last executing test programs: 12m51.614099812s ago: executing program 32 (id=416): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x6e0a0000, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x83, 0x1, 0x0, 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000100)="2c74dfd687a16a422bc431a96c72043e5151bd9a7521eba31fa5cab4935d5fe06bdc2294c278666a2745f9f4697a5096319997d93bed398e8a2aeb89f7f378b2a4fe5f7758341e72d9bb314e6864ff5ed25a548381bc7a57fe31abf5b81b7b0cf910c1d1889c62d49bf95d4e0b402624f9973311978df7860ad50e0b321919051026b50f16011511f0c5cb6808dc70dc6e70df0b077f2d14bd9e9fb6b45a1dc9d42e91cecddcf1acb0f29ea81cec3f2e85012c9acafb5c92", 0xb8}], 0x1) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5) fsopen(&(0x7f0000000200)='mqueue\x00', 0x1) 12m22.474738664s ago: executing program 33 (id=575): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x1, 0x11) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000400)={r2, 0x1, r1, 0x3, 0x80000}) openat(r0, &(0x7f0000000280)='./proc\x00', 0x141041, 0x51) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x802, 0x165) write(r3, &(0x7f0000000100)='100', 0x3) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000140)="c76e6c44977585b9c3a5687e8dd3654ebda1f3e447ab6aa3a842cb0e6c907be3aaa4cb84ba9fdbf8b8f28ca182e4a088afdcd86c5a73475c328aa0af7e563bd36b92ff2ebf73db3ec8", 0x49, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000200)={r4}) open(&(0x7f00000002c0)='./proc/file0\x00', 0x400400, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, 0x31, 0x9, 0x70bd25, 0x4000, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4080040) 11m47.642819573s ago: executing program 34 (id=644): r0 = syz_open_dev$video(&(0x7f0000000600), 0x7, 0x40) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000780)={0x1, 0x20323159, 0x140, 0xb4, 0x4, @stepwise={{0x7, 0x25}, {0x2, 0x1}, {0x0, 0x4}}}) 11m36.472304196s ago: executing program 35 (id=720): r0 = socket$inet_tcp(0x2, 0x1, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_default\x00') bind$inet(r0, &(0x7f0000000c00)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000c40)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000cc0)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000d00)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm, @sack_perm], 0x200000000000028c) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000e40), 0x4) sendto$inet(r0, &(0x7f0000000dc0)="3e59c5beb4d84d216f9534ffa7c3726250c3794085c94096c5a47757349d474bc5744ff0d75a092e0adfdc50ed57dfc1d05a5eef535253e8a54122c0aca4b7e6f0df93b6d0d9e47cf1096d7c73428b45ef37cb6ac9b93a0016c77000f7883d59e231cca5675e09a94821d22eec", 0x6d, 0x8040, 0x0, 0x0) 6m2.939547079s ago: executing program 6 (id=2245): mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (async) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x6]}, 0x8, 0x1800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000000f000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000000f000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0, r0}, 0x68) 6m2.760532302s ago: executing program 6 (id=2246): prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) (fail_nth: 9) 6m2.531211556s ago: executing program 6 (id=2247): syz_usb_connect(0x5, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000200), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000240)={&(0x7f0000000280)=[{0x48, 0x2000, 0x0, 0x0}, {0x5, 0x10f5, 0x0, 0x0}, {0xbe, 0x4000, 0x0, 0x0}], 0x3}) (fail_nth: 9) 6m1.069511144s ago: executing program 6 (id=2251): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000140)={0x1, 0x0, 0x700}) close(0x3) 5m58.684596555s ago: executing program 6 (id=2257): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x8) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {0x0, r4, 0x2}}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./sys_sec\x00', &(0x7f0000000940)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 5m57.692816601s ago: executing program 6 (id=2262): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7fffff, 0x4002011, r1, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, 0x0, &(0x7f0000000180)) r3 = fsmount(r0, 0x0, 0x6) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 5m42.464843746s ago: executing program 36 (id=2262): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7fffff, 0x4002011, r1, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, 0x0, &(0x7f0000000180)) r3 = fsmount(r0, 0x0, 0x6) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 3m24.627980329s ago: executing program 5 (id=2833): ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x5, 0xfffffffffffffdfa}, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 3m24.524928311s ago: executing program 5 (id=2836): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x102) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000003c0)={0x0, 0x1, &(0x7f0000000400)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x800000000000c}) 3m18.358205856s ago: executing program 5 (id=2853): mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x1, &(0x7f0000000a40)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000004180)='./file0/file0\x00', 0x2900, 0x88c, 0x0) write$FUSE_INIT(r0, &(0x7f00000041c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004240)="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", 0x2000, &(0x7f0000006240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006300)={0x90, 0x0, 0x800007fffffff, {0x3, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xe5, 0xc, {0x2, 0x9, 0x1, 0x4, 0x5, 0x8001, 0x8, 0x123, 0x3, 0xa000, 0x1, 0x0, r2, 0x6, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f00000063c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000008400)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x11c, 0x4, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_CHAIN_USERDATA={0xdd, 0xc, "f7d42393335a0e5efd17bf6bcd59d8a2798fc2824e9a5419cff235784c32fcf11add238586aa48291aa79005872dfe0608e00c04610957d60a967220cd230de70a28f870a78661cc604ee7f230032367b8ddc1d3ac8b7ebf69f6460cd4507fa42231e791b31056b2fb2786481e5b05381a62f4b23cd2842b66f0b335c47ef6133f3dc348d8b7256e454d11afc519b6ab37f26b7f38537f8235555c16f088adc471b8e914747dbbf432b824b75e6d65b2008b9ee4a768e385d83a40ad49030264a4422fad52b12005fda195209ef65d08030db6f8f3f4b7fc75"}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth0_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2404c084) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800500150002000000080012400000000414000300686173683a69702c706f72742c697000050005000200000005000400050000000900020073797a31000000000500010007"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004040) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8851}, 0x20004000) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000000)={0x7, 0x200, 0x4, 0xdf, 0x4, 0x0, [{0x9, 0x8000000000000000, 0x1}, {0x7, 0x8, 0x6, '\x00', 0x100}, {0x4, 0xa, 0xb3, '\x00', 0x2200}, {0x200, 0x6d, 0x4, '\x00', 0x200}]}) sendmsg$NFT_BATCH(r4, &(0x7f0000000b00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0xb90}, 0x1, 0x0, 0x0, 0x4}, 0x40) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000580)={&(0x7f00000005c0)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x2982, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000800)={{0x1000, 0x26000, 0x0, 0x0, 0x8, 0x1, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0x4, 0x10000, 0x4, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x1, 0xdddd1000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x0, 0xfc}, {0x1, 0xa000, 0x6, 0x0, 0x81, 0x0, 0x9, 0x0, 0x8, 0x2, 0x6}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x8d, 0x7, 0x0, 0x1, 0x3c}, {0x2, 0x0, 0xa, 0x78, 0x5, 0x40, 0x2, 0x0, 0x3c, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0x0, 0x3, 0x4, 0x2, 0xa9, 0x20, 0x0, 0x3, 0xff}, {0xeeee0000, 0x41000, 0xc, 0x0, 0xb, 0x7, 0x8, 0x40, 0x26, 0x0, 0x3}, {0xdddd0000, 0x3}, {0x30000, 0xfffe}, 0xddfcffe7, 0x0, 0x104, 0x78, 0x3, 0x0, 0xd000, [0x3, 0x0, 0x40000000001]}) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/stat\x00', 0x0, 0x0) sendfile(r6, r10, 0x0, 0x20000023896) sendmsg$BATADV_CMD_TP_METER(r10, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6991}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044000}, 0x4040) write$tcp_congestion(r10, &(0x7f0000000540)='htcp\x00', 0x5) 3m18.220664515s ago: executing program 8 (id=2854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00', {0x2}, 0x3}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x1fe1, 0x88f5}, @void, @eth={@broadcast, @multicast, @val={@val, {0x8100, 0x0, 0x0, 0x22}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x20, 0x800, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c3, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0x5, 0x100, @void}}}}}}}}, 0x3a) 3m17.333778658s ago: executing program 5 (id=2856): r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffa) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xd2a9217612e5c1e9, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1005c48, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='\x00', 0x89901) move_mount(r3, &(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x262) ioctl$NILFS_IOCTL_SET_SUINFO(r2, 0x80045b10, &(0x7f0000000180)={0x0, 0x0, 0x20, 0x1, 0x5ca}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000200)={0x18, {0x1, 0x0}, 0x1, 0x200}) ioctl$RUN_ARRAY(r0, 0x400c0930, 0x0) 3m16.844259729s ago: executing program 8 (id=2857): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$inet(0x2, 0x2, 0x1) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) (async) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb8}, 0x80) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@new_dev={0x4, 0x79d, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x108}}}, &(0x7f0000000180)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000280)={0x0, 0x1, 0x3000, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000400)={0x2e, 0x70, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000540)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_ublk_setup_io_uring(0x20, &(0x7f00000005c0)={0x0, 0xffffffff, 0x80, 0x2, 0x282}, 0x0, 0x0, 0x0) (async) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000640)={0x35}) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r6, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 3m15.641933998s ago: executing program 8 (id=2860): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x102) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000002c0)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000003c0)={0x0, 0x1, &(0x7f0000000400)=[r2], 0x0, 0x0, 0x0, 0x0, 0x800000000000c}) 3m15.625489493s ago: executing program 5 (id=2861): r0 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000003c0)={0x0, 0x1, &(0x7f0000000400)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x800000000000c}) 3m15.405387208s ago: executing program 5 (id=2862): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0xdb, 0x1000, &(0x7f0000000b40)=""/4096) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000500)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3m14.75446292s ago: executing program 37 (id=2862): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0xdb, 0x1000, &(0x7f0000000b40)=""/4096) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000500)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3m9.446598262s ago: executing program 8 (id=2870): r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffa) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xd2a9217612e5c1e9, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1005c48, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='\x00', 0x89901) move_mount(r3, &(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x262) ioctl$NILFS_IOCTL_SET_SUINFO(r2, 0x80045b10, &(0x7f0000000180)={0x0, 0x0, 0x20, 0x1, 0x5ca}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000200)={0x18, {0x1, 0x0}, 0x1, 0x200}) ioctl$RUN_ARRAY(r0, 0x400c0930, 0x0) 3m7.65858297s ago: executing program 8 (id=2874): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000e00), 0x8ab43, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000e40)={0x79, 0x0, 0x982}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000ec0)={0x16, 0x4, 0xff}) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000f00)={0x12, 0x1, 0xde}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4188aec6, &(0x7f0000000540)={0x0, [{0x2, 0x3008, 0x101, &(0x7f0000000700)="9e1c5f05d649bcb48a2816b7bfc7bb4b17c868b9083e0695b5d2cc0f36b03f9bdfe4949ef7078c1deee31448be3920bc80ee9a80f837db6b0fd22e6e011e6ae029b31c5f872d64422e6f413fcf6565de5c6dd29233fd1622344b63d86475190b468f0bb5d421710e47e0a0e9b87b948737952004d681c512889f83fe6b5ac57472e0fc59b37f902cd214d07964605b22570c97e0ef3aefb81c59c2ec19d0c770b0fd61e5170e84d6e8a14946708ce6cc621cf5be1241307473df5db66bd79b0e58d1af2b12218fc3261d37d543aa68d639fb8b0ec7bd481b4eabdc05a230267be6c87f4074c1b836118d0d23bc98e4e3a015fd7dabc7fe15f5b71271051e842caae0a74e9b4b8d55ac5567d806ebab4ab6390492a745791ee013b161907ae13a1b74beb266d2c9512907363f432882f803e387f2724599ad22b40fc02400cfbe24b9adb0e0a63a11666bb3fdfe3415056bb05ea71efa54f2af415122426d0811ef9cd68990567b03fc2693f0aa059ebdeae916476bcdc4a155c2166c5f64f3d0436e20ae46bbeaf73db57b6bb7ed06285ce38d231be7128011b4f9edeb3f08fa84c4a3627a8469bbff4c519961959ad3374507f5e453b2b58aefc1c55cc6605c20fa4aff215660e9b36502699fd40ed9a1aa80efbd6d48d9e7ae4acfdc0bc730a3b5c511d009421747c221e53f395b3acb2b9d5259c5389a9aac290688516128cf8849514672809c0d6ac4c4e88f78c76fb5701c94e86dc4eaa4855f48f16b55254ee3e722aaa4d006031a9ad4891e6c42dff71392b0ca9d72b36ddd2e74a4819eda04d35f90eafea150a7772e42e34d2c5ade0bcce64c4e0c7c413033e20ab421cbb534f0dbaedf1bc6f811eafeb920d95856dec897ec31d6c835c9a1eaa17da17e880d4ff8ebb3856a0ad4a6802074beddee18e52227f9ca6b237c8921ce30db784315517f2a41ef53f3c853501e65675657d75f90a69d076325b60e7aa1e16342fbdb165662f9962bd97941f14e97f240ff2081e669e98936646dc3644880ba9d03336e4d9a1beeb827af2f372d1e3d3a96b54bc0c15e7109af3bb507a90b382d10b460de9b213ce3f299926e1dc445c4465c9276e7f37b6a202f9c839ed0991fe1833e23ab93e2217ac909b1c7a451b15caaa46ac5f37be308bccafa050434c1206bd54be6dc2a7fd72a75125745969b58af9a5ea6e0b6b3c2ad95b36f8e2dd3a87956593bf9a37355481cdf2cc0ed255e5c7a6afa8ff3cd27898bcb38d495980bbcb191e816380c0779f223e3a5602970fb52e8a60e67952a2fd5763e452e6c8dcfbf1f348d657d6922b09f273ae13920620fa672d982417635365c620e023edfe82ddb94a3c49a53d0bcad378bcb798a67a9daf8b8bbac9738de35c1910512ef45dc6bdea69e04a11b5bca8ca46448c11f1b81ceaccfe7a613ef3832b1e3e19d1139b47bc1abc3a310d150dbe1513f22f50812932511fea94f60f3cb3ebe8fc368b2f3609a597dd4c004aa5d3f7b1a0e9ff186fd93412df156d5d1e16a5a17c22db4e7820cb69dc848f62635d12fd21379300de6808954855f7bd63b27cedfec9e211bfbb44a7a78aa3d0d7bdf439ef03c62c31e259d29d39d3a8734510ed00d80071e3a01920d67fb13a9387ab48cac9d6d7b2e5bc9a6e935ed96a4818064fcd08c3de7475e0f0c5972b8c36b9f0c7759b50c6e400aa7ae9d05bb534805966e103dbe858d9f7a526034ef7d3b66581da77f190d6a6bf963f5ba5e2ad90a5387d960948d7d22c6813db9fea9806ef42ad4680365a811c2812a3d29fa681da85d129e45c2bdffc3aff9640d9e9a083ab8fca2e0528324d179b28a73313e234c1a384b6a0c2a50ea77eb40ae8bbd7ebdb0444e1bdde9d0bdeb97244c2b17dd7f4e7dec8ba2eb4c69dc208d02ef1fa5f1cc0dee7546f31665d87d4fa0326efe3f867457cb2f22647bee18ce999a81eb153b7f15090f771f6baa142edcde15fe25222e600d56004717f3dd4e022c86026b7bb2ebcc12b5e49aca31f618ad6d3cd4f881e9545859daa0d15e4845dc3a1cd813972e321d9dfb21bda10de246f13e4886cdb3f00512b45ff0ca7c317b416e64f3e87b374d785ac604dd2c6dc412d47115ce3967304676737255189d038a027a4ed9c106a2f5124df656b3f843d8ec"}, {0x2, 0x0, 0x800, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0xa, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x1006, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x5df, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x401, 0x0}, {0x0, 0x0, 0x10001, 0x0}]}) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f00000002c0)={0x0, [[0x7ff, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x2], [0x0, 0x40000000, 0xffffbffd, 0x1, 0x6, 0x0, 0x0, 0x2], [0x0, 0x20000231, 0x200006, 0x0, 0x0, 0x0, 0x1]], '\x00', [{0x0, 0x7, 0x1}, {0x1000, 0x4}, {0xffffffff}, {0xfffffffc, 0x1}, {0x400000}, {0x4}, {0x1}, {}, {0x0, 0x9}, {}, {0x8}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r6, 0x40345632, &(0x7f0000000d80)={0x9, "9ba3cf0211c66e7bfe6d86c2b569f9218cb65e51deb75daa5ee8b09569aa5efd", 0x2, 0x1}) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='ext4\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000dc0)={@id={0x2, 0x0, @d}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x149000, 0x19a) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000000000003000000003d"]) 3m7.276391574s ago: executing program 8 (id=2875): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001880)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000018c0)={'syzkaller1\x00', @broadcast}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1180015000600142603600e12080011", 0x2b}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="d8000000210081044e81f782db44b9040a000000e8fe55a1180015000600142603600e1209001800", 0x28}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="0239000020"], 0x33fe0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x1c3, 0x2f) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x20770000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0xf) r5 = fcntl$dupfd(r2, 0x0, r2) read$dsp(r5, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f00000000c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x78, 0x0, 0x9, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFCTH_QUEUE_NUM={0x8}, @NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0xe1e0}}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x401}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x840) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000480)={0xa, [0x1, 0xfff9, 0x4, 0x81, 0x1, 0x0, 0x100, 0x895, 0x1ff, 0x6]}, &(0x7f00000004c0)=0x18) sendmsg$NFT_BATCH(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x8c884) write$tun(r0, &(0x7f0000001a40)=ANY=[], 0xfdef) 3m6.745361807s ago: executing program 38 (id=2875): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001880)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000018c0)={'syzkaller1\x00', @broadcast}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1180015000600142603600e12080011", 0x2b}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="d8000000210081044e81f782db44b9040a000000e8fe55a1180015000600142603600e1209001800", 0x28}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="0239000020"], 0x33fe0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x1c3, 0x2f) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x20770000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0xf) r5 = fcntl$dupfd(r2, 0x0, r2) read$dsp(r5, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f00000000c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x78, 0x0, 0x9, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFCTH_QUEUE_NUM={0x8}, @NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0xe1e0}}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x401}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x840) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000480)={0xa, [0x1, 0xfff9, 0x4, 0x81, 0x1, 0x0, 0x100, 0x895, 0x1ff, 0x6]}, &(0x7f00000004c0)=0x18) sendmsg$NFT_BATCH(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x8c884) write$tun(r0, &(0x7f0000001a40)=ANY=[], 0xfdef) 2m45.236308528s ago: executing program 9 (id=2936): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setns(0xc9, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000001480)={0x5, @sliced={0x0, [0x2, 0xa, 0x0, 0x8, 0x7, 0xf, 0x9, 0xf, 0x7, 0x8, 0x7, 0x1728, 0x7, 0xe, 0xee, 0x3, 0x5, 0x2, 0x1, 0x8ce, 0x2fd, 0xffff, 0x2, 0xb, 0x8001, 0xde1, 0x7, 0x2ff, 0xb58b, 0x9, 0xfff, 0x2, 0x5, 0x0, 0x5, 0x2, 0x3, 0x5, 0x3, 0xa20, 0x6, 0x8e, 0x7fff, 0xa030, 0x2, 0xedb4, 0x4, 0x200], 0x6ee}}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40e41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd070010000000140fc00060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x400007ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000012c0)={0x1, @pix_mp={0x0, 0x0, 0x3231564e}}) r8 = dup(r6) write$UHID_INPUT(r8, &(0x7f0000000280)={0x1a, {"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", 0x1000}}, 0x1006) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi0\x00', 0x20000, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f00000013c0)={'multiq3\x00', [0x140, 0x2, 0x0, 0x7, 0x1, 0x10000, 0x6, 0x6, 0x3, 0xc52d, 0x3, 0x10, 0xf8, 0x4, 0x4ce, 0x9e9c, 0x101, 0x400, 0x6, 0x8, 0x8000004, 0x0, 0x80000a, 0x9, 0x40006, 0x200000, 0xae, 0x100000, 0x8, 0xe, 0x8]}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) 2m44.58364643s ago: executing program 9 (id=2938): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000001100)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffd, 0xffff, 0xb, 0x3, 0x3, 0x7], 0x3, &(0x7f0000001080)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) 2m44.447055976s ago: executing program 9 (id=2939): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000480)={0x2710, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000006c0)=0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000700)={0x0, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000100050c100000000000224e0000", 0x58}], 0x1) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="000c04ca2583758fff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)=ANY=[@ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000004d40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000004e80)=ANY=[@ANYRES8=r3, @ANYRES64=r3, @ANYRES64, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT=r1, @ANYRESOCT, @ANYRES8]) read$FUSE(r5, &(0x7f0000000b40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002b80)={0x50, 0x0, r6, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000002c00)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004cc0)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file0\x00', 0x101001, 0x12) 2m41.180588483s ago: executing program 9 (id=2945): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, 0x0) ioctl$DM_DEV_WAIT(r0, 0xc138fd08, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x160, 0x138, 0x0, 0x0, 0xc00, 0x7e, 0x0, @by_dev={r1}, "b917c1beb629946c67637d6a11aad3990792916d267e04f5fbd364abbac6fb367b6d2af55b9a28"}) (fail_nth: 9) 2m40.783181364s ago: executing program 9 (id=2947): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYBLOB="2573cc400f1ba8be3d812cefcfaa7c41389de6b2d4bd6c64"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./dev\x00', &(0x7f0000000840)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./dev/ttyS0\x00', 0x80502, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000008c0)=0x18) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340), 0x82002, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045014, &(0x7f0000000380)=0x90001) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r4, &(0x7f0000000680)={&(0x7f0000000280)=@generic={0x0, "5b9c5753cb81fbc776f41987a7d51809040fad01bfa88e01795c36bbce9c76e7af55f73d4d203df34283abaa9c21f889883a63184c40fc890a3a07d9b5b459f741ba992b67d69758912142397b141e685a84971cd49bc61c76a90e98a11f3c976e0282007801ef48eac4b025eb685b3def43d1bde9e319197b67b1102d35"}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500)="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", 0xd7}, {&(0x7f0000000400)="9a5c1bb0033ab6b9bb2d8133aea63507717558b116dc5d19ba6dcfb6065176ece7fdabfd48f9a410ce08845e531ab0618898746929ef68f692f072ffe5490334f07ed19af0bd8af04f6cdc7278ce0aee19c2802f7e419b1e56c13bdd4b1db100c9b61ff33d69d87ed63921950da63f91b29dd75fb6cd4d5372cbf43f72cb67c41ec4f8920ce7960eae3ccfffd07dc9e6409b20f7566a78fa926171163b6041adb50f35682d", 0xff3e}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x148}, 0x20080) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYBLOB="e35acd2cb872c736d8f8857e231db47e066a706ef9d87dd2f84679142b599135ba54b267fa4219a00c78969d05ef9f3a6af518a520d13ecd1b1d27434a8bb006fa4f8d98bae3eff8166f8833a58f3150a6334af9ed30f8a5bff862679088ccf96bdf44ab987a7547b6685309cb26f274b6ae70b4ec1e972482d32606cae474ff4fd762b2ba", @ANYRES16=r2, @ANYRES16, @ANYRES16, @ANYRESDEC, @ANYBLOB="f7"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4000) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008188040f80ec0300000013d9b3b32d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2m37.66793122s ago: executing program 9 (id=2964): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/comedi1\x00', 0x204080, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./my_debugfs\x00', 0x1ff) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000000)=""/20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$sock(r2, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000027c0)="3613", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002840)="867d94a768c43a0c15264612cea2f7fb63dcb1bd3e99de74a17a9b70a8a942c6c4188faa7b86eb229a6d949bd7b4e104eb19893d11e12dee00fb2590f6", 0x3d}], 0x1, &(0x7f0000002880)}}], 0x2, 0x8000) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x2603) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000180)={&(0x7f00000001c0)=[{0x1e, 0x1000, 0x0, 0x0}, {0xce, 0x6001, 0x0, 0x0}], 0x2}) mount(0x0, &(0x7f0000000580)='./my_debugfs\x00', &(0x7f00000005c0)='debugfs\x00', 0x0, 0x0) r4 = open$dir(&(0x7f0000000040)='./my_debugfs\x00', 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:04.0/resource\x00', 0x0, 0x0) read(r5, &(0x7f0000002680)=""/128, 0x80) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) fanotify_mark(r6, 0x40, 0x20, r4, &(0x7f00000000c0)='./my_debugfs/usb/devices\x00') 2m22.200756798s ago: executing program 39 (id=2964): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/comedi1\x00', 0x204080, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./my_debugfs\x00', 0x1ff) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000000)=""/20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$sock(r2, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000027c0)="3613", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002840)="867d94a768c43a0c15264612cea2f7fb63dcb1bd3e99de74a17a9b70a8a942c6c4188faa7b86eb229a6d949bd7b4e104eb19893d11e12dee00fb2590f6", 0x3d}], 0x1, &(0x7f0000002880)}}], 0x2, 0x8000) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x2603) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000180)={&(0x7f00000001c0)=[{0x1e, 0x1000, 0x0, 0x0}, {0xce, 0x6001, 0x0, 0x0}], 0x2}) mount(0x0, &(0x7f0000000580)='./my_debugfs\x00', &(0x7f00000005c0)='debugfs\x00', 0x0, 0x0) r4 = open$dir(&(0x7f0000000040)='./my_debugfs\x00', 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:04.0/resource\x00', 0x0, 0x0) read(r5, &(0x7f0000002680)=""/128, 0x80) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) fanotify_mark(r6, 0x40, 0x20, r4, &(0x7f00000000c0)='./my_debugfs/usb/devices\x00') 1m49.636678537s ago: executing program 0 (id=3167): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c0000000000000080c57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x480c0) recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001d40)=""/4123, 0x105e}, {&(0x7f0000002d80)=""/4090, 0xfea}, {&(0x7f0000003d80)=""/280, 0x118}, {&(0x7f0000003ec0)=""/214, 0xd6}, {&(0x7f0000003fc0)=""/43, 0x2b}], 0x5, 0x0, 0x300}, 0x120) 1m49.537196174s ago: executing program 0 (id=3169): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) mmap(&(0x7f0000dde000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000040)={0x5, 0x8, 0x1}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = semget$private(0x0, 0x7, 0x0) semtimedop(r4, &(0x7f00000001c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r4, &(0x7f0000000200)=[{0x4}, {0x2}], 0x2) semctl$GETZCNT(r4, 0x2, 0xf, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r7) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x24, r8, 0x60b, 0x0, 0xfffffffe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, r5, 0x100, 0x70bd25, 0x3, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) 1m48.591189407s ago: executing program 0 (id=3173): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040040010300000009210100000122050009058103"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000600)=""/4096, &(0x7f0000001600)=0x1000) r2 = syz_open_dev$I2C(&(0x7f0000000540), 0x1, 0x2703) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000580)={0x0, 0x1, 0x5, &(0x7f00000005c0)={0x6, "b3d92cdddf96c20e9064264ccfc6000000fa00008c0000c87fb100000000000100"}}) 1m46.943096217s ago: executing program 0 (id=3182): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x4000, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in=@dev={0xac, 0x14, 0x14, 0x43}, @in=@loopback, 0x4e20, 0x13, 0x4e23, 0x1, 0xa, 0x80, 0x0, 0x2e, r3, 0xffffffffffffffff}, {0x9, 0x3, 0xfffffffffffffff8, 0x9, 0x20d80eb7, 0x7, 0x6, 0x1000}, {0xf, 0x0, 0x0, 0xab4}, 0xfffffff8, 0x6e6bb9, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d1, 0x32}, 0x2, @in=@private=0xa010100, 0x3501, 0x2, 0x3, 0x1, 0x2, 0x6, 0x9}}, 0xe8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000003c0)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x8, 0x0, 0x0, 0xfe, 0x4, [0x400, 0x0, 0x7, 0xffffffbb, 0x0, 0x0, 0x1, 0x8000000]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') write(r4, &(0x7f00000005c0)='27', 0x2) socket$unix(0x1, 0x2, 0x0) setns(0xc9, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0x5001}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000740)={'syzkaller1\x00', 0x1}) write$tun(r6, &(0x7f0000000780)={@void, @val={0x3, 0x3, 0x1b, 0x30, 0x32, 0x6}, @ipv6=@gre_packet={0x3, 0x6, '\x00', 0x44, 0x2f, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x7, 0x0, 0x0, 0x1, 0x7, 0x7}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x4, {{0xc, 0x2, 0x15, 0x3, 0x1, 0x2, 0x1, 0x7}, 0x2, {0x0, 0x8, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}}}}}, 0x76) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r8, 0xc01070ce, &(0x7f00000008c0)={0x100000000000000, 0x40001000}) 1m46.300582385s ago: executing program 0 (id=3184): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000002c0)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000003c0)={0x0, 0x1, &(0x7f0000000400)=[r2], 0x0, 0x0, 0x0, 0x0, 0x800000000000c}) 1m46.002773992s ago: executing program 0 (id=3185): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000440), 0x104, 0xaa180) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000480)=0x3) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 1m45.416645562s ago: executing program 40 (id=3185): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000440), 0x104, 0xaa180) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000480)=0x3) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 1m13.647224448s ago: executing program 2 (id=3334): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dmmidi(&(0x7f0000000000), 0x2, 0x189083) memfd_create(&(0x7f0000000540)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$rxrpc(0x21, 0x2, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x18d042, 0x15) socket(0x1d, 0x2, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='e:my_read_msr1 msr/read_msr', 0x1b) write(r0, &(0x7f0000000180)='e:my_read_msr2 msr/read_msr', 0x1b) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/events/eprobes/my_read_msr2/enable\x00', 0x1, 0x0) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a00)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000a40)=0x0) r4 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000d00)={0x0, 0x4, 0x1000}, &(0x7f0000000d80)=0x0, &(0x7f0000000dc0), &(0x7f0000000e00)) syz_io_uring_modify_offsets$flags(r5, r2, 0x68, 0x1) syz_ublk_setup_queues(0xffffffffffffffff, r3, &(0x7f0000000300)={0x0, 0xe4a9, 0x0, 0xfffffffe, 0xb2}, &(0x7f0000000ec0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x10000001}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x3a3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2b2, 0x0, r4}}], 0x1, 0x0, 0x0) 1m13.557405982s ago: executing program 2 (id=3335): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) socket$key(0xf, 0x3, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x121002, 0x0) write(r0, &(0x7f0000000780)='100', 0x3) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @private=0xa010100}}, 0x0, 0x0, 0x22, 0x0, "70a59b8ef73b52114bf0854b6d184de8fb2add2d2bb9149a8c9b8ad1ff7568565a98f80146847b0c6c4698efb8d42bed462e33eef5219090f01c40a3103cf5a30f2c0cdc339b7665ca4fe3c1d75e3fda"}, 0xd8) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{0x0, 0x3}, 'syz1\x00', 0x33}) ioctl$UI_DEV_CREATE(r1, 0x5501) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000001740)={0x2020}, 0x2020) 1m12.946008943s ago: executing program 2 (id=3338): mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001980)='./proc\x00', &(0x7f00000019c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000001a40)='100', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x2c3) syz_open_dev$evdev(0x0, 0x0, 0x0) mount$overlay(0x300, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m12.796408238s ago: executing program 2 (id=3340): socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc\x00', 0x1fb) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x7edfba1c60ffe2d7) mount(&(0x7f0000000500)=@filename='./dev/sda1\x00', &(0x7f0000000540)='./mnt\x00', &(0x7f0000000580)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000600)=ANY=[@ANYBLOB="000000004c90020017000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000cd00000000000000ffffffffffffffff00000000000000000000000800"/123]) mount(0x0, &(0x7f0000000900)='./proc\x00', &(0x7f0000000940)='proc\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100c0030904000003020200020b410600004ed9d401246005240004000d240f01f006aac09d0c000000090581032000037fff0905821f0000000100090503"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x90400, 0x20) r1 = gettid() timer_create(0x5, &(0x7f00000009c0)={0x0, 0x21, 0x800000000005, @tid=r1}, &(0x7f0000000a00)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000380)={0x6, @loopback, 0x1234, 0x0, 'lc\x00'}, 0x2c) setsockopt(r2, 0x0, 0x483, &(0x7f00000003c0)="060000007f0000011234000000000000666f6f62617200"/44, 0x2c) timer_settime(0x0, 0x0, &(0x7f0000000a40)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0xffe, &(0x7f00000002c0)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac004000202080002000b0007002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) r4 = socket(0x1e, 0x800, 0x8) getsockopt(r4, 0x2, 0x8, &(0x7f0000000b40)=""/102394, &(0x7f0000019b40)=0x18ffa) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000a80)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000ac0)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r6, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x10) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000080)={0x28, 0x5, r7, 0x0, &(0x7f00000000c0)="7f", 0x1, 0xfffffffffffff0e9}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, &(0x7f0000000000)="94", 0x1, 0x1000000007}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r7, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3}) 1m9.302899293s ago: executing program 2 (id=3350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x7f0}}, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x2000, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000f00)='./proc\x00', 0x17bb1295d531f50e, 0x20) r2 = openat(r1, &(0x7f0000000fc0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x569c00, 0x5a) write(r2, &(0x7f0000000f40)="5c783031303230333034202d30303030303030303020302030203018", 0x1c) (async, rerun: 64) unshare(0x28000600) (rerun: 64) syz_clone(0x0, 0x0, 0x3d, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000dc0)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0x0, 0x0, 0x40000000, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket$alg(0x26, 0x5, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x3c, 0x3, 0x1234, 0x5678, 0x1, 0x1000, "05200973a10185010a19031500250775089501b1020a16039501b102850216008026ff7f75100a5304950181020a5404950181020a550495018102c0"}}, 0x154) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001140)=[@text32={0x20, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001180)=[@text64={0x40, &(0x7f00000011c0)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4) (async) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000001240)=0x1000) r7 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, 0x0) (async) writev(r7, &(0x7f0000001280)=[{&(0x7f00000012c0)='4', 0x1}], 0x1) (async, rerun: 32) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000001300)=@x86={0x5, 0x8, 0xfe, 0x0, 0x200, 0x2, 0xf, 0xd, 0x9, 0x2, 0xe8, 0x6, 0x0, 0xe5, 0x74, 0x7, 0x2, 0xd, 0x9, '\x00', 0x2, 0x7}) 1m7.065393347s ago: executing program 2 (id=3359): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x1, 0x7ff, 0xf, 0xa}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x10, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0xff, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000200)={0x0, 0x11, 0x26, "51fe2357b5be22248d1cbad901c038c82fd0b2253fb96a3c9a5083f178d0d0fcbc44ff32cc29"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}}) syz_clone(0x41000000, &(0x7f0000000380)="56465f1463c291b2a94dccce67006037c3deb5bbbbe8650902bd6913abe0acab76876008b1b576eaf416392ce9617dfb496bd34f7dc76f4f95163548981436585761c38c45ecab5fcbf3db72fbd8f5ffca93e2b1c345469ce609a7da40cc6478a4278a1a8c23d33924f6076139d47e9f330e13bb39a4be3e19729ceec8a08b8d1ce3997710ba476ed784118851f8d64e5703f538cd7bd8f6f9453a520b550a745064f68fce43d58314e74b3e4705f319561ff6dad28d79dabd2f6583a945f9ceacaba3d04905a28ae5b9496bbc507a9d83e3f061", 0xd4, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="92458b90035a152885e55a57cf034e7242") syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, 0x0}, 0x0) 52.004313537s ago: executing program 41 (id=3359): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x1, 0x7ff, 0xf, 0xa}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x10, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0xff, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000200)={0x0, 0x11, 0x26, "51fe2357b5be22248d1cbad901c038c82fd0b2253fb96a3c9a5083f178d0d0fcbc44ff32cc29"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}}) syz_clone(0x41000000, &(0x7f0000000380)="56465f1463c291b2a94dccce67006037c3deb5bbbbe8650902bd6913abe0acab76876008b1b576eaf416392ce9617dfb496bd34f7dc76f4f95163548981436585761c38c45ecab5fcbf3db72fbd8f5ffca93e2b1c345469ce609a7da40cc6478a4278a1a8c23d33924f6076139d47e9f330e13bb39a4be3e19729ceec8a08b8d1ce3997710ba476ed784118851f8d64e5703f538cd7bd8f6f9453a520b550a745064f68fce43d58314e74b3e4705f319561ff6dad28d79dabd2f6583a945f9ceacaba3d04905a28ae5b9496bbc507a9d83e3f061", 0xd4, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="92458b90035a152885e55a57cf034e7242") syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, 0x0}, 0x0) 20.084046627s ago: executing program 4 (id=3542): keyctl$clear(0x3, 0xfffffffffffffffc) (async) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000040), 0x4) 19.875745593s ago: executing program 4 (id=3543): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000140)={0x1, 0x51424752, 0x1, @discrete={0xd5db, 0x80}}) (fail_nth: 5) 19.365794091s ago: executing program 4 (id=3544): socketpair(0x8, 0x6, 0xfff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000040)=""/104, &(0x7f00000000c0)=0x68) setrlimit(0xf, &(0x7f0000000100)={0x0, 0x2}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = fsmount(r2, 0x1, 0x70) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000180)=[@nested_amd_invlpga={0x17d, 0x20, {0xdddd0000, 0x1ed0}}, @rdmsr={0x66, 0x18, {0x4000009f}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_amd_stgi={0x17e, 0x10}, @wrmsr={0x65, 0x20, {0x772, 0x3ff}}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x1e, @unmapped=0xfffffffffffff000}}, @nested_load_syzos={0x136, 0x48, {0x2, 0x8, [@out_dx={0x6a, 0x28, {0x72a9, 0x1, 0x3}}]}}, @nested_vmresume={0x130, 0x18, 0x1}, @set_irq_handler={0xc8, 0x20, {0xf0, 0x1}}, @code={0xa, 0x5b, {"0f20e035000100000f22e0460f01bbd7000000c422fd238e59b3fb08b9910800000f320f093e0f01c966bad004edb9800000c00f3235004000000f3036260f7e77bdb8010000000f01c1"}}, @nested_amd_stgi={0x17e, 0x10}, @enable_nested={0x12c, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @cpuid={0x64, 0x18, {0x6, 0x23}}, @cpuid={0x64, 0x18, {0x9, 0x10001}}, @out_dx={0x6a, 0x28, {0x4d58, 0x0, 0x10000}}, @wrmsr={0x65, 0x20, {0x931, 0x80000000}}, @enable_nested={0x12c, 0x18}, @nested_intel_msr_list_add={0x155, 0x30, {0x1, 0x1, 0x40c, 0x5}}, @rdmsr={0x66, 0x18, {0x98d}}], 0x293}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x301, 0x0, 0x0, {0x8, 0x0, 0x1}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xf0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd7f}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x74, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x24c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r2, 0x84, 0x84, &(0x7f00000007c0)={0x1, @in={{0x2, 0x4e20, @empty}}, 0x4e23}, &(0x7f0000000880)=0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000008c0)={r5, 0x49}, &(0x7f0000000900)=0x8) getrlimit(0x9, &(0x7f0000000940)) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r2, 0xc0106441, &(0x7f0000000980)={0x0, 0x0, 0x8d}) ioctl$DRM_IOCTL_PANTHOR_VM_GET_STATE(r3, 0xc0086444, &(0x7f00000009c0)={r6}) r7 = syz_io_uring_complete(0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10088842}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x50}, 0x1, 0x0, 0x0, 0x24040000}, 0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000b40)={0x0, 0xffffffffffffffff}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000002b40)={0x0, 0x0}) recvmmsg(r8, &(0x7f0000002a40)=[{{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000001000)=[{&(0x7f0000000c00)=""/214, 0xd6}, {&(0x7f0000000d00)=""/46, 0x2e}, {&(0x7f0000000d40)=""/111, 0x6f}, {&(0x7f0000000dc0)=""/16, 0x10}, {&(0x7f0000000e00)=""/78, 0x4e}, {&(0x7f0000000e80)=""/213, 0xd5}, {&(0x7f0000000f80)=""/82, 0x52}], 0x7, &(0x7f0000001080)=""/4, 0x4}, 0x2}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000001140)}}, {{&(0x7f0000001180)=@nl, 0x80, &(0x7f0000001380)=[{&(0x7f0000001200)=""/90, 0x5a}, {&(0x7f0000001280)=""/105, 0x69}, {&(0x7f0000001300)=""/40, 0x28}, {&(0x7f0000001340)=""/61, 0x3d}], 0x4, &(0x7f00000013c0)=""/122, 0x7a}, 0x9}, {{&(0x7f0000001440)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000002900)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/155, 0x9b}, {&(0x7f00000015c0)=""/212, 0xd4}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/66, 0x42}, {&(0x7f0000002740)=""/138, 0x8a}, {&(0x7f0000002800)=""/195, 0xc3}], 0x7, &(0x7f0000002980)=""/171, 0xab}, 0x7}], 0x4, 0x100, &(0x7f0000002b80)={r9, r10+60000000}) dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$OCFS2_IOC_GROUP_EXTEND(r8, 0x40046f01, &(0x7f0000002bc0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000002c00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r11, 0xf502, 0x0) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000002c80)=0x6) socket$netlink(0x10, 0x3, 0x7) r12 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r12, 0x4018f514, &(0x7f0000002cc0)={0x6, 0x2, 0x3}) 18.972552537s ago: executing program 4 (id=3546): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x115) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000380)=""/225, 0xe1}], 0x1) r1 = syz_clone(0x80011, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = msgget$private(0x0, 0x342) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000280)={{0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x7f}, 0x0, 0x0, 0x3f93, 0x0, 0x9, 0x7, 0x5, 0x101, 0x5f, 0x926f}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000540)={'\x00', 0x1, 0x8, 0x4, 0xe3, 0x7, r1}) setpgid(r1, r1) setpgid(0x0, r1) r3 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f00000005c0)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffff7, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x4, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac40, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0xd00, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) syz_clone(0x62900000, &(0x7f0000000080)="c2380b4b906f5413f963a1f264712fd643920e3a8b6a521123998040e6d5d08ed5c9caa3e3eb801758", 0x29, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)="b3dc62f232b9cf3e526f66cd6fe5a46d4817bbcc0b3a29ef10a58c8851bb17047efe266cc2732a60e94595e6bf2f624391bfb9370182f93408dd5cfd06658cf4c5fb3640402cdabbdaca5d841529e74cf4c91e82889123709ab82fe619434846f614538d965a4b6ad4822d62e9cc0010e72f55486944b1") timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000004c0)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 11.471364015s ago: executing program 4 (id=3572): socket$can_bcm(0x1d, 0x2, 0x2) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000080)=[{&(0x7f00000003c0)="d80000001d0081054e81f783db4cb9040a00000000040000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccffffffff00000000b6278754ca397c388b0dd6e4edef3d9300"/216, 0xfffffffffffffeb8}], 0x1}, 0x4004001) 11.257570709s ago: executing program 3 (id=3576): mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001980)='./proc\x00', &(0x7f00000019c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000001a40)='100', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./gadget\x00', &(0x7f0000000100)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./gadget/dummy_udc\x00', 0x2, 0x84) write(r1, &(0x7f0000000180)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) openat(0xffffffffffffff9c, &(0x7f0000000200)='./gadget/ep1in-bulk\x00', 0x24000, 0x60) mkdirat(0xffffffffffffff9c, 0x0, 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x2c3) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0) 10.620823184s ago: executing program 3 (id=3577): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x22180, 0x38) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) socket$pptp(0x18, 0x1, 0x2) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r2, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(r0, r3, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x80, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) (fail_nth: 19) 10.03263296s ago: executing program 3 (id=3579): r0 = fanotify_init(0x8, 0x1) read$FUSE(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x2}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r1}) bind$alg(r2, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) timer_settime(r3, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x7) socket(0x400000000010, 0x3, 0x2) close(0x3) 8.596655792s ago: executing program 4 (id=3581): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0xfffffffe, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 8.285803115s ago: executing program 42 (id=3581): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0xfffffffe, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 6.866990007s ago: executing program 3 (id=3586): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0xffffffffffffffce, 0x2) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000005c0)={{r0}, "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"}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000004c0)={0x1, @raw_data="a425e2f1a54d24f14258313560608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000016c0)=@multiplanar_userptr={0x6, 0x2, 0x4, 0x1, 0x7, {r2, r3/1000+10000}, {0x5, 0x8, 0x1c, 0x7f, 0x1, 0x6, "5fa10838"}, 0xfffffff7, 0x2, {&(0x7f0000000440)=[{0x4, 0x1, {&(0x7f00000000c0)}, 0x98}, {0x10001, 0x5, {&(0x7f0000000400)}, 0x78cf}]}, 0x2}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4200) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000380)={0x0, 0x3, 0x0, &(0x7f0000000140)=[{}, {0x80000000}, {}], 0x1, 0x0, &(0x7f0000000280)=[{}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x1, 0x0, &(0x7f0000000340)=[{}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f00000015c0)={r5}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001740)={0x9, 0x400, {0xffffffffffffffff}, {0xee00}, 0x99, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x4, r6, 0x0, &(0x7f0000001780)) 6.487829093s ago: executing program 3 (id=3588): bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) setns(0xc9, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000140)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{0xaa7, 0x2000, 0x1, 0xfffe}, 'syz1\x00', 0x4}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r2, 0x5501) write$input_event(r2, &(0x7f0000000100)={{0x77359400}, 0x12, 0x401, 0xfffffe04}, 0xffffff2c) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$sock(r0, &(0x7f00000001c0)={&(0x7f0000000200)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x84) 6.486635701s ago: executing program 1 (id=3589): syslog(0x3, &(0x7f0000000000)=""/4096, 0x1000) syslog(0x3, &(0x7f0000001000)=""/246, 0xf6) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x480, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000001140)={0x0, 0xb}) r1 = syz_ublk_setup_io_uring(0x2c26, &(0x7f0000001180)={0x0, 0x8828, 0x800, 0x3, 0x221, 0x0, r0}, &(0x7f0000001200), &(0x7f0000001240), &(0x7f0000001280)) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000012c0)={0x3, 0x6, 0x8080000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000001300)) syslog(0x3, &(0x7f0000001340)=""/246, 0xf6) ioctl$KVM_CAP_HYPERV_SEND_IPI(r0, 0x4068aea3, &(0x7f0000001440)) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000014c0)={@initdev, 0x0}, &(0x7f0000001500)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001540)={@dev={0xfe, 0x80, '\x00', 0x38}, 0x5e, r2}) getpeername$packet(r0, &(0x7f0000001580)={0x11, 0x0, 0x0}, &(0x7f00000015c0)=0x14) bind$xdp(r0, &(0x7f0000001600)={0x2c, 0x9, r3, 0x1}, 0x10) poll(&(0x7f0000001640)=[{r0, 0x4008}, {r1, 0x20ae}, {r0, 0x20}, {r1, 0x4040}, {r1, 0x8000}, {r0, 0x30e9}, {r1, 0x1000}, {r0, 0x6010}], 0x8, 0xffff625e) r4 = syz_genetlink_get_family_id$team(&(0x7f00000016c0), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001700)={'wg2\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001880)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0xe0, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000}, 0x0) sendmsg$inet6(r1, &(0x7f0000001940)={&(0x7f00000018c0)={0xa, 0x4e21, 0x72, @loopback, 0x10000}, 0x1c, &(0x7f0000001900)}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x48, &(0x7f0000001980)=0x1, 0x4) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000019c0)) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000001a40)=0x100000001, 0x8, 0x4) ioctl$TCFLSH(r0, 0x540b, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13) mmap$KVM_DIRTY_RING(&(0x7f0000400000/0xc00000)=nil, 0x100000, 0x2000000, 0x4000010, r0, 0x40000) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000001a80)=0x7) syz_open_dev$sg(&(0x7f0000001ac0), 0x80, 0x8400) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006ac0)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001b00)=""/29, 0x1d}, {&(0x7f0000001b40)=""/157, 0x9d}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x3, &(0x7f0000002c40)=""/69, 0x45}, 0x6}, {{&(0x7f0000002cc0)=@nl=@unspec, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002d40)=""/163, 0xa3}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/93, 0x5d}, {&(0x7f0000003e80)=""/147, 0x93}], 0x4, &(0x7f0000003f80)=""/61, 0x3d}, 0x2}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003fc0)=""/238, 0xee}, {&(0x7f00000040c0)=""/68, 0x44}, {&(0x7f0000004140)=""/79, 0x4f}, {&(0x7f00000041c0)=""/79, 0x4f}, {&(0x7f0000004240)=""/4096, 0x1000}, {&(0x7f0000005240)=""/142, 0x8e}, {&(0x7f0000005300)=""/216, 0xd8}], 0x7}, 0x5}, {{&(0x7f0000005480)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000005780)=[{&(0x7f0000005500)=""/199, 0xc7}, {&(0x7f0000005600)=""/179, 0xb3}, {&(0x7f00000056c0)=""/175, 0xaf}], 0x3, &(0x7f00000057c0)=""/236, 0xec}, 0x1}, {{&(0x7f00000058c0)=@ax25={{0x3, @default}, [@remote, @default, @netrom, @rose, @bcast, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000006a40)=[{&(0x7f0000005940)=""/229, 0xe5}, {&(0x7f0000005a40)=""/4096, 0x1000}], 0x2, &(0x7f0000006a80)=""/9, 0x9}, 0xa}], 0x5, 0x140, &(0x7f0000006c00)) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x8) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000006c40)=0x3, 0x4) 5.125557859s ago: executing program 1 (id=3590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000006c0)={[0xd4e, 0x1000008, 0xffffeffffffffffb, 0x1, 0x10000, 0x8, 0x4002004c1, 0xa, 0x200005, 0x0, 0x3, 0x0, 0x401, 0x4, 0x7, 0x10000008d], 0xddcd0000, 0x100001}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r2, 0x2, &(0x7f0000000800)) ptrace$cont(0x21, r2, 0x80000001, 0x4) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x4c, r4, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x38, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000005c0)={0x2, 0x0, [{0x2, 0x4, 0x0, 0x0, @msi={0x4, 0x3, 0x6}}, {0x1, 0x2, 0x1, 0x0, @irqchip={0xd50, 0x81d}}]}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.439960573s ago: executing program 1 (id=3591): openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000780)={0x0, 0x4, 0x1000}, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2002, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = socket(0x1e, 0x2, 0x0) r7 = epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x8) write(r8, &(0x7f00000002c0)='7', 0x1) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000340)={0x2017be01}) sched_setscheduler(0x0, 0x2, 0x0) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f2, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcab9, 0x40, 0x7, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x905b, 0x0, 0xfffffffc, 0x8003aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8, 0x40040001, 0x3cc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4461, 0x80, 0x3, 0xfffffffb}}], 0x1, 0x0, 0x0) 2.912508946s ago: executing program 1 (id=3592): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='100', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/vhci\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="ff00", 0x2) 1.652290058s ago: executing program 7 (id=3594): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000009c0)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000a00)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="001c86dd0700100000111400000060ec97000fc83c00fe80"], 0xffe) 1.305187789s ago: executing program 3 (id=3595): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000280)={0x0, 0x3368, 0x100, 0x2, 0x1f5}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000003c0)=@IORING_OP_RENAMEAT={0x23, 0xe, 0x0, 0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00'}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000004c0)={0x2e, 0x9, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@any_dev={0x81, 0xe8d, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x22}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010000010000005566778899aabb0800450000140000000001170000010203040506070800000c00020006000600894f00000c0003"], 0x58}}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400000000101090250000101000080090400081202060000052406000005240008000d240f01000000000300000000152412"], 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newsa={0x13c, 0x10, 0x401, 0x0, 0x0, {{@in=@multicast1, @in=@broadcast, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x33}, @in6=@loopback, {0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffbffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha1)\x00'}, 0x0, 0xa0}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x44080}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in6=@loopback, 0x0, 0x1}]}]}, 0xfc}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0xa, 0x1234, 0x0, @loopback}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000680), 0x0) r7 = socket(0x26, 0x5, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./dev/ttyS0\x00', 0x2, 0x0) open(0x0, 0x5a980, 0x30) ioctl$TCXONC(r8, 0x540a, 0x3) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9f67}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) 1.304850559s ago: executing program 7 (id=3596): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x6, 0x7000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) pwrite64(r0, 0x0, 0x0, 0xc0c) pwrite64(r0, &(0x7f0000000140)="31323334353637382d313233342d313233342d3132333489642f0699035811036577650f3390fe05fdb603a825d9c1bcf7a2b268bc5a92ed80e380d62e079ef8c088c45a8a6b20f87ef7ec9b38ffd5b4f048a067e7", 0x55, 0xc30) pwrite64(r0, 0x0, 0x0, 0xd23) pwrite64(r0, 0x0, 0x0, 0xd2b) pwrite64(r0, 0x0, 0x0, 0x1e8000) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 1.084702279s ago: executing program 7 (id=3598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x20, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 823.213544ms ago: executing program 7 (id=3599): pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(r2, &(0x7f0000000040)='./file1\x00', 0x1) chdir(&(0x7f0000000180)='./file1\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fchdir(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r5, 0xaea2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 412.473219ms ago: executing program 7 (id=3600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$I2C_SLAVE(r3, 0x703, 0x3fc) (async) ioctl$I2C_SLAVE(r3, 0x703, 0x3fc) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, r4, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}, @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "dba06c8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x4}, {0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xf040}, 0x20004080) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x2, 0x0, [{0xc0010117, 0x0, 0x7}, {0x400000b1, 0x0, 0x3}]}) (async) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x2, 0x0, [{0xc0010117, 0x0, 0x7}, {0x400000b1, 0x0, 0x3}]}) 311.647008ms ago: executing program 1 (id=3601): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys/bus/pci/devices/0000:00:04.0/irq\x00', 0x0, 0x80) read(r0, &(0x7f0000000200), 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1\x00', 0x1ff) rmdir(&(0x7f0000000200)='./config/nullb/nullb1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000880)='1', 0x1) 488.81µs ago: executing program 7 (id=3602): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write$tun(r0, &(0x7f0000000c80)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x2c, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x40}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x1004e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x54) (fail_nth: 2) 0s ago: executing program 1 (id=3603): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x200000000000, 0x0) syz_usb_disconnect(r2) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000840)={0x80}) syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902"], 0x0) ioctl$EVIOCRMFF(r2, 0x41015500, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) clock_gettime(0xfffffffffffffffe, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)="e9eb757fce0f57e93f530b3a3522a444a3a27d98", 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000440)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000480)={0x0, 0x42cc, 0x10, 0x1, 0x250}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r6}}], 0x1, 0x0, 0x0) write$tun(r0, &(0x7f0000000c80)=ANY=[@ANYBLOB="635a0b42002c060000000000000000000000000000000000fe8000000000000000000000000000400000000000000000000a01004e2200004e240000000000000002000000010000000400000001"], 0x54) kernel console output (not intermixed with test programs): r 104 using dummy_hcd [ 911.761479][T18825] veth0_vlan: entered promiscuous mode [ 911.795671][T18825] veth1_vlan: entered promiscuous mode [ 911.887369][T18825] veth0_macvtap: entered promiscuous mode [ 911.891830][ T5747] usb 8-1: Using ep0 maxpacket: 8 [ 911.914247][ T5747] usb 8-1: New USB device found: idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 911.931478][ T5747] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.931495][ T5747] usb 8-1: Product: syz [ 911.931503][ T5747] usb 8-1: Manufacturer: syz [ 911.931512][ T5747] usb 8-1: SerialNumber: syz [ 911.963692][ T5747] usb 8-1: config 0 descriptor?? [ 911.981073][T18825] veth1_macvtap: entered promiscuous mode [ 911.995049][ T5747] gspca_main: se401-2.14.0 probing 047d:5003 [ 912.050405][T18825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 912.078059][T18825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 912.131999][ T9069] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.133298][ T9069] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.133343][ T9069] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.133362][ T9069] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.374285][ T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.374302][ T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.593542][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.593561][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.629197][T19027] ubi0: attaching mtd0 [ 912.706559][ T5302] 8021q: adding VLAN 0 to HW filter on device eth8 [ 912.710452][T19027] ubi0: scanning is finished [ 912.710591][T19027] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 913.186254][T19027] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 913.203929][T19055] ubi0: attaching mtd0 [ 913.203947][T19055] FAULT_INJECTION: forcing a failure. [ 913.203947][T19055] name failslab, interval 1, probability 0, space 0, times 0 [ 913.203963][T19055] CPU: 0 UID: 0 PID: 19055 Comm: syz.1.3463 Tainted: G L syzkaller #0 PREEMPT(full) [ 913.203978][T19055] Tainted: [L]=SOFTLOCKUP [ 913.203982][T19055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 913.203992][T19055] Call Trace: [ 913.203996][T19055] [ 913.204001][T19055] dump_stack_lvl+0xe8/0x150 [ 913.204022][T19055] should_fail_ex+0x3eb/0x540 [ 913.204042][T19055] should_failslab+0xa8/0x100 [ 913.204058][T19055] __kmalloc_cache_node_noprof+0xa5/0x620 [ 913.204072][T19055] ? __get_vm_area_node+0x195/0x330 [ 913.204088][T19055] ? __get_vm_area_node+0x195/0x330 [ 913.204106][T19055] __get_vm_area_node+0x195/0x330 [ 913.204125][T19055] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 913.204136][T19055] ? ubi_attach_mtd_dev+0x1b06/0x3a50 [ 913.204149][T19055] ? _printk+0xdd/0x130 [ 913.204178][T19055] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 913.204189][T19055] ? __raw_spin_lock_init+0x45/0x100 [ 913.204208][T19055] ? ubi_attach_mtd_dev+0x1b06/0x3a50 [ 913.204219][T19055] vmalloc_noprof+0xb2/0xe0 [ 913.204230][T19055] ? ubi_attach_mtd_dev+0x1b06/0x3a50 [ 913.204243][T19055] ubi_attach_mtd_dev+0x1b06/0x3a50 [ 913.204270][T19055] ctrl_cdev_ioctl+0x301/0x490 [ 913.204285][T19055] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 913.204301][T19055] ? bpf_lsm_file_ioctl+0x9/0x20 [ 913.204316][T19055] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 913.204328][T19055] __se_sys_ioctl+0xfc/0x170 [ 913.204345][T19055] do_syscall_64+0x166/0x520 [ 913.204360][T19055] ? trace_irq_disable+0x3b/0x140 [ 913.204373][T19055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.204384][T19055] ? clear_bhb_loop+0x70/0xc0 [ 913.204398][T19055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.204408][T19055] RIP: 0033:0x7fcd9519f559 [ 913.204419][T19055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.204429][T19055] RSP: 002b:00007fcd96118028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 913.204441][T19055] RAX: ffffffffffffffda RBX: 00007fcd95425fa0 RCX: 00007fcd9519f559 [ 913.204449][T19055] RDX: 0000200000000200 RSI: 0000000040186f40 RDI: 0000000000000003 [ 913.204456][T19055] RBP: 00007fcd96118090 R08: 0000000000000000 R09: 0000000000000000 [ 913.204464][T19055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.204474][T19055] R13: 00007fcd95426038 R14: 00007fcd95425fa0 R15: 00007ffde8ac6a28 [ 913.204497][T19055] [ 913.204519][T19055] syz.1.3463: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 913.204572][T19055] CPU: 0 UID: 0 PID: 19055 Comm: syz.1.3463 Tainted: G L syzkaller #0 PREEMPT(full) [ 913.204586][T19055] Tainted: [L]=SOFTLOCKUP [ 913.204590][T19055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 913.204596][T19055] Call Trace: [ 913.204600][T19055] [ 913.204604][T19055] dump_stack_lvl+0xe8/0x150 [ 913.204620][T19055] warn_alloc+0x24d/0x270 [ 913.204632][T19055] ? __kasan_kmalloc+0x22/0xb0 [ 913.204650][T19055] ? __pfx_warn_alloc+0x10/0x10 [ 913.204660][T19055] ? __get_vm_area_node+0x195/0x330 [ 913.204680][T19055] ? __get_vm_area_node+0x2f5/0x330 [ 913.204705][T19055] __vmalloc_node_range_noprof+0x396/0x16f0 [ 913.204716][T19055] ? _printk+0xdd/0x130 [ 913.204744][T19055] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 913.204755][T19055] ? __raw_spin_lock_init+0x45/0x100 [ 913.204772][T19055] ? ubi_attach_mtd_dev+0x1b06/0x3a50 [ 913.204785][T19055] vmalloc_noprof+0xb2/0xe0 [ 913.204795][T19055] ? ubi_attach_mtd_dev+0x1b06/0x3a50 [ 913.204808][T19055] ubi_attach_mtd_dev+0x1b06/0x3a50 [ 913.204834][T19055] ctrl_cdev_ioctl+0x301/0x490 [ 913.204848][T19055] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 913.204865][T19055] ? bpf_lsm_file_ioctl+0x9/0x20 [ 913.204878][T19055] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 913.204891][T19055] __se_sys_ioctl+0xfc/0x170 [ 913.204906][T19055] do_syscall_64+0x166/0x520 [ 913.204921][T19055] ? trace_irq_disable+0x3b/0x140 [ 913.204933][T19055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.204944][T19055] ? clear_bhb_loop+0x70/0xc0 [ 913.204957][T19055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.204967][T19055] RIP: 0033:0x7fcd9519f559 [ 913.204976][T19055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.204985][T19055] RSP: 002b:00007fcd96118028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 913.204996][T19055] RAX: ffffffffffffffda RBX: 00007fcd95425fa0 RCX: 00007fcd9519f559 [ 913.205003][T19055] RDX: 0000200000000200 RSI: 0000000040186f40 RDI: 0000000000000003 [ 913.205010][T19055] RBP: 00007fcd96118090 R08: 0000000000000000 R09: 0000000000000000 [ 913.205017][T19055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.205023][T19055] R13: 00007fcd95426038 R14: 00007fcd95425fa0 R15: 00007ffde8ac6a28 [ 913.205040][T19055] [ 913.205123][T19055] Mem-Info: [ 913.205130][T19055] active_anon:20284 inactive_anon:12 isolated_anon:0 [ 913.205130][T19055] active_file:138 inactive_file:54936 isolated_file:0 [ 913.205130][T19055] unevictable:3 dirty:39 writeback:0 [ 913.205130][T19055] slab_reclaimable:12225 slab_unreclaimable:107799 [ 913.205130][T19055] mapped:31441 shmem:3421 pagetables:2126 [ 913.205130][T19055] sec_pagetables:0 bounce:0 [ 913.205130][T19055] kernel_misc_reclaimable:0 [ 913.205130][T19055] free:1044762 free_pcp:8629 free_cma:0 [ 913.205159][T19055] Node 0 active_anon:81136kB inactive_anon:48kB active_file:552kB inactive_file:219532kB unevictable:12kB isolated(anon):0kB isolated(file):0kB mapped:125764kB dirty:156kB writeback:0kB shmem:13684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:28672kB kernel_stack:15168kB pagetables:8348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 913.205189][T19055] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 913.205246][T19055] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 913.205277][T19055] lowmem_reserve[]: 0 2460 2461 2461 2461 [ 913.205295][T19055] Node 0 DMA32 free:682832kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0kB free_highatomic:0kB active_anon:81136kB inactive_anon:48kB active_file:552kB inactive_file:219532kB unevictable:12kB writepending:156kB zspages:4kB present:3129332kB managed:2519516kB mlocked:0kB bounce:0kB free_pcp:34488kB local_pcp:34488kB free_cma:0kB [ 913.205327][T19055] lowmem_reserve[]: 0 0 1 1 1 [ 913.205344][T19055] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1320kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 913.205385][T19055] lowmem_reserve[]: 0 0 0 0 0 [ 913.205403][T19055] Node 1 Normal free:3480860kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 913.206313][T19055] lowmem_reserve[]: 0 0 0 0 0 [ 913.206351][T19055] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 913.206448][T19055] Node 0 DMA32: 1452*4kB (UME) 1346*8kB (UME) 662*16kB (ME) 650*32kB (UME) 287*64kB (UME) 230*128kB (UME) 181*256kB (UME) 98*512kB (UME) 61*1024kB (UME) 1*2048kB (E) 104*4096kB (UM) = 682784kB [ 913.206548][T19055] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 913.206618][T19055] Node 1 Normal: 7*4kB (M) 3*8kB (M) 11*16kB (UM) 9*32kB (UM) 11*64kB (UM) 5*128kB (UM) 4*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 847*4096kB (M) = 3480900kB [ 913.206706][T19055] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 913.206716][T19055] Node 0 hugepages_total=225 hugepages_free=225 hugepages_surp=0 hugepages_size=2048kB [ 913.206725][T19055] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 913.206747][T19055] Node 1 hugepages_total=225 hugepages_free=225 hugepages_surp=0 hugepages_size=2048kB [ 913.206757][T19055] 58491 total pagecache pages [ 913.206761][T19055] 0 pages in swap cache [ 913.206765][T19055] Free swap = 124992kB [ 913.206770][T19055] Total swap = 124996kB [ 913.206774][T19055] 2097051 pages RAM [ 913.206778][T19055] 0 pages HighMem/MovableOnly [ 913.206782][T19055] 435226 pages reserved [ 913.206786][T19055] 0 pages cma reserved [ 913.319808][ T5747] input: se401 as /devices/platform/dummy_hcd.7/usb8/8-1/input/input107 [ 913.645857][ T5747] usb 8-1: USB disconnect, device number 104 [ 914.693644][T19074] FAULT_INJECTION: forcing a failure. [ 914.693644][T19074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.693667][T19074] CPU: 0 UID: 0 PID: 19074 Comm: syz.3.3465 Tainted: G L syzkaller #0 PREEMPT(full) [ 914.693683][T19074] Tainted: [L]=SOFTLOCKUP [ 914.693688][T19074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 914.693695][T19074] Call Trace: [ 914.693700][T19074] [ 914.693706][T19074] dump_stack_lvl+0xe8/0x150 [ 914.693728][T19074] should_fail_ex+0x3eb/0x540 [ 914.693774][T19074] _copy_to_user+0x31/0xb0 [ 914.693788][T19074] put_user_ifreq+0x6a/0xc0 [ 914.693805][T19074] sock_do_ioctl+0x26d/0x320 [ 914.693818][T19074] ? __pfx_sock_do_ioctl+0x10/0x10 [ 914.693834][T19074] ? do_futex+0x3e7/0x4e0 [ 914.693879][T19074] sock_ioctl+0x57a/0x7e0 [ 914.693897][T19074] ? __fget_files+0x2a/0x420 [ 914.693910][T19074] ? __pfx_sock_ioctl+0x10/0x10 [ 914.693927][T19074] ? __fget_files+0x2a/0x420 [ 914.693939][T19074] ? __fget_files+0x2a/0x420 [ 914.693953][T19074] ? bpf_lsm_file_ioctl+0x9/0x20 [ 914.693967][T19074] ? __pfx_sock_ioctl+0x10/0x10 [ 914.693983][T19074] __se_sys_ioctl+0xfc/0x170 [ 914.693999][T19074] do_syscall_64+0x166/0x520 [ 914.694015][T19074] ? trace_irq_disable+0x3b/0x140 [ 914.694029][T19074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.694042][T19074] ? clear_bhb_loop+0x70/0xc0 [ 914.694066][T19074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.694078][T19074] RIP: 0033:0x7fed96d9f559 [ 914.694090][T19074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.694100][T19074] RSP: 002b:00007fed97cba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 914.694113][T19074] RAX: ffffffffffffffda RBX: 00007fed97025fa0 RCX: 00007fed96d9f559 [ 914.694122][T19074] RDX: 0000200000000000 RSI: 0000000000008933 RDI: 0000000000000007 [ 914.694130][T19074] RBP: 00007fed96e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 914.694137][T19074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 914.694144][T19074] R13: 00007fed97026038 R14: 00007fed97025fa0 R15: 00007ffe0964e478 [ 914.694161][T19074] [ 914.912258][ T5747] usb 8-1: new full-speed USB device number 105 using dummy_hcd [ 915.125654][ T5747] usb 8-1: not running at top speed; connect to a high speed hub [ 915.125679][ T5747] usb 8-1: New USB device found: idVendor=0bda, idProduct=4014, bcdDevice=0.40 [ 915.126862][ T5747] usb 8-1: config 1 has an invalid descriptor of length 47, skipping remainder of the config [ 915.126877][ T5747] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 915.126909][ T5747] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1023 [ 915.191284][ T5747] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.191303][ T5747] usb 8-1: Product: syz [ 915.191311][ T5747] usb 8-1: Manufacturer: syz [ 915.191319][ T5747] usb 8-1: SerialNumber: syz [ 915.268445][T19080] FAULT_INJECTION: forcing a failure. [ 915.268445][T19080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 915.268468][T19080] CPU: 0 UID: 0 PID: 19080 Comm: syz.1.3467 Tainted: G L syzkaller #0 PREEMPT(full) [ 915.268484][T19080] Tainted: [L]=SOFTLOCKUP [ 915.268488][T19080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 915.268495][T19080] Call Trace: [ 915.268500][T19080] [ 915.268506][T19080] dump_stack_lvl+0xe8/0x150 [ 915.268527][T19080] should_fail_ex+0x3eb/0x540 [ 915.268548][T19080] _copy_from_user+0x2d/0xb0 [ 915.268559][T19080] kstrtouint_from_user+0xd6/0x180 [ 915.268577][T19080] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 915.268597][T19080] ? lock_acquire+0x115/0x350 [ 915.268612][T19080] proc_fail_nth_write+0x8e/0x210 [ 915.268629][T19080] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 915.268649][T19080] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 915.268664][T19080] vfs_write+0x296/0xba0 [ 915.268683][T19080] ? __pfx_vfs_write+0x10/0x10 [ 915.268696][T19080] ? __fget_files+0x2a/0x420 [ 915.268708][T19080] ? __fget_files+0x3a2/0x420 [ 915.268719][T19080] ? __fget_files+0x2a/0x420 [ 915.268733][T19080] ? fdget+0x1ac/0x250 [ 915.268748][T19080] ksys_write+0x150/0x270 [ 915.268765][T19080] ? __pfx_ksys_write+0x10/0x10 [ 915.268789][T19080] do_syscall_64+0x166/0x520 [ 915.268805][T19080] ? trace_irq_disable+0x3b/0x140 [ 915.268820][T19080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.268833][T19080] ? clear_bhb_loop+0x70/0xc0 [ 915.268846][T19080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.268857][T19080] RIP: 0033:0x7fcd9515fd8e [ 915.268873][T19080] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 915.268882][T19080] RSP: 002b:00007fcd96117fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 915.268899][T19080] RAX: ffffffffffffffda RBX: 00007fcd961186c0 RCX: 00007fcd9515fd8e [ 915.268907][T19080] RDX: 0000000000000001 RSI: 00007fcd961180a0 RDI: 0000000000000004 [ 915.268914][T19080] RBP: 00007fcd96118090 R08: 0000000000000000 R09: 0000000000000000 [ 915.268921][T19080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.268927][T19080] R13: 00007fcd95426038 R14: 00007fcd95425fa0 R15: 00007ffde8ac6a28 [ 915.268946][T19080] [ 915.558853][T19086] device-mapper: table: 248:25: cache: Error opening metadata device (-EBUSY) [ 915.558870][T19086] device-mapper: ioctl: error adding target to table [ 915.584284][ T5747] usb 8-1: 1:1 : no or invalid class specific endpoint descriptor [ 915.584303][ T5747] usb 8-1: 1:1 : unsupported format bits 0x200c [ 915.584318][ T5747] usb 8-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 915.622954][ T5747] usb 8-1: 0:2 : does not exist [ 915.623764][ T5747] usb 8-1: unit 1 not found! [ 915.623776][ T5747] usb 8-1: unit 130 not found! [ 915.788988][ T5747] usb 8-1: USB disconnect, device number 105 [ 916.297795][T19106] FAULT_INJECTION: forcing a failure. [ 916.297795][T19106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 916.297857][T19106] CPU: 0 UID: 0 PID: 19106 Comm: syz.3.3471 Tainted: G L syzkaller #0 PREEMPT(full) [ 916.297873][T19106] Tainted: [L]=SOFTLOCKUP [ 916.297877][T19106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 916.297884][T19106] Call Trace: [ 916.297888][T19106] [ 916.297893][T19106] dump_stack_lvl+0xe8/0x150 [ 916.297914][T19106] should_fail_ex+0x3eb/0x540 [ 916.297935][T19106] _copy_from_user+0x2d/0xb0 [ 916.297946][T19106] ? __pfx_table_load+0x10/0x10 [ 916.297956][T19106] dm_ctl_ioctl+0x3d6/0xe10 [ 916.297966][T19106] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 916.297986][T19106] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 916.298012][T19106] ? __fget_files+0x2a/0x420 [ 916.298025][T19106] ? bpf_lsm_file_ioctl+0x9/0x20 [ 916.298040][T19106] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 916.298050][T19106] __se_sys_ioctl+0xfc/0x170 [ 916.298066][T19106] do_syscall_64+0x166/0x520 [ 916.298081][T19106] ? trace_irq_disable+0x3b/0x140 [ 916.298095][T19106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.298106][T19106] ? clear_bhb_loop+0x70/0xc0 [ 916.298119][T19106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.298129][T19106] RIP: 0033:0x7fed96d9f559 [ 916.298140][T19106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.298150][T19106] RSP: 002b:00007fed97cba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 916.298163][T19106] RAX: ffffffffffffffda RBX: 00007fed97025fa0 RCX: 00007fed96d9f559 [ 916.298171][T19106] RDX: 0000200000001880 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 916.298178][T19106] RBP: 00007fed97cba090 R08: 0000000000000000 R09: 0000000000000000 [ 916.298184][T19106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 916.298191][T19106] R13: 00007fed97026038 R14: 00007fed97025fa0 R15: 00007ffe0964e478 [ 916.298208][T19106] [ 916.578640][T19111] fuse: Unknown parameter '0xffffffffffffffff00000000000000000003' [ 916.625144][T19113] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.53264.0), cmd(9) [ 916.698410][ T33] audit: type=1326 audit(1793934802.536:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19105 comm="syz.7.3472" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcae999f559 code=0x0 [ 916.741671][T19111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.741938][T19111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.806862][T19111] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3474'. [ 917.095728][T19130] FAULT_INJECTION: forcing a failure. [ 917.095728][T19130] name failslab, interval 1, probability 0, space 0, times 0 [ 917.095750][T19130] CPU: 0 UID: 0 PID: 19130 Comm: syz.4.3478 Tainted: G L syzkaller #0 PREEMPT(full) [ 917.095772][T19130] Tainted: [L]=SOFTLOCKUP [ 917.095776][T19130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 917.095783][T19130] Call Trace: [ 917.095788][T19130] [ 917.095794][T19130] dump_stack_lvl+0xe8/0x150 [ 917.095814][T19130] should_fail_ex+0x3eb/0x540 [ 917.095834][T19130] should_failslab+0xa8/0x100 [ 917.095849][T19130] ? jbd2_journal_add_journal_head+0x90/0x4a0 [ 917.095892][T19130] kmem_cache_alloc_noprof+0x9c/0x600 [ 917.095904][T19130] ? jbd2_journal_add_journal_head+0x90/0x4a0 [ 917.095921][T19130] ? jbd2_write_access_granted+0x69/0x310 [ 917.095937][T19130] jbd2_journal_add_journal_head+0x90/0x4a0 [ 917.095956][T19130] jbd2_journal_get_write_access+0x1c7/0x230 [ 917.095971][T19130] __ext4_journal_get_write_access+0xec/0x620 [ 917.095990][T19130] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 917.096008][T19130] ? trace_ext4_update_sb+0x83/0x200 [ 917.096023][T19130] ext4_update_superblocks_fn+0x286/0xe30 [ 917.096040][T19130] ? __pfx_ext4_sb_setparams+0x10/0x10 [ 917.096053][T19130] ? mnt_get_write_access+0x66/0x280 [ 917.096069][T19130] ? __pfx_ext4_update_superblocks_fn+0x10/0x10 [ 917.096082][T19130] ? mnt_get_write_access+0x216/0x280 [ 917.096099][T19130] ? mnt_want_write_file+0x172/0x200 [ 917.096123][T19130] ext4_ioctl+0x3c42/0x4b70 [ 917.096138][T19130] ? __pfx_ext4_ioctl+0x10/0x10 [ 917.096166][T19130] ? stack_trace_save+0xa9/0x100 [ 917.096178][T19130] ? __pfx_stack_trace_save+0x10/0x10 [ 917.096189][T19130] ? kasan_save_track+0x4f/0x80 [ 917.096203][T19130] ? stack_depot_save_flags+0x33/0x810 [ 917.096220][T19130] ? __lock_acquire+0x747/0x2de0 [ 917.096233][T19130] ? kasan_save_track+0x4f/0x80 [ 917.096245][T19130] ? kasan_save_track+0x3e/0x80 [ 917.096256][T19130] ? kasan_save_free_info+0x40/0x50 [ 917.096266][T19130] ? __kasan_slab_free+0x5c/0x80 [ 917.096278][T19130] ? kfree+0x1c5/0x650 [ 917.096287][T19130] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 917.096299][T19130] ? security_file_ioctl+0xc3/0x2a0 [ 917.096310][T19130] ? __se_sys_ioctl+0x47/0x170 [ 917.096323][T19130] ? do_syscall_64+0x166/0x520 [ 917.096338][T19130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.096372][T19130] ? kasan_quarantine_put+0xbb/0x1f0 [ 917.096389][T19130] ? tomoyo_path_number_perm+0x219/0x5f0 [ 917.096403][T19130] ? tomoyo_path_number_perm+0x219/0x5f0 [ 917.096417][T19130] ? do_vfs_ioctl+0x116f/0x1530 [ 917.096433][T19130] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 917.096466][T19130] ? __fget_files+0x2a/0x420 [ 917.096479][T19130] ? __fget_files+0x2a/0x420 [ 917.096491][T19130] ? __fget_files+0x2a/0x420 [ 917.096505][T19130] ? bpf_lsm_file_ioctl+0x9/0x20 [ 917.096519][T19130] ? __pfx_ext4_ioctl+0x10/0x10 [ 917.096531][T19130] __se_sys_ioctl+0xfc/0x170 [ 917.096547][T19130] do_syscall_64+0x166/0x520 [ 917.096561][T19130] ? trace_irq_disable+0x3b/0x140 [ 917.096574][T19130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.096585][T19130] ? clear_bhb_loop+0x70/0xc0 [ 917.096598][T19130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.096608][T19130] RIP: 0033:0x7fa0c259f559 [ 917.096620][T19130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.096629][T19130] RSP: 002b:00007fa0c34c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 917.096641][T19130] RAX: ffffffffffffffda RBX: 00007fa0c2825fa0 RCX: 00007fa0c259f559 [ 917.096649][T19130] RDX: 0000000000000000 RSI: 0000000040e8662e RDI: 0000000000000003 [ 917.096656][T19130] RBP: 00007fa0c34c8090 R08: 0000000000000000 R09: 0000000000000000 [ 917.096663][T19130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.096669][T19130] R13: 00007fa0c2826038 R14: 00007fa0c2825fa0 R15: 00007ffd32c9b688 [ 917.096687][T19130] [ 917.258998][T19130] ENOMEM in journal_alloc_journal_head, retrying. [ 917.787420][T19133] FAULT_INJECTION: forcing a failure. [ 917.787420][T19133] name failslab, interval 1, probability 0, space 0, times 0 [ 917.787443][T19133] CPU: 0 UID: 0 PID: 19133 Comm: syz.1.3479 Tainted: G L syzkaller #0 PREEMPT(full) [ 917.787460][T19133] Tainted: [L]=SOFTLOCKUP [ 917.787465][T19133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 917.787472][T19133] Call Trace: [ 917.787478][T19133] [ 917.787483][T19133] dump_stack_lvl+0xe8/0x150 [ 917.787504][T19133] should_fail_ex+0x3eb/0x540 [ 917.787524][T19133] should_failslab+0xa8/0x100 [ 917.787542][T19133] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 917.787556][T19133] ? widen_string+0x3b/0x2a0 [ 917.787569][T19133] ? string+0x28a/0x2d0 [ 917.787581][T19133] ? devm_kasprintf+0x15f/0x200 [ 917.787593][T19133] ? devm_kasprintf+0x15f/0x200 [ 917.787605][T19133] ? vsnprintf+0xe42/0xef0 [ 917.787619][T19133] devm_kmalloc+0x7f/0x340 [ 917.787635][T19133] devm_kasprintf+0x15f/0x200 [ 917.787648][T19133] ? do_raw_spin_lock+0x12b/0x2f0 [ 917.787666][T19133] ? __pfx_devm_kasprintf+0x10/0x10 [ 917.787683][T19133] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 917.787698][T19133] ? devm_kmalloc+0x2b3/0x340 [ 917.787712][T19133] hci_leds_init+0xc8/0x180 [ 917.787727][T19133] hci_register_dev+0x3a9/0x8e0 [ 917.787748][T19133] vhci_create_device+0x409/0x6f0 [ 917.787765][T19133] vhci_write+0x3d1/0x4a0 [ 917.787779][T19133] vfs_write+0x612/0xba0 [ 917.787798][T19133] ? __pfx_vfs_write+0x10/0x10 [ 917.787813][T19133] ? __fget_files+0x3a2/0x420 [ 917.787826][T19133] ? __fget_files+0x2a/0x420 [ 917.787841][T19133] ? fdget+0x1ac/0x250 [ 917.787857][T19133] ksys_write+0x150/0x270 [ 917.787873][T19133] ? __pfx_ksys_write+0x10/0x10 [ 917.787896][T19133] do_syscall_64+0x166/0x520 [ 917.787911][T19133] ? trace_irq_disable+0x3b/0x140 [ 917.787925][T19133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.787937][T19133] ? clear_bhb_loop+0x70/0xc0 [ 917.787951][T19133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.787962][T19133] RIP: 0033:0x7fcd9519f559 [ 917.787973][T19133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.787983][T19133] RSP: 002b:00007fcd96118028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 917.787996][T19133] RAX: ffffffffffffffda RBX: 00007fcd95425fa0 RCX: 00007fcd9519f559 [ 917.788004][T19133] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 [ 917.788011][T19133] RBP: 00007fcd95236b20 R08: 0000000000000000 R09: 0000000000000000 [ 917.788018][T19133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.788024][T19133] R13: 00007fcd95426038 R14: 00007fcd95425fa0 R15: 00007ffde8ac6a28 [ 917.788042][T19133] [ 918.232199][T15844] IPVS: starting estimator thread 0... [ 918.262724][T19141] netlink: 'syz.7.3482': attribute type 10 has an invalid length. [ 918.269045][T19141] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode [ 918.294764][T19141] team0: Port device wlan0 added [ 918.321495][T19141] md: could not open device unknown-block(1,15). [ 918.321536][T19141] md: error, md_import_device() returned -16 [ 918.323079][T19142] IPVS: using max 53 ests per chain, 127200 per kthread [ 918.410902][T14258] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 918.562964][T14258] usb 4-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 918.565820][T14258] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.565840][T14258] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.565862][T14258] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.569584][T14258] usb 4-1: config 0 descriptor?? [ 918.989903][T14258] cp2112 0003:10C4:EA90.003F: unknown main item tag 0x0 [ 918.989928][T14258] cp2112 0003:10C4:EA90.003F: unknown main item tag 0x0 [ 918.989945][T14258] cp2112 0003:10C4:EA90.003F: unknown main item tag 0x0 [ 918.989960][T14258] cp2112 0003:10C4:EA90.003F: unknown main item tag 0x0 [ 918.990590][T14258] cp2112 0003:10C4:EA90.003F: unknown main item tag 0x0 [ 918.990611][T14258] cp2112 0003:10C4:EA90.003F: unknown main item tag 0x0 [ 918.990627][T14258] cp2112 0003:10C4:EA90.003F: unknown main item tag 0x0 [ 919.054809][T14258] cp2112 0003:10C4:EA90.003F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 919.191511][T14258] cp2112 0003:10C4:EA90.003F: Part Number: 0x00 Device Version: 0x00 [ 919.518621][T19178] FAULT_INJECTION: forcing a failure. [ 919.518621][T19178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 919.518643][T19178] CPU: 0 UID: 0 PID: 19178 Comm: syz.4.3490 Tainted: G L syzkaller #0 PREEMPT(full) [ 919.518658][T19178] Tainted: [L]=SOFTLOCKUP [ 919.518665][T19178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 919.518672][T19178] Call Trace: [ 919.518677][T19178] [ 919.518682][T19178] dump_stack_lvl+0xe8/0x150 [ 919.518703][T19178] should_fail_ex+0x3eb/0x540 [ 919.518724][T19178] _copy_to_user+0x31/0xb0 [ 919.518736][T19178] ioctl_standard_iw_point+0x9a1/0xdc0 [ 919.518749][T19178] ? trace_contention_end+0x3d/0x140 [ 919.518770][T19178] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 919.518786][T19178] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 919.518798][T19178] ? wext_ioctl_dispatch+0xa2/0x410 [ 919.518810][T19178] ? __pfx___mutex_lock+0x10/0x10 [ 919.518834][T19178] ioctl_standard_call+0xa6/0x160 [ 919.518845][T19178] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 919.518859][T19178] ? __pfx_ioctl_standard_call+0x10/0x10 [ 919.518871][T19178] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 919.518885][T19178] wext_ioctl_dispatch+0xee/0x410 [ 919.518896][T19178] ? __pfx_ioctl_standard_call+0x10/0x10 [ 919.518909][T19178] wext_handle_ioctl+0x110/0x1d0 [ 919.518922][T19178] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 919.518942][T19178] sock_ioctl+0x159/0x7e0 [ 919.518959][T19178] ? __fget_files+0x2a/0x420 [ 919.518971][T19178] ? __pfx_sock_ioctl+0x10/0x10 [ 919.518987][T19178] ? __fget_files+0x2a/0x420 [ 919.518999][T19178] ? __fget_files+0x2a/0x420 [ 919.519012][T19178] ? bpf_lsm_file_ioctl+0x9/0x20 [ 919.519027][T19178] ? __pfx_sock_ioctl+0x10/0x10 [ 919.519042][T19178] __se_sys_ioctl+0xfc/0x170 [ 919.519066][T19178] do_syscall_64+0x166/0x520 [ 919.519082][T19178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.519093][T19178] ? clear_bhb_loop+0x70/0xc0 [ 919.519106][T19178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.519117][T19178] RIP: 0033:0x7fa0c259f559 [ 919.519128][T19178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.519148][T19178] RSP: 002b:00007fa0c34c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 919.519160][T19178] RAX: ffffffffffffffda RBX: 00007fa0c2825fa0 RCX: 00007fa0c259f559 [ 919.519168][T19178] RDX: 0000200000000100 RSI: 0000000000008b19 RDI: 0000000000000004 [ 919.519175][T19178] RBP: 00007fa0c34c8090 R08: 0000000000000000 R09: 0000000000000000 [ 919.519182][T19178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.519192][T19178] R13: 00007fa0c2826038 R14: 00007fa0c2825fa0 R15: 00007ffd32c9b688 [ 919.519210][T19178] [ 919.776267][ T5785] usb 8-1: new high-speed USB device number 106 using dummy_hcd [ 920.066933][T14258] cp2112 0003:10C4:EA90.003F: error reading lock byte: -32 [ 920.094639][T19137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.095087][T19137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.120881][ T5648] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 920.904692][T19216] FAULT_INJECTION: forcing a failure. [ 920.904692][T19216] name failslab, interval 1, probability 0, space 0, times 0 [ 920.904715][T19216] CPU: 0 UID: 0 PID: 19216 Comm: syz.1.3493 Tainted: G L syzkaller #0 PREEMPT(full) [ 920.904730][T19216] Tainted: [L]=SOFTLOCKUP [ 920.904735][T19216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 920.904742][T19216] Call Trace: [ 920.904762][T19216] [ 920.904768][T19216] dump_stack_lvl+0xe8/0x150 [ 920.904789][T19216] should_fail_ex+0x3eb/0x540 [ 920.904818][T19216] should_failslab+0xa8/0x100 [ 920.904834][T19216] ? skb_clone+0x212/0x3a0 [ 920.904850][T19216] kmem_cache_alloc_noprof+0x9c/0x600 [ 920.904863][T19216] ? skb_clone+0x212/0x3a0 [ 920.904881][T19216] skb_clone+0x212/0x3a0 [ 920.904898][T19216] __netlink_deliver_tap+0x355/0x6e0 [ 920.904916][T19216] ? netlink_deliver_tap+0x2e/0x1b0 [ 920.904929][T19216] netlink_deliver_tap+0x19c/0x1b0 [ 920.904942][T19216] netlink_unicast+0x8c1/0xa80 [ 920.904968][T19216] netlink_sendmsg+0x7f0/0xb20 [ 920.904983][T19216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.904997][T19216] ? aa_sock_msg_perm+0x144/0x210 [ 920.905015][T19216] ? apparmor_socket_sendmsg+0x98/0x360 [ 920.905029][T19216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.905040][T19216] sock_sendmsg_nosec+0x14e/0x190 [ 920.905053][T19216] ____sys_sendmsg+0x54e/0x850 [ 920.905070][T19216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 920.905089][T19216] ? import_iovec+0x73/0xa0 [ 920.905108][T19216] ___sys_sendmsg+0x2a6/0x360 [ 920.905121][T19216] ? __lock_acquire+0x747/0x2de0 [ 920.905136][T19216] ? __pfx____sys_sendmsg+0x10/0x10 [ 920.905170][T19216] ? __fget_files+0x3a2/0x420 [ 920.905181][T19216] ? __fget_files+0x2a/0x420 [ 920.905198][T19216] __x64_sys_sendmsg+0x1b1/0x290 [ 920.905215][T19216] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 920.905241][T19216] do_syscall_64+0x166/0x520 [ 920.905256][T19216] ? trace_irq_disable+0x3b/0x140 [ 920.905270][T19216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.905281][T19216] ? clear_bhb_loop+0x70/0xc0 [ 920.905294][T19216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.905305][T19216] RIP: 0033:0x7fcd9519f559 [ 920.905319][T19216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.905328][T19216] RSP: 002b:00007fcd96118028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 920.905341][T19216] RAX: ffffffffffffffda RBX: 00007fcd95425fa0 RCX: 00007fcd9519f559 [ 920.905349][T19216] RDX: 0000000000000004 RSI: 0000200000000400 RDI: 0000000000000004 [ 920.905356][T19216] RBP: 00007fcd96118090 R08: 0000000000000000 R09: 0000000000000000 [ 920.905362][T19216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.905369][T19216] R13: 00007fcd95426038 R14: 00007fcd95425fa0 R15: 00007ffde8ac6a28 [ 920.905386][T19216] [ 920.907562][T19216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3493'. [ 921.435708][T14258] usb 4-1: USB disconnect, device number 79 [ 922.065744][T19236] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 922.428330][T19241] FAULT_INJECTION: forcing a failure. [ 922.428330][T19241] name failslab, interval 1, probability 0, space 0, times 0 [ 922.428353][T19241] CPU: 0 UID: 0 PID: 19241 Comm: syz.3.3495 Tainted: G L syzkaller #0 PREEMPT(full) [ 922.428369][T19241] Tainted: [L]=SOFTLOCKUP [ 922.428374][T19241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 922.428381][T19241] Call Trace: [ 922.428386][T19241] [ 922.428391][T19241] dump_stack_lvl+0xe8/0x150 [ 922.428415][T19241] should_fail_ex+0x3eb/0x540 [ 922.428436][T19241] should_failslab+0xa8/0x100 [ 922.428453][T19241] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 922.428466][T19241] ? __d_alloc+0x37/0x820 [ 922.428479][T19241] ? __d_alloc+0x37/0x820 [ 922.428494][T19241] __d_alloc+0x37/0x820 [ 922.428510][T19241] d_alloc_pseudo+0x21/0xc0 [ 922.428524][T19241] alloc_path_pseudo+0x107/0x220 [ 922.428538][T19241] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 922.428550][T19241] ? do_raw_spin_lock+0x12b/0x2f0 [ 922.428569][T19241] alloc_file_pseudo+0xa8/0x1e0 [ 922.428581][T19241] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 922.428592][T19241] ? _raw_spin_unlock+0x28/0x50 [ 922.428611][T19241] sock_alloc_file+0xb8/0x2e0 [ 922.428636][T19241] ? __sys_socket+0x12b/0x1b0 [ 922.428649][T19241] __sys_socket+0x13f/0x1b0 [ 922.428662][T19241] __x64_sys_socket+0x7a/0x90 [ 922.428675][T19241] do_syscall_64+0x166/0x520 [ 922.428691][T19241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.428703][T19241] ? clear_bhb_loop+0x70/0xc0 [ 922.428716][T19241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.428727][T19241] RIP: 0033:0x7fed96d9f559 [ 922.428738][T19241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.428748][T19241] RSP: 002b:00007fed97c99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 922.428761][T19241] RAX: ffffffffffffffda RBX: 00007fed97026090 RCX: 00007fed96d9f559 [ 922.428770][T19241] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 922.428776][T19241] RBP: 00007fed96e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 922.428783][T19241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 922.428790][T19241] R13: 00007fed97026128 R14: 00007fed97026090 R15: 00007ffe0964e478 [ 922.428807][T19241] [ 922.797986][ T5785] usb 8-1: device descriptor read/all, error -71 [ 922.990641][T19247] dlm: no locking on control device [ 923.016082][T19247] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3499'. [ 923.036385][T19247] netlink: 'syz.7.3499': attribute type 12 has an invalid length. [ 923.233873][T19257] FAULT_INJECTION: forcing a failure. [ 923.233873][T19257] name failslab, interval 1, probability 0, space 0, times 0 [ 923.233896][T19257] CPU: 0 UID: 0 PID: 19257 Comm: syz.1.3501 Tainted: G L syzkaller #0 PREEMPT(full) [ 923.233911][T19257] Tainted: [L]=SOFTLOCKUP [ 923.233916][T19257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 923.233923][T19257] Call Trace: [ 923.233927][T19257] [ 923.233932][T19257] dump_stack_lvl+0xe8/0x150 [ 923.233953][T19257] should_fail_ex+0x3eb/0x540 [ 923.233973][T19257] should_failslab+0xa8/0x100 [ 923.233989][T19257] __kmalloc_cache_node_noprof+0xa5/0x620 [ 923.234004][T19257] ? __get_vm_area_node+0x195/0x330 [ 923.234020][T19257] ? __get_vm_area_node+0x195/0x330 [ 923.234038][T19257] __get_vm_area_node+0x195/0x330 [ 923.234056][T19257] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 923.234071][T19257] ? copy_process+0x7ea/0x4510 [ 923.234090][T19257] ? percpu_ref_get_many+0x19/0x140 [ 923.234110][T19257] ? __memcg_slab_post_alloc_hook+0x46f/0xdb0 [ 923.234129][T19257] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 923.234140][T19257] ? dup_task_struct+0x52/0xa00 [ 923.234151][T19257] ? trace_kmem_cache_alloc+0x29/0xe0 [ 923.234163][T19257] ? memcpy_and_pad+0x48/0x80 [ 923.234177][T19257] __vmalloc_node_noprof+0xc2/0x100 [ 923.234188][T19257] ? copy_process+0x7ea/0x4510 [ 923.234199][T19257] ? copy_process+0x7ea/0x4510 [ 923.234213][T19257] dup_task_struct+0x2c6/0xa00 [ 923.234229][T19257] copy_process+0x7ea/0x4510 [ 923.234258][T19257] ? kstrtouint+0x6e/0xe0 [ 923.234272][T19257] ? lock_acquire+0x115/0x350 [ 923.234285][T19257] ? get_pid_task+0x20/0x1f0 [ 923.234298][T19257] ? __pfx_copy_process+0x10/0x10 [ 923.234311][T19257] ? get_pid_task+0x20/0x1f0 [ 923.234320][T19257] ? get_pid_task+0x20/0x1f0 [ 923.234334][T19257] kernel_clone+0x2d7/0x940 [ 923.234351][T19257] ? __pfx_kernel_clone+0x10/0x10 [ 923.234374][T19257] __x64_sys_clone+0x1b6/0x230 [ 923.234389][T19257] ? __pfx___x64_sys_clone+0x10/0x10 [ 923.234411][T19257] ? __pfx_ksys_write+0x10/0x10 [ 923.234431][T19257] do_syscall_64+0x166/0x520 [ 923.234447][T19257] ? trace_irq_disable+0x3b/0x140 [ 923.234460][T19257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.234471][T19257] ? clear_bhb_loop+0x70/0xc0 [ 923.234484][T19257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.234494][T19257] RIP: 0033:0x7fcd9519f559 [ 923.234505][T19257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.234515][T19257] RSP: 002b:00007fcd96117fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 923.234527][T19257] RAX: ffffffffffffffda RBX: 00007fcd95425fa0 RCX: 00007fcd9519f559 [ 923.234535][T19257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 923.234542][T19257] RBP: 00007fcd96118090 R08: 0000000000000000 R09: 0000000000000000 [ 923.234549][T19257] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 923.234555][T19257] R13: 00007fcd95426038 R14: 00007fcd95425fa0 R15: 00007ffde8ac6a28 [ 923.234572][T19257] [ 923.235739][T19257] syz.1.3501: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 923.235786][T19257] CPU: 0 UID: 0 PID: 19257 Comm: syz.1.3501 Tainted: G L syzkaller #0 PREEMPT(full) [ 923.235800][T19257] Tainted: [L]=SOFTLOCKUP [ 923.235804][T19257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 923.235811][T19257] Call Trace: [ 923.235816][T19257] [ 923.235821][T19257] dump_stack_lvl+0xe8/0x150 [ 923.235839][T19257] warn_alloc+0x24d/0x270 [ 923.235852][T19257] ? __kasan_kmalloc+0x22/0xb0 [ 923.235867][T19257] ? __pfx_warn_alloc+0x10/0x10 [ 923.235878][T19257] ? __get_vm_area_node+0x195/0x330 [ 923.235897][T19257] ? __get_vm_area_node+0x2f5/0x330 [ 923.235916][T19257] __vmalloc_node_range_noprof+0x396/0x16f0 [ 923.235932][T19257] ? percpu_ref_get_many+0x19/0x140 [ 923.235952][T19257] ? __memcg_slab_post_alloc_hook+0x46f/0xdb0 [ 923.235971][T19257] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 923.235982][T19257] ? dup_task_struct+0x52/0xa00 [ 923.235994][T19257] ? trace_kmem_cache_alloc+0x29/0xe0 [ 923.236006][T19257] ? memcpy_and_pad+0x48/0x80 [ 923.236021][T19257] __vmalloc_node_noprof+0xc2/0x100 [ 923.236031][T19257] ? copy_process+0x7ea/0x4510 [ 923.236043][T19257] ? copy_process+0x7ea/0x4510 [ 923.236057][T19257] dup_task_struct+0x2c6/0xa00 [ 923.236075][T19257] copy_process+0x7ea/0x4510 [ 923.236096][T19257] ? kstrtouint+0x6e/0xe0 [ 923.236110][T19257] ? lock_acquire+0x115/0x350 [ 923.236123][T19257] ? get_pid_task+0x20/0x1f0 [ 923.236135][T19257] ? __pfx_copy_process+0x10/0x10 [ 923.236148][T19257] ? get_pid_task+0x20/0x1f0 [ 923.236158][T19257] ? get_pid_task+0x20/0x1f0 [ 923.236172][T19257] kernel_clone+0x2d7/0x940 [ 923.236189][T19257] ? __pfx_kernel_clone+0x10/0x10 [ 923.236216][T19257] __x64_sys_clone+0x1b6/0x230 [ 923.236249][T19257] ? __pfx___x64_sys_clone+0x10/0x10 [ 923.236271][T19257] ? __pfx_ksys_write+0x10/0x10 [ 923.236291][T19257] do_syscall_64+0x166/0x520 [ 923.236307][T19257] ? trace_irq_disable+0x3b/0x140 [ 923.236320][T19257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.236331][T19257] ? clear_bhb_loop+0x70/0xc0 [ 923.236343][T19257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.236354][T19257] RIP: 0033:0x7fcd9519f559 [ 923.236365][T19257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.236374][T19257] RSP: 002b:00007fcd96117fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 923.236385][T19257] RAX: ffffffffffffffda RBX: 00007fcd95425fa0 RCX: 00007fcd9519f559 [ 923.236393][T19257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 923.236400][T19257] RBP: 00007fcd96118090 R08: 0000000000000000 R09: 0000000000000000 [ 923.236407][T19257] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 923.236413][T19257] R13: 00007fcd95426038 R14: 00007fcd95425fa0 R15: 00007ffde8ac6a28 [ 923.236430][T19257] [ 923.287454][T19257] Mem-Info: [ 923.287465][T19257] active_anon:28567 inactive_anon:14 isolated_anon:0 [ 923.287465][T19257] active_file:281 inactive_file:54952 isolated_file:0 [ 923.287465][T19257] unevictable:3 dirty:68 writeback:0 [ 923.287465][T19257] slab_reclaimable:12177 slab_unreclaimable:109826 [ 923.287465][T19257] mapped:39307 shmem:12261 pagetables:2095 [ 923.287465][T19257] sec_pagetables:0 bounce:0 [ 923.287465][T19257] kernel_misc_reclaimable:0 [ 923.287465][T19257] free:1032203 free_pcp:11463 free_cma:0 [ 923.287495][T19257] Node 0 active_anon:114268kB inactive_anon:56kB active_file:1124kB inactive_file:219596kB unevictable:12kB isolated(anon):0kB isolated(file):0kB mapped:157228kB dirty:272kB writeback:0kB shmem:49044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:28672kB kernel_stack:15200kB pagetables:8224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 923.287525][T19257] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 923.287553][T19257] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 923.287585][T19257] lowmem_reserve[]: 0 2460 2461 2461 2461 [ 923.287604][T19257] Node 0 DMA32 free:632556kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0kB free_highatomic:0kB active_anon:114268kB inactive_anon:56kB active_file:1124kB inactive_file:219596kB unevictable:12kB writepending:272kB zspages:4kB present:3129332kB managed:2519516kB mlocked:0kB bounce:0kB free_pcp:45824kB local_pcp:45824kB free_cma:0kB [ 923.287635][T19257] lowmem_reserve[]: 0 0 1 1 1 [ 923.287652][T19257] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1320kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 923.287681][T19257] lowmem_reserve[]: 0 0 0 0 0 [ 923.287704][T19257] Node 1 Normal free:3480900kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 923.287734][T19257] lowmem_reserve[]: 0 0 0 0 0 [ 923.287751][T19257] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 923.287833][T19257] Node 0 DMA32: 289*4kB (U) 59*8kB (ME) 41*16kB (E) 322*32kB (UME) 289*64kB (UME) 229*128kB (UME) 181*256kB (UME) 97*512kB (UME) 61*1024kB (UME) 2*2048kB (ME) 100*4096kB (UM) = 632556kB [ 923.287913][T19257] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 923.287967][T19257] Node 1 Normal: 7*4kB (M) 3*8kB (M) 11*16kB (UM) 9*32kB (UM) 11*64kB (UM) 5*128kB (UM) 4*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 847*4096kB (M) = 3480900kB [ 923.288046][T19257] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 923.288056][T19257] Node 0 hugepages_total=225 hugepages_free=225 hugepages_surp=0 hugepages_size=2048kB [ 923.288065][T19257] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 923.288073][T19257] Node 1 hugepages_total=225 hugepages_free=225 hugepages_surp=0 hugepages_size=2048kB [ 923.288082][T19257] 67490 total pagecache pages [ 923.288087][T19257] 0 pages in swap cache [ 923.288091][T19257] Free swap = 124992kB [ 923.288095][T19257] Total swap = 124996kB [ 923.288099][T19257] 2097051 pages RAM [ 923.288103][T19257] 0 pages HighMem/MovableOnly [ 923.288106][T19257] 435226 pages reserved [ 923.288110][T19257] 0 pages cma reserved [ 924.645446][T19265] FAULT_INJECTION: forcing a failure. [ 924.645446][T19265] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 924.645477][T19265] CPU: 0 UID: 0 PID: 19265 Comm: syz.1.3503 Tainted: G L syzkaller #0 PREEMPT(full) [ 924.645494][T19265] Tainted: [L]=SOFTLOCKUP [ 924.645498][T19265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 924.645506][T19265] Call Trace: [ 924.645510][T19265] [ 924.645516][T19265] dump_stack_lvl+0xe8/0x150 [ 924.645537][T19265] should_fail_ex+0x3eb/0x540 [ 924.645559][T19265] prepare_alloc_pages+0x21e/0x5f0 [ 924.645577][T19265] __alloc_frozen_pages_noprof+0x17c/0x410 [ 924.645593][T19265] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 924.645606][T19265] ? _raw_spin_unlock_irq+0x23/0x50 [ 924.645625][T19265] ? policy_nodemask+0x31b/0x980 [ 924.645644][T19265] alloc_pages_mpol+0x21e/0x390 [ 924.645661][T19265] ? snd_seq_oss_readq_new+0x3c/0x1d0 [ 924.645677][T19265] ___kmalloc_large_node+0x7b/0x170 [ 924.645691][T19265] __kmalloc_large_node_noprof+0x18/0x90 [ 924.645705][T19265] __kmalloc_noprof+0x3f6/0x710 [ 924.645716][T19265] ? snd_seq_queue_alloc+0x57c/0x740 [ 924.645730][T19265] ? snd_seq_oss_readq_new+0x3c/0x1d0 [ 924.645748][T19265] snd_seq_oss_readq_new+0x3c/0x1d0 [ 924.645764][T19265] snd_seq_oss_open+0x803/0xf80 [ 924.645779][T19265] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 924.645809][T19265] ? rcu_is_watching+0x16/0xb0 [ 924.645824][T19265] ? trace_contention_end+0x3d/0x140 [ 924.645850][T19265] ? __pfx___mutex_lock+0x10/0x10 [ 924.645869][T19265] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 924.645881][T19265] ? __pfx_free_devinfo+0x10/0x10 [ 924.645892][T19265] ? do_raw_spin_unlock+0xf5/0x200 [ 924.645915][T19265] ? soundcore_open+0x2da/0x490 [ 924.645929][T19265] odev_open+0x67/0xa0 [ 924.645940][T19265] chrdev_open+0x4d9/0x600 [ 924.645971][T19265] ? __pfx_chrdev_open+0x10/0x10 [ 924.645993][T19265] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 924.646014][T19265] ? devcgroup_check_permission+0x31/0x8f0 [ 924.646029][T19265] ? __pfx_chrdev_open+0x10/0x10 [ 924.646045][T19265] do_dentry_open+0x80e/0x1360 [ 924.646068][T19265] vfs_open_consume+0x4a/0x350 [ 924.646084][T19265] ? path_openat+0x16e1/0x20f0 [ 924.646100][T19265] path_openat+0x16fc/0x20f0 [ 924.646124][T19265] do_file_open+0x23e/0x4a0 [ 924.646142][T19265] ? __pfx_do_file_open+0x10/0x10 [ 924.646167][T19265] ? _raw_spin_unlock+0x28/0x50 [ 924.646180][T19265] ? alloc_fd+0x6af/0x760 [ 924.646197][T19265] do_sys_openat2+0x115/0x200 [ 924.646208][T19265] ? __se_sys_futex+0x3a8/0x450 [ 924.646225][T19265] ? __pfx_do_sys_openat2+0x10/0x10 [ 924.646239][T19265] ? rcu_is_watching+0x16/0xb0 [ 924.646256][T19265] __x64_sys_openat+0x138/0x170 [ 924.646270][T19265] do_syscall_64+0x166/0x520 [ 924.646285][T19265] ? trace_irq_disable+0x3b/0x140 [ 924.646299][T19265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.646310][T19265] ? clear_bhb_loop+0x70/0xc0 [ 924.646323][T19265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.646334][T19265] RIP: 0033:0x7fcd9519f559 [ 924.646346][T19265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.646355][T19265] RSP: 002b:00007fcd96118028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 924.646368][T19265] RAX: ffffffffffffffda RBX: 00007fcd95425fa0 RCX: 00007fcd9519f559 [ 924.646377][T19265] RDX: 0000000000149002 RSI: 00002000000005c0 RDI: ffffffffffffff9c [ 924.646386][T19265] RBP: 00007fcd95236b20 R08: 0000000000000000 R09: 0000000000000000 [ 924.646393][T19265] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000000 [ 924.646400][T19265] R13: 00007fcd95426038 R14: 00007fcd95425fa0 R15: 00007ffde8ac6a28 [ 924.646420][T19265] [ 925.256136][T19274] FAULT_INJECTION: forcing a failure. [ 925.256136][T19274] name failslab, interval 1, probability 0, space 0, times 0 [ 925.256159][T19274] CPU: 0 UID: 0 PID: 19274 Comm: syz.1.3506 Tainted: G L syzkaller #0 PREEMPT(full) [ 925.256174][T19274] Tainted: [L]=SOFTLOCKUP [ 925.256178][T19274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 925.256186][T19274] Call Trace: [ 925.256190][T19274] [ 925.256195][T19274] dump_stack_lvl+0xe8/0x150 [ 925.256216][T19274] should_fail_ex+0x3eb/0x540 [ 925.256237][T19274] should_failslab+0xa8/0x100 [ 925.256253][T19274] __kvmalloc_node_noprof+0x171/0x820 [ 925.256268][T19274] ? seq_read_iter+0x1ea/0xca0 [ 925.256283][T19274] ? seq_read_iter+0x1ea/0xca0 [ 925.256302][T19274] seq_read_iter+0x1ea/0xca0 [ 925.256320][T19274] ? kernfs_fop_read_iter+0x144/0x6a0 [ 925.256336][T19274] copy_splice_read+0x5ff/0xaa0 [ 925.256354][T19274] ? rcu_is_watching+0x16/0xb0 [ 925.256369][T19274] ? __pfx_copy_splice_read+0x10/0x10 [ 925.256388][T19274] ? trace_kmalloc+0x2a/0xf0 [ 925.256401][T19274] ? look_up_lock_class+0x57/0x110 [ 925.256417][T19274] ? register_lock_class+0x31/0x2e0 [ 925.256434][T19274] ? alloc_pipe_info+0x358/0x4c0 [ 925.256450][T19274] ? __pfx_copy_splice_read+0x10/0x10 [ 925.256461][T19274] splice_direct_to_actor+0x48b/0xcb0 [ 925.256484][T19274] ? __pfx_direct_splice_actor+0x10/0x10 [ 925.256497][T19274] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 925.256517][T19274] do_splice_direct+0x195/0x290 [ 925.256532][T19274] ? __pfx_do_splice_direct+0x10/0x10 [ 925.256545][T19274] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 925.256562][T19274] ? rw_verify_area+0x203/0x4c0 [ 925.256574][T19274] ? fdget+0x1ac/0x250 [ 925.256588][T19274] do_sendfile+0x52e/0x7c0 [ 925.256608][T19274] ? __pfx_do_sendfile+0x10/0x10 [ 925.256625][T19274] ? fdget+0x1ac/0x250 [ 925.256640][T19274] __se_sys_sendfile64+0x144/0x1a0 [ 925.256657][T19274] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 925.256679][T19274] do_syscall_64+0x166/0x520 [ 925.256694][T19274] ? trace_irq_disable+0x3b/0x140 [ 925.256707][T19274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.256718][T19274] ? clear_bhb_loop+0x70/0xc0 [ 925.256731][T19274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.256741][T19274] RIP: 0033:0x7fcd9519f559 [ 925.256753][T19274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.256762][T19274] RSP: 002b:00007fcd96118028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 925.256774][T19274] RAX: ffffffffffffffda RBX: 00007fcd95425fa0 RCX: 00007fcd9519f559 [ 925.256782][T19274] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 925.256789][T19274] RBP: 00007fcd96118090 R08: 0000000000000000 R09: 0000000000000000 [ 925.256795][T19274] R10: 0000000000000f4a R11: 0000000000000246 R12: 0000000000000001 [ 925.256802][T19274] R13: 00007fcd95426038 R14: 00007fcd95425fa0 R15: 00007ffde8ac6a28 [ 925.256819][T19274] [ 925.796912][T19281] FAULT_INJECTION: forcing a failure. [ 925.796912][T19281] name failslab, interval 1, probability 0, space 0, times 0 [ 925.796934][T19281] CPU: 0 UID: 0 PID: 19281 Comm: syz.1.3508 Tainted: G L syzkaller #0 PREEMPT(full) [ 925.796949][T19281] Tainted: [L]=SOFTLOCKUP [ 925.796953][T19281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 925.796960][T19281] Call Trace: [ 925.796965][T19281] [ 925.796970][T19281] dump_stack_lvl+0xe8/0x150 [ 925.796990][T19281] should_fail_ex+0x3eb/0x540 [ 925.797011][T19281] should_failslab+0xa8/0x100 [ 925.797034][T19281] __kvmalloc_node_noprof+0x171/0x820 [ 925.797046][T19281] ? __kmalloc_cache_noprof+0x31c/0x600 [ 925.797058][T19281] ? __kmalloc_cache_noprof+0x148/0x600 [ 925.797069][T19281] ? percpu_ref_init+0xc5/0x350 [ 925.797083][T19281] ? io_alloc_cache_init+0x42/0x140 [ 925.797096][T19281] ? io_alloc_cache_init+0x42/0x140 [ 925.797113][T19281] io_alloc_cache_init+0x42/0x140 [ 925.797129][T19281] io_ring_ctx_alloc+0x508/0xb80 [ 925.797145][T19281] io_uring_create+0x50/0x980 [ 925.797159][T19281] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 925.797175][T19281] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 925.797193][T19281] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 925.797216][T19281] ? __pfx_ksys_write+0x10/0x10 [ 925.797236][T19281] do_syscall_64+0x166/0x520 [ 925.797251][T19281] ? trace_irq_disable+0x3b/0x140 [ 925.797264][T19281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.797275][T19281] ? clear_bhb_loop+0x70/0xc0 [ 925.797288][T19281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.797301][T19281] RIP: 0033:0x7fcd9519f559 [ 925.797312][T19281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.797321][T19281] RSP: 002b:00007fcd96117fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 925.797334][T19281] RAX: ffffffffffffffda RBX: 0000200000000400 RCX: 00007fcd9519f559 [ 925.797355][T19281] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000002 [ 925.797362][T19281] RBP: 00007fcd96118090 R08: 0000000000000000 R09: 0000000000000101 [ 925.797369][T19281] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 925.797376][T19281] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffde8ac6a28 [ 925.797391][T19281] [ 926.773639][ T5785] usb 8-1: new high-speed USB device number 108 using dummy_hcd [ 926.931860][ T5785] usb 8-1: Using ep0 maxpacket: 16 [ 926.932854][ T5785] usb 8-1: New USB device found: idVendor=0c70, idProduct=f00d, bcdDevice=0.00 [ 926.935299][ T5785] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 926.935328][ T5785] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.984932][ T5785] usb 8-1: config 0 descriptor?? [ 926.992124][T19301] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 927.215827][T19301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.216133][T19301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.241158][T19317] FAULT_INJECTION: forcing a failure. [ 927.241158][T19317] name failslab, interval 1, probability 0, space 0, times 0 [ 927.241186][T19317] CPU: 0 UID: 0 PID: 19317 Comm: syz.4.3517 Tainted: G L syzkaller #0 PREEMPT(full) [ 927.241202][T19317] Tainted: [L]=SOFTLOCKUP [ 927.241207][T19317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 927.241215][T19317] Call Trace: [ 927.241219][T19317] [ 927.241233][T19317] dump_stack_lvl+0xe8/0x150 [ 927.241255][T19317] should_fail_ex+0x3eb/0x540 [ 927.241277][T19317] should_failslab+0xa8/0x100 [ 927.241294][T19317] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 927.241305][T19317] ? do_epoll_create+0x75/0x400 [ 927.241324][T19317] ? __d_alloc+0x37/0x820 [ 927.241336][T19317] ? __d_alloc+0x37/0x820 [ 927.241352][T19317] __d_alloc+0x37/0x820 [ 927.241368][T19317] d_alloc_pseudo+0x21/0xc0 [ 927.241382][T19317] alloc_path_pseudo+0x107/0x220 [ 927.241395][T19317] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 927.241411][T19317] alloc_file_pseudo+0xa8/0x1e0 [ 927.241424][T19317] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 927.241436][T19317] ? alloc_fd+0x6af/0x760 [ 927.241450][T19317] anon_inode_getfile+0xc5/0x1a0 [ 927.241463][T19317] do_epoll_create+0x2eb/0x400 [ 927.241480][T19317] __x64_sys_epoll_create1+0x37/0x40 [ 927.241495][T19317] do_syscall_64+0x166/0x520 [ 927.241511][T19317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.241522][T19317] ? clear_bhb_loop+0x70/0xc0 [ 927.241535][T19317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.241546][T19317] RIP: 0033:0x7fa0c259f559 [ 927.241558][T19317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.241567][T19317] RSP: 002b:00007fa0c34c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 927.241580][T19317] RAX: ffffffffffffffda RBX: 00007fa0c2825fa0 RCX: 00007fa0c259f559 [ 927.241588][T19317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 927.241595][T19317] RBP: 00007fa0c2636b20 R08: 0000000000000000 R09: 0000000000000000 [ 927.241602][T19317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 927.241608][T19317] R13: 00007fa0c2826038 R14: 00007fa0c2825fa0 R15: 00007ffd32c9b688 [ 927.241626][T19317] [ 927.754301][ T5785] aquacomputer_d5next 0003:0C70:F00D.0040: unknown main item tag 0x0 [ 927.759618][ T5785] aquacomputer_d5next 0003:0C70:F00D.0040: unknown main item tag 0x0 [ 927.759645][ T5785] aquacomputer_d5next 0003:0C70:F00D.0040: unknown main item tag 0x0 [ 927.759661][ T5785] aquacomputer_d5next 0003:0C70:F00D.0040: unknown main item tag 0x0 [ 927.759677][ T5785] aquacomputer_d5next 0003:0C70:F00D.0040: unknown main item tag 0x0 [ 927.759693][ T5785] aquacomputer_d5next 0003:0C70:F00D.0040: unknown main item tag 0x0 [ 927.759709][ T5785] aquacomputer_d5next 0003:0C70:F00D.0040: unknown main item tag 0x0 [ 927.759724][ T5785] aquacomputer_d5next 0003:0C70:F00D.0040: unknown main item tag 0x0 [ 927.759741][ T5785] aquacomputer_d5next 0003:0C70:F00D.0040: unknown main item tag 0x0 [ 927.759757][ T5785] aquacomputer_d5next 0003:0C70:F00D.0040: unknown main item tag 0x0 [ 927.760533][ T5785] aquacomputer_d5next 0003:0C70:F00D.0040: collection stack underflow [ 927.760549][ T5785] aquacomputer_d5next 0003:0C70:F00D.0040: item 0 0 0 12 parsing failed [ 927.877231][ T5785] aquacomputer_d5next 0003:0C70:F00D.0040: probe with driver aquacomputer_d5next failed with error -22 [ 927.958148][ T5747] usb 8-1: USB disconnect, device number 108 [ 928.067053][ T33] audit: type=1326 audit(1793934813.916:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19325 comm="syz.3.3520" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed96d9f559 code=0x0 [ 928.177524][T19331] gadgetfs: bound to dummy_udc driver [ 928.410771][T14258] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 928.410962][ C0] gadgetfs: connected [ 928.411070][T14258] gadgetfs: disconnected [ 928.633949][T19349] FAULT_INJECTION: forcing a failure. [ 928.633949][T19349] name failslab, interval 1, probability 0, space 0, times 0 [ 928.633971][T19349] CPU: 0 UID: 0 PID: 19349 Comm: syz.7.3523 Tainted: G L syzkaller #0 PREEMPT(full) [ 928.633987][T19349] Tainted: [L]=SOFTLOCKUP [ 928.633991][T19349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 928.633998][T19349] Call Trace: [ 928.634003][T19349] [ 928.634008][T19349] dump_stack_lvl+0xe8/0x150 [ 928.634028][T19349] should_fail_ex+0x3eb/0x540 [ 928.634049][T19349] should_failslab+0xa8/0x100 [ 928.634066][T19349] __kmalloc_noprof+0xf9/0x710 [ 928.634079][T19349] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 928.634102][T19349] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 928.634121][T19349] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 928.634141][T19349] genl_family_rcv_msg_doit+0xda/0x340 [ 928.634159][T19349] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 928.634178][T19349] ? apparmor_capable+0x126/0x170 [ 928.634191][T19349] ? bpf_lsm_capable+0x9/0x20 [ 928.634207][T19349] ? security_capable+0x7e/0x2c0 [ 928.634224][T19349] genl_rcv_msg+0x614/0x7a0 [ 928.634242][T19349] ? __pfx_genl_rcv_msg+0x10/0x10 [ 928.634255][T19349] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 928.634270][T19349] ? __pfx_nl802154_trigger_scan+0x10/0x10 [ 928.634283][T19349] ? __pfx_nl802154_post_doit+0x10/0x10 [ 928.634307][T19349] netlink_rcv_skb+0x226/0x4a0 [ 928.634326][T19349] ? __pfx_genl_rcv_msg+0x10/0x10 [ 928.634342][T19349] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 928.634371][T19349] ? down_read+0x2b9/0x320 [ 928.634387][T19349] genl_rcv+0x28/0x40 [ 928.634400][T19349] netlink_unicast+0x8ef/0xa80 [ 928.634427][T19349] netlink_sendmsg+0x7f0/0xb20 [ 928.634442][T19349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 928.634456][T19349] ? aa_sock_msg_perm+0x144/0x210 [ 928.634474][T19349] ? apparmor_socket_sendmsg+0x98/0x360 [ 928.634488][T19349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 928.634502][T19349] sock_sendmsg_nosec+0x14e/0x190 [ 928.634516][T19349] ____sys_sendmsg+0x54e/0x850 [ 928.634533][T19349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 928.634552][T19349] ? import_iovec+0x73/0xa0 [ 928.634572][T19349] ___sys_sendmsg+0x2a6/0x360 [ 928.634586][T19349] ? __lock_acquire+0x747/0x2de0 [ 928.634602][T19349] ? __pfx____sys_sendmsg+0x10/0x10 [ 928.634637][T19349] ? __fget_files+0x3a2/0x420 [ 928.634650][T19349] ? __fget_files+0x2a/0x420 [ 928.634668][T19349] __x64_sys_sendmsg+0x1b1/0x290 [ 928.634685][T19349] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 928.634713][T19349] do_syscall_64+0x166/0x520 [ 928.634728][T19349] ? trace_irq_disable+0x3b/0x140 [ 928.634764][T19349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.634775][T19349] ? clear_bhb_loop+0x70/0xc0 [ 928.634789][T19349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.634800][T19349] RIP: 0033:0x7fcae999f559 [ 928.634811][T19349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.634820][T19349] RSP: 002b:00007fcaea893028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 928.634835][T19349] RAX: ffffffffffffffda RBX: 00007fcae9c26090 RCX: 00007fcae999f559 [ 928.634843][T19349] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 928.634850][T19349] RBP: 00007fcaea893090 R08: 0000000000000000 R09: 0000000000000000 [ 928.634857][T19349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.634863][T19349] R13: 00007fcae9c26128 R14: 00007fcae9c26090 R15: 00007ffff8dfcb78 [ 928.634881][T19349] [ 929.535537][T19363] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3524'. [ 929.583581][T19363] support for the xor transformation has been removed. [ 929.794151][T19374] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.16777216.0), cmd(9) [ 929.857801][T19379] FAULT_INJECTION: forcing a failure. [ 929.857801][T19379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.857822][T19379] CPU: 0 UID: 0 PID: 19379 Comm: syz.1.3531 Tainted: G L syzkaller #0 PREEMPT(full) [ 929.857838][T19379] Tainted: [L]=SOFTLOCKUP [ 929.857842][T19379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 929.857849][T19379] Call Trace: [ 929.857854][T19379] [ 929.857859][T19379] dump_stack_lvl+0xe8/0x150 [ 929.857879][T19379] should_fail_ex+0x3eb/0x540 [ 929.857900][T19379] _copy_to_user+0x31/0xb0 [ 929.857912][T19379] dm_ctl_ioctl+0x300/0xe10 [ 929.857923][T19379] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 929.857944][T19379] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 929.857980][T19379] ? __fget_files+0x2a/0x420 [ 929.857994][T19379] ? bpf_lsm_file_ioctl+0x9/0x20 [ 929.858009][T19379] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 929.858019][T19379] __se_sys_ioctl+0xfc/0x170 [ 929.858034][T19379] do_syscall_64+0x166/0x520 [ 929.858050][T19379] ? trace_irq_disable+0x3b/0x140 [ 929.858064][T19379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.858075][T19379] ? clear_bhb_loop+0x70/0xc0 [ 929.858087][T19379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.858098][T19379] RIP: 0033:0x7fcd9519f559 [ 929.858108][T19379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.858118][T19379] RSP: 002b:00007fcd96118028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 929.858130][T19379] RAX: ffffffffffffffda RBX: 00007fcd95425fa0 RCX: 00007fcd9519f559 [ 929.858138][T19379] RDX: 0000200000000640 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 929.858146][T19379] RBP: 00007fcd96118090 R08: 0000000000000000 R09: 0000000000000000 [ 929.858153][T19379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.858159][T19379] R13: 00007fcd95426038 R14: 00007fcd95425fa0 R15: 00007ffde8ac6a28 [ 929.858176][T19379] [ 930.099208][T19377] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 930.248699][T19387] nfs: Unknown parameter 'prt' [ 930.439825][T19389] loop4: detected capacity change from 0 to 2640 [ 930.450892][T14258] usb 8-1: new high-speed USB device number 109 using dummy_hcd [ 930.478587][ T6464] Buffer I/O error on dev loop4, logical block 0, async page read [ 930.479003][ T6464] Buffer I/O error on dev loop4, logical block 0, async page read [ 930.502534][ T6464] Buffer I/O error on dev loop4, logical block 0, async page read [ 930.515981][ T6464] Buffer I/O error on dev loop4, logical block 0, async page read [ 930.516300][ T6464] Buffer I/O error on dev loop4, logical block 0, async page read [ 930.606971][T14258] usb 8-1: Using ep0 maxpacket: 16 [ 930.610547][T14258] usb 8-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 930.623275][T14258] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 930.659197][T14258] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.659214][T14258] usb 8-1: Product: syz [ 930.659222][T14258] usb 8-1: Manufacturer: syz [ 930.659230][T14258] usb 8-1: SerialNumber: syz [ 930.692152][T14258] usb 8-1: config 0 descriptor?? [ 930.699336][T14258] hub 8-1:0.0: bad descriptor, ignoring hub [ 930.702578][T14258] hub 8-1:0.0: probe with driver hub failed with error -5 [ 930.733300][T14258] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 930.999237][T19405] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3532'. [ 931.033953][T19404] FAULT_INJECTION: forcing a failure. [ 931.033953][T19404] name failslab, interval 1, probability 0, space 0, times 0 [ 931.033975][T19404] CPU: 0 UID: 0 PID: 19404 Comm: syz.4.3537 Tainted: G L syzkaller #0 PREEMPT(full) [ 931.033991][T19404] Tainted: [L]=SOFTLOCKUP [ 931.033996][T19404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 931.034003][T19404] Call Trace: [ 931.034007][T19404] [ 931.034013][T19404] dump_stack_lvl+0xe8/0x150 [ 931.034034][T19404] should_fail_ex+0x3eb/0x540 [ 931.034054][T19404] should_failslab+0xa8/0x100 [ 931.034073][T19404] __kmalloc_noprof+0xf9/0x710 [ 931.034086][T19404] ? ovl_lookup+0x747/0x1bf0 [ 931.034097][T19404] ? ovl_lookup+0x747/0x1bf0 [ 931.034111][T19404] ovl_lookup+0x747/0x1bf0 [ 931.034131][T19404] ? __d_alloc_parallel+0x156f/0x1700 [ 931.034145][T19404] ? __d_alloc_parallel+0x39e/0x1700 [ 931.034167][T19404] ? __pfx_ovl_lookup+0x10/0x10 [ 931.034180][T19404] ? __pfx___d_alloc_parallel+0x10/0x10 [ 931.034193][T19404] ? lock_acquire+0x115/0x350 [ 931.034214][T19404] __lookup_slow+0x1fb/0x2f0 [ 931.034229][T19404] lookup_slow+0x59/0x80 [ 931.034241][T19404] path_lookupat+0x3f5/0x8c0 [ 931.034261][T19404] filename_lookup+0x265/0x5d0 [ 931.034271][T19404] ? do_syscall_64+0x166/0x520 [ 931.034289][T19404] ? __pfx_filename_lookup+0x10/0x10 [ 931.034314][T19404] ? lock_acquire+0x115/0x350 [ 931.034331][T19404] filename_setxattr+0xc2/0x630 [ 931.034352][T19404] ? __might_fault+0xaf/0x130 [ 931.034370][T19404] ? __pfx_filename_setxattr+0x10/0x10 [ 931.034385][T19404] ? do_getname+0x151/0x250 [ 931.034396][T19404] path_setxattrat+0x408/0x450 [ 931.034416][T19404] ? __pfx_path_setxattrat+0x10/0x10 [ 931.034445][T19404] ? ksys_write+0x242/0x270 [ 931.034460][T19404] ? __pfx_ksys_write+0x10/0x10 [ 931.034476][T19404] __x64_sys_setxattr+0xbc/0xe0 [ 931.034491][T19404] do_syscall_64+0x166/0x520 [ 931.034506][T19404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.034538][T19404] ? clear_bhb_loop+0x70/0xc0 [ 931.034551][T19404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.034562][T19404] RIP: 0033:0x7fa0c259f559 [ 931.034573][T19404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.034583][T19404] RSP: 002b:00007fa0c34c8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 931.034595][T19404] RAX: ffffffffffffffda RBX: 00007fa0c2825fa0 RCX: 00007fa0c259f559 [ 931.034603][T19404] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000200000000400 [ 931.034611][T19404] RBP: 00007fa0c34c8090 R08: 0000000000000002 R09: 0000000000000000 [ 931.034617][T19404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.034624][T19404] R13: 00007fa0c2826038 R14: 00007fa0c2825fa0 R15: 00007ffd32c9b688 [ 931.034641][T19404] [ 931.812638][ T5747] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 931.923895][T19426] FAULT_INJECTION: forcing a failure. [ 931.923895][T19426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 931.923916][T19426] CPU: 0 UID: 0 PID: 19426 Comm: syz.4.3543 Tainted: G L syzkaller #0 PREEMPT(full) [ 931.923931][T19426] Tainted: [L]=SOFTLOCKUP [ 931.923935][T19426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 931.923942][T19426] Call Trace: [ 931.923947][T19426] [ 931.923952][T19426] dump_stack_lvl+0xe8/0x150 [ 931.923973][T19426] should_fail_ex+0x3eb/0x540 [ 931.923996][T19426] _copy_from_user+0x2d/0xb0 [ 931.924007][T19426] kstrtouint_from_user+0xd6/0x180 [ 931.924023][T19426] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 931.924042][T19426] ? lock_acquire+0x115/0x350 [ 931.924057][T19426] proc_fail_nth_write+0x8e/0x210 [ 931.924074][T19426] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 931.924094][T19426] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 931.924109][T19426] vfs_write+0x296/0xba0 [ 931.924128][T19426] ? __pfx_vfs_write+0x10/0x10 [ 931.924142][T19426] ? __fget_files+0x2a/0x420 [ 931.924153][T19426] ? __fget_files+0x3a2/0x420 [ 931.924165][T19426] ? __fget_files+0x2a/0x420 [ 931.924178][T19426] ? fdget+0x1ac/0x250 [ 931.924194][T19426] ksys_write+0x150/0x270 [ 931.924216][T19426] ? __pfx_ksys_write+0x10/0x10 [ 931.924229][T19426] ? __pfx_v4l2_ioctl+0x10/0x10 [ 931.924247][T19426] do_syscall_64+0x166/0x520 [ 931.924263][T19426] ? trace_irq_disable+0x3b/0x140 [ 931.924276][T19426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.924287][T19426] ? clear_bhb_loop+0x70/0xc0 [ 931.924301][T19426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.924311][T19426] RIP: 0033:0x7fa0c255fd8e [ 931.924322][T19426] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 931.924332][T19426] RSP: 002b:00007fa0c34c7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 931.924345][T19426] RAX: ffffffffffffffda RBX: 00007fa0c34c86c0 RCX: 00007fa0c255fd8e [ 931.924353][T19426] RDX: 0000000000000001 RSI: 00007fa0c34c80a0 RDI: 0000000000000004 [ 931.924360][T19426] RBP: 00007fa0c34c8090 R08: 0000000000000000 R09: 0000000000000000 [ 931.924367][T19426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.924373][T19426] R13: 00007fa0c2826038 R14: 00007fa0c2825fa0 R15: 00007ffd32c9b688 [ 931.924391][T19426] [ 932.023749][ T5747] usb 4-1: New USB device found: idVendor=046d, idProduct=08f3, bcdDevice=b.28 [ 932.047784][ T5747] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 932.047819][ T5747] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.047830][ T5747] usb 4-1: config 0 has no interface number 0 [ 932.184939][T19382] sound midiC3D0: rawmidi drain error (avail = 3987, buffer_size = 4096) [ 932.209248][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.259698][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.259715][ T5747] usb 4-1: Product: syz [ 932.259723][ T5747] usb 4-1: Manufacturer: syz [ 932.259731][ T5747] usb 4-1: SerialNumber: syz [ 932.318607][ T5747] usb 4-1: config 0 descriptor?? [ 932.339806][ T5747] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 932.339830][ T5747] uvcvideo 4-1:0.105: No valid video chain found. [ 932.605613][ T5747] usb 8-1: USB disconnect, device number 109 [ 932.783840][T19437] FAULT_INJECTION: forcing a failure. [ 932.783840][T19437] name failslab, interval 1, probability 0, space 0, times 0 [ 932.783862][T19437] CPU: 0 UID: 0 PID: 19437 Comm: syz.1.3545 Tainted: G L syzkaller #0 PREEMPT(full) [ 932.783878][T19437] Tainted: [L]=SOFTLOCKUP [ 932.783882][T19437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 932.783889][T19437] Call Trace: [ 932.783894][T19437] [ 932.783899][T19437] dump_stack_lvl+0xe8/0x150 [ 932.783920][T19437] should_fail_ex+0x3eb/0x540 [ 932.783940][T19437] should_failslab+0xa8/0x100 [ 932.783955][T19437] ? skb_clone+0x212/0x3a0 [ 932.783970][T19437] kmem_cache_alloc_noprof+0x9c/0x600 [ 932.783984][T19437] ? skb_clone+0x212/0x3a0 [ 932.784002][T19437] skb_clone+0x212/0x3a0 [ 932.784018][T19437] __netlink_deliver_tap+0x355/0x6e0 [ 932.784036][T19437] ? netlink_deliver_tap+0x2e/0x1b0 [ 932.784054][T19437] netlink_deliver_tap+0x19c/0x1b0 [ 932.784066][T19437] netlink_unicast+0x8c1/0xa80 [ 932.784091][T19437] netlink_sendmsg+0x7f0/0xb20 [ 932.784106][T19437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 932.784120][T19437] ? aa_sock_msg_perm+0x144/0x210 [ 932.784138][T19437] ? apparmor_socket_sendmsg+0x98/0x360 [ 932.784152][T19437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 932.784163][T19437] sock_sendmsg_nosec+0x14e/0x190 [ 932.784176][T19437] ____sys_sendmsg+0x54e/0x850 [ 932.784193][T19437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 932.784212][T19437] ? import_iovec+0x73/0xa0 [ 932.784230][T19437] ___sys_sendmsg+0x2a6/0x360 [ 932.784243][T19437] ? __lock_acquire+0x747/0x2de0 [ 932.784257][T19437] ? __pfx____sys_sendmsg+0x10/0x10 [ 932.784290][T19437] ? __fget_files+0x3a2/0x420 [ 932.784302][T19437] ? __fget_files+0x2a/0x420 [ 932.784319][T19437] __x64_sys_sendmsg+0x1b1/0x290 [ 932.784334][T19437] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 932.784360][T19437] do_syscall_64+0x166/0x520 [ 932.784375][T19437] ? trace_irq_disable+0x3b/0x140 [ 932.784389][T19437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.784400][T19437] ? clear_bhb_loop+0x70/0xc0 [ 932.784414][T19437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.784424][T19437] RIP: 0033:0x7fcd9519f559 [ 932.784435][T19437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.784445][T19437] RSP: 002b:00007fcd96118028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 932.784457][T19437] RAX: ffffffffffffffda RBX: 00007fcd95425fa0 RCX: 00007fcd9519f559 [ 932.784465][T19437] RDX: 0000000004008084 RSI: 0000200000000bc0 RDI: 0000000000000004 [ 932.784472][T19437] RBP: 00007fcd96118090 R08: 0000000000000000 R09: 0000000000000000 [ 932.784479][T19437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.784485][T19437] R13: 00007fcd95426038 R14: 00007fcd95425fa0 R15: 00007ffde8ac6a28 [ 932.784502][T19437] [ 933.187127][ T5747] usb 4-1: USB disconnect, device number 80 [ 933.517581][T19446] FAULT_INJECTION: forcing a failure. [ 933.517581][T19446] name failslab, interval 1, probability 0, space 0, times 0 [ 933.517605][T19446] CPU: 0 UID: 0 PID: 19446 Comm: syz.3.3547 Tainted: G L syzkaller #0 PREEMPT(full) [ 933.517622][T19446] Tainted: [L]=SOFTLOCKUP [ 933.517627][T19446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 933.517634][T19446] Call Trace: [ 933.517640][T19446] [ 933.517645][T19446] dump_stack_lvl+0xe8/0x150 [ 933.517667][T19446] should_fail_ex+0x3eb/0x540 [ 933.517688][T19446] should_failslab+0xa8/0x100 [ 933.517705][T19446] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 933.517719][T19446] ? devm_led_trigger_register+0x37/0xc0 [ 933.517734][T19446] ? devm_led_trigger_register+0x37/0xc0 [ 933.517750][T19446] ? __pfx_devm_led_trigger_release+0x10/0x10 [ 933.517766][T19446] __devres_alloc_node+0x4c/0x160 [ 933.517785][T19446] devm_led_trigger_register+0x37/0xc0 [ 933.517801][T19446] hci_leds_init+0xf4/0x180 [ 933.517816][T19446] hci_register_dev+0x3a9/0x8e0 [ 933.517837][T19446] vhci_create_device+0x409/0x6f0 [ 933.517854][T19446] vhci_write+0x3d1/0x4a0 [ 933.517869][T19446] vfs_write+0x612/0xba0 [ 933.517891][T19446] ? __pfx_vfs_write+0x10/0x10 [ 933.517908][T19446] ? __fget_files+0x3a2/0x420 [ 933.517921][T19446] ? __fget_files+0x2a/0x420 [ 933.517935][T19446] ? fdget+0x1ac/0x250 [ 933.517952][T19446] ksys_write+0x150/0x270 [ 933.517967][T19446] ? __pfx_ksys_write+0x10/0x10 [ 933.517986][T19446] do_syscall_64+0x166/0x520 [ 933.518003][T19446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.518014][T19446] ? clear_bhb_loop+0x70/0xc0 [ 933.518028][T19446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.518039][T19446] RIP: 0033:0x7fed96d9f559 [ 933.518051][T19446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.518061][T19446] RSP: 002b:00007fed97cba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 933.518073][T19446] RAX: ffffffffffffffda RBX: 00007fed97025fa0 RCX: 00007fed96d9f559 [ 933.518082][T19446] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 [ 933.518089][T19446] RBP: 00007fed96e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 933.518095][T19446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 933.518102][T19446] R13: 00007fed97026038 R14: 00007fed97025fa0 R15: 00007ffe0964e478 [ 933.518120][T19446] [ 933.997423][T19453] FAULT_INJECTION: forcing a failure. [ 933.997423][T19453] name failslab, interval 1, probability 0, space 0, times 0 [ 933.997446][T19453] CPU: 0 UID: 0 PID: 19453 Comm: syz.7.3549 Tainted: G L syzkaller #0 PREEMPT(full) [ 933.997462][T19453] Tainted: [L]=SOFTLOCKUP [ 933.997467][T19453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 933.997475][T19453] Call Trace: [ 933.997480][T19453] [ 933.997486][T19453] dump_stack_lvl+0xe8/0x150 [ 933.997507][T19453] should_fail_ex+0x3eb/0x540 [ 933.997528][T19453] should_failslab+0xa8/0x100 [ 933.997553][T19453] __kmalloc_cache_noprof+0x9e/0x600 [ 933.997567][T19453] ? gadgetfs_bind+0x2ef/0xb10 [ 933.997584][T19453] ? gadgetfs_bind+0x2ef/0xb10 [ 933.997604][T19453] gadgetfs_bind+0x2ef/0xb10 [ 933.997627][T19453] ? __pfx_gadgetfs_bind+0x10/0x10 [ 933.997643][T19453] gadget_bind_driver+0x2ca/0x9e0 [ 933.997665][T19453] ? __pfx_gadget_bind_driver+0x10/0x10 [ 933.997679][T19453] really_probe+0x254/0xae0 [ 933.997698][T19453] __driver_probe_device+0x1e8/0x360 [ 933.997715][T19453] driver_probe_device+0x4f/0x240 [ 933.997733][T19453] __driver_attach+0x34e/0x630 [ 933.997751][T19453] bus_for_each_dev+0x23b/0x2c0 [ 933.997763][T19453] ? __pfx___driver_attach+0x10/0x10 [ 933.997779][T19453] ? __pfx_bus_for_each_dev+0x10/0x10 [ 933.997793][T19453] ? do_raw_spin_unlock+0xf5/0x200 [ 933.997813][T19453] bus_add_driver+0x38f/0x6e0 [ 933.997831][T19453] driver_register+0x23a/0x320 [ 933.997843][T19453] usb_gadget_register_driver_owner+0xf9/0x270 [ 933.997859][T19453] dev_config+0xe3c/0x12a0 [ 933.997880][T19453] ? __pfx_dev_config+0x10/0x10 [ 933.997900][T19453] ? __pfx_dev_config+0x10/0x10 [ 933.997915][T19453] vfs_write+0x296/0xba0 [ 933.997934][T19453] ? __pfx_vfs_write+0x10/0x10 [ 933.997949][T19453] ? __fget_files+0x2a/0x420 [ 933.997961][T19453] ? __fget_files+0x3a2/0x420 [ 933.997973][T19453] ? __fget_files+0x2a/0x420 [ 933.997987][T19453] ? fdget+0x1ac/0x250 [ 933.998003][T19453] ksys_write+0x150/0x270 [ 933.998018][T19453] ? __pfx_ksys_write+0x10/0x10 [ 933.998037][T19453] do_syscall_64+0x166/0x520 [ 933.998053][T19453] ? trace_irq_disable+0x3b/0x140 [ 933.998070][T19453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.998081][T19453] ? clear_bhb_loop+0x70/0xc0 [ 933.998095][T19453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.998106][T19453] RIP: 0033:0x7fcae999f559 [ 933.998118][T19453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.998127][T19453] RSP: 002b:00007fcaea8b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 933.998140][T19453] RAX: ffffffffffffffda RBX: 00007fcae9c25fa0 RCX: 00007fcae999f559 [ 933.998149][T19453] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000004 [ 933.998156][T19453] RBP: 00007fcae9a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 933.998163][T19453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 933.998170][T19453] R13: 00007fcae9c26038 R14: 00007fcae9c25fa0 R15: 00007ffff8dfcb78 [ 933.998189][T19453] [ 934.061658][T19453] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 934.061681][T19453] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 934.467231][T19441] rxe_eth0 speed is unknown, defaulting to 1000 [ 934.489224][T19453] gadgetfs: bound to dummy_udc driver [ 934.715361][T14926] svc: failed to register nfsdv3 RPC service (errno 5). [ 934.715379][T14926] failed to unregister udp with rpcbind [ 934.885771][T19466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.886026][T19466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.960158][T19466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.960418][T19466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.561210][ T5648] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 935.673595][T19480] FAULT_INJECTION: forcing a failure. [ 935.673595][T19480] name failslab, interval 1, probability 0, space 0, times 0 [ 935.673770][T19480] CPU: 0 UID: 0 PID: 19480 Comm: syz.1.3553 Tainted: G L syzkaller #0 PREEMPT(full) [ 935.673787][T19480] Tainted: [L]=SOFTLOCKUP [ 935.673791][T19480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 935.673798][T19480] Call Trace: [ 935.673803][T19480] [ 935.673809][T19480] dump_stack_lvl+0xe8/0x150 [ 935.673831][T19480] should_fail_ex+0x3eb/0x540 [ 935.673856][T19480] should_failslab+0xa8/0x100 [ 935.673874][T19480] ? anon_vma_fork+0x10b/0x4d0 [ 935.673885][T19480] kmem_cache_alloc_noprof+0x9c/0x600 [ 935.673897][T19480] ? anon_vma_fork+0x6a/0x4d0 [ 935.673906][T19480] ? kmem_cache_alloc_noprof+0x151/0x600 [ 935.673917][T19480] ? anon_vma_fork+0x10b/0x4d0 [ 935.673931][T19480] anon_vma_fork+0x10b/0x4d0 [ 935.673940][T19480] ? vm_area_dup+0x656/0x8e0 [ 935.673961][T19480] dup_mmap+0x9a8/0x1e10 [ 935.673982][T19480] ? __pfx_dup_mmap+0x10/0x10 [ 935.673993][T19480] ? do_raw_spin_lock+0x12b/0x2f0 [ 935.674022][T19480] ? lock_acquire+0x115/0x350 [ 935.674046][T19480] copy_mm+0x115/0x470 [ 935.674082][T19480] copy_process+0x1ecc/0x4510 [ 935.674108][T19480] ? copy_process+0xd17/0x4510 [ 935.674134][T19480] ? __pfx_copy_process+0x10/0x10 [ 935.674149][T19480] ? get_pid_task+0x20/0x1f0 [ 935.674159][T19480] ? get_pid_task+0x20/0x1f0 [ 935.674174][T19480] kernel_clone+0x2d7/0x940 [ 935.674191][T19480] ? __pfx_kernel_clone+0x10/0x10 [ 935.674216][T19480] __x64_sys_clone+0x1b6/0x230 [ 935.674232][T19480] ? __pfx___x64_sys_clone+0x10/0x10 [ 935.674256][T19480] ? __pfx_ksys_write+0x10/0x10 [ 935.674277][T19480] do_syscall_64+0x166/0x520 [ 935.674292][T19480] ? trace_irq_disable+0x3b/0x140 [ 935.674306][T19480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.674317][T19480] ? clear_bhb_loop+0x70/0xc0 [ 935.674331][T19480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.674342][T19480] RIP: 0033:0x7fcd9519f559 [ 935.674355][T19480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.674370][T19480] RSP: 002b:00007fcd96117fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 935.674382][T19480] RAX: ffffffffffffffda RBX: 00007fcd95425fa0 RCX: 00007fcd9519f559 [ 935.674391][T19480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004400 [ 935.674398][T19480] RBP: 00007fcd96118090 R08: 0000000000000000 R09: 0000000000000000 [ 935.674404][T19480] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 935.674411][T19480] R13: 00007fcd95426038 R14: 00007fcd95425fa0 R15: 00007ffde8ac6a28 [ 935.674429][T19480] [ 936.583075][T19496] FAULT_INJECTION: forcing a failure. [ 936.583075][T19496] name failslab, interval 1, probability 0, space 0, times 0 [ 936.583101][T19496] CPU: 0 UID: 0 PID: 19496 Comm: syz.7.3558 Tainted: G L syzkaller #0 PREEMPT(full) [ 936.583118][T19496] Tainted: [L]=SOFTLOCKUP [ 936.583123][T19496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 936.583131][T19496] Call Trace: [ 936.583136][T19496] [ 936.583142][T19496] dump_stack_lvl+0xe8/0x150 [ 936.583164][T19496] should_fail_ex+0x3eb/0x540 [ 936.583186][T19496] should_failslab+0xa8/0x100 [ 936.583203][T19496] __kmalloc_cache_noprof+0x9e/0x600 [ 936.583218][T19496] ? gadgetfs_bind+0x2ef/0xb10 [ 936.583241][T19496] ? gadgetfs_bind+0x2ef/0xb10 [ 936.583261][T19496] gadgetfs_bind+0x2ef/0xb10 [ 936.583284][T19496] ? __pfx_gadgetfs_bind+0x10/0x10 [ 936.583300][T19496] gadget_bind_driver+0x2ca/0x9e0 [ 936.583323][T19496] ? __pfx_gadget_bind_driver+0x10/0x10 [ 936.583337][T19496] really_probe+0x254/0xae0 [ 936.583356][T19496] __driver_probe_device+0x1e8/0x360 [ 936.583373][T19496] driver_probe_device+0x4f/0x240 [ 936.583392][T19496] __driver_attach+0x34e/0x630 [ 936.583410][T19496] bus_for_each_dev+0x23b/0x2c0 [ 936.583422][T19496] ? __pfx___driver_attach+0x10/0x10 [ 936.583438][T19496] ? __pfx_bus_for_each_dev+0x10/0x10 [ 936.583453][T19496] ? do_raw_spin_unlock+0xf5/0x200 [ 936.583472][T19496] bus_add_driver+0x38f/0x6e0 [ 936.583490][T19496] driver_register+0x23a/0x320 [ 936.583503][T19496] usb_gadget_register_driver_owner+0xf9/0x270 [ 936.583519][T19496] dev_config+0xe3c/0x12a0 [ 936.583540][T19496] ? __pfx_dev_config+0x10/0x10 [ 936.583560][T19496] ? __pfx_dev_config+0x10/0x10 [ 936.583575][T19496] vfs_write+0x296/0xba0 [ 936.583594][T19496] ? __pfx_vfs_write+0x10/0x10 [ 936.583610][T19496] ? __fget_files+0x2a/0x420 [ 936.583622][T19496] ? __fget_files+0x3a2/0x420 [ 936.583641][T19496] ? __fget_files+0x2a/0x420 [ 936.583656][T19496] ? fdget+0x1ac/0x250 [ 936.583673][T19496] ksys_write+0x150/0x270 [ 936.583689][T19496] ? __pfx_ksys_write+0x10/0x10 [ 936.583709][T19496] do_syscall_64+0x166/0x520 [ 936.583729][T19496] ? trace_irq_disable+0x3b/0x140 [ 936.583744][T19496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.583756][T19496] ? clear_bhb_loop+0x70/0xc0 [ 936.583770][T19496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.583781][T19496] RIP: 0033:0x7fcae999f559 [ 936.583794][T19496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.583804][T19496] RSP: 002b:00007fcaea8b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 936.583819][T19496] RAX: ffffffffffffffda RBX: 00007fcae9c25fa0 RCX: 00007fcae999f559 [ 936.583829][T19496] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000004 [ 936.583836][T19496] RBP: 00007fcae9a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 936.583844][T19496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 936.583851][T19496] R13: 00007fcae9c26038 R14: 00007fcae9c25fa0 R15: 00007ffff8dfcb78 [ 936.583870][T19496] [ 936.588048][T19496] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 936.588068][T19496] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 936.647849][ T5785] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 936.902056][T19496] gadgetfs: bound to dummy_udc driver [ 936.986416][ T5785] usb 4-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 937.023216][ T5785] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 937.023235][ T5785] usb 4-1: config 1 has no interface number 0 [ 937.048735][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.048753][ T5785] usb 4-1: Product: syz [ 937.048761][ T5785] usb 4-1: Manufacturer: syz [ 937.048769][ T5785] usb 4-1: SerialNumber: syz [ 937.088073][ T5785] usb 4-1: 3:0 : does not exist [ 937.088088][ T5785] usb 4-1: 3:0 : does not exist [ 937.115587][T19495] gadgetfs: suspended from state 2 [ 937.140806][T14258] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 937.317004][T19503] jffs2: notice: (19503) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 937.434355][ T5785] usb 4-1: USB disconnect, device number 81 [ 938.524615][ T5007] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 938.530057][ T5007] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 938.530230][ T5007] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 938.530241][ T5007] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 938.572474][ T5007] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 938.572508][ T5007] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 938.572517][ T5007] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 938.572524][ T5007] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 938.572531][ T5007] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 938.572568][ T5007] loop0: [ 938.820574][T19541] FAULT_INJECTION: forcing a failure. [ 938.820574][T19541] name fail_futex, interval 1, probability 0, space 0, times 0 [ 938.820597][T19541] CPU: 0 UID: 0 PID: 19541 Comm: syz.3.3566 Tainted: G L syzkaller #0 PREEMPT(full) [ 938.820614][T19541] Tainted: [L]=SOFTLOCKUP [ 938.820618][T19541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 938.820625][T19541] Call Trace: [ 938.820630][T19541] [ 938.820636][T19541] dump_stack_lvl+0xe8/0x150 [ 938.820664][T19541] should_fail_ex+0x3eb/0x540 [ 938.820685][T19541] get_futex_key+0x1ab/0x1410 [ 938.820702][T19541] ? __pfx_futex_wake_mark+0x10/0x10 [ 938.820718][T19541] ? __pfx_get_futex_key+0x10/0x10 [ 938.820738][T19541] futex_wake+0x119/0x5f0 [ 938.820751][T19541] ? __pfx_futex_wait+0x10/0x10 [ 938.820763][T19541] ? __pfx_futex_wake+0x10/0x10 [ 938.820782][T19541] do_futex+0x458/0x4e0 [ 938.820801][T19541] ? __pfx_do_futex+0x10/0x10 [ 938.820815][T19541] ? __fget_files+0x3a2/0x420 [ 938.820830][T19541] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 938.820858][T19541] __se_sys_futex+0x3a8/0x450 [ 938.820877][T19541] ? __pfx___se_sys_futex+0x10/0x10 [ 938.820893][T19541] ? rcu_is_watching+0x16/0xb0 [ 938.820912][T19541] ? __x64_sys_futex+0x21/0xf0 [ 938.820930][T19541] do_syscall_64+0x166/0x520 [ 938.820945][T19541] ? trace_irq_disable+0x3b/0x140 [ 938.820959][T19541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.820970][T19541] ? clear_bhb_loop+0x70/0xc0 [ 938.820983][T19541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.820994][T19541] RIP: 0033:0x7fed96d9f559 [ 938.821006][T19541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.821016][T19541] RSP: 002b:00007fed97cba0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 938.821033][T19541] RAX: ffffffffffffffda RBX: 00007fed97025fa8 RCX: 00007fed96d9f559 [ 938.821041][T19541] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fed97025fac [ 938.821051][T19541] RBP: 00007fed97025fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 938.821058][T19541] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 938.821066][T19541] R13: 00007fed97026038 R14: 00007ffe0964e390 R15: 00007ffe0964e478 [ 938.821083][T19541] [ 939.176698][T19543] gadgetfs: bound to dummy_udc driver [ 939.596416][T19550] comedi comedi1: Minor 3 could not be opened [ 939.614322][T19550] comedi comedi1: comedi_config --init_data is deprecated [ 939.858721][T19551] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3569'. [ 939.876260][T19556] Bluetooth: hci0: too big key_count value 62977 [ 939.892892][T19551] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 939.942527][T19556] FAULT_INJECTION: forcing a failure. [ 939.942527][T19556] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 939.942552][T19556] CPU: 0 UID: 0 PID: 19556 Comm: syz.1.3570 Tainted: G L syzkaller #0 PREEMPT(full) [ 939.942569][T19556] Tainted: [L]=SOFTLOCKUP [ 939.942574][T19556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 939.942581][T19556] Call Trace: [ 939.942587][T19556] [ 939.942595][T19556] dump_stack_lvl+0xe8/0x150 [ 939.942617][T19556] should_fail_ex+0x3eb/0x540 [ 939.942639][T19556] prepare_alloc_pages+0x21e/0x5f0 [ 939.942656][T19556] __alloc_frozen_pages_noprof+0x17c/0x410 [ 939.942672][T19556] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 939.942691][T19556] ? policy_nodemask+0x31b/0x980 [ 939.942710][T19556] alloc_pages_mpol+0x21e/0x390 [ 939.942729][T19556] folio_alloc_mpol_noprof+0x39/0x160 [ 939.942746][T19556] shmem_alloc_and_add_folio+0x43e/0xf60 [ 939.942761][T19556] ? filemap_get_entry+0xcd/0x3f0 [ 939.942780][T19556] ? __pfx_filemap_get_entry+0x10/0x10 [ 939.942793][T19556] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 939.942807][T19556] ? copy_folio_from_iter_atomic+0x19c6/0x1a80 [ 939.942830][T19556] shmem_get_folio_gfp+0x594/0x1330 [ 939.942852][T19556] shmem_write_begin+0x16c/0x330 [ 939.942869][T19556] generic_perform_write+0x2d5/0x8e0 [ 939.942891][T19556] ? __pfx_generic_perform_write+0x10/0x10 [ 939.942907][T19556] ? do_raw_spin_unlock+0xf5/0x200 [ 939.942923][T19556] ? mnt_put_write_access_file+0xc3/0x100 [ 939.942940][T19556] ? file_update_time_flags+0x3ab/0x440 [ 939.942957][T19556] shmem_file_write_iter+0xf8/0x120 [ 939.942973][T19556] vfs_write+0x612/0xba0 [ 939.942992][T19556] ? __pfx_vfs_write+0x10/0x10 [ 939.943007][T19556] ? __fget_files+0x3a2/0x420 [ 939.943019][T19556] ? __fget_files+0x2a/0x420 [ 939.943033][T19556] ? fdget+0x1ac/0x250 [ 939.943049][T19556] ksys_write+0x150/0x270 [ 939.943063][T19556] ? __pfx_ksys_write+0x10/0x10 [ 939.943083][T19556] do_syscall_64+0x166/0x520 [ 939.943099][T19556] ? trace_irq_disable+0x3b/0x140 [ 939.943123][T19556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.943135][T19556] ? clear_bhb_loop+0x70/0xc0 [ 939.943152][T19556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.943163][T19556] RIP: 0033:0x7fcd9519f559 [ 939.943175][T19556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.943185][T19556] RSP: 002b:00007fcd96118028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 939.943198][T19556] RAX: ffffffffffffffda RBX: 00007fcd95425fa0 RCX: 00007fcd9519f559 [ 939.943206][T19556] RDX: 0000000000032600 RSI: 0000200000000180 RDI: 0000000000000007 [ 939.943214][T19556] RBP: 00007fcd95236b20 R08: 0000000000000000 R09: 0000000000000000 [ 939.943221][T19556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 939.943228][T19556] R13: 00007fcd95426038 R14: 00007fcd95425fa0 R15: 00007ffde8ac6a28 [ 939.943246][T19556] [ 940.609296][T19568] FAULT_INJECTION: forcing a failure. [ 940.609296][T19568] name failslab, interval 1, probability 0, space 0, times 0 [ 940.609320][T19568] CPU: 0 UID: 0 PID: 19568 Comm: syz.3.3576 Tainted: G L syzkaller #0 PREEMPT(full) [ 940.609337][T19568] Tainted: [L]=SOFTLOCKUP [ 940.609342][T19568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 940.609349][T19568] Call Trace: [ 940.609354][T19568] [ 940.609360][T19568] dump_stack_lvl+0xe8/0x150 [ 940.609390][T19568] should_fail_ex+0x3eb/0x540 [ 940.609412][T19568] should_failslab+0xa8/0x100 [ 940.609429][T19568] __kmalloc_cache_noprof+0x9e/0x600 [ 940.609443][T19568] ? gadgetfs_bind+0x2ef/0xb10 [ 940.609460][T19568] ? gadgetfs_bind+0x2ef/0xb10 [ 940.609481][T19568] gadgetfs_bind+0x2ef/0xb10 [ 940.609503][T19568] ? __pfx_gadgetfs_bind+0x10/0x10 [ 940.609520][T19568] gadget_bind_driver+0x2ca/0x9e0 [ 940.609542][T19568] ? __pfx_gadget_bind_driver+0x10/0x10 [ 940.609556][T19568] really_probe+0x254/0xae0 [ 940.609575][T19568] __driver_probe_device+0x1e8/0x360 [ 940.609595][T19568] driver_probe_device+0x4f/0x240 [ 940.609613][T19568] __driver_attach+0x34e/0x630 [ 940.609631][T19568] bus_for_each_dev+0x23b/0x2c0 [ 940.609643][T19568] ? __pfx___driver_attach+0x10/0x10 [ 940.609659][T19568] ? __pfx_bus_for_each_dev+0x10/0x10 [ 940.609674][T19568] ? do_raw_spin_unlock+0xf5/0x200 [ 940.609693][T19568] bus_add_driver+0x38f/0x6e0 [ 940.609711][T19568] driver_register+0x23a/0x320 [ 940.609723][T19568] usb_gadget_register_driver_owner+0xf9/0x270 [ 940.609740][T19568] dev_config+0xe3c/0x12a0 [ 940.609761][T19568] ? __pfx_dev_config+0x10/0x10 [ 940.609781][T19568] ? __pfx_dev_config+0x10/0x10 [ 940.609796][T19568] vfs_write+0x296/0xba0 [ 940.609814][T19568] ? __pfx_vfs_write+0x10/0x10 [ 940.609830][T19568] ? __fget_files+0x2a/0x420 [ 940.609842][T19568] ? __fget_files+0x3a2/0x420 [ 940.609853][T19568] ? __fget_files+0x2a/0x420 [ 940.609867][T19568] ? fdget+0x1ac/0x250 [ 940.609883][T19568] ksys_write+0x150/0x270 [ 940.609898][T19568] ? __pfx_ksys_write+0x10/0x10 [ 940.609918][T19568] do_syscall_64+0x166/0x520 [ 940.609933][T19568] ? trace_irq_disable+0x3b/0x140 [ 940.609947][T19568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.609959][T19568] ? clear_bhb_loop+0x70/0xc0 [ 940.609973][T19568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.609984][T19568] RIP: 0033:0x7fed96d9f559 [ 940.609995][T19568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.610005][T19568] RSP: 002b:00007fed97cba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 940.610018][T19568] RAX: ffffffffffffffda RBX: 00007fed97025fa0 RCX: 00007fed96d9f559 [ 940.610026][T19568] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000004 [ 940.610033][T19568] RBP: 00007fed96e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 940.610040][T19568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.610047][T19568] R13: 00007fed97026038 R14: 00007fed97025fa0 R15: 00007ffe0964e478 [ 940.610066][T19568] [ 940.719644][T19568] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 940.719663][T19568] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 940.999010][T19568] gadgetfs: bound to dummy_udc driver [ 941.251993][T19578] FAULT_INJECTION: forcing a failure. [ 941.251993][T19578] name failslab, interval 1, probability 0, space 0, times 0 [ 941.252015][T19578] CPU: 0 UID: 0 PID: 19578 Comm: syz.3.3577 Tainted: G L syzkaller #0 PREEMPT(full) [ 941.252031][T19578] Tainted: [L]=SOFTLOCKUP [ 941.252035][T19578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 941.252043][T19578] Call Trace: [ 941.252048][T19578] [ 941.252052][T19578] dump_stack_lvl+0xe8/0x150 [ 941.252073][T19578] should_fail_ex+0x3eb/0x540 [ 941.252092][T19578] should_failslab+0xa8/0x100 [ 941.252108][T19578] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 941.252120][T19578] ? lockdep_hardirqs_on+0x7b/0x110 [ 941.252138][T19578] ? __d_alloc+0x37/0x820 [ 941.252149][T19578] ? __d_alloc+0x37/0x820 [ 941.252164][T19578] __d_alloc+0x37/0x820 [ 941.252179][T19578] d_alloc_pseudo+0x21/0xc0 [ 941.252192][T19578] alloc_path_pseudo+0x107/0x220 [ 941.252205][T19578] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 941.252221][T19578] alloc_file_pseudo+0xa8/0x1e0 [ 941.252233][T19578] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 941.252249][T19578] __anon_inode_getfile+0x129/0x200 [ 941.252263][T19578] io_uring_create+0x57a/0x980 [ 941.252277][T19578] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 941.252294][T19578] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 941.252318][T19578] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 941.252341][T19578] ? __pfx_ksys_write+0x10/0x10 [ 941.252357][T19578] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 941.252376][T19578] do_syscall_64+0x166/0x520 [ 941.252391][T19578] ? trace_irq_disable+0x3b/0x140 [ 941.252404][T19578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.252415][T19578] ? clear_bhb_loop+0x70/0xc0 [ 941.252428][T19578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.252439][T19578] RIP: 0033:0x7fed96d9f559 [ 941.252450][T19578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.252459][T19578] RSP: 002b:00007fed97cb9ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 941.252474][T19578] RAX: ffffffffffffffda RBX: 0000200000000508 RCX: 00007fed96d9f559 [ 941.252482][T19578] RDX: 0000200000000588 RSI: 0000200000000508 RDI: 00000000000003c9 [ 941.252490][T19578] RBP: 0000200000000500 R08: 0000000000000000 R09: 0000000000000000 [ 941.252497][T19578] R10: 0000200000000590 R11: 0000000000000206 R12: 0000200000000588 [ 941.252504][T19578] R13: 0000200000000590 R14: 00007fed97cb9fd8 R15: 0000000000000000 [ 941.252520][T19578] [ 941.942940][T19582] FAULT_INJECTION: forcing a failure. [ 941.942940][T19582] name failslab, interval 1, probability 0, space 0, times 0 [ 941.942964][T19582] CPU: 0 UID: 0 PID: 19582 Comm: syz.7.3578 Tainted: G L syzkaller #0 PREEMPT(full) [ 941.942981][T19582] Tainted: [L]=SOFTLOCKUP [ 941.942985][T19582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 941.942993][T19582] Call Trace: [ 941.942998][T19582] [ 941.943003][T19582] dump_stack_lvl+0xe8/0x150 [ 941.943025][T19582] should_fail_ex+0x3eb/0x540 [ 941.943046][T19582] should_failslab+0xa8/0x100 [ 941.943068][T19582] __kmalloc_cache_noprof+0x9e/0x600 [ 941.943081][T19582] ? __pfx_dev_set_name+0x10/0x10 [ 941.943094][T19582] ? device_add+0xb6/0xb80 [ 941.943107][T19582] ? device_add+0xb6/0xb80 [ 941.943124][T19582] device_add+0xb6/0xb80 [ 941.943139][T19582] rfkill_register+0x170/0x9b0 [ 941.943157][T19582] hci_register_dev+0x418/0x8e0 [ 941.943178][T19582] vhci_create_device+0x409/0x6f0 [ 941.943195][T19582] vhci_write+0x3d1/0x4a0 [ 941.943209][T19582] vfs_write+0x612/0xba0 [ 941.943228][T19582] ? __pfx_vfs_write+0x10/0x10 [ 941.943251][T19582] ? __fget_files+0x3a2/0x420 [ 941.943263][T19582] ? __fget_files+0x2a/0x420 [ 941.943278][T19582] ? fdget+0x1ac/0x250 [ 941.943294][T19582] ksys_write+0x150/0x270 [ 941.943309][T19582] ? __pfx_ksys_write+0x10/0x10 [ 941.943330][T19582] do_syscall_64+0x166/0x520 [ 941.943346][T19582] ? trace_irq_disable+0x3b/0x140 [ 941.943360][T19582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.943374][T19582] ? clear_bhb_loop+0x70/0xc0 [ 941.943387][T19582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.943399][T19582] RIP: 0033:0x7fcae999f559 [ 941.943411][T19582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.943421][T19582] RSP: 002b:00007fcaea8b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 941.943434][T19582] RAX: ffffffffffffffda RBX: 00007fcae9c25fa0 RCX: 00007fcae999f559 [ 941.943443][T19582] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 [ 941.943450][T19582] RBP: 00007fcae9a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 941.943460][T19582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 941.946436][T19582] R13: 00007fcae9c26038 R14: 00007fcae9c25fa0 R15: 00007ffff8dfcb78 [ 941.946460][T19582] [ 942.662177][T14752] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.024514][T14752] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.063222][T19586] sctp: [Deprecated]: syz.1.3580 (pid 19586) Use of int in maxseg socket option. [ 943.063222][T19586] Use struct sctp_assoc_value instead [ 943.247980][T14752] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.375640][T14752] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.744560][T19590] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 943.759968][T19590] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 943.771459][T19590] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 943.772568][T19590] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 943.780534][T19590] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 943.919670][T14752] bridge_slave_1: left allmulticast mode [ 943.919690][T14752] bridge_slave_1: left promiscuous mode [ 943.919849][T14752] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.949316][T14752] bridge_slave_0: left allmulticast mode [ 943.949336][T14752] bridge_slave_0: left promiscuous mode [ 943.949474][T14752] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.098096][T19596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.098466][T19596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.178381][T19599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.178661][T19599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.279879][T19601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.280163][T19601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.366061][ T5648] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 944.651926][T14752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 944.666857][T14752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 944.667806][T14752] bond0 (unregistering): Released all slaves [ 944.893321][T19614] syz.7.3585 (pid 19614) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 945.505477][T19630] input: syz1 as /devices/virtual/input/input108 [ 945.532079][ T5302] 8021q: adding VLAN 0 to HW filter on device eth9 [ 945.881862][ T5648] Bluetooth: hci5: command tx timeout [ 945.927031][T19588] rxe_eth0 speed is unknown, defaulting to 1000 [ 945.971555][T14752] hsr_slave_0: left promiscuous mode [ 945.979760][T14752] hsr_slave_1: left promiscuous mode [ 945.980427][T14752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 946.005797][T14752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 946.008726][T14752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 946.008740][T14752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 946.076816][T14752] veth1_macvtap: left promiscuous mode [ 946.076876][T14752] veth0_macvtap: left promiscuous mode [ 946.076939][T14752] veth1_vlan: left promiscuous mode [ 946.076981][T14752] veth0_vlan: left promiscuous mode [ 946.972000][ T5747] usb 8-1: new high-speed USB device number 110 using dummy_hcd [ 946.995404][T19653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3590'. [ 947.040373][T19653] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 947.132299][T14752] team0 (unregistering): Port device team_slave_1 removed [ 947.152157][ T5747] usb 8-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 947.155721][ T5747] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 947.155741][ T5747] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 947.155754][ T5747] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 947.158882][ T5747] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.158898][ T5747] usb 8-1: Product: syz [ 947.158906][ T5747] usb 8-1: Manufacturer: syz [ 947.158914][ T5747] usb 8-1: SerialNumber: syz [ 947.184394][ T5747] usb 8-1: config 0 descriptor?? [ 947.267485][T14752] team0 (unregistering): Port device team_slave_0 removed [ 947.415820][ T5747] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 947.675768][T19663] FAULT_INJECTION: forcing a failure. [ 947.675768][T19663] name failslab, interval 1, probability 0, space 0, times 0 [ 947.675794][T19663] CPU: 0 UID: 0 PID: 19663 Comm: syz.1.3591 Tainted: G L syzkaller #0 PREEMPT(full) [ 947.675822][T19663] Tainted: [L]=SOFTLOCKUP [ 947.675830][T19663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 947.675843][T19663] Call Trace: [ 947.675851][T19663] [ 947.675861][T19663] dump_stack_lvl+0xe8/0x150 [ 947.675900][T19663] should_fail_ex+0x3eb/0x540 [ 947.675942][T19663] should_failslab+0xa8/0x100 [ 947.675970][T19663] __kmalloc_cache_noprof+0x9e/0x600 [ 947.675984][T19663] ? wakeup_source_sysfs_add+0x57/0x2c0 [ 947.676002][T19663] ? wakeup_source_sysfs_add+0x57/0x2c0 [ 947.676022][T19663] wakeup_source_sysfs_add+0x57/0x2c0 [ 947.676041][T19663] wakeup_source_register+0x17f/0x380 [ 947.676058][T19663] ep_insert+0xfaf/0x1af0 [ 947.676082][T19663] ? __pfx_ep_insert+0x10/0x10 [ 947.676103][T19663] ? bpf_lsm_capable+0x9/0x20 [ 947.676118][T19663] ? security_capable+0x7e/0x2c0 [ 947.676136][T19663] do_epoll_ctl_file+0x8c2/0xee0 [ 947.676156][T19663] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 947.676173][T19663] ? __fget_files+0x3a2/0x420 [ 947.676185][T19663] ? __fget_files+0x2a/0x420 [ 947.676199][T19663] ? fdget+0x1ac/0x250 [ 947.676213][T19663] __se_sys_epoll_ctl+0x162/0x230 [ 947.676235][T19663] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 947.676257][T19663] do_syscall_64+0x166/0x520 [ 947.676273][T19663] ? trace_irq_disable+0x3b/0x140 [ 947.676287][T19663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.676299][T19663] ? clear_bhb_loop+0x70/0xc0 [ 947.676312][T19663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.676323][T19663] RIP: 0033:0x7fcd9519f559 [ 947.676335][T19663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.676345][T19663] RSP: 002b:00007fcd96118028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 947.676358][T19663] RAX: ffffffffffffffda RBX: 00007fcd95425fa0 RCX: 00007fcd9519f559 [ 947.676366][T19663] RDX: 0000000000000024 RSI: 0000000000000001 RDI: 0000000000000025 [ 947.676373][T19663] RBP: 00007fcd95236b20 R08: 0000000000000000 R09: 0000000000000000 [ 947.676380][T19663] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 947.676387][T19663] R13: 00007fcd95426038 R14: 00007fcd95425fa0 R15: 00007ffde8ac6a28 [ 947.676405][T19663] [ 947.965363][ T5648] Bluetooth: hci5: command tx timeout [ 948.026501][ T5302] 8021q: adding VLAN 0 to HW filter on device eth10 [ 949.006719][T19687] FAULT_INJECTION: forcing a failure. [ 949.006719][T19687] name failslab, interval 1, probability 0, space 0, times 0 [ 949.006741][T19687] CPU: 0 UID: 0 PID: 19687 Comm: syz.1.3592 Tainted: G L syzkaller #0 PREEMPT(full) [ 949.006758][T19687] Tainted: [L]=SOFTLOCKUP [ 949.006763][T19687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 949.006771][T19687] Call Trace: [ 949.006776][T19687] [ 949.006781][T19687] dump_stack_lvl+0xe8/0x150 [ 949.006802][T19687] should_fail_ex+0x3eb/0x540 [ 949.006822][T19687] should_failslab+0xa8/0x100 [ 949.006839][T19687] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 949.006852][T19687] ? widen_string+0x3b/0x2a0 [ 949.006866][T19687] ? string+0x28a/0x2d0 [ 949.006878][T19687] ? devm_kasprintf+0x15f/0x200 [ 949.006889][T19687] ? devm_kasprintf+0x15f/0x200 [ 949.006901][T19687] ? vsnprintf+0xe42/0xef0 [ 949.006916][T19687] devm_kmalloc+0x7f/0x340 [ 949.006931][T19687] devm_kasprintf+0x15f/0x200 [ 949.006943][T19687] ? do_raw_spin_lock+0x12b/0x2f0 [ 949.006962][T19687] ? __pfx_devm_kasprintf+0x10/0x10 [ 949.006979][T19687] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 949.006994][T19687] ? devm_kmalloc+0x2b3/0x340 [ 949.007008][T19687] hci_leds_init+0xc8/0x180 [ 949.007023][T19687] hci_register_dev+0x3a9/0x8e0 [ 949.007044][T19687] vhci_create_device+0x409/0x6f0 [ 949.007060][T19687] vhci_write+0x3d1/0x4a0 [ 949.007074][T19687] vfs_write+0x612/0xba0 [ 949.007092][T19687] ? __pfx_vfs_write+0x10/0x10 [ 949.007107][T19687] ? __fget_files+0x3a2/0x420 [ 949.007120][T19687] ? __fget_files+0x2a/0x420 [ 949.007135][T19687] ? fdget+0x1ac/0x250 [ 949.007154][T19687] ksys_write+0x150/0x270 [ 949.007169][T19687] ? __pfx_ksys_write+0x10/0x10 [ 949.007188][T19687] do_syscall_64+0x166/0x520 [ 949.007204][T19687] ? trace_irq_disable+0x3b/0x140 [ 949.007217][T19687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.007228][T19687] ? clear_bhb_loop+0x70/0xc0 [ 949.007241][T19687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.007252][T19687] RIP: 0033:0x7fcd9519f559 [ 949.007264][T19687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.007273][T19687] RSP: 002b:00007fcd96118028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 949.007285][T19687] RAX: ffffffffffffffda RBX: 00007fcd95425fa0 RCX: 00007fcd9519f559 [ 949.007293][T19687] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 [ 949.007300][T19687] RBP: 00007fcd95236b20 R08: 0000000000000000 R09: 0000000000000000 [ 949.007307][T19687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 949.007313][T19687] R13: 00007fcd95426038 R14: 00007fcd95425fa0 R15: 00007ffde8ac6a28 [ 949.007331][T19687] [ 949.008902][T19588] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.116065][T19588] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.116199][T19588] bridge_slave_0: entered allmulticast mode [ 949.309275][T19588] bridge_slave_0: entered promiscuous mode [ 949.377403][T19588] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.379019][T19588] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.389369][T19588] bridge_slave_1: entered allmulticast mode [ 949.409075][T19588] bridge_slave_1: entered promiscuous mode [ 949.506265][T19588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.531770][T19588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.603222][T19588] team0: Port device team_slave_0 added [ 949.608719][T19588] team0: Port device team_slave_1 added [ 949.681592][ T5747] usb 8-1: USB disconnect, device number 110 [ 949.698960][T19588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 949.698971][T19588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.698987][T19588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 949.765881][T19588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 949.765894][T19588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.765910][T19588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 949.955937][T19588] hsr_slave_0: entered promiscuous mode [ 949.968994][T19588] hsr_slave_1: entered promiscuous mode [ 949.970193][T19588] debugfs: 'hsr0' already exists in 'hsr' [ 949.970206][T19588] Cannot create hsr debugfs directory [ 950.041352][ T4956] Bluetooth: hci5: command tx timeout [ 950.192864][ T5302] 8021q: adding VLAN 0 to HW filter on device eth11 [ 950.534912][ T5007] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 950.535113][ T5007] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 950.535249][ T5007] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 950.535258][ T5007] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 950.536989][ T5007] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 950.537001][ T5007] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 950.537009][ T5007] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 950.537022][ T5007] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 950.537028][ T5007] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 950.537058][ T5007] loop0: [ 950.751017][ T5747] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 950.799251][T19709] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3598'. [ 950.906396][ T5747] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 950.925808][ T5747] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 950.925825][ T5747] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 950.925849][ T5747] usb 4-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 950.925863][ T5747] usb 4-1: config 1 interface 0 has no altsetting 0 [ 950.968547][ T5747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 950.968563][ T5747] usb 4-1: SerialNumber: syz [ 950.994537][ T5747] cdc_ether 4-1:1.0: skipping garbage [ 950.994553][ T5747] cdc_ether 4-1:1.0: GUID doesn't match [ 951.257019][ T5747] usb 4-1: USB disconnect, device number 82 [ 951.321091][ T5648] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 951.803930][T19729] FAULT_INJECTION: forcing a failure. [ 951.803930][T19729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.803953][T19729] CPU: 0 UID: 0 PID: 19729 Comm: syz.7.3602 Tainted: G L syzkaller #0 PREEMPT(full) [ 951.803968][T19729] Tainted: [L]=SOFTLOCKUP [ 951.803972][T19729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 951.803979][T19729] Call Trace: [ 951.803984][T19729] [ 951.803989][T19729] dump_stack_lvl+0xe8/0x150 [ 951.804010][T19729] should_fail_ex+0x3eb/0x540 [ 951.804030][T19729] _copy_from_user+0x2d/0xb0 [ 951.804042][T19729] kstrtouint_from_user+0xd6/0x180 [ 951.804058][T19729] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 951.804077][T19729] ? lock_acquire+0x115/0x350 [ 951.804092][T19729] proc_fail_nth_write+0x8e/0x210 [ 951.804109][T19729] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 951.804129][T19729] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 951.804144][T19729] vfs_write+0x296/0xba0 [ 951.804163][T19729] ? __pfx_vfs_write+0x10/0x10 [ 951.804177][T19729] ? __fget_files+0x2a/0x420 [ 951.804188][T19729] ? __fget_files+0x3a2/0x420 [ 951.804199][T19729] ? __fget_files+0x2a/0x420 [ 951.804212][T19729] ? fdget+0x1ac/0x250 [ 951.804228][T19729] ksys_write+0x150/0x270 [ 951.804242][T19729] ? __pfx_ksys_write+0x10/0x10 [ 951.804262][T19729] do_syscall_64+0x166/0x520 [ 951.804277][T19729] ? trace_irq_disable+0x3b/0x140 [ 951.804290][T19729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.804301][T19729] ? clear_bhb_loop+0x70/0xc0 [ 951.804315][T19729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.804325][T19729] RIP: 0033:0x7fcae995fd8e [ 951.804336][T19729] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 951.804345][T19729] RSP: 002b:00007fcaea8b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 951.804357][T19729] RAX: ffffffffffffffda RBX: 00007fcaea8b46c0 RCX: 00007fcae995fd8e [ 951.804365][T19729] RDX: 0000000000000001 RSI: 00007fcaea8b40a0 RDI: 0000000000000003 [ 951.804372][T19729] RBP: 00007fcaea8b4090 R08: 0000000000000000 R09: 0000000000000000 [ 951.804379][T19729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.804385][T19729] R13: 00007fcae9c26038 R14: 00007fcae9c25fa0 R15: 00007ffff8dfcb78 [ 951.804403][T19729] [ 952.089599][ T35] INFO: task kworker/0:9:14288 blocked for more than 143 seconds. [ 952.089619][ T35] Tainted: G L syzkaller #0 [ 952.089625][ T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 952.089631][ T35] task:kworker/0:9 state:D stack:22120 pid:14288 tgid:14288 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 952.089664][ T35] Workqueue: usb_hub_wq hub_event [ 952.089687][ T35] Call Trace: [ 952.089692][ T35] [ 952.089699][ T35] __schedule+0x17dd/0x5830 [ 952.089718][ T35] ? __lock_acquire+0x747/0x2de0 [ 952.089735][ T35] ? rcu_is_watching+0x16/0xb0 [ 952.089759][ T35] ? look_up_lock_class+0x57/0x110 [ 952.089779][ T35] ? __pfx___schedule+0x10/0x10 [ 952.089792][ T35] ? lock_acquire+0x115/0x350 [ 952.089809][ T35] ? schedule+0x90/0x2b0 [ 952.089825][ T35] schedule+0x164/0x2b0 [ 952.089841][ T35] schedule_timeout+0xc0/0x2c0 [ 952.089855][ T35] ? __pfx_schedule_timeout+0x10/0x10 [ 952.089869][ T35] ? do_raw_spin_lock+0x12b/0x2f0 [ 952.089890][ T35] ? _raw_spin_unlock_irq+0x23/0x50 [ 952.089904][ T35] ? wait_for_completion+0x26d/0x5d0 [ 952.089920][ T35] wait_for_completion+0x2c5/0x5d0 [ 952.089942][ T35] ? __pfx_wait_for_completion+0x10/0x10 [ 952.089960][ T35] ? kobject_put+0x50f/0x550 [ 952.089976][ T35] i2c_del_adapter+0x292/0x440 [ 952.089994][ T35] ? __pfx_i2c_del_adapter+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 952.090012][ T35] ? dvb_usbv2_exit+0x94d/0xb80 [ 952.090026][ T35] dvb_usbv2_probe+0x4bb/0x3950 [ 952.090051][ T35] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 952.090061][ T35] ? __pm_runtime_set_status+0xa96/0xd80 [ 952.090083][ T35] usb_probe_interface+0x751/0xe00 [ 952.090100][ T35] ? __pfx_usb_probe_interface+0x10/0x10 [ 952.090111][ T35] ? kernfs_create_link+0x1cd/0x240 [ 952.090127][ T35] ? sysfs_do_create_link_sd+0xe0/0x110 [ 952.090143][ T35] ? driver_sysfs_add+0x1fe/0x210 [ 952.090159][ T35] ? __pfx_usb_probe_interface+0x10/0x10 [ 952.090170][ T35] really_probe+0x254/0xae0 [ 952.090189][ T35] __driver_probe_device+0x1e8/0x360 [ 952.090211][ T35] driver_probe_device+0x4f/0x240 [ 952.090229][ T35] __device_attach_driver+0x270/0x410 [ 952.090247][ T35] bus_for_each_drv+0x258/0x2f0 [ 952.090263][ T35] ? __pfx___device_attach_driver+0x10/0x10 [ 952.090279][ T35] ? __pfx_bus_for_each_drv+0x10/0x10 [ 952.090293][ T35] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 952.090310][ T35] __device_attach+0x2bd/0x430 [ 952.090327][ T35] ? __pfx___device_attach+0x10/0x10 [ 952.090341][ T35] ? do_raw_spin_unlock+0xf5/0x200 [ 952.090364][ T35] ? _raw_spin_unlock+0x28/0x50 [ 952.090380][ T35] device_initial_probe+0x9c/0x100 [ 952.090397][ T35] __bus_probe_device+0x126/0x220 [ 952.090409][ T35] ? bus_probe_device+0xd/0x20 [ 952.090422][ T35] device_add+0x7d7/0xb80 [ 952.090438][ T35] usb_set_configuration+0x1bb5/0x2260 [ 952.090464][ T35] usb_generic_driver_probe+0x8d/0x150 [ 952.090483][ T35] usb_probe_device+0x1c3/0x3b0 [ 952.090497][ T35] ? __pfx_usb_probe_device+0x10/0x10 [ 952.090507][ T35] really_probe+0x254/0xae0 [ 952.090525][ T35] __driver_probe_device+0x1e8/0x360 [ 952.090543][ T35] driver_probe_device+0x4f/0x240 [ 952.090560][ T35] __device_attach_driver+0x270/0x410 [ 952.090578][ T35] bus_for_each_drv+0x258/0x2f0 [ 952.090591][ T35] ? __pfx___device_attach_driver+0x10/0x10 [ 952.090607][ T35] ? __pfx_bus_for_each_drv+0x10/0x10 [ 952.090621][ T35] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 952.090638][ T35] __device_attach+0x2bd/0x430 [ 952.090883][ T35] ? __pfx___device_attach+0x10/0x10 [ 952.090900][ T35] ? do_raw_spin_unlock+0xf5/0x200 [ 952.090917][ T35] ? _raw_spin_unlock+0x28/0x50 [ 952.090956][ T35] device_initial_probe+0x9c/0x100 [ 952.090973][ T35] __bus_probe_device+0x126/0x220 [ 952.090985][ T35] ? bus_probe_device+0xd/0x20 [ 952.090998][ T35] device_add+0x7d7/0xb80 [ 952.091014][ T35] usb_new_device+0x9aa/0x1690 [ 952.091035][ T35] ? __pfx_usb_new_device+0x10/0x10 [ 952.091052][ T35] ? _raw_spin_unlock_irq+0x23/0x50 [ 952.091067][ T35] hub_event+0x28e8/0x4d30 [ 952.091077][ T35] ? do_raw_spin_unlock+0xf5/0x200 [ 952.122093][ T5648] Bluetooth: hci5: command tx timeout [ 952.219290][ T35] ? __pfx_hub_event+0x10/0x10 [ 952.219321][ T35] ? rcu_is_watching+0x16/0xb0 [ 952.219339][ T35] ? process_scheduled_works+0x97a/0x1630 [ 952.219356][ T35] process_scheduled_works+0xc3d/0x1630 [ 952.219389][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 952.219407][ T35] ? assign_work+0x3cf/0x5d0 [ 952.219424][ T35] worker_thread+0xa47/0xfb0 [ 952.219450][ T35] ? __kthread_parkme+0x71/0x1f0 [ 952.219471][ T35] kthread+0x38b/0x480 [ 952.219483][ T35] ? __pfx_worker_thread+0x10/0x10 [ 952.219497][ T35] ? __pfx_kthread+0x10/0x10 [ 952.219508][ T35] ret_from_fork+0x514/0xb70 [ 952.219522][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 952.219532][ T35] ? __switch_to+0xc78/0x1410 [ 952.219549][ T35] ? __pfx_kthread+0x10/0x10 [ 952.219560][ T35] ret_from_fork_asm+0x1a/0x30 [ 952.219587][ T35] [ 952.219618][ T35] INFO: task syz.9.2964:16799 blocked for more than 143 seconds. [ 952.219630][ T35] Tainted: G L syzkaller #0 [ 952.219637][ T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 952.219642][ T35] task:syz.9.2964 state:D stack:25952 pid:16799 tgid:16797 ppid:16036 task_flags:0x400140 flags:0x00080002 [ 952.219676][ T35] Call Trace: [ 952.219681][ T35] [ 952.219687][ T35] __schedule+0x17dd/0x5830 [ 952.219718][ T35] ? __pfx___schedule+0x10/0x10 [ 952.219738][ T35] ? schedule+0x90/0x2b0 [ 952.219754][ T35] schedule+0x164/0x2b0 [ 952.219769][ T35] schedule_preempt_disabled+0x13/0x30 [ 952.219783][ T35] __mutex_lock+0x7c4/0x15a0 [ 952.219801][ T35] ? __mutex_lock+0x5cd/0x15a0 [ 952.219819][ T35] ? usb_device_read+0x17c/0x2c0 [ 952.219831][ T35] ? __pfx___mutex_lock+0x10/0x10 [ 952.219857][ T35] usb_device_read+0x17c/0x2c0 [ 952.219871][ T35] ? __pfx_usb_device_read+0x10/0x10 [ 952.219883][ T35] ? apparmor_file_permission+0x1fb/0x2b0 [ 952.219900][ T35] full_proxy_read+0x127/0x1f0 [ 952.219916][ T35] ? __pfx_full_proxy_read+0x10/0x10 [ 952.219928][ T35] vfs_read+0x213/0xa80 [ 952.219952][ T35] ? __pfx___mutex_lock+0x10/0x10 [ 952.219968][ T35] ? __pfx_vfs_read+0x10/0x10 [ 952.219982][ T35] ? __fget_files+0x2a/0x420 [ 952.219994][ T35] ? __fget_files+0x3a2/0x420 [ 952.220005][ T35] ? __fget_files+0x2a/0x420 [ 952.220019][ T35] ? fdget+0x1ac/0x250 [ 952.220035][ T35] ksys_read+0x150/0x270 [ 952.220049][ T35] ? __pfx_ksys_read+0x10/0x10 [ 952.220068][ T35] do_syscall_64+0x166/0x520 [ 952.220084][ T35] ? trace_irq_disable+0x3b/0x140 [ 952.220097][ T35] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.220109][ T35] ? clear_bhb_loop+0x70/0xc0 [ 952.220122][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.220134][ T35] RIP: 0033:0x7f213b59f559 [ 952.220144][ T35] RSP: 002b:00007f213c40e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 952.220155][ T35] RAX: ffffffffffffffda RBX: 00007f213b825fa0 RCX: 00007f213b59f559 [ 952.220163][ T35] RDX: 0000000000002020 RSI: 0000200000000640 RDI: 0000000000000008 [ 952.220170][ T35] RBP: 00007f213b636b20 R08: 0000000000000000 R09: 0000000000000000 [ 952.220177][ T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 952.220184][ T35] R13: 00007f213b826038 R14: 00007f213b825fa0 R15: 00007fff8b95a3a8 [ 952.220202][ T35] [ 952.220235][ T35] [ 952.220235][ T35] Showing all locks held in the system: [ 952.220244][ T35] locks held by kworker/u8:0/13: 3, last CPU#0: [ 952.220252][ T35] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 952.220283][ T35] #1: ffffc90000127c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 952.220311][ T35] #2: ffff888051cf2258 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 952.220344][ T35] locks held by pr/ttyS0/34: 1, last CPU#0: [ 952.220352][ T35] #0: ffffffff90033f18 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 952.220379][ T35] locks held by khungtaskd/35: 1, last CPU#0: [ 952.220386][ T35] #0: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 952.220416][ T35] locks held by kworker/u8:4/64: 2, last CPU#0: [ 952.220424][ T35] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 952.220456][ T35] #1: ffffc9000205fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 952.220488][ T35] locks held by kworker/0:2/195: 3, on CPU#0: [ 952.220496][ T35] #0: ffff88813fe22d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 952.220523][ T35] #1: ffffc90002f47c40 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 952.220550][ T35] #2: ffffffff90160aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 [ 952.220581][ T35] locks held by kworker/u8:8/1012: 2, last CPU#0: [ 952.220588][ T35] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 952.220621][ T35] #1: ffffc90004d6fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 952.357673][ T35] locks held by syz-executor/5626: 2, last CPU#0: [ 952.357690][ T35] #0: ffff888036f42800 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 952.357730][ T35] #1: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 952.357761][ T35] locks held by kworker/0:6/5747: 2, last CPU#0: [ 952.357769][ T35] #0: ffff88813fe21d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 952.357798][ T35] #1: ffffc90004defc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 952.357826][ T35] locks held by udevd/5800: 4, on CPU#0: [ 952.357833][ T35] #0: ffff888059e26098 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 952.357864][ T35] #1: ffff888053cdac80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 952.357930][ T35] #2: ffff888037313878 (kn->active#28){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 952.357959][ T35] #3: ffff888087bc11d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 952.357995][ T35] locks held by kworker/0:9/14288: 5, on CPU#0: [ 952.358003][ T35] #0: ffff8880226e9148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 952.358030][ T35] #1: ffffc90003a97c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 952.358057][ T35] #2: ffff88802b5c11d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 952.358080][ T35] #3: ffff888087bc11d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 952.358109][ T35] #4: ffff888022ac21a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 952.358138][ T35] locks held by kworker/u8:14/14753: 3, last CPU#0: [ 952.358146][ T35] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 952.358173][ T35] #1: ffffc90003e8fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 952.358202][ T35] #2: ffff888026ba2258 (&devlink->lock_key#15){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 952.358233][ T35] locks held by kworker/u8:15/15838: 2, last CPU#0: [ 952.358241][ T35] #0: ffff88802d10f948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 952.358269][ T35] #1: ffffc9000426fc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 952.358299][ T35] locks held by getty/16080: 2, on CPU#0: [ 952.358306][ T35] #0: ffff88803776d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 952.358336][ T35] #1: ffffc90003b812e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 952.358365][ T35] locks held by syz.9.2964/16799: 3, on CPU#0: [ 952.358373][ T35] #0: ffff88805caaf970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 952.358402][ T35] #1: ffffffff90f3a540 (usb_bus_idr_lock){+.+.}-{4:4}, at: usb_device_read+0xe7/0x2c0 [ 952.358426][ T35] #2: ffff88802b5c11d8 (&dev->mutex){....}-{4:4}, at: usb_device_read+0x17c/0x2c0 [ 952.358455][ T35] locks held by syz-executor/19588: 8, last CPU#0: [ 952.358463][ T35] #0: ffff888023b1a478 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 952.358492][ T35] #1: ffff888068385480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 952.358517][ T35] #2: ffff88802ac4b2d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 952.358545][ T35] #3: ffffffff90f02e20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 952.358573][ T35] #4: ffff888035546128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa9/0x7d0 [ 952.358601][ T35] #5: ffff88807b823258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 952.358633][ T35] #6: ffffffff916bffe0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 952.358659][ T35] #7: ffff88805c40ce98 (&dev->lock){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xe0d/0x1d80 [ 952.358687][ T35] locks held by syz.3.3595/19704: 2, last CPU#0: [ 952.358694][ T35] #0: ffff88807e62b440 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 952.358722][ T35] #1: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 952.358748][ T35] locks held by rm/19727: 1, last CPU#0: [ 952.358756][ T35] #0: ffff88805b8ae540 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 952.358787][ T35] locks held by syz.7.3602/19729: 2, last CPU#0: [ 952.358794][ T35] #0: ffff88801cb3c080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 952.358822][ T35] #1: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 952.358852][ T35] [ 952.358855][ T35] ============================================= [ 952.358855][ T35] [ 952.358862][ T35] NMI backtrace for cpu 0 [ 952.358873][ T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 952.358887][ T35] Tainted: [L]=SOFTLOCKUP [ 952.358897][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 952.358904][ T35] Call Trace: [ 952.358911][ T35] [ 952.358918][ T35] dump_stack_lvl+0xe8/0x150 [ 952.358934][ T35] nmi_cpu_backtrace+0x274/0x2d0 [ 952.358949][ T35] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 952.358967][ T35] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 952.358985][ T35] sys_info+0x135/0x170 [ 952.358996][ T35] watchdog+0x1073/0x10f0 [ 952.359014][ T35] ? watchdog+0x209/0x10f0 [ 952.359030][ T35] kthread+0x38b/0x480 [ 952.359041][ T35] ? __pfx_watchdog+0x10/0x10 [ 952.359052][ T35] ? __pfx_kthread+0x10/0x10 [ 952.359063][ T35] ret_from_fork+0x514/0xb70 [ 952.359076][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 952.359086][ T35] ? __switch_to+0xc78/0x1410 [ 952.359102][ T35] ? __pfx_kthread+0x10/0x10 [ 952.359113][ T35] ret_from_fork_asm+0x1a/0x30 [ 952.359136][ T35] [ 952.511534][ T35] Kernel panic - not syncing: hung_task: blocked tasks [ 953.700908][ T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 953.711682][ T35] Tainted: [L]=SOFTLOCKUP [ 953.716017][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 953.726500][ T35] Call Trace: [ 953.729781][ T35] [ 953.733327][ T35] vpanic+0x26f/0x710 [ 953.738533][ T35] panic+0xc5/0xd0 [ 953.742300][ T35] ? __pfx_panic+0x10/0x10 [ 953.746717][ T35] ? preempt_schedule_common+0x7f/0xd0 [ 953.752213][ T35] ? preempt_schedule_thunk+0x16/0x40 [ 953.757708][ T35] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 953.763969][ T35] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 953.770372][ T35] watchdog+0x10e7/0x10f0 [ 953.774760][ T35] ? watchdog+0x209/0x10f0 [ 953.779268][ T35] kthread+0x38b/0x480 [ 953.783474][ T35] ? __pfx_watchdog+0x10/0x10 [ 953.788993][ T35] ? __pfx_kthread+0x10/0x10 [ 953.793642][ T35] ret_from_fork+0x514/0xb70 [ 953.798935][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 953.804045][ T35] ? __switch_to+0xc78/0x1410 [ 953.808718][ T35] ? __pfx_kthread+0x10/0x10 [ 953.813307][ T35] ret_from_fork_asm+0x1a/0x30 [ 953.820521][ T35] [ 953.823965][ T35] Kernel Offset: disabled [ 953.828344][ T35] Rebooting in 86400 seconds..