last executing test programs: 5m39.991861584s ago: executing program 1 (id=2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0xc000) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0xb}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000380)}, 0x19}], 0x3, 0x0, 0x0) setns(0xc9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = accept4$llc(r4, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000380)=0x10, 0x800) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f00000003c0)={r1}) recvmmsg(r2, &(0x7f00000022c0)=[{{&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000480)=""/15, 0xf}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/7, 0x7}], 0x3, &(0x7f0000001580)=""/191, 0xbf}, 0x1ff}, {{&(0x7f0000001640)=@alg, 0x80, &(0x7f0000001a40)=[{&(0x7f00000016c0)=""/191, 0xbf}, {&(0x7f0000001780)=""/2, 0x2}, {&(0x7f00000017c0)=""/138, 0x8a}, {&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000001940)=""/239, 0xef}], 0x5, &(0x7f0000001ac0)=""/188, 0xbc}, 0x6}, {{&(0x7f0000001b80)=@xdp, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001c00)=""/52, 0x34}], 0x1, &(0x7f0000001c80)=""/134, 0x86}, 0xf}, {{&(0x7f0000001d40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001dc0)=""/92, 0x5c}, {&(0x7f0000001e40)=""/1, 0x1}, {&(0x7f0000001e80)=""/180, 0xb4}, {&(0x7f0000001f40)=""/200, 0xc8}, {&(0x7f0000002040)=""/64, 0x40}, {&(0x7f0000002080)=""/195, 0xc3}, {&(0x7f0000002180)=""/56, 0x38}], 0x7, &(0x7f0000002240)=""/75, 0x4b}}], 0x4, 0x160, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8948, &(0x7f00000002c0)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) listxattr(&(0x7f00000023c0)='./file0\x00', &(0x7f0000002400)=""/230, 0xe6) 5m38.845869493s ago: executing program 1 (id=13): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='w', 0x1}], 0x1, 0x6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000001040)={{0x100, 0x0, 0x81, 0x4}, 'syz0\x00', 0x17}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) mremap$dontunmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000087000/0x2000)=nil) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) migrate_pages(0x0, 0x4, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 5m38.845408056s ago: executing program 1 (id=14): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r0, &(0x7f0000000380)='./cgroup\x00', r0, &(0x7f00000003c0)='./mnt\x00', 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmmsg$inet6(r1, &(0x7f0000000600)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x7, @mcast1, 0x5}, 0x1c, &(0x7f00000000c0), 0x0, &(0x7f0000000400)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @rthdr={{0x28, 0x29, 0x39, {0x11, 0x2, 0x0, 0x8, 0x0, [@remote]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x88, 0x4, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x7, 0xb, [0xf, 0xcf9b]}}, @pad1, @pad1]}}}, @rthdrdstopts={{0x78, 0x29, 0x37, {0x62, 0xc, '\x00', [@hao={0xc9, 0x10, @remote}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x38, {0x2, 0xc, 0x5, 0x8, [0x6, 0x3ff, 0x8, 0x0, 0x6, 0xe8aa]}}, @jumbo={0xc2, 0x4, 0x10}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0x37}, @pad1]}}}], 0x128}}, {{&(0x7f0000000540)={0xa, 0x4e22, 0xe, @empty, 0xf}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000580)="6b2f5f03dc02150f36e91de0648d3c44cb536059a53b11", 0x17}], 0x1}}], 0x2, 0x4000014) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000940)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000980)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000009c0)={0x0, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r5, 0xc02864c3, &(0x7f0000000400)={&(0x7f00000001c0)=[r6], 0x12a05f200, 0x1, 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc00864c5, &(0x7f0000000180)={&(0x7f0000000080)=[r6], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000a00)={0x0, 0x0, r0}) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r8, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r8, 0xc02864c3, &(0x7f0000000400)={&(0x7f00000001c0)=[r9], 0x12a05f200, 0x1, 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r8, 0xc00864c5, &(0x7f0000000180)={&(0x7f0000000080)=[r9], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000a40)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000a80)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_SUBMIT(r0, 0xc0186449, &(0x7f0000000c40)={0x0, 0x0, {0x28, 0x5, &(0x7f0000000b40)=[{0x2, 0xdc675bd0, 0x7519e5e4cb68f500, 0x3, 0x0, {0x10, 0x4, &(0x7f0000000300)=[{0x80000000, 0x0, 0x81}, {0xff, 0x0, 0x7}, {0x80000000, 0x0, 0x9}, {0x1, 0x0, 0x100}]}}, {0x10000, 0x7a033720, 0xcf7385b19cc292c0, 0xb, 0x0, {0x10, 0x7, &(0x7f00000007c0)=[{0xff, 0x0, 0x6}, {0x80000000, 0x0, 0x5}, {0xff, 0x0, 0x2}, {0x80000000, 0x0, 0x5}, {0x80000000, 0x0, 0x9}, {0x80000000, 0x0, 0xa}, {0xff, 0x0, 0x4}]}}, {0xc8, 0x91a74d0, 0x6c91979899ebc8c0, 0x7, 0x0, {0x10, 0x2, &(0x7f0000000880)=[{0x1, 0x0, 0x9d9a}, {0x1, 0x0, 0xa1f}]}}, {0xa, 0xa90946f8, 0xa9252b382b737d00, 0x9, 0x0, {0x10, 0x1, &(0x7f0000000900)=[{0x80000000, 0x0, 0x8}]}}, {0x1, 0x463a0, 0x10daf797d5eadc0, 0x4, 0x0, {0x10, 0x8, &(0x7f0000000ac0)=[{0x80000000, r2, 0x7}, {0x1, r3, 0xe00000000}, {0x80000000, r4, 0x2}, {0xff, r6, 0xffffffffffffff01}, {0x80000000, r7, 0x8000000000000001}, {0x80000000, r9, 0x5}, {0x80000000, r10, 0x2}, {0x0, r11, 0x7}]}}]}}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "ca191b2a0104b6a9", "404322cba02335d4c6d2d4fb43583cbce8ed367085d85317964322238ef204b2", "0ecc07cb", "4e0eac216e798a00"}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) recvfrom$inet6(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x31) shutdown(r1, 0x0) 5m38.632659213s ago: executing program 1 (id=16): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4f, 0x1000004, 0xffffeffffffffffb, 0x8, 0xfffc, 0x7f, 0x4002004c1, 0xa, 0x5, 0x0, 0x8000, 0x20000000007, 0x402, 0xb, 0x10, 0x200], 0xdddda000, 0x100000}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/34, 0x22}], 0x1) ptrace$setregs(0xd, r0, 0x40002, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="00000000080209000101008001120100020000004000000000000000000001", 0x1f) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4f, 0x1000004, 0xffffeffffffffffb, 0x8, 0xfffc, 0x7f, 0x4002004c1, 0xa, 0x5, 0x0, 0x8000, 0x20000000007, 0x402, 0xb, 0x10, 0x200], 0xdddda000, 0x100000}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r0) (async) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/34, 0x22}], 0x1) (async) ptrace$setregs(0xd, r0, 0x40002, &(0x7f0000000180)) (async) ptrace$cont(0x21, r0, 0x80000001, 0x4) (async) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) (async) write(r1, &(0x7f0000000400)="00000000080209000101008001120100020000004000000000000000000001", 0x1f) (async) 5m38.379066865s ago: executing program 1 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/events/msr/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000008010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) write(r2, &(0x7f0000000740)="737562d751f911e16c3a65f406a35b36743a6d6f643ab6b7d996e659c1f68f8e1c73797a5f6d6fdd831aeb23efe29cc6b68749787b8df9312d96b32d", 0x3c) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a030000000000000000000300000308000240000000040900010073797a300000000028000000000a010400000000000000000300000a0900010073797a30000000000800024000000006", @ANYRESDEC=r2, @ANYRES16=r1], 0x78}, 0x1, 0x0, 0x0, 0x9c3855a562902983}, 0x20000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'pim6reg0\x00'}) 5m38.036615191s ago: executing program 1 (id=20): r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="3000000024000106010000000000000000000000010000000000fffff1ffffff000000000c000100696e677265737300", 0x30) write(r0, &(0x7f0000000100)="6c0000002c003f060200000000000000648800000100000000000000f1ffffff000301000c000100666c6f77657200003c0002801c0054801800058005000100010000000c00020000000000000000011c1155801800058005000100ff0000000c000200ffffffffffffffff", 0x6c) 5m37.93103668s ago: executing program 32 (id=20): r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="3000000024000106010000000000000000000000010000000000fffff1ffffff000000000c000100696e677265737300", 0x30) write(r0, &(0x7f0000000100)="6c0000002c003f060200000000000000648800000100000000000000f1ffffff000301000c000100666c6f77657200003c0002801c0054801800058005000100010000000c00020000000000000000011c1155801800058005000100ff0000000c000200ffffffffffffffff", 0x6c) 3m9.693834108s ago: executing program 3 (id=958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r2, 0x10c, 0x2, &(0x7f00000002c0)=0x5, 0x4) write(r1, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007050400222f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=ANY=[@ANYBLOB="1400000010000100000000000000000001fecccec9ed3b5e698747eba1590300000a34000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000008000a4000000004140000001100"], 0x5c}, 0x1, 0x0, 0x0, 0x4000050}, 0x24000840) 3m9.4765093s ago: executing program 3 (id=959): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r1, @ANYBLOB='\b\x00M'], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) 3m9.403560681s ago: executing program 3 (id=961): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) add_key(0x0, 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332", 0x85, 0xfffffffffffffffd) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000280)=ANY=[], 0x8) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="f6", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[], 0x20, 0x40801}, 0x50) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi4\x00', 0x161080, 0x0) ioctl$COMEDI_SETWSUBD(r6, 0x6411) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x20040000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x2000c800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20000) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000a98000/0x400000)=nil) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000400)={0x0, &(0x7f0000000540)=[@in_dx={0x69, 0x20, {0xf6d1, 0x4}}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x6}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x7, 0x8001, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x2c, 0x7, 0x3, 0x6c4}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro32=0x4408, 0x4, 0x4, 0x4500000}}], 0x120}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x2400, 0x0) 3m9.197249135s ago: executing program 3 (id=966): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e22, 0x1, @local, 0x76}}, 0x7, 0xf, 0x5, 0x5, 0x0, 0x3}, &(0x7f0000000380)=0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000003c0)={r3, 0xc8, "ad533fab4d293031b2e5d2d8019c994a6bb6556d9d521ee843f31ff0ee30615d3a71b4bfb0c9af9c374644305e4e4a5eb6ae3d4a50680c5b55f9b9e8070a265771bf26d6ea005dc448c3bb693b9641c15dc3ac73e727fd39a762b4082c5a821d5005ff20a83a5f7ec06fc7bd02f621a86fd3773c46a13787b3ce05200447a3e2a1ea2212d60e57b8eb9658dc0276bc2d7399a7f105cd0de79ce39523a359e1738e16c96dfe9defb0e8315c2032ea3879831cdd434b90c4f28ccd52eb2f5070e29c36c1c8ed4cf417"}, &(0x7f00000004c0)=0xd0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0xbf, @empty, 0x4, 0x100}, 0x20) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000a52000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="67f2e00d64360fae8197530f01cf64f75dd7360f22930f38f173880f303e0faea04fb30fc72ff30fc7b30000", 0x2c}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x88308411, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x0, &(0x7f0000000040)) r8 = socket$netlink(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) semop(0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) 3m5.73124053s ago: executing program 3 (id=993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @mpls={[{0x8, 0x0, 0x1}], @generic="874ee326b4659d107ac026d951e4fb119be49ec68368cefcf3fa16bec7dc88fc39a7c9beff45a1a5315c9322aadd534112a67f23d03e52ff67b5b0e04151b42931cd02f2e194681dad03c38a22bf3ef808872ced82b7d0ee25191db82119501aa163ab51cc1125b84cc343e540f951d99af823b8e4a0ca3fde4056a5566b6c8477034a870cd073babf0804f8ab1cabb97aa5a6c4c8d6b07fd8b6ae084100"}}, 0xb0) 3m5.074041107s ago: executing program 3 (id=996): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000037000701f3fffffffedbd72501"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008015}, 0x40004) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000037000901c4bc7008fddbdf2502"], 0x14}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003700010127bd7000fdf7df2503"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000004) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000006, 0x10, r0, 0x7e370000) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) r7 = gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10045, 0x7, r7}) sendmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) lstat(&(0x7f00000000c0)='./mnt_nfsd/portlist\x00', &(0x7f0000000380)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0) write(r8, &(0x7f0000000340)='4', 0x1) sendmsg$inet6(r0, 0x0, 0x48043) 2m49.970994289s ago: executing program 33 (id=996): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000037000701f3fffffffedbd72501"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008015}, 0x40004) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000037000901c4bc7008fddbdf2502"], 0x14}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003700010127bd7000fdf7df2503"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000004) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000006, 0x10, r0, 0x7e370000) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) r7 = gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10045, 0x7, r7}) sendmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) lstat(&(0x7f00000000c0)='./mnt_nfsd/portlist\x00', &(0x7f0000000380)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0) write(r8, &(0x7f0000000340)='4', 0x1) sendmsg$inet6(r0, 0x0, 0x48043) 2m37.056790788s ago: executing program 0 (id=1134): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcm3724\x00', [0x1ff, 0x400, 0x2, 0x1, 0x1000002, 0x800005, 0x7fffffff, 0x0, 0xfff, 0xfd, 0x9, 0x17fffffd, 0x3, 0x8, 0x10000b, 0xfe, 0x3, 0x7a, 0x0, 0xffffffff, 0x20000089, 0x15, 0x9, 0x7fff, 0x1, 0x9, 0x7, 0x3, 0xa6b5, 0xfffffffe, 0x1, 0x2f00]}) 2m37.052943797s ago: executing program 0 (id=1135): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1d9) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='-:my_read_msr2 msr/read_msr', 0x1b) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') finit_module(r0, &(0x7f0000000180)='\x00', 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000480)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004", 0x25}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000010006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) fchdir(r2) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, &(0x7f0000000100)=""/64, 0x40, &(0x7f0000000340)={&(0x7f0000000300)={'wp384\x00'}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x18d002, 0x0) write$sndseq(r0, &(0x7f0000000140), 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 2m36.652945792s ago: executing program 0 (id=1136): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16, @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff"], 0x80}}, 0x0) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0xb13267354465d3ed, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) syz_usb_connect(0x0, 0x135, &(0x7f0000000000)=ANY=[@ANYBLOB="120100021af1c3103a090f05a0f101020301090223010109f390d90904"], 0x0) 2m35.983900707s ago: executing program 0 (id=1140): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x300a, 0x4008000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000006080), 0x0, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x4, 0x0, 0x34}, @flat=@weak_binder={0x77622a85, 0x1100}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$KDADDIO(r2, 0x4b34, 0x54) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m35.884388764s ago: executing program 0 (id=1142): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x30ce7fb22d97c531, 0x43) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000580)={0x2e, 0x57, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(r0, r6, &(0x7f0000000200)={0x0, 0x95e6, 0x0, 0x3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd053, 0x10000, 0x2, 0x10000004}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x0, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf914, 0x901, 0x2, 0x1be}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaba7, 0x1, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x2c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x800000, 0x0, {}, 0x1f, r5, '\x00', {0x4, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000340)={0x39}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r8, &(0x7f0000000240)='.', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write(r0, &(0x7f00000001c0)=';', 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r9, 0x4058587a, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0xa, 0x801, 0x84) connect$inet(r11, &(0x7f00000003c0)={0x2, 0x4e1c, @multicast1}, 0xfffffffffffffe70) listen(r11, 0x3fb) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(0xffffffffffffffff, 0x800c6f40, &(0x7f0000000180)={""/4, 0x4}) r12 = accept4(r11, 0x0, 0x0, 0x80800) write(r12, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x1}, 0x10) write(r12, &(0x7f00000002c0)="04", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f0000000480)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r9, 0x0) geteuid() 2m35.789254771s ago: executing program 0 (id=1144): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000006c0)=0x1, 0x4) (async) syz_genetlink_get_family_id$team(&(0x7f0000000a40), r0) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) (async) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x810, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x20000, 0x0) 2m20.108766165s ago: executing program 34 (id=1144): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000006c0)=0x1, 0x4) (async) syz_genetlink_get_family_id$team(&(0x7f0000000a40), r0) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) (async) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x810, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x20000, 0x0) 1m43.912375811s ago: executing program 5 (id=1503): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x7ffffffd, 0x4) sendmsg$rds(r0, &(0x7f0000000f40)={&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@rdma_map={0x24, 0x114, 0x3, {{0x0}, 0x0, 0x9}}], 0x30, 0x24040010}, 0x0) 1m43.784766226s ago: executing program 5 (id=1504): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003b00010324bd7022ffdbdf2509"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x20040000) syz_genetlink_get_family_id$ipvs(0x0, r0) 1m43.751645178s ago: executing program 5 (id=1505): r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="3000000024000106010000000000000000000000010000000000fffff1ffffff000000000c000100696e677265737300", 0x30) write(r0, &(0x7f0000000100)="6c0000002c003f060200000000000047880000000100000000000000f1ffffff000301000c000100666c6f77657200003c0002801c0054801800058005000100010000000c00020000000000000000011c1155801800058005000100ff0000000c000200ffffffffffffffff", 0x6c) 1m43.67745454s ago: executing program 5 (id=1506): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x200) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x1, &(0x7f0000000340)='\x00', 0xb, 0x1, 0x46d, 0xa0e, 0x9, 0x2, 0x1, 'syz1\x00'}) 1m43.540809405s ago: executing program 5 (id=1507): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05000000738856d5a3489d0b000008000300", @ANYRES32=r6, @ANYBLOB="080005"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xed2}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x6000000}, 0x4075) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000200), 0x9) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) fcntl$setownex(r7, 0xf, &(0x7f0000000100)={0x2, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050027bd7368271300000600000008000300", @ANYRES32=r1, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) 1m42.600814s ago: executing program 5 (id=1511): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c) socket$kcm(0xa, 0x2, 0x0) (async) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40040, 0x0) openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x202001, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) (async) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) socket(0x2c, 0x0, 0x101) 1m42.201062507s ago: executing program 35 (id=1511): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c) socket$kcm(0xa, 0x2, 0x0) (async) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40040, 0x0) openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x202001, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) (async) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) socket(0x2c, 0x0, 0x101) 7.642019939s ago: executing program 2 (id=2205): r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="3000000024000106010000000000000000000000010000000000fffff1ffffff000000000c000100696e677265737300", 0x30) write(r0, &(0x7f0000000100)="6c0000002c003f060200000000000086dd0000000100000000000000f1ffffff000301000c000100666c6f77657200003c0002801c0054801800058005000100010000000c00020000000000000000011c1155801800058005000100ff0000000c000200ffffffffffffffff", 0x6c) 7.516653302s ago: executing program 2 (id=2206): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0xfffc, 0x9}, 'syz0\x00', 0x13}) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) close(0x3) r1 = open$dir(&(0x7f00000001c0)='./proc\x00', 0x2, 0x0) mkdirat(r1, &(0x7f0000000080)='./proc\x00', 0x180) r2 = syz_open_dev$ublk_chdev(&(0x7f00000000c0), 0x0, 0x1c5400) close(r2) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='7', 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0xfffc, 0x9}, 'syz0\x00', 0x13}) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) (async) close(0x3) (async) open$dir(&(0x7f00000001c0)='./proc\x00', 0x2, 0x0) (async) mkdirat(r1, &(0x7f0000000080)='./proc\x00', 0x180) (async) syz_open_dev$ublk_chdev(&(0x7f00000000c0), 0x0, 0x1c5400) (async) close(r2) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) write(r3, &(0x7f0000000000)='7', 0x1) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) 7.384373967s ago: executing program 2 (id=2208): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000000)='reiserfs\x00', 0x2044008, 0x0) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000000)='reiserfs\x00', 0x2044008, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r0, 0x100000000000011, 0x2000, 0x1ff) 7.236779449s ago: executing program 2 (id=2209): io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x800002}]) r0 = socket(0xa, 0x3, 0x87) sendto(r0, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r3, 0x3, 0x27}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x4, 0x1, 0x2, r3}, &(0x7f0000000100)=0x10) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), 0x4) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000001b40)=[{&(0x7f0000000040)="08009ed372f15f95", 0x8}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000000000000fa000007000000890b041a0101027f00000100000000001c000000000000000000000008000000", @ANYBLOB="16"], 0x40}, 0x4000814) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0) 6.156053969s ago: executing program 6 (id=2219): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)="308f40240691b7f8d6f276c5ec0f603d61e7366d466d9d25174481477953cac275cba376633c704f2af0246e584fec05000000ea4a909e7bd1a75d54f94bc7b6207199b1e9d0ff24e1ae0000", 0x4c) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x5, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007058203"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000780)={0x40, 0x30, 0x1, "b7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000740)={0x0, 0xb, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0xc, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x2, 0x2, 0xffffffff}, {0x61}, {0x2}, {0x6, 0x0, 0x80}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000000)={0x40, 0x0, 0x4, "82116383"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)={0x6eb4b8ece19adc84, 0x14, 0x4, "371fcf83"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) 3.948705635s ago: executing program 2 (id=2232): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100182e5e74033073004fb35000000010902120001000040400904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = timerfd_create(0x7, 0x800) timerfd_settime(r1, 0x2, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000100)=@req={0x40, 0x0, 0x7fff, 0x5}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000001540)=[{r1, 0x4014}], 0x1, &(0x7f0000003b00)={0x0, 0x3938700}, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x401000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r3, 0x0, r4, 0x0, 0x38f9, 0x0) close_range(r3, r4, 0x0) ioctl$TIOCMBIS(r4, 0x5416, &(0x7f00000000c0)=0x3ff) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100182e5e74033073004fb35000000010902120001000040400904"], 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) timerfd_create(0x7, 0x800) (async) timerfd_settime(r1, 0x2, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000100)=@req={0x40, 0x0, 0x7fff, 0x5}, 0x10) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) ppoll(&(0x7f0000001540)=[{r1, 0x4014}], 0x1, &(0x7f0000003b00)={0x0, 0x3938700}, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000340)={0x401000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) pipe2(&(0x7f0000000000), 0x80000) (async) splice(r3, 0x0, r4, 0x0, 0x38f9, 0x0) (async) close_range(r3, r4, 0x0) (async) ioctl$TIOCMBIS(r4, 0x5416, &(0x7f00000000c0)=0x3ff) (async) 3.175668531s ago: executing program 4 (id=2241): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000030d40), 0x80100, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f0000030d80)=0x7f) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000080)={[{@subsystem='cpuset'}, {@subsystem='cpuset'}, {@subsystem='cpuacct'}], [{@fsmagic={'fsmagic', 0x3d, 0x200}}]}) r1 = socket$netlink(0x10, 0x3, 0x9) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) 3.08143803s ago: executing program 4 (id=2243): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x8, 0x20, 0x0, 0xa, {{0x13, 0x4, 0x2, 0x19, 0x4c, 0x68, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010101, @multicast1, {[@generic={0x82, 0x12, "0d3eccac06000000daa8978e7b74401e"}, @ssrr={0x89, 0xb, 0xb2, [@private=0xa010102, @multicast2]}, @end, @end, @noop, @ra={0x94, 0x4, 0x200}, @generic={0x86, 0x10, "f2161ecb7fe1fbaddb074987f797"}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$inet6(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7dc151f018cfa9b7ae19c80d2269f6994173d3417b46a81a957233bfb4fa9e014bf816bc529ab46d7f303ef70f9d429524734989ae00e70e80a1919a0d00738e9b9b05b85787b7f4e720af56e3f27563e23828064d2e4c37a6b7b376a2abcc7b7bb9ad479b95472aba1e112a1359afbc39ab549a5af018f7081eda43b5da783faa245287efdf77576b612387af7bbe60c2078a68a5fd389d2f30d95bb9801b", 0x9f}, {&(0x7f0000000400)="3c86f0517f78bad3052f9075835c33c14df6968ed2962a7d921515d03c8d7e66b623ab8c598feb815c1d56c40e1f30fe6ae46a262e74b43318621243f862a405a3963249254efbb33b4f124f43dc77a938d0757fe00f00fd25b3c3cfc5c5ff5edb89a7bca949eb9015286943e0632867536a15adec736006d418d16d45a9bed4b87336e9d1541b7d1c70c9e8a6a0ad87dc0dd00a171c1f4bce3c2f14512798e96f01fb09674c5581bc46b711e468f77f0c118c6196157016c9b6d8a810215b3db6bf3e3b5619de4b0bb465d3bc74bfc86aa32eacebfad15c54ed", 0xda}, {&(0x7f0000000500)="9da4a99c7f1c35e5dec4955536e7fb4b88159a8ab6daf4cb8304e8ee88f2ac8abeb58b42fa4c675e9fcb9896170ba8afee8298347a487966cccc78cbe8973cd7884984776afba6cf96168b1249bf2c5e6c077ec5fdaddb511bcb57922505d2173368e3016fea6ce5a5d7650b972b0dfbb6b9e3881d05bcfd18c21ca03758b4979cbdffa775e4219b645e2d406f2912b29fa70d5e4b84b0663dd31b70671a3eb7e7899c79cee0a6ce0ff2780868a57b64e71eb505a6b25826501d6c530b3683542e334615bfc2dc59b90132d6801c02c7e1d32de057c7b19f2d198caa6b78b0b16129487024e03518442f3923ec20cf4251952e7e32", 0xf5}, {&(0x7f0000000600)="ec8c110bc0af04d5086cd684bd3ee3196b2b0f53638a18b71a10ee334a800443657f552f63365a8ae6241a53e23e91e8b3a3b43ed27b67106df7dd929029989f05567e0f39c3d8242aa72fe0d00f90a320ebdea3df", 0x55}, {&(0x7f0000000680)="11339e1fd15a149ed8b4f0cec724386c08905a05b5dd2433bd7cefdf41a0c432d93af24ba76d220a15d5b1c0c5184637c190f669796f8534b7ebc84c30acdb10ca5d0af63d03b6b7c6e1f0435540669f31055d3009d8dd3f51be3038c62b295de8e6f480e4f50e1a82430bdb1bac9ddd08ecc14b37efd8a6210358bb665b7a60cbd86b178b3fa3eb59b727e6994fe2c8c640aeb7871371fa8bbe2fb514ae5814d9c97db285d2cca8794b0451f45a657801264ea2b41bd73b716aa981d4a855a4828f49e455c755ff39b7f94c8378db3f500380ef2f54e75199e63c9be7741ac38166302bdf43d4a759ca6d6a177a8c896baaae9cd1cb80b27d", 0xf9}], 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="1400000000000000290000000800000000000080000000e023000000000000002900000032000000ff5e77457d0100"/56, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x40}, 0x20000030) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x20, 0x4, 0x1, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff7, 0x400001, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x4, 0x3ff, 0x20001e5b, 0x3, 0xe66, 0x3, 0x6, 0x4006, 0x0, 0x3]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0c010000030101010000000000f6ff00000000073c00198008000200040d00000800020046000000080001006001000008000200810000000800020000000000080001000000000008000200850200004400068008000100ac1414aa08000100ac14140b080002000000000014000500fe80000000"], 0x10c}, 0x1, 0x0, 0x0, 0x48800}, 0x40080) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000940)=""/225, &(0x7f0000000a40)=0xe1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r4, @ANYRES8=r5, @ANYBLOB="010027bd7000fbdbdf251000000008000300", @ANYRES64=r6, @ANYRESOCT=r7], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x40) r8 = syz_open_dev$media(&(0x7f0000000180), 0x1, 0x8000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r9 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x10200) ioctl$NBD_SET_SIZE_BLOCKS(r9, 0xab07, 0x9) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r10, 0xc00c6211, 0x0) ioctl$BINDER_THREAD_EXIT(r10, 0x40046208, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x1ff) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0) 2.844808877s ago: executing program 6 (id=2246): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e0494993cfc0000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000094231306e53f070c0000002a90000771456137a0"], 0x0}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='\x1e)/\\\x00', 0x80, &(0x7f0000000040)={@align=0x2, {0x7, 0x3, 0x27a, 0xff}}, 0x7, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0xfffffffc}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) close_range(r1, r2, 0x2) 2.243380559s ago: executing program 6 (id=2253): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x18, 0x14, 0x1, 0x70bd28, 0x25dfdbfb, {0x1e, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44004}, 0x26000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x49) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x494, &(0x7f0000000000)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x494, &(0x7f0000000000)=ANY=[]) 1.711829905s ago: executing program 4 (id=2261): r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000100)={0x1}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000000)={0xed, 0x0, 0x5}) 1.668282663s ago: executing program 6 (id=2262): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, 0x0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000100)=@IORING_OP_BIND=@ipv6={0x38, 0x1a, 0x0, 0xffffffffffffffff, 0xfffffffffffffefa, &(0x7f0000000180)={{0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, 0x0, 0x0, 0x1}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x3, 0x97a, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80}}}, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) recvmsg$can_bcm(r0, &(0x7f0000001ec0)={&(0x7f0000000a40)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000ac0)=""/143, 0x8f}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/40, 0x28}, {&(0x7f0000001bc0)=""/190, 0xbe}, {&(0x7f0000001c80)=""/183, 0xb7}], 0x5, &(0x7f0000001dc0)=""/224, 0xe0}, 0x40000020) sendmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="000000000000000000000029203ad7ffd64c7080c5e3863eb746126b28b52c3114b1916ecae2edc63a784d52e10cf5660126be9e6086df8d9355cb3a15a4d907f4ff97b08d4fe4ba769554f830807e138c5b4a95fe935114aa31445d927da970b96e9e78523f7e3a2a651bb3c25e0eb1bb5ddcf415a3818651ade54d55c37880155f9b8eeeb1d2be4d841b0f5c450e57f7a9367976e02026bdd95d4459235101237e41ff702acd91b8840365c8ff91b71c66e987482841f06c296829957d00"/202, 0xca}], 0x1}}, {{&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x400, @local, 0x2b29}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000680)="ff43b3d2b939854e015d7073c17aec8845aa6e9e44cf37d17dd3fff7f445f18637891fe85f380cc457cee7839a325a707025b2cfa5d245903f910b60f8626447ee00ba693341ea4594b966aa35ec217db769159eb8daf26ddff582113bf4bc", 0x5f}, {&(0x7f0000000700)="b35bc4a2d0bf608cccce283d1e10382f6346cb6efd235425e12ad18b205387f59c76a599c169de492f295926efd02c7d37a2ccf0f281a6ea9f02238c115963abbabee144cb4b5622a165d331c16e841cbe42b9f5aa1f5592541999f2e657789bab3754b65930e6a5326dd8e0769a816c21", 0x71}, {&(0x7f0000000780)="b14c4ba10bc29be8b13c8179c0cf2f538545d416bbbdb219a40f23c18cf580cbd1629ed4bc7f38cc2cf2a6d79cd3da8a12bf6347d8bbd6bb73b7da787284ac3685c6839636a1768958c55d", 0x4b}, {&(0x7f0000000800)="4de4a3db57e2be8f1b95814267c57276e65cfa99d6bc6ea9690496ea11a3a35bacfc1afca8a4df1f89189d3b47c54d2be9f92470844b0078165ea14eaecb1aa70daf34c2b03d64111404f6efff5254a022ff1a1d124299c1352963dcae99b642d45fc3c95d69c9bb32c58ab704154480171c2e15620ff65a9dfe6925f561f9da9d6362038c2668b28f7ed7a658f6fdce68078929ded4cb111f41cf3ac0c39bf86c1e115ee1b4a106d5f7cfda6d1c1d3189029ca786aa1eb383387b0488323fdf634667c1a990b063b9441f2bb36199e68c08b1c99ef867bce0305aa380", 0xdd}, {&(0x7f0000000900)="ad05ce362a9e65739b9eb5b43bce198c4004f33b55e11a0b4fad3a92f3cd", 0x1e}], 0x5}}], 0x2, 0x9200000000000000) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r6, 0x407, 0x80000000) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001fc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000002000)=ANY=[@ANYBLOB="64000000020603000000000000000000070000072400078008000a4000007b9205000713330000000800174000000007080009400001000005000500055424280000000c0007800800174000000322050005000100000005000400030000000500040001000000f19898d3e373d7f3421d"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) 1.604713816s ago: executing program 4 (id=2263): r0 = socket$unix(0x1, 0x1, 0x0) syz_usb_connect(0x5, 0x10b, &(0x7f0000001180)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x80201, 0x88) mkdirat(r1, &(0x7f0000001140)='./file0\x00', 0x0) recvmmsg$unix(r0, &(0x7f0000001040)=[{{&(0x7f0000000000), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/240, 0xf0}, {&(0x7f0000000180)=""/136, 0x88}, {&(0x7f0000000240)=""/41, 0x29}, {&(0x7f0000000280)=""/50, 0x32}, {&(0x7f00000002c0)=""/155, 0x9b}, {&(0x7f0000000380)=""/29, 0x1d}], 0x6}}, {{&(0x7f0000000440), 0x6e, &(0x7f0000000b40)=[{&(0x7f00000004c0)=""/214, 0xd6}, {&(0x7f00000005c0)=""/11, 0xb}, {&(0x7f0000000600)=""/253, 0xfd}, {&(0x7f0000000700)=""/139, 0x8b}, {&(0x7f00000007c0)=""/160, 0xa0}, {&(0x7f0000000880)=""/203, 0xcb}, {&(0x7f0000000980)=""/172, 0xac}, {&(0x7f0000000a40)=""/99, 0x63}, {&(0x7f0000000ac0)=""/88, 0x58}], 0x9, &(0x7f0000000c00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000c80)=""/161, 0xa1}, {&(0x7f0000000d40)=""/94, 0x5e}, {&(0x7f0000000dc0)=""/214, 0xd6}, {&(0x7f0000000ec0)=""/109, 0x6d}, {&(0x7f0000000f40)=""/21, 0x15}], 0x5, &(0x7f0000001000)=[@cred={{0x1c}}], 0x20}}], 0x3, 0x20, &(0x7f0000001100)={0x0, 0x989680}) 1.042753396s ago: executing program 7 (id=2268): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000ff000000"], 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0xfffffffffffffffe, 0x12) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='ccgx-ucsi 0x08\n', 0xf) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='ccgx-ucsi 0x08\n', 0xf) 680.514546ms ago: executing program 2 (id=2269): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) write(r1, &(0x7f0000000040)="c24d5304", 0x4) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/126, 0x7e}], 0x1}, 0x156f0e9e}], 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000042c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004280)={&(0x7f0000001dc0)={0x24c0, 0x26, 0x300, 0x70bd29, 0x25dfdbfd, {0x1a}, [@typed={0x8, 0x6a, 0x0, 0x0, @pid}, @typed={0x60, 0xf2, 0x0, 0x0, @binary="bdf1fbd5efd3947e16536cdea90ead4e7682e1497f8d0ad3ac003cad080e5cd2fa9659e19d62803cca51b0e7761ff8b8822aa73244f5b3cc729e62919f4403e0185ad0b44d99d6bd44bd8c1b184ff30c85601eb2e9aa7b0d9a3361b9"}, @nested={0x12cc, 0x3c, 0x0, 0x1, [@typed={0x8, 0xaf, 0x0, 0x0, @ipv4=@multicast1}, @generic="e4edcdf8ccd1bab3fcebf87ca7fbe33445122d4e8922a814141e2bf9690b0b265f88a080835f6acc9b435abe4fe0aa6250b2cd081c35df2a1f1e0e1a12f048b23c3e092cf77b698361fa9c9d6c2c72855261906ff0aedcc18cbae7a8d752c4d659e1ccae71ccaa1f0879ef8fb3a5815f47b4c52a29591f133e739784ab9075fff47655a435d8e79681d71dd7cb7764cb09f9", @nested={0x4, 0x8}, @typed={0x8, 0x9c, 0x0, 0x0, @u32=0x4}, @generic="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", @typed={0x8, 0x167, 0x0, 0x0, @fd=r1}, @generic="6a0a5ed7a20d8df1e66f4890d3b7ff265ecd367aaaab43208e3cf5915ef570511ae9ba5d08d9706278a5e46f0486571a567cd1b1555abe155caa0b47476aa0eff8ad795837ad59b161066b585b6d5adc539e157de676f8015455a07ea70a8c8b8163527e130f49fd4ca5cf20d4292b8f1b0ca1339548b22a9705400ec2b557fa4920cf10afbf56d879b196161185c4fcd5c633c66a06e53b82f2681cc95f32ac99540ae1a467a0f4c400afa919d7ad90f76c7bda74769b21fedbde63da9426b1f0988bc83156523af221accfa0", @generic="9f72cf23718f33fe1dbbfd2adf1f3eebd753941bdd7e2a073c4a2c730e43abb99d5e647917602b2d0db7c16260b398ff7a09352a13407827ceabeed5ce0222310cacb299822eb4ff937c0137747b77d949b59c5134448bca7570b593036271353cf71f6e5d1355ed9a401ea4c1abaa9f7b7765ff3ec8a0faafd2207ddbfd1d8b28fd0d3a081539044def8c900f26ebcc4645d25a35cba106bc965a06d92610efdd2b", @generic="42fa448ce3ee5dd099bb5f70a91e23f2ddcf9b6d75b4919d01cfbc9d59be53fe47c7df0dbc1ed85ed827ee358cf4f8bdfe67d868e71e048d7fdb1b250159c9", @generic="71dfbee85c78213caff58393225168980a5b5fdbbd4bd60698ff1aa9b9394f8dd8ca15695fe9d5ab7de35595cd8a23d2fbb822ef46c3a9806b2322ebee9399bae9cddf1159d36a99a33dd24204cbeeea91e5584dab76ab9a930daebbf7abb539f8541e42b65804054c44e6e9"]}, @generic="74b1a73457ceb544b3bb730d9e5a1310dbda0b1632b113c77b2ead7e4e2ab53d4cbe89dced4ca182148d395a695362cfa755a0996ccb879687d4b0479506207495805f470e4c4a9a7dbf7d0578eb2f43b227b8fb4a782bd8988815edb0a473e97053f2e328b411db425a747eb0f32b4579bdfbfc3df1c76a16b2f60157f829e679147a45b9b47a8c4a09db6fb6", @nested={0xd0, 0x144, 0x0, 0x1, [@generic="6cd96372b817afdebc86a4b158bb97b6286b0493300f9c6e9d73a3d150b8ce2a58788f270789612b7ae5aed18143161cffd36f5e55ee213fb8a6f6551ac02d048f55338d7fe97d882a3180fa9010b9adb67b670fe96cc4bc28409c5d8a2c9876ed4dfeef2b1900ede300fea6a4be140a5a56253b3b4c8b9e90c77343a609d9", @nested={0x4, 0x2}, @generic="0eaa7b386cfeae1e3c75ecc7aab83fa17ad290210ebd7d24a2bb9ed734482157defc959a9d75cdf4dabee796ff36cef3c1904361a0f9452b1b6d7fb422f707e529429d3fb3", @nested={0x4, 0x74}]}, @typed={0x8, 0x146, 0x0, 0x0, @uid=r2}, @generic="bcbc51880f40ec1f09e8888c8bbfafd3a7", @generic="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"]}, 0x24c0}, 0x1, 0x0, 0x0, 0x4004010}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f00000004c0)={0x0, 0xa1b2, 0x10, 0x0, 0x83}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x20, 0x1000002, 0x91, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x0, 0x230, 0x0, r9}}], 0x1, 0x0, 0x0) 676.754749ms ago: executing program 6 (id=2270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000002f03ca4da905cd28000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574cb91d0"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000002f03ca4da905cd28000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574cb91d0"], 0x5c}}, 0x0) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async) socket$netlink(0x10, 0x3, 0xc) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) 369.963068ms ago: executing program 7 (id=2271): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20940, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000000)={0x2, &(0x7f0000000340)=[{0xb, '\x00', @buffer={"21e109bbd40fa147212cff67a0000000000004903e9583d9fa9372c5b07700", 0x20}, 0x4}, {0x29, '\x00', @st={0x4, [{0x0, @svalue=0xfe9}, {0x0, @uvalue=0x3071}, {0x2, @uvalue=0x8}, {0x2, @svalue=0x100}]}, 0x2}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008041}, 0x4000000) ioctl$KVM_RUN(r3, 0xae80, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) write(r0, &(0x7f0000000000)='7', 0x1) unshare(0x0) keyctl$session_to_parent(0x12) 333.177843ms ago: executing program 4 (id=2272): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10020, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) setns(0xc9, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x560f, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) r3 = socket(0x8, 0x2, 0x0) setsockopt(r3, 0xea, 0x42000004, &(0x7f0000000280)="01000025", 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) unshare(0x6a040000) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f00000000c0)="05178100", 0x4, 0x50, &(0x7f0000000080)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) write(r1, &(0x7f0000000000)='3', 0x1) 260.610543ms ago: executing program 7 (id=2273): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000010401000000000000000000020000000a0002"], 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}}, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r3, &(0x7f0000000100)=""/9, 0xfffffd87) write$tun(r3, &(0x7f00000001c0)=ANY=[], 0xffe) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 241.545637ms ago: executing program 7 (id=2274): r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="3000000024000106010000000000000000000000010000000000fffff1ffffff000000000c000100696e677265737300", 0x30) write(r0, &(0x7f0000000100)="6c0000002c003f060200000000000000000011000100000000000000f1ffffff000301000c000100666c6f77657200003c0002801c0054801800058005000100010000000c00020000000000000000011c1155801800058005000100ff0000000c000200ffffffffffffffff", 0x6c) 160.808776ms ago: executing program 7 (id=2275): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fdatasync(r2) 52.55235ms ago: executing program 6 (id=2276): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="180000006a001f", @ANYRES32=r0, @ANYRESDEC], 0x20}], 0x1, 0x0, 0x0, 0x2c0040d0}, 0x10) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a400000000600000000050000081400045b527c12800b00010065787468647200000900010073797a30000000000900020073797a3000000000140000001100010000000000000000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r3 = fsmount(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, r4}, 0x14) connect$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x2, {0x2, 0xff}, 0x7e}, 0x18) r6 = openat$cgroup_pressure(r3, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000040)={'some', 0x20, 0x2, 0x20, 0x100002}, 0x2f) 29.528529ms ago: executing program 4 (id=2277): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000080)=[{0x6, 0xc0, 0x0, 0xda01}]}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) timer_settime(r1, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000100)) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r8, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r9, 0x5b15, 0x0) (async) r10 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r10) inotify_init1(0x800) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000500)=ANY=[@ANYRES32=r11, @ANYBLOB="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"], 0x9) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="e4f0fd0e70eb3906b8a9dd8460034b56be7d6c5c10db38754c5c2d6319e9c7fa40fb6978e956baf2a05129bb5e71e740e52cc72d10a62fe79426bc2eff9347a421c85db51c5a949a039b772390f910b73b0d1de2991946a0fa763e6233e6316734c1614efbe9dff9c220854175b083d96d8b7f06cf39dce42942aac846f567c0e1604be6995d72cd63b7", @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x6, 0x5, 0x0, 0x4, 0x1, 0x5640, 0x0, 0x10000101}, 0x20) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010003000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) 0s ago: executing program 7 (id=2278): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005d}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c41d02fffd01"], 0x0) kernel console output (not intermixed with test programs): ); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 327.823045][ T1907] usb 8-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 327.930974][ T1907] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 327.949797][ T1907] usb 8-1: USB disconnect, device number 3 [ 327.992692][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.111623][ T5711] logitech 0003:046D:C286.001B: unknown main item tag 0x0 [ 328.111647][ T5711] logitech 0003:046D:C286.001B: unknown main item tag 0x0 [ 328.111670][ T5711] logitech 0003:046D:C286.001B: unknown main item tag 0x0 [ 328.111685][ T5711] logitech 0003:046D:C286.001B: unknown main item tag 0x0 [ 328.111700][ T5711] logitech 0003:046D:C286.001B: unknown main item tag 0x0 [ 328.161215][ T5711] logitech 0003:046D:C286.001B: hidraw0: USB HID v80.00 Device [HID 046d:c286] on usb-dummy_hcd.4-1/input0 [ 328.161240][ T5711] logitech 0003:046D:C286.001B: no inputs found [ 328.266474][ T1907] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 328.308404][T11876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.310438][T11876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.426090][ T1907] usb 8-1: Using ep0 maxpacket: 32 [ 328.426817][ T1907] usb 8-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 328.427822][ T1907] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.432878][ T1907] usb 8-1: config 0 descriptor?? [ 328.649539][ T1907] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 328.669968][ T1907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 328.671478][ T1907] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 328.671507][ T1907] usb 8-1: media controller created [ 328.720054][ T1907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 328.802492][T11885] FAULT_INJECTION: forcing a failure. [ 328.802492][T11885] name failslab, interval 1, probability 0, space 0, times 0 [ 328.802510][T11885] CPU: 0 UID: 0 PID: 11885 Comm: syz.6.1613 Not tainted syzkaller #0 PREEMPT(full) [ 328.802524][T11885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 328.802531][T11885] Call Trace: [ 328.802535][T11885] [ 328.802540][T11885] dump_stack_lvl+0xe8/0x150 [ 328.802559][T11885] should_fail_ex+0x3eb/0x540 [ 328.802576][T11885] should_failslab+0xa8/0x100 [ 328.802590][T11885] ? skb_clone+0x212/0x3a0 [ 328.802601][T11885] kmem_cache_alloc_noprof+0x9c/0x600 [ 328.802626][T11885] ? skb_clone+0x212/0x3a0 [ 328.802639][T11885] skb_clone+0x212/0x3a0 [ 328.802650][T11885] __netlink_deliver_tap+0x355/0x6e0 [ 328.802667][T11885] ? netlink_deliver_tap+0x2e/0x1b0 [ 328.802679][T11885] netlink_deliver_tap+0x19c/0x1b0 [ 328.802691][T11885] netlink_sendskb+0x68/0x140 [ 328.802702][T11885] ctrl_getfamily+0x4c8/0x5c0 [ 328.802716][T11885] ? __pfx_ctrl_getfamily+0x10/0x10 [ 328.802730][T11885] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 328.802748][T11885] genl_family_rcv_msg_doit+0x233/0x340 [ 328.802765][T11885] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 328.802785][T11885] ? __dev_queue_xmit+0x29b/0x3820 [ 328.802799][T11885] genl_rcv_msg+0x614/0x7a0 [ 328.802815][T11885] ? __pfx_genl_rcv_msg+0x10/0x10 [ 328.802828][T11885] ? __pfx_ctrl_getfamily+0x10/0x10 [ 328.802842][T11885] ? __asan_memcpy+0x40/0x70 [ 328.802856][T11885] netlink_rcv_skb+0x226/0x4a0 [ 328.802867][T11885] ? __pfx_genl_rcv_msg+0x10/0x10 [ 328.802881][T11885] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 328.802899][T11885] ? down_read+0x2b9/0x320 [ 328.802912][T11885] genl_rcv+0x28/0x40 [ 328.802924][T11885] netlink_unicast+0x7bd/0x940 [ 328.802940][T11885] netlink_sendmsg+0x7c3/0xae0 [ 328.802954][T11885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.802970][T11885] ? apparmor_socket_sendmsg+0x98/0x360 [ 328.802984][T11885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.802994][T11885] sock_sendmsg_nosec+0x13a/0x180 [ 328.803008][T11885] __sys_sendto+0x408/0x5a0 [ 328.803024][T11885] ? __pfx___sys_sendto+0x10/0x10 [ 328.803050][T11885] ? rcu_is_watching+0x16/0xb0 [ 328.803067][T11885] __x64_sys_sendto+0xde/0x100 [ 328.803082][T11885] do_syscall_64+0x166/0x520 [ 328.803091][T11885] ? trace_irq_disable+0x3b/0x140 [ 328.803103][T11885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.803113][T11885] ? clear_bhb_loop+0x70/0xc0 [ 328.803125][T11885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.803135][T11885] RIP: 0033:0x7f17eb35e98e [ 328.803146][T11885] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 328.803154][T11885] RSP: 002b:00007f17ec283e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 328.803166][T11885] RAX: ffffffffffffffda RBX: 00007f17ec2856c0 RCX: 00007f17eb35e98e [ 328.803173][T11885] RDX: 0000000000000020 RSI: 00007f17ec284000 RDI: 0000000000000003 [ 328.803179][T11885] RBP: 0000000000000000 R08: 00007f17ec283f04 R09: 000000000000000c [ 328.803186][T11885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 328.803192][T11885] R13: 00007f17ec283f58 R14: 00007f17ec284000 R15: 0000000000000000 [ 328.803208][T11885] [ 328.870427][ T44] wlan1: Trigger new scan to find an IBSS to join [ 328.951667][T11869] hugetlbfs: Unknown parameter 'nr_inodes' [ 329.392239][T11894] __nla_validate_parse: 58 callbacks suppressed [ 329.392252][T11894] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1616'. [ 329.460555][T11897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.497327][T11897] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1617'. [ 329.497350][T11897] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 329.817889][ T1907] az6027: usb out operation failed. (-71) [ 329.817901][ T1907] stb0899_attach: Driver disabled by Kconfig [ 329.817907][ T1907] az6027: no front-end attached [ 329.817907][ T1907] [ 329.848515][ T1907] az6027: usb out operation failed. (-71) [ 329.848527][ T1907] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 329.852216][ T1907] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input49 [ 329.897154][ T1907] dvb-usb: schedule remote query interval to 400 msecs. [ 329.897168][ T1907] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 329.904083][ T1907] usb 8-1: USB disconnect, device number 4 [ 329.966056][T11920] fuse: Bad value for 'fd' [ 330.033310][ T1907] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 330.059534][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1621'. [ 330.194234][ T1220] usb 5-1: USB disconnect, device number 116 [ 330.322698][T11930] FAULT_INJECTION: forcing a failure. [ 330.322698][T11930] name failslab, interval 1, probability 0, space 0, times 0 [ 330.322717][T11930] CPU: 0 UID: 0 PID: 11930 Comm: syz.4.1622 Not tainted syzkaller #0 PREEMPT(full) [ 330.322729][T11930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.322735][T11930] Call Trace: [ 330.322740][T11930] [ 330.322744][T11930] dump_stack_lvl+0xe8/0x150 [ 330.322762][T11930] should_fail_ex+0x3eb/0x540 [ 330.322780][T11930] ? __alloc_skb+0x1db/0x7a0 [ 330.322794][T11930] should_failslab+0xa8/0x100 [ 330.322808][T11930] ? __alloc_skb+0x1db/0x7a0 [ 330.322819][T11930] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 330.322829][T11930] ? __alloc_skb+0x18d/0x7a0 [ 330.322842][T11930] ? __alloc_skb+0x1db/0x7a0 [ 330.322858][T11930] __alloc_skb+0x1db/0x7a0 [ 330.322873][T11930] netlink_ack+0x136/0xb30 [ 330.322883][T11930] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.322899][T11930] ? __asan_memcpy+0x40/0x70 [ 330.322913][T11930] netlink_rcv_skb+0x2a4/0x4a0 [ 330.322924][T11930] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.322937][T11930] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.322964][T11930] ? down_read+0x2b9/0x320 [ 330.322977][T11930] genl_rcv+0x28/0x40 [ 330.322989][T11930] netlink_unicast+0x7bd/0x940 [ 330.323004][T11930] netlink_sendmsg+0x7c3/0xae0 [ 330.323019][T11930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.323033][T11930] ? apparmor_socket_sendmsg+0x98/0x360 [ 330.323048][T11930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.323059][T11930] sock_sendmsg_nosec+0x13a/0x180 [ 330.323072][T11930] __sys_sendto+0x408/0x5a0 [ 330.323089][T11930] ? __pfx___sys_sendto+0x10/0x10 [ 330.323116][T11930] ? do_user_addr_fault+0xd3f/0x1480 [ 330.323133][T11930] __x64_sys_sendto+0xde/0x100 [ 330.323148][T11930] do_syscall_64+0x166/0x520 [ 330.323158][T11930] ? trace_irq_disable+0x3b/0x140 [ 330.323169][T11930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.323180][T11930] ? clear_bhb_loop+0x70/0xc0 [ 330.323192][T11930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.323202][T11930] RIP: 0033:0x7f70c4d5e98e [ 330.323212][T11930] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 330.323221][T11930] RSP: 002b:00007f70c5c55e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 330.323233][T11930] RAX: ffffffffffffffda RBX: 00007f70c5c576c0 RCX: 00007f70c4d5e98e [ 330.323240][T11930] RDX: 0000000000000020 RSI: 00007f70c5c56000 RDI: 0000000000000003 [ 330.323247][T11930] RBP: 0000000000000000 R08: 00007f70c5c55f04 R09: 000000000000000c [ 330.323253][T11930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 330.323260][T11930] R13: 00007f70c5c55f58 R14: 00007f70c5c56000 R15: 0000000000000000 [ 330.323276][T11930] [ 330.830248][T11920] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 330.830452][T11920] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 330.974973][T11920] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 330.975096][T11920] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 331.070334][T11920] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 331.070380][T11920] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 331.109495][ T54] Bluetooth: hci0: Opcode 0x0c13 failed: -112 [ 331.127186][T11920] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 331.127238][T11920] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 331.157764][T11920] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 331.157802][T11920] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 331.159950][T11946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1626'. [ 331.201568][T11920] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 331.219044][T11920] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 331.219090][T11920] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 331.242585][T11920] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 331.268684][T11920] hwrng_fill thread creation failed [ 331.353137][T11920] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 331.732764][T11969] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 331.986599][T11984] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1636'. [ 332.285601][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 332.396575][T10008] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 332.455419][ T5757] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 332.542045][T12009] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 332.557838][T10008] usb 7-1: not running at top speed; connect to a high speed hub [ 332.557858][T10008] usb 7-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 332.561018][T10008] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.561053][T10008] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.607489][ T5757] usb 5-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 332.608288][ T5757] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 118, changing to 10 [ 332.608311][ T5757] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25354, setting to 1024 [ 332.609136][ T5757] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 118, changing to 10 [ 332.609152][ T5757] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25354, setting to 1024 [ 332.610745][ T5757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.610758][ T5757] usb 5-1: Product: syz [ 332.610766][ T5757] usb 5-1: Manufacturer: syz [ 332.610773][ T5757] usb 5-1: SerialNumber: syz [ 332.705961][ T5757] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 332.713825][ T5757] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 332.741058][T10008] uvcvideo 7-1:1.0: Found UVC 1.00 device (046d:0825) [ 332.741095][T10008] uvcvideo 7-1:1.0: No streaming interface found for terminal 32770. [ 332.774243][ T5757] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 332.896856][ T5711] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 332.969398][T10008] usb 7-1: USB disconnect, device number 15 [ 332.990658][T12019] FAULT_INJECTION: forcing a failure. [ 332.990658][T12019] name failslab, interval 1, probability 0, space 0, times 0 [ 332.990675][T12019] CPU: 0 UID: 0 PID: 12019 Comm: syz.7.1644 Not tainted syzkaller #0 PREEMPT(full) [ 332.990687][T12019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.990694][T12019] Call Trace: [ 332.990698][T12019] [ 332.990703][T12019] dump_stack_lvl+0xe8/0x150 [ 332.990723][T12019] should_fail_ex+0x3eb/0x540 [ 332.990741][T12019] should_failslab+0xa8/0x100 [ 332.990755][T12019] ? skb_clone+0x212/0x3a0 [ 332.990766][T12019] kmem_cache_alloc_noprof+0x9c/0x600 [ 332.990782][T12019] ? skb_clone+0x212/0x3a0 [ 332.990795][T12019] skb_clone+0x212/0x3a0 [ 332.990806][T12019] __netlink_deliver_tap+0x355/0x6e0 [ 332.990824][T12019] ? netlink_deliver_tap+0x2e/0x1b0 [ 332.990836][T12019] netlink_deliver_tap+0x19c/0x1b0 [ 332.990847][T12019] netlink_sendskb+0x68/0x140 [ 332.990859][T12019] netlink_rcv_skb+0x2a4/0x4a0 [ 332.990870][T12019] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.990884][T12019] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.990902][T12019] ? down_read+0x2b9/0x320 [ 332.990916][T12019] genl_rcv+0x28/0x40 [ 332.990928][T12019] netlink_unicast+0x7bd/0x940 [ 332.990943][T12019] netlink_sendmsg+0x7c3/0xae0 [ 332.990957][T12019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.990973][T12019] ? apparmor_socket_sendmsg+0x98/0x360 [ 332.990988][T12019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.990998][T12019] sock_sendmsg_nosec+0x13a/0x180 [ 332.991012][T12019] __sys_sendto+0x408/0x5a0 [ 332.991028][T12019] ? __pfx___sys_sendto+0x10/0x10 [ 332.991055][T12019] ? do_user_addr_fault+0xd3f/0x1480 [ 332.991073][T12019] __x64_sys_sendto+0xde/0x100 [ 332.991088][T12019] do_syscall_64+0x166/0x520 [ 332.991097][T12019] ? trace_irq_disable+0x3b/0x140 [ 332.991108][T12019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.991119][T12019] ? clear_bhb_loop+0x70/0xc0 [ 332.991131][T12019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.991141][T12019] RIP: 0033:0x7f9a2c95e98e [ 332.991151][T12019] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 332.991160][T12019] RSP: 002b:00007f9a2d7abe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 332.991172][T12019] RAX: ffffffffffffffda RBX: 00007f9a2d7ad6c0 RCX: 00007f9a2c95e98e [ 332.991185][T12019] RDX: 0000000000000020 RSI: 00007f9a2d7ac000 RDI: 0000000000000003 [ 332.991192][T12019] RBP: 0000000000000000 R08: 00007f9a2d7abf04 R09: 000000000000000c [ 332.991198][T12019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 332.991205][T12019] R13: 00007f9a2d7abf58 R14: 00007f9a2d7ac000 R15: 0000000000000000 [ 332.991220][T12019] [ 333.011148][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 333.070089][ T5711] usb 3-1: New USB device found: idVendor=0424, idProduct=7800, bcdDevice=f1.7e [ 333.086375][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 333.098408][ T5711] usb 3-1: config 254 has an invalid interface number: 94 but max is 0 [ 333.098422][ T5711] usb 3-1: config 254 has no interface number 0 [ 333.098444][ T5711] usb 3-1: config 254 interface 94 altsetting 16 endpoint 0xC has invalid maxpacket 12336, setting to 1024 [ 333.098458][ T5711] usb 3-1: config 254 interface 94 altsetting 16 bulk endpoint 0xC has invalid maxpacket 1024 [ 333.098470][ T5711] usb 3-1: config 254 interface 94 has no altsetting 0 [ 333.168275][ T4927] Bluetooth: hci0: command 0x0c3a tx timeout [ 333.168328][ T54] Bluetooth: hci5: command 0x0c1a tx timeout [ 333.247364][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 333.247464][ T5711] usb 3-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 333.247476][ T5711] usb 3-1: Product: syz [ 333.247484][ T5711] usb 3-1: Manufacturer: syz [ 333.247492][ T5711] usb 3-1: SerialNumber: syz [ 333.429138][T12009] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 333.698397][ T5711] usb 3-1: USB disconnect, device number 121 [ 333.739257][T12034] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1646'. [ 333.809349][ T44] wlan1: Trigger new scan to find an IBSS to join [ 334.313119][ T32] audit: type=1326 audit(1790496831.956:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12053 comm="syz.2.1652" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff81799e159 code=0x0 [ 334.367058][ T4927] Bluetooth: hci1: command 0x0406 tx timeout [ 334.439757][T12059] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 334.439910][T12059] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 334.439921][T12059] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 334.439928][T12059] UDF-fs: Scanning with blocksize 512 failed [ 334.492053][T12059] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 334.492134][T12059] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 334.492144][T12059] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 334.492151][T12059] UDF-fs: Scanning with blocksize 1024 failed [ 334.539627][T12059] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 334.539707][T12059] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 334.539718][T12059] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 334.539725][T12059] UDF-fs: Scanning with blocksize 2048 failed [ 334.579474][T12061] FAULT_INJECTION: forcing a failure. [ 334.579474][T12061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.579491][T12061] CPU: 0 UID: 0 PID: 12061 Comm: syz.6.1654 Not tainted syzkaller #0 PREEMPT(full) [ 334.579503][T12061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 334.579510][T12061] Call Trace: [ 334.579514][T12061] [ 334.579519][T12061] dump_stack_lvl+0xe8/0x150 [ 334.579539][T12061] should_fail_ex+0x3eb/0x540 [ 334.579557][T12061] _copy_to_iter+0x1e4/0x1810 [ 334.579581][T12061] ? __pfx__copy_to_iter+0x10/0x10 [ 334.579597][T12061] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 334.579612][T12061] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 334.579627][T12061] __skb_datagram_iter+0xf8/0x980 [ 334.579637][T12061] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 334.579650][T12061] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 334.579664][T12061] skb_copy_datagram_iter+0xb5/0x240 [ 334.579676][T12061] netlink_recvmsg+0x2b9/0xa50 [ 334.579692][T12061] ? __pfx_netlink_recvmsg+0x10/0x10 [ 334.579705][T12061] ? aa_sock_msg_perm+0x144/0x210 [ 334.579721][T12061] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 334.579733][T12061] ? security_socket_recvmsg+0x7e/0x2c0 [ 334.579744][T12061] ? __pfx_netlink_recvmsg+0x10/0x10 [ 334.579755][T12061] sock_recvmsg+0x196/0x1e0 [ 334.579769][T12061] __sys_recvfrom+0x231/0x3a0 [ 334.579785][T12061] ? __pfx___sys_recvfrom+0x10/0x10 [ 334.579812][T12061] ? do_user_addr_fault+0xd3f/0x1480 [ 334.579829][T12061] __x64_sys_recvfrom+0xde/0x100 [ 334.579844][T12061] do_syscall_64+0x166/0x520 [ 334.579854][T12061] ? trace_irq_disable+0x3b/0x140 [ 334.579865][T12061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.579876][T12061] ? clear_bhb_loop+0x70/0xc0 [ 334.579888][T12061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.579897][T12061] RIP: 0033:0x7f17eb35e98e [ 334.579908][T12061] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 334.579916][T12061] RSP: 002b:00007f17ec283e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 334.579927][T12061] RAX: ffffffffffffffda RBX: 00007f17ec2856c0 RCX: 00007f17eb35e98e [ 334.579934][T12061] RDX: 0000000000001000 RSI: 00007f17ec284000 RDI: 0000000000000003 [ 334.579941][T12061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 334.579947][T12061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 334.579953][T12061] R13: 00007f17ec283f58 R14: 00007f17ec284000 R15: 0000000000000000 [ 334.579968][T12061] [ 334.604426][T12059] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 334.604501][T12059] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 334.604512][T12059] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 334.604519][T12059] UDF-fs: Scanning with blocksize 4096 failed [ 334.604524][T12059] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 334.871701][ T44] wlan1: Creating new IBSS network, BSSID b6:31:8b:f3:df:9b [ 335.070707][T12066] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1655'. [ 335.085800][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 335.166178][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 335.245559][ T4927] Bluetooth: hci0: command 0x0c3a tx timeout [ 335.245616][ T54] Bluetooth: hci5: command 0x0c1a tx timeout [ 335.326007][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 335.342031][T11996] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 335.342187][T11996] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 335.342208][T11996] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 335.342338][T11996] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 335.428134][T10008] usb 5-1: USB disconnect, device number 117 [ 335.475099][T10008] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 335.503612][T10008] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 335.519017][T10008] ti_usb_3410_5052 5-1:2.0: device disconnected [ 335.988670][T12069] KVM: debugfs: duplicate directory 12069-29 [ 336.016520][T10008] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 336.167575][T10008] usb 3-1: Using ep0 maxpacket: 16 [ 336.168498][T10008] usb 3-1: New USB device found: idVendor=0bd3, idProduct=0569, bcdDevice=0.5b [ 336.169574][T10008] usb 3-1: config 32 has an invalid interface number: 64 but max is 0 [ 336.169589][T10008] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 336.169599][T10008] usb 3-1: config 32 has no interface number 0 [ 336.169622][T10008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.397752][T12102] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1665'. [ 336.612897][T10008] usb 3-1: string descriptor 0 read error: -71 [ 336.612934][T10008] uvcvideo 3-1:32.64: Found UVC 0.00 device (0bd3:0569) [ 336.612948][T10008] uvcvideo 3-1:32.64: No valid video chain found. [ 336.640040][T10008] usb 3-1: USB disconnect, device number 122 [ 337.030382][T12119] netlink: 'syz.7.1669': attribute type 58 has an invalid length. [ 337.052511][T12119] syzkaller1: entered promiscuous mode [ 337.052523][T12119] syzkaller1: entered allmulticast mode [ 337.310428][T12130] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1674'. [ 337.325678][ T54] Bluetooth: hci5: command 0x0c1a tx timeout [ 337.325700][ T54] Bluetooth: hci0: command 0x0c3a tx timeout [ 337.406239][ T4927] Bluetooth: hci4: command 0x0c1a tx timeout [ 337.545365][T10008] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 337.603576][ T32] audit: type=1804 audit(1790496835.256:40): pid=12140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1678" name="/newroot/30/cgroup.controllers" dev="tmpfs" ino=175 res=1 errno=0 [ 337.604161][ T32] audit: type=1800 audit(1790496835.256:41): pid=12145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1678" name="cgroup.controllers" dev="tmpfs" ino=175 res=0 errno=0 [ 337.628004][ T32] audit: type=1800 audit(1790496835.256:42): pid=12140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1678" name="cgroup.controllers" dev="tmpfs" ino=175 res=0 errno=0 [ 337.755410][T10008] usb 3-1: Using ep0 maxpacket: 32 [ 337.757349][T10008] usb 3-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 337.758397][T10008] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 337.758423][T10008] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 337.758437][T10008] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.758450][T10008] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 337.760035][T10008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.760048][T10008] usb 3-1: Product: syz [ 337.760056][T10008] usb 3-1: Manufacturer: syz [ 337.760081][T10008] usb 3-1: SerialNumber: syz [ 337.859294][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 337.875767][T10008] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input51 [ 337.985609][T10008] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 337.985621][T10008] (id 0x00) [ 338.045609][T10008] rc_core: IR keymap rc-imon-pad not found [ 338.045620][T10008] Registered IR keymap rc-empty [ 338.046245][T10008] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 338.046256][T10008] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 338.197650][T10008] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 338.220476][T10008] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input52 [ 338.223300][T10008] imon 3-1:155.0: iMON device (15c2:ffdc) on usb<3:123> initialized [ 338.374316][T12131] loop4: detected capacity change from 0 to 2640 [ 338.384087][T12131] buffer_io_error: 11 callbacks suppressed [ 338.384097][T12131] Buffer I/O error on dev loop4, logical block 0, async page read [ 338.384122][T12131] Buffer I/O error on dev loop4, logical block 0, async page read [ 338.384138][T12131] Buffer I/O error on dev loop4, logical block 0, async page read [ 338.384153][T12131] Buffer I/O error on dev loop4, logical block 0, async page read [ 338.384167][T12131] Buffer I/O error on dev loop4, logical block 0, async page read [ 338.439940][T12131] Buffer I/O error on dev loop4, logical block 0, async page read [ 338.439974][T12131] Buffer I/O error on dev loop4, logical block 0, async page read [ 338.440002][T12131] Buffer I/O error on dev loop4, logical block 0, async page read [ 338.440011][T12131] ldm_validate_partition_table(): Disk read failed. [ 338.440025][T12131] Buffer I/O error on dev loop4, logical block 0, async page read [ 338.440041][T12131] Buffer I/O error on dev loop4, logical block 0, async page read [ 338.440064][T12131] Dev loop4: unable to read RDB block 0 [ 338.440157][T12131] loop4: unable to read partition table [ 338.482072][T12131] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 339.517603][ T4978] ldm_validate_partition_table(): Disk read failed. [ 339.517649][ T4978] Dev loop4: unable to read RDB block 0 [ 339.517736][ T4978] loop4: unable to read partition table [ 339.851406][ T5757] usb 3-1: USB disconnect, device number 123 [ 340.521982][ T4978] ldm_validate_partition_table(): Disk read failed. [ 340.522024][ T4978] Dev loop4: unable to read RDB block 0 [ 340.522096][ T4978] loop4: unable to read partition table [ 340.546908][T12141] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 340.751290][T12165] FAULT_INJECTION: forcing a failure. [ 340.751290][T12165] name failslab, interval 1, probability 0, space 0, times 0 [ 340.751308][T12165] CPU: 0 UID: 0 PID: 12165 Comm: syz.4.1684 Not tainted syzkaller #0 PREEMPT(full) [ 340.751321][T12165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 340.751327][T12165] Call Trace: [ 340.751331][T12165] [ 340.751337][T12165] dump_stack_lvl+0xe8/0x150 [ 340.751354][T12165] should_fail_ex+0x3eb/0x540 [ 340.751372][T12165] should_failslab+0xa8/0x100 [ 340.751394][T12165] ? skb_clone+0x212/0x3a0 [ 340.751405][T12165] kmem_cache_alloc_noprof+0x9c/0x600 [ 340.751422][T12165] ? skb_clone+0x212/0x3a0 [ 340.751435][T12165] skb_clone+0x212/0x3a0 [ 340.751446][T12165] __netlink_deliver_tap+0x355/0x6e0 [ 340.751464][T12165] ? netlink_deliver_tap+0x2e/0x1b0 [ 340.751476][T12165] netlink_deliver_tap+0x19c/0x1b0 [ 340.751487][T12165] __netlink_sendskb+0x47/0x90 [ 340.751498][T12165] netlink_dump+0xa8c/0xee0 [ 340.751514][T12165] ? __pfx_netlink_dump+0x10/0x10 [ 340.751531][T12165] ? netlink_recvmsg+0x5bf/0xa50 [ 340.751541][T12165] ? kmem_cache_free+0x182/0x650 [ 340.751555][T12165] netlink_recvmsg+0x683/0xa50 [ 340.751571][T12165] ? __pfx_netlink_recvmsg+0x10/0x10 [ 340.751584][T12165] ? aa_sock_msg_perm+0x144/0x210 [ 340.751601][T12165] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 340.751612][T12165] ? security_socket_recvmsg+0x7e/0x2c0 [ 340.751624][T12165] ? __pfx_netlink_recvmsg+0x10/0x10 [ 340.751635][T12165] sock_recvmsg+0x196/0x1e0 [ 340.751649][T12165] __sys_recvfrom+0x231/0x3a0 [ 340.751666][T12165] ? __pfx___sys_recvfrom+0x10/0x10 [ 340.751692][T12165] ? do_user_addr_fault+0xd3f/0x1480 [ 340.751709][T12165] __x64_sys_recvfrom+0xde/0x100 [ 340.751724][T12165] do_syscall_64+0x166/0x520 [ 340.751734][T12165] ? trace_irq_disable+0x3b/0x140 [ 340.751746][T12165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.751756][T12165] ? clear_bhb_loop+0x70/0xc0 [ 340.751768][T12165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.751778][T12165] RIP: 0033:0x7f70c4d5e98e [ 340.751788][T12165] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 340.751796][T12165] RSP: 002b:00007f70c5c55e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 340.751808][T12165] RAX: ffffffffffffffda RBX: 00007f70c5c576c0 RCX: 00007f70c4d5e98e [ 340.751816][T12165] RDX: 0000000000001000 RSI: 00007f70c5c56000 RDI: 0000000000000003 [ 340.751822][T12165] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 340.751828][T12165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 340.751834][T12165] R13: 00007f70c5c55f58 R14: 00007f70c5c56000 R15: 0000000000000000 [ 340.751850][T12165] [ 341.070073][T12168] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1686'. [ 341.416176][T12180] sg_write: data in/out 360512/136 bytes for SCSI command 0x0-- guessing data in; [ 341.416176][T12180] program syz.4.1691 not setting count and/or reply_len properly [ 341.469316][ T32] audit: type=1800 audit(1790496839.126:43): pid=12180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1691" name="dummy_udc" dev="gadgetfs" ino=6897 res=0 errno=0 [ 341.594087][T12188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1692'. [ 341.964691][T12207] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1699'. [ 342.115549][T10008] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 342.265415][T10008] usb 5-1: Using ep0 maxpacket: 16 [ 342.272930][T10008] usb 5-1: New USB device found: idVendor=0c70, idProduct=f00e, bcdDevice=0.00 [ 342.273760][T10008] usb 5-1: config 0 interface 0 has no altsetting 0 [ 342.273781][T10008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.301568][T10008] usb 5-1: config 0 descriptor?? [ 342.710681][T10008] usbhid 5-1:0.0: can't add hid device: -71 [ 342.710740][T10008] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 342.758177][T10008] usb 5-1: USB disconnect, device number 118 [ 343.195389][T10008] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 343.327322][T10008] usb 3-1: device descriptor read/64, error -71 [ 343.505390][ T5711] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 343.568297][T10008] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 343.610389][T12233] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1710'. [ 343.665801][ T5711] usb 5-1: Using ep0 maxpacket: 32 [ 343.666233][ T5711] usb 5-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 343.667011][ T5711] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 343.667037][ T5711] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 343.667050][ T5711] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 343.670142][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.670156][ T5711] usb 5-1: Product: syz [ 343.670163][ T5711] usb 5-1: Manufacturer: syz [ 343.670170][ T5711] usb 5-1: SerialNumber: syz [ 343.718790][T10008] usb 3-1: device descriptor read/64, error -71 [ 343.764627][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 343.778991][ T5711] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input53 [ 343.826889][T10008] usb usb3-port1: attempt power cycle [ 343.888080][ T5711] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 343.888094][ T5711] (id 0x00) [ 343.945381][ T5711] rc_core: IR keymap rc-imon-pad not found [ 343.945392][ T5711] Registered IR keymap rc-empty [ 343.945436][ T5711] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 343.945446][ T5711] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 344.096101][ T5711] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 344.098900][ T5711] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input54 [ 344.103718][ T5711] imon 5-1:155.0: iMON device (15c2:ffdc) on usb<5:119> initialized [ 344.196036][T10008] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 344.215886][T10008] usb 3-1: device descriptor read/8, error -71 [ 344.338242][T12229] imon:send_packet: task interrupted [ 344.338300][T12229] imon:send_packet: packet tx failed (-512) [ 344.338874][T12229] imon:vfd_write: send packet #0 failed [ 344.374262][ T5757] usb 5-1: USB disconnect, device number 119 [ 344.455606][T10008] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 344.478124][T10008] usb 3-1: device descriptor read/8, error -71 [ 344.586208][T10008] usb usb3-port1: unable to enumerate USB device [ 345.043336][T12255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1719'. [ 345.507687][ T5757] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 345.665442][ T5757] usb 5-1: Using ep0 maxpacket: 8 [ 345.665881][ T5757] usb 5-1: New USB device found: idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 345.665903][ T5757] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 345.667395][ T5757] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.668572][ T5757] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.669382][ T5757] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.670320][ T5757] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.674294][ T5757] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.712397][ T5757] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.771154][ T5757] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.784568][ T5757] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.784598][ T5757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.822486][ T5757] usb 5-1: config 0 descriptor?? [ 345.833875][ T5757] rndis_host 5-1:0.0: skipping garbage [ 345.833887][ T5757] rndis_host 5-1:0.0: rndis: master #0/ffff888077d7e000 slave #1/0000000000000000 [ 345.834203][ T5757] cdc_acm 5-1:0.0: skipping garbage [ 345.868903][T12275] fuse: Bad value for 'fd' [ 346.177691][T12287] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1730'. [ 346.268253][T12290] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 346.321260][T12294] syzkaller1: entered promiscuous mode [ 346.321274][T12294] syzkaller1: entered allmulticast mode [ 347.115370][ T5757] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 347.266058][ T5757] usb 3-1: New USB device found: idVendor=0b95, idProduct=1790, bcdDevice=1.00 [ 347.267003][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.108488][ T5757] ax88179_178a 3-1:1.0: probe with driver ax88179_178a failed with error -71 [ 348.139067][ T5757] usb 3-1: USB disconnect, device number 2 [ 348.266787][ T5711] usb 5-1: USB disconnect, device number 120 [ 348.341555][ T32] audit: type=1326 audit(1790496845.986:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12311 comm="syz.6.1738" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17eb39e159 code=0x0 [ 348.383334][ T44] IPVS: starting estimator thread 0... [ 348.442300][T12320] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1740'. [ 348.465692][T12316] IPVS: using max 53 ests per chain, 127200 per kthread [ 348.760708][T12331] FAULT_INJECTION: forcing a failure. [ 348.760708][T12331] name failslab, interval 1, probability 0, space 0, times 0 [ 348.760730][T12331] CPU: 0 UID: 0 PID: 12331 Comm: syz.4.1744 Not tainted syzkaller #0 PREEMPT(full) [ 348.760752][T12331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 348.760764][T12331] Call Trace: [ 348.760769][T12331] [ 348.760774][T12331] dump_stack_lvl+0xe8/0x150 [ 348.760794][T12331] should_fail_ex+0x3eb/0x540 [ 348.760812][T12331] should_failslab+0xa8/0x100 [ 348.760826][T12331] ? vm_area_alloc+0x24/0x140 [ 348.760840][T12331] kmem_cache_alloc_noprof+0x9c/0x600 [ 348.760857][T12331] ? vm_area_alloc+0x24/0x140 [ 348.760873][T12331] vm_area_alloc+0x24/0x140 [ 348.760887][T12331] mmap_region+0x182e/0x2c30 [ 348.760906][T12331] ? is_bpf_text_address+0x26/0x2b0 [ 348.760922][T12331] ? kernel_text_address+0xa5/0xe0 [ 348.760934][T12331] ? __pfx_mmap_region+0x10/0x10 [ 348.760945][T12331] ? unwind_get_return_address+0x4d/0x90 [ 348.760958][T12331] ? __lock_acquire+0x747/0x2de0 [ 348.760974][T12331] ? __lock_acquire+0x747/0x2de0 [ 348.760985][T12331] ? mas_ascend+0x2f9/0x8b0 [ 348.761002][T12331] ? mas_prev_node+0xbfd/0xe80 [ 348.761051][T12331] ? __mutex_unlock_slowpath+0x731/0x900 [ 348.761068][T12331] ? mm_get_unmapped_area+0xd3/0x100 [ 348.761083][T12331] ? cap_mmap_addr+0xaa/0xf0 [ 348.761096][T12331] ? bpf_lsm_mmap_addr+0x9/0x50 [ 348.761108][T12331] ? security_mmap_addr+0x71/0x240 [ 348.761121][T12331] ? shmem_mapping+0xd/0x50 [ 348.761130][T12331] ? memfd_check_seals_mmap+0xc5/0x220 [ 348.761147][T12331] do_mmap+0xe0a/0x1300 [ 348.761163][T12331] ? __pfx_do_mmap+0x10/0x10 [ 348.761181][T12331] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 348.761191][T12331] ? down_write_killable+0x179/0x230 [ 348.761203][T12331] ? __pfx_down_write_killable+0x10/0x10 [ 348.761214][T12331] ? apparmor_mmap_file+0x2e7/0x390 [ 348.761229][T12331] vm_mmap_pgoff+0x272/0x4e0 [ 348.761240][T12331] ? lock_acquire+0x115/0x350 [ 348.761253][T12331] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 348.761265][T12331] ? __fget_files+0x2a/0x420 [ 348.761277][T12331] ? __fget_files+0x3a2/0x420 [ 348.761286][T12331] ? __fget_files+0x2a/0x420 [ 348.761298][T12331] ksys_mmap_pgoff+0x4dc/0x760 [ 348.761314][T12331] do_syscall_64+0x166/0x520 [ 348.761323][T12331] ? trace_irq_disable+0x3b/0x140 [ 348.761335][T12331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.761345][T12331] ? clear_bhb_loop+0x70/0xc0 [ 348.761358][T12331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.761368][T12331] RIP: 0033:0x7f70c4d9dec2 [ 348.761378][T12331] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 348.761387][T12331] RSP: 002b:00007f70c5c56ed8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 348.761399][T12331] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f70c4d9dec2 [ 348.761405][T12331] RDX: 0000000000000003 RSI: 0000000000040000 RDI: 0000000000000000 [ 348.761412][T12331] RBP: 0000000000008001 R08: 000000000000000e R09: 0000000010000000 [ 348.761418][T12331] R10: 0000000000008001 R11: 0000000000000246 R12: 0000200000000488 [ 348.761424][T12331] R13: 0000200000000490 R14: 00007f70c5c56fd8 R15: 0000000000000000 [ 348.761443][T12331] [ 349.467380][ T5711] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 349.511281][T12350] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1750'. [ 349.595384][ T5711] usb 5-1: device descriptor read/64, error -71 [ 349.835397][ T5711] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 349.965506][ T5711] usb 5-1: device descriptor read/64, error -71 [ 350.075894][ T5711] usb usb5-port1: attempt power cycle [ 350.415885][ T5711] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 350.435936][ T5711] usb 5-1: device descriptor read/8, error -71 [ 350.465816][ T5757] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 350.596424][ T5757] usb 8-1: device descriptor read/64, error -71 [ 350.675561][ T5711] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 350.695997][ T5711] usb 5-1: device descriptor read/8, error -71 [ 350.805589][ T5711] usb usb5-port1: unable to enumerate USB device [ 350.835377][ T5757] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 350.965440][ T5757] usb 8-1: device descriptor read/64, error -71 [ 351.076243][ T5757] usb usb8-port1: attempt power cycle [ 351.416507][ T5757] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 351.435787][ T5757] usb 8-1: device descriptor read/8, error -71 [ 351.561173][T12381] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1762'. [ 351.589611][T12383] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1763'. [ 351.675228][T12388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1765'. [ 351.675242][T12388] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1765'. [ 351.676096][ T5757] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 351.705782][ T5757] usb 8-1: device descriptor read/8, error -71 [ 351.816041][ T5757] usb usb8-port1: unable to enumerate USB device [ 352.206446][ T5757] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 352.358402][ T5757] usb 3-1: not running at top speed; connect to a high speed hub [ 352.358424][ T5757] usb 3-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 352.385532][ T5757] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 352.390483][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.390497][ T5757] usb 3-1: Product: syz [ 352.390504][ T5757] usb 3-1: Manufacturer: syz [ 352.390512][ T5757] usb 3-1: SerialNumber: syz [ 352.434191][ T5757] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 352.446868][ T5757] keyspan 3-1:1.0: unsupported endpoint type 0 [ 352.452868][ T5757] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 352.479556][ T5757] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 352.494618][ T5757] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 352.511054][ T5757] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 352.828751][T12426] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1776'. [ 352.867646][T10008] usb 3-1: USB disconnect, device number 3 [ 352.888334][T10008] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 352.893016][T10008] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 352.922328][T10008] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 352.948088][T10008] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 352.953438][T10008] keyspan 3-1:1.0: device disconnected [ 353.334443][T12437] FAULT_INJECTION: forcing a failure. [ 353.334443][T12437] name failslab, interval 1, probability 0, space 0, times 0 [ 353.334462][T12437] CPU: 0 UID: 0 PID: 12437 Comm: syz.7.1780 Not tainted syzkaller #0 PREEMPT(full) [ 353.334474][T12437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.334480][T12437] Call Trace: [ 353.334484][T12437] [ 353.334490][T12437] dump_stack_lvl+0xe8/0x150 [ 353.334510][T12437] should_fail_ex+0x3eb/0x540 [ 353.334529][T12437] should_failslab+0xa8/0x100 [ 353.334544][T12437] __kmalloc_noprof+0xf9/0x710 [ 353.334553][T12437] ? rcu_is_watching+0x16/0xb0 [ 353.334567][T12437] ? tomoyo_realpath_from_path+0xef/0x640 [ 353.334577][T12437] ? tomoyo_realpath_from_path+0xef/0x640 [ 353.334590][T12437] tomoyo_realpath_from_path+0xef/0x640 [ 353.334605][T12437] ? tomoyo_path_number_perm+0x219/0x5f0 [ 353.334618][T12437] tomoyo_path_number_perm+0x246/0x5f0 [ 353.334632][T12437] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 353.334651][T12437] ? __lock_acquire+0x747/0x2de0 [ 353.334680][T12437] ? __fget_files+0x2a/0x420 [ 353.334693][T12437] ? __fget_files+0x2a/0x420 [ 353.334702][T12437] ? __fget_files+0x2a/0x420 [ 353.334715][T12437] security_file_ioctl+0xc3/0x2a0 [ 353.334728][T12437] __se_sys_ioctl+0x47/0x170 [ 353.334743][T12437] do_syscall_64+0x166/0x520 [ 353.334752][T12437] ? trace_irq_disable+0x3b/0x140 [ 353.334764][T12437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.334775][T12437] ? clear_bhb_loop+0x70/0xc0 [ 353.334787][T12437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.334797][T12437] RIP: 0033:0x7f9a2c99e159 [ 353.334807][T12437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.334816][T12437] RSP: 002b:00007f9a2d7ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.334827][T12437] RAX: ffffffffffffffda RBX: 00007f9a2cc25fa0 RCX: 00007f9a2c99e159 [ 353.334834][T12437] RDX: 0000000000000000 RSI: 000000008008563f RDI: 0000000000000003 [ 353.334841][T12437] RBP: 00007f9a2d7ad090 R08: 0000000000000000 R09: 0000000000000000 [ 353.334847][T12437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.334853][T12437] R13: 00007f9a2cc26038 R14: 00007f9a2cc25fa0 R15: 00007ffffbec08d8 [ 353.334868][T12437] [ 353.334920][T12437] ERROR: Out of memory at tomoyo_realpath_from_path. [ 353.907360][T12452] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1787'. [ 353.999770][T12458] FAULT_INJECTION: forcing a failure. [ 353.999770][T12458] name failslab, interval 1, probability 0, space 0, times 0 [ 353.999788][T12458] CPU: 0 UID: 0 PID: 12458 Comm: syz.2.1790 Not tainted syzkaller #0 PREEMPT(full) [ 353.999799][T12458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.999806][T12458] Call Trace: [ 353.999810][T12458] [ 353.999815][T12458] dump_stack_lvl+0xe8/0x150 [ 353.999833][T12458] should_fail_ex+0x3eb/0x540 [ 353.999851][T12458] should_failslab+0xa8/0x100 [ 353.999865][T12458] __kmalloc_noprof+0xf9/0x710 [ 353.999876][T12458] ? tomoyo_encode+0x2ad/0x570 [ 353.999885][T12458] ? tomoyo_encode+0x2ad/0x570 [ 353.999898][T12458] tomoyo_encode+0x2ad/0x570 [ 353.999910][T12458] tomoyo_realpath_from_path+0x5fa/0x640 [ 353.999924][T12458] ? tomoyo_path_number_perm+0x219/0x5f0 [ 353.999937][T12458] tomoyo_path_number_perm+0x246/0x5f0 [ 353.999951][T12458] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 353.999963][T12458] ? __lock_acquire+0x747/0x2de0 [ 353.999992][T12458] ? __fget_files+0x2a/0x420 [ 354.000004][T12458] ? __fget_files+0x2a/0x420 [ 354.000014][T12458] ? __fget_files+0x2a/0x420 [ 354.000026][T12458] security_file_ioctl+0xc3/0x2a0 [ 354.000047][T12458] __se_sys_ioctl+0x47/0x170 [ 354.000061][T12458] do_syscall_64+0x166/0x520 [ 354.000070][T12458] ? trace_irq_disable+0x3b/0x140 [ 354.000082][T12458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.000093][T12458] ? clear_bhb_loop+0x70/0xc0 [ 354.000105][T12458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.000115][T12458] RIP: 0033:0x7ff81799e159 [ 354.000126][T12458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.000134][T12458] RSP: 002b:00007ff8188d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.000146][T12458] RAX: ffffffffffffffda RBX: 00007ff817c25fa0 RCX: 00007ff81799e159 [ 354.000153][T12458] RDX: 0000000000000000 RSI: 000000008008563f RDI: 0000000000000003 [ 354.000159][T12458] RBP: 00007ff8188d7090 R08: 0000000000000000 R09: 0000000000000000 [ 354.000165][T12458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.000171][T12458] R13: 00007ff817c26038 R14: 00007ff817c25fa0 R15: 00007fff75635858 [ 354.000187][T12458] [ 354.000198][T12458] ERROR: Out of memory at tomoyo_realpath_from_path. [ 354.358811][T12460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.381551][T12460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.743673][T12481] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1799'. [ 354.817148][ T5757] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 354.909224][T12490] FAULT_INJECTION: forcing a failure. [ 354.909224][T12490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.909242][T12490] CPU: 0 UID: 0 PID: 12490 Comm: syz.4.1802 Not tainted syzkaller #0 PREEMPT(full) [ 354.909254][T12490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 354.909263][T12490] Call Trace: [ 354.909268][T12490] [ 354.909272][T12490] dump_stack_lvl+0xe8/0x150 [ 354.909289][T12490] should_fail_ex+0x3eb/0x540 [ 354.909307][T12490] _copy_to_user+0x31/0xb0 [ 354.909320][T12490] video_usercopy+0xdf4/0x1430 [ 354.909338][T12490] ? __pfx___video_do_ioctl+0x10/0x10 [ 354.909352][T12490] ? __pfx_video_usercopy+0x10/0x10 [ 354.909372][T12490] ? __fget_files+0x2a/0x420 [ 354.909384][T12490] ? __fget_files+0x2a/0x420 [ 354.909394][T12490] v4l2_ioctl+0x18d/0x1e0 [ 354.909408][T12490] ? __pfx_v4l2_ioctl+0x10/0x10 [ 354.909420][T12490] __se_sys_ioctl+0xfc/0x170 [ 354.909433][T12490] do_syscall_64+0x166/0x520 [ 354.909443][T12490] ? trace_irq_disable+0x3b/0x140 [ 354.909455][T12490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.909465][T12490] ? clear_bhb_loop+0x70/0xc0 [ 354.909477][T12490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.909487][T12490] RIP: 0033:0x7f70c4d9e159 [ 354.909497][T12490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.909506][T12490] RSP: 002b:00007f70c5c57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.909518][T12490] RAX: ffffffffffffffda RBX: 00007f70c5025fa0 RCX: 00007f70c4d9e159 [ 354.909525][T12490] RDX: 0000000000000000 RSI: 000000008008563f RDI: 0000000000000003 [ 354.909531][T12490] RBP: 00007f70c5c57090 R08: 0000000000000000 R09: 0000000000000000 [ 354.909538][T12490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.909544][T12490] R13: 00007f70c5026038 R14: 00007f70c5025fa0 R15: 00007fffe9f06428 [ 354.909559][T12490] [ 354.976179][ T5757] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 355.046597][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.046614][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.046625][ T5757] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 355.046647][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.096123][ T1907] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 355.175721][ T5757] usb 3-1: config 0 descriptor?? [ 355.344698][T12494] tmpfs: Bad value for 'mpol' [ 355.352350][ T1907] usb 8-1: New USB device found: idVendor=104f, idProduct=0004, bcdDevice=1.00 [ 355.362384][ T1907] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 355.362398][ T1907] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 355.386935][ T1907] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 355.386949][ T1907] usb 8-1: Product: syz [ 355.386956][ T1907] usb 8-1: Manufacturer: syz [ 355.416042][ T1907] iuu_phoenix 8-1:1.0: iuu_phoenix converter detected [ 355.433938][ T1907] usb 8-1: iuu_phoenix converter now attached to ttyUSB0 [ 355.599082][T12483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.599353][T12483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.601180][T12483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.601425][T12483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.602429][T12483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.602689][T12483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.642667][T12483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.642935][T12483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.687317][T12483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.690087][T12483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.754915][ T5711] usb 8-1: USB disconnect, device number 9 [ 355.771724][ T5711] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 355.772131][ T5711] iuu_phoenix 8-1:1.0: device disconnected [ 355.798618][ T5757] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 356.133517][T12511] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1808'. [ 356.414329][T12520] FAULT_INJECTION: forcing a failure. [ 356.414329][T12520] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 356.414348][T12520] CPU: 0 UID: 0 PID: 12520 Comm: syz.7.1812 Not tainted syzkaller #0 PREEMPT(full) [ 356.414360][T12520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.414367][T12520] Call Trace: [ 356.414372][T12520] [ 356.414377][T12520] dump_stack_lvl+0xe8/0x150 [ 356.414395][T12520] should_fail_ex+0x3eb/0x540 [ 356.414413][T12520] prepare_alloc_pages+0x21e/0x5f0 [ 356.414428][T12520] __alloc_frozen_pages_noprof+0x17a/0x400 [ 356.414442][T12520] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 356.414459][T12520] ? is_bpf_text_address+0x292/0x2b0 [ 356.414474][T12520] ? policy_nodemask+0x2cc/0x8e0 [ 356.414490][T12520] alloc_pages_mpol+0x21e/0x390 [ 356.414506][T12520] alloc_pages_noprof+0xb1/0x2b0 [ 356.414519][T12520] __pmd_alloc+0x3a/0x5c0 [ 356.414535][T12520] handle_mm_fault+0xe9d/0x3750 [ 356.414554][T12520] ? handle_mm_fault+0xf1/0x3750 [ 356.414572][T12520] ? __pfx_handle_mm_fault+0x10/0x10 [ 356.414584][T12520] ? lockdep_hardirqs_on+0x7b/0x110 [ 356.414598][T12520] ? irqentry_exit+0x218/0x910 [ 356.414618][T12520] do_user_addr_fault+0x7f6/0x1480 [ 356.414642][T12520] exc_page_fault+0x6a/0xc0 [ 356.414656][T12520] asm_exc_page_fault+0x26/0x30 [ 356.414666][T12520] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 356.414680][T12520] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 78 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 356.414688][T12520] RSP: 0018:ffffc90004d5fc88 EFLAGS: 00050246 [ 356.414699][T12520] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 356.414705][T12520] RDX: 0000000000000000 RSI: ffffc90004d5fd60 RDI: 0000000000000000 [ 356.414712][T12520] RBP: ffffc90004d5fe60 R08: ffffc90004d5fd67 R09: 1ffff920009abfac [ 356.414719][T12520] R10: dffffc0000000000 R11: fffff520009abfad R12: 0000000000000008 [ 356.414726][T12520] R13: 00007ffffffff000 R14: ffffc90004d5fd60 R15: 0000000000000000 [ 356.414741][T12520] _copy_to_user+0x8a/0xb0 [ 356.414754][T12520] video_usercopy+0xdf4/0x1430 [ 356.414773][T12520] ? __pfx___video_do_ioctl+0x10/0x10 [ 356.414787][T12520] ? __pfx_video_usercopy+0x10/0x10 [ 356.414829][T12520] ? __fget_files+0x2a/0x420 [ 356.414840][T12520] ? __fget_files+0x2a/0x420 [ 356.414854][T12520] v4l2_ioctl+0x18d/0x1e0 [ 356.414867][T12520] ? __pfx_v4l2_ioctl+0x10/0x10 [ 356.414879][T12520] __se_sys_ioctl+0xfc/0x170 [ 356.414893][T12520] do_syscall_64+0x166/0x520 [ 356.414902][T12520] ? trace_irq_disable+0x3b/0x140 [ 356.414914][T12520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.414924][T12520] ? clear_bhb_loop+0x70/0xc0 [ 356.414936][T12520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.414946][T12520] RIP: 0033:0x7f9a2c99e159 [ 356.414955][T12520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.414963][T12520] RSP: 002b:00007f9a2d7ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.414973][T12520] RAX: ffffffffffffffda RBX: 00007f9a2cc25fa0 RCX: 00007f9a2c99e159 [ 356.414980][T12520] RDX: 0000000000000000 RSI: 000000008008563f RDI: 0000000000000003 [ 356.414986][T12520] RBP: 00007f9a2d7ad090 R08: 0000000000000000 R09: 0000000000000000 [ 356.414992][T12520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.414998][T12520] R13: 00007f9a2cc26038 R14: 00007f9a2cc25fa0 R15: 00007ffffbec08d8 [ 356.415013][T12520] [ 356.846125][T12522] FAULT_INJECTION: forcing a failure. [ 356.846125][T12522] name failslab, interval 1, probability 0, space 0, times 0 [ 356.846161][T12522] CPU: 0 UID: 0 PID: 12522 Comm: syz.4.1813 Not tainted syzkaller #0 PREEMPT(full) [ 356.846174][T12522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.846181][T12522] Call Trace: [ 356.846186][T12522] [ 356.846192][T12522] dump_stack_lvl+0xe8/0x150 [ 356.846210][T12522] should_fail_ex+0x3eb/0x540 [ 356.846229][T12522] should_failslab+0xa8/0x100 [ 356.846244][T12522] __kmalloc_cache_noprof+0x9e/0x600 [ 356.846256][T12522] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 356.846270][T12522] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 356.846287][T12522] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 356.846300][T12522] ? sctp_stream_interleave_init+0x55/0x90 [ 356.846313][T12522] sctp_association_new+0x15be/0x25d0 [ 356.846334][T12522] sctp_connect_new_asoc+0x2e4/0x6b0 [ 356.846351][T12522] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 356.846368][T12522] ? __local_bh_enable_ip+0xd6/0x140 [ 356.846379][T12522] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 356.846391][T12522] ? security_sctp_bind_connect+0x7e/0x2c0 [ 356.846405][T12522] sctp_sendmsg+0x159b/0x2d00 [ 356.846424][T12522] ? preempt_schedule_thunk+0x16/0x40 [ 356.846440][T12522] ? __pfx_sctp_sendmsg+0x10/0x10 [ 356.846464][T12522] ? aa_sock_msg_perm+0xf5/0x210 [ 356.846478][T12522] ? sock_rps_record_flow+0x19/0x350 [ 356.846492][T12522] ? inet_sendmsg+0x298/0x320 [ 356.846504][T12522] ? __pfx_inet_sendmsg+0x10/0x10 [ 356.846515][T12522] sock_sendmsg_nosec+0x10e/0x180 [ 356.846528][T12522] __sys_sendto+0x408/0x5a0 [ 356.846544][T12522] ? __pfx___sys_sendto+0x10/0x10 [ 356.846570][T12522] ? rcu_is_watching+0x16/0xb0 [ 356.846587][T12522] __x64_sys_sendto+0xde/0x100 [ 356.846602][T12522] do_syscall_64+0x166/0x520 [ 356.846612][T12522] ? trace_irq_disable+0x3b/0x140 [ 356.846623][T12522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.846633][T12522] ? clear_bhb_loop+0x70/0xc0 [ 356.846645][T12522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.846655][T12522] RIP: 0033:0x7f70c4d9e159 [ 356.846666][T12522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.846674][T12522] RSP: 002b:00007f70c5c57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 356.846686][T12522] RAX: ffffffffffffffda RBX: 00007f70c5025fa0 RCX: 00007f70c4d9e159 [ 356.846693][T12522] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000004 [ 356.846700][T12522] RBP: 00007f70c4e3506b R08: 0000200000000240 R09: 000000000000001c [ 356.846706][T12522] R10: 000000000004c810 R11: 0000000000000246 R12: 0000000000000000 [ 356.846712][T12522] R13: 00007f70c5026038 R14: 00007f70c5025fa0 R15: 00007fffe9f06428 [ 356.846731][T12522] [ 357.109588][ C0] plantronics 0003:047F:FFFF.001C: usb_submit_urb(ctrl) failed: -1 [ 357.186107][ T1907] usb 3-1: USB disconnect, device number 4 [ 357.495238][T12534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1818'. [ 357.934257][T12544] FAULT_INJECTION: forcing a failure. [ 357.934257][T12544] name failslab, interval 1, probability 0, space 0, times 0 [ 357.934276][T12544] CPU: 0 UID: 0 PID: 12544 Comm: syz.2.1822 Not tainted syzkaller #0 PREEMPT(full) [ 357.934288][T12544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 357.934307][T12544] Call Trace: [ 357.934312][T12544] [ 357.934317][T12544] dump_stack_lvl+0xe8/0x150 [ 357.934335][T12544] should_fail_ex+0x3eb/0x540 [ 357.934353][T12544] should_failslab+0xa8/0x100 [ 357.934366][T12544] ? __pmd_alloc+0xc1/0x5c0 [ 357.934380][T12544] kmem_cache_alloc_noprof+0x9c/0x600 [ 357.934395][T12544] ? alloc_pages_mpol+0x256/0x390 [ 357.934409][T12544] ? __pmd_alloc+0xc1/0x5c0 [ 357.934425][T12544] __pmd_alloc+0xc1/0x5c0 [ 357.934440][T12544] handle_mm_fault+0xe9d/0x3750 [ 357.934458][T12544] ? handle_mm_fault+0xf1/0x3750 [ 357.934476][T12544] ? __pfx_handle_mm_fault+0x10/0x10 [ 357.934496][T12544] ? __lock_acquire+0x747/0x2de0 [ 357.934509][T12544] ? lock_mm_and_find_vma+0xa7/0x340 [ 357.934524][T12544] do_user_addr_fault+0x7f6/0x1480 [ 357.934548][T12544] exc_page_fault+0x6a/0xc0 [ 357.934564][T12544] asm_exc_page_fault+0x26/0x30 [ 357.934573][T12544] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 357.934587][T12544] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 78 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 357.934596][T12544] RSP: 0018:ffffc9000582fc88 EFLAGS: 00050246 [ 357.934606][T12544] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 357.934613][T12544] RDX: 0000000000000000 RSI: ffffc9000582fd60 RDI: 0000000000000000 [ 357.934620][T12544] RBP: ffffc9000582fe60 R08: ffffc9000582fd67 R09: 1ffff92000b05fac [ 357.934633][T12544] R10: dffffc0000000000 R11: fffff52000b05fad R12: 0000000000000008 [ 357.934640][T12544] R13: 00007ffffffff000 R14: ffffc9000582fd60 R15: 0000000000000000 [ 357.934655][T12544] _copy_to_user+0x8a/0xb0 [ 357.934673][T12544] video_usercopy+0xdf4/0x1430 [ 357.934692][T12544] ? __pfx___video_do_ioctl+0x10/0x10 [ 357.934706][T12544] ? __pfx_video_usercopy+0x10/0x10 [ 357.934727][T12544] ? __fget_files+0x2a/0x420 [ 357.934740][T12544] ? __fget_files+0x2a/0x420 [ 357.934751][T12544] v4l2_ioctl+0x18d/0x1e0 [ 357.934764][T12544] ? __pfx_v4l2_ioctl+0x10/0x10 [ 357.934776][T12544] __se_sys_ioctl+0xfc/0x170 [ 357.934790][T12544] do_syscall_64+0x166/0x520 [ 357.934799][T12544] ? trace_irq_disable+0x3b/0x140 [ 357.934811][T12544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.934821][T12544] ? clear_bhb_loop+0x70/0xc0 [ 357.934833][T12544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.934843][T12544] RIP: 0033:0x7ff81799e159 [ 357.934852][T12544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.934860][T12544] RSP: 002b:00007ff8188d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.934870][T12544] RAX: ffffffffffffffda RBX: 00007ff817c25fa0 RCX: 00007ff81799e159 [ 357.934877][T12544] RDX: 0000000000000000 RSI: 000000008008563f RDI: 0000000000000003 [ 357.934883][T12544] RBP: 00007ff8188d7090 R08: 0000000000000000 R09: 0000000000000000 [ 357.934889][T12544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.934895][T12544] R13: 00007ff817c26038 R14: 00007ff817c25fa0 R15: 00007fff75635858 [ 357.934910][T12544] [ 358.642471][T12555] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1827'. [ 358.711422][T12560] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1828'. [ 359.143254][T12571] fuse: Bad value for 'fd' [ 359.369148][T12578] binder: Failure in copy_transaction_data: EINVAL [ 359.374326][T12578] binder: BINDER_SET_CONTEXT_MGR already set [ 359.494176][T12582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1838'. [ 359.631125][T12586] jffs2: notice: (12586) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 359.762863][T12589] null_blk: nullb1: using native zone append [ 359.957578][ T1907] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 360.085663][ T1907] usb 3-1: device descriptor read/64, error -71 [ 360.102309][T12573] 9pnet_fd: p9_fd_create_tcp (12573): problem connecting socket to 127.0.0.1 [ 360.129504][T12589] null_blk: disk nullb1 created [ 360.162585][T12599] fuse: Bad value for 'fd' [ 360.325893][ T1907] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 360.362336][T12610] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1848'. [ 360.455552][ T1907] usb 3-1: device descriptor read/64, error -71 [ 360.566777][ T1907] usb usb3-port1: attempt power cycle [ 360.567625][T12623] Need at least one configuration in g1. [ 360.567844][T12623] udc dummy_udc.0: failed to start g1: -22 [ 360.567855][T12623] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 360.612799][ T32] audit: type=1800 audit(1790496858.266:45): pid=12627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1849" name="file1" dev="tmpfs" ino=351 res=0 errno=0 [ 360.639548][T12623] UDC core: g1: couldn't find an available UDC or it's busy [ 360.905814][ T1907] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 360.925925][ T1907] usb 3-1: device descriptor read/8, error -71 [ 361.015417][ T5711] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 361.165397][ T1907] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 361.166178][ T5711] usb 5-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 361.167116][ T5711] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 361.167129][ T5711] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.167138][ T5711] usb 5-1: config 0 has no interface number 0 [ 361.167152][ T5711] usb 5-1: too many endpoints for config 0 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 361.167171][ T5711] usb 5-1: config 0 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 361.167184][ T5711] usb 5-1: config 0 interface 1 has no altsetting 0 [ 361.168969][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.168983][ T5711] usb 5-1: Product: syz [ 361.168990][ T5711] usb 5-1: Manufacturer: syz [ 361.168997][ T5711] usb 5-1: SerialNumber: syz [ 361.170606][ T5711] usb 5-1: config 0 descriptor?? [ 361.183155][ T5711] cx231xx 5-1:0.1: New device syz syz @ 12 Mbps (0572:58a5) with 1 interfaces [ 361.183171][ T5711] cx231xx 5-1:0.1: Not found matching IAD interface [ 361.221994][ T1907] usb 3-1: device descriptor read/8, error -71 [ 361.326670][ T1907] usb usb3-port1: unable to enumerate USB device [ 361.377668][ T1907] usb 5-1: USB disconnect, device number 125 [ 361.964614][T12645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1857'. [ 362.700771][T12675] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1866'. [ 362.784734][T12678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1867'. [ 362.858983][ T32] audit: type=1326 audit(1790496860.516:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12679 comm="syz.2.1868" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff81799e159 code=0x0 [ 363.215358][ T1907] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 363.367342][ T1907] usb 3-1: unable to get BOS descriptor or descriptor too short [ 363.367827][ T1907] usb 3-1: not running at top speed; connect to a high speed hub [ 363.367845][ T1907] usb 3-1: New USB device found: idVendor=0bc7, idProduct=0008, bcdDevice=df.d2 [ 363.368736][ T1907] usb 3-1: config 2 has an invalid interface number: 72 but max is 0 [ 363.368749][ T1907] usb 3-1: config 2 has no interface number 0 [ 363.368769][ T1907] usb 3-1: config 2 interface 72 altsetting 8 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 363.368825][ T1907] usb 3-1: config 2 interface 72 has no altsetting 0 [ 363.370610][ T1907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.370623][ T1907] usb 3-1: Product: syz [ 363.370630][ T1907] usb 3-1: Manufacturer: syz [ 363.370638][ T1907] usb 3-1: SerialNumber: syz [ 364.011672][T12692] comedi comedi1: dt2801: I/O port conflict (0x300,2) [ 364.129950][T10008] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 364.276362][T10008] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 364.276387][T10008] usb 5-1: no configurations [ 364.276394][T10008] usb 5-1: can't read configurations, error -22 [ 364.405385][T10008] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 364.558420][T10008] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 364.558445][T10008] usb 5-1: no configurations [ 364.558453][T10008] usb 5-1: can't read configurations, error -22 [ 364.558601][T10008] usb usb5-port1: attempt power cycle [ 364.887186][ T1098] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 364.895456][T10008] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 364.926700][T10008] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 364.926724][T10008] usb 5-1: no configurations [ 364.926731][T10008] usb 5-1: can't read configurations, error -22 [ 365.055643][T10008] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 365.079273][T10008] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 365.079295][T10008] usb 5-1: no configurations [ 365.079303][T10008] usb 5-1: can't read configurations, error -22 [ 365.079605][T10008] usb usb5-port1: unable to enumerate USB device [ 365.107057][ T5757] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 365.265375][ T5757] usb 8-1: Using ep0 maxpacket: 16 [ 365.271451][ T5757] usb 8-1: New USB device found: idVendor=17cc, idProduct=0815, bcdDevice=0.40 [ 365.272809][ T5757] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 365.274620][ T5757] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.274632][ T5757] usb 8-1: Product: syz [ 365.274640][ T5757] usb 8-1: Manufacturer: syz [ 365.274647][ T5757] usb 8-1: SerialNumber: syz [ 365.332751][ T5757] usb 8-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 365.538639][T12698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.538926][T12698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.540499][T12698] [syz.7.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [403c!=40, 4,4000] [ 365.541392][ T5757] usb 8-1: incorrect wMaxPacketSize 0x400 for BADD profile [ 365.609583][ T5757] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 365.610059][ T5757] usb 8-1: selecting invalid altsetting 1 [ 365.610083][ T5757] snd-usb-caiaq 8-1:1.0: can't set alt interface. [ 365.610091][ T5757] usb 8-1: unable to init card! (ret=-5) [ 365.610329][ T5757] snd-usb-caiaq 8-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 365.613905][ T5757] usb 8-1: selecting invalid altsetting 1 [ 365.613916][ T5757] snd-usb-caiaq 8-1:1.2: can't set alt interface. [ 365.613924][ T5757] usb 8-1: unable to init card! (ret=-5) [ 365.614136][ T5757] snd-usb-caiaq 8-1:1.2: probe with driver snd-usb-caiaq failed with error -5 [ 365.687070][ T5757] usb 8-1: USB disconnect, device number 10 [ 365.734999][ T6118] udevd[6118]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.800469][T12705] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1876'. [ 365.878403][ T1907] ati_remote 3-1:2.72: ati_remote_probe: Unexpected endpoint_in [ 365.899950][ T1907] usb 3-1: USB disconnect, device number 9 [ 365.944295][T12709] CacheFiles: No cache directory specified [ 366.511324][T12732] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1886'. [ 366.623711][T12738] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1889'. [ 366.883303][T12743] program syz.7.1890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.905249][T12743] program syz.7.1890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 367.145900][T12755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1895'. [ 367.176491][T12753] create_pit_timer: 7 callbacks suppressed [ 367.176502][T12753] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 367.176588][T12753] kvm: requested 167619 ns i8254 timer period limited to 200000 ns [ 367.176666][T12753] kvm: requested 163428 ns i8254 timer period limited to 200000 ns [ 367.212567][T12753] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 367.212853][T12753] kvm: requested 170971 ns i8254 timer period limited to 200000 ns [ 367.212956][T12753] kvm: requested 175162 ns i8254 timer period limited to 200000 ns [ 367.213588][T12753] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 367.215231][T12753] kvm: requested 158400 ns i8254 timer period limited to 200000 ns [ 367.262283][T12753] kvm: requested 141638 ns i8254 timer period limited to 200000 ns [ 367.262432][T12753] kvm: requested 125714 ns i8254 timer period limited to 200000 ns [ 367.318364][T10008] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 367.478431][T10008] usb 3-1: New USB device found: idVendor=056a, idProduct=0333, bcdDevice=0.00 [ 367.482107][T10008] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 367.482133][T10008] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 367.482147][T10008] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 367.482160][T10008] usb 3-1: config 0 interface 0 has no altsetting 0 [ 367.482177][T10008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.483834][T10008] usb 3-1: config 0 descriptor?? [ 367.485586][T12745] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 367.807319][T10008] wacom 0003:056A:0333.001D: hidraw0: USB HID v0.00 Joystick [HID 056a:0333] on usb-dummy_hcd.2-1/input0 [ 367.964080][T12745] bad cache= option: noneê¼~÷º£\ˆ'o]³iV›‡)¢Ê [ 367.964080][T12745] [ 367.964227][T12745] CIFS: VFS: bad cache= option: noneê¼~÷º£\ˆ'o]³iV›‡)¢Ê [ 367.964434][T12746] bad cache= option: noneê¼~÷º£\ˆ'o]³iV›‡)¢Ê [ 367.964434][T12746] [ 367.964443][T12746] CIFS: VFS: bad cache= option: noneê¼~÷º£\ˆ'o]³iV›‡)¢Ê [ 368.014988][T10008] usb 3-1: USB disconnect, device number 10 [ 368.446858][T12792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1905'. [ 368.735583][ T1907] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 368.754615][T12798] syzkaller0: entered promiscuous mode [ 368.754629][T12798] syzkaller0: entered allmulticast mode [ 368.794670][T12798] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1908'. [ 368.870945][T12798] team0: Port device team_slave_1 removed [ 368.887881][ T1907] usb 5-1: New USB device found: idVendor=0582, idProduct=00eb, bcdDevice=0.40 [ 368.899960][ T1907] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 368.899984][ T1907] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 368.904621][ T1907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.904635][ T1907] usb 5-1: Product: syz [ 368.904660][ T1907] usb 5-1: Manufacturer: syz [ 368.904668][ T1907] usb 5-1: SerialNumber: syz [ 369.205059][ T1907] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 369.216541][ T1907] usb 5-1: cannot request logical cluster ID: 3 (err: -71) [ 369.225046][ T1907] usb 5-1: unit 80 not found! [ 369.263439][T12813] netlink: 'syz.2.1912': attribute type 2 has an invalid length. [ 369.263453][T12813] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1912'. [ 369.297973][T12813] overlayfs: missing 'lowerdir' [ 369.304697][T12813] sg_write: data in/out 552384/136 bytes for SCSI command 0x0-- guessing data in; [ 369.304697][T12813] program syz.2.1912 not setting count and/or reply_len properly [ 369.365647][ T1907] usb 5-1: USB disconnect, device number 4 [ 369.423308][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.662237][T12821] [U] [ 369.662258][T12821] [U] [ 369.662272][T12821] [U] [ 369.662288][T12821] [U] [ 369.662351][T12821] [U] [ 369.662366][T12821] [U] [ 369.662381][T12821] [U] [ 369.662396][T12821] [U] [ 369.712640][T12820] [U] [ 369.722870][T12823] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1914'. [ 369.990147][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1919'. [ 369.990170][T12838] netlink: 744 bytes leftover after parsing attributes in process `syz.6.1919'. [ 369.990178][T12838] netlink: 5018 bytes leftover after parsing attributes in process `syz.6.1919'. [ 369.990185][T12838] netlink: 1042 bytes leftover after parsing attributes in process `syz.6.1919'. [ 370.063147][T12841] fuse: Unknown parameter 'fD' [ 370.165377][T10008] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 370.295423][T10008] usb 3-1: device descriptor read/64, error -71 [ 370.535425][T10008] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 370.665393][T10008] usb 3-1: device descriptor read/64, error -71 [ 370.685827][T12807] ceph: No mds server is up or the cluster is laggy [ 370.786808][T10008] usb usb3-port1: attempt power cycle [ 371.035384][ T5711] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 371.125497][T10008] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 371.145887][T10008] usb 3-1: device descriptor read/8, error -71 [ 371.185501][ T5711] usb 5-1: Using ep0 maxpacket: 16 [ 371.185944][ T5711] usb 5-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 371.187898][ T5711] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 371.187915][ T5711] usb 5-1: config 0 interface 0 has no altsetting 0 [ 371.189501][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.189514][ T5711] usb 5-1: Product: syz [ 371.189522][ T5711] usb 5-1: Manufacturer: syz [ 371.189529][ T5711] usb 5-1: SerialNumber: syz [ 371.194001][ T5711] usb 5-1: config 0 descriptor?? [ 371.386306][T10008] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 371.412520][T10008] usb 3-1: device descriptor read/8, error -71 [ 371.432245][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 371.445167][ T5711] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input58 [ 371.508151][ T5711] imon:send_packet: packet tx failed (-71) [ 371.521998][T10008] usb usb3-port1: unable to enumerate USB device [ 371.530909][ T5711] imon 5-1:0.0: panel buttons/knobs setup failed [ 371.564031][T12860] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1925'. [ 371.648091][ T5711] rc_core: IR keymap rc-imon-pad not found [ 371.648103][ T5711] Registered IR keymap rc-empty [ 371.648304][ T5711] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 371.648316][ T5711] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 371.681415][ T5711] imon:send_packet: packet tx failed (-71) [ 371.695838][ T5711] imon 5-1:0.0: remote input dev register failed [ 371.696029][ T5711] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 371.768638][T12863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.768877][T12863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.862048][ T5711] imon 5-1:0.0: unable to initialize intf0, err 0 [ 371.875410][ T5711] usb 5-1: USB disconnect, device number 5 [ 371.985387][T10008] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 372.176459][ T5711] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 372.326241][ T5711] usb 5-1: Using ep0 maxpacket: 16 [ 372.326988][ T5711] usb 5-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 372.327823][ T5711] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 372.327854][ T5711] usb 5-1: config 0 interface 0 has no altsetting 0 [ 372.330116][ T5711] usb 5-1: string descriptor 0 read error: -22 [ 372.330188][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.331911][ T5711] usb 5-1: config 0 descriptor?? [ 372.451897][ T5711] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input60 [ 372.715393][ T5711] rc_core: IR keymap rc-imon-pad not found [ 372.715406][ T5711] Registered IR keymap rc-empty [ 372.715453][ T5711] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 372.715462][ T5711] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 372.776123][ T5711] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 372.799170][ T5711] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input61 [ 372.803493][ T5711] imon 5-1:0.0: iMON device (15c2:0041) on usb<5:6> initialized [ 373.191126][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 373.191416][ T5757] usb 5-1: USB disconnect, device number 6 [ 373.854437][T12897] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1934'. [ 374.729779][ T32] audit: type=1326 audit(1790496872.386:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12899 comm="syz.6.1935" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17eb39e159 code=0x7fc00000 [ 375.409599][T12933] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1943'. [ 376.114345][T12957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1953'. [ 376.221261][T12961] netlink: 'syz.2.1955': attribute type 1 has an invalid length. [ 376.221275][T12961] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1955'. [ 376.255421][ T1907] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 376.402845][T12966] trusted_key: encrypted_key: master key parameter '' is invalid [ 376.413721][ T1907] usb 5-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 376.427726][ T1907] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.427766][ T1907] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 376.427777][ T1907] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 376.427789][ T1907] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.427811][ T1907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.665437][ T5757] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 376.815404][ T5757] usb 8-1: Using ep0 maxpacket: 32 [ 376.815849][ T5757] usb 8-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 376.816788][ T5757] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 376.816801][ T5757] usb 8-1: config 0 has no interface number 0 [ 376.816824][ T5757] usb 8-1: config 0 interface 12 has no altsetting 0 [ 376.818974][ T5757] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.818987][ T5757] usb 8-1: Product: syz [ 376.818994][ T5757] usb 8-1: Manufacturer: syz [ 376.819001][ T5757] usb 8-1: SerialNumber: syz [ 376.822975][ T5757] usb 8-1: config 0 descriptor?? [ 376.899853][ T1907] gud 5-1:1.0: probe with driver gud failed with error -71 [ 377.101849][T12949] EXT4-fs (nbd4): unable to read superblock [ 377.113464][ T1907] usb 5-1: USB disconnect, device number 7 [ 377.254780][T12981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1962'. [ 377.418706][T12988] fuse: Bad value for 'fd' [ 377.668161][ T5757] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 377.668193][ T5757] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 377.668201][ T5757] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 377.668243][ T5757] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 377.710869][ T1907] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 377.718558][ T5757] usb 8-1: USB disconnect, device number 12 [ 377.877361][ T1907] usb 3-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 377.878155][ T1907] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 377.878182][ T1907] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 377.878194][ T1907] usb 3-1: config 0 interface 0 has no altsetting 0 [ 377.879727][ T1907] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 377.879740][ T1907] usb 3-1: Product: syz [ 377.879747][ T1907] usb 3-1: Manufacturer: syz [ 377.879754][ T1907] usb 3-1: SerialNumber: syz [ 377.881360][ T1907] usb 3-1: config 0 descriptor?? [ 377.884302][ T1907] hub 3-1:0.0: bad descriptor, ignoring hub [ 377.884315][ T1907] hub 3-1:0.0: probe with driver hub failed with error -5 [ 377.952265][ T5711] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 377.959386][ T1907] usb 3-1: selecting invalid altsetting 0 [ 378.129385][ T5711] usb 5-1: New USB device found: idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 378.142574][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.142589][ T5711] usb 5-1: Product: syz [ 378.142596][ T5711] usb 5-1: Manufacturer: syz [ 378.142603][ T5711] usb 5-1: SerialNumber: syz [ 378.170647][ T5711] usb 5-1: config 0 descriptor?? [ 378.182578][ T5711] gspca_main: spca508-2.14.0 probing 041e:4018 [ 378.332701][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1971'. [ 378.379358][ T5711] gspca_spca508: reg_read err -32 [ 378.388705][ T1907] usb 3-1: USB disconnect, device number 15 [ 378.403190][ T5711] gspca_spca508: reg_read err -32 [ 378.420457][ T5711] gspca_spca508: reg_read err -32 [ 378.462174][T13007] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1972'. [ 378.531413][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.590667][T13013] fuse: Bad value for 'fd' [ 378.625005][T13015] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1976'. [ 378.706769][T13023] netlink: 'syz.6.1978': attribute type 5 has an invalid length. [ 378.903464][T13038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1982'. [ 378.992490][T13041] fuse: Bad value for 'fd' [ 379.129351][ T5711] gspca_spca508: reg write: error -110 [ 379.129399][ T5711] spca508 5-1:0.0: probe with driver spca508 failed with error -110 [ 379.388025][T13058] tmpfs: Unknown parameter '0x0000000000000000000000000000000000000030x0000000000000003' [ 379.731690][ T5757] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 379.891686][ T5757] usb 3-1: Using ep0 maxpacket: 16 [ 379.894076][ T5757] usb 3-1: unable to get BOS descriptor or descriptor too short [ 379.894185][ T5757] usb 3-1: New USB device found: idVendor=0545, idProduct=8080, bcdDevice=0.01 [ 379.894978][ T5757] usb 3-1: config index 0 descriptor too short (expected 22, got 18) [ 379.895007][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.155482][T13063] ima: Unable to open file: / (-22) [ 380.158083][T13062] ima: policy update failed [ 380.158200][ T32] audit: type=1802 audit(1790496877.764:48): pid=13062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1990" res=0 errno=0 [ 380.169331][ T5757] usb 3-1: string descriptor 0 read error: -71 [ 380.207060][ T5757] usb 3-1: USB disconnect, device number 16 [ 380.368588][T13073] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1992'. [ 380.434022][T13077] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1994'. [ 380.778952][ T5757] usb 5-1: USB disconnect, device number 8 [ 381.104845][T13083] kvm: pic: single mode not supported [ 381.104971][T13083] kvm: pic: level sensitive irq not supported [ 381.366665][ T1907] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 381.458582][T13109] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2004'. [ 381.511166][T13113] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 381.538050][ T1907] usb 3-1: New USB device found: idVendor=041e, idProduct=3000, bcdDevice=0.40 [ 381.542631][ T1907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.542645][ T1907] usb 3-1: Product: syz [ 381.542652][ T1907] usb 3-1: Manufacturer: syz [ 381.542660][ T1907] usb 3-1: SerialNumber: syz [ 381.590890][ T5757] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 381.729827][ T5757] usb 5-1: device descriptor read/64, error -71 [ 381.805595][T13087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.805869][T13087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.846238][ T1907] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 381.846767][ T1907] usb 3-1: unit 4 not found! [ 381.943044][ T1907] usb 3-1: USB disconnect, device number 17 [ 381.998748][ T5757] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 382.067592][ T6118] udevd[6118]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.146468][ T5757] usb 5-1: device descriptor read/64, error -71 [ 382.264270][ T5757] usb usb5-port1: attempt power cycle [ 382.306783][ T4927] Bluetooth: hci1: command tx timeout [ 382.627564][ T5757] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 382.653410][ T5757] usb 5-1: device descriptor read/8, error -71 [ 382.673525][T13134] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2013'. [ 382.714186][ T1907] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 382.878089][ T1907] usb 3-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 382.880796][ T1907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.880811][ T1907] usb 3-1: Product: syz [ 382.880818][ T1907] usb 3-1: Manufacturer: syz [ 382.880826][ T1907] usb 3-1: SerialNumber: syz [ 382.905874][ T5757] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 382.928040][ T5757] usb 5-1: device descriptor read/8, error -71 [ 383.045696][ T5757] usb usb5-port1: unable to enumerate USB device [ 383.367655][T13132] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2012'. [ 383.368013][ T1907] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 383.368047][ T1907] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 383.370161][T13132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.370398][T13132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.588667][ T1907] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 383.588710][ T1907] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 383.622219][ T1907] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 383.628382][ T1907] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 383.659962][ T1907] usb 3-1: USB disconnect, device number 18 [ 383.741834][T13161] fuse: Bad value for 'fd' [ 383.805387][T13167] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2023'. [ 384.478238][ T1907] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 384.638600][ T1907] usb 3-1: unable to get BOS descriptor or descriptor too short [ 384.639059][ T1907] usb 3-1: not running at top speed; connect to a high speed hub [ 384.639117][ T1907] usb 3-1: New USB device found: idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 384.640024][ T1907] usb 3-1: config 160 has an invalid interface number: 168 but max is 0 [ 384.640037][ T1907] usb 3-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 384.640046][ T1907] usb 3-1: config 160 has no interface number 0 [ 384.640071][ T1907] usb 3-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 384.640084][ T1907] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 65077, setting to 64 [ 384.640097][ T1907] usb 3-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0x23, changing to 0x3 [ 384.640109][ T1907] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0x3 has invalid maxpacket 2046, setting to 64 [ 384.640121][ T1907] usb 3-1: config 160 interface 168 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 384.640133][ T1907] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0xA has invalid maxpacket 920, setting to 64 [ 384.640145][ T1907] usb 3-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 384.640157][ T1907] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 384.640170][ T1907] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0x89 has invalid wMaxPacketSize 0 [ 384.640180][ T1907] usb 3-1: config 160 interface 168 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 384.640193][ T1907] usb 3-1: config 160 interface 168 has no altsetting 0 [ 384.642802][ T1907] usb 3-1: string descriptor 0 read error: -22 [ 384.642872][ T1907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.779505][T13179] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 384.779626][T13179] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 384.779746][T13179] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 384.794601][ T1907] io_edgeport 3-1:160.168: EPiC device converter detected [ 384.794856][ T1907] usb 3-1: detected [ 385.020839][T13195] fuse: Bad value for 'fd' [ 385.033646][T13194] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 385.033716][T13194] CIFS: Attempting to mount //::1/share [ 385.084303][ T1907] io_edgeport 3-1:160.168: short epic descriptor received: 0 [ 385.097093][T13194] CIFS: VFS: Error connecting to socket. Aborting operation. [ 385.097231][T13194] CIFS: VFS: cifs_mount failed w/return code = -101 [ 385.140881][T13199] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2033'. [ 385.257473][T13209] new mount options do not match the existing superblock, will be ignored [ 385.296043][ T1907] usb 3-1: error in getting manufacturer descriptor: -71 [ 385.296413][ T1907] usb 3-1: error in getting boot descriptor: -71 [ 385.296488][ T1907] usb 3-1: Device Reported 0 serial ports vs. core thinking we have 1 ports, email greg@kroah.com this information. [ 385.340555][ T1907] usb 3-1: Direct firmware load for edgeport/down.fw failed with error -2 [ 385.340580][ T1907] usb 3-1: Falling back to sysfs fallback for: edgeport/down.fw [ 385.359696][ T5711] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 385.523228][ T5711] usb 5-1: Using ep0 maxpacket: 8 [ 385.523729][ T5711] usb 5-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 385.526429][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.526442][ T5711] usb 5-1: Product: syz [ 385.526450][ T5711] usb 5-1: Manufacturer: syz [ 385.526457][ T5711] usb 5-1: SerialNumber: syz [ 385.532910][ T5711] usb 5-1: config 0 descriptor?? [ 385.748403][ T5711] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 386.328027][T13225] fuse: Bad value for 'fd' [ 386.363464][T13227] »»»»»»: renamed from vlan0 (while UP) [ 386.537892][T13233] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2043'. [ 386.579545][T13235] overlayfs: failed to clone upperpath [ 386.884069][T13252] fuse: Bad value for 'fd' [ 386.953794][T13256] fuse: Bad value for 'fd' [ 386.989366][T13258] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2053'. [ 387.220434][T13270] netlink: 29 bytes leftover after parsing attributes in process `syz.6.2058'. [ 387.271634][T13194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.271932][T13194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.300292][ T5711] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 387.305834][ T5711] usb 5-1: USB disconnect, device number 13 [ 387.400491][T13276] fuse: fd is not a fuse device [ 387.882928][T13282] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2063'. [ 388.063433][T13288] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2066'. [ 388.063569][T13288] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2066'. [ 388.184938][ T5711] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 388.345334][ T5711] usb 5-1: Using ep0 maxpacket: 32 [ 388.345842][ T5711] usb 5-1: New USB device found: idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 388.346768][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.355067][ T5711] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 388.787633][T13284] FAULT_INJECTION: forcing a failure. [ 388.787633][T13284] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 388.787665][T13284] CPU: 0 UID: 0 PID: 13284 Comm: syz.4.2064 Not tainted syzkaller #0 PREEMPT(full) [ 388.787677][T13284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 388.787684][T13284] Call Trace: [ 388.787689][T13284] [ 388.787694][T13284] dump_stack_lvl+0xe8/0x150 [ 388.787714][T13284] should_fail_ex+0x3eb/0x540 [ 388.787732][T13284] prepare_alloc_pages+0x21e/0x5f0 [ 388.787748][T13284] __alloc_frozen_pages_noprof+0x17a/0x400 [ 388.787761][T13284] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 388.787777][T13284] ? policy_nodemask+0x2cc/0x8e0 [ 388.787796][T13284] alloc_pages_mpol+0x21e/0x390 [ 388.787811][T13284] alloc_pages_noprof+0xb1/0x2b0 [ 388.787826][T13284] pte_alloc_one+0x22/0x370 [ 388.787839][T13284] __pte_alloc+0x25/0x1a0 [ 388.787851][T13284] walk_pgd_range+0xfd5/0x1dc0 [ 388.787873][T13284] ? __pfx_guard_install_set_pte+0x10/0x10 [ 388.787886][T13284] ? __pfx_guard_install_set_pte+0x10/0x10 [ 388.787897][T13284] ? __pfx_guard_install_set_pte+0x10/0x10 [ 388.787910][T13284] ? __pfx_guard_install_set_pte+0x10/0x10 [ 388.787924][T13284] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 388.787937][T13284] ? __pfx_walk_pgd_range+0x10/0x10 [ 388.787955][T13284] __walk_page_range+0x16d/0x720 [ 388.787969][T13284] ? find_vma+0xed/0x160 [ 388.787981][T13284] ? __pfx_find_vma+0x10/0x10 [ 388.787998][T13284] walk_page_range_mm_unsafe+0x46b/0x680 [ 388.788010][T13284] ? arch_stack_walk+0xfb/0x150 [ 388.788024][T13284] ? __pfx_walk_page_range_mm_unsafe+0x10/0x10 [ 388.788045][T13284] madvise_vma_behavior+0x4452/0x5240 [ 388.788063][T13284] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 388.788078][T13284] ? do_raw_spin_lock+0x12b/0x2f0 [ 388.788096][T13284] ? rcu_is_watching+0x16/0xb0 [ 388.788109][T13284] ? trace_hrtimer_start+0x82/0x200 [ 388.788122][T13284] ? __pfx_guard_install_pud_entry+0x10/0x10 [ 388.788133][T13284] ? __pfx_guard_install_pmd_entry+0x10/0x10 [ 388.788144][T13284] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 388.788157][T13284] ? __pfx_guard_install_set_pte+0x10/0x10 [ 388.788170][T13284] ? __lock_acquire+0x747/0x2de0 [ 388.788182][T13284] ? finish_task_switch+0x40e/0xc60 [ 388.788194][T13284] ? lockdep_hardirqs_on+0x7b/0x110 [ 388.788210][T13284] ? rcu_is_watching+0x16/0xb0 [ 388.788223][T13284] ? __lock_acquire+0x747/0x2de0 [ 388.788238][T13284] ? mtree_range_walk+0x707/0x8b0 [ 388.788253][T13284] ? mt_find+0x186/0x630 [ 388.788265][T13284] ? mt_find+0x481/0x630 [ 388.788276][T13284] ? mt_find+0x186/0x630 [ 388.788286][T13284] ? __pfx_mt_find+0x10/0x10 [ 388.788299][T13284] ? find_vma_prev+0x123/0x1b0 [ 388.788311][T13284] ? lock_acquire+0x115/0x350 [ 388.788326][T13284] ? find_vma+0xed/0x160 [ 388.788341][T13284] ? down_read+0x2b9/0x320 [ 388.788355][T13284] madvise_walk_vmas+0x57d/0xb70 [ 388.788372][T13284] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 388.788386][T13284] ? blk_start_plug+0x6e/0x1b0 [ 388.788401][T13284] madvise_do_behavior+0x385/0x540 [ 388.788412][T13284] ? __pfx_futex_wait+0x10/0x10 [ 388.788425][T13284] ? __pfx_madvise_do_behavior+0x10/0x10 [ 388.788446][T13284] do_madvise+0x26f/0x330 [ 388.788461][T13284] ? __pfx_do_madvise+0x10/0x10 [ 388.788478][T13284] ? rcu_is_watching+0x16/0xb0 [ 388.788493][T13284] __x64_sys_madvise+0xa6/0xc0 [ 388.788506][T13284] do_syscall_64+0x166/0x520 [ 388.788515][T13284] ? trace_irq_disable+0x3b/0x140 [ 388.788526][T13284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.788537][T13284] ? clear_bhb_loop+0x70/0xc0 [ 388.788556][T13284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.788567][T13284] RIP: 0033:0x7f70c4d9e159 [ 388.788579][T13284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.788588][T13284] RSP: 002b:00007f70c5c57028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 388.788599][T13284] RAX: ffffffffffffffda RBX: 00007f70c5025fa0 RCX: 00007f70c4d9e159 [ 388.788607][T13284] RDX: 0000000000000066 RSI: 0000000000600722 RDI: 0000200000000000 [ 388.788614][T13284] RBP: 00007f70c4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 388.788621][T13284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.788627][T13284] R13: 00007f70c5026038 R14: 00007f70c5025fa0 R15: 00007fffe9f06428 [ 388.788644][T13284] [ 389.122512][ T5711] gspca_nw80x: reg_r err -110 [ 389.122560][ T5711] nw80x 5-1:3.0: probe with driver nw80x failed with error -110 [ 389.986479][T13305] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 4, id = 0 [ 389.986803][T13304] netlink: 'syz.7.2072': attribute type 32 has an invalid length. [ 390.388995][T13307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2073'. [ 390.448100][T13309] comedi comedi3: comedi_config --init_data is deprecated [ 390.767667][T13327] fuse: Bad value for 'fd' [ 390.831977][T13333] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2083'. [ 391.159937][T10008] usb 5-1: USB disconnect, device number 14 [ 391.278442][T13356] overlayfs: failed to clone upperpath [ 391.362661][T13358] fuse: Bad value for 'fd' [ 391.393694][T13360] overlay: Unknown parameter 'rootcontext' [ 391.441145][T13362] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2092'. [ 391.483594][T13103] IPVS: starting estimator thread 0... [ 391.552547][T13367] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2103'. [ 391.572823][T13365] IPVS: using max 57 ests per chain, 136800 per kthread [ 391.628431][ T32] audit: type=1800 audit(1790496888.498:49): pid=13371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2095" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 392.032608][T13374] program syz.4.2096 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.034146][T13376] program syz.4.2096 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.807164][T13392] fuse: Bad value for 'fd' [ 393.893725][T13396] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2104'. [ 394.279576][ T32] audit: type=1326 audit(1790496890.987:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13423 comm="syz.6.2112" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f17eb39e159 code=0x0 [ 394.339480][T13428] netlink: 'syz.6.2112': attribute type 28 has an invalid length. [ 394.354951][T13428] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2112'. [ 394.401772][T13430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2115'. [ 394.401955][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2115'. [ 394.466845][T13433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2116'. [ 394.878894][ T5711] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 395.048723][ T5711] usb 5-1: Using ep0 maxpacket: 32 [ 395.049247][ T5711] usb 5-1: New USB device found: idVendor=1e7d, idProduct=2d51, bcdDevice=0.00 [ 395.050087][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.050102][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.050122][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.051682][ T5711] usb 5-1: config 0 descriptor?? [ 395.125756][T13460] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2125'. [ 395.273240][T13439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.275896][T13439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.588915][ T5711] usbhid 5-1:0.0: can't add hid device: -71 [ 395.588984][ T5711] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 395.613370][ T5711] usb 5-1: USB disconnect, device number 15 [ 395.998870][T13490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2134'. [ 396.228133][T13496] Invalid source name [ 396.228145][T13496] UBIFS error (pid: 13496): cannot open "ubifs", error -22 [ 396.275755][T13499] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2138'. [ 396.280753][T13499] FAULT_INJECTION: forcing a failure. [ 396.280753][T13499] name failslab, interval 1, probability 0, space 0, times 0 [ 396.280770][T13499] CPU: 0 UID: 0 PID: 13499 Comm: syz.4.2138 Not tainted syzkaller #0 PREEMPT(full) [ 396.280789][T13499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 396.280796][T13499] Call Trace: [ 396.280800][T13499] [ 396.280806][T13499] dump_stack_lvl+0xe8/0x150 [ 396.280824][T13499] should_fail_ex+0x3eb/0x540 [ 396.280843][T13499] should_failslab+0xa8/0x100 [ 396.280857][T13499] ? mas_alloc_nodes+0x291/0x350 [ 396.280872][T13499] kmem_cache_alloc_noprof+0x9c/0x600 [ 396.280890][T13499] ? mas_alloc_nodes+0x291/0x350 [ 396.280911][T13499] mas_alloc_nodes+0x291/0x350 [ 396.280927][T13499] mas_preallocate+0x42a/0x840 [ 396.280941][T13499] ? rcu_is_watching+0x16/0xb0 [ 396.280954][T13499] ? trace_kmem_cache_alloc+0x29/0xe0 [ 396.280968][T13499] ? __pfx_mas_preallocate+0x10/0x10 [ 396.280990][T13499] ? anon_vma_name+0x61/0x210 [ 396.281003][T13499] ? __mas_set_range+0x11a/0x3a0 [ 396.281017][T13499] __split_vma+0x2fb/0xa70 [ 396.281032][T13499] ? __pfx___split_vma+0x10/0x10 [ 396.281045][T13499] ? kernel_text_address+0xa5/0xe0 [ 396.281057][T13499] ? __kernel_text_address+0xd/0x30 [ 396.281072][T13499] vma_modify+0x6f6/0x1c40 [ 396.281090][T13499] vma_modify_flags_uffd+0x2a5/0x360 [ 396.281104][T13499] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 396.281127][T13499] ? vma_can_userfault+0x23c/0x280 [ 396.281139][T13499] userfaultfd_register_range+0x3f8/0x5e0 [ 396.281155][T13499] ? __pfx_userfaultfd_register_range+0x10/0x10 [ 396.281173][T13499] ? mas_find+0x44e/0xcb0 [ 396.281187][T13499] userfaultfd_register+0xa80/0xc90 [ 396.281205][T13499] ? __pfx_userfaultfd_register+0x10/0x10 [ 396.281222][T13499] ? userfaultfd_ioctl+0x254/0x560 [ 396.281240][T13499] userfaultfd_ioctl+0x261/0x560 [ 396.281255][T13499] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 396.281269][T13499] ? __fget_files+0x2a/0x420 [ 396.281281][T13499] ? bpf_lsm_file_ioctl+0x9/0x20 [ 396.281293][T13499] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 396.281307][T13499] __se_sys_ioctl+0xfc/0x170 [ 396.281321][T13499] do_syscall_64+0x166/0x520 [ 396.281330][T13499] ? trace_irq_disable+0x3b/0x140 [ 396.281342][T13499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.281352][T13499] ? clear_bhb_loop+0x70/0xc0 [ 396.281364][T13499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.281374][T13499] RIP: 0033:0x7f70c4d9e159 [ 396.281384][T13499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.281392][T13499] RSP: 002b:00007f70c5c57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.281404][T13499] RAX: ffffffffffffffda RBX: 00007f70c5025fa0 RCX: 00007f70c4d9e159 [ 396.281411][T13499] RDX: 0000200000000080 RSI: 00000000c020aa00 RDI: 0000000000000008 [ 396.281418][T13499] RBP: 00007f70c4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 396.281424][T13499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.281430][T13499] R13: 00007f70c5026038 R14: 00007f70c5025fa0 R15: 00007fffe9f06428 [ 396.281445][T13499] [ 396.800608][T13508] jffs2: notice: (13508) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 397.225050][T13518] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2142'. [ 397.225066][T13518] veth0_to_bond: default FDB implementation only supports local addresses [ 397.451455][T13522] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2144'. [ 397.547770][T13526] jffs2: notice: (13526) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 397.566451][ T5711] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 397.586347][T13526] overlayfs: failed to clone upperpath [ 397.626556][T13526] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2146'. [ 397.659699][T13529] fuse: fd is not a fuse device [ 397.729714][ T5711] usb 5-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 397.730601][ T5711] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 397.730615][ T5711] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 397.732751][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.732764][ T5711] usb 5-1: Product: syz [ 397.732772][ T5711] usb 5-1: Manufacturer: syz [ 397.732779][ T5711] usb 5-1: SerialNumber: syz [ 398.668869][ T5711] usb 5-1: failed to send ARPC request 1: -71 [ 398.669019][ T5711] usb 5-1: failed to execute ARPC: -71 [ 398.669027][ T5711] usb 5-1: failed to set connected state for cport 0: -71 [ 398.669037][ T5711] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 398.670266][ T5711] usb 5-1: failed to send ARPC request 3: -71 [ 398.670323][ T5711] usb 5-1: failed to execute ARPC: -71 [ 398.670331][ T5711] usb 5-1: failed to clear cport 0: -71 [ 398.670340][ T5711] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 398.685040][ T5711] es2_ap_driver 5-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 398.698943][ T5711] usb 5-1: USB disconnect, device number 16 [ 398.933711][ T32] audit: type=1807 audit(1790496895.338:51): action=measure uid>+ res=0 [ 398.933955][ T32] audit: type=1802 audit(1790496895.338:52): pid=13548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.2143" res=0 errno=0 [ 398.963074][T13548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2143'. [ 399.220743][T13550] openvswitch: netlink: Tunnel attr 205 out of range max 16 [ 399.221642][T13550] openvswitch: netlink: Tunnel attr 205 out of range max 16 [ 399.302811][T13553] netlink: 'syz.7.2151': attribute type 4 has an invalid length. [ 399.370054][T13555] comedi comedi4: comedi_config --init_data is deprecated [ 399.535967][T13561] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2154'. [ 399.573511][T13563] fuse: fd is not a fuse device [ 400.519704][T13548] ima: policy update failed [ 400.519824][ T32] audit: type=1802 audit(1790496896.826:53): pid=13548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2143" res=0 errno=0 [ 400.852703][ T5711] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 401.008815][ T5711] usb 5-1: New USB device found: idVendor=1b1c, idProduct=1b27, bcdDevice=0.40 [ 401.009816][ T5711] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 401.009834][ T5711] usb 5-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 401.009847][ T5711] usb 5-1: config 1 interface 0 has no altsetting 0 [ 401.059659][ T5711] usb 5-1: string descriptor 0 read error: -22 [ 401.059734][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.076497][T13575] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 401.134068][T13584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2163'. [ 401.164379][T13587] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2164'. [ 401.237454][T13589] fuse: Bad value for 'fd' [ 401.295568][T13575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.311158][T13575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.346050][T13591] tmpfs: Bad value for 'size' [ 401.376559][T13594] tmpfs: Bad value for 'size' [ 401.612335][T13604] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2170'. [ 402.122183][T13610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 402.221279][T13614] fuse: fd is not a fuse device [ 402.260443][T13616] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2175'. [ 403.298509][T13634] netlink: 666 bytes leftover after parsing attributes in process `syz.7.2182'. [ 403.847653][ T5711] usbhid 5-1:1.0: can't add hid device: -71 [ 403.847720][ T5711] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 403.867287][ T5711] usb 5-1: USB disconnect, device number 17 [ 404.062637][T13647] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2186'. [ 404.336573][T13655] netlink: 'syz.7.2189': attribute type 3 has an invalid length. [ 404.336587][T13655] netlink: 'syz.7.2189': attribute type 2 has an invalid length. [ 404.379110][T13658] jffs2: notice: (13658) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 404.414656][T13657] jffs2: notice: (13657) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 404.415227][T13658] overlayfs: failed to resolve 'pcr=00000000000000000049': -2 [ 404.448632][T13660] overlayfs: failed to resolve 'pcr=00000000000000000049': -2 [ 404.597691][T13655] ovs-dp0: entered promiscuous mode [ 404.887421][T13681] netlink: 'syz.7.2193': attribute type 38 has an invalid length. [ 405.518244][T10008] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 405.680646][T10008] usb 5-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 405.683437][T10008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.683451][T10008] usb 5-1: Product: syz [ 405.683458][T10008] usb 5-1: Manufacturer: syz [ 405.683466][T10008] usb 5-1: SerialNumber: syz [ 405.865964][T13705] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2196'. [ 406.103240][T13712] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2198'. [ 406.103256][T13712] netlink: 59 bytes leftover after parsing attributes in process `syz.7.2198'. [ 406.103264][T13712] netlink: 59 bytes leftover after parsing attributes in process `syz.7.2198'. [ 406.141195][T13712] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2198'. [ 406.141224][T13712] netlink: 59 bytes leftover after parsing attributes in process `syz.7.2198'. [ 406.141233][T13712] netlink: 59 bytes leftover after parsing attributes in process `syz.7.2198'. [ 406.228975][T10008] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 406.229007][T10008] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 406.229017][T10008] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 406.273626][T10008] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 406.303857][T10008] usb 5-1: USB disconnect, device number 18 [ 406.523223][T13725] exFAT-fs (nbd2): unable to read boot sector [ 406.523235][T13725] exFAT-fs (nbd2): failed to read boot sector [ 406.523239][T13725] exFAT-fs (nbd2): failed to recognize exfat type [ 406.728805][T10008] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 406.885199][T10008] usb 5-1: Using ep0 maxpacket: 32 [ 406.885732][T10008] usb 5-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 406.886536][T10008] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 406.886549][T10008] usb 5-1: config 0 has no interface number 0 [ 406.886571][T10008] usb 5-1: config 0 interface 12 has no altsetting 0 [ 406.888221][T10008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.888234][T10008] usb 5-1: Product: syz [ 406.888241][T10008] usb 5-1: Manufacturer: syz [ 406.888248][T10008] usb 5-1: SerialNumber: syz [ 406.893225][T10008] usb 5-1: config 0 descriptor?? [ 407.815657][T13778] fuse: Bad value for 'fd' [ 408.070190][T13796] __nla_validate_parse: 1 callbacks suppressed [ 408.070203][T13796] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2214'. [ 408.507076][T13814] fuse: Bad value for 'fd' [ 408.724896][ T32] audit: type=1326 audit(1790496904.500:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13811 comm="syz.6.2219" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17eb39e159 code=0x0 [ 408.872089][T10008] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 408.872119][T10008] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 408.872128][T10008] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 408.872319][T10008] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 408.910964][T10008] usb 5-1: USB disconnect, device number 19 [ 409.108934][T13819] fuse: Bad value for 'fd' [ 409.530479][T13824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2224'. [ 410.545665][T13841] fuse: Bad value for 'fd' [ 411.054806][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2233'. [ 411.152923][T13853] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2234'. [ 411.279236][T13859] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 411.279328][T13859] overlayfs: failed to clone lowerpath [ 411.299208][T13859] overlayfs: failed to clone lowerpath [ 411.492853][T13870] cgroup: Unknown subsys name 'cpuset' [ 411.649156][T13879] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2244'. [ 411.665640][T13877] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 411.667355][T13876] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2243'. [ 411.863233][T13894] IPv6: NLM_F_CREATE should be specified when creating new route [ 411.875635][T13894] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2250'. [ 411.950936][T10008] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 412.110608][T10008] usb 5-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 412.111531][T10008] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 412.111547][T10008] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 412.111559][T10008] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 412.111580][T10008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.117409][T13876] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 412.117470][T13876] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 412.118666][T10008] pl2303 5-1:1.0: pl2303 converter detected [ 412.194035][T10008] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 412.340244][T10008] usb 5-1: USB disconnect, device number 20 [ 412.357349][T10008] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 412.357751][T10008] pl2303 5-1:1.0: device disconnected [ 412.550577][T13910] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2254'. [ 412.592246][T13912] netlink: 892 bytes leftover after parsing attributes in process `syz.7.2255'. [ 412.757807][T13926] MTD: Couldn't look up './dev/mtdblock0': -2 [ 413.253624][T10008] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 413.324104][T13936] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2264'. [ 413.414773][T10008] usb 5-1: Using ep0 maxpacket: 16 [ 413.415218][T10008] usb 5-1: New USB device found: idVendor=04e6, idProduct=0003, bcdDevice=1.77 [ 413.416928][T10008] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 413.416955][T10008] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 413.416965][T10008] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 413.416977][T10008] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 413.416987][T10008] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 413.416999][T10008] usb 5-1: config 1 interface 0 has no altsetting 0 [ 413.417016][T10008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.506628][T10008] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 413.749133][T10008] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 413.755101][T10008] usb 5-1: USB disconnect, device number 21 [ 414.404207][T13965] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 414.423742][T13966] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2274'. [ 414.671352][ T32] audit: type=1326 audit(1790496910.068:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.4.2277" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70c4d9e159 code=0x0 [ 414.709195][ T33] INFO: task syz.0.1144:10201 blocked for more than 143 seconds. [ 414.709210][ T33] Not tainted syzkaller #0 [ 414.709217][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.709222][ T33] task:syz.0.1144 state:D stack:26656 pid:10201 tgid:10200 ppid:5609 task_flags:0x400140 flags:0x00080002 [ 414.709254][ T33] Call Trace: [ 414.709258][ T33] [ 414.709265][ T33] __schedule+0x1b47/0x5c60 [ 414.709293][ T33] ? preempt_schedule_notrace+0x56/0x90 [ 414.709312][ T33] ? __pfx___schedule+0x10/0x10 [ 414.709330][ T33] ? schedule+0x90/0x2b0 [ 414.709345][ T33] schedule+0x164/0x2b0 [ 414.709360][ T33] schedule_preempt_disabled+0x13/0x30 [ 414.709374][ T33] __mutex_lock+0x7c4/0x15a0 [ 414.709386][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 414.709398][ T33] ? nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 414.709415][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 414.709423][ T33] ? lockdep_hardirqs_on+0x7b/0x110 [ 414.709788][ T33] ? kern_path+0xd1/0x150 [ 414.709800][ T33] nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 414.709815][ T33] ? __nla_parse+0x40/0x60 [ 414.709827][ T33] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 414.709842][ T33] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 414.709857][ T33] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 414.709882][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 414.709900][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 414.709919][ T33] ? bpf_lsm_capable+0x9/0x20 [ 414.709933][ T33] ? security_capable+0x7e/0x2c0 [ 414.709950][ T33] genl_rcv_msg+0x614/0x7a0 [ 414.709967][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.709980][ T33] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 414.709997][ T33] ? __asan_memcpy+0x40/0x70 [ 414.710011][ T33] netlink_rcv_skb+0x226/0x4a0 [ 414.710023][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.710037][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.710056][ T33] ? down_read+0x2b9/0x320 [ 414.710068][ T33] genl_rcv+0x28/0x40 [ 414.710080][ T33] netlink_unicast+0x7bd/0x940 [ 414.710096][ T33] netlink_sendmsg+0x7c3/0xae0 [ 414.710111][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.710126][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 414.710141][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.710151][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 414.710166][ T33] ____sys_sendmsg+0x54e/0x850 [ 414.710184][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.710203][ T33] ? import_iovec+0x73/0xa0 [ 414.710216][ T33] ___sys_sendmsg+0x2a5/0x360 [ 414.710229][ T33] ? __lock_acquire+0x747/0x2de0 [ 414.710244][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.710260][ T33] ? futex_wait+0x2a2/0x390 [ 414.710286][ T33] ? __fget_files+0x3a2/0x420 [ 414.710296][ T33] ? __fget_files+0x2a/0x420 [ 414.710311][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 414.710327][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.710352][ T33] do_syscall_64+0x166/0x520 [ 414.710362][ T33] ? trace_irq_disable+0x3b/0x140 [ 414.710374][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.710385][ T33] ? clear_bhb_loop+0x70/0xc0 [ 414.710397][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.710408][ T33] RIP: 0033:0x7f35c159e159 [ 414.710418][ T33] RSP: 002b:00007f35c24cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.710429][ T33] RAX: ffffffffffffffda RBX: 00007f35c1825fa0 RCX: 00007f35c159e159 [ 414.710436][ T33] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000004 [ 414.710443][ T33] RBP: 00007f35c163506b R08: 0000000000000000 R09: 0000000000000000 [ 414.710450][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.710457][ T33] R13: 00007f35c1826038 R14: 00007f35c1825fa0 R15: 00007ffdc9b97488 [ 414.710472][ T33] [ 414.710496][ T33] [ 414.710496][ T33] Showing all locks held in the system: [ 414.710504][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 414.710511][ T33] #0: ffffffff8f15c2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 414.710544][ T33] locks held by kworker/u8:7/1098: 5, last CPU#0: [ 414.710551][ T33] #0: ffff88801c286148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 414.710578][ T33] #1: ffffc90005147c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 414.710613][ T33] #2: ffffffff90666468 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 414.710640][ T33] #3: ffffffff90674ce0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8f0 [ 414.710665][ T33] #4: ffffffff8f15c2a0 (rcu_read_lock){....}-{1:3}, at: kernfs_root+0x1c/0x230 [ 414.710732][ T33] locks held by kworker/0:4/1907: 6, on CPU#0: [ 414.710740][ T33] #0: ffff88801eeee948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 414.710766][ T33] #1: ffffc90006357c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 414.710791][ T33] #2: ffff888029e931d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 414.710815][ T33] #3: ffff88807b3b31d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 414.710840][ T33] #4: ffff8880555571a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 414.710870][ T33] #5: ffffffff8eff6288 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2b0 [ 414.710905][ T33] locks held by getty/5365: 2, on CPU#0: [ 414.710912][ T33] #0: ffff88801c7760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 414.710939][ T33] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 414.710970][ T33] locks held by syz.3.996/9677: 3, on CPU#0: [ 414.710976][ T33] #0: ffff88807f7089b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 414.710999][ T33] #1: ffff88807ee5a460 (sb_writers#25){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 414.711026][ T33] #2: ffffffff8f49f8e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 414.711048][ T33] locks held by syz.0.1144/10201: 2, on CPU#0: [ 414.711055][ T33] #0: ffffffff906e5fc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.711080][ T33] #1: ffffffff8f49f8e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 414.711109][ T33] locks held by kworker/u8:15/13098: 3, last CPU#0: [ 414.711116][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 414.711141][ T33] #1: ffffc90005747c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 414.711167][ T33] #2: ffff888012632258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 414.711197][ T33] locks held by syz.6.2276/13973: 2, on CPU#0: [ 414.711205][ T33] #0: ffff888025a626e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 414.711228][ T33] #1: ffffffff90674ce0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 414.711263][ T33] locks held by syz.6.2276/13974: 5, last CPU#0: [ 414.711270][ T33] #0: ffff8880787cf0b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 414.713520][ T33] #1: ffff88807971c460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 414.713548][ T33] #2: ffff888059e86080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 414.713576][ T33] #3: ffffffff8f292b40 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x600 [ 414.713600][ T33] #4: ffffffff8f2a92c0 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: fs_reclaim_acquire+0x7c/0x100 [ 414.713636][ T33] locks held by syz.7.2278/13976: 2, last CPU#0: [ 414.713644][ T33] #0: ffff88807b088308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 414.713672][ T33] #1: ffffffff8f2af8d0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 414.713793][ T33] [ 414.713797][ T33] ============================================= [ 414.713797][ T33] [ 414.713802][ T33] NMI backtrace for cpu 0 [ 414.713811][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 414.713822][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 414.713828][ T33] Call Trace: [ 414.713833][ T33] [ 414.713837][ T33] dump_stack_lvl+0xe8/0x150 [ 414.713851][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 414.713872][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 414.713887][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 414.713901][ T33] sys_info+0x135/0x170 [ 414.713912][ T33] watchdog+0x1058/0x10d0 [ 414.713928][ T33] ? watchdog+0x209/0x10d0 [ 414.713941][ T33] kthread+0x38b/0x480 [ 414.713952][ T33] ? __pfx_watchdog+0x10/0x10 [ 414.713962][ T33] ? __pfx_kthread+0x10/0x10 [ 414.713972][ T33] ret_from_fork+0x514/0xb70 [ 414.713987][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 414.714000][ T33] ? __switch_to+0xc78/0x1410 [ 414.714013][ T33] ? __pfx_kthread+0x10/0x10 [ 414.714023][ T33] ret_from_fork_asm+0x1a/0x30 [ 414.714043][ T33] [ 414.714057][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 415.565985][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 415.575071][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.585114][ T33] Call Trace: [ 415.588372][ T33] [ 415.591280][ T33] vpanic+0x26f/0x710 [ 415.595248][ T33] panic+0xc5/0xd0 [ 415.598947][ T33] ? __pfx_panic+0x10/0x10 [ 415.603344][ T33] ? nmi_cpu_backtrace+0x2b0/0x2d0 [ 415.608435][ T33] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 415.614566][ T33] watchdog+0x10cc/0x10d0 [ 415.618877][ T33] ? watchdog+0x209/0x10d0 [ 415.623273][ T33] kthread+0x38b/0x480 [ 415.627318][ T33] ? __pfx_watchdog+0x10/0x10 [ 415.631971][ T33] ? __pfx_kthread+0x10/0x10 [ 415.636537][ T33] ret_from_fork+0x514/0xb70 [ 415.641126][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 415.646231][ T33] ? __switch_to+0xc78/0x1410 [ 415.650883][ T33] ? __pfx_kthread+0x10/0x10 [ 415.655446][ T33] ret_from_fork_asm+0x1a/0x30 [ 415.660195][ T33] [ 415.663262][ T33] Kernel Offset: disabled [ 415.667568][ T33] Rebooting in 86400 seconds..