last executing test programs: 8.851380904s ago: executing program 2 (id=813): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x440000, 0x2) r1 = openat(r0, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r1, &(0x7f0000000200)='27', 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000002800)=ANY=[@ANYRESHEX=r3, @ANYRES16=r1], 0xe8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x40000, 0x100) read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000300)=0x10000) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000002b40)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), r4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002880)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002900)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES8=r6], 0x48}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000002940)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000029c0)={&(0x7f0000002a00)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022cbd7000fedb02000900000008000300", @ANYRES32=0x0, @ANYBLOB="10006e80040001000400020004000100050008000000000010006e8004000200040002000400020011000700b084eb550811d486ef74569002000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000844}, 0x4) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000002b80)=ANY=[@ANYBLOB="12010000000000405e0430070000000200010902240001000050020904000003030086000921feff40012218000905810308008215879fba5085ec8865a6906e237c3ba480d7d156192d41eff0f22d2f0ceb2876a2eddd2d9d373f1d3ce42a352ea7a3deebf47655802450d44d4efcee77b79c0006a06d07fd83f4980f11b735eef70741efde1b251be1169efaa15b8b51ae07788b32e17921549f71393248e1a07fcebd9bf7d3498b434d414e9c78627be7e12f6328f72a099b6e41418ecabf76ce0c9f1b05438d41e49ee5ef"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = openat$cgroup_ro(r5, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r9, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x28, 0x0, 0xfb, 0xfffff034}]}, 0x10) syz_usb_control_io$hid(r8, &(0x7f0000002ac0)={0x24, 0x0, 0x0, &(0x7f0000002b00)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x3a0, 0xe4, 0x0, 0x0, 0x2a4, 0x1d0, 0x2a4, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xe0, 0x9a}}}, {{@arp={@multicast2, @private=0xa010100, 0xffffff00, 0xffffffff, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, {[0xff, 0x0, 0xff]}}, 0x2, 0x4, 0xff, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8001}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) r11 = socket(0x2a, 0x2, 0x9) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)=0x8}) 6.908863607s ago: executing program 2 (id=823): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x40) setrlimit(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) nanosleep(0x0, 0x0) fallocate(r1, 0x0, 0x6ae8, 0x100000001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fsopen(&(0x7f0000000680)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010800000000000000000100fffe0900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c000480380001800e000100696d6d656469617465000000240002800800014000000000180002801400028008000180fffffffd08000340000000000900010073797a30"], 0xd8}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)=0x0) r6 = syz_open_procfs(r5, &(0x7f0000000140)='net/ip_vs\x00') setns(0xc9, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) setregid(0xffffffffffffffff, r10) sendmsg$netlink(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)={0x10, 0x24, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x10}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10], 0xe8, 0xa0}, 0x8080) r11 = socket$kcm(0x10, 0x100000000002, 0x4) r12 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x883, 0x0) ioctl$DM_DEV_SUSPEND(r12, 0xc138fd06, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1000, 0x0, 0x0, @by_dev}) sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af014a31ba377a1b2cc32b38d3aa2a70297400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 6.823440816s ago: executing program 2 (id=824): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d0102030109021200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 6.451281309s ago: executing program 3 (id=827): timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000018c0)={0x19c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xcc, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0xd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23ca58ee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a0379ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7092548a}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1df320e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3aeb63bd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a94a879}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x667e8f5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x520b3526}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e279b2f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x5acf02aa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21c45c39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44e04372}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa8, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10000}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3eb8b800}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecfdc20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3997b2ea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}]}]}]}, 0x19c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xa0201, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x802200, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000004c0)=0x91b) read$dsp(r4, &(0x7f0000000500)=""/4096, 0x1000) read$dsp(r4, &(0x7f00000017c0)=""/232, 0xe8) 6.077588408s ago: executing program 3 (id=828): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x1a1740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000009c0)={0x0, &(0x7f0000000a00)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}], 0x20}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000a40)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x2}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000a80)={[0x6, 0x7fffffffffffffff, 0x40000010014, 0xd, 0x2ae2, 0x4, 0x39c4f771, 0x7f4, 0x8, 0x8000008, 0x0, 0xfffffffffffffff7, 0xfffffffffffffefd, 0x7, 0xffffffff, 0x8000000000000004], 0x0, 0x110900}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.906729387s ago: executing program 3 (id=830): socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x0, 0x21) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000002000010025bd70010000000002000000200009800800130009000000", @ANYRES32=r0, @ANYBLOB='\f\x00', @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x40940}, 0x4) 5.825725846s ago: executing program 3 (id=831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000001240)=ANY=[@ANYBLOB="14f5ff001000010000000000000000000000000a20000000020a01020800000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c000380"], 0x10c}}, 0x20040000) 5.728903447s ago: executing program 3 (id=832): write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xa, {"a2e39b214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324d078b089b3b0838681a0890e0878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b343b0d076c0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c30900004288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e6793df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef7becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe505003d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6ae4effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a355bad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb5365e2586a8ffcdaa49754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d71eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbefd3d540b41f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995709bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b018e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c420a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef090200000055315ab80dd349e891aef595dc4d471c8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f1afc5b59a70efaea2bd40195af4486220d8f2e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec0700068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949d9a92587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd685903000000e1f0930462df15aa82000000000000a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0x1000}}, 0x1006) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001200)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r1, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) r3 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x11, 0x0, 0x20, 0x0, 0x0, 0x0) process_vm_readv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1, &(0x7f0000000100)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000013c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) setfsuid(0xee01) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000a52000/0x18000)=nil, &(0x7f0000001480)=[@text16={0x10, &(0x7f0000001500)="2ef30fc7b2150066b800a000000f23c80f21f866350400c0000f23f866b9d30b000066b8e600000066ba000000000f3066b9ba0b00000f32b822010f00d066b95709000066b80001c0fe66ba000000000f300f01cf2ea46566670fb0d06766c7442400000001006766c74424029b8f00006766c744240600000000670f011424", 0x80}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) write$char_usb(r5, 0x0, 0x0) r10 = syz_open_dev$vcsn(0x0, 0x4, 0x103000) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000001340)={'syz_tun\x00', 0x2000}) syz_usb_disconnect(r4) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$NILFS_IOCTL_SYNC(r3, 0x80086e8a, &(0x7f0000001380)) 3.670431802s ago: executing program 1 (id=841): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) accept(r0, &(0x7f0000000180)=@nl, &(0x7f0000000200)=0x80) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4c054) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_SUSPEND(r3, 0xc138fd06, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) 3.449108476s ago: executing program 1 (id=842): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@multicast2, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x21}, {0xfffffffffffffffc, 0xffffffffffffffff, 0xfff, 0x2, 0x0, 0x7, 0x5, 0xfffffffffffffffd}, {0x58b6c42b, 0xffffffffffff90df, 0xce2, 0x20000000000000}, 0x40, 0x0, 0x1, 0x1, 0x1}, {{@in6=@local, 0x4d5, 0x6c}, 0x2, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x5, 0x200000}}, 0xe8) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) 3.3596416s ago: executing program 1 (id=844): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x10, 0x110, 0xc}], 0x10}, 0x0) socket$netlink(0x10, 0x3, 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200000}) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, 0x0, &(0x7f00000002c0)) syz_usb_connect(0x2, 0xb3, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e24"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f0000000040)=0x40, 0x4) r3 = socket$kcm(0x10, 0x7, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0xd8000000000000, 0x266402) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000200)=0xd) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x0, 'veth0_to_batadv\x00', {0x4}}) 2.628855655s ago: executing program 2 (id=846): syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) write$hidraw(0xffffffffffffffff, &(0x7f0000002280)="4c4efb7ad2234cdbd33b20ec6bea31355505fe15baebd05dfba242f99f052457550353ee03329313f254274d7d336076fb75d13b42dc7bc4425ca64b383c05e00026de3c661e5144bb8953606dbb367cd9938259d5253a403ae00be1735db38492bfcff6a6e1567f5170bafe18172a5e132205cb10e64bfb704663d10619fe8067b03d59f0239bf6507c2a7c36abe8aa5d5346a8ada96ecd818e1cde621f09fed7190e510f3198520664f833c824b9abf6e5eb12b7e1e0a28831beb28be69d4530fa1b40076c70bf1f2d46a2cb2276feb28fc5d99c7033935d30b840142ef9", 0xdf) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1d, 0x2, 0x6) bind$inet(r3, &(0x7f0000002240)={0x1d, 0x4e20, @loopback}, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000002440)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) setns(0xc9, 0x0) r5 = socket(0x2a, 0x2, 0x9) connect(r5, &(0x7f0000002480)=@qipcrtr={0x2a, 0x4, 0xfffffffe}, 0x80) bind$inet(r5, &(0x7f0000002500)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000400000001000000090000004c0003800800030000000000140002007663616e300000000000000000000000080001000200000014000600ff"], 0x60}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000002200)='ip6gretap0\x00') setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x59455247, 0x2, @stepwise={0x3, 0x8, 0x10001, 0xfff, 0x9, 0x2000}}) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x40000) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000f80)={{r6}, "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"}) ioctl$BLKFRASET(r6, 0x1264, 0x0) signalfd4(r6, &(0x7f0000000200), 0x8, 0x100800) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0x9, 0xac, {0xac, 0x21, "16ef21b1242f7ddd402e8c9e2e6404025f11ce0a9892621867e9bc5dc5b533bbdca1b934cb5d5b3d286e8ef454fd9d2cf2b91639e600c5d1e70356de69843344561d1753753f62de930615327c830a00133b8a298d15cb7ce9dceb8452e259749fd80756c7af0296b8e84f5337e8e13d12630fbcd52ca7cf052d8f085a2e3870a2f334da756b1ed90de8de203f13164df794252d1b3cb78f21e1366391849d90f302d7c0f58c0851d9cb"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}, &(0x7f00000003c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x2, 0x4, 0x3438}]}}, &(0x7f0000002540)={0x20, 0x29, 0xf, {0xf, 0x29, 0xbf, 0x80, 0xff, 0x7, "90b6bc2b", "2df32b5e"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0x9, 0xd, 0x9, 0x6, 0x40}}}, &(0x7f0000002140)={0x84, &(0x7f00000004c0)={0x0, 0x17, 0xd1, "5deef8a2a47ffa15c83c74dc091deb1ac66745b0ce54104ba257242c870859025f99a2b40dac65fa0d56698a4070f1902e92780a2233087976bd3a0fe7daa42fa7073eff6761fcdf067b24a28a7807ee9531197a67f723f3b9c7a88ee503d51874f2d37672f800886e4c52fa8e066e75780e8cd81a77027fe0b0b97db44e46276cb17465bde8ebefa492e3044a423c7b66d8383020b1ad5ec4220b4be75f2c9345ca5eff859a7ab5e62629ece977bc454177cd039deebf4250d1e2c07db72758219e55c2483ab4e68283d7197b0aaa3365"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0xc0, 0x8}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0xb, 0x2, "5784"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000001f80)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000001fc0)={0x40, 0x17, 0x6}, &(0x7f0000002000)={0x40, 0x19, 0x2, "eb4f"}, &(0x7f0000002100)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000002080)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000020c0)={0x40, 0x1e, 0x1, 0xfa}, &(0x7f0000000400)={0x40, 0x21, 0x1, 0x10}}) 2.541831782s ago: executing program 3 (id=847): write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0x1006) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001200)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r1, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) r3 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) process_vm_readv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1, &(0x7f0000000100)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000013c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) setfsuid(0xee01) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000a52000/0x18000)=nil, &(0x7f0000001480)=[@text16={0x10, &(0x7f0000001500)="2ef30fc7b2150066b800a000000f23c80f21f866350400c0000f23f866b9d30b000066b8e600000066ba000000000f3066b9ba0b00000f32b822010f00d066b95709000066b80001c0fe66ba000000000f300f01cf2ea46566670fb0d06766c7442400000001006766c74424029b8f00006766c744240600000000670f011424", 0x80}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) write$char_usb(r5, 0x0, 0x0) r10 = syz_open_dev$vcsn(0x0, 0x4, 0x103000) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000001340)={'syz_tun\x00', 0x2000}) syz_usb_disconnect(r4) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$NILFS_IOCTL_SYNC(r3, 0x80086e8a, &(0x7f0000001380)) 2.354762801s ago: executing program 0 (id=849): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x1a1740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000009c0)={0x0, &(0x7f0000000a00)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000a40)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x2}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000a80)={[0x6, 0x7fffffffffffffff, 0x40000010014, 0xd, 0x2ae2, 0x4, 0x39c4f771, 0x7f4, 0x8, 0x8000008, 0x0, 0xfffffffffffffff7, 0xfffffffffffffefd, 0x7, 0xffffffff, 0x8000000000000004], 0x0, 0x110900}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.268926351s ago: executing program 0 (id=850): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) copy_file_range(r1, 0x0, r1, 0xfffffffffffffffc, 0x4, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="200837000000f648a0dafa0826f1d791689e3ec0e707c7fd1fbc4a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pidfd_getfd(r1, r1, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) copy_file_range(r1, 0x0, r1, 0xfffffffffffffffc, 0x4, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="200837000000f648a0dafa0826f1d791689e3ec0e707c7fd1fbc4a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) pidfd_getfd(r1, r1, 0x0) (async) 1.028581952s ago: executing program 1 (id=851): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000580)={0xfffe, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000600)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x4100, 0x0}}], 0xff80, 0x2400c8c4) 1.027147929s ago: executing program 2 (id=852): ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001880)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001900)='./dev\x00', &(0x7f0000001940)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001980)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f00000019c0)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r1, 0xc138fd0a, &(0x7f0000001a00)="0400000000000000000000005001000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1002}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) r2 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/183, 0xb7}, {&(0x7f0000000580)=""/220, 0xdc}, {&(0x7f0000000680)=""/255, 0xff}, {&(0x7f0000000780)=""/159, 0x9f}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x5}}], 0x1, 0x0, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f00000018c0)={0xe, {0x101, 0x1ff, 0x7, 0x81}}) write(r2, &(0x7f0000001840)="1400000052004f7fb3e4bf80a000080000000000", 0x14) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000240)={[{}, {@memory_recursiveprot}, {@memory_hugetlb_accounting}, {@subsystem='net'}], [{@smackfsdef}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x39, 0x39, 0x31, 0x61, 0x78, 0x31, 0x63], 0x2d, [0x33, 0x38, 0x35, 0x39], 0x2d, [0x0, 0x62, 0x63, 0x34], 0x2d, [0x39, 0x39, 0x38, 0x34], 0x2d, [0x35, 0x66, 0x30, 0x32, 0x33, 0x38, 0x31, 0x32]}}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'sysfs\x00'}}, {@obj_type={'obj_type', 0x3d, '/dev/net/tun\x00'}}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/net/syzkaller0/queues/tx-0/xps_cpus\x00', 0x2, 0x80) write(r3, &(0x7f00000003c0)='1', 0x1) 960.943268ms ago: executing program 0 (id=853): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000001840)="240000003f0005000a0000000000000003020000000000000c0001006f76732d64703000", 0x24, 0x4000000, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='9p\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x40102, 0x0) write(r1, &(0x7f0000000240)='27', 0x2) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05000000738856d5a3489d0b000008000300", @ANYRES32=r4, @ANYBLOB="080005"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000000906010200000000000000000500ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/208, 0xd0}, {&(0x7f0000000700)=""/90, 0x5a}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x3}, 0x10000) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="1c000000070601080000ffffffffffff090000040500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x10f) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r11 = accept4$tipc(r1, &(0x7f00000002c0)=@name, &(0x7f0000001880)=0x10, 0x80000) setsockopt$SO_TIMESTAMP(r11, 0x1, 0x40, &(0x7f00000018c0)=0x7f, 0x4) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04420300c9"], 0x6) bind$x25(r10, &(0x7f00000001c0), 0x12) listen(r10, 0x1) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97) 893.315631ms ago: executing program 2 (id=854): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000200)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800007, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x73a, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80007ffd, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x6, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000001980)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000001a00)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001a80)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) mount$tmpfs(0x0, &(0x7f0000003b80)='./cgroup\x00', &(0x7f0000003bc0), 0x1000081, &(0x7f0000003c00)={[{@nr_inodes={'nr_inodes', 0x3d, [0x1d]}}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001ac0)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000003b40)={0x1fe, 0x2, 0xdddd1000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000003c40)=ANY=[@ANYBLOB="12010000000000401904000600000000000109022400010000f80009040016020300030009210000000122180009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000003c80)={0x24, 0x0, 0x0, &(0x7f0000003cc0)=ANY=[@ANYBLOB="0022180000000601c8a3"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x2, &(0x7f00000000c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000003d00)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103c3"], 0x0) syz_open_dev$evdev(&(0x7f0000003d40), 0x4, 0x6443) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0xfffffffffffffdfd, 0x5, 0x6, 0x40000000032a, 0x2, 0x2, 0xfffffffffffffffd, 0xe95, 0x1}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000680)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f00000006c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x1) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) sendmmsg$inet6(r6, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="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", 0x1000}], 0x1}}], 0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000001840)={&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001880)=""/115, 0x73, 0x0, 0x0}, &(0x7f0000001900)=0x40) 249.438989ms ago: executing program 0 (id=855): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000840)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./mnt\x00', 0x1ff) mount(&(0x7f00000009c0)=@filename='./dev/sda1\x00', &(0x7f0000000a00)='./mnt\x00', &(0x7f0000000a40)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000a80)='./mnt\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000b00)=@v1={0x0, @aes128, 0x4, @desc4}) 198.11498ms ago: executing program 0 (id=856): timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000018c0)={0x19c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xcc, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0xd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23ca58ee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a0379ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7092548a}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1df320e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3aeb63bd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a94a879}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x667e8f5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x520b3526}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e279b2f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x5acf02aa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21c45c39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44e04372}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa8, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10000}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3eb8b800}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecfdc20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3997b2ea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}]}]}]}, 0x19c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xa0201, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x802200, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000004c0)=0x91b) write$dsp(r3, &(0x7f0000001500)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read$dsp(r4, &(0x7f00000017c0)=""/232, 0xe8) 95.914836ms ago: executing program 1 (id=857): socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x0, 0x21) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000002000010025bd700100000000020000002000098008001300090000000800", @ANYRES32=r0, @ANYBLOB='\f\x00', @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x40940}, 0x4) 92.439014ms ago: executing program 0 (id=858): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x1a1740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000009c0)={0x0, &(0x7f0000000a00)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000a40)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x2}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000a80)={[0x6, 0x7fffffffffffffff, 0x40000010014, 0xd, 0x2ae2, 0x4, 0x39c4f771, 0x7f4, 0x8, 0x8000008, 0x0, 0xfffffffffffffff7, 0xfffffffffffffefd, 0x7, 0xffffffff, 0x8000000000000004], 0x0, 0x110900}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 1 (id=859): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000140)='./mydev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x604000000000000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000240)={0xb}, 0x8) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4f20, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x1c) write(r1, 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) (rerun: 32) kernel console output (not intermixed with test programs): device strings: Mfr=1, Product=228, SerialNumber=2 [ 266.429465][ T10] usb 2-1: Product: syz [ 266.429471][ T10] usb 2-1: Manufacturer: syz [ 266.429478][ T10] usb 2-1: SerialNumber: syz [ 266.433024][ T10] usb 2-1: config 0 descriptor?? [ 266.457586][ T916] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 266.515217][ T5637] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 266.525903][ T10] usb 2-1: selecting invalid altsetting 0 [ 266.656819][ T916] usb 4-1: device descriptor read/64, error -71 [ 266.675905][ T5637] usb 1-1: Using ep0 maxpacket: 32 [ 266.677355][ T5637] usb 1-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 266.678157][ T5637] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 266.678171][ T5637] usb 1-1: config 0 has no interface number 0 [ 266.678195][ T5637] usb 1-1: config 0 interface 184 has no altsetting 0 [ 266.683226][ T5637] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.683239][ T5637] usb 1-1: Product: syz [ 266.683246][ T5637] usb 1-1: Manufacturer: syz [ 266.683252][ T5637] usb 1-1: SerialNumber: syz [ 266.739612][ T5637] usb 1-1: config 0 descriptor?? [ 266.761480][ T10] usb 2-1: USB disconnect, device number 49 [ 266.771767][ T916] usb usb4-port1: attempt power cycle [ 267.115776][ T916] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 267.136324][ T916] usb 4-1: device descriptor read/8, error -71 [ 267.180926][ T5637] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 267.180945][ T5637] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 267.180954][ T5637] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 267.181107][ T5637] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 267.220722][ T5733] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 267.375729][ T916] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 267.394516][ T5733] usb 3-1: Using ep0 maxpacket: 8 [ 267.394978][ T5733] usb 3-1: New USB device found: idVendor=046d, idProduct=c623, bcdDevice=0.00 [ 267.401643][ T916] usb 4-1: device descriptor read/8, error -71 [ 267.418694][ T5733] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.418715][ T5733] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.418725][ T5733] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.418737][ T5733] usb 3-1: config 0 interface 0 has no altsetting 0 [ 267.418758][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.481758][ T5733] usb 3-1: config 0 descriptor?? [ 267.512652][ T916] usb usb4-port1: unable to enumerate USB device [ 268.818714][ T7525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.818970][ T7525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.862869][ T5733] input: HID 046d:c623 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C623.0008/input/input37 [ 268.967925][ T5733] logitech 0003:046D:C623.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.2-1/input0 [ 269.006353][ T916] usb 3-1: USB disconnect, device number 46 [ 269.122105][ T7530] fido_id[7530]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 269.436433][ T7539] capability: warning: `syz.3.532' uses deprecated v2 capabilities in a way that may be insecure [ 269.698145][ T7549] netlink: 32 bytes leftover after parsing attributes in process `syz.2.536'. [ 269.705666][ T5637] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 269.845650][ T5637] usb 4-1: device descriptor read/64, error -71 [ 269.873867][ T11] usb 1-1: USB disconnect, device number 38 [ 269.896128][ T916] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 269.986841][ T5733] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 270.047287][ T916] usb 2-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 270.050120][ T916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.050134][ T916] usb 2-1: Product: syz [ 270.050141][ T916] usb 2-1: Manufacturer: syz [ 270.050148][ T916] usb 2-1: SerialNumber: syz [ 270.053738][ T916] usb 2-1: config 0 descriptor?? [ 270.096908][ T5637] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 270.138911][ T5733] usb 3-1: unable to get BOS descriptor or descriptor too short [ 270.138942][ T5733] usb 3-1: New USB device found: idVendor=0471, idProduct=0326, bcdDevice=e1.2a [ 270.139851][ T5733] usb 3-1: config 127 has an invalid interface number: 179 but max is 0 [ 270.139867][ T5733] usb 3-1: config 127 has no interface number 0 [ 270.139882][ T5733] usb 3-1: config 127 interface 179 has no altsetting 0 [ 270.141751][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.141763][ T5733] usb 3-1: Product: syz [ 270.141771][ T5733] usb 3-1: Manufacturer: syz [ 270.141777][ T5733] usb 3-1: SerialNumber: syz [ 270.249125][ T5637] usb 4-1: device descriptor read/64, error -71 [ 270.282175][ T916] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 270.356266][ T5637] usb usb4-port1: attempt power cycle [ 270.425477][ T5733] gspca_main: gspca_zc3xx-2.14.0 probing 0471:0326 [ 270.436972][ T5733] gspca_zc3xx: reg_w_i err -71 [ 270.695641][ T5637] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 270.716128][ T5637] usb 4-1: device descriptor read/8, error -71 [ 270.886550][ T916] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 271.126631][ T5637] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 271.188038][ T5733] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 271.188089][ T5733] gspca_zc3xx 3-1:127.179: probe with driver gspca_zc3xx failed with error -71 [ 271.195755][ T5637] usb 4-1: device descriptor read/8, error -71 [ 271.383243][ T5637] usb usb4-port1: unable to enumerate USB device [ 271.494422][ T5733] usb 3-1: USB disconnect, device number 47 [ 271.775739][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 272.405664][ T5733] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 272.537101][ T5733] usb 3-1: device descriptor read/64, error -71 [ 272.692446][ T11] usb 2-1: USB disconnect, device number 50 [ 272.779050][ T5733] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 272.825731][ T916] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 272.860107][ T7581] xt_IDLETIMER: label is empty or not nul-terminated [ 272.874639][ T7581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.544'. [ 272.892813][ T7582] sd 0:0:1:0: PR command failed: 1026 [ 272.892847][ T7582] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 272.892870][ T7582] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 272.987089][ T916] usb 4-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00 [ 272.998373][ T916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.998388][ T916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.022216][ T916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 273.022231][ T916] usb 4-1: SerialNumber: syz [ 273.108953][ T7589] netlink: 763 bytes leftover after parsing attributes in process `syz.0.545'. [ 273.165622][ T5637] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 273.235083][ T916] usb 4-1: 0:2 : does not exist [ 273.265380][ T916] usb 4-1: USB disconnect, device number 39 [ 273.292971][ T6779] udevd[6779]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.326977][ T5637] usb 2-1: Using ep0 maxpacket: 32 [ 273.327440][ T5637] usb 2-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 273.328222][ T5637] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 273.328235][ T5637] usb 2-1: config 0 has no interface number 0 [ 273.328258][ T5637] usb 2-1: config 0 interface 184 has no altsetting 0 [ 273.329856][ T5637] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.329868][ T5637] usb 2-1: Product: syz [ 273.329875][ T5637] usb 2-1: Manufacturer: syz [ 273.329882][ T5637] usb 2-1: SerialNumber: syz [ 273.333232][ T5637] usb 2-1: config 0 descriptor?? [ 273.758147][ T5637] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 273.758166][ T5637] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 273.758175][ T5637] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 273.758326][ T5637] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 273.884549][ T7592] FAULT_INJECTION: forcing a failure. [ 273.884549][ T7592] name failslab, interval 1, probability 0, space 0, times 0 [ 273.884569][ T7592] CPU: 0 UID: 0 PID: 7592 Comm: syz.2.549 Not tainted syzkaller #0 PREEMPT(full) [ 273.884581][ T7592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 273.884587][ T7592] Call Trace: [ 273.884592][ T7592] [ 273.884597][ T7592] dump_stack_lvl+0xe8/0x150 [ 273.884619][ T7592] should_fail_ex+0x3eb/0x540 [ 273.884636][ T7592] should_failslab+0xa8/0x100 [ 273.884650][ T7592] ? __khugepaged_enter+0x76/0x2f0 [ 273.884665][ T7592] kmem_cache_alloc_noprof+0x9c/0x600 [ 273.884678][ T7592] ? __khugepaged_enter+0x76/0x2f0 [ 273.884694][ T7592] __khugepaged_enter+0x76/0x2f0 [ 273.884710][ T7592] madvise_vma_behavior+0x1f6f/0x4cb0 [ 273.884727][ T7592] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 273.884745][ T7592] ? do_raw_spin_lock+0x12b/0x2f0 [ 273.884763][ T7592] ? rcu_is_watching+0x16/0xb0 [ 273.884776][ T7592] ? trace_hrtimer_start+0x82/0x200 [ 273.884787][ T7592] ? hrtimer_start_range_ns_common+0x7cd/0xb60 [ 273.884808][ T7592] ? finish_task_switch+0x40e/0xc60 [ 273.884820][ T7592] ? lockdep_hardirqs_on+0x7b/0x110 [ 273.884834][ T7592] ? rcu_is_watching+0x16/0xb0 [ 273.884846][ T7592] ? trace_sched_exit_tp+0x3a/0x130 [ 273.884860][ T7592] ? __lock_acquire+0x747/0x2de0 [ 273.884879][ T7592] ? mas_prev_slot+0xb76/0xbf0 [ 273.884900][ T7592] ? find_vma_prev+0x123/0x1b0 [ 273.884915][ T7592] ? __pfx_find_vma_prev+0x10/0x10 [ 273.884927][ T7592] ? futex_unqueue+0x22/0x240 [ 273.884950][ T7592] madvise_walk_vmas+0x57d/0xb70 [ 273.884968][ T7592] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 273.884982][ T7592] ? blk_start_plug+0x6e/0x1b0 [ 273.884996][ T7592] madvise_do_behavior+0x385/0x540 [ 273.885011][ T7592] ? __pfx_madvise_do_behavior+0x10/0x10 [ 273.885033][ T7592] do_madvise+0x327/0x3a0 [ 273.885045][ T7592] ? __pfx_do_madvise+0x10/0x10 [ 273.885063][ T7592] ? __se_sys_futex+0x3a8/0x450 [ 273.885080][ T7592] ? rcu_is_watching+0x16/0xb0 [ 273.885096][ T7592] __x64_sys_madvise+0xa6/0xc0 [ 273.885108][ T7592] do_syscall_64+0x166/0x520 [ 273.885128][ T7592] ? trace_irq_disable+0x3b/0x140 [ 273.885139][ T7592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.885149][ T7592] ? clear_bhb_loop+0x70/0xc0 [ 273.885160][ T7592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.885170][ T7592] RIP: 0033:0x7f429519f559 [ 273.885180][ T7592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.885188][ T7592] RSP: 002b:00007f4296082028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 273.885200][ T7592] RAX: ffffffffffffffda RBX: 00007f4295425fa0 RCX: 00007f429519f559 [ 273.885206][ T7592] RDX: 000000000000000e RSI: 0000000000800000 RDI: 0000200000000000 [ 273.885213][ T7592] RBP: 00007f4295236b20 R08: 0000000000000000 R09: 0000000000000000 [ 273.885218][ T7592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.885224][ T7592] R13: 00007f4295426038 R14: 00007f4295425fa0 R15: 00007fffb0d432f8 [ 273.885240][ T7592] [ 274.252746][ T7594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.548'. [ 274.267166][ T7599] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 274.270583][ T7592] netlink: 'syz.2.549': attribute type 10 has an invalid length. [ 274.270595][ T7592] netlink: 40 bytes leftover after parsing attributes in process `syz.2.549'. [ 275.472922][ T7600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.473182][ T7600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.535053][ T7592] team0: Port device geneve1 added [ 275.815674][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 275.905641][ T5637] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 275.945647][ T10] usb 1-1: device descriptor read/64, error -71 [ 276.057652][ T5637] usb 3-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 276.061505][ T5637] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.061519][ T5637] usb 3-1: Product: syz [ 276.061526][ T5637] usb 3-1: Manufacturer: syz [ 276.061532][ T5637] usb 3-1: SerialNumber: syz [ 276.065011][ T5637] usb 3-1: config 0 descriptor?? [ 276.185779][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 276.309557][ T5637] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 276.324704][ T10] usb 1-1: device descriptor read/64, error -71 [ 276.426970][ T10] usb usb1-port1: attempt power cycle [ 276.524364][ T5733] usb 2-1: USB disconnect, device number 51 [ 276.576947][ T7611] netlink: 32 bytes leftover after parsing attributes in process `syz.1.553'. [ 276.765629][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 276.786578][ T10] usb 1-1: device descriptor read/8, error -71 [ 276.912649][ T5637] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 276.916233][ T11] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 277.075666][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 277.077502][ T11] usb 4-1: unable to get BOS descriptor or descriptor too short [ 277.077533][ T11] usb 4-1: New USB device found: idVendor=04e8, idProduct=8001, bcdDevice=41.ad [ 277.077552][ T11] usb 4-1: no configurations [ 277.077558][ T11] usb 4-1: can't read configurations, error -22 [ 277.205654][ T11] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 277.305676][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 277.326165][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 277.326619][ T10] usb 1-1: New USB device found: idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 277.329687][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.329702][ T10] usb 1-1: Product: syz [ 277.329709][ T10] usb 1-1: Manufacturer: syz [ 277.329716][ T10] usb 1-1: SerialNumber: syz [ 277.331300][ T10] usb 1-1: config 0 descriptor?? [ 277.385762][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 277.387696][ T11] usb 4-1: unable to get BOS descriptor or descriptor too short [ 277.387726][ T11] usb 4-1: New USB device found: idVendor=04e8, idProduct=8001, bcdDevice=41.ad [ 277.387771][ T11] usb 4-1: no configurations [ 277.387777][ T11] usb 4-1: can't read configurations, error -22 [ 277.388053][ T11] usb usb4-port1: attempt power cycle [ 277.543076][ T7623] FAULT_INJECTION: forcing a failure. [ 277.543076][ T7623] name failslab, interval 1, probability 0, space 0, times 0 [ 277.543097][ T7623] CPU: 0 UID: 0 PID: 7623 Comm: syz.1.558 Not tainted syzkaller #0 PREEMPT(full) [ 277.543109][ T7623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 277.543115][ T7623] Call Trace: [ 277.543121][ T7623] [ 277.543126][ T7623] dump_stack_lvl+0xe8/0x150 [ 277.543145][ T7623] should_fail_ex+0x3eb/0x540 [ 277.543162][ T7623] should_failslab+0xa8/0x100 [ 277.543177][ T7623] __kmalloc_noprof+0xf9/0x710 [ 277.543188][ T7623] ? tomoyo_encode+0x2ad/0x570 [ 277.543202][ T7623] ? tomoyo_encode+0x2ad/0x570 [ 277.543217][ T7623] tomoyo_encode+0x2ad/0x570 [ 277.543233][ T7623] tomoyo_realpath_from_path+0x5fa/0x640 [ 277.543251][ T7623] ? tomoyo_path_number_perm+0x219/0x5f0 [ 277.543262][ T7623] tomoyo_path_number_perm+0x246/0x5f0 [ 277.543276][ T7623] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 277.543286][ T7623] ? __lock_acquire+0x747/0x2de0 [ 277.543317][ T7623] ? __fget_files+0x2a/0x420 [ 277.543330][ T7623] ? __fget_files+0x2a/0x420 [ 277.543340][ T7623] ? __fget_files+0x2a/0x420 [ 277.543353][ T7623] security_file_ioctl+0xc3/0x2a0 [ 277.543365][ T7623] __se_sys_ioctl+0x47/0x170 [ 277.543380][ T7623] do_syscall_64+0x166/0x520 [ 277.543392][ T7623] ? trace_irq_disable+0x3b/0x140 [ 277.543403][ T7623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.543413][ T7623] ? clear_bhb_loop+0x70/0xc0 [ 277.543425][ T7623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.543435][ T7623] RIP: 0033:0x7f664499f559 [ 277.543445][ T7623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.543453][ T7623] RSP: 002b:00007f664587f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.543465][ T7623] RAX: ffffffffffffffda RBX: 00007f6644c25fa0 RCX: 00007f664499f559 [ 277.543472][ T7623] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 277.543478][ T7623] RBP: 00007f664587f090 R08: 0000000000000000 R09: 0000000000000000 [ 277.543484][ T7623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.543490][ T7623] R13: 00007f6644c26038 R14: 00007f6644c25fa0 R15: 00007ffefba8c8e8 [ 277.543506][ T7623] [ 277.543528][ T7623] ERROR: Out of memory at tomoyo_realpath_from_path. [ 277.738887][ T11] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 277.795365][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 277.827252][ T11] usb 4-1: unable to get BOS descriptor or descriptor too short [ 277.827284][ T11] usb 4-1: New USB device found: idVendor=04e8, idProduct=8001, bcdDevice=41.ad [ 277.827304][ T11] usb 4-1: no configurations [ 277.827311][ T11] usb 4-1: can't read configurations, error -22 [ 277.865201][ T5644] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 277.878353][ T10] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 277.956396][ T11] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 277.989339][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 278.413672][ T11] usb 4-1: unable to get BOS descriptor or descriptor too short [ 278.413716][ T11] usb 4-1: New USB device found: idVendor=04e8, idProduct=8001, bcdDevice=41.ad [ 278.413780][ T11] usb 4-1: no configurations [ 278.413787][ T11] usb 4-1: can't read configurations, error -22 [ 278.444861][ T11] usb usb4-port1: unable to enumerate USB device [ 279.154109][ T11] usb 3-1: USB disconnect, device number 50 [ 279.585661][ T11] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 279.737627][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 279.739789][ T11] usb 3-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 279.741323][ T11] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 279.741337][ T11] usb 3-1: config 0 has no interface number 0 [ 279.741361][ T11] usb 3-1: config 0 interface 184 has no altsetting 0 [ 279.745179][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.745193][ T11] usb 3-1: Product: syz [ 279.745200][ T11] usb 3-1: Manufacturer: syz [ 279.745206][ T11] usb 3-1: SerialNumber: syz [ 279.815973][ T11] usb 3-1: config 0 descriptor?? [ 279.872893][ T7644] netlink: 32 bytes leftover after parsing attributes in process `syz.1.565'. [ 279.893946][ T7646] netlink: 16 bytes leftover after parsing attributes in process `syz.3.566'. [ 279.894597][ T7647] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 280.148531][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 280.148960][ T10] dvbdev: DVB: registering new adapter (Terratec H7) [ 280.149001][ T10] usb 1-1: media controller created [ 280.149888][ T10] usb read operation failed. (-32) [ 280.154549][ T10] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 280.195331][ T916] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 280.227713][ T11] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 280.227743][ T11] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 280.227753][ T11] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 280.227900][ T11] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 280.336343][ T916] usb 4-1: device descriptor read/64, error -71 [ 280.575768][ T916] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 280.705890][ T916] usb 4-1: device descriptor read/64, error -71 [ 280.790325][ T7654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.791107][ T7654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.815947][ T916] usb usb4-port1: attempt power cycle [ 281.055824][ T10] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 281.155682][ T916] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 281.176113][ T916] usb 4-1: device descriptor read/8, error -71 [ 281.206136][ T10] usb 2-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 281.208932][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.208947][ T10] usb 2-1: Product: syz [ 281.208954][ T10] usb 2-1: Manufacturer: syz [ 281.208961][ T10] usb 2-1: SerialNumber: syz [ 281.212570][ T10] usb 2-1: config 0 descriptor?? [ 281.415489][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 281.424611][ T916] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 281.446194][ T916] usb 4-1: device descriptor read/8, error -71 [ 281.517951][ T5637] usb 1-1: USB disconnect, device number 42 [ 281.556037][ T916] usb usb4-port1: unable to enumerate USB device [ 282.862338][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 282.920826][ T10] usb 3-1: USB disconnect, device number 51 [ 283.014915][ T7665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'. [ 283.104030][ T7671] netlink: 32 bytes leftover after parsing attributes in process `syz.3.575'. [ 283.348240][ T7680] netlink: 264 bytes leftover after parsing attributes in process `syz.2.578'. [ 283.398312][ T7682] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 57 out of range (51000000..2150000000) [ 283.420026][ T7686] netlink: 20 bytes leftover after parsing attributes in process `syz.2.579'. [ 283.420442][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.579'. [ 283.687405][ T10] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 284.128721][ T10] usb 3-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 284.806998][ T10] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 284.807074][ T10] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 284.807088][ T10] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 284.807100][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 284.827248][ T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 284.827264][ T10] usb 3-1: Product: syz [ 284.827271][ T10] usb 3-1: Manufacturer: syz [ 284.827278][ T10] usb 3-1: SerialNumber: syz [ 284.886822][ T10] usb 3-1: config 0 descriptor?? [ 284.908776][ T10] usb 3-1: selecting invalid altsetting 0 [ 284.939037][ T916] usb 2-1: USB disconnect, device number 52 [ 285.043610][ T7700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.583'. [ 285.099376][ T10] usb 3-1: USB disconnect, device number 52 [ 285.295815][ T5637] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 285.447243][ T5637] usb 4-1: Using ep0 maxpacket: 32 [ 285.449153][ T5637] usb 4-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 285.450024][ T5637] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 285.450038][ T5637] usb 4-1: config 0 has no interface number 0 [ 285.450061][ T5637] usb 4-1: config 0 interface 184 has no altsetting 0 [ 285.451639][ T5637] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.451651][ T5637] usb 4-1: Product: syz [ 285.451658][ T5637] usb 4-1: Manufacturer: syz [ 285.451666][ T5637] usb 4-1: SerialNumber: syz [ 285.519180][ T5637] usb 4-1: config 0 descriptor?? [ 285.816750][ T7713] netlink: 264 bytes leftover after parsing attributes in process `syz.1.588'. [ 285.941289][ T5637] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 285.941308][ T5637] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 285.941317][ T5637] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 285.941467][ T5637] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 286.196759][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'. [ 286.236566][ T11] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 286.386123][ T11] usb 2-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 286.977617][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.977633][ T11] usb 2-1: Product: syz [ 286.977641][ T11] usb 2-1: Manufacturer: syz [ 286.977647][ T11] usb 2-1: SerialNumber: syz [ 286.984664][ T11] usb 2-1: config 0 descriptor?? [ 287.016732][ T7729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.017037][ T7729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.418853][ T11] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 287.664272][ T7738] pvfs2: Unknown parameter 'noacl' [ 288.026508][ T11] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 288.091185][ T11] usb 4-1: USB disconnect, device number 48 [ 288.287329][ T7753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.603'. [ 289.705981][ T11] usb 2-1: USB disconnect, device number 53 [ 290.006214][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.613'. [ 290.025543][ T916] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 290.186064][ T916] usb 1-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 290.186933][ T916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.186946][ T916] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 290.190502][ T916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.190522][ T916] usb 1-1: Product: syz [ 290.190529][ T916] usb 1-1: Manufacturer: syz [ 290.190535][ T916] usb 1-1: SerialNumber: syz [ 290.205838][ T916] usb 1-1: config 0 descriptor?? [ 291.411463][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.620'. [ 292.809387][ T10] usb 1-1: USB disconnect, device number 43 [ 293.009798][ T7821] can0: slcan on ttyS3. [ 293.058345][ T7821] can0 (unregistered): slcan off ttyS3. [ 293.195823][ T916] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 293.347027][ T916] usb 3-1: New USB device found: idVendor=2c42, idProduct=1709, bcdDevice=b3.a4 [ 293.347053][ T916] usb 3-1: too many configurations: 129, using maximum allowed: 8 [ 293.347829][ T916] usb 3-1: config 255 has an invalid descriptor of length 226, skipping remainder of the config [ 293.347841][ T916] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 293.348580][ T916] usb 3-1: config 255 has an invalid descriptor of length 226, skipping remainder of the config [ 293.348591][ T916] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 293.350028][ T916] usb 3-1: config 255 has an invalid descriptor of length 226, skipping remainder of the config [ 293.350041][ T916] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 293.436080][ T916] usb 3-1: config 255 has an invalid descriptor of length 226, skipping remainder of the config [ 293.436097][ T916] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 293.440073][ T916] usb 3-1: config 255 has an invalid descriptor of length 226, skipping remainder of the config [ 293.440087][ T916] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 293.440866][ T916] usb 3-1: config 255 has an invalid descriptor of length 226, skipping remainder of the config [ 293.440878][ T916] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 293.441650][ T916] usb 3-1: config 255 has an invalid descriptor of length 226, skipping remainder of the config [ 293.441662][ T916] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 293.444734][ T916] usb 3-1: config 255 has an invalid descriptor of length 226, skipping remainder of the config [ 293.444748][ T916] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 293.555810][ T916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.555826][ T916] usb 3-1: Product: syz [ 293.555834][ T916] usb 3-1: Manufacturer: syz [ 293.555841][ T916] usb 3-1: SerialNumber: syz [ 294.265539][ T7868] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 296.490163][ T7917] FAULT_INJECTION: forcing a failure. [ 296.490163][ T7917] name failslab, interval 1, probability 0, space 0, times 0 [ 296.490187][ T7917] CPU: 0 UID: 0 PID: 7917 Comm: syz.0.649 Not tainted syzkaller #0 PREEMPT(full) [ 296.490199][ T7917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 296.490205][ T7917] Call Trace: [ 296.490209][ T7917] [ 296.490214][ T7917] dump_stack_lvl+0xe8/0x150 [ 296.490233][ T7917] should_fail_ex+0x3eb/0x540 [ 296.490252][ T7917] should_failslab+0xa8/0x100 [ 296.490266][ T7917] ? security_inode_alloc+0x39/0x310 [ 296.490280][ T7917] kmem_cache_alloc_noprof+0x9c/0x600 [ 296.490292][ T7917] ? __pfx_make_kgid+0x10/0x10 [ 296.490302][ T7917] ? security_inode_alloc+0x39/0x310 [ 296.490317][ T7917] security_inode_alloc+0x39/0x310 [ 296.490331][ T7917] inode_init_always_gfp+0x97e/0xd30 [ 296.490345][ T7917] alloc_inode+0x82/0x1b0 [ 296.490356][ T7917] create_pipe_files+0x51/0x7a0 [ 296.490374][ T7917] __do_pipe_flags+0x46/0x1f0 [ 296.490387][ T7917] do_pipe2+0xaa/0x190 [ 296.490402][ T7917] ? __pfx_do_pipe2+0x10/0x10 [ 296.490414][ T7917] ? rcu_is_watching+0x16/0xb0 [ 296.490434][ T7917] __x64_sys_pipe+0x3a/0x50 [ 296.490447][ T7917] do_syscall_64+0x166/0x520 [ 296.490462][ T7917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.490472][ T7917] ? clear_bhb_loop+0x70/0xc0 [ 296.490483][ T7917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.490492][ T7917] RIP: 0033:0x7f6bced9f559 [ 296.490502][ T7917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.490511][ T7917] RSP: 002b:00007f6bcfb95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 296.490523][ T7917] RAX: ffffffffffffffda RBX: 00007f6bcf025fa0 RCX: 00007f6bced9f559 [ 296.490530][ T7917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 296.490535][ T7917] RBP: 00007f6bcee36b20 R08: 0000000000000000 R09: 0000000000000000 [ 296.490541][ T7917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.490547][ T7917] R13: 00007f6bcf026038 R14: 00007f6bcf025fa0 R15: 00007fffa787ab88 [ 296.490563][ T7917] [ 296.598542][ T5637] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 296.767390][ T5637] usb 4-1: device descriptor read/64, error -71 [ 296.792384][ T916] usb 3-1: USB disconnect, device number 53 [ 297.006196][ T5637] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 297.060880][ T7925] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:21 [ 297.063207][ T7925] netlink: 'syz.0.653': attribute type 4 has an invalid length. [ 297.136028][ T5637] usb 4-1: device descriptor read/64, error -71 [ 297.246965][ T5637] usb usb4-port1: attempt power cycle [ 297.626575][ T5637] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 297.704705][ T5637] usb 4-1: device descriptor read/8, error -71 [ 298.247092][ T5637] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 298.337763][ T5637] usb 4-1: device descriptor read/8, error -71 [ 298.447659][ T5637] usb usb4-port1: unable to enumerate USB device [ 298.738029][ T7940] FAULT_INJECTION: forcing a failure. [ 298.738029][ T7940] name failslab, interval 1, probability 0, space 0, times 0 [ 298.738050][ T7940] CPU: 0 UID: 0 PID: 7940 Comm: syz.1.655 Not tainted syzkaller #0 PREEMPT(full) [ 298.738061][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 298.738067][ T7940] Call Trace: [ 298.738072][ T7940] [ 298.738077][ T7940] dump_stack_lvl+0xe8/0x150 [ 298.738095][ T7940] should_fail_ex+0x3eb/0x540 [ 298.738113][ T7940] should_failslab+0xa8/0x100 [ 298.738127][ T7940] __kmalloc_cache_noprof+0x9e/0x600 [ 298.738139][ T7940] ? __kmalloc_cache_noprof+0x148/0x600 [ 298.738149][ T7940] ? xprt_alloc+0x587/0x8c0 [ 298.738157][ T7940] ? xprt_alloc+0x587/0x8c0 [ 298.738170][ T7940] xprt_alloc+0x587/0x8c0 [ 298.738183][ T7940] xs_setup_xprt+0x9e/0x390 [ 298.738197][ T7940] xs_setup_local+0x4f/0x5d0 [ 298.738208][ T7940] xprt_create_transport+0x166/0x5f0 [ 298.738220][ T7940] rpc_create+0x53a/0x910 [ 298.738236][ T7940] ? __mutex_trylock_common+0x15f/0x270 [ 298.738249][ T7940] ? __pfx_rpc_create+0x10/0x10 [ 298.738267][ T7940] ? trace_contention_end+0x3d/0x140 [ 298.738296][ T7940] ? net_generic+0x1e/0x240 [ 298.738308][ T7940] ? net_generic+0x1e/0x240 [ 298.738322][ T7940] set_gssp_clnt+0x197/0x2f0 [ 298.738334][ T7940] ? aa_file_perm+0x18b/0x15f0 [ 298.738349][ T7940] ? __pfx_set_gssp_clnt+0x10/0x10 [ 298.738370][ T7940] ? _parse_integer_limit+0x18e/0x1e0 [ 298.738386][ T7940] ? kstrtoull+0x137/0x1d0 [ 298.738398][ T7940] write_gssp+0x458/0x930 [ 298.738425][ T7940] ? __pfx_write_gssp+0x10/0x10 [ 298.738439][ T7940] ? lock_acquire+0x115/0x350 [ 298.738457][ T7940] ? __pfx_write_gssp+0x10/0x10 [ 298.738467][ T7940] proc_reg_write+0x1e9/0x2e0 [ 298.738478][ T7940] ? __pfx_proc_reg_write+0x10/0x10 [ 298.738487][ T7940] vfs_write+0x296/0xba0 [ 298.738504][ T7940] ? __pfx_vfs_write+0x10/0x10 [ 298.738517][ T7940] ? __fget_files+0x2a/0x420 [ 298.738527][ T7940] ? __fget_files+0x3a2/0x420 [ 298.738537][ T7940] ? __fget_files+0x2a/0x420 [ 298.738549][ T7940] ? fdget+0x1ac/0x250 [ 298.738563][ T7940] ksys_write+0x150/0x270 [ 298.738576][ T7940] ? __pfx_ksys_write+0x10/0x10 [ 298.738594][ T7940] do_syscall_64+0x166/0x520 [ 298.738606][ T7940] ? trace_irq_disable+0x3b/0x140 [ 298.738618][ T7940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.738628][ T7940] ? clear_bhb_loop+0x70/0xc0 [ 298.738640][ T7940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.738650][ T7940] RIP: 0033:0x7f664499f559 [ 298.738660][ T7940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.738669][ T7940] RSP: 002b:00007f664583d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 298.738680][ T7940] RAX: ffffffffffffffda RBX: 00007f6644c26180 RCX: 00007f664499f559 [ 298.738687][ T7940] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000007 [ 298.738693][ T7940] RBP: 00007f664583d090 R08: 0000000000000000 R09: 0000000000000000 [ 298.738699][ T7940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.738705][ T7940] R13: 00007f6644c26218 R14: 00007f6644c26180 R15: 00007ffefba8c8e8 [ 298.738722][ T7940] [ 299.395874][ T916] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 299.547007][ T916] usb 3-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 299.548048][ T916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.548075][ T916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.589936][ T916] usb 3-1: config 0 descriptor?? [ 299.809503][ T7943] Mount JFS Failure: -22 [ 299.818161][ T916] usbhid 3-1:0.0: can't add hid device: -71 [ 299.818745][ T916] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 299.842558][ T916] usb 3-1: USB disconnect, device number 54 [ 299.894898][ T7964] netlink: 'syz.1.666': attribute type 29 has an invalid length. [ 299.895402][ T7964] netlink: 'syz.1.666': attribute type 29 has an invalid length. [ 299.990675][ T7964] fscrypt (sda1, inode 1262): Direct key flag not allowed with different contents and filenames modes [ 300.140122][ T7973] FAULT_INJECTION: forcing a failure. [ 300.140122][ T7973] name failslab, interval 1, probability 0, space 0, times 0 [ 300.140144][ T7973] CPU: 0 UID: 0 PID: 7973 Comm: syz.0.669 Not tainted syzkaller #0 PREEMPT(full) [ 300.140156][ T7973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 300.140171][ T7973] Call Trace: [ 300.140176][ T7973] [ 300.140181][ T7973] dump_stack_lvl+0xe8/0x150 [ 300.140201][ T7973] should_fail_ex+0x3eb/0x540 [ 300.140219][ T7973] should_failslab+0xa8/0x100 [ 300.140233][ T7973] __kmalloc_cache_noprof+0x9e/0x600 [ 300.140245][ T7973] ? kernfs_fop_open+0x38c/0xd20 [ 300.140256][ T7973] ? kernfs_fop_open+0x38c/0xd20 [ 300.140269][ T7973] kernfs_fop_open+0x38c/0xd20 [ 300.140285][ T7973] ? __pfx_kernfs_fop_open+0x10/0x10 [ 300.140295][ T7973] do_dentry_open+0x80e/0x1360 [ 300.140316][ T7973] vfs_open_consume+0x4a/0x350 [ 300.140329][ T7973] ? path_openat+0x16e1/0x20f0 [ 300.140344][ T7973] path_openat+0x16fc/0x20f0 [ 300.140366][ T7973] do_file_open+0x23e/0x4a0 [ 300.140381][ T7973] ? __pfx_do_file_open+0x10/0x10 [ 300.140405][ T7973] ? lock_acquire+0x115/0x350 [ 300.140423][ T7973] file_open_name+0x162/0x1c0 [ 300.140434][ T7973] ? __pfx_file_open_name+0x10/0x10 [ 300.140447][ T7973] ? do_getname+0x151/0x250 [ 300.140458][ T7973] __se_sys_acct+0xf0/0x9d0 [ 300.140470][ T7973] ? __pfx___se_sys_acct+0x10/0x10 [ 300.140487][ T7973] do_syscall_64+0x166/0x520 [ 300.140499][ T7973] ? trace_irq_disable+0x3b/0x140 [ 300.140511][ T7973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.140521][ T7973] ? clear_bhb_loop+0x70/0xc0 [ 300.140533][ T7973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.140580][ T7973] RIP: 0033:0x7f6bced9f559 [ 300.140591][ T7973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.140599][ T7973] RSP: 002b:00007f6bcfb95028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 300.140610][ T7973] RAX: ffffffffffffffda RBX: 00007f6bcf025fa0 RCX: 00007f6bced9f559 [ 300.140617][ T7973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000006c0 [ 300.140623][ T7973] RBP: 00007f6bcfb95090 R08: 0000000000000000 R09: 0000000000000000 [ 300.140629][ T7973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.140635][ T7973] R13: 00007f6bcf026038 R14: 00007f6bcf025fa0 R15: 00007fffa787ab88 [ 300.140651][ T7973] [ 300.280446][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 300.478417][ T10] usb 3-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.40 [ 300.479337][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.479362][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.483540][ T10] usb 3-1: config 0 descriptor?? [ 300.561557][ T7981] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 300.561704][ T7981] qnx6: wrong signature (magic) in superblock #1. [ 300.561710][ T7981] qnx6: unable to read the first superblock [ 300.860457][ T7994] FAULT_INJECTION: forcing a failure. [ 300.860457][ T7994] name failslab, interval 1, probability 0, space 0, times 0 [ 300.860478][ T7994] CPU: 0 UID: 0 PID: 7994 Comm: syz.3.677 Not tainted syzkaller #0 PREEMPT(full) [ 300.860499][ T7994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 300.860506][ T7994] Call Trace: [ 300.860510][ T7994] [ 300.860514][ T7994] dump_stack_lvl+0xe8/0x150 [ 300.860534][ T7994] should_fail_ex+0x3eb/0x540 [ 300.860549][ T7994] ? __alloc_skb+0x1db/0x7a0 [ 300.860559][ T7994] should_failslab+0xa8/0x100 [ 300.860574][ T7994] ? __alloc_skb+0x1db/0x7a0 [ 300.860582][ T7994] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 300.860593][ T7994] ? __alloc_skb+0x18d/0x7a0 [ 300.860603][ T7994] ? __alloc_skb+0x1db/0x7a0 [ 300.860615][ T7994] __alloc_skb+0x1db/0x7a0 [ 300.860627][ T7994] netlink_sendmsg+0x5cd/0xb20 [ 300.860641][ T7994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.860652][ T7994] ? aa_sock_msg_perm+0x144/0x210 [ 300.860668][ T7994] ? apparmor_socket_sendmsg+0x98/0x360 [ 300.860681][ T7994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.860690][ T7994] sock_sendmsg_nosec+0x14e/0x190 [ 300.860705][ T7994] ____sys_sendmsg+0x54e/0x850 [ 300.860720][ T7994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.860736][ T7994] ? import_iovec+0x73/0xa0 [ 300.860752][ T7994] ___sys_sendmsg+0x2a6/0x360 [ 300.860762][ T7994] ? __lock_acquire+0x747/0x2de0 [ 300.860775][ T7994] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.860804][ T7994] ? __fget_files+0x3a2/0x420 [ 300.860814][ T7994] ? __fget_files+0x2a/0x420 [ 300.860829][ T7994] __x64_sys_sendmsg+0x1b1/0x290 [ 300.860842][ T7994] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.860864][ T7994] do_syscall_64+0x166/0x520 [ 300.860877][ T7994] ? trace_irq_disable+0x3b/0x140 [ 300.860888][ T7994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.860898][ T7994] ? clear_bhb_loop+0x70/0xc0 [ 300.860909][ T7994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.860918][ T7994] RIP: 0033:0x7f900cf9f559 [ 300.860929][ T7994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.860937][ T7994] RSP: 002b:00007f900de11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.860948][ T7994] RAX: ffffffffffffffda RBX: 00007f900d225fa0 RCX: 00007f900cf9f559 [ 300.860955][ T7994] RDX: 0000000000000000 RSI: 00002000000015c0 RDI: 0000000000000003 [ 300.860961][ T7994] RBP: 00007f900de11090 R08: 0000000000000000 R09: 0000000000000000 [ 300.860967][ T7994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.860972][ T7994] R13: 00007f900d226038 R14: 00007f900d225fa0 R15: 00007ffc6c8e3b88 [ 300.860988][ T7994] [ 301.020327][ T7943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.020623][ T7943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.506853][ T10] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 301.509457][ T10] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input38 [ 301.535522][ T7943] device-mapper: table: 248:2: flakey: Device lookup failed (-ENOENT) [ 301.535607][ T7943] device-mapper: ioctl: error adding target to table [ 301.774633][ T10] usb 3-1: USB disconnect, device number 55 [ 301.774674][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 302.185801][ T5733] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 302.336647][ T5733] usb 1-1: Using ep0 maxpacket: 16 [ 302.337263][ T5733] usb 1-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 302.339019][ T5733] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.339048][ T5733] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 302.339061][ T5733] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 302.339071][ T5733] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 302.339082][ T5733] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.340037][ T5733] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 302.340049][ T5733] usb 1-1: Manufacturer: syz [ 302.342711][ T5733] usb 1-1: config 0 descriptor?? [ 302.455714][ T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 302.524569][ T8031] FAULT_INJECTION: forcing a failure. [ 302.524569][ T8031] name failslab, interval 1, probability 0, space 0, times 0 [ 302.524590][ T8031] CPU: 0 UID: 0 PID: 8031 Comm: syz.2.691 Not tainted syzkaller #0 PREEMPT(full) [ 302.524602][ T8031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 302.524608][ T8031] Call Trace: [ 302.524612][ T8031] [ 302.524617][ T8031] dump_stack_lvl+0xe8/0x150 [ 302.524636][ T8031] should_fail_ex+0x3eb/0x540 [ 302.524653][ T8031] should_failslab+0xa8/0x100 [ 302.524668][ T8031] __kmalloc_cache_noprof+0x9e/0x600 [ 302.524680][ T8031] ? get_device_parent+0x255/0x3a0 [ 302.524693][ T8031] ? get_device_parent+0x255/0x3a0 [ 302.524708][ T8031] get_device_parent+0x255/0x3a0 [ 302.524721][ T8031] device_add+0x2d4/0xb80 [ 302.524734][ T8031] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 302.524750][ T8031] wakeup_source_register+0x17f/0x380 [ 302.524764][ T8031] ep_insert+0xfaf/0x1af0 [ 302.524785][ T8031] ? __pfx_ep_insert+0x10/0x10 [ 302.524805][ T8031] ? bpf_lsm_capable+0x9/0x20 [ 302.524818][ T8031] ? security_capable+0x7e/0x2c0 [ 302.524834][ T8031] do_epoll_ctl_file+0x8c2/0xee0 [ 302.524852][ T8031] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 302.524866][ T8031] ? __fget_files+0x3a2/0x420 [ 302.524877][ T8031] ? __fget_files+0x2a/0x420 [ 302.524889][ T8031] ? fdget+0x1ac/0x250 [ 302.524901][ T8031] __se_sys_epoll_ctl+0x162/0x230 [ 302.524915][ T8031] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 302.524934][ T8031] do_syscall_64+0x166/0x520 [ 302.524947][ T8031] ? trace_irq_disable+0x3b/0x140 [ 302.524958][ T8031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.524968][ T8031] ? clear_bhb_loop+0x70/0xc0 [ 302.524980][ T8031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.524989][ T8031] RIP: 0033:0x7f429519f559 [ 302.525018][ T8031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.525026][ T8031] RSP: 002b:00007f4296082028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 302.525037][ T8031] RAX: ffffffffffffffda RBX: 00007f4295425fa0 RCX: 00007f429519f559 [ 302.525044][ T8031] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 302.525050][ T8031] RBP: 00007f4296082090 R08: 0000000000000000 R09: 0000000000000000 [ 302.525056][ T8031] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000002 [ 302.525062][ T8031] R13: 00007f4295426038 R14: 00007f4295425fa0 R15: 00007fffb0d432f8 [ 302.525078][ T8031] [ 302.707610][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 302.791685][ T10] usb 2-1: New USB device found: idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 302.816182][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.816198][ T10] usb 2-1: Product: syz [ 302.816205][ T10] usb 2-1: Manufacturer: syz [ 302.816215][ T10] usb 2-1: SerialNumber: syz [ 302.822084][ T10] usb 2-1: config 0 descriptor?? [ 302.862476][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 302.899957][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'. [ 302.970782][ T8042] team0: entered allmulticast mode [ 302.970798][ T8042] team_slave_0: entered allmulticast mode [ 302.970809][ T8042] team_slave_1: entered allmulticast mode [ 302.970816][ T8042] geneve1: entered allmulticast mode [ 303.226900][ T8051] FAULT_INJECTION: forcing a failure. [ 303.226900][ T8051] name failslab, interval 1, probability 0, space 0, times 0 [ 303.226920][ T8051] CPU: 0 UID: 0 PID: 8051 Comm: syz.2.696 Not tainted syzkaller #0 PREEMPT(full) [ 303.226932][ T8051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 303.226938][ T8051] Call Trace: [ 303.226942][ T8051] [ 303.226947][ T8051] dump_stack_lvl+0xe8/0x150 [ 303.226966][ T8051] should_fail_ex+0x3eb/0x540 [ 303.226983][ T8051] should_failslab+0xa8/0x100 [ 303.227000][ T8051] __kmalloc_noprof+0xf9/0x710 [ 303.227011][ T8051] ? tomoyo_encode+0x2ad/0x570 [ 303.227024][ T8051] ? tomoyo_encode+0x2ad/0x570 [ 303.227040][ T8051] tomoyo_encode+0x2ad/0x570 [ 303.227056][ T8051] tomoyo_realpath_from_path+0x5fa/0x640 [ 303.227074][ T8051] ? tomoyo_path_number_perm+0x219/0x5f0 [ 303.227086][ T8051] tomoyo_path_number_perm+0x246/0x5f0 [ 303.227098][ T8051] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 303.227109][ T8051] ? __lock_acquire+0x747/0x2de0 [ 303.227139][ T8051] ? __fget_files+0x2a/0x420 [ 303.227152][ T8051] ? __fget_files+0x2a/0x420 [ 303.227162][ T8051] ? __fget_files+0x2a/0x420 [ 303.227175][ T8051] security_file_ioctl+0xc3/0x2a0 [ 303.227188][ T8051] __se_sys_ioctl+0x47/0x170 [ 303.227202][ T8051] do_syscall_64+0x166/0x520 [ 303.227216][ T8051] ? trace_irq_disable+0x3b/0x140 [ 303.227227][ T8051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.227237][ T8051] ? clear_bhb_loop+0x70/0xc0 [ 303.227249][ T8051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.227258][ T8051] RIP: 0033:0x7f429519f559 [ 303.227268][ T8051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.227276][ T8051] RSP: 002b:00007f4296082028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.227287][ T8051] RAX: ffffffffffffffda RBX: 00007f4295425fa0 RCX: 00007f429519f559 [ 303.227294][ T8051] RDX: 0000200000000380 RSI: 00000000c0105512 RDI: 0000000000000003 [ 303.227300][ T8051] RBP: 00007f4296082090 R08: 0000000000000000 R09: 0000000000000000 [ 303.227306][ T8051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.227312][ T8051] R13: 00007f4295426038 R14: 00007f4295425fa0 R15: 00007fffb0d432f8 [ 303.227328][ T8051] [ 303.227354][ T8051] ERROR: Out of memory at tomoyo_realpath_from_path. [ 303.595479][ T8056] FAULT_INJECTION: forcing a failure. [ 303.595479][ T8056] name failslab, interval 1, probability 0, space 0, times 0 [ 303.595499][ T8056] CPU: 0 UID: 0 PID: 8056 Comm: syz.2.698 Not tainted syzkaller #0 PREEMPT(full) [ 303.595511][ T8056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 303.595517][ T8056] Call Trace: [ 303.595521][ T8056] [ 303.595526][ T8056] dump_stack_lvl+0xe8/0x150 [ 303.595547][ T8056] should_fail_ex+0x3eb/0x540 [ 303.595565][ T8056] should_failslab+0xa8/0x100 [ 303.595578][ T8056] ? security_file_alloc+0x34/0x310 [ 303.595590][ T8056] kmem_cache_alloc_noprof+0x9c/0x600 [ 303.595601][ T8056] ? rcu_is_watching+0x16/0xb0 [ 303.595614][ T8056] ? security_file_alloc+0x34/0x310 [ 303.595627][ T8056] security_file_alloc+0x34/0x310 [ 303.595638][ T8056] init_file+0x90/0x2b0 [ 303.595649][ T8056] alloc_empty_file+0x74/0x1d0 [ 303.595659][ T8056] path_openat+0x96/0x20f0 [ 303.595681][ T8056] do_file_open+0x23e/0x4a0 [ 303.595696][ T8056] ? __pfx_do_file_open+0x10/0x10 [ 303.595718][ T8056] ? _raw_spin_unlock+0x28/0x50 [ 303.595730][ T8056] ? alloc_fd+0x6af/0x760 [ 303.595746][ T8056] do_sys_openat2+0x115/0x200 [ 303.595757][ T8056] ? __pfx_do_sys_openat2+0x10/0x10 [ 303.595767][ T8056] ? ksys_write+0x242/0x270 [ 303.595780][ T8056] ? __pfx_ksys_write+0x10/0x10 [ 303.595793][ T8056] __x64_sys_creat+0x8f/0xc0 [ 303.595805][ T8056] do_syscall_64+0x166/0x520 [ 303.595817][ T8056] ? trace_irq_disable+0x3b/0x140 [ 303.595828][ T8056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.595838][ T8056] ? clear_bhb_loop+0x70/0xc0 [ 303.595850][ T8056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.595859][ T8056] RIP: 0033:0x7f429519f559 [ 303.595869][ T8056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.595877][ T8056] RSP: 002b:00007f4296082028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 303.595888][ T8056] RAX: ffffffffffffffda RBX: 00007f4295425fa0 RCX: 00007f429519f559 [ 303.595895][ T8056] RDX: 0000000000000000 RSI: 0000000000000021 RDI: 0000200000000300 [ 303.595902][ T8056] RBP: 00007f4296082090 R08: 0000000000000000 R09: 0000000000000000 [ 303.595908][ T8056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.595914][ T8056] R13: 00007f4295426038 R14: 00007f4295425fa0 R15: 00007fffb0d432f8 [ 303.595929][ T8056] [ 304.125498][ T8067] FAULT_INJECTION: forcing a failure. [ 304.125498][ T8067] name failslab, interval 1, probability 0, space 0, times 0 [ 304.125519][ T8067] CPU: 0 UID: 0 PID: 8067 Comm: syz.2.703 Not tainted syzkaller #0 PREEMPT(full) [ 304.125531][ T8067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 304.125539][ T8067] Call Trace: [ 304.125544][ T8067] [ 304.125548][ T8067] dump_stack_lvl+0xe8/0x150 [ 304.125569][ T8067] should_fail_ex+0x3eb/0x540 [ 304.125587][ T8067] should_failslab+0xa8/0x100 [ 304.125601][ T8067] __kmalloc_cache_noprof+0x9e/0x600 [ 304.125613][ T8067] ? bpf_prog_alloc_no_stats+0xd8/0x550 [ 304.125627][ T8067] ? bpf_prog_alloc_no_stats+0xd8/0x550 [ 304.125643][ T8067] bpf_prog_alloc_no_stats+0xd8/0x550 [ 304.125655][ T8067] ? bpf_prog_alloc+0x2a/0x1a0 [ 304.125668][ T8067] bpf_prog_alloc+0x3c/0x1a0 [ 304.125682][ T8067] bpf_prog_create_from_user+0xa7/0x440 [ 304.125698][ T8067] ? __pfx_seccomp_check_filter+0x10/0x10 [ 304.125714][ T8067] do_seccomp+0x791/0xdc0 [ 304.125730][ T8067] ? __se_sys_futex+0x3a8/0x450 [ 304.125745][ T8067] ? __pfx_do_seccomp+0x10/0x10 [ 304.125761][ T8067] ? rcu_is_watching+0x16/0xb0 [ 304.125780][ T8067] do_syscall_64+0x166/0x520 [ 304.125792][ T8067] ? trace_irq_disable+0x3b/0x140 [ 304.125803][ T8067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.125813][ T8067] ? clear_bhb_loop+0x70/0xc0 [ 304.125824][ T8067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.125833][ T8067] RIP: 0033:0x7f429519f559 [ 304.125844][ T8067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.125852][ T8067] RSP: 002b:00007f4296082028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 304.125864][ T8067] RAX: ffffffffffffffda RBX: 00007f4295425fa0 RCX: 00007f429519f559 [ 304.125871][ T8067] RDX: 0000200000000480 RSI: 0000000000000008 RDI: 0000000000000001 [ 304.125877][ T8067] RBP: 00007f4295236b20 R08: 0000000000000000 R09: 0000000000000000 [ 304.125883][ T8067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.125889][ T8067] R13: 00007f4295426038 R14: 00007f4295425fa0 R15: 00007fffb0d432f8 [ 304.125904][ T8067] [ 304.454153][ T8069] overlayfs: upper fs does not support file handles, falling back to index=off. [ 304.775678][ T916] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 304.906964][ T916] usb 3-1: device descriptor read/64, error -71 [ 304.938371][ T8074] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 304.938409][ T8074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.991480][ T8083] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 304.991501][ T8083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.147761][ T916] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 305.275989][ T916] usb 3-1: device descriptor read/64, error -71 [ 305.345809][ T5733] rc_core: IR keymap rc-hauppauge not found [ 305.345841][ T5733] Registered IR keymap rc-empty [ 305.345947][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 305.367595][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 305.385965][ T916] usb usb3-port1: attempt power cycle [ 305.388591][ T5733] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 305.413004][ T5733] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input40 [ 305.433259][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 305.446650][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 305.465943][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 305.485678][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 305.505696][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 305.526510][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 305.546629][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 305.566158][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 305.586394][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 305.605670][ T5733] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 305.637224][ T5733] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 305.637240][ T5733] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 305.663287][ T5733] usb 1-1: USB disconnect, device number 44 [ 305.728231][ T916] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 305.746919][ T916] usb 3-1: device descriptor read/8, error -71 [ 305.851032][ T8091] FAULT_INJECTION: forcing a failure. [ 305.851032][ T8091] name failslab, interval 1, probability 0, space 0, times 0 [ 305.851051][ T8091] CPU: 0 UID: 0 PID: 8091 Comm: syz.0.708 Not tainted syzkaller #0 PREEMPT(full) [ 305.851063][ T8091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 305.851071][ T8091] Call Trace: [ 305.851075][ T8091] [ 305.851080][ T8091] dump_stack_lvl+0xe8/0x150 [ 305.851100][ T8091] should_fail_ex+0x3eb/0x540 [ 305.851118][ T8091] should_failslab+0xa8/0x100 [ 305.851133][ T8091] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 305.851146][ T8091] ? __kthread_create_on_node+0x1b3/0x3d0 [ 305.851160][ T8091] ? __kthread_create_on_node+0x1b3/0x3d0 [ 305.851178][ T8091] kvasprintf+0xeb/0x1a0 [ 305.851197][ T8091] ? __pfx_kvasprintf+0x10/0x10 [ 305.851212][ T8091] ? __kmalloc_cache_noprof+0x148/0x600 [ 305.851221][ T8091] ? __kthread_create_on_node+0x115/0x3d0 [ 305.851234][ T8091] ? __kthread_create_on_node+0x115/0x3d0 [ 305.851251][ T8091] __kthread_create_on_node+0x1b3/0x3d0 [ 305.851264][ T8091] ? rcu_is_watching+0x16/0xb0 [ 305.851279][ T8091] ? __pfx___kthread_create_on_node+0x10/0x10 [ 305.851301][ T8091] ? __pfx_napi_threaded_poll+0x10/0x10 [ 305.851311][ T8091] ? __pfx_napi_threaded_poll+0x10/0x10 [ 305.851321][ T8091] kthread_create_on_node+0xeb/0x140 [ 305.851338][ T8091] ? __pfx_kthread_create_on_node+0x10/0x10 [ 305.851353][ T8091] ? try_to_wake_up+0x8ce/0x14e0 [ 305.851370][ T8091] netif_set_threaded+0x19c/0x510 [ 305.851385][ T8091] ? modify_napi_threaded+0x13b/0x160 [ 305.851401][ T8091] netdev_lock_store+0x17d/0x210 [ 305.851413][ T8091] ? __pfx_modify_napi_threaded+0x10/0x10 [ 305.851426][ T8091] ? __pfx_netdev_lock_store+0x10/0x10 [ 305.851439][ T8091] ? sysfs_file_kobj+0x1e4/0x230 [ 305.851453][ T8091] ? sysfs_kf_write+0x166/0x260 [ 305.851467][ T8091] ? __pfx_sysfs_kf_write+0x10/0x10 [ 305.851478][ T8091] kernfs_fop_write_iter+0x3a4/0x540 [ 305.851493][ T8091] vfs_write+0x612/0xba0 [ 305.851511][ T8091] ? __pfx_vfs_write+0x10/0x10 [ 305.851524][ T8091] ? __fget_files+0x3a2/0x420 [ 305.851535][ T8091] ? __fget_files+0x2a/0x420 [ 305.851548][ T8091] ? fdget+0x1ac/0x250 [ 305.851563][ T8091] ksys_write+0x150/0x270 [ 305.851576][ T8091] ? __pfx_ksys_write+0x10/0x10 [ 305.851594][ T8091] do_syscall_64+0x166/0x520 [ 305.851607][ T8091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.851617][ T8091] ? clear_bhb_loop+0x70/0xc0 [ 305.851628][ T8091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.851642][ T8091] RIP: 0033:0x7f6bced9f559 [ 305.851654][ T8091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.851662][ T8091] RSP: 002b:00007f6bcfb95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 305.851674][ T8091] RAX: ffffffffffffffda RBX: 00007f6bcf025fa0 RCX: 00007f6bced9f559 [ 305.851685][ T8091] RDX: 0000000000000001 RSI: 0000200000006940 RDI: 0000000000000003 [ 305.851691][ T8091] RBP: 00007f6bcfb95090 R08: 0000000000000000 R09: 0000000000000000 [ 305.851697][ T8091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 305.851703][ T8091] R13: 00007f6bcf026038 R14: 00007f6bcf025fa0 R15: 00007fffa787ab88 [ 305.851720][ T8091] [ 306.000385][ T916] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 306.025718][ T916] usb 3-1: device descriptor read/8, error -71 [ 306.188322][ T916] usb usb3-port1: unable to enumerate USB device [ 306.226689][ T10] gspca_sonixj: i2c_w8 err -71 [ 306.243855][ T8091] kthread_run failed with err -12 [ 306.266821][ T10] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 306.271330][ T10] usb 2-1: USB disconnect, device number 54 [ 307.834603][ T8118] smc: net device lo applied user defined pnetid SYZ0 [ 307.870511][ T8122] FAULT_INJECTION: forcing a failure. [ 307.870511][ T8122] name failslab, interval 1, probability 0, space 0, times 0 [ 307.870538][ T8122] CPU: 0 UID: 0 PID: 8122 Comm: syz.0.716 Not tainted syzkaller #0 PREEMPT(full) [ 307.870549][ T8122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 307.870556][ T8122] Call Trace: [ 307.870560][ T8122] [ 307.870565][ T8122] dump_stack_lvl+0xe8/0x150 [ 307.870584][ T8122] should_fail_ex+0x3eb/0x540 [ 307.870601][ T8122] should_failslab+0xa8/0x100 [ 307.870614][ T8122] ? __anon_vma_prepare+0x109/0x4a0 [ 307.870628][ T8122] kmem_cache_alloc_noprof+0x9c/0x600 [ 307.870638][ T8122] ? kmem_cache_alloc_noprof+0x151/0x600 [ 307.870648][ T8122] ? __anon_vma_prepare+0x109/0x4a0 [ 307.870664][ T8122] __anon_vma_prepare+0x109/0x4a0 [ 307.870677][ T8122] ? vma_has_anon_rmap+0x95/0x270 [ 307.870690][ T8122] do_pte_missing+0x2f81/0x3570 [ 307.870710][ T8122] handle_mm_fault+0x1807/0x2f80 [ 307.870729][ T8122] ? handle_mm_fault+0xee/0x2f80 [ 307.870745][ T8122] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 307.870757][ T8122] ? __pfx_handle_mm_fault+0x10/0x10 [ 307.870783][ T8122] ? __lock_acquire+0x747/0x2de0 [ 307.870796][ T8122] ? lock_mm_and_find_vma+0xa7/0x340 [ 307.870812][ T8122] do_user_addr_fault+0x7f6/0x1480 [ 307.870832][ T8122] exc_page_fault+0x6a/0xc0 [ 307.870845][ T8122] asm_exc_page_fault+0x26/0x30 [ 307.870855][ T8122] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 307.870866][ T8122] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 307.870874][ T8122] RSP: 0018:ffffc90004ddfac8 EFLAGS: 00050206 [ 307.870884][ T8122] RAX: ffffffff84f93601 RBX: 0000000000000100 RCX: 0000000000000100 [ 307.870891][ T8122] RDX: 0000000000000000 RSI: ffffc90004ddfb40 RDI: 0000200000000000 [ 307.870897][ T8122] RBP: ffffc90004ddfcd0 R08: ffffc90004ddfc3f R09: 1ffff920009bbf87 [ 307.870903][ T8122] R10: dffffc0000000000 R11: fffff520009bbf88 R12: 0000200000000100 [ 307.870910][ T8122] R13: 00007ffffffff000 R14: ffffc90004ddfb40 R15: 0000200000000000 [ 307.870921][ T8122] ? _copy_from_user+0x61/0xb0 [ 307.870939][ T8122] _copy_to_user+0x8a/0xb0 [ 307.870953][ T8122] con_get_trans_old+0x3ab/0x460 [ 307.870966][ T8122] ? __pfx_con_get_trans_old+0x10/0x10 [ 307.870975][ T8122] ? hook_capable+0x1c3/0x5e0 [ 307.871001][ T8122] ? apparmor_capable+0x126/0x170 [ 307.871011][ T8122] ? bpf_lsm_capable+0x9/0x20 [ 307.871024][ T8122] ? security_capable+0x7e/0x2c0 [ 307.871039][ T8122] vt_ioctl+0x11fc/0x20e0 [ 307.871054][ T8122] ? __pfx_vt_ioctl+0x10/0x10 [ 307.871072][ T8122] ? __fget_files+0x2a/0x420 [ 307.871086][ T8122] ? tty_jobctrl_ioctl+0x378/0xba0 [ 307.871097][ T8122] ? __fget_files+0x2a/0x420 [ 307.871109][ T8122] tty_ioctl+0x920/0xde0 [ 307.871123][ T8122] ? __pfx_tty_ioctl+0x10/0x10 [ 307.871137][ T8122] __se_sys_ioctl+0xfc/0x170 [ 307.871151][ T8122] do_syscall_64+0x166/0x520 [ 307.871163][ T8122] ? trace_irq_disable+0x3b/0x140 [ 307.871174][ T8122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.871183][ T8122] ? clear_bhb_loop+0x70/0xc0 [ 307.871195][ T8122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.871204][ T8122] RIP: 0033:0x7f6bced9f559 [ 307.871213][ T8122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.871220][ T8122] RSP: 002b:00007f6bcfb95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.871229][ T8122] RAX: ffffffffffffffda RBX: 00007f6bcf025fa0 RCX: 00007f6bced9f559 [ 307.871236][ T8122] RDX: 0000200000000000 RSI: 0000000000004b40 RDI: 0000000000000003 [ 307.871242][ T8122] RBP: 00007f6bcfb95090 R08: 0000000000000000 R09: 0000000000000000 [ 307.871248][ T8122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 307.871253][ T8122] R13: 00007f6bcf026038 R14: 00007f6bcf025fa0 R15: 00007fffa787ab88 [ 307.871269][ T8122] [ 308.564590][ T8137] tipc: Started in network mode [ 308.564609][ T8137] tipc: Node identity 2000004, cluster identity 4711 [ 308.564617][ T8137] tipc: Node number set to 33554436 [ 308.763170][ T8148] netlink: 'syz.3.724': attribute type 27 has an invalid length. [ 308.763187][ T8148] netlink: 164 bytes leftover after parsing attributes in process `syz.3.724'. [ 308.958480][ T8157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.728'. [ 308.971568][ T8158] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 309.026074][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 309.178124][ T10] usb 3-1: New USB device found: idVendor=28de, idProduct=1302, bcdDevice=0.00 [ 309.179417][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.179433][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.179453][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.183101][ T10] usb 3-1: config 0 descriptor?? [ 309.246397][ T5637] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 309.375844][ T5637] usb 2-1: device descriptor read/64, error -71 [ 309.402170][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 309.402233][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 309.421101][ T10] usb 3-1: USB disconnect, device number 60 [ 309.616405][ T5637] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 309.755682][ T5637] usb 2-1: device descriptor read/64, error -71 [ 309.836218][ T10] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 309.865860][ T5637] usb usb2-port1: attempt power cycle [ 309.986199][ T10] usb 3-1: New USB device found: idVendor=28de, idProduct=1302, bcdDevice=0.00 [ 309.987183][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 309.987200][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.987220][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.991334][ T10] usb 3-1: config 0 descriptor?? [ 310.207611][ T5637] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 310.227646][ T5637] usb 2-1: device descriptor read/8, error -71 [ 310.465617][ T5637] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 310.486423][ T5637] usb 2-1: device descriptor read/8, error -71 [ 310.597350][ T5637] usb usb2-port1: unable to enumerate USB device [ 310.690461][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 310.690542][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 310.712645][ T10] usb 3-1: USB disconnect, device number 61 [ 311.295930][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 312.663532][ T8183] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 312.676607][ T8184] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 312.682269][ T8183] netlink: 'syz.0.734': attribute type 1 has an invalid length. [ 312.682297][ T8183] netlink: 'syz.0.734': attribute type 2 has an invalid length. [ 312.684322][ T8183] @0Ù: renamed from bond_slave_1 (while UP) [ 313.006179][ T916] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 313.062995][ T5632] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 313.082178][ T8193] netlink: 140 bytes leftover after parsing attributes in process `syz.1.739'. [ 313.157368][ T916] usb 4-1: New USB device found: idVendor=0b05, idProduct=1abe, bcdDevice=0.00 [ 313.158182][ T916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.158198][ T916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.158218][ T916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.160205][ T916] usb 4-1: config 0 descriptor?? [ 313.254078][ T8199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.742'. [ 313.379736][ T8205] new mount options do not match the existing superblock, will be ignored [ 313.525649][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 313.580906][ T8185] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 313.580922][ T8185] block device autoloading is deprecated and will be removed. [ 313.658061][ T10] usb 1-1: device descriptor read/64, error -71 [ 313.710223][ T8185] md/raid:md3: device ram7 operational as raid disk 1 [ 313.710240][ T8185] md/raid:md3: device ram6 operational as raid disk 0 [ 313.774481][ T8185] md/raid:md3: raid level 5 active with 2 out of 3 devices, algorithm 2 [ 313.791091][ T8185] md3: detected capacity change from 0 to 8192 [ 313.862623][ T8209] md3: detected capacity change from 8192 to 0 [ 313.862638][ T8209] md: md3 stopped. [ 313.895737][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 313.951836][ T916] hid_parser_main: 10 callbacks suppressed [ 313.951852][ T916] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 313.951869][ T916] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 313.951883][ T916] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 313.951897][ T916] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 313.951911][ T916] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 313.951925][ T916] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 313.951939][ T916] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 313.951952][ T916] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 313.951966][ T916] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 313.951979][ T916] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 313.986031][ T916] asus 0003:0B05:1ABE.0009: unexpected long global item [ 314.001267][ T11] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 314.056030][ T916] asus 0003:0B05:1ABE.0009: Asus hid parse failed: -22 [ 314.056101][ T916] asus 0003:0B05:1ABE.0009: probe with driver asus failed with error -22 [ 314.105770][ T10] usb 1-1: device descriptor read/64, error -71 [ 314.155949][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 314.163371][ T11] usb 2-1: unable to get BOS descriptor or descriptor too short [ 314.163402][ T11] usb 2-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 314.164274][ T11] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 314.194904][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.194919][ T11] usb 2-1: Product: syz [ 314.194927][ T11] usb 2-1: Manufacturer: syz [ 314.194934][ T11] usb 2-1: SerialNumber: syz [ 314.219770][ T10] usb usb1-port1: attempt power cycle [ 314.454268][ T8211] device-mapper: table: 248:4: integrity: Integrity profile not supported (-EINVAL) [ 314.454285][ T8211] device-mapper: ioctl: error adding target to table [ 314.535368][ T8211] device-mapper: table: 248:3: crypt: Error allocating crypto tfm (-EINVAL) [ 314.535384][ T8211] device-mapper: ioctl: error adding target to table [ 314.555655][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 314.557291][ T11] usb 2-1: Cannot retrieve CPort count: -71 [ 314.557323][ T11] usb 2-1: Cannot retrieve CPort count: -71 [ 314.557338][ T11] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 314.564668][ T11] usb 2-1: USB disconnect, device number 59 [ 314.597532][ T10] usb 1-1: device descriptor read/8, error -71 [ 314.835666][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 314.856244][ T10] usb 1-1: device descriptor read/8, error -71 [ 314.966098][ T10] usb usb1-port1: unable to enumerate USB device [ 315.141086][ T8231] kAFS: Invalid Command on /proc/fs/afs/cells file [ 315.190030][ T5632] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 315.668751][ T10] usb 4-1: USB disconnect, device number 53 [ 315.778365][ T8239] netlink: 24 bytes leftover after parsing attributes in process `syz.3.754'. [ 316.220655][ T8258] FAULT_INJECTION: forcing a failure. [ 316.220655][ T8258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.220677][ T8258] CPU: 0 UID: 0 PID: 8258 Comm: syz.2.762 Not tainted syzkaller #0 PREEMPT(full) [ 316.220698][ T8258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 316.220709][ T8258] Call Trace: [ 316.220713][ T8258] [ 316.220717][ T8258] dump_stack_lvl+0xe8/0x150 [ 316.220736][ T8258] should_fail_ex+0x3eb/0x540 [ 316.220753][ T8258] _copy_to_user+0x31/0xb0 [ 316.220769][ T8258] iommufd_ucmd_respond+0x87/0xe0 [ 316.220784][ T8258] iommufd_ioas_map+0x3f7/0x4c0 [ 316.220802][ T8258] ? __pfx_iommufd_ioas_map+0x10/0x10 [ 316.220815][ T8258] ? __might_fault+0xaf/0x130 [ 316.220833][ T8258] iommufd_fops_ioctl+0x465/0x600 [ 316.220849][ T8258] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 316.220865][ T8258] ? __fget_files+0x2a/0x420 [ 316.220882][ T8258] ? bpf_lsm_file_ioctl+0x9/0x20 [ 316.220895][ T8258] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 316.220908][ T8258] __se_sys_ioctl+0xfc/0x170 [ 316.220923][ T8258] do_syscall_64+0x166/0x520 [ 316.220936][ T8258] ? trace_irq_disable+0x3b/0x140 [ 316.220947][ T8258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.220957][ T8258] ? clear_bhb_loop+0x70/0xc0 [ 316.220968][ T8258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.220978][ T8258] RIP: 0033:0x7f429519f559 [ 316.220988][ T8258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.220996][ T8258] RSP: 002b:00007f4296082028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.221007][ T8258] RAX: ffffffffffffffda RBX: 00007f4295425fa0 RCX: 00007f429519f559 [ 316.221014][ T8258] RDX: 0000200000000340 RSI: 0000000000003b85 RDI: 0000000000000003 [ 316.221020][ T8258] RBP: 00007f4296082090 R08: 0000000000000000 R09: 0000000000000000 [ 316.221026][ T8258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.221031][ T8258] R13: 00007f4295426038 R14: 00007f4295425fa0 R15: 00007fffb0d432f8 [ 316.221047][ T8258] [ 316.550298][ T8255] rxe_eth0 speed is unknown, defaulting to 1000 [ 316.656333][ T10] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 316.702122][ T8263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.764'. [ 316.787199][ T10] usb 4-1: device descriptor read/64, error -71 [ 317.026571][ T10] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 317.085679][ T11] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 317.155832][ T10] usb 4-1: device descriptor read/64, error -71 [ 317.236405][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 317.236886][ T11] usb 2-1: New USB device found: idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 317.240047][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.240067][ T11] usb 2-1: Product: syz [ 317.240075][ T11] usb 2-1: Manufacturer: syz [ 317.240082][ T11] usb 2-1: SerialNumber: syz [ 317.250867][ T11] usb 2-1: config 0 descriptor?? [ 317.271697][ T10] usb usb4-port1: attempt power cycle [ 317.300970][ T11] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 317.635732][ T10] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 317.658774][ T10] usb 4-1: device descriptor read/8, error -71 [ 317.881243][ T33] audit: type=1807 audit(1793138278.467:8): action=measure res=1 [ 317.895851][ T10] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 317.919470][ T10] usb 4-1: device descriptor read/8, error -71 [ 317.932308][ T8270] netlink: 763 bytes leftover after parsing attributes in process `syz.1.767'. [ 317.935333][ T8269] ima: policy update completed [ 317.945321][ T33] audit: type=1802 audit(1793138278.517:9): pid=8269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.1.767" res=1 errno=0 [ 317.981838][ T33] audit: type=1800 audit(1793138278.567:10): pid=6775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152293 res=0 errno=-22 [ 317.982316][ T33] audit: type=1800 audit(1793138278.567:11): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31316 res=0 errno=-22 [ 317.985121][ T33] audit: type=1800 audit(1793138278.567:12): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31339 res=0 errno=-22 [ 318.029585][ T10] usb usb4-port1: unable to enumerate USB device [ 318.067353][ T33] audit: type=1800 audit(1793138278.647:13): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152281 res=0 errno=-22 [ 318.075395][ T11] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 318.075765][ T11] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 318.118165][ T33] audit: type=1800 audit(1793138278.707:14): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=152167 res=0 errno=-22 [ 318.143336][ T33] audit: type=1800 audit(1793138278.727:15): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152305 res=0 errno=-22 [ 318.167407][ T11] usb 2-1: USB disconnect, device number 60 [ 318.175714][ T33] audit: type=1800 audit(1793138278.757:16): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=152146 res=0 errno=-22 [ 318.175741][ T33] audit: type=1800 audit(1793138278.757:17): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=152168 res=0 errno=-22 [ 318.465840][ T10] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 318.616056][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 318.623902][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 318.623933][ T10] usb 3-1: New USB device found: idVendor=03f0, idProduct=371d, bcdDevice=30.63 [ 318.624715][ T10] usb 3-1: config 150 has an invalid interface number: 124 but max is 0 [ 318.624727][ T10] usb 3-1: config 150 has no interface number 0 [ 318.624748][ T10] usb 3-1: config 150 interface 124 has no altsetting 0 [ 318.669045][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.669101][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.669449][ T1318] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 318.677211][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.677224][ T10] usb 3-1: Product: syz [ 318.677232][ T10] usb 3-1: Manufacturer: syz [ 318.677238][ T10] usb 3-1: SerialNumber: syz [ 318.743603][ T8290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.773'. [ 318.947803][ T10] usb 3-1: USB disconnect, device number 62 [ 319.005633][ T5733] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 319.136382][ T5733] usb 2-1: device descriptor read/64, error -71 [ 319.310070][ T8293] FAULT_INJECTION: forcing a failure. [ 319.310070][ T8293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.310089][ T8293] CPU: 0 UID: 0 PID: 8293 Comm: syz.3.774 Not tainted syzkaller #0 PREEMPT(full) [ 319.310101][ T8293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 319.310107][ T8293] Call Trace: [ 319.310111][ T8293] [ 319.310115][ T8293] dump_stack_lvl+0xe8/0x150 [ 319.310134][ T8293] should_fail_ex+0x3eb/0x540 [ 319.310151][ T8293] _copy_to_user+0x31/0xb0 [ 319.310167][ T8293] ucma_create_id+0x2d5/0x370 [ 319.310182][ T8293] ? __pfx_ucma_create_id+0x10/0x10 [ 319.310197][ T8293] ? __might_fault+0xaf/0x130 [ 319.310214][ T8293] ucma_write+0x249/0x2f0 [ 319.310228][ T8293] ? __pfx_ucma_write+0x10/0x10 [ 319.310240][ T8293] ? security_file_permission+0x75/0x260 [ 319.310253][ T8293] ? rw_verify_area+0x203/0x4c0 [ 319.310265][ T8293] ? __pfx_ucma_write+0x10/0x10 [ 319.310276][ T8293] vfs_write+0x296/0xba0 [ 319.310292][ T8293] ? __pfx_vfs_write+0x10/0x10 [ 319.310304][ T8293] ? __fget_files+0x2a/0x420 [ 319.310314][ T8293] ? __fget_files+0x3a2/0x420 [ 319.310324][ T8293] ? __fget_files+0x2a/0x420 [ 319.310336][ T8293] ? fdget+0x1ac/0x250 [ 319.310350][ T8293] ksys_write+0x150/0x270 [ 319.310363][ T8293] ? __pfx_ksys_write+0x10/0x10 [ 319.310380][ T8293] do_syscall_64+0x166/0x520 [ 319.310392][ T8293] ? trace_irq_disable+0x3b/0x140 [ 319.310403][ T8293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.310413][ T8293] ? clear_bhb_loop+0x70/0xc0 [ 319.310425][ T8293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.310434][ T8293] RIP: 0033:0x7f900cf9f559 [ 319.310444][ T8293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.310453][ T8293] RSP: 002b:00007f900de11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 319.310465][ T8293] RAX: ffffffffffffffda RBX: 00007f900d225fa0 RCX: 00007f900cf9f559 [ 319.310473][ T8293] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000006 [ 319.310479][ T8293] RBP: 00007f900d036b20 R08: 0000000000000000 R09: 0000000000000000 [ 319.310485][ T8293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.310491][ T8293] R13: 00007f900d226038 R14: 00007f900d225fa0 R15: 00007ffc6c8e3b88 [ 319.310507][ T8293] [ 319.409426][ T5733] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 319.576153][ T5733] usb 2-1: device descriptor read/64, error -71 [ 319.639029][ T8295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.775'. [ 319.686363][ T5733] usb usb2-port1: attempt power cycle [ 319.897370][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 320.016814][ T8311] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 320.035427][ T10] usb 3-1: device descriptor read/64, error -71 [ 320.042760][ T5733] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 320.058884][ T5733] usb 2-1: device descriptor read/8, error -71 [ 320.058988][ T8311] cramfs: wrong magic [ 320.138430][ T5632] Bluetooth: hci2: Unable to find connection for big 0x00 [ 320.165147][ T8315] 9p: Bad value for 'wfdno' [ 320.265665][ T10] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 320.296631][ T5733] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 320.316343][ T5733] usb 2-1: device descriptor read/8, error -71 [ 320.395798][ T10] usb 3-1: device descriptor read/64, error -71 [ 320.425650][ T11] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 320.426440][ T5733] usb usb2-port1: unable to enumerate USB device [ 320.505988][ T10] usb usb3-port1: attempt power cycle [ 320.575726][ T11] usb 4-1: Using ep0 maxpacket: 8 [ 320.577289][ T11] usb 4-1: New USB device found: idVendor=0d46, idProduct=2011, bcdDevice=1.00 [ 320.578700][ T11] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 320.578716][ T11] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 320.578736][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.583396][ T11] kobil_sct 4-1:1.0: KOBIL USB smart card terminal converter detected [ 320.642247][ T11] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 320.723698][ T8317] netlink: 24 bytes leftover after parsing attributes in process `syz.0.785'. [ 320.845715][ T10] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 320.866980][ T10] usb 3-1: device descriptor read/8, error -71 [ 321.076322][ T5733] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 321.105681][ T10] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 321.126336][ T10] usb 3-1: device descriptor read/8, error -71 [ 321.205673][ T5733] usb 1-1: device descriptor read/64, error -71 [ 321.235804][ T10] usb usb3-port1: unable to enumerate USB device [ 321.302778][ T10] usb 4-1: USB disconnect, device number 58 [ 321.323485][ T10] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 321.323833][ T10] kobil_sct 4-1:1.0: device disconnected [ 321.445612][ T5733] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 321.575652][ T5733] usb 1-1: device descriptor read/64, error -71 [ 321.686128][ T5733] usb usb1-port1: attempt power cycle [ 322.028424][ T5733] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 322.047343][ T5733] usb 1-1: device descriptor read/8, error -71 [ 322.249870][ T8342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.794'. [ 322.287384][ T5733] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 322.306224][ T5733] usb 1-1: device descriptor read/8, error -71 [ 322.382267][ T8346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.796'. [ 322.417098][ T5733] usb usb1-port1: unable to enumerate USB device [ 322.543862][ T8349] netlink: 'syz.1.797': attribute type 11 has an invalid length. [ 322.645688][ T916] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 322.785826][ T916] usb 4-1: device descriptor read/64, error -71 [ 322.815796][ T5733] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 322.965731][ T5733] usb 2-1: Using ep0 maxpacket: 32 [ 322.966297][ T5733] usb 2-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 322.967144][ T5733] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 322.967158][ T5733] usb 2-1: config 0 has no interface number 0 [ 322.967181][ T5733] usb 2-1: config 0 interface 184 has no altsetting 0 [ 322.968742][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.968755][ T5733] usb 2-1: Product: syz [ 322.968762][ T5733] usb 2-1: Manufacturer: syz [ 322.968768][ T5733] usb 2-1: SerialNumber: syz [ 322.973657][ T33] kauditd_printk_skb: 30 callbacks suppressed [ 322.973667][ T33] audit: type=1800 audit(1793138283.557:48): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152890 res=0 errno=-22 [ 322.974787][ T5733] usb 2-1: config 0 descriptor?? [ 323.037053][ T33] audit: type=1800 audit(1793138283.617:49): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=152922 res=0 errno=-22 [ 323.037082][ T33] audit: type=1800 audit(1793138283.617:50): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=152897 res=0 errno=-22 [ 323.069550][ T916] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 323.128689][ T11] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 323.138720][ T33] audit: type=1800 audit(1793138283.727:51): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=152898 res=0 errno=-22 [ 323.228807][ T916] usb 4-1: device descriptor read/64, error -71 [ 323.286611][ T11] usb 3-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 323.287435][ T11] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 323.287448][ T11] usb 3-1: config 0 has no interface number 0 [ 323.287469][ T11] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x74, changing to 0x4 [ 323.287482][ T11] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid maxpacket 252, setting to 64 [ 323.289112][ T11] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 323.289125][ T11] usb 3-1: Product: syz [ 323.289132][ T11] usb 3-1: SerialNumber: syz [ 323.293334][ T11] usb 3-1: config 0 descriptor?? [ 323.294171][ T33] audit: type=1800 audit(1793138283.877:52): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152990 res=0 errno=-22 [ 323.395731][ T916] usb usb4-port1: attempt power cycle [ 323.403230][ T33] audit: type=1800 audit(1793138283.987:53): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=153021 res=0 errno=-22 [ 323.404620][ T11] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 323.427061][ T33] audit: type=1800 audit(1793138284.017:54): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=152997 res=0 errno=-22 [ 323.470199][ T33] audit: type=1800 audit(1793138284.057:55): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=152998 res=0 errno=-22 [ 323.470464][ T33] audit: type=1800 audit(1793138284.057:56): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=153019 res=0 errno=-22 [ 323.473346][ T33] audit: type=1800 audit(1793138284.057:57): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=152999 res=0 errno=-22 [ 323.557293][ T11] usb 3-1: USB disconnect, device number 67 [ 323.735833][ T916] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 323.754153][ T5733] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 323.754171][ T5733] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 323.766987][ T916] usb 4-1: device descriptor read/8, error -71 [ 323.928962][ T8381] JFS: discard option not supported on device [ 323.929126][ T8381] Mount JFS Failure: -22 [ 323.929133][ T8381] jfs_mount failed w/return code = -22 [ 324.006209][ T916] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 324.028486][ T916] usb 4-1: device descriptor read/8, error -71 [ 324.060634][ T8386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.803'. [ 324.136214][ T916] usb usb4-port1: unable to enumerate USB device [ 324.337342][ T8395] FAULT_INJECTION: forcing a failure. [ 324.337342][ T8395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.337362][ T8395] CPU: 0 UID: 0 PID: 8395 Comm: syz.0.806 Not tainted syzkaller #0 PREEMPT(full) [ 324.337374][ T8395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 324.337380][ T8395] Call Trace: [ 324.337385][ T8395] [ 324.337390][ T8395] dump_stack_lvl+0xe8/0x150 [ 324.337410][ T8395] should_fail_ex+0x3eb/0x540 [ 324.337428][ T8395] _copy_to_user+0x31/0xb0 [ 324.337443][ T8395] simple_read_from_buffer+0xe1/0x170 [ 324.337458][ T8395] proc_fail_nth_read+0x1bb/0x230 [ 324.337475][ T8395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 324.337490][ T8395] ? rw_verify_area+0x24a/0x4c0 [ 324.337503][ T8395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 324.337516][ T8395] vfs_read+0x213/0xa80 [ 324.337530][ T8395] ? __pfx___mutex_lock+0x10/0x10 [ 324.337543][ T8395] ? __pfx_vfs_read+0x10/0x10 [ 324.337555][ T8395] ? __fget_files+0x2a/0x420 [ 324.337565][ T8395] ? __fget_files+0x3a2/0x420 [ 324.337575][ T8395] ? __fget_files+0x2a/0x420 [ 324.337587][ T8395] ? fdget+0x1ac/0x250 [ 324.337601][ T8395] ksys_read+0x150/0x270 [ 324.337614][ T8395] ? __pfx_ksys_read+0x10/0x10 [ 324.337631][ T8395] do_syscall_64+0x166/0x520 [ 324.337643][ T8395] ? trace_irq_disable+0x3b/0x140 [ 324.337654][ T8395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.337664][ T8395] ? clear_bhb_loop+0x70/0xc0 [ 324.337676][ T8395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.337685][ T8395] RIP: 0033:0x7f6bced5fd8e [ 324.337695][ T8395] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 324.337703][ T8395] RSP: 002b:00007f6bcfb94fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 324.337714][ T8395] RAX: ffffffffffffffda RBX: 00007f6bcfb956c0 RCX: 00007f6bced5fd8e [ 324.337721][ T8395] RDX: 000000000000000f RSI: 00007f6bcfb950a0 RDI: 0000000000000004 [ 324.337727][ T8395] RBP: 00007f6bcfb95090 R08: 0000000000000000 R09: 0000000000000000 [ 324.337733][ T8395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.337739][ T8395] R13: 00007f6bcf026038 R14: 00007f6bcf025fa0 R15: 00007fffa787ab88 [ 324.337755][ T8395] [ 324.656427][ T8399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.807'. [ 324.894886][ T8409] FAULT_INJECTION: forcing a failure. [ 324.894886][ T8409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.894906][ T8409] CPU: 0 UID: 0 PID: 8409 Comm: syz.2.809 Not tainted syzkaller #0 PREEMPT(full) [ 324.894917][ T8409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 324.894923][ T8409] Call Trace: [ 324.894927][ T8409] [ 324.894931][ T8409] dump_stack_lvl+0xe8/0x150 [ 324.894950][ T8409] should_fail_ex+0x3eb/0x540 [ 324.894967][ T8409] _copy_from_user+0x2d/0xb0 [ 324.894984][ T8409] memdup_user+0x5e/0xd0 [ 324.894995][ T8409] strndup_user+0x68/0xd0 [ 324.895004][ T8409] __se_sys_mount+0xdf/0x420 [ 324.895016][ T8409] ? ksys_write+0x242/0x270 [ 324.895029][ T8409] ? __pfx___se_sys_mount+0x10/0x10 [ 324.895043][ T8409] ? __x64_sys_mount+0x20/0xc0 [ 324.895054][ T8409] do_syscall_64+0x166/0x520 [ 324.895067][ T8409] ? trace_irq_disable+0x3b/0x140 [ 324.895079][ T8409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.895089][ T8409] ? clear_bhb_loop+0x70/0xc0 [ 324.895100][ T8409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.895110][ T8409] RIP: 0033:0x7f429519f559 [ 324.895120][ T8409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.895128][ T8409] RSP: 002b:00007f4296082028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 324.895139][ T8409] RAX: ffffffffffffffda RBX: 00007f4295425fa0 RCX: 00007f429519f559 [ 324.895153][ T8409] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000200000000040 [ 324.895160][ T8409] RBP: 00007f4296082090 R08: 0000000000000000 R09: 0000000000000000 [ 324.895166][ T8409] R10: 0000000002a00000 R11: 0000000000000246 R12: 0000000000000001 [ 324.895172][ T8409] R13: 00007f4295426038 R14: 00007f4295425fa0 R15: 00007fffb0d432f8 [ 324.895188][ T8409] [ 325.290348][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.812'. [ 325.388368][ T8423] netlink: 36 bytes leftover after parsing attributes in process `syz.2.813'. [ 325.415926][ T916] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 325.533116][ T8427] loop0: detected capacity change from 0 to 1 [ 325.564591][ T8427] ldm_validate_privheads(): Disk read failed. [ 325.564646][ T8427] Dev loop0: unable to read RDB block 1 [ 325.564669][ T8427] loop0: unable to read partition table [ 325.564798][ T8427] loop0: partition table beyond EOD, truncated [ 325.564808][ T8427] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 325.573541][ T916] usb 1-1: Using ep0 maxpacket: 8 [ 325.612112][ T916] usb 1-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 325.613094][ T916] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.613107][ T916] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 325.613146][ T916] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 325.613159][ T916] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 325.613180][ T916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.614554][ T8427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.814'. [ 325.625635][ T5637] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 325.707283][ T916] hub 1-1:1.0: bad descriptor, ignoring hub [ 325.707300][ T916] hub 1-1:1.0: probe with driver hub failed with error -5 [ 325.730733][ T916] cdc_wdm 1-1:1.0: skipping garbage [ 325.736343][ T916] cdc_wdm 1-1:1.0: skipping garbage [ 325.747625][ T916] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 325.747659][ T916] cdc_wdm 1-1:1.0: Unknown control protocol [ 325.810682][ T5637] usb 3-1: New USB device found: idVendor=045e, idProduct=0730, bcdDevice=0.00 [ 325.824646][ T5637] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 130, changing to 11 [ 325.824666][ T5637] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 325.852602][ T5637] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 325.852632][ T5637] usb 3-1: Product: syz [ 325.880072][ T5637] usb 3-1: config 0 descriptor?? [ 325.975667][ T5733] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 325.975687][ T5733] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 325.975696][ T5733] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 325.975904][ T5733] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 326.031639][ T5733] usb 2-1: USB disconnect, device number 65 [ 326.323259][ T5637] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:0730.000A/input/input41 [ 326.368015][ T8444] FAULT_INJECTION: forcing a failure. [ 326.368015][ T8444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.368034][ T8444] CPU: 0 UID: 0 PID: 8444 Comm: syz.1.818 Not tainted syzkaller #0 PREEMPT(full) [ 326.368045][ T8444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 326.368051][ T8444] Call Trace: [ 326.368056][ T8444] [ 326.368060][ T8444] dump_stack_lvl+0xe8/0x150 [ 326.368079][ T8444] should_fail_ex+0x3eb/0x540 [ 326.368098][ T8444] _copy_to_user+0x31/0xb0 [ 326.368114][ T8444] dm_ctl_ioctl+0x300/0xe10 [ 326.368129][ T8444] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 326.368148][ T8444] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 326.368175][ T8444] ? __fget_files+0x2a/0x420 [ 326.368189][ T8444] ? bpf_lsm_file_ioctl+0x9/0x20 [ 326.368202][ T8444] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 326.368215][ T8444] __se_sys_ioctl+0xfc/0x170 [ 326.368229][ T8444] do_syscall_64+0x166/0x520 [ 326.368241][ T8444] ? trace_irq_disable+0x3b/0x140 [ 326.368253][ T8444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.368263][ T8444] ? clear_bhb_loop+0x70/0xc0 [ 326.368275][ T8444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.368285][ T8444] RIP: 0033:0x7f664499f559 [ 326.368294][ T8444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.368303][ T8444] RSP: 002b:00007f664587f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.368314][ T8444] RAX: ffffffffffffffda RBX: 00007f6644c25fa0 RCX: 00007f664499f559 [ 326.368321][ T8444] RDX: 0000200000000240 RSI: 00000000c138fd06 RDI: 0000000000000003 [ 326.368327][ T8444] RBP: 00007f664587f090 R08: 0000000000000000 R09: 0000000000000000 [ 326.368333][ T8444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.368338][ T8444] R13: 00007f6644c26038 R14: 00007f6644c25fa0 R15: 00007ffefba8c8e8 [ 326.368355][ T8444] [ 326.527380][ T8411] HugeTLB: PID 8411 killed due to inadequate hugepage pool [ 326.620758][ T5637] microsoft 0003:045E:0730.000A: input,hiddev1,hidraw0: USB HID vff.fe Device [syz] on usb-dummy_hcd.2-1/input0 [ 326.673628][ T5637] usb 3-1: USB disconnect, device number 68 [ 326.927893][ T8448] fido_id[8448]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 326.961641][ T8437] rxe_eth0 speed is unknown, defaulting to 1000 [ 327.131021][ T8454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.821'. [ 327.249953][ T8456] netlink: 16 bytes leftover after parsing attributes in process `syz.1.822'. [ 327.545742][ T5733] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 327.642019][ T10] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 327.676290][ T5733] usb 2-1: device descriptor read/64, error -71 [ 327.788653][ T10] usb 3-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 327.789477][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.789491][ T10] usb 3-1: config 0 has no interfaces? [ 327.794924][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.794939][ T10] usb 3-1: Product: syz [ 327.794946][ T10] usb 3-1: Manufacturer: syz [ 327.794953][ T10] usb 3-1: SerialNumber: syz [ 327.861317][ T10] usb 3-1: config 0 descriptor?? [ 327.915879][ T5733] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 328.046042][ T5733] usb 2-1: device descriptor read/64, error -71 [ 328.157383][ T5733] usb usb2-port1: attempt power cycle [ 328.299247][ T8474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.829'. [ 328.301913][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 328.334992][ T8476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.830'. [ 328.473695][ T8484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.473976][ T8484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.496215][ T5733] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 328.516587][ T5733] usb 2-1: device descriptor read/8, error -71 [ 328.695787][ T916] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 328.755687][ T5733] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 328.776573][ T5733] usb 2-1: device descriptor read/8, error -71 [ 328.845588][ T916] usb 4-1: Using ep0 maxpacket: 8 [ 328.846116][ T916] usb 4-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 328.847034][ T916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.847046][ T916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 328.847070][ T916] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 328.847083][ T916] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 328.847104][ T916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.850742][ T33] kauditd_printk_skb: 42 callbacks suppressed [ 328.850760][ T33] audit: type=1800 audit(1793138289.437:100): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157408 res=0 errno=-22 [ 328.851984][ T916] hub 4-1:1.0: bad descriptor, ignoring hub [ 328.851997][ T916] hub 4-1:1.0: probe with driver hub failed with error -5 [ 328.852329][ T916] cdc_wdm 4-1:1.0: skipping garbage [ 328.852336][ T916] cdc_wdm 4-1:1.0: skipping garbage [ 328.855359][ T33] audit: type=1800 audit(1793138289.437:101): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=157437 res=0 errno=-22 [ 328.883342][ T33] audit: type=1800 audit(1793138289.467:102): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=157415 res=0 errno=-22 [ 328.929188][ T5733] usb usb2-port1: unable to enumerate USB device [ 329.008673][ T33] audit: type=1800 audit(1793138289.597:103): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=157416 res=0 errno=-22 [ 329.064330][ T33] audit: type=1800 audit(1793138289.647:104): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=157417 res=0 errno=-22 [ 329.087245][ T916] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 329.087258][ T916] cdc_wdm 4-1:1.0: Unknown control protocol [ 329.118095][ T33] audit: type=1800 audit(1793138289.707:105): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157465 res=0 errno=-22 [ 329.121856][ T33] audit: type=1800 audit(1793138289.707:106): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157484 res=0 errno=-22 [ 329.462265][ T8492] HugeTLB: PID 8492 killed due to inadequate hugepage pool [ 329.474087][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.835'. [ 329.474905][ T8494] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 329.494958][ T8494] cramfs: wrong magic [ 329.728193][ T8502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.728473][ T8502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.398296][ T8508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.839'. [ 330.541384][ T8511] fuse: Unknown parameter 'fä0x0000000000000004' [ 330.586053][ T8511] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 330.623971][ T33] audit: type=1800 audit(1793138291.207:107): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=137156 res=0 errno=-22 [ 330.790636][ T8518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.792598][ T8518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.125731][ T916] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 331.277161][ T916] usb 2-1: not running at top speed; connect to a high speed hub [ 331.277184][ T916] usb 2-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 331.278169][ T916] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.278203][ T916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.281762][ T33] audit: type=1800 audit(1793138291.867:108): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157551 res=0 errno=-22 [ 331.346747][ T33] audit: type=1800 audit(1793138291.937:109): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=157580 res=0 errno=-22 [ 331.360832][ T916] uvcvideo 2-1:1.0: Found UVC 1.00 device (046d:0825) [ 331.360883][ T916] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 331.500476][ T10] usb 3-1: USB disconnect, device number 69 [ 331.543145][ T5733] usb 2-1: USB disconnect, device number 70 [ 331.672847][ T8525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.846'. [ 331.728130][ T8527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.728406][ T8527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.804762][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.848'. [ 331.934132][ T8535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.934427][ T8535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.958789][ T8535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.959101][ T8535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.993119][ T8539] FAULT_INJECTION: forcing a failure. [ 331.993119][ T8539] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 331.993138][ T8539] CPU: 0 UID: 0 PID: 8539 Comm: syz.3.847 Not tainted syzkaller #0 PREEMPT(full) [ 331.993150][ T8539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 331.993156][ T8539] Call Trace: [ 331.993160][ T8539] [ 331.993164][ T8539] dump_stack_lvl+0xe8/0x150 [ 331.993186][ T8539] should_fail_ex+0x3eb/0x540 [ 331.993203][ T8539] prepare_alloc_pages+0x21e/0x5f0 [ 331.993218][ T8539] __alloc_frozen_pages_noprof+0x17c/0x410 [ 331.993229][ T8539] ? __lock_acquire+0x747/0x2de0 [ 331.993241][ T8539] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 331.993257][ T8539] ? policy_nodemask+0x31b/0x980 [ 331.993269][ T8539] ? __pfx_free_vmap_area_rb_augment_cb_rotate+0x10/0x10 [ 331.993281][ T8539] ? free_vmap_area_rb_augment_cb_rotate+0x165/0x170 [ 331.993294][ T8539] alloc_pages_mpol+0x21e/0x390 [ 331.993310][ T8539] alloc_pages_noprof+0xb1/0x2b0 [ 331.993324][ T8539] get_free_pages_noprof+0xf/0x80 [ 331.993336][ T8539] __kasan_populate_vmalloc+0x38/0x1c0 [ 331.993348][ T8539] ? do_raw_spin_unlock+0xf5/0x200 [ 331.993363][ T8539] alloc_vmap_area+0xd10/0x1410 [ 331.993384][ T8539] ? __pfx_alloc_vmap_area+0x10/0x10 [ 331.993398][ T8539] ? __get_vm_area_node+0x195/0x330 [ 331.993410][ T8539] ? __get_vm_area_node+0x195/0x330 [ 331.993425][ T8539] __get_vm_area_node+0x24a/0x330 [ 331.993441][ T8539] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 331.993451][ T8539] ? copy_process+0x7ea/0x44b0 [ 331.993468][ T8539] ? percpu_ref_get_many+0x19/0x140 [ 331.993485][ T8539] ? __memcg_slab_post_alloc_hook+0x46f/0xdb0 [ 331.993502][ T8539] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 331.993512][ T8539] ? dup_task_struct+0x52/0xa00 [ 331.993528][ T8539] ? trace_kmem_cache_alloc+0x29/0xe0 [ 331.993539][ T8539] ? memcpy_and_pad+0x48/0x80 [ 331.993552][ T8539] __vmalloc_node_noprof+0xc2/0x100 [ 331.993561][ T8539] ? copy_process+0x7ea/0x44b0 [ 331.993571][ T8539] ? copy_process+0x7ea/0x44b0 [ 331.993582][ T8539] dup_task_struct+0x2c6/0xa00 [ 331.993596][ T8539] copy_process+0x7ea/0x44b0 [ 331.993616][ T8539] ? kstrtouint+0x6e/0xe0 [ 331.993628][ T8539] ? lock_acquire+0x115/0x350 [ 331.993638][ T8539] ? get_pid_task+0x20/0x1f0 [ 331.993649][ T8539] ? __pfx_copy_process+0x10/0x10 [ 331.993661][ T8539] ? get_pid_task+0x20/0x1f0 [ 331.993669][ T8539] ? get_pid_task+0x20/0x1f0 [ 331.993684][ T8539] kernel_clone+0x2d7/0x940 [ 331.993699][ T8539] ? __pfx_kernel_clone+0x10/0x10 [ 331.993720][ T8539] __x64_sys_clone+0x1b6/0x230 [ 331.993734][ T8539] ? __pfx___x64_sys_clone+0x10/0x10 [ 331.993754][ T8539] ? __pfx_ksys_write+0x10/0x10 [ 331.993771][ T8539] do_syscall_64+0x166/0x520 [ 331.993784][ T8539] ? trace_irq_disable+0x3b/0x140 [ 331.993795][ T8539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.993805][ T8539] ? clear_bhb_loop+0x70/0xc0 [ 331.993817][ T8539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.993826][ T8539] RIP: 0033:0x7f900cf9f559 [ 331.993836][ T8539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.993845][ T8539] RSP: 002b:00007f900ddeffd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 331.993856][ T8539] RAX: ffffffffffffffda RBX: 00007f900d226090 RCX: 00007f900cf9f559 [ 331.993863][ T8539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 331.993869][ T8539] RBP: 00007f900ddf0090 R08: 0000000000000000 R09: 0000000000000000 [ 331.993875][ T8539] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 331.993881][ T8539] R13: 00007f900d226128 R14: 00007f900d226090 R15: 00007ffc6c8e3b88 [ 331.993896][ T8539] [ 331.994109][ T8539] syz.3.847: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 331.994258][ T8539] CPU: 0 UID: 0 PID: 8539 Comm: syz.3.847 Not tainted syzkaller #0 PREEMPT(full) [ 331.994270][ T8539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 331.994275][ T8539] Call Trace: [ 331.994279][ T8539] [ 331.994283][ T8539] dump_stack_lvl+0xe8/0x150 [ 331.994299][ T8539] warn_alloc+0x24d/0x270 [ 331.994311][ T8539] ? kasan_quarantine_put+0xbb/0x1f0 [ 331.994325][ T8539] ? __pfx_warn_alloc+0x10/0x10 [ 331.994336][ T8539] ? __get_vm_area_node+0x263/0x330 [ 331.994352][ T8539] ? __get_vm_area_node+0x263/0x330 [ 331.994368][ T8539] __vmalloc_node_range_noprof+0x396/0x16f0 [ 331.994384][ T8539] ? percpu_ref_get_many+0x19/0x140 [ 331.994401][ T8539] ? __memcg_slab_post_alloc_hook+0x46f/0xdb0 [ 331.994418][ T8539] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 331.994428][ T8539] ? dup_task_struct+0x52/0xa00 [ 331.994438][ T8539] ? trace_kmem_cache_alloc+0x29/0xe0 [ 331.994449][ T8539] ? memcpy_and_pad+0x48/0x80 [ 331.994461][ T8539] __vmalloc_node_noprof+0xc2/0x100 [ 331.994470][ T8539] ? copy_process+0x7ea/0x44b0 [ 331.994480][ T8539] ? copy_process+0x7ea/0x44b0 [ 331.994492][ T8539] dup_task_struct+0x2c6/0xa00 [ 331.994506][ T8539] copy_process+0x7ea/0x44b0 [ 331.994531][ T8539] ? kstrtouint+0x6e/0xe0 [ 331.994543][ T8539] ? lock_acquire+0x115/0x350 [ 331.994559][ T8539] ? get_pid_task+0x20/0x1f0 [ 331.994571][ T8539] ? __pfx_copy_process+0x10/0x10 [ 331.994582][ T8539] ? get_pid_task+0x20/0x1f0 [ 331.994590][ T8539] ? get_pid_task+0x20/0x1f0 [ 331.994603][ T8539] kernel_clone+0x2d7/0x940 [ 331.994618][ T8539] ? __pfx_kernel_clone+0x10/0x10 [ 331.994639][ T8539] __x64_sys_clone+0x1b6/0x230 [ 331.994653][ T8539] ? __pfx___x64_sys_clone+0x10/0x10 [ 331.994673][ T8539] ? __pfx_ksys_write+0x10/0x10 [ 331.994690][ T8539] do_syscall_64+0x166/0x520 [ 331.994702][ T8539] ? trace_irq_disable+0x3b/0x140 [ 331.994714][ T8539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.994723][ T8539] ? clear_bhb_loop+0x70/0xc0 [ 331.994734][ T8539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.994744][ T8539] RIP: 0033:0x7f900cf9f559 [ 331.994752][ T8539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.994761][ T8539] RSP: 002b:00007f900ddeffd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 331.994770][ T8539] RAX: ffffffffffffffda RBX: 00007f900d226090 RCX: 00007f900cf9f559 [ 331.994777][ T8539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 331.994783][ T8539] RBP: 00007f900ddf0090 R08: 0000000000000000 R09: 0000000000000000 [ 331.994789][ T8539] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 331.994795][ T8539] R13: 00007f900d226128 R14: 00007f900d226090 R15: 00007ffc6c8e3b88 [ 331.994811][ T8539] [ 331.994925][ T8539] Mem-Info: [ 331.994932][ T8539] active_anon:55069 inactive_anon:0 isolated_anon:0 [ 331.994932][ T8539] active_file:5 inactive_file:56661 isolated_file:0 [ 331.994932][ T8539] unevictable:0 dirty:48 writeback:0 [ 331.994932][ T8539] slab_reclaimable:11420 slab_unreclaimable:93400 [ 331.994932][ T8539] mapped:25644 shmem:49353 pagetables:1387 [ 331.994932][ T8539] sec_pagetables:3 bounce:0 [ 331.994932][ T8539] kernel_misc_reclaimable:0 [ 331.994932][ T8539] free:1270454 free_pcp:4575 free_cma:0 [ 331.994963][ T8539] Node 0 active_anon:220276kB inactive_anon:0kB active_file:20kB inactive_file:226184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102344kB dirty:184kB writeback:0kB shmem:197412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12704kB pagetables:5400kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 331.995005][ T8539] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:460kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:232kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 331.995030][ T8539] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 331.995057][ T8539] lowmem_reserve[]: 0 2460 2461 2461 2461 [ 331.995075][ T8539] Node 0 DMA32 free:1144144kB boost:0kB min:33916kB low:42392kB high:50868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:220276kB inactive_anon:0kB active_file:20kB inactive_file:226184kB unevictable:0kB writepending:184kB zspages:0kB present:3129332kB managed:2519552kB mlocked:0kB bounce:0kB free_pcp:18280kB local_pcp:18280kB free_cma:0kB [ 331.995103][ T8539] lowmem_reserve[]: 0 0 1 1 1 [ 331.995119][ T8539] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1320kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 331.995159][ T8539] lowmem_reserve[]: 0 0 0 0 0 [ 331.995175][ T8539] Node 1 Normal free:3922296kB boost:0kB min:55968kB low:69960kB high:83952kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:460kB unevictable:0kB writepending:8kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 331.995219][ T8539] lowmem_reserve[]: 0 0 0 0 0 [ 331.995235][ T8539] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 331.995307][ T8539] Node 0 DMA32: 2*4kB (UE) 3*8kB (UME) 267*16kB (UM) 282*32kB (UM) 25*64kB (UE) 2*128kB (UE) 2*256kB (UE) 4*512kB (UME) 0*1024kB 2*2048kB (UE) 274*4096kB (UM) = 1144144kB [ 331.995378][ T8539] Node 0 Normal: 2*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 331.995440][ T8539] Node 1 Normal: 4*4kB (UM) 5*8kB (UM) 4*16kB (UM) 12*32kB (UM) 4*64kB (UM) 5*128kB (UM) 2*256kB (M) 1*512kB (M) 2*1024kB (UM) 1*2048kB (U) 956*4096kB (M) = 3922296kB [ 331.995513][ T8539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 331.995526][ T8539] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 332.019570][ T8539] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 332.019584][ T8539] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 332.019609][ T8539] 106015 total pagecache pages [ 332.019625][ T8539] 0 pages in swap cache [ 332.019629][ T8539] Free swap = 124996kB [ 332.019632][ T8539] Total swap = 124996kB [ 332.020412][ T8539] 2097051 pages RAM [ 332.020418][ T8539] 0 pages HighMem/MovableOnly [ 332.020422][ T8539] 435217 pages reserved [ 332.020425][ T8539] 0 pages cma reserved [ 333.232534][ T8545] cgroup2: Unknown parameter 'net' [ 333.260844][ T8548] Set syz1 is full, maxelem 1029 reached [ 333.331370][ T8551] tmpfs: Bad value for 'nr_inodes' [ 333.585627][ T5733] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 333.736268][ T5733] usb 3-1: New USB device found: idVendor=0419, idProduct=0600, bcdDevice=0.00 [ 333.737268][ T5733] usb 3-1: config 0 interface 0 altsetting 22 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.737285][ T5733] usb 3-1: config 0 interface 0 altsetting 22 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.737317][ T5733] usb 3-1: config 0 interface 0 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.737330][ T5733] usb 3-1: config 0 interface 0 has no altsetting 0 [ 333.737348][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.740064][ T5733] usb 3-1: config 0 descriptor?? [ 333.960147][ T8555] fscrypt (sda1, inode 1262): Direct key flag not allowed with different contents and filenames modes [ 334.118661][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.857'. [ 334.151032][ T33] kauditd_printk_skb: 15 callbacks suppressed [ 334.151043][ T33] audit: type=1800 audit(1793138294.737:125): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157931 res=0 errno=-22 [ 334.186578][ T5733] hid_parser_main: 173 callbacks suppressed [ 334.186605][ T5733] samsung 0003:0419:0600.000B: unknown main item tag 0x0 [ 334.186623][ T5733] samsung 0003:0419:0600.000B: unknown main item tag 0x0 [ 334.186638][ T5733] samsung 0003:0419:0600.000B: unknown main item tag 0x0 [ 334.186652][ T5733] samsung 0003:0419:0600.000B: unknown main item tag 0x0 [ 334.186666][ T5733] samsung 0003:0419:0600.000B: unknown main item tag 0x0 [ 334.186680][ T5733] samsung 0003:0419:0600.000B: unknown main item tag 0x0 [ 334.186694][ T5733] samsung 0003:0419:0600.000B: unknown main item tag 0x0 [ 334.186708][ T5733] samsung 0003:0419:0600.000B: unknown main item tag 0x0 [ 334.186724][ T5733] samsung 0003:0419:0600.000B: unknown main item tag 0x0 [ 334.186749][ T5733] samsung 0003:0419:0600.000B: unknown main item tag 0x0 [ 334.186805][ T5733] samsung 0003:0419:0600.000B: unbalanced collection at end of report description [ 334.187258][ T5733] samsung 0003:0419:0600.000B: parse failed [ 334.187314][ T5733] samsung 0003:0419:0600.000B: probe with driver samsung failed with error -22 [ 334.360223][ T8551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.360522][ T8551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.105566][ C0] sched: DL replenish lagged too much [ 385.548191][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 395.366736][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.857452][ T1318] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 442.365523][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 442.372475][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8551/1:b..l.. [ 442.381620][ C0] rcu: (detected by 0, t=10502 jiffies, g=58197, q=907146 ncpus=1) [ 442.389587][ C0] task:syz.2.854 state:R running task stack:26120 pid:8551 tgid:8550 ppid:5636 task_flags:0x40054c flags:0x00080002 [ 442.403052][ C0] Call Trace: [ 442.406314][ C0] [ 442.409229][ C0] __schedule+0x17dd/0x5830 [ 442.413721][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 442.418908][ C0] ? unwind_get_return_address+0x4d/0x90 [ 442.424538][ C0] ? __lock_acquire+0x747/0x2de0 [ 442.429457][ C0] ? __pfx___schedule+0x10/0x10 [ 442.434296][ C0] ? __lock_acquire+0x747/0x2de0 [ 442.439212][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 442.444565][ C0] preempt_schedule_irq+0x4b/0x90 [ 442.449571][ C0] irqentry_exit+0x14f/0x9b0 [ 442.454138][ C0] ? trace_irq_disable+0x3b/0x140 [ 442.459140][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 442.465101][ C0] RIP: 0010:__page_table_check_zero+0x14a/0x430 [ 442.471325][ C0] Code: 74 0c 48 c7 c7 10 bf ab 8e e8 92 0a f4 ff 4c 2b 35 8b 67 5f 0c 49 c1 fe 06 4c 89 74 24 08 bf 20 00 00 00 89 ee e8 76 f7 7c ff <83> fd 1f 0f 87 a0 02 00 00 e8 58 f2 7c ff bb 01 00 00 00 89 e9 d3 [ 442.490928][ C0] RSP: 0018:ffffc900035bf748 EFLAGS: 00000293 [ 442.496980][ C0] RAX: ffffffff824c579a RBX: 0000000000000001 RCX: 0000000000000000 [ 442.504959][ C0] RDX: ffff888020bf9f40 RSI: 0000000000000000 RDI: 0000000000000020 [ 442.512931][ C0] RBP: 0000000000000000 R08: ffffffff824c56bc R09: 0000000000000000 [ 442.520884][ C0] R10: dffffc0000000000 R11: ffffed100f5cc5a6 R12: ffffea0001efdd00 [ 442.528845][ C0] R13: 00000e000014a123 R14: 000000000007bf74 R15: ffffffff824c56bc [ 442.536796][ C0] ? __page_table_check_zero+0x6c/0x430 [ 442.542337][ C0] ? __page_table_check_zero+0x6c/0x430 [ 442.547860][ C0] ? __page_table_check_zero+0x14a/0x430 [ 442.553474][ C0] ? __page_table_check_zero+0x14a/0x430 [ 442.559086][ C0] ? __reset_page_owner+0x195/0x2a0 [ 442.564332][ C0] __free_frozen_pages+0xca7/0xd90 [ 442.569473][ C0] __slab_free+0x269/0x2c0 [ 442.573886][ C0] ? qlist_free_all+0x8e/0x100 [ 442.578641][ C0] qlist_free_all+0x99/0x100 [ 442.583212][ C0] ? taskstats_exit+0x19e/0xe10 [ 442.588050][ C0] ? kmem_cache_alloc_noprof+0x151/0x600 [ 442.593676][ C0] kasan_quarantine_reduce+0x148/0x160 [ 442.599124][ C0] __kasan_slab_alloc+0x22/0x80 [ 442.603962][ C0] kmem_cache_alloc_noprof+0x2b4/0x600 [ 442.609408][ C0] ? taskstats_exit+0x19e/0xe10 [ 442.614245][ C0] ? kmem_cache_alloc_noprof+0x151/0x600 [ 442.619875][ C0] ? taskstats_exit+0x19e/0xe10 [ 442.624712][ C0] taskstats_exit+0x19e/0xe10 [ 442.629369][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 442.634726][ C0] ? __pfx_taskstats_exit+0x10/0x10 [ 442.639908][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 442.645091][ C0] do_exit+0x688/0x2360 [ 442.649251][ C0] ? __pfx_do_exit+0x10/0x10 [ 442.653850][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 442.658866][ C0] do_group_exit+0x22d/0x2f0 [ 442.663457][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 442.668647][ C0] get_signal+0x1216/0x12c0 [ 442.673143][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 442.678328][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 442.683875][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 442.690017][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 442.695379][ C0] ? rcu_is_watching+0x16/0xb0 [ 442.700124][ C0] do_syscall_64+0x328/0x520 [ 442.704707][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.710794][ C0] ? clear_bhb_loop+0x70/0xc0 [ 442.715475][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.721345][ C0] RIP: 0033:0x7f429519f559 [ 442.725735][ C0] RSP: 002b:00007f4296082028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 442.734133][ C0] RAX: fffffffffffffe00 RBX: 00007f4295425fa0 RCX: 00007f429519f559 [ 442.742105][ C0] RDX: 000000000000001c RSI: 00002000000006c0 RDI: 0000000000000009 [ 442.750068][ C0] RBP: 00007f4295236b20 R08: 0000000000000000 R09: 0000000000000000 [ 442.758026][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.765993][ C0] R13: 00007f4295426038 R14: 00007f4295425fa0 R15: 00007fffb0d432f8 [ 442.773961][ C0] [ 442.776972][ C0] rcu: rcu_preempt kthread starved for 764 jiffies! g58197 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 442.787789][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 442.797825][ C0] rcu: RCU grace-period kthread stack dump: [ 442.803699][ C0] task:rcu_preempt state:R running task stack:28104 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 442.817179][ C0] Call Trace: [ 442.820437][ C0] [ 442.823350][ C0] __schedule+0x17dd/0x5830 [ 442.827835][ C0] ? __lock_acquire+0x747/0x2de0 [ 442.832763][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 442.837867][ C0] ? __pfx___schedule+0x10/0x10 [ 442.842695][ C0] ? lock_acquire+0x115/0x350 [ 442.847352][ C0] ? schedule+0x90/0x2b0 [ 442.851599][ C0] schedule+0x164/0x2b0 [ 442.855756][ C0] schedule_timeout+0x152/0x2c0 [ 442.860587][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 442.865950][ C0] ? __pfx_process_timeout+0x10/0x10 [ 442.871223][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 442.877020][ C0] ? prepare_to_swait_event+0x220/0x3e0 [ 442.882542][ C0] ? prepare_to_swait_event+0x35e/0x3e0 [ 442.888068][ C0] rcu_gp_fqs_loop+0x30c/0x1230 [ 442.892900][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 442.899028][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 442.904326][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 442.909585][ C0] rcu_gp_kthread+0x9c/0x340 [ 442.914163][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 442.919344][ C0] ? __kthread_parkme+0x71/0x1f0 [ 442.924267][ C0] ? __kthread_parkme+0x199/0x1f0 [ 442.929277][ C0] kthread+0x38b/0x480 [ 442.933336][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 442.938514][ C0] ? __pfx_kthread+0x10/0x10 [ 442.943170][ C0] ret_from_fork+0x514/0xb70 [ 442.947754][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 442.952840][ C0] ? __switch_to+0xc78/0x1410 [ 442.957513][ C0] ? __pfx_kthread+0x10/0x10 [ 442.962092][ C0] ret_from_fork_asm+0x1a/0x30 [ 442.966844][ C0] [ 442.969842][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 442.976151][ C0] CPU: 0 UID: 0 PID: 3231 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 442.985872][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 442.995909][ C0] Workqueue: bat_events batadv_dat_purge [ 443.001520][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x80 [ 443.007564][ C0] Code: 89 fb e8 23 00 00 00 48 8b 3d 64 06 e3 0c 48 89 de 5b e9 c3 4b 6b 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0d f8 55 21 13 65 48 8b 15 f8 55 [ 443.027144][ C0] RSP: 0018:ffffc900000079f8 EFLAGS: 00000246 [ 443.033195][ C0] RAX: ffffffff89e5e151 RBX: ffff88815dd6c000 RCX: 8000000000000100 [ 443.041160][ C0] RDX: ffff888033083e80 RSI: 0000000000000000 RDI: 0000000000000000 [ 443.049135][ C0] RBP: ffffc90000007c40 R08: 0000000000000100 R09: 0000000000000002 [ 443.057098][ C0] R10: 000000000000a888 R11: 8000000000000100 R12: 0000000000000000 [ 443.065072][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88815dd6c098 [ 443.073042][ C0] FS: 0000000000000000(0000) GS:ffff888123376000(0000) knlGS:0000000000000000 [ 443.081950][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 443.088514][ C0] CR2: 000055be9e204a88 CR3: 0000000026eea000 CR4: 00000000003526f0 [ 443.096474][ C0] Call Trace: [ 443.099738][ C0] [ 443.102567][ C0] __netif_receive_skb_core+0x25fe/0x30c0 [ 443.108305][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 443.114365][ C0] ? ip_local_deliver+0x113/0x190 [ 443.119377][ C0] ? NF_HOOK+0x336/0x3c0 [ 443.123610][ C0] ? lock_acquire+0x115/0x350 [ 443.128270][ C0] ? process_backlog+0x3de/0x18b0 [ 443.133274][ C0] ? process_backlog+0x3de/0x18b0 [ 443.138280][ C0] process_backlog+0x727/0x18b0 [ 443.143117][ C0] ? process_backlog+0x3de/0x18b0 [ 443.148139][ C0] __napi_poll+0xaa/0x330 [ 443.152452][ C0] net_rx_action+0x61d/0xf50 [ 443.157053][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 443.162165][ C0] handle_softirqs+0x265/0x8d0 [ 443.166921][ C0] ? batadv_dat_purge+0x2d7/0x3c0 [ 443.171937][ C0] do_softirq+0x77/0xd0 [ 443.176079][ C0] [ 443.179005][ C0] [ 443.182021][ C0] __local_bh_enable_ip+0x100/0x140 [ 443.187356][ C0] batadv_dat_purge+0x2d7/0x3c0 [ 443.192204][ C0] ? process_scheduled_works+0x97a/0x1630 [ 443.197908][ C0] process_scheduled_works+0xc3d/0x1630 [ 443.203454][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 443.209425][ C0] ? assign_work+0x3af/0x5d0 [ 443.214006][ C0] rescuer_thread+0x84a/0x12a0 [ 443.218761][ C0] ? rescuer_thread+0xb8/0x12a0 [ 443.223608][ C0] kthread+0x38b/0x480 [ 443.227695][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 443.232880][ C0] ? __pfx_kthread+0x10/0x10 [ 443.237454][ C0] ret_from_fork+0x514/0xb70 [ 443.242023][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 443.247110][ C0] ? __switch_to+0xc78/0x1410 [ 443.251782][ C0] ? __pfx_kthread+0x10/0x10 [ 443.256345][ C0] ret_from_fork_asm+0x1a/0x30 [ 443.261105][ C0]