last executing test programs: 5.062055316s ago: executing program 3 (id=168): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000003c0)={0xb03, 0x3000, 0x0, r2}) 4.76546235s ago: executing program 3 (id=171): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb519864", 0x67}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d5100347", 0xa1}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc3", 0x88}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x3}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550f, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_usb_control_io$uac1(r2, &(0x7f0000000d00)={0x14, &(0x7f0000000c00)={0x40, 0x8, 0x88, {0x88, 0x31, "3cb83d2b44d4156958b0a498ca56e2e393b10b1637071a70f5c83e37eadea27318ee1641d92d2bdbb06c0caef69369176be207f6683dbff84a049258dafcc72d71a3fba83fbf61cf6d062cbef775337ba143be5b8a305ba649c825e3bb2e3cbc61c09400d4ad1aaefa3d18cf911df20e91a9820454d8db804c4416abbf49f9704d82246de207"}}, &(0x7f0000000cc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}}, &(0x7f0000001080)={0x44, &(0x7f0000000e00)={0x20, 0x14, 0xb8, "2e9e626fd2dd6a185b196c33b653d1e9184655ab9197e4c1eab0ea64a8f5b2f9c940657bb55b06b025753a76d2c2229e917e7ad3afd0a5b26953e6b8c1c68e92f4d74372aa4f9970600d013b8971d19fd66cee2b8c86fddf62857157351bff2b11477c5b39a7c9bebeebb76d49e24032579c4c35d22ae3cc21802c864e7e70148c663a3291c4dafcd0485614001b7feff40b2156fec0001ba00152296fd83707512318d46d0725784351b8bb54634a74a6d15841eca1ea93"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000f40)={0x20, 0x81, 0x1, 'L'}, &(0x7f0000000f80)={0x20, 0x82, 0x1, '/'}, &(0x7f0000000fc0)={0x20, 0x83, 0x1, ']'}, &(0x7f0000001000)={0x20, 0x84, 0x3, "543fe4"}, &(0x7f0000001040)={0x20, 0x85, 0x3, "8809eb"}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r4 = socket(0x2d, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000440)={0x2d, 0x2, 0x3fff}, 0xc) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x3e}, 0x10) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e040c1020"], 0x7) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x200, 0x5, 0x92, 0x80, 0x10, 0x8}, 0x5, &(0x7f0000000540)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x41b}}, {0x92, &(0x7f0000000680)=@string={0x92, 0x3, "36d22c7d81c73b3d1a21f0bc7765ea7b244e45de3509fb10039edc599a4e75554613eb91c32d03200672fbe2e6cc028ca974ea41889c139a40798bec7e7c71bf5134b6f24dc8d7d7c367a5f7831dc1d7e5c8ee5b0aa95aaa33b5959ac76df7193d974bfdc914647ffe42e31f14e15da788133ce795ab0b2ca1b70b257674bb60d76eb1c5eb268b7b5bccc6e911a52266"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x44e}}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) 3.831085918s ago: executing program 3 (id=177): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) sendmsg$kcm(r0, 0x0, 0x80) 3.662877894s ago: executing program 3 (id=179): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) poll(0x0, 0x0, 0xaca) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010a030000000000000000000700004a0900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0xfd14) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x4) fcntl$setlease(r2, 0x400, 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x2000}) 2.673517749s ago: executing program 3 (id=187): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) sendmsg$kcm(r0, 0x0, 0x80) 2.569925475s ago: executing program 0 (id=188): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x80000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x10000018}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001318034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.438455913s ago: executing program 0 (id=189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r2) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @private1}, @GTPA_FAMILY={0x5, 0xd, 0x29}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x90) 2.372954967s ago: executing program 3 (id=190): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) 1.942141926s ago: executing program 0 (id=194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.814282825s ago: executing program 1 (id=195): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x400f) ioctl$TCFLSH(r0, 0x400455c8, 0x1) 1.672568823s ago: executing program 2 (id=196): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a", 0x7b}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c", 0x90}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a", 0xc3}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838c", 0x79}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c", 0x89}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}], 0x2}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4], 0x6f4}}, 0x0) 1.651897462s ago: executing program 1 (id=197): r0 = syz_open_procfs(0x0, &(0x7f0000001700)='net/vlan/config\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/105, 0x69}], 0x1, 0x3, 0xffffffbf) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 1.569857037s ago: executing program 2 (id=198): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) sendmsg$kcm(r0, 0x0, 0x80) 1.342372811s ago: executing program 2 (id=199): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/address_bits', 0x143, 0x136) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000000000ffd, 0x0, 0x0, 0xd, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b06606000000000000162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/4120, 0x1018}], 0x1) 1.311350013s ago: executing program 0 (id=200): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac004000202080002000300", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 1.301858882s ago: executing program 1 (id=201): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/address_bits', 0x143, 0x136) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000000000ffd, 0x0, 0x0, 0xd, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b06606000000000000162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/4120, 0x1018}], 0x1) (fail_nth: 2) 1.172810027s ago: executing program 2 (id=202): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c040) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)) (async) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) (async) sendmmsg$inet(r1, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c040) (async) 1.022624255s ago: executing program 0 (id=203): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb519864", 0x67}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d5100347", 0xa1}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc3", 0x88}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x3}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550f, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_usb_control_io$uac1(r2, &(0x7f0000000d00)={0x14, &(0x7f0000000c00)={0x40, 0x8, 0x88, {0x88, 0x31, "3cb83d2b44d4156958b0a498ca56e2e393b10b1637071a70f5c83e37eadea27318ee1641d92d2bdbb06c0caef69369176be207f6683dbff84a049258dafcc72d71a3fba83fbf61cf6d062cbef775337ba143be5b8a305ba649c825e3bb2e3cbc61c09400d4ad1aaefa3d18cf911df20e91a9820454d8db804c4416abbf49f9704d82246de207"}}, &(0x7f0000000cc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}}, &(0x7f0000001080)={0x44, &(0x7f0000000e00)={0x20, 0x14, 0xb8, "2e9e626fd2dd6a185b196c33b653d1e9184655ab9197e4c1eab0ea64a8f5b2f9c940657bb55b06b025753a76d2c2229e917e7ad3afd0a5b26953e6b8c1c68e92f4d74372aa4f9970600d013b8971d19fd66cee2b8c86fddf62857157351bff2b11477c5b39a7c9bebeebb76d49e24032579c4c35d22ae3cc21802c864e7e70148c663a3291c4dafcd0485614001b7feff40b2156fec0001ba00152296fd83707512318d46d0725784351b8bb54634a74a6d15841eca1ea93"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000f40)={0x20, 0x81, 0x1, 'L'}, &(0x7f0000000f80)={0x20, 0x82, 0x1, '/'}, &(0x7f0000000fc0)={0x20, 0x83, 0x1, ']'}, &(0x7f0000001000)={0x20, 0x84, 0x3, "543fe4"}, &(0x7f0000001040)={0x20, 0x85, 0x3, "8809eb"}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r4 = socket(0x2d, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000440)={0x2d, 0x2, 0x3fff}, 0xc) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x3e}, 0x10) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e040c1020"], 0x7) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x200, 0x5, 0x92, 0x80, 0x10, 0x8}, 0x5, &(0x7f0000000540)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x41b}}, {0x92, &(0x7f0000000680)=@string={0x92, 0x3, "36d22c7d81c73b3d1a21f0bc7765ea7b244e45de3509fb10039edc599a4e75554613eb91c32d03200672fbe2e6cc028ca974ea41889c139a40798bec7e7c71bf5134b6f24dc8d7d7c367a5f7831dc1d7e5c8ee5b0aa95aaa33b5959ac76df7193d974bfdc914647ffe42e31f14e15da788133ce795ab0b2ca1b70b257674bb60d76eb1c5eb268b7b5bccc6e911a52266"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x44e}}]}) socket$nl_generic(0x10, 0x3, 0x10) 758.040601ms ago: executing program 2 (id=204): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@empty, @loopback, 0x0}, &(0x7f0000000180)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x104, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x827bf71b8f844b93}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x0, 0x2}, {0x9}}}}, 0xf) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket(0x22, 0x3, 0x11) sendmsg$netlink(r1, &(0x7f0000000800)={&(0x7f00000003c0)=@proc={0x10, 0x0, 0x4, 0x400000}, 0xc, &(0x7f00000006c0)=[{&(0x7f0000000400)={0x290, 0x2d, 0x300, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x14, 0x3, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x1ce, 0x10d, 0x0, 0x1, [@nested={0x4, 0xbf}, @generic="629a02b8eeb8e2091950f52d5fab82af0e82f336aee57335e6867790694e563d02fa5b395e7329286f76e6bc820c4ed4a9aaba89ffc8a7c64c8390216e6ab3ce6b15367e63056283c6a008236002fc4f7037e0d0a23c83818e7b58dc87ff6e1f9bf774ad05820f726a5cb25f3807273957cd4039f3eefcd806d3e4805f4d5fdc1292b7bcd500d666173c4aed8267bb79ade614f9d8a4046625459daa00de6798a49eea3a0ad632a6cecfcb97a8bfb70ef5d9a506dd59d0da8bfcc157fadec66af09be2b7fc9a", @nested={0x4, 0x15a}, @generic="068450346c4d91cd88ad96dc569090b8ac9fa4f36cd79e4abcd9e971f3b98568097749f161ed2bf7e30b3ee928ae3b110f3f5bc37241e26e7130e6a57027c962b837181f98b461f3b33fde7031ef8ce2efc92ec40d52686b8fac745982796b086b17f5f3ca10096d9206a4892d8d1f8c2768c2ae9cbc2ed0580a251c50124b5d43c3191aef95ff27e6cc8fe0fc3e105a436c13e765de309fb3eaab647c2bb1898d3a869afe0b146c3501e4d6276f7a4de8defeaa8300c563017b762ab3ed519979ea5307fbe15a78944ef9e1b280bd17556e4dc1580d4c679378740438227b150347455a2d211f56", @nested={0x4, 0x5e}, @nested={0x4, 0x90}, @nested={0x4, 0xf}, @nested={0x4, 0xc}, @nested={0x4, 0x152}]}, @generic="911474d398deedd33c42ca7b1f8a5ac94b03a244b106240a5a1b786ec2c224ff3be43e8d30478682561aa474f62741cce3c17f185bb0b579976b0ad75e5b66c2a2deaed56fb61c6455a5ec7b8663fad6dfa14b3b975456311f397fb6b52c43b397d58a3b241deb7feb15044cfca52334408b2d87914e3fef7e32470928df48ceeb56c1080241e8677687ebe80164ae0a75f2d1ef424fb97fd22a034d"]}, 0x290}], 0x1, &(0x7f0000000700)=[@rights={{0x30, 0x1, 0x1, [r0, r1, r0, r1, r1, r1, r1, r1]}}, @rights={{0x20, 0x1, 0x1, [r0, r6, r0, r1]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r0, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, r1, r0, r0, r0, r1, r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r7]}}], 0xc8, 0x24008041}, 0x4080) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x82000007}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5a}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) 530.593027ms ago: executing program 2 (id=205): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000099, 0x0, 0x100000000}]}) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000000)={0x9, 0x3}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/address_bits', 0x143, 0x136) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000000000ffd, 0x0, 0x0, 0xd, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b06606000000000000162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/4120, 0x1018}], 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r4) 520.593145ms ago: executing program 1 (id=206): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a", 0x7b}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c", 0x90}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a", 0xc3}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838c", 0x79}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c", 0x89}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}], 0x2}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4], 0x6f4}}, 0x0) 354.450818ms ago: executing program 1 (id=207): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) sendmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000004c0)="acffa18943ff3575c391591ecaf54bf7403ad82463d1cdea6f1a0eed2066944511e8097d5ff1f0999839c98108a47812d4ca16", 0x33}, {&(0x7f0000000500)="97e1c16cf12edad20c670d9576425bbcd2fda1c368b485a462e68408c4989a509ff26402c67eccc6edd623c1f167c0b6265c5ebd7da6f4e7912dc9068281d4f582e83dd787360aba70203236ae2ca9dadd1cb87009d1", 0x56}, {&(0x7f0000000580)="02370ee8150ddca2f0bb9163e27632d0592f32af96b9a43def9ce1041cb58de682d523487d81169d67385f0417cb02fab61925a08caed5da78a220f17e8ca396ed0b7005f70aaea86e2d7dbb5d20c92aca198c7fbdcade12732f9f7ef649e96da310c329a6fadee87f3fa9c8197f4e9635d3c9eb10d5c7e06e376d88668db2801c44920da324e039a42ee6a8e15871be4cc179a4062fba19746ba71b523025d9979136de1be4e17f3fb9f5049495841fc7a8a6440237c1a54c4b34003c7d63f181b709db0133e1f0cc84b0ff5707b747", 0xd0}, {&(0x7f0000000680)="9ba11c62b6f96cbc3d685a24b3c157e09f0dfc05c1e055", 0x17}, {&(0x7f00000006c0)="b12ea3ee702698e769614ec8f22d71933b7a9d865025501ae4086c614117b1fe4061829c0419fc2a3175989c492c6e679b7199f781209bb69217290061ec2aebf10b582a7838fce93a9931d4b5172c89ba1125a8f4f8db1495187a6d08276bf18063351f04166457f554f2b6e04a82577fdef945ceffb79865edf61ff6b9e36bd4800c410edf66104db3ddc7bd4f146fdab5f9965f586b01950d69dfc9b6", 0x9e}, {&(0x7f0000000780)="fc18534617f59941f5a06db02d95f6a7731d9375c5d7392182852813829fd0b95670757868a510ef1a599528235cb3a0f57d4776d1f53a5bebf9b6ab509e95703e979d8158921f006856b35eddcfca4d53ae87686c3bff73e94c26147baa5dcfef6ac5aa615dfffeed9e5a1a1fa878432a4178b987e32b3e01431035e35c4c6647e1aa1cc767acd6b6060d25aacc37a2a24706a5c8b1977bd168fc9f0faa3b2e8948bcb872875b6cb97388bddf921fd283392131fabad1dfbd", 0xb9}, {&(0x7f0000000840)="3d4d36442b3257dfa22484ef723533de12f963d951666c2eec2c72339745ad47432df98a503829777d96703da3dd9300fbd598f9ba03e265575ce726ea1a1626c267df71d46b13bcffe41ad76f860b00ba35994f50e924c34b0f0048ea63ceeb6b8ab6bfd23d361ff582a11733f6b4c79279e9b927fa8038a20e9feed899983ef03cdb01362b501061e2ca013b5a312333b72b48f05adc308efcb600390d859a06bf273b0c9f70010d736bb9", 0xac}, {&(0x7f0000000900)="cd2fcddb82a987fcfb897c42e07e2c584f1fb33dfc63f2e91efe8a1aede44d8f443620daaf57c999b3f8c89b8dc6838abe2501d3eee9d1da1e406acefa31cbd4b9dc78055fe14b9f9d588084602e9ac9af2c7d434d7671aa48c9e124332e86749d1ed088b1e1b1837c2fbd088c5bd4764a90103ac45bed6a862a175ee8cb348ed9b6aac86b2347ba491233288866a33f7f2be6c7a451e47b1b6140978158bed02d534b22f1977d600b97147a3251dd8e336bacb6fd846fed", 0xb8}], 0x8, &(0x7f0000000a40)=[{0x20, 0x101, 0x7, "36d78ee88f0e53ec6eaafe"}], 0x20}, 0x80) 263.294737ms ago: executing program 1 (id=208): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, 0xc53}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x15) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000040)={0x40000, 0x1000}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x12, r5, 0xaf061000) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000240)=0x4) 0s ago: executing program 0 (id=209): newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, r0}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) fstat(r1, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000", @ANYRES32=0xee00], 0x104}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts. [ 87.021266][ T32] cfg80211: failed to load regulatory.db [ 87.384011][ T5591] cgroup: Unknown subsys name 'net' [ 87.627477][ T5591] cgroup: Unknown subsys name 'cpuset' [ 87.680603][ T5591] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.586543][ T5591] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.018020][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.030888][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.035324][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.042187][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.045015][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.181596][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.189402][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.217575][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.219270][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.227177][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.229092][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.232967][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.239608][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.249896][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.256163][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.258647][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.278103][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.299291][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.307318][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.314939][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.111848][ T61] Bluetooth: hci0: command tx timeout [ 94.350178][ T61] Bluetooth: hci2: command tx timeout [ 94.351119][ T4923] Bluetooth: hci1: command tx timeout [ 94.374774][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.374975][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.375130][ T5606] bridge_slave_0: entered allmulticast mode [ 94.378670][ T5606] bridge_slave_0: entered promiscuous mode [ 94.432029][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.432210][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.432390][ T5606] bridge_slave_1: entered allmulticast mode [ 94.435629][ T5606] bridge_slave_1: entered promiscuous mode [ 94.440402][ T4923] Bluetooth: hci3: command tx timeout [ 94.464464][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.465014][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.465240][ T5610] bridge_slave_0: entered allmulticast mode [ 94.468499][ T5610] bridge_slave_0: entered promiscuous mode [ 94.516871][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.517069][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.517222][ T5610] bridge_slave_1: entered allmulticast mode [ 94.519167][ T5610] bridge_slave_1: entered promiscuous mode [ 94.599077][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.658876][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.683196][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.683639][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.683968][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.684226][ T5612] bridge_slave_0: entered allmulticast mode [ 94.686260][ T5612] bridge_slave_0: entered promiscuous mode [ 94.737681][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.738235][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.738415][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.738574][ T5612] bridge_slave_1: entered allmulticast mode [ 94.744371][ T5612] bridge_slave_1: entered promiscuous mode [ 94.776767][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.777069][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.777639][ T5611] bridge_slave_0: entered allmulticast mode [ 94.783291][ T5611] bridge_slave_0: entered promiscuous mode [ 94.927423][ T5606] team0: Port device team_slave_0 added [ 94.927854][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.928175][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.928438][ T5611] bridge_slave_1: entered allmulticast mode [ 94.934948][ T5611] bridge_slave_1: entered promiscuous mode [ 94.984664][ T5606] team0: Port device team_slave_1 added [ 95.004655][ T5610] team0: Port device team_slave_0 added [ 95.016568][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.054722][ T5610] team0: Port device team_slave_1 added [ 95.058690][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.087674][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.131199][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.131213][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.131228][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.142031][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.193245][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.193257][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.193271][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.218147][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.218163][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.218186][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.225355][ T5612] team0: Port device team_slave_0 added [ 95.280111][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.280127][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.280149][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.284854][ T5612] team0: Port device team_slave_1 added [ 95.293640][ T5611] team0: Port device team_slave_0 added [ 95.339993][ T5611] team0: Port device team_slave_1 added [ 95.414348][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.414361][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.414376][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.481085][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.481098][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.481113][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.535275][ T5606] hsr_slave_0: entered promiscuous mode [ 95.540495][ T5606] hsr_slave_1: entered promiscuous mode [ 95.545203][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.545217][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.545240][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.591147][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.591163][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.591187][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.603753][ T5610] hsr_slave_0: entered promiscuous mode [ 95.605682][ T5610] hsr_slave_1: entered promiscuous mode [ 95.607808][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 95.607917][ T5610] Cannot create hsr debugfs directory [ 95.765633][ T5612] hsr_slave_0: entered promiscuous mode [ 95.766959][ T5612] hsr_slave_1: entered promiscuous mode [ 95.768167][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 95.768194][ T5612] Cannot create hsr debugfs directory [ 95.835208][ T5611] hsr_slave_0: entered promiscuous mode [ 95.836540][ T5611] hsr_slave_1: entered promiscuous mode [ 95.837560][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 95.837584][ T5611] Cannot create hsr debugfs directory [ 96.191439][ T4923] Bluetooth: hci0: command tx timeout [ 96.430054][ T4923] Bluetooth: hci1: command tx timeout [ 96.430089][ T4923] Bluetooth: hci2: command tx timeout [ 96.511258][ T4923] Bluetooth: hci3: command tx timeout [ 96.876010][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.944746][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.959297][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.996664][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.008726][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.034892][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.059384][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.083641][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.222665][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.255573][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.263466][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.300590][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.304223][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.336059][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.364220][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.387555][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.557823][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.585215][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.598836][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.677964][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.688087][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.723753][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.755449][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.788804][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.938438][ T5611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.975667][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.988217][ T5611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.025097][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.030680][ T5611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.063373][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.072932][ T5611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.115534][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.166935][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.269619][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.270122][ T4923] Bluetooth: hci0: command tx timeout [ 98.316448][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.337262][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.338089][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.394376][ T1420] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.394517][ T1420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.475302][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.510733][ T4923] Bluetooth: hci1: command tx timeout [ 98.510764][ T4923] Bluetooth: hci2: command tx timeout [ 98.536679][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.536856][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.591385][ T61] Bluetooth: hci3: command tx timeout [ 98.595433][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.597423][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.597551][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.729658][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.803084][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.803366][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.821347][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.906120][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.907817][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.074076][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.131863][ T1420] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.132144][ T1420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.211142][ T173] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.211332][ T173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.797850][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.285156][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.345602][ T5606] veth0_vlan: entered promiscuous mode [ 100.351491][ T61] Bluetooth: hci0: command tx timeout [ 100.427535][ T5606] veth1_vlan: entered promiscuous mode [ 100.592589][ T61] Bluetooth: hci2: command tx timeout [ 100.592627][ T61] Bluetooth: hci1: command tx timeout [ 100.651928][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.676207][ T4923] Bluetooth: hci3: command tx timeout [ 100.707236][ T5612] veth0_vlan: entered promiscuous mode [ 100.724489][ T5606] veth0_macvtap: entered promiscuous mode [ 100.786234][ T5606] veth1_macvtap: entered promiscuous mode [ 100.807806][ T5612] veth1_vlan: entered promiscuous mode [ 100.985824][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.022146][ T5610] veth0_vlan: entered promiscuous mode [ 101.029064][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.039325][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.101688][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.104914][ T5612] veth0_macvtap: entered promiscuous mode [ 101.114279][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.127386][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.142845][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.143580][ T5610] veth1_vlan: entered promiscuous mode [ 101.162152][ T5612] veth1_macvtap: entered promiscuous mode [ 101.490222][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.554266][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.618469][ T5611] veth0_vlan: entered promiscuous mode [ 101.627688][ T5610] veth0_macvtap: entered promiscuous mode [ 101.643419][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.655241][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.679553][ T3291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.679569][ T3291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.684039][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.707360][ T5610] veth1_macvtap: entered promiscuous mode [ 101.727047][ T1066] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.765774][ T5611] veth1_vlan: entered promiscuous mode [ 101.911876][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.911896][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.065189][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.172879][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.276169][ T3291] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.284930][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.284951][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.294858][ T3291] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.341233][ T3291] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.342576][ T3291] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.379078][ T5611] veth0_macvtap: entered promiscuous mode [ 102.456818][ T5611] veth1_macvtap: entered promiscuous mode [ 102.564641][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.564665][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.055978][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.141704][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.144152][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.144173][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.236153][ T5757] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 103.248732][ T3291] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.253350][ T3291] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.264213][ T3291] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.274366][ T3291] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.413645][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.413667][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.039076][ T5761] cgroup: Invalid name [ 104.434011][ T1066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.434036][ T1066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.835637][ T5772] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 104.840378][ T5771] warning: `syz.1.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.901655][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.901677][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.944435][ T5776] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.649076][ T5799] FAULT_INJECTION: forcing a failure. [ 106.649076][ T5799] name failslab, interval 1, probability 0, space 0, times 1 [ 106.649114][ T5799] CPU: 0 UID: 0 PID: 5799 Comm: syz.1.13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 106.649139][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.649151][ T5799] Call Trace: [ 106.649160][ T5799] [ 106.649169][ T5799] dump_stack_lvl+0xe8/0x150 [ 106.649203][ T5799] should_fail_ex+0x46b/0x600 [ 106.649238][ T5799] should_failslab+0xa8/0x100 [ 106.649269][ T5799] __kmalloc_noprof+0xdf/0x7b0 [ 106.649295][ T5799] ? tomoyo_encode+0x28b/0x550 [ 106.649329][ T5799] tomoyo_encode+0x28b/0x550 [ 106.649362][ T5799] tomoyo_realpath_from_path+0x58d/0x5d0 [ 106.649400][ T5799] ? tomoyo_path_number_perm+0x219/0x630 [ 106.649423][ T5799] tomoyo_path_number_perm+0x246/0x630 [ 106.649448][ T5799] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 106.649466][ T5799] ? __lock_acquire+0x6b5/0x2d10 [ 106.649495][ T5799] ? do_raw_spin_lock+0x12b/0x2f0 [ 106.649632][ T5799] ? __fget_files+0x2a/0x420 [ 106.649653][ T5799] ? __fget_files+0x2a/0x420 [ 106.649672][ T5799] ? __fget_files+0x3a6/0x420 [ 106.649691][ T5799] ? __fget_files+0x2a/0x420 [ 106.649716][ T5799] security_file_ioctl+0xc3/0x2a0 [ 106.649744][ T5799] __se_sys_ioctl+0x47/0x170 [ 106.649770][ T5799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.649793][ T5799] do_syscall_64+0x15f/0xf80 [ 106.649815][ T5799] ? trace_irq_disable+0x3b/0x140 [ 106.649838][ T5799] ? clear_bhb_loop+0x40/0x90 [ 106.649859][ T5799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.649876][ T5799] RIP: 0033:0x7f226cedcdd9 [ 106.649893][ T5799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.649907][ T5799] RSP: 002b:00007f226b10d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.649927][ T5799] RAX: ffffffffffffffda RBX: 00007f226d156090 RCX: 00007f226cedcdd9 [ 106.649939][ T5799] RDX: 0000200000000200 RSI: 0000000000003b89 RDI: 0000000000000003 [ 106.649950][ T5799] RBP: 00007f226b10d090 R08: 0000000000000000 R09: 0000000000000000 [ 106.649960][ T5799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.649970][ T5799] R13: 00007f226d156128 R14: 00007f226d156090 R15: 00007fff60c04888 [ 106.650000][ T5799] [ 106.667755][ T5799] ERROR: Out of memory at tomoyo_realpath_from_path. [ 106.983453][ T5798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.057740][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 107.363747][ T9] usb 1-1: device descriptor read/64, error -71 [ 107.389924][ T5692] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.560888][ T5692] usb 3-1: Using ep0 maxpacket: 32 [ 107.642353][ T5692] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 107.642384][ T5692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.691757][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 107.864187][ T9] usb 1-1: device descriptor read/64, error -71 [ 107.982148][ T9] usb usb1-port1: attempt power cycle [ 107.992905][ T5692] usb 3-1: config 0 descriptor?? [ 108.087114][ T5813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 108.275309][ T5692] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 108.418995][ T5815] FAULT_INJECTION: forcing a failure. [ 108.418995][ T5815] name failslab, interval 1, probability 0, space 0, times 0 [ 108.419028][ T5815] CPU: 1 UID: 0 PID: 5815 Comm: syz.3.18 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 108.419050][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 108.419061][ T5815] Call Trace: [ 108.419069][ T5815] [ 108.419078][ T5815] dump_stack_lvl+0xe8/0x150 [ 108.419118][ T5815] should_fail_ex+0x46b/0x600 [ 108.419150][ T5815] should_failslab+0xa8/0x100 [ 108.419179][ T5815] __kmalloc_noprof+0xdf/0x7b0 [ 108.419205][ T5815] ? tomoyo_encode+0x28b/0x550 [ 108.419237][ T5815] tomoyo_encode+0x28b/0x550 [ 108.419271][ T5815] tomoyo_realpath_from_path+0x58d/0x5d0 [ 108.419311][ T5815] ? tomoyo_path_number_perm+0x219/0x630 [ 108.419335][ T5815] tomoyo_path_number_perm+0x246/0x630 [ 108.419361][ T5815] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 108.419384][ T5815] ? __lock_acquire+0x6b5/0x2d10 [ 108.419417][ T5815] ? do_raw_spin_lock+0x12b/0x2f0 [ 108.419489][ T5815] ? __fget_files+0x2a/0x420 [ 108.419516][ T5815] ? __fget_files+0x2a/0x420 [ 108.419537][ T5815] ? __fget_files+0x3a6/0x420 [ 108.419557][ T5815] ? __fget_files+0x2a/0x420 [ 108.419582][ T5815] security_file_ioctl+0xc3/0x2a0 [ 108.419608][ T5815] __se_sys_ioctl+0x47/0x170 [ 108.419637][ T5815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.419661][ T5815] do_syscall_64+0x15f/0xf80 [ 108.419686][ T5815] ? trace_irq_disable+0x3b/0x140 [ 108.419713][ T5815] ? clear_bhb_loop+0x40/0x90 [ 108.419738][ T5815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.419759][ T5815] RIP: 0033:0x7ff625c3cdd9 [ 108.419780][ T5815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.419797][ T5815] RSP: 002b:00007ff623e8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.419820][ T5815] RAX: ffffffffffffffda RBX: 00007ff625eb5fa0 RCX: 00007ff625c3cdd9 [ 108.419835][ T5815] RDX: 0000200000000180 RSI: 0000000000005412 RDI: 0000000000000004 [ 108.419848][ T5815] RBP: 00007ff623e8e090 R08: 0000000000000000 R09: 0000000000000000 [ 108.419860][ T5815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.419871][ T5815] R13: 00007ff625eb6038 R14: 00007ff625eb5fa0 R15: 00007ffc05f9c438 [ 108.419906][ T5815] [ 108.465369][ T5815] ERROR: Out of memory at tomoyo_realpath_from_path. [ 108.512461][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 108.536574][ T9] usb 1-1: device descriptor read/8, error -71 [ 108.882633][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 108.905250][ T9] usb 1-1: device descriptor read/8, error -71 [ 109.016191][ T9] usb usb1-port1: unable to enumerate USB device [ 109.867675][ T5801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.931732][ T5692] gspca_vc032x: reg_w err -110 [ 109.931754][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.931766][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.931775][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.931785][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.931793][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.931802][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.931811][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.931820][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.931829][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.931838][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.931847][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.931856][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.931865][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.931874][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.931883][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.931892][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.931901][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.931929][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.931939][ T5692] gspca_vc032x: Unknown sensor... [ 109.932065][ T5692] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 109.944942][ T5801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.003420][ T5848] cgroup: Invalid name [ 111.221946][ T5692] usb 3-1: USB disconnect, device number 2 [ 112.125221][ T5860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.837039][ T5883] cgroup: Invalid name [ 113.075076][ T5890] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.771852][ T5909] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.775456][ T5909] FAULT_INJECTION: forcing a failure. [ 113.775456][ T5909] name failslab, interval 1, probability 0, space 0, times 0 [ 113.775491][ T5909] CPU: 1 UID: 0 PID: 5909 Comm: syz.3.54 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 113.775516][ T5909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.775528][ T5909] Call Trace: [ 113.775536][ T5909] [ 113.775545][ T5909] dump_stack_lvl+0xe8/0x150 [ 113.775580][ T5909] should_fail_ex+0x46b/0x600 [ 113.775614][ T5909] should_failslab+0xa8/0x100 [ 113.775644][ T5909] __kmalloc_noprof+0xdf/0x7b0 [ 113.775671][ T5909] ? kobject_get_path+0xc5/0x2f0 [ 113.775704][ T5909] kobject_get_path+0xc5/0x2f0 [ 113.775730][ T5909] ? do_raw_spin_lock+0x12b/0x2f0 [ 113.775764][ T5909] kobject_uevent_env+0x2a4/0x9e0 [ 113.775806][ T5909] __kobject_del+0xd2/0x330 [ 113.775834][ T5909] ? kobject_put+0x234/0x560 [ 113.775864][ T5909] kobject_put+0x240/0x560 [ 113.775894][ T5909] ? software_node_notify_remove+0x19e/0x1d0 [ 113.775928][ T5909] device_del+0x543/0x900 [ 113.775968][ T5909] ? __pfx_device_del+0x10/0x10 [ 113.776008][ T5909] device_unregister+0x21/0xf0 [ 113.776039][ T5909] iommufd_fops_release+0x18c/0x3b0 [ 113.776076][ T5909] ? __pfx_iommufd_fops_release+0x10/0x10 [ 113.776114][ T5909] ? evm_file_release+0x10a/0x1e0 [ 113.776149][ T5909] ? __pfx_iommufd_fops_release+0x10/0x10 [ 113.776182][ T5909] __fput+0x461/0xa70 [ 113.776216][ T5909] fput_close_sync+0x11f/0x240 [ 113.776239][ T5909] ? __pfx_fput_close_sync+0x10/0x10 [ 113.776265][ T5909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.776291][ T5909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.776315][ T5909] __x64_sys_close+0x7e/0x110 [ 113.776339][ T5909] do_syscall_64+0x15f/0xf80 [ 113.776365][ T5909] ? trace_irq_disable+0x3b/0x140 [ 113.776401][ T5909] ? clear_bhb_loop+0x40/0x90 [ 113.776429][ T5909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.776451][ T5909] RIP: 0033:0x7ff625c3cdd9 [ 113.776472][ T5909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.776489][ T5909] RSP: 002b:00007ff623e8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 113.776513][ T5909] RAX: ffffffffffffffda RBX: 00007ff625eb5fa0 RCX: 00007ff625c3cdd9 [ 113.776529][ T5909] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 113.776542][ T5909] RBP: 00007ff623e8e090 R08: 0000000000000000 R09: 0000000000000000 [ 113.776556][ T5909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.776569][ T5909] R13: 00007ff625eb6038 R14: 00007ff625eb5fa0 R15: 00007ffc05f9c438 [ 113.776604][ T5909] [ 114.781473][ T9] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 114.954261][ T9] usb 4-1: config 0 has an invalid interface number: 244 but max is 0 [ 114.954294][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.954315][ T9] usb 4-1: config 0 has no interface number 0 [ 114.954367][ T9] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 114.954393][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.045816][ T9] usb 4-1: config 0 descriptor?? [ 115.361516][ T9] usb 4-1: string descriptor 0 read error: -71 [ 115.411473][ T9] cypress_m8 4-1:0.244: DeLorme Earthmate USB converter detected [ 115.574303][ T5938] FAULT_INJECTION: forcing a failure. [ 115.574303][ T5938] name failslab, interval 1, probability 0, space 0, times 0 [ 115.574340][ T5938] CPU: 0 UID: 0 PID: 5938 Comm: syz.1.64 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 115.574371][ T5938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 115.574383][ T5938] Call Trace: [ 115.574391][ T5938] [ 115.574400][ T5938] dump_stack_lvl+0xe8/0x150 [ 115.574432][ T5938] should_fail_ex+0x46b/0x600 [ 115.574475][ T5938] should_failslab+0xa8/0x100 [ 115.574506][ T5938] __kmalloc_noprof+0xdf/0x7b0 [ 115.574533][ T5938] ? tomoyo_encode+0x28b/0x550 [ 115.574565][ T5938] tomoyo_encode+0x28b/0x550 [ 115.574597][ T5938] tomoyo_realpath_from_path+0x58d/0x5d0 [ 115.574637][ T5938] ? tomoyo_path_number_perm+0x219/0x630 [ 115.574659][ T5938] tomoyo_path_number_perm+0x246/0x630 [ 115.574685][ T5938] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 115.574707][ T5938] ? __lock_acquire+0x6b5/0x2d10 [ 115.574740][ T5938] ? do_raw_spin_lock+0x12b/0x2f0 [ 115.574802][ T5938] ? __fget_files+0x2a/0x420 [ 115.574827][ T5938] ? __fget_files+0x2a/0x420 [ 115.574847][ T5938] ? __fget_files+0x3a6/0x420 [ 115.574868][ T5938] ? __fget_files+0x2a/0x420 [ 115.574895][ T5938] security_file_ioctl+0xc3/0x2a0 [ 115.574921][ T5938] __se_sys_ioctl+0x47/0x170 [ 115.574948][ T5938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.574972][ T5938] do_syscall_64+0x15f/0xf80 [ 115.575000][ T5938] ? clear_bhb_loop+0x40/0x90 [ 115.575027][ T5938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.575049][ T5938] RIP: 0033:0x7f226cedcdd9 [ 115.575070][ T5938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.575087][ T5938] RSP: 002b:00007f226b12e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.575111][ T5938] RAX: ffffffffffffffda RBX: 00007f226d155fa0 RCX: 00007f226cedcdd9 [ 115.575126][ T5938] RDX: 0000200000000100 RSI: 0000000000005404 RDI: 0000000000000004 [ 115.575139][ T5938] RBP: 00007f226b12e090 R08: 0000000000000000 R09: 0000000000000000 [ 115.575152][ T5938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.575164][ T5938] R13: 00007f226d156038 R14: 00007f226d155fa0 R15: 00007fff60c04888 [ 115.575197][ T5938] [ 115.575231][ T5938] ERROR: Out of memory at tomoyo_realpath_from_path. [ 115.577417][ T9] earthmate ttyUSB0: required endpoint is missing [ 115.746307][ T9] usb 4-1: USB disconnect, device number 2 [ 116.073854][ T9] cypress_m8 4-1:0.244: device disconnected [ 116.182804][ T5955] Zero length message leads to an empty skb [ 116.215859][ T5949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.216518][ T5949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.234680][ T5949] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 116.635872][ T5968] /dev/sg0: Can't lookup blockdev [ 117.636221][ T5993] FAULT_INJECTION: forcing a failure. [ 117.636221][ T5993] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 117.636258][ T5993] CPU: 0 UID: 0 PID: 5993 Comm: syz.2.84 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.636282][ T5993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.636294][ T5993] Call Trace: [ 117.636302][ T5993] [ 117.636311][ T5993] dump_stack_lvl+0xe8/0x150 [ 117.636345][ T5993] should_fail_ex+0x46b/0x600 [ 117.636394][ T5993] _copy_from_user+0x2d/0xb0 [ 117.636427][ T5993] kstrtouint_from_user+0xd6/0x180 [ 117.636455][ T5993] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 117.636500][ T5993] proc_fail_nth_write+0x8e/0x210 [ 117.636525][ T5993] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 117.636554][ T5993] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 117.636579][ T5993] vfs_write+0x2a3/0xba0 [ 117.636615][ T5993] ? __pfx_vfs_write+0x10/0x10 [ 117.636645][ T5993] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 117.636673][ T5993] ? lockdep_hardirqs_on+0x7a/0x110 [ 117.636697][ T5993] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 117.636723][ T5993] ? mutex_lock_nested+0x152/0x1d0 [ 117.636755][ T5993] ? fdget_pos+0x252/0x320 [ 117.636788][ T5993] ksys_write+0x156/0x270 [ 117.636818][ T5993] ? __pfx_ksys_write+0x10/0x10 [ 117.636855][ T5993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.636875][ T5993] do_syscall_64+0x15f/0xf80 [ 117.636902][ T5993] ? clear_bhb_loop+0x40/0x90 [ 117.636929][ T5993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.636949][ T5993] RIP: 0033:0x7f8c2390d60e [ 117.636970][ T5993] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 117.636986][ T5993] RSP: 002b:00007f8c21b84fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 117.637010][ T5993] RAX: ffffffffffffffda RBX: 00007f8c21b856c0 RCX: 00007f8c2390d60e [ 117.637027][ T5993] RDX: 0000000000000001 RSI: 00007f8c21b850a0 RDI: 0000000000000005 [ 117.637041][ T5993] RBP: 00007f8c21b85090 R08: 0000000000000000 R09: 0000000000000000 [ 117.637055][ T5993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.637067][ T5993] R13: 00007f8c23bc6128 R14: 00007f8c23bc6090 R15: 00007fff4f3578f8 [ 117.637103][ T5993] [ 118.496816][ T6003] netlink: 'syz.2.88': attribute type 3 has an invalid length. [ 118.496840][ T6003] netlink: 'syz.2.88': attribute type 1 has an invalid length. [ 118.496851][ T6003] netlink: 224 bytes leftover after parsing attributes in process `syz.2.88'. [ 118.496866][ T6003] NCSI netlink: No device for ifindex 0 [ 118.541574][ T5786] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 118.824835][ T5786] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.824873][ T5786] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 118.824901][ T5786] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 118.865191][ T5786] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 118.867525][ T5786] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 118.867552][ T5786] usb 4-1: Manufacturer: syz [ 118.867567][ T5786] usb 4-1: SerialNumber: syz [ 120.220138][ T5697] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.396220][ T5697] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 120.396283][ T5697] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 120.396308][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.575639][ T5697] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 120.887588][ T5786] yealink 4-1:36.0: invalid payload size 0, expected 16 [ 120.917894][ T5786] input: Yealink usb-p1k as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:36.0/input/input5 [ 120.968945][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 120.970544][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 120.973281][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 120.973535][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 120.973789][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 120.974034][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 120.974270][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 120.974509][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 120.974529][ C1] yealink 4-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 121.086994][ T5786] usb 4-1: USB disconnect, device number 4 [ 121.173338][ T6048] FAULT_INJECTION: forcing a failure. [ 121.173338][ T6048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.173374][ T6048] CPU: 1 UID: 0 PID: 6048 Comm: syz.0.104 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 121.173398][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 121.173410][ T6048] Call Trace: [ 121.173429][ T6048] [ 121.173438][ T6048] dump_stack_lvl+0xe8/0x150 [ 121.173470][ T6048] should_fail_ex+0x46b/0x600 [ 121.173509][ T6048] _copy_from_user+0x2d/0xb0 [ 121.173541][ T6048] ucma_listen+0xa0/0x440 [ 121.173568][ T6048] ? __pfx_ucma_listen+0x10/0x10 [ 121.173605][ T6048] ucma_write+0x257/0x2f0 [ 121.173630][ T6048] ? __pfx_ucma_write+0x10/0x10 [ 121.173655][ T6048] ? rw_verify_area+0x25b/0x4e0 [ 121.173678][ T6048] ? __pfx_ucma_write+0x10/0x10 [ 121.173702][ T6048] vfs_write+0x2a3/0xba0 [ 121.173734][ T6048] ? __pfx_vfs_write+0x10/0x10 [ 121.173762][ T6048] ? __fget_files+0x2a/0x420 [ 121.173788][ T6048] ? __fget_files+0x2a/0x420 [ 121.173807][ T6048] ? __fget_files+0x3a6/0x420 [ 121.173827][ T6048] ? __fget_files+0x2a/0x420 [ 121.173858][ T6048] ksys_write+0x156/0x270 [ 121.173886][ T6048] ? __pfx_ksys_write+0x10/0x10 [ 121.173922][ T6048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.173946][ T6048] do_syscall_64+0x15f/0xf80 [ 121.173969][ T6048] ? trace_irq_disable+0x3b/0x140 [ 121.173995][ T6048] ? clear_bhb_loop+0x40/0x90 [ 121.174021][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.174041][ T6048] RIP: 0033:0x7fe377fecdd9 [ 121.174061][ T6048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.174076][ T6048] RSP: 002b:00007fe37623e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 121.174098][ T6048] RAX: ffffffffffffffda RBX: 00007fe378265fa0 RCX: 00007fe377fecdd9 [ 121.174113][ T6048] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 121.174126][ T6048] RBP: 00007fe37623e090 R08: 0000000000000000 R09: 0000000000000000 [ 121.174137][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.174149][ T6048] R13: 00007fe378266038 R14: 00007fe378265fa0 R15: 00007ffd245754a8 [ 121.174182][ T6048] [ 121.635675][ T5697] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 121.635701][ T5697] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 121.637394][ T5697] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 121.637414][ T5697] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 121.646934][ T5697] usb 2-1: USB disconnect, device number 2 [ 122.229906][ T5786] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 122.383357][ T5786] usb 3-1: config 0 has an invalid interface number: 238 but max is 0 [ 122.383388][ T5786] usb 3-1: config 0 has no interface number 0 [ 122.383437][ T5786] usb 3-1: config 0 interface 238 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 122.383461][ T5786] usb 3-1: config 0 interface 238 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 122.383486][ T5786] usb 3-1: config 0 interface 238 altsetting 2 endpoint 0x88 has invalid maxpacket 12336, setting to 1024 [ 122.383513][ T5786] usb 3-1: config 0 interface 238 altsetting 2 bulk endpoint 0x88 has invalid maxpacket 1024 [ 122.383538][ T5786] usb 3-1: config 0 interface 238 has no altsetting 0 [ 122.387107][ T5786] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 122.387140][ T5786] usb 3-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 122.387162][ T5786] usb 3-1: Product: syz [ 122.387176][ T5786] usb 3-1: Manufacturer: syz [ 122.387192][ T5786] usb 3-1: SerialNumber: syz [ 122.504611][ T5786] usb 3-1: config 0 descriptor?? [ 122.506166][ T6066] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 122.596342][ T5786] ni6501 3-1:0.238: driver 'ni6501' failed to auto-configure device. [ 122.721331][ T6066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.722108][ T6066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.749185][ T5786] usb 3-1: USB disconnect, device number 3 [ 123.431467][ T5786] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 123.608000][ T5786] usb 4-1: device descriptor read/64, error -71 [ 123.846396][ T5786] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.991349][ T5786] usb 4-1: device descriptor read/64, error -71 [ 124.100352][ T5786] usb usb4-port1: attempt power cycle [ 124.479954][ T5786] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 124.512452][ T5786] usb 4-1: device descriptor read/8, error -71 [ 124.809955][ T5786] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 124.834571][ T5786] usb 4-1: device descriptor read/8, error -71 [ 124.940450][ T5786] usb usb4-port1: unable to enumerate USB device [ 125.079274][ T6110] FAULT_INJECTION: forcing a failure. [ 125.079274][ T6110] name failslab, interval 1, probability 0, space 0, times 0 [ 125.079299][ T6110] CPU: 0 UID: 0 PID: 6110 Comm: syz.0.126 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 125.079314][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 125.079321][ T6110] Call Trace: [ 125.079326][ T6110] [ 125.079331][ T6110] dump_stack_lvl+0xe8/0x150 [ 125.079353][ T6110] should_fail_ex+0x46b/0x600 [ 125.079372][ T6110] should_failslab+0xa8/0x100 [ 125.079398][ T6110] __kmalloc_noprof+0xdf/0x7b0 [ 125.079413][ T6110] ? tomoyo_encode+0x28b/0x550 [ 125.079432][ T6110] tomoyo_encode+0x28b/0x550 [ 125.079450][ T6110] tomoyo_realpath_from_path+0x58d/0x5d0 [ 125.079468][ T6110] ? tomoyo_domain+0xd7/0x130 [ 125.079488][ T6110] ? tomoyo_path_number_perm+0x219/0x630 [ 125.079501][ T6110] tomoyo_path_number_perm+0x246/0x630 [ 125.079516][ T6110] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 125.079529][ T6110] ? __lock_acquire+0x6b5/0x2d10 [ 125.079549][ T6110] ? do_raw_spin_lock+0x12b/0x2f0 [ 125.079582][ T6110] ? __fget_files+0x2a/0x420 [ 125.079596][ T6110] ? __fget_files+0x2a/0x420 [ 125.079608][ T6110] ? __fget_files+0x3a6/0x420 [ 125.079619][ T6110] ? __fget_files+0x2a/0x420 [ 125.079637][ T6110] security_file_ioctl+0xc3/0x2a0 [ 125.079651][ T6110] __se_sys_ioctl+0x47/0x170 [ 125.079667][ T6110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.079681][ T6110] do_syscall_64+0x15f/0xf80 [ 125.079695][ T6110] ? trace_irq_disable+0x3b/0x140 [ 125.079712][ T6110] ? clear_bhb_loop+0x40/0x90 [ 125.079739][ T6110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.079761][ T6110] RIP: 0033:0x7fe377fecdd9 [ 125.079782][ T6110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.079799][ T6110] RSP: 002b:00007fe37623e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.079822][ T6110] RAX: ffffffffffffffda RBX: 00007fe378265fa0 RCX: 00007fe377fecdd9 [ 125.079836][ T6110] RDX: 0000000000000000 RSI: 0000000040806685 RDI: 0000000000000005 [ 125.079850][ T6110] RBP: 00007fe37623e090 R08: 0000000000000000 R09: 0000000000000000 [ 125.079862][ T6110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.079874][ T6110] R13: 00007fe378266038 R14: 00007fe378265fa0 R15: 00007ffd245754a8 [ 125.079907][ T6110] [ 125.083930][ T6110] ERROR: Out of memory at tomoyo_realpath_from_path. [ 125.179940][ T5697] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 125.332122][ T5697] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 125.332167][ T5697] usb 3-1: config 0 has no interface number 0 [ 125.332211][ T5697] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 125.332234][ T5697] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 125.333971][ T5697] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 125.333994][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 125.334011][ T5697] usb 3-1: Manufacturer: syz [ 125.334025][ T5697] usb 3-1: SerialNumber: syz [ 125.367170][ T5697] usb 3-1: config 0 descriptor?? [ 125.741241][ T5697] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 125.763186][ T5697] usb 3-1: USB disconnect, device number 4 [ 126.067444][ T6130] FAULT_INJECTION: forcing a failure. [ 126.067444][ T6130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.067469][ T6130] CPU: 1 UID: 0 PID: 6130 Comm: syz.0.133 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.067483][ T6130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.067490][ T6130] Call Trace: [ 126.067495][ T6130] [ 126.067500][ T6130] dump_stack_lvl+0xe8/0x150 [ 126.067520][ T6130] should_fail_ex+0x46b/0x600 [ 126.067539][ T6130] strncpy_from_user+0x36/0x2b0 [ 126.067555][ T6130] do_getname+0x77/0x250 [ 126.067584][ T6130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.067597][ T6130] __se_sys_link+0x2b/0x2c0 [ 126.067615][ T6130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.067628][ T6130] do_syscall_64+0x15f/0xf80 [ 126.067644][ T6130] ? clear_bhb_loop+0x40/0x90 [ 126.067659][ T6130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.067671][ T6130] RIP: 0033:0x7fe377fecdd9 [ 126.067683][ T6130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.067693][ T6130] RSP: 002b:00007fe37621d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 126.067707][ T6130] RAX: ffffffffffffffda RBX: 00007fe378266090 RCX: 00007fe377fecdd9 [ 126.067716][ T6130] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000200000000280 [ 126.067723][ T6130] RBP: 00007fe37621d090 R08: 0000000000000000 R09: 0000000000000000 [ 126.067730][ T6130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.067737][ T6130] R13: 00007fe378266128 R14: 00007fe378266090 R15: 00007ffd245754a8 [ 126.067754][ T6130] [ 126.451132][ T6140] netlink: 40 bytes leftover after parsing attributes in process `syz.0.137'. [ 126.728605][ T6150] FAULT_INJECTION: forcing a failure. [ 126.728605][ T6150] name failslab, interval 1, probability 0, space 0, times 0 [ 126.728643][ T6150] CPU: 1 UID: 0 PID: 6150 Comm: syz.0.140 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.728668][ T6150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.728681][ T6150] Call Trace: [ 126.728689][ T6150] [ 126.728698][ T6150] dump_stack_lvl+0xe8/0x150 [ 126.728731][ T6150] should_fail_ex+0x46b/0x600 [ 126.728765][ T6150] should_failslab+0xa8/0x100 [ 126.728796][ T6150] __kmalloc_noprof+0xdf/0x7b0 [ 126.728823][ T6150] ? tomoyo_encode+0x28b/0x550 [ 126.728859][ T6150] tomoyo_encode+0x28b/0x550 [ 126.728894][ T6150] tomoyo_realpath_from_path+0x58d/0x5d0 [ 126.728936][ T6150] ? tomoyo_path_number_perm+0x219/0x630 [ 126.728960][ T6150] tomoyo_path_number_perm+0x246/0x630 [ 126.728986][ T6150] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 126.729008][ T6150] ? __lock_acquire+0x6b5/0x2d10 [ 126.729041][ T6150] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.729101][ T6150] ? __fget_files+0x2a/0x420 [ 126.729124][ T6150] ? __fget_files+0x2a/0x420 [ 126.729143][ T6150] ? __fget_files+0x3a6/0x420 [ 126.729163][ T6150] ? __fget_files+0x2a/0x420 [ 126.729187][ T6150] security_file_ioctl+0xc3/0x2a0 [ 126.729210][ T6150] __se_sys_ioctl+0x47/0x170 [ 126.729238][ T6150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.729261][ T6150] do_syscall_64+0x15f/0xf80 [ 126.729285][ T6150] ? trace_irq_disable+0x3b/0x140 [ 126.729313][ T6150] ? clear_bhb_loop+0x40/0x90 [ 126.729341][ T6150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.729363][ T6150] RIP: 0033:0x7fe377fecdd9 [ 126.729383][ T6150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.729401][ T6150] RSP: 002b:00007fe37623e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.729424][ T6150] RAX: ffffffffffffffda RBX: 00007fe378265fa0 RCX: 00007fe377fecdd9 [ 126.729440][ T6150] RDX: 00002000000000c0 RSI: 0000000000003b82 RDI: 0000000000000003 [ 126.729454][ T6150] RBP: 00007fe37623e090 R08: 0000000000000000 R09: 0000000000000000 [ 126.729467][ T6150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.729479][ T6150] R13: 00007fe378266038 R14: 00007fe378265fa0 R15: 00007ffd245754a8 [ 126.729519][ T6150] [ 126.747188][ T6150] ERROR: Out of memory at tomoyo_realpath_from_path. [ 127.153743][ T37] audit: type=1804 audit(1777399001.133:2): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.144" name="/newroot/35/bus/file0" dev="tmpfs" ino=205 res=1 errno=0 [ 127.285164][ T6163] FAULT_INJECTION: forcing a failure. [ 127.285164][ T6163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.285201][ T6163] CPU: 1 UID: 0 PID: 6163 Comm: syz.3.146 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 127.285224][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.285235][ T6163] Call Trace: [ 127.285243][ T6163] [ 127.285251][ T6163] dump_stack_lvl+0xe8/0x150 [ 127.285283][ T6163] should_fail_ex+0x46b/0x600 [ 127.285314][ T6163] _copy_to_iter+0x404/0x17d0 [ 127.285349][ T6163] ? m_stop+0x125/0x2d0 [ 127.285389][ T6163] ? __pfx__copy_to_iter+0x10/0x10 [ 127.285416][ T6163] ? traverse+0x544/0x580 [ 127.285458][ T6163] seq_read_iter+0x2ea/0xe20 [ 127.285498][ T6163] ? __asan_memset+0x22/0x50 [ 127.285534][ T6163] seq_read+0x36a/0x490 [ 127.285572][ T6163] ? __pfx_seq_read+0x10/0x10 [ 127.285613][ T6163] ? rw_verify_area+0x2ac/0x4e0 [ 127.285638][ T6163] ? __pfx_seq_read+0x10/0x10 [ 127.285667][ T6163] vfs_read+0x212/0xa80 [ 127.285701][ T6163] ? __pfx_vfs_read+0x10/0x10 [ 127.285728][ T6163] ? __fget_files+0x2a/0x420 [ 127.285752][ T6163] ? __fget_files+0x2a/0x420 [ 127.285771][ T6163] ? __fget_files+0x3a6/0x420 [ 127.285791][ T6163] ? __fget_files+0x2a/0x420 [ 127.285821][ T6163] __x64_sys_pread64+0x19c/0x230 [ 127.285851][ T6163] ? __pfx___x64_sys_pread64+0x10/0x10 [ 127.285887][ T6163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.285910][ T6163] do_syscall_64+0x15f/0xf80 [ 127.285935][ T6163] ? trace_irq_disable+0x3b/0x140 [ 127.285962][ T6163] ? clear_bhb_loop+0x40/0x90 [ 127.285988][ T6163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.286008][ T6163] RIP: 0033:0x7ff625c3cdd9 [ 127.286027][ T6163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.286044][ T6163] RSP: 002b:00007ff623e8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 127.286067][ T6163] RAX: ffffffffffffffda RBX: 00007ff625eb5fa0 RCX: 00007ff625c3cdd9 [ 127.286082][ T6163] RDX: 000000000000100c RSI: 0000200000001c00 RDI: 0000000000000005 [ 127.286095][ T6163] RBP: 00007ff623e8e090 R08: 0000000000000000 R09: 0000000000000000 [ 127.286107][ T6163] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 127.286118][ T6163] R13: 00007ff625eb6038 R14: 00007ff625eb5fa0 R15: 00007ffc05f9c438 [ 127.286152][ T6163] [ 127.300031][ T37] audit: type=1804 audit(1777399001.263:3): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.146" name="/newroot/30/bus/file0" dev="overlay" ino=178 res=1 errno=0 [ 127.770306][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 127.785141][ T6174] ======================================================= [ 127.785141][ T6174] WARNING: The mand mount option has been deprecated and [ 127.785141][ T6174] and is ignored by this kernel. Remove the mand [ 127.785141][ T6174] option from the mount to silence this warning. [ 127.785141][ T6174] ======================================================= [ 127.802149][ T37] audit: type=1804 audit(1777399001.783:4): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.152" name="/newroot/29/bus/file0" dev="tmpfs" ino=168 res=1 errno=0 [ 127.925671][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 127.957755][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 127.957789][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.957810][ T9] usb 1-1: Product: syz [ 127.957825][ T9] usb 1-1: Manufacturer: syz [ 127.957840][ T9] usb 1-1: SerialNumber: syz [ 127.984640][ T9] usb 1-1: config 0 descriptor?? [ 128.238243][ T9] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 128.667859][ T6196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.159'. [ 128.971643][ T6201] FAULT_INJECTION: forcing a failure. [ 128.971643][ T6201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.971713][ T6201] CPU: 0 UID: 0 PID: 6201 Comm: syz.2.161 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 128.971729][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.971736][ T6201] Call Trace: [ 128.971742][ T6201] [ 128.971747][ T6201] dump_stack_lvl+0xe8/0x150 [ 128.971770][ T6201] should_fail_ex+0x46b/0x600 [ 128.971789][ T6201] _copy_to_user+0x31/0xb0 [ 128.971808][ T6201] simple_read_from_buffer+0xe1/0x170 [ 128.971829][ T6201] proc_fail_nth_read+0x1be/0x230 [ 128.971845][ T6201] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.971860][ T6201] ? rw_verify_area+0x2ac/0x4e0 [ 128.971875][ T6201] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.971889][ T6201] vfs_read+0x212/0xa80 [ 128.971909][ T6201] ? __pfx_vfs_read+0x10/0x10 [ 128.971925][ T6201] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 128.971941][ T6201] ? lockdep_hardirqs_on+0x7a/0x110 [ 128.971955][ T6201] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 128.971969][ T6201] ? mutex_lock_nested+0x152/0x1d0 [ 128.971987][ T6201] ? fdget_pos+0x252/0x320 [ 128.972006][ T6201] ksys_read+0x156/0x270 [ 128.972022][ T6201] ? __pfx_ksys_read+0x10/0x10 [ 128.972042][ T6201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.972055][ T6201] do_syscall_64+0x15f/0xf80 [ 128.972071][ T6201] ? clear_bhb_loop+0x40/0x90 [ 128.972086][ T6201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.972098][ T6201] RIP: 0033:0x7f8c2390d60e [ 128.972110][ T6201] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 128.972120][ T6201] RSP: 002b:00007f8c21b84fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 128.972151][ T6201] RAX: ffffffffffffffda RBX: 00007f8c21b856c0 RCX: 00007f8c2390d60e [ 128.972160][ T6201] RDX: 000000000000000f RSI: 00007f8c21b850a0 RDI: 0000000000000004 [ 128.972171][ T6201] RBP: 00007f8c21b85090 R08: 0000000000000000 R09: 0000000000000000 [ 128.972182][ T6201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.972194][ T6201] R13: 00007f8c23bc6128 R14: 00007f8c23bc6090 R15: 00007fff4f3578f8 [ 128.972228][ T6201] [ 129.126317][ T6167] netlink: 'syz.0.148': attribute type 1 has an invalid length. [ 129.126339][ T6167] netlink: 244 bytes leftover after parsing attributes in process `syz.0.148'. [ 129.336499][ T6207] netlink: 'syz.1.164': attribute type 4 has an invalid length. [ 130.137453][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.172'. [ 130.228856][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 130.229316][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 130.229364][ T9] usb 1-1: media controller created [ 130.362387][ T9] usb read operation failed. (-71) [ 130.476037][ T9] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 130.510877][ T9] usb 1-1: USB disconnect, device number 6 [ 130.809279][ T49] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 130.934223][ T6245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.980403][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 130.980457][ T49] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 130.980483][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.989528][ T49] usb 3-1: config 0 descriptor?? [ 131.021690][ T6236] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.219252][ T6253] CUSE: info not properly terminated [ 131.614008][ T49] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 131.614060][ T49] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 131.614087][ T49] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 131.614114][ T49] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 131.614142][ T49] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 131.614169][ T49] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 131.614246][ T49] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 131.614273][ T49] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 131.614299][ T49] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 131.614327][ T49] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 131.642898][ T6262] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.649986][ T6264] FAULT_INJECTION: forcing a failure. [ 131.649986][ T6264] name failslab, interval 1, probability 0, space 0, times 0 [ 131.650022][ T6264] CPU: 0 UID: 0 PID: 6264 Comm: syz.0.183 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 131.650046][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 131.650056][ T6264] Call Trace: [ 131.650064][ T6264] [ 131.650072][ T6264] dump_stack_lvl+0xe8/0x150 [ 131.650104][ T6264] should_fail_ex+0x46b/0x600 [ 131.650137][ T6264] should_failslab+0xa8/0x100 [ 131.650166][ T6264] __kmalloc_noprof+0xdf/0x7b0 [ 131.650190][ T6264] ? tomoyo_encode+0x28b/0x550 [ 131.650221][ T6264] tomoyo_encode+0x28b/0x550 [ 131.650253][ T6264] tomoyo_realpath_from_path+0x58d/0x5d0 [ 131.650288][ T6264] ? tomoyo_path_number_perm+0x219/0x630 [ 131.650309][ T6264] tomoyo_path_number_perm+0x246/0x630 [ 131.650333][ T6264] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 131.650361][ T6264] ? __lock_acquire+0x6b5/0x2d10 [ 131.650392][ T6264] ? do_raw_spin_lock+0x12b/0x2f0 [ 131.650446][ T6264] ? __fget_files+0x2a/0x420 [ 131.650469][ T6264] ? __fget_files+0x2a/0x420 [ 131.650487][ T6264] ? __fget_files+0x3a6/0x420 [ 131.650505][ T6264] ? __fget_files+0x2a/0x420 [ 131.650528][ T6264] security_file_ioctl+0xc3/0x2a0 [ 131.650549][ T6264] __se_sys_ioctl+0x47/0x170 [ 131.650574][ T6264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.650595][ T6264] do_syscall_64+0x15f/0xf80 [ 131.650617][ T6264] ? trace_irq_disable+0x3b/0x140 [ 131.650641][ T6264] ? clear_bhb_loop+0x40/0x90 [ 131.650665][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.650684][ T6264] RIP: 0033:0x7fe377fecdd9 [ 131.650702][ T6264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.650717][ T6264] RSP: 002b:00007fe37621d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.650737][ T6264] RAX: ffffffffffffffda RBX: 00007fe378266090 RCX: 00007fe377fecdd9 [ 131.650750][ T6264] RDX: 0000200000000fc0 RSI: 0000000000003b70 RDI: 0000000000000003 [ 131.650763][ T6264] RBP: 00007fe37621d090 R08: 0000000000000000 R09: 0000000000000000 [ 131.650774][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.650785][ T6264] R13: 00007fe378266128 R14: 00007fe378266090 R15: 00007ffd245754a8 [ 131.650815][ T6264] [ 131.650834][ T6264] ERROR: Out of memory at tomoyo_realpath_from_path. [ 131.724258][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'. [ 131.982533][ T49] usb 3-1: USB disconnect, device number 5 [ 132.531852][ T6284] capability: warning: `syz.2.192' uses 32-bit capabilities (legacy support in use) [ 132.964238][ T6298] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.196'. [ 133.078725][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.078877][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.204676][ T6300] NILFS (nullb0): couldn't find nilfs on the device [ 133.391922][ T6308] loop6: detected capacity change from 0 to 8 [ 133.987993][ T6308] Dev loop6: unable to read RDB block 8 [ 133.988044][ T6308] loop6: unable to read partition table [ 133.988352][ T6308] loop6: partition table beyond EOD, truncated [ 133.989121][ T6308] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 134.151916][ T6327] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.206'. [ 134.287424][ T6330] loop6: detected capacity change from 0 to 8 [ 134.429938][ T4923] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 134.624144][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.208'. [ 134.821032][ T6330] Dev loop6: unable to read RDB block 8 [ 134.821082][ T6330] loop6: unable to read partition table [ 134.824458][ T6340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.209'. [ 134.827654][ T6330] loop6: partition table beyond EOD, truncated [ 134.827690][ T6330] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 134.847429][ T6333] [ 134.847439][ T6333] ====================================================== [ 134.847444][ T6333] WARNING: possible circular locking dependency detected [ 134.847450][ T6333] syzkaller #0 Not tainted [ 134.847456][ T6333] ------------------------------------------------------ [ 134.847461][ T6333] syz.2.205/6333 is trying to acquire lock: [ 134.847467][ T6333] ffff88801bea32c0 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 134.847502][ T6333] [ 134.847502][ T6333] but task is already holding lock: [ 134.847506][ T6333] ffff8880260a8a78 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1a69/0x1fc0 [ 134.847535][ T6333] [ 134.847535][ T6333] which lock already depends on the new lock. [ 134.847535][ T6333] [ 134.847547][ T6333] [ 134.847547][ T6333] the existing dependency chain (in reverse order) is: [ 134.847551][ T6333] [ 134.847551][ T6333] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 134.847572][ T6333] blk_alloc_queue+0x54e/0x690 [ 134.847583][ T6333] __blk_mq_alloc_disk+0x197/0x390 [ 134.847597][ T6333] loop_add+0x482/0xb50 [ 134.847606][ T6333] loop_init+0xd9/0x170 [ 134.847616][ T6333] do_one_initcall+0x250/0x870 [ 134.847631][ T6333] do_initcall_level+0x104/0x190 [ 134.847648][ T6333] do_initcalls+0x59/0xa0 [ 134.847664][ T6333] kernel_init_freeable+0x2a6/0x3e0 [ 134.847680][ T6333] kernel_init+0x1d/0x1d0 [ 134.847696][ T6333] ret_from_fork+0x514/0xb70 [ 134.847710][ T6333] ret_from_fork_asm+0x1a/0x30 [ 134.847725][ T6333] [ 134.847725][ T6333] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 134.847740][ T6333] fs_reclaim_acquire+0x71/0x100 [ 134.847754][ T6333] kmem_cache_alloc_noprof+0x44/0x680 [ 134.847767][ T6333] __kernfs_iattrs+0xdf/0x320 [ 134.847778][ T6333] kernfs_iop_setattr+0xea/0x3f0 [ 134.847788][ T6333] notify_change+0xc18/0xf60 [ 134.847803][ T6333] do_truncate+0x1c2/0x250 [ 134.847818][ T6333] path_openat+0x2fc4/0x38a0 [ 134.847831][ T6333] do_file_open+0x23e/0x4a0 [ 134.847844][ T6333] do_sys_openat2+0x113/0x200 [ 134.847854][ T6333] __x64_sys_openat+0x138/0x170 [ 134.847864][ T6333] do_syscall_64+0x15f/0xf80 [ 134.847882][ T6333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.847894][ T6333] [ 134.847894][ T6333] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 134.847909][ T6333] __lock_acquire+0x15a5/0x2d10 [ 134.847925][ T6333] lock_acquire+0x106/0x350 [ 134.847940][ T6333] down_read+0x97/0x200 [ 134.847953][ T6333] kernfs_iop_getattr+0x9e/0x450 [ 134.847963][ T6333] vfs_getattr_nosec+0x2e1/0x430 [ 134.847980][ T6333] loop_assign_backing_file+0x286/0x4c0 [ 134.847992][ T6333] lo_ioctl+0x1ae6/0x1fc0 [ 134.848002][ T6333] blkdev_ioctl+0x5e6/0x750 [ 134.848014][ T6333] __se_sys_ioctl+0xff/0x170 [ 134.848027][ T6333] do_syscall_64+0x15f/0xf80 [ 134.848040][ T6333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.848050][ T6333] [ 134.848050][ T6333] other info that might help us debug this: [ 134.848050][ T6333] [ 134.848054][ T6333] Chain exists of: [ 134.848054][ T6333] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#23 [ 134.848054][ T6333] [ 134.848075][ T6333] Possible unsafe locking scenario: [ 134.848075][ T6333] [ 134.848079][ T6333] CPU0 CPU1 [ 134.848082][ T6333] ---- ---- [ 134.848086][ T6333] lock(&q->q_usage_counter(io)#23); [ 134.848096][ T6333] lock(fs_reclaim); [ 134.848104][ T6333] lock(&q->q_usage_counter(io)#23); [ 134.848115][ T6333] rlock(&root->kernfs_iattr_rwsem); [ 134.848123][ T6333] [ 134.848123][ T6333] *** DEADLOCK *** [ 134.848123][ T6333] [ 134.848126][ T6333] 3 locks held by syz.2.205/6333: [ 134.848133][ T6333] #0: ffff888026332498 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x14d8/0x1fc0 [ 134.848165][ T6333] #1: ffff8880260a8a78 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1a69/0x1fc0 [ 134.848194][ T6333] #2: ffff8880260a8ab0 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: lo_ioctl+0x1a69/0x1fc0 [ 134.848223][ T6333] [ 134.848223][ T6333] stack backtrace: [ 134.848231][ T6333] CPU: 0 UID: 0 PID: 6333 Comm: syz.2.205 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 134.848244][ T6333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 134.848252][ T6333] Call Trace: [ 134.848256][ T6333] [ 134.848261][ T6333] dump_stack_lvl+0xe8/0x150 [ 134.848277][ T6333] print_circular_bug+0x2e1/0x300 [ 134.848294][ T6333] check_noncircular+0x12e/0x150 [ 134.848308][ T6333] __lock_acquire+0x15a5/0x2d10 [ 134.848331][ T6333] ? kernfs_iop_getattr+0x9e/0x450 [ 134.848343][ T6333] lock_acquire+0x106/0x350 [ 134.848359][ T6333] ? kernfs_iop_getattr+0x9e/0x450 [ 134.848374][ T6333] down_read+0x97/0x200 [ 134.848388][ T6333] ? kernfs_iop_getattr+0x9e/0x450 [ 134.848399][ T6333] ? __pfx_down_read+0x10/0x10 [ 134.848413][ T6333] ? kernfs_root+0x1c/0x230 [ 134.848423][ T6333] ? kernfs_root+0x1c/0x230 [ 134.848436][ T6333] kernfs_iop_getattr+0x9e/0x450 [ 134.848449][ T6333] vfs_getattr_nosec+0x2e1/0x430 [ 134.848467][ T6333] loop_assign_backing_file+0x286/0x4c0 [ 134.848480][ T6333] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 134.848501][ T6333] lo_ioctl+0x1ae6/0x1fc0 [ 134.848514][ T6333] ? __pfx_lo_ioctl+0x10/0x10 [ 134.848527][ T6333] ? is_bpf_text_address+0x26/0x2b0 [ 134.848552][ T6333] ? is_bpf_text_address+0x292/0x2b0 [ 134.848569][ T6333] ? __lock_acquire+0x6b5/0x2d10 [ 134.848586][ T6333] ? __lock_acquire+0x6b5/0x2d10 [ 134.848604][ T6333] ? __lock_acquire+0x6b5/0x2d10 [ 134.848621][ T6333] ? __lock_acquire+0x6b5/0x2d10 [ 134.848638][ T6333] ? __lock_acquire+0x6b5/0x2d10 [ 134.848655][ T6333] ? __lock_acquire+0x6b5/0x2d10 [ 134.848673][ T6333] ? unwind_next_frame+0xa6/0x2550 [ 134.848691][ T6333] ? unwind_next_frame+0xa6/0x2550 [ 134.848707][ T6333] ? is_bpf_text_address+0x26/0x2b0 [ 134.848726][ T6333] ? is_bpf_text_address+0x26/0x2b0 [ 134.848744][ T6333] ? is_bpf_text_address+0x292/0x2b0 [ 134.848760][ T6333] ? is_bpf_text_address+0x26/0x2b0 [ 134.848777][ T6333] ? kernel_text_address+0xa5/0xe0 [ 134.848789][ T6333] ? __kernel_text_address+0xd/0x30 [ 134.848800][ T6333] ? unwind_get_return_address+0x4d/0x90 [ 134.848816][ T6333] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 134.848831][ T6333] ? arch_stack_walk+0xfb/0x150 [ 134.848850][ T6333] ? stack_trace_save+0xa9/0x100 [ 134.848864][ T6333] ? __pfx_stack_trace_save+0x10/0x10 [ 134.848878][ T6333] ? kasan_save_free_info+0x46/0x50 [ 134.848896][ T6333] ? stack_depot_save_flags+0x33/0x810 [ 134.848912][ T6333] ? kasan_save_track+0x4f/0x80 [ 134.848923][ T6333] ? kasan_save_track+0x3e/0x80 [ 134.848934][ T6333] ? kasan_save_free_info+0x46/0x50 [ 134.848951][ T6333] ? __kasan_slab_free+0x5c/0x80 [ 134.848963][ T6333] ? kfree+0x1c5/0x6c0 [ 134.848974][ T6333] ? tomoyo_path_number_perm+0x501/0x630 [ 134.848987][ T6333] ? security_file_ioctl+0xc3/0x2a0 [ 134.848997][ T6333] ? __se_sys_ioctl+0x47/0x170 [ 134.849011][ T6333] ? do_syscall_64+0x15f/0xf80 [ 134.849024][ T6333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.849037][ T6333] ? __asan_memset+0x22/0x50 [ 134.849047][ T6333] ? blk_get_meta_cap+0x16d/0x7a0 [ 134.849061][ T6333] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 134.849074][ T6333] ? blkdev_common_ioctl+0x14b7/0x3240 [ 134.849090][ T6333] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 134.849104][ T6333] ? kasan_quarantine_put+0xbb/0x1f0 [ 134.849118][ T6333] ? tomoyo_path_number_perm+0x219/0x630 [ 134.849130][ T6333] ? tomoyo_path_number_perm+0x219/0x630 [ 134.849143][ T6333] ? do_vfs_ioctl+0x117b/0x1540 [ 134.849158][ T6333] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 134.849180][ T6333] ? __pfx_lo_ioctl+0x10/0x10 [ 134.849191][ T6333] blkdev_ioctl+0x5e6/0x750 [ 134.849205][ T6333] ? __pfx_blkdev_ioctl+0x10/0x10 [ 134.849218][ T6333] ? __fget_files+0x2a/0x420 [ 134.849230][ T6333] ? bpf_lsm_file_ioctl+0x9/0x20 [ 134.849247][ T6333] ? __pfx_blkdev_ioctl+0x10/0x10 [ 134.849260][ T6333] __se_sys_ioctl+0xff/0x170 [ 134.849275][ T6333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.849287][ T6333] do_syscall_64+0x15f/0xf80 [ 134.849304][ T6333] ? trace_irq_disable+0x3b/0x140 [ 134.849318][ T6333] ? clear_bhb_loop+0x40/0x90 [ 134.849331][ T6333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.849343][ T6333] RIP: 0033:0x7f8c2394cdd9 [ 134.849354][ T6333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.849364][ T6333] RSP: 002b:00007f8c21b64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.849378][ T6333] RAX: ffffffffffffffda RBX: 00007f8c23bc6180 RCX: 00007f8c2394cdd9 [ 134.849387][ T6333] RDX: 0000000000000007 RSI: 0000000000004c06 RDI: 0000000000000003 [ 134.849394][ T6333] RBP: 00007f8c239e2d69 R08: 0000000000000000 R09: 0000000000000000 [ 134.849401][ T6333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.849408][ T6333] R13: 00007f8c23bc6218 R14: 00007f8c23bc6180 R15: 00007fff4f3578f8 [ 134.849420][ T6333] [ 135.259481][ T6333] Dev loop6: unable to read RDB block 8 [ 135.259522][ T6333] loop6: unable to read partition table [ 135.259652][ T6333] loop6: partition table beyond EOD, truncated [ 135.263394][ T6333] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 135.778148][ T6338] syz.0.209 (6338): drop_caches: 2