last executing test programs: 31.614037383s ago: executing program 2 (id=142): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = dup(r0) shutdown(r1, 0x1) shutdown(r0, 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x9a36, 0x2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000180), 0x8000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x4000020) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x3000000, 0x3}, 0x2000000, 0x0, 'id0\x00', 'timer0\x00'}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x10, 0x0, 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000340)='f2fs\x00', 0x0, &(0x7f0000000240)='acl') 31.452811809s ago: executing program 2 (id=143): process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x500) r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) 31.341208982s ago: executing program 2 (id=145): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$bt_hci(r0, 0x0, 0x0) 31.240430779s ago: executing program 2 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x50, &(0x7f00000002c0)={0x0, 0x0}, 0x10) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0xd1, 0xb1, ""/177}, &(0x7f0000000140)=0xd1, 0x1) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) lseek(r2, 0x10001, 0x0) r3 = socket(0xa, 0x1, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x84) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x185093, 0x0) mount$cgroup2(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x80010, &(0x7f0000000400)={[{}, {@favordynmods}, {@pids_localevents}, {}, {@favordynmods}, {@pids_localevents}, {@memory_localevents}, {@favordynmods}], [{@permit_directio}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/iommu\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '*^-'}}]}) 30.845372008s ago: executing program 2 (id=150): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f0000000380)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) 30.521568693s ago: executing program 2 (id=153): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x841, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x2, r6, 0x0, 0x0, 0x7fffffffffffffff}]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x7f, 0x9, 0xfffffffffffffffd, 0x9, 0x10000, 0x6868, 0x4002004be, 0x7ff, 0x9, 0x80000000, 0x400, 0x80, 0x89, 0x0, 0x5, 0x2], 0x40000, 0x240046}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x20000, 0x10c) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x40049366, 0x0) syz_usb_connect(0x5, 0x1e0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e235e3209a060100c551010203010902ce01014c0000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae03, 0x2f) 30.270867664s ago: executing program 32 (id=153): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x841, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x2, r6, 0x0, 0x0, 0x7fffffffffffffff}]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x7f, 0x9, 0xfffffffffffffffd, 0x9, 0x10000, 0x6868, 0x4002004be, 0x7ff, 0x9, 0x80000000, 0x400, 0x80, 0x89, 0x0, 0x5, 0x2], 0x40000, 0x240046}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x20000, 0x10c) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x40049366, 0x0) syz_usb_connect(0x5, 0x1e0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e235e3209a060100c551010203010902ce01014c0000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae03, 0x2f) 5.157660137s ago: executing program 0 (id=303): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x40, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket(0x21, 0x4, 0x80000000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000140)=@e={0xff, 0xa, 0xc, 0x5d, @SEQ_NOTEON=@special, 0x8, 0xf9, 0xc}) r2 = syz_open_procfs(r0, &(0x7f0000000200)='net/dev_snmp6\x00') r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000015a000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x80000000) syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') r4 = openat(0xffffffffffffffff, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)=' ', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r7, 0x0, 0x0) write(r5, &(0x7f0000000b40)="a75f3e87", 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001ac0)='/sys/power/pm_trace_dev_match', 0x1084, 0x11b) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003b40)={0x2020}, 0x2020) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) 4.434066907s ago: executing program 0 (id=307): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="200f1100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x40da33, 0x10, 0x2, 0x1ce}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000880)=@IORING_OP_FUTEX_WAIT={0x33, 0x0, 0x0, 0x87, 0x3, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x10}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) syz_usb_connect$midi(0x4, 0xc1, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xef, 0x499, 0x1014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x1, 0x1, 0xff, 0x20, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x30, 0x4, [@ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x20f77d4e6b7f732d, 0xf1, 0x7}, @midi_out_jack={0x17, 0x24, 0x3, 0x0, 0xf1, 0x8, [{0x97, 0xc}, {0xb2, 0x1}, {0x4, 0xdc}, {0x9, 0x9}, {0x6, 0x4}, {0x3, 0x7}, {0x8, 0x3}, {0x81, 0x3}], 0x9}, @midi_out_jack={0x9, 0x24, 0x3, 0x1, 0x8, 0x1, [{0x6, 0x2}], 0x4}], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x4, 0x4, 0x0, {0x14, 0x25, 0x1, 0x10, "322171df8792894d2667488a345952c6"}}}, {{0x9, 0x5, 0x9, 0x8, 0x48, 0x2b, 0x4, 0xbe, {0x14, 0x25, 0x1, 0x10, "1b1fb3df5640f87a58b2d769695bc449"}}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x1, 0xf, 0x9, {0x4}}}, {{0x9, 0x5, 0x0, 0x4, 0x6929407fdd794449, 0xa7, 0x8, 0x6, {0xc, 0x25, 0x1, 0x8, "dc339a5ed94b67af"}}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0xa, 0x6, 0x3, {0xb, 0x25, 0x1, 0x7, "609db77680ba70"}}}]}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x5, 0xe, 0x6, 0x40, 0x8}, 0x27, &(0x7f00000001c0)={0x5, 0xf, 0x27, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x13, 0x6e, 0x22, 0x2, 0xb6}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0x0, 0x92e}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0xa, 0x33, 0x1}]}, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3409}}, {0xaf, &(0x7f00000004c0)=@string={0xaf, 0x3, "00030b24b910a598575f96617520ab92c9d2c741b60a6d45899d6ab6476b2f35a8f11100f5f934e03d1a20ed69ca3458fa02b93dca366e829d5438b3a033368c8a44c91c663462b09a37dabdbf96dcd05da1b313b1421ab76a73a462c600332ece736360fce0bb9316ea608e35abd02fcb11cfb26c79502ef8758fec1a90f5b11f7e93f772fbad85bca1c4851a9fe259027b60fe60935de71719743490c64fd9444dc4373b50543fa7b3c26494"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xc20}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x42d}}]}) mmap$IORING_OFF_SQ_RING(0x0, 0x2, 0xf, 0x4011013, r1, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xfff) 4.004947403s ago: executing program 4 (id=309): mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x4080, &(0x7f0000000040)=ANY=[@ANYBLOB='dyn,flock=\x00']) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f00000030c0)=""/178, &(0x7f0000001680)=0xe2) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x7, 0xf0, 0x8, {0x8, 0xb, 0x1, 0x1, 0x1, 0xb, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x3, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0xc, 0x1d, {0x8, 0x25, 0x1, 0x83, 0x18, 0xfd, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x1, 0xf2, {0x8, 0x25, 0x1, 0x2, 0xc, 0x4, 0x7f}}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) flistxattr(r3, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x1f, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0) close(0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)='1', 0x1}], 0x1}}], 0x2, 0x2090) r4 = fcntl$dupfd(r0, 0x0, r0) writev(r4, &(0x7f0000003e00)=[{&(0x7f0000000140)='S', 0x1}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x1c) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1) sendto(r0, &(0x7f0000001180)=' ', 0x1, 0x4048810, 0x0, 0x0) 3.181551999s ago: executing program 1 (id=315): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @empty, 0x8}, 0x1c) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)={0x1, 0x0, [{0x80000008, 0x9, 0x2, 0x5, 0x9, 0x5b70, 0x87b}]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="0f20c035000000200f22c0b900090000b82f470000ba00000000b9e30a0000b80b000000ba000000000f30c46389224ed502652e46f7beed00000064f3400f09f028860080000066430f3804bc3ded00000047d03d00200000643e420f01c364673e0fc7ae00000000", 0x69}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @empty, 0x8}, 0x1c) (async) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)={0x1, 0x0, [{0x80000008, 0x9, 0x2, 0x5, 0x9, 0x5b70, 0x87b}]}) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="0f20c035000000200f22c0b900090000b82f470000ba00000000b9e30a0000b80b000000ba000000000f30c46389224ed502652e46f7beed00000064f3400f09f028860080000066430f3804bc3ded00000047d03d00200000643e420f01c364673e0fc7ae00000000", 0x69}], 0x1, 0x7c, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 2.909521861s ago: executing program 0 (id=317): socket$inet_sctp(0x2, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x82f41, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000100), 0x12) listen(r3, 0x9) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e0b0a43b820a8e8", @ANYRES8=r1, @ANYRES64=r1], 0x97) 2.557709562s ago: executing program 4 (id=318): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400), 0x0, 0x40080}, 0x4000000) recvmmsg(r0, &(0x7f00000031c0), 0x400028f, 0x2, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) 2.557263992s ago: executing program 0 (id=319): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0xa0000) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="5301d9aecce5", 0x0, 0xa, 0x0, 0x0, 0x0}) 2.08427752s ago: executing program 1 (id=321): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="5c00000013006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514001ac0080002008100020006a101c00364683b9dad7aa21240d69a6a8184f6c551ae60fc91", 0x46}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) 1.942569354s ago: executing program 1 (id=322): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb", 0x12}], 0x2}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a22c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "0400d8c7"}, 0x38) 1.856768396s ago: executing program 1 (id=324): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x24b, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x5a, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000780)=0x2, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100), &(0x7f00000001c0)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000280)=0x2) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000005800010200000000000000000200000408000340000039d3080001000300001f"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002140)={&(0x7f0000000000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000012000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000012000/0x1000)=nil, &(0x7f000000e000/0x3000)=nil, &(0x7f0000001140)="07305189437bc1c066ce69654242906b078c4310fb4569ac549d3dd7fd13323aab0e9a268abb3d152cbfac78a42be6b058e56a20241855169677b7fb39106016dde2e3597d56658e49759ed692cd9a05daf818e981fc4d90e3c4d0159d4f3034168841255e50cdaf7f96f624cfcfdd38b79bc68952f96055416964f9ec337fe298aa810852ca09ff75113deda07395449c1981c7efeb78f04631121917364b2d07dce0ad3cc6bf98d6630ad5a2d7c3587f1490211203a0055152b2bd2c2913d9ea44f5f0d650f259efd924517b901cdad60026cb90111cb360b0f32d424c107e271af2e75ef19d468189279b63c4cda5423599b3b670856ec1b07723143de27950617e0a980e772bb7532ffd55fbb1a355fef3088918eae56fbe07ac158eccaf30038af7466195cc300acd535da28cdc57b863521ded58b6cd2a44895830922e11f7b9858bd2b380af69eb25e83560f524a2e0c74ef22789c1a356efae14895d24132aa2658ecaa6eaff7715ad1fac3af58b539e9ce4f4eb1f4089fc5518568cfd2fa7845c0774f0e114150e5de6e00e718169fea7f8ef0269690cc235eb1f4a244a3dc03f2d263b6f3893962aaa1fbff2ac6272c53a682a2d2d79df8fb838da829f56ba2ff75a46ec75ca176db82345d92e6f9ce583cb131a0a77d164ac2717b4d99d6f0e90d64fa2740a0d321942ca35f5f3fbe744e9fd374014b226ecbba07b57540052deae5e8cf3105031d6c27ba4cd8cab46bbfdc3ee11dc2f163957d64c393fb7b174241bf6639a85a6e95c6daf0d8230442728e965a23e5f26b6db2623482c52252394b73168a92f93fa239a438aed6435ae1709f6661ebfec933e6726752c234310b38e572a0898313e7f91ea672326e7ce3b1f4427d67528df5a584990b2de5adaf920aaccb82d273bc8af72684fcc9cb21d0a67990f4f1ebdfdbef155dae7540d873978083f9e8fcff0fa423c33bfbc8cbe09003f4e30e55adf364834d2c0c292e9e8c0235249af6df1f0764929a8b3904d9bb0506eb74bed9abbf05a36c267ee82412558f71745faf1c33136a08d5b87811c80b48d21437d4649a615a230c2a6ddbf614115b78ae9453bb50c786603f2e300b13eb13c7945b0adbf9abd63fc3914ec9d126257bf32132dd77304cfc9cd2885cbe990ddd1b6688387a2f4e021e26ea9728c3da224f45c1d5bbdfbe3c2aa915567a88bbd6c767374fbc1948572acdacf5d266373bb9e369366197db63c2df5224d5fd61e27fdedaf94745f6a877d9a6b29117b3318b5bcb111ace2d0ccb391c74aef55115eba6adaa72beddb9f5032cc7453bef7857fb32160d21c29d97c9648dccef7edb2192d140d6cdf984e8733a8087855fb4f9295d5c29cd26fa4b67d09284a20a76106faee1f1dcd85af28802eb0c65ecc9e2cfc0b3d5959debb56f1ecaa321a2c026444150d6ff7dfba81c3f055144bb8cc633d39f60988686a2ad10aecda21a570c3c3c7da0bc6a85d5e39cf757c551ef59c8a89db2f36a3e6c84c2ff614e3c604e74ac80674e2125fa01ccaf9d6f7c2f614819d797b9edc250adfa5e9873f648fdf95d775afbd4dc171081d4977f9bd942ff11841886ddb416f70c8e0395579ad127583cca5d02e2b6148ec86e8e47c07836a9dbd16a4a392af67000d6771a1eaf3dbe0f93dfe07f4606ac22ff31ee90b8155ad64948f238ab65928339313ab8ac3e6d9968df65f398d0bee72e467282c31aa177c3092c76689a677d0deee7edbaaeade65757a2d4a9ed628d5e17848e329b66c566fea6a37cd32e7c7bf157d8a9beaee601841adeb42906af4ead0aafcf35e8651412fb46b798ac330a3443013ab9a866dc9c94afa5412912e3e24d11262b3391003b47a38aafae920e433a10c8f587be312f19d9269097288ed2c28c1f5aa7cfea7013e9ae0bd9d7f87f83b3f3d5e27b31cab608302c941e6fe3ec94ed41b4be4ee16c040a571b95cfab4730244dcb1b2ffeb6a14565b0dda429115acc03f4cf6d0749afb53e614d616c5b6336f07f23fb2f7c5850059d98c4b0a95964611379df521c1b285b6d16bbbb18b607ff6506ff81a02d06485b74f9707ce4ac1564cf21343338d2faf584d48038f261ae13f8bdc9a1a4401f5d0884b120633975cfb8a474546e0db6520172bf3d6034d035d97444b89ba6999a73b86b69afc3dbc4bc07d411b29818a6c39ecd783c329086bf331d97d3b9f22933c859e94c2a9805c2240386e00785d3bdb4ee685d70c50d357de8963a2b8d9aaaf7fb1d1cd099b96d53cf0acf48355b4a4a2192f8d050bb8ebf686bcbf5dd112b1ca40c49f7d7755313b84168a540cb61c08a3ae8c129bf556ab96741f7a75e636b219a90f8dcdb8e0e9a2d23261865222be0895fcf78946c1d9e3d43a181de0eacdd8bccab40d806ddd8e1cd065a64260ccaf99752b1e87e75a43e232baa3ff49647845ba519837d9ddd45c71402d65f0a411b4e0bf4422f2c3426e94d61b354031c50a1290b79f552f7f2dcaab010238faedfcfa0f775639894f39a74a9e95143614fe5858fb67f12767d63f1392cd3a4e32415ee31653d8b7dd7ba83470fc50a01403b56e40849c86f84007e216f2722a037a3eac87e5d19c6d830cd7a0331d5397c9af8d79a7434248c031d5a0a169c5fd3b6cb7f8fcae16eadbee84ee4a9e754d1622ec8c5df91baaf2354a2101b5f5fa546f3903e41efb867f6a9de53bf540d9b611404cacf90b25ce1f196395cb695326396808b1cad287343b3cd30e3f4ee6ca8ba77388edc2177db5f7b59c67e30918f929dcc19d193d121e9aa78c419f95fe6d90770275fe1b8488a37400fafdd87a8997034b36c447e8b2cd4e07a782babe75200b3bf3675d3dc17beaf14c05e8f97a1a83f7514df5052d23858e4e428f84430c46154b5a4a01bf5d1c0a50c5c1757e4ea96a600c29383bc4cbe164411c7c02b43008661cea6aaa578dbd4553303b1d97adcc6137a03d42fcb29f3e843037119ba8122d16e34d5f72f7b75e102a9a16b2ea10ec8fcb022aca7cdb282060fa782903b979f031145d79f0273675f8103f2a577f8ed399e59157dd5d86548abdfdf0962525576986f7c7d8c189dbc5b0c36113a38b826fc887f9c413157c3a2130d4fedeedba7e7bb891f077b1597d74d0965f5f7e747fd7da860a6767a8a7a896707e0dfd212fc8662b50c395e54d21100985ceae0b723afefd8aabb214a7e707564fe334d9967949392070c5b018b6b5fe67cc14d63b9855df5bd5bf25c2b2ad889bf1d4df69c66bd365e65afedb05b061932e6f8f3d7cbc635d656fc80a7cc71786824734689b786829bc8676f5fd3b47d722cca98b7e40c58dcdef0b5e42cbd53603fce0646ae843ffea992c812b4689f1e19b7c508b98fd070ced730f82f3111adc3854650b16bd98b72a5a61bedd8f7cdb70566bda49cd7541c84b79ae7e7faff4058614a0c8a84a4f878acec96a84d567c293da765e97fbf61521a4743e3c0957e6d343a09d279b2dd812b8a7d928d1adf4d8966d00a7db8eecfe70a0605cf3597a2867b521fb88c05d62fc17e299559c0883a099664c6645036e9b5e615cb57fd9d4da925462925614063ae050100719b5bc0dd2b61c4860bfac7aa35d2886558f2c54f1900b7cc3b8c83ebcdc8a49380a12f188601260a785effc48952763082c8a13c51f3163586347439313ca62bd478f1c1b69c770d13e40346a1d4782cb8a29e64cfa2bb7dad3d704d95d4fcc8751f1e6918d6ed24d2c29b1c4378d9e3d3be57d0fe8b40858d1afe88dd19c7c7ae8628ca1cfe19efcf847d764730e98e3f85ac11632d68bbb95f88697452c4b102ba6c3569d7a4789d4b8c2e0641297027ea6e039e8554f59063fbbbb27284df6e6b1d66e6b1a03c34e380c31d0dce14b9d26ecf4e6f1ce1104e50fafcab8dc822d130ef90cff590f14e71ffa0778bf7af4720a98613f0df020c91e5fc075ff4002489c618c1875a7d24f276bb54feef5d43437c663a694f9ba3d214a3abd8805c90f032e789a72e36b5f70d42c5a98465939db58b4b0d5f58cd3110c511bf512149fc511c2aadc166c0a2f4bea62ae9796de0966548938368156f7e969841497a1c6c13c2c560076ff958ab261f840a167bab85265f3542c4c072e6125cbbb0dcc79613973461a7721dc2cb0a4571fc4af51fd0509f99e2573ee4412ac4a31648c83d902dcbfa37ac6f43b526d7b3047f18f10ac9a9c65e1b655e4086955f4327ece317937f0613dcc15c2aecd4105854a4cbded2b03d22e1db0f7eac04db852a2090035c15c32975d7d938e2f7aace20841b4d6a1574fe099e3b0897edddf820dcee8682f5c352312c53e5d9bcacce61445e93a8927464eb98bf6019386fce3cd6aa2386d3e3480f82add81a72e16022e31c4252a015ad0456876526e82f7a0c9fad341a41bf6d96328327368079acfe6ee311a735400f01ca7ea7f5cf27b6453a4b0bf839ce9f7e3fcfa5412f0daa4c3f6b75248a819b83e3d51673cab304ab459431864c59ad91c4850c48989d4e798df3e816ad69e7dbe64703f7a07146654cb6c67cc7acbdc66a759625a2f16bb8e73d0d42d939a7752cbcd98a139038139d8219e1a6cea910b671a1c9608932f17fcde1a2d3f4833edb5a2944b49bcede8d6ed8ccfca00ca75f4156af85930b1ad6320320c4d17c78fe315d9ba7b8ad888cb985151e9e023995cc4159c16e05e29ee08d1be7fb63b62cd806585e9c1b398eab454558dea9587c6bcc7dd75d29a09ba5e89293c50386607d9a83a83b043163d2ad02583106fb865627eca2efdeb13d3923580b20c17a28287f3e968489d178250be33e9fcd23f44129fce4ae750988b6a13651796a435044635129af6a4b3c72430ecba8c8518af117ec1d4f18a848fb1f8c93abb27ac2e55a2e07e9be8875ef1002b46ec0b87edb05aa1289eab445d32c1f005b04c335d90c2e76ec7b88150affc2a2d0a990cdd7d2f91e1db6a3cf22a86916f99379939c940e751165fa97935516047b66a0f196547ec6a0e6b3ee5dcf6866def73b9ba07c1b529bdbd348765fcf2b0c7debcca358255eac37c67997832eeb6cb97797d652e6b90485f2d5a673fc120bc8350257c4da78b6f0bff55d7df5727bb08457eb07d1496c774a30af020e55cd3aeb5f9950822e766b885ca14cb287464aa5268efe15baab00bbafb3cc291b5d51edce1df23bdb54e5ce200bcd9e57937b65e3645a626ca2eb5bb3bc3d85299988fce1286ed63289d24d577ed4f31478bd1ee8f027f00b975bb8558d15613c0141e4fdfa2bda97b4d82d7b87865552b3709b2726d0d4c1d8df14ff51cb55edafc93492eb2a3b3c1138aae39a2f8a543e649d65e44badac12b8fc37f0b8f4c2c48b67feafe52cabb39ae3fe7fba028ffc575cf8058e04e01d16237ab4ca8715149561a121d62f1cbe44c30055b93908c271aa98963d6bc586cfd548937929fd848d6ff9499fb36fec0605b0b75957f0a53a938f3b9c797647857e2ece1a6aa58f131fd5ae8a8d6444775d8c43dfc6dfd246291cbd25084adbfef841d1c65b50998fd06167e8bf73b08d9f9c2ccfa4148f038ec5c47650c7e68e64796551267cf0fbe7c1afd231cf865387019c4ec14a3d1fe96a8bac071136cb461ff4812d241b64337500ecdadfea5888f188d510820d7b7a1d7d28b26f21865042777ab4e52fe764dc5123b57346e267cb90982cdf47e31988f63c43ea965c652d2698fb231c9fff9e8dc068fcb4cb01f7578d4ca0753f5e5d58cded166a4c0", 0x1000}, 0x68) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x5}]}]}], {0x14}}, 0x68}}, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) r9 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) mmap$dsp(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x100000f, 0x11, r9, 0x0) statx(r5, &(0x7f0000000540)='./file0\x00', 0x4000, 0x100, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000480), 0x2028, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noxattr}, {@privport}, {@access_client}, {@aname={'aname', 0x3d, 'syz1\x00'}}, {@access_uid={'access', 0x3d, r8}}], [{@obj_type={'obj_type', 0x3d, 'syz1\x00'}}, {@euid_lt={'euid<', r10}}]}}) 1.639538195s ago: executing program 4 (id=326): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='4', 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x202, 0x109) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = openat(0xffffffffffffff9c, 0x0, 0x208800, 0x4) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x68) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) r4 = open(&(0x7f0000000280)='.\x00', 0xc8180, 0x0) fcntl$notify(r4, 0x402, 0x4000000c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x1000f) 1.09511877s ago: executing program 1 (id=328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f0000000380)=ANY=[], 0x200002e6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) 1.030374197s ago: executing program 4 (id=329): socket$inet6_sctp(0xa, 0x1, 0x84) write$9p(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') write$apparmor_current(0xffffffffffffffff, 0x0, 0x1d) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 768.623717ms ago: executing program 4 (id=330): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="5c00000013006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514001ac0080002008100020006a101c00364683b9dad7aa21240d69a6a8184f6c551ae60fc91", 0x46}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) 609.723449ms ago: executing program 4 (id=331): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)={0x58, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000000) close_range(r0, r1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r3, &(0x7f00000091c0)=""/16384, 0x4000) 463.083341ms ago: executing program 3 (id=333): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40080, 0x0) preadv2(r0, 0x0, 0x0, 0x2, 0x4, 0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x18b682) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000100)=0xffffffff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 355.334404ms ago: executing program 3 (id=334): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) 256.03946ms ago: executing program 3 (id=335): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009200)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40012043, 0x0) 254.150184ms ago: executing program 3 (id=336): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000340)={&(0x7f0000000000)=0x9, 0x8001, &(0x7f0000000180)=[{}, {}], &(0x7f0000000300)}) listen(r0, 0x5) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) sendto$inet(r1, &(0x7f0000000040)="bbcf635e679b03b161c217f7efae6884d290e75f", 0x14, 0x44044, 0x0, 0x0) futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f00000000c0)=0x200000006, 0x6}], 0x1, 0x0, 0x0, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000006c0)={0x2020}, 0x2020) 158.16236ms ago: executing program 3 (id=337): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x34, 0x9, 0x6, 0x801, 0x0, 0x21000000, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) fanotify_init(0x8, 0x400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000000)={'gre0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x2710, @local}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001080)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@broadcast}}, &(0x7f0000001180)=0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000011c0)={[{@uuid_auto, 0x3a}], [{@subj_role={'subj_role', 0x3d, '#'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@dont_measure}, {@smackfsroot={'smackfsroot', 0x3d, '[-'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@hash}], 0x2f}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808006}, 0x8) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 117.893103ms ago: executing program 3 (id=338): syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0xe, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x48, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0x0, 0x80008071, 0x7, 0x8, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x3, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x4, 0xc8, 0xf9, 0xe, 0x2c0, 0x7, 0x209, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x8000047, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x24f, 0x42, 0x3], [0x7, 0x408, 0x2, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x0, 0x4, 0x2950bfaf, 0x1000, 0x4b2760ed, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x0, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x1, 0x8, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x201, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x2, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x6b, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x9, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x400007, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = socket$pptp(0x18, 0x1, 0x2) ppoll(&(0x7f00000000c0)=[{r0}, {}], 0x2, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000400)={@val={0x0, 0x891f}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x6000, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0x8}}}}}}, 0x2e) ioctl$TIOCSRS485(r3, 0x542f, &(0x7f0000000680)={0x8, 0x8001, 0x7}) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000540)={0x0, 0x1, 0x1, 0x8}, &(0x7f0000000580)=0x10) sendmsg$inet_sctp(r3, &(0x7f0000000640)={&(0x7f0000000280)=@in={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000500)=[{&(0x7f00000002c0)="866255e7c71ff384355e9a141b44e45451766eff40231911241b3da9d747d191eae472215e7db237f53fe183530768218ea47b386f3dbfa6f28d70132d6feaa31d2bb9cabf00cc284ef5ef83451e6298bcef8717b7a130ad95", 0x59}, {&(0x7f0000000340)="4d212c209878ece32479002cc78616d790825b5703fd01cf5ff6cc72b8478aefe3a7ca2a5af67bb3b8a13b082c3c8c0e7f6a42338726b36d40c9e14ea1b53b64018fc8e1aaf93d838e975f6850c67896be1c7c324376ef20e8e0d55e36e7cb2cbb19456beeff840456b5300bece9d35e", 0x70}, {&(0x7f00000003c0)="0b7a322adc321f78bc4c3c9aed60d0cc6dab54b9ccb59adb66dee88224ee769735", 0x21}, {&(0x7f0000000440)="115e071d3c88ac948a9d3808fe0b3b0b6679553d775b1d14e47b244f33ae5dfbd5578995a46fa6d16527a553f937b86d0b87e1a0be383473d1682c7334d6b47c0c2188d7324d9bf796358e6ad37057c05a7b605fe5418a8b7677309a1b7c832f766ca843dacea223f843a263ce0e69be185f94d19264a90108c38f324e83187a108cdad12b30dd3db1829301a458", 0x8e}], 0x4, &(0x7f00000005c0)=[@authinfo={0x18, 0x84, 0x6, {0xb0b0}}, @authinfo={0x18, 0x84, 0x6, {0x3}}, @sndrcv={0x30, 0x84, 0x1, {0x1325, 0x3, 0x4, 0x9, 0xfffff001, 0xd, 0x7, 0x100, r4}}, @authinfo={0x18, 0x84, 0x6, {0xac00}}], 0x78, 0x80}, 0x20004804) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='illinois', 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="a68770a2", 0x4, 0x24040001, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0xd}, 0x1c) 97.203713ms ago: executing program 0 (id=339): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="5c00000013006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514001ac0080002008100020006a101c00364683b9dad7aa21240d69a6a8184f6c551ae60fc91", 0x46}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) 36.336944ms ago: executing program 0 (id=340): setns(0xc9, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) sendmsg$tipc(r1, &(0x7f0000001d80)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x88000) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, 0x0}}], 0x1, 0x20040804) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'veth1_macvtap\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x44}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x38, [0xb, 0xc957, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0xc, 0x5, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x5, 0x4, 0x3, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0x12, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x6, 0x4, 0x1, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6cb, 0x2, 0xfffffffc, 0x3, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x0, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0xd, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x2000c, 0x8, 0x9, 0x9, 0x47, 0x60f6, 0x2, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6bc, 0xbc45, 0x48c93690, 0xffffffff, 0x1], [0x7, 0x408, 0x8004, 0x6, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x30000, 0x3, 0x30f0, 0x7, 0xb, 0x8, 0x9, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x7, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x2, 0x7, 0x8c8, 0x2000ac, 0xfffffffe, 0x1000, 0x7ff, 0x125, 0x4, 0x8, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x6, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x6, 0xfffffffe, 0x80000003, 0x1006, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x1, 0x7e, 0xfa4, 0x9602, 0x7, 0x7ff, 0x8, 0x4, 0xffffffff, 0x5, 0x45, 0xc, 0x30b9d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) sendto(r0, &(0x7f0000000140)="82981f4e5560b35ea46fff45496a56919263aea382b94e40ffb956df07cd8b28b3a7a1868d617cd796947a7caf1363b7f346bfcdb5b1744853794d8e3e4d99f0f46abc89542103343228d4f8e80d9d75bdef3f828574a1286822b8734274d10a4664d9a22e1f7d1a79c2f4743d52b341903a2d389fdd31726a77d54b6b670cc5e7c10e7c40d862291f6e979c85767a523fc7ddb67efc2b668dbfffc0dd7e9824abb03564fdb07faf98fbdbb58bdbd5fb784de29cd1a92273f335e9afa0f9b72ae27c9a43300657dda9db3d786318d817f383d7092a80993d1276119291e667f19bae2651828e36b85805c4", 0xeb, 0x2000000, &(0x7f0000000240)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r5 = epoll_create(0x5) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000480)={0x1, {{0x2, 0x4e23, @multicast1}}}, 0x88) close(0x3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x11}) close(0x3) 0s ago: executing program 1 (id=341): recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000880)='tracefs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000880)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) mount$9p_rdma(&(0x7f0000000040), &(0x7f0000000080)='dir0\x00', &(0x7f00000000c0), 0x975405, &(0x7f0000000480)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@rq={'rq', 0x3d, 0x100000001}}, {@rq={'rq', 0x3d, 0x3}}, {@sq={'sq', 0x3d, 0x7}}, {@sq={'sq', 0x3d, 0x6}}, {@timeout={'timeout', 0x3d, 0x3}}, {@sq={'sq', 0x3d, 0x4}}, {@sq={'sq', 0x3d, 0x9}}, {@common=@version_9p2000}, {@rq={'rq', 0x3d, 0x5}}], [{@fsmagic={'fsmagic', 0x3d, 0x4}}, {@subj_role={'subj_role', 0x3d, ']'}}, {@obj_role={'obj_role', 0x3d, '+k'}}, {@obj_type={'obj_type', 0x3d, '/'}}, {@obj_type={'obj_type', 0x3d, 'tracefs\x00'}}, {@subj_role={'subj_role', 0x3d, '1\x00'}}, {@audit}, {@obj_type={'obj_type', 0x3d, '%&!-:]\\\x89!'}}]}}) (async) mount$9p_rdma(&(0x7f0000000040), &(0x7f0000000080)='dir0\x00', &(0x7f00000000c0), 0x975405, &(0x7f0000000480)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@rq={'rq', 0x3d, 0x100000001}}, {@rq={'rq', 0x3d, 0x3}}, {@sq={'sq', 0x3d, 0x7}}, {@sq={'sq', 0x3d, 0x6}}, {@timeout={'timeout', 0x3d, 0x3}}, {@sq={'sq', 0x3d, 0x4}}, {@sq={'sq', 0x3d, 0x9}}, {@common=@version_9p2000}, {@rq={'rq', 0x3d, 0x5}}], [{@fsmagic={'fsmagic', 0x3d, 0x4}}, {@subj_role={'subj_role', 0x3d, ']'}}, {@obj_role={'obj_role', 0x3d, '+k'}}, {@obj_type={'obj_type', 0x3d, '/'}}, {@obj_type={'obj_type', 0x3d, 'tracefs\x00'}}, {@subj_role={'subj_role', 0x3d, '1\x00'}}, {@audit}, {@obj_type={'obj_type', 0x3d, '%&!-:]\\\x89!'}}]}}) write$binfmt_format(r1, &(0x7f00000001c0)='1\x00', 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x10, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x10, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1010901923b858508950159309102c0"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1010901923b858508950159309102c0"], 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) write(r4, &(0x7f0000000140)='A123=1\n', 0x7) (async) write(r4, &(0x7f0000000140)='A123=1\n', 0x7) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x5, &(0x7f0000002080)) ptrace$cont(0x9, r6, 0x7, 0x1) ptrace$cont(0x21, r6, 0x80000001, 0x4) (async) ptrace$cont(0x21, r6, 0x80000001, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a8001600200003400000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a836cca75a061981c2dce2def5c0008c3dd00d0c2", 0xd0}], 0x1}, 0x0) (async) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a8001600200003400000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a836cca75a061981c2dce2def5c0008c3dd00d0c2", 0xd0}], 0x1}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): 7017][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.950862][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.961341][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.977343][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.981339][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.002171][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.012717][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.040888][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.045030][ T5623] Bluetooth: hci3: command tx timeout [ 90.102592][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.123971][ T3052] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.124095][ T3052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.134979][ T54] Bluetooth: hci2: command tx timeout [ 90.135212][ T5623] Bluetooth: hci1: command tx timeout [ 90.185478][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.185555][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.209737][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.214067][ T5623] Bluetooth: hci0: command tx timeout [ 90.294104][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.306375][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.306746][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.342241][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.352035][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.359417][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.359967][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.452201][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.468313][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.512027][ T3052] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.512137][ T3052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.528943][ T3052] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.529245][ T3052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.582123][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.582245][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.596723][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.597006][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.492456][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.655473][ T5615] veth0_vlan: entered promiscuous mode [ 91.696660][ T5615] veth1_vlan: entered promiscuous mode [ 91.810602][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.817024][ T5615] veth0_macvtap: entered promiscuous mode [ 91.842601][ T5615] veth1_macvtap: entered promiscuous mode [ 91.861294][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.915428][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.920469][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.959225][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.982452][ T991] cfg80211: failed to load regulatory.db [ 92.075213][ T5616] veth0_vlan: entered promiscuous mode [ 92.086602][ T5613] veth0_vlan: entered promiscuous mode [ 92.095564][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.096734][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.097290][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.135429][ T5623] Bluetooth: hci3: command tx timeout [ 92.141049][ T3378] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.162039][ T5614] veth0_vlan: entered promiscuous mode [ 92.168697][ T5616] veth1_vlan: entered promiscuous mode [ 92.191060][ T5613] veth1_vlan: entered promiscuous mode [ 92.213698][ T54] Bluetooth: hci2: command tx timeout [ 92.214046][ T5623] Bluetooth: hci1: command tx timeout [ 92.238536][ T5614] veth1_vlan: entered promiscuous mode [ 92.258510][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.258541][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.283117][ T5623] Bluetooth: hci0: command tx timeout [ 92.340509][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.340532][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.370857][ T5613] veth0_macvtap: entered promiscuous mode [ 92.377910][ T5616] veth0_macvtap: entered promiscuous mode [ 92.401005][ T5614] veth0_macvtap: entered promiscuous mode [ 92.410651][ T5616] veth1_macvtap: entered promiscuous mode [ 92.430335][ T5614] veth1_macvtap: entered promiscuous mode [ 92.437445][ T5613] veth1_macvtap: entered promiscuous mode [ 92.498915][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.499509][ T5615] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.502687][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.545072][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.549474][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.552734][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.584304][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.711481][ T86] Bluetooth: hci4: Frame reassembly failed (-90) [ 92.720011][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 92.830550][ T5774] Bluetooth: hci4: Frame reassembly failed (-84) [ 92.839129][ T5774] Bluetooth: hci4: Frame reassembly failed (-84) [ 92.847918][ T5774] Bluetooth: hci4: Frame reassembly failed (-84) [ 92.878224][ T3378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.878245][ T3378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.933121][ T3378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.933141][ T3378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.963258][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.964138][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.007461][ T3378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.007484][ T3378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.060354][ T3378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.060376][ T3378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.094838][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.094867][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.133925][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.133948][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.173459][ T161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.173810][ T161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.173982][ T161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.174130][ T161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.174280][ T161] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.174461][ T161] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.174607][ T161] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.183348][ T86] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.263353][ T161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.293051][ T161] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.509806][ T5780] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.203714][ T54] Bluetooth: hci3: command tx timeout [ 94.283616][ T54] Bluetooth: hci1: command tx timeout [ 94.283654][ T54] Bluetooth: hci2: command tx timeout [ 94.286791][ T5792] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5'. [ 94.289280][ T5792] Bluetooth: MGMT ver 1.23 [ 94.363883][ T5625] Bluetooth: hci0: command tx timeout [ 94.546345][ T5786] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 94.763596][ T5625] Bluetooth: hci4: command 0x1003 tx timeout [ 94.763712][ T5623] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 95.088795][ T5777] syz.0.1 (5777): drop_caches: 2 [ 95.347780][ T5795] Zero length message leads to an empty skb [ 95.434246][ T33] audit: type=1326 audit(1790852203.619:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5804 comm="syz.3.9" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c88d9e159 code=0x0 [ 95.494392][ T5723] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.544549][ T5806] tipc: Started in network mode [ 95.544591][ T5806] tipc: Node identity ac14142f, cluster identity 4711 [ 95.545337][ T5806] tipc: New replicast peer: 127.0.0.1 [ 95.546730][ T5806] tipc: Enabled bearer , priority 10 [ 95.662878][ T5723] usb 1-1: Using ep0 maxpacket: 8 [ 95.664643][ T5723] usb 1-1: New USB device found: idVendor=054c, idProduct=042f, bcdDevice=0.00 [ 95.667111][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.667144][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.667168][ T5723] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.667222][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.710320][ T5723] usb 1-1: config 0 descriptor?? [ 95.862900][ T5716] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.992918][ T5716] usb 3-1: device descriptor read/64, error -71 [ 96.176851][ T33] audit: type=1326 audit(1790852204.359:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.1.13" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58db79e159 code=0x7fc00000 [ 96.219775][ T5723] sony 0003:054C:042F.0001: unknown main item tag 0x0 [ 96.219813][ T5723] sony 0003:054C:042F.0001: unknown main item tag 0x0 [ 96.219841][ T5723] sony 0003:054C:042F.0001: unknown main item tag 0x0 [ 96.219868][ T5723] sony 0003:054C:042F.0001: unknown main item tag 0x0 [ 96.219895][ T5723] sony 0003:054C:042F.0001: unknown main item tag 0x0 [ 96.219922][ T5723] sony 0003:054C:042F.0001: unknown main item tag 0x0 [ 96.219948][ T5723] sony 0003:054C:042F.0001: unbalanced collection at end of report description [ 96.221880][ T5723] sony 0003:054C:042F.0001: parse failed [ 96.221990][ T5723] sony 0003:054C:042F.0001: probe with driver sony failed with error -22 [ 96.250774][ T5716] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.330254][ T5817] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 96.387152][ T9] usb 1-1: USB disconnect, device number 2 [ 96.402850][ T5716] usb 3-1: device descriptor read/64, error -71 [ 96.513481][ T5716] usb usb3-port1: attempt power cycle [ 96.544112][ T5723] tipc: Node number set to 2886997039 [ 96.847928][ T33] audit: type=1326 audit(1790852205.029:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.1.13" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f58db79e159 code=0x7fc00000 [ 96.880124][ T5716] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.904402][ T5716] usb 3-1: device descriptor read/8, error -71 [ 97.154902][ T5716] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 97.162608][ T5847] 9p: Could not find request transport: f= [ 97.182607][ T5716] usb 3-1: device descriptor read/8, error -71 [ 97.283539][ T5716] usb usb3-port1: unable to enumerate USB device [ 97.351485][ T5854] capability: warning: `syz.0.19' uses 32-bit capabilities (legacy support in use) [ 97.922896][ T32] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.060945][ T5868] kvm [5867]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 98.061043][ T5868] kvm [5867]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 98.066125][ T5868] kvm [5867]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 98.080345][ T5868] kvm [5867]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 98.080535][ T5868] kvm [5867]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 98.090034][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 98.114409][ T32] usb 4-1: New USB device found: idVendor=054c, idProduct=042f, bcdDevice=0.00 [ 98.115562][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.115592][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.115616][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.115655][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.168599][ T32] usb 4-1: config 0 descriptor?? [ 98.585209][ T5736] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.616048][ T32] sony 0003:054C:042F.0002: unknown main item tag 0x0 [ 98.616086][ T32] sony 0003:054C:042F.0002: unknown main item tag 0x0 [ 98.616192][ T32] sony 0003:054C:042F.0002: unbalanced collection at end of report description [ 98.617012][ T32] sony 0003:054C:042F.0002: parse failed [ 98.617120][ T32] sony 0003:054C:042F.0002: probe with driver sony failed with error -22 [ 98.745031][ T5736] usb 2-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 98.748518][ T5736] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.748573][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.785787][ T5736] usb 2-1: config 0 descriptor?? [ 98.808837][ T5736] pwc: Askey VC010 type 2 USB webcam detected. [ 98.823218][ T5723] usb 4-1: USB disconnect, device number 2 [ 99.112900][ T32] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 99.154904][ T5701] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.195451][ T5736] pwc: recv_control_msg error -32 req 02 val 2b00 [ 99.196426][ T5736] pwc: recv_control_msg error -32 req 02 val 2700 [ 99.197021][ T5736] pwc: recv_control_msg error -32 req 02 val 2c00 [ 99.197573][ T5736] pwc: recv_control_msg error -32 req 04 val 1000 [ 99.198093][ T5736] pwc: recv_control_msg error -32 req 04 val 1300 [ 99.200974][ T5874] netlink: 52 bytes leftover after parsing attributes in process `syz.1.26'. [ 99.202096][ T5736] pwc: recv_control_msg error -32 req 04 val 1400 [ 99.261419][ T5874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.262391][ T5874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.273854][ T5736] pwc: recv_control_msg error -71 req 02 val 2000 [ 99.276517][ T5736] pwc: recv_control_msg error -71 req 02 val 2100 [ 99.291820][ T5736] pwc: recv_control_msg error -71 req 04 val 1500 [ 99.292725][ T5736] pwc: recv_control_msg error -71 req 02 val 2500 [ 99.296048][ T5736] pwc: recv_control_msg error -71 req 02 val 2400 [ 99.297607][ T5736] pwc: recv_control_msg error -71 req 02 val 2600 [ 99.299738][ T5736] pwc: recv_control_msg error -71 req 02 val 2900 [ 99.300848][ T5736] pwc: recv_control_msg error -71 req 02 val 2800 [ 99.306745][ T5736] pwc: recv_control_msg error -71 req 04 val 1100 [ 99.307641][ T5736] pwc: recv_control_msg error -71 req 04 val 1200 [ 99.331239][ T5736] pwc: Registered as video103. [ 99.335123][ T32] usb 3-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 99.355223][ T5701] usb 1-1: Using ep0 maxpacket: 32 [ 99.364775][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.364846][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.375501][ T5736] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 99.381753][ T5701] usb 1-1: New USB device found: idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 99.412670][ T32] usb 3-1: config 0 descriptor?? [ 99.418027][ T5701] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.418054][ T5701] usb 1-1: config 0 has no interfaces? [ 99.438551][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.438579][ T5701] usb 1-1: Product: syz [ 99.438594][ T5701] usb 1-1: Manufacturer: syz [ 99.438609][ T5701] usb 1-1: SerialNumber: syz [ 99.487906][ T5701] usb 1-1: config 0 descriptor?? [ 99.506887][ T32] pwc: Askey VC010 type 2 USB webcam detected. [ 99.569985][ T5736] usb 2-1: USB disconnect, device number 2 [ 99.716148][ T991] usb 1-1: USB disconnect, device number 3 [ 99.852431][ T32] pwc: recv_control_msg error -32 req 02 val 2b00 [ 99.862986][ T32] pwc: recv_control_msg error -32 req 02 val 2700 [ 99.874744][ T5882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.886340][ T5882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.898834][ T32] pwc: recv_control_msg error -32 req 02 val 2c00 [ 99.920054][ T32] pwc: recv_control_msg error -32 req 04 val 1000 [ 99.932559][ T5882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.945727][ T5882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.962744][ T32] pwc: recv_control_msg error -32 req 04 val 1300 [ 99.966697][ T32] pwc: recv_control_msg error -32 req 04 val 1400 [ 100.195765][ T5882] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 100.221153][ T5882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.233278][ T5882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.235181][ T32] pwc: recv_control_msg error -71 req 02 val 2100 [ 100.237265][ T32] pwc: recv_control_msg error -71 req 04 val 1500 [ 100.238485][ T32] pwc: recv_control_msg error -71 req 02 val 2500 [ 100.238919][ T32] pwc: recv_control_msg error -71 req 02 val 2400 [ 100.239370][ T32] pwc: recv_control_msg error -71 req 02 val 2600 [ 100.239819][ T32] pwc: recv_control_msg error -71 req 02 val 2900 [ 100.240269][ T32] pwc: recv_control_msg error -71 req 02 val 2800 [ 100.240903][ T32] pwc: recv_control_msg error -71 req 04 val 1100 [ 100.241961][ T32] pwc: recv_control_msg error -71 req 04 val 1200 [ 100.281139][ T32] pwc: Registered as video103. [ 100.342234][ T32] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 100.401329][ T32] usb 3-1: USB disconnect, device number 6 [ 100.676651][ T991] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 100.723980][ T991] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 100.823205][ T161] Bluetooth: hci4: Frame reassembly failed (-90) [ 100.994975][ T5907] Bluetooth: hci4: Frame reassembly failed (-84) [ 100.997823][ T5907] Bluetooth: hci4: Frame reassembly failed (-84) [ 101.010715][ T5907] Bluetooth: hci4: Frame reassembly failed (-84) [ 101.137836][ T5885] syz.3.30 (5885): drop_caches: 2 [ 101.445827][ T5701] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.573590][ T5701] usb 2-1: device descriptor read/64, error -71 [ 101.732972][ T991] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 101.832963][ T5701] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.882887][ T991] usb 3-1: Using ep0 maxpacket: 8 [ 101.883611][ T991] usb 3-1: New USB device found: idVendor=054c, idProduct=042f, bcdDevice=0.00 [ 101.885407][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.885439][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.885466][ T991] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.885526][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.890169][ T991] usb 3-1: config 0 descriptor?? [ 101.963341][ T5701] usb 2-1: device descriptor read/64, error -71 [ 102.085900][ T5701] usb usb2-port1: attempt power cycle [ 102.316397][ T991] sony 0003:054C:042F.0004: unknown main item tag 0x0 [ 102.316437][ T991] sony 0003:054C:042F.0004: unknown main item tag 0x0 [ 102.316465][ T991] sony 0003:054C:042F.0004: unbalanced collection at end of report description [ 102.318528][ T991] sony 0003:054C:042F.0004: parse failed [ 102.318642][ T991] sony 0003:054C:042F.0004: probe with driver sony failed with error -22 [ 102.423706][ T5701] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 102.443965][ T5701] usb 2-1: device descriptor read/8, error -71 [ 102.512740][ T991] usb 3-1: USB disconnect, device number 7 [ 102.593414][ T5929] netlink: 'syz.3.43': attribute type 10 has an invalid length. [ 102.593438][ T5929] netlink: 168 bytes leftover after parsing attributes in process `syz.3.43'. [ 102.682897][ T5701] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.703878][ T5701] usb 2-1: device descriptor read/8, error -71 [ 102.726089][ T5935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.44'. [ 102.726112][ T5935] netlink: 268 bytes leftover after parsing attributes in process `syz.3.44'. [ 102.726127][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 102.726141][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 102.726154][ T5935] netlink: 149 bytes leftover after parsing attributes in process `syz.3.44'. [ 102.726822][ T5935] autofs: Unknown parameter '@' [ 102.813293][ T5701] usb usb2-port1: unable to enumerate USB device [ 102.857496][ T5623] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 102.963299][ T32] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.112863][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 103.113656][ T32] usb 4-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 103.116478][ T32] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 103.116502][ T32] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 103.116523][ T32] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 103.116568][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 103.116589][ T32] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 103.116640][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 103.116681][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.126798][ T32] usb 4-1: config 0 descriptor?? [ 103.353839][ T32] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 103.558804][ T32] usb 4-1: USB disconnect, device number 3 [ 103.598174][ T32] usblp0: removed [ 103.813037][ T991] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 103.953174][ T991] usb 3-1: device descriptor read/64, error -71 [ 104.013005][ T5736] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 104.113053][ T32] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.163670][ T5736] usb 2-1: Using ep0 maxpacket: 8 [ 104.164441][ T5736] usb 2-1: New USB device found: idVendor=054c, idProduct=042f, bcdDevice=0.00 [ 104.165597][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.165628][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.165653][ T5736] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.165697][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.169376][ T5736] usb 2-1: config 0 descriptor?? [ 104.202615][ T991] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 104.257327][ T33] audit: type=1326 audit(1790852212.439:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.3.58" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c88d9e159 code=0x0 [ 104.322864][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 104.323628][ T32] usb 1-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 104.324700][ T32] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 104.324749][ T32] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 104.324778][ T32] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.324805][ T32] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 104.326903][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.326929][ T32] usb 1-1: Product: syz [ 104.326945][ T32] usb 1-1: Manufacturer: syz [ 104.326962][ T32] usb 1-1: SerialNumber: syz [ 104.344724][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 104.359189][ T991] usb 3-1: device descriptor read/64, error -71 [ 104.394017][ T32] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input7 [ 104.463434][ T991] usb usb3-port1: attempt power cycle [ 104.562863][ T32] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 104.562885][ T32] (id 0x00) [ 104.631699][ T5736] sony 0003:054C:042F.0005: unknown main item tag 0x0 [ 104.631735][ T5736] sony 0003:054C:042F.0005: unknown main item tag 0x0 [ 104.631760][ T5736] sony 0003:054C:042F.0005: unbalanced collection at end of report description [ 104.633815][ T5736] sony 0003:054C:042F.0005: parse failed [ 104.634090][ T5736] sony 0003:054C:042F.0005: probe with driver sony failed with error -22 [ 104.664873][ T32] rc_core: IR keymap rc-imon-pad not found [ 104.664891][ T32] Registered IR keymap rc-empty [ 104.665190][ T32] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 104.665210][ T32] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 104.771185][ T32] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 104.785050][ T32] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input8 [ 104.789859][ T32] imon 1-1:155.0: iMON device (15c2:ffdc) on usb<1:4> initialized [ 104.804617][ T991] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 104.834263][ T991] usb 3-1: device descriptor read/8, error -71 [ 104.842539][ T32] usb 2-1: USB disconnect, device number 7 [ 105.072898][ T991] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 105.093598][ T991] usb 3-1: device descriptor read/8, error -71 [ 105.205342][ T991] usb usb3-port1: unable to enumerate USB device [ 105.364762][ T5974] imon:send_packet: task interrupted [ 105.364842][ T5974] imon:send_packet: packet tx failed (-512) [ 105.365960][ T5974] imon:vfd_write: send packet #1 failed [ 105.368555][ T5974] imon:send_packet: packet tx failed (-32) [ 105.397115][ T5974] imon:vfd_write: send packet #0 failed [ 105.472982][ T991] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.513505][ T32] usb 1-1: USB disconnect, device number 4 [ 105.622884][ T991] usb 4-1: Using ep0 maxpacket: 32 [ 105.623700][ T991] usb 4-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 105.625190][ T991] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 105.625260][ T991] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 105.625283][ T991] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.625304][ T991] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 105.631048][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.631077][ T991] usb 4-1: Product: syz [ 105.631098][ T991] usb 4-1: Manufacturer: syz [ 105.631110][ T991] usb 4-1: SerialNumber: syz [ 105.654669][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 105.658829][ T991] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input9 [ 105.862912][ T991] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 105.862929][ T991] (id 0x00) [ 105.923050][ T991] rc_core: IR keymap rc-imon-pad not found [ 105.923067][ T991] Registered IR keymap rc-empty [ 105.923129][ T991] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 105.923142][ T991] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 106.075646][ T991] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 106.079790][ T33] audit: type=1326 audit(1790852214.259:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.0.63" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe13ef9e159 code=0x0 [ 106.080432][ T991] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input10 [ 106.088582][ T5982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.103621][ T991] imon 4-1:155.0: iMON device (15c2:ffdc) on usb<4:4> initialized [ 106.253870][ T5973] FAULT_INJECTION: forcing a failure. [ 106.253870][ T5973] name failslab, interval 1, probability 0, space 0, times 0 [ 106.253924][ T5973] CPU: 0 UID: 0 PID: 5973 Comm: syz.3.61 Not tainted syzkaller #0 PREEMPT(full) [ 106.253952][ T5973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.253975][ T5973] Call Trace: [ 106.253988][ T5973] [ 106.253998][ T5973] dump_stack_lvl+0xe8/0x150 [ 106.254036][ T5973] should_fail_ex+0x3eb/0x540 [ 106.254067][ T5973] should_failslab+0xa8/0x100 [ 106.254105][ T5973] __kmalloc_noprof+0xf9/0x710 [ 106.254130][ T5973] ? rcu_is_watching+0x16/0xb0 [ 106.254168][ T5973] ? tomoyo_realpath_from_path+0xef/0x640 [ 106.254195][ T5973] ? tomoyo_realpath_from_path+0xef/0x640 [ 106.254240][ T5973] tomoyo_realpath_from_path+0xef/0x640 [ 106.254281][ T5973] ? tomoyo_path_number_perm+0x219/0x5f0 [ 106.254319][ T5973] tomoyo_path_number_perm+0x246/0x5f0 [ 106.254359][ T5973] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 106.254394][ T5973] ? __lock_acquire+0x747/0x2de0 [ 106.254466][ T5973] ? __fget_files+0x2a/0x420 [ 106.254495][ T5973] ? __fget_files+0x2a/0x420 [ 106.254522][ T5973] ? __fget_files+0x2a/0x420 [ 106.254579][ T5973] security_file_ioctl+0xc3/0x2a0 [ 106.254623][ T5973] __se_sys_ioctl+0x47/0x170 [ 106.254659][ T5973] do_syscall_64+0x166/0x520 [ 106.254688][ T5973] ? trace_irq_disable+0x3b/0x140 [ 106.254716][ T5973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.254738][ T5973] ? clear_bhb_loop+0x70/0xc0 [ 106.254767][ T5973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.254791][ T5973] RIP: 0033:0x7f2c88d9ddeb [ 106.254822][ T5973] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 106.254841][ T5973] RSP: 002b:00007f2c89c1ef50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.254866][ T5973] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f2c88d9ddeb [ 106.254884][ T5973] RDX: 00007f2c89c1ffe0 RSI: 0000000080085502 RDI: 0000000000000003 [ 106.254900][ T5973] RBP: 00007f2c89c21090 R08: 0000000000000000 R09: 0000000000000000 [ 106.254915][ T5973] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 106.254936][ T5973] R13: 0000000000000000 R14: 00007f2c89025fa0 R15: 00007ffe41b8c978 [ 106.254971][ T5973] [ 106.263878][ T5973] ERROR: Out of memory at tomoyo_realpath_from_path. [ 106.643196][ T33] audit: type=1804 audit(1790852214.819:7): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.66" name="/newroot/14/trace/trace" dev="tracefs" ino=3049 res=1 errno=0 [ 106.677341][ T5986] imon:send_packet: task interrupted [ 106.677357][ T5986] imon:send_packet: packet tx failed (-512) [ 106.677399][ T5986] imon:vfd_write: send packet #1 failed [ 106.677811][ T5986] imon:send_packet: packet tx failed (-32) [ 106.693019][ T5986] imon:vfd_write: send packet #0 failed [ 106.809901][ T991] usb 4-1: USB disconnect, device number 4 [ 106.830320][ T33] audit: type=1326 audit(1790852215.009:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.2.68" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd650f9e159 code=0x0 [ 108.184342][ T6052] netlink: 'syz.1.82': attribute type 12 has an invalid length. [ 108.266352][ T6057] FAULT_INJECTION: forcing a failure. [ 108.266352][ T6057] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 108.266385][ T6057] CPU: 0 UID: 0 PID: 6057 Comm: syz.2.83 Not tainted syzkaller #0 PREEMPT(full) [ 108.266410][ T6057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.266423][ T6057] Call Trace: [ 108.266432][ T6057] [ 108.266441][ T6057] dump_stack_lvl+0xe8/0x150 [ 108.266476][ T6057] should_fail_ex+0x3eb/0x540 [ 108.266506][ T6057] prepare_alloc_pages+0x21e/0x5f0 [ 108.266539][ T6057] __alloc_frozen_pages_noprof+0x17a/0x400 [ 108.266572][ T6057] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 108.266598][ T6057] ? __alloc_frozen_pages_noprof+0x24a/0x400 [ 108.266629][ T6057] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 108.266678][ T6057] __alloc_pages_noprof+0x10/0x100 [ 108.266707][ T6057] alloc_pages_bulk_noprof+0x668/0x890 [ 108.266743][ T6057] ? alloc_pages_noprof+0x140/0x2b0 [ 108.266780][ T6057] __kasan_populate_vmalloc+0xb7/0x1c0 [ 108.266812][ T6057] alloc_vmap_area+0xd10/0x1410 [ 108.266861][ T6057] ? __pfx_alloc_vmap_area+0x10/0x10 [ 108.266892][ T6057] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 108.266919][ T6057] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 108.266944][ T6057] ? __get_vm_area_node+0x155/0x2f0 [ 108.266983][ T6057] __get_vm_area_node+0x200/0x2f0 [ 108.267024][ T6057] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 108.267061][ T6057] ? copy_process+0x7db/0x4430 [ 108.267099][ T6057] ? percpu_ref_get_many+0x19/0x140 [ 108.267140][ T6057] ? __memcg_slab_post_alloc_hook+0x46f/0xdb0 [ 108.267180][ T6057] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 108.267216][ T6057] ? dup_task_struct+0x52/0xa00 [ 108.267244][ T6057] ? trace_kmem_cache_alloc+0x29/0xe0 [ 108.267268][ T6057] ? memcpy_and_pad+0x48/0x80 [ 108.267303][ T6057] __vmalloc_node_noprof+0xc2/0x100 [ 108.267325][ T6057] ? copy_process+0x7db/0x4430 [ 108.267349][ T6057] ? copy_process+0x7db/0x4430 [ 108.267378][ T6057] dup_task_struct+0x2c6/0xa00 [ 108.267411][ T6057] copy_process+0x7db/0x4430 [ 108.267449][ T6057] ? kstrtoull+0x137/0x1d0 [ 108.267485][ T6057] ? kstrtouint+0x6e/0xe0 [ 108.267519][ T6057] ? lock_acquire+0x115/0x350 [ 108.267544][ T6057] ? get_pid_task+0x20/0x1f0 [ 108.267570][ T6057] ? __pfx_copy_process+0x10/0x10 [ 108.267598][ T6057] ? get_pid_task+0x20/0x1f0 [ 108.267617][ T6057] ? get_pid_task+0x20/0x1f0 [ 108.267653][ T6057] kernel_clone+0x2d7/0x940 [ 108.267689][ T6057] ? __pfx_kernel_clone+0x10/0x10 [ 108.267737][ T6057] __x64_sys_clone+0x1b6/0x230 [ 108.267771][ T6057] ? __pfx___x64_sys_clone+0x10/0x10 [ 108.267817][ T6057] ? __pfx_ksys_write+0x10/0x10 [ 108.267856][ T6057] do_syscall_64+0x166/0x520 [ 108.267884][ T6057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.267907][ T6057] ? clear_bhb_loop+0x70/0xc0 [ 108.267935][ T6057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.267957][ T6057] RIP: 0033:0x7fd650f9e159 [ 108.267978][ T6057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.267997][ T6057] RSP: 002b:00007fd651e40fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 108.268021][ T6057] RAX: ffffffffffffffda RBX: 00007fd651225fa0 RCX: 00007fd650f9e159 [ 108.268037][ T6057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 108.268051][ T6057] RBP: 00007fd651e41090 R08: 0000000000000000 R09: 0000000000000000 [ 108.268065][ T6057] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 108.268078][ T6057] R13: 00007fd651226038 R14: 00007fd651225fa0 R15: 00007ffe913b3158 [ 108.268112][ T6057] [ 108.303591][ T6057] syz.2.83: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 108.319654][ T6057] CPU: 0 UID: 0 PID: 6057 Comm: syz.2.83 Not tainted syzkaller #0 PREEMPT(full) [ 108.319728][ T6057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.319759][ T6057] Call Trace: [ 108.319781][ T6057] [ 108.319810][ T6057] dump_stack_lvl+0xe8/0x150 [ 108.319896][ T6057] warn_alloc+0x24d/0x270 [ 108.319961][ T6057] ? lockdep_hardirqs_on+0x7b/0x110 [ 108.320044][ T6057] ? __pfx_warn_alloc+0x10/0x10 [ 108.320106][ T6057] ? kfree+0x1c5/0x650 [ 108.320170][ T6057] ? __get_vm_area_node+0x219/0x2f0 [ 108.320284][ T6057] __vmalloc_node_range_noprof+0x396/0x16f0 [ 108.320402][ T6057] ? percpu_ref_get_many+0x19/0x140 [ 108.320516][ T6057] ? __memcg_slab_post_alloc_hook+0x46f/0xdb0 [ 108.320607][ T6057] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 108.320694][ T6057] ? dup_task_struct+0x52/0xa00 [ 108.320766][ T6057] ? trace_kmem_cache_alloc+0x29/0xe0 [ 108.320788][ T6057] ? memcpy_and_pad+0x48/0x80 [ 108.320825][ T6057] __vmalloc_node_noprof+0xc2/0x100 [ 108.320847][ T6057] ? copy_process+0x7db/0x4430 [ 108.320871][ T6057] ? copy_process+0x7db/0x4430 [ 108.320899][ T6057] dup_task_struct+0x2c6/0xa00 [ 108.320933][ T6057] copy_process+0x7db/0x4430 [ 108.320971][ T6057] ? kstrtoull+0x137/0x1d0 [ 108.321007][ T6057] ? kstrtouint+0x6e/0xe0 [ 108.321049][ T6057] ? lock_acquire+0x115/0x350 [ 108.321074][ T6057] ? get_pid_task+0x20/0x1f0 [ 108.321100][ T6057] ? __pfx_copy_process+0x10/0x10 [ 108.321128][ T6057] ? get_pid_task+0x20/0x1f0 [ 108.321147][ T6057] ? get_pid_task+0x20/0x1f0 [ 108.321176][ T6057] kernel_clone+0x2d7/0x940 [ 108.321211][ T6057] ? __pfx_kernel_clone+0x10/0x10 [ 108.321259][ T6057] __x64_sys_clone+0x1b6/0x230 [ 108.321292][ T6057] ? __pfx___x64_sys_clone+0x10/0x10 [ 108.321338][ T6057] ? __pfx_ksys_write+0x10/0x10 [ 108.321376][ T6057] do_syscall_64+0x166/0x520 [ 108.321402][ T6057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.321425][ T6057] ? clear_bhb_loop+0x70/0xc0 [ 108.321451][ T6057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.321512][ T6057] RIP: 0033:0x7fd650f9e159 [ 108.321538][ T6057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.321561][ T6057] RSP: 002b:00007fd651e40fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 108.321634][ T6057] RAX: ffffffffffffffda RBX: 00007fd651225fa0 RCX: 00007fd650f9e159 [ 108.321683][ T6057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 108.321715][ T6057] RBP: 00007fd651e41090 R08: 0000000000000000 R09: 0000000000000000 [ 108.321748][ T6057] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 108.321788][ T6057] R13: 00007fd651226038 R14: 00007fd651225fa0 R15: 00007ffe913b3158 [ 108.321872][ T6057] [ 108.348982][ T6057] Mem-Info: [ 108.349034][ T6057] active_anon:5779 inactive_anon:0 isolated_anon:0 [ 108.349034][ T6057] active_file:0 inactive_file:43155 isolated_file:0 [ 108.349034][ T6057] unevictable:0 dirty:1011 writeback:0 [ 108.349034][ T6057] slab_reclaimable:10488 slab_unreclaimable:86309 [ 108.349034][ T6057] mapped:25077 shmem:523 pagetables:1211 [ 108.349034][ T6057] sec_pagetables:3 bounce:0 [ 108.349034][ T6057] kernel_misc_reclaimable:0 [ 108.349034][ T6057] free:1348478 free_pcp:12535 free_cma:0 [ 108.349179][ T6057] Node 0 active_anon:23116kB inactive_anon:0kB active_file:0kB inactive_file:172424kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100308kB dirty:4036kB writeback:0kB shmem:2092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11756kB pagetables:4676kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 108.349333][ T6057] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 108.349478][ T6057] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 108.349631][ T6057] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 108.349736][ T6057] Node 0 DMA32 free:1441340kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23116kB inactive_anon:0kB active_file:0kB inactive_file:172424kB unevictable:0kB writepending:4036kB zspages:0kB present:3129332kB managed:2541380kB mlocked:0kB bounce:0kB free_pcp:49628kB local_pcp:20488kB free_cma:0kB [ 108.349901][ T6057] lowmem_reserve[]: 0 0 1 1 1 [ 108.349996][ T6057] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1404kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 108.350156][ T6057] lowmem_reserve[]: 0 0 0 0 0 [ 108.350264][ T6057] Node 1 Normal free:3937212kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:8kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:500kB free_cma:0kB [ 108.350421][ T6057] lowmem_reserve[]: 0 0 0 0 0 [ 108.367995][ T6057] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 108.368337][ T6057] Node 0 DMA32: 1793*4kB (UME) 1191*8kB (UME) 473*16kB (UME) 175*32kB (UM) 70*64kB (UME) 37*128kB (M) 21*256kB (ME) 12*512kB (UME) 8*1024kB (M) 3*2048kB (UM) 336*4096kB (UM) = 1441196kB [ 108.368819][ T6057] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 108.371123][ T6057] Node 1 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 1*32kB (M) 8*64kB (UM) 5*128kB (UM) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 0*2048kB 960*4096kB (UM) = 3937212kB [ 108.375313][ T6057] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 108.375357][ T6057] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 108.375408][ T6057] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 108.375450][ T6057] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 108.375506][ T6057] 43674 total pagecache pages [ 108.375540][ T6057] 0 pages in swap cache [ 108.375561][ T6057] Free swap = 124996kB [ 108.375582][ T6057] Total swap = 124996kB [ 108.375604][ T6057] 2097051 pages RAM [ 108.375625][ T6057] 0 pages HighMem/MovableOnly [ 108.375645][ T6057] 429739 pages reserved [ 108.375666][ T6057] 0 pages cma reserved [ 108.453131][ T5723] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 108.460270][ T33] audit: type=1326 audit(1790852216.639:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.3.80" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c88d9e159 code=0x0 [ 108.658278][ T5723] usb 2-1: New USB device found: idVendor=174c, idProduct=55aa, bcdDevice=1.00 [ 108.667050][ T5723] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.716786][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.716816][ T5723] usb 2-1: Product: syz [ 108.716882][ T5723] usb 2-1: Manufacturer: syz [ 108.716899][ T5723] usb 2-1: SerialNumber: syz [ 109.202127][ T5723] usb-storage 2-1:1.0: USB Mass Storage device detected [ 109.432603][ T5723] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 109.438815][ T5723] scsi host1: usb-storage 2-1:1.0 [ 109.627693][ T5723] usb 2-1: USB disconnect, device number 8 [ 109.686635][ T6076] kernel profiling enabled (shift: 63) [ 109.686656][ T6076] profiling shift: 63 too large [ 109.807643][ T6079] FAULT_INJECTION: forcing a failure. [ 109.807643][ T6079] name failslab, interval 1, probability 0, space 0, times 0 [ 109.807676][ T6079] CPU: 1 UID: 0 PID: 6079 Comm: syz.3.88 Not tainted syzkaller #0 PREEMPT(full) [ 109.807700][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.807713][ T6079] Call Trace: [ 109.807722][ T6079] [ 109.807732][ T6079] dump_stack_lvl+0xe8/0x150 [ 109.807767][ T6079] should_fail_ex+0x3eb/0x540 [ 109.807797][ T6079] should_failslab+0xa8/0x100 [ 109.807831][ T6079] __kmalloc_noprof+0xf9/0x710 [ 109.807856][ T6079] ? kernfs_fop_write_iter+0x157/0x540 [ 109.807891][ T6079] ? kernfs_fop_write_iter+0x157/0x540 [ 109.807934][ T6079] kernfs_fop_write_iter+0x157/0x540 [ 109.807976][ T6079] vfs_write+0x612/0xba0 [ 109.808013][ T6079] ? __pfx_vfs_write+0x10/0x10 [ 109.808044][ T6079] ? __fget_files+0x3a2/0x420 [ 109.808068][ T6079] ? __fget_files+0x2a/0x420 [ 109.808096][ T6079] ? fdget+0x1ac/0x250 [ 109.808128][ T6079] ksys_write+0x150/0x270 [ 109.808163][ T6079] ? __pfx_ksys_write+0x10/0x10 [ 109.808204][ T6079] do_syscall_64+0x166/0x520 [ 109.808231][ T6079] ? trace_irq_disable+0x3b/0x140 [ 109.808258][ T6079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.808282][ T6079] ? clear_bhb_loop+0x70/0xc0 [ 109.808310][ T6079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.808332][ T6079] RIP: 0033:0x7f2c88d9e159 [ 109.808353][ T6079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.808374][ T6079] RSP: 002b:00007f2c89c21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.808406][ T6079] RAX: ffffffffffffffda RBX: 00007f2c89025fa0 RCX: 00007f2c88d9e159 [ 109.808422][ T6079] RDX: 0000000000000048 RSI: 00002000000000c0 RDI: 0000000000000003 [ 109.808435][ T6079] RBP: 00007f2c89c21090 R08: 0000000000000000 R09: 0000000000000000 [ 109.808447][ T6079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.808459][ T6079] R13: 00007f2c89026038 R14: 00007f2c89025fa0 R15: 00007ffe41b8c978 [ 109.808491][ T6079] [ 110.530453][ T33] audit: type=1326 audit(1790852218.709:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.1.94" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58db79e159 code=0x0 [ 110.762928][ T32] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.912950][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 110.914242][ T32] usb 4-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 110.915026][ T32] usb 4-1: config 0 has no interfaces? [ 110.917319][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.917355][ T32] usb 4-1: Product: syz [ 110.917371][ T32] usb 4-1: Manufacturer: syz [ 110.917386][ T32] usb 4-1: SerialNumber: syz [ 110.921277][ T32] usb 4-1: config 0 descriptor?? [ 111.202948][ T5723] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.300093][ T6106] FAULT_INJECTION: forcing a failure. [ 111.300093][ T6106] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 111.300128][ T6106] CPU: 1 UID: 0 PID: 6106 Comm: syz.2.98 Not tainted syzkaller #0 PREEMPT(full) [ 111.300155][ T6106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.300169][ T6106] Call Trace: [ 111.300178][ T6106] [ 111.300188][ T6106] dump_stack_lvl+0xe8/0x150 [ 111.300225][ T6106] should_fail_ex+0x3eb/0x540 [ 111.300256][ T6106] prepare_alloc_pages+0x21e/0x5f0 [ 111.300292][ T6106] __alloc_frozen_pages_noprof+0x17a/0x400 [ 111.300334][ T6106] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 111.300362][ T6106] ? __lock_acquire+0x747/0x2de0 [ 111.300399][ T6106] ? policy_nodemask+0x2cc/0x8e0 [ 111.300428][ T6106] ? __css_rstat_updated+0x237/0x540 [ 111.300464][ T6106] alloc_pages_mpol+0x21e/0x390 [ 111.300503][ T6106] alloc_pages_noprof+0xb1/0x2b0 [ 111.300538][ T6106] __pmd_alloc+0x3a/0x5c0 [ 111.300576][ T6106] copy_pmd_range+0x57f8/0x5c00 [ 111.300612][ T6106] ? register_lock_class+0x31/0x2e0 [ 111.300659][ T6106] ? __pfx___css_rstat_updated+0x10/0x10 [ 111.300691][ T6106] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 111.300731][ T6106] ? __pfx_copy_pmd_range+0x10/0x10 [ 111.300765][ T6106] ? do_raw_spin_lock+0x12b/0x2f0 [ 111.300811][ T6106] ? do_raw_spin_unlock+0xf5/0x200 [ 111.300849][ T6106] ? _raw_spin_unlock+0x28/0x50 [ 111.300872][ T6106] ? __pud_alloc+0x348/0x460 [ 111.300909][ T6106] copy_page_range+0xcc2/0x12b0 [ 111.300963][ T6106] ? __pfx_copy_page_range+0x10/0x10 [ 111.301007][ T6106] dup_mmap+0xf17/0x1dc0 [ 111.301051][ T6106] ? __pfx_dup_mmap+0x10/0x10 [ 111.301074][ T6106] ? do_raw_spin_lock+0x12b/0x2f0 [ 111.301124][ T6106] ? lock_acquire+0x115/0x350 [ 111.301170][ T6106] copy_mm+0x115/0x470 [ 111.301210][ T6106] copy_process+0x1ea2/0x4430 [ 111.301265][ T6106] ? copy_process+0xd11/0x4430 [ 111.301329][ T6106] ? __pfx_copy_process+0x10/0x10 [ 111.301401][ T6106] kernel_clone+0x2d7/0x940 [ 111.301457][ T6106] ? __pfx_kernel_clone+0x10/0x10 [ 111.301515][ T6106] ? do_futex+0x3e7/0x4e0 [ 111.301561][ T6106] __x64_sys_clone+0x1b6/0x230 [ 111.301596][ T6106] ? __pfx___x64_sys_clone+0x10/0x10 [ 111.301645][ T6106] ? rcu_is_watching+0x16/0xb0 [ 111.301696][ T6106] do_syscall_64+0x166/0x520 [ 111.301722][ T6106] ? trace_irq_disable+0x3b/0x140 [ 111.301749][ T6106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.301774][ T6106] ? clear_bhb_loop+0x70/0xc0 [ 111.301802][ T6106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.301825][ T6106] RIP: 0033:0x7fd650f9e159 [ 111.301847][ T6106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.301866][ T6106] RSP: 002b:00007fd651e40fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 111.301892][ T6106] RAX: ffffffffffffffda RBX: 00007fd651225fa0 RCX: 00007fd650f9e159 [ 111.301909][ T6106] RDX: 0000000000000000 RSI: 0000000000000700 RDI: 0000000000000011 [ 111.301923][ T6106] RBP: 00007fd65103506b R08: 0000000000000000 R09: 0000000000000000 [ 111.301938][ T6106] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 111.301951][ T6106] R13: 00007fd651226038 R14: 00007fd651225fa0 R15: 00007ffe913b3158 [ 111.301988][ T6106] [ 111.548708][ T5723] usb 1-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 111.559206][ T5723] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 111.559273][ T5723] usb 1-1: config 1 has no interface number 0 [ 111.598474][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.598549][ T5723] usb 1-1: Product: syz [ 111.598591][ T5723] usb 1-1: Manufacturer: syz [ 111.598633][ T5723] usb 1-1: SerialNumber: syz [ 111.704369][ T5723] usb 1-1: 3:0 : does not exist [ 111.704396][ T5723] usb 1-1: 3:0 : does not exist [ 112.049615][ T5716] usb 1-1: USB disconnect, device number 5 [ 112.098743][ T6122] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 112.100047][ T6121] IPVS: stopping master sync thread 6122 ... [ 112.137180][ T6121] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20001 [ 112.382986][ T5723] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 112.402976][ T5701] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 112.512994][ T5723] usb 3-1: device descriptor read/64, error -71 [ 112.552886][ T5701] usb 2-1: Using ep0 maxpacket: 8 [ 112.553635][ T5701] usb 2-1: New USB device found: idVendor=044f, idProduct=b653, bcdDevice=0.00 [ 112.554716][ T5701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.554747][ T5701] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 112.554791][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.557945][ T5701] usb 2-1: config 0 descriptor?? [ 112.753000][ T5723] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 112.769908][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.770735][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.882886][ T5723] usb 3-1: device descriptor read/64, error -71 [ 112.993275][ T5723] usb usb3-port1: attempt power cycle [ 113.190401][ T5701] usbhid 2-1:0.0: can't add hid device: -71 [ 113.190514][ T5701] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 113.195355][ T5701] usb 2-1: USB disconnect, device number 9 [ 113.342932][ T5723] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 113.363593][ T5723] usb 3-1: device descriptor read/8, error -71 [ 113.459313][ T5701] usb 4-1: USB disconnect, device number 5 [ 113.602938][ T5723] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 113.623851][ T5723] usb 3-1: device descriptor read/8, error -71 [ 113.735516][ T5723] usb usb3-port1: unable to enumerate USB device [ 113.743126][ T33] audit: type=1326 audit(1790852221.919:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.3.108" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c88d9e159 code=0x0 [ 113.979598][ T6143] random: crng reseeded on system resumption [ 113.993293][ T6143] FAULT_INJECTION: forcing a failure. [ 113.993293][ T6143] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 113.993337][ T6143] CPU: 1 UID: 0 PID: 6143 Comm: syz.1.112 Not tainted syzkaller #0 PREEMPT(full) [ 113.993361][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.993375][ T6143] Call Trace: [ 113.993383][ T6143] [ 113.993392][ T6143] dump_stack_lvl+0xe8/0x150 [ 113.993437][ T6143] should_fail_ex+0x3eb/0x540 [ 113.993464][ T6143] prepare_alloc_pages+0x21e/0x5f0 [ 113.993496][ T6143] __alloc_frozen_pages_noprof+0x17a/0x400 [ 113.993525][ T6143] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 113.993566][ T6143] ? policy_nodemask+0x2cc/0x8e0 [ 113.993601][ T6143] alloc_pages_mpol+0x21e/0x390 [ 113.993653][ T6143] alloc_pages_noprof+0xb1/0x2b0 [ 113.993685][ T6143] get_zeroed_page_noprof+0x1a/0x90 [ 113.993711][ T6143] get_image_page+0x36/0x330 [ 113.993737][ T6143] memory_bm_create+0x738/0xf70 [ 113.993786][ T6143] create_basic_memory_bitmaps+0x98/0x360 [ 113.993824][ T6143] snapshot_open+0x1aa/0x290 [ 113.993849][ T6143] ? __pfx_snapshot_open+0x10/0x10 [ 113.993871][ T6143] misc_open+0x2d5/0x350 [ 113.993905][ T6143] chrdev_open+0x4d9/0x600 [ 113.993937][ T6143] ? __pfx_chrdev_open+0x10/0x10 [ 113.993968][ T6143] ? devcgroup_check_permission+0x31/0x8f0 [ 113.994005][ T6143] ? __pfx_chrdev_open+0x10/0x10 [ 113.994037][ T6143] do_dentry_open+0x80e/0x1360 [ 113.994083][ T6143] vfs_open_consume+0x4a/0x350 [ 113.994116][ T6143] ? path_openat+0x148a/0x1da0 [ 113.994150][ T6143] path_openat+0x14a6/0x1da0 [ 113.994201][ T6143] do_file_open+0x23e/0x4a0 [ 113.994238][ T6143] ? __pfx_do_file_open+0x10/0x10 [ 113.994291][ T6143] ? _raw_spin_unlock+0x28/0x50 [ 113.994314][ T6143] ? alloc_fd+0x6af/0x760 [ 113.994349][ T6143] do_sys_openat2+0x115/0x200 [ 113.994385][ T6143] ? __se_sys_futex+0x3a8/0x450 [ 113.994420][ T6143] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.994461][ T6143] ? rcu_is_watching+0x16/0xb0 [ 113.994498][ T6143] __x64_sys_openat+0x138/0x170 [ 113.994549][ T6143] do_syscall_64+0x166/0x520 [ 113.994577][ T6143] ? trace_irq_disable+0x3b/0x140 [ 113.994604][ T6143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.994628][ T6143] ? clear_bhb_loop+0x70/0xc0 [ 113.994657][ T6143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.994679][ T6143] RIP: 0033:0x7f58db79e159 [ 113.994710][ T6143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.994729][ T6143] RSP: 002b:00007f58dc6ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.994760][ T6143] RAX: ffffffffffffffda RBX: 00007f58dba25fa0 RCX: 00007f58db79e159 [ 113.994777][ T6143] RDX: 0000000000042801 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 113.994793][ T6143] RBP: 00007f58db83506b R08: 0000000000000000 R09: 0000000000000000 [ 113.994808][ T6143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.994822][ T6143] R13: 00007f58dba26038 R14: 00007f58dba25fa0 R15: 00007ffee2dec388 [ 113.994858][ T6143] [ 114.652940][ T5701] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 114.823616][ T5701] usb 2-1: New USB device found: idVendor=056a, idProduct=0021, bcdDevice=0.00 [ 114.825811][ T5701] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.825845][ T5701] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.825873][ T5701] usb 2-1: config 0 interface 0 has no altsetting 0 [ 114.825909][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.861494][ T5701] usb 2-1: config 0 descriptor?? [ 115.003533][ T1210] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 115.175163][ T1210] usb 4-1: New USB device found: idVendor=28de, idProduct=1142, bcdDevice=0.00 [ 115.176628][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.176690][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.176733][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.195338][ T1210] usb 4-1: config 0 descriptor?? [ 115.531882][ T6152] hfs: can't find a HFS filesystem on dev loop2 [ 115.622938][ T32] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 115.666546][ T1210] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 115.666592][ T1210] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 115.666649][ T1210] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 115.666679][ T1210] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 115.666709][ T1210] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 115.719412][ T1210] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 116.046736][ T5701] usbhid 2-1:0.0: can't add hid device: -71 [ 116.046843][ T5701] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 116.052516][ T5701] usb 2-1: USB disconnect, device number 10 [ 117.119615][ T5716] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 117.222904][ T5701] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 117.273990][ T5716] usb 1-1: not running at top speed; connect to a high speed hub [ 117.274017][ T5716] usb 1-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=1.00 [ 117.275108][ T5716] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.275125][ T5716] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 117.275158][ T5716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.282663][ T5716] gspca_main: spca501-2.14.0 probing 0000:0000 [ 117.374135][ T5701] usb 3-1: New USB device found: idVendor=0525, idProduct=1080, bcdDevice=1.00 [ 117.375252][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.492876][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 117.606876][ T5701] net1080 3-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, ca:de:97:ef:a5:03 [ 117.645857][ T9] usb 2-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 117.663407][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.663457][ T9] usb 2-1: Product: syz [ 117.663474][ T9] usb 2-1: Manufacturer: syz [ 117.663489][ T9] usb 2-1: SerialNumber: syz [ 117.671098][ T9] usb 2-1: USB2VGA dongle found at address 11 [ 117.709497][ T9] usb 2-1: Allocated 8 output buffers [ 117.710762][ T5716] gspca_spca501: reg write: error -71 [ 117.710779][ T5716] spca501 1-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 117.710865][ T5716] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 117.734967][ T5716] usb 1-1: USB disconnect, device number 6 [ 117.843547][ T5701] usb 3-1: USB disconnect, device number 17 [ 117.855871][ T5701] net1080 3-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT [ 118.086801][ T9] usb 2-1: Failed to early initialize device [ 118.109701][ T9] usb 2-1: USB disconnect, device number 11 [ 118.145462][ T5701] usb 4-1: USB disconnect, device number 6 [ 118.423169][ T6193] FAULT_INJECTION: forcing a failure. [ 118.423169][ T6193] name fail_futex, interval 1, probability 0, space 0, times 1 [ 118.423203][ T6193] CPU: 0 UID: 0 PID: 6193 Comm: syz.0.124 Not tainted syzkaller #0 PREEMPT(full) [ 118.423229][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.423242][ T6193] Call Trace: [ 118.423250][ T6193] [ 118.423260][ T6193] dump_stack_lvl+0xe8/0x150 [ 118.423296][ T6193] should_fail_ex+0x3eb/0x540 [ 118.423325][ T6193] get_futex_key+0x1b4/0x1580 [ 118.423355][ T6193] ? __lock_acquire+0x747/0x2de0 [ 118.423414][ T6193] ? __pfx_get_futex_key+0x10/0x10 [ 118.423452][ T6193] ? update_se+0x90/0x1080 [ 118.423490][ T6193] futex_wait_setup+0x4a/0x590 [ 118.423521][ T6193] ? __futex_wait+0xdb/0x470 [ 118.423551][ T6193] __futex_wait+0x175/0x470 [ 118.423574][ T6193] ? update_protect_slice+0x45/0x320 [ 118.423605][ T6193] ? __pfx___futex_wait+0x10/0x10 [ 118.423643][ T6193] ? __pfx_futex_wake_mark+0x10/0x10 [ 118.423674][ T6193] ? try_to_wake_up+0x8ce/0x14e0 [ 118.423717][ T6193] futex_wait+0x121/0x390 [ 118.423744][ T6193] ? __pfx_futex_wait+0x10/0x10 [ 118.423789][ T6193] do_futex+0x3e7/0x4e0 [ 118.423829][ T6193] ? __pfx_do_futex+0x10/0x10 [ 118.423871][ T6193] __se_sys_futex+0x3a8/0x450 [ 118.423913][ T6193] ? __pfx___se_sys_futex+0x10/0x10 [ 118.423947][ T6193] ? rcu_is_watching+0x16/0xb0 [ 118.423984][ T6193] ? __x64_sys_futex+0x21/0xf0 [ 118.424020][ T6193] do_syscall_64+0x166/0x520 [ 118.424047][ T6193] ? trace_irq_disable+0x3b/0x140 [ 118.424074][ T6193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.424096][ T6193] ? clear_bhb_loop+0x70/0xc0 [ 118.424124][ T6193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.424147][ T6193] RIP: 0033:0x7fe13ef9e159 [ 118.424168][ T6193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.424187][ T6193] RSP: 002b:00007fe13fea90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.424212][ T6193] RAX: ffffffffffffffda RBX: 00007fe13f225fa8 RCX: 00007fe13ef9e159 [ 118.424229][ T6193] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe13f225fa8 [ 118.424244][ T6193] RBP: 00007fe13f225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 118.424259][ T6193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.424273][ T6193] R13: 00007fe13f226038 R14: 00007ffffcd87b40 R15: 00007ffffcd87c28 [ 118.424312][ T6193] [ 119.032875][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 119.162876][ T9] usb 2-1: device descriptor read/64, error -71 [ 119.403166][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 119.552866][ T9] usb 2-1: device descriptor read/64, error -71 [ 119.663433][ T9] usb usb2-port1: attempt power cycle [ 119.911659][ T6227] syz.0.131 (6227) used greatest stack depth: 11936 bytes left [ 120.002912][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 120.023641][ T9] usb 2-1: device descriptor read/8, error -71 [ 120.043043][ T991] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 120.193780][ T991] usb 4-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 120.195499][ T991] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.197954][ T991] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 120.197982][ T991] usb 4-1: Product: syz [ 120.197997][ T991] usb 4-1: Manufacturer: syz [ 120.198013][ T991] usb 4-1: SerialNumber: syz [ 120.200421][ T991] usb 4-1: config 0 descriptor?? [ 120.250928][ T991] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 120.251166][ T991] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 120.251216][ T991] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 88 [ 120.279187][ T991] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 120.291399][ T991] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 120.302873][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 120.304179][ T991] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 120.308969][ T991] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 120.310795][ T991] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 120.346155][ T9] usb 2-1: device descriptor read/8, error -71 [ 120.346715][ T991] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 120.348849][ T991] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 120.350269][ T991] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 120.454282][ T9] usb usb2-port1: unable to enumerate USB device [ 120.770518][ T5716] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 120.936143][ T5716] usb 3-1: Using ep0 maxpacket: 16 [ 121.017331][ T5716] usb 3-1: unable to get BOS descriptor or descriptor too short [ 121.017369][ T5716] usb 3-1: New USB device found: idVendor=0582, idProduct=0582, bcdDevice=0.40 [ 121.018412][ T5716] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 121.018459][ T5716] usb 3-1: can't read configurations, error -71 [ 121.726245][ T6260] input: syz0 as /devices/virtual/input/input11 [ 122.636013][ T6272] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 122.636033][ T6272] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 122.636158][ T6272] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 122.636172][ T6272] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 122.813360][ T9] usb 4-1: USB disconnect, device number 7 [ 122.822604][ T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 122.863100][ T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 122.871190][ T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 122.896327][ T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 122.898812][ T9] keyspan 4-1:0.0: device disconnected [ 123.022894][ T32] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 123.056467][ T6285] capability: warning: `syz.2.147' uses deprecated v2 capabilities in a way that may be insecure [ 123.164482][ T6287] syz.0.148 uses obsolete (PF_INET,SOCK_PACKET) [ 123.165224][ T6287] syzkaller1: entered promiscuous mode [ 123.165245][ T6287] syzkaller1: entered allmulticast mode [ 123.172880][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 123.200999][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 123.201058][ T32] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 123.220463][ T32] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.220489][ T32] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 123.220533][ T32] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.220559][ T32] usb 2-1: No eUSB2 isoc ep 0x81 companion for config 1 interface 0 altsetting 0 [ 123.263088][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.263115][ T32] usb 2-1: Product: syz [ 123.263129][ T32] usb 2-1: Manufacturer: syz [ 123.263144][ T32] usb 2-1: SerialNumber: syz [ 123.557762][ T6297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.558250][ T6297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.642417][ T32] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 123.642466][ T32] cdc_ncm 2-1:1.0: bind() failure [ 123.676351][ T32] usb 2-1: USB disconnect, device number 16 [ 123.719107][ T3052] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.762959][ T5723] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 123.812725][ T3052] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.887289][ T3052] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.932935][ T5723] usb 1-1: Using ep0 maxpacket: 16 [ 123.934270][ T3052] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.936485][ T5723] usb 1-1: unable to get BOS descriptor or descriptor too short [ 123.936530][ T5723] usb 1-1: New USB device found: idVendor=0763, idProduct=2003, bcdDevice=0.40 [ 123.938160][ T5723] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.938178][ T5723] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 123.941458][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.941483][ T5723] usb 1-1: Product: syz [ 123.941498][ T5723] usb 1-1: Manufacturer: syz [ 123.941514][ T5723] usb 1-1: SerialNumber: syz [ 124.132608][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.141041][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.141774][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.153268][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.167028][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 124.355892][ T5723] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 124.358377][ T5723] usb 1-1: 0:2 : does not exist [ 124.582142][ T5723] usb 1-1: USB disconnect, device number 7 [ 124.597690][ T3052] bridge_slave_1: left allmulticast mode [ 124.597734][ T3052] bridge_slave_1: left promiscuous mode [ 124.598685][ T3052] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.645581][ T3052] bridge_slave_0: left allmulticast mode [ 124.645609][ T3052] bridge_slave_0: left promiscuous mode [ 124.645855][ T3052] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.809557][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'. [ 124.831582][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.199347][ T3052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.214974][ T3052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.216949][ T3052] bond0 (unregistering): Released all slaves [ 125.303563][ T5716] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 125.456329][ T5716] usb 4-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 125.459172][ T5716] usb 4-1: config 0 has no interfaces? [ 125.459211][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.487457][ T5716] usb 4-1: config 0 descriptor?? [ 125.681880][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 125.708272][ T5716] usb 4-1: USB disconnect, device number 8 [ 125.926514][ T3052] hsr_slave_0: left promiscuous mode [ 125.932600][ T3052] hsr_slave_1: left promiscuous mode [ 125.948565][ T3052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.948610][ T3052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.968881][ T3052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.968905][ T3052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.019937][ T3052] veth1_macvtap: left promiscuous mode [ 126.019995][ T3052] veth0_macvtap: left promiscuous mode [ 126.020105][ T3052] veth1_vlan: left promiscuous mode [ 126.020395][ T3052] veth0_vlan: left promiscuous mode [ 126.283341][ T5625] Bluetooth: hci2: command tx timeout [ 126.989011][ T3052] team0 (unregistering): Port device team_slave_1 removed [ 127.001058][ T32] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 127.025242][ T3052] team0 (unregistering): Port device team_slave_0 removed [ 127.162974][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 127.163834][ T32] usb 4-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 127.166631][ T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.166681][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.166710][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 9024, setting to 1024 [ 127.166739][ T32] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 127.166763][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.169304][ T32] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 127.169860][ T32] usb 4-1: Manufacturer: syz [ 127.265603][ T32] usb 4-1: config 0 descriptor?? [ 127.346625][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 127.494910][ T6363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.497585][ T6363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.644413][ T32] rc_core: IR keymap rc-hauppauge not found [ 127.644432][ T32] Registered IR keymap rc-empty [ 127.647134][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 127.669874][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 127.692419][ T32] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 127.717602][ T32] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 127.777192][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 127.794547][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 127.815502][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 127.833968][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 127.854779][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 127.873272][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 127.894343][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 127.914463][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 127.933108][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 127.953129][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 127.977794][ T32] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 127.977821][ T32] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 128.061716][ T32] usb 4-1: USB disconnect, device number 9 [ 128.177192][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.165'. [ 128.364948][ T5625] Bluetooth: hci2: command tx timeout [ 128.568472][ T6299] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.568712][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.568860][ T6299] bridge_slave_0: entered allmulticast mode [ 128.570722][ T6299] bridge_slave_0: entered promiscuous mode [ 128.578971][ T6299] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.579081][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.579218][ T6299] bridge_slave_1: entered allmulticast mode [ 128.590343][ T6299] bridge_slave_1: entered promiscuous mode [ 128.676159][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 128.690079][ T6299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.704194][ T6299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.776997][ T6299] team0: Port device team_slave_0 added [ 128.790447][ T6299] team0: Port device team_slave_1 added [ 128.932498][ T6299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.932517][ T6299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.932544][ T6299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.943261][ T6299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.943303][ T6299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.943367][ T6299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.149413][ T6299] hsr_slave_0: entered promiscuous mode [ 129.151811][ T6299] hsr_slave_1: entered promiscuous mode [ 129.154784][ T6299] debugfs: 'hsr0' already exists in 'hsr' [ 129.172022][ T6299] Cannot create hsr debugfs directory [ 129.847768][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 130.012924][ T32] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 130.017074][ T6299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 130.045668][ T6299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 130.046725][ T6299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 130.070732][ T6299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 130.081303][ T6299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 130.097048][ T6299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 130.099416][ T6299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 130.122137][ T6299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 130.162960][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 130.163718][ T32] usb 1-1: New USB device found: idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 130.164740][ T32] usb 1-1: config index 0 descriptor too short (expected 3659, got 75) [ 130.164767][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.167542][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.167569][ T32] usb 1-1: Product: syz [ 130.167585][ T32] usb 1-1: Manufacturer: syz [ 130.167612][ T32] usb 1-1: SerialNumber: syz [ 130.170843][ T32] usb 1-1: config 0 descriptor?? [ 130.224947][ T32] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 130.389828][ T6299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.430499][ T6299] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.443590][ T5625] Bluetooth: hci2: command tx timeout [ 130.449133][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.449243][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.485153][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.485260][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.880369][ T6442] netlink: 'syz.1.171': attribute type 11 has an invalid length. [ 131.325077][ T6299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.387438][ T32] gspca_sunplus: reg_r err -32 [ 131.675134][ T6299] veth0_vlan: entered promiscuous mode [ 131.693894][ T6299] veth1_vlan: entered promiscuous mode [ 131.743901][ T6299] veth0_macvtap: entered promiscuous mode [ 131.749252][ T6299] veth1_macvtap: entered promiscuous mode [ 131.783169][ T6299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.804644][ T6299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.883821][ T3052] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.883871][ T3052] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.883907][ T3052] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.883944][ T3052] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.008092][ T3378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.008115][ T3378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.067476][ T3378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.067498][ T3378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.210025][ T6488] netlink: 'syz.4.154': attribute type 2 has an invalid length. [ 132.373261][ T32] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 132.379384][ T6494] 9p: Bad value for 'wfdno' [ 132.389530][ T6494] usb usb8: usbfs: process 6494 (syz.1.181) did not claim interface 0 before use [ 132.445354][ T991] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 132.522976][ T5625] Bluetooth: hci2: command tx timeout [ 132.605909][ T991] usb 5-1: Using ep0 maxpacket: 8 [ 132.610205][ T991] usb 5-1: New USB device found: idVendor=200c, idProduct=1018, bcdDevice=0.40 [ 132.611980][ T991] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.612007][ T991] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 19 [ 132.628266][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.628350][ T991] usb 5-1: Product: syz [ 132.628394][ T991] usb 5-1: Manufacturer: syz [ 132.628436][ T991] usb 5-1: SerialNumber: syz [ 132.745508][ T5716] usb 1-1: USB disconnect, device number 8 [ 132.908083][ T991] usb 5-1: unit 3 not found! [ 132.927883][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.927968][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.040448][ T6508] netlink: 4116 bytes leftover after parsing attributes in process `syz.1.186'. [ 133.108964][ T6510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.109435][ T6510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.109595][ T991] usb 5-1: USB disconnect, device number 2 [ 133.391000][ T32] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 133.543216][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 133.545320][ T32] usb 1-1: unable to get BOS descriptor or descriptor too short [ 133.545371][ T32] usb 1-1: New USB device found: idVendor=13d8, idProduct=0002, bcdDevice=2a.9e [ 133.546737][ T32] usb 1-1: config 46 has an invalid interface number: 200 but max is 0 [ 133.546762][ T32] usb 1-1: config 46 has no interface number 0 [ 133.546793][ T32] usb 1-1: config 46 interface 200 has no altsetting 0 [ 133.550841][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.550868][ T32] usb 1-1: Product: syz [ 133.550885][ T32] usb 1-1: Manufacturer: syz [ 133.550901][ T32] usb 1-1: SerialNumber: syz [ 133.838454][ T6510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.840137][ T6510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.872557][ T6510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.877585][ T6510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.948826][ T32] usb 1-1: selecting invalid altsetting 3 [ 133.948853][ T32] comedi comedi5: could not set alternate setting 3 in high speed [ 133.948872][ T32] usbdux 1-1:46.200: driver 'usbdux' failed to auto-configure device. [ 133.991853][ T32] usbdux 1-1:46.200: probe with driver usbdux failed with error -22 [ 134.004682][ T32] usb 1-1: USB disconnect, device number 9 [ 134.283389][ T5736] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 134.424310][ T5736] usb 4-1: device descriptor read/64, error -71 [ 134.665855][ T5736] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 134.794457][ T5736] usb 4-1: device descriptor read/64, error -71 [ 134.917842][ T5736] usb usb4-port1: attempt power cycle [ 135.253332][ T5736] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 135.274028][ T5736] usb 4-1: device descriptor read/8, error -71 [ 135.289230][ T5716] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 135.443608][ T5716] usb 1-1: Using ep0 maxpacket: 32 [ 135.447029][ T5716] usb 1-1: New USB device found: idVendor=05ac, idProduct=020f, bcdDevice=0.22 [ 135.450848][ T5716] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.450884][ T5716] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.495214][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 135.495244][ T5716] usb 1-1: Product: syz [ 135.495260][ T5716] usb 1-1: Manufacturer: syz [ 135.495276][ T5716] usb 1-1: SerialNumber: syz [ 135.524052][ T5736] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 135.542995][ T5716] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input13 [ 135.550677][ T5736] usb 4-1: device descriptor read/8, error -71 [ 135.646110][ T6606] FAULT_INJECTION: forcing a failure. [ 135.646110][ T6606] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 135.646142][ T6606] CPU: 0 UID: 0 PID: 6606 Comm: syz.1.207 Not tainted syzkaller #0 PREEMPT(full) [ 135.646166][ T6606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.646179][ T6606] Call Trace: [ 135.646187][ T6606] [ 135.646196][ T6606] dump_stack_lvl+0xe8/0x150 [ 135.646232][ T6606] should_fail_ex+0x3eb/0x540 [ 135.646260][ T6606] _copy_from_user+0x2d/0xb0 [ 135.646288][ T6606] _RNvMs2_NtCswPamI0U300_11rust_binder6threadNtB5_6Thread5write+0x867/0xd1f0 [ 135.646413][ T6606] ? __pfx__RNvMs2_NtCswPamI0U300_11rust_binder6threadNtB5_6Thread5write+0x10/0x10 [ 135.646528][ T6606] ? __lock_acquire+0x747/0x2de0 [ 135.646578][ T6606] ? lock_acquire+0x115/0x350 [ 135.646602][ T6606] ? __kfree_rcu_sheaf+0x21/0x690 [ 135.646643][ T6606] ? __kfree_rcu_sheaf+0x21/0x690 [ 135.646667][ T6606] ? __kfree_rcu_sheaf+0x21/0x690 [ 135.646693][ T6606] ? ma_leaf_max_gap+0x39c/0x500 [ 135.646731][ T6606] ? mas_update_gap+0x39a/0x510 [ 135.646764][ T6606] ? mas_wr_store_entry+0x5fc2/0x7cf0 [ 135.646817][ T6606] ? __pfx_mas_wr_store_entry+0x10/0x10 [ 135.646860][ T6606] ? mas_wr_store_entry+0x5fc2/0x7cf0 [ 135.646904][ T6606] ? __lock_acquire+0x747/0x2de0 [ 135.646935][ T6606] ? __pfx_mas_wr_store_entry+0x10/0x10 [ 135.646958][ T6606] ? __lock_acquire+0x747/0x2de0 [ 135.646985][ T6606] ? mas_wr_store_entry+0x5fc2/0x7cf0 [ 135.647011][ T6606] ? __bfs+0x153/0x290 [ 135.647035][ T6606] ? __pfx_hlock_conflict+0x10/0x10 [ 135.647074][ T6606] ? check_path+0x21/0x40 [ 135.647101][ T6606] ? check_noncircular+0xdb/0x150 [ 135.647130][ T6606] ? __bfs+0x153/0x290 [ 135.647153][ T6606] ? __pfx_usage_match+0x10/0x10 [ 135.647184][ T6606] ? lockdep_unlock+0x5c/0xd0 [ 135.647204][ T6606] ? __lock_acquire+0x1511/0x2de0 [ 135.647232][ T6606] ? __pfx_hlock_conflict+0x10/0x10 [ 135.647281][ T6606] ? lock_acquire+0x115/0x350 [ 135.647311][ T6606] ? __lock_acquire+0x747/0x2de0 [ 135.647346][ T6606] ? __lock_acquire+0x747/0x2de0 [ 135.647385][ T6606] ? do_raw_spin_lock+0x12b/0x2f0 [ 135.647426][ T6606] ? rcu_is_watching+0x16/0xb0 [ 135.647456][ T6606] ? trace_hrtimer_start+0x82/0x200 [ 135.647483][ T6606] ? hrtimer_start_range_ns_common+0x7f6/0xb60 [ 135.647540][ T6606] ? __lock_acquire+0x747/0x2de0 [ 135.647580][ T6606] ? __lock_acquire+0x747/0x2de0 [ 135.647608][ T6606] ? __lock_acquire+0x747/0x2de0 [ 135.647647][ T6606] ? __lock_acquire+0x747/0x2de0 [ 135.647680][ T6606] ? lock_acquire+0x115/0x350 [ 135.647708][ T6606] ? lock_acquire+0x115/0x350 [ 135.647739][ T6606] ? lock_acquire+0x115/0x350 [ 135.647773][ T6606] ? is_bpf_text_address+0x26/0x2b0 [ 135.647810][ T6606] ? is_bpf_text_address+0x292/0x2b0 [ 135.647842][ T6606] ? is_bpf_text_address+0x26/0x2b0 [ 135.647876][ T6606] ? kernel_text_address+0xa5/0xe0 [ 135.647913][ T6606] ? __kernel_text_address+0xd/0x30 [ 135.647937][ T6606] ? unwind_get_return_address+0x4d/0x90 [ 135.647961][ T6606] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 135.647986][ T6606] ? arch_stack_walk+0xfb/0x150 [ 135.648020][ T6606] ? stack_trace_save+0xa9/0x100 [ 135.648044][ T6606] ? __pfx_stack_trace_save+0x10/0x10 [ 135.648070][ T6606] ? stack_depot_save_flags+0x33/0x7f0 [ 135.648095][ T6606] ? kasan_save_track+0x4f/0x80 [ 135.648120][ T6606] ? kasan_save_track+0x3e/0x80 [ 135.648150][ T6606] ? kasan_save_track+0x4f/0x80 [ 135.648174][ T6606] ? kasan_save_track+0x3e/0x80 [ 135.648198][ T6606] ? __kasan_kmalloc+0x93/0xb0 [ 135.648224][ T6606] ? __kmalloc_node_track_caller_noprof+0x4af/0x720 [ 135.648249][ T6606] ? krealloc_node_align_noprof+0x19a/0x390 [ 135.648274][ T6606] ? _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x765/0x1390 [ 135.648312][ T6606] ? _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x36b/0x3dc0 [ 135.648353][ T6606] ? __se_sys_ioctl+0xfc/0x170 [ 135.648380][ T6606] ? do_syscall_64+0x166/0x520 [ 135.648404][ T6606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.648451][ T6606] ? __lock_acquire+0x747/0x2de0 [ 135.648491][ T6606] ? rcu_is_watching+0x16/0xb0 [ 135.648521][ T6606] ? trace_kmalloc+0x2a/0xf0 [ 135.648546][ T6606] ? __lock_acquire+0x747/0x2de0 [ 135.648583][ T6606] ? do_raw_spin_unlock+0xf5/0x200 [ 135.648627][ T6606] ? _raw_spin_unlock+0x28/0x50 [ 135.648648][ T6606] ? _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0xd65/0x1390 [ 135.648690][ T6606] ? lock_acquire+0x115/0x350 [ 135.648730][ T6606] ? __might_fault+0xaf/0x130 [ 135.648762][ T6606] ? _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x18b4/0x3dc0 [ 135.648805][ T6606] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x1901/0x3dc0 [ 135.648850][ T6606] ? stack_depot_save_flags+0x33/0x7f0 [ 135.648875][ T6606] ? __lock_acquire+0x747/0x2de0 [ 135.648904][ T6606] ? kasan_save_track+0x4f/0x80 [ 135.648928][ T6606] ? kasan_save_track+0x3e/0x80 [ 135.648952][ T6606] ? kasan_save_free_info+0x40/0x50 [ 135.648972][ T6606] ? __kasan_slab_free+0x5c/0x80 [ 135.648997][ T6606] ? kfree+0x1c5/0x650 [ 135.649015][ T6606] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 135.649046][ T6606] ? security_file_ioctl+0xc3/0x2a0 [ 135.649076][ T6606] ? __pfx__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 135.649156][ T6606] ? kasan_quarantine_put+0xbb/0x1f0 [ 135.649191][ T6606] ? tomoyo_path_number_perm+0x219/0x5f0 [ 135.649226][ T6606] ? tomoyo_path_number_perm+0x219/0x5f0 [ 135.649268][ T6606] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 135.649330][ T6606] ? __fget_files+0x2a/0x420 [ 135.649354][ T6606] ? __fget_files+0x2a/0x420 [ 135.649375][ T6606] ? __fget_files+0x2a/0x420 [ 135.649400][ T6606] ? bpf_lsm_file_ioctl+0x9/0x20 [ 135.649426][ T6606] ? __pfx__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 135.649460][ T6606] __se_sys_ioctl+0xfc/0x170 [ 135.649490][ T6606] do_syscall_64+0x166/0x520 [ 135.649513][ T6606] ? trace_irq_disable+0x3b/0x140 [ 135.649538][ T6606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.649559][ T6606] ? clear_bhb_loop+0x70/0xc0 [ 135.649586][ T6606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.649607][ T6606] RIP: 0033:0x7f58db79e159 [ 135.649638][ T6606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.649656][ T6606] RSP: 002b:00007f58dc6ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.649678][ T6606] RAX: ffffffffffffffda RBX: 00007f58dba25fa0 RCX: 00007f58db79e159 [ 135.649695][ T6606] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 135.649708][ T6606] RBP: 00007f58dc6ac090 R08: 0000000000000000 R09: 0000000000000000 [ 135.649722][ T6606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.649735][ T6606] R13: 00007f58dba26038 R14: 00007f58dba25fa0 R15: 00007ffee2dec388 [ 135.649768][ T6606] [ 135.662127][ T5736] usb usb4-port1: unable to enumerate USB device [ 135.678686][ T6606] binder: Write failure EFAULT in pid:157 [ 136.357589][ T5723] usb 1-1: USB disconnect, device number 10 [ 136.438947][ T5723] appletouch 1-1:1.0: input: appletouch disconnected [ 136.610011][ T6620] netlink: 'syz.1.211': attribute type 1 has an invalid length. [ 136.610028][ T6620] netlink: 224 bytes leftover after parsing attributes in process `syz.1.211'. [ 136.680583][ T6621] kvm: pic: non byte write [ 136.721071][ T6628] process 'syz.4.212' launched './file0' with NULL argv: empty string added [ 137.032955][ T5716] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 137.195643][ T5716] usb 5-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 137.196838][ T5716] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.196892][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.199156][ T5716] usb 5-1: config 0 descriptor?? [ 137.416367][ T6630] FAULT_INJECTION: forcing a failure. [ 137.416367][ T6630] name failslab, interval 1, probability 0, space 0, times 0 [ 137.416398][ T6630] CPU: 0 UID: 0 PID: 6630 Comm: syz.4.213 Not tainted syzkaller #0 PREEMPT(full) [ 137.416422][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.416440][ T6630] Call Trace: [ 137.416446][ T6630] [ 137.416453][ T6630] dump_stack_lvl+0xe8/0x150 [ 137.416479][ T6630] should_fail_ex+0x3eb/0x540 [ 137.416524][ T6630] should_failslab+0xa8/0x100 [ 137.416556][ T6630] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 137.416586][ T6630] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 137.416612][ T6630] ? smb3_parse_devname+0x16b/0x850 [ 137.416636][ T6630] ? smb3_parse_devname+0x16b/0x850 [ 137.416666][ T6630] kstrndup+0x7e/0x160 [ 137.416694][ T6630] smb3_parse_devname+0x16b/0x850 [ 137.416744][ T6630] smb3_fs_context_parse_param+0x4255/0x7b50 [ 137.416771][ T6630] ? __se_sys_fsconfig+0x68d/0x810 [ 137.416811][ T6630] ? __pfx___mutex_lock+0x10/0x10 [ 137.416832][ T6630] ? __pfx_smb3_fs_context_parse_param+0x10/0x10 [ 137.416855][ T6630] ? static_key_count+0x41/0x70 [ 137.416894][ T6630] vfs_parse_fs_param+0x1a9/0x420 [ 137.416927][ T6630] __se_sys_fsconfig+0x6b9/0x810 [ 137.416969][ T6630] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 137.416995][ T6630] ? rcu_is_watching+0x16/0xb0 [ 137.417046][ T6630] ? __x64_sys_fsconfig+0x20/0xc0 [ 137.417084][ T6630] do_syscall_64+0x166/0x520 [ 137.417111][ T6630] ? trace_irq_disable+0x3b/0x140 [ 137.417137][ T6630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.417159][ T6630] ? clear_bhb_loop+0x70/0xc0 [ 137.417207][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.417233][ T6630] RIP: 0033:0x7f019499e159 [ 137.417253][ T6630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.417270][ T6630] RSP: 002b:00007f01958f8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 137.417302][ T6630] RAX: ffffffffffffffda RBX: 00007f0194c25fa0 RCX: 00007f019499e159 [ 137.417314][ T6630] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 0000000000000006 [ 137.417324][ T6630] RBP: 00007f0194a3506b R08: 0000000000000000 R09: 0000000000000000 [ 137.417334][ T6630] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 137.417345][ T6630] R13: 00007f0194c26038 R14: 00007f0194c25fa0 R15: 00007ffd9ee2f0e8 [ 137.417395][ T6630] [ 137.419223][ T6630] CIFS: VFS: Unable to allocate memory for devname [ 137.425608][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.427126][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.718372][ T5716] usb 5-1: string descriptor 0 read error: -71 [ 137.729603][ T5716] usb 5-1: USB disconnect, device number 3 [ 137.830532][ T6648] ======================================================= [ 137.830532][ T6648] WARNING: The mand mount option has been deprecated and [ 137.830532][ T6648] and is ignored by this kernel. Remove the mand [ 137.830532][ T6648] option from the mount to silence this warning. [ 137.830532][ T6648] ======================================================= [ 138.254820][ T5723] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 138.405815][ T5723] usb 1-1: New USB device found: idVendor=17ef, idProduct=60b5, bcdDevice=0.40 [ 138.407714][ T5723] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 138.407750][ T5723] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.407779][ T5723] usb 1-1: config 1 interface 0 has no altsetting 0 [ 138.412505][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.412534][ T5723] usb 1-1: Product: ѕ [ 138.412551][ T5723] usb 1-1: Manufacturer: 岐呦蘽䁝㝁ྂ곐⺬⢱劍䌠觳滺鼘も䪏@뺖䷹澓᰻ட鏝Ꮗ骃髉譇감虳쁻뿹턕។￿쾏歞牠꺺䐕ࠂ舋쒁뚗쀲響餵鐜蔴煗䁠搭촃뷭淹熛즜ﭨ㐮쭂僭縘༣ퟱ䦈테筪彿┦䪅촺晞뼠﨨ቺ≺뢗祜큋⑒쫫嚋饗䬋徎㕰 [ 138.412582][ T5723] usb 1-1: SerialNumber: я [ 138.451305][ T6652] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.650740][ T6672] program syz.1.229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.701578][ T5723] usbhid 1-1:1.0: can't add hid device: -71 [ 138.701723][ T5723] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 138.731681][ T5723] usb 1-1: USB disconnect, device number 11 [ 138.932701][ T6676] fuse: Bad value for 'user_id' [ 138.932727][ T6676] fuse: Bad value for 'user_id' [ 139.662866][ T5701] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 139.662967][ T991] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 139.813856][ T991] usb 2-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00 [ 139.816441][ T991] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.816494][ T991] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 139.816539][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.856043][ T5701] usb 1-1: Using ep0 maxpacket: 16 [ 139.864943][ T5701] usb 1-1: New USB device found: idVendor=056a, idProduct=00c6, bcdDevice=0.00 [ 139.883172][ T5701] usb 1-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 139.883219][ T5701] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 139.883250][ T5701] usb 1-1: config 0 interface 0 has no altsetting 0 [ 139.883284][ T5701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.889760][ T5701] usb 1-1: config 0 descriptor?? [ 140.081524][ T991] rtsx_usb 2-1:1.0: probe with driver rtsx_usb failed with error -22 [ 140.113736][ T5701] usb 1-1: string descriptor 0 read error: -71 [ 140.121320][ T5701] usbhid 1-1:0.0: can't add hid device: -71 [ 140.121432][ T5701] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 140.154406][ T5701] usb 1-1: USB disconnect, device number 12 [ 140.160077][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.812881][ T5716] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 140.962935][ T5716] usb 4-1: Invalid ep0 maxpacket: 32 [ 141.005205][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 141.093374][ T5716] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 141.243105][ T5716] usb 4-1: Invalid ep0 maxpacket: 32 [ 141.243428][ T5716] usb usb4-port1: attempt power cycle [ 141.490310][ T6748] FAULT_INJECTION: forcing a failure. [ 141.490310][ T6748] name failslab, interval 1, probability 0, space 0, times 0 [ 141.490344][ T6748] CPU: 0 UID: 0 PID: 6748 Comm: syz.4.250 Not tainted syzkaller #0 PREEMPT(full) [ 141.490369][ T6748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.490383][ T6748] Call Trace: [ 141.490392][ T6748] [ 141.490402][ T6748] dump_stack_lvl+0xe8/0x150 [ 141.490440][ T6748] should_fail_ex+0x3eb/0x540 [ 141.490470][ T6748] should_failslab+0xa8/0x100 [ 141.490504][ T6748] __kmalloc_cache_noprof+0x9e/0x600 [ 141.490528][ T6748] ? xa_load+0x60/0x210 [ 141.490556][ T6748] ? cma_alloc_port+0xb5/0x660 [ 141.490579][ T6748] ? cma_alloc_port+0xb5/0x660 [ 141.490619][ T6748] cma_alloc_port+0xb5/0x660 [ 141.490646][ T6748] rdma_bind_addr_dst+0xe28/0x35a0 [ 141.490712][ T6748] rdma_listen+0x282/0xe60 [ 141.490754][ T6748] ? __pfx_rdma_listen+0x10/0x10 [ 141.490791][ T6748] ? do_raw_spin_unlock+0xf5/0x200 [ 141.490830][ T6748] ucma_listen+0x34c/0x440 [ 141.490867][ T6748] ? __pfx_ucma_listen+0x10/0x10 [ 141.490905][ T6748] ? __might_fault+0xaf/0x130 [ 141.490946][ T6748] ucma_write+0x249/0x2f0 [ 141.490982][ T6748] ? __pfx_ucma_write+0x10/0x10 [ 141.491013][ T6748] ? security_file_permission+0x75/0x260 [ 141.491046][ T6748] ? rw_verify_area+0x203/0x4c0 [ 141.491076][ T6748] vfs_writev+0x4bb/0x990 [ 141.491110][ T6748] ? __pfx_ucma_write+0x10/0x10 [ 141.491148][ T6748] ? __pfx_vfs_writev+0x10/0x10 [ 141.491194][ T6748] ? __fget_files+0x2a/0x420 [ 141.491217][ T6748] ? __fget_files+0x3a2/0x420 [ 141.491251][ T6748] ? fdget+0x1ac/0x250 [ 141.491283][ T6748] do_writev+0x154/0x2e0 [ 141.491318][ T6748] ? __pfx_do_writev+0x10/0x10 [ 141.491363][ T6748] do_syscall_64+0x166/0x520 [ 141.491389][ T6748] ? trace_irq_disable+0x3b/0x140 [ 141.491415][ T6748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.491438][ T6748] ? clear_bhb_loop+0x70/0xc0 [ 141.491467][ T6748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.491489][ T6748] RIP: 0033:0x7f019499e159 [ 141.491510][ T6748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.491529][ T6748] RSP: 002b:00007f01958f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 141.491553][ T6748] RAX: ffffffffffffffda RBX: 00007f0194c25fa0 RCX: 00007f019499e159 [ 141.491570][ T6748] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000c [ 141.491585][ T6748] RBP: 00007f01958f8090 R08: 0000000000000000 R09: 0000000000000000 [ 141.491600][ T6748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.491620][ T6748] R13: 00007f0194c26038 R14: 00007f0194c25fa0 R15: 00007ffd9ee2f0e8 [ 141.491657][ T6748] [ 141.586165][ T5716] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 141.628139][ T5716] usb 4-1: Invalid ep0 maxpacket: 32 [ 141.854889][ T5716] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 141.874223][ T5716] usb 4-1: Invalid ep0 maxpacket: 32 [ 141.874985][ T5716] usb usb4-port1: unable to enumerate USB device [ 142.187418][ T6766] FAULT_INJECTION: forcing a failure. [ 142.187418][ T6766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.187484][ T6766] CPU: 0 UID: 0 PID: 6766 Comm: syz.4.254 Not tainted syzkaller #0 PREEMPT(full) [ 142.187509][ T6766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.187523][ T6766] Call Trace: [ 142.187531][ T6766] [ 142.187541][ T6766] dump_stack_lvl+0xe8/0x150 [ 142.187575][ T6766] should_fail_ex+0x3eb/0x540 [ 142.187603][ T6766] _copy_to_user+0x31/0xb0 [ 142.187634][ T6766] simple_read_from_buffer+0xe1/0x170 [ 142.187665][ T6766] proc_fail_nth_read+0x1bb/0x230 [ 142.187697][ T6766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.187731][ T6766] ? rw_verify_area+0x24a/0x4c0 [ 142.187759][ T6766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.187788][ T6766] vfs_read+0x213/0xa80 [ 142.187819][ T6766] ? __pfx___mutex_lock+0x10/0x10 [ 142.187849][ T6766] ? __pfx_vfs_read+0x10/0x10 [ 142.187880][ T6766] ? __fget_files+0x2a/0x420 [ 142.187904][ T6766] ? __fget_files+0x3a2/0x420 [ 142.187927][ T6766] ? __fget_files+0x2a/0x420 [ 142.187955][ T6766] ? fdget+0x1ac/0x250 [ 142.187986][ T6766] ksys_read+0x150/0x270 [ 142.188014][ T6766] ? __pfx_ksys_read+0x10/0x10 [ 142.188052][ T6766] do_syscall_64+0x166/0x520 [ 142.188078][ T6766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.188108][ T6766] ? clear_bhb_loop+0x70/0xc0 [ 142.188135][ T6766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.188158][ T6766] RIP: 0033:0x7f019495e98e [ 142.188179][ T6766] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 142.188197][ T6766] RSP: 002b:00007f01958f7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.188221][ T6766] RAX: ffffffffffffffda RBX: 00007f01958f86c0 RCX: 00007f019495e98e [ 142.188238][ T6766] RDX: 000000000000000f RSI: 00007f01958f80a0 RDI: 0000000000000006 [ 142.188252][ T6766] RBP: 00007f01958f8090 R08: 0000000000000000 R09: 0000000000000000 [ 142.188266][ T6766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.188278][ T6766] R13: 00007f0194c26038 R14: 00007f0194c25fa0 R15: 00007ffd9ee2f0e8 [ 142.188310][ T6766] [ 142.393537][ T991] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 142.460118][ T5716] usb 2-1: USB disconnect, device number 17 [ 142.582967][ T991] usb 1-1: Using ep0 maxpacket: 8 [ 142.583709][ T991] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 142.584924][ T991] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 142.584976][ T991] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.585000][ T991] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.585028][ T991] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.585053][ T991] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.585107][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.810039][ T991] usb 1-1: GET_CAPABILITIES returned 0 [ 142.810098][ T991] usbtmc 1-1:16.0: can't read capabilities [ 142.958208][ T6781] FAULT_INJECTION: forcing a failure. [ 142.958208][ T6781] name failslab, interval 1, probability 0, space 0, times 0 [ 142.958245][ T6781] CPU: 0 UID: 0 PID: 6781 Comm: syz.1.257 Not tainted syzkaller #0 PREEMPT(full) [ 142.958279][ T6781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.958306][ T6781] Call Trace: [ 142.958315][ T6781] [ 142.958326][ T6781] dump_stack_lvl+0xe8/0x150 [ 142.958377][ T6781] should_fail_ex+0x3eb/0x540 [ 142.958420][ T6781] should_failslab+0xa8/0x100 [ 142.958469][ T6781] ? skb_clone+0x212/0x3a0 [ 142.958519][ T6781] kmem_cache_alloc_noprof+0x9c/0x600 [ 142.958548][ T6781] ? skb_clone+0x212/0x3a0 [ 142.958590][ T6781] skb_clone+0x212/0x3a0 [ 142.958629][ T6781] __netlink_deliver_tap+0x355/0x6e0 [ 142.958681][ T6781] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.958738][ T6781] netlink_deliver_tap+0x19c/0x1b0 [ 142.958779][ T6781] netlink_unicast+0x781/0x940 [ 142.958832][ T6781] netlink_sendmsg+0x7c3/0xae0 [ 142.958872][ T6781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.958922][ T6781] ? apparmor_socket_sendmsg+0x98/0x360 [ 142.958962][ T6781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.959002][ T6781] sock_sendmsg_nosec+0x13a/0x180 [ 142.959058][ T6781] ____sys_sendmsg+0x54e/0x850 [ 142.959113][ T6781] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.959168][ T6781] ? import_iovec+0x73/0xa0 [ 142.959213][ T6781] ___sys_sendmsg+0x2a5/0x360 [ 142.959245][ T6781] ? __lock_acquire+0x747/0x2de0 [ 142.959286][ T6781] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.959388][ T6781] ? __fget_files+0x3a2/0x420 [ 142.959424][ T6781] ? __fget_files+0x2a/0x420 [ 142.959488][ T6781] __x64_sys_sendmsg+0x1b1/0x290 [ 142.959545][ T6781] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.959605][ T6781] do_syscall_64+0x166/0x520 [ 142.959643][ T6781] ? trace_irq_disable+0x3b/0x140 [ 142.959684][ T6781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.959715][ T6781] ? clear_bhb_loop+0x70/0xc0 [ 142.959753][ T6781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.959778][ T6781] RIP: 0033:0x7f58db79e159 [ 142.959810][ T6781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.959831][ T6781] RSP: 002b:00007f58dc6ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.959863][ T6781] RAX: ffffffffffffffda RBX: 00007f58dba25fa0 RCX: 00007f58db79e159 [ 142.959887][ T6781] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 142.959903][ T6781] RBP: 00007f58dc6ac090 R08: 0000000000000000 R09: 0000000000000000 [ 142.959919][ T6781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.959934][ T6781] R13: 00007f58dba26038 R14: 00007f58dba25fa0 R15: 00007ffee2dec388 [ 142.959973][ T6781] [ 143.257854][ T6760] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 143.261848][ T6760] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 143.290594][ T991] usb 1-1: USB disconnect, device number 13 [ 144.573037][ T32] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 144.723650][ T32] usb 4-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 144.726492][ T32] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 65296, setting to 64 [ 144.726529][ T32] usb 4-1: config 0 interface 0 has no altsetting 0 [ 144.730067][ T32] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 144.730097][ T32] usb 4-1: Product: syz [ 144.730113][ T32] usb 4-1: Manufacturer: syz [ 144.730130][ T32] usb 4-1: SerialNumber: syz [ 144.791708][ T32] usb 4-1: config 0 descriptor?? [ 144.793075][ T991] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 144.817319][ T32] usb 4-1: selecting invalid altsetting 0 [ 144.942869][ T991] usb 1-1: Using ep0 maxpacket: 32 [ 144.943827][ T991] usb 1-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 144.944868][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.976603][ T991] usb 1-1: config 0 descriptor?? [ 145.033400][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.034025][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.034483][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.036690][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.037121][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.037596][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.038064][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.038537][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.038972][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.040928][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.041401][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.041837][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.086740][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.087208][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.087636][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.127668][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.159495][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.159937][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.160377][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.160816][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.161292][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.161749][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.162178][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.162629][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.170243][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.170682][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.171122][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.236235][ T991] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 145.238583][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.239737][ T6819] usb 4-1: cannot submit urb 0, error -8: unknown error [ 145.300357][ T6843] netlink: 36 bytes leftover after parsing attributes in process `syz.3.266'. [ 145.346346][ T991] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 145.347543][ T991] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 145.347608][ T991] usb 1-1: media controller created [ 145.424102][ T991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.521224][ T991] az6027: usb out operation failed. (-71) [ 145.524800][ T991] az6027: usb out operation failed. (-71) [ 145.524849][ T991] stb0899_attach: Driver disabled by Kconfig [ 145.524873][ T991] az6027: no front-end attached [ 145.524873][ T991] [ 145.562558][ T991] az6027: usb out operation failed. (-71) [ 145.562594][ T991] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 145.585676][ T991] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 145.590545][ T991] dvb-usb: schedule remote query interval to 400 msecs. [ 145.590569][ T991] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 145.623150][ T991] usb 1-1: USB disconnect, device number 14 [ 145.749579][ T991] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 146.241228][ T6866] FAULT_INJECTION: forcing a failure. [ 146.241228][ T6866] name failslab, interval 1, probability 0, space 0, times 0 [ 146.241259][ T6866] CPU: 1 UID: 0 PID: 6866 Comm: syz.1.280 Not tainted syzkaller #0 PREEMPT(full) [ 146.241284][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.241298][ T6866] Call Trace: [ 146.241306][ T6866] [ 146.241316][ T6866] dump_stack_lvl+0xe8/0x150 [ 146.241350][ T6866] should_fail_ex+0x3eb/0x540 [ 146.241384][ T6866] should_failslab+0xa8/0x100 [ 146.241415][ T6866] ? alloc_empty_file+0x5b/0x1d0 [ 146.241449][ T6866] kmem_cache_alloc_noprof+0x9c/0x600 [ 146.241473][ T6866] ? stack_depot_save_flags+0x33/0x7f0 [ 146.241498][ T6866] ? alloc_empty_file+0x5b/0x1d0 [ 146.241531][ T6866] ? kmem_cache_alloc_noprof+0x151/0x600 [ 146.241557][ T6866] alloc_empty_file+0x5b/0x1d0 [ 146.241592][ T6866] path_openat+0x9d/0x1da0 [ 146.241655][ T6866] do_file_open+0x23e/0x4a0 [ 146.241689][ T6866] ? __pfx_do_file_open+0x10/0x10 [ 146.241739][ T6866] ? _raw_spin_unlock+0x28/0x50 [ 146.241760][ T6866] ? alloc_fd+0x6af/0x760 [ 146.241802][ T6866] do_sys_openat2+0x115/0x200 [ 146.241840][ T6866] ? __pfx_do_sys_openat2+0x10/0x10 [ 146.241875][ T6866] ? ksys_write+0x242/0x270 [ 146.241904][ T6866] ? __pfx_ksys_write+0x10/0x10 [ 146.241934][ T6866] __x64_sys_openat+0x138/0x170 [ 146.241974][ T6866] do_syscall_64+0x166/0x520 [ 146.241999][ T6866] ? trace_irq_disable+0x3b/0x140 [ 146.242026][ T6866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.242050][ T6866] ? clear_bhb_loop+0x70/0xc0 [ 146.242078][ T6866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.242101][ T6866] RIP: 0033:0x7f58db79e159 [ 146.242121][ T6866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.242140][ T6866] RSP: 002b:00007f58dc6ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 146.242165][ T6866] RAX: ffffffffffffffda RBX: 00007f58dba25fa0 RCX: 00007f58db79e159 [ 146.242182][ T6866] RDX: 0000000000060042 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 146.242198][ T6866] RBP: 00007f58dc6ac090 R08: 0000000000000000 R09: 0000000000000000 [ 146.242213][ T6866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.242227][ T6866] R13: 00007f58dba26038 R14: 00007f58dba25fa0 R15: 00007ffee2dec388 [ 146.242261][ T6866] [ 146.763387][ T5623] Bluetooth: hci0: command 0x0406 tx timeout [ 146.946997][ T6818] usb 4-1: cannot submit urb 0, error -8: unknown error [ 147.137755][ T6892] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 147.214184][ T1230] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 147.363714][ T1230] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41 [ 147.365278][ T1230] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.369202][ T1230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 147.369236][ T1230] usb 1-1: Product: syz [ 147.369256][ T1230] usb 1-1: Manufacturer: syz [ 147.369275][ T1230] usb 1-1: SerialNumber: syz [ 147.636793][ T1230] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 147.832688][ T32] usb 1-1: USB disconnect, device number 15 [ 147.851834][ T32] usblp0: removed [ 147.953766][ T5736] usb 4-1: USB disconnect, device number 18 [ 149.932924][ T991] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 150.062871][ T1230] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 150.082987][ T991] usb 4-1: Using ep0 maxpacket: 8 [ 150.083946][ T991] usb 4-1: New USB device found: idVendor=0e41, idProduct=4249, bcdDevice=0.40 [ 150.085502][ T991] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.085528][ T991] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.088265][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.088290][ T991] usb 4-1: Product: syz [ 150.088307][ T991] usb 4-1: Manufacturer: syz [ 150.088329][ T991] usb 4-1: SerialNumber: syz [ 150.200203][ T6991] afs: Bad value for 'flock' [ 150.223870][ T1230] usb 1-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 150.227327][ T1230] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 150.227363][ T1230] usb 1-1: Product: syz [ 150.227380][ T1230] usb 1-1: SerialNumber: syz [ 150.230750][ T1230] usb 1-1: config 0 descriptor?? [ 150.356461][ T991] usb 4-1: unit 6 not found! [ 150.415378][ T991] usb 4-1: USB disconnect, device number 19 [ 150.446503][ T1230] hso 1-1:0.0: Failed to find BULK eps [ 150.453922][ T5736] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 150.481940][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.618341][ T5736] usb 5-1: unable to get BOS descriptor or descriptor too short [ 150.618396][ T5736] usb 5-1: New USB device found: idVendor=1235, idProduct=8012, bcdDevice=0.40 [ 150.621419][ T5736] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 150.621452][ T5736] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.629615][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.629696][ T5736] usb 5-1: Product: syz [ 150.629737][ T5736] usb 5-1: Manufacturer: syz [ 150.629779][ T5736] usb 5-1: SerialNumber: syz [ 150.700653][ T991] usb 1-1: USB disconnect, device number 16 [ 150.926256][ T5736] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 151.381761][ T5736] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 151.410460][ T5736] usb 5-1: USB disconnect, device number 4 [ 151.521072][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.966894][ T5736] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 152.113945][ T5736] usb 1-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 152.114996][ T5736] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.115047][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.119057][ T5736] usb 1-1: config 0 descriptor?? [ 152.175871][ T7035] device-mapper: dirty region log: invalid region size !024 [ 152.175939][ T7035] device-mapper: table: 248:0: mirror: Error creating mirror dirty log (-EINVAL) [ 152.175987][ T7035] device-mapper: ioctl: error adding target to table [ 152.326515][ T5736] usbhid 1-1:0.0: can't add hid device: -71 [ 152.326645][ T5736] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 152.328744][ T5736] usb 1-1: USB disconnect, device number 17 [ 152.458776][ T7042] netlink: 'syz.1.324': attribute type 2 has an invalid length. [ 152.655478][ T7051] FAULT_INJECTION: forcing a failure. [ 152.655478][ T7051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.655517][ T7051] CPU: 0 UID: 0 PID: 7051 Comm: syz.4.326 Not tainted syzkaller #0 PREEMPT(full) [ 152.655547][ T7051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.655560][ T7051] Call Trace: [ 152.655568][ T7051] [ 152.655577][ T7051] dump_stack_lvl+0xe8/0x150 [ 152.655609][ T7051] should_fail_ex+0x3eb/0x540 [ 152.655635][ T7051] strncpy_from_user+0x36/0x2c0 [ 152.655660][ T7051] do_getname+0x77/0x250 [ 152.655695][ T7051] do_sys_openat2+0xce/0x200 [ 152.655745][ T7051] ? __se_sys_futex+0x3a8/0x450 [ 152.655785][ T7051] ? __pfx_do_sys_openat2+0x10/0x10 [ 152.655832][ T7051] ? rcu_is_watching+0x16/0xb0 [ 152.655873][ T7051] __x64_sys_openat+0x138/0x170 [ 152.655919][ T7051] do_syscall_64+0x166/0x520 [ 152.655950][ T7051] ? trace_irq_disable+0x3b/0x140 [ 152.655987][ T7051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.656015][ T7051] ? clear_bhb_loop+0x70/0xc0 [ 152.656047][ T7051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.656073][ T7051] RIP: 0033:0x7f019499e159 [ 152.656097][ T7051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.656120][ T7051] RSP: 002b:00007f01958d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 152.656148][ T7051] RAX: ffffffffffffffda RBX: 00007f0194c26090 RCX: 00007f019499e159 [ 152.656167][ T7051] RDX: 0000000000208800 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 152.656185][ T7051] RBP: 00007f0194a3506b R08: 0000000000000000 R09: 0000000000000000 [ 152.656203][ T7051] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 152.656219][ T7051] R13: 00007f0194c26128 R14: 00007f0194c26090 R15: 00007ffd9ee2f0e8 [ 152.656259][ T7051] [ 152.884152][ T32] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 153.052884][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 153.053997][ T32] usb 1-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=0.40 [ 153.056007][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.056056][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.099509][ T32] usb 1-1: config 0 descriptor?? [ 153.108153][ T32] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 153.110126][ T32] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 153.517215][ T991] usb 1-1: USB disconnect, device number 18 [ 153.552097][ T991] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 154.002926][ T7077] overlay: Bad value for 'uuid' [ 154.027800][ T7077] evm: overlay not supported [ 154.208602][ T7086] [ 154.210988][ T7086] ====================================================== [ 154.218020][ T7086] WARNING: possible circular locking dependency detected [ 154.225067][ T7086] syzkaller #0 Not tainted [ 154.229492][ T7086] ------------------------------------------------------ [ 154.236519][ T7086] syz.1.341/7086 is trying to acquire lock: [ 154.242433][ T7086] ffff888026be6100 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 154.252186][ T7086] [ 154.252186][ T7086] but task is already holding lock: [ 154.259551][ T7086] ffff888031796a20 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 154.269069][ T7086] [ 154.269069][ T7086] which lock already depends on the new lock. [ 154.269069][ T7086] [ 154.279487][ T7086] [ 154.279487][ T7086] the existing dependency chain (in reverse order) is: [ 154.288510][ T7086] [ 154.288510][ T7086] -> #1 (&type->i_mutex_dir_key#5){++++}-{4:4}: [ 154.296966][ T7086] down_read+0x45/0x320 [ 154.301665][ T7086] lookup_slow+0x46/0x80 [ 154.306444][ T7086] ovl_lookup_single+0x323/0xe90 [ 154.311940][ T7086] ovl_lookup_layer+0x377/0x440 [ 154.317333][ T7086] ovl_lookup+0x5e5/0x1c80 [ 154.322289][ T7086] lookup_open+0x94b/0x1970 [ 154.327346][ T7086] path_openat+0x673/0x1da0 [ 154.332402][ T7086] do_file_open+0x23e/0x4a0 [ 154.337436][ T7086] do_sys_openat2+0x115/0x200 [ 154.342654][ T7086] __x64_sys_openat+0x138/0x170 [ 154.348046][ T7086] do_syscall_64+0x166/0x520 [ 154.353186][ T7086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.359634][ T7086] [ 154.359634][ T7086] -> #0 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 154.367557][ T7086] __lock_acquire+0x164c/0x2de0 [ 154.373178][ T7086] lock_acquire+0x115/0x350 [ 154.378265][ T7086] __d_alloc_parallel+0xc32/0x1700 [ 154.384062][ T7086] __lookup_slow+0x82/0x2f0 [ 154.389108][ T7086] lookup_slow+0x59/0x80 [ 154.393904][ T7086] path_lookupat+0x3f5/0x8c0 [ 154.399052][ T7086] filename_lookup+0x265/0x5d0 [ 154.404367][ T7086] kern_path+0x3d/0x150 [ 154.409059][ T7086] tomoyo_mount_permission+0x79e/0x9e0 [ 154.415051][ T7086] security_sb_mount+0xe4/0x320 [ 154.420734][ T7086] path_mount+0xbc/0x1050 [ 154.425638][ T7086] __se_sys_mount+0x31d/0x420 [ 154.430868][ T7086] do_syscall_64+0x166/0x520 [ 154.435994][ T7086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.442443][ T7086] [ 154.442443][ T7086] other info that might help us debug this: [ 154.442443][ T7086] [ 154.452712][ T7086] Possible unsafe locking scenario: [ 154.452712][ T7086] [ 154.460232][ T7086] CPU0 CPU1 [ 154.465605][ T7086] ---- ---- [ 154.471081][ T7086] rlock(&type->i_mutex_dir_key#5); [ 154.476382][ T7086] lock(DCACHE_PAR_LOOKUP); [ 154.483520][ T7086] lock(&type->i_mutex_dir_key#5); [ 154.491280][ T7086] lock(DCACHE_PAR_LOOKUP); [ 154.495883][ T7086] [ 154.495883][ T7086] *** DEADLOCK *** [ 154.495883][ T7086] [ 154.504044][ T7086] locks held by syz.1.341/7086: 2, last CPU#1: [ 154.510272][ T7086] #0: ffffffff8f8f7338 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_mount_permission+0x2b5/0x9e0 [ 154.520169][ T7086] #1: ffff888031796a20 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 154.530281][ T7086] [ 154.530281][ T7086] stack backtrace: [ 154.536220][ T7086] CPU: 1 UID: 0 PID: 7086 Comm: syz.1.341 Not tainted syzkaller #0 PREEMPT(full) [ 154.545454][ T7086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.555567][ T7086] Call Trace: [ 154.559129][ T7086] [ 154.562090][ T7086] dump_stack_lvl+0xe8/0x150 [ 154.566740][ T7086] print_circular_bug+0x2e2/0x300 [ 154.571844][ T7086] check_noncircular+0x12f/0x150 [ 154.576818][ T7086] __lock_acquire+0x164c/0x2de0 [ 154.581713][ T7086] lock_acquire+0x115/0x350 [ 154.586238][ T7086] ? __d_alloc_parallel+0x39e/0x1700 [ 154.591646][ T7086] ? __d_alloc_parallel+0x39e/0x1700 [ 154.596949][ T7086] ? __d_alloc_parallel+0x39e/0x1700 [ 154.602261][ T7086] __d_alloc_parallel+0xc32/0x1700 [ 154.607390][ T7086] ? __d_alloc_parallel+0x39e/0x1700 [ 154.612710][ T7086] ? __d_alloc_parallel+0x39e/0x1700 [ 154.618046][ T7086] ? __pfx___d_alloc_parallel+0x10/0x10 [ 154.623618][ T7086] ? lock_acquire+0x115/0x350 [ 154.628326][ T7086] __lookup_slow+0x82/0x2f0 [ 154.632858][ T7086] lookup_slow+0x59/0x80 [ 154.637144][ T7086] path_lookupat+0x3f5/0x8c0 [ 154.641850][ T7086] filename_lookup+0x265/0x5d0 [ 154.646637][ T7086] ? __pfx_filename_lookup+0x10/0x10 [ 154.651954][ T7086] ? do_getname_kernel+0x54/0x230 [ 154.656998][ T7086] ? do_getname_kernel+0x97/0x230 [ 154.662056][ T7086] ? __asan_memcpy+0x40/0x70 [ 154.666660][ T7086] ? do_getname_kernel+0x183/0x230 [ 154.671797][ T7086] kern_path+0x3d/0x150 [ 154.675971][ T7086] tomoyo_mount_permission+0x79e/0x9e0 [ 154.681535][ T7086] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 154.687188][ T7086] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 154.693199][ T7086] ? kasan_save_track+0x4f/0x80 [ 154.698105][ T7086] ? kasan_quarantine_put+0xbb/0x1f0 [ 154.703422][ T7086] security_sb_mount+0xe4/0x320 [ 154.708298][ T7086] path_mount+0xbc/0x1050 [ 154.712645][ T7086] ? user_path_at+0xd4/0x160 [ 154.717264][ T7086] __se_sys_mount+0x31d/0x420 [ 154.721979][ T7086] ? __pfx___se_sys_mount+0x10/0x10 [ 154.727188][ T7086] ? __x64_sys_mount+0x20/0xc0 [ 154.732026][ T7086] do_syscall_64+0x166/0x520 [ 154.736811][ T7086] ? trace_irq_disable+0x3b/0x140 [ 154.741862][ T7086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.747973][ T7086] ? clear_bhb_loop+0x70/0xc0 [ 154.752676][ T7086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.758611][ T7086] RIP: 0033:0x7f58db79e159 [ 154.763043][ T7086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.782843][ T7086] RSP: 002b:00007f58dc68b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 154.791297][ T7086] RAX: ffffffffffffffda RBX: 00007f58dba26090 RCX: 00007f58db79e159 [ 154.799297][ T7086] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000200000000040 [ 154.807286][ T7086] RBP: 00007f58db83506b R08: 0000200000000480 R09: 0000000000000000 [ 154.815290][ T7086] R10: 0000000000975405 R11: 0000000000000246 R12: 0000000000000000 [ 154.823542][ T7086] R13: 00007f58dba26128 R14: 00007f58dba26090 R15: 00007ffee2dec388 [ 154.831545][ T7086] [ 154.870623][ T7086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.872080][ T7086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.092945][ T5736] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 155.142861][ T991] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 155.243059][ T5736] usb 2-1: Using ep0 maxpacket: 32 [ 155.243743][ T5736] usb 2-1: New USB device found: idVendor=04d8, idProduct=f002, bcdDevice=0.00 [ 155.244602][ T5736] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.244626][ T5736] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.244645][ T5736] usb 2-1: config 0 interface 0 has no altsetting 0 [ 155.244667][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.246062][ T5736] usb 2-1: config 0 descriptor?? [ 155.324230][ T991] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 155.325153][ T991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.325208][ T991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.325233][ T991] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.325271][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.326738][ T991] usb 1-1: config 0 descriptor?? [ 155.512961][ T5736] hid-picolcd 0003:04D8:F002.0007: No report with id 0xf3 found [ 155.513016][ T5736] hid-picolcd 0003:04D8:F002.0007: No report with id 0xf4 found [ 155.811980][ T991] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 157.215274][ T5736] usb 2-1: USB disconnect, device number 18 [ 157.234835][ T5716] usb 1-1: reset high-speed USB device number 19 using dummy_hcd [ 158.004375][ T32] usb 1-1: USB disconnect, device number 19