last executing test programs: 2m49.154346293s ago: executing program 2 (id=728): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (fail_nth: 3) 2m48.990150812s ago: executing program 2 (id=731): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1f9) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 2m48.453768103s ago: executing program 2 (id=732): socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x100000}]}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, &(0x7f0000010000), &(0x7f0000020000), &(0x7f0000018000)}) write(r3, &(0x7f0000010000)="000002000000000080", 0x9) write(r3, &(0x7f0000018000)="000001", 0x3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0) syz_usb_control_io(r4, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac2(r4, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000600)={0x3, r3}) write$tun(r3, &(0x7f0000000800)=ANY=[], 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2m45.636793052s ago: executing program 2 (id=743): syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x2) r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000010d80402f000000000000109022d00010000001009040000010300000009211000fd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x40, 0xf, 0x3b, {0x3b, 0xd, "5e5643e25f93ad21dcc8f70c78d61de64f560fa4b744580c256fe6fc5f05671bb8b885d5712cfe195e21635856e58a109eb211d3b9b4808c62"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xda, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8210, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x3, 0x1, 0xf8, 0x90, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x1d}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x205, 0x2, 0x29, 0xc, 0xc0, 0x1}, @selector_unit={0x7, 0x24, 0x5, 0x4, 0x4, "d204"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x2, 0x7, 0x3, "e1df", "d6"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x4, 0x2, 0x1, "ee91b1"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x2, 0x1, 0xf9, "", "86"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x62, 0x8, {0x7, 0x25, 0x1, 0x4, 0x4, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0x4, 0x36, "95"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x4, 0x6, 0x6, "476fa351"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x9, 0x1, "be"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xdd3, 0xe3, 0x2, "b5a117fa68"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x9, 0x3, 0x6, 0x3, "a3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x7f7, 0xb, 0xb, 0x1, {0x7, 0x25, 0x1, 0x4, 0x7f, 0x8eb}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x8, 0x9, 0x9, 0x8, 0x90}, 0x24, &(0x7f00000001c0)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x26, "27d0627005c11a6bb858b388a8fe83b8"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xe, 0xfa, 0xc28, 0xb}]}, 0x8, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2409}}, {0xf7, &(0x7f00000003c0)=@string={0xf7, 0x3, "e2179bc0fa025dc8401eaf1cb6eec5a3ae2de673688b2caf14492b7ced6ec94dec7b1b93854ed5db61baf6b1cd94ef678b6570381f77c00c83c164292e58cfbfe9b8d8e1ab3c5de6536d72c741a361121d3542e5ba1bf7f792a955ae8603a45f8e15e430cfd6529eab3b435fd6e5cf6cd47b7726c2d76b176423b08f55c162d368b6b5d56f533ce87557aa4a37b139cc5d406e30ba8ee4b09dca2c37a866d57b0a6c31ab42bcadab7126f02212dbd2df2b14dd14283b9d0cf7ba3c05b295a485ec567080addc75fbaa67339703dc57ccabfd563f2f367a0ecc9b3e2d0d99d8aea8303a5a143d93241661d6952fe2fb2e39c51c3279"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x438}}, {0xd8, &(0x7f0000000500)=@string={0xd8, 0x3, "6c2b54ef096696a32b0c1f89f9ca5c1939652ba199a9bc0e601d43b10f078143c3f6174f4a883a01b9780805eb5bcb4d43d4359811cd2e797c54c15c5fd49a5d596533af6fe9d24b4db25357bdd9b374a03f633b098fa4c197d61ba137f23be5b0e9952bf4a5586bc1e8e69f48c21eed1c25fc1556fae2cdd223534d533dc866f50459afe6dab8af177f9db95f5113a7becd4a6fdc59a3b6d38a26ab7c461496a664ab548a81b41c3eaf8edbfe4f9ceee237e45b43a9a43bf751596ddcd57aee2bd5ebb31cf329caa0704cb53453fadfabadf2697673"}}, {0x47, &(0x7f0000000600)=@string={0x47, 0x3, "971743b969be227cc1c1e5e0b1ab649aa218ee1357b8086c25b6570abd8543543e821a2e49b78af9b2f2939762c7a26702323374a0d7b6e707a3a510fcaa5815505093b73b"}}, {0x2b, &(0x7f0000000680)=@string={0x2b, 0x3, "a5e33e728b79a3a8c459ababfdeb3aabfcd26e4f2744557e21f4ff60fdda392fe12c9e1236d993b1c6"}}, {0x98, &(0x7f00000006c0)=@string={0x98, 0x3, "7b72c89967fb656da1602969fbca4aa3f98256fffb03910289d8f5cabdeee100885f177b9f5c31851bd532121c3531e73b09a017a9db49b8a833dd4afe21d2b7ce816acae7065279bb9b4002e38eaae366a78523508795009c27f89972beea76a8c49aed3a449cac14d158e38a8553414e704cc98b1380f6daa28d9cccb2ba495a005062dadeca94e20594fd448a145db31464a73fe6"}}]}) syz_usb_control_io$uac1(r1, &(0x7f00000008c0)={0x14, &(0x7f0000000800)={0x40, 0xa, 0x3c, {0x3c, 0x21, "5b0164cf4f967a2d3413d8576199c76b30b47a2ea52c091b97b50e9007bcd200d399223e38e509455da33e772353ed72a6037c84e8969492b038"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xec0bb013945288fb}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000900)={0x40, 0xf, 0x8a, "57e6ace24c5bb654b623e25b2c14fe4b14a62b9f197fbe6733590ddb72d061d1fffe9e9179c1e9223458e384092524efa8b812f21fcd8904d13f31a5f7a0ae6204d95eeafd23da1e6ee78374bc70a1b1e5d755c50d69903d1e997e2c1c0131d9b3b9519f2c0ff2fddb97024a22c9e38fb2f5482dd7b8c92f8baea39a603eef8e9392af5e95fb70a0a6a8"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000a40)={0x20, 0x81, 0x3, "b4af36"}, &(0x7f0000000a80)={0x20, 0x82, 0x3, "147fbe"}, &(0x7f0000000ac0)={0x20, 0x83, 0x1, "d2"}, &(0x7f0000000b00)={0x20, 0x84, 0x1, "01"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "0ef47f"}}) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x2) (async) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000010d80402f000000000000109022d00010000001009040000010300000009211000fd0122050009058103"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x40, 0xf, 0x3b, {0x3b, 0xd, "5e5643e25f93ad21dcc8f70c78d61de64f560fa4b744580c256fe6fc5f05671bb8b885d5712cfe195e21635856e58a109eb211d3b9b4808c62"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect$uac1(0x0, 0xda, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8210, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x3, 0x1, 0xf8, 0x90, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x1d}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x205, 0x2, 0x29, 0xc, 0xc0, 0x1}, @selector_unit={0x7, 0x24, 0x5, 0x4, 0x4, "d204"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x2, 0x7, 0x3, "e1df", "d6"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x4, 0x2, 0x1, "ee91b1"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x2, 0x1, 0xf9, "", "86"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x62, 0x8, {0x7, 0x25, 0x1, 0x4, 0x4, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0x4, 0x36, "95"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x4, 0x6, 0x6, "476fa351"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x9, 0x1, "be"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xdd3, 0xe3, 0x2, "b5a117fa68"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x9, 0x3, 0x6, 0x3, "a3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x7f7, 0xb, 0xb, 0x1, {0x7, 0x25, 0x1, 0x4, 0x7f, 0x8eb}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x8, 0x9, 0x9, 0x8, 0x90}, 0x24, &(0x7f00000001c0)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x26, "27d0627005c11a6bb858b388a8fe83b8"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xe, 0xfa, 0xc28, 0xb}]}, 0x8, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2409}}, {0xf7, &(0x7f00000003c0)=@string={0xf7, 0x3, "e2179bc0fa025dc8401eaf1cb6eec5a3ae2de673688b2caf14492b7ced6ec94dec7b1b93854ed5db61baf6b1cd94ef678b6570381f77c00c83c164292e58cfbfe9b8d8e1ab3c5de6536d72c741a361121d3542e5ba1bf7f792a955ae8603a45f8e15e430cfd6529eab3b435fd6e5cf6cd47b7726c2d76b176423b08f55c162d368b6b5d56f533ce87557aa4a37b139cc5d406e30ba8ee4b09dca2c37a866d57b0a6c31ab42bcadab7126f02212dbd2df2b14dd14283b9d0cf7ba3c05b295a485ec567080addc75fbaa67339703dc57ccabfd563f2f367a0ecc9b3e2d0d99d8aea8303a5a143d93241661d6952fe2fb2e39c51c3279"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x438}}, {0xd8, &(0x7f0000000500)=@string={0xd8, 0x3, "6c2b54ef096696a32b0c1f89f9ca5c1939652ba199a9bc0e601d43b10f078143c3f6174f4a883a01b9780805eb5bcb4d43d4359811cd2e797c54c15c5fd49a5d596533af6fe9d24b4db25357bdd9b374a03f633b098fa4c197d61ba137f23be5b0e9952bf4a5586bc1e8e69f48c21eed1c25fc1556fae2cdd223534d533dc866f50459afe6dab8af177f9db95f5113a7becd4a6fdc59a3b6d38a26ab7c461496a664ab548a81b41c3eaf8edbfe4f9ceee237e45b43a9a43bf751596ddcd57aee2bd5ebb31cf329caa0704cb53453fadfabadf2697673"}}, {0x47, &(0x7f0000000600)=@string={0x47, 0x3, "971743b969be227cc1c1e5e0b1ab649aa218ee1357b8086c25b6570abd8543543e821a2e49b78af9b2f2939762c7a26702323374a0d7b6e707a3a510fcaa5815505093b73b"}}, {0x2b, &(0x7f0000000680)=@string={0x2b, 0x3, "a5e33e728b79a3a8c459ababfdeb3aabfcd26e4f2744557e21f4ff60fdda392fe12c9e1236d993b1c6"}}, {0x98, &(0x7f00000006c0)=@string={0x98, 0x3, "7b72c89967fb656da1602969fbca4aa3f98256fffb03910289d8f5cabdeee100885f177b9f5c31851bd532121c3531e73b09a017a9db49b8a833dd4afe21d2b7ce816acae7065279bb9b4002e38eaae366a78523508795009c27f89972beea76a8c49aed3a449cac14d158e38a8553414e704cc98b1380f6daa28d9cccb2ba495a005062dadeca94e20594fd448a145db31464a73fe6"}}]}) (async) syz_usb_control_io$uac1(r1, &(0x7f00000008c0)={0x14, &(0x7f0000000800)={0x40, 0xa, 0x3c, {0x3c, 0x21, "5b0164cf4f967a2d3413d8576199c76b30b47a2ea52c091b97b50e9007bcd200d399223e38e509455da33e772353ed72a6037c84e8969492b038"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xec0bb013945288fb}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000900)={0x40, 0xf, 0x8a, "57e6ace24c5bb654b623e25b2c14fe4b14a62b9f197fbe6733590ddb72d061d1fffe9e9179c1e9223458e384092524efa8b812f21fcd8904d13f31a5f7a0ae6204d95eeafd23da1e6ee78374bc70a1b1e5d755c50d69903d1e997e2c1c0131d9b3b9519f2c0ff2fddb97024a22c9e38fb2f5482dd7b8c92f8baea39a603eef8e9392af5e95fb70a0a6a8"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000a40)={0x20, 0x81, 0x3, "b4af36"}, &(0x7f0000000a80)={0x20, 0x82, 0x3, "147fbe"}, &(0x7f0000000ac0)={0x20, 0x83, 0x1, "d2"}, &(0x7f0000000b00)={0x20, 0x84, 0x1, "01"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "0ef47f"}}) (async) 2m42.937109462s ago: executing program 2 (id=757): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0xf, &(0x7f00000002c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x68, 0x4, 0x2a}]}}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ttyUSB0\x00', 0x1, 0x0) write(r0, &(0x7f0000000100), 0x0) 2m40.898890708s ago: executing program 2 (id=768): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8) ioctl$NBD_CLEAR_SOCK(r0, 0xc0001502) 2m25.735241793s ago: executing program 32 (id=768): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8) ioctl$NBD_CLEAR_SOCK(r0, 0xc0001502) 1m38.253736823s ago: executing program 4 (id=1036): getpriority(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4]}, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) 1m38.244068476s ago: executing program 4 (id=1037): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x80, 0x4) write(r0, &(0x7f0000000000)="08001800000020a3", 0x8) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4,,:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m38.161166353s ago: executing program 4 (id=1038): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xa4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1, 0x2040) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x7, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x154}}}, &(0x7f0000000300)=0x0) r7 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r6, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80, 0x0, r7}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x52c2, 0x1000, 0x20003, 0x91, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x306, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0xacc00, 0x3, 0x8}}], 0x1, 0x0, 0x0) 1m37.143447374s ago: executing program 4 (id=1043): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003b00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401d5596331e76716b4dfe0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6", 0xd9}], 0x1}, 0xf49b3c0d48701930) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000400) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/comedi3\x00', 0x40402, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f000002d500)={0x4000000, 0x0, 0x0, 0x3, 0x3}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000040)='/dev/comedi3\x00') r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x48800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x1, 0x7, 0x8080000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 1m36.93634455s ago: executing program 4 (id=1045): r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x40) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, {0x0}, 0x400000}) (fail_nth: 7) 1m36.439851421s ago: executing program 4 (id=1048): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@e={0xff, 0xa, 0x9, 0x2, @SEQ_CONTROLLER=0xfe, 0x10, 0x7, 0xb}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x10) r2 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x40) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x1, 0xbf6eef2e6f381cb2, 0x2, 0x0, 0xfc}) clock_gettime(0x0, &(0x7f0000000040)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_ublk_setup_io_uring(0x20, &(0x7f0000000580)={0x0, 0xfffffffb, 0x400, 0x800, 0xb3}, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000002dc0)={0x0, 0x2}, &(0x7f0000002e00)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}], [], 0x6b}}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="040ef5db9f50bfb8103750299f4ccb4a9230a2dff2e5c5b03a177713dc597db176c77fd160a482d580c4edc695133e40e7ff7825fd0664ea2611b6ea473f8f074d"], 0x7) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r6, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x120) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) ioctl$COMEDI_CMD(r7, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e7, 0x2, 0x0, 0x20, 0x20, 0x20, 0x0, &(0x7f0000000600)=[0x7], 0x1, 0x0}) 1m21.020143193s ago: executing program 33 (id=1048): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@e={0xff, 0xa, 0x9, 0x2, @SEQ_CONTROLLER=0xfe, 0x10, 0x7, 0xb}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x10) r2 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x40) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x1, 0xbf6eef2e6f381cb2, 0x2, 0x0, 0xfc}) clock_gettime(0x0, &(0x7f0000000040)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_ublk_setup_io_uring(0x20, &(0x7f0000000580)={0x0, 0xfffffffb, 0x400, 0x800, 0xb3}, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000002dc0)={0x0, 0x2}, &(0x7f0000002e00)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}], [], 0x6b}}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="040ef5db9f50bfb8103750299f4ccb4a9230a2dff2e5c5b03a177713dc597db176c77fd160a482d580c4edc695133e40e7ff7825fd0664ea2611b6ea473f8f074d"], 0x7) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r6, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x120) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) ioctl$COMEDI_CMD(r7, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e7, 0x2, 0x0, 0x20, 0x20, 0x20, 0x0, &(0x7f0000000600)=[0x7], 0x1, 0x0}) 6.990903022s ago: executing program 1 (id=1461): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'lo\x00', {0x3}, 0x6}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)={0x6666666666666ca, 0x0, [{0x0, 0x84, 0x4, 0x9, 0x4, 0x0, 0xb}, {0xb, 0x5, 0x0, 0xd, 0x6, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000001, 0x0, 0x4, 0x10001, 0x6, 0x3, 0x8}, {0xa, 0x3, 0x8, 0x2, 0xfffffff7, 0x8459, 0x401}, {0xc0000001, 0x10000, 0x4, 0x1, 0x203a, 0x9, 0x200}]}) (async) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)={0x6666666666666ca, 0x0, [{0x0, 0x84, 0x4, 0x9, 0x4, 0x0, 0xb}, {0xb, 0x5, 0x0, 0xd, 0x6, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000001, 0x0, 0x4, 0x10001, 0x6, 0x3, 0x8}, {0xa, 0x3, 0x8, 0x2, 0xfffffff7, 0x8459, 0x401}, {0xc0000001, 0x10000, 0x4, 0x1, 0x203a, 0x9, 0x200}]}) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x8, 0x81, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xb, 0xf5, 0x3}}]}}}]}}]}}, 0x0) (async) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x8, 0x81, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xb, 0xf5, 0x3}}]}}}]}}]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030097d303130303030302c757365725f69643d6da8c55f7d7fd8ac", @ANYRES16=0x0, @ANYBLOB="2c67726f75705f69643d9b870ef739de1b51993bd32e0d13e93afdf1384b502da7da8a31d502ca855c0c640f", @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) dup2(r7, r7) (async) r8 = dup2(r7, r7) write$FUSE_STATX(r8, &(0x7f00000003c0)={0x130, 0x0, r4, {0xc, 0x400, 0x0, '\x00', {0x1, 0x2, 0x5, 0x3, r5, r6, 0xc000, '\x00', 0x81, 0xd5, 0x1, 0x5, {0xe, 0x24f05796}, {0x4, 0x96f}, {0x80000001, 0x401}, {0x40, 0xffffffff}, 0x769a, 0x7f, 0x2, 0x6}}}, 0x130) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0xffffffffffffffda, r4, {0x7, 0x2d, 0x0, 0x10001000, 0x1, 0x8, 0x2, 0x0, 0x0, 0x0, 0x1, 0xd}}, 0x50) (async) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0xffffffffffffffda, r4, {0x7, 0x2d, 0x0, 0x10001000, 0x1, 0x8, 0x2, 0x0, 0x0, 0x0, 0x1, 0xd}}, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) (async) r9 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) r10 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) write(r10, &(0x7f0000000180)="01", 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) read$FUSE(r9, &(0x7f0000001640)={0x2020}, 0x2020) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="4002293dd5000000290a5896dbb083efb930f0187ff0478fa22a61a54607b71ea9ff0100000000000025cde38bf4fd6ef4"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.704857916s ago: executing program 5 (id=1466): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x1, 0x8, 0x4, 0x3, {{0xc, 0x4, 0x1, 0x0, 0x30, 0x65, 0x0, 0xc, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0xd8, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x28}, 0x2}, {@empty, 0x40}, {@empty, 0x9}]}]}}}}}) lstat(&(0x7f0000000380)='./config/../file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2d3e5b10409a8a0}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@getpolicy={0x6c, 0x15, 0x20, 0x70bd26, 0x25dfdbfb, {{@in=@multicast1, @in6=@empty, 0x4e23, 0x7, 0x4e23, 0x2, 0x2, 0x0, 0xc92ab21c30614339, 0x3a, r4, r5}, 0x0, 0x1}, [@encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e23, @in=@multicast1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20048080}, 0x48000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="1403000030000100000100000400000001"], 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r7, 0xffffffffffffffff, 0x200000000000000) r10 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) 5.469355507s ago: executing program 5 (id=1467): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x80, 0x4) write(r0, &(0x7f0000000000)="08001800000020a3", 0x8) recvmmsg(r0, &(0x7f0000002040), 0x0, 0x2, 0x0) 5.303809206s ago: executing program 5 (id=1469): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0000000001", 0x31) 5.185263586s ago: executing program 5 (id=1471): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x2004, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x1ad) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) setresuid(0x0, 0xee00, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) prctl$PR_SET_SECUREBITS(0x1c, 0x28) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@rnullb, &(0x7f0000000140)='./dev/ttyACM0\x00', &(0x7f0000000280)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/ttyACM0\x00', 0x0, 0xfb) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x1000) write$UHID_INPUT(r1, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x2004, 0x0) (async) syz_usb_connect(0x0, 0x55, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x1ad) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x4) (async) setresuid(0x0, 0xee00, 0xee01) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x28) (async) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) (async) mount(&(0x7f0000000300)=@rnullb, &(0x7f0000000140)='./dev/ttyACM0\x00', &(0x7f0000000280)='jffs2\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/ttyACM0\x00', 0x0, 0xfb) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x1000) (async) write$UHID_INPUT(r1, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006) (async) 4.245484206s ago: executing program 3 (id=1474): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/mapper/control\x00', 0x1ff) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x5, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8414}, 0x8000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x1, 0x7, 0x2, 0xe7, 0x9, 0xb7, 0x5, 0x0, 0xad, 0x4, 0x7, 0x9, 0x8}, {0x405e, 0x1, 0x9, 0x6, 0x2, 0x5, 0x0, 0x1, 0xf7, 0xf9, 0x9, 0xfb, 0x800000000003}, {0xfffffffa, 0x5, 0x17, 0x0, 0x2, 0xc, 0x9, 0xe, 0x4, 0x6, 0x2, 0x4, 0x1}], 0x1000}) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f00000004c0)="040000000000b41849027a611a91503d05036317ba00000000000038010000380180000000000044927c1c00000000000000000000000000000000000000006d7061746830") ioctl(r2, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") ioctl(r2, 0xc138fd04, &(0x7f0000000700)="040000000000000000000000380100003801000000f0ff000000000000000000000000000000000000000000000000006d7061746830") r3 = socket$inet_sctp(0x2, 0x1, 0x84) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, 0xfffffffffffffffc) bind$inet(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nr_inodes=Mp']) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x0, @pix_mp={0x8, 0x6, 0x32344d59, 0x6, 0xb, [{0x5, 0x9b1}, {0x6, 0x8}, {0x567, 0x3}, {0x8, 0x9a4d}, {0x7ffffffe, 0x5ad}, {0x7fffffff, 0x4}, {0x7}, {0xffffffed, 0xffffffff}], 0x8, 0x40, 0x7, 0x1}}) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) 4.157038679s ago: executing program 0 (id=1475): semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f0000000a80)=""/32) (fail_nth: 6) 3.795765328s ago: executing program 0 (id=1476): syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') (async) 3.729699733s ago: executing program 3 (id=1477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x20040405) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x195) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) write(r1, &(0x7f0000000000)='3', 0x4e) socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r2, &(0x7f0000000400)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a0705810220000007050202"], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0) write$vhost_msg_v2(r4, &(0x7f0000000240)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3}}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a0104000000000000ca7548c400020900010073797a3000000000140000001100010000000000000000000000000a"], 0x48}}, 0x40000) 3.674720067s ago: executing program 1 (id=1478): unshare(0x4a000200) unshare(0x20000400) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/exec\x00') getdents(r0, &(0x7f0000000000)=""/24, 0x18) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x7fffffff, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) openat$vimc1(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={0x38, r2, 0xe3735b2bc79f78c9, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x38}}, 0x80) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001c00)={0x800, 0x7fffffff, 0x1, {0x9, @pix_mp={0x4, 0x6, 0x31364d4e, 0x3, 0x6, [{0x3, 0x400}, {0x3, 0xb4}, {0x2, 0x8001}, {0x9eb9, 0x80000001}, {0x2, 0x2}, {0x9, 0x10000}, {0x7, 0x6}, {0x2, 0x80000000}], 0x1d, 0xd9, 0x4, 0x2, 0x5}}, 0x10000}) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xffffffff, 0x1e5}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0xa, 0x0, 0x0, 0x0, 0x1, 0x6, {0x622b}}) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGETD(r8, 0x5424, &(0x7f0000000040)) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010027bd7000ffdbdf252e000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x0, 0x0) setregid(0xffffffffffffffff, r12) socket$inet6_icmp(0xa, 0x2, 0x3a) r13 = syz_open_dev$vcsn(&(0x7f00000000c0), 0xff, 0x400) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, r13, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0x146, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x20}}}, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000000)=0x4) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) 3.548708291s ago: executing program 0 (id=1479): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x1000, 0x7, 0x800, 0x8}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0xfffffffa}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r3, 0x0, 0x20}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c800000000020106000000000000000002000000340001801400018008ffffffff00000000000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000160000060003009c4000003400038014000180080001000200ffffffff1c000280050001000000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x4c480) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000200), 0x4) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r7, 0x80845663, &(0x7f00000004c0)) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f00000001c0)=0x20000, 0x4) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f00003b5000/0x2000)=nil, 0x2000, 0x3000009, 0x10, r5, 0x4790c000) write$UHID_INPUT(r9, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x80, 0x6, 0x4, @local, @empty, 0x7, 0x700, 0x6, 0x6}}) syz_usb_connect(0x0, 0x58, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000359d7ad206c10451a66560102030109024600010888a0080904720500fff1ff0705240600010524007d030d240f0101000000060002000906241a000108052406000005240003000d240f01030000000180060007153f20808358a9a05dd7b2c70eb8de5833123bdc846ab09dca8438442e0bd6a92c417cc9cf41705dd36c3e89d3b3593c997dae53b67fe970d7f1fdd26640dc4649944af4eb542790a9a15bcc87fe730b104b00b9ab5f5633ba87c3d0"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 2.904310039s ago: executing program 1 (id=1480): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0000000001", 0x31) 2.877521547s ago: executing program 0 (id=1481): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000020cd0cb1004000010203010902690003706e0109900d080b0002010c2008090400000001012000092401ffff040900ff09040100000102200009040101010102200009050109000200220808250100030807000904020000010220000904020101010220000905820910000908a008"], 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a00000000000000000000000000000000000000000008000000000000000000080012000200"], 0xa6}}, 0x40) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000001100)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000001ec0)="66d69c4d8da22a05fd81768efa50b5a4", 0x20) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\r\a'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000240)=""/186) r5 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SET_VMA(0x3c, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r6 = syz_clone(0x200, &(0x7f00000000c0)="27d9047f8ddba2562f4714e9440f111204a509e7b1112c4c7f86350bf3475fe51d24885cc3f607213245c45ea2847fdc855d67ae9ea6bee82d6de6dd3ce3856db28692a37390d05fd9d40cf03e704a7c248da1dd03bd44c3ab08a413cc38e0fd08c12bb5be65a1b0a31a85fd024d7889e9c860f5fce3942de123c462b043ba78117382d2d3b5b09284a27a4a74acf8d8d67f23ca53b4b01b58d9059196d78dfc87517c", 0xa3, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="aa159cbe07f03dcb8249c312d7ce0da83a0efe9b89f85f70f7fd2107e7") capset(&(0x7f0000000040)={0x19980330, r6}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) setns(0xc9, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x10f) r8 = socket$inet(0x2, 0x2, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r9, 0x65, 0x7, 0x0, &(0x7f00000000c0)=0x37) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) write$tun(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b007e0b"], 0x97) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x2a}, 0x800, 0x0, 0xff, 0x1, 0x20d}, 0x20) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.757587439s ago: executing program 1 (id=1482): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/kernel\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/security\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/security\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys/kernel/security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/kernel/security/apparmor/.replace\x00', 0x109000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) futex(0x0, 0x85, 0x2, 0x0, &(0x7f0000000080), 0x15000000) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @remote, 0x80006}, 0x7e) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @remote, 0x80006}, 0x7e) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) (async) listen(r1, 0x0) socket$netlink(0x10, 0x3, 0x4) (async) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000004000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a060008008ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) write(r0, &(0x7f0000000200)="04080076657273696f6e00020500000004080070726f66696c650005", 0x1c) 2.57293691s ago: executing program 1 (id=1483): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c1042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip_vs\x00') preadv(r2, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/252, 0xfc}], 0x1, 0x80, 0x7ffffffe) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000180)={[0x5, 0x4, 0x401, 0x4, 0x7f, 0x1ff, 0x5, 0x6, 0x1ff, 0xf8, 0x0, 0x81, 0x6, 0x7, 0x6, 0x3], 0xd000, 0x20000}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000005c0)={"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"}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000080)=0x114c, 0x4) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402312073f00000000000109022400010000a00009040000020300020009210000000122370009058103"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.271627872s ago: executing program 3 (id=1484): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c1042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip_vs\x00') preadv(r2, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/252, 0xfc}], 0x1, 0x80, 0x7ffffffe) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000180)={[0x5, 0x4, 0x401, 0x4, 0x7f, 0x1ff, 0x5, 0x6, 0x1ff, 0xf8, 0x0, 0x81, 0x6, 0x7, 0x6, 0x3], 0xd000, 0x20000}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000005c0)={"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"}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000080)=0x114c, 0x4) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402312073f00000000000109022400010000a00009040000020300020009210000000122370009058103"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 1) 1.931873693s ago: executing program 5 (id=1485): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/mapper/control\x00', 0x1ff) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x5, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8414}, 0x8000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x1, 0x7, 0x2, 0xe7, 0x9, 0xb7, 0x5, 0x0, 0xad, 0x4, 0x7, 0x9, 0x8}, {0x405e, 0x1, 0x9, 0x6, 0x2, 0x5, 0x0, 0x1, 0xf7, 0xf9, 0x9, 0xfb, 0x800000000003}, {0xfffffffa, 0x5, 0x17, 0x0, 0x2, 0xc, 0x9, 0xe, 0x4, 0x6, 0x2, 0x4, 0x1}], 0x1000}) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f00000004c0)="040000000000b41849027a611a91503d05036317ba00000000000038010000380180000000000044927c1c00000000000000000000000000000000000000006d7061746830") ioctl(r2, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") ioctl(r2, 0xc138fd04, &(0x7f0000000700)="040000000000000000000000380100003801000000f0ff000000000000000000000000000000000000000000000000006d7061746830") r3 = socket$inet_sctp(0x2, 0x1, 0x84) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, 0xfffffffffffffffc) bind$inet(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nr_inodes=Mp']) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x0, @pix_mp={0x8, 0x6, 0x32344d59, 0x6, 0xb, [{0x5, 0x9b1}, {0x6, 0x8}, {0x567, 0x3}, {0x8, 0x9a4d}, {0x7ffffffe, 0x5ad}, {0x7fffffff, 0x4}, {0x7}, {0xffffffed, 0xffffffff}], 0x8, 0x40, 0x7, 0x1}}) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) 1.769699751s ago: executing program 0 (id=1486): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x4, 0x0, 0x0, 0x0, 0x20}, {0x7, 0x0, 0x0, 0xfffeffff, 0x0, 0x9}]}) 1.615521882s ago: executing program 5 (id=1487): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c1042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip_vs\x00') preadv(r2, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/252, 0xfc}], 0x1, 0x80, 0x7ffffffe) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005600)={0x1, &(0x7f00000055c0)=[{0x6, 0x2, 0x5, 0x5}]}) open(0x0, 0x84242, 0x1df2a23c5997fad6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000100)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000180)={[0x5, 0x4, 0x401, 0x4, 0x7f, 0x1ff, 0x5, 0x6, 0x1ff, 0xf8, 0x0, 0x81, 0x6, 0x7, 0x6, 0x3], 0xd000, 0x20000}) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000005c0)={"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"}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r7, &(0x7f0000000500)='blacklist\x00', &(0x7f0000000540)='pimreg0\x00') setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f0000000080)=0x114c, 0x4) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402312073f00000000000109022400010000a00009040000020300020009210000000122370009058103"], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.48141815s ago: executing program 0 (id=1488): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000140190933334000000000010902"], 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r2 = semget$private(0x0, 0x6, 0x0) semctl$SETVAL(r2, 0x0, 0x10, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {0x2, 0x1}, 0x7, 0x4, &(0x7f0000000380)="ffe80a7c2a662525ca50ea75f6ed053e70cdbedc3e3036f404f101e317c81d3ca14bc61a35126ecc262e8a37f8ce64cf3884a685e6d763292b37fc3ead925033dbf37e91e449f191dbeb", 0x4a, 0x12a, 0x6, 0x4, 0x800, 0xdd1f, &(0x7f0000000500)="cfcc511d5743102888579534c2d574cff5be24ce5d670f3989dfbbea17769fcbf6e5cf74c4430fd70a5350bafee277ee947ca28323c90a913a8827d22e2b7c96d112fbc90621d72f1def0f9de7ddb9be00d04320add858eebd158470950d1cf55b41ffe01084621cc037c1df81134e66d4eaaf032926c558ff0c445f6d"}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20048000, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0xafa, 0x5, 0x1006, 0xc, 0x8, 0x8000, 0xffffffffffffffff], 0x1000, 0xc2302}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x20005, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockname$packet(r5, 0x0, &(0x7f0000000080)) syz_usb_disconnect(r0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xf) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224000100007f0009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000300)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="400a20000000200d1d"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000001200)={0x38, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f0000000a80)=""/32) 821.985767ms ago: executing program 1 (id=1489): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x1000, 0x7, 0x800, 0x8}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0xfffffffa}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r3, 0x0, 0x20}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c800000000020106000000000000000002000000340001801400018008ffffffff00000000000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000160000060003009c4000003400038014000180080001000200ffffffff1c000280050001000000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x4c480) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x4, 0xffff, 0x69dc, 0x840, 0x71, 0x8, 0x101}, 0x1c) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r7, 0x80845663, &(0x7f00000004c0)) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f00000001c0)=0x20000, 0x4) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f00003b5000/0x2000)=nil, 0x2000, 0x3000009, 0x10, r5, 0x4790c000) write$UHID_INPUT(r9, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x80, 0x6, 0x4, @local, @empty, 0x7, 0x700, 0x6, 0x6}}) syz_usb_connect(0x0, 0x58, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000359d7ad206c10451a66560102030109024600010888a0080904720500fff1ff0705240600010524007d030d240f0101000000060002000906241a000108052406000005240003000d240f01030000000180060007153f20808358a9a05dd7b2c70eb8de5833123bdc846ab09dca8438442e0bd6a92c417cc9cf41705dd36c3e89d3b3593c997dae53b67fe970d7f1fdd26640dc4649944af4eb542790a9a15bcc87fe730b104b00b9ab5f5633ba87c3d0"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 276.890476ms ago: executing program 3 (id=1490): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0000000001", 0x31) 163.868916ms ago: executing program 3 (id=1491): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001c00"], 0x14}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x6c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0xac}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x6c}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x40, r2, 0x1, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}]}, 0x40}}, 0x0) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x1, 0x200, 0x34565559, 0x5, 0x4, 0x5, 0x5, 0x9, 0x0, 0x6, 0x0, 0x5}}) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x20, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0xff7f, 0x5, 0x9, 0x7, 0x5]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x8001, 0x7303, 0xd, 0x1]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x8a) write(r5, &(0x7f0000000000)='3', 0x4e) socket$inet(0x2, 0x4000000000000001, 0x0) (async) fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) io_setup(0x1, &(0x7f0000000040)) 0s ago: executing program 3 (id=1492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x20040405) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x195) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) write(r1, &(0x7f0000000000)='3', 0x4e) socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r2, &(0x7f0000000400)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a0705810220000007050202"], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0) write$vhost_msg_v2(r4, &(0x7f0000000240)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3}}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a0104000000000000ca7548c400020900010073797a3000000000140000001100010000000000000000000000000a"], 0x48}}, 0x40000) kernel console output (not intermixed with test programs): dummy_hcd [ 354.001556][ T9] usb 6-1: device descriptor read/8, error -71 [ 354.033726][T10932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.034180][T10932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.071591][T10932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.072200][T10932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.098399][T10932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.105696][T10932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.120229][T10932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.132277][T10932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.173902][T10934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1246'. [ 354.173948][T10934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1246'. [ 354.173967][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1246'. [ 354.251060][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 354.271492][ T9] usb 6-1: device descriptor read/8, error -71 [ 354.381743][ T9] usb usb6-port1: unable to enumerate USB device [ 354.431003][ T5678] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 354.550901][ T5689] usb 2-1: new low-speed USB device number 95 using dummy_hcd [ 354.568480][ T5678] usb 4-1: device descriptor read/64, error -71 [ 354.701902][ T5689] usb 2-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 354.703062][ T5689] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 354.703091][ T5689] usb 2-1: config 0 has no interface number 0 [ 354.703141][ T5689] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 354.703166][ T5689] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 354.703193][ T5689] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 354.703219][ T5689] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 354.703246][ T5689] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 354.703282][ T5689] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 354.703327][ T5689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.705972][ T5689] usb 2-1: config 0 descriptor?? [ 354.707079][T10936] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 354.707222][T10936] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 354.781816][ T5689] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 354.832327][ T5678] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 354.943396][T10941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.946858][T10941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.976115][ T5696] usb 2-1: USB disconnect, device number 95 [ 354.990976][ T5678] usb 4-1: device descriptor read/64, error -71 [ 354.992887][ T5696] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 355.101479][ T5678] usb usb4-port1: attempt power cycle [ 355.158262][T10941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.159958][T10941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.460925][ T5678] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 355.482587][ T5678] usb 4-1: device descriptor read/8, error -71 [ 355.720883][ T5678] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 355.729716][T10968] FAULT_INJECTION: forcing a failure. [ 355.729716][T10968] name failslab, interval 1, probability 0, space 0, times 0 [ 355.729753][T10968] CPU: 0 UID: 0 PID: 10968 Comm: syz.5.1251 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.729783][T10968] Tainted: [L]=SOFTLOCKUP [ 355.729793][T10968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.729808][T10968] Call Trace: [ 355.729817][T10968] [ 355.729828][T10968] dump_stack_lvl+0xe8/0x150 [ 355.729863][T10968] should_fail_ex+0x3eb/0x540 [ 355.729903][T10968] should_failslab+0xa8/0x100 [ 355.729935][T10968] __kvmalloc_node_noprof+0x171/0x820 [ 355.729961][T10968] ? lock_acquire+0x115/0x350 [ 355.729989][T10968] ? alloc_netdev_mqs+0xa9/0x12a0 [ 355.730014][T10968] ? alloc_netdev_mqs+0xa9/0x12a0 [ 355.730046][T10968] alloc_netdev_mqs+0xa9/0x12a0 [ 355.730072][T10968] ? __pfx_vti6_dev_setup+0x10/0x10 [ 355.730105][T10968] vti6_locate+0x5d4/0x780 [ 355.730143][T10968] ? __pfx_vti6_locate+0x10/0x10 [ 355.730181][T10968] ? __might_fault+0xaf/0x130 [ 355.730213][T10968] ? vti6_siocdevprivate+0x560/0x820 [ 355.730248][T10968] vti6_siocdevprivate+0x6ac/0x820 [ 355.730281][T10968] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 355.730333][T10968] ? __pfx___mutex_lock+0x10/0x10 [ 355.730354][T10968] ? full_name_hash+0xb0/0xe0 [ 355.730384][T10968] dev_ifsioc+0xb56/0x1360 [ 355.730424][T10968] dev_ioctl+0x84c/0x1150 [ 355.730460][T10968] sock_ioctl+0x753/0x7e0 [ 355.730488][T10968] ? __pfx_sock_ioctl+0x10/0x10 [ 355.730515][T10968] ? __fget_files+0x2a/0x420 [ 355.730543][T10968] ? bpf_lsm_file_ioctl+0x9/0x20 [ 355.730569][T10968] ? __pfx_sock_ioctl+0x10/0x10 [ 355.730590][T10968] __se_sys_ioctl+0xfc/0x170 [ 355.730619][T10968] do_syscall_64+0x166/0x520 [ 355.730643][T10968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.730667][T10968] ? clear_bhb_loop+0x70/0xc0 [ 355.730693][T10968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.730716][T10968] RIP: 0033:0x7f2f92b9e159 [ 355.730737][T10968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.730757][T10968] RSP: 002b:00007f2f93b50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.730781][T10968] RAX: ffffffffffffffda RBX: 00007f2f92e25fa0 RCX: 00007f2f92b9e159 [ 355.730798][T10968] RDX: 0000200000000340 RSI: 00000000000089f1 RDI: 0000000000000003 [ 355.730813][T10968] RBP: 00007f2f93b50090 R08: 0000000000000000 R09: 0000000000000000 [ 355.730827][T10968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.730840][T10968] R13: 00007f2f92e26038 R14: 00007f2f92e25fa0 R15: 00007fffcdc13e68 [ 355.730876][T10968] [ 355.763643][ T5678] usb 4-1: device descriptor read/8, error -71 [ 355.872131][ T5678] usb usb4-port1: unable to enumerate USB device [ 355.929357][T10966] tmpfs: Bad value for 'nr_inodes' [ 356.094730][T10971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.095235][T10971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.547861][T10986] fuse: fd is not a fuse device [ 356.660941][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 356.776016][T10991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.776482][T10991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.811627][ T10] usb 6-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 356.813346][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.813384][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 356.813400][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 356.813418][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 356.813449][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.229198][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1255'. [ 357.247620][T10983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.250082][T10983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.268071][ T10] gud 6-1:1.0: No supported pixel formats found [ 357.268106][ T10] gud 6-1:1.0: probe with driver gud failed with error -22 [ 357.465860][ T10] usb 6-1: USB disconnect, device number 19 [ 357.561025][ T5689] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 357.690907][ T5689] usb 4-1: device descriptor read/64, error -71 [ 357.809687][T11000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.810524][T11000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.930933][ T5689] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 358.019576][T11000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.022579][T11000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.060950][ T5689] usb 4-1: device descriptor read/64, error -71 [ 358.115779][T11009] tmpfs: Bad value for 'nr_inodes' [ 358.172894][ T5689] usb usb4-port1: attempt power cycle [ 358.348211][T11016] FAULT_INJECTION: forcing a failure. [ 358.348211][T11016] name failslab, interval 1, probability 0, space 0, times 0 [ 358.348247][T11016] CPU: 1 UID: 0 PID: 11016 Comm: syz.5.1263 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.348279][T11016] Tainted: [L]=SOFTLOCKUP [ 358.348288][T11016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.348302][T11016] Call Trace: [ 358.348312][T11016] [ 358.348323][T11016] dump_stack_lvl+0xe8/0x150 [ 358.348362][T11016] should_fail_ex+0x3eb/0x540 [ 358.348404][T11016] should_failslab+0xa8/0x100 [ 358.348436][T11016] __kmalloc_noprof+0xf9/0x710 [ 358.348458][T11016] ? rcu_is_watching+0x16/0xb0 [ 358.348489][T11016] ? tomoyo_realpath_from_path+0xef/0x640 [ 358.348511][T11016] ? tomoyo_realpath_from_path+0xef/0x640 [ 358.348541][T11016] tomoyo_realpath_from_path+0xef/0x640 [ 358.348575][T11016] ? tomoyo_path_number_perm+0x219/0x5f0 [ 358.348606][T11016] tomoyo_path_number_perm+0x246/0x5f0 [ 358.348640][T11016] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 358.348669][T11016] ? __lock_acquire+0x747/0x2de0 [ 358.348735][T11016] ? __fget_files+0x2a/0x420 [ 358.348762][T11016] ? __fget_files+0x2a/0x420 [ 358.348785][T11016] ? __fget_files+0x2a/0x420 [ 358.348813][T11016] security_file_ioctl+0xc3/0x2a0 [ 358.348845][T11016] __se_sys_ioctl+0x47/0x170 [ 358.348878][T11016] do_syscall_64+0x166/0x520 [ 358.348900][T11016] ? trace_irq_disable+0x3b/0x140 [ 358.348934][T11016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.348959][T11016] ? clear_bhb_loop+0x70/0xc0 [ 358.348987][T11016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.349010][T11016] RIP: 0033:0x7f2f92b9e159 [ 358.349030][T11016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.349050][T11016] RSP: 002b:00007f2f93b50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.349074][T11016] RAX: ffffffffffffffda RBX: 00007f2f92e25fa0 RCX: 00007f2f92b9e159 [ 358.349092][T11016] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 358.349107][T11016] RBP: 00007f2f93b50090 R08: 0000000000000000 R09: 0000000000000000 [ 358.349122][T11016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.349136][T11016] R13: 00007f2f92e26038 R14: 00007f2f92e25fa0 R15: 00007fffcdc13e68 [ 358.349173][T11016] [ 358.350211][T11016] ERROR: Out of memory at tomoyo_realpath_from_path. [ 358.547895][ T5689] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 358.581055][ T5689] usb 4-1: device descriptor read/8, error -71 [ 358.727593][T11024] FAULT_INJECTION: forcing a failure. [ 358.727593][T11024] name failslab, interval 1, probability 0, space 0, times 0 [ 358.727630][T11024] CPU: 1 UID: 0 PID: 11024 Comm: syz.0.1265 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.727662][T11024] Tainted: [L]=SOFTLOCKUP [ 358.727671][T11024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.727686][T11024] Call Trace: [ 358.727695][T11024] [ 358.727705][T11024] dump_stack_lvl+0xe8/0x150 [ 358.727740][T11024] should_fail_ex+0x3eb/0x540 [ 358.727781][T11024] should_failslab+0xa8/0x100 [ 358.727812][T11024] ? skb_clone+0x212/0x3a0 [ 358.727835][T11024] kmem_cache_alloc_noprof+0x9c/0x600 [ 358.727874][T11024] ? skb_clone+0x212/0x3a0 [ 358.727903][T11024] skb_clone+0x212/0x3a0 [ 358.727929][T11024] __netlink_deliver_tap+0x355/0x6e0 [ 358.727966][T11024] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.727993][T11024] netlink_deliver_tap+0x19c/0x1b0 [ 358.728020][T11024] netlink_unicast+0x781/0x940 [ 358.728055][T11024] netlink_sendmsg+0x7c3/0xae0 [ 358.728088][T11024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.728124][T11024] ? apparmor_socket_sendmsg+0x98/0x360 [ 358.728158][T11024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.728183][T11024] sock_sendmsg_nosec+0x13a/0x180 [ 358.728212][T11024] ____sys_sendmsg+0x54e/0x850 [ 358.728253][T11024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.728297][T11024] ? import_iovec+0x73/0xa0 [ 358.728327][T11024] ___sys_sendmsg+0x2a5/0x360 [ 358.728359][T11024] ? __lock_acquire+0x747/0x2de0 [ 358.728402][T11024] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.728475][T11024] ? __fget_files+0x3a2/0x420 [ 358.728497][T11024] ? __fget_files+0x2a/0x420 [ 358.728531][T11024] __x64_sys_sendmsg+0x1b1/0x290 [ 358.728568][T11024] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.728627][T11024] do_syscall_64+0x166/0x520 [ 358.728649][T11024] ? trace_irq_disable+0x3b/0x140 [ 358.728677][T11024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.728701][T11024] ? clear_bhb_loop+0x70/0xc0 [ 358.728729][T11024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.728753][T11024] RIP: 0033:0x7f927919e159 [ 358.728774][T11024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.728794][T11024] RSP: 002b:00007f927a0ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.728819][T11024] RAX: ffffffffffffffda RBX: 00007f9279425fa0 RCX: 00007f927919e159 [ 358.728836][T11024] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 358.728851][T11024] RBP: 00007f927a0ee090 R08: 0000000000000000 R09: 0000000000000000 [ 358.728866][T11024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.728889][T11024] R13: 00007f9279426038 R14: 00007f9279425fa0 R15: 00007fffe2ffe098 [ 358.728930][T11024] [ 358.863492][ T5689] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 358.904272][ T5689] usb 4-1: device descriptor read/8, error -71 [ 359.029071][ T5689] usb usb4-port1: unable to enumerate USB device [ 359.318417][T11037] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1266'. [ 359.318464][T11037] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1266'. [ 359.318482][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1266'. [ 359.605484][ T5689] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 359.627203][T11048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.730894][ T5689] usb 6-1: device descriptor read/64, error -71 [ 359.980911][ T5689] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 360.110857][ T5689] usb 6-1: device descriptor read/64, error -71 [ 360.221959][ T5689] usb usb6-port1: attempt power cycle [ 360.560879][ T5689] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 360.581794][ T5689] usb 6-1: device descriptor read/8, error -71 [ 360.761755][T11056] tmpfs: Bad value for 'nr_inodes' [ 360.820908][ T5689] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 360.841714][ T5689] usb 6-1: device descriptor read/8, error -71 [ 360.884288][T11058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 360.903671][T11058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.904231][T11058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.951243][ T5689] usb usb6-port1: unable to enumerate USB device [ 361.312572][T11063] FAULT_INJECTION: forcing a failure. [ 361.312572][T11063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.312611][T11063] CPU: 0 UID: 0 PID: 11063 Comm: syz.1.1274 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.312633][T11063] Tainted: [L]=SOFTLOCKUP [ 361.312640][T11063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 361.312656][T11063] Call Trace: [ 361.312668][T11063] [ 361.312675][T11063] dump_stack_lvl+0xe8/0x150 [ 361.312701][T11063] should_fail_ex+0x3eb/0x540 [ 361.312730][T11063] _copy_from_iter+0x1d3/0x1660 [ 361.312762][T11063] ? __lock_acquire+0x747/0x2de0 [ 361.312781][T11063] ? __pfx__copy_from_iter+0x10/0x10 [ 361.312818][T11063] tun_get_user+0x26b/0x44d0 [ 361.312853][T11063] ? aa_file_perm+0x18b/0x15f0 [ 361.312872][T11063] ? aa_file_perm+0x4ed/0x15f0 [ 361.312887][T11063] ? __pfx_tun_get_user+0x10/0x10 [ 361.312913][T11063] ? __lock_acquire+0x747/0x2de0 [ 361.312932][T11063] ? kstrtoull+0x137/0x1d0 [ 361.312959][T11063] ? ref_tracker_alloc+0x341/0x4b0 [ 361.312975][T11063] ? lock_acquire+0x115/0x350 [ 361.312993][T11063] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 361.313011][T11063] ? lock_acquire+0x115/0x350 [ 361.313028][T11063] ? tun_get+0x1c/0x2f0 [ 361.313055][T11063] ? tun_get+0x1c/0x2f0 [ 361.313077][T11063] ? tun_get+0x1c/0x2f0 [ 361.313103][T11063] tun_chr_write_iter+0x113/0x200 [ 361.313128][T11063] vfs_write+0x612/0xba0 [ 361.313161][T11063] ? __pfx_vfs_write+0x10/0x10 [ 361.313181][T11063] ? __fget_files+0x3a2/0x420 [ 361.313197][T11063] ? __fget_files+0x2a/0x420 [ 361.313216][T11063] ? fdget+0x1ac/0x250 [ 361.313236][T11063] ksys_write+0x150/0x270 [ 361.313256][T11063] ? __pfx_ksys_write+0x10/0x10 [ 361.313281][T11063] do_syscall_64+0x166/0x520 [ 361.313297][T11063] ? trace_irq_disable+0x3b/0x140 [ 361.313316][T11063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.313332][T11063] ? clear_bhb_loop+0x70/0xc0 [ 361.313352][T11063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.313368][T11063] RIP: 0033:0x7f6d4399e159 [ 361.313383][T11063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.313397][T11063] RSP: 002b:00007f6d447f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 361.313415][T11063] RAX: ffffffffffffffda RBX: 00007f6d43c25fa0 RCX: 00007f6d4399e159 [ 361.313427][T11063] RDX: 0000000000000032 RSI: 0000200000000480 RDI: 0000000000000003 [ 361.313437][T11063] RBP: 00007f6d447f3090 R08: 0000000000000000 R09: 0000000000000000 [ 361.313447][T11063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.313457][T11063] R13: 00007f6d43c26038 R14: 00007f6d43c25fa0 R15: 00007fffa43e2e78 [ 361.313481][T11063] [ 362.285683][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1279'. [ 362.327491][T11080] tmpfs: Bad value for 'nr_inodes' [ 362.403521][ T5689] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 362.434454][T11082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.437005][T11082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.495985][T11084] FAULT_INJECTION: forcing a failure. [ 362.495985][T11084] name failslab, interval 1, probability 0, space 0, times 0 [ 362.496023][T11084] CPU: 0 UID: 0 PID: 11084 Comm: syz.5.1282 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.496054][T11084] Tainted: [L]=SOFTLOCKUP [ 362.496063][T11084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.496077][T11084] Call Trace: [ 362.496086][T11084] [ 362.496096][T11084] dump_stack_lvl+0xe8/0x150 [ 362.496129][T11084] should_fail_ex+0x3eb/0x540 [ 362.496167][T11084] ? __alloc_skb+0x1db/0x7a0 [ 362.496196][T11084] should_failslab+0xa8/0x100 [ 362.496226][T11084] ? __alloc_skb+0x1db/0x7a0 [ 362.496252][T11084] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 362.496274][T11084] ? __alloc_skb+0x18d/0x7a0 [ 362.496303][T11084] ? __alloc_skb+0x1db/0x7a0 [ 362.496338][T11084] __alloc_skb+0x1db/0x7a0 [ 362.496372][T11084] alloc_skb_with_frags+0xc6/0x760 [ 362.496413][T11084] ? __lock_acquire+0x747/0x2de0 [ 362.496449][T11084] sock_alloc_send_pskb+0x95e/0xa70 [ 362.496490][T11084] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 362.496516][T11084] ? __lock_acquire+0x747/0x2de0 [ 362.496547][T11084] ? ip6_dst_lookup_tail+0x11be/0x1610 [ 362.496584][T11084] rawv6_send_hdrinc+0x268/0x1950 [ 362.496623][T11084] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 362.496650][T11084] ? ip6_dst_hoplimit+0x65/0x3e0 [ 362.496679][T11084] ? ip6_dst_hoplimit+0x65/0x3e0 [ 362.496714][T11084] rawv6_sendmsg+0x12fb/0x18c0 [ 362.496761][T11084] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 362.496814][T11084] ? __pfx___up_read+0x10/0x10 [ 362.496861][T11084] ? aa_sock_msg_perm+0xf5/0x210 [ 362.496894][T11084] ? sock_rps_record_flow+0x19/0x350 [ 362.496925][T11084] ? inet_sendmsg+0x298/0x320 [ 362.496949][T11084] ? apparmor_socket_sendmsg+0x98/0x360 [ 362.496982][T11084] ? __pfx_inet_sendmsg+0x10/0x10 [ 362.497008][T11084] sock_sendmsg_nosec+0x10e/0x180 [ 362.497038][T11084] ____sys_sendmsg+0x54e/0x850 [ 362.497079][T11084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.497121][T11084] ? import_iovec+0x73/0xa0 [ 362.497151][T11084] ___sys_sendmsg+0x2a5/0x360 [ 362.497183][T11084] ? __lock_acquire+0x747/0x2de0 [ 362.497213][T11084] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.497251][T11084] ? kstrtouint+0x6e/0xe0 [ 362.497310][T11084] ? __fget_files+0x3a2/0x420 [ 362.497332][T11084] ? __fget_files+0x2a/0x420 [ 362.497364][T11084] __sys_sendmmsg+0x273/0x4d0 [ 362.497411][T11084] ? __pfx___sys_sendmmsg+0x10/0x10 [ 362.497456][T11084] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 362.497494][T11084] ? ksys_write+0x242/0x270 [ 362.497522][T11084] ? __pfx_ksys_write+0x10/0x10 [ 362.497554][T11084] __x64_sys_sendmmsg+0xa0/0xc0 [ 362.497590][T11084] do_syscall_64+0x166/0x520 [ 362.497612][T11084] ? trace_irq_disable+0x3b/0x140 [ 362.497639][T11084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.497661][T11084] ? clear_bhb_loop+0x70/0xc0 [ 362.497689][T11084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.497712][T11084] RIP: 0033:0x7f2f92b9e159 [ 362.497734][T11084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.497753][T11084] RSP: 002b:00007f2f93b50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 362.497778][T11084] RAX: ffffffffffffffda RBX: 00007f2f92e25fa0 RCX: 00007f2f92b9e159 [ 362.497795][T11084] RDX: 0000000000000001 RSI: 0000200000006a00 RDI: 0000000000000003 [ 362.497810][T11084] RBP: 00007f2f93b50090 R08: 0000000000000000 R09: 0000000000000000 [ 362.497825][T11084] R10: 00000000040408c0 R11: 0000000000000246 R12: 0000000000000001 [ 362.497840][T11084] R13: 00007f2f92e26038 R14: 00007f2f92e25fa0 R15: 00007fffcdc13e68 [ 362.497875][T11084] [ 362.573493][ T5689] usb 4-1: Using ep0 maxpacket: 8 [ 362.585374][ T5689] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 362.660708][ T5689] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 362.660899][ T5689] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 362.660960][ T5689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.665347][T11082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.676578][T11082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.990584][T11091] overlayfs: failed to resolve '/G+5wd [ 366.243536][T11155] dump_stack_lvl+0xe8/0x150 [ 366.243570][T11155] should_fail_ex+0x3eb/0x540 [ 366.243608][T11155] ? __alloc_skb+0x1db/0x7a0 [ 366.243638][T11155] should_failslab+0xa8/0x100 [ 366.243668][T11155] ? __alloc_skb+0x1db/0x7a0 [ 366.243696][T11155] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 366.243719][T11155] ? __alloc_skb+0x18d/0x7a0 [ 366.243749][T11155] ? __alloc_skb+0x1db/0x7a0 [ 366.243786][T11155] __alloc_skb+0x1db/0x7a0 [ 366.243820][T11155] hci_mgmt_cmd+0x1c1/0xfc0 [ 366.243847][T11155] ? hci_sock_create+0x130/0x1c0 [ 366.243881][T11155] hci_sock_sendmsg+0x6e8/0xfd0 [ 366.243915][T11155] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 366.243945][T11155] ? apparmor_socket_sendmsg+0x98/0x360 [ 366.243978][T11155] ? lock_acquire+0x115/0x350 [ 366.244005][T11155] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 366.244029][T11155] sock_sendmsg_nosec+0x13a/0x180 [ 366.244060][T11155] sock_write_iter+0x2de/0x3e0 [ 366.244086][T11155] ? __pfx_sock_write_iter+0x10/0x10 [ 366.244118][T11155] ? bpf_lsm_file_permission+0x9/0x20 [ 366.244145][T11155] ? security_file_permission+0x75/0x260 [ 366.244191][T11155] vfs_write+0x612/0xba0 [ 366.244225][T11155] ? __pfx_vfs_write+0x10/0x10 [ 366.244253][T11155] ? __fget_files+0x3a2/0x420 [ 366.244275][T11155] ? __fget_files+0x2a/0x420 [ 366.244300][T11155] ? fdget+0x1ac/0x250 [ 366.244332][T11155] ksys_write+0x150/0x270 [ 366.244359][T11155] ? __pfx_ksys_write+0x10/0x10 [ 366.244396][T11155] do_syscall_64+0x166/0x520 [ 366.244417][T11155] ? trace_irq_disable+0x3b/0x140 [ 366.244442][T11155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.244467][T11155] ? clear_bhb_loop+0x70/0xc0 [ 366.244495][T11155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.244518][T11155] RIP: 0033:0x7f927919e159 [ 366.244540][T11155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.244559][T11155] RSP: 002b:00007f927a0ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 366.244582][T11155] RAX: ffffffffffffffda RBX: 00007f9279425fa0 RCX: 00007f927919e159 [ 366.244599][T11155] RDX: 0000000000000006 RSI: 0000200000000300 RDI: 0000000000000004 [ 366.244612][T11155] RBP: 00007f927a0ee090 R08: 0000000000000000 R09: 0000000000000000 [ 366.244627][T11155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.244640][T11155] R13: 00007f9279426038 R14: 00007f9279425fa0 R15: 00007fffe2ffe098 [ 366.244676][T11155] [ 366.293771][ T5719] usb 4-1: device descriptor read/64, error -71 [ 366.546168][ T1725] block nbd2: Possible stuck request ffff888027ea0000: control (read@0,4096B). Runtime 120 seconds [ 366.563150][T11149] lo speed is unknown, defaulting to 1000 [ 366.571667][ T5719] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 366.707861][ T5719] usb 4-1: device descriptor read/64, error -71 [ 366.822077][ T5719] usb usb4-port1: attempt power cycle [ 367.101068][ T10] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 367.160867][ T5719] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 367.181713][ T5719] usb 4-1: device descriptor read/8, error -71 [ 367.251036][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 367.251786][ T10] usb 2-1: New USB device found: idVendor=1e7d, idProduct=2d5a, bcdDevice=0.00 [ 367.252820][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.252858][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.252889][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.258998][ T10] usb 2-1: config 0 descriptor?? [ 367.461418][ T5719] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 367.482847][ T5719] usb 4-1: device descriptor read/8, error -71 [ 367.591168][ T5719] usb usb4-port1: unable to enumerate USB device [ 367.627762][T11180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.628211][T11180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.842406][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 367.842520][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 367.845393][ T10] usb 2-1: USB disconnect, device number 100 [ 368.000630][T11189] tmpfs: Bad value for 'nr_inodes' [ 368.371204][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 368.430534][T11202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.434268][T11202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.520897][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 368.521726][ T10] usb 6-1: New USB device found: idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 368.527238][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.527268][ T10] usb 6-1: Product: syz [ 368.527286][ T10] usb 6-1: Manufacturer: syz [ 368.527303][ T10] usb 6-1: SerialNumber: syz [ 368.544592][ T10] usb 6-1: config 0 descriptor?? [ 368.588028][T11208] netlink: 'syz.1.1309': attribute type 11 has an invalid length. [ 368.684657][T11210] tmpfs: Bad value for 'nr_inodes' [ 368.840894][ T5719] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 368.854736][ T10] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 368.857985][ T10] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71 [ 368.881516][ T10] usb 6-1: USB disconnect, device number 24 [ 368.991617][ T5719] usb 2-1: New USB device found: idVendor=1b96, idProduct=0011, bcdDevice=0.00 [ 368.992645][ T5719] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.992679][ T5719] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.992704][ T5719] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.992733][ T5719] usb 2-1: config 0 interface 0 has no altsetting 0 [ 368.992769][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.995816][ T5719] usb 2-1: config 0 descriptor?? [ 369.071648][ T5611] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 369.089350][T11217] netlink: 892 bytes leftover after parsing attributes in process `syz.0.1312'. [ 369.144941][T11218] netlink: 892 bytes leftover after parsing attributes in process `syz.0.1312'. [ 369.147546][T11218] comedi: valid board names for 8255 driver are: [ 369.147564][T11218] 8255 [ 369.147577][T11218] comedi: valid board names for vmk80xx driver are: [ 369.147585][T11218] vmk80xx [ 369.147591][T11218] comedi: valid board names for usbduxsigma driver are: [ 369.147599][T11218] usbduxsigma [ 369.147605][T11218] comedi: valid board names for usbduxfast driver are: [ 369.147625][T11218] usbduxfast [ 369.147650][T11218] comedi: valid board names for usbdux driver are: [ 369.147661][T11218] usbdux [ 369.147670][T11218] comedi: valid board names for ni6501 driver are: [ 369.147680][T11218] ni6501 [ 369.147688][T11218] comedi: valid board names for dt9812 driver are: [ 369.147698][T11218] dt9812 [ 369.147706][T11218] comedi: valid board names for ni_labpc_cs driver are: [ 369.147716][T11218] ni_labpc_cs [ 369.147724][T11218] comedi: valid board names for ni_daq_700 driver are: [ 369.147740][T11218] ni_daq_700 [ 369.147746][T11218] comedi: valid board names for labpc_pci driver are: [ 369.147754][T11218] labpc_pci [ 369.147759][T11218] comedi: valid board names for adl_pci9118 driver are: [ 369.147767][T11218] pci9118dg [ 369.147772][T11218] pci9118hg [ 369.147778][T11218] pci9118hr [ 369.147784][T11218] comedi: valid board names for 8255_pci driver are: [ 369.147807][T11218] 8255_pci [ 369.147816][T11218] comedi: valid board names for s526 driver are: [ 369.147827][T11218] s526 [ 369.147836][T11218] comedi: valid board names for multiq3 driver are: [ 369.147845][T11218] multiq3 [ 369.147853][T11218] comedi: valid board names for pcmuio driver are: [ 369.147863][T11218] pcmuio48 [ 369.147871][T11218] pcmuio96 [ 369.147878][T11218] comedi: valid board names for pcmmio driver are: [ 369.147890][T11218] pcmmio [ 369.147900][T11218] comedi: valid board names for pcmda12 driver are: [ 369.147907][T11218] pcmda12 [ 369.147918][T11218] comedi: valid board names for pcmad driver are: [ 369.147925][T11218] pcmad12 [ 369.147931][T11218] pcmad16 [ 369.147936][T11218] comedi: valid board names for ni_labpc driver are: [ 369.147944][T11218] lab-pc-1200 [ 369.147965][T11218] lab-pc-1200ai [ 369.147974][T11218] lab-pc+ [ 369.147982][T11218] comedi: valid board names for atmio16 driver are: [ 369.147994][T11218] atmio16 [ 369.148002][T11218] atmio16d [ 369.148010][T11218] comedi: valid board names for ni_at_ao driver are: [ 369.148020][T11218] at-ao-6 [ 369.148028][T11218] at-ao-10 [ 369.148036][T11218] comedi: valid board names for ni_at_a2150 driver are: [ 369.148052][T11218] ni_at_a2150 [ 369.148058][T11218] comedi: valid board names for adq12b driver are: [ 369.148066][T11218] adq12b [ 369.148071][T11218] comedi: valid board names for mpc624 driver are: [ 369.148078][T11218] mpc624 [ 369.148084][T11218] comedi: valid board names for c6xdigio driver are: [ 369.148091][T11218] c6xdigio [ 369.148096][T11218] comedi: valid board names for aio_iiro_16 driver are: [ 369.148103][T11218] aio_iiro_16 [ 369.148124][T11218] comedi: valid board names for aio_aio12_8 driver are: [ 369.148136][T11218] aio_aio12_8 [ 369.148146][T11218] aio_ai12_8 [ 369.148153][T11218] aio_ao12_4 [ 369.148161][T11218] comedi: valid board names for fl512 driver are: [ 369.148171][T11218] fl512 [ 369.148179][T11218] comedi: valid board names for dmm32at driver are: [ 369.148188][T11218] dmm32at [ 369.148196][T11218] comedi: valid board names for dt282x driver are: [ 369.148211][T11218] dt2821 [ 369.148217][T11218] dt2821-f [ 369.148223][T11218] dt2821-g [ 369.148228][T11218] dt2823 [ 369.148233][T11218] dt2824-pgh [ 369.148239][T11218] dt2824-pgl [ 369.148245][T11218] dt2825 [ 369.148250][T11218] dt2827 [ 369.148255][T11218] dt2828 [ 369.148261][T11218] dt2829 [ 369.148282][T11218] dt21-ez [ 369.148291][T11218] dt23-ez [ 369.148299][T11218] dt24-ez [ 369.148307][T11218] dt24-ez-pgl [ 369.148315][T11218] comedi: valid board names for dt2817 driver are: [ 369.148325][T11218] dt2817 [ 369.148332][T11218] comedi: valid board names for dt2815 driver are: [ 369.148341][T11218] dt2815 [ 369.148349][T11218] comedi: valid board names for dt2814 driver are: [ 369.148360][T11218] dt2814 [ 369.148371][T11218] comedi: valid board names for dt2811 driver are: [ 369.148416][T11218] dt2811-pgh [ 369.148426][T11218] dt2811-pgl [ 369.148434][T11218] comedi: valid board names for dt2801 driver are: [ 369.148445][T11218] dt2801 [ 369.148454][T11218] comedi: valid board names for das6402 driver are: [ 369.148464][T11218] das6402-12 [ 369.148472][T11218] das6402-16 [ 369.148480][T11218] comedi: valid board names for das1800 driver are: [ 369.148490][T11218] das-1701st [ 369.148498][T11218] das-1701st-da [ 369.148506][T11218] das-1702st [ 369.148515][T11218] das-1702st-da [ 369.148523][T11218] das-1702hr [ 369.148530][T11218] das-1702hr-da [ 369.148538][T11218] das-1701ao [ 369.148546][T11218] das-1702ao [ 369.148554][T11218] das-1801st [ 369.148561][T11218] das-1801st-da [ 369.148590][T11218] das-1802st [ 369.149990][T11218] das-1802st-da [ 369.149999][T11218] das-1802hr [ 369.150005][T11218] das-1802hr-da [ 369.150029][T11218] das-1801hc [ 369.150038][T11218] das-1802hc [ 369.150047][T11218] das-1801ao [ 369.150055][T11218] das-1802ao [ 369.150064][T11218] comedi: valid board names for das800 driver are: [ 369.150074][T11218] das-800 [ 369.150082][T11218] cio-das800 [ 369.150090][T11218] das-801 [ 369.150097][T11218] cio-das801 [ 369.150105][T11218] das-802 [ 369.150119][T11218] cio-das802 [ 369.150124][T11218] cio-das802/16 [ 369.150131][T11218] comedi: valid board names for isa-das08 driver are: [ 369.150139][T11218] isa-das08 [ 369.150144][T11218] das08-pgm [ 369.150150][T11218] das08-pgh [ 369.150156][T11218] das08-pgl [ 369.150161][T11218] das08-aoh [ 369.150167][T11218] das08-aol [ 369.150187][T11218] das08-aom [ 369.150196][T11218] das08/jr-ao [ 369.150205][T11218] das08jr-16-ao [ 369.150214][T11218] pc104-das08 [ 369.150221][T11218] das08jr/16 [ 369.150229][T11218] comedi: valid board names for das16m1 driver are: [ 369.150239][T11218] das16m1 [ 369.150246][T11218] comedi: valid board names for dac02 driver are: [ 369.150256][T11218] dac02 [ 369.150263][T11218] comedi: valid board names for rti802 driver are: [ 369.150280][T11218] rti802 [ 369.150286][T11218] comedi: valid board names for rti800 driver are: [ 369.150293][T11218] rti800 [ 369.150298][T11218] rti815 [ 369.150304][T11218] comedi: valid board names for pcm3724 driver are: [ 369.150311][T11218] pcm3724 [ 369.150316][T11218] comedi: valid board names for pcl818 driver are: [ 369.150324][T11218] pcl818l [ 369.150344][T11218] pcl818h [ 369.150353][T11218] pcl818hd [ 369.150361][T11218] pcl818hg [ 369.150370][T11218] pcl818 [ 369.150377][T11218] pcl718 [ 369.150384][T11218] pcm3718 [ 369.150392][T11218] comedi: valid board names for pcl816 driver are: [ 369.150401][T11218] pcl816 [ 369.150409][T11218] pcl814b [ 369.150416][T11218] comedi: valid board names for pcl812 driver are: [ 369.150432][T11218] pcl812 [ 369.150437][T11218] pcl812pg [ 369.150443][T11218] acl8112pg [ 369.150448][T11218] acl8112dg [ 369.150454][T11218] acl8112hg [ 369.150459][T11218] a821pgl [ 369.150464][T11218] a821pglnda [ 369.150470][T11218] a821pgh [ 369.150476][T11218] a822pgl [ 369.150481][T11218] a822pgh [ 369.150501][T11218] a823pgl [ 369.150509][T11218] a823pgh [ 369.150517][T11218] pcl813 [ 369.150526][T11218] pcl813b [ 369.150533][T11218] acl8113 [ 369.150541][T11218] iso813 [ 369.150548][T11218] acl8216 [ 369.150555][T11218] a826pg [ 369.150563][T11218] comedi: valid board names for pcl730 driver are: [ 369.150573][T11218] pcl730 [ 369.150582][T11218] iso730 [ 369.150593][T11218] acl7130 [ 369.150598][T11218] pcm3730 [ 369.150604][T11218] pcl725 [ 369.150610][T11218] p8r8dio [ 369.150615][T11218] acl7225b [ 369.150620][T11218] p16r16dio [ 369.150626][T11218] pcl733 [ 369.150631][T11218] pcl734 [ 369.150637][T11218] opmm-1616-xt [ 369.150656][T11218] pearl-mm-p [ 369.150665][T11218] ir104-pbf [ 369.150673][T11218] comedi: valid board names for pcl726 driver are: [ 369.150684][T11218] pcl726 [ 369.150692][T11218] pcl727 [ 369.150699][T11218] pcl728 [ 369.150706][T11218] acl6126 [ 369.150714][T11218] acl6128 [ 369.150722][T11218] comedi: valid board names for pcl724 driver are: [ 369.150732][T11218] pcl724 [ 369.150812][T11218] pcl722 [ 369.150821][T11218] pcl731 [ 369.150829][T11218] acl7122 [ 369.150837][T11218] acl7124 [ 369.150845][T11218] pet48dio [ 369.150854][T11218] pcmio48 [ 369.150861][T11218] onyx-mm-dio [ 369.150870][T11218] comedi: valid board names for pcl711 driver are: [ 369.150929][T11218] pcl711 [ 369.150960][T11218] pcl711b [ 369.150990][T11218] acl8112hg [ 369.151018][T11218] acl8112dg [ 369.151051][T11218] comedi: valid board names for amplc_pc263 driver are: [ 369.151090][T11218] pc263 [ 369.151111][T11218] comedi: valid board names for amplc_pc236 driver are: [ 369.151141][T11218] pc36at [ 369.151163][T11218] comedi: valid board names for amplc_dio200 driver are: [ 369.151194][T11218] pc212e [ 369.151215][T11218] pc214e [ 369.151228][T11218] pc215e [ 369.151257][T11218] pc218e [ 369.151278][T11218] pc272e [ 369.151301][T11218] comedi: valid board names for comedi_parport driver are: [ 369.151325][T11218] comedi_parport [ 369.151345][T11218] comedi: valid board names for comedi_test driver are: [ 369.151375][T11218] comedi_test [ 369.151396][T11218] comedi: valid board names for comedi_bond driver are: [ 369.151421][T11218] comedi_bond [ 369.240992][ T5611] usb 4-1: Using ep0 maxpacket: 8 [ 369.242693][ T5611] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 369.249010][ T5611] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 369.249102][ T5611] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 369.249253][ T5611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.748973][ T5719] input: HID 1b96:0011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1B96:0011.000D/input/input40 [ 369.836292][ T5719] ntrig 0003:1B96:0011.000D: offset (1) exceeds report_count (1) [ 369.837267][ T5719] ntrig 0003:1B96:0011.000D: offset (2) exceeds report_count (1) [ 369.837338][ T5719] ntrig 0003:1B96:0011.000D: offset (3) exceeds report_count (1) [ 369.837392][ T5719] ntrig 0003:1B96:0011.000D: offset (4) exceeds report_count (1) [ 369.837442][ T5719] ntrig 0003:1B96:0011.000D: offset (5) exceeds report_count (1) [ 369.837494][ T5719] ntrig 0003:1B96:0011.000D: offset (39) exceeds report_count (1) [ 369.837553][ T5719] ntrig 0003:1B96:0011.000D: offset (9) exceeds report_count (1) [ 369.837615][ T5719] ntrig 0003:1B96:0011.000D: offset (25) exceeds report_count (1) [ 370.389589][ T5719] ntrig 0003:1B96:0011.000D: input,hidraw0: USB HID v0.04 Joystick [HID 1b96:0011] on usb-dummy_hcd.1-1/input0 [ 370.428218][ T5719] usb 2-1: USB disconnect, device number 101 [ 370.443568][T11228] netlink: 'syz.5.1314': attribute type 2 has an invalid length. [ 370.485269][T11229] fido_id[11229]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 370.996531][T11241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1318'. [ 370.996562][T11241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1318'. [ 370.996573][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1318'. [ 371.240389][T11243] tmpfs: Bad value for 'nr_inodes' [ 371.271132][ T10] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 371.402658][ T10] usb 2-1: device descriptor read/64, error -71 [ 371.630867][ T5719] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 371.648641][ T10] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 371.781613][ T5719] usb 6-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=1.00 [ 371.782726][ T5719] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 371.782760][ T5719] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 371.782784][ T5719] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 371.782827][ T5719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.786668][T11247] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 371.795547][ T5719] cyberjack 6-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 371.799987][ T10] usb 2-1: device descriptor read/64, error -71 [ 371.840700][ T5719] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 371.901172][ T10] usb usb2-port1: attempt power cycle [ 371.917244][ T5696] usb 4-1: USB disconnect, device number 122 [ 371.995517][T11247] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 371.999451][ T5719] usb 6-1: USB disconnect, device number 25 [ 372.029081][ T5719] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 372.029844][ T5719] cyberjack 6-1:1.0: device disconnected [ 372.112290][T11251] FAULT_INJECTION: forcing a failure. [ 372.112290][T11251] name failslab, interval 1, probability 0, space 0, times 0 [ 372.112328][T11251] CPU: 0 UID: 0 PID: 11251 Comm: syz.3.1323 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.112358][T11251] Tainted: [L]=SOFTLOCKUP [ 372.112367][T11251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.112381][T11251] Call Trace: [ 372.112390][T11251] [ 372.112400][T11251] dump_stack_lvl+0xe8/0x150 [ 372.112434][T11251] should_fail_ex+0x3eb/0x540 [ 372.112473][T11251] ? __alloc_skb+0x1db/0x7a0 [ 372.112502][T11251] should_failslab+0xa8/0x100 [ 372.112534][T11251] ? __alloc_skb+0x1db/0x7a0 [ 372.112561][T11251] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 372.112584][T11251] ? __alloc_skb+0x18d/0x7a0 [ 372.112615][T11251] ? __alloc_skb+0x1db/0x7a0 [ 372.112651][T11251] __alloc_skb+0x1db/0x7a0 [ 372.112686][T11251] alloc_skb_with_frags+0xc6/0x760 [ 372.112723][T11251] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 372.112760][T11251] sock_alloc_send_pskb+0x95e/0xa70 [ 372.112803][T11251] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 372.112830][T11251] ? aa_file_perm+0x18b/0x15f0 [ 372.112857][T11251] ? aa_sk_perm+0x6ff/0x8f0 [ 372.112890][T11251] hci_sock_sendmsg+0x20b/0xfd0 [ 372.112934][T11251] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 372.112964][T11251] ? apparmor_socket_sendmsg+0x98/0x360 [ 372.112994][T11251] ? lock_acquire+0x115/0x350 [ 372.113020][T11251] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 372.113044][T11251] sock_sendmsg_nosec+0x13a/0x180 [ 372.113075][T11251] sock_write_iter+0x2de/0x3e0 [ 372.113102][T11251] ? __pfx_sock_write_iter+0x10/0x10 [ 372.113136][T11251] ? bpf_lsm_file_permission+0x9/0x20 [ 372.113164][T11251] ? security_file_permission+0x75/0x260 [ 372.113200][T11251] vfs_write+0x612/0xba0 [ 372.113234][T11251] ? __pfx_vfs_write+0x10/0x10 [ 372.113262][T11251] ? __fget_files+0x3a2/0x420 [ 372.113284][T11251] ? __fget_files+0x2a/0x420 [ 372.113315][T11251] ? fdget+0x1ac/0x250 [ 372.113345][T11251] ksys_write+0x150/0x270 [ 372.113373][T11251] ? __pfx_ksys_write+0x10/0x10 [ 372.113410][T11251] do_syscall_64+0x166/0x520 [ 372.113431][T11251] ? trace_irq_disable+0x3b/0x140 [ 372.113458][T11251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.113482][T11251] ? clear_bhb_loop+0x70/0xc0 [ 372.113509][T11251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.113532][T11251] RIP: 0033:0x7f8b4679e159 [ 372.113553][T11251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.113574][T11251] RSP: 002b:00007f8b476f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 372.113599][T11251] RAX: ffffffffffffffda RBX: 00007f8b46a25fa0 RCX: 00007f8b4679e159 [ 372.113616][T11251] RDX: 000000000000000e RSI: 0000200000000180 RDI: 0000000000000004 [ 372.113632][T11251] RBP: 00007f8b476f0090 R08: 0000000000000000 R09: 0000000000000000 [ 372.113647][T11251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.113662][T11251] R13: 00007f8b46a26038 R14: 00007f8b46a25fa0 R15: 00007ffd68564f18 [ 372.113697][T11251] [ 372.324564][ T10] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 372.361316][ T10] usb 2-1: device descriptor read/8, error -71 [ 372.598708][T11262] tmpfs: Bad value for 'nr_inodes' [ 372.611257][ T10] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 372.642537][ T10] usb 2-1: device descriptor read/8, error -71 [ 372.669405][T11266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.669911][T11266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.754013][ T10] usb usb2-port1: unable to enumerate USB device [ 372.910967][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 372.919796][T11270] FAULT_INJECTION: forcing a failure. [ 372.919796][T11270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.919822][T11270] CPU: 0 UID: 0 PID: 11270 Comm: syz.3.1332 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.919844][T11270] Tainted: [L]=SOFTLOCKUP [ 372.919850][T11270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.919860][T11270] Call Trace: [ 372.919866][T11270] [ 372.919873][T11270] dump_stack_lvl+0xe8/0x150 [ 372.919898][T11270] should_fail_ex+0x3eb/0x540 [ 372.919926][T11270] _copy_from_iter+0x1d3/0x1660 [ 372.919958][T11270] ? __lock_acquire+0x747/0x2de0 [ 372.919977][T11270] ? __pfx__copy_from_iter+0x10/0x10 [ 372.920013][T11270] tun_get_user+0x26b/0x44d0 [ 372.920048][T11270] ? aa_file_perm+0x18b/0x15f0 [ 372.920069][T11270] ? aa_file_perm+0x4ed/0x15f0 [ 372.920084][T11270] ? __pfx_tun_get_user+0x10/0x10 [ 372.920109][T11270] ? __lock_acquire+0x747/0x2de0 [ 372.920129][T11270] ? kstrtoull+0x137/0x1d0 [ 372.920157][T11270] ? ref_tracker_alloc+0x341/0x4b0 [ 372.920173][T11270] ? lock_acquire+0x115/0x350 [ 372.920191][T11270] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 372.920210][T11270] ? lock_acquire+0x115/0x350 [ 372.920227][T11270] ? tun_get+0x1c/0x2f0 [ 372.920254][T11270] ? tun_get+0x1c/0x2f0 [ 372.920278][T11270] ? tun_get+0x1c/0x2f0 [ 372.920304][T11270] tun_chr_write_iter+0x113/0x200 [ 372.920331][T11270] vfs_write+0x612/0xba0 [ 372.920354][T11270] ? __pfx_vfs_write+0x10/0x10 [ 372.920374][T11270] ? __fget_files+0x3a2/0x420 [ 372.920390][T11270] ? __fget_files+0x2a/0x420 [ 372.920408][T11270] ? fdget+0x1ac/0x250 [ 372.920428][T11270] ksys_write+0x150/0x270 [ 372.920448][T11270] ? __pfx_ksys_write+0x10/0x10 [ 372.920473][T11270] do_syscall_64+0x166/0x520 [ 372.920489][T11270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.920505][T11270] ? clear_bhb_loop+0x70/0xc0 [ 372.920524][T11270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.920540][T11270] RIP: 0033:0x7f8b4679e159 [ 372.920555][T11270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.920577][T11270] RSP: 002b:00007f8b476f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 372.920593][T11270] RAX: ffffffffffffffda RBX: 00007f8b46a25fa0 RCX: 00007f8b4679e159 [ 372.920605][T11270] RDX: 000000000000006a RSI: 0000200000000280 RDI: 0000000000000003 [ 372.920616][T11270] RBP: 00007f8b476f0090 R08: 0000000000000000 R09: 0000000000000000 [ 372.920626][T11270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.920636][T11270] R13: 00007f8b46a26038 R14: 00007f8b46a25fa0 R15: 00007ffd68564f18 [ 372.920663][T11270] [ 373.125976][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 373.150886][ T9] usb 6-1: New USB device found: idVendor=0b05, idProduct=17e0, bcdDevice=0.00 [ 373.218964][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.219008][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 373.219043][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.245312][ T9] usb 6-1: config 0 descriptor?? [ 373.441332][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1336'. [ 373.750878][ T5696] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 373.901720][ T5696] usb 4-1: New USB device found: idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 373.902276][ T5696] usb 4-1: config 0 has no interfaces? [ 373.904318][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.904344][ T5696] usb 4-1: Product: syz [ 373.904361][ T5696] usb 4-1: Manufacturer: syz [ 373.904378][ T5696] usb 4-1: SerialNumber: syz [ 373.907606][ T5696] usb 4-1: config 0 descriptor?? [ 374.112855][ T5696] usb 4-1: USB disconnect, device number 123 [ 374.325189][T11309] tmpfs: Bad value for 'nr_inodes' [ 374.400913][ T10] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 374.507503][T11315] tipc: Started in network mode [ 374.507570][T11315] tipc: Node identity 7f000001, cluster identity 4711 [ 374.507661][T11315] tipc: Enabling of bearer rejected, failed to enable media [ 374.564924][ T5696] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 374.572043][ T10] usb 2-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=1.00 [ 374.591545][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 374.591609][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 374.591634][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 374.591675][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.600638][T11302] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 374.650204][ T10] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 374.665839][ T10] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 374.732029][ T5696] usb 4-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 374.733995][ T5696] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.734046][ T5696] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 374.734092][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.861695][T11302] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 374.870566][ T5696] usb 2-1: USB disconnect, device number 106 [ 374.907771][ T5696] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 374.908484][ T5696] cyberjack 2-1:1.0: device disconnected [ 375.686785][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 375.686903][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 375.730940][ T9] usb 6-1: USB disconnect, device number 26 [ 375.771578][ T10] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 375.890996][T11347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1345'. [ 375.891041][T11347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1345'. [ 375.891058][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1345'. [ 375.933695][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 375.935453][ T10] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 375.938790][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 375.938820][ T10] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 375.938862][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.938905][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.008393][ T10] usbtmc 2-1:16.0: bulk endpoints not found [ 376.018043][T11347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.018483][T11347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.441688][ T5705] usb 4-1: USB disconnect, device number 124 [ 376.706283][T11376] tmpfs: Bad value for 'nr_inodes' [ 376.763317][T11379] loop5: detected capacity change from 0 to 2640 [ 376.763397][T11379] FAULT_INJECTION: forcing a failure. [ 376.763397][T11379] name failslab, interval 1, probability 0, space 0, times 0 [ 376.763426][T11379] CPU: 1 UID: 0 PID: 11379 Comm: syz.5.1350 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.763457][T11379] Tainted: [L]=SOFTLOCKUP [ 376.763465][T11379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 376.763479][T11379] Call Trace: [ 376.763489][T11379] [ 376.763499][T11379] dump_stack_lvl+0xe8/0x150 [ 376.763536][T11379] should_fail_ex+0x3eb/0x540 [ 376.763578][T11379] ? __alloc_skb+0x1db/0x7a0 [ 376.763611][T11379] should_failslab+0xa8/0x100 [ 376.763644][T11379] ? __alloc_skb+0x1db/0x7a0 [ 376.763674][T11379] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 376.763698][T11379] ? __alloc_skb+0x18d/0x7a0 [ 376.763729][T11379] ? __alloc_skb+0x1db/0x7a0 [ 376.763766][T11379] __alloc_skb+0x1db/0x7a0 [ 376.763807][T11379] alloc_uevent_skb+0x7d/0x230 [ 376.763845][T11379] kobject_uevent_net_broadcast+0x2fa/0x560 [ 376.763884][T11379] kobject_uevent_env+0x566/0x9e0 [ 376.763923][T11379] loop_configure+0xafe/0xdc0 [ 376.763961][T11379] ? __pfx_loop_configure+0x10/0x10 [ 376.763982][T11379] ? __lock_acquire+0x747/0x2de0 [ 376.764032][T11379] ? __might_fault+0xaf/0x130 [ 376.764073][T11379] lo_ioctl+0xae0/0x2010 [ 376.764099][T11379] ? lock_acquire+0x115/0x350 [ 376.764138][T11379] ? __pfx_lo_ioctl+0x10/0x10 [ 376.764162][T11379] ? lock_acquire+0x115/0x350 [ 376.764199][T11379] ? is_bpf_text_address+0x26/0x2b0 [ 376.764237][T11379] ? is_bpf_text_address+0x292/0x2b0 [ 376.764271][T11379] ? is_bpf_text_address+0x26/0x2b0 [ 376.764306][T11379] ? kernel_text_address+0xa5/0xe0 [ 376.764334][T11379] ? __kernel_text_address+0xd/0x30 [ 376.764360][T11379] ? unwind_get_return_address+0x4d/0x90 [ 376.764385][T11379] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 376.764412][T11379] ? arch_stack_walk+0xfb/0x150 [ 376.764441][T11379] ? __lock_acquire+0x747/0x2de0 [ 376.764478][T11379] ? __lock_acquire+0x747/0x2de0 [ 376.764514][T11379] ? __lock_acquire+0x747/0x2de0 [ 376.764548][T11379] ? __lock_acquire+0x747/0x2de0 [ 376.764590][T11379] ? lock_acquire+0x115/0x350 [ 376.764623][T11379] ? lock_acquire+0x115/0x350 [ 376.764659][T11379] ? is_bpf_text_address+0x26/0x2b0 [ 376.764698][T11379] ? is_bpf_text_address+0x292/0x2b0 [ 376.764731][T11379] ? is_bpf_text_address+0x26/0x2b0 [ 376.764768][T11379] ? kernel_text_address+0xa5/0xe0 [ 376.764794][T11379] ? __kernel_text_address+0xd/0x30 [ 376.764820][T11379] ? unwind_get_return_address+0x4d/0x90 [ 376.764844][T11379] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 376.764870][T11379] ? arch_stack_walk+0xfb/0x150 [ 376.764906][T11379] ? stack_trace_save+0xa9/0x100 [ 376.764932][T11379] ? __pfx_stack_trace_save+0x10/0x10 [ 376.764956][T11379] ? kasan_save_track+0x4f/0x80 [ 376.764985][T11379] ? stack_depot_save_flags+0x33/0x7f0 [ 376.765008][T11379] ? __lock_acquire+0x747/0x2de0 [ 376.765037][T11379] ? kasan_save_track+0x4f/0x80 [ 376.765061][T11379] ? kasan_save_track+0x3e/0x80 [ 376.765085][T11379] ? kasan_save_free_info+0x40/0x50 [ 376.765126][T11379] ? __kasan_slab_free+0x5c/0x80 [ 376.765152][T11379] ? kfree+0x1c5/0x650 [ 376.765184][T11379] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 376.765214][T11379] ? security_file_ioctl+0xc3/0x2a0 [ 376.765242][T11379] ? __se_sys_ioctl+0x47/0x170 [ 376.765270][T11379] ? do_syscall_64+0x166/0x520 [ 376.765290][T11379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.765321][T11379] ? __asan_memset+0x22/0x50 [ 376.765344][T11379] ? blk_get_meta_cap+0x19d/0x780 [ 376.765382][T11379] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 376.765425][T11379] ? blkdev_common_ioctl+0x14b7/0x3250 [ 376.765467][T11379] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 376.765504][T11379] ? kasan_quarantine_put+0xbb/0x1f0 [ 376.765539][T11379] ? tomoyo_path_number_perm+0x219/0x5f0 [ 376.765571][T11379] ? tomoyo_path_number_perm+0x219/0x5f0 [ 376.765606][T11379] ? do_vfs_ioctl+0x116f/0x1530 [ 376.765678][T11379] ? __pfx_lo_ioctl+0x10/0x10 [ 376.765702][T11379] blkdev_ioctl+0x5e3/0x740 [ 376.765740][T11379] ? __pfx_blkdev_ioctl+0x10/0x10 [ 376.765777][T11379] ? bpf_lsm_file_ioctl+0x9/0x20 [ 376.765805][T11379] ? __pfx_blkdev_ioctl+0x10/0x10 [ 376.765838][T11379] __se_sys_ioctl+0xfc/0x170 [ 376.765870][T11379] do_syscall_64+0x166/0x520 [ 376.765892][T11379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.765916][T11379] ? clear_bhb_loop+0x70/0xc0 [ 376.765944][T11379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.765969][T11379] RIP: 0033:0x7f2f92b9e159 [ 376.765991][T11379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.766012][T11379] RSP: 002b:00007f2f93b50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 376.766037][T11379] RAX: ffffffffffffffda RBX: 00007f2f92e25fa0 RCX: 00007f2f92b9e159 [ 376.766056][T11379] RDX: 0000200000001ac0 RSI: 0000000000004c0a RDI: 0000000000000005 [ 376.766071][T11379] RBP: 00007f2f92c3506b R08: 0000000000000000 R09: 0000000000000000 [ 376.766087][T11379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.766102][T11379] R13: 00007f2f92e26038 R14: 00007f2f92e25fa0 R15: 00007fffcdc13e68 [ 376.766151][T11379] [ 376.768476][T11379] buffer_io_error: 23 callbacks suppressed [ 376.768495][T11379] Buffer I/O error on dev loop5, logical block 0, async page read [ 376.768535][T11379] Buffer I/O error on dev loop5, logical block 0, async page read [ 376.768567][T11379] Buffer I/O error on dev loop5, logical block 0, async page read [ 376.768598][T11379] Buffer I/O error on dev loop5, logical block 0, async page read [ 376.768636][T11379] Buffer I/O error on dev loop5, logical block 0, async page read [ 376.768687][T11379] Buffer I/O error on dev loop5, logical block 0, async page read [ 376.768733][T11379] Buffer I/O error on dev loop5, logical block 0, async page read [ 376.768765][T11379] Buffer I/O error on dev loop5, logical block 0, async page read [ 376.768783][T11379] ldm_validate_partition_table(): Disk read failed. [ 376.768813][T11379] Buffer I/O error on dev loop5, logical block 0, async page read [ 376.768845][T11379] Buffer I/O error on dev loop5, logical block 0, async page read [ 376.768894][T11379] Dev loop5: unable to read RDB block 0 [ 376.769074][T11379] loop5: unable to read partition table [ 376.769309][T11379] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 377.469267][T11385] FAULT_INJECTION: forcing a failure. [ 377.469267][T11385] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 377.469306][T11385] CPU: 0 UID: 0 PID: 11385 Comm: syz.5.1353 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.469339][T11385] Tainted: [L]=SOFTLOCKUP [ 377.469349][T11385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 377.469364][T11385] Call Trace: [ 377.469373][T11385] [ 377.469384][T11385] dump_stack_lvl+0xe8/0x150 [ 377.469420][T11385] should_fail_ex+0x3eb/0x540 [ 377.469461][T11385] prepare_alloc_pages+0x21e/0x5f0 [ 377.469495][T11385] __alloc_frozen_pages_noprof+0x17a/0x400 [ 377.469528][T11385] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 377.469569][T11385] ? policy_nodemask+0x2cc/0x8e0 [ 377.469606][T11385] alloc_pages_mpol+0x21e/0x390 [ 377.469642][T11385] alloc_pages_noprof+0xb1/0x2b0 [ 377.469676][T11385] blk_rq_map_user_iov+0x9e2/0x1850 [ 377.469729][T11385] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 377.469760][T11385] ? __blk_mq_alloc_requests+0x1d0f/0x20a0 [ 377.469803][T11385] ? import_ubuf+0xfb/0x1d0 [ 377.469832][T11385] blk_rq_map_user_io+0x2ae/0x440 [ 377.469862][T11385] ? __lock_acquire+0x747/0x2de0 [ 377.469895][T11385] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 377.469923][T11385] ? __asan_memset+0x22/0x50 [ 377.469953][T11385] ? do_raw_spin_lock+0x12b/0x2f0 [ 377.470002][T11385] ? lock_acquire+0x115/0x350 [ 377.470036][T11385] ? apparmor_capable+0x126/0x170 [ 377.470067][T11385] ? security_capable+0x7e/0x2c0 [ 377.470107][T11385] sg_io+0x532/0x8d0 [ 377.470147][T11385] scsi_ioctl+0x14b8/0x2130 [ 377.470185][T11385] ? __pfx_scsi_ioctl+0x10/0x10 [ 377.470247][T11385] ? kasan_quarantine_put+0xbb/0x1f0 [ 377.470292][T11385] ? scsi_block_when_processing_errors+0x3b1/0x480 [ 377.470331][T11385] ? __pfx_scsi_block_when_processing_errors+0x10/0x10 [ 377.470386][T11385] sg_ioctl+0x17a4/0x21a0 [ 377.470425][T11385] ? __pfx_sg_ioctl+0x10/0x10 [ 377.470453][T11385] ? __fget_files+0x2a/0x420 [ 377.470479][T11385] ? __fget_files+0x2a/0x420 [ 377.470503][T11385] ? __fget_files+0x2a/0x420 [ 377.470530][T11385] ? bpf_lsm_file_ioctl+0x9/0x20 [ 377.470559][T11385] ? __pfx_sg_ioctl+0x10/0x10 [ 377.470586][T11385] __se_sys_ioctl+0xfc/0x170 [ 377.470619][T11385] do_syscall_64+0x166/0x520 [ 377.470642][T11385] ? trace_irq_disable+0x3b/0x140 [ 377.470669][T11385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.470694][T11385] ? clear_bhb_loop+0x70/0xc0 [ 377.470723][T11385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.470746][T11385] RIP: 0033:0x7f2f92b9e159 [ 377.470766][T11385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.470787][T11385] RSP: 002b:00007f2f93b50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.470811][T11385] RAX: ffffffffffffffda RBX: 00007f2f92e25fa0 RCX: 00007f2f92b9e159 [ 377.470830][T11385] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000005 [ 377.470846][T11385] RBP: 00007f2f92c3506b R08: 0000000000000000 R09: 0000000000000000 [ 377.470861][T11385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.470875][T11385] R13: 00007f2f92e26038 R14: 00007f2f92e25fa0 R15: 00007fffcdc13e68 [ 377.470911][T11385] [ 377.770507][T11386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.806190][T11386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.144946][T11402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1356'. [ 378.431679][ T9] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 378.547733][ T5719] usb 2-1: USB disconnect, device number 107 [ 378.583764][ T9] usb 4-1: New USB device found: idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 378.584479][ T9] usb 4-1: config 0 has no interfaces? [ 378.587964][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.587989][ T9] usb 4-1: Product: syz [ 378.588004][ T9] usb 4-1: Manufacturer: syz [ 378.588019][ T9] usb 4-1: SerialNumber: syz [ 378.629765][ T9] usb 4-1: config 0 descriptor?? [ 378.645962][T11407] IPVS: length: 140 != 8 [ 378.703878][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.703942][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.821319][T11413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1358'. [ 378.821363][T11413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1358'. [ 378.821381][T11413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1358'. [ 378.863488][ T5719] usb 4-1: USB disconnect, device number 125 [ 379.173431][ T5696] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 379.301042][ T5696] usb 2-1: device descriptor read/64, error -71 [ 379.312389][ T5719] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 379.465539][ T5719] usb 4-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 379.466945][ T5719] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.466995][ T5719] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 379.467041][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.541015][ T5696] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 379.679607][ T5696] usb 2-1: device descriptor read/64, error -71 [ 379.783036][ T5696] usb usb2-port1: attempt power cycle [ 380.140267][ T5696] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 380.163412][ T5696] usb 2-1: device descriptor read/8, error -71 [ 380.401977][ T5696] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 380.422346][ T5696] usb 2-1: device descriptor read/8, error -71 [ 380.533303][ T5696] usb usb2-port1: unable to enumerate USB device [ 380.580566][T11465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.599003][T11465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.086082][T11485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.151344][T11488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.204148][T11491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.227857][T11492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.245725][ T5696] usb 4-1: USB disconnect, device number 126 [ 381.267926][T11493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.332354][T11495] FAULT_INJECTION: forcing a failure. [ 381.332354][T11495] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 381.332391][T11495] CPU: 1 UID: 0 PID: 11495 Comm: syz.0.1370 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.332422][T11495] Tainted: [L]=SOFTLOCKUP [ 381.332430][T11495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 381.332445][T11495] Call Trace: [ 381.332454][T11495] [ 381.332464][T11495] dump_stack_lvl+0xe8/0x150 [ 381.332500][T11495] should_fail_ex+0x3eb/0x540 [ 381.332541][T11495] prepare_alloc_pages+0x21e/0x5f0 [ 381.332577][T11495] __alloc_frozen_pages_noprof+0x17a/0x400 [ 381.332609][T11495] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 381.332644][T11495] ? policy_nodemask+0x2cc/0x8e0 [ 381.332674][T11495] ? __lock_acquire+0x747/0x2de0 [ 381.332703][T11495] alloc_pages_mpol+0x21e/0x390 [ 381.332740][T11495] folio_alloc_mpol_noprof+0x39/0x160 [ 381.332780][T11495] vma_alloc_folio_noprof+0xe1/0x1e0 [ 381.332815][T11495] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 381.332853][T11495] ? vma_has_anon_rmap+0xc9/0x270 [ 381.332885][T11495] do_pte_missing+0x16d4/0x3570 [ 381.332927][T11495] handle_mm_fault+0x1a53/0x3750 [ 381.332970][T11495] ? handle_mm_fault+0xf1/0x3750 [ 381.333012][T11495] ? __pfx_handle_mm_fault+0x10/0x10 [ 381.333041][T11495] ? lock_vma_under_rcu+0x45a/0x500 [ 381.333073][T11495] ? __fget_files+0x2a/0x420 [ 381.333120][T11495] do_user_addr_fault+0xb35/0x1480 [ 381.333167][T11495] ? trace_page_fault_user+0x84/0x1e0 [ 381.333203][T11495] exc_page_fault+0x6a/0xc0 [ 381.333238][T11495] asm_exc_page_fault+0x26/0x30 [ 381.333261][T11495] RIP: 0033:0x7f927905f9a1 [ 381.333282][T11495] Code: 8d 3d da 4c 1d 00 e8 2e 3c ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 57 41 56 41 55 41 54 55 53 48 81 ec 78 10 00 00 <48> 89 7c 24 18 48 89 74 24 10 48 89 54 24 08 4c 8b 7c 24 18 4c 8b [ 381.333303][T11495] RSP: 002b:00007f927a0aaf70 EFLAGS: 00010202 [ 381.333324][T11495] RAX: 00007f927905f990 RBX: 00007f9279426180 RCX: 0000000000000000 [ 381.333341][T11495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000002000 [ 381.333356][T11495] RBP: 00007f927a0ac090 R08: 0000000000000000 R09: 0000000000000000 [ 381.333371][T11495] R10: 0000200000002000 R11: 0000000000000000 R12: 0000000000000001 [ 381.333385][T11495] R13: 00007f9279426218 R14: 00007f9279426180 R15: 00007fffe2ffe098 [ 381.333416][T11495] [ 381.338823][T11495] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 381.395222][T11495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.824007][T11507] comedi: No check for data length of config insn id -3 is implemented [ 381.824029][T11507] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 381.824043][T11507] comedi: Assuming n=15 is correct [ 382.029145][T11513] jffs2: notice: (11513) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 382.300546][T11522] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1376'. [ 382.300574][T11522] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1376'. [ 382.734764][T11536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.743351][T11536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.955673][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1379'. [ 383.285354][ T10] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 383.339226][T11547] FAULT_INJECTION: forcing a failure. [ 383.339226][T11547] name failslab, interval 1, probability 0, space 0, times 0 [ 383.339262][T11547] CPU: 0 UID: 0 PID: 11547 Comm: syz.1.1380 Tainted: G L syzkaller #0 PREEMPT(full) [ 383.339294][T11547] Tainted: [L]=SOFTLOCKUP [ 383.339303][T11547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.339318][T11547] Call Trace: [ 383.339327][T11547] [ 383.339337][T11547] dump_stack_lvl+0xe8/0x150 [ 383.339371][T11547] should_fail_ex+0x3eb/0x540 [ 383.339411][T11547] should_failslab+0xa8/0x100 [ 383.339441][T11547] ? copy_sighand+0x50/0x220 [ 383.339470][T11547] kmem_cache_alloc_noprof+0x9c/0x600 [ 383.339506][T11547] ? do_raw_spin_unlock+0xf5/0x200 [ 383.339540][T11547] ? copy_sighand+0x50/0x220 [ 383.339574][T11547] copy_sighand+0x50/0x220 [ 383.339604][T11547] copy_process+0x1de8/0x4430 [ 383.339645][T11547] ? copy_process+0xd11/0x4430 [ 383.339691][T11547] ? __pfx_copy_process+0x10/0x10 [ 383.339719][T11547] ? get_pid_task+0x20/0x1f0 [ 383.339741][T11547] ? get_pid_task+0x20/0x1f0 [ 383.339775][T11547] kernel_clone+0x2d7/0x940 [ 383.339810][T11547] ? __pfx_kernel_clone+0x10/0x10 [ 383.339860][T11547] __x64_sys_clone+0x1b6/0x230 [ 383.339893][T11547] ? __pfx___x64_sys_clone+0x10/0x10 [ 383.339940][T11547] ? __pfx_ksys_write+0x10/0x10 [ 383.339986][T11547] do_syscall_64+0x166/0x520 [ 383.340009][T11547] ? trace_irq_disable+0x3b/0x140 [ 383.340035][T11547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.340060][T11547] ? clear_bhb_loop+0x70/0xc0 [ 383.340088][T11547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.340111][T11547] RIP: 0033:0x7f6d4399e159 [ 383.340131][T11547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.340150][T11547] RSP: 002b:00007f6d447f2fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 383.340173][T11547] RAX: ffffffffffffffda RBX: 00007f6d43c25fa0 RCX: 00007f6d4399e159 [ 383.340190][T11547] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 383.340203][T11547] RBP: 00007f6d447f3090 R08: 0000000000000000 R09: 0000000000000000 [ 383.340217][T11547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 383.340231][T11547] R13: 00007f6d43c26038 R14: 00007f6d43c25fa0 R15: 00007fffa43e2e78 [ 383.340263][T11547] [ 383.549653][ T10] usb 6-1: New USB device found: idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 383.558650][ T10] usb 6-1: config 0 has no interfaces? [ 383.604756][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.604788][ T10] usb 6-1: Product: syz [ 383.604806][ T10] usb 6-1: Manufacturer: syz [ 383.604822][ T10] usb 6-1: SerialNumber: syz [ 383.608086][ T10] usb 6-1: config 0 descriptor?? [ 383.820048][ T5696] usb 6-1: USB disconnect, device number 27 [ 383.904694][T11552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1382'. [ 383.904745][T11552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1382'. [ 383.904763][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1382'. [ 383.965498][T11552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.976387][T11552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.207323][T11566] FAULT_INJECTION: forcing a failure. [ 384.207323][T11566] name failslab, interval 1, probability 0, space 0, times 0 [ 384.207359][T11566] CPU: 0 UID: 0 PID: 11566 Comm: syz.3.1385 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.207390][T11566] Tainted: [L]=SOFTLOCKUP [ 384.207399][T11566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 384.207413][T11566] Call Trace: [ 384.207422][T11566] [ 384.207432][T11566] dump_stack_lvl+0xe8/0x150 [ 384.207465][T11566] should_fail_ex+0x3eb/0x540 [ 384.207503][T11566] should_failslab+0xa8/0x100 [ 384.207535][T11566] __kmalloc_cache_noprof+0x9e/0x600 [ 384.207559][T11566] ? trace_contention_end+0x3d/0x140 [ 384.207587][T11566] ? __vb2_init_fileio+0x1e2/0x1040 [ 384.207616][T11566] ? __vb2_init_fileio+0x1e2/0x1040 [ 384.207647][T11566] ? __mutex_lock+0x305/0x15a0 [ 384.207674][T11566] __vb2_init_fileio+0x1e2/0x1040 [ 384.207712][T11566] ? vb2_fop_read+0xfb/0x360 [ 384.207745][T11566] ? __pfx___mutex_lock+0x10/0x10 [ 384.207780][T11566] __vb2_perform_fileio+0x287/0x1660 [ 384.207824][T11566] ? __asan_memset+0x22/0x50 [ 384.207851][T11566] vb2_fop_read+0x282/0x360 [ 384.207888][T11566] v4l2_read+0x19c/0x2c0 [ 384.207923][T11566] vfs_readv+0x57c/0x850 [ 384.207958][T11566] ? __pfx_v4l2_read+0x10/0x10 [ 384.207991][T11566] ? __pfx_vfs_readv+0x10/0x10 [ 384.208042][T11566] ? __fget_files+0x3a2/0x420 [ 384.208064][T11566] ? __fget_files+0x2a/0x420 [ 384.208091][T11566] ? fdget+0x1ac/0x250 [ 384.208117][T11566] __x64_sys_preadv+0x19c/0x2b0 [ 384.208148][T11566] ? __pfx___x64_sys_preadv+0x10/0x10 [ 384.208188][T11566] do_syscall_64+0x166/0x520 [ 384.208209][T11566] ? trace_irq_disable+0x3b/0x140 [ 384.208235][T11566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.208259][T11566] ? clear_bhb_loop+0x70/0xc0 [ 384.208286][T11566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.208308][T11566] RIP: 0033:0x7f8b4679e159 [ 384.208329][T11566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.208348][T11566] RSP: 002b:00007f8b476f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 384.208371][T11566] RAX: ffffffffffffffda RBX: 00007f8b46a25fa0 RCX: 00007f8b4679e159 [ 384.208391][T11566] RDX: 0000000000000001 RSI: 0000200000001300 RDI: 0000000000000003 [ 384.208406][T11566] RBP: 00007f8b476f0090 R08: 000000003f2f07de R09: 0000000000000000 [ 384.208420][T11566] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 384.208434][T11566] R13: 00007f8b46a26038 R14: 00007f8b46a25fa0 R15: 00007ffd68564f18 [ 384.208469][T11566] [ 384.284698][ T5696] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 384.445462][ T5696] usb 6-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 384.468862][ T5696] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.469023][ T5696] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 384.469155][ T5696] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.110903][ T5696] usb 2-1: new low-speed USB device number 112 using dummy_hcd [ 385.268217][ T5696] usb 2-1: Invalid ep0 maxpacket: 32 [ 385.367163][T11605] FAULT_INJECTION: forcing a failure. [ 385.367163][T11605] name failslab, interval 1, probability 0, space 0, times 0 [ 385.367200][T11605] CPU: 1 UID: 0 PID: 11605 Comm: syz.0.1393 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.367231][T11605] Tainted: [L]=SOFTLOCKUP [ 385.367241][T11605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 385.367255][T11605] Call Trace: [ 385.367264][T11605] [ 385.367275][T11605] dump_stack_lvl+0xe8/0x150 [ 385.367309][T11605] should_fail_ex+0x3eb/0x540 [ 385.367350][T11605] should_failslab+0xa8/0x100 [ 385.367383][T11605] __kmalloc_cache_noprof+0x9e/0x600 [ 385.367409][T11605] ? ceph_auth_init+0x5d/0x350 [ 385.367436][T11605] ? ceph_auth_init+0x5d/0x350 [ 385.367470][T11605] ceph_auth_init+0x5d/0x350 [ 385.367504][T11605] ceph_monc_init+0x52f/0xb10 [ 385.367545][T11605] ceph_create_client+0x225/0x310 [ 385.367581][T11605] ceph_get_tree+0x1ca/0x1a40 [ 385.367611][T11605] ? apparmor_capable+0x126/0x170 [ 385.367644][T11605] vfs_get_tree+0x92/0x2a0 [ 385.367678][T11605] vfs_cmd_create+0xa2/0x200 [ 385.367713][T11605] __se_sys_fsconfig+0x6b9/0x810 [ 385.367751][T11605] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 385.367782][T11605] ? ksys_write+0x242/0x270 [ 385.367820][T11605] ? __pfx_ksys_write+0x10/0x10 [ 385.367852][T11605] ? __x64_sys_fsconfig+0x20/0xc0 [ 385.367886][T11605] do_syscall_64+0x166/0x520 [ 385.367907][T11605] ? trace_irq_disable+0x3b/0x140 [ 385.367935][T11605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.367959][T11605] ? clear_bhb_loop+0x70/0xc0 [ 385.367987][T11605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.368010][T11605] RIP: 0033:0x7f927919e159 [ 385.368031][T11605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.368051][T11605] RSP: 002b:00007f927a0cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 385.368076][T11605] RAX: ffffffffffffffda RBX: 00007f9279426090 RCX: 00007f927919e159 [ 385.368094][T11605] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 385.368108][T11605] RBP: 00007f927a0cd090 R08: 0000000000000000 R09: 0000000000000000 [ 385.368123][T11605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.368137][T11605] R13: 00007f9279426128 R14: 00007f9279426090 R15: 00007fffe2ffe098 [ 385.368173][T11605] [ 385.394819][ T5696] usb 2-1: new low-speed USB device number 113 using dummy_hcd [ 385.554671][ T5696] usb 2-1: Invalid ep0 maxpacket: 32 [ 385.560608][ T5696] usb usb2-port1: attempt power cycle [ 385.866358][T11611] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1395'. [ 385.866390][T11611] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1395'. [ 385.866402][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'. [ 385.901577][T11608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.904200][T11608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.910911][ T5696] usb 2-1: new low-speed USB device number 114 using dummy_hcd [ 385.933073][ T5696] usb 2-1: Invalid ep0 maxpacket: 32 [ 386.062093][ T5696] usb 2-1: new low-speed USB device number 115 using dummy_hcd [ 386.082774][ T5696] usb 2-1: Invalid ep0 maxpacket: 32 [ 386.083050][ T5696] usb usb2-port1: unable to enumerate USB device [ 386.119827][ T5696] usb 6-1: USB disconnect, device number 28 [ 386.151911][ T10] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 386.300997][ T10] usb 4-1: device descriptor read/64, error -71 [ 386.563231][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 386.700924][ T10] usb 4-1: device descriptor read/64, error -71 [ 386.811296][ T10] usb usb4-port1: attempt power cycle [ 387.175035][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 387.192716][ T10] usb 4-1: device descriptor read/8, error -71 [ 387.208636][T11650] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 387.209825][T11650] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1397'. [ 387.209852][T11650] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1397'. [ 387.241076][T11649] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 387.431789][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 387.452374][ T10] usb 4-1: device descriptor read/8, error -71 [ 387.509764][ T5719] hid_parser_main: 337 callbacks suppressed [ 387.509791][ T5719] hid-generic 0000:47A1:0001.000E: unknown main item tag 0x0 [ 387.509822][ T5719] hid-generic 0000:47A1:0001.000E: unknown main item tag 0x0 [ 387.509850][ T5719] hid-generic 0000:47A1:0001.000E: unknown main item tag 0x0 [ 387.509878][ T5719] hid-generic 0000:47A1:0001.000E: unknown main item tag 0x0 [ 387.509906][ T5719] hid-generic 0000:47A1:0001.000E: unknown main item tag 0x0 [ 387.509934][ T5719] hid-generic 0000:47A1:0001.000E: unknown main item tag 0x0 [ 387.509961][ T5719] hid-generic 0000:47A1:0001.000E: unknown main item tag 0x0 [ 387.509988][ T5719] hid-generic 0000:47A1:0001.000E: unknown main item tag 0x0 [ 387.510015][ T5719] hid-generic 0000:47A1:0001.000E: unknown main item tag 0x0 [ 387.510043][ T5719] hid-generic 0000:47A1:0001.000E: unknown main item tag 0x0 [ 387.573956][ T10] usb usb4-port1: unable to enumerate USB device [ 387.615484][ T5719] hid-generic 0000:47A1:0001.000E: hidraw0: HID v0.03 Device [syz0] on syz1 [ 387.689228][T11661] fido_id[11661]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 387.844797][T11665] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 387.932197][T11665] ceph: No mds server is up or the cluster is laggy [ 388.193670][T11672] netlink: 'syz.5.1402': attribute type 20 has an invalid length. [ 388.260003][T11674] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1403'. [ 388.302045][ T10] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 388.329508][T11676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1404'. [ 388.440896][ T10] usb 2-1: device descriptor read/64, error -71 [ 388.601524][ T5719] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 388.680868][ T10] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 388.751750][ T5719] usb 6-1: New USB device found: idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 388.752355][ T5719] usb 6-1: config 0 has no interfaces? [ 388.754858][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.754886][ T5719] usb 6-1: Product: syz [ 388.754903][ T5719] usb 6-1: Manufacturer: syz [ 388.754920][ T5719] usb 6-1: SerialNumber: syz [ 388.760497][ T5719] usb 6-1: config 0 descriptor?? [ 388.863928][ T10] usb 2-1: device descriptor read/64, error -71 [ 388.971340][ T10] usb usb2-port1: attempt power cycle [ 388.973835][ T5719] usb 6-1: USB disconnect, device number 29 [ 389.025495][T11695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.025976][T11695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.063122][ T33] kauditd_printk_skb: 5 callbacks suppressed [ 389.063144][ T33] audit: type=1807 audit(1790394585.393:61): UNKNOWN=meaxure res=0 [ 389.063405][ T33] audit: type=1802 audit(1790394585.403:62): pid=11696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1406" res=0 errno=0 [ 389.063761][T11694] ima: policy update failed [ 389.064214][ T33] audit: type=1802 audit(1790394585.403:63): pid=11694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1406" res=0 errno=0 [ 389.310948][ T10] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 389.333083][ T10] usb 2-1: device descriptor read/8, error -71 [ 389.432558][ T5719] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 389.470964][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 389.583452][ T5719] usb 6-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 389.584526][ T5719] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.584640][ T5719] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 389.584673][ T5719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.634975][ T10] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 389.661629][ T10] usb 2-1: device descriptor read/8, error -71 [ 389.662167][ T9] usb 4-1: New USB device found: idVendor=04f2, idProduct=0618, bcdDevice=0.00 [ 389.663651][ T9] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.663683][ T9] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 389.663711][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 389.663735][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.669878][ T9] usb 4-1: config 0 descriptor?? [ 389.751885][T11716] overlayfs: workdir and upperdir must be separate subtrees [ 389.771221][ T10] usb usb2-port1: unable to enumerate USB device [ 390.092523][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 390.092638][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 390.098549][ T9] usb 4-1: USB disconnect, device number 5 [ 390.642783][T11725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1414'. [ 390.642815][T11725] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1414'. [ 390.642826][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1414'. [ 390.910896][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 391.040852][ T9] usb 4-1: device descriptor read/64, error -71 [ 391.192782][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807a255000: rx timeout, send abort [ 391.195796][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807a255000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 391.280922][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 391.335225][ T5611] usb 6-1: USB disconnect, device number 30 [ 391.410936][ T9] usb 4-1: device descriptor read/64, error -71 [ 391.411051][ T10] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 391.522634][ T9] usb usb4-port1: attempt power cycle [ 391.561697][ T10] usb 2-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 391.563982][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.564036][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.569839][ T10] usb 2-1: config 0 descriptor?? [ 391.796907][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 391.797019][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 391.820580][ T10] usb 2-1: USB disconnect, device number 120 [ 391.871242][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 391.892387][ T9] usb 4-1: device descriptor read/8, error -71 [ 392.130896][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 392.147226][ T10] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 392.167545][ T9] usb 4-1: device descriptor read/8, error -71 [ 392.271757][ T9] usb usb4-port1: unable to enumerate USB device [ 392.311554][ T10] usb 2-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 392.312595][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.312644][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.318343][ T10] usb 2-1: config 0 descriptor?? [ 392.487110][T11783] jffs2: notice: (11783) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 392.523108][T11736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.543541][T11736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.546600][T11736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.547242][T11736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.548557][T11736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.598607][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 392.598722][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 392.618741][T11736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.629595][ T10] usb 2-1: USB disconnect, device number 121 [ 392.865765][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1427'. [ 392.970901][ T10] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 393.128681][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 393.137147][ T10] usb 2-1: New USB device found: idVendor=0925, idProduct=0005, bcdDevice=0.40 [ 393.152410][ T10] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 393.152445][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 393.156816][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.156845][ T10] usb 2-1: Product: ч [ 393.156862][ T10] usb 2-1: Manufacturer: ᐇ [ 393.156886][ T10] usb 2-1: SerialNumber: 㠁 [ 393.172041][ T9] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 393.201784][T11790] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 393.343745][T11817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.344342][ T9] usb 6-1: New USB device found: idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 393.344726][T11817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.345247][ T9] usb 6-1: config 0 has no interfaces? [ 393.349192][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.349220][ T9] usb 6-1: Product: syz [ 393.349265][ T9] usb 6-1: Manufacturer: syz [ 393.349282][ T9] usb 6-1: SerialNumber: syz [ 393.414339][ T9] usb 6-1: config 0 descriptor?? [ 393.496023][T11818] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1430'. [ 393.621948][ T9] usb 6-1: USB disconnect, device number 31 [ 393.753425][T11828] jffs2: notice: (11828) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 393.781736][T11828] FAULT_INJECTION: forcing a failure. [ 393.781736][T11828] name failslab, interval 1, probability 0, space 0, times 0 [ 393.781775][T11828] CPU: 0 UID: 0 PID: 11828 Comm: syz.3.1431 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.781806][T11828] Tainted: [L]=SOFTLOCKUP [ 393.781815][T11828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.781829][T11828] Call Trace: [ 393.781839][T11828] [ 393.781848][T11828] dump_stack_lvl+0xe8/0x150 [ 393.781886][T11828] should_fail_ex+0x3eb/0x540 [ 393.781926][T11828] should_failslab+0xa8/0x100 [ 393.781958][T11828] __kmalloc_noprof+0xf9/0x710 [ 393.781980][T11828] ? rcu_is_watching+0x16/0xb0 [ 393.782011][T11828] ? tomoyo_realpath_from_path+0xef/0x640 [ 393.782033][T11828] ? tomoyo_realpath_from_path+0xef/0x640 [ 393.782063][T11828] tomoyo_realpath_from_path+0xef/0x640 [ 393.782100][T11828] tomoyo_check_open_permission+0x229/0x470 [ 393.782131][T11828] ? tomoyo_check_open_permission+0x1d3/0x470 [ 393.782162][T11828] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 393.782195][T11828] ? __asan_memset+0x22/0x50 [ 393.782251][T11828] ? mnt_get_write_access+0x66/0x280 [ 393.782281][T11828] ? tomoyo_file_open+0x163/0x220 [ 393.782311][T11828] security_file_open+0xa9/0x240 [ 393.782341][T11828] do_dentry_open+0x495/0x1360 [ 393.782385][T11828] vfs_open_consume+0x4a/0x350 [ 393.782415][T11828] ? path_openat+0x148a/0x1da0 [ 393.782446][T11828] path_openat+0x14a6/0x1da0 [ 393.782494][T11828] do_file_open+0x23e/0x4a0 [ 393.782535][T11828] ? __pfx_do_file_open+0x10/0x10 [ 393.782586][T11828] ? _raw_spin_unlock+0x28/0x50 [ 393.782616][T11828] ? alloc_fd+0x6af/0x760 [ 393.782661][T11828] do_sys_openat2+0x115/0x200 [ 393.782696][T11828] ? __pfx_do_sys_openat2+0x10/0x10 [ 393.782730][T11828] ? ksys_write+0x242/0x270 [ 393.782757][T11828] ? __pfx_ksys_write+0x10/0x10 [ 393.782792][T11828] __x64_sys_openat+0x138/0x170 [ 393.782832][T11828] do_syscall_64+0x166/0x520 [ 393.782855][T11828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.782878][T11828] ? clear_bhb_loop+0x70/0xc0 [ 393.782905][T11828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.782927][T11828] RIP: 0033:0x7f8b4679e159 [ 393.782949][T11828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.782968][T11828] RSP: 002b:00007f8b476f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 393.782992][T11828] RAX: ffffffffffffffda RBX: 00007f8b46a25fa0 RCX: 00007f8b4679e159 [ 393.783010][T11828] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 393.783026][T11828] RBP: 00007f8b476f0090 R08: 0000000000000000 R09: 0000000000000000 [ 393.783041][T11828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 393.783055][T11828] R13: 00007f8b46a26038 R14: 00007f8b46a25fa0 R15: 00007ffd68564f18 [ 393.783091][T11828] [ 393.786172][T11828] ERROR: Out of memory at tomoyo_realpath_from_path. [ 394.234131][ T5611] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 394.338562][T11840] FAULT_INJECTION: forcing a failure. [ 394.338562][T11840] name failslab, interval 1, probability 0, space 0, times 0 [ 394.338600][T11840] CPU: 1 UID: 0 PID: 11840 Comm: syz.3.1433 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.338631][T11840] Tainted: [L]=SOFTLOCKUP [ 394.338640][T11840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.338655][T11840] Call Trace: [ 394.338664][T11840] [ 394.338681][T11840] dump_stack_lvl+0xe8/0x150 [ 394.338716][T11840] should_fail_ex+0x3eb/0x540 [ 394.338756][T11840] should_failslab+0xa8/0x100 [ 394.338787][T11840] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 394.338814][T11840] ? __pfx_audit_log_format+0x10/0x10 [ 394.338846][T11840] ? ima_parse_add_rule+0x1e9e/0x50c0 [ 394.338870][T11840] ? ima_parse_add_rule+0x1e9e/0x50c0 [ 394.338898][T11840] ? __kmalloc_cache_noprof+0x148/0x600 [ 394.338925][T11840] kmemdup_nul+0x36/0xf0 [ 394.338952][T11840] ima_parse_add_rule+0x1e9e/0x50c0 [ 394.339026][T11840] ? __pfx_ima_parse_add_rule+0x10/0x10 [ 394.339085][T11840] ? ima_measure_raw_policy+0x55/0x70 [ 394.339112][T11840] ima_write_policy+0x307/0x4b0 [ 394.339150][T11840] ? __pfx_ima_write_policy+0x10/0x10 [ 394.339199][T11840] ? __pfx_ima_write_policy+0x10/0x10 [ 394.339232][T11840] vfs_write+0x296/0xba0 [ 394.339267][T11840] ? __pfx_vfs_write+0x10/0x10 [ 394.339294][T11840] ? __fget_files+0x2a/0x420 [ 394.339317][T11840] ? __fget_files+0x3a2/0x420 [ 394.339338][T11840] ? __fget_files+0x2a/0x420 [ 394.339366][T11840] ? fdget+0x1ac/0x250 [ 394.339398][T11840] ksys_write+0x150/0x270 [ 394.339426][T11840] ? __pfx_ksys_write+0x10/0x10 [ 394.339465][T11840] do_syscall_64+0x166/0x520 [ 394.339486][T11840] ? trace_irq_disable+0x3b/0x140 [ 394.339514][T11840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.339538][T11840] ? clear_bhb_loop+0x70/0xc0 [ 394.339567][T11840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.339590][T11840] RIP: 0033:0x7f8b4679e159 [ 394.339612][T11840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.339631][T11840] RSP: 002b:00007f8b476f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 394.339656][T11840] RAX: ffffffffffffffda RBX: 00007f8b46a25fa0 RCX: 00007f8b4679e159 [ 394.339674][T11840] RDX: 0000000000000022 RSI: 0000200000000100 RDI: 0000000000000003 [ 394.339689][T11840] RBP: 00007f8b476f0090 R08: 0000000000000000 R09: 0000000000000000 [ 394.339704][T11840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 394.339718][T11840] R13: 00007f8b46a26038 R14: 00007f8b46a25fa0 R15: 00007ffd68564f18 [ 394.339755][T11840] [ 394.339892][ T33] audit: type=1807 audit(1790394590.673:64): action=measure func=FILE_CHECK obj_type=u res=0 [ 394.340116][ T33] audit: type=1802 audit(1790394590.673:65): pid=11840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1433" res=0 errno=0 [ 394.340339][T11838] ima: policy update failed [ 394.340479][ T33] audit: type=1802 audit(1790394590.673:66): pid=11838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1433" res=0 errno=0 [ 394.404461][ T5611] usb 6-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 394.453209][ T5611] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.453419][ T5611] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 394.453600][ T5611] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.795617][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 394.795703][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 394.813684][ T10] usb 2-1: USB disconnect, device number 122 [ 394.953390][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1436'. [ 395.367100][T11866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1439'. [ 395.367143][T11866] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1439'. [ 395.367161][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1439'. [ 395.641695][ T5611] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 395.735156][T11882] jffs2: notice: (11882) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 395.773635][ T5611] usb 2-1: device descriptor read/64, error -71 [ 395.843461][T11887] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1442'. [ 395.979775][T11894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.980605][T11894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.011178][ T5611] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 396.141119][ T5611] usb 2-1: device descriptor read/64, error -71 [ 396.201324][ T10] usb 6-1: USB disconnect, device number 32 [ 396.252499][ T5611] usb usb2-port1: attempt power cycle [ 396.465131][T11906] ecryptfs_get_tree: kern_path() failed [ 396.479118][T11906] Reading sb failed; rc = [-2] [ 396.591788][ T5611] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 396.611808][ T5611] usb 2-1: device descriptor read/8, error -71 [ 396.625899][ T1725] block nbd2: Possible stuck request ffff888027ea0000: control (read@0,4096B). Runtime 150 seconds [ 396.850964][ T5611] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 396.872359][ T5611] usb 2-1: device descriptor read/8, error -71 [ 396.982850][ T5611] usb usb2-port1: unable to enumerate USB device [ 397.159684][T11933] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1452'. [ 397.184294][T11931] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1452'. [ 397.184560][T11931] FAULT_INJECTION: forcing a failure. [ 397.184560][T11931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.184588][T11931] CPU: 0 UID: 0 PID: 11931 Comm: syz.3.1452 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.184617][T11931] Tainted: [L]=SOFTLOCKUP [ 397.184625][T11931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.184638][T11931] Call Trace: [ 397.184647][T11931] [ 397.184657][T11931] dump_stack_lvl+0xe8/0x150 [ 397.184689][T11931] should_fail_ex+0x3eb/0x540 [ 397.184740][T11931] _copy_to_user+0x31/0xb0 [ 397.184768][T11931] simple_read_from_buffer+0xe1/0x170 [ 397.184798][T11931] proc_fail_nth_read+0x1bb/0x230 [ 397.184830][T11931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 397.184861][T11931] ? rw_verify_area+0x24a/0x4c0 [ 397.184888][T11931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 397.184914][T11931] vfs_read+0x213/0xa80 [ 397.184945][T11931] ? __pfx___mutex_lock+0x10/0x10 [ 397.184968][T11931] ? __pfx_vfs_read+0x10/0x10 [ 397.184994][T11931] ? __fget_files+0x2a/0x420 [ 397.185016][T11931] ? __fget_files+0x3a2/0x420 [ 397.185037][T11931] ? __fget_files+0x2a/0x420 [ 397.185064][T11931] ? fdget+0x1ac/0x250 [ 397.185094][T11931] ksys_read+0x150/0x270 [ 397.185122][T11931] ? __pfx_ksys_read+0x10/0x10 [ 397.185158][T11931] do_syscall_64+0x166/0x520 [ 397.185179][T11931] ? trace_irq_disable+0x3b/0x140 [ 397.185206][T11931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.185231][T11931] ? clear_bhb_loop+0x70/0xc0 [ 397.185259][T11931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.185282][T11931] RIP: 0033:0x7f8b4675e98e [ 397.185303][T11931] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 397.185322][T11931] RSP: 002b:00007f8b476effe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 397.185346][T11931] RAX: ffffffffffffffda RBX: 00007f8b476f06c0 RCX: 00007f8b4675e98e [ 397.185363][T11931] RDX: 000000000000000f RSI: 00007f8b476f00a0 RDI: 0000000000000004 [ 397.185378][T11931] RBP: 00007f8b476f0090 R08: 0000000000000000 R09: 0000000000000000 [ 397.185392][T11931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.185406][T11931] R13: 00007f8b46a26038 R14: 00007f8b46a25fa0 R15: 00007ffd68564f18 [ 397.185441][T11931] [ 397.620957][ T10] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 397.772270][ T10] usb 6-1: New USB device found: idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 397.773912][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.795994][ T10] usb 6-1: config 0 descriptor?? [ 397.818946][ T10] pwc: Samsung MPC-C10 USB webcam detected. [ 398.043474][ T10] pwc: send_video_command error -71 [ 398.043501][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 398.043628][ T10] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 398.053413][ T10] usb 6-1: USB disconnect, device number 33 [ 398.431334][ T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 398.581758][ T9] usb 4-1: New USB device found: idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 398.582438][ T9] usb 4-1: config 0 has no interfaces? [ 398.586578][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.586606][ T9] usb 4-1: Product: syz [ 398.586623][ T9] usb 4-1: Manufacturer: syz [ 398.586640][ T9] usb 4-1: SerialNumber: syz [ 398.664983][ T9] usb 4-1: config 0 descriptor?? [ 398.759733][T11960] FAULT_INJECTION: forcing a failure. [ 398.759733][T11960] name failslab, interval 1, probability 0, space 0, times 0 [ 398.759768][T11960] CPU: 0 UID: 0 PID: 11960 Comm: syz.1.1456 Tainted: G L syzkaller #0 PREEMPT(full) [ 398.759799][T11960] Tainted: [L]=SOFTLOCKUP [ 398.759809][T11960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.759823][T11960] Call Trace: [ 398.759832][T11960] [ 398.759842][T11960] dump_stack_lvl+0xe8/0x150 [ 398.759876][T11960] should_fail_ex+0x3eb/0x540 [ 398.759915][T11960] should_failslab+0xa8/0x100 [ 398.759948][T11960] __kmalloc_noprof+0xf9/0x710 [ 398.759981][T11960] ? dma_fence_is_signaled+0x64/0x350 [ 398.760009][T11960] ? __dma_fence_unwrap_merge+0x6be/0xdd0 [ 398.760033][T11960] ? __dma_fence_unwrap_merge+0x6be/0xdd0 [ 398.760067][T11960] __dma_fence_unwrap_merge+0x6be/0xdd0 [ 398.760105][T11960] sync_file_ioctl+0xe77/0x1160 [ 398.760146][T11960] ? __pfx_sync_file_ioctl+0x10/0x10 [ 398.760216][T11960] ? bpf_lsm_file_ioctl+0x9/0x20 [ 398.760246][T11960] ? __pfx_sync_file_ioctl+0x10/0x10 [ 398.760278][T11960] __se_sys_ioctl+0xfc/0x170 [ 398.760310][T11960] do_syscall_64+0x166/0x520 [ 398.760331][T11960] ? trace_irq_disable+0x3b/0x140 [ 398.760357][T11960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.760380][T11960] ? clear_bhb_loop+0x70/0xc0 [ 398.760407][T11960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.760430][T11960] RIP: 0033:0x7f6d4399e159 [ 398.760451][T11960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.760471][T11960] RSP: 002b:00007f6d447f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 398.760495][T11960] RAX: ffffffffffffffda RBX: 00007f6d43c25fa0 RCX: 00007f6d4399e159 [ 398.760512][T11960] RDX: 00002000000001c0 RSI: 00000000c0303e03 RDI: 0000000000000007 [ 398.760527][T11960] RBP: 00007f6d447f3090 R08: 0000000000000000 R09: 0000000000000000 [ 398.760543][T11960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.760556][T11960] R13: 00007f6d43c26038 R14: 00007f6d43c25fa0 R15: 00007fffa43e2e78 [ 398.760595][T11960] [ 398.946714][ T10] usb 4-1: USB disconnect, device number 10 [ 399.443732][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 399.483968][T11970] lo speed is unknown, defaulting to 1000 [ 399.594898][ T10] usb 4-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 399.597681][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.597734][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 399.597781][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.907608][T11986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.908189][T11986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.130864][ T5719] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 400.261073][ T5719] usb 2-1: device descriptor read/64, error -71 [ 400.308784][T11996] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 400.403000][T12000] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1462'. [ 400.408129][T11996] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1462'. [ 400.501305][ T5719] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 400.633257][ T5719] usb 2-1: device descriptor read/64, error -71 [ 400.704458][T12006] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1463'. [ 400.741576][ T5719] usb usb2-port1: attempt power cycle [ 400.816854][T12009] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1464'. [ 400.816898][T12009] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1464'. [ 400.816915][T12009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1464'. [ 400.841876][T12009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.843115][T12009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.997543][T12013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.081365][ T5719] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 401.105289][ T5719] usb 2-1: device descriptor read/8, error -71 [ 401.306824][ T5696] usb 4-1: USB disconnect, device number 11 [ 401.351860][ T5719] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 401.372546][ T5719] usb 2-1: device descriptor read/8, error -71 [ 401.482646][ T5719] usb usb2-port1: unable to enumerate USB device [ 401.605182][T12035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.607795][T12035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.724970][T12038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1470'. [ 401.739120][T12035] lo speed is unknown, defaulting to 1000 [ 401.941735][ T5719] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 402.071197][ T5719] usb 6-1: device descriptor read/64, error -71 [ 402.310970][ T5719] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 402.440946][ T5719] usb 6-1: device descriptor read/64, error -71 [ 402.562247][ T5719] usb usb6-port1: attempt power cycle [ 402.582107][T12049] tmpfs: Bad value for 'nr_inodes' [ 402.646788][T12051] FAULT_INJECTION: forcing a failure. [ 402.646788][T12051] name failslab, interval 1, probability 0, space 0, times 0 [ 402.646816][T12051] CPU: 0 UID: 0 PID: 12051 Comm: syz.0.1475 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.646837][T12051] Tainted: [L]=SOFTLOCKUP [ 402.646843][T12051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 402.646854][T12051] Call Trace: [ 402.646861][T12051] [ 402.646868][T12051] dump_stack_lvl+0xe8/0x150 [ 402.646893][T12051] should_fail_ex+0x3eb/0x540 [ 402.646921][T12051] should_failslab+0xa8/0x100 [ 402.646942][T12051] ? ptlock_alloc+0x20/0x70 [ 402.646964][T12051] kmem_cache_alloc_noprof+0x9c/0x600 [ 402.646991][T12051] ? ptlock_alloc+0x20/0x70 [ 402.647020][T12051] ptlock_alloc+0x20/0x70 [ 402.647042][T12051] pte_alloc_one+0x7a/0x370 [ 402.647061][T12051] __pte_alloc+0x25/0x1a0 [ 402.647080][T12051] do_pte_missing+0x2ddb/0x3570 [ 402.647109][T12051] handle_mm_fault+0x1a53/0x3750 [ 402.647141][T12051] ? handle_mm_fault+0xf1/0x3750 [ 402.647171][T12051] ? __pfx_handle_mm_fault+0x10/0x10 [ 402.647205][T12051] ? __lock_acquire+0x747/0x2de0 [ 402.647225][T12051] ? lock_mm_and_find_vma+0xa7/0x340 [ 402.647251][T12051] do_user_addr_fault+0x7f6/0x1480 [ 402.647288][T12051] exc_page_fault+0x6a/0xc0 [ 402.647314][T12051] asm_exc_page_fault+0x26/0x30 [ 402.647330][T12051] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 402.647351][T12051] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 78 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 402.647365][T12051] RSP: 0018:ffffc9000dbf7c68 EFLAGS: 00050202 [ 402.647381][T12051] RAX: 000004003d090000 RBX: 0000000000000028 RCX: 0000000000000028 [ 402.647392][T12051] RDX: 0000000000000000 RSI: ffffc9000dbf7ce0 RDI: 0000200000000a80 [ 402.647403][T12051] RBP: ffffc9000dbf7d90 R08: ffffc9000dbf7d07 R09: 1ffff92001b7efa0 [ 402.647416][T12051] R10: dffffc0000000000 R11: fffff52001b7efa1 R12: 0000200000000aa8 [ 402.647428][T12051] R13: 00007ffffffff000 R14: ffffc9000dbf7ce0 R15: 0000200000000a80 [ 402.647452][T12051] _copy_to_user+0x8a/0xb0 [ 402.647472][T12051] semctl_info+0x2fe/0x4e0 [ 402.647496][T12051] ? __pfx_semctl_info+0x10/0x10 [ 402.647519][T12051] ? __mutex_unlock_slowpath+0x731/0x900 [ 402.647543][T12051] __se_sys_semctl+0x2ce/0x3e0 [ 402.647564][T12051] ? __pfx___se_sys_semctl+0x10/0x10 [ 402.647590][T12051] ? __pfx_ksys_write+0x10/0x10 [ 402.647616][T12051] do_syscall_64+0x166/0x520 [ 402.647637][T12051] ? trace_irq_disable+0x3b/0x140 [ 402.647657][T12051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.647673][T12051] ? clear_bhb_loop+0x70/0xc0 [ 402.647693][T12051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.647709][T12051] RIP: 0033:0x7f927919e159 [ 402.647722][T12051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.647735][T12051] RSP: 002b:00007f927a0ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 402.647750][T12051] RAX: ffffffffffffffda RBX: 00007f9279425fa0 RCX: 00007f927919e159 [ 402.647762][T12051] RDX: 0000000000000013 RSI: 0000000000000003 RDI: 0000000000000000 [ 402.647772][T12051] RBP: 00007f927a0ee090 R08: 0000000000000000 R09: 0000000000000000 [ 402.647782][T12051] R10: 0000200000000a80 R11: 0000000000000246 R12: 0000000000000001 [ 402.647793][T12051] R13: 00007f9279426038 R14: 00007f9279425fa0 R15: 00007fffe2ffe098 [ 402.647817][T12051] [ 402.988531][ T5719] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 403.017051][ T5719] usb 6-1: device descriptor read/8, error -71 [ 403.243015][T12059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1479'. [ 403.243057][T12059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1479'. [ 403.243074][T12059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1479'. [ 403.278691][ T5719] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 403.303000][T12059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.303645][T12059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.304037][ T5719] usb 6-1: device descriptor read/8, error -71 [ 403.337438][T12060] tipc: MTU too low for tipc bearer [ 403.353300][T12058] lo speed is unknown, defaulting to 1000 [ 403.412214][ T5719] usb usb6-port1: unable to enumerate USB device [ 403.471018][ T5611] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 403.621740][ T5611] usb 4-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=1.00 [ 403.623298][ T5611] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 403.623332][ T5611] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 403.623356][ T5611] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 403.623398][ T5611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.630105][T12056] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 403.689107][ T5611] cyberjack 4-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 403.705942][ T5611] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 403.849262][T12056] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 403.888343][ T10] usb 4-1: USB disconnect, device number 12 [ 403.948850][T12064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.949652][T12064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.949911][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 403.958791][ T10] cyberjack 4-1:1.0: device disconnected [ 404.024780][T12064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.025149][T12064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.334229][T12073] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 404.604646][ T5611] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 404.744103][T12079] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 404.755181][ T5611] usb 2-1: New USB device found: idVendor=1223, idProduct=3f07, bcdDevice=0.00 [ 404.771438][ T5611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.771541][ T5611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.771605][ T5611] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 404.771741][ T5611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.853116][ T5611] usb 2-1: config 0 descriptor?? [ 404.973115][T12085] tmpfs: Bad value for 'nr_inodes' [ 405.011418][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 405.116113][ T5611] usbhid 2-1:0.0: can't add hid device: -71 [ 405.116226][ T5611] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 405.138780][ T5611] usb 2-1: USB disconnect, device number 5 [ 405.161588][ T10] usb 4-1: New USB device found: idVendor=1223, idProduct=3f07, bcdDevice=0.00 [ 405.162644][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.162678][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.162704][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 405.162749][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.211661][ T10] usb 4-1: config 0 descriptor?? [ 405.433277][ T33] audit: type=1326 audit(1790394601.773:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12092 comm="syz.5.1487" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f92b9e159 code=0x0 [ 405.435071][T12079] FAULT_INJECTION: forcing a failure. [ 405.435071][T12079] name failslab, interval 1, probability 0, space 0, times 0 [ 405.435104][T12079] CPU: 1 UID: 0 PID: 12079 Comm: syz.3.1484 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.435135][T12079] Tainted: [L]=SOFTLOCKUP [ 405.435145][T12079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 405.435159][T12079] Call Trace: [ 405.435169][T12079] [ 405.435179][T12079] dump_stack_lvl+0xe8/0x150 [ 405.435214][T12079] should_fail_ex+0x3eb/0x540 [ 405.435254][T12079] should_failslab+0xa8/0x100 [ 405.435287][T12079] __kmalloc_noprof+0xf9/0x710 [ 405.435310][T12079] ? rcu_is_watching+0x16/0xb0 [ 405.435340][T12079] ? tomoyo_realpath_from_path+0xef/0x640 [ 405.435363][T12079] ? tomoyo_realpath_from_path+0xef/0x640 [ 405.435393][T12079] tomoyo_realpath_from_path+0xef/0x640 [ 405.435426][T12079] ? tomoyo_path_number_perm+0x219/0x5f0 [ 405.435459][T12079] tomoyo_path_number_perm+0x246/0x5f0 [ 405.435493][T12079] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 405.435522][T12079] ? __lock_acquire+0x747/0x2de0 [ 405.435589][T12079] ? __fget_files+0x2a/0x420 [ 405.435615][T12079] ? __fget_files+0x2a/0x420 [ 405.435638][T12079] ? __fget_files+0x2a/0x420 [ 405.435666][T12079] security_file_ioctl+0xc3/0x2a0 [ 405.435698][T12079] __se_sys_ioctl+0x47/0x170 [ 405.435731][T12079] do_syscall_64+0x166/0x520 [ 405.435753][T12079] ? trace_irq_disable+0x3b/0x140 [ 405.435780][T12079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.435803][T12079] ? clear_bhb_loop+0x70/0xc0 [ 405.435831][T12079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.435854][T12079] RIP: 0033:0x7f8b4679e159 [ 405.435883][T12079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.435903][T12079] RSP: 002b:00007f8b476f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.435928][T12079] RAX: ffffffffffffffda RBX: 00007f8b46a25fa0 RCX: 00007f8b4679e159 [ 405.435945][T12079] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 405.435959][T12079] RBP: 00007f8b476f0090 R08: 0000000000000000 R09: 0000000000000000 [ 405.435974][T12079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.435989][T12079] R13: 00007f8b46a26038 R14: 00007f8b46a25fa0 R15: 00007ffd68564f18 [ 405.436029][T12079] [ 405.436050][T12079] ERROR: Out of memory at tomoyo_realpath_from_path. [ 405.630338][T12099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.645097][T12099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.729080][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 405.729414][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 405.761556][T12099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.767135][T12099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.768713][ T10] usb 4-1: USB disconnect, device number 13 [ 405.946832][T12103] kvm: pic: non byte write [ 406.100323][T12108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1489'. [ 406.100370][T12108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1489'. [ 406.100388][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1489'. [ 406.101208][ T5689] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 406.246700][T12099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.259688][ T5689] usb 6-1: New USB device found: idVendor=1223, idProduct=3f07, bcdDevice=0.00 [ 406.271359][ T5689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.271397][ T5689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.271423][ T5689] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 406.271468][ T5689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.273321][T12099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.289398][ T5689] usb 6-1: config 0 descriptor?? [ 406.339911][T12099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.345146][T12099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.409828][ T5611] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 406.551309][ T5611] usb 2-1: device descriptor read/64, error -71 [ 406.790934][ T5611] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 406.861334][ T34] INFO: task syz.2.768:8556 blocked for more than 143 seconds. [ 406.861365][ T34] Tainted: G L syzkaller #0 [ 406.861379][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 406.861391][ T34] task:syz.2.768 state:D stack:25608 pid:8556 tgid:8556 ppid:5605 task_flags:0x400040 flags:0x00080002 [ 406.861456][ T34] Call Trace: [ 406.861465][ T34] [ 406.861479][ T34] __schedule+0x1b47/0x5c60 [ 406.861545][ T34] ? __pfx___schedule+0x10/0x10 [ 406.861590][ T34] ? schedule+0x90/0x2b0 [ 406.861625][ T34] schedule+0x164/0x2b0 [ 406.861661][ T34] schedule_preempt_disabled+0x13/0x30 [ 406.861695][ T34] __mutex_lock+0x7c4/0x15a0 [ 406.861723][ T34] ? __mutex_lock+0x5cd/0x15a0 [ 406.861750][ T34] ? bdev_release+0x1b8/0x690 [ 406.861782][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 406.861804][ T34] ? __asan_memset+0x22/0x50 [ 406.861828][ T34] ? __fsnotify_parent+0x267/0x620 [ 406.861867][ T34] ? __pfx___fsnotify_parent+0x10/0x10 [ 406.861898][ T34] bdev_release+0x1b8/0x690 [ 406.861935][ T34] ? __pfx_blkdev_release+0x10/0x10 [ 406.861968][ T34] blkdev_release+0x15/0x20 [ 406.861997][ T34] __fput+0x413/0xa50 [ 406.862040][ T34] fput_close_sync+0x11f/0x240 [ 406.862075][ T34] ? __pfx_fput_close_sync+0x10/0x10 [ 406.862121][ T34] filp_close_sync+0x6e/0xa0 [ 406.862244][ T34] __se_sys_close_range+0xa77/0xef0 [ 406.862292][ T34] ? __pfx___se_sys_close_range+0x10/0x10 [ 406.862330][ T34] do_syscall_64+0x166/0x520 [ 406.862352][ T34] ? trace_irq_disable+0x3b/0x140 [ 406.862379][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.862405][ T34] ? clear_bhb_loop+0x70/0xc0 [ 406.862434][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.862459][ T34] RIP: 0033:0x7fd52cf9e159 [ 406.862479][ T34] RSP: 002b:00007ffc6f0ebe08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 406.862504][ T34] RAX: ffffffffffffffda RBX: 00007fd52d227da0 RCX: 00007fd52cf9e159 [ 406.862522][ T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 406.862538][ T34] RBP: 00007fd52d227da0 R08: 0000000000000006 R09: 0000000000000000 [ 406.862554][ T34] R10: 00007fd52d227cb0 R11: 0000000000000246 R12: 000000000003c3d1 [ 406.862571][ T34] R13: 00007fd52d22609c R14: 000000000003c143 R15: 00007fd52d226090 [ 406.862606][ T34] [ 406.862651][ T34] [ 406.862651][ T34] Showing all locks held in the system: [ 406.862666][ T34] locks held by khungtaskd/34: 1, last CPU#1: [ 406.862684][ T34] #0: ffffffff8f15c2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 406.862765][ T34] locks held by kworker/0:3/5611: 6, on CPU#0: [ 406.862782][ T34] #0: ffff8880232f2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 406.862847][ T34] #1: ffffc90003b2fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 406.862910][ T34] #2: ffff888029fad1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 406.862966][ T34] #3: ffff888029fe8568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 406.863022][ T34] #4: ffff888029daee60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 406.863077][ T34] #5: ffffffff8ff1a148 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14d/0x1810 [ 406.863144][ T34] locks held by kworker/0:4/5689: 5, on CPU#0: [ 406.863168][ T34] #0: ffff8880232f2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 406.863237][ T34] #1: ffffc9000418fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 406.863377][ T34] #2: ffff88802a1c31d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 406.863431][ T34] #3: ffff888067f361d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 406.863491][ T34] #4: ffff888034c2d1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 406.863553][ T34] locks held by kworker/1:6/5705: 3, on CPU#1: [ 406.863570][ T34] #0: ffff88813fe0a148 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 406.863630][ T34] #1: ffffc9000428fc40 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 406.863692][ T34] #2: ffff88802a0d11d8 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x120 [ 406.863758][ T34] locks held by udevd/6749: 1, on CPU#1: [ 406.863774][ T34] #0: ffff888027da0350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 406.863835][ T34] locks held by udevd/7458: 2, last CPU#0: [ 406.863852][ T34] #0: ffff88802add52d8 (kn->active#5){++++}-{0:0}, at: kernfs_fop_open+0x5c/0xd20 [ 406.863923][ T34] #1: ffffffff8f15c2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 406.863981][ T34] locks held by getty/8376: 2, on CPU#1: [ 406.863997][ T34] #0: ffff8880327710a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 406.864062][ T34] #1: ffffc90004a992e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 406.864124][ T34] locks held by syz.2.768/8556: 1, on CPU#1: [ 406.864140][ T34] #0: ffff888027da0350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1b8/0x690 [ 406.864205][ T34] locks held by syz.0.1481/12069: 2, last CPU#0: [ 406.864223][ T34] #0: ffff888029bb2460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0xb41/0x10f0 [ 406.864298][ T34] #1: ffff888072416a20 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 406.864366][ T34] locks held by cmp/12126: 1, last CPU#0: [ 406.864797][ T34] #0: ffffffff8f8f5b38 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 406.864869][ T34] [ 406.864875][ T34] ============================================= [ 406.864875][ T34] [ 406.864887][ T34] NMI backtrace for cpu 1 [ 406.864906][ T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 406.864936][ T34] Tainted: [L]=SOFTLOCKUP [ 406.864945][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 406.864959][ T34] Call Trace: [ 406.864968][ T34] [ 406.864977][ T34] dump_stack_lvl+0xe8/0x150 [ 406.865007][ T34] nmi_cpu_backtrace+0x274/0x2d0 [ 406.865038][ T34] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 406.865073][ T34] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 406.865107][ T34] sys_info+0x135/0x170 [ 406.865131][ T34] watchdog+0x1058/0x10d0 [ 406.865166][ T34] ? watchdog+0x209/0x10d0 [ 406.865200][ T34] kthread+0x38b/0x480 [ 406.865223][ T34] ? __pfx_watchdog+0x10/0x10 [ 406.865254][ T34] ? __pfx_kthread+0x10/0x10 [ 406.865277][ T34] ret_from_fork+0x514/0xb70 [ 406.865309][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 406.865339][ T34] ? __switch_to+0xc78/0x1410 [ 406.865368][ T34] ? __pfx_kthread+0x10/0x10 [ 406.865392][ T34] ret_from_fork_asm+0x1a/0x30 [ 406.865436][ T34] [ 406.865444][ T34] Sending NMI from CPU 1 to CPUs 0: [ 406.865487][ C0] NMI backtrace for cpu 0 [ 406.865508][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.865535][ C0] Tainted: [L]=SOFTLOCKUP [ 406.865543][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 406.865556][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 406.865577][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x80 [ 406.865599][ C0] Code: 89 fb e8 23 00 00 00 48 8b 3d 24 1c d9 0c 48 89 de 5b e9 b3 30 66 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0d b8 1b 16 12 65 48 8b 15 b8 1b [ 406.865616][ C0] RSP: 0018:ffffc90000007f18 EFLAGS: 00000002 [ 406.865631][ C0] RAX: ffffffff81b58218 RBX: ffff8880b84286c0 RCX: 8000000000000100 [ 406.865646][ C0] RDX: ffff88801dee3e80 RSI: 0000000000000001 RDI: 0000000000000000 [ 406.865659][ C0] RBP: 0000000000000001 R08: 0000000000000100 R09: 0000000000000004 [ 406.865671][ C0] R10: dffffc0000000000 R11: fffff52000000fd0 R12: 0000000000000005 [ 406.865685][ C0] R13: 0000000000000008 R14: 0000000000000287 R15: dffffc0000000000 [ 406.865698][ C0] FS: 0000000000000000(0000) GS:ffff88812462e000(0000) knlGS:0000000000000000 [ 406.865714][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.865726][ C0] CR2: 00007fb6a10faeb8 CR3: 0000000059642000 CR4: 00000000003526f0 [ 406.865752][ C0] Call Trace: [ 406.865759][ C0] [ 406.865766][ C0] hrtimer_run_softirq+0xc5/0x2e0 [ 406.865789][ C0] handle_softirqs+0x223/0x840 [ 406.865813][ C0] ? do_softirq+0x77/0xd0 [ 406.865837][ C0] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 406.865857][ C0] do_softirq+0x77/0xd0 [ 406.865878][ C0] [ 406.865885][ C0] [ 406.865892][ C0] __local_bh_enable_ip+0x100/0x140 [ 406.865916][ C0] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 406.865941][ C0] wg_packet_tx_worker+0x1c3/0x7d0 [ 406.865960][ C0] ? rcu_is_watching+0x16/0xb0 [ 406.865985][ C0] ? process_scheduled_works+0x97a/0x1630 [ 406.866011][ C0] process_scheduled_works+0xc3d/0x1630 [ 406.866052][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 406.866080][ C0] ? assign_work+0x3cf/0x5d0 [ 406.866106][ C0] worker_thread+0xa47/0xfb0 [ 406.866146][ C0] kthread+0x38b/0x480 [ 406.866164][ C0] ? __pfx_worker_thread+0x10/0x10 [ 406.866188][ C0] ? __pfx_kthread+0x10/0x10 [ 406.866207][ C0] ret_from_fork+0x514/0xb70 [ 406.866235][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 406.866261][ C0] ? __switch_to+0xc78/0x1410 [ 406.866285][ C0] ? __pfx_kthread+0x10/0x10 [ 406.866303][ C0] ret_from_fork_asm+0x1a/0x30 [ 406.866337][ C0] [ 406.866660][ T34] Kernel panic - not syncing: hung_task: blocked tasks [ 407.792211][ T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 407.803017][ T34] Tainted: [L]=SOFTLOCKUP [ 407.807376][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 407.817473][ T34] Call Trace: [ 407.820789][ T34] [ 407.823760][ T34] vpanic+0x26f/0x710 [ 407.827807][ T34] panic+0xc5/0xd0 [ 407.831588][ T34] ? __pfx_panic+0x10/0x10 [ 407.836053][ T34] ? preempt_schedule_common+0x7f/0xd0 [ 407.841588][ T34] ? preempt_schedule_thunk+0x16/0x40 [ 407.847010][ T34] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 407.853257][ T34] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 407.859826][ T34] watchdog+0x10cc/0x10d0 [ 407.864218][ T34] ? watchdog+0x209/0x10d0 [ 407.868697][ T34] kthread+0x38b/0x480 [ 407.872811][ T34] ? __pfx_watchdog+0x10/0x10 [ 407.877528][ T34] ? __pfx_kthread+0x10/0x10 [ 407.882201][ T34] ret_from_fork+0x514/0xb70 [ 407.886868][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 407.892036][ T34] ? __switch_to+0xc78/0x1410 [ 407.896767][ T34] ? __pfx_kthread+0x10/0x10 [ 407.901406][ T34] ret_from_fork_asm+0x1a/0x30 [ 407.906333][ T34] [ 407.909582][ T34] Kernel Offset: disabled [ 407.913921][ T34] Rebooting in 86400 seconds..