last executing test programs: 14m34.607855889s ago: executing program 2 (id=94): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000040)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000140)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) statfs(&(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 14m34.069461646s ago: executing program 2 (id=95): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, r0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x3, 0x5, r0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x20000000, 0x6, 0x5f, 0x7, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x8, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0xffff, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000005, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x33, 0xe, 0x6, 0x7c, 0xea4, 0x0, 0x3, 0x7, 0x7fef, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x4, 0x9, 0x3, 0x7, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x4, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x8001, 0xffff, 0xa620, 0x1, 0x788, 0x8, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0x0, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0xb, 0x80000000, 0x8, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 14m33.848606959s ago: executing program 2 (id=98): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r3, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) 14m33.574389574s ago: executing program 2 (id=99): socket$nl_netfilter(0x10, 0x3, 0xc) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./trace\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d) 14m33.235381989s ago: executing program 2 (id=102): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) rmdir(0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x136) truncate(&(0x7f0000000000)='./file0/file0\x00', 0x0) 14m32.913894878s ago: executing program 2 (id=104): openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x800000, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x1, 0x1000000, 0x1e0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x20, 0x0, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14m32.497962915s ago: executing program 32 (id=104): openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x800000, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x1, 0x1000000, 0x1e0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x20, 0x0, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14m11.380166465s ago: executing program 3 (id=195): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e36, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x1}], 0x1c) clock_gettime(0xa, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$kcm(0x23, 0x5, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r3, 0x0, 0x0, 0x80, 0x0, 0x0) 14m11.027207777s ago: executing program 3 (id=198): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x560c, 0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000500)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002b80)='./file2\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x10004, &(0x7f0000002c80)={[{@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fchdir(r1) r2 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000180)='wchan\x00') pread64(r3, &(0x7f00000001c0)=""/19, 0x13, 0x4) 14m10.62873687s ago: executing program 3 (id=200): r0 = landlock_create_ruleset(&(0x7f0000000600)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000680)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000006c0)={0x210a, r1}, 0x0) landlock_restrict_self(r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 14m10.487005158s ago: executing program 3 (id=202): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x2, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 14m10.297238602s ago: executing program 3 (id=205): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x81) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)='1') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_readv(r1, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040010) 14m9.819851461s ago: executing program 3 (id=210): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 13m54.298900846s ago: executing program 33 (id=210): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 4m58.914394324s ago: executing program 5 (id=4719): openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x109842, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000400)='fd/3\x00') 4m58.821180805s ago: executing program 5 (id=4720): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004a00), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000004a40)='./file0\x00', &(0x7f0000004a80), 0x404, &(0x7f0000004ac0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f0000004b40)='./file0\x00', &(0x7f0000004b80), 0x10000, &(0x7f0000004bc0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 4m58.653711329s ago: executing program 5 (id=4724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4m58.493430385s ago: executing program 5 (id=4726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x44, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xb}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0xfffff800}}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4m57.968498929s ago: executing program 5 (id=4729): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/events/msr/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='3', 0x1) 4m57.890759373s ago: executing program 5 (id=4730): sigaltstack(&(0x7f0000000180)={&(0x7f0000002880)=""/4118, 0x3, 0x1016}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 4m55.575628298s ago: executing program 1 (id=4746): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='atkbd', 0x5) 4m54.997465559s ago: executing program 1 (id=4753): syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = dup3(r0, r1, 0x80000) read$alg(r2, 0x0, 0x0) 4m52.680360735s ago: executing program 1 (id=4762): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x20, 0xff, 0x0, 0xbfff7038}, {0x6, 0x0, 0x7f, 0xfffffffd}]}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 4m52.576438562s ago: executing program 1 (id=4766): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r1, 0x301}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) 4m52.490236391s ago: executing program 1 (id=4767): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000007c0)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_DEV_CREATE(r0, 0x5501) read$hiddev(r0, 0x0, 0x0) 4m52.339812767s ago: executing program 1 (id=4770): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./my_debugfs\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read(r0, &(0x7f0000000680)=""/100, 0x7ffc) 4m42.666004315s ago: executing program 34 (id=4730): sigaltstack(&(0x7f0000000180)={&(0x7f0000002880)=""/4118, 0x3, 0x1016}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 4m36.843574364s ago: executing program 35 (id=4770): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./my_debugfs\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read(r0, &(0x7f0000000680)=""/100, 0x7ffc) 30.033254022s ago: executing program 6 (id=6314): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) write$tcp_congestion(r0, 0x0, 0x35) 29.677398147s ago: executing program 6 (id=6316): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='./dev/sda1\x00', &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000640)='./mnt\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./debug\x00', 0x105540, 0xe1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x3, '\x00', @auto="5b6470438f31fdddeac2337f8fb6fab6"}) 29.49663522s ago: executing program 6 (id=6318): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x1ef) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x387) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000000200)='./file0/file1\x00', 0xe2) creat(&(0x7f0000000340)='./file0/file1\x00', 0x0) 29.371298362s ago: executing program 6 (id=6320): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') read$FUSE(r0, &(0x7f00000027c0)={0x2020}, 0x2038) 29.260890569s ago: executing program 6 (id=6321): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001180)=[@text64={0x40, &(0x7f00000011c0)="0f0013c441fc5a9b31aacf330f3235001000000f3066ba2100ec66baf80cb8402a2484ef66bafc0c66edc4a1f5fbf1f3450f2a89040000006642f4c4e21dbf7939b805000000b97499008c0f01c148b804000000000000000f23c00f21f835020004000f23f8", 0xffffffffffffffd5}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.576522636s ago: executing program 6 (id=6327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000033d000/0x18000)=nil, &(0x7f0000000800)=[@text32={0x20, &(0x7f0000000840)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0xba}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000940)={[0x1268f1ca, 0x7fffffff, 0x401, 0x9c2, 0x6, 0x20000000004, 0x458, 0x0, 0x2, 0x6, 0x3, 0x3f, 0xfffffffffffffffd, 0x10000005, 0x7e5, 0x7], 0xeefed002, 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.135770293s ago: executing program 36 (id=6327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000033d000/0x18000)=nil, &(0x7f0000000800)=[@text32={0x20, &(0x7f0000000840)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0xba}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000940)={[0x1268f1ca, 0x7fffffff, 0x401, 0x9c2, 0x6, 0x20000000004, 0x458, 0x0, 0x2, 0x6, 0x3, 0x3f, 0xfffffffffffffffd, 0x10000005, 0x7e5, 0x7], 0xeefed002, 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.228271269s ago: executing program 8 (id=6453): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1f3) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) close(0x3) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) 5.638932089s ago: executing program 8 (id=6456): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000b00), 0x0, 0x2100) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, 0x0) 3.708248787s ago: executing program 8 (id=6468): socket$key(0xf, 0x3, 0x2) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc623, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xd, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x20, 0x1, 0x1, '\x00'}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000780), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) 3.02960253s ago: executing program 7 (id=6470): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x40000000, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.666544341s ago: executing program 7 (id=6475): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x804, 0x4, 0x81, 0x4, 0x8, 0x800000, 0x7, 0x12, 0x400, 0x80000004, 0xfffffffffffffffc, 0x1000, 0x3, 0x6, 0x100000000001], 0xc000, 0x4fb40}) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x88101) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.321387463s ago: executing program 7 (id=6478): r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r1 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000a40)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000a80)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa) 2.282120982s ago: executing program 4 (id=6479): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newsa={0x154, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@remote, @in=@empty, 0x0, 0x5, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d3, 0x32}, @in6=@loopback, {0x1, 0x3, 0x9, 0x9, 0x10001, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1, 0xc0000000}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e23, 0x4e22, @in=@empty}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0x0, 0x2, 0x5}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, 0x0, 0x0) 2.208289242s ago: executing program 0 (id=6480): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000080)=""/23, 0x17, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001b80)={0x2, 0x0, {&(0x7f0000000b00)=""/4096, 0x1000, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000480)={0x2, 0x0, {&(0x7f0000000380)=""/108, 0x6c, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {&(0x7f0000000500)=""/145, 0xfeb7, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) 1.754266493s ago: executing program 4 (id=6481): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000600)=ANY=[], 0x342) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', 0x0}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto(r0, 0x0, 0x0, 0x468fd, &(0x7f00000004c0)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x92}, 0x9}, 0x80) 1.673968963s ago: executing program 0 (id=6482): r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x0, 0x17, 0x8, "2a5329145abd229b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000100)={0x40, 0x8, 0x8, "003cb3a4aa50323f"}, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.419553172s ago: executing program 4 (id=6483): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000b00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002b40)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x101042, 0x15) poll(&(0x7f0000002cc0)=[{r2, 0x10d8}, {r0, 0x8000}], 0x2, 0x546) 1.406785257s ago: executing program 4 (id=6484): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000000602, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x1fe000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000040)=0x4000) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000000a882, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.366499734s ago: executing program 7 (id=6485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000003c0)="0000b292cdc8e2a6d955e211d68742021e780d66988e", 0x16}], 0x2) 1.134699076s ago: executing program 7 (id=6486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@local, 0x40, r2}) write$tun(r0, &(0x7f0000000500)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0x0, 0x33, 0x40, @remote, @local}}, 0x28) 1.05891217s ago: executing program 4 (id=6487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000940)={'syzkaller0\x00'}) readv(r0, &(0x7f0000000980)=[{&(0x7f00000009c0)=""/197, 0xc5}], 0x1) 969.422559ms ago: executing program 4 (id=6488): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x403e0000, 0x40000000}], 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYBLOB="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"/4096], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x20000000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r3, 0x22091eb7}, 0x18) r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000169000/0x400000)=nil) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000001380)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./sys_debug\x00', 0x1ed) mount(&(0x7f0000001440)=@filename='debugfs\x00', &(0x7f0000001480)='./sys_debug\x00', &(0x7f00000014c0)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./sys_debug/kvm/mmu_shadow_zapped\x00', 0x2, 0x0) write(r6, &(0x7f0000001540)='1\n\x00', 0x2) syz_kvm_add_vcpu$x86(r4, &(0x7f00000013c0)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000240)={r3, 0x6, 0x0, 0xfffffffffffffe01, 0x5e0}, &(0x7f0000000280)=0x18) 967.992021ms ago: executing program 7 (id=6489): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="8102") syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000140)="8103") syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000180)="81") 915.94307ms ago: executing program 0 (id=6490): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cifs\x00', 0x0) mount(&(0x7f0000000080)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f00000000c0)='./cifs\x00', &(0x7f0000000100)='cifs\x00', 0x0, &(0x7f0000000140)='vers=1.0,user=root,pass=root\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f000002f9c0)={0x1, &(0x7f000002fa00)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 740.698542ms ago: executing program 8 (id=6491): setregid(0x0, 0xee00) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fchdir(r0) r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='stack\x00') pread64(r2, &(0x7f0000000100)=""/15, 0xf, 0x4) 674.323911ms ago: executing program 0 (id=6492): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 308.496563ms ago: executing program 8 (id=6493): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x28) mknodat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x81c0, 0x80000001) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x11d) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x8, &(0x7f0000000580)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0/file1\x00', 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000640)='./file0/file1\x00', &(0x7f0000000680), 0x0, 0x0, 0x3) lseek(r0, 0x6ddf, 0x1) 269.320164ms ago: executing program 0 (id=6494): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') r2 = socket$inet(0x2, 0x1, 0x0) read$FUSE(r1, &(0x7f0000000800)={0x2020}, 0x2020) listen(r2, 0x0) read$FUSE(r1, &(0x7f0000002840)={0x2020}, 0x2020) 103.623234ms ago: executing program 8 (id=6495): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000000602, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x1fe000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000040)=0x4000) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000000a882, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 0s ago: executing program 0 (id=6496): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r2, &(0x7f0000005f00)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="10fb478f8e4990cd962993ad8dd206d2060d81e87f1b49d6be24051a259d124d3ba0b6f677b873c2082876bef74261d8b93054abb23fcc0341511f7cc53bb18d6d87be7bdb79930fdc799e152cd2d6cd25956eaec876858a5f5f9da686ab52bf54d62de5ea1ed7375970525d7b079986a72530b1244ac7bff4ea6e092cfac6d8f55339db56379dd861b80aa3b800"/154, 0x9a}, {&(0x7f0000000600)="bae51259bbc5e83b05cea6d1f4fd7461b0a405138fd788603f4c7fe9ee8960d5d854d8b78435a2845d312f940856e5b963585ef3047d3e0d99ade34c405aec32764e5a26babcc6bb09fd8ef86d9744c6392363db1b10130e6d7c035798cdc849a5fa4a450296", 0x66}], 0x2, 0x0, 0x0, 0x4040000}], 0x1, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) kernel console output (not intermixed with test programs): er_rcu+0x10/0x10 [ 895.280524][T22679] ? futex_unqueue+0x22/0x240 [ 895.280555][T22679] ? vma_assert_stabilised+0x87/0x1f0 [ 895.280575][T22679] madvise_walk_vmas+0x97c/0xb70 [ 895.280602][T22679] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 895.280623][T22679] ? blk_start_plug+0x6e/0x1b0 [ 895.280642][T22679] madvise_do_behavior+0x385/0x540 [ 895.280665][T22679] ? __pfx_madvise_do_behavior+0x10/0x10 [ 895.280697][T22679] do_madvise+0x327/0x3a0 [ 895.280716][T22679] ? __pfx_do_madvise+0x10/0x10 [ 895.280742][T22679] ? __se_sys_futex+0x3a8/0x450 [ 895.280771][T22679] ? rcu_is_watching+0x16/0xb0 [ 895.280796][T22679] __x64_sys_madvise+0xa6/0xc0 [ 895.280815][T22679] do_syscall_64+0x166/0x520 [ 895.280838][T22679] ? trace_irq_disable+0x3b/0x140 [ 895.280856][T22679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.280873][T22679] ? clear_bhb_loop+0x70/0xc0 [ 895.280893][T22679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.280909][T22679] RIP: 0033:0x7f354a19f559 [ 895.280928][T22679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.280941][T22679] RSP: 002b:00007f354b100028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 895.280959][T22679] RAX: ffffffffffffffda RBX: 00007f354a425fa0 RCX: 00007f354a19f559 [ 895.280971][T22679] RDX: 0000000000000066 RSI: 000000000080fd00 RDI: 000020000042f000 [ 895.280982][T22679] RBP: 00007f354a236b20 R08: 0000000000000000 R09: 0000000000000000 [ 895.280993][T22679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 895.281002][T22679] R13: 00007f354a426038 R14: 00007f354a425fa0 R15: 00007ffecc764d78 [ 895.281028][T22679] [ 895.790355][T22682] loop5: detected capacity change from 0 to 7 [ 895.793262][T22682] Dev loop5: unable to read RDB block 7 [ 895.793293][T22682] loop5: unable to read partition table [ 895.793440][T22682] loop5: partition table beyond EOD, truncated [ 895.793464][T22682] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑû) failed (rc=-5) [ 896.035409][T22691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.035754][T22691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.094472][T19645] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 896.245250][T19645] usb 8-1: Using ep0 maxpacket: 32 [ 896.246850][T19645] usb 8-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 896.247736][T19645] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.247757][T19645] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.247785][T19645] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.250660][T19645] usb 8-1: config 0 descriptor?? [ 896.272663][T19645] hub 8-1:0.0: USB hub found [ 896.474764][T22695] FAULT_INJECTION: forcing a failure. [ 896.474764][T22695] name failslab, interval 1, probability 0, space 0, times 0 [ 896.474791][T22695] CPU: 0 UID: 0 PID: 22695 Comm: syz.6.5936 Tainted: G L syzkaller #0 PREEMPT(full) [ 896.474814][T22695] Tainted: [L]=SOFTLOCKUP [ 896.474820][T22695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 896.474830][T22695] Call Trace: [ 896.474836][T22695] [ 896.474843][T22695] dump_stack_lvl+0xe8/0x150 [ 896.474872][T22695] should_fail_ex+0x3eb/0x540 [ 896.474903][T22695] should_failslab+0xa8/0x100 [ 896.474922][T22695] ? alloc_empty_file+0x5b/0x1d0 [ 896.474945][T22695] kmem_cache_alloc_noprof+0x9c/0x600 [ 896.474971][T22695] ? alloc_empty_file+0x5b/0x1d0 [ 896.474998][T22695] alloc_empty_file+0x5b/0x1d0 [ 896.475022][T22695] alloc_file_pseudo+0x110/0x1e0 [ 896.475048][T22695] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 896.475079][T22695] __shmem_file_setup+0x2e9/0x370 [ 896.475098][T22695] ? __pfx___shmem_file_setup+0x10/0x10 [ 896.475118][T22695] ? vma_set_pgoff+0x163/0x290 [ 896.475140][T22695] shmem_zero_setup+0x90/0x130 [ 896.475157][T22695] mmap_region+0x1cea/0x2840 [ 896.475193][T22695] ? __pfx_mmap_region+0x10/0x10 [ 896.475221][T22695] ? do_raw_spin_lock+0x12b/0x2f0 [ 896.475250][T22695] ? rcu_is_watching+0x16/0xb0 [ 896.475271][T22695] ? trace_hrtimer_start+0x82/0x200 [ 896.475289][T22695] ? hrtimer_start_range_ns_common+0x7cd/0xb60 [ 896.475370][T22695] ? arch_get_unmapped_area_topdown+0x269/0xc30 [ 896.475410][T22695] ? shmem_get_unmapped_area+0x2cf/0x8f0 [ 896.475437][T22695] ? cap_mmap_addr+0xaa/0xf0 [ 896.475461][T22695] ? bpf_lsm_mmap_addr+0x9/0x50 [ 896.475478][T22695] ? security_mmap_addr+0x71/0x240 [ 896.475507][T22695] do_mmap+0xe0a/0x1300 [ 896.475534][T22695] ? __pfx_do_mmap+0x10/0x10 [ 896.475562][T22695] ? vm_mmap_pgoff+0x1ed/0x520 [ 896.475586][T22695] ? down_write_killable+0x179/0x230 [ 896.475614][T22695] ? __pfx_down_write_killable+0x10/0x10 [ 896.475639][T22695] ? apparmor_mmap_file+0x1cc/0x390 [ 896.475660][T22695] ? security_mmap_file+0xf9/0xa20 [ 896.475687][T22695] vm_mmap_pgoff+0x27a/0x520 [ 896.475717][T22695] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 896.475744][T22695] ? rcu_is_watching+0x16/0xb0 [ 896.475766][T22695] ? ksys_mmap_pgoff+0xf3/0x760 [ 896.475786][T22695] ? __x64_sys_mmap+0x7f/0x140 [ 896.475804][T22695] do_syscall_64+0x166/0x520 [ 896.475825][T22695] ? trace_irq_disable+0x3b/0x140 [ 896.475843][T22695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.475860][T22695] ? clear_bhb_loop+0x70/0xc0 [ 896.475879][T22695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.475895][T22695] RIP: 0033:0x7f354a19f559 [ 896.475911][T22695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.475924][T22695] RSP: 002b:00007f354b100028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 896.475942][T22695] RAX: ffffffffffffffda RBX: 00007f354a425fa0 RCX: 00007f354a19f559 [ 896.475954][T22695] RDX: 0000000001000003 RSI: 000000000000c000 RDI: 0000200000ff4000 [ 896.475965][T22695] RBP: 00007f354a236b20 R08: ffffffffffffffff R09: 00000000ffffe000 [ 896.475976][T22695] R10: 0000000000020031 R11: 0000000000000246 R12: 0000000000000000 [ 896.475986][T22695] R13: 00007f354a426038 R14: 00007f354a425fa0 R15: 00007ffecc764d78 [ 896.476012][T22695] [ 896.907984][T22682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.908352][T22682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.140122][T22703] FAULT_INJECTION: forcing a failure. [ 897.140122][T22703] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 897.140171][T22703] CPU: 0 UID: 0 PID: 22703 Comm: syz.6.5939 Tainted: G L syzkaller #0 PREEMPT(full) [ 897.140194][T22703] Tainted: [L]=SOFTLOCKUP [ 897.140200][T22703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 897.140211][T22703] Call Trace: [ 897.140217][T22703] [ 897.140224][T22703] dump_stack_lvl+0xe8/0x150 [ 897.140252][T22703] should_fail_ex+0x3eb/0x540 [ 897.140285][T22703] prepare_alloc_pages+0x21e/0x5f0 [ 897.140307][T22703] __alloc_frozen_pages_noprof+0x17c/0x410 [ 897.140328][T22703] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 897.140353][T22703] ? policy_nodemask+0x31b/0x980 [ 897.140372][T22703] ? lock_acquire+0x115/0x350 [ 897.140392][T22703] alloc_pages_mpol+0x21e/0x390 [ 897.140417][T22703] alloc_pages_noprof+0xb1/0x2b0 [ 897.140439][T22703] __pud_alloc+0x3a/0x460 [ 897.140458][T22703] ? rcu_is_watching+0x16/0xb0 [ 897.140481][T22703] walk_to_pmd+0x303/0x450 [ 897.140499][T22703] get_locked_pte+0x27/0xd0 [ 897.140516][T22703] map_ldt_struct+0x4e1/0xb50 [ 897.140540][T22703] ? rcu_is_watching+0x16/0xb0 [ 897.140564][T22703] ? __pfx_map_ldt_struct+0x10/0x10 [ 897.140585][T22703] ? alloc_pages_noprof+0x140/0x2b0 [ 897.140609][T22703] write_ldt+0x768/0x930 [ 897.140626][T22703] ? __se_sys_futex+0x3a8/0x450 [ 897.140652][T22703] ? __pfx_write_ldt+0x10/0x10 [ 897.140672][T22703] ? rcu_is_watching+0x16/0xb0 [ 897.140697][T22703] __se_sys_modify_ldt+0x6c/0x310 [ 897.140718][T22703] do_syscall_64+0x166/0x520 [ 897.140740][T22703] ? trace_irq_disable+0x3b/0x140 [ 897.140758][T22703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.140775][T22703] ? clear_bhb_loop+0x70/0xc0 [ 897.140795][T22703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.140811][T22703] RIP: 0033:0x7f354a19f559 [ 897.140826][T22703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.140840][T22703] RSP: 002b:00007f354b100028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 897.140857][T22703] RAX: ffffffffffffffda RBX: 00007f354a425fa0 RCX: 00007f354a19f559 [ 897.140869][T22703] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000011 [ 897.140879][T22703] RBP: 00007f354a236b20 R08: 0000000000000000 R09: 0000000000000000 [ 897.140890][T22703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.140899][T22703] R13: 00007f354a426038 R14: 00007f354a425fa0 R15: 00007ffecc764d78 [ 897.140925][T22703] [ 897.518507][T19645] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 897.548704][T19645] usbhid 8-1:0.0: can't add hid device: -71 [ 897.548785][T19645] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 897.569920][T19645] usb 8-1: USB disconnect, device number 37 [ 897.941015][T22713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.941360][T22713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.426542][T19645] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 898.495356][T22729] netlink: 'syz.4.5951': attribute type 12 has an invalid length. [ 898.496857][T22729] netlink: 'syz.4.5951': attribute type 4 has an invalid length. [ 898.546138][T19646] usb 8-1: new full-speed USB device number 38 using dummy_hcd [ 898.574514][T19645] usb 7-1: Using ep0 maxpacket: 32 [ 898.575782][T19645] usb 7-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 898.576646][T19645] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 898.576662][T19645] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 898.576701][T19645] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 898.579518][T19645] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.579537][T19645] usb 7-1: Product: syz [ 898.579547][T19645] usb 7-1: Manufacturer: syz [ 898.579559][T19645] usb 7-1: SerialNumber: syz [ 898.708128][T19646] usb 8-1: not running at top speed; connect to a high speed hub [ 898.708156][T19646] usb 8-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=1.00 [ 898.710082][T19646] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 898.710114][T19646] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.757850][T19646] cyberjack 8-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 898.791350][T19646] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 898.982084][T19646] usb 8-1: USB disconnect, device number 38 [ 899.034101][T19646] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 899.044770][T19646] cyberjack 8-1:1.0: device disconnected [ 899.304348][T19645] usb 7-1: 1:1: cannot get freq (v2/v3): err -32 [ 899.511099][T19645] usb 7-1: 1:1: cannot get freq (v2/v3): err -71 [ 899.620394][T19645] usb 7-1: USB disconnect, device number 42 [ 900.169334][T22752] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5969'. [ 900.352627][T22758] FAULT_INJECTION: forcing a failure. [ 900.352627][T22758] name failslab, interval 1, probability 0, space 0, times 0 [ 900.352657][T22758] CPU: 0 UID: 0 PID: 22758 Comm: syz.7.5962 Tainted: G L syzkaller #0 PREEMPT(full) [ 900.352679][T22758] Tainted: [L]=SOFTLOCKUP [ 900.352685][T22758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 900.352696][T22758] Call Trace: [ 900.352702][T22758] [ 900.352710][T22758] dump_stack_lvl+0xe8/0x150 [ 900.352736][T22758] should_fail_ex+0x3eb/0x540 [ 900.352766][T22758] ? zswap_store+0xb70/0x2280 [ 900.352806][T22758] should_failslab+0xa8/0x100 [ 900.352827][T22758] ? zswap_store+0xb70/0x2280 [ 900.352846][T22758] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 900.352877][T22758] ? percpu_ref_put+0x1e/0x230 [ 900.352899][T22758] ? percpu_ref_put+0x1e/0x230 [ 900.352919][T22758] ? zswap_store+0xb70/0x2280 [ 900.352945][T22758] zswap_store+0xb70/0x2280 [ 900.352970][T22758] ? zswap_store+0x524/0x2280 [ 900.353005][T22758] ? __pfx_zswap_store+0x10/0x10 [ 900.353026][T22758] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 900.353055][T22758] ? do_raw_spin_unlock+0xf5/0x200 [ 900.353081][T22758] swap_writeout+0x9bf/0x15d0 [ 900.353107][T22758] ? try_to_unmap_flush_dirty+0x96/0x100 [ 900.353134][T22758] shrink_folio_list+0x3039/0x4d90 [ 900.353180][T22758] ? __pfx_shrink_folio_list+0x10/0x10 [ 900.353248][T22758] ? __pfx___css_rstat_updated+0x10/0x10 [ 900.353273][T22758] reclaim_folio_list+0x100/0x430 [ 900.353307][T22758] ? __pfx_reclaim_folio_list+0x10/0x10 [ 900.353343][T22758] reclaim_pages+0x452/0x530 [ 900.353372][T22758] ? __pfx_reclaim_pages+0x10/0x10 [ 900.353397][T22758] ? madvise_cold_or_pageout_pte_range+0x1b60/0x2390 [ 900.353420][T22758] madvise_cold_or_pageout_pte_range+0x1b85/0x2390 [ 900.353455][T22758] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 900.353475][T22758] ? lru_gen_update_size+0x719/0xd00 [ 900.353511][T22758] walk_pgd_range+0x102d/0x1dc0 [ 900.353562][T22758] ? __pfx_walk_pgd_range+0x10/0x10 [ 900.353581][T22758] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 900.353606][T22758] __walk_page_range+0x16d/0x720 [ 900.353640][T22758] walk_page_range_vma_unsafe+0x309/0x410 [ 900.353665][T22758] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 900.353689][T22758] ? mlock_drain_local+0x79/0x490 [ 900.353708][T22758] ? walk_page_range_vma+0x6b/0x90 [ 900.353729][T22758] madvise_vma_behavior+0x2ba2/0x4a00 [ 900.353755][T22758] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 900.353781][T22758] ? do_raw_spin_lock+0x12b/0x2f0 [ 900.353809][T22758] ? rcu_is_watching+0x16/0xb0 [ 900.353830][T22758] ? trace_hrtimer_start+0x82/0x200 [ 900.353855][T22758] ? __lock_acquire+0x747/0x2de0 [ 900.353878][T22758] ? finish_task_switch+0x40e/0xc60 [ 900.353898][T22758] ? lockdep_hardirqs_on+0x7b/0x110 [ 900.353929][T22758] ? mas_next_slot+0xc91/0xd70 [ 900.353964][T22758] ? mt_find+0x481/0x630 [ 900.353990][T22758] ? mt_find+0x186/0x630 [ 900.354014][T22758] ? __pfx_mt_find+0x10/0x10 [ 900.354044][T22758] ? find_vma_prev+0x123/0x1b0 [ 900.354071][T22758] ? find_vma+0xed/0x160 [ 900.354091][T22758] ? __futex_wait+0x3c7/0x470 [ 900.354114][T22758] madvise_walk_vmas+0x57d/0xb70 [ 900.354142][T22758] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 900.354163][T22758] ? blk_start_plug+0x6e/0x1b0 [ 900.354182][T22758] madvise_do_behavior+0x385/0x540 [ 900.354205][T22758] ? __pfx_madvise_do_behavior+0x10/0x10 [ 900.354228][T22758] ? down_read+0x2b9/0x320 [ 900.354259][T22758] do_madvise+0x327/0x3a0 [ 900.354278][T22758] ? __pfx_do_madvise+0x10/0x10 [ 900.354303][T22758] ? __se_sys_futex+0x3a8/0x450 [ 900.354333][T22758] ? rcu_is_watching+0x16/0xb0 [ 900.354359][T22758] __x64_sys_madvise+0xa6/0xc0 [ 900.354378][T22758] do_syscall_64+0x166/0x520 [ 900.354400][T22758] ? trace_irq_disable+0x3b/0x140 [ 900.354417][T22758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.354434][T22758] ? clear_bhb_loop+0x70/0xc0 [ 900.354454][T22758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.354470][T22758] RIP: 0033:0x7fd40779f559 [ 900.354485][T22758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.354499][T22758] RSP: 002b:00007fd4059f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 900.354516][T22758] RAX: ffffffffffffffda RBX: 00007fd407a25fa0 RCX: 00007fd40779f559 [ 900.354528][T22758] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000 [ 900.354540][T22758] RBP: 00007fd407836b20 R08: 0000000000000000 R09: 0000000000000000 [ 900.354550][T22758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 900.354560][T22758] R13: 00007fd407a26038 R14: 00007fd407a25fa0 R15: 00007fff54f01e18 [ 900.354585][T22758] [ 901.407883][T22775] input: syz0 as /devices/virtual/input/input60 [ 901.734536][T22784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.734888][T22784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.361544][T22795] FAULT_INJECTION: forcing a failure. [ 902.361544][T22795] name fail_futex, interval 1, probability 0, space 0, times 0 [ 902.361571][T22795] CPU: 0 UID: 0 PID: 22795 Comm: syz.0.5979 Tainted: G L syzkaller #0 PREEMPT(full) [ 902.361594][T22795] Tainted: [L]=SOFTLOCKUP [ 902.361600][T22795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 902.361610][T22795] Call Trace: [ 902.361616][T22795] [ 902.361624][T22795] dump_stack_lvl+0xe8/0x150 [ 902.361651][T22795] should_fail_ex+0x3eb/0x540 [ 902.361689][T22795] get_futex_key+0x1ab/0x1410 [ 902.361718][T22795] ? __lock_acquire+0x747/0x2de0 [ 902.361734][T22795] ? __pfx_get_futex_key+0x10/0x10 [ 902.361761][T22795] futex_wake+0x119/0x5f0 [ 902.361780][T22795] ? __pfx_futex_wake+0x10/0x10 [ 902.361803][T22795] ? rcu_is_watching+0x16/0xb0 [ 902.361825][T22795] do_futex+0x458/0x4e0 [ 902.361851][T22795] ? __pfx_do_futex+0x10/0x10 [ 902.361872][T22795] ? lock_acquire+0x115/0x350 [ 902.361893][T22795] __se_sys_futex+0x3a8/0x450 [ 902.361920][T22795] ? __pfx___se_sys_futex+0x10/0x10 [ 902.361944][T22795] ? fd_install+0x95/0x4e0 [ 902.361972][T22795] ? __x64_sys_futex+0x21/0xf0 [ 902.361997][T22795] do_syscall_64+0x166/0x520 [ 902.362018][T22795] ? trace_irq_disable+0x3b/0x140 [ 902.362036][T22795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.362054][T22795] ? clear_bhb_loop+0x70/0xc0 [ 902.362074][T22795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.362090][T22795] RIP: 0033:0x7fb29dd9f559 [ 902.362105][T22795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.362119][T22795] RSP: 002b:00007fb29ec9f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 902.362136][T22795] RAX: ffffffffffffffda RBX: 00007fb29e025fa8 RCX: 00007fb29dd9f559 [ 902.362148][T22795] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb29e025fac [ 902.362159][T22795] RBP: 00007fb29e025fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 902.362170][T22795] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 902.362180][T22795] R13: 00007fb29e026038 R14: 00007ffd3f029750 R15: 00007ffd3f029838 [ 902.362205][T22795] [ 903.074648][T19645] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 903.226167][T19645] usb 7-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41 [ 903.227706][T19645] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 903.254947][T19645] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 903.254968][T19645] usb 7-1: Product: syz [ 903.254979][T19645] usb 7-1: Manufacturer: syz [ 903.254990][T19645] usb 7-1: SerialNumber: syz [ 903.537441][T19645] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 903.923625][T19645] usb 7-1: USB disconnect, device number 43 [ 903.940797][T19645] usblp0: removed [ 904.128330][T22820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.128729][T22820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.027504][T22847] loop7: detected capacity change from 0 to 7 [ 905.070223][ C0] blk_print_req_error: 83 callbacks suppressed [ 905.070243][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 905.070317][ C0] buffer_io_error: 138 callbacks suppressed [ 905.070326][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 905.132574][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 905.132668][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 905.153769][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 905.153884][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 905.175733][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 905.175795][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 905.176055][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 905.176102][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 905.176245][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 905.176289][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 905.176409][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 905.176454][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 905.176487][T22847] ldm_validate_partition_table(): Disk read failed. [ 905.176693][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 905.176740][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 905.176859][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 905.176911][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 905.177030][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 905.177074][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 905.177226][T22847] Dev loop7: unable to read RDB block 0 [ 905.180062][T22847] loop7: unable to read partition table [ 905.180212][T22847] loop7: partition table beyond EOD, truncated [ 905.180236][T22847] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 905.387806][T22850] fuse: fd is not a fuse device [ 905.608877][T22854] netlink: 'syz.4.6002': attribute type 11 has an invalid length. [ 905.913931][T19645] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 906.065824][T19645] usb 7-1: Using ep0 maxpacket: 32 [ 906.067999][T19645] usb 7-1: New USB device found: idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 906.070723][T19645] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.070742][T19645] usb 7-1: Product: syz [ 906.070753][T19645] usb 7-1: Manufacturer: syz [ 906.070764][T19645] usb 7-1: SerialNumber: syz [ 906.114610][T19645] usb 7-1: config 0 descriptor?? [ 906.526332][T22868] syzkaller0: entered allmulticast mode [ 906.546743][T19645] airspy 7-1:0.0: Board ID: 00 [ 906.546761][T19645] airspy 7-1:0.0: Firmware version: [ 906.738897][T22868] syzkaller0 (unregistering): left allmulticast mode [ 907.105875][ T6364] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 907.184059][T19452] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 907.334929][T19452] usb 8-1: Using ep0 maxpacket: 8 [ 907.335580][T19452] usb 8-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 907.338770][T19452] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 907.338825][T19452] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 907.338845][T19452] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 907.338864][T19452] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 907.338884][T19452] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 907.338901][T19452] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 907.338950][T19452] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.444125][T19645] airspy 7-1:0.0: usb_control_msg() failed -71 request 0f [ 907.448912][T19645] airspy 7-1:0.0: Registered as swradio24 [ 907.448947][T19645] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 907.488966][T19645] usb 7-1: USB disconnect, device number 44 [ 907.620316][T19646] hid_parser_main: 5 callbacks suppressed [ 907.620353][T19646] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 907.665704][T19452] usb 8-1: usb_control_msg returned -32 [ 907.665741][T19452] usbtmc 8-1:16.0: can't read capabilities [ 907.675898][T19685] udevd[19685]: 'v4l_id /dev/swradio24' [22879] terminated by signal 11 (Segmentation fault) [ 907.702694][T19646] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 907.760214][T22882] udevd[22882]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 908.025667][ C0] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 908.058764][T22885] usbtmc 8-1:16.0: Unable to send data, error -71 [ 908.072649][T22885] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 908.090679][T19452] usb 8-1: USB disconnect, device number 39 [ 908.454406][T22894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.456229][T22894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.755554][T22901] bond0: entered promiscuous mode [ 908.755573][T22901] bond_slave_0: entered promiscuous mode [ 908.755766][T22901] bond_slave_1: entered promiscuous mode [ 909.479414][T22928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.482150][T22928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.031406][T22937] FAULT_INJECTION: forcing a failure. [ 910.031406][T22937] name failslab, interval 1, probability 0, space 0, times 0 [ 910.031433][T22937] CPU: 0 UID: 0 PID: 22937 Comm: syz.7.6031 Tainted: G L syzkaller #0 PREEMPT(full) [ 910.031455][T22937] Tainted: [L]=SOFTLOCKUP [ 910.031462][T22937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 910.031473][T22937] Call Trace: [ 910.031480][T22937] [ 910.031487][T22937] dump_stack_lvl+0xe8/0x150 [ 910.031515][T22937] should_fail_ex+0x3eb/0x540 [ 910.031546][T22937] should_failslab+0xa8/0x100 [ 910.031568][T22937] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 910.031598][T22937] ? __lock_acquire+0x747/0x2de0 [ 910.031614][T22937] ? __kernfs_new_node+0xa9/0x980 [ 910.031633][T22937] ? __kernfs_new_node+0xa9/0x980 [ 910.031660][T22937] kstrdup+0x42/0x100 [ 910.031684][T22937] __kernfs_new_node+0xa9/0x980 [ 910.031712][T22937] ? __pfx___kernfs_new_node+0x10/0x10 [ 910.031734][T22937] ? kernfs_root+0x1c/0x230 [ 910.031758][T22937] ? kernfs_root+0x1c/0x230 [ 910.031777][T22937] ? kernfs_root+0x1c/0x230 [ 910.031794][T22937] ? kernfs_root+0x1c/0x230 [ 910.031817][T22937] kernfs_new_node+0xeb/0x140 [ 910.031841][T22937] kernfs_create_link+0xe3/0x240 [ 910.031870][T22937] sysfs_do_create_link_sd+0x83/0x110 [ 910.031890][T22937] device_create_sys_dev_entry+0x122/0x190 [ 910.031915][T22937] ? __pfx_device_create_sys_dev_entry+0x10/0x10 [ 910.031954][T22937] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 910.031978][T22937] ? device_create_file+0xf4/0x1b0 [ 910.032001][T22937] device_add+0x71e/0xb80 [ 910.032074][T22937] device_create+0x269/0x300 [ 910.032101][T22937] ? vgacon_build_attr+0x167/0x1f0 [ 910.032124][T22937] ? __pfx_vgacon_build_attr+0x10/0x10 [ 910.032148][T22937] ? __pfx_device_create+0x10/0x10 [ 910.032178][T22937] ? is_console_locked+0x9/0x20 [ 910.032198][T22937] ? csi_J+0x9d2/0xe80 [ 910.032217][T22937] vcs_make_sysfs+0x32/0x80 [ 910.032242][T22937] vc_allocate+0x61a/0x6f0 [ 910.032264][T22937] ? lock_acquire+0x115/0x350 [ 910.032283][T22937] ? __pfx_vc_allocate+0x10/0x10 [ 910.032309][T22937] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 910.032333][T22937] con_install+0x9f/0x770 [ 910.032355][T22937] ? __pfx_con_install+0x10/0x10 [ 910.032381][T22937] tty_init_dev+0xd7/0x4d0 [ 910.032400][T22937] tty_open+0x7de/0xd80 [ 910.032430][T22937] ? __pfx_tty_open+0x10/0x10 [ 910.032452][T22937] ? do_raw_spin_unlock+0xf5/0x200 [ 910.032478][T22937] chrdev_open+0x4d9/0x600 [ 910.032502][T22937] ? __pfx_chrdev_open+0x10/0x10 [ 910.032522][T22937] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 910.032543][T22937] ? devcgroup_check_permission+0x31/0x8f0 [ 910.032569][T22937] ? __pfx_chrdev_open+0x10/0x10 [ 910.032589][T22937] do_dentry_open+0x80e/0x1360 [ 910.032620][T22937] vfs_open_consume+0x4a/0x350 [ 910.032641][T22937] ? path_openat+0x16e1/0x20f0 [ 910.032661][T22937] path_openat+0x16fc/0x20f0 [ 910.032695][T22937] do_file_open+0x23e/0x4a0 [ 910.032718][T22937] ? __pfx_do_file_open+0x10/0x10 [ 910.032754][T22937] ? _raw_spin_unlock+0x28/0x50 [ 910.032772][T22937] ? alloc_fd+0x6af/0x760 [ 910.032805][T22937] do_sys_openat2+0x115/0x200 [ 910.032828][T22937] ? __se_sys_futex+0x3a8/0x450 [ 910.032852][T22937] ? __pfx_do_sys_openat2+0x10/0x10 [ 910.032879][T22937] ? rcu_is_watching+0x16/0xb0 [ 910.032904][T22937] __x64_sys_openat+0x138/0x170 [ 910.032932][T22937] do_syscall_64+0x166/0x520 [ 910.032953][T22937] ? trace_irq_disable+0x3b/0x140 [ 910.032971][T22937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.032988][T22937] ? clear_bhb_loop+0x70/0xc0 [ 910.033008][T22937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.033030][T22937] RIP: 0033:0x7fd40775fd8e [ 910.033047][T22937] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 910.033061][T22937] RSP: 002b:00007fd4059f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 910.033080][T22937] RAX: ffffffffffffffda RBX: 00007fd4059f66c0 RCX: 00007fd40775fd8e [ 910.033092][T22937] RDX: 0000000000000002 RSI: 00007fd4059f5c00 RDI: ffffffffffffff9c [ 910.033103][T22937] RBP: 00007fd407836b20 R08: 0000000000000000 R09: 0000000000000000 [ 910.033113][T22937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 910.033123][T22937] R13: 00007fd407a26038 R14: 00007fd407a25fa0 R15: 00007fff54f01e18 [ 910.033149][T22937] [ 910.782570][T22942] netlink: 'syz.6.6032': attribute type 11 has an invalid length. [ 910.975432][ T5619] svc: failed to register nfsdv3 RPC service (errno 5). [ 910.975453][ T5619] failed to unregister tcp with rpcbind [ 911.124646][T19646] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 911.273716][T19646] usb 8-1: Using ep0 maxpacket: 32 [ 911.274299][T19646] usb 8-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 911.275221][T19646] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 911.275239][T19646] usb 8-1: config 0 has no interface number 0 [ 911.277281][T19646] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.277301][T19646] usb 8-1: Product: syz [ 911.277312][T19646] usb 8-1: Manufacturer: syz [ 911.277323][T19646] usb 8-1: SerialNumber: syz [ 911.281068][T19646] usb 8-1: config 0 descriptor?? [ 911.695839][T19646] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 911.695864][T19646] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 914.072108][T22950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 914.292013][T22983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.293526][T22983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.329751][T19646] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 914.329947][T19646] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -61 [ 914.533017][T19646] usb 8-1: USB disconnect, device number 40 [ 914.997018][T22995] FAULT_INJECTION: forcing a failure. [ 914.997018][T22995] name failslab, interval 1, probability 0, space 0, times 0 [ 914.997048][T22995] CPU: 0 UID: 0 PID: 22995 Comm: syz.0.6048 Tainted: G L syzkaller #0 PREEMPT(full) [ 914.997071][T22995] Tainted: [L]=SOFTLOCKUP [ 914.997077][T22995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 914.997088][T22995] Call Trace: [ 914.997094][T22995] [ 914.997102][T22995] dump_stack_lvl+0xe8/0x150 [ 914.997130][T22995] should_fail_ex+0x3eb/0x540 [ 914.997160][T22995] should_failslab+0xa8/0x100 [ 914.997183][T22995] __kmalloc_cache_noprof+0x9e/0x600 [ 914.997210][T22995] ? __se_sys_fsopen+0x19f/0x370 [ 914.997230][T22995] ? __se_sys_fsopen+0x19f/0x370 [ 914.997256][T22995] __se_sys_fsopen+0x19f/0x370 [ 914.997280][T22995] do_syscall_64+0x166/0x520 [ 914.997302][T22995] ? trace_irq_disable+0x3b/0x140 [ 914.997320][T22995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.997337][T22995] ? clear_bhb_loop+0x70/0xc0 [ 914.997358][T22995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.997373][T22995] RIP: 0033:0x7fb29dd9f559 [ 914.997388][T22995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.997402][T22995] RSP: 002b:00007fb29ec9f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 914.997420][T22995] RAX: ffffffffffffffda RBX: 00007fb29e025fa0 RCX: 00007fb29dd9f559 [ 914.997432][T22995] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000000 [ 914.997442][T22995] RBP: 00007fb29de36b20 R08: 0000000000000000 R09: 0000000000000000 [ 914.997452][T22995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 914.997462][T22995] R13: 00007fb29e026038 R14: 00007fb29e025fa0 R15: 00007ffd3f029838 [ 914.997487][T22995] [ 915.645652][T23009] overlayfs: failed to resolve './cgroup': -2 [ 916.654249][T19646] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 916.796170][T23045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6070'. [ 916.813319][T19646] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 916.830702][T19646] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 916.830724][T19646] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 916.830738][T19646] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 916.830770][T19646] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.844602][T19646] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 916.844623][T19646] usb 8-1: Product: syz [ 916.844635][T19646] usb 8-1: Manufacturer: syz [ 916.915869][T19646] cdc_wdm 8-1:1.0: skipping garbage [ 916.915887][T19646] cdc_wdm 8-1:1.0: skipping garbage [ 916.922637][T19646] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 916.922655][T19646] cdc_wdm 8-1:1.0: Unknown control protocol [ 917.141438][T19452] usb 8-1: USB disconnect, device number 41 [ 917.643126][T19452] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 917.798204][T19452] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 917.802088][T19452] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 917.802111][T19452] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.802125][T19452] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 917.802175][T19452] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.823162][T19452] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 917.823185][T19452] usb 8-1: Product: syz [ 917.823195][T19452] usb 8-1: Manufacturer: syz [ 917.886105][T19452] cdc_wdm 8-1:1.0: skipping garbage [ 917.886121][T19452] cdc_wdm 8-1:1.0: skipping garbage [ 917.914494][T19452] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 917.914512][T19452] cdc_wdm 8-1:1.0: Unknown control protocol [ 918.659069][T23084] FAULT_INJECTION: forcing a failure. [ 918.659069][T23084] name failslab, interval 1, probability 0, space 0, times 0 [ 918.659097][T23084] CPU: 0 UID: 0 PID: 23084 Comm: syz.0.6081 Tainted: G L syzkaller #0 PREEMPT(full) [ 918.659120][T23084] Tainted: [L]=SOFTLOCKUP [ 918.659126][T23084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 918.659136][T23084] Call Trace: [ 918.659142][T23084] [ 918.659150][T23084] dump_stack_lvl+0xe8/0x150 [ 918.659177][T23084] should_fail_ex+0x3eb/0x540 [ 918.659207][T23084] should_failslab+0xa8/0x100 [ 918.659229][T23084] __kmalloc_cache_noprof+0x9e/0x600 [ 918.659256][T23084] ? init_pseudo+0x56/0x180 [ 918.659282][T23084] ? init_pseudo+0x56/0x180 [ 918.659310][T23084] init_pseudo+0x56/0x180 [ 918.659334][T23084] pipefs_init_fs_context+0x1c/0x90 [ 918.659368][T23084] alloc_fs_context+0x99e/0xd00 [ 918.659395][T23084] __se_sys_fsopen+0x118/0x370 [ 918.659419][T23084] do_syscall_64+0x166/0x520 [ 918.659441][T23084] ? trace_irq_disable+0x3b/0x140 [ 918.659460][T23084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.659476][T23084] ? clear_bhb_loop+0x70/0xc0 [ 918.659497][T23084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.659513][T23084] RIP: 0033:0x7fb29dd9f559 [ 918.659527][T23084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.659541][T23084] RSP: 002b:00007fb29ec9f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 918.659560][T23084] RAX: ffffffffffffffda RBX: 00007fb29e025fa0 RCX: 00007fb29dd9f559 [ 918.659572][T23084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 918.659582][T23084] RBP: 00007fb29de36b20 R08: 0000000000000000 R09: 0000000000000000 [ 918.659593][T23084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 918.659602][T23084] R13: 00007fb29e026038 R14: 00007fb29e025fa0 R15: 00007ffd3f029838 [ 918.659627][T23084] [ 918.885268][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 919.114033][T19452] usb 8-1: USB disconnect, device number 42 [ 919.235920][T23092] evm: overlay not supported [ 919.755122][T23107] FAULT_INJECTION: forcing a failure. [ 919.755122][T23107] name failslab, interval 1, probability 0, space 0, times 0 [ 919.755153][T23107] CPU: 0 UID: 0 PID: 23107 Comm: syz.7.6090 Tainted: G L syzkaller #0 PREEMPT(full) [ 919.755175][T23107] Tainted: [L]=SOFTLOCKUP [ 919.755182][T23107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 919.755192][T23107] Call Trace: [ 919.755199][T23107] [ 919.755206][T23107] dump_stack_lvl+0xe8/0x150 [ 919.755233][T23107] should_fail_ex+0x3eb/0x540 [ 919.755262][T23107] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 919.755285][T23107] should_failslab+0xa8/0x100 [ 919.755306][T23107] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 919.755327][T23107] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 919.755353][T23107] ? alloc_inode+0x6a/0x1b0 [ 919.755375][T23107] ? alloc_inode+0x6a/0x1b0 [ 919.755402][T23107] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 919.755424][T23107] alloc_inode+0x6a/0x1b0 [ 919.755448][T23107] new_inode+0x1f/0x170 [ 919.755466][T23107] __debugfs_create_file+0xb8/0x400 [ 919.755490][T23107] debugfs_create_file_full+0x3f/0x60 [ 919.755514][T23107] ref_tracker_dir_debugfs+0x197/0x360 [ 919.755533][T23107] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 919.755573][T23107] ? __kvmalloc_node_noprof+0x340/0x820 [ 919.755593][T23107] ? __raw_spin_lock_init+0x45/0x100 [ 919.755619][T23107] alloc_netdev_mqs+0x275/0x1240 [ 919.755645][T23107] ? __pfx_vlan_setup+0x10/0x10 [ 919.755674][T23107] register_vlan_device+0x235/0x4b0 [ 919.755709][T23107] ? __pfx_register_vlan_device+0x10/0x10 [ 919.755735][T23107] ? security_capable+0x7e/0x2c0 [ 919.755767][T23107] vlan_ioctl_handler+0x248/0x630 [ 919.755791][T23107] ? __pfx___mutex_lock+0x10/0x10 [ 919.755815][T23107] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 919.755838][T23107] ? do_futex+0x458/0x4e0 [ 919.755871][T23107] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 919.755896][T23107] sock_ioctl+0x612/0x7e0 [ 919.755921][T23107] ? __fget_files+0x2a/0x420 [ 919.755936][T23107] ? __pfx_sock_ioctl+0x10/0x10 [ 919.755960][T23107] ? __fget_files+0x2a/0x420 [ 919.755975][T23107] ? __fget_files+0x2a/0x420 [ 919.755994][T23107] ? bpf_lsm_file_ioctl+0x9/0x20 [ 919.756012][T23107] ? __pfx_sock_ioctl+0x10/0x10 [ 919.756036][T23107] __se_sys_ioctl+0xfc/0x170 [ 919.756057][T23107] do_syscall_64+0x166/0x520 [ 919.756079][T23107] ? trace_irq_disable+0x3b/0x140 [ 919.756097][T23107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.756114][T23107] ? clear_bhb_loop+0x70/0xc0 [ 919.756134][T23107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.756150][T23107] RIP: 0033:0x7fd40779f559 [ 919.756165][T23107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.756179][T23107] RSP: 002b:00007fd4059f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 919.756196][T23107] RAX: ffffffffffffffda RBX: 00007fd407a25fa0 RCX: 00007fd40779f559 [ 919.756208][T23107] RDX: 0000200000000180 RSI: 0000000000008982 RDI: 0000000000000003 [ 919.756218][T23107] RBP: 00007fd407836b20 R08: 0000000000000000 R09: 0000000000000000 [ 919.756228][T23107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 919.756238][T23107] R13: 00007fd407a26038 R14: 00007fd407a25fa0 R15: 00007fff54f01e18 [ 919.756264][T23107] [ 920.001679][T23107] debugfs: out of free dentries, can not create file 'netdev@ffff88807c1e8720' [ 921.355299][T23151] kvm [23150]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 921.355466][T23151] kvm [23150]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 921.577376][T23159] tls_set_device_offload: netdev not found [ 921.673846][T23164] FAULT_INJECTION: forcing a failure. [ 921.673846][T23164] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 921.673873][T23164] CPU: 0 UID: 0 PID: 23164 Comm: syz.0.6109 Tainted: G L syzkaller #0 PREEMPT(full) [ 921.673896][T23164] Tainted: [L]=SOFTLOCKUP [ 921.673902][T23164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 921.673912][T23164] Call Trace: [ 921.673919][T23164] [ 921.673926][T23164] dump_stack_lvl+0xe8/0x150 [ 921.673962][T23164] should_fail_ex+0x3eb/0x540 [ 921.673992][T23164] prepare_alloc_pages+0x21e/0x5f0 [ 921.674014][T23164] __alloc_frozen_pages_noprof+0x17c/0x410 [ 921.674035][T23164] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 921.674058][T23164] ? policy_nodemask+0x31b/0x980 [ 921.674083][T23164] alloc_pages_mpol+0x21e/0x390 [ 921.674108][T23164] folio_alloc_mpol_noprof+0x39/0x160 [ 921.674131][T23164] shmem_alloc_and_add_folio+0x43e/0xf60 [ 921.674150][T23164] ? filemap_get_entry+0xcd/0x3f0 [ 921.674175][T23164] ? __futex_wait+0x3c7/0x470 [ 921.674191][T23164] ? __pfx_filemap_get_entry+0x10/0x10 [ 921.674208][T23164] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 921.674229][T23164] ? shmem_allowable_huge_orders+0x34c/0x6c0 [ 921.674260][T23164] shmem_get_folio_gfp+0x594/0x1330 [ 921.674300][T23164] shmem_fallocate+0x996/0xf10 [ 921.674335][T23164] ? __pfx_shmem_fallocate+0x10/0x10 [ 921.674355][T23164] ? lock_acquire+0x115/0x350 [ 921.674387][T23164] vfs_fallocate+0x65a/0x7e0 [ 921.674404][T23164] ? __fget_files+0x2a/0x420 [ 921.674424][T23164] ? __pfx_vfs_fallocate+0x10/0x10 [ 921.674440][T23164] ? __fget_files+0x2a/0x420 [ 921.674458][T23164] ? fdget+0x1ac/0x250 [ 921.674475][T23164] __x64_sys_fallocate+0xbf/0x110 [ 921.674495][T23164] do_syscall_64+0x166/0x520 [ 921.674517][T23164] ? trace_irq_disable+0x3b/0x140 [ 921.674535][T23164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.674552][T23164] ? clear_bhb_loop+0x70/0xc0 [ 921.674571][T23164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.674588][T23164] RIP: 0033:0x7fb29dd9f559 [ 921.674604][T23164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.674618][T23164] RSP: 002b:00007fb29ec9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 921.674635][T23164] RAX: ffffffffffffffda RBX: 00007fb29e025fa0 RCX: 00007fb29dd9f559 [ 921.674647][T23164] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 921.674657][T23164] RBP: 00007fb29de36b20 R08: 0000000000000000 R09: 0000000000000000 [ 921.674667][T23164] R10: 000000000008fffb R11: 0000000000000246 R12: 0000000000000000 [ 921.674677][T23164] R13: 00007fb29e026038 R14: 00007fb29e025fa0 R15: 00007ffd3f029838 [ 921.674703][T23164] [ 922.023241][T23166] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 922.023262][T23166] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 922.024581][T23167] vhci_hcd: xmit failed -107 [ 922.024840][T23166] vhci_hcd vhci_hcd.0: Device attached [ 922.057244][ T6380] vhci_hcd vhci_hcd.0: stop threads [ 922.057261][ T6380] vhci_hcd vhci_hcd.0: release socket [ 922.057278][ T6380] vhci_hcd vhci_hcd.0: disconnect device [ 923.578400][T23124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 923.872477][T23186] FAULT_INJECTION: forcing a failure. [ 923.872477][T23186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 923.872507][T23186] CPU: 0 UID: 0 PID: 23186 Comm: syz.0.6115 Tainted: G L syzkaller #0 PREEMPT(full) [ 923.872529][T23186] Tainted: [L]=SOFTLOCKUP [ 923.872536][T23186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 923.872546][T23186] Call Trace: [ 923.872552][T23186] [ 923.872560][T23186] dump_stack_lvl+0xe8/0x150 [ 923.872588][T23186] should_fail_ex+0x3eb/0x540 [ 923.872624][T23186] _copy_from_user+0x2d/0xb0 [ 923.872641][T23186] copy_clone_args_from_user+0x1f9/0x740 [ 923.872672][T23186] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 923.872694][T23186] ? futex_wait+0x2a2/0x390 [ 923.872725][T23186] __se_sys_clone3+0x142/0x360 [ 923.872748][T23186] ? __pfx___se_sys_clone3+0x10/0x10 [ 923.872771][T23186] ? do_futex+0x3e7/0x4e0 [ 923.872826][T23186] do_syscall_64+0x166/0x520 [ 923.872847][T23186] ? trace_irq_disable+0x3b/0x140 [ 923.872865][T23186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.872889][T23186] ? clear_bhb_loop+0x70/0xc0 [ 923.872908][T23186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.872925][T23186] RIP: 0033:0x7fb29dd9f559 [ 923.872940][T23186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.872954][T23186] RSP: 002b:00007fb29ec9eef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 923.872972][T23186] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fb29dd9f559 [ 923.872984][T23186] RDX: 00007fb29ec9ef10 RSI: 0000000000000058 RDI: 00007fb29ec9ef10 [ 923.872995][T23186] RBP: 00007fb29de36b20 R08: 0000000000000000 R09: 0000000000000058 [ 923.873005][T23186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 923.873015][T23186] R13: 00007fb29e026038 R14: 00007fb29e025fa0 R15: 00007ffd3f029838 [ 923.873040][T23186] [ 924.258771][T23194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.259140][T23194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.372163][T23198] overlayfs: failed to clone upperpath [ 924.574435][T23202] input: syz0 as /devices/virtual/input/input61 [ 924.695979][T23207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6125'. [ 925.196576][T23221] FAULT_INJECTION: forcing a failure. [ 925.196576][T23221] name failslab, interval 1, probability 0, space 0, times 0 [ 925.196606][T23221] CPU: 0 UID: 0 PID: 23221 Comm: syz.7.6128 Tainted: G L syzkaller #0 PREEMPT(full) [ 925.196628][T23221] Tainted: [L]=SOFTLOCKUP [ 925.196635][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 925.196645][T23221] Call Trace: [ 925.196651][T23221] [ 925.196659][T23221] dump_stack_lvl+0xe8/0x150 [ 925.196686][T23221] should_fail_ex+0x3eb/0x540 [ 925.196716][T23221] should_failslab+0xa8/0x100 [ 925.196737][T23221] __kmalloc_noprof+0xf9/0x710 [ 925.196761][T23221] ? prepare_creds+0x30/0x820 [ 925.196779][T23221] ? security_prepare_creds+0x52/0x360 [ 925.196803][T23221] ? security_prepare_creds+0x52/0x360 [ 925.196827][T23221] ? kmem_cache_alloc_noprof+0x151/0x600 [ 925.196853][T23221] security_prepare_creds+0x52/0x360 [ 925.196881][T23221] prepare_creds+0x57d/0x820 [ 925.196900][T23221] __sys_setregid+0xf5/0x650 [ 925.196920][T23221] do_syscall_64+0x166/0x520 [ 925.196942][T23221] ? trace_irq_disable+0x3b/0x140 [ 925.196960][T23221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.196976][T23221] ? clear_bhb_loop+0x70/0xc0 [ 925.196997][T23221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.197013][T23221] RIP: 0033:0x7fd40779f559 [ 925.197028][T23221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.197041][T23221] RSP: 002b:00007fd4059f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 925.197058][T23221] RAX: ffffffffffffffda RBX: 00007fd407a25fa0 RCX: 00007fd40779f559 [ 925.197070][T23221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 925.197079][T23221] RBP: 00007fd407836b20 R08: 0000000000000000 R09: 0000000000000000 [ 925.197089][T23221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.197099][T23221] R13: 00007fd407a26038 R14: 00007fd407a25fa0 R15: 00007fff54f01e18 [ 925.197124][T23221] [ 925.387840][T19646] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 925.475616][T23223] FAULT_INJECTION: forcing a failure. [ 925.475616][T23223] name failslab, interval 1, probability 0, space 0, times 0 [ 925.475644][T23223] CPU: 0 UID: 0 PID: 23223 Comm: syz.0.6130 Tainted: G L syzkaller #0 PREEMPT(full) [ 925.475666][T23223] Tainted: [L]=SOFTLOCKUP [ 925.475672][T23223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 925.475682][T23223] Call Trace: [ 925.475690][T23223] [ 925.475706][T23223] dump_stack_lvl+0xe8/0x150 [ 925.475733][T23223] should_fail_ex+0x3eb/0x540 [ 925.475764][T23223] should_failslab+0xa8/0x100 [ 925.475786][T23223] __kmalloc_cache_noprof+0x9e/0x600 [ 925.475813][T23223] ? __kmalloc_cache_noprof+0x148/0x600 [ 925.475837][T23223] ? x509_cert_parse+0x99/0x7a0 [ 925.475852][T23223] ? x509_cert_parse+0x99/0x7a0 [ 925.475873][T23223] x509_cert_parse+0x99/0x7a0 [ 925.475892][T23223] x509_key_preparse+0x64/0x6d0 [ 925.475909][T23223] ? down_read+0x2b9/0x320 [ 925.475937][T23223] asymmetric_key_preparse+0xb9/0x1b0 [ 925.475963][T23223] __key_create_or_update+0x360/0xa90 [ 925.475988][T23223] ? __pfx___key_create_or_update+0x10/0x10 [ 925.476004][T23223] ? lookup_user_key+0x1101/0x1230 [ 925.476042][T23223] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 925.476078][T23223] key_create_or_update+0x42/0x60 [ 925.476098][T23223] __se_sys_add_key+0x349/0x420 [ 925.476122][T23223] ? __pfx___se_sys_add_key+0x10/0x10 [ 925.476150][T23223] ? __x64_sys_add_key+0x20/0xc0 [ 925.476172][T23223] do_syscall_64+0x166/0x520 [ 925.476193][T23223] ? trace_irq_disable+0x3b/0x140 [ 925.476211][T23223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.476228][T23223] ? clear_bhb_loop+0x70/0xc0 [ 925.476248][T23223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.476264][T23223] RIP: 0033:0x7fb29dd9f559 [ 925.476279][T23223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.476292][T23223] RSP: 002b:00007fb29ec9f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 925.476309][T23223] RAX: ffffffffffffffda RBX: 00007fb29e025fa0 RCX: 00007fb29dd9f559 [ 925.476321][T23223] RDX: 00002000000004c0 RSI: 0000000000000000 RDI: 0000200000000000 [ 925.476332][T23223] RBP: 00007fb29de36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 925.476343][T23223] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 925.476353][T23223] R13: 00007fb29e026038 R14: 00007fb29e025fa0 R15: 00007ffd3f029838 [ 925.476378][T23223] [ 925.543644][T19646] usb 7-1: Using ep0 maxpacket: 32 [ 925.544345][T19646] usb 7-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 925.653675][T19646] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 925.653702][T19646] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 925.653717][T19646] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 925.653750][T19646] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 925.653766][T19646] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 925.653784][T19646] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 925.653815][T19646] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.785705][T19646] usb 7-1: config 0 descriptor?? [ 926.009069][T19646] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 926.135964][T23220] rxe_eth0 speed is unknown, defaulting to 1000 [ 926.302191][T23232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.318176][T23232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.376140][T23234] FAULT_INJECTION: forcing a failure. [ 926.376140][T23234] name failslab, interval 1, probability 0, space 0, times 0 [ 926.376166][T23234] CPU: 0 UID: 0 PID: 23234 Comm: syz.7.6134 Tainted: G L syzkaller #0 PREEMPT(full) [ 926.376188][T23234] Tainted: [L]=SOFTLOCKUP [ 926.376195][T23234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 926.376205][T23234] Call Trace: [ 926.376212][T23234] [ 926.376219][T23234] dump_stack_lvl+0xe8/0x150 [ 926.376248][T23234] should_fail_ex+0x3eb/0x540 [ 926.376279][T23234] should_failslab+0xa8/0x100 [ 926.376301][T23234] __kmalloc_cache_noprof+0x9e/0x600 [ 926.376327][T23234] ? __kmalloc_cache_noprof+0x148/0x600 [ 926.376351][T23234] ? raw_ioctl+0x1b88/0x41c0 [ 926.376375][T23234] ? raw_ioctl+0x1b88/0x41c0 [ 926.376404][T23234] raw_ioctl+0x1b88/0x41c0 [ 926.376432][T23234] ? tomoyo_path_number_perm+0x219/0x5f0 [ 926.376461][T23234] ? do_vfs_ioctl+0x116f/0x1530 [ 926.376482][T23234] ? __pfx_raw_ioctl+0x10/0x10 [ 926.376508][T23234] ? handle_mm_fault+0xee/0x3540 [ 926.376554][T23234] ? __fget_files+0x2a/0x420 [ 926.376577][T23234] ? __fget_files+0x2a/0x420 [ 926.376596][T23234] ? bpf_lsm_file_ioctl+0x9/0x20 [ 926.376616][T23234] ? __pfx_raw_ioctl+0x10/0x10 [ 926.376640][T23234] __se_sys_ioctl+0xfc/0x170 [ 926.376661][T23234] do_syscall_64+0x166/0x520 [ 926.376683][T23234] ? trace_irq_disable+0x3b/0x140 [ 926.376701][T23234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.376718][T23234] ? clear_bhb_loop+0x70/0xc0 [ 926.376737][T23234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.376753][T23234] RIP: 0033:0x7fd40779f1eb [ 926.376768][T23234] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 926.376782][T23234] RSP: 002b:00007fd4059f3f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 926.376800][T23234] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fd40779f1eb [ 926.376811][T23234] RDX: 00007fd4059f4fd0 RSI: 0000000041015500 RDI: 0000000000000005 [ 926.376822][T23234] RBP: 00007fd4059f4fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 926.376833][T23234] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4059f3fa0 [ 926.376843][T23234] R13: 00002000000000c0 R14: 0000000000000003 R15: 0000000000000000 [ 926.376867][T23234] [ 926.904615][T23220] lo speed is unknown, defaulting to 1000 [ 927.405666][T23244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.407615][T23244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.646487][T23244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.646864][T23244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.767600][T23220] lo speed is unknown, defaulting to 1000 [ 927.998270][T19452] usb 7-1: USB disconnect, device number 45 [ 928.018582][T19452] usblp0: removed [ 928.147995][T23256] overlayfs: failed to clone upperpath [ 928.160538][T23257] FAULT_INJECTION: forcing a failure. [ 928.160538][T23257] name failslab, interval 1, probability 0, space 0, times 0 [ 928.160564][T23257] CPU: 0 UID: 0 PID: 23257 Comm: syz.7.6139 Tainted: G L syzkaller #0 PREEMPT(full) [ 928.160587][T23257] Tainted: [L]=SOFTLOCKUP [ 928.160593][T23257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 928.160603][T23257] Call Trace: [ 928.160610][T23257] [ 928.160617][T23257] dump_stack_lvl+0xe8/0x150 [ 928.160643][T23257] should_fail_ex+0x3eb/0x540 [ 928.160673][T23257] should_failslab+0xa8/0x100 [ 928.160695][T23257] __kmalloc_noprof+0xf9/0x710 [ 928.160721][T23257] ? sk_prot_alloc+0xe7/0x210 [ 928.160740][T23257] ? sk_prot_alloc+0xe7/0x210 [ 928.160765][T23257] sk_prot_alloc+0xe7/0x210 [ 928.160784][T23257] ? sk_alloc+0x27/0x390 [ 928.160805][T23257] sk_alloc+0x3a/0x390 [ 928.160827][T23257] pppol2tp_create+0x32/0x210 [ 928.160845][T23257] pppox_create+0x131/0x1b0 [ 928.160870][T23257] __sock_create+0x4b5/0xac0 [ 928.160894][T23257] __sys_socket+0xd6/0x1b0 [ 928.160913][T23257] __x64_sys_socket+0x7a/0x90 [ 928.160931][T23257] do_syscall_64+0x166/0x520 [ 928.160952][T23257] ? trace_irq_disable+0x3b/0x140 [ 928.160971][T23257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.160987][T23257] ? clear_bhb_loop+0x70/0xc0 [ 928.161007][T23257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.161023][T23257] RIP: 0033:0x7fd40779f559 [ 928.161038][T23257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.161052][T23257] RSP: 002b:00007fd4059f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 928.161069][T23257] RAX: ffffffffffffffda RBX: 00007fd407a25fa0 RCX: 00007fd40779f559 [ 928.161081][T23257] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000018 [ 928.161090][T23257] RBP: 00007fd407836b20 R08: 0000000000000000 R09: 0000000000000000 [ 928.161100][T23257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 928.161110][T23257] R13: 00007fd407a26038 R14: 00007fd407a25fa0 R15: 00007fff54f01e18 [ 928.161135][T23257] [ 928.546160][T23262] fuse: fd is not a fuse device [ 928.972689][T19452] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 929.125183][T19452] usb 8-1: Using ep0 maxpacket: 16 [ 929.125894][T19452] usb 8-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 929.126800][T19452] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.126822][T19452] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 929.126850][T19452] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.131436][T19452] usb 8-1: config 0 descriptor?? [ 929.576507][T19452] HID 045e:07da: Invalid code 65791 type 1 [ 929.581264][T23279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6148'. [ 929.651588][T19452] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0010/input/input62 [ 929.797443][T19452] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 929.902101][T23281] udevd[23281]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 930.266839][T23285] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 930.398214][T23288] FAULT_INJECTION: forcing a failure. [ 930.398214][T23288] name failslab, interval 1, probability 0, space 0, times 0 [ 930.398243][T23288] CPU: 0 UID: 0 PID: 23288 Comm: syz.0.6151 Tainted: G L syzkaller #0 PREEMPT(full) [ 930.398277][T23288] Tainted: [L]=SOFTLOCKUP [ 930.398283][T23288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 930.398294][T23288] Call Trace: [ 930.398303][T23288] [ 930.398310][T23288] dump_stack_lvl+0xe8/0x150 [ 930.398338][T23288] should_fail_ex+0x3eb/0x540 [ 930.398368][T23288] should_failslab+0xa8/0x100 [ 930.398389][T23288] __kvmalloc_node_noprof+0x171/0x820 [ 930.398409][T23288] ? bpf_jit_binary_pack_alloc+0x10a/0x300 [ 930.398433][T23288] ? bpf_jit_binary_pack_alloc+0x10a/0x300 [ 930.398462][T23288] bpf_jit_binary_pack_alloc+0x10a/0x300 [ 930.398487][T23288] ? __pfx_jit_fill_hole+0x10/0x10 [ 930.398511][T23288] bpf_int_jit_compile+0xc70/0x1a40 [ 930.398546][T23288] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 930.398571][T23288] ? bpf_prog_has_arena_insns+0x457/0x4d0 [ 930.398598][T23288] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 930.398624][T23288] ? bpf_prepare_filter+0xd5d/0x12d0 [ 930.398643][T23288] __bpf_prog_select_runtime+0x542/0xbe0 [ 930.398669][T23288] ? bpf_prog_realloc+0x17a/0x220 [ 930.398692][T23288] bpf_prepare_filter+0x10df/0x12d0 [ 930.398713][T23288] ? __pfx_seccomp_check_filter+0x10/0x10 [ 930.398737][T23288] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 930.398756][T23288] ? __asan_memcpy+0x40/0x70 [ 930.398784][T23288] bpf_prog_create_from_user+0x2c6/0x440 [ 930.398802][T23288] ? __pfx_seccomp_check_filter+0x10/0x10 [ 930.398827][T23288] do_seccomp+0x791/0xdc0 [ 930.398852][T23288] ? __se_sys_futex+0x3a8/0x450 [ 930.398875][T23288] ? __pfx_do_seccomp+0x10/0x10 [ 930.398900][T23288] ? rcu_is_watching+0x16/0xb0 [ 930.398929][T23288] do_syscall_64+0x166/0x520 [ 930.398951][T23288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.398967][T23288] ? clear_bhb_loop+0x70/0xc0 [ 930.398988][T23288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.399003][T23288] RIP: 0033:0x7fb29dd9f559 [ 930.399019][T23288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.399032][T23288] RSP: 002b:00007fb29ec9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 930.399049][T23288] RAX: ffffffffffffffda RBX: 00007fb29e025fa0 RCX: 00007fb29dd9f559 [ 930.399061][T23288] RDX: 0000200000000000 RSI: 000000000000000a RDI: 0000000000000001 [ 930.399071][T23288] RBP: 00007fb29de36b20 R08: 0000000000000000 R09: 0000000000000000 [ 930.399081][T23288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 930.399091][T23288] R13: 00007fb29e026038 R14: 00007fb29e025fa0 R15: 00007ffd3f029838 [ 930.399116][T23288] [ 930.634401][T19646] usb 8-1: USB disconnect, device number 43 [ 930.877878][T23290] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 931.426091][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.426145][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.518467][T23297] svc: failed to register lockdv1 RPC service (errno 5). [ 931.518729][T23297] lockd_up: makesock failed, error=-5 [ 931.884917][T23297] svc: failed to register nfsdv3 RPC service (errno 5). [ 931.884934][T23297] failed to unregister tcp with rpcbind [ 932.128047][T23317] jffs2: notice: (23317) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 932.603130][T19452] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 932.752481][T19452] usb 7-1: Using ep0 maxpacket: 8 [ 932.753044][T19452] usb 7-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 932.754031][T19452] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 932.754065][T19452] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.757464][T19452] usb 7-1: config 0 descriptor?? [ 932.839547][ T32] kauditd_printk_skb: 85 callbacks suppressed [ 932.839562][ T32] audit: type=1326 audit(1700000125.437:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23337 comm="syz.0.6172" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb29dd9f559 code=0x0 [ 932.953988][T19645] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 932.976947][T19452] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 933.103228][T19645] usb 8-1: Using ep0 maxpacket: 32 [ 933.104182][T19645] usb 8-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 933.105459][T19645] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.105481][T19645] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.105510][T19645] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.109260][T19645] usb 8-1: config 0 descriptor?? [ 933.127810][T19645] hub 8-1:0.0: USB hub found [ 933.209052][T19452] usb 7-1: USB disconnect, device number 46 [ 933.209177][ C0] iowarrior 7-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 933.344707][T19645] hub 8-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 933.734008][T19452] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 933.752602][T19452] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 933.792200][T19645] hid-generic 0003:046D:C31C.0012: unknown main item tag 0x0 [ 933.815449][T23345] udevd[23345]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 933.994285][T19645] hid-generic 0003:046D:C31C.0012: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.7-1/input0 [ 934.055040][T19645] usb 8-1: USB disconnect, device number 44 [ 934.075968][T23348] udevd[23348]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 934.356391][T23353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6177'. [ 934.997881][T23364] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2624349694 (5248699388 ns) > initial count (3046739292 ns). Using initial count to start timer. [ 935.734321][T23379] FAULT_INJECTION: forcing a failure. [ 935.734321][T23379] name failslab, interval 1, probability 0, space 0, times 0 [ 935.734354][T23379] CPU: 0 UID: 0 PID: 23379 Comm: syz.0.6186 Tainted: G L syzkaller #0 PREEMPT(full) [ 935.734377][T23379] Tainted: [L]=SOFTLOCKUP [ 935.734383][T23379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 935.734393][T23379] Call Trace: [ 935.734400][T23379] [ 935.734408][T23379] dump_stack_lvl+0xe8/0x150 [ 935.734435][T23379] should_fail_ex+0x3eb/0x540 [ 935.734465][T23379] should_failslab+0xa8/0x100 [ 935.734486][T23379] __kmalloc_cache_noprof+0x9e/0x600 [ 935.734514][T23379] ? ubifs_init_fs_context+0x54/0x2c0 [ 935.734534][T23379] ? ubifs_init_fs_context+0x54/0x2c0 [ 935.734559][T23379] ubifs_init_fs_context+0x54/0x2c0 [ 935.734631][T23379] alloc_fs_context+0x99e/0xd00 [ 935.734710][T23379] __se_sys_fsopen+0x118/0x370 [ 935.734750][T23379] do_syscall_64+0x166/0x520 [ 935.734773][T23379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.734790][T23379] ? clear_bhb_loop+0x70/0xc0 [ 935.734810][T23379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.734826][T23379] RIP: 0033:0x7fb29dd9f559 [ 935.734841][T23379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.734855][T23379] RSP: 002b:00007fb29ec9f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 935.734872][T23379] RAX: ffffffffffffffda RBX: 00007fb29e025fa0 RCX: 00007fb29dd9f559 [ 935.734884][T23379] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000002c0 [ 935.734901][T23379] RBP: 00007fb29de36b20 R08: 0000000000000000 R09: 0000000000000000 [ 935.734911][T23379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.734922][T23379] R13: 00007fb29e026038 R14: 00007fb29e025fa0 R15: 00007ffd3f029838 [ 935.734947][T23379] [ 936.179689][T23384] sg_write: data in/out 483292/136 bytes for SCSI command 0x0-- guessing data in; [ 936.179689][T23384] program syz.0.6187 not setting count and/or reply_len properly [ 936.403087][T19452] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 936.422159][T23389] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 936.553662][T19452] usb 8-1: New USB device found: idVendor=046d, idProduct=c626, bcdDevice=0.40 [ 936.554598][T19452] usb 8-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 936.554629][T19452] usb 8-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 936.554649][T19452] usb 8-1: config 1 interface 0 has no altsetting 0 [ 936.557722][T19452] usb 8-1: string descriptor 0 read error: -22 [ 936.559345][T19452] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.665572][T23395] FAULT_INJECTION: forcing a failure. [ 936.665572][T23395] name failslab, interval 1, probability 0, space 0, times 0 [ 936.665599][T23395] CPU: 0 UID: 0 PID: 23395 Comm: syz.6.6192 Tainted: G L syzkaller #0 PREEMPT(full) [ 936.665621][T23395] Tainted: [L]=SOFTLOCKUP [ 936.665628][T23395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 936.665641][T23395] Call Trace: [ 936.665647][T23395] [ 936.665655][T23395] dump_stack_lvl+0xe8/0x150 [ 936.665682][T23395] should_fail_ex+0x3eb/0x540 [ 936.665720][T23395] should_failslab+0xa8/0x100 [ 936.665742][T23395] __kmalloc_noprof+0xf9/0x710 [ 936.665767][T23395] ? security_sk_alloc+0x52/0x360 [ 936.665788][T23395] ? security_sk_alloc+0x52/0x360 [ 936.665814][T23395] security_sk_alloc+0x52/0x360 [ 936.665837][T23395] sk_prot_alloc+0x101/0x210 [ 936.665857][T23395] ? sk_alloc+0x27/0x390 [ 936.665879][T23395] sk_alloc+0x3a/0x390 [ 936.665901][T23395] bt_sock_alloc+0x3b/0x330 [ 936.665929][T23395] l2cap_sock_create+0x15a/0x300 [ 936.665954][T23395] bt_sock_create+0x163/0x240 [ 936.665972][T23395] __sock_create+0x4b5/0xac0 [ 936.665995][T23395] __sys_socket+0xd6/0x1b0 [ 936.666015][T23395] __x64_sys_socket+0x7a/0x90 [ 936.666032][T23395] do_syscall_64+0x166/0x520 [ 936.666054][T23395] ? trace_irq_disable+0x3b/0x140 [ 936.666072][T23395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.666088][T23395] ? clear_bhb_loop+0x70/0xc0 [ 936.666109][T23395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.666125][T23395] RIP: 0033:0x7f354a19f559 [ 936.666140][T23395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.666153][T23395] RSP: 002b:00007f354b0fffc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 936.666171][T23395] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f354a19f559 [ 936.666183][T23395] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001f [ 936.666192][T23395] RBP: 00007f354a236b20 R08: 0000000000000000 R09: 0000000000000000 [ 936.666202][T23395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 936.666211][T23395] R13: 00007f354a426038 R14: 00007f354a425fa0 R15: 00007ffecc764d78 [ 936.666236][T23395] [ 937.141166][T19452] logitech 0003:046D:C626.0013: unknown main item tag 0x2 [ 937.141193][T19452] logitech 0003:046D:C626.0013: unexpected long global item [ 937.161982][T19452] logitech 0003:046D:C626.0013: parse failed [ 937.162062][T19452] logitech 0003:046D:C626.0013: probe with driver logitech failed with error -22 [ 937.347755][T19452] usb 8-1: USB disconnect, device number 45 [ 937.521591][T23407] fuse: fd is not a fuse device [ 937.720789][T23414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6199'. [ 937.966924][T23417] loop5: detected capacity change from 0 to 7 [ 937.969127][T23417] Dev loop5: unable to read RDB block 7 [ 937.969157][T23417] loop5: unable to read partition table [ 937.969366][T23417] loop5: partition table beyond EOD, truncated [ 937.970154][T23417] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑû) failed (rc=-5) [ 938.253438][T19645] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 938.401968][T19645] usb 8-1: Using ep0 maxpacket: 32 [ 938.403207][T19645] usb 8-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 938.406691][T19645] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.406713][T19645] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.406742][T19645] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.411155][T19645] usb 8-1: config 0 descriptor?? [ 938.450638][T19645] hub 8-1:0.0: USB hub found [ 938.548062][T23425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 938.778036][T23428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.778437][T23428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.102491][ T6470] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 939.110385][T19645] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 939.145268][T19645] usbhid 8-1:0.0: can't add hid device: -71 [ 939.145346][T19645] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 939.193911][T19645] usb 8-1: USB disconnect, device number 46 [ 940.168700][T23456] FAULT_INJECTION: forcing a failure. [ 940.168700][T23456] name failslab, interval 1, probability 0, space 0, times 0 [ 940.168727][T23456] CPU: 0 UID: 0 PID: 23456 Comm: syz.6.6215 Tainted: G L syzkaller #0 PREEMPT(full) [ 940.168748][T23456] Tainted: [L]=SOFTLOCKUP [ 940.168754][T23456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 940.168765][T23456] Call Trace: [ 940.168771][T23456] [ 940.168778][T23456] dump_stack_lvl+0xe8/0x150 [ 940.168806][T23456] should_fail_ex+0x3eb/0x540 [ 940.168836][T23456] should_failslab+0xa8/0x100 [ 940.168859][T23456] __kmalloc_noprof+0xf9/0x710 [ 940.168884][T23456] ? __register_sysctl_table+0xc02/0x1370 [ 940.168905][T23456] ? __register_sysctl_table+0xc02/0x1370 [ 940.168931][T23456] __register_sysctl_table+0xc02/0x1370 [ 940.168961][T23456] nf_log_net_init+0x5cf/0x680 [ 940.168985][T23456] ops_init+0x35d/0x5d0 [ 940.169012][T23456] setup_net+0x118/0x350 [ 940.169031][T23456] ? __pfx_setup_net+0x10/0x10 [ 940.169049][T23456] ? down_read_killable+0x1b6/0x3b0 [ 940.169075][T23456] ? __ns_common_init+0x384/0x590 [ 940.169101][T23456] copy_net_ns+0x536/0x770 [ 940.169121][T23456] create_new_namespaces+0x3f0/0x6b0 [ 940.169144][T23456] ? security_capable+0x7e/0x2c0 [ 940.169179][T23456] unshare_nsproxy_namespaces+0x144/0x190 [ 940.169202][T23456] ksys_unshare+0x532/0x890 [ 940.169225][T23456] ? __pfx_ksys_unshare+0x10/0x10 [ 940.169248][T23456] ? rcu_is_watching+0x16/0xb0 [ 940.169292][T23456] __x64_sys_unshare+0x38/0x50 [ 940.169313][T23456] do_syscall_64+0x166/0x520 [ 940.169334][T23456] ? trace_irq_disable+0x3b/0x140 [ 940.169353][T23456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.169371][T23456] ? clear_bhb_loop+0x70/0xc0 [ 940.169391][T23456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.169413][T23456] RIP: 0033:0x7f354a19f559 [ 940.169429][T23456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.169443][T23456] RSP: 002b:00007f354b100028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 940.169460][T23456] RAX: ffffffffffffffda RBX: 00007f354a425fa0 RCX: 00007f354a19f559 [ 940.169472][T23456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 940.169482][T23456] RBP: 00007f354a236b20 R08: 0000000000000000 R09: 0000000000000000 [ 940.169492][T23456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.169502][T23456] R13: 00007f354a426038 R14: 00007f354a425fa0 R15: 00007ffecc764d78 [ 940.169529][T23456] [ 940.267950][T23456] sysctl could not get directory: /net/netfilter/nf_log -12 [ 940.767447][T23470] FAULT_INJECTION: forcing a failure. [ 940.767447][T23470] name failslab, interval 1, probability 0, space 0, times 0 [ 940.767475][T23470] CPU: 0 UID: 0 PID: 23470 Comm: syz.7.6219 Tainted: G L syzkaller #0 PREEMPT(full) [ 940.767500][T23470] Tainted: [L]=SOFTLOCKUP [ 940.767507][T23470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 940.767517][T23470] Call Trace: [ 940.767524][T23470] [ 940.767532][T23470] dump_stack_lvl+0xe8/0x150 [ 940.767559][T23470] should_fail_ex+0x3eb/0x540 [ 940.767589][T23470] should_failslab+0xa8/0x100 [ 940.767611][T23470] __kmalloc_cache_noprof+0x9e/0x600 [ 940.767637][T23470] ? __kmalloc_cache_noprof+0x148/0x600 [ 940.767662][T23470] ? loopback_open+0x2ba/0xab0 [ 940.767681][T23470] ? loopback_open+0x2ba/0xab0 [ 940.767705][T23470] loopback_open+0x2ba/0xab0 [ 940.767735][T23470] snd_pcm_open_substream+0xff1/0x24f0 [ 940.767750][T23470] ? snd_pcm_open+0x180/0x620 [ 940.767783][T23470] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 940.767802][T23470] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 940.767827][T23470] snd_pcm_open+0x1df/0x620 [ 940.767857][T23470] ? __pfx_snd_pcm_open+0x10/0x10 [ 940.767882][T23470] ? __pfx_default_wake_function+0x10/0x10 [ 940.767915][T23470] snd_pcm_playback_open+0x5f/0xc0 [ 940.767933][T23470] chrdev_open+0x4d9/0x600 [ 940.767956][T23470] ? __pfx_chrdev_open+0x10/0x10 [ 940.767977][T23470] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 940.767998][T23470] ? devcgroup_check_permission+0x31/0x8f0 [ 940.768022][T23470] ? __pfx_chrdev_open+0x10/0x10 [ 940.768043][T23470] do_dentry_open+0x80e/0x1360 [ 940.768073][T23470] vfs_open_consume+0x4a/0x350 [ 940.768094][T23470] ? path_openat+0x16e1/0x20f0 [ 940.768114][T23470] path_openat+0x16fc/0x20f0 [ 940.768213][T23470] do_file_open+0x23e/0x4a0 [ 940.768237][T23470] ? __pfx_do_file_open+0x10/0x10 [ 940.768272][T23470] ? _raw_spin_unlock+0x28/0x50 [ 940.768290][T23470] ? alloc_fd+0x6af/0x760 [ 940.768323][T23470] do_sys_openat2+0x115/0x200 [ 940.768353][T23470] ? __pfx_do_sys_openat2+0x10/0x10 [ 940.768382][T23470] ? do_user_addr_fault+0xd3f/0x1480 [ 940.768412][T23470] __x64_sys_openat+0x138/0x170 [ 940.768439][T23470] do_syscall_64+0x166/0x520 [ 940.768460][T23470] ? trace_irq_disable+0x3b/0x140 [ 940.768478][T23470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.768494][T23470] ? clear_bhb_loop+0x70/0xc0 [ 940.768514][T23470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.768530][T23470] RIP: 0033:0x7fd40775fd8e [ 940.768546][T23470] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 940.768559][T23470] RSP: 002b:00007fd4059f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 940.768577][T23470] RAX: ffffffffffffffda RBX: 00007fd4059f66c0 RCX: 00007fd40775fd8e [ 940.768589][T23470] RDX: 0000000000000002 RSI: 00007fd4059f5c00 RDI: ffffffffffffff9c [ 940.768600][T23470] RBP: 00007fd4059f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 940.768611][T23470] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 940.768621][T23470] R13: 00007fd407a26038 R14: 00007fd407a25fa0 R15: 00007fff54f01e18 [ 940.768647][T23470] [ 943.490935][T23459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 943.623323][T23496] FAULT_INJECTION: forcing a failure. [ 943.623323][T23496] name failslab, interval 1, probability 0, space 0, times 0 [ 943.623352][T23496] CPU: 0 UID: 0 PID: 23496 Comm: syz.7.6227 Tainted: G L syzkaller #0 PREEMPT(full) [ 943.623375][T23496] Tainted: [L]=SOFTLOCKUP [ 943.623381][T23496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 943.623391][T23496] Call Trace: [ 943.623398][T23496] [ 943.623414][T23496] dump_stack_lvl+0xe8/0x150 [ 943.623441][T23496] should_fail_ex+0x3eb/0x540 [ 943.623471][T23496] should_failslab+0xa8/0x100 [ 943.623493][T23496] __kmalloc_cache_noprof+0x9e/0x600 [ 943.623519][T23496] ? ovs_ct_limit_cmd_set+0x2c9/0xc40 [ 943.623534][T23496] ? ovs_ct_limit_cmd_set+0x2c9/0xc40 [ 943.623559][T23496] ovs_ct_limit_cmd_set+0x2c9/0xc40 [ 943.623584][T23496] genl_family_rcv_msg_doit+0x233/0x340 [ 943.623613][T23496] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 943.623645][T23496] ? bpf_lsm_capable+0x9/0x20 [ 943.623666][T23496] ? security_capable+0x7e/0x2c0 [ 943.623697][T23496] genl_rcv_msg+0x614/0x7a0 [ 943.623724][T23496] ? __pfx_genl_rcv_msg+0x10/0x10 [ 943.623745][T23496] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 943.623771][T23496] netlink_rcv_skb+0x226/0x4a0 [ 943.623790][T23496] ? __pfx_genl_rcv_msg+0x10/0x10 [ 943.623813][T23496] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 943.623841][T23496] ? down_read+0x2b9/0x320 [ 943.623869][T23496] genl_rcv+0x28/0x40 [ 943.623888][T23496] netlink_unicast+0x8ef/0xa80 [ 943.623926][T23496] netlink_sendmsg+0x7f0/0xb20 [ 943.623948][T23496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 943.623973][T23496] ? aa_sock_msg_perm+0x144/0x210 [ 943.623993][T23496] ? apparmor_socket_sendmsg+0x98/0x360 [ 943.624020][T23496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 943.624036][T23496] sock_sendmsg_nosec+0x14e/0x190 [ 943.624065][T23496] ____sys_sendmsg+0x54e/0x850 [ 943.624097][T23496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 943.624126][T23496] ? import_iovec+0x73/0xa0 [ 943.624145][T23496] ___sys_sendmsg+0x2a5/0x360 [ 943.624165][T23496] ? __lock_acquire+0x747/0x2de0 [ 943.624185][T23496] ? __pfx____sys_sendmsg+0x10/0x10 [ 943.624210][T23496] ? futex_wait+0x2a2/0x390 [ 943.624249][T23496] ? __fget_files+0x3a2/0x420 [ 943.624263][T23496] ? __fget_files+0x2a/0x420 [ 943.624286][T23496] __x64_sys_sendmsg+0x1b1/0x290 [ 943.624311][T23496] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 943.624349][T23496] do_syscall_64+0x166/0x520 [ 943.624369][T23496] ? trace_irq_disable+0x3b/0x140 [ 943.624388][T23496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.624404][T23496] ? clear_bhb_loop+0x70/0xc0 [ 943.624424][T23496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.624441][T23496] RIP: 0033:0x7fd40779f559 [ 943.624456][T23496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.624469][T23496] RSP: 002b:00007fd4059f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 943.624487][T23496] RAX: ffffffffffffffda RBX: 00007fd407a25fa0 RCX: 00007fd40779f559 [ 943.624499][T23496] RDX: 0000000004008094 RSI: 0000200000000700 RDI: 0000000000000004 [ 943.624509][T23496] RBP: 00007fd407836b20 R08: 0000000000000000 R09: 0000000000000000 [ 943.624519][T23496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 943.624529][T23496] R13: 00007fd407a26038 R14: 00007fd407a25fa0 R15: 00007fff54f01e18 [ 943.624555][T23496] [ 944.127289][T23499] FAULT_INJECTION: forcing a failure. [ 944.127289][T23499] name failslab, interval 1, probability 0, space 0, times 0 [ 944.127315][T23499] CPU: 0 UID: 0 PID: 23499 Comm: syz.0.6226 Tainted: G L syzkaller #0 PREEMPT(full) [ 944.127338][T23499] Tainted: [L]=SOFTLOCKUP [ 944.127344][T23499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 944.127354][T23499] Call Trace: [ 944.127361][T23499] [ 944.127368][T23499] dump_stack_lvl+0xe8/0x150 [ 944.127394][T23499] should_fail_ex+0x3eb/0x540 [ 944.127425][T23499] should_failslab+0xa8/0x100 [ 944.127447][T23499] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 944.127473][T23499] ? __d_alloc+0x37/0x820 [ 944.127489][T23499] ? __d_alloc+0x37/0x820 [ 944.127510][T23499] __d_alloc+0x37/0x820 [ 944.127530][T23499] d_alloc+0x4b/0x190 [ 944.127545][T23499] ? lookup_one_qstr_excl+0xc4/0x360 [ 944.127565][T23499] lookup_one_qstr_excl+0xd8/0x360 [ 944.127582][T23499] ? lookup_noperm_common+0x245/0x430 [ 944.127601][T23499] start_dirop+0x5c/0x90 [ 944.127626][T23499] simple_start_creating+0xcc/0x110 [ 944.127645][T23499] ? __pfx_simple_start_creating+0x10/0x10 [ 944.127664][T23499] ? do_raw_spin_unlock+0xf5/0x200 [ 944.127687][T23499] ? mntput+0x65/0xc0 [ 944.127712][T23499] debugfs_start_creating+0xca/0x1b0 [ 944.127735][T23499] __debugfs_create_file+0x6f/0x400 [ 944.127760][T23499] debugfs_create_file_full+0x3f/0x60 [ 944.127783][T23499] ref_tracker_dir_debugfs+0x197/0x360 [ 944.127803][T23499] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 944.127843][T23499] ? __kvmalloc_node_noprof+0x340/0x820 [ 944.127863][T23499] ? __raw_spin_lock_init+0x45/0x100 [ 944.127887][T23499] alloc_netdev_mqs+0x275/0x1240 [ 944.127914][T23499] ? __pfx_vlan_setup+0x10/0x10 [ 944.127943][T23499] register_vlan_device+0x235/0x4b0 [ 944.127977][T23499] ? __pfx_register_vlan_device+0x10/0x10 [ 944.128003][T23499] ? security_capable+0x7e/0x2c0 [ 944.128035][T23499] vlan_ioctl_handler+0x248/0x630 [ 944.128060][T23499] ? __pfx___mutex_lock+0x10/0x10 [ 944.128083][T23499] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 944.128107][T23499] ? do_futex+0x3e7/0x4e0 [ 944.128140][T23499] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 944.128164][T23499] sock_ioctl+0x612/0x7e0 [ 944.128190][T23499] ? __fget_files+0x2a/0x420 [ 944.128205][T23499] ? __pfx_sock_ioctl+0x10/0x10 [ 944.128228][T23499] ? __fget_files+0x2a/0x420 [ 944.128244][T23499] ? __fget_files+0x2a/0x420 [ 944.128263][T23499] ? bpf_lsm_file_ioctl+0x9/0x20 [ 944.128281][T23499] ? __pfx_sock_ioctl+0x10/0x10 [ 944.128305][T23499] __se_sys_ioctl+0xfc/0x170 [ 944.128327][T23499] do_syscall_64+0x166/0x520 [ 944.128348][T23499] ? trace_irq_disable+0x3b/0x140 [ 944.128366][T23499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.128383][T23499] ? clear_bhb_loop+0x70/0xc0 [ 944.128403][T23499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.128419][T23499] RIP: 0033:0x7fb29dd9f559 [ 944.128434][T23499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.128448][T23499] RSP: 002b:00007fb29ec9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 944.128465][T23499] RAX: ffffffffffffffda RBX: 00007fb29e025fa0 RCX: 00007fb29dd9f559 [ 944.128477][T23499] RDX: 0000200000000180 RSI: 0000000000008982 RDI: 0000000000000003 [ 944.128488][T23499] RBP: 00007fb29de36b20 R08: 0000000000000000 R09: 0000000000000000 [ 944.128498][T23499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 944.128508][T23499] R13: 00007fb29e026038 R14: 00007fb29e025fa0 R15: 00007ffd3f029838 [ 944.128534][T23499] [ 944.658355][ T32] audit: type=1400 audit(1700000137.258:130): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=23504 comm="syz.7.6231" name="unknown" offset=16 [ 944.887190][T23514] FAULT_INJECTION: forcing a failure. [ 944.887190][T23514] name failslab, interval 1, probability 0, space 0, times 0 [ 944.887218][T23514] CPU: 0 UID: 0 PID: 23514 Comm: syz.6.6233 Tainted: G L syzkaller #0 PREEMPT(full) [ 944.887240][T23514] Tainted: [L]=SOFTLOCKUP [ 944.887246][T23514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 944.887256][T23514] Call Trace: [ 944.887263][T23514] [ 944.887270][T23514] dump_stack_lvl+0xe8/0x150 [ 944.887296][T23514] should_fail_ex+0x3eb/0x540 [ 944.887327][T23514] should_failslab+0xa8/0x100 [ 944.887349][T23514] __kmalloc_noprof+0xf9/0x710 [ 944.887374][T23514] ? sk_prot_alloc+0xe7/0x210 [ 944.887394][T23514] ? sk_prot_alloc+0xe7/0x210 [ 944.887418][T23514] sk_prot_alloc+0xe7/0x210 [ 944.887438][T23514] ? sk_alloc+0x27/0x390 [ 944.887459][T23514] sk_alloc+0x3a/0x390 [ 944.887482][T23514] pptp_create+0x32/0x300 [ 944.887507][T23514] pppox_create+0x131/0x1b0 [ 944.887531][T23514] __sock_create+0x4b5/0xac0 [ 944.887553][T23514] __sys_socket+0xd6/0x1b0 [ 944.887573][T23514] __x64_sys_socket+0x7a/0x90 [ 944.887591][T23514] do_syscall_64+0x166/0x520 [ 944.887612][T23514] ? trace_irq_disable+0x3b/0x140 [ 944.887631][T23514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.887647][T23514] ? clear_bhb_loop+0x70/0xc0 [ 944.887667][T23514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.887691][T23514] RIP: 0033:0x7f354a19f559 [ 944.887705][T23514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.887719][T23514] RSP: 002b:00007f354b100028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 944.887736][T23514] RAX: ffffffffffffffda RBX: 00007f354a425fa0 RCX: 00007f354a19f559 [ 944.887749][T23514] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000018 [ 944.887758][T23514] RBP: 00007f354a236b20 R08: 0000000000000000 R09: 0000000000000000 [ 944.887768][T23514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 944.887778][T23514] R13: 00007f354a426038 R14: 00007f354a425fa0 R15: 00007ffecc764d78 [ 944.887803][T23514] [ 945.733995][T23530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.734326][T23530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.999461][T23545] fuse: fd is not a fuse device [ 946.054909][T23547] overlayfs: failed to clone upperpath [ 946.467695][T23553] jffs2: notice: (23553) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 946.834547][T23564] FAULT_INJECTION: forcing a failure. [ 946.834547][T23564] name fail_futex, interval 1, probability 0, space 0, times 0 [ 946.834577][T23564] CPU: 0 UID: 0 PID: 23564 Comm: syz.7.6251 Tainted: G L syzkaller #0 PREEMPT(full) [ 946.834600][T23564] Tainted: [L]=SOFTLOCKUP [ 946.834607][T23564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 946.834617][T23564] Call Trace: [ 946.834623][T23564] [ 946.834631][T23564] dump_stack_lvl+0xe8/0x150 [ 946.834658][T23564] should_fail_ex+0x3eb/0x540 [ 946.834688][T23564] get_futex_key+0x1ab/0x1410 [ 946.834717][T23564] ? __pfx_get_futex_key+0x10/0x10 [ 946.834748][T23564] ? userfaultfd_unmap_complete+0x292/0x310 [ 946.834786][T23564] futex_wake+0x119/0x5f0 [ 946.834805][T23564] ? __pfx_futex_wake+0x10/0x10 [ 946.834822][T23564] ? __se_sys_mremap+0x10c8/0x1260 [ 946.834846][T23564] do_futex+0x458/0x4e0 [ 946.834871][T23564] ? __pfx_do_futex+0x10/0x10 [ 946.834899][T23564] __se_sys_futex+0x3a8/0x450 [ 946.834926][T23564] ? __pfx___se_sys_futex+0x10/0x10 [ 946.834947][T23564] ? rcu_is_watching+0x16/0xb0 [ 946.834971][T23564] ? __x64_sys_futex+0x21/0xf0 [ 946.834995][T23564] do_syscall_64+0x166/0x520 [ 946.835016][T23564] ? trace_irq_disable+0x3b/0x140 [ 946.835033][T23564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.835048][T23564] ? clear_bhb_loop+0x70/0xc0 [ 946.835067][T23564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.835083][T23564] RIP: 0033:0x7fd40779f559 [ 946.835097][T23564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.835111][T23564] RSP: 002b:00007fd4059f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 946.835127][T23564] RAX: ffffffffffffffda RBX: 00007fd407a25fa8 RCX: 00007fd40779f559 [ 946.835138][T23564] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd407a25fac [ 946.835149][T23564] RBP: 00007fd407a25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 946.835159][T23564] R10: 0000200000ff6000 R11: 0000000000000246 R12: 0000000000000000 [ 946.835169][T23564] R13: 00007fd407a26038 R14: 00007fff54f01d30 R15: 00007fff54f01e18 [ 946.835193][T23564] [ 947.420789][T23569] syzkaller1: entered promiscuous mode [ 947.420807][T23569] syzkaller1: entered allmulticast mode [ 948.738103][T23532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 949.098468][T23600] kvm [23596]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 949.099773][T23600] kvm [23596]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 949.289737][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032911000: rx timeout, send abort [ 949.620157][T23620] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6271'. [ 949.651062][T19645] usb 8-1: new full-speed USB device number 47 using dummy_hcd [ 949.720293][T23623] syzkaller1: entered promiscuous mode [ 949.720311][T23623] syzkaller1: entered allmulticast mode [ 949.791581][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032911000: abort rx timeout. Force session deactivation [ 949.795644][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e000400: rx timeout, send abort [ 949.819685][T19645] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 949.820607][T19645] usb 8-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 949.820661][T19645] usb 8-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 949.820683][T19645] usb 8-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 949.833160][T19645] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 949.833179][T19645] usb 8-1: SerialNumber: syz [ 950.115915][T19645] rndis_host 8-1:253.0: RNDIS init failed, -71 [ 950.116107][T19645] rndis_host 8-1:253.0: probe with driver rndis_host failed with error -71 [ 950.154229][T19645] usb 8-1: USB disconnect, device number 47 [ 950.295657][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e000400: abort rx timeout. Force session deactivation [ 950.641775][T19645] usb 8-1: new full-speed USB device number 48 using dummy_hcd [ 950.796663][T19645] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 950.799392][T19645] usb 8-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 950.799424][T19645] usb 8-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 950.799446][T19645] usb 8-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 950.800452][T19645] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 950.800470][T19645] usb 8-1: SerialNumber: syz [ 951.162003][T23616] rxe_eth0 speed is unknown, defaulting to 1000 [ 951.719054][T23662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.733217][T23662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.829987][T23616] lo speed is unknown, defaulting to 1000 [ 952.155622][T23672] overlayfs: failed to clone upperpath [ 952.356818][T23675] overlayfs: failed to clone upperpath [ 952.550110][T23677] X25: received unknown 00 with LCI 000 [ 952.666747][T23616] lo speed is unknown, defaulting to 1000 [ 953.552524][T19645] rndis_host 8-1:253.0: RNDIS init failed, -110 [ 953.552723][T19645] rndis_host 8-1:253.0: probe with driver rndis_host failed with error -110 [ 953.612128][T19645] usb 8-1: USB disconnect, device number 48 [ 953.658720][T23694] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 953.658839][T23694] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 954.041106][T23694] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 954.043360][T23694] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 954.776579][T23718] fuse: fd is not a fuse device [ 955.194815][T23722] fuse: fd is not a fuse device [ 955.663732][T19683] Bluetooth: hci2: command 0x0406 tx timeout [ 955.966346][T23734] fuse: fd is not a fuse device [ 956.062225][T19683] Bluetooth: hci5: command 0x0406 tx timeout [ 956.322501][T23740] loop5: detected capacity change from 0 to 7 [ 956.323604][T23740] Dev loop5: unable to read RDB block 7 [ 956.323634][T23740] loop5: unable to read partition table [ 956.323775][T23740] loop5: partition table beyond EOD, truncated [ 956.323788][T23740] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑû) failed (rc=-5) [ 956.373284][T23740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.373611][T23740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.523373][T23746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.523713][T23746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.746037][ T32] audit: type=1800 audit(1700000149.349:131): pid=23751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6316" name="debug" dev="sda1" ino=2057 res=0 errno=-22 [ 957.421966][T19683] Bluetooth: hci5: unexpected event for opcode 0x0035 [ 957.476549][T23766] netlink: 'syz.0.6323': attribute type 4 has an invalid length. [ 957.632902][T19452] lo speed is unknown, defaulting to 1000 [ 957.632925][T19452] syz0: Port: 1 Link DOWN [ 957.667920][T19452] lo speed is unknown, defaulting to 1000 [ 957.832276][T23774] EXT4-fs warning (device sda1): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 958.453939][T23784] loop5: detected capacity change from 0 to 7 [ 958.465500][T23784] Dev loop5: unable to read RDB block 7 [ 958.465531][T23784] loop5: unable to read partition table [ 958.465664][T23784] loop5: partition table beyond EOD, truncated [ 958.465677][T23784] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑû) failed (rc=-5) [ 958.592773][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 958.609284][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 958.627127][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 958.628884][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 958.629325][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 958.751621][T19645] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 958.900835][T19645] usb 8-1: Using ep0 maxpacket: 32 [ 958.902816][T19645] usb 8-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 958.904235][T19645] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.904257][T19645] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.904285][T19645] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.909241][T19645] usb 8-1: config 0 descriptor?? [ 958.976384][T19645] hub 8-1:0.0: USB hub found [ 959.206408][T23800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.206825][T23800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.586897][T19645] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 959.611684][T19645] usbhid 8-1:0.0: can't add hid device: -71 [ 959.611769][T19645] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 959.651386][T19645] usb 8-1: USB disconnect, device number 49 [ 959.682829][T23785] rxe_eth0 speed is unknown, defaulting to 1000 [ 960.051914][T23785] lo speed is unknown, defaulting to 1000 [ 960.516230][T23785] lo speed is unknown, defaulting to 1000 [ 960.700883][ T5629] Bluetooth: hci0: command tx timeout [ 961.332999][T23785] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.334005][T23785] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.334335][T23785] bridge_slave_0: entered allmulticast mode [ 961.339361][T23785] bridge_slave_0: entered promiscuous mode [ 961.376278][T23785] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.376354][T23785] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.397370][T23785] bridge_slave_1: entered allmulticast mode [ 961.409718][T23785] bridge_slave_1: entered promiscuous mode [ 961.497380][T23785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.521413][T23785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.629641][T23785] team0: Port device team_slave_0 added [ 961.644698][T23785] team0: Port device team_slave_1 added [ 961.714577][T23785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.714593][T23785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.714614][T23785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.719240][T23785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.719252][T23785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.719272][T23785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.946088][T23785] hsr_slave_0: entered promiscuous mode [ 961.949568][T23785] hsr_slave_1: entered promiscuous mode [ 961.963103][T23785] debugfs: 'hsr0' already exists in 'hsr' [ 961.963122][T23785] Cannot create hsr debugfs directory [ 962.780771][ T5629] Bluetooth: hci0: command tx timeout [ 963.412052][T23873] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 963.758644][T23829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 963.802758][T23785] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 963.829785][T23785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 963.840793][T23785] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 963.861460][T23785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 963.863641][T23785] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 963.930860][T23785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 963.934769][T23785] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 963.977160][T23785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 964.401917][T23785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.457942][T23785] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.495782][ T6380] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.495862][ T6380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.531577][ T6380] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.531656][ T6380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.861036][ T5629] Bluetooth: hci0: command tx timeout [ 965.044949][T23913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.045290][T23913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.285522][T23913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.285851][T23913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.474442][T23785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.510028][T14476] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 965.662024][T14476] usb 8-1: Using ep0 maxpacket: 8 [ 965.663521][T14476] usb 8-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 965.688475][T14476] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.688496][T14476] usb 8-1: Product: syz [ 965.688507][T14476] usb 8-1: Manufacturer: syz [ 965.688518][T14476] usb 8-1: SerialNumber: syz [ 965.718821][T14476] usb 8-1: config 0 descriptor?? [ 965.936954][T14476] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 966.056006][T23785] veth0_vlan: entered promiscuous mode [ 966.103782][T23785] veth1_vlan: entered promiscuous mode [ 966.159421][T14476] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 966.179853][T14476] usb 8-1: USB disconnect, device number 50 [ 966.243529][T23785] veth0_macvtap: entered promiscuous mode [ 966.274288][T23785] veth1_macvtap: entered promiscuous mode [ 966.397924][T23785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.448738][T23785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.491253][ T63] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.491550][ T63] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.491580][ T63] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.491606][ T63] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.778977][T23933] syzkaller1: entered promiscuous mode [ 966.778997][T23933] syzkaller1: entered allmulticast mode [ 966.799076][T23516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.799093][T23516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.940312][ T5629] Bluetooth: hci0: command tx timeout [ 967.134394][ T6381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.134414][ T6381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.796034][T23949] kvm: vcpu 0: requested 2 ns lapic timer period limited to 200000 ns [ 968.102593][T23952] syzkaller0: entered promiscuous mode [ 968.102615][T23952] syzkaller0: entered allmulticast mode [ 968.538845][T23964] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6379'. [ 971.100700][T23982] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 973.485930][T24030] fuse: fd is not a fuse device [ 974.819780][T23963] infiniband s`z1: ib_query_port failed (-19) [ 974.819814][T23963] infiniband s`z1: Couldn't set up InfiniBand P_Key/GID cache [ 974.819828][T23963] siw: device registration error -19 [ 974.981908][T24042] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 975.779753][T24075] syzkaller1: entered promiscuous mode [ 975.779771][T24075] syzkaller1: entered allmulticast mode [ 976.132080][T24082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.132402][T24082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.207923][T24086] Bluetooth: MGMT ver 1.23 [ 976.819584][T24104] FAULT_INJECTION: forcing a failure. [ 976.819584][T24104] name failslab, interval 1, probability 0, space 0, times 0 [ 976.819614][T24104] CPU: 0 UID: 0 PID: 24104 Comm: syz.8.6427 Tainted: G L syzkaller #0 PREEMPT(full) [ 976.819646][T24104] Tainted: [L]=SOFTLOCKUP [ 976.819655][T24104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 976.819670][T24104] Call Trace: [ 976.819677][T24104] [ 976.819685][T24104] dump_stack_lvl+0xe8/0x150 [ 976.819712][T24104] should_fail_ex+0x3eb/0x540 [ 976.819742][T24104] should_failslab+0xa8/0x100 [ 976.819764][T24104] __kmalloc_cache_noprof+0x9e/0x600 [ 976.819789][T24104] ? lock_acquire+0x115/0x350 [ 976.819805][T24104] ? sctp_add_bind_addr+0x8c/0x370 [ 976.819827][T24104] ? sctp_add_bind_addr+0x8c/0x370 [ 976.819854][T24104] sctp_add_bind_addr+0x8c/0x370 [ 976.819879][T24104] sctp_copy_local_addr_list+0x31a/0x4e0 [ 976.819905][T24104] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 976.819927][T24104] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 976.819953][T24104] ? sctp_v4_is_any+0x35/0x60 [ 976.819976][T24104] ? sctp_copy_one_addr+0x93/0x360 [ 976.820000][T24104] sctp_bind_addr_copy+0x189/0x3c0 [ 976.820028][T24104] sctp_connect_new_asoc+0x2ff/0x6b0 [ 976.820047][T24104] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 976.820070][T24104] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 976.820089][T24104] __sctp_connect+0x5cb/0xdc0 [ 976.820114][T24104] ? __pfx___sctp_connect+0x10/0x10 [ 976.820129][T24104] ? security_sctp_bind_connect+0x7e/0x2c0 [ 976.820155][T24104] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 976.820186][T24104] sctp_getsockopt_connectx3+0x227/0x360 [ 976.820212][T24104] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 976.820238][T24104] ? sctp_getsockopt+0x12f/0xb90 [ 976.820265][T24104] ? __local_bh_enable_ip+0xd6/0x140 [ 976.820287][T24104] sctp_getsockopt+0x984/0xb90 [ 976.820313][T24104] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 976.820331][T24104] do_sock_getsockopt+0x4aa/0x640 [ 976.820357][T24104] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 976.820378][T24104] ? __pfx_do_futex+0x10/0x10 [ 976.820420][T24104] __x64_sys_getsockopt+0x1a4/0x240 [ 976.820448][T24104] do_syscall_64+0x166/0x520 [ 976.820469][T24104] ? trace_irq_disable+0x3b/0x140 [ 976.820491][T24104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.820508][T24104] ? clear_bhb_loop+0x70/0xc0 [ 976.820528][T24104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.820544][T24104] RIP: 0033:0x7f64fb79f559 [ 976.820559][T24104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.820573][T24104] RSP: 002b:00007f64fc68e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 976.820590][T24104] RAX: ffffffffffffffda RBX: 00007f64fba25fa0 RCX: 00007f64fb79f559 [ 976.820602][T24104] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 976.820612][T24104] RBP: 00007f64fb836b20 R08: 0000200000000380 R09: 0000000000000000 [ 976.820623][T24104] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 976.820633][T24104] R13: 00007f64fba26038 R14: 00007f64fba25fa0 R15: 00007ffceb77ed28 [ 976.820659][T24104] [ 977.528122][T24114] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 978.080235][T19646] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 978.230304][T19646] usb 8-1: Using ep0 maxpacket: 8 [ 978.230793][T19646] usb 8-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 978.233337][T19646] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.233355][T19646] usb 8-1: Product: syz [ 978.233366][T19646] usb 8-1: Manufacturer: syz [ 978.233377][T19646] usb 8-1: SerialNumber: syz [ 978.237412][T19646] usb 8-1: config 0 descriptor?? [ 978.511823][T19646] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 978.964720][T19646] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 978.973260][T19646] usb 8-1: USB disconnect, device number 51 [ 980.076115][T24173] overlayfs: failed to clone upperpath [ 980.210489][T24175] gadgetfs: bound to dummy_udc driver [ 980.273226][ T32] audit: type=1326 audit(1700000172.881:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24181 comm="syz.4.6454" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dee59f559 code=0x0 [ 980.509365][T19452] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 980.510615][ C0] gadgetfs: connected [ 980.511845][T19452] gadgetfs: disconnected [ 980.762692][T24194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.763030][T24194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.990803][T14476] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 981.143153][T14476] usb 9-1: Using ep0 maxpacket: 32 [ 981.144728][T14476] usb 9-1: New USB device found: idVendor=1e7d, idProduct=2d5a, bcdDevice=0.00 [ 981.145699][T14476] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.145732][T14476] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.145760][T14476] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.196419][T14476] usb 9-1: config 0 descriptor?? [ 981.639430][T24208] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1262: comm syz.0.6462: No space for directory leaf checksum. Please run e2fsck -D. [ 981.639456][T24208] EXT4-fs error (device sda1): ext4_empty_dir:3087: inode #1262: comm syz.0.6462: Directory block failed checksum [ 981.793710][T14476] savu 0003:1E7D:2D5A.0014: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 981.877644][T24212] udevd[24212]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 981.901217][T14476] usb 9-1: USB disconnect, device number 2 [ 982.645987][T24223] FAULT_INJECTION: forcing a failure. [ 982.645987][T24223] name failslab, interval 1, probability 0, space 0, times 0 [ 982.646017][T24223] CPU: 0 UID: 0 PID: 24223 Comm: syz.0.6467 Tainted: G L syzkaller #0 PREEMPT(full) [ 982.646039][T24223] Tainted: [L]=SOFTLOCKUP [ 982.646045][T24223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 982.646055][T24223] Call Trace: [ 982.646062][T24223] [ 982.646069][T24223] dump_stack_lvl+0xe8/0x150 [ 982.646096][T24223] should_fail_ex+0x3eb/0x540 [ 982.646125][T24223] ? __alloc_skb+0x1db/0x7a0 [ 982.646145][T24223] should_failslab+0xa8/0x100 [ 982.646165][T24223] ? __alloc_skb+0x1db/0x7a0 [ 982.646183][T24223] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 982.646208][T24223] ? __alloc_skb+0x18d/0x7a0 [ 982.646226][T24223] ? __alloc_skb+0x1db/0x7a0 [ 982.646251][T24223] __alloc_skb+0x1db/0x7a0 [ 982.646274][T24223] sock_wmalloc+0xb2/0x130 [ 982.646305][T24223] unix_stream_connect+0x2c9/0x1000 [ 982.646333][T24223] ? __pfx_unix_stream_connect+0x10/0x10 [ 982.646356][T24223] ? kernel_connect+0xf1/0x1c0 [ 982.646383][T24223] kernel_connect+0x141/0x1c0 [ 982.646409][T24223] ? __pfx_kernel_connect+0x10/0x10 [ 982.646431][T24223] ? reacquire_held_locks+0x117/0x1a0 [ 982.646463][T24223] ? __local_bh_enable_ip+0xd6/0x140 [ 982.646485][T24223] xs_local_connect+0x626/0x810 [ 982.646506][T24223] ? __pfx_xs_local_connect+0x10/0x10 [ 982.646522][T24223] ? __pfx_xs_local_connect+0x10/0x10 [ 982.646547][T24223] xprt_connect+0x613/0x850 [ 982.646570][T24223] ? __pfx_call_connect+0x10/0x10 [ 982.646595][T24223] __rpc_execute+0x521/0x1280 [ 982.646629][T24223] ? __pfx___rpc_execute+0x10/0x10 [ 982.646651][T24223] ? rpc_task_get_xprt+0x26/0x250 [ 982.646680][T24223] ? rpc_make_runnable+0xae/0x1c0 [ 982.646703][T24223] rpc_execute+0x1c1/0x390 [ 982.646725][T24223] rpc_run_task+0x4a6/0x660 [ 982.646760][T24223] rpc_create_xprt+0x452/0xa90 [ 982.646786][T24223] ? __pfx_rpc_create_xprt+0x10/0x10 [ 982.646819][T24223] ? trace_kmalloc+0x2a/0xf0 [ 982.646846][T24223] ? __kmalloc_node_track_caller_noprof+0x4cd/0x720 [ 982.646874][T24223] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 982.646899][T24223] ? xprt_create_transport+0x39b/0x5f0 [ 982.646914][T24223] ? xprt_create_transport+0x39b/0x5f0 [ 982.646930][T24223] ? kstrdup+0x81/0x100 [ 982.646953][T24223] ? __asan_memcpy+0x40/0x70 [ 982.646982][T24223] ? xprt_create_transport+0x438/0x5f0 [ 982.647001][T24223] rpc_create+0x68a/0x910 [ 982.647026][T24223] ? __pfx_rpc_create+0x10/0x10 [ 982.647056][T24223] ? trace_contention_end+0x3d/0x140 [ 982.647101][T24223] ? net_generic+0x1e/0x240 [ 982.647121][T24223] ? net_generic+0x1e/0x240 [ 982.647147][T24223] set_gssp_clnt+0x197/0x2f0 [ 982.647168][T24223] ? aa_file_perm+0x18b/0x15f0 [ 982.647187][T24223] ? __pfx_set_gssp_clnt+0x10/0x10 [ 982.647222][T24223] ? _parse_integer_limit+0x18e/0x1e0 [ 982.647248][T24223] ? kstrtoull+0x137/0x1d0 [ 982.647271][T24223] write_gssp+0x458/0x930 [ 982.647294][T24223] ? __pfx_write_gssp+0x10/0x10 [ 982.647317][T24223] ? lock_acquire+0x115/0x350 [ 982.647343][T24223] ? __pfx_write_gssp+0x10/0x10 [ 982.647362][T24223] proc_reg_write+0x1e9/0x2e0 [ 982.647386][T24223] ? __pfx_proc_reg_write+0x10/0x10 [ 982.647408][T24223] vfs_write+0x296/0xba0 [ 982.647431][T24223] ? __pfx_vfs_write+0x10/0x10 [ 982.647450][T24223] ? __fget_files+0x2a/0x420 [ 982.647464][T24223] ? __fget_files+0x3a2/0x420 [ 982.647479][T24223] ? __fget_files+0x2a/0x420 [ 982.647497][T24223] ? fdget+0x1ac/0x250 [ 982.647518][T24223] ksys_write+0x150/0x270 [ 982.647537][T24223] ? __pfx_ksys_write+0x10/0x10 [ 982.647563][T24223] do_syscall_64+0x166/0x520 [ 982.647585][T24223] ? trace_irq_disable+0x3b/0x140 [ 982.647603][T24223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.647620][T24223] ? clear_bhb_loop+0x70/0xc0 [ 982.647640][T24223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.647656][T24223] RIP: 0033:0x7fb29dd9f559 [ 982.647672][T24223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.647686][T24223] RSP: 002b:00007fb29ec9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 982.647703][T24223] RAX: ffffffffffffffda RBX: 00007fb29e025fa0 RCX: 00007fb29dd9f559 [ 982.647715][T24223] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 982.647725][T24223] RBP: 00007fb29de36b20 R08: 0000000000000000 R09: 0000000000000000 [ 982.647742][T24223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 982.647752][T24223] R13: 00007fb29e026038 R14: 00007fb29e025fa0 R15: 00007ffd3f029838 [ 982.647778][T24223] [ 982.828127][T24223] xs_local_setup_socket: unhandled error (12) connecting to /var/run/gssproxy.sock [ 983.478992][T19452] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 983.629129][T19452] usb 9-1: Using ep0 maxpacket: 8 [ 983.630316][T19452] usb 9-1: New USB device found: idVendor=046d, idProduct=c623, bcdDevice=0.00 [ 983.631185][T19452] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.631207][T19452] usb 9-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 983.631226][T19452] usb 9-1: config 0 interface 0 has no altsetting 0 [ 983.631250][T19452] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.635495][T19452] usb 9-1: config 0 descriptor?? [ 983.976676][T24249] device-mapper: ioctl: Invalid ioctl structure: name t, dev f806 [ 984.117071][T19452] input: HID 046d:c623 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:046D:C623.0015/input/input63 [ 984.166182][T24257] FAULT_FLAG_ALLOW_RETRY missing 801 [ 984.166222][T24257] CPU: 0 UID: 0 PID: 24257 Comm: syz.7.6478 Tainted: G L syzkaller #0 PREEMPT(full) [ 984.166245][T24257] Tainted: [L]=SOFTLOCKUP [ 984.166252][T24257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 984.166262][T24257] Call Trace: [ 984.166269][T24257] [ 984.166276][T24257] dump_stack_lvl+0xe8/0x150 [ 984.166302][T24257] handle_userfault+0x1305/0x1ad0 [ 984.166336][T24257] ? __folio_put+0x4b3/0x590 [ 984.166362][T24257] ? __pfx_handle_userfault+0x10/0x10 [ 984.166411][T24257] handle_mm_fault+0x1a2a/0x3540 [ 984.166438][T24257] ? handle_mm_fault+0xee/0x3540 [ 984.166466][T24257] ? follow_page_pte+0x660/0xf10 [ 984.166485][T24257] ? __pfx_handle_mm_fault+0x10/0x10 [ 984.166507][T24257] ? follow_page_pte+0x748/0xf10 [ 984.166532][T24257] ? __pfx_follow_page_pte+0x10/0x10 [ 984.166560][T24257] __get_user_pages+0x1670/0x2750 [ 984.166602][T24257] populate_vma_page_range+0x311/0x3f0 [ 984.166621][T24257] ? __pfx_populate_vma_page_range+0x10/0x10 [ 984.166638][T24257] ? vma_wants_writenotify+0xb2/0x340 [ 984.166660][T24257] ? vma_set_page_prot+0xc3/0x100 [ 984.166683][T24257] mprotect_fixup+0x9e9/0xda0 [ 984.166715][T24257] ? __pfx_mprotect_fixup+0x10/0x10 [ 984.166738][T24257] ? mas_next_slot+0xc91/0xd70 [ 984.166772][T24257] ? apparmor_file_mprotect+0x1ec/0x3a0 [ 984.166795][T24257] ? security_file_mprotect+0x1a/0x290 [ 984.166823][T24257] do_mprotect_pkey+0x8e7/0xd40 [ 984.166850][T24257] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 984.166888][T24257] ? rcu_is_watching+0x16/0xb0 [ 984.166915][T24257] __x64_sys_mprotect+0x80/0x90 [ 984.166941][T24257] do_syscall_64+0x166/0x520 [ 984.166962][T24257] ? trace_irq_disable+0x3b/0x140 [ 984.166981][T24257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.166998][T24257] ? clear_bhb_loop+0x70/0xc0 [ 984.167018][T24257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.167034][T24257] RIP: 0033:0x7fd40779f559 [ 984.167049][T24257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 984.167063][T24257] RSP: 002b:00007fd4059d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 984.167080][T24257] RAX: ffffffffffffffda RBX: 00007fd407a26090 RCX: 00007fd40779f559 [ 984.167092][T24257] RDX: 000000000000000a RSI: 0000000000c00000 RDI: 0000200000400000 [ 984.167103][T24257] RBP: 00007fd407836b20 R08: 0000000000000000 R09: 0000000000000000 [ 984.167113][T24257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 984.167123][T24257] R13: 00007fd407a26128 R14: 00007fd407a26090 R15: 00007fff54f01e18 [ 984.167148][T24257] [ 984.576224][T19452] logitech 0003:046D:C623.0015: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.8-1/input0 [ 984.672970][T24259] udevd[24259]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 984.783402][T24264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.783790][T24264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.860957][T24266] fuse: fd is not a fuse device [ 984.976967][T19452] usb 9-1: USB disconnect, device number 3 [ 985.444506][T24280] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 985.444506][T24280] [ 985.444718][T24280] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 985.445057][T24280] CIFS: Attempting to mount //127.0.0.1/share [ 985.555770][T24280] CIFS: VFS: Error connecting to socket. Aborting operation. [ 985.556074][T24280] CIFS: VFS: cifs_mount failed w/return code = -22 [ 985.639326][T19452] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 985.798327][T19452] usb 8-1: Using ep0 maxpacket: 16 [ 985.808366][T19452] usb 8-1: New USB device found: idVendor=057e, idProduct=2019, bcdDevice=0.00 [ 985.819144][T19452] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.819170][T19452] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 985.819189][T19452] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 985.819219][T19452] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.873124][T19452] usb 8-1: config 0 descriptor?? [ 986.368294][T19452] nintendo 0003:057E:2019.0016: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.7-1/input0 [ 986.434071][T24297] udevd[24297]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 986.450253][T24293] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x20d pfn:0x293c7 [ 986.450272][T24293] memcg:ffff888021ab2e00 [ 986.450279][T24293] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 986.450318][T24293] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 986.450337][T24293] raw: 000000000000020d 0000000000000000 00000001ffffffff ffff888021ab2e00 [ 986.450346][T24293] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 986.450374][T24293] page_owner tracks the page as allocated [ 986.450411][T24293] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 24293, tgid 24293 (syz.8.6495), ts 986450231540 [ 986.450437][T24293] post_alloc_hook+0x1f9/0x250 [ 986.450480][T24293] get_page_from_freelist+0x220f/0x2280 [ 986.450495][T24293] __alloc_frozen_pages_noprof+0x1fe/0x410 [ 986.450509][T24293] alloc_pages_mpol+0x21e/0x390 [ 986.450527][T24293] alloc_pages_noprof+0xb1/0x2b0 [ 986.450543][T24293] folio_alloc_noprof+0x1e/0x30 [ 986.450561][T24293] filemap_alloc_folio_noprof+0x111/0x460 [ 986.450584][T24293] page_cache_ra_order+0x569/0xee0 [ 986.450597][T24293] do_sync_mmap_readahead+0x74b/0x960 [ 986.450629][T24293] filemap_fault+0x7ef/0x13b0 [ 986.450644][T24293] __do_fault+0x138/0x2a0 [ 986.450664][T24293] do_pte_missing+0x649/0x3570 [ 986.450683][T24293] handle_mm_fault+0x1a2a/0x3540 [ 986.450700][T24293] do_user_addr_fault+0xb35/0x1480 [ 986.450722][T24293] exc_page_fault+0x6a/0xc0 [ 986.450740][T24293] asm_exc_page_fault+0x26/0x30 [ 986.450770][T24293] page last free pid 24294 tgid 24293 ts 986437735114 stack trace: [ 986.450781][T24293] free_unref_folios+0xdc6/0x14e0 [ 986.450802][T24293] folios_put_refs+0x9e9/0xb30 [ 986.450819][T24293] truncate_inode_pages_range+0x429/0xc30 [ 986.450838][T24293] set_blocksize+0x2ce/0x440 [ 986.450859][T24293] blkdev_bszset+0x1b2/0x230 [ 986.450875][T24293] blkdev_ioctl+0x2c7/0x740 [ 986.450907][T24293] __se_sys_ioctl+0xfc/0x170 [ 986.450924][T24293] do_syscall_64+0x166/0x520 [ 986.450943][T24293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.451109][T24293] ------------[ cut here ]------------ [ 986.451116][T24293] kernel BUG at mm/filemap.c:859! [ 986.451144][T24293] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 986.672531][T24293] CPU: 0 UID: 0 PID: 24293 Comm: syz.8.6495 Tainted: G L syzkaller #0 PREEMPT(full) [ 986.683572][T24293] Tainted: [L]=SOFTLOCKUP [ 986.687981][T24293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 986.698030][T24293] RIP: 0010:__filemap_add_folio+0x1236/0x13c0 [ 986.704120][T24293] Code: 70 b9 ff 4c 89 ef 48 c7 c6 40 89 39 8c e8 42 67 18 ff 90 0f 0b e8 3a 70 b9 ff 4c 89 ef 48 c7 c6 00 7e 39 8c e8 2b 67 18 ff 90 <0f> 0b e8 23 70 b9 ff 4c 89 ef 48 c7 c6 40 89 39 8c e8 14 67 18 ff [ 986.723737][T24293] RSP: 0018:ffffc900038e75e0 EFLAGS: 00010246 [ 986.729808][T24293] RAX: ebd3ab9464d0f300 RBX: 0000000000000000 RCX: 0000000000000046 [ 986.737803][T24293] RDX: 0000000000000000 RSI: ffffffff8ea49f1e RDI: ffff88802f4f0000 [ 986.745781][T24293] RBP: ffffc900038e7758 R08: ffffffff81a6cb70 R09: 0000000000000000 [ 986.753761][T24293] R10: dffffc0000000000 R11: fffffbfff237c658 R12: ffff888025554ed8 [ 986.761833][T24293] R13: ffffea0000a4f1c0 R14: 0000000000000002 R15: dffffc0000000000 [ 986.769818][T24293] FS: 0000555579233500(0000) GS:ffff8881233d4000(0000) knlGS:0000000000000000 [ 986.778752][T24293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 986.785357][T24293] CR2: 00007fb29ec9eff8 CR3: 0000000077354000 CR4: 00000000003526f0 [ 986.793335][T24293] Call Trace: [ 986.796620][T24293] [ 986.799575][T24293] ? __pfx___filemap_add_folio+0x10/0x10 [ 986.805223][T24293] ? percpu_ref_put+0x19/0x180 [ 986.809994][T24293] ? percpu_ref_put+0xf9/0x180 [ 986.814777][T24293] filemap_add_folio+0x251/0x4e0 [ 986.819726][T24293] page_cache_ra_order+0x6d1/0xee0 [ 986.824861][T24293] do_sync_mmap_readahead+0x74b/0x960 [ 986.830237][T24293] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 986.836134][T24293] ? count_memcg_event_mm+0x1d/0x250 [ 986.841420][T24293] ? count_memcg_event_mm+0x1d/0x250 [ 986.846707][T24293] filemap_fault+0x7ef/0x13b0 [ 986.851404][T24293] ? __pfx_filemap_fault+0x10/0x10 [ 986.856518][T24293] ? __lock_acquire+0x747/0x2de0 [ 986.861454][T24293] __do_fault+0x138/0x2a0 [ 986.865791][T24293] do_pte_missing+0x649/0x3570 [ 986.870574][T24293] ? handle_mm_fault+0xee/0x3540 [ 986.875531][T24293] handle_mm_fault+0x1a2a/0x3540 [ 986.880591][T24293] ? handle_mm_fault+0xee/0x3540 [ 986.885544][T24293] ? __pfx_handle_mm_fault+0x10/0x10 [ 986.890852][T24293] ? lock_vma_under_rcu+0x45a/0x500 [ 986.896060][T24293] ? __pfx_do_futex+0x10/0x10 [ 986.900783][T24293] do_user_addr_fault+0xb35/0x1480 [ 986.905925][T24293] ? trace_page_fault_user+0x84/0x1e0 [ 986.911308][T24293] exc_page_fault+0x6a/0xc0 [ 986.915816][T24293] asm_exc_page_fault+0x26/0x30 [ 986.920665][T24293] RIP: 0033:0x7f64fb76e418 [ 986.925082][T24293] Code: fc 89 37 c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 66 0f 1f 84 00 00 00 00 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 c5 fe 6f 54 16 e0 c5 fe 6f 5c 16 c0 c5 [ 986.944692][T24293] RSP: 002b:00007ffceb77ee88 EFLAGS: 00010202 [ 986.950779][T24293] RAX: 00002000000000c0 RBX: 0000000000000004 RCX: 0030626c6c756e2f [ 986.958768][T24293] RDX: 000000000000000c RSI: 6c756e2f7665642f RDI: 00002000000000c0 [ 986.966914][T24293] RBP: fffffffffffffffe R08: 0000001b32020000 R09: 0000000000000001 [ 986.974905][T24293] R10: 7ffffffffffffff3 R11: 0000000000000009 R12: 00007ffceb77efb0 [ 986.982891][T24293] R13: 00007f64fba25fac R14: 00000000000f0d9e R15: 00007ffceb77ef90 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 986.990893][T24293] [ 986.993924][T24293] Modules linked in: [ 986.999869][T24293] ---[ end trace 0000000000000000 ]--- [ 987.392275][T24293] RIP: 0010:__filemap_add_folio+0x1236/0x13c0 [ 987.392330][T24293] Code: 70 b9 ff 4c 89 ef 48 c7 c6 40 89 39 8c e8 42 67 18 ff 90 0f 0b e8 3a 70 b9 ff 4c 89 ef 48 c7 c6 00 7e 39 8c e8 2b 67 18 ff 90 <0f> 0b e8 23 70 b9 ff 4c 89 ef 48 c7 c6 40 89 39 8c e8 14 67 18 ff [ 987.392345][T24293] RSP: 0018:ffffc900038e75e0 EFLAGS: 00010246 [ 987.392360][T24293] RAX: ebd3ab9464d0f300 RBX: 0000000000000000 RCX: 0000000000000046 [ 987.392371][T24293] RDX: 0000000000000000 RSI: ffffffff8ea49f1e RDI: ffff88802f4f0000 [ 987.392382][T24293] RBP: ffffc900038e7758 R08: ffffffff81a6cb70 R09: 0000000000000000 [ 987.392393][T24293] R10: dffffc0000000000 R11: fffffbfff237c658 R12: ffff888025554ed8 [ 987.392405][T24293] R13: ffffea0000a4f1c0 R14: 0000000000000002 R15: dffffc0000000000 [ 987.392416][T24293] FS: 0000555579233500(0000) GS:ffff8881233d4000(0000) knlGS:0000000000000000 [ 987.392429][T24293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 987.392440][T24293] CR2: 0000000000000008 CR3: 0000000077354000 CR4: 00000000003526f0 [ 987.392467][T24293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 987.392477][T24293] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 987.392500][T24293] Kernel panic - not syncing: Fatal exception [ 987.510010][T24293] Kernel Offset: disabled [ 987.514339][T24293] Rebooting in 86400 seconds..