last executing test programs: 3m8.75338072s ago: executing program 2 (id=1825): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000011006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514001ac0080002008100030006a101c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) socket(0x2, 0x3, 0xff) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r1, 0xa, 0x21) fcntl$setlease(r1, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000100)}, 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000540)={0x8, r3}) 3m7.815023766s ago: executing program 2 (id=1832): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef80"], 0xfe33) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x24040850) sendmsg$NFT_BATCH(r1, 0x0, 0x24000840) sendmsg$NFT_BATCH(r1, 0x0, 0x20008890) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0xc0844123, 0xfffffffffffffffd) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4000}) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r3, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "3533670244f9c17b", "fd73b0610edb2d71e52c522eddc7014d", "421c1beb", "2302ad114616d7c6"}, 0x28) 3m7.616849514s ago: executing program 2 (id=1834): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)={0x30, 0x0, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x30}}, 0x20000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40101, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x158, 0x10, 0x413, 0x0, 0x25dfdbfa, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x6}, {@in6=@private1, 0x4d4, 0x32}, @in=@multicast1, {0x0, 0x3, 0x76a, 0x80000000000010, 0x3, 0x0, 0x9}, {0x0, 0xffffffffffffffff, 0x4}, {0xf6, 0x0, 0x7}, 0x70bd26, 0x0, 0xa, 0x1, 0x9, 0x110}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x60, "ee975d40df06c77860e09d464fffd622034fe232f7d36eb86a083e"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) copy_file_range(r4, 0x0, r4, 0x0, 0x6, 0x130) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000180)='virtiofs\x00', 0x2040000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r5, &(0x7f0000000000)='7', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md0\x00', 0x4002, 0x0) ioctl(r6, 0x4004092b, 0x0) fanotify_init(0x10, 0x80000) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x4000) ioctl$BLKRASET(r9, 0x1262, 0x0) syz_kvm_setup_cpu$x86(r8, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) 3m7.137787638s ago: executing program 2 (id=1835): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'veth0_to_team\x00'}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x64) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) close(r0) 3m6.940659814s ago: executing program 2 (id=1838): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x101000, 0x4, 0x21}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='27', 0x2) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x158}, 0x0, 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000140)=0x4) socket$key(0xf, 0x3, 0x2) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000180)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x5, 0xb0f, 0x4, 0x3, 0x80000001, 0xffffffffffffffff}) r3 = syz_open_procfs(r2, &(0x7f0000000100)='net/ip_vs\x00') setns(0xc9, 0x40000000) r4 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000002380)='.\xd4uu\x16\x85s\x00\x00', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xb9{\x0fQS\xa7\x02\x93\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86LK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\x86\v\x9cL\x8e1K\x00'/158, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x587082, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = getpid() syz_pidfd_open(r5, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000002300), 0x26002, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000002340), 0x64a000, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x26, 0x0, 0x10000000000001) read$FUSE(r3, &(0x7f00000002c0)={0x2020}, 0x2020) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000e80), 0xa0842, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xea, 0x200000a, 0x12, r6, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x9, 0x0, &(0x7f00000001c0)={&(0x7f0000002400)=ANY=[@ANYBLOB="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"], 0x100}}, 0x4000000) 3m6.332972345s ago: executing program 2 (id=1841): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000040)) r1 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040)}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') rename(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='./file0\x00') mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) removexattr(&(0x7f0000000000)='./proc/sys/net/sctp/cookie_hmac_alg\x00', &(0x7f0000000040)=@known='trusted.overlay.origin\x00') write$cgroup_int(r4, &(0x7f00000000c0)=0x8, 0x12) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/cookie_hmac_alg\x00', 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r6, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x0) r7 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f00000004c0)={0x0, "b5d9cc420ea78a8a01b1860297632989b6dad7ccab7d94fcaf0848e178d4923828bcd02d82e9dbd778782d4067f87ae8c765c05b83abfc3e3d878bce6953e314", 0x11}, 0x48, r5) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000340)={0x3, 0x0, @c}, 0x29, r7) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r8, 0x708, 0xb8f7) 2m50.747251013s ago: executing program 32 (id=1841): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000040)) r1 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040)}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') rename(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='./file0\x00') mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) removexattr(&(0x7f0000000000)='./proc/sys/net/sctp/cookie_hmac_alg\x00', &(0x7f0000000040)=@known='trusted.overlay.origin\x00') write$cgroup_int(r4, &(0x7f00000000c0)=0x8, 0x12) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/cookie_hmac_alg\x00', 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r6, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x0) r7 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f00000004c0)={0x0, "b5d9cc420ea78a8a01b1860297632989b6dad7ccab7d94fcaf0848e178d4923828bcd02d82e9dbd778782d4067f87ae8c765c05b83abfc3e3d878bce6953e314", 0x11}, 0x48, r5) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000340)={0x3, 0x0, @c}, 0x29, r7) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r8, 0x708, 0xb8f7) 2m36.664762374s ago: executing program 0 (id=2047): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x3, 0x1}, 0xc) 2m36.545947962s ago: executing program 0 (id=2048): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) shutdown(r0, 0x1) 2m36.359371589s ago: executing program 0 (id=2049): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket(0x1e, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f00000005c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0xcf5b8e5893e45368, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x1, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000, 0x0, r2}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x40, 0x0, 0x8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe5da, 0x4203, 0x1, 0x69, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6251, 0x1bffbce24371bb27, 0x3, 0x0, 0x0, r1}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20008000) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)={0xd}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x7, 0x3, 0x180, 0x2, 0xc, 0xf1, 0xfab3, 0x3, 0x5, 0x0, 0xd, 0x0, 0x6, 0x0, 0xbd9], 0x1000, 0x43102}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x7, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0x8003000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x10, 0x0, 0x42, 0x5, 0x75, 0x3, 0x36, 0xfe, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x1, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x8}, {0x1, 0xeeee0000, 0x19, 0x6, 0x2, 0x42, 0x0, 0xff, 0x3, 0x7, 0x6}, {0xf000, 0xd000, 0xf, 0x3, 0x12, 0x7, 0xa9, 0x8, 0x9, 0x9, 0xfa, 0x97}, {0xeeefa000, 0xdddd0000, 0xd, 0xa0, 0x1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0xb000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0x7000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xb, 0x9, 0x2, 0x5, 0xb0, 0x81}, {0xeeef0000, 0x30}, {0x9000, 0x9}, 0x80000031, 0x0, 0xc000, 0x2024, 0x800000a, 0xc001, 0x100000, [0xe5b5, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2m35.28097277s ago: executing program 0 (id=2054): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f80)}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 2m35.161452984s ago: executing program 0 (id=2055): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0x7, 0x0, 0x0) 2m35.037690993s ago: executing program 0 (id=2057): openat(0xffffffffffffff9c, 0x0, 0x244342, 0x196) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x3, 0xffff1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x3, 0x0, 0x6000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x3, 0x200000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000083b00060000007022fddbdf2508000000bc6d4bb5231e0ded7f07ec70d791ae888972a98ca0bea97f971f95974c982d18043a8c6e6bb60780c96fb02bc2834bb3b88eb475977f86cabd9869ca8894e35c17fb6b20247af13f9e2d17cff4cc82fee8c4abe2f65f4f7bf78f853f8863bfff006591a79a9c2e25c0b04c3088d786267de0e73b2ce873a0784c8459bc8c82021e6c6e2d35f6a4754d9c04235c09a953d737304b432457d6db8eb0dd51bae94c1de200"/195], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000040)='1\x00', 0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(r5, 0x0, 0x3f) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r5, 0x4008941a, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) setsockopt$packet_int(r12, 0x107, 0x14, 0x0, 0x0) 2m19.951295667s ago: executing program 33 (id=2057): openat(0xffffffffffffff9c, 0x0, 0x244342, 0x196) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x3, 0xffff1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x3, 0x0, 0x6000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x3, 0x200000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000083b00060000007022fddbdf2508000000bc6d4bb5231e0ded7f07ec70d791ae888972a98ca0bea97f971f95974c982d18043a8c6e6bb60780c96fb02bc2834bb3b88eb475977f86cabd9869ca8894e35c17fb6b20247af13f9e2d17cff4cc82fee8c4abe2f65f4f7bf78f853f8863bfff006591a79a9c2e25c0b04c3088d786267de0e73b2ce873a0784c8459bc8c82021e6c6e2d35f6a4754d9c04235c09a953d737304b432457d6db8eb0dd51bae94c1de200"/195], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000040)='1\x00', 0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(r5, 0x0, 0x3f) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r5, 0x4008941a, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) setsockopt$packet_int(r12, 0x107, 0x14, 0x0, 0x0) 6.222171724s ago: executing program 4 (id=2702): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f") 6.093874269s ago: executing program 4 (id=2704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "910d000000"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x180}, 0x0) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0)) 5.999831942s ago: executing program 3 (id=2705): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000500)={r0, &(0x7f00000000c0)='J}\x00', 0x4000, &(0x7f0000000440)={@align=0xb390, {0xe140, 0x8, 0xffff, 0x6}}, 0x0, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x8}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000540)=0xfffffffffffffffe, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x58000, 0x8, 0xd, 0x3, 0xe4, 0x40, 0xfd, 0x0, 0x30, 0x19}, {0x1, 0x4000, 0xe, 0x0, 0x40, 0x5, 0x7f, 0x9, 0x58, 0x3, 0x3, 0x1}, {0xffffffff, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x46}, {0x9000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xf9, 0x80, 0x7, 0xd}, {0xa000, 0x9000, 0x10, 0x7, 0x7, 0x7, 0xab, 0x7f, 0x4a, 0x83, 0xf8, 0x82}, {0x2000, 0x80a0000, 0xb, 0x9d, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xfb, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x9, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0x26000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x5, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0xf000, 0x7fff}, 0xc0040065, 0x0, 0x1000, 0x42024, 0xb, 0x1, 0x26000, [0x683ffffffffffffe, 0x3, 0x80000004, 0x7]}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) (async) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000300)=""/143, 0x8f}], 0x1, 0x0, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r6, 0xc0045009, &(0x7f00000001c0)=0x2) syz_genetlink_get_family_id$nl80211(0x0, r5) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4080) sendmsg$NL80211_CMD_REQ_SET_REG(r8, 0x0, 0x10008854) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) (async) statx(r5, &(0x7f00000003c0)='./file0\x00', 0x400, 0x80, 0x0) (async) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 5.998021227s ago: executing program 4 (id=2706): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x0, 0xff, 0xb, 0x0, 0x9}, &(0x7f0000000080)=0x20) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x2d) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r6, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000000)) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0x1233c1) ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0445624, &(0x7f0000019480)={0x80980914, 0x7, "9a555c14c966e1344198b9aaaa7da8c83e58e12800", 0x2000000000000, 0x100000004, 0x4, 0xfffffffffffffffe, 0x200008, 0x5, 0x4, 0x9, [0x9, 0x0, 0x9, 0xfffffffb]}) r8 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) unshare(0x40000000) r9 = mmap$IORING_OFF_CQ_RING(0x7fffffffc000, 0x2dc1, 0x300000f, 0x12, r8, 0x8000000) munmap$IORING_OFF_CQ_RING(r9, 0x2f51) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) pwritev2(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="a760", 0x2}], 0x1, 0x0, 0x0, 0x17) 5.157361015s ago: executing program 3 (id=2709): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) utimes(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000100)={0x3, 0x3, 0x2}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x521001, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "47920010", {0x1, 0x8, 0x5, 0x40, 0xb}}) r2 = socket(0x23, 0x80805, 0x2) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f00000000c0)={'pim6reg\x00', 0x5, 0x2}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB="0c00004e15"]) socket$inet(0x2, 0x0, 0x9) r3 = socket$pppl2tp(0x18, 0x1, 0x1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010825bd700003000000070000000500130005000000140008"], 0x30}, 0x1, 0x0, 0x0, 0x4000810}, 0x2400c046) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) r8 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r8, 0x29, 0xd0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 4.364480527s ago: executing program 4 (id=2713): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x8]}, 0x8, 0x800) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x3000, @private0, 0x6, 0x2}, 0x20) fcntl$setflags(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x40040, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d20000060003000015"], 0x90}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000013140100"], 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x40000014) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x58, 0x1409, 0x100, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x80) 4.150892552s ago: executing program 3 (id=2714): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x2d) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000140)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r5, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000000)) r6 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) unshare(0x40000000) r7 = mmap$IORING_OFF_CQ_RING(0x7fffffffc000, 0x2dc1, 0x300000f, 0x12, r6, 0x8000000) munmap$IORING_OFF_CQ_RING(r7, 0x2f51) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x400448df, &(0x7f0000000040)={'bond0\x00', 0x2000}) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="a760", 0x2}], 0x1, 0x0, 0x0, 0x17) 4.041152422s ago: executing program 5 (id=2715): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) connect(r0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0xd) prctl$PR_SET_PDEATHSIG(0x1, 0xe) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x40020, &(0x7f0000002180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions}], [{@subj_user={'subj_user', 0x3d, '{[{%-]\xdf'}}]}}) sendmsg$kcm(r0, &(0x7f0000003a80)={&(0x7f0000002240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x4, 0x0, 0x3, {0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}}}, 0x80, &(0x7f00000025c0)=[{&(0x7f00000022c0)="f1a2b922d5816c0e85d24c8325dc40fdc7cc459ff75e238d99907c40c0bd32ab", 0x20}, {&(0x7f0000002300)="ef92fa6d4a5dad936f1c3646fe10f438c6332f3f34ff1793442fef33ba2e05e59a8cd9808c45cb2cfcb4eb2620c212809cf401b905ea7fe59bbb356fdd33ece24ca42e86dde3a2c4a05983ddebfa0cf21bc064fb9f255c8c87eb85eb6e8793423e702c7d78aa9c2a7edeecf042cd9653d453134a3e8443bacab46302f2d0a092611d722bcef782ee38b17fa28237ae2af5f99c1cfcb4d4e2841a73e47ab622697b225704f1c2", 0xa6}, {&(0x7f00000023c0)="67d0e7829def32e6ce227f5f5aa9049e4dabc745afc65eaa", 0x18}, {&(0x7f0000002400)="951ab7ea23ee6724d396aa26bdb7de5ab696c4baef4b2272799006c56d784fbc35e90d465a8fcba9ad16d3a17e19849fe176ef5056739b7a64237cfe3ef7fc4d7417c0d8bfb13f499485789f9705603f579abb434343a396be7a310f3a0a60970723bdb8", 0x64}, {&(0x7f0000002480)="6aaf57f49a4a5878b471e17403e34937d76384aba1a609b3b20bd5a1f41dc131e4fc0aa809325d88ff48e4b9907499087170d11fc23dceeaf8187ba4190158cef2dafac40b511a79585b4d312108e587fa3c53c3715c6567354138", 0x5b}, {&(0x7f0000002500)="33ec87ea63663e39cf2b387defa1d3dca21e6a96cdffbefbb7b286a20b1162ca45e8b330f220e59967844a9afa52906a228ca547224271646556fca1b055afdb9fbc", 0x42}, {&(0x7f0000002580)="7f9841f2a4245a04d1314e21f647b123e56a909740b369b0d2d1", 0x1a}], 0x7, &(0x7f0000002640)=[{0x100, 0x10d, 0x800, "15ec800f95c9047e05a97e6c26b52aefa4352f9b0751e069ca22e3f6edbbabbc524134abe45d27deef107bcc72255262d615c85c309c66d983d4b431afef488264658a2a7b5b52111770ccc48639432df729c089359f30c94a98042c404b9c51e2b5dbf4dc98ccb0989b2ccad35df67729adabdf0682640ae6f56d0d1ef82f0ee949f18c8820e0e05e972a9a069e26792ed6f30ba7bd4fd360655d1e6c20c01e678778a2c9bbd746b3e36856091b1fb3412c5f800a64a2bf1b7e60b352acfe98994d5031563ac4355e56c6e4fdf43724d16f5712cf72de7616c477af9481e56a1f643ea1afe19aade1b6b31d72"}, {0x70, 0x10a, 0x6, "4edb642cb43d673e9357ebb41818b8b70012bc5444c42520b9057cbd689233b93665d4cbfdcb805f2f8df1e0f7e0b7173e139fd2488c087295df40a8587e7a074e9ca7efd68208e90d5221373ad5c0a32c46fc24706699fd8fddf43034d792"}, {0x80, 0x10b, 0x10000, "c43bee591c2f08419552a1570b751193f4248861106c479efb6c226d1939bb6c50429e81b37445f056051542b6e8669aa45b3ce0157a2bb60fdf0be7122a5c770ecb6f2c68f0796918102a42c1b53c28b95c9ed363e078106b679fedd4b028db35d0f0dc8464fdea6859cb"}, {0x110, 0x109, 0x6, "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"}, {0x100, 0x14, 0x0, "315d66b113d6bd66c4542f20c19e0f9ef696b5309a99cdb1ebb33924f51a816359fbbc4e08eb07bb15ffdc2d2d0c9cfd069a9caa46695f56e111eeadce2aa20d4037f4615f3f9316e3491f7b3ad8d58e2a8cef137abe4985e6f57349ce5ed28aa818673324b6137f82e387b1c6b16f69f03ad60ae924097dc632a6039fd8f2866c6bfb7dca92ac2fd98b8f39c696f9b7127609690b699c81ff79bea9abe783a40cd5852434c48b7fe2f39e5f9dbd5289fedca66b99ec767b81231186bd9e418231a1336d6a889ef1eda2107d259cb2e783825ddf63209241e399751758ef9c86cffdf41ed037b1673ba4375f"}, {0x1010, 0x107, 0xffffff81, "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"}], 0x1410}, 0x8010) capset(&(0x7f0000003ac0)={0x20080522, r3}, &(0x7f0000003b00)={0x7, 0x3, 0xfffffff8, 0x4, 0xe3, 0x5}) prctl$PR_SET_PDEATHSIG(0x1, 0xf) prctl$PR_SET_PDEATHSIG(0x1, 0x7) io_setup(0x4, &(0x7f0000003b40)) recvfrom(r0, &(0x7f0000003b80)=""/225, 0xe1, 0x100, &(0x7f0000003c80)=@l2tp6={0xa, 0x0, 0x100, @empty, 0x200, 0x2}, 0x80) prctl$PR_MCE_KILL_GET(0x22) prctl$PR_SET_PDEATHSIG(0x1, 0x4) capget(&(0x7f0000003d00)={0x20080522, r3}, &(0x7f0000003d40)={0xff, 0x3, 0x0, 0x4, 0x1, 0x6}) r4 = openat(r0, &(0x7f0000003d80)='./file0\x00', 0x4000, 0x80) socket$inet(0x2, 0x9, 0x9) prctl$PR_MCE_KILL_GET(0x22) prctl$PR_MCE_KILL_GET(0x22) setsockopt$inet6_int(r4, 0x29, 0xce, &(0x7f0000003dc0)=0x7, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000003e00)={0x4, 0x4, [0x0]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000003e40)={'vxcan1\x00', 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003e80)={{{@in6=@mcast1, @in=@local, 0x4e21, 0x5, 0x4e22, 0x7f, 0x8, 0x80, 0x80, 0x0, r5, r1}, {0x2, 0xcfe, 0x4, 0x8, 0x246a, 0x5, 0x8000000000000001, 0x3ff}, {0x100, 0x4, 0x100000000}, 0x9, 0x6e6bb4, 0x0, 0x1, 0x1, 0x2}, {{@in6=@empty, 0x4d4, 0xff}, 0xa, @in=@remote, 0x3504, 0x5, 0x3, 0x2b, 0x2, 0x2, 0xf87}}, 0xe8) r6 = syz_io_uring_setup(0x3520, &(0x7f0000003f80)={0x0, 0xdea9, 0x20000, 0x3, 0x3df}, &(0x7f0000004000), &(0x7f0000004040), &(0x7f0000004080)) mmap$IORING_OFF_SQ_RING(0x0, 0x2, 0x2000009, 0x4000010, r6, 0x0) prctl$PR_MCE_KILL_GET(0x22) prctl$PR_SET_PDEATHSIG(0x1, 0x2b) prctl$PR_SET_PDEATHSIG(0x1, 0x38) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000040c0)={'veth1_to_bond\x00', @random="0853beb92a5b"}) prctl$PR_SET_PDEATHSIG(0x1, 0x3b) 3.729064422s ago: executing program 4 (id=2716): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) syz_usb_connect$midi(0x1, 0x111, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xff, 0x1, 0x1, 0x0, 0x90, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x0, 0x7, [@ms_header={0x7, 0x24, 0x1, 0xfffe, 0x7}, @midi_out_jack={0x19, 0x24, 0x3, 0x1, 0xc9, 0x9, [{0x9, 0x8}, {0x0, 0x6}, {0x4, 0x4f}, {0x1, 0xe}, {0x2, 0x10}, {0x3, 0x4}, {0x8, 0x70}, {0x18, 0x8b}, {0x7, 0x8}], 0xe7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xd9, 0x10}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x10, 0x9}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x4, 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xe2, 0xff}, @ms_header={0x7, 0x24, 0x1, 0x7, 0x7}, @midi_out_jack={0xf, 0x24, 0x3, 0x5, 0xf7, 0x4, [{0xa, 0x1}, {0x4, 0x8}, {0xfd, 0xe}, {0x8, 0x8}], 0x9}], [{{0x9, 0x5, 0x8e, 0x8, 0x40, 0xbb, 0x6, 0xf, {0x12, 0x25, 0x1, 0xe, "23438906eb216eb9b1570d6d8911"}}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x7, 0xb9, 0xc, {0xe, 0x25, 0x1, 0xa, "4e03ec682b127006a6fd"}}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x1, 0x6, 0xf5, {0x7, 0x25, 0x1, 0x3, "b2caaa"}}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x9, 0xc, 0xe, {0xf, 0x25, 0x1, 0xb, "de77c7daac9e989c712b58"}}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x4, 0x8, 0x9, {0x5, 0x25, 0x1, 0x1, "1e"}}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x6, 0xf, 0x7, {0xb, 0x25, 0x1, 0x7, "a0cdbf222aa301"}}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x4, 0x8, 0xfb, {0xa, 0x25, 0x1, 0x6, "e765b7e5fbb4"}}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x2, 0x6, 0x2, {0x7, 0x25, 0x1, 0x3, "099cef"}}}]}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x3, 0x3, 0x2, 0x8, 0x5}, 0x53, &(0x7f0000000700)=ANY=[@ANYBLOB="050f53000624100af9e6feffff000f02000f3fff000fff000000ff00000fc000000f3f0000300000000b1001022000c0060a0000071002084900020710020822810f0a1003000500000759b44b4a4a9432bf72780408cfa73f1b8aa5e97066089a1f7dca19557e87e9b61bf280ec5d6692e2bf0ad9cce3f4caf7bc19f25ee6a19c206661a60929a8692c41b68eb4bb0b0fe0c750a6af47b0c41b3d7f8096ff186bfc69ad48757852fc1738de5eb963e91ed68b589db4cce4301c7c6e3bc33e02aad09dce8473ff1a34029e4baf8d64dc6a15"], 0x7, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}, {0x5b, &(0x7f0000000300)=@string={0x5b, 0x3, "d04e9a3b3b57c9b6f688958e9ecbbafeedf389e0f265f817d11520021b0db57549186218c8387de029da98e728412a27af4f8efbd1762fc7f306a4c65c46662ca7d82bde86f4d28560ec324bf56c369d4009c90aa424c5f83d"}}, {0xde, &(0x7f0000000380)=@string={0xde, 0x3, "3dcd8d178e1079ea00c298cb45465a7049a65f2c7d3a4a91f8a24fdf2e0fa9b3a9f65a5ed251819fc4aa844df1d3beea3855b92a7930b22d04fbb7cfa19b1b523cbdff737eb429f3864f73fee7f35b4941d0129c731514857be8b2ef4cd5a6086ad1da618907215076a248fde3f17b6dc6eb8144dba56a1533c26b95088ac767fb39e7c6a0fe089e0c42f017024263ce01404fbdbc577d67fa766f5eed67e8b31fefba67a89573be6e4159078c0133e2eb8974d0eb1418c39876f68c99e536c0f7cca4d987cd56764c5dceb611d5939c8324f1236848f347e3654e49"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc0c}}, {0xdd, &(0x7f0000000580)=@string={0xdd, 0x3, "e41927b13e0f40b672e5cd5844b0069cdceb37744b2e173acb0ac890116b81a9854f5140a4ed1bf3f4e2285475ec838e2fb6edb7bf8705859d6cedf184c588e9a3086309821931ecd06f60b380336f1699769f2652bf5fad93db72a5301f1a3cb1921e8e7696b8dc677587bd9e137adca77d35b97f2af3f323f81e4a607ed9fb45ceb419e50cc9d0957fd035421544b2cae338fb249f3ff8167a7ba92d3a72f1eb6633ec54e5b07be3549f232d136fc455a9970c00404cb0626c36d185daa2c1f7e952d77817185af2b2d4da29ec87dfbe6d0af9d33e2f0a6e1ae9"}}]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0100001000130700000000ffdbdf25e0000001000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000600000000000000005c001400636d6163286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a1"], 0x14c}}, 0x0) r2 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='ms_mode\x00', &(0x7f0000000100)='crc\x00', 0x0) r3 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='numa_maps\x00') pread64(r4, &(0x7f0000002180)=""/4105, 0x137, 0x0) 3.501904356s ago: executing program 5 (id=2719): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="402282"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x0, 0xf2, 0x0, &(0x7f0000000b80)={0x0, 0x0, 0x6e, &(0x7f00000009c0)={0x5, 0xf, 0x6e, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x3, 0x9, 0x9, 0x0, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x5}, @generic={0x57, 0x10, 0x3, "e82af13b257ffa6ed55d37256764276e376d05e7a01d100aa33f110a05252dfe166234f8833f19dd4abce89a78a978e2837fafe9ab4f8a16d581b2458872c7c44b2b404a32bf9f1b86ad0a34fd10c06e7b082362"}]}}) syz_usb_ep_write(r0, 0x81, 0x7d, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0") openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 3.084346366s ago: executing program 3 (id=2720): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef80"], 0xfe33) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x24040850) sendmsg$NFT_BATCH(r1, 0x0, 0x24000840) sendmsg$NFT_BATCH(r1, 0x0, 0x20008890) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a31000000000800"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0xc0844123, 0xfffffffffffffffd) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4000}) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r3, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "3533670244f9c17b", "fd73b0610edb2d71e52c522eddc7014d", "421c1beb", "2302ad114616d7c6"}, 0x28) 2.932251685s ago: executing program 3 (id=2721): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000045c0)=0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_f2fs\x00', 0x1ed) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_test', 0x8a881, 0xbb) syz_usb_connect$uac3(0x3, 0x97, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040e5130100400001020301090285000301018009080bfffd012430040904000000010130000a2401060a00"], 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7305b74df2ce0fa7c19d1309abf30890997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f4cc50a1fcaed1e831fa79a00", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x8]}}) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r2, @ANYBLOB="e65169003f6de14bec91626b6f50544f78dea86420e807ddff22fa980e", @ANYBLOB="ec93a22d34a31c5cb929846a86009bf0dfa7b57bd378762db75f8e251a909f3c8ecddb9846034cff299e3b8077d4d09872f7c8f28ccc20d16c0daa6584b871308b09e78295f336feffcbe4fdcdf1051064f0648b66ad075efcb481f0bb1a3e548dfc9c6b5b7ac54dce281d80f5d3ffe8f875dc3cb09ccdfce06fd679cb77"], 0x1c}}, 0x0) recvmmsg(r2, 0x0, 0x0, 0x20, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x8000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064d2, &(0x7f0000000040)={0x7, 0x6576, 0x4}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r7, &(0x7f00000002c0)='6', 0x1) add_key(&(0x7f0000000200)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r10 = socket$pppl2tp(0x18, 0x1, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000500)="49f1b3c0a8bed7f5f5ffea097060089945bb0388901e758dc57e99a3808ddafa59f71cf5103f1389f2d8b8d6c5be94ff03ba1ff3f6de54659fe43d38f20d880349b123cdb4428a8d390e8f3f8a0af8630133e3de02bbafba2b1511ffe47095ea421f888e49388120c514f8afec8502b520bced8a0d8510dd4ea1d48a3ddf0f317350914bf1b14c5fa102218dc188553af7d9382c94390a65305010986195636f315c5a500db77edf61d20c1a1f6dad80e70fe4a25d6f3cd65aadcb13e98644a14de1c8e9e566227dc5dcba30265ca0b79b14e36b567e326d0e6982afdaf21b3478a993ba46", 0xe5, 0x24044884, &(0x7f0000000600)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) connect$pppl2tp(r10, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x4, 0x0, 0x4, {0xa, 0x4e31, 0xd78d, @dev={0xfe, 0x80, '\x00', 0x19}, 0x1}}}, 0x3a) getsockopt(r10, 0x111, 0x4, 0x0, &(0x7f00000000c0)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000280)=0x3) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f00000004c0)={0x28, 0x2, 0x0, 0x0, 0x22a144, 0x81, 0x3, 0x3c94f0}) ioctl$TIOCMGET(r7, 0x5415, &(0x7f0000000000)) 2.737273085s ago: executing program 5 (id=2722): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) utimes(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x521001, 0x0) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "47920010", {0x1, 0x8, 0x5, 0x40, 0xb}}) r3 = socket(0x23, 0x80805, 0x2) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f00000000c0)={'pim6reg\x00', 0x5, 0x2}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB="0c00004e15"]) socket$inet(0x2, 0x0, 0x9) r4 = socket$pppl2tp(0x18, 0x1, 0x1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010825bd700003000000070000000500130005000000140008"], 0x30}, 0x1, 0x0, 0x0, 0x4000810}, 0x2400c046) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) r9 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r9, 0x29, 0xd0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 1.826662045s ago: executing program 5 (id=2724): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.661104496s ago: executing program 1 (id=2725): r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000040)={0x7, @raw_data="4cd5e1b7f7f1354ec3b04f7509c6985156c57365894f8e80eb2f498b2bc60c51f61555b6da8d0479a8760e5dfad10663762bc7822ba5d3ddb556ef3a003614c3024bd860437e88d3cd5bbf4c38adf5152e849a774bb22edabe479368f91afed53953679564d4ffb66397593922f6b422e3ff123f87454610d440eff71822ff8a5658bf7095f5e371bc3df8fbcf811fa15bdb609e2b1156a7f1187ece765603931541cd2188417259c7cb2f5aa295bdb7f9b1cda705008a5a9c2fa0f33c4af55416509677beaafd14"}) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000280)={r1, &(0x7f0000000180)='\x00', 0x40000, &(0x7f00000001c0)={@_ha_fsid={[0x95, 0x9]}, {0x5, 0xff7, 0x40, 0x6}}, 0x29e, &(0x7f0000000200), &(0x7f0000000240)}) ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f00000002c0)) (async) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000300)={0x0, @raw_data="2618d8fc6d09fe2127eaaf14577d0b6da8c894935e7954cc1fc5fd3543337e75ca1c413ab475667f6243999f9f14034dfc91dc0b2730c01034ab7ca0592f3bdcb206383a9a81c5f3e2d48ddb075d62a5b9d4409d2a9eb5e401c4c2b8cb5d47cae98fe620e1c8f9449011dfc57bb43f74700625d4613e73da8550ee0566cafd8e33f4f3fe22c25a90c90ca6c28c726773c206c242b536b9d7ef720e1ee5225233d34966bfe65218492cdf6901e582473abc0695c1feb606ac7993a3ab4ff40c8fc926ba98310049eb"}) (async) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000440)={0x1, 0x102, 0x2, {0x3, 0x3ff, 0x5, 0x249cfe4c}}) (async, rerun: 64) ioctl$NILFS_IOCTL_GET_SUSTAT(r2, 0x80306e85, &(0x7f0000000480)) (async, rerun: 64) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f00000004c0)={0x2, "c589a92194bcec9be21aefac749da0e41febc1e62c89512bbaba0f65624a0a24", 0x5, 0x20, 0xff, 0x8, 0x8, 0x4, 0x5, 0xbe71575}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) (rerun: 32) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x80) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r3) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000) (async) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000800), &(0x7f0000000840)=0x4) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, r6, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}}, 0x84) (async, rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x8) (async, rerun: 64) r9 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0), r3) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000ac0)={&(0x7f0000000980), 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x74, r9, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dvmrp0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) (async) syz_open_dev$vim2m(&(0x7f0000000b00), 0x6, 0x2) (async, rerun: 64) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000b40)={0x7, 0x3, {0x0}, {0xee00}, 0xfffffffff7dd493a, 0x10000}) (rerun: 64) getpgrp(r10) r11 = syz_open_dev$vcsa(&(0x7f0000000b80), 0x3, 0x402) sendmsg$inet(r11, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000bc0)="0a7b89d99cd9ffb22ecce479d0c8dd1d15e2db2e3eaa14c9e77d1eedb61d33c889175f06c8b38ffa75f0995a0eeea5461f80aa6a8049b8efdac3533e0028166320b85c11a4a8e031595504056cba4b8ef41adc59e14b0e7c331ad11d403b78a226b18a78dde56f9bf217700bc2620869795ab8db", 0x74}], 0x1, &(0x7f0000000c80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x18}, 0x24040000) (async, rerun: 32) getsockopt$sock_buf(r3, 0x1, 0x3b, &(0x7f0000000d00)=""/88, &(0x7f0000000d80)=0x58) (rerun: 32) 1.549751482s ago: executing program 5 (id=2726): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000002000/0x4000)=nil, 0x200000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r6, 0xc008ae09, &(0x7f0000000000)={0x6666666666666ca, 0x0, [{0x0, 0x84, 0x4, 0x9, 0x4, 0x0, 0xb}, {0xb, 0x5, 0x0, 0xd, 0x6, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000001, 0x0, 0x4, 0x10001, 0x6, 0x3, 0x8}, {0xa, 0x3, 0x8, 0x2, 0xfffffff7, 0x8459, 0x401}, {0xc0000001, 0x10000, 0x4, 0x1, 0x203a, 0x9, 0x200}]}) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x6, 0x0, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000400), 0xd, 0x28580) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x100b, 0xffffffffffffffff, 0x0, 0x0}) r9 = dup(r5) syz_ublk_setup_queues(r9, r4, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10080700, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x125, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) r10 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0x800000000f3c, 0x7) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 1.365688297s ago: executing program 1 (id=2727): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) connect(r0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0xd) prctl$PR_SET_PDEATHSIG(0x1, 0xe) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x40020, &(0x7f0000002180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions}], [{@subj_user={'subj_user', 0x3d, '{[{%-]\xdf'}}]}}) sendmsg$kcm(r0, &(0x7f0000003a80)={&(0x7f0000002240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x4, 0x0, 0x3, {0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}}}, 0x80, &(0x7f00000025c0)=[{&(0x7f00000022c0)="f1a2b922d5816c0e85d24c8325dc40fdc7cc459ff75e238d99907c40c0bd32ab", 0x20}, {&(0x7f0000002300)="ef92fa6d4a5dad936f1c3646fe10f438c6332f3f34ff1793442fef33ba2e05e59a8cd9808c45cb2cfcb4eb2620c212809cf401b905ea7fe59bbb356fdd33ece24ca42e86dde3a2c4a05983ddebfa0cf21bc064fb9f255c8c87eb85eb6e8793423e702c7d78aa9c2a7edeecf042cd9653d453134a3e8443bacab46302f2d0a092611d722bcef782ee38b17fa28237ae2af5f99c1cfcb4d4e2841a73e47ab622697b225704f1c2", 0xa6}, {&(0x7f00000023c0)="67d0e7829def32e6ce227f5f5aa9049e4dabc745afc65eaa", 0x18}, {&(0x7f0000002400)="951ab7ea23ee6724d396aa26bdb7de5ab696c4baef4b2272799006c56d784fbc35e90d465a8fcba9ad16d3a17e19849fe176ef5056739b7a64237cfe3ef7fc4d7417c0d8bfb13f499485789f9705603f579abb434343a396be7a310f3a0a60970723bdb8", 0x64}, {&(0x7f0000002480)="6aaf57f49a4a5878b471e17403e34937d76384aba1a609b3b20bd5a1f41dc131e4fc0aa809325d88ff48e4b9907499087170d11fc23dceeaf8187ba4190158cef2dafac40b511a79585b4d312108e587fa3c53c3715c6567354138", 0x5b}, {&(0x7f0000002500)="33ec87ea63663e39cf2b387defa1d3dca21e6a96cdffbefbb7b286a20b1162ca45e8b330f220e59967844a9afa52906a228ca547224271646556fca1b055afdb9fbc", 0x42}, {&(0x7f0000002580)="7f9841f2a4245a04d1314e21f647b123e56a909740b369b0d2d1", 0x1a}], 0x7, &(0x7f0000002640)=[{0x100, 0x10d, 0x800, "15ec800f95c9047e05a97e6c26b52aefa4352f9b0751e069ca22e3f6edbbabbc524134abe45d27deef107bcc72255262d615c85c309c66d983d4b431afef488264658a2a7b5b52111770ccc48639432df729c089359f30c94a98042c404b9c51e2b5dbf4dc98ccb0989b2ccad35df67729adabdf0682640ae6f56d0d1ef82f0ee949f18c8820e0e05e972a9a069e26792ed6f30ba7bd4fd360655d1e6c20c01e678778a2c9bbd746b3e36856091b1fb3412c5f800a64a2bf1b7e60b352acfe98994d5031563ac4355e56c6e4fdf43724d16f5712cf72de7616c477af9481e56a1f643ea1afe19aade1b6b31d72"}, {0x70, 0x10a, 0x6, "4edb642cb43d673e9357ebb41818b8b70012bc5444c42520b9057cbd689233b93665d4cbfdcb805f2f8df1e0f7e0b7173e139fd2488c087295df40a8587e7a074e9ca7efd68208e90d5221373ad5c0a32c46fc24706699fd8fddf43034d792"}, {0x80, 0x10b, 0x10000, "c43bee591c2f08419552a1570b751193f4248861106c479efb6c226d1939bb6c50429e81b37445f056051542b6e8669aa45b3ce0157a2bb60fdf0be7122a5c770ecb6f2c68f0796918102a42c1b53c28b95c9ed363e078106b679fedd4b028db35d0f0dc8464fdea6859cb"}, {0x110, 0x109, 0x6, "cf8679d01f404a26592db6f6524f22364fd27b2cadf0cd4cb1ac5250c68c1348d8e6b1e2eb9b62bdb0ceac01375b477e1d499216b3574978a05d9dd467490bd89d9a7a419edebe78b024270862b0b4752a9bca2ac89f7bd50f0a2caef1f0fb37b07f0643f6a290d9a4e40137f009a25f72de34e7a23f33dbba4e87bf39cf6c583e2986ce870f1f86127c5e04c6fedb10359d0e9d1b21d0ecccc9b406cc8ccec2e651eb38820d4c145db6453ed881b040ff7cc36a6d9174d0ef4f83c881de055b3748f92105f45ec41b4df1c41fb78ff22ceaf77b95184f150a531c01436aa0f5b2897e96595bc693a36a171c95f46b83fc7ba5db3ec59565fd5dd4ba3c5255"}, {0x100, 0x14, 0x0, "315d66b113d6bd66c4542f20c19e0f9ef696b5309a99cdb1ebb33924f51a816359fbbc4e08eb07bb15ffdc2d2d0c9cfd069a9caa46695f56e111eeadce2aa20d4037f4615f3f9316e3491f7b3ad8d58e2a8cef137abe4985e6f57349ce5ed28aa818673324b6137f82e387b1c6b16f69f03ad60ae924097dc632a6039fd8f2866c6bfb7dca92ac2fd98b8f39c696f9b7127609690b699c81ff79bea9abe783a40cd5852434c48b7fe2f39e5f9dbd5289fedca66b99ec767b81231186bd9e418231a1336d6a889ef1eda2107d259cb2e783825ddf63209241e399751758ef9c86cffdf41ed037b1673ba4375f"}, {0x1010, 0x107, 0xffffff81, "206aae1659bd05ca2c5bb0700cc909e342d405e7bb8578665c1476911fbed09120cc3dec31ca778f6fffce40c4db8f6627dbf38094ede544d20b27b6a8d9dc6b3eda12fd1ee82161048404041136b06f7b030af0da7ca1ddc7b0c481a08ab96f10ff16ce89fa0bdefd081cc06b8b95379248c40f5a711a638eca491fbf18d12f509089e921f8ee873acdedbe406d811e24d07a6ae9e3cb2407e63d1ca95125e0fdb2989b764b6fe2ad413331abe5719009a66d9a9ce3ba558cdbc91bd7546424c6f5d54fa75fb2fbdc108d0dd91f5136d0aad1c08c0a99c05a2801f47aa82404690014442378c31c2090fafa84f17e0dad4d7ce3e4bd5f6c21e92ca1de84c5c4f1ea7637bd553704548f05e4a4727dcf1ea4332ff55e183c12257db6656b8e24313398259f4a77a451538f0ba96fd3dae43dcd8156d1bf2a18ee96279c8a6f33d13ef889750071e1c078e7667c3d3edac912954e4f73cf8cbc6f7c8b570c13ead00782af53c6adff4379c49b3e064e0e9e31c1b4dd28f0a1932ea2b58e1c774871b73dde90becb1620ddd235267a2ed00c7ebd95861efe8823e513561e974f930cd29ea50df724021868467cafbf346eff79ed70700476fcd2c0bbf27a31cb67045275cb6d278bd3bcbfff7f2e56d748ac78bb87bf114fedd1e7f9b21657e684dcd34aa9b2137605bcd8f294a1aa81b093a3c7aa3ddb8a3925899c649606f0f8cc56f8646789ca34f2451df02c5e67b9635088338a465314aac028f15b20f4a0e0a562d170778fba6f808f065456583034af5934d786cef90230b6b09eea536c50fc95bd1edda0bd1e37bfcdd903c6146a307a9d8079d83d7c378ae5135b0d5f447729ee0b553dfbe86cdf895560f055bed6ef3e35cc2d0a13b90ae3590f976fdadc1df37e55b860a1616f66911d839e246438d2cb75029d2248947b0e02e56caa1e7bdb7ea880030d28e9258dce06ca9717c37921aed4ebb3dde9e607692e456e1547776a7ce37404ef81267d10685eafc862cf3d888a1a9e06dfbe98ff8628d83562dc7fad998abbbea53a2098750b54573e338d7d387eebf9f49be5c68a7f622b3f3df6adbe387a59bb47490897fa9e39f1954721de5610bc60f54591822eae39a02f933d42302438ce0111ad56c44bb265efdc0a38eae2717409ae795bc23148f37dac9aa2ee8afd2b3ba11cf800baccdf7a7a7d4ac1a74bd89d529ec8b8fee06838f3b87d2dcc811c2f57902b2c0378a61e4c24925020662244f4e384218957fc8e88ad717e5da2c5b4532ce97caca85d74c43e7fd04e37890bf0005054dd1dedadd23d57c21609ae10b84ddcae7f406ccb4f4d353c7289b44032a0b9d7d21ac6173fcfad1764777928ed5578cc7730ca259f5b1d76a2a6a40f43f459d916eca6f28d089eabf8713b0639c6d092a695cbe9fa7e36bc6fce15c3d26f2c81def3fd4b2bb18051e73176a35a1a358af94f9bb0426ca991f9364b3678156f9b4d13055ebcd3f59b16103c8e4b1cd92ea66ac05f41e32a13171eebe558f8313398955b1803530ff4c2d50515b43029ee66f8f3305937d4c8782661c2429215c556b331470345b23d06c53c05fbb9582c098614f27e46cc28edf573774f4c310cd1664a1796dcdf02d0b06c779b4c14b8d1e28cd41456a673af1453639ea6993a7841657b5165fb9d080d05620fb614bb8458ba6e27ab7bd3faa0efc26cc6ac2126a82e78218d481da8521209a022f578aec158fbe36cd9c0d16f5bd33884c452a89523487a57bcbfd8110d362dc6937e3e4ebf726790a6c0f38cec4a091f337bb1227149917b8143e558f4a292d93ac498a16c1ef9ff9c332ed1187d0c8860a39f40c7062c25e0ae807b5dc946e1741e63afe343e647ee93a1f6cfd48ed244b16409463f0dda6de5d2bd590b7dce04868bd6c9e8953bd1fbeeb670ebdb3eaf8c1aa536e9de17704e21336dabcbd98cb4fe47487968e29cc3f967ba81967de70765a9b6a730c177f161bcf78424a5117cbe37552621cec6c27345ba1af1f60f4501c45f396eb7453070da50f48097a7540658bbe0f99c26a2e8e1ab5701d76f129bec90ad26a5d8485416d0465397f2b09accc67b9cb3dd6984cb9706ed24447fcfaa4fe1a854eb37639723af00220171fb0609e786f9280af6611dfd367e1a709b2cfc92afbf53bdcaa29ca597e5cdb2bb1dedc196c7b7f4cd9a9926434bb00cde5fb9aceda71601aba8f905d38455d7d3696566624a9c8354258aa0bda0bb8a0b0aa2714c85f2e604ddfc089b5f65eb472ff241be4497dcb4e8802b7baa4fe37a8821f49a158cb82d645aca0510c8a8dcb655795687a96a856c6ae6c03b74dac804a6044c5e7db2d336f5069e6fac8e712609f78a5ad48e104ca1507d56d8a912194f587931c38997795a6e4a1be5753ef4f5b870437fbe57d19d9287955cfe07389fbf25abd92d6825e6a61159037899afdf0ff4f2cdc63dc88e1f9385a3c416e4e35c577cb6ae19f043335301dd15615b7f64384fc89a4bb6fac255995c79b361825b4c82973118fcc42cb44b399fc8559a233d2b924d5db964086b4307f35aea960f4edee56047dfa4394938c35ece375b9c19c767e871067b318a98d7fe6cf7b2e0be1e097494615bb866511ef9d9cb7c0a01f246e572f0280527cedb160db97884bc40887d35a98a1304b56ee885e7a61bf43649bb8945e2675365b468e9a3bd829e373529e5e236b0c8345ad88aab478c4b3af11fa8a20b84d8e3201097b76617d2f740a74b69571f1e82dd637fdc02e5944b2db240086536adfaa7001a75ded3d0e191a0f2c57d686b13495b4550b108a1c16ed29422a67c24f86069214f5710d06be32e82354db3c4a40261fb6c0b052b1e3e2af3d40b352a6247dedac194ee1b7d8039759cab7b59fdee63d26f427bf773258012c353c503235dd48c5903c0c81673e7642e00b8a05ef4a2c0216533c32c47692cdee5915e8eb892091d1804f105fecb7f94b57b538b0ad30476df39d9e72900d6b15f913681c1b926d55d2cc954b010870e95bfebf5819634fb7a0e4b73345517cecfce5eb5c24d483e9394c20a38f463834ab6eca83d88d24f0a1fcc3aba8a4e7082f35083be65e22c1d93123e21f6fca4aba6e33dce683f8af8245c6ad4f58fcc95d3c96e6558eca1d19cfb21035a179ad26a4675a284b770ee355a794b170d5cab3da3e0ee125fec54fe661f7442098a2845ecd087d18f2b47e16aa5faf47a2385ca0a9d4e147b4bc58537efa8d6a34e4356500fd885d3cf7a05319a3bd70b122e3211b6fbf59b712e6727d0a08da5f86a651f079bf7846b68f8b396ddb0aff24d943d43230a86a47dbcaf79da6159701138923ba419ee88825054ba9f49827a560b15b005bd3586d12bbb701842fc9add14dc6f208a0fc0f99b575ba20ecaec170103f3e9dc80ca0ac8ec31d47b35bb08190722149084a3dbad5b2af3a9fbdfb5d44fc4a7a97f842fc83ed6af4feca928e9456f7d97315e361e86582393e724aad275bf54db21b70fb564e5e70a9e1adf9a893857ea3f92bcc5d344dc8d9ff90126d0fbdd8b2774f28d6c90a331f9430d7371fdb878bda779a038583e1de5140e00280de01f89f6421ad9ab4c455dd242a44de801cef17e3059d065a1e8de0884f050f810f3fbb2a24ae7c33b2d9d887b9a465b1141464c7ad02996a335af4b758e5e7f71bd47dc7b386397c55fe6fca612383fa51e7792aaa9dbeea3ce3664a53b9bda1a7eda83769dcdd4f315e62ef5b0080413d72c7702c99fe0f02a065060e1383a44ace31381c2b2ca43063ccba4b760f795a9fde6fdcdf4349a005a1a4c66a8bfb41eae9da7ccb259f5723db15b09605997ab205ebd08b067d685014b3b5e6b0728a36d8e8bff733669aba27de495c7f75588d79bc65b29993afed86ee83e504c869f28d3277ed00c394011eab0edcf0d83afdb3294bfc8271af1a17c375df730639aa4da3b8bde594f3bc290bbf23ef67520aa821a9f84aea0dc12f3a60c13b240ed6fc21b2b7ad4bfb882b173cb66f37cc763e9e7fdc433da498a48c51f7a356d712d9a4ae1ef9ed8acbfd890615ee55101e98ebde6dd5e8b40836cc7b0af875421693c17e19883c4471c79baf54b7360ee4d5588a73809acfe281461076604f9af495bdf2999406e962370b57fe9d332c9184c0b34588f7bf3f9895fe1fb83021c4e7ba2ad47cf96f3706c53dfa24cd8a3a730edfb8752a378ed94bd71b96516cc32f18a7879c8aad31fdf6018cd8b913863662ae25b15443397b97ee788b1d3d653e163b38cfd146fb9e087ef6064dd0b42038083a8c3b53520c6bfffb176b702340afad2967776079bca667dcd74c894f9daf9c1e402ed365f6c6230b192d296d7b9377f846bb83ef7f28e2f456a9c7f802b88ef7057625fb284d743c6437fa43c5676548d6764d38d97bc371c32ad2b19a63b83392dbbbdc1ced9b96e3f04daf72ca997922aa3e913c6101499b155459f9a96e846396ba24fa06a0bed5c665ba1ef9f6f6b73374986a4afa762774540fcc32b08bf3d751de198fe13fe5a9179a594856fcb1dee61f09f9b9820a1a179aef8247e9bea9dcc5815a7eeb9bdcab3261dcebbd07a6889a6e344c675cd3d424334bb29596af2b0237fc098521238754be428dcad9e1c80fe3c71dfdf1d5bd1bc50af58e726fd6f8a06472fae15828ba8ead032dd9e36f3e67bd01f584922d761f112ab3a6cfc7752d628d184f618352384da6df84dae8fb344012a28071ba9329e156018bf6991acdf30de7ccb0ac552a8a958fba998734a6272a65149f35ad6d0163e7ba8580650c5f5b36880cc520654311add89687e4d7cc117b0e45faf5c12cb2d453206b6ddb9d324c7d99ec408bbc511bd06f2ee53c36cd0fe6a23ca4488ec64a245bdc1924cc329ddcfe972da46a41ba798ea35f672fa5df8505c7a07637b63cd575e72ceb7504a1f75c20bb5c6dabd015f31ba46130bf36119ab1808afc506c57d79909e07eaaaca6f7c869d225e546ac7001520d8ffaa6b84db50c25619806b299215095d1d6d62e139a94c5ffdf6287e1a6edbdde5ea7b87b829bc95e5588581162488a3ec89856e1654c9eb6a8b73e5401c56b2eef65c162e7b9b4e6635823d814549322c8adbfbde6e8b9651a15e2d2e237234cf904359d64cc9d22b521cb1deb83a0961241d094c2764d1a3acb6f1aff3d0b642c2283015c52cff16151dcbbfc8eab0ad73aa827b376894914f98fe71fda86be9188e63581ff090aa36681f66a4732a0732147d0e5f21bbdd7acb07194b594f83df5c8afa021816cade486355ab03cf2c699cfd2a53a6b0fa0d8d71407138decce9fc74ba62a64bae21f66c01815bb11ef94fc8754c08a81f307afcc6ff344eaf4c220faf7849c92b1d92e0e5e2ae1fecfd05fdfd80e447c6e59e5a8b82b5a5f63e0f045be8a171dd98e1c54b738483cc9fa7463bde478a50b5d2ed0bbc07cd6a6157c2b15a898415c4f66695639c174a4109958c7a60c42a14d49ebd8081bb110ba836cc9bbe3bee38c85b9cb929b9637ea5c6e47e369a0509f053a5c5330a29b96d3fe0ae19777cde19b36802caf987c6b84066384a076c0e63cb5a730decdad57ac52cadd57df5a90e028f1eddd94a65e49929aac79ae9a6df0093b006e5d1587c07d7e43037fa5822240d69104e03eb6029dd00564a31a867b1e1a327c5e7dc4dfcac876572de404094271d2b0b0393c39a39c31d6c5d6c27e85b5444c7811d637392b9d5f40dc17637be594bf7778c1c0b828a"}], 0x1410}, 0x8010) capset(&(0x7f0000003ac0)={0x20080522, r3}, &(0x7f0000003b00)={0x7, 0x3, 0xfffffff8, 0x4, 0xe3, 0x5}) prctl$PR_SET_PDEATHSIG(0x1, 0xf) prctl$PR_SET_PDEATHSIG(0x1, 0x7) io_setup(0x4, &(0x7f0000003b40)) recvfrom(r0, &(0x7f0000003b80)=""/225, 0xe1, 0x100, &(0x7f0000003c80)=@l2tp6={0xa, 0x0, 0x100, @empty, 0x200, 0x2}, 0x80) prctl$PR_MCE_KILL_GET(0x22) prctl$PR_SET_PDEATHSIG(0x1, 0x4) capget(&(0x7f0000003d00)={0x20080522, r3}, &(0x7f0000003d40)={0xff, 0x3, 0x0, 0x4, 0x1, 0x6}) r4 = openat(r0, &(0x7f0000003d80)='./file0\x00', 0x4000, 0x80) socket$inet(0x2, 0x9, 0x9) prctl$PR_MCE_KILL_GET(0x22) prctl$PR_MCE_KILL_GET(0x22) setsockopt$inet6_int(r4, 0x29, 0xce, &(0x7f0000003dc0)=0x7, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000003e00)={0x4, 0x4, [0x0]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000003e40)={'vxcan1\x00', 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003e80)={{{@in6=@mcast1, @in=@local, 0x4e21, 0x5, 0x4e22, 0x7f, 0x8, 0x80, 0x80, 0x0, r5, r1}, {0x2, 0xcfe, 0x4, 0x8, 0x246a, 0x5, 0x8000000000000001, 0x3ff}, {0x100, 0x4, 0x100000000}, 0x9, 0x6e6bb4, 0x0, 0x1, 0x1, 0x2}, {{@in6=@empty, 0x4d4, 0xff}, 0xa, @in=@remote, 0x3504, 0x5, 0x3, 0x2b, 0x2, 0x2, 0xf87}}, 0xe8) r6 = syz_io_uring_setup(0x3520, &(0x7f0000003f80)={0x0, 0xdea9, 0x20000, 0x3, 0x3df}, &(0x7f0000004000), &(0x7f0000004040), &(0x7f0000004080)) mmap$IORING_OFF_SQ_RING(0x0, 0x2, 0x2000009, 0x4000010, r6, 0x0) prctl$PR_MCE_KILL_GET(0x22) prctl$PR_SET_PDEATHSIG(0x1, 0x2b) prctl$PR_SET_PDEATHSIG(0x1, 0x38) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000040c0)={'veth1_to_bond\x00', @random="0853beb92a5b"}) prctl$PR_SET_PDEATHSIG(0x1, 0x3b) 1.214743074s ago: executing program 3 (id=2728): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "910d000000"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x180}, 0x0) 1.093255262s ago: executing program 1 (id=2729): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef80"], 0xfe33) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x24040850) sendmsg$NFT_BATCH(r1, 0x0, 0x24000840) sendmsg$NFT_BATCH(r1, 0x0, 0x20008890) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a31000000000800"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0xc0844123, 0xfffffffffffffffd) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4000}) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r3, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "3533670244f9c17b", "fd73b0610edb2d71e52c522eddc7014d", "421c1beb", "2302ad114616d7c6"}, 0x28) 942.931993ms ago: executing program 1 (id=2731): socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x35}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r2, 0x890b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x3) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x38) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x84931000) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="f30f0199603964ee66b8ee000f00d066b85c008ed8b9c20d00000f32640f5fe8c4c2210ace0f3566ba420066ed0f01cbc4c1105dd5", 0x35}], 0x1, 0x6, &(0x7f0000000140)=[@flags={0x3, 0x10280}], 0x1) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, r8, 0x1, 0x70ad2c, 0x3, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 632.133614ms ago: executing program 5 (id=2732): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) utimes(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x521001, 0x0) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "47920010", {0x1, 0x8, 0x5, 0x40, 0xb}}) r3 = socket(0x23, 0x80805, 0x2) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f00000000c0)={'pim6reg\x00', 0x5, 0x2}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB="0c00004e15"]) socket$inet(0x2, 0x0, 0x9) r4 = socket$pppl2tp(0x18, 0x1, 0x1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010825bd700003000000070000000500130005000000140008"], 0x30}, 0x1, 0x0, 0x0, 0x4000810}, 0x2400c046) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) r9 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r9, 0x29, 0xd0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 521.408363ms ago: executing program 1 (id=2733): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)={0x24, r1, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x24}}, 0x20000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40101, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x158, 0x10, 0x413, 0x0, 0x25dfdbfa, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x6}, {@in6=@private1, 0x4d4, 0x32}, @in=@multicast1, {0x0, 0x3, 0x76a, 0x80000000000010, 0x3, 0x0, 0x9}, {0x0, 0xffffffffffffffff, 0x4}, {0xf6, 0x0, 0x7}, 0x70bd26, 0x0, 0xa, 0x1, 0x9, 0x110}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x60, "ee975d40df06c77860e09d464fffd622034fe232f7d36eb86a083e"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) copy_file_range(r5, 0x0, r5, 0x0, 0x6, 0x130) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000180)='virtiofs\x00', 0x2040000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r6, &(0x7f0000000000)='7', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md0\x00', 0x4002, 0x0) ioctl(r7, 0x4004092b, 0x0) fanotify_init(0x10, 0x80000) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x4000) ioctl$BLKRASET(r10, 0x1262, 0x0) syz_kvm_setup_cpu$x86(r9, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) 520.93066ms ago: executing program 4 (id=2734): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, 0x32, 0x1, 0x0, 0x0, {0x3, 0x1}}, 0x14}}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d2, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES8=r6, @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRESOCT=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4048845) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYRES64=0x0, @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4008054) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r14, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x7fffffff, '\x00', @p_u8=&(0x7f0000000080)}}) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r15, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044005}, 0x4001) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000200)) 0s ago: executing program 1 (id=2735): socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6) userfaultfd(0x1) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000300)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r2, &(0x7f0000000500)=[{0x41, 0x0, 0x3, 0xfd, @tick=0x69, {0x46, 0x1}, {0xf}, @quote={{0x9, 0x7}, 0x7}}, {0x5, 0xf, 0xfd, 0xff, @time={0x7, 0x9}, {0x8}, {0xfe, 0x1}, @quote={{0xf, 0x25}, 0x1ff}}], 0x38) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$alg(0x26, 0x5, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x14040, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000100)=0x8000009, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000080)="0b031407e0ff640f0200475400f6a13b", 0x10, 0x4000000, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd8, r4, 0x400, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40009}, 0x10000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04a5df00c900", @ANYRES16=r1, @ANYBLOB="1d068f705c80a97f2e43b411d4ba92c3547394acff9b88e7f5393b43198c"], 0x7) kernel console output (not intermixed with test programs): 467.311164][ T5788] usb 6-1: selecting invalid altsetting 6 [ 467.311190][ T5788] usb 6-1: digital interface selection failed (-22) [ 467.311207][ T5788] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 467.312144][ T5788] usb 6-1: setting power OFF [ 467.312163][ T5788] dvb-usb: bulk message failed: -22 (2/0) [ 467.312202][ T5788] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 467.312212][ T5788] (NULL device *): no alternate interface [ 467.384028][ T5788] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 467.772935][T12075] az6027: usb out operation failed. (-110) [ 467.776932][T12777] az6027: usb in operation failed. (-32) [ 467.780698][T12075] az6027: usb out operation failed. (-32) [ 467.780745][T12075] stb0899_attach: Driver disabled by Kconfig [ 467.780915][T12075] az6027: no front-end attached [ 467.780915][T12075] [ 467.781750][T12075] az6027: usb out operation failed. (-32) [ 467.781844][T12075] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 467.799379][T12075] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input41 [ 467.853094][T12075] dvb-usb: schedule remote query interval to 400 msecs. [ 467.853121][T12075] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 467.878935][ T10] usb 6-1: USB disconnect, device number 11 [ 467.904751][ T1611] usb 4-1: USB disconnect, device number 76 [ 467.966769][ T1611] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 468.450356][T12819] trusted_key: syz.5.2508 sent an empty control message without MSG_MORE. [ 468.552658][ T5722] usb write operation failed. (-71) [ 468.585324][ T5722] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 468.585723][ T5722] dvbdev: DVB: registering new adapter (Terratec H7) [ 468.585755][ T5722] usb 2-1: media controller created [ 468.609608][ T5722] usb read operation failed. (-71) [ 468.627946][ T5722] usb write operation failed. (-71) [ 468.641997][ T5722] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 468.649391][ T5722] usb 2-1: USB disconnect, device number 82 [ 468.754029][T12827] usb usb8: usbfs: process 12827 (syz.5.2511) did not claim interface 0 before use [ 469.058419][ T1611] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 469.208474][ T1611] usb 6-1: Using ep0 maxpacket: 8 [ 469.418418][ T5788] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 469.579649][ T5788] usb 2-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 469.581129][ T5788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.581185][ T5788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.587322][ T5788] usb 2-1: config 0 descriptor?? [ 469.753249][ T5722] usb 5-1: USB disconnect, device number 14 [ 469.973712][T12854] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2522'. [ 469.988797][T12854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2522'. [ 470.030059][ T5788] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 470.046490][ T5788] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0020/input/input42 [ 470.098218][T12857] jffs2: notice: (12857) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 470.161520][ T5788] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 470.180988][ T5722] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 470.338352][ T5722] usb 5-1: Invalid ep0 maxpacket: 32 [ 470.378598][ T5716] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 470.468453][ T5722] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 470.529378][ T5716] usb 4-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 470.533328][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.533355][ T5716] usb 4-1: Product: syz [ 470.533369][ T5716] usb 4-1: Manufacturer: syz [ 470.533384][ T5716] usb 4-1: SerialNumber: syz [ 470.592157][ T10] usb 2-1: USB disconnect, device number 83 [ 470.608213][ T5716] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 470.620157][ T5722] usb 5-1: Invalid ep0 maxpacket: 32 [ 470.621978][ T5722] usb usb5-port1: attempt power cycle [ 470.958397][ T5722] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 470.979338][ T5722] usb 5-1: Invalid ep0 maxpacket: 32 [ 471.108480][ T5722] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 471.138043][ T5722] usb 5-1: Invalid ep0 maxpacket: 32 [ 471.140268][ T5722] usb usb5-port1: unable to enumerate USB device [ 471.284810][T12867] FAULT_INJECTION: forcing a failure. [ 471.284810][T12867] name failslab, interval 1, probability 0, space 0, times 0 [ 471.284851][T12867] CPU: 0 UID: 0 PID: 12867 Comm: syz.1.2525 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.284884][T12867] Tainted: [L]=SOFTLOCKUP [ 471.284894][T12867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 471.284908][T12867] Call Trace: [ 471.284918][T12867] [ 471.284930][T12867] dump_stack_lvl+0xe8/0x150 [ 471.284963][T12867] should_fail_ex+0x3eb/0x540 [ 471.284994][T12867] should_failslab+0xa8/0x100 [ 471.285021][T12867] __kmalloc_noprof+0xf9/0x710 [ 471.285046][T12867] ? tomoyo_encode+0x2ad/0x570 [ 471.285068][T12867] ? tomoyo_encode+0x2ad/0x570 [ 471.285097][T12867] tomoyo_encode+0x2ad/0x570 [ 471.285125][T12867] tomoyo_realpath_from_path+0x5fa/0x640 [ 471.285158][T12867] ? tomoyo_path_number_perm+0x219/0x5f0 [ 471.285181][T12867] tomoyo_path_number_perm+0x246/0x5f0 [ 471.285207][T12867] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 471.285300][T12867] ? __pfx_current_check_access_path+0x10/0x10 [ 471.285324][T12867] ? d_splice_alias_ops+0x11c/0x440 [ 471.285344][T12867] ? d_splice_alias+0x12/0x30 [ 471.285368][T12867] ? lookup_one_qstr_excl+0x1d4/0x360 [ 471.285394][T12867] tomoyo_path_mkdir+0xb0/0xf0 [ 471.285415][T12867] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 471.285440][T12867] ? __pfx_filename_create+0x10/0x10 [ 471.285466][T12867] security_path_mkdir+0x169/0x350 [ 471.285489][T12867] filename_mkdirat+0x200/0x510 [ 471.285516][T12867] ? __pfx_filename_mkdirat+0x10/0x10 [ 471.285541][T12867] ? filename_mkdirat+0x5/0x510 [ 471.285563][T12867] __se_sys_mkdirat+0x35/0x150 [ 471.285588][T12867] do_syscall_64+0x166/0x520 [ 471.285615][T12867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.285638][T12867] ? clear_bhb_loop+0x70/0xc0 [ 471.285681][T12867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.285705][T12867] RIP: 0033:0x7f29a5b9e1d9 [ 471.285727][T12867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.285748][T12867] RSP: 002b:00007f29a6aba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 471.285773][T12867] RAX: ffffffffffffffda RBX: 00007f29a5e25fa0 RCX: 00007f29a5b9e1d9 [ 471.285790][T12867] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 471.285806][T12867] RBP: 00007f29a5c35888 R08: 0000000000000000 R09: 0000000000000000 [ 471.285822][T12867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.285836][T12867] R13: 00007f29a5e26038 R14: 00007f29a5e25fa0 R15: 00007ffc21adc9e8 [ 471.285873][T12867] [ 471.287199][T12867] ERROR: Out of memory at tomoyo_realpath_from_path. [ 471.712841][ T975] usb 4-1: USB disconnect, device number 77 [ 471.850490][ T5716] usb 4-1: Service connection timeout for: 256 [ 471.850508][ T5716] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 471.850919][ T5716] ath9k_htc: Failed to initialize the device [ 471.851199][ T975] usb 4-1: ath9k_htc: USB layer deinitialized [ 471.933992][T12880] FAULT_INJECTION: forcing a failure. [ 471.933992][T12880] name failslab, interval 1, probability 0, space 0, times 0 [ 471.934026][T12880] CPU: 0 UID: 0 PID: 12880 Comm: syz.1.2528 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.934054][T12880] Tainted: [L]=SOFTLOCKUP [ 471.934063][T12880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 471.934078][T12880] Call Trace: [ 471.934087][T12880] [ 471.934096][T12880] dump_stack_lvl+0xe8/0x150 [ 471.934123][T12880] should_fail_ex+0x3eb/0x540 [ 471.934150][T12880] should_failslab+0xa8/0x100 [ 471.934173][T12880] __kmalloc_cache_noprof+0x9e/0x600 [ 471.934199][T12880] ? lock_acquire+0x115/0x350 [ 471.934220][T12880] ? xfrm_policy_inexact_insert_node+0xa86/0xb90 [ 471.934241][T12880] ? xfrm_policy_inexact_insert_node+0xa86/0xb90 [ 471.934270][T12880] xfrm_policy_inexact_insert_node+0xa86/0xb90 [ 471.934291][T12880] ? lock_acquire+0x115/0x350 [ 471.934328][T12880] xfrm_policy_inexact_alloc_chain+0x7a7/0xe80 [ 471.934355][T12880] ? xfrm_policy_inexact_insert+0xc9/0x180 [ 471.934381][T12880] xfrm_policy_inexact_insert+0xc9/0x180 [ 471.934405][T12880] xfrm_policy_insert+0x113/0x960 [ 471.934436][T12880] xfrm_add_policy+0x2ea/0x690 [ 471.934462][T12880] ? __pfx_xfrm_add_policy+0x10/0x10 [ 471.934481][T12880] ? apparmor_capable+0x126/0x170 [ 471.934508][T12880] ? __nla_parse+0x40/0x60 [ 471.934533][T12880] xfrm_user_rcv_msg+0x7a8/0xf30 [ 471.934557][T12880] ? look_up_lock_class+0x57/0x110 [ 471.934580][T12880] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 471.934633][T12880] ? __mutex_trylock_common+0x15f/0x270 [ 471.934658][T12880] ? __pfx___mutex_trylock_common+0x10/0x10 [ 471.934682][T12880] ? rcu_is_watching+0x16/0xb0 [ 471.934704][T12880] ? trace_contention_end+0x3d/0x140 [ 471.934732][T12880] netlink_rcv_skb+0x226/0x4a0 [ 471.934755][T12880] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 471.934778][T12880] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 471.934816][T12880] ? netlink_deliver_tap+0x2e/0x1b0 [ 471.934836][T12880] ? netlink_deliver_tap+0x2e/0x1b0 [ 471.934860][T12880] xfrm_netlink_rcv+0x79/0x90 [ 471.934880][T12880] netlink_unicast+0x7bd/0x940 [ 471.934913][T12880] netlink_sendmsg+0x7c3/0xae0 [ 471.934940][T12880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.934968][T12880] ? apparmor_socket_sendmsg+0x98/0x360 [ 471.934988][T12880] ? irqentry_exit+0x218/0x920 [ 471.935008][T12880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.935028][T12880] sock_sendmsg_nosec+0x14e/0x190 [ 471.935052][T12880] ____sys_sendmsg+0x54e/0x850 [ 471.935079][T12880] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.935109][T12880] ? import_iovec+0x73/0xa0 [ 471.935134][T12880] ___sys_sendmsg+0x2a5/0x360 [ 471.935152][T12880] ? __lock_acquire+0x747/0x2de0 [ 471.935183][T12880] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.935241][T12880] ? __fget_files+0x3a2/0x420 [ 471.935260][T12880] ? __fget_files+0x2a/0x420 [ 471.935289][T12880] __x64_sys_sendmsg+0x1b1/0x290 [ 471.935313][T12880] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 471.935357][T12880] do_syscall_64+0x166/0x520 [ 471.935376][T12880] ? trace_irq_disable+0x3b/0x140 [ 471.935395][T12880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.935417][T12880] ? clear_bhb_loop+0x70/0xc0 [ 471.935440][T12880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.935461][T12880] RIP: 0033:0x7f29a5b9e1d9 [ 471.935480][T12880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.935499][T12880] RSP: 002b:00007f29a6aba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.935522][T12880] RAX: ffffffffffffffda RBX: 00007f29a5e25fa0 RCX: 00007f29a5b9e1d9 [ 471.935538][T12880] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 471.935551][T12880] RBP: 00007f29a6aba090 R08: 0000000000000000 R09: 0000000000000000 [ 471.935565][T12880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.935578][T12880] R13: 00007f29a5e26038 R14: 00007f29a5e25fa0 R15: 00007ffc21adc9e8 [ 471.935612][T12880] [ 472.156388][T12882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.166896][T12882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.417777][T12886] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2531'. [ 472.431818][T12886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2531'. [ 472.941283][T12895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.941936][T12895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.966038][T12895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.966377][T12895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.986612][T12895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.248450][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 473.400413][ T10] usb 5-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 473.401976][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.402012][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.423722][ T10] usb 5-1: config 0 descriptor?? [ 473.466984][T12902] FAULT_INJECTION: forcing a failure. [ 473.466984][T12902] name failslab, interval 1, probability 0, space 0, times 0 [ 473.467023][T12902] CPU: 1 UID: 0 PID: 12902 Comm: syz.3.2536 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.467056][T12902] Tainted: [L]=SOFTLOCKUP [ 473.467076][T12902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 473.467091][T12902] Call Trace: [ 473.467102][T12902] [ 473.467113][T12902] dump_stack_lvl+0xe8/0x150 [ 473.467145][T12902] should_fail_ex+0x3eb/0x540 [ 473.467176][T12902] should_failslab+0xa8/0x100 [ 473.467205][T12902] __kmalloc_noprof+0xf9/0x710 [ 473.467231][T12902] ? tomoyo_encode+0x2ad/0x570 [ 473.467254][T12902] ? tomoyo_encode+0x2ad/0x570 [ 473.467291][T12902] tomoyo_encode+0x2ad/0x570 [ 473.467322][T12902] tomoyo_realpath_from_path+0x5fa/0x640 [ 473.467359][T12902] ? tomoyo_path_number_perm+0x219/0x5f0 [ 473.467385][T12902] tomoyo_path_number_perm+0x246/0x5f0 [ 473.467415][T12902] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 473.467483][T12902] ? __pfx_current_check_access_path+0x10/0x10 [ 473.467509][T12902] ? d_splice_alias_ops+0x11c/0x440 [ 473.467532][T12902] ? d_splice_alias+0x12/0x30 [ 473.467558][T12902] ? lookup_one_qstr_excl+0x1d4/0x360 [ 473.467590][T12902] tomoyo_path_mkdir+0xb0/0xf0 [ 473.467612][T12902] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 473.467639][T12902] ? __pfx_filename_create+0x10/0x10 [ 473.467671][T12902] security_path_mkdir+0x169/0x350 [ 473.467705][T12902] filename_mkdirat+0x200/0x510 [ 473.467728][T12902] ? __might_fault+0xaf/0x130 [ 473.467758][T12902] ? __pfx_filename_mkdirat+0x10/0x10 [ 473.467787][T12902] ? do_getname+0x151/0x250 [ 473.467816][T12902] __se_sys_mkdirat+0x35/0x150 [ 473.467843][T12902] do_syscall_64+0x166/0x520 [ 473.467867][T12902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.467892][T12902] ? clear_bhb_loop+0x70/0xc0 [ 473.467919][T12902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.467948][T12902] RIP: 0033:0x7f85beb9e1d9 [ 473.467971][T12902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.467992][T12902] RSP: 002b:00007f85bfa40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 473.468017][T12902] RAX: ffffffffffffffda RBX: 00007f85bee25fa0 RCX: 00007f85beb9e1d9 [ 473.468035][T12902] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 473.468052][T12902] RBP: 00007f85bec35888 R08: 0000000000000000 R09: 0000000000000000 [ 473.468074][T12902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.468089][T12902] R13: 00007f85bee26038 R14: 00007f85bee25fa0 R15: 00007fffde88f478 [ 473.468129][T12902] [ 473.468236][T12902] ERROR: Out of memory at tomoyo_realpath_from_path. [ 473.960720][ T10] keytouch 0003:0926:3333.0021: fixing up Keytouch IEC report descriptor [ 473.994979][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0021/input/input43 [ 474.148455][ T10] keytouch 0003:0926:3333.0021: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 474.246221][T12912] jffs2: notice: (12912) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 474.266666][ T1611] usb 6-1: unable to get BOS descriptor or descriptor too short [ 474.266722][ T1611] usb 6-1: New USB device found: idVendor=046d, idProduct=0850, bcdDevice=0.40 [ 474.279036][ T1611] usb 6-1: unable to read config index 0 descriptor/start: -32 [ 474.279294][ T1611] usb 6-1: chopping to 0 config(s) [ 474.279371][ T1611] usb 6-1: can't read configurations, error -32 [ 474.360955][T12917] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2540'. [ 474.377125][T12917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2540'. [ 474.449588][ T1611] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 474.528977][ T10] usb 5-1: USB disconnect, device number 19 [ 474.578482][ T975] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 474.578525][ T1611] usb 6-1: device descriptor read/64, error -32 [ 474.690314][ T1611] usb usb6-port1: attempt power cycle [ 474.731158][ T975] usb 2-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 474.734189][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.734215][ T975] usb 2-1: Product: syz [ 474.734229][ T975] usb 2-1: Manufacturer: syz [ 474.734243][ T975] usb 2-1: SerialNumber: syz [ 474.740776][ T5716] usb 4-1: new low-speed USB device number 78 using dummy_hcd [ 474.792892][ T5788] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 474.898367][ T5716] usb 4-1: Invalid ep0 maxpacket: 32 [ 475.028469][ T1611] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 475.028650][ T5716] usb 4-1: new low-speed USB device number 79 using dummy_hcd [ 475.036327][T12923] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2543'. [ 475.064429][ T1611] usb 6-1: device descriptor read/8, error -32 [ 475.081934][T12923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.084188][T12923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.110808][T12923] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.2543'. [ 475.111134][T12923] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2543'. [ 475.111156][T12923] nbd: must specify at least one socket [ 475.178363][ T5716] usb 4-1: Invalid ep0 maxpacket: 32 [ 475.178757][ T5716] usb usb4-port1: attempt power cycle [ 475.298389][ T1611] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 475.319151][ T1611] usb 6-1: device descriptor read/8, error -32 [ 475.431537][ T1611] usb usb6-port1: unable to enumerate USB device [ 475.502171][ T1611] usb 2-1: USB disconnect, device number 84 [ 475.520176][ T5716] usb 4-1: new low-speed USB device number 80 using dummy_hcd [ 475.539174][ T5716] usb 4-1: Invalid ep0 maxpacket: 32 [ 475.669852][ T5716] usb 4-1: new low-speed USB device number 81 using dummy_hcd [ 475.689783][ T5716] usb 4-1: Invalid ep0 maxpacket: 32 [ 475.690053][ T5716] usb usb4-port1: unable to enumerate USB device [ 475.906602][T12942] FAULT_INJECTION: forcing a failure. [ 475.906602][T12942] name failslab, interval 1, probability 0, space 0, times 0 [ 475.906650][T12942] CPU: 0 UID: 0 PID: 12942 Comm: syz.5.2546 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.906674][T12942] Tainted: [L]=SOFTLOCKUP [ 475.906680][T12942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 475.906691][T12942] Call Trace: [ 475.906698][T12942] [ 475.906706][T12942] dump_stack_lvl+0xe8/0x150 [ 475.906728][T12942] should_fail_ex+0x3eb/0x540 [ 475.906749][T12942] should_failslab+0xa8/0x100 [ 475.906767][T12942] __kmalloc_noprof+0xf9/0x710 [ 475.906784][T12942] ? tomoyo_encode+0x2ad/0x570 [ 475.906799][T12942] ? tomoyo_encode+0x2ad/0x570 [ 475.906822][T12942] tomoyo_encode+0x2ad/0x570 [ 475.906843][T12942] tomoyo_realpath_from_path+0x5fa/0x640 [ 475.906870][T12942] ? tomoyo_path_number_perm+0x219/0x5f0 [ 475.906887][T12942] tomoyo_path_number_perm+0x246/0x5f0 [ 475.906906][T12942] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 475.906953][T12942] ? __pfx_current_check_access_path+0x10/0x10 [ 475.906971][T12942] ? d_splice_alias_ops+0x11c/0x440 [ 475.906985][T12942] ? d_splice_alias+0x12/0x30 [ 475.907003][T12942] ? lookup_one_qstr_excl+0x1d4/0x360 [ 475.907024][T12942] tomoyo_path_mkdir+0xb0/0xf0 [ 475.907040][T12942] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 475.907059][T12942] ? __pfx_filename_create+0x10/0x10 [ 475.907080][T12942] security_path_mkdir+0x169/0x350 [ 475.907100][T12942] filename_mkdirat+0x200/0x510 [ 475.907115][T12942] ? __might_fault+0xaf/0x130 [ 475.907134][T12942] ? __pfx_filename_mkdirat+0x10/0x10 [ 475.907153][T12942] ? do_getname+0x151/0x250 [ 475.907172][T12942] __se_sys_mkdirat+0x35/0x150 [ 475.907190][T12942] do_syscall_64+0x166/0x520 [ 475.907205][T12942] ? trace_irq_disable+0x3b/0x140 [ 475.907220][T12942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.907237][T12942] ? clear_bhb_loop+0x70/0xc0 [ 475.907255][T12942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.907272][T12942] RIP: 0033:0x7ff20959e1d9 [ 475.907287][T12942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.907303][T12942] RSP: 002b:00007ff20a400028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 475.907321][T12942] RAX: ffffffffffffffda RBX: 00007ff209825fa0 RCX: 00007ff20959e1d9 [ 475.907334][T12942] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 475.907345][T12942] RBP: 00007ff209635888 R08: 0000000000000000 R09: 0000000000000000 [ 475.907356][T12942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.907373][T12942] R13: 00007ff209826038 R14: 00007ff209825fa0 R15: 00007ffca895c8e8 [ 475.907399][T12942] [ 475.907461][T12942] ERROR: Out of memory at tomoyo_realpath_from_path. [ 476.029552][ T5788] usb 2-1: Service connection timeout for: 256 [ 476.029616][ T5788] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 476.031022][ T5788] ath9k_htc: Failed to initialize the device [ 476.064861][ T1611] usb 2-1: ath9k_htc: USB layer deinitialized [ 476.362241][T12950] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2549'. [ 476.385489][T12950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2549'. [ 476.754972][T12964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.757072][T12964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.868530][ T975] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 476.991870][ T33] audit: type=1400 audit(1791518485.337:561): apparmor="STATUS" info="unsupported interface version" error=-93 profile="unconfined" pid=12965 comm="syz.1.2554" offset=69 [ 477.159273][ T975] usb 5-1: not running at top speed; connect to a high speed hub [ 477.159301][ T975] usb 5-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 477.160208][ T975] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.161471][ T975] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 477.161490][ T975] usb 5-1: Product: syz [ 477.161500][ T975] usb 5-1: Manufacturer: syz [ 477.792990][ T975] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 477.793060][ T975] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 477.820373][ T975] usb 5-1: USB disconnect, device number 20 [ 478.030367][T12974] jffs2: notice: (12974) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 478.093886][T12981] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2559'. [ 478.108580][T12979] FAULT_INJECTION: forcing a failure. [ 478.108580][T12979] name failslab, interval 1, probability 0, space 0, times 0 [ 478.108618][T12979] CPU: 0 UID: 0 PID: 12979 Comm: syz.3.2558 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.108651][T12979] Tainted: [L]=SOFTLOCKUP [ 478.108660][T12979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 478.108675][T12979] Call Trace: [ 478.108684][T12979] [ 478.108695][T12979] dump_stack_lvl+0xe8/0x150 [ 478.108726][T12979] should_fail_ex+0x3eb/0x540 [ 478.108756][T12979] should_failslab+0xa8/0x100 [ 478.108782][T12979] __kmalloc_noprof+0xf9/0x710 [ 478.108806][T12979] ? tomoyo_encode+0x2ad/0x570 [ 478.108828][T12979] ? tomoyo_encode+0x2ad/0x570 [ 478.108858][T12979] tomoyo_encode+0x2ad/0x570 [ 478.108885][T12979] tomoyo_realpath_from_path+0x5fa/0x640 [ 478.108914][T12979] ? tomoyo_path_number_perm+0x219/0x5f0 [ 478.108936][T12979] tomoyo_path_number_perm+0x246/0x5f0 [ 478.108962][T12979] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 478.109030][T12979] ? __pfx_current_check_access_path+0x10/0x10 [ 478.109055][T12979] ? d_splice_alias_ops+0x11c/0x440 [ 478.109077][T12979] ? d_splice_alias+0x12/0x30 [ 478.109114][T12979] ? lookup_one_qstr_excl+0x1d4/0x360 [ 478.109146][T12979] tomoyo_path_mkdir+0xb0/0xf0 [ 478.109169][T12979] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 478.109196][T12979] ? __pfx_filename_create+0x10/0x10 [ 478.109228][T12979] security_path_mkdir+0x169/0x350 [ 478.109256][T12979] filename_mkdirat+0x200/0x510 [ 478.109278][T12979] ? __might_fault+0xaf/0x130 [ 478.109307][T12979] ? __pfx_filename_mkdirat+0x10/0x10 [ 478.109335][T12979] ? do_getname+0x151/0x250 [ 478.109362][T12979] __se_sys_mkdirat+0x35/0x150 [ 478.109389][T12979] do_syscall_64+0x166/0x520 [ 478.109412][T12979] ? trace_irq_disable+0x3b/0x140 [ 478.109434][T12979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.109459][T12979] ? clear_bhb_loop+0x70/0xc0 [ 478.109486][T12979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.109510][T12979] RIP: 0033:0x7f85beb9e1d9 [ 478.109533][T12979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.109553][T12979] RSP: 002b:00007f85bfa40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 478.109580][T12979] RAX: ffffffffffffffda RBX: 00007f85bee25fa0 RCX: 00007f85beb9e1d9 [ 478.109597][T12979] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 478.109615][T12979] RBP: 00007f85bec35888 R08: 0000000000000000 R09: 0000000000000000 [ 478.109631][T12979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.109646][T12979] R13: 00007f85bee26038 R14: 00007f85bee25fa0 R15: 00007fffde88f478 [ 478.109697][T12979] [ 478.109737][T12979] ERROR: Out of memory at tomoyo_realpath_from_path. [ 478.115325][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2559'. [ 478.319275][ T5788] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 478.469628][ T5788] usb 2-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 478.474237][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.474266][ T5788] usb 2-1: Product: syz [ 478.474284][ T5788] usb 2-1: Manufacturer: syz [ 478.474300][ T5788] usb 2-1: SerialNumber: syz [ 478.526764][T12075] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 478.918545][ T5722] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 478.956988][T13003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.957866][T13003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.000210][ T975] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 479.066012][ T975] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 479.076003][ T5722] usb 4-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 479.086943][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.086993][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.111030][ T5722] usb 4-1: config 0 descriptor?? [ 479.263665][ T5788] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 479.264628][ T5716] usb 2-1: USB disconnect, device number 85 [ 479.329527][ T5788] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 479.523124][ T5722] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 479.542867][ T5722] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0022/input/input44 [ 479.607618][T13014] FAULT_INJECTION: forcing a failure. [ 479.607618][T13014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.607654][T13014] CPU: 1 UID: 0 PID: 13014 Comm: syz.4.2567 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.607682][T13014] Tainted: [L]=SOFTLOCKUP [ 479.607690][T13014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 479.607704][T13014] Call Trace: [ 479.607714][T13014] [ 479.607724][T13014] dump_stack_lvl+0xe8/0x150 [ 479.607754][T13014] should_fail_ex+0x3eb/0x540 [ 479.607780][T13014] _copy_to_user+0x31/0xb0 [ 479.607805][T13014] simple_read_from_buffer+0xe1/0x170 [ 479.607834][T13014] proc_fail_nth_read+0x1bb/0x230 [ 479.607860][T13014] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 479.607887][T13014] ? rw_verify_area+0x24a/0x4c0 [ 479.607912][T13014] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 479.607934][T13014] vfs_read+0x213/0xa80 [ 479.607971][T13014] ? __pfx___mutex_lock+0x10/0x10 [ 479.608013][T13014] ? __pfx_vfs_read+0x10/0x10 [ 479.608037][T13014] ? __fget_files+0x2a/0x420 [ 479.608059][T13014] ? __fget_files+0x3a2/0x420 [ 479.608078][T13014] ? __fget_files+0x2a/0x420 [ 479.608104][T13014] ? fdget+0x1ac/0x250 [ 479.608133][T13014] ksys_read+0x150/0x270 [ 479.608158][T13014] ? __pfx_ksys_read+0x10/0x10 [ 479.608194][T13014] do_syscall_64+0x166/0x520 [ 479.608218][T13014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.608241][T13014] ? clear_bhb_loop+0x70/0xc0 [ 479.608269][T13014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.608292][T13014] RIP: 0033:0x7f25e975ea0e [ 479.608313][T13014] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 479.608333][T13014] RSP: 002b:00007f25ea638fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 479.608358][T13014] RAX: ffffffffffffffda RBX: 00007f25ea6396c0 RCX: 00007f25e975ea0e [ 479.608374][T13014] RDX: 000000000000000f RSI: 00007f25ea6390a0 RDI: 0000000000000003 [ 479.608389][T13014] RBP: 00007f25ea639090 R08: 0000000000000000 R09: 0000000000000000 [ 479.608404][T13014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.608418][T13014] R13: 00007f25e9a26038 R14: 00007f25e9a25fa0 R15: 00007ffc1dae3618 [ 479.608454][T13014] [ 479.779343][T12075] usb 2-1: Service connection timeout for: 256 [ 479.779420][T12075] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 479.784337][T12075] ath9k_htc: Failed to initialize the device [ 479.805979][ T5788] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 479.852944][ T5716] usb 2-1: ath9k_htc: USB layer deinitialized [ 479.853417][ T5788] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 479.892281][T13016] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2568'. [ 479.925151][T13016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2568'. [ 479.942021][ T5722] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 480.142756][T13022] FAULT_INJECTION: forcing a failure. [ 480.142756][T13022] name failslab, interval 1, probability 0, space 0, times 0 [ 480.142795][T13022] CPU: 0 UID: 0 PID: 13022 Comm: syz.4.2570 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.142831][T13022] Tainted: [L]=SOFTLOCKUP [ 480.142844][T13022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 480.142860][T13022] Call Trace: [ 480.142871][T13022] [ 480.142882][T13022] dump_stack_lvl+0xe8/0x150 [ 480.142915][T13022] should_fail_ex+0x3eb/0x540 [ 480.142945][T13022] should_failslab+0xa8/0x100 [ 480.142971][T13022] __kmalloc_noprof+0xf9/0x710 [ 480.142997][T13022] ? tomoyo_encode+0x2ad/0x570 [ 480.143019][T13022] ? tomoyo_encode+0x2ad/0x570 [ 480.143050][T13022] tomoyo_encode+0x2ad/0x570 [ 480.143081][T13022] tomoyo_realpath_from_path+0x5fa/0x640 [ 480.143117][T13022] ? tomoyo_path_number_perm+0x219/0x5f0 [ 480.143143][T13022] tomoyo_path_number_perm+0x246/0x5f0 [ 480.143171][T13022] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 480.143240][T13022] ? __pfx_current_check_access_path+0x10/0x10 [ 480.143267][T13022] ? d_splice_alias_ops+0x11c/0x440 [ 480.143290][T13022] ? d_splice_alias+0x12/0x30 [ 480.143317][T13022] ? lookup_one_qstr_excl+0x1d4/0x360 [ 480.143347][T13022] tomoyo_path_mkdir+0xb0/0xf0 [ 480.143371][T13022] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 480.143399][T13022] ? __pfx_filename_create+0x10/0x10 [ 480.143431][T13022] security_path_mkdir+0x169/0x350 [ 480.143460][T13022] filename_mkdirat+0x200/0x510 [ 480.143503][T13022] ? __might_fault+0xaf/0x130 [ 480.143531][T13022] ? __pfx_filename_mkdirat+0x10/0x10 [ 480.143559][T13022] ? do_getname+0x151/0x250 [ 480.143586][T13022] __se_sys_mkdirat+0x35/0x150 [ 480.143612][T13022] do_syscall_64+0x166/0x520 [ 480.143636][T13022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.143661][T13022] ? clear_bhb_loop+0x70/0xc0 [ 480.143686][T13022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.143710][T13022] RIP: 0033:0x7f25e979e1d9 [ 480.143733][T13022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.143753][T13022] RSP: 002b:00007f25ea639028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 480.143779][T13022] RAX: ffffffffffffffda RBX: 00007f25e9a25fa0 RCX: 00007f25e979e1d9 [ 480.143797][T13022] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 480.143814][T13022] RBP: 00007f25e9835888 R08: 0000000000000000 R09: 0000000000000000 [ 480.143829][T13022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.143844][T13022] R13: 00007f25e9a26038 R14: 00007f25e9a25fa0 R15: 00007ffc1dae3618 [ 480.143882][T13022] [ 480.143942][T13022] ERROR: Out of memory at tomoyo_realpath_from_path. [ 480.234985][ T975] usb 4-1: USB disconnect, device number 82 [ 480.502362][ T1751] block nbd0: Possible stuck request ffff888028985080: control (read@0,1024B). Runtime 360 seconds [ 480.502415][ T1751] block nbd0: Possible stuck request ffff888028985240: control (read@1024,1024B). Runtime 360 seconds [ 480.787119][T13036] tmpfs: Using encoding : utf8-12.1.0 [ 480.936440][T13040] jffs2: notice: (13040) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 480.979634][ T5788] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 480.980198][ T5788] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 481.198634][ T975] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 481.359340][ T975] usb 4-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 481.363865][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.363893][ T975] usb 4-1: Product: syz [ 481.363909][ T975] usb 4-1: Manufacturer: syz [ 481.363924][ T975] usb 4-1: SerialNumber: syz [ 481.426469][ T975] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 481.541447][T13049] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2578'. [ 481.673423][T13053] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 481.704087][T13058] FAULT_INJECTION: forcing a failure. [ 481.704087][T13058] name failslab, interval 1, probability 0, space 0, times 0 [ 481.704115][T13058] CPU: 1 UID: 0 PID: 13058 Comm: syz.1.2581 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.704140][T13058] Tainted: [L]=SOFTLOCKUP [ 481.704146][T13058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 481.704157][T13058] Call Trace: [ 481.704164][T13058] [ 481.704172][T13058] dump_stack_lvl+0xe8/0x150 [ 481.704196][T13058] should_fail_ex+0x3eb/0x540 [ 481.704242][T13058] should_failslab+0xa8/0x100 [ 481.704270][T13058] __kmalloc_noprof+0xf9/0x710 [ 481.704296][T13058] ? tomoyo_encode+0x2ad/0x570 [ 481.704317][T13058] ? tomoyo_encode+0x2ad/0x570 [ 481.704350][T13058] tomoyo_encode+0x2ad/0x570 [ 481.704372][T13058] tomoyo_realpath_from_path+0x5fa/0x640 [ 481.704396][T13058] ? tomoyo_path_number_perm+0x219/0x5f0 [ 481.704414][T13058] tomoyo_path_number_perm+0x246/0x5f0 [ 481.704434][T13058] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 481.704481][T13058] ? __pfx_current_check_access_path+0x10/0x10 [ 481.704498][T13058] ? d_splice_alias_ops+0x11c/0x440 [ 481.704514][T13058] ? d_splice_alias+0x12/0x30 [ 481.704531][T13058] ? lookup_one_qstr_excl+0x1d4/0x360 [ 481.704553][T13058] tomoyo_path_mkdir+0xb0/0xf0 [ 481.704569][T13058] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 481.704589][T13058] ? __pfx_filename_create+0x10/0x10 [ 481.704610][T13058] security_path_mkdir+0x169/0x350 [ 481.704629][T13058] filename_mkdirat+0x200/0x510 [ 481.704644][T13058] ? __might_fault+0xaf/0x130 [ 481.704665][T13058] ? __pfx_filename_mkdirat+0x10/0x10 [ 481.704684][T13058] ? do_getname+0x151/0x250 [ 481.704703][T13058] __se_sys_mkdirat+0x35/0x150 [ 481.704721][T13058] do_syscall_64+0x166/0x520 [ 481.704737][T13058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.704755][T13058] ? clear_bhb_loop+0x70/0xc0 [ 481.704779][T13058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.704797][T13058] RIP: 0033:0x7f29a5b9e1d9 [ 481.704813][T13058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.704828][T13058] RSP: 002b:00007f29a6aba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 481.704846][T13058] RAX: ffffffffffffffda RBX: 00007f29a5e25fa0 RCX: 00007f29a5b9e1d9 [ 481.704858][T13058] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 481.704870][T13058] RBP: 00007f29a5c35888 R08: 0000000000000000 R09: 0000000000000000 [ 481.704880][T13058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.704891][T13058] R13: 00007f29a5e26038 R14: 00007f29a5e25fa0 R15: 00007ffc21adc9e8 [ 481.704917][T13058] [ 481.704984][T13058] ERROR: Out of memory at tomoyo_realpath_from_path. [ 481.971357][T13003] ceph: No mds server is up or the cluster is laggy [ 481.986462][T13006] ceph: No mds server is up or the cluster is laggy [ 482.011628][ T5788] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 482.015031][ T5788] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 482.329154][ T5716] usb 4-1: USB disconnect, device number 83 [ 482.628509][ T5722] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 482.648557][ T975] usb 4-1: Service connection timeout for: 256 [ 482.648583][ T975] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 482.649202][ T975] ath9k_htc: Failed to initialize the device [ 482.649550][ T5716] usb 4-1: ath9k_htc: USB layer deinitialized [ 482.714777][T13078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.715429][T13078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.779159][ T5722] usb 5-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 482.780303][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.780351][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.782545][ T5722] usb 5-1: config 0 descriptor?? [ 482.891571][T13084] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2588'. [ 483.196479][ T5722] keytouch 0003:0926:3333.0023: fixing up Keytouch IEC report descriptor [ 483.218266][ T5722] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0023/input/input45 [ 483.378841][ T5722] keytouch 0003:0926:3333.0023: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 483.479077][T13095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.479569][T13095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.560905][ T5722] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 483.631953][ T5722] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 483.762495][ T5722] usb 5-1: USB disconnect, device number 21 [ 483.833428][ T5716] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 483.889174][ T5716] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 483.983500][ T3385] IPVS: starting estimator thread 0... [ 484.079459][T13110] IPVS: using max 27 ests per chain, 64800 per kthread [ 484.194651][T13118] jffs2: notice: (13118) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 484.310301][T13121] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2597'. [ 484.338996][ T1611] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 484.400328][ T1611] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 484.459479][ T975] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 484.608941][ T975] usb 4-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 484.611965][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.611989][ T975] usb 4-1: Product: syz [ 484.612003][ T975] usb 4-1: Manufacturer: syz [ 484.612016][ T975] usb 4-1: SerialNumber: syz [ 484.672883][ T5788] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 484.961841][T13129] FAULT_INJECTION: forcing a failure. [ 484.961841][T13129] name failslab, interval 1, probability 0, space 0, times 0 [ 484.961909][T13129] CPU: 0 UID: 0 PID: 13129 Comm: syz.1.2600 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.961939][T13129] Tainted: [L]=SOFTLOCKUP [ 484.961947][T13129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 484.961961][T13129] Call Trace: [ 484.961977][T13129] [ 484.961988][T13129] dump_stack_lvl+0xe8/0x150 [ 484.962015][T13129] should_fail_ex+0x3eb/0x540 [ 484.962062][T13129] should_failslab+0xa8/0x100 [ 484.962088][T13129] __kmalloc_noprof+0xf9/0x710 [ 484.962112][T13129] ? tomoyo_encode+0x2ad/0x570 [ 484.962132][T13129] ? tomoyo_encode+0x2ad/0x570 [ 484.962160][T13129] tomoyo_encode+0x2ad/0x570 [ 484.962196][T13129] tomoyo_realpath_from_path+0x5fa/0x640 [ 484.962219][T13129] ? tomoyo_path_number_perm+0x219/0x5f0 [ 484.962254][T13129] tomoyo_path_number_perm+0x246/0x5f0 [ 484.962285][T13129] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 484.962349][T13129] ? __pfx_current_check_access_path+0x10/0x10 [ 484.962373][T13129] ? d_splice_alias_ops+0x11c/0x440 [ 484.962396][T13129] ? d_splice_alias+0x12/0x30 [ 484.962423][T13129] ? lookup_one_qstr_excl+0x1d4/0x360 [ 484.962454][T13129] tomoyo_path_mkdir+0xb0/0xf0 [ 484.962479][T13129] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 484.962505][T13129] ? __pfx_filename_create+0x10/0x10 [ 484.962533][T13129] security_path_mkdir+0x169/0x350 [ 484.962558][T13129] filename_mkdirat+0x200/0x510 [ 484.962573][T13129] ? __might_fault+0xaf/0x130 [ 484.962593][T13129] ? __pfx_filename_mkdirat+0x10/0x10 [ 484.962629][T13129] ? do_getname+0x151/0x250 [ 484.962656][T13129] __se_sys_mkdirat+0x35/0x150 [ 484.962682][T13129] do_syscall_64+0x166/0x520 [ 484.962704][T13129] ? trace_irq_disable+0x3b/0x140 [ 484.962724][T13129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.962747][T13129] ? clear_bhb_loop+0x70/0xc0 [ 484.962772][T13129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.962800][T13129] RIP: 0033:0x7f29a5b9e1d9 [ 484.962822][T13129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.962854][T13129] RSP: 002b:00007f29a6aba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 484.962876][T13129] RAX: ffffffffffffffda RBX: 00007f29a5e25fa0 RCX: 00007f29a5b9e1d9 [ 484.962891][T13129] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 484.962906][T13129] RBP: 00007f29a5c35888 R08: 0000000000000000 R09: 0000000000000000 [ 484.962922][T13129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.962931][T13129] R13: 00007f29a5e26038 R14: 00007f29a5e25fa0 R15: 00007ffc21adc9e8 [ 484.962955][T13129] [ 484.963006][T13129] ERROR: Out of memory at tomoyo_realpath_from_path. [ 485.412087][T13133] sg_write: data in/out 426460/128 bytes for SCSI command 0x0-- guessing data in; [ 485.412087][T13133] program syz.4.2601 not setting count and/or reply_len properly [ 485.511825][ T1611] usb 4-1: USB disconnect, device number 84 [ 485.928362][ T5788] usb 4-1: Service connection timeout for: 256 [ 485.928386][ T5788] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 485.928991][ T5788] ath9k_htc: Failed to initialize the device [ 485.930507][ T1611] usb 4-1: ath9k_htc: USB layer deinitialized [ 486.009586][ T5716] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 486.010380][ T5716] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 486.132370][T13153] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2607'. [ 486.217581][ T5610] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 486.217603][ T5610] CPU: 1 UID: 0 PID: 5610 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.217625][ T5610] Tainted: [L]=SOFTLOCKUP [ 486.217631][ T5610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 486.217642][ T5610] Workqueue: hci2 hci_rx_work [ 486.217662][ T5610] Call Trace: [ 486.217669][ T5610] [ 486.217676][ T5610] dump_stack_lvl+0xe8/0x150 [ 486.217696][ T5610] sysfs_create_dir_ns+0x271/0x2a0 [ 486.217715][ T5610] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 486.217735][ T5610] ? do_raw_spin_unlock+0xf5/0x200 [ 486.217754][ T5610] kobject_add_internal+0x622/0xcd0 [ 486.217776][ T5610] kobject_add+0x163/0x240 [ 486.217796][ T5610] ? __pfx_kobject_add+0x10/0x10 [ 486.217815][ T5610] ? get_device_parent+0x366/0x3a0 [ 486.217836][ T5610] device_add+0x3fa/0xb80 [ 486.217854][ T5610] hci_conn_add_sysfs+0xd5/0x210 [ 486.217873][ T5610] le_conn_complete_evt+0x1094/0x1780 [ 486.217896][ T5610] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 486.217913][ T5610] ? __mutex_unlock_slowpath+0x731/0x900 [ 486.217933][ T5610] ? skb_pull_data+0xf0/0x200 [ 486.217958][ T5610] hci_le_conn_complete_evt+0x187/0x470 [ 486.217981][ T5610] hci_event_packet+0x67a/0xf10 [ 486.217997][ T5610] ? trace_irq_disable+0x3b/0x140 [ 486.218017][ T5610] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 486.218034][ T5610] ? __pfx_hci_event_packet+0x10/0x10 [ 486.218058][ T5610] ? hci_send_to_monitor+0xdf/0x600 [ 486.218077][ T5610] hci_rx_work+0x2b4/0x1110 [ 486.218099][ T5610] ? process_scheduled_works+0x97a/0x1630 [ 486.218117][ T5610] process_scheduled_works+0xc3d/0x1630 [ 486.218160][ T5610] ? __pfx_process_scheduled_works+0x10/0x10 [ 486.218182][ T5610] ? assign_work+0x3cf/0x5d0 [ 486.218202][ T5610] worker_thread+0xa47/0xfb0 [ 486.218227][ T5610] ? __kthread_parkme+0x71/0x1f0 [ 486.218271][ T5610] kthread+0x38b/0x480 [ 486.218293][ T5610] ? __pfx_worker_thread+0x10/0x10 [ 486.218313][ T5610] ? __pfx_kthread+0x10/0x10 [ 486.218336][ T5610] ret_from_fork+0x514/0xb70 [ 486.218362][ T5610] ? __pfx_ret_from_fork+0x10/0x10 [ 486.218386][ T5610] ? __switch_to+0xc78/0x1410 [ 486.218413][ T5610] ? __pfx_kthread+0x10/0x10 [ 486.218437][ T5610] ret_from_fork_asm+0x1a/0x30 [ 486.218480][ T5610] [ 486.219455][ T5610] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 486.219495][ T5610] Bluetooth: hci2: failed to register connection device [ 486.268474][T12075] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 486.453327][T12075] usb 5-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 486.461475][T13099] ceph: No mds server is up or the cluster is laggy [ 486.468986][T12075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.469137][T12075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.484942][T13095] ceph: No mds server is up or the cluster is laggy [ 486.517073][T12075] usb 5-1: config 0 descriptor?? [ 486.707306][T13164] FAULT_INJECTION: forcing a failure. [ 486.707306][T13164] name failslab, interval 1, probability 0, space 0, times 0 [ 486.707335][T13164] CPU: 1 UID: 0 PID: 13164 Comm: syz.5.2610 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.707358][T13164] Tainted: [L]=SOFTLOCKUP [ 486.707364][T13164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 486.707375][T13164] Call Trace: [ 486.707382][T13164] [ 486.707390][T13164] dump_stack_lvl+0xe8/0x150 [ 486.707432][T13164] should_fail_ex+0x3eb/0x540 [ 486.707457][T13164] should_failslab+0xa8/0x100 [ 486.707476][T13164] __kmalloc_noprof+0xf9/0x710 [ 486.707495][T13164] ? tomoyo_encode+0x2ad/0x570 [ 486.707511][T13164] ? tomoyo_encode+0x2ad/0x570 [ 486.707534][T13164] tomoyo_encode+0x2ad/0x570 [ 486.707556][T13164] tomoyo_realpath_from_path+0x5fa/0x640 [ 486.707583][T13164] ? tomoyo_path_number_perm+0x219/0x5f0 [ 486.707602][T13164] tomoyo_path_number_perm+0x246/0x5f0 [ 486.707623][T13164] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 486.707673][T13164] ? __pfx_current_check_access_path+0x10/0x10 [ 486.707692][T13164] ? d_splice_alias_ops+0x11c/0x440 [ 486.707708][T13164] ? d_splice_alias+0x12/0x30 [ 486.707727][T13164] ? lookup_one_qstr_excl+0x1d4/0x360 [ 486.707750][T13164] tomoyo_path_mkdir+0xb0/0xf0 [ 486.707768][T13164] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 486.707794][T13164] ? __pfx_filename_create+0x10/0x10 [ 486.707818][T13164] security_path_mkdir+0x169/0x350 [ 486.707858][T13164] filename_mkdirat+0x200/0x510 [ 486.707875][T13164] ? __might_fault+0xaf/0x130 [ 486.707897][T13164] ? __pfx_filename_mkdirat+0x10/0x10 [ 486.707919][T13164] ? do_getname+0x151/0x250 [ 486.707940][T13164] __se_sys_mkdirat+0x35/0x150 [ 486.707961][T13164] do_syscall_64+0x166/0x520 [ 486.707979][T13164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.708001][T13164] ? clear_bhb_loop+0x70/0xc0 [ 486.708023][T13164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.708042][T13164] RIP: 0033:0x7ff20959e1d9 [ 486.708059][T13164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.708076][T13164] RSP: 002b:00007ff20a400028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 486.708096][T13164] RAX: ffffffffffffffda RBX: 00007ff209825fa0 RCX: 00007ff20959e1d9 [ 486.708110][T13164] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 486.708123][T13164] RBP: 00007ff209635888 R08: 0000000000000000 R09: 0000000000000000 [ 486.708135][T13164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.708146][T13164] R13: 00007ff209826038 R14: 00007ff209825fa0 R15: 00007ffca895c8e8 [ 486.708176][T13164] [ 486.717194][T13164] ERROR: Out of memory at tomoyo_realpath_from_path. [ 487.064441][T12075] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 487.080759][T12075] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0024/input/input46 [ 487.198978][T12075] keytouch 0003:0926:3333.0024: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 487.552065][T13181] jffs2: notice: (13181) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 487.587749][T13181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.590643][T13181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.612484][T12075] usb 5-1: USB disconnect, device number 22 [ 487.629693][T13185] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2617'. [ 487.778815][ T5716] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 487.929312][ T5716] usb 4-1: Using ep0 maxpacket: 8 [ 487.930137][ T5716] usb 4-1: New USB device found: idVendor=0763, idProduct=2003, bcdDevice=0.40 [ 487.933135][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.933165][ T5716] usb 4-1: Product: syz [ 487.933184][ T5716] usb 4-1: Manufacturer: syz [ 487.933201][ T5716] usb 4-1: SerialNumber: syz [ 487.968715][ T5788] usb 2-1: new low-speed USB device number 86 using dummy_hcd [ 488.119154][ T5788] usb 2-1: Invalid ep0 maxpacket: 32 [ 488.250343][ T5788] usb 2-1: new low-speed USB device number 87 using dummy_hcd [ 488.350526][T13180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.352937][T13180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.380046][ T5716] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 488.399312][ T5788] usb 2-1: Invalid ep0 maxpacket: 32 [ 488.399680][ T5788] usb usb2-port1: attempt power cycle [ 488.439385][ T5716] usb 4-1: USB disconnect, device number 85 [ 488.483247][ T7710] udevd[7710]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.739003][ T5788] usb 2-1: new low-speed USB device number 88 using dummy_hcd [ 488.759233][ T5788] usb 2-1: Invalid ep0 maxpacket: 32 [ 488.899534][ T5788] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 488.922774][ T5788] usb 2-1: Invalid ep0 maxpacket: 32 [ 488.923042][ T5788] usb usb2-port1: unable to enumerate USB device [ 488.991250][T13199] FAULT_INJECTION: forcing a failure. [ 488.991250][T13199] name failslab, interval 1, probability 0, space 0, times 0 [ 488.991287][T13199] CPU: 1 UID: 0 PID: 13199 Comm: syz.3.2621 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.991311][T13199] Tainted: [L]=SOFTLOCKUP [ 488.991318][T13199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 488.991328][T13199] Call Trace: [ 488.991336][T13199] [ 488.991344][T13199] dump_stack_lvl+0xe8/0x150 [ 488.991368][T13199] should_fail_ex+0x3eb/0x540 [ 488.991390][T13199] should_failslab+0xa8/0x100 [ 488.991410][T13199] __kmalloc_noprof+0xf9/0x710 [ 488.991427][T13199] ? tomoyo_encode+0x2ad/0x570 [ 488.991443][T13199] ? tomoyo_encode+0x2ad/0x570 [ 488.991465][T13199] tomoyo_encode+0x2ad/0x570 [ 488.991486][T13199] tomoyo_realpath_from_path+0x5fa/0x640 [ 488.991511][T13199] ? tomoyo_path_number_perm+0x219/0x5f0 [ 488.991529][T13199] tomoyo_path_number_perm+0x246/0x5f0 [ 488.991549][T13199] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 488.991598][T13199] ? __pfx_current_check_access_path+0x10/0x10 [ 488.991618][T13199] ? d_splice_alias_ops+0x11c/0x440 [ 488.991638][T13199] ? d_splice_alias+0x12/0x30 [ 488.991658][T13199] ? lookup_one_qstr_excl+0x1d4/0x360 [ 488.991680][T13199] tomoyo_path_mkdir+0xb0/0xf0 [ 488.991698][T13199] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 488.991718][T13199] ? __pfx_filename_create+0x10/0x10 [ 488.991740][T13199] security_path_mkdir+0x169/0x350 [ 488.991760][T13199] filename_mkdirat+0x200/0x510 [ 488.991776][T13199] ? __might_fault+0xaf/0x130 [ 488.991796][T13199] ? __pfx_filename_mkdirat+0x10/0x10 [ 488.991816][T13199] ? do_getname+0x151/0x250 [ 488.991835][T13199] __se_sys_mkdirat+0x35/0x150 [ 488.991854][T13199] do_syscall_64+0x166/0x520 [ 488.991870][T13199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.991888][T13199] ? clear_bhb_loop+0x70/0xc0 [ 488.991906][T13199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.991924][T13199] RIP: 0033:0x7f85beb9e1d9 [ 488.991940][T13199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.991954][T13199] RSP: 002b:00007f85bfa40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 488.991974][T13199] RAX: ffffffffffffffda RBX: 00007f85bee25fa0 RCX: 00007f85beb9e1d9 [ 488.991987][T13199] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 488.991999][T13199] RBP: 00007f85bec35888 R08: 0000000000000000 R09: 0000000000000000 [ 488.992010][T13199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.992021][T13199] R13: 00007f85bee26038 R14: 00007f85bee25fa0 R15: 00007fffde88f478 [ 488.992048][T13199] [ 488.992072][T13199] ERROR: Out of memory at tomoyo_realpath_from_path. [ 489.458983][T13211] fuse: Unknown parameter ' 0000000000000000000000000000000000000000' [ 489.461363][T13211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2625'. [ 489.463277][T13211] FAULT_INJECTION: forcing a failure. [ 489.463277][T13211] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 489.463310][T13211] CPU: 1 UID: 0 PID: 13211 Comm: syz.3.2625 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.463341][T13211] Tainted: [L]=SOFTLOCKUP [ 489.463351][T13211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 489.463366][T13211] Call Trace: [ 489.463377][T13211] [ 489.463388][T13211] dump_stack_lvl+0xe8/0x150 [ 489.463419][T13211] should_fail_ex+0x3eb/0x540 [ 489.463449][T13211] prepare_alloc_pages+0x21e/0x5f0 [ 489.463482][T13211] __alloc_frozen_pages_noprof+0x17a/0x400 [ 489.463512][T13211] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 489.463536][T13211] ? futex_unqueue+0x22/0x240 [ 489.463567][T13211] ? policy_nodemask+0x2cc/0x8e0 [ 489.463592][T13211] ? __lock_acquire+0x747/0x2de0 [ 489.463618][T13211] alloc_pages_mpol+0x21e/0x390 [ 489.463648][T13211] folio_alloc_mpol_noprof+0x39/0x160 [ 489.463674][T13211] vma_alloc_folio_noprof+0xe1/0x1e0 [ 489.463702][T13211] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 489.463733][T13211] ? vma_has_anon_rmap+0xc9/0x270 [ 489.463759][T13211] do_pte_missing+0x16d4/0x3570 [ 489.463802][T13211] handle_mm_fault+0x1a53/0x3750 [ 489.463838][T13211] ? handle_mm_fault+0xf1/0x3750 [ 489.463873][T13211] ? __pfx_handle_mm_fault+0x10/0x10 [ 489.463898][T13211] ? lock_vma_under_rcu+0x45a/0x500 [ 489.463922][T13211] ? __pfx_do_futex+0x10/0x10 [ 489.463967][T13211] do_user_addr_fault+0xb35/0x1480 [ 489.464005][T13211] ? trace_page_fault_user+0x84/0x1e0 [ 489.464031][T13211] exc_page_fault+0x6a/0xc0 [ 489.464057][T13211] asm_exc_page_fault+0x26/0x30 [ 489.464089][T13211] RIP: 0033:0x7f85bea65a66 [ 489.464113][T13211] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d f5 08 1d 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 7c ca fe ff 4d 85 ed 0f 84 2b 0a 00 [ 489.464133][T13211] RSP: 002b:00007f85bfa3df60 EFLAGS: 00010206 [ 489.464155][T13211] RAX: 0000000000000000 RBX: 00007f85bee25fa0 RCX: 0000000000000000 [ 489.464171][T13211] RDX: 0000200000000000 RSI: 0000200000000000 RDI: 00007f85bec36345 [ 489.464188][T13211] RBP: 00007f85bec35888 R08: 00007f85bea52880 R09: 0000000000000000 [ 489.464204][T13211] R10: 0000000000000002 R11: 0000200000000000 R12: 0000000000000057 [ 489.464220][T13211] R13: 0000200000000000 R14: 0000000000000002 R15: 00007fffde88f478 [ 489.464256][T13211] [ 489.464492][T13211] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 489.721863][ T975] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 489.761094][T13213] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2626'. [ 489.879071][ T975] usb 4-1: New USB device found: idVendor=17cc, idProduct=1969, bcdDevice=1.00 [ 489.880059][ T975] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.880121][ T975] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 489.882695][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.882719][ T975] usb 4-1: Product: syz [ 489.882734][ T975] usb 4-1: Manufacturer: syz [ 489.882749][ T975] usb 4-1: SerialNumber: syz [ 490.022081][T13218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.022728][T13218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.068470][ T1611] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 490.219140][ T1611] usb 5-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 490.220172][ T1611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.220206][ T1611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.220240][ T1611] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 490.220284][ T1611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.222717][ T1611] usb 5-1: config 0 descriptor?? [ 490.300653][ T975] usb 4-1: unable to init card! (ret=-110) [ 490.301128][ T975] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 490.445338][ T1611] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 490.504909][T12075] usb 4-1: USB disconnect, device number 86 [ 490.579557][T13224] jffs2: notice: (13224) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 490.583787][T13224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.584266][T13224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.629380][ T1611] usb 5-1: USB disconnect, device number 23 [ 491.244669][T13243] FAULT_INJECTION: forcing a failure. [ 491.244669][T13243] name failslab, interval 1, probability 0, space 0, times 0 [ 491.244711][T13243] CPU: 1 UID: 0 PID: 13243 Comm: syz.4.2633 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.244745][T13243] Tainted: [L]=SOFTLOCKUP [ 491.244755][T13243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 491.244771][T13243] Call Trace: [ 491.244781][T13243] [ 491.244793][T13243] dump_stack_lvl+0xe8/0x150 [ 491.244827][T13243] should_fail_ex+0x3eb/0x540 [ 491.244858][T13243] should_failslab+0xa8/0x100 [ 491.244886][T13243] __kmalloc_noprof+0xf9/0x710 [ 491.244920][T13243] ? tomoyo_encode+0x2ad/0x570 [ 491.244941][T13243] ? tomoyo_encode+0x2ad/0x570 [ 491.244972][T13243] tomoyo_encode+0x2ad/0x570 [ 491.245002][T13243] tomoyo_realpath_from_path+0x5fa/0x640 [ 491.245038][T13243] ? tomoyo_path_number_perm+0x219/0x5f0 [ 491.245062][T13243] tomoyo_path_number_perm+0x246/0x5f0 [ 491.245091][T13243] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 491.245158][T13243] ? __pfx_current_check_access_path+0x10/0x10 [ 491.245183][T13243] ? d_splice_alias_ops+0x11c/0x440 [ 491.245204][T13243] ? d_splice_alias+0x12/0x30 [ 491.245229][T13243] ? lookup_one_qstr_excl+0x1d4/0x360 [ 491.245259][T13243] tomoyo_path_mkdir+0xb0/0xf0 [ 491.245286][T13243] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 491.245313][T13243] ? __pfx_filename_create+0x10/0x10 [ 491.245344][T13243] security_path_mkdir+0x169/0x350 [ 491.245371][T13243] filename_mkdirat+0x200/0x510 [ 491.245392][T13243] ? __might_fault+0xaf/0x130 [ 491.245425][T13243] ? __pfx_filename_mkdirat+0x10/0x10 [ 491.245457][T13243] ? do_getname+0x151/0x250 [ 491.245488][T13243] __se_sys_mkdirat+0x35/0x150 [ 491.245519][T13243] do_syscall_64+0x166/0x520 [ 491.245544][T13243] ? trace_irq_disable+0x3b/0x140 [ 491.245568][T13243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.245595][T13243] ? clear_bhb_loop+0x70/0xc0 [ 491.245625][T13243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.245653][T13243] RIP: 0033:0x7f25e979e1d9 [ 491.245676][T13243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.245700][T13243] RSP: 002b:00007f25ea639028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 491.245730][T13243] RAX: ffffffffffffffda RBX: 00007f25e9a25fa0 RCX: 00007f25e979e1d9 [ 491.245751][T13243] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 491.245769][T13243] RBP: 00007f25e9835888 R08: 0000000000000000 R09: 0000000000000000 [ 491.245786][T13243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.245802][T13243] R13: 00007f25e9a26038 R14: 00007f25e9a25fa0 R15: 00007ffc1dae3618 [ 491.245846][T13243] [ 491.245888][T13243] ERROR: Out of memory at tomoyo_realpath_from_path. [ 491.663837][T13252] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2635'. [ 491.823448][T13256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.827627][T13256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.869177][ T5696] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 491.902641][T13262] netlink: 'syz.4.2639': attribute type 16 has an invalid length. [ 491.902660][T13262] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2639'. [ 491.932698][ T10] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 492.058384][T12075] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 492.145362][ T975] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 492.189210][ T5722] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 492.218943][T12075] usb 2-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 492.220246][T12075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.220306][T12075] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.222475][T12075] usb 2-1: config 0 descriptor?? [ 492.632162][T12075] keytouch 0003:0926:3333.0026: fixing up Keytouch IEC report descriptor [ 492.636835][T12075] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0026/input/input47 [ 492.670951][ T975] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 492.699331][ T5722] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 492.737656][T12075] keytouch 0003:0926:3333.0026: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 493.034942][ T975] usb 2-1: USB disconnect, device number 90 [ 494.009671][ T5722] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 494.009677][ T975] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 494.766965][T13263] ceph: No mds server is up or the cluster is laggy [ 494.767928][T13256] ceph: No mds server is up or the cluster is laggy [ 497.804584][ T4980] udevd[4980]: worker [5623] /devices/virtual/block/nbd0 timeout; kill it [ 497.805696][ T4980] udevd[4980]: seq 10533 '/devices/virtual/block/nbd0' killed [ 501.619840][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.619894][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.569210][ T1751] block nbd0: Possible stuck request ffff888028985080: control (read@0,1024B). Runtime 390 seconds [ 510.569265][ T1751] block nbd0: Possible stuck request ffff888028985240: control (read@1024,1024B). Runtime 390 seconds [ 526.883477][T13273] jffs2: notice: (13273) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 526.940107][T13280] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 527.178876][ T1611] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 527.191096][T13282] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[12235] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[13282] [ 527.308650][ T1611] usb 5-1: device descriptor read/64, error -71 [ 527.549346][ T1611] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 527.668701][T12075] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 527.688101][ T1611] usb 5-1: device descriptor read/64, error -71 [ 527.789282][ T1611] usb usb5-port1: attempt power cycle [ 527.856479][T13285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.856973][T13285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.899050][T12075] usb 4-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 527.903845][T12075] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.903876][T12075] usb 4-1: Product: syz [ 527.903892][T12075] usb 4-1: Manufacturer: syz [ 527.903909][T12075] usb 4-1: SerialNumber: syz [ 527.964220][ T5696] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 528.148538][ T1611] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 528.169777][ T1611] usb 5-1: device descriptor read/8, error -71 [ 528.408785][ T1611] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 528.429188][ T1611] usb 5-1: device descriptor read/8, error -71 [ 528.538647][ T1611] usb usb5-port1: unable to enumerate USB device [ 528.844175][ T10] usb 4-1: USB disconnect, device number 87 [ 528.967478][T13296] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2646'. [ 529.092039][T13298] FAULT_INJECTION: forcing a failure. [ 529.092039][T13298] name failslab, interval 1, probability 0, space 0, times 0 [ 529.092082][T13298] CPU: 0 UID: 0 PID: 13298 Comm: syz.1.2647 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.092121][T13298] Tainted: [L]=SOFTLOCKUP [ 529.092132][T13298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 529.092150][T13298] Call Trace: [ 529.092161][T13298] [ 529.092174][T13298] dump_stack_lvl+0xe8/0x150 [ 529.092210][T13298] should_fail_ex+0x3eb/0x540 [ 529.092245][T13298] should_failslab+0xa8/0x100 [ 529.092275][T13298] __kmalloc_noprof+0xf9/0x710 [ 529.092303][T13298] ? tomoyo_encode+0x2ad/0x570 [ 529.092328][T13298] ? tomoyo_encode+0x2ad/0x570 [ 529.092363][T13298] tomoyo_encode+0x2ad/0x570 [ 529.092407][T13298] tomoyo_realpath_from_path+0x5fa/0x640 [ 529.092448][T13298] ? tomoyo_path_number_perm+0x219/0x5f0 [ 529.092478][T13298] tomoyo_path_number_perm+0x246/0x5f0 [ 529.092510][T13298] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 529.092588][T13298] ? __pfx_current_check_access_path+0x10/0x10 [ 529.092618][T13298] ? d_splice_alias_ops+0x11c/0x440 [ 529.092643][T13298] ? d_splice_alias+0x12/0x30 [ 529.092673][T13298] ? lookup_one_qstr_excl+0x1d4/0x360 [ 529.092708][T13298] tomoyo_path_mkdir+0xb0/0xf0 [ 529.092735][T13298] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 529.092767][T13298] ? __pfx_filename_create+0x10/0x10 [ 529.092802][T13298] security_path_mkdir+0x169/0x350 [ 529.092835][T13298] filename_mkdirat+0x200/0x510 [ 529.092873][T13298] ? __might_fault+0xaf/0x130 [ 529.092907][T13298] ? __pfx_filename_mkdirat+0x10/0x10 [ 529.092941][T13298] ? do_getname+0x151/0x250 [ 529.092972][T13298] __se_sys_mkdirat+0x35/0x150 [ 529.093002][T13298] do_syscall_64+0x166/0x520 [ 529.093028][T13298] ? trace_irq_disable+0x3b/0x140 [ 529.093052][T13298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.093082][T13298] ? clear_bhb_loop+0x70/0xc0 [ 529.093117][T13298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.093145][T13298] RIP: 0033:0x7f29a5b9e1d9 [ 529.093171][T13298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.093195][T13298] RSP: 002b:00007f29a6aba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 529.093224][T13298] RAX: ffffffffffffffda RBX: 00007f29a5e25fa0 RCX: 00007f29a5b9e1d9 [ 529.093245][T13298] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 529.093265][T13298] RBP: 00007f29a5c35888 R08: 0000000000000000 R09: 0000000000000000 [ 529.093284][T13298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.093300][T13298] R13: 00007f29a5e26038 R14: 00007f29a5e25fa0 R15: 00007ffc21adc9e8 [ 529.093344][T13298] [ 529.093575][T13298] ERROR: Out of memory at tomoyo_realpath_from_path. [ 529.225484][ T5696] usb 4-1: Service connection timeout for: 256 [ 529.225545][ T5696] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 529.230524][ T5696] ath9k_htc: Failed to initialize the device [ 529.232893][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 529.828557][ T10] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 529.858359][ T5716] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 529.980321][ T10] usb 4-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 529.981526][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.981572][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.985797][ T10] usb 4-1: config 0 descriptor?? [ 530.025436][ T5716] usb 2-1: device descriptor read/64, error -71 [ 530.258407][ T5716] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 530.372048][T13314] FAULT_INJECTION: forcing a failure. [ 530.372048][T13314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.372079][T13314] CPU: 1 UID: 0 PID: 13314 Comm: syz.4.2653 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.372107][T13314] Tainted: [L]=SOFTLOCKUP [ 530.372113][T13314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 530.372122][T13314] Call Trace: [ 530.372128][T13314] [ 530.372134][T13314] dump_stack_lvl+0xe8/0x150 [ 530.372154][T13314] should_fail_ex+0x3eb/0x540 [ 530.372191][T13314] _copy_to_iter+0x5a1/0x19c0 [ 530.372222][T13314] ? __pfx__copy_to_iter+0x10/0x10 [ 530.372245][T13314] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 530.372268][T13314] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 530.372284][T13314] __skb_datagram_iter+0xf8/0x980 [ 530.372298][T13314] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 530.372328][T13314] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 530.372356][T13314] skb_copy_datagram_iter+0xb5/0x240 [ 530.372377][T13314] netlink_recvmsg+0x2b9/0xa50 [ 530.372409][T13314] ? __pfx_netlink_recvmsg+0x10/0x10 [ 530.372422][T13314] ? lock_acquire+0x115/0x350 [ 530.372437][T13314] ? aa_sock_msg_perm+0x144/0x210 [ 530.372453][T13314] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 530.372478][T13314] ? security_socket_recvmsg+0x7e/0x2c0 [ 530.372500][T13314] ? __pfx_netlink_recvmsg+0x10/0x10 [ 530.372519][T13314] sock_recvmsg+0x196/0x1e0 [ 530.372541][T13314] ____sys_recvmsg+0x1e6/0x4a0 [ 530.372569][T13314] ? __pfx_____sys_recvmsg+0x10/0x10 [ 530.372592][T13314] ? import_iovec+0x73/0xa0 [ 530.372607][T13314] ___sys_recvmsg+0x213/0x5a0 [ 530.372639][T13314] ? __pfx____sys_recvmsg+0x10/0x10 [ 530.372663][T13314] ? lock_acquire+0x115/0x350 [ 530.372692][T13314] ? __fget_files+0x2a/0x420 [ 530.372713][T13314] ? __fget_files+0x3a2/0x420 [ 530.372725][T13314] ? __fget_files+0x2a/0x420 [ 530.372740][T13314] ? fdget+0x1ac/0x250 [ 530.372754][T13314] do_recvmmsg+0x31a/0x7f0 [ 530.372785][T13314] ? __pfx_do_recvmmsg+0x10/0x10 [ 530.372820][T13314] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 530.372843][T13314] ? fdget+0x1ac/0x250 [ 530.372869][T13314] __x64_sys_recvmmsg+0x198/0x250 [ 530.372903][T13314] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 530.372926][T13314] do_syscall_64+0x166/0x520 [ 530.372959][T13314] ? trace_irq_disable+0x3b/0x140 [ 530.372978][T13314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.372998][T13314] ? clear_bhb_loop+0x70/0xc0 [ 530.373019][T13314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.373041][T13314] RIP: 0033:0x7f25e979e1d9 [ 530.373054][T13314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.373067][T13314] RSP: 002b:00007f25ea639028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 530.373096][T13314] RAX: ffffffffffffffda RBX: 00007f25e9a25fa0 RCX: 00007f25e979e1d9 [ 530.373112][T13314] RDX: 0000000000000003 RSI: 00002000000006c0 RDI: 0000000000000003 [ 530.373126][T13314] RBP: 00007f25ea639090 R08: 0000000000000000 R09: 0000000000000000 [ 530.373138][T13314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.373150][T13314] R13: 00007f25e9a26038 R14: 00007f25e9a25fa0 R15: 00007ffc1dae3618 [ 530.373185][T13314] [ 530.411121][ T5716] usb 2-1: device descriptor read/64, error -71 [ 530.565403][ T5716] usb usb2-port1: attempt power cycle [ 530.618960][T13319] CUSE: unknown device info "" [ 530.619003][T13319] CUSE: unknown device info "" [ 530.619050][T13319] CUSE: zero length info key specified [ 530.633541][ T10] keytouch 0003:0926:3333.0027: fixing up Keytouch IEC report descriptor [ 530.753477][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0027/input/input48 [ 530.836923][T13322] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2655'. [ 530.853585][ T10] keytouch 0003:0926:3333.0027: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 530.947723][ T5696] usb 4-1: USB disconnect, device number 88 [ 530.970874][T13323] fido_id[13323]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 531.003309][T13325] jffs2: notice: (13325) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 531.025085][ T5716] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 531.053008][ T5716] usb 2-1: device descriptor read/8, error -71 [ 531.268395][ T5722] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 531.288923][ T5716] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 531.309078][ T5716] usb 2-1: device descriptor read/8, error -71 [ 531.419325][ T5722] usb 5-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 531.420017][ T5716] usb usb2-port1: unable to enumerate USB device [ 531.425067][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.425189][ T5722] usb 5-1: Product: syz [ 531.425211][ T5722] usb 5-1: Manufacturer: syz [ 531.425230][ T5722] usb 5-1: SerialNumber: syz [ 531.499131][ T5716] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 531.622804][T13335] FAULT_INJECTION: forcing a failure. [ 531.622804][T13335] name failslab, interval 1, probability 0, space 0, times 0 [ 531.622843][T13335] CPU: 1 UID: 0 PID: 13335 Comm: syz.3.2658 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.622875][T13335] Tainted: [L]=SOFTLOCKUP [ 531.622885][T13335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 531.622900][T13335] Call Trace: [ 531.622910][T13335] [ 531.622920][T13335] dump_stack_lvl+0xe8/0x150 [ 531.622952][T13335] should_fail_ex+0x3eb/0x540 [ 531.622983][T13335] should_failslab+0xa8/0x100 [ 531.623009][T13335] __kmalloc_noprof+0xf9/0x710 [ 531.623034][T13335] ? tomoyo_encode+0x2ad/0x570 [ 531.623055][T13335] ? tomoyo_encode+0x2ad/0x570 [ 531.623086][T13335] tomoyo_encode+0x2ad/0x570 [ 531.623116][T13335] tomoyo_realpath_from_path+0x5fa/0x640 [ 531.623151][T13335] ? tomoyo_path_number_perm+0x219/0x5f0 [ 531.623177][T13335] tomoyo_path_number_perm+0x246/0x5f0 [ 531.623205][T13335] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 531.623272][T13335] ? __pfx_current_check_access_path+0x10/0x10 [ 531.623310][T13335] ? d_splice_alias_ops+0x11c/0x440 [ 531.623330][T13335] ? d_splice_alias+0x12/0x30 [ 531.623354][T13335] ? lookup_one_qstr_excl+0x1d4/0x360 [ 531.623401][T13335] tomoyo_path_mkdir+0xb0/0xf0 [ 531.623424][T13335] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 531.623455][T13335] ? __pfx_filename_create+0x10/0x10 [ 531.623496][T13335] security_path_mkdir+0x169/0x350 [ 531.623522][T13335] filename_mkdirat+0x200/0x510 [ 531.623542][T13335] ? __might_fault+0xaf/0x130 [ 531.623569][T13335] ? __pfx_filename_mkdirat+0x10/0x10 [ 531.623595][T13335] ? do_getname+0x151/0x250 [ 531.623620][T13335] __se_sys_mkdirat+0x35/0x150 [ 531.623651][T13335] do_syscall_64+0x166/0x520 [ 531.623691][T13335] ? trace_irq_disable+0x3b/0x140 [ 531.623713][T13335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.623739][T13335] ? clear_bhb_loop+0x70/0xc0 [ 531.623776][T13335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.623798][T13335] RIP: 0033:0x7f85beb9e1d9 [ 531.623836][T13335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.623857][T13335] RSP: 002b:00007f85bfa40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 531.623882][T13335] RAX: ffffffffffffffda RBX: 00007f85bee25fa0 RCX: 00007f85beb9e1d9 [ 531.623900][T13335] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 531.623917][T13335] RBP: 00007f85bec35888 R08: 0000000000000000 R09: 0000000000000000 [ 531.623932][T13335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.623946][T13335] R13: 00007f85bee26038 R14: 00007f85bee25fa0 R15: 00007fffde88f478 [ 531.623984][T13335] [ 531.624020][T13335] ERROR: Out of memory at tomoyo_realpath_from_path. [ 532.104068][T13338] tipc: Started in network mode [ 532.104099][T13338] tipc: Node identity ce9cb152d0eb, cluster identity 4711 [ 532.104348][T13338] tipc: Enabled bearer , priority 0 [ 532.223897][T13338] syzkaller0: entered promiscuous mode [ 532.223929][T13338] syzkaller0: entered allmulticast mode [ 532.224746][T13338] tipc: Resetting bearer [ 532.361217][ T27] usb 5-1: USB disconnect, device number 28 [ 532.518406][ T5696] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 532.659305][ T5696] usb 4-1: device descriptor read/64, error -71 [ 532.686280][T13357] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2664'. [ 532.808403][ T5716] usb 5-1: Service connection timeout for: 256 [ 532.808429][ T5716] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 532.808996][ T5716] ath9k_htc: Failed to initialize the device [ 532.809368][ T27] usb 5-1: ath9k_htc: USB layer deinitialized [ 532.908393][ T5696] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 532.994752][T13370] FAULT_INJECTION: forcing a failure. [ 532.994752][T13370] name failslab, interval 1, probability 0, space 0, times 0 [ 532.994779][T13370] CPU: 0 UID: 0 PID: 13370 Comm: syz.5.2668 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.994802][T13370] Tainted: [L]=SOFTLOCKUP [ 532.994808][T13370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 532.994818][T13370] Call Trace: [ 532.994826][T13370] [ 532.994833][T13370] dump_stack_lvl+0xe8/0x150 [ 532.994856][T13370] should_fail_ex+0x3eb/0x540 [ 532.994911][T13370] should_failslab+0xa8/0x100 [ 532.994935][T13370] __kmalloc_noprof+0xf9/0x710 [ 532.994958][T13370] ? tomoyo_encode+0x2ad/0x570 [ 532.994978][T13370] ? tomoyo_encode+0x2ad/0x570 [ 532.995004][T13370] tomoyo_encode+0x2ad/0x570 [ 532.995035][T13370] tomoyo_realpath_from_path+0x5fa/0x640 [ 532.995058][T13370] ? tomoyo_path_number_perm+0x219/0x5f0 [ 532.995074][T13370] tomoyo_path_number_perm+0x246/0x5f0 [ 532.995092][T13370] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 532.995158][T13370] ? __pfx_current_check_access_path+0x10/0x10 [ 532.995183][T13370] ? d_splice_alias_ops+0x11c/0x440 [ 532.995203][T13370] ? d_splice_alias+0x12/0x30 [ 532.995225][T13370] ? lookup_one_qstr_excl+0x1d4/0x360 [ 532.995255][T13370] tomoyo_path_mkdir+0xb0/0xf0 [ 532.995270][T13370] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 532.995287][T13370] ? __pfx_filename_create+0x10/0x10 [ 532.995307][T13370] security_path_mkdir+0x169/0x350 [ 532.995324][T13370] filename_mkdirat+0x200/0x510 [ 532.995338][T13370] ? __might_fault+0xaf/0x130 [ 532.995356][T13370] ? __pfx_filename_mkdirat+0x10/0x10 [ 532.995374][T13370] ? do_getname+0x151/0x250 [ 532.995390][T13370] __se_sys_mkdirat+0x35/0x150 [ 532.995407][T13370] do_syscall_64+0x166/0x520 [ 532.995421][T13370] ? trace_irq_disable+0x3b/0x140 [ 532.995435][T13370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.995450][T13370] ? clear_bhb_loop+0x70/0xc0 [ 532.995467][T13370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.995482][T13370] RIP: 0033:0x7ff20959e1d9 [ 532.995496][T13370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.995510][T13370] RSP: 002b:00007ff20a400028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 532.995528][T13370] RAX: ffffffffffffffda RBX: 00007ff209825fa0 RCX: 00007ff20959e1d9 [ 532.995539][T13370] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 532.995550][T13370] RBP: 00007ff209635888 R08: 0000000000000000 R09: 0000000000000000 [ 532.995560][T13370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.995572][T13370] R13: 00007ff209826038 R14: 00007ff209825fa0 R15: 00007ffca895c8e8 [ 532.995596][T13370] [ 532.995649][T13370] ERROR: Out of memory at tomoyo_realpath_from_path. [ 533.058985][ T5696] usb 4-1: device descriptor read/64, error -71 [ 533.199329][ T5722] tipc: Node number set to 511160658 [ 533.200972][ T5696] usb usb4-port1: attempt power cycle [ 533.329720][ T27] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 533.479990][ T27] usb 5-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 533.481079][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.481131][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.484800][ T27] usb 5-1: config 0 descriptor?? [ 533.608647][ T5696] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 533.630276][ T5696] usb 4-1: device descriptor read/8, error -71 [ 533.878693][ T5696] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 533.900247][ T5696] usb 4-1: device descriptor read/8, error -71 [ 533.900847][ T27] keytouch 0003:0926:3333.0028: fixing up Keytouch IEC report descriptor [ 533.906823][ T27] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0028/input/input49 [ 534.011061][ T5696] usb usb4-port1: unable to enumerate USB device [ 534.042651][ T27] keytouch 0003:0926:3333.0028: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 534.263018][T13391] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2674'. [ 534.311150][ T5716] usb 5-1: USB disconnect, device number 29 [ 534.348662][ T1611] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 534.353524][T13393] jffs2: notice: (13393) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 534.390032][T13393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.390663][T13393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.478596][ T1611] usb 2-1: device descriptor read/64, error -71 [ 534.718453][ T1611] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 534.848438][ T1611] usb 2-1: device descriptor read/64, error -71 [ 534.959768][ T1611] usb usb2-port1: attempt power cycle [ 535.031440][T13339] tipc: Resetting bearer [ 535.062021][T13401] nbd: must specify at least one socket [ 535.074725][T13401] FAULT_INJECTION: forcing a failure. [ 535.074725][T13401] name failslab, interval 1, probability 0, space 0, times 0 [ 535.074758][T13401] CPU: 0 UID: 0 PID: 13401 Comm: syz.5.2677 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.074805][T13401] Tainted: [L]=SOFTLOCKUP [ 535.074813][T13401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 535.074828][T13401] Call Trace: [ 535.074837][T13401] [ 535.074848][T13401] dump_stack_lvl+0xe8/0x150 [ 535.074890][T13401] should_fail_ex+0x3eb/0x540 [ 535.074919][T13401] should_failslab+0xa8/0x100 [ 535.074946][T13401] __kmalloc_noprof+0xf9/0x710 [ 535.074971][T13401] ? tomoyo_encode+0x2ad/0x570 [ 535.074993][T13401] ? tomoyo_encode+0x2ad/0x570 [ 535.075023][T13401] tomoyo_encode+0x2ad/0x570 [ 535.075064][T13401] tomoyo_realpath_from_path+0x5fa/0x640 [ 535.075097][T13401] ? tomoyo_path_number_perm+0x219/0x5f0 [ 535.075122][T13401] tomoyo_path_number_perm+0x246/0x5f0 [ 535.075149][T13401] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 535.075234][T13401] ? __pfx_current_check_access_path+0x10/0x10 [ 535.075260][T13401] ? d_splice_alias_ops+0x11c/0x440 [ 535.075282][T13401] ? d_splice_alias+0x12/0x30 [ 535.075309][T13401] ? lookup_one_qstr_excl+0x1d4/0x360 [ 535.075339][T13401] tomoyo_path_mkdir+0xb0/0xf0 [ 535.075363][T13401] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 535.075390][T13401] ? __pfx_filename_create+0x10/0x10 [ 535.075421][T13401] security_path_mkdir+0x169/0x350 [ 535.075453][T13401] filename_mkdirat+0x200/0x510 [ 535.075477][T13401] ? __might_fault+0xaf/0x130 [ 535.075505][T13401] ? __pfx_filename_mkdirat+0x10/0x10 [ 535.075533][T13401] ? do_getname+0x151/0x250 [ 535.075576][T13401] __se_sys_mkdirat+0x35/0x150 [ 535.075605][T13401] do_syscall_64+0x166/0x520 [ 535.075628][T13401] ? trace_irq_disable+0x3b/0x140 [ 535.075649][T13401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.075674][T13401] ? clear_bhb_loop+0x70/0xc0 [ 535.075700][T13401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.075723][T13401] RIP: 0033:0x7ff20959e1d9 [ 535.075744][T13401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.075765][T13401] RSP: 002b:00007ff20a400028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 535.075787][T13401] RAX: ffffffffffffffda RBX: 00007ff209825fa0 RCX: 00007ff20959e1d9 [ 535.075804][T13401] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 535.075818][T13401] RBP: 00007ff209635888 R08: 0000000000000000 R09: 0000000000000000 [ 535.075831][T13401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.075844][T13401] R13: 00007ff209826038 R14: 00007ff209825fa0 R15: 00007ffca895c8e8 [ 535.075885][T13401] [ 535.076024][T13401] ERROR: Out of memory at tomoyo_realpath_from_path. [ 535.118342][ T5716] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 535.305165][ T5716] usb 5-1: Using ep0 maxpacket: 8 [ 535.322244][ T1611] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 535.330740][ T5716] usb 5-1: New USB device found: idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 535.397731][ T1611] usb 2-1: device descriptor read/8, error -71 [ 535.408413][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.408440][ T5716] usb 5-1: Product: syz [ 535.408455][ T5716] usb 5-1: Manufacturer: syz [ 535.408469][ T5716] usb 5-1: SerialNumber: syz [ 535.412146][ T5716] usb 5-1: config 0 descriptor?? [ 535.437288][ T5716] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 535.628405][ T1611] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 535.658006][ T1611] usb 2-1: device descriptor read/8, error -71 [ 535.760612][ T1611] usb usb2-port1: unable to enumerate USB device [ 537.228869][T13424] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2683'. [ 537.759649][T13339] tipc: Disabling bearer [ 537.837223][T13431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.850043][T13431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.890845][T13433] jffs2: notice: (13433) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 538.077751][T13439] nbd: must specify at least one socket [ 538.093481][T13439] FAULT_INJECTION: forcing a failure. [ 538.093481][T13439] name failslab, interval 1, probability 0, space 0, times 0 [ 538.093537][T13439] CPU: 1 UID: 0 PID: 13439 Comm: syz.1.2687 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.093570][T13439] Tainted: [L]=SOFTLOCKUP [ 538.093585][T13439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 538.093595][T13439] Call Trace: [ 538.093602][T13439] [ 538.093610][T13439] dump_stack_lvl+0xe8/0x150 [ 538.093634][T13439] should_fail_ex+0x3eb/0x540 [ 538.093655][T13439] should_failslab+0xa8/0x100 [ 538.093674][T13439] __kmalloc_noprof+0xf9/0x710 [ 538.093692][T13439] ? tomoyo_encode+0x2ad/0x570 [ 538.093707][T13439] ? tomoyo_encode+0x2ad/0x570 [ 538.093728][T13439] tomoyo_encode+0x2ad/0x570 [ 538.093748][T13439] tomoyo_realpath_from_path+0x5fa/0x640 [ 538.093773][T13439] ? tomoyo_path_number_perm+0x219/0x5f0 [ 538.093790][T13439] tomoyo_path_number_perm+0x246/0x5f0 [ 538.093809][T13439] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 538.093856][T13439] ? __pfx_current_check_access_path+0x10/0x10 [ 538.093874][T13439] ? d_splice_alias_ops+0x11c/0x440 [ 538.093890][T13439] ? d_splice_alias+0x12/0x30 [ 538.093907][T13439] ? lookup_one_qstr_excl+0x1d4/0x360 [ 538.093928][T13439] tomoyo_path_mkdir+0xb0/0xf0 [ 538.093944][T13439] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 538.093963][T13439] ? __pfx_filename_create+0x10/0x10 [ 538.093987][T13439] security_path_mkdir+0x169/0x350 [ 538.094006][T13439] filename_mkdirat+0x200/0x510 [ 538.094021][T13439] ? __might_fault+0xaf/0x130 [ 538.094045][T13439] ? __pfx_filename_mkdirat+0x10/0x10 [ 538.094065][T13439] ? do_getname+0x151/0x250 [ 538.094083][T13439] __se_sys_mkdirat+0x35/0x150 [ 538.094102][T13439] do_syscall_64+0x166/0x520 [ 538.094118][T13439] ? trace_irq_disable+0x3b/0x140 [ 538.094132][T13439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.094150][T13439] ? clear_bhb_loop+0x70/0xc0 [ 538.094169][T13439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.094186][T13439] RIP: 0033:0x7f29a5b9e1d9 [ 538.094202][T13439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.094217][T13439] RSP: 002b:00007f29a6aba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 538.094235][T13439] RAX: ffffffffffffffda RBX: 00007f29a5e25fa0 RCX: 00007f29a5b9e1d9 [ 538.094247][T13439] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 538.094259][T13439] RBP: 00007f29a5c35888 R08: 0000000000000000 R09: 0000000000000000 [ 538.094269][T13439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.094280][T13439] R13: 00007f29a5e26038 R14: 00007f29a5e25fa0 R15: 00007ffc21adc9e8 [ 538.094306][T13439] [ 538.094323][T13439] ERROR: Out of memory at tomoyo_realpath_from_path. [ 538.635991][T13451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.638872][T13451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.650170][T13452] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2692'. [ 538.676236][T13451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.677353][T13451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.714493][ T27] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 538.739778][T13456] FAULT_INJECTION: forcing a failure. [ 538.739778][T13456] name failslab, interval 1, probability 0, space 0, times 0 [ 538.739810][T13456] CPU: 1 UID: 0 PID: 13456 Comm: syz.1.2693 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.739838][T13456] Tainted: [L]=SOFTLOCKUP [ 538.739846][T13456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 538.739859][T13456] Call Trace: [ 538.739868][T13456] [ 538.739878][T13456] dump_stack_lvl+0xe8/0x150 [ 538.739905][T13456] should_fail_ex+0x3eb/0x540 [ 538.739931][T13456] should_failslab+0xa8/0x100 [ 538.739972][T13456] __kmalloc_noprof+0xf9/0x710 [ 538.739993][T13456] ? __kasan_kmalloc+0x93/0xb0 [ 538.740015][T13456] ? nla_strdup+0x9d/0x140 [ 538.740033][T13456] ? nla_strdup+0x9d/0x140 [ 538.740053][T13456] ? __kmalloc_cache_noprof+0x148/0x600 [ 538.740080][T13456] nla_strdup+0x9d/0x140 [ 538.740103][T13456] nf_tables_newtable+0x49a/0x1990 [ 538.740148][T13456] nfnetlink_rcv+0x1288/0x28c0 [ 538.740207][T13456] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 538.740276][T13456] ? skb_clone+0x246/0x3a0 [ 538.740312][T13456] ? netlink_deliver_tap+0x2e/0x1b0 [ 538.740334][T13456] ? netlink_deliver_tap+0x2e/0x1b0 [ 538.740362][T13456] netlink_unicast+0x7bd/0x940 [ 538.740396][T13456] netlink_sendmsg+0x7c3/0xae0 [ 538.740425][T13456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.740455][T13456] ? apparmor_socket_sendmsg+0x18b/0x360 [ 538.740482][T13456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.740510][T13456] sock_sendmsg_nosec+0x14e/0x190 [ 538.740537][T13456] ____sys_sendmsg+0x54e/0x850 [ 538.740569][T13456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 538.740602][T13456] ? import_iovec+0x73/0xa0 [ 538.740628][T13456] ___sys_sendmsg+0x2a5/0x360 [ 538.740649][T13456] ? __lock_acquire+0x747/0x2de0 [ 538.740676][T13456] ? __pfx____sys_sendmsg+0x10/0x10 [ 538.740736][T13456] ? __fget_files+0x3a2/0x420 [ 538.740756][T13456] ? __fget_files+0x2a/0x420 [ 538.740798][T13456] __x64_sys_sendmsg+0x1b1/0x290 [ 538.740822][T13456] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 538.740864][T13456] do_syscall_64+0x166/0x520 [ 538.740884][T13456] ? trace_irq_disable+0x3b/0x140 [ 538.740902][T13456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.740924][T13456] ? clear_bhb_loop+0x70/0xc0 [ 538.740947][T13456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.740969][T13456] RIP: 0033:0x7f29a5b9e1d9 [ 538.741006][T13456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.741025][T13456] RSP: 002b:00007f29a6aba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.741048][T13456] RAX: ffffffffffffffda RBX: 00007f29a5e25fa0 RCX: 00007f29a5b9e1d9 [ 538.741065][T13456] RDX: 0000000020008844 RSI: 00002000000000c0 RDI: 0000000000000003 [ 538.741081][T13456] RBP: 00007f29a6aba090 R08: 0000000000000000 R09: 0000000000000000 [ 538.741095][T13456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.741108][T13456] R13: 00007f29a5e26038 R14: 00007f29a5e25fa0 R15: 00007ffc21adc9e8 [ 538.741144][T13456] [ 538.878885][ T975] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 538.975484][ T27] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 539.082656][ T975] usb 4-1: Using ep0 maxpacket: 16 [ 539.089639][ T1611] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 539.089918][ T975] usb 4-1: unable to get BOS descriptor or descriptor too short [ 539.089970][ T975] usb 4-1: New USB device found: idVendor=2a39, idProduct=3fb0, bcdDevice=0.40 [ 539.095348][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.095372][ T975] usb 4-1: Product: syz [ 539.095386][ T975] usb 4-1: Manufacturer: syz [ 539.095400][ T975] usb 4-1: SerialNumber: syz [ 539.106078][ T1611] usb 5-1: USB disconnect, device number 30 [ 539.205613][T13463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2694'. [ 539.349265][ T1611] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 539.349472][ T975] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 539.480036][ T27] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 539.498350][ T5722] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 539.649114][ T5722] usb 2-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 539.650693][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.650775][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.654735][ T5722] usb 2-1: config 0 descriptor?? [ 539.727374][ T975] usb 4-1: USB disconnect, device number 93 [ 539.774398][ T7710] udevd[7710]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 539.859781][ T5716] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 540.034443][ T33] audit: type=1326 audit(1791518548.377:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13464 comm="syz.4.2695" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e979e1d9 code=0x7fc00000 [ 540.034502][ T33] audit: type=1326 audit(1791518548.377:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13464 comm="syz.4.2695" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f25e979e1d9 code=0x7fc00000 [ 540.034547][ T33] audit: type=1326 audit(1791518548.377:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13464 comm="syz.4.2695" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e979e1d9 code=0x7fc00000 [ 540.034591][ T33] audit: type=1326 audit(1791518548.377:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13464 comm="syz.4.2695" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e979e1d9 code=0x7fc00000 [ 540.034637][ T33] audit: type=1326 audit(1791518548.377:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13464 comm="syz.4.2695" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e979e1d9 code=0x7fc00000 [ 540.034681][ T33] audit: type=1326 audit(1791518548.377:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13464 comm="syz.4.2695" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e979e1d9 code=0x7fc00000 [ 540.034730][ T33] audit: type=1326 audit(1791518548.377:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13464 comm="syz.4.2695" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e979e1d9 code=0x7fc00000 [ 540.034779][ T33] audit: type=1326 audit(1791518548.377:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13464 comm="syz.4.2695" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e979e1d9 code=0x7fc00000 [ 540.246256][ T5722] keytouch 0003:0926:3333.0029: fixing up Keytouch IEC report descriptor [ 540.261301][ T5722] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0029/input/input50 [ 540.345403][T13472] jffs2: notice: (13472) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 540.372432][ T5722] keytouch 0003:0926:3333.0029: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 540.531711][T12075] usb 2-1: USB disconnect, device number 99 [ 540.656009][ T1751] block nbd0: Possible stuck request ffff888028985080: control (read@0,1024B). Runtime 420 seconds [ 540.656055][ T1751] block nbd0: Possible stuck request ffff888028985240: control (read@1024,1024B). Runtime 420 seconds [ 540.981036][T12075] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 541.034685][T13481] nbd: must specify at least one socket [ 541.046030][T13481] FAULT_INJECTION: forcing a failure. [ 541.046030][T13481] name failslab, interval 1, probability 0, space 0, times 0 [ 541.046064][T13481] CPU: 1 UID: 0 PID: 13481 Comm: syz.4.2699 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.046095][T13481] Tainted: [L]=SOFTLOCKUP [ 541.046103][T13481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 541.046126][T13481] Call Trace: [ 541.046135][T13481] [ 541.046146][T13481] dump_stack_lvl+0xe8/0x150 [ 541.046177][T13481] should_fail_ex+0x3eb/0x540 [ 541.046207][T13481] should_failslab+0xa8/0x100 [ 541.046232][T13481] __kmalloc_noprof+0xf9/0x710 [ 541.046256][T13481] ? tomoyo_encode+0x2ad/0x570 [ 541.046277][T13481] ? tomoyo_encode+0x2ad/0x570 [ 541.046306][T13481] tomoyo_encode+0x2ad/0x570 [ 541.046364][T13481] tomoyo_realpath_from_path+0x5fa/0x640 [ 541.046455][T13481] ? tomoyo_path_number_perm+0x219/0x5f0 [ 541.046525][T13481] tomoyo_path_number_perm+0x246/0x5f0 [ 541.046604][T13481] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 541.046762][T13481] ? __pfx_current_check_access_path+0x10/0x10 [ 541.046832][T13481] ? d_splice_alias_ops+0x11c/0x440 [ 541.046881][T13481] ? d_splice_alias+0x12/0x30 [ 541.046944][T13481] ? lookup_one_qstr_excl+0x1d4/0x360 [ 541.047018][T13481] tomoyo_path_mkdir+0xb0/0xf0 [ 541.047073][T13481] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 541.047138][T13481] ? __pfx_filename_create+0x10/0x10 [ 541.047220][T13481] security_path_mkdir+0x169/0x350 [ 541.047284][T13481] filename_mkdirat+0x200/0x510 [ 541.047343][T13481] ? __might_fault+0xaf/0x130 [ 541.047408][T13481] ? __pfx_filename_mkdirat+0x10/0x10 [ 541.047479][T13481] ? do_getname+0x151/0x250 [ 541.047543][T13481] __se_sys_mkdirat+0x35/0x150 [ 541.047607][T13481] do_syscall_64+0x166/0x520 [ 541.047656][T13481] ? trace_irq_disable+0x3b/0x140 [ 541.047710][T13481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.047774][T13481] ? clear_bhb_loop+0x70/0xc0 [ 541.047845][T13481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.047907][T13481] RIP: 0033:0x7f25e979e1d9 [ 541.048014][T13481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.048076][T13481] RSP: 002b:00007f25ea639028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 541.048134][T13481] RAX: ffffffffffffffda RBX: 00007f25e9a25fa0 RCX: 00007f25e979e1d9 [ 541.048178][T13481] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 541.048223][T13481] RBP: 00007f25e9835888 R08: 0000000000000000 R09: 0000000000000000 [ 541.048259][T13481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.048310][T13481] R13: 00007f25e9a26038 R14: 00007f25e9a25fa0 R15: 00007ffc1dae3618 [ 541.048386][T13481] [ 541.053865][T13481] ERROR: Out of memory at tomoyo_realpath_from_path. [ 541.093326][ T5722] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 541.436142][T13488] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2701'. [ 541.637872][T13457] ceph: No mds server is up or the cluster is laggy [ 541.640750][T13451] ceph: No mds server is up or the cluster is laggy [ 541.776593][T13501] 0x000000000000-0x000000010000 : "" [ 541.860330][T13501] ftl_cs: FTL header not found. [ 541.897556][T13501] FAULT_INJECTION: forcing a failure. [ 541.897556][T13501] name failslab, interval 1, probability 0, space 0, times 0 [ 541.897596][T13501] CPU: 0 UID: 0 PID: 13501 Comm: syz.1.2707 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.897628][T13501] Tainted: [L]=SOFTLOCKUP [ 541.897638][T13501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 541.897652][T13501] Call Trace: [ 541.897662][T13501] [ 541.897673][T13501] dump_stack_lvl+0xe8/0x150 [ 541.897706][T13501] should_fail_ex+0x3eb/0x540 [ 541.897738][T13501] should_failslab+0xa8/0x100 [ 541.897761][T13501] ? __kernfs_new_node+0xe6/0x980 [ 541.897785][T13501] kmem_cache_alloc_noprof+0x9c/0x600 [ 541.897813][T13501] ? __kernfs_new_node+0xe6/0x980 [ 541.897845][T13501] __kernfs_new_node+0xe6/0x980 [ 541.897879][T13501] ? __pfx___kernfs_new_node+0x10/0x10 [ 541.897902][T13501] ? lock_acquire+0x115/0x350 [ 541.897925][T13501] ? kernfs_root+0x1c/0x230 [ 541.897954][T13501] ? kernfs_root+0x1c/0x230 [ 541.897975][T13501] ? kernfs_root+0x1c/0x230 [ 541.897996][T13501] ? kernfs_root+0x1c/0x230 [ 541.898024][T13501] kernfs_new_node+0xeb/0x140 [ 541.898052][T13501] __kernfs_create_file+0x4b/0x2e0 [ 541.898077][T13501] sysfs_add_file_mode_ns+0x237/0x300 [ 541.898111][T13501] sysfs_merge_group+0x183/0x320 [ 541.898137][T13501] ? __pfx_sysfs_merge_group+0x10/0x10 [ 541.898158][T13501] ? device_add_attrs+0x5c3/0x600 [ 541.898206][T13501] ? __pfx_device_add_attrs+0x10/0x10 [ 541.898230][T13501] ? kobject_put+0x50f/0x550 [ 541.898259][T13501] dpm_sysfs_add+0xd2/0x270 [ 541.898286][T13501] device_add+0x4ca/0xb80 [ 541.898312][T13501] __add_disk+0x517/0xdb0 [ 541.898346][T13501] add_disk_fwnode+0x100/0x3a0 [ 541.898374][T13501] add_mtd_blktrans_dev+0xe79/0x14b0 [ 541.898413][T13501] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 541.898461][T13501] ? __kmalloc_cache_noprof+0x31c/0x600 [ 541.898487][T13501] ? __kmalloc_cache_noprof+0x148/0x600 [ 541.898509][T13501] ? mtdblock_add_mtd+0x57/0x240 [ 541.898548][T13501] mtdblock_add_mtd+0x18a/0x240 [ 541.898575][T13501] blktrans_notify_add+0x9f/0xf0 [ 541.898600][T13501] add_mtd_device+0x117f/0x17b0 [ 541.898639][T13501] ? __pfx_add_mtd_device+0x10/0x10 [ 541.898680][T13501] ? __pfx_mtd_nvmem_reg_read+0x10/0x10 [ 541.898721][T13501] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 541.898762][T13501] mtd_add_partition+0x388/0x590 [ 541.898793][T13501] ? __pfx_mtd_add_partition+0x10/0x10 [ 541.898824][T13501] ? __might_fault+0xaf/0x130 [ 541.898854][T13501] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 541.898888][T13501] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 541.898912][T13501] ? irqentry_exit+0x218/0x920 [ 541.898949][T13501] ? mtdchar_ioctl+0x14ea/0x1bc0 [ 541.898976][T13501] mtdchar_ioctl+0x14f7/0x1bc0 [ 541.899003][T13501] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 541.899034][T13501] ? __lock_acquire+0x747/0x2de0 [ 541.899070][T13501] ? tomoyo_path_number_perm+0x219/0x5f0 [ 541.899101][T13501] ? __mutex_trylock_common+0x15f/0x270 [ 541.899126][T13501] ? __pfx___mutex_trylock_common+0x10/0x10 [ 541.899152][T13501] ? rcu_is_watching+0x16/0xb0 [ 541.899185][T13501] ? trace_contention_end+0x3d/0x140 [ 541.899215][T13501] ? __mutex_lock+0x305/0x15a0 [ 541.899255][T13501] ? do_futex+0x3e7/0x4e0 [ 541.899289][T13501] ? mtdchar_unlocked_ioctl+0xa1/0xd0 [ 541.899314][T13501] ? __pfx___mutex_lock+0x10/0x10 [ 541.899345][T13501] ? __fget_files+0x2a/0x420 [ 541.899367][T13501] ? __fget_files+0x2a/0x420 [ 541.899392][T13501] mtdchar_unlocked_ioctl+0xae/0xd0 [ 541.899415][T13501] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 541.899439][T13501] __se_sys_ioctl+0xfc/0x170 [ 541.899462][T13501] do_syscall_64+0x166/0x520 [ 541.899482][T13501] ? trace_irq_disable+0x3b/0x140 [ 541.899503][T13501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.899528][T13501] ? clear_bhb_loop+0x70/0xc0 [ 541.899553][T13501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.899577][T13501] RIP: 0033:0x7f29a5b9e1d9 [ 541.899599][T13501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.899620][T13501] RSP: 002b:00007f29a6aba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 541.899645][T13501] RAX: ffffffffffffffda RBX: 00007f29a5e25fa0 RCX: 00007f29a5b9e1d9 [ 541.899663][T13501] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 000000000000000a [ 541.899679][T13501] RBP: 00007f29a5c35888 R08: 0000000000000000 R09: 0000000000000000 [ 541.899694][T13501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.899708][T13501] R13: 00007f29a5e26038 R14: 00007f29a5e25fa0 R15: 00007ffc21adc9e8 [ 541.899744][T13501] [ 541.973721][T13510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.044698][T13510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.645504][T13516] jffs2: notice: (13516) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 542.950978][T13535] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2711'. [ 543.154158][T13539] FAULT_INJECTION: forcing a failure. [ 543.154158][T13539] name failslab, interval 1, probability 0, space 0, times 0 [ 543.154204][T13539] CPU: 1 UID: 0 PID: 13539 Comm: syz.5.2712 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.154234][T13539] Tainted: [L]=SOFTLOCKUP [ 543.154242][T13539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 543.154256][T13539] Call Trace: [ 543.154265][T13539] [ 543.154274][T13539] dump_stack_lvl+0xe8/0x150 [ 543.154305][T13539] should_fail_ex+0x3eb/0x540 [ 543.154334][T13539] should_failslab+0xa8/0x100 [ 543.154359][T13539] __kmalloc_noprof+0xf9/0x710 [ 543.154382][T13539] ? tomoyo_encode+0x2ad/0x570 [ 543.154403][T13539] ? tomoyo_encode+0x2ad/0x570 [ 543.154432][T13539] tomoyo_encode+0x2ad/0x570 [ 543.154460][T13539] tomoyo_realpath_from_path+0x5fa/0x640 [ 543.154494][T13539] ? tomoyo_path_number_perm+0x219/0x5f0 [ 543.154517][T13539] tomoyo_path_number_perm+0x246/0x5f0 [ 543.154543][T13539] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 543.154605][T13539] ? __pfx_current_check_access_path+0x10/0x10 [ 543.154629][T13539] ? d_splice_alias_ops+0x11c/0x440 [ 543.154650][T13539] ? d_splice_alias+0x12/0x30 [ 543.154674][T13539] ? lookup_one_qstr_excl+0x1d4/0x360 [ 543.154702][T13539] tomoyo_path_mkdir+0xb0/0xf0 [ 543.154724][T13539] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 543.154750][T13539] ? __pfx_filename_create+0x10/0x10 [ 543.154779][T13539] security_path_mkdir+0x169/0x350 [ 543.154825][T13539] filename_mkdirat+0x200/0x510 [ 543.154846][T13539] ? __might_fault+0xaf/0x130 [ 543.154873][T13539] ? __pfx_filename_mkdirat+0x10/0x10 [ 543.154899][T13539] ? do_getname+0x151/0x250 [ 543.154924][T13539] __se_sys_mkdirat+0x35/0x150 [ 543.154949][T13539] do_syscall_64+0x166/0x520 [ 543.154971][T13539] ? trace_irq_disable+0x3b/0x140 [ 543.154991][T13539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.155015][T13539] ? clear_bhb_loop+0x70/0xc0 [ 543.155040][T13539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.155062][T13539] RIP: 0033:0x7ff20959e1d9 [ 543.155083][T13539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.155109][T13539] RSP: 002b:00007ff20a400028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 543.155135][T13539] RAX: ffffffffffffffda RBX: 00007ff209825fa0 RCX: 00007ff20959e1d9 [ 543.155152][T13539] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 543.155168][T13539] RBP: 00007ff209635888 R08: 0000000000000000 R09: 0000000000000000 [ 543.155183][T13539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.155196][T13539] R13: 00007ff209826038 R14: 00007ff209825fa0 R15: 00007ffca895c8e8 [ 543.155232][T13539] [ 543.155255][T13539] ERROR: Out of memory at tomoyo_realpath_from_path. [ 543.682447][T13544] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2713'. [ 543.683597][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2713'. [ 544.156349][T13572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.156851][T13572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.198769][ T5716] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 544.318410][ T27] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 544.332493][ T5716] usb 5-1: device descriptor read/64, error -71 [ 544.479136][ T27] usb 2-1: New USB device found: idVendor=04e8, idProduct=6889, bcdDevice=0.00 [ 544.500896][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.500924][ T27] usb 2-1: Product: syz [ 544.500939][ T27] usb 2-1: Manufacturer: syz [ 544.500955][ T27] usb 2-1: SerialNumber: syz [ 544.573959][ T5716] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 544.643957][T13585] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2720'. [ 544.650957][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2720'. [ 544.698737][ T5716] usb 5-1: device descriptor read/64, error -71 [ 544.774946][ T27] kalmia 2-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -71 [ 544.775215][ T27] kalmia 2-1:1.0: probe with driver kalmia failed with error -71 [ 544.813069][ T5716] usb usb5-port1: attempt power cycle [ 544.831280][ T27] usb 2-1: USB disconnect, device number 100 [ 545.003519][T13592] jffs2: notice: (13592) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 545.036777][T13592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.037209][T13592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.148412][ T5716] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 545.173501][ T5716] usb 5-1: device descriptor read/8, error -71 [ 545.178660][ T975] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 545.331457][ T975] usb 4-1: New USB device found: idVendor=13e5, idProduct=0001, bcdDevice=0.40 [ 545.334545][ T975] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.334571][ T975] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 545.336787][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.336812][ T975] usb 4-1: Product: syz [ 545.336827][ T975] usb 4-1: Manufacturer: syz [ 545.336844][ T975] usb 4-1: SerialNumber: syz [ 545.410808][T13606] FAULT_INJECTION: forcing a failure. [ 545.410808][T13606] name failslab, interval 1, probability 0, space 0, times 0 [ 545.410845][T13606] CPU: 0 UID: 0 PID: 13606 Comm: syz.1.2723 Tainted: G L syzkaller #0 PREEMPT(full) [ 545.410877][T13606] Tainted: [L]=SOFTLOCKUP [ 545.410886][T13606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 545.410900][T13606] Call Trace: [ 545.410910][T13606] [ 545.410921][T13606] dump_stack_lvl+0xe8/0x150 [ 545.410953][T13606] should_fail_ex+0x3eb/0x540 [ 545.410980][T13606] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 545.411005][T13606] should_failslab+0xa8/0x100 [ 545.411031][T13606] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 545.411052][T13606] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 545.411089][T13606] ? shmem_alloc_inode+0x28/0x40 [ 545.411108][T13606] ? shmem_alloc_inode+0x28/0x40 [ 545.411130][T13606] ? do_raw_spin_lock+0x12b/0x2f0 [ 545.411155][T13606] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 545.411175][T13606] shmem_alloc_inode+0x28/0x40 [ 545.411196][T13606] alloc_inode+0x6a/0x1b0 [ 545.411242][T13606] new_inode+0x1f/0x170 [ 545.411268][T13606] shmem_get_inode+0x3a4/0x1030 [ 545.411301][T13606] ? __pfx_shmem_get_inode+0x10/0x10 [ 545.411322][T13606] ? from_kgid+0x1c6/0x660 [ 545.411346][T13606] ? make_vfsuid+0x49/0xa0 [ 545.411369][T13606] ? generic_permission+0x2ba/0x660 [ 545.411399][T13606] shmem_mknod+0x17d/0x340 [ 545.411426][T13606] shmem_mkdir+0x33/0x70 [ 545.411450][T13606] vfs_mkdir+0x40e/0x630 [ 545.411489][T13606] filename_mkdirat+0x285/0x510 [ 545.411512][T13606] ? __might_fault+0xaf/0x130 [ 545.411541][T13606] ? __pfx_filename_mkdirat+0x10/0x10 [ 545.411570][T13606] ? do_getname+0x151/0x250 [ 545.411596][T13606] __se_sys_mkdirat+0x35/0x150 [ 545.411622][T13606] do_syscall_64+0x166/0x520 [ 545.411644][T13606] ? trace_irq_disable+0x3b/0x140 [ 545.411665][T13606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.411691][T13606] ? clear_bhb_loop+0x70/0xc0 [ 545.411717][T13606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.411741][T13606] RIP: 0033:0x7f29a5b9e1d9 [ 545.411764][T13606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.411785][T13606] RSP: 002b:00007f29a6aba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 545.411811][T13606] RAX: ffffffffffffffda RBX: 00007f29a5e25fa0 RCX: 00007f29a5b9e1d9 [ 545.411828][T13606] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 545.411845][T13606] RBP: 00007f29a5c35888 R08: 0000000000000000 R09: 0000000000000000 [ 545.411860][T13606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.411874][T13606] R13: 00007f29a5e26038 R14: 00007f29a5e25fa0 R15: 00007ffc21adc9e8 [ 545.411911][T13606] [ 545.474001][ T5716] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 545.512182][ T5716] usb 5-1: device descriptor read/8, error -71 [ 545.628598][ T5716] usb usb5-port1: unable to enumerate USB device [ 545.724366][T13588] loop4: detected capacity change from 0 to 7 [ 545.774046][T13588] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 545.774080][T13588] loop4: partition table partially beyond EOD, truncated [ 545.776268][T13588] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 545.884898][ T8680] udevd[8680]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 545.968382][ T975] usb 4-1: USB disconnect, device number 94 [ 546.017654][ T7710] udevd[7710]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 546.563728][T13632] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2729'. [ 546.621866][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2729'. [ 546.997948][T13637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 547.016821][T13637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 547.019612][T13637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 547.034735][T13637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 547.036347][T13637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 547.171174][T13641] FAULT_INJECTION: forcing a failure. [ 547.171174][T13641] name failslab, interval 1, probability 0, space 0, times 0 [ 547.171213][T13641] CPU: 0 UID: 0 PID: 13641 Comm: syz.1.2733 Tainted: G L syzkaller #0 PREEMPT(full) [ 547.171247][T13641] Tainted: [L]=SOFTLOCKUP [ 547.171257][T13641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 547.171271][T13641] Call Trace: [ 547.171280][T13641] [ 547.171291][T13641] dump_stack_lvl+0xe8/0x150 [ 547.171323][T13641] should_fail_ex+0x3eb/0x540 [ 547.171361][T13641] should_failslab+0xa8/0x100 [ 547.171387][T13641] __kmalloc_noprof+0xf9/0x710 [ 547.171411][T13641] ? tomoyo_encode+0x2ad/0x570 [ 547.171433][T13641] ? tomoyo_encode+0x2ad/0x570 [ 547.171463][T13641] tomoyo_encode+0x2ad/0x570 [ 547.171492][T13641] tomoyo_realpath_from_path+0x5fa/0x640 [ 547.171527][T13641] ? tomoyo_path_number_perm+0x219/0x5f0 [ 547.171552][T13641] tomoyo_path_number_perm+0x246/0x5f0 [ 547.171580][T13641] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 547.171647][T13641] ? __pfx_current_check_access_path+0x10/0x10 [ 547.171672][T13641] ? d_splice_alias_ops+0x11c/0x440 [ 547.171692][T13641] ? d_splice_alias+0x12/0x30 [ 547.171717][T13641] ? lookup_one_qstr_excl+0x1d4/0x360 [ 547.171746][T13641] tomoyo_path_mkdir+0xb0/0xf0 [ 547.171769][T13641] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 547.171795][T13641] ? __pfx_filename_create+0x10/0x10 [ 547.171825][T13641] security_path_mkdir+0x169/0x350 [ 547.171852][T13641] filename_mkdirat+0x200/0x510 [ 547.171874][T13641] ? __might_fault+0xaf/0x130 [ 547.171901][T13641] ? __pfx_filename_mkdirat+0x10/0x10 [ 547.171929][T13641] ? do_getname+0x151/0x250 [ 547.171956][T13641] __se_sys_mkdirat+0x35/0x150 [ 547.171981][T13641] do_syscall_64+0x166/0x520 [ 547.172003][T13641] ? trace_irq_disable+0x3b/0x140 [ 547.172023][T13641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.172047][T13641] ? clear_bhb_loop+0x70/0xc0 [ 547.172073][T13641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.172096][T13641] RIP: 0033:0x7f29a5b9e1d9 [ 547.172119][T13641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.172139][T13641] RSP: 002b:00007f29a6aba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 547.172164][T13641] RAX: ffffffffffffffda RBX: 00007f29a5e25fa0 RCX: 00007f29a5b9e1d9 [ 547.172182][T13641] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 547.172199][T13641] RBP: 00007f29a5c35888 R08: 0000000000000000 R09: 0000000000000000 [ 547.172214][T13641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.172229][T13641] R13: 00007f29a5e26038 R14: 00007f29a5e25fa0 R15: 00007ffc21adc9e8 [ 547.172266][T13641] [ 547.172289][T13641] ERROR: Out of memory at tomoyo_realpath_from_path. [ 547.483225][T13646] jffs2: notice: (13646) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 547.545486][T13646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.560718][T13646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.692637][ T34] INFO: task syz.0.2057:11402 blocked in I/O wait for more than 143 seconds. [ 547.692668][ T34] Tainted: G L syzkaller #0 [ 547.692682][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 547.692694][ T34] task:syz.0.2057 state:D stack:24768 pid:11402 tgid:11400 ppid:11174 task_flags:0x400040 flags:0x00080002 [ 547.692771][ T34] Call Trace: [ 547.692779][ T34] [ 547.692794][ T34] __schedule+0x1b47/0x5b40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 547.692853][ T34] ? __page_table_check_zero+0x6c/0x430 [ 547.692887][ T34] ? __pfx___schedule+0x10/0x10 [ 547.692919][ T34] ? schedule+0x90/0x2b0 [ 547.692945][ T34] schedule+0x164/0x2b0 [ 547.692969][ T34] io_schedule+0x7f/0xd0 [ 547.692992][ T34] folio_wait_bit_common+0x85e/0xc40 [ 547.693030][ T34] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 547.693055][ T34] ? __pfx_wake_page_function+0x10/0x10 [ 547.693091][ T34] ? migrate_pages_batch+0x1c6b/0x5020 [ 547.693117][ T34] migrate_pages_batch+0x2492/0x5020 [ 547.693153][ T34] ? __pfx_compaction_free+0x10/0x10 [ 547.693186][ T34] ? __pfx_compaction_alloc+0x10/0x10 [ 547.693208][ T34] ? __pfx_migrate_pages_batch+0x10/0x10 [ 547.693240][ T34] ? finish_task_switch+0x40e/0xc60 [ 547.693262][ T34] ? lockdep_hardirqs_on+0x7b/0x110 [ 547.693292][ T34] ? rcu_is_watching+0x16/0xb0 [ 547.693315][ T34] ? trace_sched_exit_tp+0x3a/0x130 [ 547.693358][ T34] ? __schedule+0x1b5d/0x5b40 [ 547.693392][ T34] ? __css_rstat_updated+0x237/0x540 [ 547.693422][ T34] ? __pfx___css_rstat_updated+0x10/0x10 [ 547.693457][ T34] migrate_pages+0x1fa1/0x2910 [ 547.693496][ T34] ? __pfx_compaction_free+0x10/0x10 [ 547.693520][ T34] ? __pfx_compaction_alloc+0x10/0x10 [ 547.693566][ T34] ? __pfx_migrate_pages+0x10/0x10 [ 547.693597][ T34] ? rcu_is_watching+0x16/0xb0 [ 547.693620][ T34] ? isolate_migratepages_b ** replaying previous printk message ** [ 547.693620][ T34] ? isolate_migratepages_block+0x30ff/0x3680 [ 547.693679][ T34] compact_zone+0x34b7/0x4ca0 [ 547.693702][ T34] ? __free_object+0x432/0x5d0 [ 547.693789][ T34] ? __pfx_compact_zone+0x10/0x10 [ 547.693812][ T34] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 547.693837][ T34] ? flush_work+0xd/0x30 [ 547.693871][ T34] sysctl_compaction_handler+0x3f3/0x880 [ 547.693932][ T34] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 547.693991][ T34] ? __kvmalloc_node_noprof+0x340/0x820 [ 547.694014][ T34] ? proc_sys_call_handler+0x3cb/0x830 [ 547.697737][ T34] ? proc_sys_call_handler+0x3cb/0x830 [ 547.697780][ T34] proc_sys_call_handler+0x4c1/0x830 [ 547.697816][ T34] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 547.698183][ T34] vfs_write+0x612/0xba0 [ 547.768075][ T34] ? __pfx_vfs_write+0x10/0x10 [ 547.768115][ T34] ? __fget_files+0x3a2/0x420 [ 547.768138][ T34] ? __fget_files+0x2a/0x420 [ 547.768164][ T34] ? fdget+0x1ac/0x250 [ 547.768194][ T34] ksys_write+0x150/0x270 [ 547.791839][ T34] ? __pfx_ksys_write+0x10/0x10 [ 547.791945][ T34] do_syscall_64+0x166/0x520 [ 547.792007][ T34] ? trace_irq_disable+0x3b/0x140 [ 547.792055][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.800778][ T34] ? clear_bhb_loop+0x70/0xc0 [ 547.800894][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.800968][ T34] RIP: 0033:0x7fde4659e1d9 [ 547.801028][ T34] RSP: 002b:00007fde47409028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 547.801064][ T34] RAX: ffffffffffffffda RBX: 00007fde46825fa0 RCX: 00007fde4659e1d9 [ 547.801095][ T34] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000008 [ 547.801129][ T34] RBP: 00007fde46635888 R08: 0000000000000000 R09: 0000000000000000 [ 547.801166][ T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.801204][ T34] R13: 00007fde46826038 R14: 00007fde46825fa0 R15: 00007ffc63cce3e8 [ 547.801305][ T34] [ 547.801459][ T34] [ 547.801459][ T34] Showing all locks held in the system: [ 547.801490][ T34] locks held by kworker/u8:0/12: 2, on CPU#1: [ 547.801626][ T34] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 547.802127][ T34] #1: ffffc90000117c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 547.802324][ T34] locks held by pr/ttyS0/16: 2, last CPU#0: [ 547.802389][ T34] #0: ffffffff90033df8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 547.817117][ T34] #1: ffff8880b82286d8 (hrtimer_bases.lock){-.-.}-{2:2}, at: univ8250_console_device_lock+0x67/0xc0 [ 547.817348][ T34] locks held by khungtaskd/34: 1, last CPU#1: [ 547.817444][ T34] #0: ffffffff9015a2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 547.817608][ T34] locks held by kworker/u8:8/1006: 2, on CPU#0: [ 547.817658][ T34] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 547.817797][ T34] #1: ffffc90004f1fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 547.818001][ T34] locks held by klogd/4969: 1, last CPU#1: [ 547.818045][ T34] #0: ffffffff9015a2e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 547.818188][ T34] locks held by getty/5370: 2, on CPU#0: [ 547.821607][ T34] #0: ffff8880376de0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 547.821764][ T34] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 547.829855][ T34] locks held by syz-executor/5599: 2, last CPU#1: [ 547.829909][ T34] #0: ffff8880794eccc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 547.830039][ T34] #1: ffffffff9015a2e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 547.830182][ T34] locks held by udevd/5623: 1, on CPU#1: [ 547.830219][ T34] #0: ffff8880270e0350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 547.830429][ T34] locks held by kworker/u8:19/11392: 3, last CPU#1: [ 547.830529][ T34] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 547.830662][ T34] #1: ffffc90007137c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 547.830757][ T34] #2: ffff88803732f258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 547.830988][ T34] locks held by syz.0.2057/11402: 2, on CPU#1: [ 547.831019][ T34] #0: ffff888079413b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 547.831163][ T34] #1: ffff88807fba6460 (sb_writers#3){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 547.831300][ T34] locks held by syz-executor/12235: 4, last CPU#1: [ 547.831336][ T34] #0: ffffffff90236110 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x470 [ 547.842550][ T34] #1: ffff888076ba7180 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 547.842692][ T34] #2: ffff8880794ea800 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 547.842820][ T34] #3: ffffffff9015a2e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 547.842995][ T34] locks held by syz.4.2734/13645: 4, last CPU#1: [ 547.843046][ T34] #0: ffffffff916dd4a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 547.843181][ T34] #1: ffffffff916dd2e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 547.843304][ T34] #2: ffff8880341c7140 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x3c/0x350 [ 547.843431][ T34] #3: ffff88807af72348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa3/0xdc0 [ 547.843530][ T34] locks held by modprobe/13660: 3, last CPU#1: [ 547.843567][ T34] #0: ffff88807bd8fbc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 547.843692][ T34] #1: ffffffff9015a2e0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x139f/0x3570 [ 547.843813][ T34] #2: ffffffff9015a2e0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 547.859895][ T34] locks held by modprobe/13663: 1, last CPU#1: [ 547.859915][ T34] #0: ffffffff9015a2e0 (rcu_read_lock){....}-{1:3}, at: lock_vma_under_rcu+0x116/0x500 [ 547.859984][ T34] [ 547.859989][ T34] ============================================= [ 547.859989][ T34] [ 547.860015][ T34] NMI backtrace for cpu 1 [ 547.860031][ T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 547.860057][ T34] Tainted: [L]=SOFTLOCKUP [ 547.860065][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 547.860104][ T34] Call Trace: [ 547.860131][ T34] [ 547.860180][ T34] dump_stack_lvl+0xe8/0x150 [ 547.860242][ T34] nmi_cpu_backtrace+0x274/0x2d0 [ 547.860282][ T34] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 547.860353][ T34] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 547.860413][ T34] sys_info+0x135/0x170 [ 547.860458][ T34] watchdog+0x1073/0x10f0 [ 547.860526][ T34] ? watchdog+0x209/0x10f0 [ 547.860587][ T34] kthread+0x38b/0x480 [ 547.860638][ T34] ? __pfx_watchdog+0x10/0x10 [ 547.860671][ T34] ? __pfx_kthread+0x10/0x10 [ 547.860722][ T34] ret_from_fork+0x514/0xb70 [ 547.860782][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 547.860827][ T34] ? __switch_to+0xc78/0x1410 [ 547.860886][ T34] ? __pfx_kthread+0x10/0x10 [ 547.860944][ T34] ret_from_fork_asm+0x1a/0x30 [ 547.861024][ T34] [ 547.861101][ T34] Sending NMI from CPU 1 to CPUs 0: [ 547.861155][ C0] NMI backtrace for cpu 0 [ 547.861170][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 547.861194][ C0] Tainted: [L]=SOFTLOCKUP [ 547.861200][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 547.861211][ C0] RIP: 0010:delay_tsc+0x5d/0xd0 [ 547.861230][ C0] Code: 89 d7 49 c1 e7 20 49 09 c7 4d 29 f7 49 39 df 73 55 bf 01 00 00 00 e8 b2 1b 96 f5 65 48 8b 05 ea c3 df 08 48 85 c0 74 1c f3 90 01 00 00 00 e8 49 1a 96 f5 e8 e4 86 01 00 39 c5 75 0e 0f 01 f9 [ 547.861246][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000082 [ 547.861262][ C0] RAX: 8000000000000001 RBX: 0000000000000899 RCX: ffffffff9be86a01 [ 547.861275][ C0] RDX: 0000000000000101 RSI: ffffffff8c8f7460 RDI: 00000000ffffffff [ 547.861288][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 547.861299][ C0] R10: dffffc0000000000 R11: ffffffff8bff5bd0 R12: 1ffffffff383bfd9 [ 547.861323][ C0] R13: 00000000ffffffff R14: 0000011f7036b2c0 R15: 00000000000004c3 [ 547.861335][ C0] FS: 0000000000000000(0000) GS:ffff88812342e000(0000) knlGS:0000000000000000 [ 547.861349][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 547.861361][ C0] CR2: 00007fff39d53cbc CR3: 0000000075480000 CR4: 00000000003526f0 [ 547.861376][ C0] Call Trace: [ 547.861382][ C0] [ 547.861389][ C0] wait_for_lsr+0x147/0x2f0 [ 547.861409][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 547.861430][ C0] serial8250_console_write+0xa7e/0x1200 [ 547.861446][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 547.861466][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 547.861481][ C0] ? __schedule+0x1b5d/0x5b40 [ 547.861505][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 547.861531][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 547.861549][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 547.861573][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 547.861591][ C0] nbcon_kthread_func+0x6d9/0x8d0 [ 547.861610][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 547.861625][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 547.861645][ C0] ? __kthread_parkme+0x71/0x1f0 [ 547.861693][ C0] ? __kthread_parkme+0x199/0x1f0 [ 547.861711][ C0] kthread+0x38b/0x480 [ 547.861725][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 547.861740][ C0] ? __pfx_kthread+0x10/0x10 [ 547.861755][ C0] ret_from_fork+0x514/0xb70 [ 547.861771][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 547.861786][ C0] ? __switch_to+0xc78/0x1410 [ 547.861803][ C0] ? __pfx_kthread+0x10/0x10 [ 547.861818][ C0] ret_from_fork_asm+0x1a/0x30 [ 547.861840][ C0] [ 547.889396][ T34] Kernel panic - not syncing: hung_task: blocked tasks [ 548.856660][ T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 548.867438][ T34] Tainted: [L]=SOFTLOCKUP [ 548.871767][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 548.881925][ T34] Call Trace: [ 548.885218][ T34] [ 548.888162][ T34] vpanic+0x26f/0x710 [ 548.892166][ T34] panic+0xc5/0xd0 [ 548.895900][ T34] ? __pfx_panic+0x10/0x10 [ 548.900327][ T34] ? preempt_schedule_common+0x7f/0xd0 [ 548.905804][ T34] ? preempt_schedule_thunk+0x16/0x40 [ 548.911188][ T34] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 548.917361][ T34] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 548.923536][ T34] watchdog+0x10e7/0x10f0 [ 548.927891][ T34] ? watchdog+0x209/0x10f0 [ 548.932325][ T34] kthread+0x38b/0x480 [ 548.936407][ T34] ? __pfx_watchdog+0x10/0x10 [ 548.941108][ T34] ? __pfx_kthread+0x10/0x10 [ 548.945727][ T34] ret_from_fork+0x514/0xb70 [ 548.950344][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 548.955473][ T34] ? __switch_to+0xc78/0x1410 [ 548.960161][ T34] ? __pfx_kthread+0x10/0x10 [ 548.964759][ T34] ret_from_fork_asm+0x1a/0x30 [ 548.969548][ T34] [ 548.973174][ T34] Kernel Offset: disabled [ 548.977530][ T34] Rebooting in 86400 seconds..