0x1000}], 0x8, &(0x7f0000002940)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="30000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000042476b5a4c92591645438b590f3d735c3ffd5e23e35a3dc35afc25e97b238ea986cbb9324f0327b8c47cacb8b09d65a4c0838fbc203921999b7932ee321d6ef74957db72bedbf3f7433686797395d07073e98d1a1eb9e4f1b8ad73dedae69d9c5ec3c9518e91e5e0117407bd5a54abc4b8cf67467d634fbf4a150426770988b0dd07398b01ee9cbe190441c4122cb1f20b64688269f00845139943ba65ef10a2680f253dc9a804215fcda1a65ef0dd999e26bc8f"], 0x90, 0x4000040}}, {{&(0x7f0000002c00)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000002c80)="66ef88569ee113e6fdf8dcadf77762c122e651ce414dea243924a6665132d5879e581beecf412463bb6471f62f6d8fb78ee5ad231731a154d0c7c049ff78fbeece0f6ba5ba5b46ac7328657227c9bc90ea172ef388da43e6ba2a8c7769c186e2fb0d43cafad903b81ede5428c9b6eb432f47c9516281fa3fff30d05d26867350d045261bf088f7fd01e2f27e6888cb7be9ac5344683f6f860f754cf95a41cbf3e6f9adca6a106ed970ee5465fc005c0ed79f98a260cb73865528d6c4e9e77d12200e0b7d3a8c3fb7f587ab8b0cf217b02de6a72d81d8b57f9806354ccb17f872ebb5f85917cb93c3", 0xe8}, {&(0x7f0000002d80)="a306ac6ce60ecfa548a79e471500aa41005e18828f9735274268335c85894d6b011f3cd94e1de73e7d64a785a7480c43727c3692316993fbea2e1d186d79e2c1d41175161b8b506dee4aef0d915dd6630038db8269475a0018fcfdc9a9a53ef3284d", 0x62}], 0x2, &(0x7f00000052c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x108, 0x4004000}}, {{&(0x7f0000005400)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000006740)=[{&(0x7f0000005480)="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", 0x1000}, {&(0x7f0000006480)="ea5f549bdc2bdd4f0fb3c0764df5ee9cd31d9a488a119940173ec31b25fb062da77d6cbf2f18f6aa8005860f62c006a9f2880678a0825e3e21b146784de75aebbeeffba0c8e3437872e577aa7965c147e130f5a9e70eeaaecc0d73c4313b64355a0c408b1a493a95d6502eca2e099040c97fde3b974e7206b2581d74cbb76395952740cfec294b5cbcc7a974a3b2aa56af76d8591d6534df295dcba3756b6e41ed24a70e635f6ead4e2f9f1346d377f2e5fdc4f3e73d284000f6c974770b23ab5c349b0fdc9625304336b2331c86d609bc0a2a1b0e194b", 0xd7}, {&(0x7f0000006580)="3d62e49cec275bdb2ce3f2be3c79d46a4caddf9d61a85b0c245802ff6dc51daf3e66cb95797a2e7a8b65f3e106fe71b28426fa75db28b3c12b74909b9adfb096ab5c7008af7ca38418c22086e31f6bb080cf5af375c29f84420b4d3b00b69ffacf1b0701ff10b1dc54f7f6178dc88982c9a48edc1054", 0x76}, {&(0x7f0000006600)="96d4f35f1b04e2f173bdfe3484b66ebbd12a0aeaf34a530c14fe82cdc36d2bc536cf5ba2036e5cebea60cb605da6a04ebbeb46a739537668ba75096960188bc906c654a1e7626cea7a71aae0ca6579ee1003e24332e05aa942fdd952744c4fc567ed1bac47d760e7feabc5344b9b9614da8a32d205b7588dabc3e6a92b97615ad4c0962dee7b1568811de5416d4a360c18bb94057ae24a5bf4826fabc03cd4a9ad71adffb4acd9936f14741a703c30b592030989e98a9908a589da5ba1b5b2c94544f21b3aaf06a9440f2842028c4bc75c6049b0d8", 0xd5}, {&(0x7f0000006700)}], 0x5, 0x0, 0x0, 0x40080}}, {{&(0x7f00000067c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000007a00)=[{&(0x7f0000006840)}, {&(0x7f0000006880)="4d8b11c331881d268fc4ae12283fd1b3fbb47572b2c1b2436ecec5583e69ac9b08a2", 0x22}, {&(0x7f00000068c0)="e3c34a02310e6f311004af7441d9ebf44fc5052309f56c4dab667452e5ac19ee3e4a84c8ea99eeb6a1cff5284f132b92ea0acc13cdd91664df32f2c1fb5a23d51eed900f3f53", 0x46}, {&(0x7f0000006940)="610eac808ddae0b027b08297062a16083c05fecb7ad2ac29fd38855dd4cd5863267c3f52d73146fe0bf2e9b6258a0b34c73bf1e4238f297def732ed8aeedd060f1b098e5e3e30c0de05a4ee34becda438b66006d00249dd02b4989df540d7fb1ad86b8d551c2a5dc69225e716239c5cae532fe0db767d575ac45714f13", 0x7d}, {&(0x7f00000069c0)='U ', 0x2}, {&(0x7f0000006a00)="7312d793ac158c59abd74d38cb9ddd742e9a0cf1305c5f97e9d2b0aadd51c81777b7138f1b974148d50c9e1bf967bddfe9034e5c91f3057a21c94718283f8dbb13d7cdc6e3b6b3b2ddca2485c64ff983e5382f507ca41dd810734faa77262e3aa31005cb130e4ab33d7d92b22415ff24aa00864925d1f5be4cd36214b6a82fb62c4edf09e0db634c681d5c4b257cd846c4aa3b522a1edf83f18be16899ac9e1935bef2d0368bfbc68f4261cd8794ca1cdef79b9ff25456a19ffbb61491a06bd233930cc121548981f0ebaab265fde7aa4ad027b92732aecb4a979f78d7029782dbafcfa23000e26c00d0665bd81d192f26823b0a589e74d9e357ab0b537d3519cf236a7a2727bbaa07a7dbad165dab703de5bfd64759ef1fc9bf4b68a808ce930631a395dbbbf5673d72ad0c4c9203915dbba92ec9cb9eea8de435e11e86b2843c4a4cfe3467b68ce08ac2c1048bcfadd46a0a0fe8efb3aa62b4ed67561625909169a36e00d52624f342d671f80338f26c2c2d2c5ad7bd5ddc7d4f46add88b72d76bb2c9b7f4964efdb57ffe1d58fae6fd0f112a0b12ead37e78210cc06656c43a136f417534134cd19df256bb7f58b808730877982125ea7d311257f5d6a8f5afc80168b3c02d6c057f2da8d68cfb8ea852809cd161a8a85b6e4db95ee68ac28bfbf7d83cbe39d9e152d3a576a37c692e04ac08278ed5afc564f7e29a2bf54a76248d2df30ec3fee5171fe6fd37a1c5434d12dea9ffd6a97b67998c46fc418e7d4ac51a252ba5dbfa0c4bb1691508f230d65dec1fbb1003e7ee1f34c421e3c5363925cb8d3b2dd8b057ca68e02b3e1a5ab1f69170847adbf8e3e0e398cc1b43c0abfdb72574485f81b0edb905348a532a9d5bd4cb5f6c10f7a4edb3c2c01ab0a97fbb49c49c20936a7a9848ad6ab8757625c744bdbc6eb71844cea83eaa130dbdcbd6f4e0bec4c89da3fee85bb9ea3cfc6a64ece5930c24bf2047697de9b9fcc80e3f1b86e2d5626710e3366df5fb52f535112739a87f79406894e451064327dc885b617835ad10c5b8ba7236372c4e6cc64d22f61c422b64c3bb6c5115bcb12721d5e294235565f227317f776447d34211c480814ab062f99b2cb1876809d5584f0e34323280c7942519ff892ea78c5ea503ec4dd3f6ef739a8422b30097e4a200798eed012710d44d4af752de51094871447d6a011511305b631de615450e3dc52c1eb92b2e8182d391f740433d5828808145111494111fcc1995c1d4c79185ce323690c0c6a982a5b13946c651776c52ae85146287ad77a05bb7cf5feff4bfc324fcab73484f42da06d3340d58e778c8dabee49468277c8a0a55fe814a7ba6a0d864c10cb800669692406db5db2529f63a9af34340b1e0b656910ff868d2bea8ffc91bd0f77c2fc066b13d4bec4136eeb2677362082c89e7c47bd88dfb6762dc08c3570a6814c8571976ecaacdc52530996d04b90dd396047e2756205af79c447a7740afb6b5e22644023e82f7b227d8ece096dadadb35e1df78e514f13287567d40ab86add8424740fac53069c6e94e08a11dc3b1ed74cc30e4224729c72ed59e378c2dfffa294f42605487da895b50a3d61d90d4aae81c5fd7f382d1baa3ed9ba670b6ef8e1e6a7e82abcac7f868e2ba51f1a0c4ad98a2d9765b2a8c88b1911e3bc1423b370541083be30d7a4aa6b6559481264e403323be9e9f505019937680ff332cf3ead86a44108a89d475180274a3c32d1cafa5544a5501876685a5e43ffe3614d6aa2c79ff03fbc76ddef786ecbd858a870fc1fe68a45c5059a90c0de39225382aa5cf88d02034c3c9f8d1c6c8ed57632e283410c0965fa5a796d3644c1f50d91c75e47a3aeb1d5173502dad6bb320bf29f61d760a960882aad33a8339651544eba094f05415af12635df9d479745cedb1129bfdb3911082e291e8be319dc47329a314a64ba8496a1b6bd9f25620813c90f8965500c9c95e5c33d96a85d5089d5769cf021be8059a0e3060a7d9e87a67a66228a28d328243ae69f9e271a85319b198fbe2992b54ac33d4f9f50f893dd6536b92685fee51281bb80fd3d40fbfafa7d113c41affe1dca8799914bb9113c73e12b7f10005e4511b59434b38056489d79f54568d901b52ffd2d8536a5461bdc24e4a8730cf63ebbc2da11b839830cedacaeac7d19db2b538d171e7ccc7278e60a730daddcea17f3e7098aa2a8afa0f6495bec7502d4c3bcbd08d0efe3f63908afc2b3b0b49e4852432f82c778683183c58b6842847e1f5c3e1c2eceaadc71d707588596b2ca2aa79c53a0198d07ec4017a69b474a03cdd4807c2812b3556d146c0a892cea1c9a462b7af536a97d038f2721fda583e4cc010830bc64a1bb0e3798d4aaf7a01fdf6cd9586dee7856f283fe9a9689d5362ec0997b701838e6c040725642cc7bc727d7462aa982d9bb63cd07dbad5c9b3752cb27709b2a9f29f935a90ee739b0e81b3974c6634bb2c4803555c7d3673abcfab4a833cfe9d2aa5293770412ecce8baa7dbb063f68f2b979cf5c79053c313ddde3563e3f7af04be7f0e0deda86671ed03cecb48f1e6fff31a79381174ea675876f456720d4eedb716bf09ea081c51b5b2c170b4cc0d35543a3bb6762b3e071152641bb9e5eafc110b27fd571f2984983b9ed0eea57f10e6f2c33ffd5879a0ef6ca34b8c03efef34adec368a2a4bd445e3741b6c0ea17b0e73462b3ae27eecf33cf48f651b078b56f92f10e92a7161c0f6944a06452b5f5f9b840e7d9fc42a146054c66aff524372213adae75dfaadd6457ef155e99f480195a81bccb0d411278ee94d5500b9afd8473567d2bb9f9312d15f8be18e87b190f6fd2a920a5ca1a98fe3f8f3401d3693ee667eff0a68f6ee7d144366ada7f04456c13352db592195ee7bd4a6727fcc01ea078830ef42153cf8964436b8066fb4665122d107a8484e967c68e00383fac6322d3029117aceb973d038a2ab12b3778fb6135f779937a4b48599c41f216ef31689863ea6fba2f2ce7f06373d7d1bcaebd512c529bddb3ad10d0fb7bb6da69e4699f319db271b1f2edc3bf6b68de9ff9843abfeda58981010b301296b4e040c99707266462c6271176fecbcdca28aa39352e5941172525684d75637f1f3f27dcf100d67e9cc66d58e258fc802d0d108749ba48f5bfd378b1e4c4073811ef619485550ad9b529eb5894599a1bf9789e7cbba55422bfaeb5322556b512ca937950a8448d90d0b5998762469d6dac68c5ed2d810e69c5dcbe3f815cc45e93c13f54b7c265f1a97cc9e0950256dd30e3608d268c25df9a2b841ee70a0f6dfaaa5020ff640966c1629fbe5e2e39d9c30cbfd1c8eaa669dbd497904f70c363fd5b8dcaefff7422c6053df7f65e990534ab80be8dd19d902bad881273163fde7423c9bd9f8c2bb2c9aaade089d55019eba61c1177fab6803427f9214854e4945a44500bea12db41a2c0d4bd18168ce36a0a23f474fe69ea54d3eb5d63328d1a6d9b396cb91a905bd960b8ef455c6fcb701d9e4400f0e66e189bbd278d9b193b7f2047ef5ab25cedb2f431aff39b94e14fc2d6960738f332c8745daa919abb4a84aee8317dba37fb38cbbe2e86d5cb17c8b09d3191801e79d371fb9ed3c8e69291e38ad99adbf6de14a331061ea6ab5e4313ea89e6649d7342bbf5a8857a5262783e77e3e3a3b7dfc8cb58aa17a512e7e913b9c0039894af20ebfb8dfddd524bad3c3ba639a8db5cf94acc78e475dbadd2f1a0e9ee152d29b4df6425a540b5c0f204ca312700d081c17f6d1186b681b0356f6a2ecfcc9ca6374e8415a707e5984988193ef48a9bde2d2fcf2624d27f95cf81cd5b6d201a54d52d1c2d06a4587efa594b8c8cd8e8d9947400c34dc6b654fc1a49e6bdd57d2c299d0dd9b040d81695da0207e3329e98dfca8eaaeb4d06820a0f19cc2a1a90026733f54ce0163249c1809c6dad3dad65f8ff95c4996d5875633ee81d5fc70b5f206e33fba3ea54da46f09d9e4277febb3040cadde7c049139fa27ad493d3d1b6b18d6515da15debd4da4b86fdee14e429d2e049a021f965bdb16bb339937c6677e8e0d7df0ccb7ed8b5264520481297564ba635dd49b4b0ea4731969273812a129b77a4dd5a8d47f7f125668bc4416c6a68ec009380c2de6a46291f0bd5ce07abd459e541b86247c6a95905992d9236e08c70cd233e0e1a8a4f969d219aaf467a2c4c00e96f8366cf14d5cbd4ad142d05a1315027b9fa99d2a8b07c95e1a7904771c8673d97d952a78b5c7d972e99836d6d77d97af106ab3cca1fb89f299c2d2c0c8ebd6ffdfd150d66a1af3def55c42d34be11d536cf9ac53e575016c1727f249d44cf9072687c610ac9b9137f022d4bfd94d895813b5c4f7e5449e9f28d60746fd785879010bc833e791c586e0b184aaf32d58b17f071e80244acfa8d21416b6ead8a624bd5a1b0ab34828edc132ff332cac8453cbd480ae289405d222fafce750494726bb3ddcf22f5cb4452e1627546abd88e470f71793599c3cdd49c759729c3745838a6e96152c467594652ca94605efa5f93e6e0d90145593f227784449f4550abf962c8ed4d09fa38af4f7edb26f4da4846296196e92373ad2680b07bfce48ca532150ab91f4bc3eda3e9c3a83e42e1d3a5b3dda99e2d497a60f9fcf855afd24af94b8a44be5d0f0048e77eff28fff10a96f6590d293b57823e94a316fef68f7b1bbebe3f59f7201ea44e0cc764a978abfbd7b73e05a935976a52c5c61bda30dca203a5baf09fd27d12db1a5d1d59863957f9315c74da3cbd026f328c8a0301d6ef3c8d8af1c81f80d56481d064cbf62038d32cd59e2d0a7ffe920535d6728507eb8a62b813bb6d67dc0de2b4db23e31077fcecd8f6d03e08816d4d7a4b98097aeb33e44cc5bc97b2e1b8c54878736395519e639bcc05fdfbd5adcab275383d072b11bf96ff4666a151b9cdd0ebd522995fa94c101fe49c6db9d9621952cbd134d58e2052bb4fae38ee93ea1967fc770c68118051e23e5798bbab95980123849936ed7a8602a4c6770c97d9896923d2105814d5dada5c7fa9af8f62ab4c29e8608efdc56de3f41005966c9a45484f1e4876b49067efd68c01c634957d90cce710854d7f439b83406431eebf323ef45522e24d406fd9a83efc193f0727ecdac883366d0697fd24182b13c69c664b9bd937a68901cbe242dfe0f254881e14345b6888b534369f584089812cdd02caaf07064347d9e00c5ca460f43d82518b60ab742133802b521329ad149ab8fcad2024206a5c1ce69171b724d3222433f502d6af6bf34f0fcf4f94da0e05a0fd7d3d7e7ac4741ba11f40a489d0018843d47f478e4c3d796f05eb29ee4f1b4ea8c52b591844470756ec7f1c82d4642b14dcdc54b0b25273d3164a989deb863ff5f6fc83178016c67bcc5ce3e9ee91dc79cfbacfcc73210223e4d4942ef82e6a889f26722f89f093af9056a1378647e79629d4f4515e816eafb2b3c430eb89ddd3c0719f8dc463f71e70e5fda15d2de715e1113e4e6d6d91fecde8a987e3983f3026dde55f7a8f7b2fd355a757c0b6dd9a5ddb17f4f564c95bc20261832ffe1cecc88ddf564040f439e0d4f0abdb46f3f9ddfa8ba909e801c97fdfd9b73b0f9a9faa1199036d5290f5058ed12b1c46274200aef7135df8e70eafb0f28c8955f289ffec220f8398c8ee3dd9ce936d133a776f03456904262c2f5d8da88197b2b56367b890bf8b39166f3f43f3aa5b9c969941cea5454c2993cc128331fe3b9aaca3884072a64e16", 0x1000}], 0x6, &(0x7f0000007a80)=[@rights={{0x20, 0x1, 0x1, [r0, r1, r0, r7]}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r8]}}], 0x40, 0x40000d0}}], 0x4, 0x4008800) r9 = fcntl$dupfd(r1, 0x0, r1) sendmsg$IPVS_CMD_GET_CONFIG(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) mq_timedsend(r9, &(0x7f0000000200)="2249cc002567ec837d7cc0883b1cf89e1fc94b280f2e5d1f6e6ee359b0566bb900d204fbb66c261efeddb8e73b066ea1e68e379a937ba81105e08af6eaeeb67303f7e04df8e91d836bab6fd1b7056101f5e9ccba17e971", 0x57, 0x7fff, &(0x7f0000000280)={0x0, 0x989680}) sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="18100000", @ANYRES16=0x0, @ANYBLOB="010600000000000000000900000004000480"], 0x18}}, 0xc000) renameat2(r0, &(0x7f0000000180)='./file1\x00', r9, &(0x7f00000001c0)='./file1\x00', 0x4) creat(&(0x7f0000000400)='./bus\x00', 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000040)) 4.878059883s ago: executing program 3 (id=1079): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) 4.53699979s ago: executing program 3 (id=1082): setresgid(0x0, 0xee00, 0x0) r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000a1400012cbd7000fbdbdf2508001500050000000800150020ff00000800030001000000080001000200000008000100010000000800010001000000"], 0x40}, 0x1, 0x0, 0x0, 0x4c004}, 0x800) mount(0x0, &(0x7f0000001100)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$userns(r0, &(0x7f0000000240)) 4.287644841s ago: executing program 33 (id=1082): setresgid(0x0, 0xee00, 0x0) r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000a1400012cbd7000fbdbdf2508001500050000000800150020ff00000800030001000000080001000200000008000100010000000800010001000000"], 0x40}, 0x1, 0x0, 0x0, 0x4c004}, 0x800) mount(0x0, &(0x7f0000001100)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$userns(r0, &(0x7f0000000240)) 3.473052832s ago: executing program 4 (id=1093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000042f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef) (fail_nth: 2) 3.457114545s ago: executing program 1 (id=1094): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3b000) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x7, 0x0, &(0x7f0000000140)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="a95c55bcc7cb4a9362a5ce533229c8ee", 0x18) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3b000) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) getsockopt$inet6_int(r1, 0x29, 0x7, 0x0, &(0x7f0000000140)) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="a95c55bcc7cb4a9362a5ce533229c8ee", 0x18) (async) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) (async) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) 3.03758992s ago: executing program 1 (id=1095): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0xa888, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffa888}}}}}}}, 0xfdef) 2.908932207s ago: executing program 4 (id=1096): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x3e8, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff7f}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 2.852467501s ago: executing program 4 (id=1097): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {0x2000}, {}, {}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x106, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) 2.836972366s ago: executing program 1 (id=1098): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000180)=ANY=[]) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x42a001) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r2 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000003c80)={'ip6gre0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000400)=0x7, 0x4) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$setflags(r5, 0x2, 0x1) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYRES8=0x0], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100300000008120c0500c000010200000000000000015108ff010108000c0000000122da0b09058103664a03050e69ec4bc80e019704b85ef0375ed7"], 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x80000003}) fcntl$lock(r7, 0x6, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1fd}) 2.722385412s ago: executing program 4 (id=1100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f320908400f300f0826f30fc7b2050000000f32660fc775022e0ffa600c980f320f3566b857000f00d0", 0x56}], 0x1, 0x15, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) 2.453677106s ago: executing program 4 (id=1103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x57, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d684e120080490303fa6010203010902450003000000000904fa00000e01000008000400000200f0072402"], 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff66, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="857910df61418ade3351b1cd7d6f23b05ada62a5b8a1cf0716f1a9c68da4fa4d3eb9458c11a60bb6c855238739eb4c6df7a18d054631a25a12607da5"], 0x58}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000002c0)="8670638d82a2d8826aaa7cabb4b9e3d0efa7e77809b2c326f58b46374fdf01ec846e29cafe07c05937f4e5bccc2869f9", 0x30) r3 = accept4$alg(r2, 0x0, 0x0, 0x80000) read$alg(r3, &(0x7f0000001140)=""/137, 0x89) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0xa0, 0x1e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x8}}) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xc45, 0x760b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xda, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, &(0x7f0000000240)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB='@\t#'], 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aa8000000060a0b040000000000000000020000047c000480780001800a00010071756f7461000000680002800c00044000000000000000420c0001402200fffffffffff70c0004400000000000000ee70c00014000000000000000080c00044000000000000000800c000440000000000000000e08000240000000000c000140000000000000000508000240000000020900010073797a30000000000900020073797a32"], 0xd0}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x6a) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r8, &(0x7f0000000340), 0x8) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r9, 0xc00464c9, &(0x7f0000000140)={r10}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r8, 0xc00464c9, &(0x7f0000000040)={r10}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000280)={0xd661, 0x5012}) 1.784973597s ago: executing program 2 (id=1107): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0xa, 0x0, 0x8660, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000280)="96c7", 0x2}], 0x1, 0x0, 0x0, 0x254d9}}], 0x1, 0x0) 1.782179869s ago: executing program 2 (id=1108): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000004000000200090008000300", @ANYRES32=0x0, @ANYBLOB="080026003c140000"], 0x24}}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0018"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) pread64(r1, 0x0, 0x0, 0xf35000000000000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x2, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) close_range(r0, 0xffffffffffffffff, 0x0) 1.660979482s ago: executing program 2 (id=1109): r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d0102030109021600010000000009070000002ac59800"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="001306000000ec19d02303f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="b467fe000002ef"], 0x0, 0x0, 0x0, 0x0}) 1.000600633s ago: executing program 2 (id=1110): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 849.023457ms ago: executing program 2 (id=1111): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x590, 0x4) sendto$inet6(r0, 0x0, 0xfc96, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 782.001441ms ago: executing program 2 (id=1112): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x42a001) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[], 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000001080)={0x1000, 0x7}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201106f34cf6008d422031540000102030109022400010108c0e1090400fa020301010809210900050122da0b09058103664a03050e"], 0x0) 710.26964ms ago: executing program 4 (id=1113): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x42a001) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 6) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0xc12, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x80, 0xe1, [{{0x9, 0x4, 0x0, 0xfa, 0x2, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x9, 0x5, 0x1, {0x22, 0xbda}}, {{{0x9, 0x5, 0x81, 0x3, 0x8a8f758856b74a66, 0x3, 0x5, 0xe}}}}}]}}]}}, 0x0) 362.925496ms ago: executing program 5 (id=1083): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001640), 0x0, 0x80801) ioctl$EVIOCSKEYCODE_V2(r0, 0x5450, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000fd5e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 260.908343ms ago: executing program 5 (id=1114): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x9, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 214.477323ms ago: executing program 1 (id=1115): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002480), 0xedc000000000, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 111.036044ms ago: executing program 5 (id=1116): chdir(0x0) mknod$loop(&(0x7f0000000000)='./bus/file0\x00', 0x2000, 0x0) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@ocfs2_parent={0x18, 0x2, {{0x4, 0xfff, 0x9}, {0x4, 0x8, 0x46f}}}, 0x0) 56.902131ms ago: executing program 1 (id=1117): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x30000000, 0x0, 0x58, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x4000002}, @flat=@weak_binder={0x77622a85, 0x100, 0x1}, @flat=@handle={0x73682a85, 0x100b, 0x77682a85}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 56.470024ms ago: executing program 5 (id=1118): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x200000, 0x2, 0x4}, 0x18) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x1) fchdir(r2) move_mount(r0, &(0x7f0000000500)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f0000000380)='./file1\x00', 0x64) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) setgroups(0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000200)={0x2, @pix_mp={0x0, 0x0, 0x31384142}}) setregid(0xffffffffffffffff, r4) socket$inet(0x2, 0x2, 0x1) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r8, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast]}, 0x10) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x3) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xc00, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r9 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r10, 0xc0603d06, 0xfffffffffffffffe) open_by_handle_at(r9, &(0x7f0000000040)=@ocfs2_parent={0x18, 0x2, {{0x4, 0xfff, 0x9}, {0x4, 0x8, 0x46f}}}, 0x0) 0s ago: executing program 1 (id=1119): syz_usb_connect(0x3, 0x2d, &(0x7f0000001040)={{0x12, 0x1, 0x200, 0x29, 0x63, 0x90, 0x10, 0x1a86, 0x752d, 0x2d4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x1, 0xe9, 0x11, 0xbd, 0x0, [], [{{0x9, 0x5, 0xc, 0x3, 0x10, 0x3, 0xf, 0x2}}]}}]}}]}}, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000880), 0x2a040, 0x0) kernel console output (not intermixed with test programs): 474.992946][ T7903] new_inode+0x22/0x170 [ 474.992971][ T7903] ? rcu_is_watching+0x15/0xb0 [ 474.992999][ T7903] proc_pid_make_inode+0x21/0x130 [ 474.993023][ T7903] proc_pident_instantiate+0x6d/0x2b0 [ 474.993051][ T7903] proc_pident_lookup+0x1b7/0x270 [ 474.993080][ T7903] __lookup_slow+0x297/0x3d0 [ 474.993113][ T7903] ? __pfx___lookup_slow+0x10/0x10 [ 474.993146][ T7903] ? generic_permission+0x2db/0x690 [ 474.993178][ T7903] ? down_read+0x1ad/0x2e0 [ 474.993197][ T7903] lookup_slow+0x53/0x70 [ 474.993230][ T7903] link_path_walk+0x935/0xea0 [ 474.993266][ T7903] path_openat+0x28c/0x3830 [ 474.993284][ T7903] ? arch_stack_walk+0xfc/0x150 [ 474.993330][ T7903] ? stack_depot_save_flags+0x40/0x860 [ 474.993369][ T7903] ? __pfx_path_openat+0x10/0x10 [ 474.993401][ T7903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.993433][ T7903] do_filp_open+0x1fa/0x410 [ 474.993468][ T7903] ? __pfx_do_filp_open+0x10/0x10 [ 474.993508][ T7903] ? __pfx_kfree_link+0x10/0x10 [ 474.993536][ T7903] ? _raw_spin_unlock+0x28/0x50 [ 474.993559][ T7903] ? alloc_fd+0x64c/0x6c0 [ 474.993588][ T7903] do_sys_openat2+0x121/0x1c0 [ 474.993622][ T7903] ? __pfx_do_sys_openat2+0x10/0x10 [ 474.993655][ T7903] ? ksys_write+0x22a/0x250 [ 474.993677][ T7903] ? __pfx_ksys_write+0x10/0x10 [ 474.993700][ T7903] __x64_sys_openat+0x138/0x170 [ 474.993735][ T7903] do_syscall_64+0xfa/0xfa0 [ 474.993764][ T7903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.993785][ T7903] ? clear_bhb_loop+0x60/0xb0 [ 474.993810][ T7903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.993830][ T7903] RIP: 0033:0x7feb5dd8d550 [ 474.993852][ T7903] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 474.993873][ T7903] RSP: 002b:00007feb5ec39f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 474.993899][ T7903] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007feb5dd8d550 [ 474.993915][ T7903] RDX: 0000000000000002 RSI: 00007feb5ec39fa0 RDI: 00000000ffffff9c [ 474.993931][ T7903] RBP: 00007feb5ec39fa0 R08: 0000000000000000 R09: 00007feb5ec39cd5 [ 474.993946][ T7903] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 474.993961][ T7903] R13: 00007feb5dfb6038 R14: 00007feb5dfb5fa0 R15: 00007ffd1aa945f8 [ 474.993987][ T7903] [ 475.029945][ T7911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.735'. [ 475.038567][ T7907] NCSI netlink: No device for ifindex 0 [ 475.175920][ T7916] /dev/rnullb0: Can't open blockdev [ 475.455333][ T7927] netlink: 16 bytes leftover after parsing attributes in process `syz.2.741'. [ 475.465798][ T7927] netlink: 16 bytes leftover after parsing attributes in process `syz.2.741'. [ 475.489019][ T7930] /dev/rnullb0: Can't open blockdev [ 475.536693][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 475.560720][ T7934] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 475.581421][ T7934] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 475.690115][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 475.696909][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 475.706568][ T24] usb 2-1: config 0 has no interface number 0 [ 475.728051][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.761743][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.774413][ T7942] netlink: 'syz.3.749': attribute type 1 has an invalid length. [ 475.777904][ T24] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 475.791733][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.807638][ T24] usb 2-1: config 0 descriptor?? [ 475.835668][ T7942] netlink: 'syz.3.749': attribute type 2 has an invalid length. [ 475.970879][ T7952] binder: BINDER_SET_CONTEXT_MGR already set [ 475.978010][ T7952] binder: 7949:7952 ioctl 4018620d 200000000040 returned -16 [ 476.042621][ T7957] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 476.060158][ T7957] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 476.230056][ T6403] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 476.349304][ T7964] loop8: detected capacity change from 0 to 8 [ 476.362387][ T7964] Dev loop8: unable to read RDB block 8 [ 476.369078][ T7964] loop8: unable to read partition table [ 476.375653][ T7964] loop8: partition table beyond EOD, truncated [ 476.381972][ T7964] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 476.391550][ T6403] usb 4-1: Using ep0 maxpacket: 16 [ 476.400821][ T6403] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 476.430783][ T24] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0009/input/input11 [ 476.444500][ T6403] usb 4-1: config 0 has no interface number 0 [ 476.461723][ T6403] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 476.474612][ T24] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0009/input/input12 [ 476.489948][ T6403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.508854][ T6403] usb 4-1: Product: syz [ 476.520310][ T6403] usb 4-1: Manufacturer: syz [ 476.524971][ T6403] usb 4-1: SerialNumber: syz [ 476.530460][ T24] uclogic 0003:28BD:0071.0009: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 476.561890][ T6403] usb 4-1: config 0 descriptor?? [ 476.595524][ T6403] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 476.647024][ T24] usb 2-1: USB disconnect, device number 40 [ 476.663881][ T7967] fido_id[7967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 476.768943][ T7954] FAULT_INJECTION: forcing a failure. [ 476.768943][ T7954] name failslab, interval 1, probability 0, space 0, times 0 [ 476.784652][ T7954] CPU: 1 UID: 0 PID: 7954 Comm: syz.3.754 Not tainted syzkaller #0 PREEMPT(full) [ 476.784681][ T7954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 476.784694][ T7954] Call Trace: [ 476.784702][ T7954] [ 476.784710][ T7954] dump_stack_lvl+0x189/0x250 [ 476.784747][ T7954] ? __pfx____ratelimit+0x10/0x10 [ 476.784774][ T7954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.784803][ T7954] ? __pfx__printk+0x10/0x10 [ 476.784833][ T7954] ? __pfx___might_resched+0x10/0x10 [ 476.784856][ T7954] ? lock_acquire+0x5f/0x360 [ 476.784876][ T7954] should_fail_ex+0x414/0x560 [ 476.784906][ T7954] should_failslab+0xa8/0x100 [ 476.784926][ T7954] __kmalloc_cache_noprof+0x70/0x3a0 [ 476.784955][ T7954] ? snd_seq_prioq_new+0x47/0xa0 [ 476.784984][ T7954] snd_seq_prioq_new+0x47/0xa0 [ 476.785011][ T7954] snd_seq_queue_alloc+0x133/0x790 [ 476.785038][ T7954] ? __pfx_snd_seq_ioctl_create_port+0x10/0x10 [ 476.785061][ T7954] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 476.785083][ T7954] snd_seq_oss_open+0x5e0/0xea0 [ 476.785108][ T7954] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 476.785145][ T7954] ? trace_contention_end+0x39/0x120 [ 476.785169][ T7954] ? __mutex_lock+0x335/0x1350 [ 476.785206][ T7954] ? __pfx___mutex_lock+0x10/0x10 [ 476.785236][ T7954] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 476.785258][ T7954] ? __pfx_free_devinfo+0x10/0x10 [ 476.785277][ T7954] ? do_raw_spin_unlock+0x122/0x240 [ 476.785306][ T7954] ? soundcore_open+0x2da/0x490 [ 476.785327][ T7954] odev_open+0x67/0xa0 [ 476.785345][ T7954] chrdev_open+0x4cc/0x5e0 [ 476.785369][ T7954] ? __pfx_chrdev_open+0x10/0x10 [ 476.785394][ T7954] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 476.785430][ T7954] ? __pfx_chrdev_open+0x10/0x10 [ 476.785452][ T7954] do_dentry_open+0x950/0x13f0 [ 476.785485][ T7954] vfs_open+0x3b/0x340 [ 476.785510][ T7954] ? path_openat+0x2ecd/0x3830 [ 476.785529][ T7954] path_openat+0x2ee5/0x3830 [ 476.785545][ T7954] ? arch_stack_walk+0xfc/0x150 [ 476.785579][ T7954] ? stack_depot_save_flags+0x40/0x860 [ 476.785614][ T7954] ? __pfx_path_openat+0x10/0x10 [ 476.785641][ T7954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.785668][ T7954] do_filp_open+0x1fa/0x410 [ 476.785699][ T7954] ? __pfx_do_filp_open+0x10/0x10 [ 476.785738][ T7954] ? _raw_spin_unlock+0x28/0x50 [ 476.785760][ T7954] ? alloc_fd+0x64c/0x6c0 [ 476.785785][ T7954] do_sys_openat2+0x121/0x1c0 [ 476.785811][ T7954] ? __pfx_do_sys_openat2+0x10/0x10 [ 476.785840][ T7954] ? ksys_write+0x22a/0x250 [ 476.785859][ T7954] ? __pfx_ksys_write+0x10/0x10 [ 476.785878][ T7954] __x64_sys_openat+0x138/0x170 [ 476.785908][ T7954] do_syscall_64+0xfa/0xfa0 [ 476.785932][ T7954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.785950][ T7954] ? clear_bhb_loop+0x60/0xb0 [ 476.786038][ T7954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.786089][ T7954] RIP: 0033:0x7feb5dd8ebe9 [ 476.786106][ T7954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.786124][ T7954] RSP: 002b:00007feb5ec3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 476.786155][ T7954] RAX: ffffffffffffffda RBX: 00007feb5dfb5fa0 RCX: 00007feb5dd8ebe9 [ 476.786176][ T7954] RDX: 0000000000020042 RSI: 0000200000000880 RDI: 00000000ffffff9c [ 476.786190][ T7954] RBP: 00007feb5ec3a090 R08: 0000000000000000 R09: 0000000000000000 [ 476.786206][ T7954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 476.786216][ T7954] R13: 00007feb5dfb6038 R14: 00007feb5dfb5fa0 R15: 00007ffd1aa945f8 [ 476.786239][ T7954] [ 476.787171][ T6403] usb 4-1: USB disconnect, device number 45 [ 477.158650][ T7973] __nla_validate_parse: 1 callbacks suppressed [ 477.158691][ T7973] netlink: 204 bytes leftover after parsing attributes in process `syz.2.762'. [ 477.261347][ T7980] overlayfs: missing 'lowerdir' [ 477.306726][ T7984] FAULT_INJECTION: forcing a failure. [ 477.306726][ T7984] name failslab, interval 1, probability 0, space 0, times 0 [ 477.320466][ T7984] CPU: 0 UID: 0 PID: 7984 Comm: syz.2.766 Not tainted syzkaller #0 PREEMPT(full) [ 477.320494][ T7984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 477.320506][ T7984] Call Trace: [ 477.320514][ T7984] [ 477.320521][ T7984] dump_stack_lvl+0x189/0x250 [ 477.320556][ T7984] ? __pfx____ratelimit+0x10/0x10 [ 477.320582][ T7984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.320610][ T7984] ? __pfx__printk+0x10/0x10 [ 477.320641][ T7984] ? __pfx___might_resched+0x10/0x10 [ 477.320662][ T7984] ? lock_acquire+0x5f/0x360 [ 477.320682][ T7984] should_fail_ex+0x414/0x560 [ 477.320712][ T7984] should_failslab+0xa8/0x100 [ 477.320732][ T7984] __kmalloc_noprof+0xcb/0x4b0 [ 477.320761][ T7984] ? snd_pcm_hw_refine+0x967/0x1640 [ 477.320792][ T7984] snd_pcm_hw_refine+0x967/0x1640 [ 477.320823][ T7984] ? do_syscall_64+0xfa/0xfa0 [ 477.320854][ T7984] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 477.320899][ T7984] ? __kasan_kmalloc+0x93/0xb0 [ 477.320928][ T7984] ? _snd_pcm_hw_param_min+0x2f5/0x540 [ 477.320953][ T7984] snd_pcm_hw_param_near+0xfd/0x500 [ 477.320980][ T7984] snd_pcm_oss_change_params_locked+0x2199/0x3e40 [ 477.321019][ T7984] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 477.321042][ T7984] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 477.321074][ T7984] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 477.321104][ T7984] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 477.321135][ T7984] ? kfree+0x18e/0x440 [ 477.321163][ T7984] snd_pcm_oss_get_active_substream+0x20b/0x280 [ 477.321190][ T7984] snd_pcm_oss_set_format+0x10d/0x500 [ 477.321254][ T7984] snd_pcm_oss_ioctl+0xbe9/0xdd0 [ 477.321276][ T7984] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 477.321297][ T7984] __se_sys_ioctl+0xf9/0x170 [ 477.321328][ T7984] do_syscall_64+0xfa/0xfa0 [ 477.321353][ T7984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.321373][ T7984] ? clear_bhb_loop+0x60/0xb0 [ 477.321395][ T7984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.321414][ T7984] RIP: 0033:0x7f0795d8ebe9 [ 477.321431][ T7984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.321449][ T7984] RSP: 002b:00007f0796bac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.321470][ T7984] RAX: ffffffffffffffda RBX: 00007f0795fb5fa0 RCX: 00007f0795d8ebe9 [ 477.321486][ T7984] RDX: 0000200000001040 RSI: 00000000c0045005 RDI: 0000000000000003 [ 477.321499][ T7984] RBP: 00007f0796bac090 R08: 0000000000000000 R09: 0000000000000000 [ 477.321511][ T7984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 477.321522][ T7984] R13: 00007f0795fb6038 R14: 00007f0795fb5fa0 R15: 00007fff9af27f88 [ 477.321544][ T7984] [ 477.592534][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.686861][ T7989] netlink: 'syz.2.768': attribute type 29 has an invalid length. [ 477.704226][ T7989] netlink: 'syz.2.768': attribute type 29 has an invalid length. [ 477.704284][ T7990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.769'. [ 477.712891][ T7989] netlink: 500 bytes leftover after parsing attributes in process `syz.2.768'. [ 478.095947][ T8002] netlink: 'syz.4.775': attribute type 10 has an invalid length. [ 478.155186][ T8008] overlayfs: missing 'lowerdir' [ 478.526625][ T8024] MTD: Couldn't look up './cgroup': -15 [ 478.689822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 478.744053][ T8031] overlayfs: missing 'lowerdir' [ 478.817242][ T8033] FAULT_INJECTION: forcing a failure. [ 478.817242][ T8033] name failslab, interval 1, probability 0, space 0, times 0 [ 479.416641][ T8033] CPU: 0 UID: 0 PID: 8033 Comm: syz.2.786 Not tainted syzkaller #0 PREEMPT(full) [ 479.416671][ T8033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 479.416684][ T8033] Call Trace: [ 479.416691][ T8033] [ 479.416699][ T8033] dump_stack_lvl+0x189/0x250 [ 479.416736][ T8033] ? __pfx____ratelimit+0x10/0x10 [ 479.416761][ T8033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.416791][ T8033] ? __pfx__printk+0x10/0x10 [ 479.416825][ T8033] ? fs_reclaim_acquire+0x7d/0x100 [ 479.416846][ T8033] ? rcu_is_watching+0x15/0xb0 [ 479.416867][ T8033] ? __pfx___might_resched+0x10/0x10 [ 479.416888][ T8033] ? lock_acquire+0x5f/0x360 [ 479.416907][ T8033] should_fail_ex+0x414/0x560 [ 479.416936][ T8033] should_failslab+0xa8/0x100 [ 479.416955][ T8033] __kmalloc_cache_node_noprof+0x73/0x3a0 [ 479.416998][ T8033] ? __get_vm_area_node+0x13f/0x300 [ 479.417030][ T8033] __get_vm_area_node+0x13f/0x300 [ 479.417061][ T8033] __vmalloc_node_range_noprof+0x301/0x12f0 [ 479.417081][ T8033] ? ethtool_get_stats+0x1b9/0x370 [ 479.417109][ T8033] ? __might_fault+0xb0/0x130 [ 479.417137][ T8033] ? rcu_is_watching+0x15/0xb0 [ 479.417159][ T8033] ? lock_acquire+0x5f/0x360 [ 479.417177][ T8033] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 479.417196][ T8033] ? rcu_is_watching+0x15/0xb0 [ 479.417218][ T8033] ? lock_release+0x4b/0x3e0 [ 479.417236][ T8033] ? ethtool_get_stats+0x1b9/0x370 [ 479.417256][ T8033] vzalloc_noprof+0xb2/0xf0 [ 479.417274][ T8033] ? ethtool_get_stats+0x1b9/0x370 [ 479.417294][ T8033] ethtool_get_stats+0x1b9/0x370 [ 479.417314][ T8033] ? __pfx_ethtool_get_stats+0x10/0x10 [ 479.417335][ T8033] ? netdev_name_node_lookup+0xdf/0x120 [ 479.417356][ T8033] dev_ethtool+0xb4a/0x19b0 [ 479.417390][ T8033] ? __pfx_dev_ethtool+0x10/0x10 [ 479.417418][ T8033] ? dev_load+0x21/0x1f0 [ 479.417440][ T8033] ? rcu_is_watching+0x15/0xb0 [ 479.417463][ T8033] ? rcu_is_watching+0x15/0xb0 [ 479.417484][ T8033] ? lock_release+0x4b/0x3e0 [ 479.417503][ T8033] ? dev_load+0x21/0x1f0 [ 479.417527][ T8033] dev_ioctl+0x392/0x1150 [ 479.417553][ T8033] sock_do_ioctl+0x22c/0x300 [ 479.417576][ T8033] ? __pfx_sock_do_ioctl+0x10/0x10 [ 479.417604][ T8033] sock_ioctl+0x576/0x790 [ 479.417625][ T8033] ? __pfx_sock_ioctl+0x10/0x10 [ 479.417646][ T8033] ? __fget_files+0x3a0/0x420 [ 479.417669][ T8033] ? __fget_files+0x2a/0x420 [ 479.417694][ T8033] ? bpf_lsm_file_ioctl+0x9/0x20 [ 479.417721][ T8033] ? __pfx_sock_ioctl+0x10/0x10 [ 479.417741][ T8033] __se_sys_ioctl+0xf9/0x170 [ 479.417772][ T8033] do_syscall_64+0xfa/0xfa0 [ 479.417800][ T8033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.417820][ T8033] ? clear_bhb_loop+0x60/0xb0 [ 479.417841][ T8033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.417860][ T8033] RIP: 0033:0x7f0795d8ebe9 [ 479.417878][ T8033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.417897][ T8033] RSP: 002b:00007f0796bac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 479.417919][ T8033] RAX: ffffffffffffffda RBX: 00007f0795fb5fa0 RCX: 00007f0795d8ebe9 [ 479.417934][ T8033] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 479.417947][ T8033] RBP: 00007f0796bac090 R08: 0000000000000000 R09: 0000000000000000 [ 479.417959][ T8033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.417971][ T8033] R13: 00007f0795fb6038 R14: 00007f0795fb5fa0 R15: 00007fff9af27f88 [ 479.418013][ T8033] [ 479.418023][ T8033] syz.2.786: vmalloc error: size 136, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 479.466705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 479.777908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 479.826658][ T8033] ,cpuset=/,mems_allowed=0-1 [ 479.864625][ T8033] CPU: 1 UID: 0 PID: 8033 Comm: syz.2.786 Not tainted syzkaller #0 PREEMPT(full) [ 479.864671][ T8033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 479.864693][ T8033] Call Trace: [ 479.864707][ T8033] [ 479.864721][ T8033] dump_stack_lvl+0x189/0x250 [ 479.864779][ T8033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.864814][ T8033] ? __pfx__printk+0x10/0x10 [ 479.864841][ T8033] ? lock_release+0x4b/0x3e0 [ 479.864862][ T8033] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 479.864888][ T8033] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 479.864915][ T8033] warn_alloc+0x214/0x310 [ 479.864938][ T8033] ? __pfx_warn_alloc+0x10/0x10 [ 479.864958][ T8033] ? __get_vm_area_node+0x13f/0x300 [ 479.864991][ T8033] ? __get_vm_area_node+0x2b5/0x300 [ 479.865023][ T8033] __vmalloc_node_range_noprof+0x326/0x12f0 [ 479.865052][ T8033] ? __might_fault+0xb0/0x130 [ 479.865078][ T8033] ? rcu_is_watching+0x15/0xb0 [ 479.865100][ T8033] ? lock_acquire+0x5f/0x360 [ 479.865118][ T8033] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 479.865137][ T8033] ? rcu_is_watching+0x15/0xb0 [ 479.865158][ T8033] ? lock_release+0x4b/0x3e0 [ 479.865174][ T8033] ? ethtool_get_stats+0x1b9/0x370 [ 479.865192][ T8033] vzalloc_noprof+0xb2/0xf0 [ 479.865207][ T8033] ? ethtool_get_stats+0x1b9/0x370 [ 479.865231][ T8033] ethtool_get_stats+0x1b9/0x370 [ 479.865249][ T8033] ? __pfx_ethtool_get_stats+0x10/0x10 [ 479.865267][ T8033] ? netdev_name_node_lookup+0xdf/0x120 [ 479.865287][ T8033] dev_ethtool+0xb4a/0x19b0 [ 479.865318][ T8033] ? __pfx_dev_ethtool+0x10/0x10 [ 479.865345][ T8033] ? dev_load+0x21/0x1f0 [ 479.865368][ T8033] ? rcu_is_watching+0x15/0xb0 [ 479.865390][ T8033] ? rcu_is_watching+0x15/0xb0 [ 479.865411][ T8033] ? lock_release+0x4b/0x3e0 [ 479.865433][ T8033] ? dev_load+0x21/0x1f0 [ 479.865456][ T8033] dev_ioctl+0x392/0x1150 [ 479.865482][ T8033] sock_do_ioctl+0x22c/0x300 [ 479.865504][ T8033] ? __pfx_sock_do_ioctl+0x10/0x10 [ 479.865533][ T8033] sock_ioctl+0x576/0x790 [ 479.865553][ T8033] ? __pfx_sock_ioctl+0x10/0x10 [ 479.865573][ T8033] ? __fget_files+0x3a0/0x420 [ 479.865595][ T8033] ? __fget_files+0x2a/0x420 [ 479.865619][ T8033] ? bpf_lsm_file_ioctl+0x9/0x20 [ 479.865646][ T8033] ? __pfx_sock_ioctl+0x10/0x10 [ 479.865665][ T8033] __se_sys_ioctl+0xf9/0x170 [ 479.865696][ T8033] do_syscall_64+0xfa/0xfa0 [ 479.865723][ T8033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.865743][ T8033] ? clear_bhb_loop+0x60/0xb0 [ 479.865763][ T8033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.865782][ T8033] RIP: 0033:0x7f0795d8ebe9 [ 479.865799][ T8033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.865817][ T8033] RSP: 002b:00007f0796bac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 479.865838][ T8033] RAX: ffffffffffffffda RBX: 00007f0795fb5fa0 RCX: 00007f0795d8ebe9 [ 479.865852][ T8033] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 479.865864][ T8033] RBP: 00007f0796bac090 R08: 0000000000000000 R09: 0000000000000000 [ 479.865876][ T8033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.865887][ T8033] R13: 00007f0795fb6038 R14: 00007f0795fb5fa0 R15: 00007fff9af27f88 [ 479.865910][ T8033] [ 480.018402][ T8033] Mem-Info: [ 480.081178][ T30] audit: type=1326 audit(1755866234.772:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.3.788" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb5dd8ebe9 code=0x0 [ 480.085027][ T8033] active_anon:5916 inactive_anon:0 isolated_anon:0 [ 480.085027][ T8033] active_file:23738 inactive_file:73700 isolated_file:0 [ 480.085027][ T8033] unevictable:1768 dirty:94 writeback:0 [ 480.085027][ T8033] slab_reclaimable:12387 slab_unreclaimable:96453 [ 480.085027][ T8033] mapped:30316 shmem:1358 pagetables:1307 [ 480.085027][ T8033] sec_pagetables:0 bounce:0 [ 480.085027][ T8033] kernel_misc_reclaimable:0 [ 480.085027][ T8033] free:1264217 free_pcp:21498 free_cma:0 [ 480.181268][ T5911] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 480.276702][ T8033] Node 0 active_anon:23756kB inactive_anon:0kB active_file:94952kB inactive_file:294604kB unevictable:5536kB isolated(anon):0kB isolated(file):0kB mapped:121364kB dirty:372kB writeback:128kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11984kB pagetables:5176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 480.311066][ T8033] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 480.329308][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 480.343277][ T8033] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 480.362669][ T5911] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 480.391034][ T8033] lowmem_reserve[]: 0 2495 2496 2496 2496 [ 480.396910][ T8033] Node 0 DMA32 free:1158720kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23708kB inactive_anon:0kB active_file:94952kB inactive_file:293520kB unevictable:5536kB writepending:628kB present:3129332kB managed:2555588kB mlocked:4000kB bounce:0kB free_pcp:60656kB local_pcp:30452kB free_cma:0kB [ 480.422238][ T6403] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 480.442805][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.453509][ T5911] usb 5-1: Product: syz [ 480.457806][ T5911] usb 5-1: Manufacturer: syz [ 480.462865][ T5911] usb 5-1: SerialNumber: syz [ 480.463904][ T8033] lowmem_reserve[]: 0 0 1 1 1 [ 480.476089][ T8033] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1084kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 480.476416][ T5911] usb 5-1: config 0 descriptor?? [ 480.510855][ T8033] lowmem_reserve[]: 0 0 0 0 0 [ 480.521294][ T8033] Node 1 Normal free:3882588kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:25640kB local_pcp:13600kB free_cma:0kB [ 480.553001][ T8033] lowmem_reserve[]: 0 0 0 0 0 [ 480.557858][ T8033] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 480.571114][ T8033] Node 0 DMA32: 3*4kB (UME) 764*8kB (U) 714*16kB (UM) 228*32kB (UE) 70*64kB (UME) 95*128kB (UME) 72*256kB (UME) 16*512kB (UME) 7*1024kB (ME) 3*2048kB (UM) 263*4096kB (M) = 1158668kB [ 480.590194][ T8033] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 480.602365][ T8033] Node 1 Normal: 201*4kB (UM) 43*8kB (UME) 46*16kB (UME) 70*32kB (UME) 27*64kB (UME) 5*128kB (UME) 3*256kB (ME) 7*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 944*4096kB (M) = 3882588kB [ 480.626462][ T6403] usb 4-1: Using ep0 maxpacket: 16 [ 480.631845][ T8033] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 480.642299][ T8033] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 480.652384][ T6403] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 480.660633][ T6403] usb 4-1: config 0 has no interface number 0 [ 480.667451][ T8033] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 480.677897][ T8033] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 480.688742][ T8033] 98793 total pagecache pages [ 480.694022][ T6403] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 480.703488][ T6403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.711841][ T6403] usb 4-1: Product: syz [ 480.716342][ T8033] 0 pages in swap cache [ 480.720834][ T6403] usb 4-1: Manufacturer: syz [ 480.725532][ T6403] usb 4-1: SerialNumber: syz [ 480.730569][ T8033] Free swap = 124996kB [ 480.735825][ T8033] Total swap = 124996kB [ 480.747921][ T6403] usb 4-1: config 0 descriptor?? [ 480.753355][ T8033] 2097051 pages RAM [ 480.758339][ T8033] 0 pages HighMem/MovableOnly [ 480.766691][ T6403] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 480.803504][ T8033] 426256 pages reserved [ 480.822080][ T8033] 0 pages cma reserved [ 480.905617][ T8044] netlink: 'syz.2.791': attribute type 8 has an invalid length. [ 481.068569][ T8048] Malformed UNC in devname [ 481.068569][ T8048] [ 481.080538][ T8048] CIFS: VFS: Malformed UNC in devname [ 481.122031][ T8050] netlink: 'syz.1.794': attribute type 21 has an invalid length. [ 481.130715][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.794'. [ 481.250629][ T5911] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 481.272398][ T5911] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 481.292984][ T5911] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 481.301709][ T8058] /dev/rnullb0: Can't open blockdev [ 481.350610][ T5911] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 481.470099][ T5975] usb 5-1: USB disconnect, device number 27 [ 481.634166][ T8068] /dev/rnullb0: Can't open blockdev [ 481.646708][ T8071] netlink: 212 bytes leftover after parsing attributes in process `syz.1.801'. [ 481.658092][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'. [ 481.959133][ T6403] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 482.118977][ T6403] usb 2-1: Using ep0 maxpacket: 8 [ 482.141065][ T6403] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.151312][ T6403] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 482.160496][ T6403] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 482.172303][ T6403] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 482.183587][ T6403] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 482.192794][ T6403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.209987][ T6403] hub 2-1:1.0: bad descriptor, ignoring hub [ 482.215968][ T6403] hub 2-1:1.0: probe with driver hub failed with error -5 [ 482.231699][ T6403] cdc_wdm 2-1:1.0: skipping garbage [ 482.236961][ T6403] cdc_wdm 2-1:1.0: skipping garbage [ 482.249039][ T6403] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 482.254997][ T6403] cdc_wdm 2-1:1.0: Unknown control protocol [ 482.299257][ T5880] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 482.421843][ T8075] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 482.432844][ T8075] overlayfs: failed to set xattr on upper [ 482.438761][ T8075] overlayfs: ...falling back to redirect_dir=nofollow. [ 482.446355][ T8075] overlayfs: ...falling back to index=off. [ 482.454062][ T8075] overlayfs: ...falling back to uuid=null. [ 482.461777][ T5880] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 482.471953][ T5880] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 482.484801][ T5880] usb 5-1: config 220 has no interface number 2 [ 482.484822][ T8085] netlink: 112 bytes leftover after parsing attributes in process `syz.1.804'. [ 482.492817][ T5880] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 482.500587][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.804'. [ 482.515875][ T5880] usb 5-1: config 220 interface 0 has no altsetting 0 [ 482.532768][ T5880] usb 5-1: config 220 interface 76 has no altsetting 0 [ 482.543176][ T5880] usb 5-1: config 220 interface 1 has no altsetting 0 [ 482.553622][ T5880] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 482.563646][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.571871][ T5880] usb 5-1: Product: syz [ 482.578871][ T5880] usb 5-1: Manufacturer: syz [ 482.583603][ T5880] usb 5-1: SerialNumber: syz [ 482.797657][ T5880] usb 5-1: selecting invalid altsetting 0 [ 482.803649][ T5880] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 482.810631][ T5880] usb 5-1: No valid video chain found. [ 482.820743][ T5880] usb 5-1: selecting invalid altsetting 0 [ 482.826527][ T5880] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 482.874560][ T5880] usb 5-1: USB disconnect, device number 28 [ 482.891944][ T5975] usb 2-1: USB disconnect, device number 41 [ 482.904320][ T5911] usb 4-1: USB disconnect, device number 46 [ 483.212438][ T8093] netlink: 132 bytes leftover after parsing attributes in process `syz.2.813'. [ 483.269704][ T8093] /dev/rnullb0: Can't open blockdev [ 483.623451][ T8114] kvm: kvm [8113]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 483.643355][ T8114] kvm: kvm [8113]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 483.676198][ T8114] kvm: kvm [8113]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 483.696616][ T8114] kvm: kvm [8113]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 483.711295][ T8114] kvm: kvm [8113]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 483.720587][ T8128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.727498][ T8114] kvm_intel: kvm [8113]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 483.759233][ T8128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.896278][ T8135] netlink: 'syz.4.829': attribute type 10 has an invalid length. [ 483.918954][ T5975] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 484.088741][ T5975] usb 4-1: Using ep0 maxpacket: 8 [ 484.095130][ T5975] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.105626][ T5975] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 484.114921][ T5975] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 484.126383][ T5975] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 484.138504][ T5975] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 484.149367][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.161192][ T5975] hub 4-1:1.0: bad descriptor, ignoring hub [ 484.167148][ T5975] hub 4-1:1.0: probe with driver hub failed with error -5 [ 484.175339][ T5975] cdc_wdm 4-1:1.0: skipping garbage [ 484.180772][ T5975] cdc_wdm 4-1:1.0: skipping garbage [ 484.186805][ T5975] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 484.192825][ T5949] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 484.200455][ T5975] cdc_wdm 4-1:1.0: Unknown control protocol [ 484.208904][ T5911] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 484.348616][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 484.358342][ T5949] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 484.360328][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 484.379986][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.389938][ T5911] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.398319][ T5949] usb 2-1: Product: syz [ 484.402388][ T5911] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 484.408475][ T5949] usb 2-1: Manufacturer: syz [ 484.413891][ T5911] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 484.428193][ T5949] usb 2-1: SerialNumber: syz [ 484.432117][ T5911] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 484.446333][ T5911] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 484.447713][ T5949] usb 2-1: config 0 descriptor?? [ 484.460113][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.473650][ T5949] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 484.477789][ T5911] hub 5-1:1.0: bad descriptor, ignoring hub [ 484.494761][ T5911] hub 5-1:1.0: probe with driver hub failed with error -5 [ 484.503820][ T5911] cdc_wdm 5-1:1.0: skipping garbage [ 484.510719][ T5911] cdc_wdm 5-1:1.0: skipping garbage [ 484.630356][ T8143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.639455][ T8143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.690371][ T8137] FAULT_INJECTION: forcing a failure. [ 484.690371][ T8137] name failslab, interval 1, probability 0, space 0, times 0 [ 484.703295][ T8137] CPU: 1 UID: 0 PID: 8137 Comm: syz.4.831 Not tainted syzkaller #0 PREEMPT(full) [ 484.703323][ T8137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 484.703336][ T8137] Call Trace: [ 484.703344][ T8137] [ 484.703352][ T8137] dump_stack_lvl+0x189/0x250 [ 484.703387][ T8137] ? __pfx____ratelimit+0x10/0x10 [ 484.703414][ T8137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.703443][ T8137] ? __pfx__printk+0x10/0x10 [ 484.703473][ T8137] ? __pfx___might_resched+0x10/0x10 [ 484.703494][ T8137] ? lock_acquire+0x5f/0x360 [ 484.703514][ T8137] should_fail_ex+0x414/0x560 [ 484.703544][ T8137] should_failslab+0xa8/0x100 [ 484.703564][ T8137] kmem_cache_alloc_noprof+0x73/0x390 [ 484.703593][ T8137] ? security_file_alloc+0x34/0x330 [ 484.703616][ T8137] security_file_alloc+0x34/0x330 [ 484.703636][ T8137] init_file+0x93/0x2f0 [ 484.703664][ T8137] alloc_empty_file+0x6e/0x1d0 [ 484.703692][ T8137] path_openat+0x107/0x3830 [ 484.703716][ T8137] ? arch_stack_walk+0xfc/0x150 [ 484.703747][ T8137] ? stack_trace_save+0x9c/0xe0 [ 484.703773][ T8137] ? stack_depot_save_flags+0x40/0x860 [ 484.703805][ T8137] ? kasan_save_track+0x4f/0x80 [ 484.703833][ T8137] ? kasan_save_track+0x3e/0x80 [ 484.703859][ T8137] ? __kasan_slab_alloc+0x6c/0x80 [ 484.703887][ T8137] ? kmem_cache_alloc_noprof+0x1ad/0x390 [ 484.703915][ T8137] ? getname_flags+0xb8/0x540 [ 484.703940][ T8137] ? __pfx_path_openat+0x10/0x10 [ 484.703969][ T8137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.703999][ T8137] do_filp_open+0x1fa/0x410 [ 484.704030][ T8137] ? __pfx_do_filp_open+0x10/0x10 [ 484.704071][ T8137] ? _raw_spin_unlock+0x28/0x50 [ 484.704095][ T8137] ? alloc_fd+0x64c/0x6c0 [ 484.704121][ T8137] do_sys_openat2+0x121/0x1c0 [ 484.704149][ T8137] ? __pfx_do_sys_openat2+0x10/0x10 [ 484.704179][ T8137] ? ksys_write+0x22a/0x250 [ 484.704199][ T8137] ? __pfx_ksys_write+0x10/0x10 [ 484.704219][ T8137] __x64_sys_openat+0x138/0x170 [ 484.704251][ T8137] do_syscall_64+0xfa/0xfa0 [ 484.704277][ T8137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.704296][ T8137] ? clear_bhb_loop+0x60/0xb0 [ 484.704318][ T8137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.704337][ T8137] RIP: 0033:0x7fd41e38d550 [ 484.704354][ T8137] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 484.704372][ T8137] RSP: 002b:00007fd41f22bb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 484.704393][ T8137] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd41e38d550 [ 484.704407][ T8137] RDX: 0000000000000002 RSI: 00007fd41f22bc10 RDI: 00000000ffffff9c [ 484.704419][ T8137] RBP: 00007fd41f22bc10 R08: 0000000000000000 R09: 00007fd41f22b987 [ 484.704431][ T8137] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 484.704442][ T8137] R13: 00007fd41e5b6038 R14: 00007fd41e5b5fa0 R15: 00007ffe617b4148 [ 484.704464][ T8137] [ 484.992338][ C1] vkms_vblank_simulate: vblank timer overrun [ 485.129841][ T10] usb 4-1: USB disconnect, device number 47 [ 485.133894][ T8114] cdc_wdm 4-1:1.0: Error autopm - -16 [ 485.142924][ T5911] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 485.150480][ T5911] cdc_wdm 5-1:1.0: Unknown control protocol [ 485.179683][ T5911] usb 5-1: USB disconnect, device number 29 [ 485.278913][ T10] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 485.301056][ T8148] netlink: 76 bytes leftover after parsing attributes in process `syz.2.835'. [ 485.386680][ T8152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.395851][ T8152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.413366][ T8152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.418550][ T10] usb 4-1: device descriptor read/64, error -71 [ 485.422597][ T8152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.566686][ T8157] FAULT_INJECTION: forcing a failure. [ 485.566686][ T8157] name failslab, interval 1, probability 0, space 0, times 0 [ 485.579552][ T8157] CPU: 1 UID: 0 PID: 8157 Comm: syz.4.839 Not tainted syzkaller #0 PREEMPT(full) [ 485.579580][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 485.579593][ T8157] Call Trace: [ 485.579601][ T8157] [ 485.579609][ T8157] dump_stack_lvl+0x189/0x250 [ 485.579645][ T8157] ? __pfx____ratelimit+0x10/0x10 [ 485.579682][ T8157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.579712][ T8157] ? __pfx__printk+0x10/0x10 [ 485.579741][ T8157] ? fs_reclaim_acquire+0x7d/0x100 [ 485.579762][ T8157] ? rcu_is_watching+0x15/0xb0 [ 485.579783][ T8157] ? __pfx___might_resched+0x10/0x10 [ 485.579805][ T8157] ? lock_acquire+0x5f/0x360 [ 485.579825][ T8157] should_fail_ex+0x414/0x560 [ 485.579855][ T8157] should_failslab+0xa8/0x100 [ 485.579874][ T8157] kmem_cache_alloc_node_noprof+0x76/0x390 [ 485.579904][ T8157] ? __alloc_skb+0x112/0x2d0 [ 485.579932][ T8157] __alloc_skb+0x112/0x2d0 [ 485.579960][ T8157] tipc_buf_acquire+0x2b/0xe0 [ 485.579985][ T8157] tipc_msg_build+0x58b/0xcf0 [ 485.580009][ T8157] ? rcu_is_watching+0x15/0xb0 [ 485.580037][ T8157] ? net_generic+0x1e/0x240 [ 485.580058][ T8157] ? __pfx_tipc_msg_build+0x10/0x10 [ 485.580084][ T8157] ? net_generic+0x1e/0x240 [ 485.580103][ T8157] ? net_generic+0x1e/0x240 [ 485.580124][ T8157] ? tipc_group_bc_cong+0x15f/0x210 [ 485.580153][ T8157] tipc_send_group_bcast+0x76c/0xa70 [ 485.580186][ T8157] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 485.580214][ T8157] ? __kasan_slab_free+0x5b/0x80 [ 485.580244][ T8157] ? __pfx_woken_wake_function+0x10/0x10 [ 485.580280][ T8157] __tipc_sendmsg+0x2d7/0x2960 [ 485.580305][ T8157] ? rcu_is_watching+0x15/0xb0 [ 485.580328][ T8157] ? down_write+0x162/0x1f0 [ 485.580348][ T8157] ? __pfx___tipc_sendmsg+0x10/0x10 [ 485.580372][ T8157] ? aa_label_sk_perm+0x4cd/0x630 [ 485.580396][ T8157] ? process_measurement+0x2d1/0x1a40 [ 485.580414][ T8157] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 485.580438][ T8157] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 485.580464][ T8157] ? __pfx_process_measurement+0x10/0x10 [ 485.580481][ T8157] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 485.580501][ T8157] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 485.580521][ T8157] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 485.580552][ T8157] ? __pfx___might_resched+0x10/0x10 [ 485.580580][ T8157] ? rcu_is_watching+0x15/0xb0 [ 485.580602][ T8157] ? tipc_sendmsg+0x47/0x70 [ 485.580625][ T8157] ? __local_bh_enable_ip+0x12d/0x1c0 [ 485.580648][ T8157] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 485.580685][ T8157] tipc_sendmsg+0x55/0x70 [ 485.580709][ T8157] ? __pfx_tipc_sendmsg+0x10/0x10 [ 485.580732][ T8157] __sock_sendmsg+0x21c/0x270 [ 485.580756][ T8157] ____sys_sendmsg+0x52d/0x830 [ 485.580787][ T8157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.580822][ T8157] ? import_iovec+0x74/0xa0 [ 485.580846][ T8157] ___sys_sendmsg+0x21f/0x2a0 [ 485.580877][ T8157] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.580923][ T8157] ? __fget_files+0x2a/0x420 [ 485.580947][ T8157] ? __fget_files+0x3a0/0x420 [ 485.580974][ T8157] __sys_sendmmsg+0x227/0x430 [ 485.581006][ T8157] ? __pfx___sys_sendmmsg+0x10/0x10 [ 485.581041][ T8157] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 485.581078][ T8157] ? ksys_write+0x22a/0x250 [ 485.581098][ T8157] ? __pfx_ksys_write+0x10/0x10 [ 485.581120][ T8157] __x64_sys_sendmmsg+0xa0/0xc0 [ 485.581152][ T8157] do_syscall_64+0xfa/0xfa0 [ 485.581179][ T8157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.581198][ T8157] ? clear_bhb_loop+0x60/0xb0 [ 485.581221][ T8157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.581240][ T8157] RIP: 0033:0x7fd41e38ebe9 [ 485.581258][ T8157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.581277][ T8157] RSP: 002b:00007fd41f22c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 485.581298][ T8157] RAX: ffffffffffffffda RBX: 00007fd41e5b5fa0 RCX: 00007fd41e38ebe9 [ 485.581312][ T8157] RDX: 0000000000000003 RSI: 000020000000b2c0 RDI: 0000000000000003 [ 485.581325][ T8157] RBP: 00007fd41f22c090 R08: 0000000000000000 R09: 0000000000000000 [ 485.581339][ T8157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.581351][ T8157] R13: 00007fd41e5b6038 R14: 00007fd41e5b5fa0 R15: 00007ffe617b4148 [ 485.581374][ T8157] [ 485.658538][ T10] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 485.662414][ C1] vkms_vblank_simulate: vblank timer overrun [ 485.981425][ T5911] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 486.138599][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 486.150577][ T5911] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 486.158510][ T10] usb 4-1: device descriptor read/64, error -71 [ 486.162597][ T5911] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.176525][ T5911] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 486.201147][ T5911] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 486.207653][ T8165] overlayfs: failed to resolve './file1': -2 [ 486.217386][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.227732][ T5911] usb 5-1: Product: syz [ 486.232927][ T5911] usb 5-1: Manufacturer: syz [ 486.237667][ T5911] usb 5-1: SerialNumber: syz [ 486.269989][ T10] usb usb4-port1: attempt power cycle [ 486.652376][ T5911] usb 5-1: 0:2 : does not exist [ 486.696568][ T8177] /dev/rnullb0: Can't open blockdev [ 486.769203][ T10] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 486.835041][ T8186] /dev/rnullb0: Can't open blockdev [ 486.840461][ T5949] gspca_sonixj: reg_w1 err -71 [ 486.879041][ T5949] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 486.905267][ T5949] usb 2-1: USB disconnect, device number 42 [ 486.930781][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 486.971633][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 486.978522][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.988998][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 486.997916][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 487.009683][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 487.021956][ T10] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 487.031315][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.055156][ T10] hub 4-1:1.0: bad descriptor, ignoring hub [ 487.059862][ T6403] Process accounting resumed [ 487.070483][ T10] hub 4-1:1.0: probe with driver hub failed with error -5 [ 487.080904][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 487.086162][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 487.101113][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 487.107462][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 487.184180][ T8190] Process accounting resumed [ 487.207599][ T8194] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 487.214738][ T8194] /dev/rnullb0: Can't open blockdev [ 487.324745][ T8202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.334996][ T8202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.344586][ T8202] FAULT_INJECTION: forcing a failure. [ 487.344586][ T8202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.360884][ T8202] CPU: 0 UID: 0 PID: 8202 Comm: syz.2.856 Not tainted syzkaller #0 PREEMPT(full) [ 487.360912][ T8202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 487.360925][ T8202] Call Trace: [ 487.360934][ T8202] [ 487.360942][ T8202] dump_stack_lvl+0x189/0x250 [ 487.360978][ T8202] ? __pfx____ratelimit+0x10/0x10 [ 487.361004][ T8202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.361035][ T8202] ? __pfx__printk+0x10/0x10 [ 487.361066][ T8202] ? rcu_is_watching+0x15/0xb0 [ 487.361090][ T8202] should_fail_ex+0x414/0x560 [ 487.361119][ T8202] strncpy_from_user+0x36/0x290 [ 487.361148][ T8202] getname_flags+0xf3/0x540 [ 487.361174][ T8202] do_sys_openat2+0xbc/0x1c0 [ 487.361203][ T8202] ? __pfx_do_sys_openat2+0x10/0x10 [ 487.361232][ T8202] ? ksys_write+0x22a/0x250 [ 487.361253][ T8202] ? __pfx_ksys_write+0x10/0x10 [ 487.361272][ T8202] __x64_sys_openat+0x138/0x170 [ 487.361303][ T8202] do_syscall_64+0xfa/0xfa0 [ 487.361330][ T8202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.361350][ T8202] ? clear_bhb_loop+0x60/0xb0 [ 487.361372][ T8202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.361391][ T8202] RIP: 0033:0x7f0795d8d550 [ 487.361410][ T8202] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 487.361428][ T8202] RSP: 002b:00007f0796babb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 487.361449][ T8202] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f0795d8d550 [ 487.361464][ T8202] RDX: 0000000000000002 RSI: 00007f0796babc10 RDI: 00000000ffffff9c [ 487.361477][ T8202] RBP: 00007f0796babc10 R08: 0000000000000000 R09: 00007f0796bab987 [ 487.361490][ T8202] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 487.361502][ T8202] R13: 00007f0795fb6038 R14: 00007f0795fb5fa0 R15: 00007fff9af27f88 [ 487.361525][ T8202] [ 487.755664][ T8202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.766090][ T8202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.828550][ T8173] usb 4-1: reset high-speed USB device number 51 using dummy_hcd [ 487.993916][ T8173] usb 4-1: device firmware changed [ 487.999831][ T8173] cdc_wdm 4-1:1.0: Error autopm - -16 [ 487.999965][ T5911] usb 4-1: USB disconnect, device number 51 [ 488.138002][ T5911] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 488.227914][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 488.293980][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 488.305694][ T8221] /dev/rnullb0: Can't open blockdev [ 488.306531][ T5911] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.312978][ T8221] /dev/rnullb0: Can't open blockdev [ 488.323701][ T5911] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 488.337568][ T5911] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 488.357903][ T5911] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 488.357973][ T10] usb 2-1: device descriptor read/64, error -71 [ 488.378339][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.407036][ T5911] hub 4-1:1.0: bad descriptor, ignoring hub [ 488.415269][ T5911] hub 4-1:1.0: probe with driver hub failed with error -5 [ 488.423797][ T5911] cdc_wdm 4-1:1.0: skipping garbage [ 488.429847][ T5911] cdc_wdm 4-1:1.0: skipping garbage [ 488.435088][ T5911] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 488.607943][ T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 488.708019][ T5911] usb 4-1: USB disconnect, device number 52 [ 488.747955][ T10] usb 2-1: device descriptor read/64, error -71 [ 488.754582][ T5911] usb 5-1: USB disconnect, device number 30 [ 488.797710][ T8235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.868'. [ 488.850824][ T8239] /dev/rnullb0: Can't open blockdev [ 488.862906][ T8238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.874551][ T8238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.884404][ T5920] Bluetooth: hci3: unexpected cc 0x0c58 length: 4 > 2 [ 488.896354][ T10] usb usb2-port1: attempt power cycle [ 488.897811][ T8241] binder: 8240:8241 ioctl c0306201 200000000080 returned -14 [ 488.967206][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.873'. [ 489.180029][ T8253] loop2: detected capacity change from 0 to 7 [ 489.193297][ T8253] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 489.201155][ T8253] loop2: partition table partially beyond EOD, truncated [ 489.209500][ T8253] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 489.257851][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 489.290182][ T10] usb 2-1: device descriptor read/8, error -71 [ 489.320681][ T5233] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 489.326020][ T5233] loop2: partition table partially beyond EOD, truncated [ 489.333566][ T5233] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 489.361272][ T6114] udevd[6114]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 489.418521][ T5911] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 489.467149][ T8258] serio: Serial port ptm0 [ 489.537785][ T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 489.567937][ T5911] usb 4-1: device descriptor read/64, error -71 [ 489.568489][ T10] usb 2-1: device descriptor read/8, error -71 [ 489.619647][ T8267] block nbd2: Attempted send on invalid socket [ 489.626007][ T8267] I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 489.635985][ T8267] gfs2: error -5 reading superblock [ 489.635980][ T8258] FAULT_INJECTION: forcing a failure. [ 489.635980][ T8258] name failslab, interval 1, probability 0, space 0, times 0 [ 489.636015][ T8258] CPU: 0 UID: 0 PID: 8258 Comm: syz.4.879 Not tainted syzkaller #0 PREEMPT(full) [ 489.636037][ T8258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 489.636050][ T8258] Call Trace: [ 489.636059][ T8258] [ 489.636068][ T8258] dump_stack_lvl+0x189/0x250 [ 489.636109][ T8258] ? __pfx____ratelimit+0x10/0x10 [ 489.636139][ T8258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.636174][ T8258] ? __pfx__printk+0x10/0x10 [ 489.636207][ T8258] ? serio_destroy_port+0x38a/0x4a0 [ 489.636230][ T8258] ? __pfx___might_resched+0x10/0x10 [ 489.636255][ T8258] ? lock_acquire+0x5f/0x360 [ 489.636279][ T8258] should_fail_ex+0x414/0x560 [ 489.636312][ T8258] should_failslab+0xa8/0x100 [ 489.636335][ T8258] kmem_cache_alloc_noprof+0x73/0x390 [ 489.636369][ T8258] ? skb_clone+0x212/0x3a0 [ 489.636400][ T8258] ? string+0x279/0x2b0 [ 489.636423][ T8258] skb_clone+0x212/0x3a0 [ 489.636442][ T8258] ? netlink_broadcast_filtered+0x73b/0x12c0 [ 489.636471][ T8258] netlink_broadcast_filtered+0x749/0x12c0 [ 489.636501][ T8258] ? sprintf+0xd9/0x120 [ 489.636523][ T8258] ? kmem_cache_alloc_node_noprof+0x203/0x390 [ 489.636562][ T8258] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 489.636589][ T8258] ? alloc_uevent_skb+0xeb/0x230 [ 489.636610][ T8258] ? __asan_memcpy+0x40/0x70 [ 489.636640][ T8258] netlink_broadcast+0x37/0x50 [ 489.636667][ T8258] kobject_uevent_net_broadcast+0x378/0x560 [ 489.636705][ T8258] kobject_uevent_env+0x55b/0x8c0 [ 489.636740][ T8258] ? kobject_put+0x43f/0x480 [ 489.636774][ T8258] device_del+0x73a/0x8e0 [ 489.636804][ T8258] ? __pfx_device_del+0x10/0x10 [ 489.636832][ T8258] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 489.636865][ T8258] serio_destroy_port+0x38a/0x4a0 [ 489.636889][ T8258] serio_unregister_port+0x130/0x190 [ 489.636914][ T8258] serport_ldisc_read+0x4de/0x5b0 [ 489.636943][ T8258] ? __pfx___might_resched+0x10/0x10 [ 489.636969][ T8258] ? __pfx_serport_ldisc_read+0x10/0x10 [ 489.636999][ T8258] ? __pfx_autoremove_wake_function+0x10/0x10 [ 489.637038][ T8258] tty_read+0x240/0x690 [ 489.637061][ T8258] ? rcu_is_watching+0x15/0xb0 [ 489.637089][ T8258] ? __pfx_tty_read+0x10/0x10 [ 489.637124][ T8258] do_iter_readv_writev+0x619/0x8b0 [ 489.637152][ T8258] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 489.637177][ T8258] ? common_file_perm+0x1b5/0x230 [ 489.637207][ T8258] ? bpf_lsm_file_permission+0x9/0x20 [ 489.637239][ T8258] ? security_file_permission+0x75/0x290 [ 489.637264][ T8258] ? rw_verify_area+0x2a6/0x4d0 [ 489.637286][ T8258] vfs_readv+0x253/0x850 [ 489.637317][ T8258] ? __pfx_vfs_readv+0x10/0x10 [ 489.637342][ T8258] ? vfs_write+0x956/0xb30 [ 489.637369][ T8258] ? lock_release+0x4b/0x3e0 [ 489.637401][ T8258] ? __fget_files+0x3a0/0x420 [ 489.637427][ T8258] ? __fget_files+0x2a/0x420 [ 489.637457][ T8258] do_readv+0x14d/0x2d0 [ 489.637487][ T8258] ? __pfx_do_readv+0x10/0x10 [ 489.637518][ T8258] ? rcu_is_watching+0x15/0xb0 [ 489.637544][ T8258] do_syscall_64+0xfa/0xfa0 [ 489.637576][ T8258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.637599][ T8258] ? clear_bhb_loop+0x60/0xb0 [ 489.637625][ T8258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.637646][ T8258] RIP: 0033:0x7fd41e38ebe9 [ 489.637665][ T8258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.637685][ T8258] RSP: 002b:00007fd41f22c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 489.637709][ T8258] RAX: ffffffffffffffda RBX: 00007fd41e5b5fa0 RCX: 00007fd41e38ebe9 [ 489.637726][ T8258] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 489.637740][ T8258] RBP: 00007fd41f22c090 R08: 0000000000000000 R09: 0000000000000000 [ 489.637755][ T8258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.637767][ T8258] R13: 00007fd41e5b6038 R14: 00007fd41e5b5fa0 R15: 00007ffe617b4148 [ 489.637793][ T8258] [ 489.711211][ T10] usb usb2-port1: unable to enumerate USB device [ 489.848398][ T5911] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 490.149731][ T8274] netlink: 212 bytes leftover after parsing attributes in process `syz.2.885'. [ 490.164631][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 490.197695][ T5911] usb 4-1: device descriptor read/64, error -71 [ 490.298458][ T8280] binder: 8279:8280 ioctl c0306201 200000000080 returned -14 [ 490.330690][ T5911] usb usb4-port1: attempt power cycle [ 490.656693][ T8288] binder: 8287:8288 ioctl c0306201 200000000080 returned -14 [ 490.668221][ T5911] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 490.688910][ T5911] usb 4-1: device descriptor read/8, error -71 [ 490.751213][ T8290] tipc: Enabling of bearer rejected, already enabled [ 490.937516][ T5911] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 490.968114][ T5911] usb 4-1: device descriptor read/8, error -71 [ 491.047437][ T5880] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 491.082481][ T5911] usb usb4-port1: unable to enumerate USB device [ 491.197413][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 491.212767][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.242472][ T5880] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 491.280837][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.315537][ T5880] usb 5-1: config 0 descriptor?? [ 491.742043][ T5880] pantherlord 0003:0E8F:0003.000A: item fetching failed at offset 2/5 [ 491.766664][ T5880] pantherlord 0003:0E8F:0003.000A: parse failed [ 491.795456][ T5880] pantherlord 0003:0E8F:0003.000A: probe with driver pantherlord failed with error -22 [ 491.945029][ T5880] usb 5-1: USB disconnect, device number 31 [ 491.964200][ T8306] netlink: 20 bytes leftover after parsing attributes in process `syz.2.899'. [ 492.003717][ T8306] netlink: 20 bytes leftover after parsing attributes in process `syz.2.899'. [ 492.083050][ T8306] netlink: 'syz.2.899': attribute type 11 has an invalid length. [ 492.097740][ T8308] netlink: 'syz.2.899': attribute type 11 has an invalid length. [ 492.242472][ T8310] mmap: syz.3.900 (8310): VmData 37457920 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 492.847249][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.906'. [ 492.968604][ T5920] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 492.977296][ T5920] Bluetooth: hci3: Injecting HCI hardware error event [ 492.984212][ T5920] Bluetooth: hci3: hardware error 0x00 [ 493.331076][ T8336] loop2: detected capacity change from 0 to 7 [ 493.349263][ T8336] Dev loop2: unable to read RDB block 7 [ 493.354901][ T8336] loop2: unable to read partition table [ 493.380637][ T8336] loop2: partition table beyond EOD, truncated [ 493.403786][ T8336] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 493.527880][ T5949] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 493.702340][ T5949] usb 5-1: Using ep0 maxpacket: 32 [ 493.722580][ T5949] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 493.771677][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 493.805467][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 493.834588][ T8342] FAULT_INJECTION: forcing a failure. [ 493.834588][ T8342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.847154][ T5949] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 493.867143][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.909246][ T5949] usb 5-1: config 0 descriptor?? [ 493.914877][ T8334] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 493.926448][ T8342] CPU: 1 UID: 0 PID: 8342 Comm: syz.2.913 Not tainted syzkaller #0 PREEMPT(full) [ 493.926479][ T8342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 493.926492][ T8342] Call Trace: [ 493.926500][ T8342] [ 493.926509][ T8342] dump_stack_lvl+0x189/0x250 [ 493.926546][ T8342] ? __pfx____ratelimit+0x10/0x10 [ 493.926573][ T8342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.926605][ T8342] ? __pfx__printk+0x10/0x10 [ 493.926633][ T8342] ? __might_fault+0xb0/0x130 [ 493.926668][ T8342] ? rcu_is_watching+0x15/0xb0 [ 493.926693][ T8342] should_fail_ex+0x414/0x560 [ 493.926724][ T8342] _copy_from_iter+0x1de/0x1790 [ 493.926752][ T8342] ? __pfx__copy_from_iter+0x10/0x10 [ 493.926773][ T8342] ? pskb_expand_head+0x382/0x1150 [ 493.926793][ T8342] ? kmem_cache_free+0x18f/0x400 [ 493.926828][ T8342] skb_copy_datagram_from_iter+0xf5/0x720 [ 493.926857][ T8342] tun_get_user+0x1691/0x3e20 [ 493.926885][ T8342] ? rcu_is_watching+0x15/0xb0 [ 493.926910][ T8342] ? aa_file_perm+0x44d/0x1550 [ 493.926939][ T8342] ? __pfx_tun_get_user+0x10/0x10 [ 493.926962][ T8342] ? _parse_integer_limit+0x1ae/0x1f0 [ 493.926995][ T8342] ? kstrtoull+0x12f/0x1d0 [ 493.927025][ T8342] ? ref_tracker_alloc+0x318/0x460 [ 493.927053][ T8342] ? get_pid_task+0x20/0x1f0 [ 493.927078][ T8342] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 493.927106][ T8342] ? tun_get+0x1c/0x2f0 [ 493.927128][ T8342] ? tun_get+0x1c/0x2f0 [ 493.927158][ T8342] ? rcu_is_watching+0x15/0xb0 [ 493.927179][ T8342] ? tun_get+0x1c/0x2f0 [ 493.927199][ T8342] ? lock_release+0x4b/0x3e0 [ 493.927217][ T8342] ? common_file_perm+0x1b5/0x230 [ 493.927244][ T8342] ? tun_get+0x1c/0x2f0 [ 493.927268][ T8342] tun_chr_write_iter+0x113/0x200 [ 493.927293][ T8342] vfs_write+0x5c9/0xb30 [ 493.927315][ T8342] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 493.927339][ T8342] ? __pfx_vfs_write+0x10/0x10 [ 493.927364][ T8342] ? __fget_files+0x2a/0x420 [ 493.927391][ T8342] ksys_write+0x145/0x250 [ 493.927412][ T8342] ? __pfx_ksys_write+0x10/0x10 [ 493.927432][ T8342] ? rcu_is_watching+0x15/0xb0 [ 493.927456][ T8342] do_syscall_64+0xfa/0xfa0 [ 493.927482][ T8342] ? rcu_is_watching+0x15/0xb0 [ 493.927503][ T8342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.927522][ T8342] ? clear_bhb_loop+0x60/0xb0 [ 493.927544][ T8342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.927564][ T8342] RIP: 0033:0x7f0795d8ebe9 [ 493.927581][ T8342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.927600][ T8342] RSP: 002b:00007f0796bac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 493.927621][ T8342] RAX: ffffffffffffffda RBX: 00007f0795fb5fa0 RCX: 00007f0795d8ebe9 [ 493.927636][ T8342] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000003 [ 493.927649][ T8342] RBP: 00007f0796bac090 R08: 0000000000000000 R09: 0000000000000000 [ 493.927661][ T8342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.927673][ T8342] R13: 00007f0795fb6038 R14: 00007f0795fb5fa0 R15: 00007fff9af27f88 [ 493.927696][ T8342] [ 493.930169][ T5949] hub 5-1:0.0: USB hub found [ 494.586807][ T5880] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 494.747651][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 494.805252][ T5880] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.827834][ T5880] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 494.858375][ T5880] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 494.905326][ T5880] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 494.920459][ T5949] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 494.938763][ T5880] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 494.944310][ T5949] usbhid 5-1:0.0: can't add hid device: -71 [ 494.954196][ T5949] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 494.956750][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.981205][ T8358] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 495.001818][ T5880] hub 4-1:1.0: bad descriptor, ignoring hub [ 495.002379][ T5949] usb 5-1: USB disconnect, device number 32 [ 495.014697][ T5880] hub 4-1:1.0: probe with driver hub failed with error -5 [ 495.030797][ T8355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.039431][ T5920] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 495.056600][ T8360] binder: 8359:8360 ioctl c0306201 200000000080 returned -14 [ 495.057282][ T5880] cdc_wdm 4-1:1.0: skipping garbage [ 495.076991][ T8355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.086740][ T5880] cdc_wdm 4-1:1.0: skipping garbage [ 495.105394][ T5880] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 495.111528][ T5880] cdc_wdm 4-1:1.0: Unknown control protocol [ 495.307764][ T5880] usb 4-1: USB disconnect, device number 57 [ 495.365713][ T8367] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 495.636680][ T5880] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 495.818823][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 495.828538][ T5880] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.841182][ T5880] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 495.864991][ T5880] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 495.884182][ T5880] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 495.895908][ T5880] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 495.909809][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.922895][ T5880] hub 4-1:1.0: bad descriptor, ignoring hub [ 495.930439][ T5880] hub 4-1:1.0: probe with driver hub failed with error -5 [ 495.942261][ T5880] cdc_wdm 4-1:1.0: skipping garbage [ 495.953566][ T5880] cdc_wdm 4-1:1.0: skipping garbage [ 495.960251][ T5880] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 495.966316][ T5880] cdc_wdm 4-1:1.0: Unknown control protocol [ 496.044374][ T8391] netlink: 36 bytes leftover after parsing attributes in process `syz.2.927'. [ 496.132336][ T8393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.152049][ T8393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.229290][ T24] usb 4-1: USB disconnect, device number 58 [ 496.696460][ T10] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 496.878222][ T10] usb 2-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 496.899614][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.928863][ T10] usb 2-1: config 0 descriptor?? [ 497.157770][ T10] aquacomputer_d5next 0003:0C70:F001.000B: unknown main item tag 0x0 [ 497.176372][ T10] aquacomputer_d5next 0003:0C70:F001.000B: unknown main item tag 0x0 [ 497.183480][ T8419] /dev/rnullb0: Can't open blockdev [ 497.187200][ T10] aquacomputer_d5next 0003:0C70:F001.000B: unknown main item tag 0x0 [ 497.222583][ T10] aquacomputer_d5next 0003:0C70:F001.000B: unknown main item tag 0x0 [ 497.237563][ T10] aquacomputer_d5next 0003:0C70:F001.000B: unknown main item tag 0x0 [ 497.256248][ T8421] overlayfs: failed to resolve './file1': -2 [ 497.262155][ T10] aquacomputer_d5next 0003:0C70:F001.000B: hidraw0: USB HID v1.01 Device [HID 0c70:f001] on usb-dummy_hcd.1-1/input0 [ 497.468253][ T8434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.487230][ T8434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.511671][ T8436] : renamed from dummy0 (while UP) [ 498.142192][ T8400] /dev/rnullb0: Can't open blockdev [ 498.147860][ T8436] /dev/rnullb0: Can't open blockdev [ 498.153364][ T8437] /dev/rnullb0: Can't open blockdev [ 498.509578][ T8450] /dev/rnullb0: Can't open blockdev [ 498.520013][ T8450] /dev/rnullb0: Can't open blockdev [ 498.627803][ T8456] FAULT_INJECTION: forcing a failure. [ 498.627803][ T8456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.670054][ T8456] CPU: 0 UID: 0 PID: 8456 Comm: syz.3.954 Not tainted syzkaller #0 PREEMPT(full) [ 498.670085][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 498.670098][ T8456] Call Trace: [ 498.670106][ T8456] [ 498.670114][ T8456] dump_stack_lvl+0x189/0x250 [ 498.670153][ T8456] ? __pfx____ratelimit+0x10/0x10 [ 498.670179][ T8456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.670214][ T8456] ? __pfx__printk+0x10/0x10 [ 498.670241][ T8456] ? __might_fault+0xb0/0x130 [ 498.670275][ T8456] ? rcu_is_watching+0x15/0xb0 [ 498.670299][ T8456] should_fail_ex+0x414/0x560 [ 498.670328][ T8456] _copy_from_user+0x2d/0xb0 [ 498.670352][ T8456] do_handle_open+0xd7/0x8c0 [ 498.670380][ T8456] ? __pfx_do_handle_open+0x10/0x10 [ 498.670405][ T8456] ? ksys_write+0x22a/0x250 [ 498.670425][ T8456] ? __pfx_ksys_write+0x10/0x10 [ 498.670446][ T8456] ? rcu_is_watching+0x15/0xb0 [ 498.670469][ T8456] do_syscall_64+0xfa/0xfa0 [ 498.670496][ T8456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.670515][ T8456] ? clear_bhb_loop+0x60/0xb0 [ 498.670538][ T8456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.670557][ T8456] RIP: 0033:0x7feb5dd8ebe9 [ 498.670574][ T8456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.670591][ T8456] RSP: 002b:00007feb5ec3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 498.670613][ T8456] RAX: ffffffffffffffda RBX: 00007feb5dfb5fa0 RCX: 00007feb5dd8ebe9 [ 498.670628][ T8456] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 498.670640][ T8456] RBP: 00007feb5ec3a090 R08: 0000000000000000 R09: 0000000000000000 [ 498.670652][ T8456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.670664][ T8456] R13: 00007feb5dfb6038 R14: 00007feb5dfb5fa0 R15: 00007ffd1aa945f8 [ 498.670687][ T8456] [ 498.930594][ T5920] Bluetooth: hci1: command 0x0406 tx timeout [ 498.939883][ T5920] Bluetooth: hci0: command 0x0406 tx timeout [ 499.494650][ T5911] usb 2-1: USB disconnect, device number 47 [ 499.560656][ T8478] /dev/rnullb0: Can't open blockdev [ 499.581030][ T8478] autofs4:pid:8478:validate_dev_ioctl: path string terminator missing for cmd(0xc018937c) [ 499.633859][ T8480] /dev/rnullb0: Can't open blockdev [ 499.696202][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 499.877577][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 499.897241][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 499.917684][ T8498] /dev/rnullb0: Can't open blockdev [ 499.917745][ T24] usb 5-1: config 7 has an invalid interface number: 169 but max is 0 [ 499.940891][ T24] usb 5-1: config 7 has no interface number 0 [ 499.949636][ T24] usb 5-1: New USB device found, idVendor=04c5, idProduct=1330, bcdDevice=79.99 [ 499.966275][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.984851][ T24] usb 5-1: Product: syz [ 499.990600][ T24] usb 5-1: Manufacturer: syz [ 499.995576][ T24] usb 5-1: SerialNumber: syz [ 500.049130][ T8500] FAULT_INJECTION: forcing a failure. [ 500.049130][ T8500] name failslab, interval 1, probability 0, space 0, times 0 [ 500.061833][ T8500] CPU: 0 UID: 0 PID: 8500 Comm: syz.1.967 Not tainted syzkaller #0 PREEMPT(full) [ 500.061860][ T8500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 500.061872][ T8500] Call Trace: [ 500.061879][ T8500] [ 500.061887][ T8500] dump_stack_lvl+0x189/0x250 [ 500.061922][ T8500] ? __pfx____ratelimit+0x10/0x10 [ 500.061948][ T8500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.061978][ T8500] ? __pfx__printk+0x10/0x10 [ 500.062013][ T8500] ? unwind_next_frame+0xa5/0x2390 [ 500.062038][ T8500] ? rcu_is_watching+0x15/0xb0 [ 500.062060][ T8500] ? unwind_next_frame+0xa5/0x2390 [ 500.062087][ T8500] should_fail_ex+0x414/0x560 [ 500.062116][ T8500] should_failslab+0xa8/0x100 [ 500.062135][ T8500] kmem_cache_alloc_noprof+0x73/0x390 [ 500.062162][ T8500] ? dst_alloc+0x105/0x170 [ 500.062182][ T8500] dst_alloc+0x105/0x170 [ 500.062202][ T8500] ip_route_input_rcu+0x139f/0x30d0 [ 500.062229][ T8500] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 500.062250][ T8500] ? stack_trace_save+0x9c/0xe0 [ 500.062278][ T8500] ? ip_route_input_noref+0x98/0x250 [ 500.062296][ T8500] ? rcu_is_watching+0x15/0xb0 [ 500.062318][ T8500] ? lock_acquire+0x5f/0x360 [ 500.062339][ T8500] ? ip_route_input_noref+0x98/0x250 [ 500.062359][ T8500] ip_route_input_noref+0x167/0x250 [ 500.062380][ T8500] ? __pfx_ip_route_input_noref+0x10/0x10 [ 500.062401][ T8500] ? nf_hook_slow_list+0x2af/0x390 [ 500.062431][ T8500] ip_rcv_finish_core+0x5af/0x1c00 [ 500.062462][ T8500] ip_sublist_rcv+0x397/0x9b0 [ 500.062494][ T8500] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 500.062520][ T8500] ? skb_orphan+0xaf/0xd0 [ 500.062546][ T8500] ? __pfx_ip_rcv_finish+0x10/0x10 [ 500.062576][ T8500] ip_list_rcv+0x3e2/0x430 [ 500.062606][ T8500] ? __pfx_ip_list_rcv+0x10/0x10 [ 500.062635][ T8500] ? __pfx_ip_list_rcv+0x10/0x10 [ 500.062660][ T8500] __netif_receive_skb_list_core+0x7d2/0x800 [ 500.062691][ T8500] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 500.062720][ T8500] ? netif_receive_skb_list_internal+0x4fd/0xcc0 [ 500.062742][ T8500] netif_receive_skb_list_internal+0x975/0xcc0 [ 500.062764][ T8500] ? inet_gro_receive+0x25d/0xcc0 [ 500.062789][ T8500] ? netif_receive_skb_list_internal+0x4fd/0xcc0 [ 500.062812][ T8500] ? lock_release+0x4b/0x3e0 [ 500.062829][ T8500] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 500.062853][ T8500] ? dev_gro_receive+0x1020/0x23b0 [ 500.062879][ T8500] ? eth_type_trans+0x3a8/0x760 [ 500.062914][ T8500] napi_complete_done+0x2f2/0x7c0 [ 500.062940][ T8500] ? __pfx_napi_complete_done+0x10/0x10 [ 500.062961][ T8500] ? rcu_is_watching+0x15/0xb0 [ 500.062993][ T8500] ? napi_gro_frags+0x975/0x1030 [ 500.063023][ T8500] ? tun_get_user+0x266c/0x3e20 [ 500.063049][ T8500] tun_get_user+0x28d5/0x3e20 [ 500.063076][ T8500] ? rcu_is_watching+0x15/0xb0 [ 500.063100][ T8500] ? tun_get_user+0x266c/0x3e20 [ 500.063126][ T8500] ? aa_file_perm+0x44d/0x1550 [ 500.063163][ T8500] ? __pfx_tun_get_user+0x10/0x10 [ 500.063191][ T8500] ? kstrtoull+0x12f/0x1d0 [ 500.063224][ T8500] ? ref_tracker_alloc+0x318/0x460 [ 500.063253][ T8500] ? get_pid_task+0x20/0x1f0 [ 500.063281][ T8500] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 500.063312][ T8500] ? tun_get+0x1c/0x2f0 [ 500.063336][ T8500] ? tun_get+0x1c/0x2f0 [ 500.063359][ T8500] ? rcu_is_watching+0x15/0xb0 [ 500.063379][ T8500] ? tun_get+0x1c/0x2f0 [ 500.063401][ T8500] ? lock_release+0x4b/0x3e0 [ 500.063419][ T8500] ? common_file_perm+0x1b5/0x230 [ 500.063445][ T8500] ? tun_get+0x1c/0x2f0 [ 500.063471][ T8500] tun_chr_write_iter+0x113/0x200 [ 500.063497][ T8500] vfs_write+0x5c9/0xb30 [ 500.063518][ T8500] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 500.063543][ T8500] ? __pfx_vfs_write+0x10/0x10 [ 500.063566][ T8500] ? __fget_files+0x2a/0x420 [ 500.063595][ T8500] ksys_write+0x145/0x250 [ 500.063615][ T8500] ? __pfx_ksys_write+0x10/0x10 [ 500.063636][ T8500] ? rcu_is_watching+0x15/0xb0 [ 500.063660][ T8500] do_syscall_64+0xfa/0xfa0 [ 500.063687][ T8500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.063707][ T8500] ? clear_bhb_loop+0x60/0xb0 [ 500.063730][ T8500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.063749][ T8500] RIP: 0033:0x7f432978ebe9 [ 500.063767][ T8500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.063784][ T8500] RSP: 002b:00007f432a52b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 500.063807][ T8500] RAX: ffffffffffffffda RBX: 00007f43299b5fa0 RCX: 00007f432978ebe9 [ 500.063821][ T8500] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000003 [ 500.063834][ T8500] RBP: 00007f432a52b090 R08: 0000000000000000 R09: 0000000000000000 [ 500.063846][ T8500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.063858][ T8500] R13: 00007f43299b6038 R14: 00007f43299b5fa0 R15: 00007ffdb5d89dd8 [ 500.063882][ T8500] [ 500.538692][ T8506] tipc: Enabled bearer , priority 10 [ 500.614828][ T8512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.662588][ T8512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.037601][ T5911] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 501.169417][ T8525] binder: 8524:8525 ioctl c0306201 200000000080 returned -14 [ 501.216171][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 501.226537][ T5911] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.247128][ T5911] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 501.267894][ T5911] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 501.283358][ T5911] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 501.299738][ T5911] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 501.355026][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.386883][ T5911] hub 4-1:1.0: bad descriptor, ignoring hub [ 501.392901][ T5911] hub 4-1:1.0: probe with driver hub failed with error -5 [ 501.412512][ T5911] cdc_wdm 4-1:1.0: skipping garbage [ 501.423261][ T5911] cdc_wdm 4-1:1.0: skipping garbage [ 501.441139][ T5911] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 501.448159][ T5911] cdc_wdm 4-1:1.0: Unknown control protocol [ 501.586378][ T8518] FAULT_INJECTION: forcing a failure. [ 501.586378][ T8518] name failslab, interval 1, probability 0, space 0, times 0 [ 501.601245][ T8518] CPU: 1 UID: 0 PID: 8518 Comm: syz.3.974 Not tainted syzkaller #0 PREEMPT(full) [ 501.601273][ T8518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.601285][ T8518] Call Trace: [ 501.601293][ T8518] [ 501.601301][ T8518] dump_stack_lvl+0x189/0x250 [ 501.601342][ T8518] ? __pfx____ratelimit+0x10/0x10 [ 501.601367][ T8518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.601399][ T8518] ? __pfx__printk+0x10/0x10 [ 501.601429][ T8518] ? __pfx___might_resched+0x10/0x10 [ 501.601451][ T8518] ? lock_acquire+0x5f/0x360 [ 501.601472][ T8518] should_fail_ex+0x414/0x560 [ 501.601501][ T8518] should_failslab+0xa8/0x100 [ 501.601523][ T8518] kmem_cache_alloc_noprof+0x73/0x390 [ 501.601550][ T8518] ? security_file_alloc+0x34/0x330 [ 501.601573][ T8518] security_file_alloc+0x34/0x330 [ 501.601593][ T8518] init_file+0x93/0x2f0 [ 501.601629][ T8518] alloc_empty_file+0x6e/0x1d0 [ 501.601656][ T8518] path_openat+0x107/0x3830 [ 501.601672][ T8518] ? arch_stack_walk+0xfc/0x150 [ 501.601705][ T8518] ? stack_trace_save+0x9c/0xe0 [ 501.601733][ T8518] ? stack_depot_save_flags+0x40/0x860 [ 501.601765][ T8518] ? kasan_save_track+0x4f/0x80 [ 501.601792][ T8518] ? kasan_save_track+0x3e/0x80 [ 501.601818][ T8518] ? __kasan_slab_alloc+0x6c/0x80 [ 501.601846][ T8518] ? kmem_cache_alloc_noprof+0x1ad/0x390 [ 501.601873][ T8518] ? getname_flags+0xb8/0x540 [ 501.601898][ T8518] ? __pfx_path_openat+0x10/0x10 [ 501.601927][ T8518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.601956][ T8518] do_filp_open+0x1fa/0x410 [ 501.601988][ T8518] ? __pfx_do_filp_open+0x10/0x10 [ 501.602029][ T8518] ? _raw_spin_unlock+0x28/0x50 [ 501.602052][ T8518] ? alloc_fd+0x64c/0x6c0 [ 501.602080][ T8518] do_sys_openat2+0x121/0x1c0 [ 501.602109][ T8518] ? __pfx_do_sys_openat2+0x10/0x10 [ 501.602140][ T8518] ? ksys_write+0x22a/0x250 [ 501.602160][ T8518] ? __pfx_ksys_write+0x10/0x10 [ 501.602181][ T8518] __x64_sys_openat+0x138/0x170 [ 501.602212][ T8518] do_syscall_64+0xfa/0xfa0 [ 501.602240][ T8518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.602259][ T8518] ? clear_bhb_loop+0x60/0xb0 [ 501.602281][ T8518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.602300][ T8518] RIP: 0033:0x7feb5dd8d550 [ 501.602318][ T8518] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 501.602336][ T8518] RSP: 002b:00007feb5ec39b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 501.602357][ T8518] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007feb5dd8d550 [ 501.602370][ T8518] RDX: 0000000000000002 RSI: 00007feb5ec39c10 RDI: 00000000ffffff9c [ 501.602384][ T8518] RBP: 00007feb5ec39c10 R08: 0000000000000000 R09: 00007feb5ec39987 [ 501.602397][ T8518] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 501.602408][ T8518] R13: 00007feb5dfb6038 R14: 00007feb5dfb5fa0 R15: 00007ffd1aa945f8 [ 501.602431][ T8518] [ 501.890098][ C1] vkms_vblank_simulate: vblank timer overrun [ 502.066722][ T6403] usb 4-1: reset high-speed USB device number 59 using dummy_hcd [ 502.089929][ T8541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.100550][ T8541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.109711][ T8541] FAULT_INJECTION: forcing a failure. [ 502.109711][ T8541] name failslab, interval 1, probability 0, space 0, times 0 [ 502.143187][ T8541] CPU: 0 UID: 0 PID: 8541 Comm: syz.2.983 Not tainted syzkaller #0 PREEMPT(full) [ 502.143217][ T8541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 502.143231][ T8541] Call Trace: [ 502.143243][ T8541] [ 502.143251][ T8541] dump_stack_lvl+0x189/0x250 [ 502.143289][ T8541] ? __pfx____ratelimit+0x10/0x10 [ 502.143315][ T8541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.143346][ T8541] ? __pfx__printk+0x10/0x10 [ 502.143377][ T8541] ? __pfx___might_resched+0x10/0x10 [ 502.143399][ T8541] ? lock_acquire+0x5f/0x360 [ 502.143419][ T8541] should_fail_ex+0x414/0x560 [ 502.143449][ T8541] should_failslab+0xa8/0x100 [ 502.143470][ T8541] __kmalloc_node_track_caller_noprof+0xcc/0x4a0 [ 502.143503][ T8541] ? snd_timer_instance_new+0x6a/0x220 [ 502.143525][ T8541] kstrdup+0x42/0x100 [ 502.143550][ T8541] snd_timer_instance_new+0x6a/0x220 [ 502.143570][ T8541] snd_seq_timer_open+0x233/0x640 [ 502.143605][ T8541] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 502.143638][ T8541] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 502.143663][ T8541] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 502.143690][ T8541] ? snd_seq_timer_defaults+0x336/0x5b0 [ 502.143721][ T8541] snd_seq_queue_alloc+0x3dd/0x790 [ 502.143752][ T8541] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 502.143775][ T8541] snd_seq_oss_open+0x5e0/0xea0 [ 502.143800][ T8541] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 502.143844][ T8541] ? trace_contention_end+0x39/0x120 [ 502.143869][ T8541] ? __mutex_lock+0x335/0x1350 [ 502.143907][ T8541] ? __pfx___mutex_lock+0x10/0x10 [ 502.143938][ T8541] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 502.143959][ T8541] ? __pfx_free_devinfo+0x10/0x10 [ 502.143979][ T8541] ? do_raw_spin_unlock+0x122/0x240 [ 502.144008][ T8541] ? soundcore_open+0x2da/0x490 [ 502.144031][ T8541] odev_open+0x67/0xa0 [ 502.144049][ T8541] chrdev_open+0x4cc/0x5e0 [ 502.144075][ T8541] ? __pfx_chrdev_open+0x10/0x10 [ 502.144119][ T8541] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 502.144147][ T8541] ? __pfx_chrdev_open+0x10/0x10 [ 502.144170][ T8541] do_dentry_open+0x950/0x13f0 [ 502.144203][ T8541] vfs_open+0x3b/0x340 [ 502.144227][ T8541] ? path_openat+0x2ecd/0x3830 [ 502.144246][ T8541] path_openat+0x2ee5/0x3830 [ 502.144263][ T8541] ? arch_stack_walk+0xfc/0x150 [ 502.144298][ T8541] ? stack_depot_save_flags+0x40/0x860 [ 502.144333][ T8541] ? __pfx_path_openat+0x10/0x10 [ 502.144362][ T8541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.144392][ T8541] do_filp_open+0x1fa/0x410 [ 502.144424][ T8541] ? __pfx_do_filp_open+0x10/0x10 [ 502.144466][ T8541] ? _raw_spin_unlock+0x28/0x50 [ 502.144489][ T8541] ? alloc_fd+0x64c/0x6c0 [ 502.144517][ T8541] do_sys_openat2+0x121/0x1c0 [ 502.144547][ T8541] ? __pfx_do_sys_openat2+0x10/0x10 [ 502.144575][ T8541] ? ksys_write+0x22a/0x250 [ 502.144596][ T8541] ? __pfx_ksys_write+0x10/0x10 [ 502.144618][ T8541] __x64_sys_openat+0x138/0x170 [ 502.144647][ T8541] do_syscall_64+0xfa/0xfa0 [ 502.144676][ T8541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.144696][ T8541] ? clear_bhb_loop+0x60/0xb0 [ 502.144718][ T8541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.144737][ T8541] RIP: 0033:0x7f0795d8ebe9 [ 502.144756][ T8541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.144774][ T8541] RSP: 002b:00007f0796bac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 502.144796][ T8541] RAX: ffffffffffffffda RBX: 00007f0795fb5fa0 RCX: 00007f0795d8ebe9 [ 502.144811][ T8541] RDX: 0000000000020042 RSI: 0000200000000880 RDI: 00000000ffffff9c [ 502.144831][ T8541] RBP: 00007f0796bac090 R08: 0000000000000000 R09: 0000000000000000 [ 502.144844][ T8541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.144856][ T8541] R13: 00007f0795fb6038 R14: 00007f0795fb5fa0 R15: 00007fff9af27f88 [ 502.144880][ T8541] [ 502.549230][ T24] usb 5-1: USB disconnect, device number 33 [ 502.678821][ T10] usb 4-1: USB disconnect, device number 59 [ 502.781856][ T8553] overlayfs: missing 'workdir' [ 502.985395][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 503.025387][ T6403] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 503.114123][ T8555] /dev/rnullb0: Can't open blockdev [ 503.151296][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 503.169147][ T8559] netlink: 24 bytes leftover after parsing attributes in process `syz.2.992'. [ 503.188175][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.198884][ T6403] usb 2-1: Using ep0 maxpacket: 32 [ 503.215982][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 503.225199][ T6403] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 503.235331][ T6403] usb 2-1: config 0 has no interface number 0 [ 503.242717][ T6403] usb 2-1: config 0 interface 184 has no altsetting 0 [ 503.249798][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 503.275373][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 503.296629][ T6403] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 503.315431][ T24] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 503.327388][ T6403] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.345436][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.356156][ T6403] usb 2-1: Product: syz [ 503.360363][ T6403] usb 2-1: Manufacturer: syz [ 503.364997][ T6403] usb 2-1: SerialNumber: syz [ 503.380220][ T24] hub 5-1:1.0: bad descriptor, ignoring hub [ 503.396846][ T6403] usb 2-1: config 0 descriptor?? [ 503.402005][ T24] hub 5-1:1.0: probe with driver hub failed with error -5 [ 503.418001][ T6403] smsc75xx v1.0.0 [ 503.422315][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 503.436281][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 503.446637][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 503.452661][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 503.658996][ T8564] /dev/rnullb0: Can't open blockdev [ 503.672025][ T8564] /dev/rnullb0: Can't open blockdev [ 503.687530][ T10] usb 5-1: USB disconnect, device number 34 [ 504.160348][ T8576] netlink: 'syz.4.1000': attribute type 29 has an invalid length. [ 504.190148][ T8576] netlink: 'syz.4.1000': attribute type 29 has an invalid length. [ 504.203259][ T8576] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1000'. [ 504.217773][ T8578] sg_write: process 773 (syz.2.999) changed security contexts after opening file descriptor, this is not allowed. [ 504.267167][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.999'. [ 504.273146][ T8583] /dev/rnullb0: Can't open blockdev [ 504.631702][ T8593] /dev/rnullb0: Can't open blockdev [ 504.919441][ T8601] tipc: Enabled bearer , priority 10 [ 504.943074][ T8603] binder: 8602:8603 ioctl c0306201 200000000080 returned -14 [ 505.008542][ T8605] FAULT_INJECTION: forcing a failure. [ 505.008542][ T8605] name failslab, interval 1, probability 0, space 0, times 0 [ 505.042123][ T8605] CPU: 0 UID: 0 PID: 8605 Comm: syz.2.1012 Not tainted syzkaller #0 PREEMPT(full) [ 505.042154][ T8605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 505.042168][ T8605] Call Trace: [ 505.042176][ T8605] [ 505.042185][ T8605] dump_stack_lvl+0x189/0x250 [ 505.042222][ T8605] ? __pfx____ratelimit+0x10/0x10 [ 505.042249][ T8605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.042279][ T8605] ? __pfx__printk+0x10/0x10 [ 505.042309][ T8605] ? __pfx___might_resched+0x10/0x10 [ 505.042332][ T8605] ? lock_acquire+0x5f/0x360 [ 505.042353][ T8605] should_fail_ex+0x414/0x560 [ 505.042385][ T8605] should_failslab+0xa8/0x100 [ 505.042410][ T8605] __kmalloc_node_track_caller_noprof+0xcc/0x4a0 [ 505.042444][ T8605] ? vfs_parse_monolithic_sep+0x21f/0x310 [ 505.042475][ T8605] kmemdup_nul+0x36/0xf0 [ 505.042501][ T8605] vfs_parse_monolithic_sep+0x21f/0x310 [ 505.042525][ T8605] ? __pfx_ovl_next_opt+0x10/0x10 [ 505.042548][ T8605] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 505.042577][ T8605] ? alloc_fs_context+0x665/0x7d0 [ 505.042604][ T8605] do_new_mount+0x273/0xa30 [ 505.042630][ T8605] ? ns_capable+0x8a/0xf0 [ 505.042651][ T8605] ? __pfx_do_new_mount+0x10/0x10 [ 505.042673][ T8605] ? path_mount+0x61c/0xfe0 [ 505.042700][ T8605] ? user_path_at+0x44/0x60 [ 505.042733][ T8605] __se_sys_mount+0x317/0x410 [ 505.042761][ T8605] ? __pfx___se_sys_mount+0x10/0x10 [ 505.042786][ T8605] ? rcu_is_watching+0x15/0xb0 [ 505.042808][ T8605] ? __x64_sys_mount+0x20/0xc0 [ 505.042831][ T8605] do_syscall_64+0xfa/0xfa0 [ 505.042859][ T8605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.042879][ T8605] ? clear_bhb_loop+0x60/0xb0 [ 505.042901][ T8605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.042922][ T8605] RIP: 0033:0x7f0795d8ebe9 [ 505.042940][ T8605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.042959][ T8605] RSP: 002b:00007f0796bac038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 505.042980][ T8605] RAX: ffffffffffffffda RBX: 00007f0795fb5fa0 RCX: 00007f0795d8ebe9 [ 505.042995][ T8605] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 505.043008][ T8605] RBP: 00007f0796bac090 R08: 0000200000000400 R09: 0000000000000000 [ 505.043022][ T8605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 505.043034][ T8605] R13: 00007f0795fb6038 R14: 00007f0795fb5fa0 R15: 00007fff9af27f88 [ 505.043057][ T8605] [ 505.065615][ T8607] serio: Serial port ptm0 [ 505.095079][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 505.480570][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 505.492324][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.570826][ T10] usb 4-1: Product: syz [ 505.575235][ T10] usb 4-1: Manufacturer: syz [ 505.579906][ T10] usb 4-1: SerialNumber: syz [ 505.594516][ T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 505.697851][ T5975] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 505.813250][ T6403] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 505.836550][ T6403] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 505.856130][ T6403] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 505.877558][ T6403] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 505.899266][ T6403] usb 2-1: USB disconnect, device number 48 [ 506.117680][ T6403] usb 4-1: USB disconnect, device number 60 [ 506.188255][ T8625] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1020'. [ 506.733962][ T8651] syzkaller1: entered promiscuous mode [ 506.748389][ T8651] syzkaller1: entered allmulticast mode [ 506.796054][ T5975] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 506.806330][ T5975] ath9k_htc: Failed to initialize the device [ 506.815067][ T6403] usb 4-1: ath9k_htc: USB layer deinitialized [ 506.880935][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.888800][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.225118][ T5949] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 507.234907][ T6403] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 507.309833][ T8671] FAULT_INJECTION: forcing a failure. [ 507.309833][ T8671] name failslab, interval 1, probability 0, space 0, times 0 [ 507.364847][ T8671] CPU: 1 UID: 0 PID: 8671 Comm: syz.2.1041 Not tainted syzkaller #0 PREEMPT(full) [ 507.364877][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 507.364891][ T8671] Call Trace: [ 507.364899][ T8671] [ 507.364907][ T8671] dump_stack_lvl+0x189/0x250 [ 507.364942][ T8671] ? __pfx____ratelimit+0x10/0x10 [ 507.364973][ T8671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.365002][ T8671] ? __pfx__printk+0x10/0x10 [ 507.365034][ T8671] ? __pfx___might_resched+0x10/0x10 [ 507.365056][ T8671] ? lock_acquire+0x5f/0x360 [ 507.365077][ T8671] should_fail_ex+0x414/0x560 [ 507.365128][ T8671] should_failslab+0xa8/0x100 [ 507.365149][ T8671] kmem_cache_alloc_noprof+0x73/0x390 [ 507.365178][ T8671] ? security_inode_alloc+0x39/0x330 [ 507.365208][ T8671] security_inode_alloc+0x39/0x330 [ 507.365243][ T8671] inode_init_always_gfp+0x9ed/0xdc0 [ 507.365270][ T8671] ? __pfx_proc_alloc_inode+0x10/0x10 [ 507.365301][ T8671] alloc_inode+0x82/0x1b0 [ 507.365322][ T8671] new_inode+0x22/0x170 [ 507.365347][ T8671] proc_pid_make_inode+0x21/0x130 [ 507.365369][ T8671] proc_ns_dir_lookup+0x697/0x7c0 [ 507.365400][ T8671] path_openat+0x10fe/0x3830 [ 507.365417][ T8671] ? arch_stack_walk+0xfc/0x150 [ 507.365458][ T8671] ? __pfx_path_openat+0x10/0x10 [ 507.365488][ T8671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.365518][ T8671] do_filp_open+0x1fa/0x410 [ 507.365549][ T8671] ? __pfx_do_filp_open+0x10/0x10 [ 507.365583][ T8671] ? __pfx_kfree_link+0x10/0x10 [ 507.365609][ T8671] ? _raw_spin_unlock+0x28/0x50 [ 507.365631][ T8671] ? alloc_fd+0x64c/0x6c0 [ 507.365658][ T8671] do_sys_openat2+0x121/0x1c0 [ 507.365688][ T8671] ? __pfx_do_sys_openat2+0x10/0x10 [ 507.365717][ T8671] ? ksys_write+0x22a/0x250 [ 507.365737][ T8671] ? __pfx_ksys_write+0x10/0x10 [ 507.365758][ T8671] __x64_sys_openat+0x138/0x170 [ 507.365788][ T8671] do_syscall_64+0xfa/0xfa0 [ 507.365816][ T8671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.365835][ T8671] ? clear_bhb_loop+0x60/0xb0 [ 507.365857][ T8671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.365876][ T8671] RIP: 0033:0x7f0795d8d550 [ 507.365893][ T8671] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 507.365910][ T8671] RSP: 002b:00007f0796babf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 507.365930][ T8671] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f0795d8d550 [ 507.365944][ T8671] RDX: 0000000000000002 RSI: 00007f0796babfa0 RDI: 00000000ffffff9c [ 507.365956][ T8671] RBP: 00007f0796babfa0 R08: 0000000000000000 R09: 00007f0796babcd5 [ 507.365970][ T8671] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 507.365981][ T8671] R13: 00007f0795fb6038 R14: 00007f0795fb5fa0 R15: 00007fff9af27f88 [ 507.366005][ T8671] [ 507.437983][ T5949] usb 2-1: Using ep0 maxpacket: 32 [ 507.544656][ T6403] usb 4-1: Using ep0 maxpacket: 16 [ 507.734212][ T6403] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 507.752216][ T5949] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 507.764417][ T5949] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 507.780225][ T5949] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 507.784621][ T6403] usb 4-1: config 0 has no interface number 0 [ 507.793310][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.814603][ T5949] usb 2-1: Product: 횗╭軨Ἱⷔግւ나芼縰༇ᨈ퉤꠻楬岐岗綰쵊䤩쿺鵭೶吗蹳鑀躝ﱾ➳仛웮崊跶䴴ẑᮆ嵜ℰ鷭댫θ咠셂捡皬侫痳ﯗឺ쭒㕵愋從뽫ڀ艹즼꒧ᯎ٘ᑕ倈ᗬ㿇윴엔憰ᱞꀉ [ 507.843503][ T5949] usb 2-1: Manufacturer: а [ 507.845392][ T6403] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 507.848160][ T5949] usb 2-1: SerialNumber: syz [ 507.876344][ T6403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.896089][ T8678] /dev/rnullb0: Can't open blockdev [ 507.898433][ T6403] usb 4-1: Product: syz [ 507.912536][ T6403] usb 4-1: Manufacturer: syz [ 507.924750][ T6403] usb 4-1: SerialNumber: syz [ 507.931035][ T8676] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1043'. [ 507.932711][ T6403] usb 4-1: config 0 descriptor?? [ 507.970393][ T6403] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 508.178536][ T8661] FAULT_INJECTION: forcing a failure. [ 508.178536][ T8661] name failslab, interval 1, probability 0, space 0, times 0 [ 508.204494][ T8661] CPU: 1 UID: 0 PID: 8661 Comm: syz.3.1038 Not tainted syzkaller #0 PREEMPT(full) [ 508.204525][ T8661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 508.204538][ T8661] Call Trace: [ 508.204547][ T8661] [ 508.204568][ T8661] dump_stack_lvl+0x189/0x250 [ 508.204605][ T8661] ? __pfx____ratelimit+0x10/0x10 [ 508.204631][ T8661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.204661][ T8661] ? __pfx__printk+0x10/0x10 [ 508.204691][ T8661] ? __pfx___might_resched+0x10/0x10 [ 508.204713][ T8661] ? lock_acquire+0x5f/0x360 [ 508.204734][ T8661] should_fail_ex+0x414/0x560 [ 508.204763][ T8661] should_failslab+0xa8/0x100 [ 508.204784][ T8661] __kmalloc_cache_noprof+0x70/0x3a0 [ 508.204815][ T8661] ? snd_hrtimer_open+0x4f/0xd0 [ 508.204842][ T8661] snd_hrtimer_open+0x4f/0xd0 [ 508.204866][ T8661] snd_timer_open+0xdcc/0x10b0 [ 508.204891][ T8661] snd_seq_timer_open+0x2d9/0x640 [ 508.204925][ T8661] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 508.204957][ T8661] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 508.204982][ T8661] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 508.205010][ T8661] ? snd_seq_timer_defaults+0x336/0x5b0 [ 508.205063][ T8661] snd_seq_queue_alloc+0x3dd/0x790 [ 508.205094][ T8661] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 508.205117][ T8661] snd_seq_oss_open+0x5e0/0xea0 [ 508.205142][ T8661] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 508.205180][ T8661] ? trace_contention_end+0x39/0x120 [ 508.205205][ T8661] ? __mutex_lock+0x335/0x1350 [ 508.205250][ T8661] ? __pfx___mutex_lock+0x10/0x10 [ 508.205281][ T8661] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 508.205304][ T8661] ? __pfx_free_devinfo+0x10/0x10 [ 508.205323][ T8661] ? do_raw_spin_unlock+0x122/0x240 [ 508.205353][ T8661] ? soundcore_open+0x2da/0x490 [ 508.205374][ T8661] odev_open+0x67/0xa0 [ 508.205393][ T8661] chrdev_open+0x4cc/0x5e0 [ 508.205418][ T8661] ? __pfx_chrdev_open+0x10/0x10 [ 508.205443][ T8661] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 508.205471][ T8661] ? __pfx_chrdev_open+0x10/0x10 [ 508.205494][ T8661] do_dentry_open+0x950/0x13f0 [ 508.205529][ T8661] vfs_open+0x3b/0x340 [ 508.205555][ T8661] ? path_openat+0x2ecd/0x3830 [ 508.205574][ T8661] path_openat+0x2ee5/0x3830 [ 508.205590][ T8661] ? arch_stack_walk+0xfc/0x150 [ 508.205625][ T8661] ? stack_depot_save_flags+0x40/0x860 [ 508.205661][ T8661] ? __pfx_path_openat+0x10/0x10 [ 508.205690][ T8661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.205720][ T8661] do_filp_open+0x1fa/0x410 [ 508.205752][ T8661] ? __pfx_do_filp_open+0x10/0x10 [ 508.205792][ T8661] ? _raw_spin_unlock+0x28/0x50 [ 508.205815][ T8661] ? alloc_fd+0x64c/0x6c0 [ 508.205842][ T8661] do_sys_openat2+0x121/0x1c0 [ 508.205871][ T8661] ? __pfx_do_sys_openat2+0x10/0x10 [ 508.205902][ T8661] ? ksys_write+0x22a/0x250 [ 508.205922][ T8661] ? __pfx_ksys_write+0x10/0x10 [ 508.205943][ T8661] __x64_sys_openat+0x138/0x170 [ 508.205974][ T8661] do_syscall_64+0xfa/0xfa0 [ 508.206001][ T8661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.206021][ T8661] ? clear_bhb_loop+0x60/0xb0 [ 508.206043][ T8661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.206063][ T8661] RIP: 0033:0x7feb5dd8ebe9 [ 508.206081][ T8661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.206098][ T8661] RSP: 002b:00007feb5ec3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 508.206122][ T8661] RAX: ffffffffffffffda RBX: 00007feb5dfb5fa0 RCX: 00007feb5dd8ebe9 [ 508.206135][ T8661] RDX: 0000000000020042 RSI: 0000200000000880 RDI: 00000000ffffff9c [ 508.206149][ T8661] RBP: 00007feb5ec3a090 R08: 0000000000000000 R09: 0000000000000000 [ 508.206161][ T8661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 508.206173][ T8661] R13: 00007feb5dfb6038 R14: 00007feb5dfb5fa0 R15: 00007ffd1aa945f8 [ 508.206196][ T8661] [ 508.207615][ T6403] usb 4-1: USB disconnect, device number 61 [ 508.293593][ T8659] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 508.606450][ T8659] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 509.139359][ T8708] tipc: Enabling of bearer rejected, already enabled [ 509.174640][ T8710] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1057'. [ 509.201002][ T8710] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1057'. [ 509.204406][ T6403] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 509.221400][ T8710] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 509.334006][ T8659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.346440][ T8659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.377271][ T8721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.378426][ T6403] usb 5-1: Using ep0 maxpacket: 16 [ 509.386366][ T8721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.421389][ T6403] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 509.440065][ T6403] usb 5-1: config 0 has no interface number 0 [ 509.454247][ T6403] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.484712][ T6403] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.505928][ T6403] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 509.524390][ T6403] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.544357][ T6403] usb 5-1: config 0 descriptor?? [ 509.886722][ T8742] bond0: (slave gretap0): Opening slave failed [ 509.924523][ T5949] cdc_ncm 2-1:1.0: SET_CRC_MODE failed [ 509.933889][ T5949] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 509.965891][ T5949] cdc_ncm 2-1:1.0: bind() failure [ 509.966442][ T6403] usbhid 5-1:0.1: can't add hid device: -71 [ 509.982347][ T5949] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 509.993641][ T6403] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 510.003810][ T5949] cdc_ncm 2-1:1.1: bind() failure [ 510.016262][ T6403] usb 5-1: USB disconnect, device number 35 [ 510.038808][ T5949] usb 2-1: USB disconnect, device number 49 [ 510.364092][ T5949] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 510.511790][ T8751] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1071'. [ 510.535714][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 510.546515][ T5949] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.570698][ T5949] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 510.589368][ T5949] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 510.607363][ T5949] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 510.620968][ T5949] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 510.632134][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.646948][ T5949] hub 2-1:1.0: bad descriptor, ignoring hub [ 510.653086][ T5949] hub 2-1:1.0: probe with driver hub failed with error -5 [ 510.662452][ T5949] cdc_wdm 2-1:1.0: skipping garbage [ 510.669392][ T5949] cdc_wdm 2-1:1.0: skipping garbage [ 510.677358][ T5949] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 510.683482][ T5949] cdc_wdm 2-1:1.0: Unknown control protocol [ 510.829746][ T8745] overlayfs: statfs failed on './file0' [ 510.854664][ T5975] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 510.994526][ T5949] usb 2-1: USB disconnect, device number 50 [ 511.030489][ T5975] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 511.046164][ T5975] usb 5-1: can't read configurations, error -71 [ 511.249922][ T8770] block nbd2: shutting down sockets [ 511.324108][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 511.486938][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 511.507057][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.518184][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 511.533885][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 511.573885][ T10] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 511.582992][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.625716][ T10] hub 2-1:1.0: bad descriptor, ignoring hub [ 511.631693][ T10] hub 2-1:1.0: probe with driver hub failed with error -5 [ 511.664198][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 511.669483][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 511.714564][ T10] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 511.943958][ T10] usb 2-1: USB disconnect, device number 51 [ 511.999123][ T8784] FAULT_INJECTION: forcing a failure. [ 511.999123][ T8784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.063885][ T8784] CPU: 0 UID: 0 PID: 8784 Comm: syz.4.1086 Not tainted syzkaller #0 PREEMPT(full) [ 512.063915][ T8784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.063928][ T8784] Call Trace: [ 512.063936][ T8784] [ 512.063943][ T8784] dump_stack_lvl+0x189/0x250 [ 512.063979][ T8784] ? __pfx____ratelimit+0x10/0x10 [ 512.064004][ T8784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.064035][ T8784] ? __pfx__printk+0x10/0x10 [ 512.064068][ T8784] ? rcu_is_watching+0x15/0xb0 [ 512.064092][ T8784] should_fail_ex+0x414/0x560 [ 512.064122][ T8784] strncpy_from_user+0x36/0x290 [ 512.064149][ T8784] getname_flags+0xf3/0x540 [ 512.064177][ T8784] do_sys_openat2+0xbc/0x1c0 [ 512.064215][ T8784] ? __pfx_do_sys_openat2+0x10/0x10 [ 512.064244][ T8784] ? ksys_write+0x22a/0x250 [ 512.064265][ T8784] ? __pfx_ksys_write+0x10/0x10 [ 512.064285][ T8784] __x64_sys_openat+0x138/0x170 [ 512.064315][ T8784] do_syscall_64+0xfa/0xfa0 [ 512.064342][ T8784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.064361][ T8784] ? clear_bhb_loop+0x60/0xb0 [ 512.064384][ T8784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.064403][ T8784] RIP: 0033:0x7fd41e38d550 [ 512.064421][ T8784] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 512.064439][ T8784] RSP: 002b:00007fd41f22bf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 512.064461][ T8784] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd41e38d550 [ 512.064476][ T8784] RDX: 0000000000000000 RSI: 00007fd41f22bfa0 RDI: 00000000ffffff9c [ 512.064489][ T8784] RBP: 00007fd41f22bfa0 R08: 0000000000000000 R09: 00007fd41f22bcd5 [ 512.064503][ T8784] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 512.064515][ T8784] R13: 00007fd41e5b6038 R14: 00007fd41e5b5fa0 R15: 00007ffe617b4148 [ 512.064538][ T8784] [ 512.319484][ T5922] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 512.468581][ T5922] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 512.482403][ T5922] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 512.490635][ T5922] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 512.500725][ T5922] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 512.678779][ T8807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.708639][ T8806] FAULT_INJECTION: forcing a failure. [ 512.708639][ T8806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.746176][ T8807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.759428][ T8806] CPU: 1 UID: 0 PID: 8806 Comm: syz.4.1093 Not tainted syzkaller #0 PREEMPT(full) [ 512.759453][ T8806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.759465][ T8806] Call Trace: [ 512.759473][ T8806] [ 512.759480][ T8806] dump_stack_lvl+0x189/0x250 [ 512.759511][ T8806] ? __pfx____ratelimit+0x10/0x10 [ 512.759533][ T8806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.759558][ T8806] ? __pfx__printk+0x10/0x10 [ 512.759580][ T8806] ? __might_fault+0xb0/0x130 [ 512.759609][ T8806] ? rcu_is_watching+0x15/0xb0 [ 512.759630][ T8806] should_fail_ex+0x414/0x560 [ 512.759658][ T8806] _copy_from_iter+0x1de/0x1790 [ 512.759675][ T8806] ? unwind_next_frame+0xa5/0x2390 [ 512.759698][ T8806] ? rcu_is_watching+0x15/0xb0 [ 512.759719][ T8806] ? unwind_next_frame+0xa5/0x2390 [ 512.759743][ T8806] ? unwind_next_frame+0xa5/0x2390 [ 512.759768][ T8806] ? __pfx__copy_from_iter+0x10/0x10 [ 512.759787][ T8806] ? rcu_is_watching+0x15/0xb0 [ 512.759807][ T8806] ? lock_release+0x4b/0x3e0 [ 512.759825][ T8806] ? lock_release+0x4b/0x3e0 [ 512.759845][ T8806] tun_get_user+0x488/0x3e20 [ 512.759873][ T8806] ? rcu_is_watching+0x15/0xb0 [ 512.759894][ T8806] ? lock_release+0x4b/0x3e0 [ 512.759914][ T8806] ? aa_file_perm+0x44d/0x1550 [ 512.759942][ T8806] ? __pfx_tun_get_user+0x10/0x10 [ 512.759965][ T8806] ? _parse_integer_limit+0x1ae/0x1f0 [ 512.759997][ T8806] ? kstrtoull+0x12f/0x1d0 [ 512.760027][ T8806] ? ref_tracker_alloc+0x318/0x460 [ 512.760055][ T8806] ? get_pid_task+0x20/0x1f0 [ 512.760082][ T8806] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 512.760111][ T8806] ? tun_get+0x1c/0x2f0 [ 512.760133][ T8806] ? tun_get+0x1c/0x2f0 [ 512.760163][ T8806] ? rcu_is_watching+0x15/0xb0 [ 512.760183][ T8806] ? tun_get+0x1c/0x2f0 [ 512.760205][ T8806] ? lock_release+0x4b/0x3e0 [ 512.760222][ T8806] ? common_file_perm+0x1b5/0x230 [ 512.760247][ T8806] ? tun_get+0x1c/0x2f0 [ 512.760272][ T8806] tun_chr_write_iter+0x113/0x200 [ 512.760297][ T8806] vfs_write+0x5c9/0xb30 [ 512.760318][ T8806] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 512.760342][ T8806] ? __pfx_vfs_write+0x10/0x10 [ 512.760365][ T8806] ? __fget_files+0x2a/0x420 [ 512.760392][ T8806] ksys_write+0x145/0x250 [ 512.760412][ T8806] ? __pfx_ksys_write+0x10/0x10 [ 512.760433][ T8806] ? rcu_is_watching+0x15/0xb0 [ 512.760455][ T8806] do_syscall_64+0xfa/0xfa0 [ 512.760482][ T8806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.760501][ T8806] ? clear_bhb_loop+0x60/0xb0 [ 512.760522][ T8806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.760541][ T8806] RIP: 0033:0x7fd41e38ebe9 [ 512.760558][ T8806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.760576][ T8806] RSP: 002b:00007fd41f22c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 512.760597][ T8806] RAX: ffffffffffffffda RBX: 00007fd41e5b5fa0 RCX: 00007fd41e38ebe9 [ 512.760611][ T8806] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000003 [ 512.760623][ T8806] RBP: 00007fd41f22c090 R08: 0000000000000000 R09: 0000000000000000 [ 512.760634][ T8806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.760644][ T8806] R13: 00007fd41e5b6038 R14: 00007fd41e5b5fa0 R15: 00007ffe617b4148 [ 512.760666][ T8806] [ 512.762966][ T8789] chnl_net:caif_netlink_parms(): no params data found [ 513.317036][ T8789] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.336730][ T8789] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.373766][ T8789] bridge_slave_0: entered allmulticast mode [ 513.380868][ T8789] bridge_slave_0: entered promiscuous mode [ 513.399913][ T8789] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.402924][ T8827] netlink: 'syz.2.1099': attribute type 8 has an invalid length. [ 513.408664][ T8789] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.423030][ T8789] bridge_slave_1: entered allmulticast mode [ 513.431295][ T8789] bridge_slave_1: entered promiscuous mode [ 513.488104][ T8789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.516156][ T8789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.600094][ T8789] team0: Port device team_slave_0 added [ 513.615607][ T8789] team0: Port device team_slave_1 added [ 513.623855][ T5975] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 513.660374][ T8835] serio: Serial port ptm0 [ 513.668939][ T8789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.707217][ T8789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.736610][ T8789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.750922][ T8789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.759887][ T8789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.786929][ T8789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.803597][ T5975] usb 2-1: Using ep0 maxpacket: 8 [ 513.816273][ T5975] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.828912][ T5975] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 513.844234][ T8835] FAULT_INJECTION: forcing a failure. [ 513.844234][ T8835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.863551][ T5975] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 513.879798][ T5975] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 513.886297][ T8835] CPU: 1 UID: 0 PID: 8835 Comm: syz.2.1102 Not tainted syzkaller #0 PREEMPT(full) [ 513.886327][ T8835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 513.886343][ T8835] Call Trace: [ 513.886352][ T8835] [ 513.886362][ T8835] dump_stack_lvl+0x189/0x250 [ 513.886402][ T8835] ? __pfx____ratelimit+0x10/0x10 [ 513.886433][ T8835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.886467][ T8835] ? __pfx__printk+0x10/0x10 [ 513.886503][ T8835] ? rcu_is_watching+0x15/0xb0 [ 513.886530][ T8835] should_fail_ex+0x414/0x560 [ 513.886563][ T8835] _copy_to_user+0x31/0xb0 [ 513.886592][ T8835] simple_read_from_buffer+0xe1/0x170 [ 513.886620][ T8835] proc_fail_nth_read+0x1b3/0x220 [ 513.886654][ T8835] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 513.886686][ T8835] ? rw_verify_area+0x2a6/0x4d0 [ 513.886709][ T8835] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 513.886740][ T8835] vfs_read+0x200/0xa30 [ 513.886760][ T8835] ? fdget_pos+0x247/0x320 [ 513.886790][ T8835] ? __pfx___mutex_lock+0x10/0x10 [ 513.886821][ T8835] ? __pfx_vfs_read+0x10/0x10 [ 513.886847][ T8835] ? __fget_files+0x3a0/0x420 [ 513.886873][ T8835] ? __fget_files+0x2a/0x420 [ 513.886903][ T8835] ksys_read+0x145/0x250 [ 513.886927][ T8835] ? __pfx_ksys_read+0x10/0x10 [ 513.886951][ T8835] ? rcu_is_watching+0x15/0xb0 [ 513.886979][ T8835] do_syscall_64+0xfa/0xfa0 [ 513.887011][ T8835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.887032][ T8835] ? clear_bhb_loop+0x60/0xb0 [ 513.887057][ T8835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.887079][ T8835] RIP: 0033:0x7f0795d8d5fc [ 513.887100][ T8835] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 513.887119][ T8835] RSP: 002b:00007f0796bac030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 513.887150][ T8835] RAX: ffffffffffffffda RBX: 00007f0795fb5fa0 RCX: 00007f0795d8d5fc [ 513.887167][ T8835] RDX: 000000000000000f RSI: 00007f0796bac0a0 RDI: 0000000000000004 [ 513.887182][ T8835] RBP: 00007f0796bac090 R08: 0000000000000000 R09: 0000000000000000 [ 513.887196][ T8835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 513.887222][ T8835] R13: 00007f0795fb6038 R14: 00007f0795fb5fa0 R15: 00007fff9af27f88 [ 513.887248][ T8835] [ 514.123535][ T5975] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 514.133121][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.155065][ T5975] hub 2-1:1.0: bad descriptor, ignoring hub [ 514.161083][ T5975] hub 2-1:1.0: probe with driver hub failed with error -5 [ 514.169159][ T5975] cdc_wdm 2-1:1.0: skipping garbage [ 514.175123][ T5975] cdc_wdm 2-1:1.0: skipping garbage [ 514.193426][ T1225] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 514.208590][ T8789] hsr_slave_0: entered promiscuous mode [ 514.215284][ T5975] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 514.221225][ T5975] cdc_wdm 2-1:1.0: Unknown control protocol [ 514.229069][ T8789] hsr_slave_1: entered promiscuous mode [ 514.235297][ T8789] debugfs: 'hsr0' already exists in 'hsr' [ 514.241065][ T8789] Cannot create hsr debugfs directory [ 514.353396][ T1225] usb 5-1: Using ep0 maxpacket: 32 [ 514.387472][ T1225] usb 5-1: config 0 has an invalid interface number: 250 but max is 2 [ 514.395750][ T1225] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.409592][ T1225] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 514.419060][ T1225] usb 5-1: config 0 has no interface number 0 [ 514.446905][ T1225] usb 5-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 514.473775][ T1225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.482316][ T1225] usb 5-1: Product: syz [ 514.503396][ T1225] usb 5-1: Manufacturer: syz [ 514.508048][ T1225] usb 5-1: SerialNumber: syz [ 514.526576][ T1225] usb 5-1: config 0 descriptor?? [ 514.533230][ T8789] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 514.534673][ T8851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.543640][ T1225] uvcvideo 5-1:0.250: probe with driver uvcvideo failed with error -22 [ 514.558268][ T5949] usb 2-1: USB disconnect, device number 52 [ 514.566725][ T5918] Bluetooth: hci2: command tx timeout [ 514.575301][ T8851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.578360][ T8789] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 514.588314][ T8851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.598697][ T8851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.611480][ T8789] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 514.625933][ T8789] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 514.712753][ T8789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.738416][ T8838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.749660][ T8789] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.760301][ T8838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.777525][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.784759][ T5980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.805424][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.812608][ T5980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.865651][ T8789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 514.888015][ T1225] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 514.888018][ T5880] usb 5-1: USB disconnect, device number 38 [ 515.032266][ T8789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.064556][ T1225] usb 2-1: Using ep0 maxpacket: 8 [ 515.074713][ T1225] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.093845][ T1225] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 515.103661][ T1225] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 515.138926][ T1225] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 515.162512][ T1225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.189004][ T1225] hub 2-1:1.0: bad descriptor, ignoring hub [ 515.203645][ T8866] /dev/rnullb0: Can't open blockdev [ 515.213408][ T1225] hub 2-1:1.0: probe with driver hub failed with error -5 [ 515.222215][ T1225] cdc_wdm 2-1:1.0: skipping garbage [ 515.242089][ T1225] cdc_wdm 2-1:1.0: skipping garbage [ 515.251599][ T1225] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 515.301009][ T8869] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 515.325429][ T8869] /dev/rnullb0: Can't open blockdev [ 515.454155][ T8873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.462832][ T8873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.475191][ T8789] veth0_vlan: entered promiscuous mode [ 515.493041][ T8789] veth1_vlan: entered promiscuous mode [ 515.507130][ T1225] usb 2-1: USB disconnect, device number 53 [ 515.530054][ T8789] veth0_macvtap: entered promiscuous mode [ 515.539789][ T8789] veth1_macvtap: entered promiscuous mode [ 515.560456][ T8789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.579718][ T8789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.594426][ T5980] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.616796][ T5980] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.638473][ T5980] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.664926][ T5980] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.679684][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.692545][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.718246][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.718563][ T8873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.735899][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.743338][ T5880] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 515.762242][ T8873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.816866][ T8877] netlink: 'syz.5.1083': attribute type 10 has an invalid length. [ 515.893273][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 515.904680][ T5880] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.921853][ T5880] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 515.946806][ T5880] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 515.973129][ T5880] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 515.995914][ T5880] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 516.017199][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.041770][ T5880] hub 5-1:1.0: bad descriptor, ignoring hub [ 516.061497][ T5880] hub 5-1:1.0: probe with driver hub failed with error -5 [ 516.072132][ T5880] cdc_wdm 5-1:1.0: skipping garbage [ 516.101581][ T5880] cdc_wdm 5-1:1.0: skipping garbage [ 516.116436][ T5880] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 516.122695][ T5880] cdc_wdm 5-1:1.0: Unknown control protocol [ 516.152496][ T8889] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 516.174370][ C0] ------------[ cut here ]------------ [ 516.180026][ C0] WARNING: ./include/linux/skbuff.h:1165 at nf_reject_fill_skb_dst+0x2a4/0x330, CPU#0: kworker/0:2/1225 [ 516.191226][ C0] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 516.195277][ C0] CPU: 0 UID: 0 PID: 1225 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 516.204696][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 516.214820][ C0] Workqueue: mld mld_ifc_work [ 516.219551][ C0] RIP: 0010:nf_reject_fill_skb_dst+0x2a4/0x330 [ 516.225789][ C0] Code: 8b 0d 90 6d c4 08 48 3b 8c 24 e0 00 00 00 75 5d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 1d 7c 9f f7 90 <0f> 0b 90 e9 38 ff ff ff 44 89 f9 80 e1 07 fe c1 38 c1 0f 8c 2b fe [ 516.245462][ C0] RSP: 0018:ffffc90000007360 EFLAGS: 00010246 [ 516.251596][ C0] RAX: ffffffff8a2152b3 RBX: ffff888055626b40 RCX: ffff8880276eda00 [ 516.259641][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 516.267689][ C0] RBP: ffffc90000007490 R08: ffffffff8fe52d37 R09: 1ffffffff1fca5a6 [ 516.275771][ C0] R10: dffffc0000000000 R11: fffffbfff1fca5a7 R12: ffff8880292aa101 [ 516.283803][ C0] R13: dffffc0000000001 R14: 1ffff92000000e70 R15: 0000000000000000 [ 516.291827][ C0] FS: 0000000000000000(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000 [ 516.300874][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 516.307518][ C0] CR2: 0000200000caaffb CR3: 000000007bb58000 CR4: 00000000003526f0 [ 516.315547][ C0] Call Trace: [ 516.318869][ C0] [ 516.321743][ C0] ? __pfx_nf_reject_fill_skb_dst+0x10/0x10 [ 516.327747][ C0] nf_send_unreach+0x17b/0x6e0 [ 516.332551][ C0] ? rcu_is_watching+0x15/0xb0 [ 516.337387][ C0] ? lock_release+0x4b/0x3e0 [ 516.342012][ C0] ? __pfx_nf_send_unreach+0x10/0x10 [ 516.347355][ C0] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 516.353021][ C0] ? rcu_is_watching+0x15/0xb0 [ 516.357850][ C0] nft_reject_inet_eval+0x4bc/0x690 [ 516.363135][ C0] nft_do_chain+0x40c/0x1920 [ 516.367765][ C0] ? lock_release+0x4b/0x3e0 [ 516.372396][ C0] ? ktime_get+0x3e/0x1f0 [ 516.376856][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 516.383176][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 516.388264][ C0] ? update_curr_dl_se+0x410/0x980 [ 516.393465][ C0] nft_do_chain_inet+0x25d/0x340 [ 516.398443][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 516.403977][ C0] ? NF_HOOK+0x9a/0x3a0 [ 516.408182][ C0] ? rcu_is_watching+0x15/0xb0 [ 516.413035][ C0] ? lock_acquire+0x5f/0x360 [ 516.417655][ C0] ? ip_sabotage_in+0x57/0x270 [ 516.422468][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 516.428013][ C0] nf_hook_slow+0xc5/0x220 [ 516.432472][ C0] NF_HOOK+0x206/0x3a0 [ 516.436622][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 516.441767][ C0] ? NF_HOOK+0x9a/0x3a0 [ 516.446008][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 516.450638][ C0] ? ip_rcv_core+0x7f7/0xd00 [ 516.455295][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 516.460454][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 516.465054][ C0] __netif_receive_skb+0x143/0x380 [ 516.470212][ C0] ? process_backlog+0x2d5/0x14f0 [ 516.475310][ C0] process_backlog+0x60e/0x14f0 [ 516.480213][ C0] ? __pfx_process_backlog+0x10/0x10 [ 516.485583][ C0] __napi_poll+0xc4/0x360 [ 516.489952][ C0] ? rcu_is_watching+0x15/0xb0 [ 516.494801][ C0] net_rx_action+0x707/0xe30 [ 516.499444][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 516.504625][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 516.510924][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 516.516225][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 516.521550][ C0] handle_softirqs+0x283/0x870 [ 516.526400][ C0] ? do_softirq+0xec/0x180 [ 516.530856][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 516.536254][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 516.541399][ C0] do_softirq+0xec/0x180 [ 516.545728][ C0] [ 516.548683][ C0] [ 516.551653][ C0] ? __pfx_do_softirq+0x10/0x10 [ 516.556625][ C0] ? unwind_next_frame+0xa5/0x2390 [ 516.561790][ C0] ? rcu_is_watching+0x15/0xb0 [ 516.563534][ T5880] usb 5-1: USB disconnect, device number 39 [ 516.566619][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 516.577742][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 516.583516][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 516.588671][ C0] ? lock_release+0x4b/0x3e0 [ 516.593315][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 516.598464][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 516.603640][ C0] __dev_queue_xmit+0x1d79/0x3b50 [ 516.608712][ C0] ? lock_release+0x4b/0x3e0 [ 516.613360][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 516.618508][ C0] ? fib_rules_lookup+0x96/0xe90 [ 516.623513][ C0] ? __pfx_fib_rules_lookup+0x10/0x10 [ 516.628926][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 516.634368][ C0] ? l3mdev_update_flow+0x4d1/0x640 [ 516.639700][ C0] ? l3mdev_update_flow+0x29/0x640 [ 516.644869][ C0] ? mroute6_is_socket+0x20b/0x300 [ 516.650013][ C0] ? __pfx_mroute6_is_socket+0x10/0x10 [ 516.655542][ C0] ? ipv6_chk_mcast_addr+0x2e/0x860 [ 516.660774][ C0] ? rcu_is_watching+0x15/0xb0 [ 516.665616][ C0] ? NF_HOOK+0x9e/0x380 [ 516.669801][ C0] ? rcu_is_watching+0x15/0xb0 [ 516.674632][ C0] ? NF_HOOK+0x9e/0x380 [ 516.678829][ C0] ? rcu_is_watching+0x15/0xb0 [ 516.683667][ C0] ? NF_HOOK+0x9e/0x380 [ 516.687871][ C0] ? ip6_finish_output2+0xf99/0x16a0 [ 516.693217][ C0] ip6_finish_output2+0x11bc/0x16a0 [ 516.698459][ C0] ? ip6_finish_output2+0x701/0x16a0 [ 516.703815][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 516.709407][ C0] ? ip6_mtu+0x7d/0x3f0 [ 516.713623][ C0] ? ip6_finish_output+0x2ef/0x4e0 [ 516.718790][ C0] NF_HOOK+0x9e/0x380 [ 516.722818][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 516.727486][ C0] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 516.733347][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 516.738588][ C0] ? icmp6_dst_alloc+0x3a5/0x420 [ 516.743611][ C0] ? icmp6_dst_alloc+0x3a5/0x420 [ 516.748631][ C0] mld_sendpack+0x8d4/0xe60 [ 516.753216][ C0] ? mld_sendpack+0x1e7/0xe60 [ 516.757928][ C0] ? __pfx_mld_sendpack+0x10/0x10 [ 516.763028][ C0] mld_ifc_work+0x83e/0xd60 [ 516.767563][ C0] ? rcu_is_watching+0x15/0xb0 [ 516.772360][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 516.778164][ C0] process_scheduled_works+0xae1/0x17b0 [ 516.783790][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 516.789815][ C0] worker_thread+0x8a0/0xda0 [ 516.794478][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 516.800840][ C0] ? __kthread_parkme+0x7b/0x200 [ 516.805860][ C0] kthread+0x711/0x8a0 [ 516.809965][ C0] ? __pfx_worker_thread+0x10/0x10 [ 516.815163][ C0] ? __pfx_kthread+0x10/0x10 [ 516.819790][ C0] ? rcu_is_watching+0x15/0xb0 [ 516.824644][ C0] ? __pfx_kthread+0x10/0x10 [ 516.829277][ C0] ret_from_fork+0x47c/0x820 [ 516.833934][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 516.839087][ C0] ? __switch_to_asm+0x39/0x70 [ 516.843917][ C0] ? __switch_to_asm+0x33/0x70 [ 516.848709][ C0] ? __pfx_kthread+0x10/0x10 [ 516.853381][ C0] ret_from_fork_asm+0x1a/0x30 [ 516.858191][ C0] [ 516.861254][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 516.868558][ C0] CPU: 0 UID: 0 PID: 1225 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 516.877950][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 516.888022][ C0] Workqueue: mld mld_ifc_work [ 516.892781][ C0] Call Trace: [ 516.896079][ C0] [ 516.898943][ C0] dump_stack_lvl+0x99/0x250 [ 516.903572][ C0] ? __asan_memcpy+0x40/0x70 [ 516.908203][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.913446][ C0] ? __pfx__printk+0x10/0x10 [ 516.918084][ C0] vpanic+0x281/0x750 [ 516.922095][ C0] ? __pfx_vpanic+0x10/0x10 [ 516.926666][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 516.931990][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 516.937226][ C0] panic+0xb9/0xc0 [ 516.940987][ C0] ? __pfx_panic+0x10/0x10 [ 516.945440][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 516.950415][ C0] __warn+0x334/0x4c0 [ 516.954431][ C0] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 516.960015][ C0] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 516.965597][ C0] report_bug+0x2be/0x4f0 [ 516.970002][ C0] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 516.975579][ C0] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 516.981161][ C0] ? nf_reject_fill_skb_dst+0x2a6/0x330 [ 516.986745][ C0] handle_bug+0x84/0x160 [ 516.991012][ C0] exc_invalid_op+0x1a/0x50 [ 516.995624][ C0] asm_exc_invalid_op+0x1a/0x20 [ 517.000515][ C0] RIP: 0010:nf_reject_fill_skb_dst+0x2a4/0x330 [ 517.006705][ C0] Code: 8b 0d 90 6d c4 08 48 3b 8c 24 e0 00 00 00 75 5d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 1d 7c 9f f7 90 <0f> 0b 90 e9 38 ff ff ff 44 89 f9 80 e1 07 fe c1 38 c1 0f 8c 2b fe [ 517.026339][ C0] RSP: 0018:ffffc90000007360 EFLAGS: 00010246 [ 517.032446][ C0] RAX: ffffffff8a2152b3 RBX: ffff888055626b40 RCX: ffff8880276eda00 [ 517.040456][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 517.048461][ C0] RBP: ffffc90000007490 R08: ffffffff8fe52d37 R09: 1ffffffff1fca5a6 [ 517.056462][ C0] R10: dffffc0000000000 R11: fffffbfff1fca5a7 R12: ffff8880292aa101 [ 517.064465][ C0] R13: dffffc0000000001 R14: 1ffff92000000e70 R15: 0000000000000000 [ 517.072490][ C0] ? nf_reject_fill_skb_dst+0x2a3/0x330 [ 517.078091][ C0] ? __pfx_nf_reject_fill_skb_dst+0x10/0x10 [ 517.084038][ C0] nf_send_unreach+0x17b/0x6e0 [ 517.088843][ C0] ? rcu_is_watching+0x15/0xb0 [ 517.093649][ C0] ? lock_release+0x4b/0x3e0 [ 517.098272][ C0] ? __pfx_nf_send_unreach+0x10/0x10 [ 517.103593][ C0] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 517.109186][ C0] ? rcu_is_watching+0x15/0xb0 [ 517.113986][ C0] nft_reject_inet_eval+0x4bc/0x690 [ 517.119223][ C0] nft_do_chain+0x40c/0x1920 [ 517.123837][ C0] ? lock_release+0x4b/0x3e0 [ 517.128454][ C0] ? ktime_get+0x3e/0x1f0 [ 517.132815][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 517.139088][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 517.144150][ C0] ? update_curr_dl_se+0x410/0x980 [ 517.149300][ C0] nft_do_chain_inet+0x25d/0x340 [ 517.154356][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 517.159842][ C0] ? NF_HOOK+0x9a/0x3a0 [ 517.164027][ C0] ? rcu_is_watching+0x15/0xb0 [ 517.168836][ C0] ? lock_acquire+0x5f/0x360 [ 517.173467][ C0] ? ip_sabotage_in+0x57/0x270 [ 517.178271][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 517.183770][ C0] nf_hook_slow+0xc5/0x220 [ 517.188233][ C0] NF_HOOK+0x206/0x3a0 [ 517.192383][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 517.197534][ C0] ? NF_HOOK+0x9a/0x3a0 [ 517.201724][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 517.206348][ C0] ? ip_rcv_core+0x7f7/0xd00 [ 517.210980][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 517.216132][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 517.220671][ C0] __netif_receive_skb+0x143/0x380 [ 517.225825][ C0] ? process_backlog+0x2d5/0x14f0 [ 517.230913][ C0] process_backlog+0x60e/0x14f0 [ 517.235814][ C0] ? __pfx_process_backlog+0x10/0x10 [ 517.241235][ C0] __napi_poll+0xc4/0x360 [ 517.245594][ C0] ? rcu_is_watching+0x15/0xb0 [ 517.250410][ C0] net_rx_action+0x707/0xe30 [ 517.255308][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 517.260452][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 517.266737][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 517.271974][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 517.277299][ C0] handle_softirqs+0x283/0x870 [ 517.282100][ C0] ? do_softirq+0xec/0x180 [ 517.286557][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 517.291898][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 517.297060][ C0] do_softirq+0xec/0x180 [ 517.301341][ C0] [ 517.304295][ C0] [ 517.307248][ C0] ? __pfx_do_softirq+0x10/0x10 [ 517.312132][ C0] ? unwind_next_frame+0xa5/0x2390 [ 517.317280][ C0] ? rcu_is_watching+0x15/0xb0 [ 517.322089][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 517.327320][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 517.333073][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 517.338226][ C0] ? lock_release+0x4b/0x3e0 [ 517.342849][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 517.347986][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 517.353123][ C0] __dev_queue_xmit+0x1d79/0x3b50 [ 517.358266][ C0] ? lock_release+0x4b/0x3e0 [ 517.362891][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 517.368038][ C0] ? fib_rules_lookup+0x96/0xe90 [ 517.373008][ C0] ? __pfx_fib_rules_lookup+0x10/0x10 [ 517.378414][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 517.383903][ C0] ? l3mdev_update_flow+0x4d1/0x640 [ 517.389143][ C0] ? l3mdev_update_flow+0x29/0x640 [ 517.394294][ C0] ? mroute6_is_socket+0x20b/0x300 [ 517.399432][ C0] ? __pfx_mroute6_is_socket+0x10/0x10 [ 517.404928][ C0] ? ipv6_chk_mcast_addr+0x2e/0x860 [ 517.410162][ C0] ? rcu_is_watching+0x15/0xb0 [ 517.414958][ C0] ? NF_HOOK+0x9e/0x380 [ 517.419139][ C0] ? rcu_is_watching+0x15/0xb0 [ 517.423941][ C0] ? NF_HOOK+0x9e/0x380 [ 517.428140][ C0] ? rcu_is_watching+0x15/0xb0 [ 517.432940][ C0] ? NF_HOOK+0x9e/0x380 [ 517.437125][ C0] ? ip6_finish_output2+0xf99/0x16a0 [ 517.442441][ C0] ip6_finish_output2+0x11bc/0x16a0 [ 517.447763][ C0] ? ip6_finish_output2+0x701/0x16a0 [ 517.453089][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 517.458759][ C0] ? ip6_mtu+0x7d/0x3f0 [ 517.462948][ C0] ? ip6_finish_output+0x2ef/0x4e0 [ 517.468092][ C0] NF_HOOK+0x9e/0x380 [ 517.472121][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 517.476757][ C0] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 517.482595][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 517.487837][ C0] ? icmp6_dst_alloc+0x3a5/0x420 [ 517.492813][ C0] ? icmp6_dst_alloc+0x3a5/0x420 [ 517.497777][ C0] mld_sendpack+0x8d4/0xe60 [ 517.502326][ C0] ? mld_sendpack+0x1e7/0xe60 [ 517.507041][ C0] ? __pfx_mld_sendpack+0x10/0x10 [ 517.512106][ C0] mld_ifc_work+0x83e/0xd60 [ 517.516735][ C0] ? rcu_is_watching+0x15/0xb0 [ 517.521530][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 517.527288][ C0] process_scheduled_works+0xae1/0x17b0 [ 517.532882][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 517.538921][ C0] worker_thread+0x8a0/0xda0 [ 517.543552][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 517.549947][ C0] ? __kthread_parkme+0x7b/0x200 [ 517.554930][ C0] kthread+0x711/0x8a0 [ 517.559041][ C0] ? __pfx_worker_thread+0x10/0x10 [ 517.564187][ C0] ? __pfx_kthread+0x10/0x10 [ 517.568812][ C0] ? rcu_is_watching+0x15/0xb0 [ 517.573612][ C0] ? __pfx_kthread+0x10/0x10 [ 517.578245][ C0] ret_from_fork+0x47c/0x820 [ 517.582870][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 517.588125][ C0] ? __switch_to_asm+0x39/0x70 [ 517.592932][ C0] ? __switch_to_asm+0x33/0x70 [ 517.597732][ C0] ? __pfx_kthread+0x10/0x10 [ 517.602365][ C0] ret_from_fork_asm+0x1a/0x30 [ 517.607164][ C0] [ 517.610386][ C0] Kernel Offset: disabled [ 517.614749][ C0] Rebooting in 86400 seconds..