last executing test programs: 3.217343194s ago: executing program 2 (id=1748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000240001080400"/28], 0x1c}, 0x1, 0x0, 0x0, 0x48881}, 0x40) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x2b, 0x80801, 0xffffffff) request_key(&(0x7f0000000100)='ceph\x00', 0x0, 0x0, 0xfffffffffffffffb) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x10000, @dev={0xfe, 0x80, '\x00', 0x12}, 0x1}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000000180)=0x100000001, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) r7 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r7, 0x0, 0x1011) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000030101019ab1d40b8b485f67aea5c117bb04f7d3df6aa079904f4705bc7977a96edaa5484d0ebb84639b44acfdeba279c69de98c858b752cc617321622b87f0cdb7412dad7e9f7ad9183dbab3a376900e724e9b8cc643c909a72abd66eb462fa8d1a41e2822691ae1a9c"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2.787466703s ago: executing program 2 (id=1752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r4) sendmsg$NFC_CMD_DISABLE_SE(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x410) sendmsg$inet(r3, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) r6 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r7, 0x0, r6, 0x0, 0x4, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r8, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010) close(0x3) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x5c4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40020}, 0x4814) 2.700188327s ago: executing program 0 (id=1754): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@enable_nested={0x12c, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @enable_nested={0x12c, 0x18}, @rdmsr={0x66, 0x18, {0xa0f}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_create_vm={0x12d, 0x18, 0x3}], 0x90}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4d, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080000f01b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0x95}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r6, @ANYBLOB="050003"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)={0x38, 0x32, 0x1, 0x0, 0x0, "", [@generic="23f201f4ab7b549789cc405dc0da4198e703167ce847f3aae3b06d88", @typed={0x8, 0xa1, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x2b}]}, 0x38}], 0x1}, 0x20000000) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r8, 0x0, 0x0, &(0x7f0000000180)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x80, 0xa, 0xb9, 0x1, 0x11, 0xd, 0x204}, {0x804, 0x1, 0x1, 0x49, 0x87, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x8, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5, 0x4}], 0xffffffff}) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r10, 0xc0205647, &(0x7f0000000640)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x980001, 0x0, '\x00', @p_u8=0x0}}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xdb, 0x0, 0x8, 0x2000001, 0x0, 0x2004cb, 0xfffffffffffffff9, 0x2, 0x1136b2e5, 0x9, 0x0, 0x3, 0x0, 0x8000000000, 0xfffffffffffffffa], 0x1, 0x202}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2.669747548s ago: executing program 2 (id=1755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 1.815616531s ago: executing program 0 (id=1756): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xa8, 0x29, 0x4, {0x4, 0x12, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0x80, 0x12, "09e12e5f0b6bdcf72f2ec7008a15fa88b025"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x128}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.772469658s ago: executing program 1 (id=1757): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xa8, 0x29, 0x4, {0x4, 0x11, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0x80, 0x12, "09e12e5f0b6bdcf72f2ec7008a15fa88b025"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast2]}}}], 0x150}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.690540096s ago: executing program 3 (id=1758): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) syz_open_dev$hidraw(&(0x7f0000000000), 0x3000000, 0xc6181) 1.684965664s ago: executing program 2 (id=1759): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) write$eventfd(0xffffffffffffffff, &(0x7f00000000c0)=0x1, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0xfd7f0000) 1.411026078s ago: executing program 2 (id=1760): open$dir(&(0x7f0000000000)='./file0/file1\x00', 0x43f00, 0x5) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) (async, rerun: 64) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (rerun: 64) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) (async) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000100)={[0x7, 0x5, 0x10001, 0x0, 0x8001, 0x5, 0xffffffffffff8000, 0xfffffffffffffff8, 0x1, 0x2, 0x6, 0x1, 0x3, 0xb94f, 0x4, 0x1000], 0x4000, 0x20000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x5, 0xfffffffffffffffd, 0x0, 0x10000, 0x2, 0x40, 0xffe, 0x0, 0x0, 0xfffffffffffffffd, 0x900f, 0x0, 0xd57b], 0xeeee8002, 0x2113c0}) (async, rerun: 64) r1 = fanotify_init(0x8, 0x80000) (async, rerun: 64) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x16, 0x80, 0x5, 0x19, "0076ba7d82000000002700000000f7ff6fd800"}) r3 = syz_open_pts(r2, 0x440) r4 = dup(r3) fanotify_mark(r1, 0x1, 0x40001012, r4, 0x0) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff3}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x1) (rerun: 32) 1.409713665s ago: executing program 1 (id=1761): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) syz_clone(0x20b02211, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000880)={0x1c, r2, 0x1, 0x70bd24, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4040840) 1.229231425s ago: executing program 2 (id=1762): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0xfe, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x10, {0x10, 0xa, "a7ea3163fd3bc518194b120c1e73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) modify_ldt$write(0x1, 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r3 = socket$l2tp(0x2, 0x2, 0x73) dup2(r3, r2) 1.227156922s ago: executing program 0 (id=1763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r4) sendmsg$NFC_CMD_DISABLE_SE(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x410) sendmsg$inet(r3, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) r6 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r7, 0x0, r6, 0x0, 0x4, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r8, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) accept4(r8, 0x0, 0x0, 0x0) close(0x3) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x5c4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40020}, 0x4814) 1.226936462s ago: executing program 1 (id=1764): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7495, 0x8, 0x2, 0x1f7}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="810722bd7000fedbdf2501000000080001000000010008000300", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x40c0}, 0x200040c0) 1.058534743s ago: executing program 0 (id=1765): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)='`', 0x1}], 0x1}}], 0x1, 0x44804) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x4, @empty}}}, 0x90) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000bc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r1, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8a}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x80c1}, 0x4000) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/keys\x00', 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x14, 0x8, 0x70bd28, 0x25dfdbfb, {0x23, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x15, 0x1, "38a74b114f89a0bb1c7e7598090d90727f"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) futex_waitv(&(0x7f0000001740)=[{0xf, 0x0, 0x6}], 0x1, 0x0, 0x0, 0x1) r7 = syz_usb_connect$printer(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfe, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1, 0x5d, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0xa, 0x9, 0x80}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x5b, 0x8, 0x3, 0x20, 0xba}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x3, [{0xd0, &(0x7f0000000c00)=ANY=[@ANYBLOB="d003cd973805d4ffa3f3fe6eded8486276504135c44a9fc22bbc621e1c2506e894ad25284cef3ea0fbc20f91a93448382da3a2c0084aad9056c6c05c5b13ba0f21f31425c4775dac091a99aeb8e74bf2bfa01462650678dcce9ad58a67bd64216d734769fc76ef6bb9a455f567d35140441f6dfd1be25d6e8325752c084e773bc3d1d7588c70b7e83db75e03fe5dd9759ca3f45fdd2f72dd62f46f6350220d00fc805d2465b31aa81910eefce4c55b09c818ceed6f71b3fee4e827ee9a5c33527f863e33f4ae5fab12b5d7e6256216b700dc054c5cb70f770a5e170db535935714732be474fe"]}, {0xdf, &(0x7f00000003c0)=ANY=[@ANYBLOB="df03e6de1138924283e5edbca758f65e6e567b4c5c03ed7f6dcece31745d531304e6a19b927f9f0a18bff2e7a3c971abec9059ec5798fc713648b39f30e1b1fe9757f6d3860b9d4dda2ef200119dc3800fab1d94a068fb639da49d05344c04d98c360396f5f2e6eaa6720c441bfdf8d35db2a7d77f3e7ecbc0a7f16d42a93d2d6203566f626710edea9b07b47e7b290b7b5fa6f5f874be2bae182604792a402beab879ab993c00c75a72309d13479b23636b5f18e57a4651f6433c743f579befd2a520f9b0e9c2eabc11fd782f5e6d533ec2b175e1c0a910f37b90a3000000"]}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x81a}}]}) syz_usb_control_io$printer(r7, &(0x7f00000005c0)={0x14, &(0x7f0000000540)={0x40, 0x7, 0x37, {0x37, 0x9, "1fd6acd03081f94106bf1b9c5273b518f904328c32058452718a64bbe3b75e9b1bd9eca6cbba7d6da212e64f2c3596d4ea6915b0e6"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000900)={0x34, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000780)={0x20, 0x0, 0xe9, {0xe7, "6d2f85e177d63e7f64fcc74d97009e48af94d24b5a1284994d111ebec384c5480265924221ebdf297d00ba0d95b8b35db7baffc1fa444556e906120330a7f70fad33edca73f393ac3741e2437ac0f403e84cd8e2d97fb764b7f1e0ea2b62b930bddbd62836b446603e5f0e378a9afdacf82ce1b4a88d5593cb7f1439028f7e32caba4c00ca27ebd97999f8342d550b1e2017294e23f6b9344e20c8d22bcb537a2d88cf9ce1202e7b03676d21a92da1168ca71cd7bbd239a6ad9878cb4163580d1d7ec03ca8d9c6927f16a3ee12a2a34c8c453e624f19b69d3ed3710f8abf0997d67f9b1a622e88"}}, &(0x7f0000000880)={0x20, 0x1, 0x1, 0xa}, &(0x7f00000008c0)={0x20, 0x0, 0x1, 0x10}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYRES64=r9, @ANYRES16=r9, @ANYBLOB="01000000f4ffffffffff02000000400001802c00040014000100020000007f00000101000000000000001400020002000000e000365800000000000000000d0001007564703a7339d2b07a"], 0x54}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000c0000000000160000000c0006000100000001"], 0x20}, 0x1, 0x0, 0x0, 0x851}, 0x40804) 1.012352859s ago: executing program 1 (id=1766): socket$inet6_sctp(0xa, 0x5, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) socket$caif_stream(0x25, 0x1, 0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x4000, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.0121102s ago: executing program 3 (id=1767): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x4, 0x3}, &(0x7f0000000240)=0x8) r1 = accept4$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000100)=0x6e, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0xa2000) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000080)) close_range(r1, 0xffffffffffffffff, 0x0) setresgid(0x0, 0x0, 0xee01) r3 = syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r3, 0x9, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES64=r4], 0x38}}, 0x800) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x4, 0x3}, &(0x7f0000000240)=0x8) (async) accept4$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000100)=0x6e, 0x0) (async) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0xa2000) (async) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000080)) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) setresgid(0x0, 0x0, 0xee01) (async) syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) prlimit64(r3, 0x9, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES64=r4], 0x38}}, 0x800) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) 894.656974ms ago: executing program 3 (id=1768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd000010006200000000006000000000202c01fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0x56) 693.205615ms ago: executing program 3 (id=1769): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) (async) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r3 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r3, 0x1) flock(r3, 0x2) close(0x3) r4 = socket$inet6(0xa, 0x3, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) socket$l2tp6(0xa, 0x2, 0x73) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="f2215ef229f94389868fb0d978a7df2a174c9fc0cf2ac35f3c9299aea3143267d0ee9026d0c4ff6b3caf90034a5b0273e7f18e3fc46cb4298dcd2b0500000083ba1fae6ce3e1fee7d72da56872ae786fe3356a740b"], 0x0}, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="f2215ef229f94389868fb0d978a7df2a174c9fc0cf2ac35f3c9299aea3143267d0ee9026d0c4ff6b3caf90034a5b0273e7f18e3fc46cb4298dcd2b0500000083ba1fae6ce3e1fee7d72da56872ae786fe3356a740b"], 0x0}, 0x0) sendmmsg$inet6(r6, &(0x7f000000af00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x41, 0xc8, 0x1}}}, 0x8) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x41, 0xc8, 0x1}}}, 0x8) sendmmsg$inet(r4, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001180)="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", 0x447}, {&(0x7f0000000bc0)="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", 0x135}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x4044040) ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/52) 439.297492ms ago: executing program 3 (id=1770): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@remote, @remote, @rand_addr=' \x01\x00', 0x8, 0xd, 0xfffb, 0x100, 0x1000, 0x80020}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a3100000000090001"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000000)=0x2) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)={0x40, r0, 0xb97534d5fe9704cf, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x40}}, 0x0) 415.630863ms ago: executing program 3 (id=1771): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x8, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x0, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x100) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x7, {0x101, 0xa, 0x0, {0x1, 0x0, 0xbdd7, 0x400, 0x10001, 0xe, 0x200, 0x4, 0x8, 0x8000, 0x7, 0x0, 0x0, 0x80000003, 0xc0ac}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x1) 273.971808ms ago: executing program 0 (id=1772): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xa8, 0x29, 0x4, {0x4, 0x12, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0x80, 0x12, "09e12e5f0b6bdcf72f2ec7008a15fa88b025"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x128}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 156.896865ms ago: executing program 1 (id=1773): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r4) sendmsg$NFC_CMD_DISABLE_SE(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x410) sendmsg$inet(r3, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) r6 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r7, 0x0, r6, 0x0, 0x4, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r8, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) close(0x3) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x5c4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40020}, 0x4814) 94.557915ms ago: executing program 0 (id=1774): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x4) shutdown(0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) 0s ago: executing program 1 (id=1775): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e00090504", @ANYRES64], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000200)="b8010000000f01c166b81c018ed036660fdfdc0f0f92e40000009466ba210066b8090066ef66b8c5000f00d866b813010f00d08fc978c216670f42d366b83e008ec8", 0x42}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x8, 0x0, 0x0, 0xea2}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71033000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e00090504", @ANYRES64], 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000200)="b8010000000f01c166b81c018ed036660fdfdc0f0f92e40000009466ba210066b8090066ef66b8c5000f00d866b813010f00d08fc978c216670f42d366b83e008ec8", 0x42}], 0x1, 0x10, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x8, 0x0, 0x0, 0xea2}) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71033000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) kernel console output (not intermixed with test programs): 90 [ 265.744892][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.774828][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.794875][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.825639][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.845115][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.864729][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.884777][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.905198][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.929647][ T5876] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 265.939357][ T5876] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 266.023782][ T5876] usb 2-1: USB disconnect, device number 65 [ 266.034853][ T5883] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 266.092801][ T5833] block nbd0: Receive control failed (result -32) [ 266.166974][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 266.204832][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 266.212058][ T5883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.222945][ T5883] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 266.235785][ T5883] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.248998][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 266.258333][ T5883] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 266.268982][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.278055][ T5883] usb 3-1: Product: syz [ 266.282264][ T5883] usb 3-1: Manufacturer: syz [ 266.293993][ T5883] usb 3-1: SerialNumber: syz [ 266.305324][ T5883] usb 3-1: config 0 descriptor?? [ 266.322278][ T5883] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 266.517021][ T9049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.524787][ T24] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 266.529156][ T5883] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 266.540736][ T9063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.544330][ T5883] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 266.552101][ T9049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.560971][ T5883] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 266.577407][ T9063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.657786][ T24] usb 4-1: device descriptor read/64, error -71 [ 266.668380][ T5833] Bluetooth: hci1: unexpected event 0x33 length: 6 < 10 [ 266.717162][ T5912] usb 3-1: USB disconnect, device number 66 [ 266.733119][ T9070] fuse: Bad value for 'user_id' [ 266.740882][ T9070] fuse: Bad value for 'user_id' [ 266.894701][ T24] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 267.034689][ T24] usb 4-1: device descriptor read/64, error -71 [ 267.064847][ T5883] usb 2-1: new low-speed USB device number 66 using dummy_hcd [ 267.144934][ T24] usb usb4-port1: attempt power cycle [ 267.194844][ T5883] usb 2-1: device descriptor read/64, error -71 [ 267.444744][ T5883] usb 2-1: new low-speed USB device number 67 using dummy_hcd [ 267.485333][ T24] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 267.509064][ T24] usb 4-1: device descriptor read/8, error -71 [ 267.560752][ T9085] binder: 9084:9085 ioctl c0306201 2000000001c0 returned -14 [ 267.585147][ T5883] usb 2-1: device descriptor read/64, error -71 [ 267.705293][ T5883] usb usb2-port1: attempt power cycle [ 267.764880][ T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 267.805968][ T24] usb 4-1: device descriptor read/8, error -71 [ 267.935916][ T24] usb usb4-port1: unable to enumerate USB device [ 268.044725][ T5883] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 268.065443][ T5883] usb 2-1: device descriptor read/8, error -71 [ 268.114826][ T7830] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 268.275169][ T7830] usb 3-1: Using ep0 maxpacket: 32 [ 268.282910][ T7830] usb 3-1: config 0 has no interfaces? [ 268.297618][ T7830] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65 [ 268.306867][ T5883] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 268.315416][ T7830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.323925][ T7830] usb 3-1: Product: syz [ 268.329150][ T7830] usb 3-1: Manufacturer: syz [ 268.333832][ T7830] usb 3-1: SerialNumber: syz [ 268.339544][ T5883] usb 2-1: device descriptor read/8, error -71 [ 268.351890][ T7830] usb 3-1: config 0 descriptor?? [ 268.464884][ T5883] usb usb2-port1: unable to enumerate USB device [ 269.492050][ T5833] Bluetooth: hci0: unexpected event 0x33 length: 6 < 10 [ 269.813423][ T24] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 269.851563][ T24] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 270.194095][ T9151] pimreg: entered allmulticast mode [ 270.218941][ T9151] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20001 [ 270.320316][ T5883] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 270.352337][ T5883] hid-generic 0000:0000:0000.0029: hidraw1: HID v0.00 Device [syz1] on syz0 [ 270.919866][ T7830] usb 3-1: USB disconnect, device number 67 [ 270.939225][ T5833] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 271.013685][ T9174] fuse: Bad value for 'fd' [ 271.275849][ T9182] qrtr: Invalid version 43 [ 271.584926][ T7830] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 272.386565][ T7830] usb 3-1: unable to get BOS descriptor or descriptor too short [ 272.396068][ T7830] usb 3-1: config 6 has an invalid interface number: 200 but max is 0 [ 272.404408][ T7830] usb 3-1: config 6 has no interface number 0 [ 272.424649][ T7830] usb 3-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 272.436041][ T7830] usb 3-1: config 6 interface 200 has no altsetting 0 [ 272.446882][ T7830] usb 3-1: string descriptor 0 read error: -22 [ 272.453219][ T7830] usb 3-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 272.468682][ T7830] usb 3-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 272.525319][ T7830] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 272.728899][ T7830] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 272.744085][ T7830] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 272.764897][ T7830] usb 3-1: media controller created [ 272.793717][ T7830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 272.834304][ T7830] dvb-usb: bulk message failed: -71 (6/0) [ 272.850380][ T7830] dvb-usb: bulk message failed: -71 (6/0) [ 272.858078][ T7830] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 272.871525][ T7830] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 272.903962][ T7830] dvb-usb: schedule remote query interval to 150 msecs. [ 273.873602][ T7830] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 273.911335][ T7830] usb 3-1: USB disconnect, device number 68 [ 274.022861][ T7830] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 274.334706][ T6083] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 274.384761][ T7830] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 274.464748][ T6083] usb 4-1: device descriptor read/64, error -71 [ 274.544707][ T7830] usb 3-1: Using ep0 maxpacket: 16 [ 274.551658][ T7830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.565566][ T7830] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 274.575113][ T7830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.587828][ T7830] usb 3-1: config 0 descriptor?? [ 274.704825][ T6083] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 274.774705][ T5876] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 274.809644][ T9219] loop4: detected capacity change from 0 to 524287936 [ 274.829421][ T7830] usbhid 3-1:0.0: can't add hid device: -71 [ 274.836009][ T6083] usb 4-1: device descriptor read/64, error -71 [ 274.845550][ T7830] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 274.871589][ T7830] usb 3-1: USB disconnect, device number 69 [ 274.944722][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 274.945152][ T6083] usb usb4-port1: attempt power cycle [ 274.957453][ T5876] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 274.977095][ T5876] usb 2-1: config 179 has no interface number 0 [ 274.988062][ T5876] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 275.008365][ T5876] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 275.029429][ T5876] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 275.041959][ T5876] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 275.054270][ T5876] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 275.068686][ T5876] usb 2-1: config 179 interface 65 has no altsetting 0 [ 275.075721][ T5876] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 275.084860][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.115206][ T5876] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input20 [ 275.175083][ T5182] input input20: unable to receive magic message: -110 [ 275.183968][ T5182] input input20: unable to receive magic message: -32 [ 275.202109][ T5182] input input20: unable to receive magic message: -32 [ 275.213834][ T5182] input input20: unable to receive magic message: -32 [ 275.224471][ T7925] input input20: unable to receive magic message: -32 [ 275.243623][ T5182] input input20: unable to receive magic message: -32 [ 275.254132][ T5182] input input20: unable to receive magic message: -32 [ 275.294843][ T6083] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 275.315400][ T6083] usb 4-1: device descriptor read/8, error -71 [ 275.528671][ T7830] usb 2-1: USB disconnect, device number 70 [ 275.534826][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 275.564926][ T6083] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 275.597318][ T6083] usb 4-1: device descriptor read/8, error -71 [ 275.614674][ T5876] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 275.705038][ T6083] usb usb4-port1: unable to enumerate USB device [ 275.764728][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 275.771842][ T5876] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 275.781929][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.793680][ T5876] usb 3-1: config 0 descriptor?? [ 275.807704][ T5876] gspca_main: sunplus-2.14.0 probing 041e:400b [ 276.827892][ T5876] gspca_sunplus: reg_w_riv err -71 [ 276.836196][ T5876] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 276.847287][ T5876] usb 3-1: USB disconnect, device number 70 [ 277.433162][ T9244] FAULT_INJECTION: forcing a failure. [ 277.433162][ T9244] name failslab, interval 1, probability 0, space 0, times 0 [ 277.447079][ T9244] CPU: 1 UID: 0 PID: 9244 Comm: syz.3.1096 Not tainted syzkaller #0 PREEMPT(full) [ 277.447110][ T9244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 277.447123][ T9244] Call Trace: [ 277.447131][ T9244] [ 277.447140][ T9244] dump_stack_lvl+0x189/0x250 [ 277.447173][ T9244] ? __pfx____ratelimit+0x10/0x10 [ 277.447199][ T9244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.447224][ T9244] ? __pfx__printk+0x10/0x10 [ 277.447252][ T9244] ? __pfx___might_resched+0x10/0x10 [ 277.447276][ T9244] ? fs_reclaim_acquire+0x7d/0x100 [ 277.447305][ T9244] should_fail_ex+0x414/0x560 [ 277.447337][ T9244] should_failslab+0xa8/0x100 [ 277.447371][ T9244] kmem_cache_alloc_noprof+0x88/0x700 [ 277.447402][ T9244] ? __kvm_mmu_topup_memory_cache+0x463/0x610 [ 277.447427][ T9244] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 277.447458][ T9244] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 277.447496][ T9244] mmu_topup_memory_caches+0x21/0x170 [ 277.447526][ T9244] kvm_mmu_load+0x9d/0x2300 [ 277.447551][ T9244] ? kvm_msr_allowed+0x9a/0x490 [ 277.447580][ T9244] ? kvm_msr_allowed+0x3f4/0x490 [ 277.447607][ T9244] ? kvm_msr_allowed+0x9a/0x490 [ 277.447634][ T9244] ? kvm_msr_allowed+0x9a/0x490 [ 277.447668][ T9244] ? kvm_apic_has_interrupt+0x4b1/0x770 [ 277.447706][ T9244] ? vmx_enable_irq_window+0x91/0x140 [ 277.447742][ T9244] vcpu_run+0x54ff/0x77f0 [ 277.447849][ T9244] ? __pfx_vcpu_run+0x10/0x10 [ 277.447880][ T9244] ? kvm_arch_vcpu_ioctl_run+0x283/0x1cd0 [ 277.447909][ T9244] ? rcu_is_watching+0x15/0xb0 [ 277.447942][ T9244] kvm_arch_vcpu_ioctl_run+0x1143/0x1cd0 [ 277.447971][ T9244] ? __mutex_trylock_common+0x153/0x260 [ 277.448002][ T9244] ? kvm_arch_vcpu_ioctl_run+0x283/0x1cd0 [ 277.448022][ T9244] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 277.448044][ T9244] ? rcu_is_watching+0x15/0xb0 [ 277.448072][ T9244] ? trace_contention_end+0x39/0x120 [ 277.448098][ T9244] ? look_up_lock_class+0x74/0x170 [ 277.448126][ T9244] ? register_lock_class+0x51/0x320 [ 277.448154][ T9244] ? __lock_acquire+0xab9/0xd20 [ 277.448207][ T9244] kvm_vcpu_ioctl+0x99a/0xed0 [ 277.448244][ T9244] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 277.448299][ T9244] ? __fget_files+0x2a/0x420 [ 277.448331][ T9244] ? __fget_files+0x3a0/0x420 [ 277.448362][ T9244] ? __fget_files+0x2a/0x420 [ 277.448391][ T9244] ? bpf_lsm_file_ioctl+0x9/0x20 [ 277.448414][ T9244] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 277.448443][ T9244] __se_sys_ioctl+0xfc/0x170 [ 277.448477][ T9244] do_syscall_64+0xfa/0xfa0 [ 277.448506][ T9244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.448527][ T9244] ? clear_bhb_loop+0x60/0xb0 [ 277.448554][ T9244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.448574][ T9244] RIP: 0033:0x7f8e26b8f749 [ 277.448593][ T9244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.448610][ T9244] RSP: 002b:00007f8e279bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.448633][ T9244] RAX: ffffffffffffffda RBX: 00007f8e26de5fa0 RCX: 00007f8e26b8f749 [ 277.448647][ T9244] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 277.448660][ T9244] RBP: 00007f8e279bd090 R08: 0000000000000000 R09: 0000000000000000 [ 277.448672][ T9244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 277.448684][ T9244] R13: 00007f8e26de6038 R14: 00007f8e26de5fa0 R15: 00007ffc7e0abd58 [ 277.448721][ T9244] [ 277.821456][ T9249] netlink: 'syz.2.1089': attribute type 5 has an invalid length. [ 277.829932][ T9249] netlink: 'syz.2.1089': attribute type 9 has an invalid length. [ 278.667970][ T6083] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 278.838913][ T6083] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 278.846798][ T6083] usb 3-1: can't read configurations, error -61 [ 278.864953][ T9256] FAULT_INJECTION: forcing a failure. [ 278.864953][ T9256] name failslab, interval 1, probability 0, space 0, times 0 [ 278.879982][ T9256] CPU: 1 UID: 0 PID: 9256 Comm: syz.3.1091 Not tainted syzkaller #0 PREEMPT(full) [ 278.880010][ T9256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 278.880023][ T9256] Call Trace: [ 278.880032][ T9256] [ 278.880050][ T9256] dump_stack_lvl+0x189/0x250 [ 278.880082][ T9256] ? __pfx____ratelimit+0x10/0x10 [ 278.880109][ T9256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.880136][ T9256] ? __pfx__printk+0x10/0x10 [ 278.880163][ T9256] ? __pfx___might_resched+0x10/0x10 [ 278.880187][ T9256] ? fs_reclaim_acquire+0x7d/0x100 [ 278.880215][ T9256] should_fail_ex+0x414/0x560 [ 278.880247][ T9256] should_failslab+0xa8/0x100 [ 278.880272][ T9256] __kmalloc_node_track_caller_noprof+0xe2/0x810 [ 278.880294][ T9256] ? dev_exception_add+0x94/0x4a0 [ 278.880323][ T9256] kmemdup_noprof+0x2b/0x70 [ 278.880349][ T9256] dev_exception_add+0x94/0x4a0 [ 278.880370][ T9256] ? bpf_lsm_capable+0x9/0x20 [ 278.880395][ T9256] ? security_capable+0x7e/0x2e0 [ 278.880429][ T9256] devcgroup_access_write+0xfdf/0x18b0 [ 278.880458][ T9256] ? __pfx_devcgroup_access_write+0x10/0x10 [ 278.880481][ T9256] ? register_lock_class+0x51/0x320 [ 278.880509][ T9256] ? __lock_acquire+0xab9/0xd20 [ 278.880617][ T9256] ? kernfs_root+0x1c/0x230 [ 278.880637][ T9256] ? kernfs_root+0x1c/0x230 [ 278.880654][ T9256] ? kernfs_root+0x1c/0x230 [ 278.880674][ T9256] ? kernfs_root+0x1ea/0x230 [ 278.880693][ T9256] ? __pfx_devcgroup_access_write+0x10/0x10 [ 278.880717][ T9256] cgroup_file_write+0x3a1/0x740 [ 278.880752][ T9256] ? __pfx_cgroup_file_write+0x10/0x10 [ 278.880778][ T9256] ? rcu_is_watching+0x15/0xb0 [ 278.880819][ T9256] ? __pfx_cgroup_file_write+0x10/0x10 [ 278.880843][ T9256] kernfs_fop_write_iter+0x3af/0x540 [ 278.880880][ T9256] vfs_write+0x5c9/0xb30 [ 278.880906][ T9256] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 278.880934][ T9256] ? __pfx_vfs_write+0x10/0x10 [ 278.880966][ T9256] ? __fget_files+0x2a/0x420 [ 278.881002][ T9256] ksys_write+0x145/0x250 [ 278.881026][ T9256] ? __pfx_ksys_write+0x10/0x10 [ 278.881059][ T9256] ? do_syscall_64+0xbe/0xfa0 [ 278.881092][ T9256] do_syscall_64+0xfa/0xfa0 [ 278.881120][ T9256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.881141][ T9256] ? clear_bhb_loop+0x60/0xb0 [ 278.881167][ T9256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.881187][ T9256] RIP: 0033:0x7f8e26b8f749 [ 278.881207][ T9256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.881225][ T9256] RSP: 002b:00007f8e279bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 278.881248][ T9256] RAX: ffffffffffffffda RBX: 00007f8e26de5fa0 RCX: 00007f8e26b8f749 [ 278.881263][ T9256] RDX: 0000000000000009 RSI: 0000200000000280 RDI: 0000000000000004 [ 278.881277][ T9256] RBP: 00007f8e279bd090 R08: 0000000000000000 R09: 0000000000000000 [ 278.881290][ T9256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.881302][ T9256] R13: 00007f8e26de6038 R14: 00007f8e26de5fa0 R15: 00007ffc7e0abd58 [ 278.881340][ T9256] [ 279.298953][ T6083] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 279.473102][ T30] audit: type=1326 audit(1764011382.573:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9266 comm="syz.1.1097" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f534bd8f749 code=0x0 [ 279.497276][ T6083] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 279.505328][ T6083] usb 3-1: can't read configurations, error -61 [ 279.512705][ T6083] usb usb3-port1: attempt power cycle [ 280.093098][ T6083] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 280.175328][ T6083] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 280.193978][ T6083] usb 3-1: can't read configurations, error -61 [ 280.388241][ T6083] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 280.457797][ T6083] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 280.466127][ T6083] usb 3-1: can't read configurations, error -61 [ 280.475556][ T6083] usb usb3-port1: unable to enumerate USB device [ 280.905080][ T6083] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 281.119019][ T6083] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.256226][ T6083] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.487967][ T6083] usb 4-1: New USB device found, idVendor=0525, idProduct=b0a1, bcdDevice= 0.00 [ 281.657247][ T6083] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.666158][ T6083] usb 4-1: Product: syz [ 281.670388][ T6083] usb 4-1: Manufacturer: syz [ 281.680256][ T6083] usb 4-1: SerialNumber: syz [ 281.705619][ T6083] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 281.712601][ T6083] cdc_mbim 4-1:1.0: bind() failure [ 281.755744][ T9310] netlink: 'syz.2.1108': attribute type 21 has an invalid length. [ 281.763770][ T9310] netlink: 'syz.2.1108': attribute type 5 has an invalid length. [ 281.772902][ T9310] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1108'. [ 281.930197][ T9288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.954200][ T9288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.972689][ T9288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.005216][ T9288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.057398][ T9288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.303134][ T9288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.705789][ T9288] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 282.881012][ T6083] usb 4-1: USB disconnect, device number 70 [ 283.290218][ T9352] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 283.394176][ T9355] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1121'. [ 283.664185][ T9366] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 284.088026][ T9385] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1130'. [ 284.269782][ T9392] bridge0: entered allmulticast mode [ 284.312700][ T9392] pim6reg: entered allmulticast mode [ 284.348751][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1133'. [ 284.366777][ T9392] bridge_slave_1: left allmulticast mode [ 284.372490][ T9392] bridge_slave_1: left promiscuous mode [ 284.378530][ T9392] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.394280][ T9392] bridge_slave_0: left allmulticast mode [ 284.402257][ T9392] bridge_slave_0: left promiscuous mode [ 284.408358][ T9392] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.479727][ T9392] bridge0 (unregistering): left allmulticast mode [ 284.499548][ T9407] netlink: 'syz.2.1138': attribute type 36 has an invalid length. [ 285.048071][ T9433] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.1147'. [ 285.144511][ T9437] netlink: 'syz.3.1148': attribute type 36 has an invalid length. [ 285.674753][ T6083] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 286.627257][ T9463] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1157'. [ 286.771721][ T9470] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1160'. [ 287.344875][ T5869] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 287.504678][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 287.512501][ T5869] usb 2-1: config 251 has an invalid interface number: 48 but max is 0 [ 287.523016][ T5869] usb 2-1: config 251 has no interface number 0 [ 287.529554][ T5869] usb 2-1: config 251 interface 48 has no altsetting 0 [ 287.543789][ T5869] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f6.07 [ 287.554065][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.562744][ T5869] usb 2-1: Product: syz [ 287.572724][ T5869] usb 2-1: Manufacturer: syz [ 287.577970][ T5869] usb 2-1: SerialNumber: syz [ 287.807524][ T5869] usb 2-1: USB disconnect, device number 71 [ 288.515502][ T6083] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 288.523280][ T6083] usb 3-1: can't read configurations, error -71 [ 288.670522][ T9524] netlink: 724 bytes leftover after parsing attributes in process `syz.2.1180'. [ 288.794904][ T7830] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 288.954768][ T7830] usb 4-1: Using ep0 maxpacket: 32 [ 289.580980][ T7830] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 289.791038][ T7830] usb 4-1: config 0 has no interface number 0 [ 289.797884][ T7830] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 289.810886][ T7830] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 289.820670][ T7830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.829112][ T7830] usb 4-1: Product: syz [ 289.833507][ T7830] usb 4-1: Manufacturer: syz [ 289.846517][ T7830] usb 4-1: SerialNumber: syz [ 289.856006][ T7830] usb 4-1: config 0 descriptor?? [ 289.862085][ T9517] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 289.878215][ T9547] loop5: detected capacity change from 0 to 14 [ 289.907612][ T9547] Dev loop5: unable to read RDB block 14 [ 289.913335][ T9547] loop5: unable to read partition table [ 289.953638][ T9547] loop5: partition table beyond EOD, truncated [ 289.964778][ T9547] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 290.076559][ T9517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.095136][ T9517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.114138][ T9517] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 290.538702][ T7830] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 290.557944][ T7830] asix 4-1:0.188: probe with driver asix failed with error -71 [ 290.577372][ T7830] usb 4-1: USB disconnect, device number 71 [ 292.241041][ T30] audit: type=1326 audit(1764011395.343:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9592 comm="syz.0.1206" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f282e78f749 code=0x0 [ 292.314850][ T7830] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 292.331158][ T9597] kAFS: unable to lookup cell '' [ 292.339074][ T9597] netlink: 'syz.1.1208': attribute type 10 has an invalid length. [ 292.359154][ T9597] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 292.454716][ T9] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 292.464685][ T7830] usb 3-1: Using ep0 maxpacket: 8 [ 292.474262][ T9600] FAULT_INJECTION: forcing a failure. [ 292.474262][ T9600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.487903][ T9600] CPU: 0 UID: 0 PID: 9600 Comm: syz.1.1209 Not tainted syzkaller #0 PREEMPT(full) [ 292.487930][ T9600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.487944][ T9600] Call Trace: [ 292.487952][ T9600] [ 292.487961][ T9600] dump_stack_lvl+0x189/0x250 [ 292.487997][ T9600] ? __pfx____ratelimit+0x10/0x10 [ 292.488023][ T9600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.488049][ T9600] ? __pfx__printk+0x10/0x10 [ 292.488088][ T9600] should_fail_ex+0x414/0x560 [ 292.488121][ T9600] _copy_to_user+0x31/0xb0 [ 292.488145][ T9600] simple_read_from_buffer+0xe1/0x170 [ 292.488174][ T9600] proc_fail_nth_read+0x1b3/0x220 [ 292.488198][ T9600] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 292.488222][ T9600] ? rw_verify_area+0x2a6/0x4d0 [ 292.488260][ T9600] ? __lock_acquire+0xab9/0xd20 [ 292.488280][ T9600] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 292.488303][ T9600] vfs_read+0x200/0xa30 [ 292.488334][ T9600] ? fdget_pos+0x247/0x320 [ 292.488364][ T9600] ? __pfx___mutex_lock+0x10/0x10 [ 292.488392][ T9600] ? __pfx_vfs_read+0x10/0x10 [ 292.488426][ T9600] ? __fget_files+0x2a/0x420 [ 292.488456][ T9600] ? __fget_files+0x3a0/0x420 [ 292.488480][ T9600] ? __fget_files+0x2a/0x420 [ 292.488516][ T9600] ksys_read+0x145/0x250 [ 292.488537][ T9600] ? __pfx_ksys_read+0x10/0x10 [ 292.488560][ T9600] ? do_syscall_64+0xbe/0xfa0 [ 292.488592][ T9600] do_syscall_64+0xfa/0xfa0 [ 292.488619][ T9600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.488640][ T9600] ? clear_bhb_loop+0x60/0xb0 [ 292.488665][ T9600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.488685][ T9600] RIP: 0033:0x7f534bd8e15c [ 292.488704][ T9600] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 292.488722][ T9600] RSP: 002b:00007f534cbb2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 292.488745][ T9600] RAX: ffffffffffffffda RBX: 00007f534bfe5fa0 RCX: 00007f534bd8e15c [ 292.488760][ T9600] RDX: 000000000000000f RSI: 00007f534cbb20a0 RDI: 0000000000000007 [ 292.488773][ T9600] RBP: 00007f534cbb2090 R08: 0000000000000000 R09: 0000000000000000 [ 292.488786][ T9600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.488799][ T9600] R13: 00007f534bfe6038 R14: 00007f534bfe5fa0 R15: 00007ffdf5898878 [ 292.488835][ T9600] [ 292.489333][ T7830] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 292.731204][ T7830] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 292.741135][ T7830] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 292.750965][ T7830] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.761090][ T7830] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.774199][ T7830] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 292.783455][ T7830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.804929][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 292.811906][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 292.823503][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 292.833839][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 292.834682][ T5869] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 292.855786][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 292.865018][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.873064][ T9] usb 4-1: Product: syz [ 292.877361][ T9] usb 4-1: Manufacturer: syz [ 292.882001][ T9] usb 4-1: SerialNumber: syz [ 292.889708][ T9] usb 4-1: config 0 descriptor?? [ 292.897506][ T9591] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 292.907369][ T9] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 292.999803][ T7830] usb 3-1: usb_control_msg returned -32 [ 293.005644][ T7830] usbtmc 3-1:16.0: can't read capabilities [ 293.018591][ T5869] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 293.029587][ T5869] usb 2-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 293.042102][ T5869] usb 2-1: config 0 has no interface number 0 [ 293.050183][ T5869] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 511 [ 293.060788][ T5869] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 293.076524][ T5869] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 293.085719][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.093899][ T5869] usb 2-1: Product: syz [ 293.098187][ T5869] usb 2-1: Manufacturer: syz [ 293.102806][ T5869] usb 2-1: SerialNumber: syz [ 293.108160][ T947] usb 4-1: USB disconnect, device number 72 [ 293.129199][ T5869] usb 2-1: config 0 descriptor?? [ 293.135417][ T9606] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 293.144476][ T5869] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 293.162469][ T5869] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 293.170713][ T5869] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 293.350270][ T9606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.359185][ T9606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.370082][ T7830] usb 2-1: USB disconnect, device number 72 [ 293.380708][ T7830] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 293.396191][ T7830] cyberjack 2-1:0.69: device disconnected [ 295.040126][ T5869] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 295.105415][ T9633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.115534][ T9633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.124301][ T9633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.142449][ T9633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.152041][ T9633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.160911][ T9633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.170169][ T9633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.179871][ T9633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.190811][ T9633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.200033][ T9633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.225010][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 295.231168][ T5869] usb 2-1: too many configurations: 216, using maximum allowed: 8 [ 295.263985][ T5869] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 295.272183][ T5869] usb 2-1: can't read configurations, error -61 [ 295.344968][ T947] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 295.404796][ T5869] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 295.498941][ T947] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 295.511167][ T947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.523581][ T947] usb 4-1: config 0 descriptor?? [ 295.554718][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 295.560833][ T5869] usb 2-1: too many configurations: 216, using maximum allowed: 8 [ 295.571753][ T5869] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 295.579839][ T5869] usb 2-1: can't read configurations, error -61 [ 295.587464][ T5869] usb usb2-port1: attempt power cycle [ 295.748921][ T947] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0e [ 295.760678][ T947] hackrf 4-1:0.0: Could not detect board [ 295.776890][ T947] hackrf 4-1:0.0: probe with driver hackrf failed with error -71 [ 295.796450][ T947] usb 4-1: USB disconnect, device number 73 [ 295.935046][ T5869] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 295.955692][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 295.962014][ T5869] usb 2-1: too many configurations: 216, using maximum allowed: 8 [ 295.972832][ T5869] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 295.983295][ T5869] usb 2-1: can't read configurations, error -61 [ 296.143803][ T5869] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 296.164240][ T9643] overlayfs: failed to clone upperpath [ 296.176159][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 296.185398][ T5869] usb 2-1: too many configurations: 216, using maximum allowed: 8 [ 296.198205][ T5869] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 296.206349][ T5869] usb 2-1: can't read configurations, error -61 [ 296.213029][ T5869] usb usb2-port1: unable to enumerate USB device [ 298.396926][ T9691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1237'. [ 298.444144][ T9693] netlink: 'syz.3.1238': attribute type 21 has an invalid length. [ 298.452790][ T9693] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1238'. [ 298.761576][ T30] audit: type=1326 audit(1764011401.863:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.3.1244" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e26b8f749 code=0x0 [ 298.817679][ T9611] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 298.847500][ T5869] usb 3-1: USB disconnect, device number 77 [ 298.954926][ T947] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 299.140044][ T947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 299.165427][ T947] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 299.188626][ T947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.213032][ T947] usb 2-1: config 0 descriptor?? [ 299.231244][ T9707] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 299.480016][ T9732] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 299.505587][ T30] audit: type=1326 audit(1764011402.613:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9731 comm="syz.2.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23c58f749 code=0x7fc00000 [ 299.530761][ T30] audit: type=1326 audit(1764011402.613:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9731 comm="syz.2.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23c58f749 code=0x7fc00000 [ 299.553922][ T30] audit: type=1326 audit(1764011402.613:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9731 comm="syz.2.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23c58f749 code=0x7fc00000 [ 299.577717][ T30] audit: type=1326 audit(1764011402.613:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9731 comm="syz.2.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23c58f749 code=0x7fc00000 [ 299.601192][ T30] audit: type=1326 audit(1764011402.613:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9731 comm="syz.2.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23c58f749 code=0x7fc00000 [ 299.644504][ T30] audit: type=1326 audit(1764011402.613:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9731 comm="syz.2.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23c58f749 code=0x7fc00000 [ 299.699397][ T947] kone 0003:1E7D:2CED.002A: item fetching failed at offset 3/5 [ 299.707674][ T30] audit: type=1326 audit(1764011402.613:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9731 comm="syz.2.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23c58f749 code=0x7fc00000 [ 299.731275][ T947] kone 0003:1E7D:2CED.002A: parse failed [ 299.738316][ T947] kone 0003:1E7D:2CED.002A: probe with driver kone failed with error -22 [ 299.754045][ T30] audit: type=1326 audit(1764011402.613:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9731 comm="syz.2.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23c58f749 code=0x7fc00000 [ 299.777563][ T30] audit: type=1326 audit(1764011402.613:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9731 comm="syz.2.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23c58f749 code=0x7fc00000 [ 300.179225][ T6865] usb 2-1: USB disconnect, device number 77 [ 301.496710][ T9819] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1275'. [ 301.745103][ T947] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 301.895108][ T947] usb 3-1: device descriptor read/64, error -71 [ 302.164706][ T947] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 302.304727][ T9] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 302.304727][ T947] usb 3-1: device descriptor read/64, error -71 [ 302.445829][ T947] usb usb3-port1: attempt power cycle [ 302.464988][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 302.476461][ T9] usb 2-1: New USB device found, idVendor=15c2, idProduct=0043, bcdDevice= 2.c9 [ 302.494749][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.503526][ T9] usb 2-1: Product: syz [ 302.509672][ T9] usb 2-1: Manufacturer: syz [ 302.514472][ T9] usb 2-1: SerialNumber: syz [ 302.524378][ T9] usb 2-1: config 0 descriptor?? [ 302.538141][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 302.547486][ T9] imon 2-1:0.0: unable to initialize intf0, err -19 [ 302.554226][ T9] imon:imon_probe: failed to initialize context! [ 302.561574][ T9] imon 2-1:0.0: unable to register, err -19 [ 302.815718][ T947] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 302.855264][ T947] usb 3-1: device descriptor read/8, error -71 [ 303.125005][ T947] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 303.156625][ T947] usb 3-1: device descriptor read/8, error -71 [ 303.278011][ T947] usb usb3-port1: unable to enumerate USB device [ 304.587625][ T9908] FAULT_INJECTION: forcing a failure. [ 304.587625][ T9908] name failslab, interval 1, probability 0, space 0, times 0 [ 304.601198][ T9908] CPU: 0 UID: 0 PID: 9908 Comm: syz.2.1305 Not tainted syzkaller #0 PREEMPT(full) [ 304.601224][ T9908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.601250][ T9908] Call Trace: [ 304.601260][ T9908] [ 304.601269][ T9908] dump_stack_lvl+0x189/0x250 [ 304.601301][ T9908] ? __pfx____ratelimit+0x10/0x10 [ 304.601327][ T9908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.601353][ T9908] ? __pfx__printk+0x10/0x10 [ 304.601385][ T9908] ? __pfx___might_resched+0x10/0x10 [ 304.601408][ T9908] ? fs_reclaim_acquire+0x7d/0x100 [ 304.601443][ T9908] should_fail_ex+0x414/0x560 [ 304.601476][ T9908] should_failslab+0xa8/0x100 [ 304.601502][ T9908] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 304.601535][ T9908] ? dup_task_struct+0x57/0x9a0 [ 304.601565][ T9908] dup_task_struct+0x57/0x9a0 [ 304.601589][ T9908] ? _raw_spin_unlock_irq+0x23/0x50 [ 304.601613][ T9908] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.601643][ T9908] copy_process+0x4ea/0x3950 [ 304.601696][ T9908] ? __pfx_copy_process+0x10/0x10 [ 304.601735][ T9908] vhost_task_create+0x1ce/0x320 [ 304.601762][ T9908] ? unwind_get_return_address+0x4d/0x90 [ 304.601788][ T9908] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 304.601816][ T9908] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 304.601846][ T9908] ? __pfx_vhost_task_create+0x10/0x10 [ 304.601883][ T9908] ? __pfx_vhost_task_fn+0x10/0x10 [ 304.601917][ T9908] ? stack_depot_save_flags+0x40/0x860 [ 304.601959][ T9908] kvm_mmu_post_init_vm+0x14c/0x300 [ 304.601994][ T9908] kvm_arch_vcpu_ioctl_run+0xdc/0x1cd0 [ 304.602023][ T9908] ? __mutex_trylock_common+0x153/0x260 [ 304.602054][ T9908] ? __pfx___mutex_trylock_common+0x10/0x10 [ 304.602082][ T9908] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 304.602112][ T9908] ? rcu_is_watching+0x15/0xb0 [ 304.602140][ T9908] ? trace_contention_end+0x39/0x120 [ 304.602167][ T9908] ? look_up_lock_class+0x74/0x170 [ 304.602195][ T9908] ? register_lock_class+0x51/0x320 [ 304.602224][ T9908] ? __lock_acquire+0xab9/0xd20 [ 304.602276][ T9908] kvm_vcpu_ioctl+0x99a/0xed0 [ 304.602313][ T9908] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 304.602368][ T9908] ? __fget_files+0x2a/0x420 [ 304.602399][ T9908] ? __fget_files+0x3a0/0x420 [ 304.602423][ T9908] ? __fget_files+0x2a/0x420 [ 304.602459][ T9908] ? bpf_lsm_file_ioctl+0x9/0x20 [ 304.602482][ T9908] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 304.602511][ T9908] __se_sys_ioctl+0xfc/0x170 [ 304.602545][ T9908] do_syscall_64+0xfa/0xfa0 [ 304.602574][ T9908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.602595][ T9908] ? clear_bhb_loop+0x60/0xb0 [ 304.602621][ T9908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.602641][ T9908] RIP: 0033:0x7fb23c58f749 [ 304.602660][ T9908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.602677][ T9908] RSP: 002b:00007fb23d4d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.602699][ T9908] RAX: ffffffffffffffda RBX: 00007fb23c7e5fa0 RCX: 00007fb23c58f749 [ 304.602715][ T9908] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 304.602727][ T9908] RBP: 00007fb23d4d6090 R08: 0000000000000000 R09: 0000000000000000 [ 304.602740][ T9908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.602752][ T9908] R13: 00007fb23c7e6038 R14: 00007fb23c7e5fa0 R15: 00007ffdd41c29a8 [ 304.602788][ T9908] [ 304.958778][ T9912] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1306'. [ 304.970247][ T9911] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1306'. [ 305.085451][ T6865] usb 2-1: USB disconnect, device number 78 [ 306.180321][ T9943] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1315'. [ 306.774665][ T9] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 306.926358][ T9971] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 307.003058][ T9975] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 307.004841][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 307.041271][ T9] usb 2-1: config 12 has an invalid interface number: 7 but max is 0 [ 307.051669][ T9] usb 2-1: config 12 has no interface number 0 [ 307.064709][ T9] usb 2-1: config 12 interface 7 has no altsetting 0 [ 307.071681][ T9971] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 307.103910][ T9] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 307.124320][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.148123][ T9] usb 2-1: Product: syz [ 307.182984][ T9] usb 2-1: Manufacturer: syz [ 307.193102][ T9] usb 2-1: SerialNumber: syz [ 307.484839][ T7830] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 307.510099][ T9] go7007 2-1:12.7: probe with driver go7007 failed with error -12 [ 308.062859][ T9] usb 2-1: USB disconnect, device number 79 [ 308.134711][ T7830] usb 4-1: Using ep0 maxpacket: 16 [ 308.142546][ T7830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.179583][ T7830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.211735][ T7830] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 308.241550][ T7830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.254670][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 308.283470][ T7830] usb 4-1: config 0 descriptor?? [ 308.288629][ T5833] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 308.733604][ T7830] hid-multitouch 0003:1FD2:6007.002B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 308.920233][T10008] binder: 10007:10008 ioctl c0306201 200000000080 returned -14 [ 308.950618][ T7830] usb 4-1: USB disconnect, device number 74 [ 309.320654][T10034] FAULT_INJECTION: forcing a failure. [ 309.320654][T10034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.336192][T10034] CPU: 1 UID: 0 PID: 10034 Comm: syz.2.1343 Not tainted syzkaller #0 PREEMPT(full) [ 309.336215][T10034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 309.336224][T10034] Call Trace: [ 309.336230][T10034] [ 309.336237][T10034] dump_stack_lvl+0x189/0x250 [ 309.336260][T10034] ? __pfx____ratelimit+0x10/0x10 [ 309.336278][T10034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.336297][T10034] ? __pfx__printk+0x10/0x10 [ 309.336314][T10034] ? __might_fault+0xb0/0x130 [ 309.336344][T10034] should_fail_ex+0x414/0x560 [ 309.336367][T10034] _copy_from_user+0x2d/0xb0 [ 309.336382][T10034] binder_ioctl_write_read+0xa51/0xa070 [ 309.336412][T10034] ? is_bpf_text_address+0x26/0x2b0 [ 309.336430][T10034] ? is_bpf_text_address+0x26/0x2b0 [ 309.336446][T10034] ? kernel_text_address+0xa5/0xe0 [ 309.336469][T10034] ? unwind_get_return_address+0x4d/0x90 [ 309.336496][T10034] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 309.336519][T10034] ? stack_trace_save+0x9c/0xe0 [ 309.336535][T10034] ? stack_depot_save_flags+0x40/0x860 [ 309.336559][T10034] ? kasan_save_track+0x4f/0x80 [ 309.336572][T10034] ? kasan_save_track+0x3e/0x80 [ 309.336584][T10034] ? kasan_save_free_info+0x46/0x50 [ 309.336602][T10034] ? __kasan_slab_free+0x5c/0x80 [ 309.336615][T10034] ? kfree+0x1c0/0x680 [ 309.336634][T10034] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 309.336651][T10034] ? security_file_ioctl+0xcb/0x2d0 [ 309.336666][T10034] ? __se_sys_ioctl+0x47/0x170 [ 309.336686][T10034] ? do_syscall_64+0xfa/0xfa0 [ 309.336703][T10034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.336730][T10034] ? __pfx_binder_debug+0x10/0x10 [ 309.336750][T10034] ? do_raw_spin_lock+0x121/0x290 [ 309.336783][T10034] ? _raw_spin_unlock+0x28/0x50 [ 309.336798][T10034] ? binder_get_thread+0x178/0x6d0 [ 309.336823][T10034] binder_ioctl+0x3c5/0x1a10 [ 309.336838][T10034] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 309.336859][T10034] ? do_vfs_ioctl+0xbe8/0x1430 [ 309.336887][T10034] ? __pfx_binder_ioctl+0x10/0x10 [ 309.336900][T10034] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 309.336949][T10034] ? __fget_files+0x2a/0x420 [ 309.336970][T10034] ? __fget_files+0x3a0/0x420 [ 309.336986][T10034] ? __fget_files+0x2a/0x420 [ 309.337006][T10034] ? bpf_lsm_file_ioctl+0x9/0x20 [ 309.337022][T10034] ? __pfx_binder_ioctl+0x10/0x10 [ 309.337035][T10034] __se_sys_ioctl+0xfc/0x170 [ 309.337058][T10034] do_syscall_64+0xfa/0xfa0 [ 309.337078][T10034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.337091][T10034] ? clear_bhb_loop+0x60/0xb0 [ 309.337109][T10034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.337122][T10034] RIP: 0033:0x7fb23c58f749 [ 309.337137][T10034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.337149][T10034] RSP: 002b:00007fb23d4d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.337165][T10034] RAX: ffffffffffffffda RBX: 00007fb23c7e5fa0 RCX: 00007fb23c58f749 [ 309.337176][T10034] RDX: 0000200000000300 RSI: 00000000c0306201 RDI: 0000000000000004 [ 309.337186][T10034] RBP: 00007fb23d4d6090 R08: 0000000000000000 R09: 0000000000000000 [ 309.337195][T10034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.337204][T10034] R13: 00007fb23c7e6038 R14: 00007fb23c7e5fa0 R15: 00007ffdd41c29a8 [ 309.337227][T10034] [ 309.337237][T10034] binder: 10033:10034 ioctl c0306201 200000000300 returned -14 [ 309.537840][T10036] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1344'. [ 309.689406][ T9] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 309.824659][ T9] usb 2-1: device descriptor read/64, error -71 [ 309.964635][ T6083] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 310.074681][ T9] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 310.116665][ T6083] usb 3-1: config 12 has an invalid interface number: 70 but max is 0 [ 310.135536][ T6083] usb 3-1: config 12 has no interface number 0 [ 310.142480][ T6083] usb 3-1: config 12 interface 70 altsetting 14 bulk endpoint 0x8A has invalid maxpacket 1024 [ 310.160699][ T6083] usb 3-1: config 12 interface 70 altsetting 14 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 310.174124][ T6083] usb 3-1: config 12 interface 70 has no altsetting 0 [ 310.185725][ T6083] usb 3-1: New USB device found, idVendor=0489, idProduct=b0bc, bcdDevice=2a.66 [ 310.197948][ T6083] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.206620][ T6083] usb 3-1: Product: syz [ 310.210948][ T6083] usb 3-1: Manufacturer: syz [ 310.217010][ T6083] usb 3-1: SerialNumber: syz [ 310.224996][ T9] usb 2-1: device descriptor read/64, error -71 [ 310.231981][T10041] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 310.345109][ T9] usb usb2-port1: attempt power cycle [ 310.398395][T10064] tipc: Enabling of bearer rejected, failed to enable media [ 310.468628][ T6083] usb 3-1: USB disconnect, device number 82 [ 310.684669][ T9] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 310.716742][ T9] usb 2-1: device descriptor read/8, error -71 [ 310.856516][T10084] overlayfs: failed to clone lowerpath [ 310.864086][T10084] overlayfs: failed to clone lowerpath [ 310.951360][T10086] fuse: blksize only supported for fuseblk [ 310.964697][ T9] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 310.985397][ T9] usb 2-1: device descriptor read/8, error -71 [ 311.073781][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1365'. [ 311.095104][ T9] usb usb2-port1: unable to enumerate USB device [ 311.754733][ T9] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 311.835540][ T6083] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 311.884782][ T9] usb 4-1: device descriptor read/64, error -71 [ 311.994773][ T6083] usb 3-1: Using ep0 maxpacket: 32 [ 312.005180][ T6083] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 312.014457][ T6083] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.023324][ T6083] usb 3-1: Product: syz [ 312.027576][ T6083] usb 3-1: Manufacturer: syz [ 312.032397][ T6083] usb 3-1: SerialNumber: syz [ 312.039454][ T6083] usb 3-1: config 0 descriptor?? [ 312.124697][ T9] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 312.247164][ T6083] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 312.254695][ T9] usb 4-1: device descriptor read/64, error -71 [ 312.256616][ T6083] eb aa 3b 80 9b e4 7a f0 [ 312.267030][ T6083] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 312.365384][ T9] usb usb4-port1: attempt power cycle [ 312.456579][ T6083] usb 3-1: USB disconnect, device number 83 [ 312.704693][ T9] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 312.735325][ T9] usb 4-1: device descriptor read/8, error -71 [ 312.984952][ T9] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 313.007645][ T9] usb 4-1: device descriptor read/8, error -71 [ 313.128567][ T9] usb usb4-port1: unable to enumerate USB device [ 313.680037][T10159] overlayfs: failed to clone upperpath [ 314.194732][ T6083] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 314.354773][ T6083] usb 3-1: Using ep0 maxpacket: 32 [ 314.361515][ T6083] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 314.369953][ T6083] usb 3-1: config 0 has no interface number 0 [ 314.378776][ T6083] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 314.388381][ T6083] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.396474][ T6083] usb 3-1: Product: syz [ 314.400675][ T6083] usb 3-1: Manufacturer: syz [ 314.405564][ T6083] usb 3-1: SerialNumber: syz [ 314.412389][ T6083] usb 3-1: config 0 descriptor?? [ 314.422169][ T6083] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 314.643346][ T6083] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 314.679400][ T6083] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 315.052771][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 315.053409][ T5876] usb 3-1: USB disconnect, device number 84 [ 315.086181][ T5876] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 315.124641][ T5912] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 315.132827][ T5876] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 315.154056][ T5876] quatech2 3-1:0.51: device disconnected [ 315.285832][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 315.294082][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.311894][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.322263][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 315.336551][ T5912] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 315.346560][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.366246][ T5912] usb 2-1: config 0 descriptor?? [ 315.791437][ T5912] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 315.799130][ T5912] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 315.809457][ T5912] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 315.816945][ T5912] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 315.824855][ T5912] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 315.832288][ T5912] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 315.839997][ T5912] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 315.850717][ T5912] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 315.859177][ T5912] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 315.867744][ T5912] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 315.896585][ T5912] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002C/input/input21 [ 316.117217][ T5912] microsoft 0003:045E:07DA.002C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 316.142920][ T5912] usb 2-1: USB disconnect, device number 84 [ 316.716494][ T5876] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 316.859061][T10236] syzkaller1: entered promiscuous mode [ 316.868078][T10236] syzkaller1: entered allmulticast mode [ 316.900406][ T5876] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 316.915069][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.923154][ T5876] usb 4-1: Product: syz [ 316.928517][ T5876] usb 4-1: Manufacturer: syz [ 316.933705][ T5876] usb 4-1: SerialNumber: syz [ 317.219302][T10255] /dev/nullb0: Can't lookup blockdev [ 317.350352][ T5876] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 317.369218][ T5876] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 317.581563][ T5876] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 317.593758][ T5876] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 317.609254][ T5876] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 317.619762][ T5876] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 318.341909][ T5876] usb 4-1: USB disconnect, device number 79 [ 318.378635][T10270] random: crng reseeded on system resumption [ 318.505860][T10273] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 318.673927][T10289] netlink: 'syz.3.1427': attribute type 142 has an invalid length. [ 318.799272][T10294] sctp: [Deprecated]: syz.3.1429 (pid 10294) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.799272][T10294] Use struct sctp_sack_info instead [ 318.887780][T10300] FAULT_INJECTION: forcing a failure. [ 318.887780][T10300] name failslab, interval 1, probability 0, space 0, times 0 [ 318.901547][T10300] CPU: 0 UID: 0 PID: 10300 Comm: syz.3.1430 Not tainted syzkaller #0 PREEMPT(full) [ 318.901585][T10300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.901597][T10300] Call Trace: [ 318.901605][T10300] [ 318.901614][T10300] dump_stack_lvl+0x189/0x250 [ 318.901646][T10300] ? __pfx____ratelimit+0x10/0x10 [ 318.901673][T10300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.901699][T10300] ? __pfx__printk+0x10/0x10 [ 318.901730][T10300] ? __pfx___might_resched+0x10/0x10 [ 318.901760][T10300] should_fail_ex+0x414/0x560 [ 318.901792][T10300] should_failslab+0xa8/0x100 [ 318.901819][T10300] __kmalloc_cache_noprof+0x84/0x700 [ 318.901840][T10300] ? comedi_8254_io_alloc+0xb0/0x290 [ 318.901883][T10300] comedi_8254_io_alloc+0xb0/0x290 [ 318.901913][T10300] ? __pfx_i8254_io8_cb+0x10/0x10 [ 318.901941][T10300] ? comedi_request_region+0x7b/0x180 [ 318.901970][T10300] pcl812_attach+0x121/0x2380 [ 318.902017][T10300] comedi_device_attach+0x51f/0x720 [ 318.902052][T10300] comedi_unlocked_ioctl+0x645/0x1020 [ 318.902072][T10300] ? kasan_quarantine_put+0xdd/0x220 [ 318.902101][T10300] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 318.902187][T10300] ? __fget_files+0x2a/0x420 [ 318.902218][T10300] ? __fget_files+0x3a0/0x420 [ 318.902241][T10300] ? __fget_files+0x2a/0x420 [ 318.902270][T10300] ? bpf_lsm_file_ioctl+0x9/0x20 [ 318.902292][T10300] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 318.902312][T10300] __se_sys_ioctl+0xfc/0x170 [ 318.902346][T10300] do_syscall_64+0xfa/0xfa0 [ 318.902373][T10300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.902393][T10300] ? clear_bhb_loop+0x60/0xb0 [ 318.902419][T10300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.902438][T10300] RIP: 0033:0x7f8e26b8f749 [ 318.902457][T10300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.902475][T10300] RSP: 002b:00007f8e279bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.902497][T10300] RAX: ffffffffffffffda RBX: 00007f8e26de5fa0 RCX: 00007f8e26b8f749 [ 318.902512][T10300] RDX: 0000200000000240 RSI: 0000000040946400 RDI: 0000000000000003 [ 318.902525][T10300] RBP: 00007f8e279bd090 R08: 0000000000000000 R09: 0000000000000000 [ 318.902538][T10300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.902550][T10300] R13: 00007f8e26de6038 R14: 00007f8e26de5fa0 R15: 00007ffc7e0abd58 [ 318.902583][T10300] [ 319.502554][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'. [ 319.514360][T10305] openvswitch: netlink: Missing key (keys=40, expected=80) [ 320.144864][ T6083] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 320.315463][ T6083] usb 3-1: Using ep0 maxpacket: 16 [ 320.322687][ T6083] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.334519][ T6083] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 320.348371][ T6083] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 320.374871][ T6083] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.404436][ T6083] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 320.420519][ T6083] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.429186][ T6083] usb 3-1: Product: syz [ 320.433486][ T6083] usb 3-1: Manufacturer: syz [ 320.442121][ T6083] usb 3-1: SerialNumber: syz [ 320.449340][ T6083] usb 3-1: config 0 descriptor?? [ 320.604624][ T6083] rc_core: IR keymap rc-xbox-dvd not found [ 320.610681][ T6083] Registered IR keymap rc-empty [ 320.636460][ T6083] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 320.666943][ T6083] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input22 [ 322.414008][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.530325][ T5883] usb 3-1: USB disconnect, device number 85 [ 322.530515][ C1] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 322.571151][T10373] sctp: [Deprecated]: syz.1.1453 (pid 10373) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.571151][T10373] Use struct sctp_sack_info instead [ 323.120465][T10393] FAULT_INJECTION: forcing a failure. [ 323.120465][T10393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.134995][T10393] CPU: 0 UID: 0 PID: 10393 Comm: syz.2.1458 Not tainted syzkaller #0 PREEMPT(full) [ 323.135025][T10393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 323.135038][T10393] Call Trace: [ 323.135047][T10393] [ 323.135060][T10393] dump_stack_lvl+0x189/0x250 [ 323.135090][T10393] ? __pfx____ratelimit+0x10/0x10 [ 323.135116][T10393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.135142][T10393] ? __pfx__printk+0x10/0x10 [ 323.135167][T10393] ? __might_fault+0xb0/0x130 [ 323.135205][T10393] should_fail_ex+0x414/0x560 [ 323.135234][T10393] _copy_from_user+0x2d/0xb0 [ 323.135256][T10393] __sys_sendto+0x260/0x540 [ 323.135279][T10393] ? __pfx___sys_sendto+0x10/0x10 [ 323.135324][T10393] ? exc_page_fault+0x82/0x100 [ 323.135361][T10393] __x64_sys_sendto+0xde/0x100 [ 323.135384][T10393] do_syscall_64+0xfa/0xfa0 [ 323.135413][T10393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.135435][T10393] ? clear_bhb_loop+0x60/0xb0 [ 323.135460][T10393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.135480][T10393] RIP: 0033:0x7fb23c5915dc [ 323.135500][T10393] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 323.135519][T10393] RSP: 002b:00007fb23d4d4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 323.135542][T10393] RAX: ffffffffffffffda RBX: 00007fb23d4d4fc0 RCX: 00007fb23c5915dc [ 323.135559][T10393] RDX: 0000000000000020 RSI: 00007fb23d4d5010 RDI: 0000000000000004 [ 323.135573][T10393] RBP: 0000000000000000 R08: 00007fb23d4d4f14 R09: 000000000000000c [ 323.135586][T10393] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 323.135599][T10393] R13: 00007fb23d4d4f68 R14: 00007fb23d4d5010 R15: 0000000000000000 [ 323.135633][T10393] [ 323.385102][T10395] Invalid ELF header magic: != ELF [ 323.519300][T10401] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1462'. [ 323.529587][T10401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1462'. [ 323.816543][T10407] sctp: [Deprecated]: syz.2.1464 (pid 10407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.816543][T10407] Use struct sctp_sack_info instead [ 324.049275][T10414] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1467'. [ 324.281754][T10421] FAULT_INJECTION: forcing a failure. [ 324.281754][T10421] name failslab, interval 1, probability 0, space 0, times 0 [ 324.326656][T10421] CPU: 1 UID: 0 PID: 10421 Comm: syz.1.1469 Not tainted syzkaller #0 PREEMPT(full) [ 324.326686][T10421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 324.326700][T10421] Call Trace: [ 324.326708][T10421] [ 324.326719][T10421] dump_stack_lvl+0x189/0x250 [ 324.326780][T10421] ? __pfx____ratelimit+0x10/0x10 [ 324.326806][T10421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.326833][T10421] ? __pfx__printk+0x10/0x10 [ 324.326861][T10421] ? __pfx___might_resched+0x10/0x10 [ 324.326886][T10421] ? fs_reclaim_acquire+0x7d/0x100 [ 324.326915][T10421] should_fail_ex+0x414/0x560 [ 324.326948][T10421] should_failslab+0xa8/0x100 [ 324.326975][T10421] kmem_cache_alloc_noprof+0x88/0x700 [ 324.327006][T10421] ? __kvm_mmu_topup_memory_cache+0x463/0x610 [ 324.327032][T10421] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 324.327061][T10421] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 324.327098][T10421] mmu_topup_memory_caches+0x21/0x170 [ 324.327127][T10421] kvm_mmu_load+0x9d/0x2300 [ 324.327159][T10421] ? __lock_acquire+0xab9/0xd20 [ 324.327194][T10421] ? kvm_vcpu_pre_fault_memory+0x15b/0x460 [ 324.327228][T10421] kvm_arch_vcpu_pre_fault_memory+0x640/0x740 [ 324.327266][T10421] kvm_vcpu_pre_fault_memory+0x229/0x460 [ 324.327299][T10421] ? kvm_vcpu_pre_fault_memory+0x15b/0x460 [ 324.327334][T10421] kvm_vcpu_ioctl+0x82f/0xed0 [ 324.327370][T10421] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 324.327423][T10421] ? __fget_files+0x2a/0x420 [ 324.327456][T10421] ? __fget_files+0x2a/0x420 [ 324.327486][T10421] ? bpf_lsm_file_ioctl+0x9/0x20 [ 324.327510][T10421] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 324.327539][T10421] __se_sys_ioctl+0xfc/0x170 [ 324.327573][T10421] do_syscall_64+0xfa/0xfa0 [ 324.327602][T10421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.327624][T10421] ? clear_bhb_loop+0x60/0xb0 [ 324.327650][T10421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.327669][T10421] RIP: 0033:0x7f534bd8f749 [ 324.327690][T10421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.327708][T10421] RSP: 002b:00007f534cbb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 324.327740][T10421] RAX: ffffffffffffffda RBX: 00007f534bfe5fa0 RCX: 00007f534bd8f749 [ 324.327756][T10421] RDX: 0000200000000000 RSI: 00000000c040aed5 RDI: 0000000000000006 [ 324.327771][T10421] RBP: 00007f534cbb2090 R08: 0000000000000000 R09: 0000000000000000 [ 324.327785][T10421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 324.327797][T10421] R13: 00007f534bfe6038 R14: 00007f534bfe5fa0 R15: 00007ffdf5898878 [ 324.327833][T10421] [ 325.030486][T10447] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1477'. [ 325.041255][T10447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1477'. [ 325.501488][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 325.501507][ T30] audit: type=1326 audit(1764011428.603:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.0.1486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f282e78f749 code=0x0 [ 326.224728][ T5883] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 326.329897][ T30] audit: type=1326 audit(1764011429.433:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e78f749 code=0x7fc00000 [ 326.352924][ T30] audit: type=1326 audit(1764011429.433:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f282e78f749 code=0x7fc00000 [ 326.376092][ T30] audit: type=1326 audit(1764011429.433:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e78f749 code=0x7fc00000 [ 326.400246][ T30] audit: type=1326 audit(1764011429.433:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e78f749 code=0x7fc00000 [ 326.424516][ T5883] usb 2-1: config index 0 descriptor too short (expected 215, got 45) [ 326.433090][ T30] audit: type=1326 audit(1764011429.433:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e78f749 code=0x7fc00000 [ 326.457817][ T5883] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 326.468211][ T30] audit: type=1326 audit(1764011429.433:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e78f749 code=0x7fc00000 [ 326.492126][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.501013][ T5883] usb 2-1: Product: syz [ 326.506160][ T5883] usb 2-1: Manufacturer: syz [ 326.512209][ T5883] usb 2-1: SerialNumber: syz [ 326.517045][ T30] audit: type=1326 audit(1764011429.433:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e78f749 code=0x7fc00000 [ 326.545022][ T30] audit: type=1326 audit(1764011429.433:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e78f749 code=0x7fc00000 [ 326.569430][ T30] audit: type=1326 audit(1764011429.433:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e78f749 code=0x7fc00000 [ 326.754796][T10491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.763906][T10491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.925687][T10509] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1496'. [ 326.935651][T10509] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1496'. [ 326.979292][ T5883] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 326.995024][ T5883] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 327.454846][ T7830] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 327.584800][ T7830] usb 4-1: device descriptor read/64, error -71 [ 327.599037][T10531] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1505'. [ 327.824745][ T7830] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 327.964717][ T7830] usb 4-1: device descriptor read/64, error -71 [ 328.074899][ T7830] usb usb4-port1: attempt power cycle [ 328.222643][T10491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1493'. [ 328.232776][ T5883] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 328.414659][ T7830] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 328.445910][ T7830] usb 4-1: device descriptor read/8, error -71 [ 328.655045][ T5883] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 328.668286][ T5883] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 328.680758][ T5883] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 328.690649][ T5883] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 328.699470][ T7830] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 328.709638][ T5883] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 328.727839][ T5883] usb 2-1: USB disconnect, device number 85 [ 328.736045][ T7830] usb 4-1: device descriptor read/8, error -71 [ 328.845046][ T7830] usb usb4-port1: unable to enumerate USB device [ 329.361496][T10559] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1510'. [ 329.372690][T10559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1510'. [ 330.304491][T10571] syz.1.1516 (10571): drop_caches: 2 [ 330.725445][ T6865] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 331.000260][ T6865] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.126689][ T6865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.224288][ T6865] usb 4-1: Product: syz [ 331.249947][ T6865] usb 4-1: Manufacturer: syz [ 331.279470][ T6865] usb 4-1: SerialNumber: syz [ 331.640572][T10606] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 331.649146][T10606] overlayfs: missing 'lowerdir' [ 331.657871][T10606] input: syz0 as /devices/virtual/input/input23 [ 331.754636][ T6083] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 331.935806][ T6083] usb 3-1: Using ep0 maxpacket: 16 [ 331.945067][ T6083] usb 3-1: config 0 has an invalid interface number: 250 but max is 0 [ 331.953449][ T6083] usb 3-1: config 0 has no interface number 0 [ 331.960614][ T6083] usb 3-1: config 0 interface 250 altsetting 229 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 331.972306][ T6083] usb 3-1: config 0 interface 250 has no altsetting 0 [ 331.982803][ T6083] usb 3-1: New USB device found, idVendor=0eb0, idProduct=3457, bcdDevice=32.8e [ 331.992804][ T6083] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.001549][ T6083] usb 3-1: Product: syz [ 332.006479][ T6083] usb 3-1: Manufacturer: syz [ 332.011153][ T6083] usb 3-1: SerialNumber: syz [ 332.020718][ T6083] usb 3-1: config 0 descriptor?? [ 332.246662][ T6083] cxacru 3-1:0.250: cxacru_bind: interface has incorrect endpoints [ 332.259669][ T6083] cxacru 3-1:0.250: usbatm_usb_probe: bind failed: -19! [ 332.273952][ T6083] usb 3-1: USB disconnect, device number 86 [ 332.388113][T10584] pimreg: entered allmulticast mode [ 332.399019][T10584] pimreg: left allmulticast mode [ 332.997502][T10651] overlayfs: failed to clone upperpath [ 333.338970][T10665] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1551'. [ 333.451698][T10669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.461427][T10669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.514735][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 333.687215][ T9] usb 3-1: config 0 has an invalid interface number: 74 but max is 0 [ 333.698126][ T9] usb 3-1: config 0 has no interface number 0 [ 333.708221][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99 [ 333.720791][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.729419][ T9] usb 3-1: Product: syz [ 333.733807][ T9] usb 3-1: Manufacturer: syz [ 333.738667][ T9] usb 3-1: SerialNumber: syz [ 333.754263][ T9] usb 3-1: config 0 descriptor?? [ 333.958852][ T7830] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 334.135532][ T7830] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 334.153725][ T7830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.162989][ T7830] usb 2-1: Product: syz [ 334.169316][ T7830] usb 2-1: Manufacturer: syz [ 334.171134][ T5912] usb 3-1: USB disconnect, device number 87 [ 334.173957][ T7830] usb 2-1: SerialNumber: syz [ 334.187525][ T5912] f81534a_ctrl 3-1:0.74: failed to set register 0x116: -19 [ 334.207027][ T5912] f81534a_ctrl 3-1:0.74: failed to enable ports: -19 [ 334.848509][T10714] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffd [ 334.889710][T10714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.922604][T10714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.227491][T10677] pimreg: entered allmulticast mode [ 335.237813][T10677] pimreg: left allmulticast mode [ 336.599914][T10765] kvm: pic: non byte read [ 336.604341][T10765] kvm: pic: non byte read [ 336.619775][T10765] kvm: pic: non byte read [ 336.726447][T10765] kvm: pic: non byte read [ 336.741425][T10765] kvm: pic: non byte read [ 336.764610][T10765] kvm: pic: non byte read [ 336.769393][T10765] kvm: pic: non byte read [ 336.895839][ T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 337.079885][T10765] x_tables: unsorted entry at hook 1 [ 337.086277][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 337.086311][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.086334][ T9] usb 3-1: Product: syz [ 337.086376][ T9] usb 3-1: Manufacturer: syz [ 337.086393][ T9] usb 3-1: SerialNumber: syz [ 337.216155][ T6865] cdc_ncm 4-1:1.0: failed to get mac address [ 337.228276][ T6865] cdc_ncm 4-1:1.0: bind() failure [ 337.252196][ T6865] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -32 [ 337.270103][ T6865] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -32 [ 337.303713][ T6865] usbtest 4-1:1.1: probe with driver usbtest failed with error -32 [ 337.321410][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 337.387010][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 337.475945][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 337.517410][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 337.545277][ T9] usb 3-1: USB disconnect, device number 88 [ 337.685288][T10798] syz.3.1603 (10798): drop_caches: 2 [ 337.845049][ T9] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 338.016448][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 338.038617][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.051379][ T9] usb 3-1: Product: syz [ 338.065059][ T9] usb 3-1: Manufacturer: syz [ 338.071654][ T9] usb 3-1: SerialNumber: syz [ 338.284130][T10818] Invalid logical block size (2) [ 338.546006][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 338.610781][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 339.327559][T10834] Invalid logical block size (50331648) [ 339.618634][T10844] syz.1.1616 (10844): drop_caches: 2 [ 339.727357][T10849] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1619'. [ 339.938365][T10856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.951876][T10856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.970631][T10856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.981367][T10856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.996149][T10856] netlink: zone id is out of range [ 340.061906][T10860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.072924][T10860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.076862][T10856] netlink: set zone limit has 4 unknown bytes [ 340.088043][ T7830] cdc_ncm 2-1:1.0: failed to get mac address [ 340.106271][ T7830] cdc_ncm 2-1:1.0: bind() failure [ 340.125758][ T7830] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -32 [ 340.135409][ T7830] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -32 [ 340.145455][ T7830] usbtest 2-1:1.1: probe with driver usbtest failed with error -32 [ 341.457747][T10891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1636'. [ 341.489429][T10891] veth1: entered allmulticast mode [ 341.558537][T10892] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 341.565182][T10892] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 341.574220][T10892] vhci_hcd vhci_hcd.0: Device attached [ 341.582716][T10892] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(16) [ 341.589378][T10892] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 341.597323][T10892] vhci_hcd vhci_hcd.0: Device attached [ 341.609571][T10892] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(18) [ 341.616408][T10892] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 341.626328][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e8. ret = -EPROTO [ 341.641836][T10892] vhci_hcd vhci_hcd.0: Device attached [ 341.647745][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 341.658883][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 341.670468][T10892] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(20) [ 341.677140][T10892] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 341.686346][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 341.704897][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 341.714311][T10901] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1636'. [ 341.723936][T10892] vhci_hcd vhci_hcd.0: Device attached [ 341.744954][ T9] usb 3-1: USB disconnect, device number 89 [ 341.824938][ T5828] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 342.142371][T10917] tipc: Enabling of bearer rejected, failed to enable media [ 342.264765][ T10] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 342.279315][T10899] vhci_hcd: connection closed [ 342.279488][T10897] vhci_hcd: connection closed [ 342.280468][T10895] vhci_hcd: connection closed [ 342.289417][ T12] vhci_hcd vhci_hcd.1: stop threads [ 342.301078][T10893] vhci_hcd: connection reset by peer [ 342.307461][ T12] vhci_hcd vhci_hcd.1: release socket [ 342.313415][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 342.320959][ T12] vhci_hcd vhci_hcd.1: stop threads [ 342.327612][ T12] vhci_hcd vhci_hcd.1: release socket [ 342.333518][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 342.339520][ T12] vhci_hcd vhci_hcd.1: stop threads [ 342.345596][ T12] vhci_hcd vhci_hcd.1: release socket [ 342.351149][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 342.357224][ T12] vhci_hcd vhci_hcd.1: stop threads [ 342.362483][ T12] vhci_hcd vhci_hcd.1: release socket [ 342.369082][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 342.418506][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.429872][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.439983][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 342.449426][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.459915][ T10] usb 3-1: config 0 descriptor?? [ 342.876845][ T10] hid_parser_main: 5 callbacks suppressed [ 342.876870][ T10] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 342.897518][ T10] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 342.904622][ T10] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 342.912311][ T10] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 342.919565][ T10] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 342.928449][ T10] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 342.935572][ T10] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 342.945742][ T10] cp2112 0003:10C4:EA90.002D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 343.221610][ T10] cp2112 0003:10C4:EA90.002D: Part Number: 0x93 Device Version: 0x1F [ 343.432470][ T10] cp2112 0003:10C4:EA90.002D: error requesting SMBus config [ 343.847889][ T10] cp2112 0003:10C4:EA90.002D: probe with driver cp2112 failed with error -5 [ 344.057403][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.067398][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.075759][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.084110][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.091888][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.196282][T10938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.207067][T10938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.285167][T10938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.295011][T10938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.490245][T10934] chnl_net:caif_netlink_parms(): no params data found [ 344.575338][T10934] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.582585][T10934] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.589944][T10934] bridge_slave_0: entered allmulticast mode [ 344.598281][T10934] bridge_slave_0: entered promiscuous mode [ 344.606993][T10934] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.614205][T10934] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.624729][T10934] bridge_slave_1: entered allmulticast mode [ 344.632175][T10934] bridge_slave_1: entered promiscuous mode [ 344.676309][T10934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.689222][T10934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.722461][ T3527] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.771486][T10934] team0: Port device team_slave_0 added [ 344.782125][T10934] team0: Port device team_slave_1 added [ 344.828884][ T3527] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.843928][T10934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.851809][T10934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.878103][T10934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.891797][T10934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.899033][T10934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.934610][T10934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.999415][ T3527] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.019316][T10948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.047071][T10948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.065548][T10948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.082075][T10948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.091112][ T3527] .`: (slave netdevsim0): Releasing backup interface [ 345.102262][ T3527] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.137496][T10934] hsr_slave_0: entered promiscuous mode [ 345.144122][T10934] hsr_slave_1: entered promiscuous mode [ 345.151082][T10934] debugfs: 'hsr0' already exists in 'hsr' [ 345.157824][T10934] Cannot create hsr debugfs directory [ 345.356556][ T3527] bridge_slave_1: left allmulticast mode [ 345.362744][ T3527] bridge_slave_1: left promiscuous mode [ 345.373967][ T3527] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.385882][ T3527] bridge_slave_0: left allmulticast mode [ 345.391553][ T3527] bridge_slave_0: left promiscuous mode [ 345.397494][ T3527] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.518328][ T7830] usb 3-1: USB disconnect, device number 90 [ 345.989946][ T3527] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.010867][ T3527] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.027796][ T3527] .` (unregistering): Released all slaves [ 346.175141][ T52] Bluetooth: hci4: command tx timeout [ 346.240238][ T3527] tipc: Left network mode [ 346.313943][ T3527] IPVS: stopping backup sync thread 7638 ... [ 346.399988][T10977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.411983][T10977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.425897][T10973] kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 346.468848][T10973] kvm: requested 109790 ns i8254 timer period limited to 200000 ns [ 346.506055][T10973] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 346.535038][T10973] kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 346.565446][T10973] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 346.614189][T10973] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 346.626438][T10973] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 346.639879][T10973] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 346.655549][T10973] kvm: requested 118171 ns i8254 timer period limited to 200000 ns [ 346.681632][T10973] kvm: requested 172647 ns i8254 timer period limited to 200000 ns [ 346.930052][ T3527] hsr_slave_0: left promiscuous mode [ 346.950842][ T3527] hsr_slave_1: left promiscuous mode [ 346.965279][ T5828] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 347.016187][ T3527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.023836][ T3527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.180401][ T3527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.188218][ T3527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.353990][ T3527] veth1_macvtap: left promiscuous mode [ 347.377450][ T3527] veth0_macvtap: left promiscuous mode [ 347.405236][ T3527] veth1_vlan: left promiscuous mode [ 347.414144][ T3527] veth0_vlan: left promiscuous mode [ 347.599430][ T3527] pimreg (unregistering): left allmulticast mode [ 348.219762][ T3527] team0 (unregistering): Port device team_slave_1 removed [ 348.251179][ T52] Bluetooth: hci4: command tx timeout [ 348.305108][ T3527] team0 (unregistering): Port device team_slave_0 removed [ 350.116453][T10934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 350.183594][T10934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 350.222614][T10934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 350.266618][T10934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 350.343316][ T52] Bluetooth: hci4: command tx timeout [ 350.425099][T11051] netlink: 'syz.1.1675': attribute type 4 has an invalid length. [ 350.453425][T11051] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1675'. [ 350.650399][T10934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.709301][T10934] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.769020][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.776414][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.819137][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.826508][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.079394][T11079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.106022][T11079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.249916][T11089] loop8: detected capacity change from 0 to 8 [ 351.261315][T11089] Dev loop8: unable to read RDB block 8 [ 351.272849][T11089] loop8: unable to read partition table [ 351.279915][T11089] loop8: partition table beyond EOD, truncated [ 351.304621][T11089] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 352.027730][T11096] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1683'. [ 352.082000][T10934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.269442][T10934] veth0_vlan: entered promiscuous mode [ 352.307345][T10934] veth1_vlan: entered promiscuous mode [ 352.373426][T10934] veth0_macvtap: entered promiscuous mode [ 352.394115][T10934] veth1_macvtap: entered promiscuous mode [ 352.404892][ T52] Bluetooth: hci4: command tx timeout [ 352.455570][T11112] FAULT_INJECTION: forcing a failure. [ 352.455570][T11112] name failslab, interval 1, probability 0, space 0, times 0 [ 352.485351][T11112] CPU: 1 UID: 0 PID: 11112 Comm: syz.1.1689 Not tainted syzkaller #0 PREEMPT(full) [ 352.485379][T11112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 352.485393][T11112] Call Trace: [ 352.485402][T11112] [ 352.485412][T11112] dump_stack_lvl+0x189/0x250 [ 352.485442][T11112] ? __pfx____ratelimit+0x10/0x10 [ 352.485468][T11112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.485495][T11112] ? __pfx__printk+0x10/0x10 [ 352.485526][T11112] ? __pfx___might_resched+0x10/0x10 [ 352.485549][T11112] ? fs_reclaim_acquire+0x7d/0x100 [ 352.485578][T11112] should_fail_ex+0x414/0x560 [ 352.485612][T11112] should_failslab+0xa8/0x100 [ 352.485637][T11112] __kmalloc_noprof+0xdf/0x800 [ 352.485658][T11112] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 352.485688][T11112] ? rcu_is_watching+0x15/0xb0 [ 352.485719][T11112] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 352.485758][T11112] genl_family_rcv_msg_doit+0xb8/0x300 [ 352.485797][T11112] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 352.485837][T11112] ? apparmor_capable+0x137/0x1b0 [ 352.485863][T11112] ? bpf_lsm_capable+0x9/0x20 [ 352.485888][T11112] ? security_capable+0x7e/0x2e0 [ 352.485925][T11112] genl_rcv_msg+0x60e/0x790 [ 352.485960][T11112] ? __pfx_genl_rcv_msg+0x10/0x10 [ 352.485996][T11112] ? ref_tracker_free+0x63a/0x7d0 [ 352.486024][T11112] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 352.486051][T11112] ? ____sys_sendmsg+0x577/0x8b0 [ 352.486072][T11112] ? ___sys_sendmsg+0x21f/0x2a0 [ 352.486093][T11112] ? __x64_sys_sendmsg+0x19b/0x260 [ 352.486115][T11112] ? do_syscall_64+0xfa/0xfa0 [ 352.486140][T11112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.486172][T11112] netlink_rcv_skb+0x208/0x470 [ 352.486193][T11112] ? __lock_acquire+0xab9/0xd20 [ 352.486216][T11112] ? __pfx_genl_rcv_msg+0x10/0x10 [ 352.486248][T11112] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 352.486292][T11112] ? down_read+0x1ad/0x2e0 [ 352.486324][T11112] genl_rcv+0x28/0x40 [ 352.486352][T11112] netlink_unicast+0x82f/0x9e0 [ 352.486384][T11112] ? __pfx_netlink_unicast+0x10/0x10 [ 352.486408][T11112] ? netlink_sendmsg+0x642/0xb30 [ 352.486430][T11112] ? skb_put+0x11b/0x210 [ 352.486455][T11112] netlink_sendmsg+0x805/0xb30 [ 352.486490][T11112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.486516][T11112] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 352.486560][T11112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.486582][T11112] sock_sendmsg_nosec+0x18f/0x1d0 [ 352.486615][T11112] ____sys_sendmsg+0x577/0x8b0 [ 352.486651][T11112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.486690][T11112] ? import_iovec+0x74/0xa0 [ 352.486715][T11112] ___sys_sendmsg+0x21f/0x2a0 [ 352.486743][T11112] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.486808][T11112] ? __fget_files+0x2a/0x420 [ 352.486834][T11112] ? __fget_files+0x3a0/0x420 [ 352.486872][T11112] __x64_sys_sendmsg+0x19b/0x260 [ 352.486900][T11112] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 352.486936][T11112] ? __pfx_ksys_write+0x10/0x10 [ 352.486961][T11112] ? do_syscall_64+0xbe/0xfa0 [ 352.486997][T11112] do_syscall_64+0xfa/0xfa0 [ 352.487022][T11112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.487041][T11112] ? clear_bhb_loop+0x60/0xb0 [ 352.487062][T11112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.487082][T11112] RIP: 0033:0x7f534bd8f749 [ 352.487101][T11112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.487120][T11112] RSP: 002b:00007f534cbb2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.487142][T11112] RAX: ffffffffffffffda RBX: 00007f534bfe5fa0 RCX: 00007f534bd8f749 [ 352.487157][T11112] RDX: 0000000002000000 RSI: 0000200000000400 RDI: 0000000000000008 [ 352.487172][T11112] RBP: 00007f534cbb2090 R08: 0000000000000000 R09: 0000000000000000 [ 352.487185][T11112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.487197][T11112] R13: 00007f534bfe6038 R14: 00007f534bfe5fa0 R15: 00007ffdf5898878 [ 352.487233][T11112] [ 352.498674][T10934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.944321][T10934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.968360][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.984062][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.004299][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.026293][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.034245][ T8033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.062844][ T3463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.072969][ T8033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.088229][ T3463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.308055][T11146] FAULT_INJECTION: forcing a failure. [ 354.308055][T11146] name failslab, interval 1, probability 0, space 0, times 0 [ 354.322089][T11146] CPU: 0 UID: 0 PID: 11146 Comm: syz.0.1651 Not tainted syzkaller #0 PREEMPT(full) [ 354.322120][T11146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 354.322134][T11146] Call Trace: [ 354.322145][T11146] [ 354.322154][T11146] dump_stack_lvl+0x189/0x250 [ 354.322185][T11146] ? __pfx____ratelimit+0x10/0x10 [ 354.322211][T11146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.322238][T11146] ? __pfx__printk+0x10/0x10 [ 354.322270][T11146] ? __pfx___might_resched+0x10/0x10 [ 354.322301][T11146] should_fail_ex+0x414/0x560 [ 354.322335][T11146] should_failslab+0xa8/0x100 [ 354.322362][T11146] __kmalloc_node_noprof+0xe7/0x810 [ 354.322384][T11146] ? __vmalloc_node_range_noprof+0x5df/0x16a0 [ 354.322412][T11146] __vmalloc_node_range_noprof+0x5df/0x16a0 [ 354.322471][T11146] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 354.322515][T11146] ? memcpy_and_pad+0x48/0x80 [ 354.322545][T11146] __vmalloc_node_noprof+0xc2/0x110 [ 354.322566][T11146] ? copy_process+0x4ea/0x3950 [ 354.322589][T11146] ? copy_process+0x4ea/0x3950 [ 354.322616][T11146] dup_task_struct+0x228/0x9a0 [ 354.322649][T11146] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.322673][T11146] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.322704][T11146] copy_process+0x4ea/0x3950 [ 354.322757][T11146] ? __pfx_copy_process+0x10/0x10 [ 354.322797][T11146] vhost_task_create+0x1ce/0x320 [ 354.322826][T11146] ? unwind_get_return_address+0x4d/0x90 [ 354.322852][T11146] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 354.322883][T11146] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 354.322912][T11146] ? __pfx_vhost_task_create+0x10/0x10 [ 354.322952][T11146] ? __pfx_vhost_task_fn+0x10/0x10 [ 354.322987][T11146] ? stack_depot_save_flags+0x40/0x860 [ 354.323032][T11146] kvm_mmu_post_init_vm+0x14c/0x300 [ 354.323065][T11146] kvm_arch_vcpu_ioctl_run+0xdc/0x1cd0 [ 354.323096][T11146] ? __mutex_trylock_common+0x153/0x260 [ 354.323125][T11146] ? __pfx___mutex_trylock_common+0x10/0x10 [ 354.323153][T11146] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 354.323175][T11146] ? rcu_is_watching+0x15/0xb0 [ 354.323203][T11146] ? trace_contention_end+0x39/0x120 [ 354.323230][T11146] ? look_up_lock_class+0x74/0x170 [ 354.323258][T11146] ? register_lock_class+0x51/0x320 [ 354.323288][T11146] ? __lock_acquire+0xab9/0xd20 [ 354.323344][T11146] kvm_vcpu_ioctl+0x99a/0xed0 [ 354.323381][T11146] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 354.323437][T11146] ? __fget_files+0x2a/0x420 [ 354.323469][T11146] ? __fget_files+0x3a0/0x420 [ 354.323493][T11146] ? __fget_files+0x2a/0x420 [ 354.323523][T11146] ? bpf_lsm_file_ioctl+0x9/0x20 [ 354.323547][T11146] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 354.323576][T11146] __se_sys_ioctl+0xfc/0x170 [ 354.323611][T11146] do_syscall_64+0xfa/0xfa0 [ 354.323640][T11146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.323668][T11146] ? clear_bhb_loop+0x60/0xb0 [ 354.323692][T11146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.323711][T11146] RIP: 0033:0x7f2b2438f749 [ 354.323732][T11146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.323750][T11146] RSP: 002b:00007f2b251e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.323774][T11146] RAX: ffffffffffffffda RBX: 00007f2b245e5fa0 RCX: 00007f2b2438f749 [ 354.323789][T11146] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 354.323802][T11146] RBP: 00007f2b251e1090 R08: 0000000000000000 R09: 0000000000000000 [ 354.323815][T11146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.323827][T11146] R13: 00007f2b245e6038 R14: 00007f2b245e5fa0 R15: 00007ffc23f62f48 [ 354.323860][T11146] [ 354.324240][T11146] syz.0.1651: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 354.711496][T11146] CPU: 1 UID: 0 PID: 11146 Comm: syz.0.1651 Not tainted syzkaller #0 PREEMPT(full) [ 354.711526][T11146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 354.711540][T11146] Call Trace: [ 354.711550][T11146] [ 354.711559][T11146] dump_stack_lvl+0x189/0x250 [ 354.711590][T11146] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 354.711615][T11146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.711642][T11146] ? __pfx__printk+0x10/0x10 [ 354.711668][T11146] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 354.711694][T11146] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 354.711729][T11146] warn_alloc+0x214/0x310 [ 354.711751][T11146] ? __pfx___might_resched+0x10/0x10 [ 354.711781][T11146] ? __pfx_warn_alloc+0x10/0x10 [ 354.711800][T11146] ? should_fail_ex+0x2ff/0x560 [ 354.711841][T11146] ? rcu_is_watching+0x15/0xb0 [ 354.711870][T11146] ? trace_kmalloc+0x1f/0xd0 [ 354.711886][T11146] ? __kmalloc_node_noprof+0x595/0x810 [ 354.711906][T11146] ? __vmalloc_node_range_noprof+0x5df/0x16a0 [ 354.711933][T11146] __vmalloc_node_range_noprof+0x97d/0x16a0 [ 354.711986][T11146] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 354.712025][T11146] ? memcpy_and_pad+0x48/0x80 [ 354.712052][T11146] __vmalloc_node_noprof+0xc2/0x110 [ 354.712071][T11146] ? copy_process+0x4ea/0x3950 [ 354.712092][T11146] ? copy_process+0x4ea/0x3950 [ 354.712117][T11146] dup_task_struct+0x228/0x9a0 [ 354.712140][T11146] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.712163][T11146] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.712192][T11146] copy_process+0x4ea/0x3950 [ 354.712245][T11146] ? __pfx_copy_process+0x10/0x10 [ 354.712284][T11146] vhost_task_create+0x1ce/0x320 [ 354.712311][T11146] ? unwind_get_return_address+0x4d/0x90 [ 354.712336][T11146] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 354.712365][T11146] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 354.712395][T11146] ? __pfx_vhost_task_create+0x10/0x10 [ 354.712430][T11146] ? __pfx_vhost_task_fn+0x10/0x10 [ 354.712463][T11146] ? stack_depot_save_flags+0x40/0x860 [ 354.712505][T11146] kvm_mmu_post_init_vm+0x14c/0x300 [ 354.712540][T11146] kvm_arch_vcpu_ioctl_run+0xdc/0x1cd0 [ 354.712570][T11146] ? __mutex_trylock_common+0x153/0x260 [ 354.712601][T11146] ? __pfx___mutex_trylock_common+0x10/0x10 [ 354.712630][T11146] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 354.712653][T11146] ? rcu_is_watching+0x15/0xb0 [ 354.712680][T11146] ? trace_contention_end+0x39/0x120 [ 354.712708][T11146] ? look_up_lock_class+0x74/0x170 [ 354.712737][T11146] ? register_lock_class+0x51/0x320 [ 354.712766][T11146] ? __lock_acquire+0xab9/0xd20 [ 354.712822][T11146] kvm_vcpu_ioctl+0x99a/0xed0 [ 354.712866][T11146] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 354.712922][T11146] ? __fget_files+0x2a/0x420 [ 354.712955][T11146] ? __fget_files+0x3a0/0x420 [ 354.712980][T11146] ? __fget_files+0x2a/0x420 [ 354.713010][T11146] ? bpf_lsm_file_ioctl+0x9/0x20 [ 354.713034][T11146] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 354.713064][T11146] __se_sys_ioctl+0xfc/0x170 [ 354.713100][T11146] do_syscall_64+0xfa/0xfa0 [ 354.713150][T11146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.713171][T11146] ? clear_bhb_loop+0x60/0xb0 [ 354.713197][T11146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.713218][T11146] RIP: 0033:0x7f2b2438f749 [ 354.713237][T11146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.713257][T11146] RSP: 002b:00007f2b251e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.713281][T11146] RAX: ffffffffffffffda RBX: 00007f2b245e5fa0 RCX: 00007f2b2438f749 [ 354.713297][T11146] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 354.713310][T11146] RBP: 00007f2b251e1090 R08: 0000000000000000 R09: 0000000000000000 [ 354.713324][T11146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.713337][T11146] R13: 00007f2b245e6038 R14: 00007f2b245e5fa0 R15: 00007ffc23f62f48 [ 354.713385][T11146] [ 354.713404][T11146] Mem-Info: [ 355.123402][T11146] active_anon:8917 inactive_anon:0 isolated_anon:0 [ 355.123402][T11146] active_file:14327 inactive_file:40050 isolated_file:0 [ 355.123402][T11146] unevictable:768 dirty:95 writeback:0 [ 355.123402][T11146] slab_reclaimable:7073 slab_unreclaimable:90609 [ 355.123402][T11146] mapped:28469 shmem:4237 pagetables:1384 [ 355.123402][T11146] sec_pagetables:0 bounce:0 [ 355.123402][T11146] kernel_misc_reclaimable:0 [ 355.123402][T11146] free:1326422 free_pcp:15889 free_cma:0 [ 355.172169][T11146] Node 0 active_anon:35660kB inactive_anon:0kB active_file:57036kB inactive_file:160000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113604kB dirty:376kB writeback:0kB shmem:15404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12108kB pagetables:5376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 355.205363][T11146] Node 1 active_anon:8kB inactive_anon:0kB active_file:272kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:272kB dirty:4kB writeback:0kB shmem:1544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 355.250074][T11146] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.312595][T11146] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 355.329283][T11146] Node 0 DMA32 free:1421756kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29160kB inactive_anon:0kB active_file:57036kB inactive_file:160000kB unevictable:1536kB writepending:376kB zspages:0kB present:3129332kB managed:2551432kB mlocked:0kB bounce:0kB free_pcp:38144kB local_pcp:16640kB free_cma:0kB [ 355.394058][T11146] lowmem_reserve[]: 0 0 0 0 0 [ 355.399523][T11146] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.430497][T11146] lowmem_reserve[]: 0 0 0 0 0 [ 355.438782][T11146] Node 1 Normal free:3868572kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:272kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:31740kB local_pcp:10644kB free_cma:0kB [ 355.474205][T11146] lowmem_reserve[]: 0 0 0 0 0 [ 355.480139][T11154] openvswitch: netlink: Actions may not be safe on all matching packets [ 355.490513][T11146] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 355.528356][T11146] Node 0 DMA32: 3805*4kB (UME) 2245*8kB (UME) 809*16kB (UME) 478*32kB (UME) 216*64kB (UME) 121*128kB (UME) 50*256kB (UME) 26*512kB (UME) 13*1024kB (UME) 6*2048kB (UME) 313*4096kB (UM) = 1424492kB [ 355.557887][T11146] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 355.571475][T11146] Node 1 Normal: 188*4kB (UME) 44*8kB (UME) 48*16kB (UME) 192*32kB (UME) 60*64kB (UME) 11*128kB (UM) 2*256kB (M) 3*512kB (ME) 1*1024kB (E) 1*2048kB (E) 940*4096kB (UM) = 3868624kB [ 355.602076][T11146] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.656716][T11146] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 355.666909][T11146] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.693705][T11146] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 355.716842][T11146] 57360 total pagecache pages [ 355.726165][T11146] 0 pages in swap cache [ 355.736043][T11146] Free swap = 124996kB [ 355.745057][T11146] Total swap = 124996kB [ 355.762825][T11146] 2097051 pages RAM [ 355.770274][T11146] 0 pages HighMem/MovableOnly [ 355.775608][T11146] 427423 pages reserved [ 355.779983][T11146] 0 pages cma reserved [ 356.648450][T11174] netlink: 'syz.1.1709': attribute type 11 has an invalid length. [ 356.661736][T11174] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1709'. [ 356.841822][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 356.841845][ T30] audit: type=1326 audit(1764011459.933:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534bd8f749 code=0x7ffc0000 [ 356.875398][ T30] audit: type=1326 audit(1764011459.933:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534bd8f749 code=0x7ffc0000 [ 356.910331][ T30] audit: type=1326 audit(1764011459.973:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534bd8f749 code=0x7ffc0000 [ 356.956367][ T30] audit: type=1326 audit(1764011459.983:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534bd8f749 code=0x7ffc0000 [ 356.981059][ T30] audit: type=1326 audit(1764011459.983:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f534bd8df90 code=0x7ffc0000 [ 357.031885][ T30] audit: type=1326 audit(1764011459.983:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534bd8f749 code=0x7ffc0000 [ 357.056216][ T30] audit: type=1326 audit(1764011459.983:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534bd8f749 code=0x7ffc0000 [ 357.081107][ T30] audit: type=1326 audit(1764011460.003:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534bd8f749 code=0x7ffc0000 [ 357.115601][ T30] audit: type=1326 audit(1764011460.003:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f534bd8f749 code=0x7ffc0000 [ 357.144878][ T30] audit: type=1326 audit(1764011460.003:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534bd8f749 code=0x7ffc0000 [ 357.369607][ T6083] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 357.576518][ T6083] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.593094][ T6083] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 357.608658][ T6083] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 357.623075][ T6083] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 357.634042][ T6083] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.692124][ T6083] usb 1-1: config 0 descriptor?? [ 357.713306][T11190] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 358.132065][T11203] netlink: 'syz.3.1719': attribute type 11 has an invalid length. [ 358.185655][ T6083] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 358.193884][ T6083] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 358.219344][T11207] FAULT_INJECTION: forcing a failure. [ 358.219344][T11207] name failslab, interval 1, probability 0, space 0, times 0 [ 358.235346][ T6083] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 358.259689][T11207] CPU: 1 UID: 0 PID: 11207 Comm: syz.1.1720 Not tainted syzkaller #0 PREEMPT(full) [ 358.259718][T11207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.259732][T11207] Call Trace: [ 358.259741][T11207] [ 358.259750][T11207] dump_stack_lvl+0x189/0x250 [ 358.259783][T11207] ? __pfx____ratelimit+0x10/0x10 [ 358.259809][T11207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.259837][T11207] ? __pfx__printk+0x10/0x10 [ 358.259869][T11207] ? __pfx___might_resched+0x10/0x10 [ 358.259898][T11207] should_fail_ex+0x414/0x560 [ 358.259932][T11207] should_failslab+0xa8/0x100 [ 358.259957][T11207] __kmalloc_noprof+0xdf/0x800 [ 358.259975][T11207] ? kfree+0x4d/0x680 [ 358.260001][T11207] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 358.260039][T11207] tomoyo_realpath_from_path+0xe3/0x5d0 [ 358.260074][T11207] ? tomoyo_domain+0xd8/0x130 [ 358.260103][T11207] tomoyo_path_perm+0x213/0x4b0 [ 358.260130][T11207] ? tomoyo_path_perm+0x1e3/0x4b0 [ 358.260156][T11207] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 358.260187][T11207] ? filemap_check_errors+0xd2/0x120 [ 358.260234][T11207] ? bdev_mark_dead+0x9f/0x170 [ 358.260257][T11207] security_inode_getattr+0x12f/0x330 [ 358.260277][T11207] vfs_getattr+0x23/0x70 [ 358.260299][T11207] loop_assign_backing_file+0x222/0x400 [ 358.260323][T11207] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 358.260342][T11207] ? bd_prepare_to_claim+0x3f1/0x490 [ 358.260386][T11207] ? __asan_memcpy+0x40/0x70 [ 358.260413][T11207] ? loop_set_status_from_info+0x185/0x250 [ 358.260435][T11207] loop_configure+0x858/0xe50 [ 358.260464][T11207] ? __pfx_loop_configure+0x10/0x10 [ 358.260511][T11207] lo_ioctl+0x806/0x1c50 [ 358.260537][T11207] ? __pfx_lo_ioctl+0x10/0x10 [ 358.260553][T11207] ? look_up_lock_class+0x74/0x170 [ 358.260577][T11207] ? register_lock_class+0x51/0x320 [ 358.260601][T11207] ? __lock_acquire+0xab9/0xd20 [ 358.260634][T11207] ? process_measurement+0x3d8/0x1a70 [ 358.260654][T11207] ? ima_match_policy+0x105/0x21b0 [ 358.260681][T11207] ? __lock_acquire+0xab9/0xd20 [ 358.260704][T11207] ? __lock_acquire+0xab9/0xd20 [ 358.260733][T11207] ? __lock_acquire+0xab9/0xd20 [ 358.260762][T11207] ? __lock_acquire+0xab9/0xd20 [ 358.260797][T11207] ? is_bpf_text_address+0x26/0x2b0 [ 358.260818][T11207] ? is_bpf_text_address+0x292/0x2b0 [ 358.260833][T11207] ? is_bpf_text_address+0x26/0x2b0 [ 358.260852][T11207] ? kernel_text_address+0xa5/0xe0 [ 358.260879][T11207] ? __kernel_text_address+0xd/0x40 [ 358.260903][T11207] ? unwind_get_return_address+0x4d/0x90 [ 358.260925][T11207] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 358.260942][T11207] ? arch_stack_walk+0xfc/0x150 [ 358.260973][T11207] ? stack_trace_save+0x9c/0xe0 [ 358.260991][T11207] ? stack_depot_save_flags+0x40/0x860 [ 358.261021][T11207] ? kasan_save_track+0x4f/0x80 [ 358.261035][T11207] ? kasan_save_track+0x3e/0x80 [ 358.261050][T11207] ? kasan_save_free_info+0x46/0x50 [ 358.261071][T11207] ? __kasan_slab_free+0x5c/0x80 [ 358.261087][T11207] ? kfree+0x1c0/0x680 [ 358.261109][T11207] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 358.261129][T11207] ? security_file_ioctl+0xcb/0x2d0 [ 358.261147][T11207] ? __se_sys_ioctl+0x47/0x170 [ 358.261171][T11207] ? do_syscall_64+0xfa/0xfa0 [ 358.261192][T11207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.261228][T11207] ? __asan_memset+0x22/0x50 [ 358.261253][T11207] ? blk_get_meta_cap+0x18c/0x750 [ 358.261284][T11207] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 358.261312][T11207] ? kasan_quarantine_put+0xdd/0x220 [ 358.261328][T11207] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.261360][T11207] ? blkdev_common_ioctl+0x100c/0x2570 [ 358.261381][T11207] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 358.261404][T11207] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 358.261422][T11207] ? do_vfs_ioctl+0xbe8/0x1430 [ 358.261447][T11207] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 358.261501][T11207] ? __pfx_lo_ioctl+0x10/0x10 [ 358.261520][T11207] blkdev_ioctl+0x60e/0x710 [ 358.261539][T11207] ? __pfx_blkdev_ioctl+0x10/0x10 [ 358.261554][T11207] ? __fget_files+0x3a0/0x420 [ 358.261574][T11207] ? __fget_files+0x2a/0x420 [ 358.261598][T11207] ? bpf_lsm_file_ioctl+0x9/0x20 [ 358.261622][T11207] ? __pfx_blkdev_ioctl+0x10/0x10 [ 358.261638][T11207] __se_sys_ioctl+0xfc/0x170 [ 358.261666][T11207] do_syscall_64+0xfa/0xfa0 [ 358.261689][T11207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.261705][T11207] ? clear_bhb_loop+0x60/0xb0 [ 358.261726][T11207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.261743][T11207] RIP: 0033:0x7f534bd8f749 [ 358.261759][T11207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.261774][T11207] RSP: 002b:00007f534cbb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.261793][T11207] RAX: ffffffffffffffda RBX: 00007f534bfe5fa0 RCX: 00007f534bd8f749 [ 358.261806][T11207] RDX: 0000200000001ac0 RSI: 0000000000004c0a RDI: 0000000000000004 [ 358.261817][T11207] RBP: 00007f534cbb2090 R08: 0000000000000000 R09: 0000000000000000 [ 358.261828][T11207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.261838][T11207] R13: 00007f534bfe6038 R14: 00007f534bfe5fa0 R15: 00007ffdf5898878 [ 358.261866][T11207] [ 358.262057][T11207] ERROR: Out of memory at tomoyo_realpath_from_path. [ 358.795675][T11207] loop6: detected capacity change from 0 to 524288000 [ 359.017483][T11219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.040976][T11219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.056728][T11219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.067684][T11219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.355610][ T7830] usb 1-1: USB disconnect, device number 40 [ 360.686721][T11253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.704296][T11253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.878223][T11263] syzkaller1: entered promiscuous mode [ 360.883916][T11263] syzkaller1: entered allmulticast mode [ 361.044692][ T7830] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 361.194632][ T7830] usb 1-1: Using ep0 maxpacket: 8 [ 361.202199][ T7830] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 361.211199][ T7830] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 361.224612][ T7830] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 361.236615][ T7830] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 361.246958][ T7830] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.260599][ T7830] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 361.270024][ T7830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.495899][ T7830] usb 1-1: usb_control_msg returned -32 [ 361.507715][ T7830] usbtmc 1-1:16.0: can't read capabilities [ 362.385305][T11285] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 362.504220][T11289] netlink: 'syz.3.1746': attribute type 83 has an invalid length. [ 362.530635][ T6083] usb 1-1: USB disconnect, device number 41 [ 362.648527][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1748'. [ 362.684773][T11291] program syz.1.1747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.842580][T11301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.871243][T11302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.897223][T11301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.908653][T11302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.134399][T11314] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1754'. [ 364.177453][ T5876] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 364.213938][ T5876] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 364.622636][T11349] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 364.654678][T11349] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1764'. [ 364.824643][ T6083] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 364.976801][ T6083] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.988716][ T6083] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 365.018246][ T6083] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 365.035045][ T6083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.047998][ T6083] usb 3-1: config 0 descriptor?? [ 365.337315][T11377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1770'. [ 365.467286][ T6083] belkin 0003:1020:0006.0030: unknown main item tag 0x1 [ 365.474464][ T6083] belkin 0003:1020:0006.0030: item fetching failed at offset 1/3 [ 365.483018][ T6083] belkin 0003:1020:0006.0030: parse failed [ 365.490410][ T6083] belkin 0003:1020:0006.0030: probe with driver belkin failed with error -22 [ 365.683940][ T6083] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 365.707834][ T6083] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 365.763408][T11389] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 365.791870][ C0] Oops: divide error: 0000 [#1] SMP KASAN PTI [ 365.794146][T11389] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 365.797975][ C0] CPU: 0 UID: 0 PID: 5824 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 365.815939][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.826047][ C0] RIP: 0010:comedi_inc_scan_progress+0x1a4/0x430 [ 365.832429][ C0] Code: b6 0c 19 84 c9 0f 85 bd 01 00 00 03 45 2c 4c 8d a5 80 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 cc 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 2b f7 f4 f8 48 bb 00 00 00 [ 365.852086][ C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00010046 [ 365.858287][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 365.866299][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 365.874415][ C0] RBP: ffff88807e9e7400 R08: 00000000000000ff R09: 00000000000000ff [ 365.882435][ C0] R10: dffffc0000000000 R11: ffffed100f82d601 R12: ffff88807e9e7480 [ 365.890451][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: ffff88807e9e742c [ 365.898467][ C0] FS: 0000555582033500(0000) GS:ffff888125a6e000(0000) knlGS:0000000000000000 [ 365.907448][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.914074][ C0] CR2: 000055558204e5c8 CR3: 0000000068088000 CR4: 00000000003526f0 [ 365.922096][ C0] DR0: ffffffffffffffff DR1: 0000000000000003 DR2: 0000000000000008 [ 365.930103][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 365.938110][ C0] Call Trace: [ 365.941419][ C0] [ 365.944291][ C0] comedi_buf_write_samples+0x373/0x5a0 [ 365.949883][ C0] das16m1_handler+0x213/0x4b0 [ 365.954780][ C0] das16m1_interrupt+0xaf/0x180 [ 365.959676][ C0] ? __pfx_das16m1_interrupt+0x10/0x10 [ 365.965183][ C0] __handle_irq_event_percpu+0x285/0xae0 [ 365.965839][T11387] fido_id[11387]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 365.970855][ C0] ? __lock_acquire+0xab9/0xd20 [ 365.970886][ C0] ? __pfx___handle_irq_event_percpu+0x10/0x10 [ 365.995474][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 366.000704][ C0] handle_irq_event+0x8b/0x1e0 [ 366.005486][ C0] ? handle_edge_irq+0x229/0xa10 [ 366.010524][ C0] handle_edge_irq+0x23b/0xa10 [ 366.015302][ C0] __common_interrupt+0x141/0x1f0 [ 366.020344][ C0] common_interrupt+0xb6/0xe0 [ 366.025043][ C0] [ 366.027996][ C0] [ 366.030929][ C0] asm_common_interrupt+0x26/0x40 [ 366.036011][ C0] RIP: 0010:memset_orig+0x72/0xb0 [ 366.041064][ C0] Code: 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 <48> 89 07 48 8d 7f 08 75 f5 83 e2 07 74 0a ff ca 88 07 48 8d 7f 01 [ 366.060679][ C0] RSP: 0018:ffffc900040ef950 EFLAGS: 00010202 [ 366.066842][ C0] RAX: 0000000000000000 RBX: 0000000000000c40 RCX: 0000000000000001 [ 366.074817][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffff8880792a7000 [ 366.082805][ C0] RBP: 0000000000000c40 R08: dffffc0000000000 R09: 0000000000000000 [ 366.090874][ C0] R10: ffff8880792a7000 R11: fffff5200081df66 R12: ffff88813fe27140 [ 366.098942][ C0] R13: 0000000000001000 R14: ffff8880792a7000 R15: 0000000000001000 [ 366.106974][ C0] kasan_save_alloc_info+0x3b/0x50 [ 366.112101][ C0] __kasan_kmalloc+0x93/0xb0 [ 366.116699][ C0] __kmalloc_noprof+0x41d/0x800 [ 366.121575][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 366.127314][ C0] tomoyo_realpath_from_path+0xe3/0x5d0 [ 366.132960][ C0] ? tomoyo_domain+0xd8/0x130 [ 366.137645][ C0] tomoyo_path_perm+0x213/0x4b0 [ 366.142591][ C0] ? leave_rcu+0xef/0x160 [ 366.146925][ C0] ? tomoyo_path_perm+0x1e3/0x4b0 [ 366.151954][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 366.157345][ C0] ? __pfx_current_check_access_path+0x10/0x10 [ 366.163513][ C0] ? __d_lookup+0x66/0x780 [ 366.167940][ C0] ? __d_lookup+0x66/0x780 [ 366.172373][ C0] ? __d_lookup+0x6df/0x780 [ 366.176896][ C0] tomoyo_path_unlink+0xa2/0xe0 [ 366.181753][ C0] ? __pfx_tomoyo_path_unlink+0x10/0x10 [ 366.187308][ C0] ? d_lookup+0x80/0xa0 [ 366.191479][ C0] security_path_unlink+0x167/0x360 [ 366.196694][ C0] do_unlinkat+0x24d/0x560 [ 366.201114][ C0] ? __pfx_do_unlinkat+0x10/0x10 [ 366.206140][ C0] ? strncpy_from_user+0x150/0x2c0 [ 366.211259][ C0] ? getname_flags+0x1e5/0x540 [ 366.216054][ C0] __x64_sys_unlink+0x47/0x50 [ 366.220733][ C0] do_syscall_64+0xfa/0xfa0 [ 366.225270][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.231342][ C0] ? clear_bhb_loop+0x60/0xb0 [ 366.236023][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.241946][ C0] RIP: 0033:0x7f534bd8ecf7 [ 366.246365][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.265986][ C0] RSP: 002b:00007ffdf5897b08 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 366.274498][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f534bd8ecf7 [ 366.282484][ C0] RDX: 00007ffdf5897b30 RSI: 00007ffdf5897bc0 RDI: 00007ffdf5897bc0 [ 366.290464][ C0] RBP: 00007ffdf5897bc0 R08: 0000000000000000 R09: 0000000000000000 [ 366.298476][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffdf5898c50 [ 366.306465][ C0] R13: 00007f534be13d7d R14: 0000000000059465 R15: 00007ffdf5898c90 [ 366.314550][ C0] [ 366.317603][ C0] Modules linked in: [ 366.321531][ C0] ---[ end trace 0000000000000000 ]--- [ 366.327088][ C0] RIP: 0010:comedi_inc_scan_progress+0x1a4/0x430 [ 366.333434][ C0] Code: b6 0c 19 84 c9 0f 85 bd 01 00 00 03 45 2c 4c 8d a5 80 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 cc 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 2b f7 f4 f8 48 bb 00 00 00 [ 366.353169][ C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00010046 [ 366.359251][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 366.367487][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 366.375466][ C0] RBP: ffff88807e9e7400 R08: 00000000000000ff R09: 00000000000000ff [ 366.383442][ C0] R10: dffffc0000000000 R11: ffffed100f82d601 R12: ffff88807e9e7480 [ 366.391505][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: ffff88807e9e742c [ 366.399479][ C0] FS: 0000555582033500(0000) GS:ffff888125a6e000(0000) knlGS:0000000000000000 [ 366.408411][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.415009][ C0] CR2: 000055558204e5c8 CR3: 0000000068088000 CR4: 00000000003526f0 [ 366.423078][ C0] DR0: ffffffffffffffff DR1: 0000000000000003 DR2: 0000000000000008 [ 366.431051][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 366.439034][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 366.446603][ C0] Kernel Offset: disabled [ 366.450958][ C0] Rebooting in 86400 seconds..