last executing test programs: 5m35.246658827s ago: executing program 2 (id=157): r0 = socket$inet(0x2, 0xa, 0x90f) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000740)={{0x2, 0x4e27, @broadcast}, {0x306, @broadcast}, 0x48, {0x2, 0x8104, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x1002}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000001000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) write(r1, &(0x7f0000000a40)="ffffffffffff00000000000188ca4f4000281000000000000000010000010100000100"/54, 0x36) r4 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000ac0)=0xe2, 0x4) syz_usb_connect(0x3, 0x3c, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ff009440f00a116700000102000109022a00010100c0000904000003ff00000003240307058102000200070502020002000705830305"], 0x0) mprotect(&(0x7f0000f33000/0x2000)=nil, 0x2000, 0x2000004) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000800), 0x4) syz_kvm_add_vcpu$x86(r7, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) get_mempolicy(0x0, &(0x7f0000000a80), 0x1, &(0x7f0000fec000/0x14000)=nil, 0x0) syz_kvm_add_vcpu$x86(r7, &(0x7f00000007c0)={0x0, &(0x7f0000000100)=[@nested_amd_set_intercept={0x181, 0x30, {0x1, 0x1000, 0x1}}, @nested_load_syzos={0x136, 0x110, {0x0, 0x4, [@nested_set_state_pages={0x140, 0x28, {0x0, 0x14, @arbitrary=0x3}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x95, 0x1, 0xa0, 0x2}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_load_syzos={0x136, 0x20, {0x3, 0x2}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_stgi={0x17e, 0x10}, @uexit={0x0, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0x5}}]}}, @wr_crn={0x67, 0x20, {0x3, 0x81}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro32=0x440c, 0x4, 0x8, 0x5}}, @wrmsr={0x65, 0x20, {0x660, 0x9}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x7e, 0x7ff, 0x8, 0x800100000000}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @wr_crn={0x67, 0x20, {0x8, 0x4}}, @out_dx={0x6a, 0x28, {0xd6a5, 0x0, 0x8}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_load_code={0x12e, 0x68, {0x0, "66baa00066b80b0066efc44239cfd266b89e000f00d80f222266ba2100ec470f09418095fbffffffdd26420f79e266bad00466b8000066ef48b8b9d2b45156f8a1780f23c80f21f835040070000f23f8"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control_nat=0x6008, 0x1, 0x5}}, @rdmsr={0x66, 0x18, {0x21d}}, @out_dx={0x6a, 0x28, {0xe00, 0x2, 0xd}}, @wr_drn={0x68, 0x20, {0x4, 0x77162ba3}}, @nested_load_code={0x12e, 0x4e, {0x2, "b9230200000f32450f01c4360f2151420f063e0f01f8c4e34d6d21c5450ff6a39538a245660fc774d700c4423d9a7f0066b833008ed8"}}, @nested_load_code={0x12e, 0x72, {0x0, "64dfa600500000c4c22905790036640fc76f003e660f38809be3842a0e450f35b9370a0000b81d060000ba000000000f302e0f22c5c744240038bce0eec7442402955f0000c7442406000000000f0114240f0966ba6100b042ee"}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_load_code={0x12e, 0x5b, {0x2, "3e660f388002f0420fc109c4817e6f0d0000010065f3410fc774f142410fc731656666430f38825f00660f388192dbd30000c4817c50c5670fc72d698b0000420fd102"}}, @wrmsr={0x65, 0x20, {0x889, 0x80000000}}, @nested_set_state_pages={0x140, 0x28, {0x0, 0x28, @gpa=0x60000}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host64=0x2c01, 0x8, 0x0, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x29, 0x2}}, @nested_amd_stgi={0x17e, 0x10}, @wr_drn={0x68, 0x20, {0x7, 0x9}}, @code={0xa, 0x65, {"660f388085000001000f23f60f30c74424004c000000c74424020c000000ff2c24c744240000000000c744240246f20000c7442406000000000f01142447dc2c3366bad004ecc44131f8e9c4c23d8c24c90f01cb"}}], 0x608}) 5m33.637851725s ago: executing program 2 (id=165): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000a40902120001000000000904000000ef"], 0x0) syz_usb_connect$midi(0x1, 0x9b, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x1, 0x1, 0x6, 0x50, 0xc, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x30, 0x3, [@ms_header={0x7, 0x24, 0x1, 0xff, 0x7}], [{{0x9, 0x5, 0x6, 0x10, 0x200, 0xb, 0x8, 0x7, {0xe, 0x25, 0x1, 0xa, "240787a3bb75e096f2da"}}}, {{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x2, 0x50, {0x10, 0x25, 0x1, 0xc, "e55fca08b65ed9f1a4e017e3"}}}, {{0x9, 0x5, 0x7, 0x3, 0x40, 0xff, 0x8, 0x81, {0x4}}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0xda, 0x7, 0x2, {0x11, 0x25, 0x1, 0xd, "8e4fce1b01e5050fcaa4a16c98"}}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x6, 0x1, 0x6, {0x10, 0x25, 0x1, 0xc, "989adb4351a3047e5adb69f0"}}}]}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x3, 0xf, 0x3, 0x20, 0xff}, 0x3b, &(0x7f00000001c0)={0x5, 0xf, 0x3b, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x80, 0xfffe}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "7963477119427116091ed8a5c04e7656"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc6, 0x9c, 0x8, 0x0, 0x40}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x6}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x415}}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)="a9", 0x1}], 0x1, 0x0, 0x0, 0x20004801}], 0x1, 0x40000) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000405e04e1000000000000010902240001000000060904000802030000000921100002012218000905810308"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000980)={0x24, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1"], 0x0}, 0x0) syz_usb_connect$uac3(0x1, 0x104, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x250, 0x4, 0x81, 0x6, 0x40, 0xff}, 0x145, &(0x7f0000000400)={0x5, 0xf, 0x145, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x923a, 0xf000, 0x9, [0xff3ff0, 0xc0c0]}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x407f34f, 0x8700, 0x3, [0xcf, 0xff00c0, 0x30, 0x0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4c, 0x3, 0xb, 0x800, 0x2}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x5, 0xf000, 0x1, [0xff3f0f, 0xff1f80, 0x0, 0xff3f00, 0xffc000, 0xf]}, @generic={0xde, 0x10, 0xb, "889d6a353078851d9164bc09d033fcda35be245161d737fe346d572ed479bb20dba7929744fb23ecbefc48cc9a3867bee9d8c6fee06227dad1d0163168a9f4d4a90fa27993d455c488ccf6b9999c2ec5c55ce26d7a9a75b5b5f9207decfd269ae7587b7c187c29826f0be73df3e40f438d097804c8d84a94bdab1c9f7a167742ac2024f19e95adcd4cca20705c2e5d55c935b5f8e73e1bcc44a94a1ea6e03015f8757311eb21c7e3600ad68be899e5fba0e4cb341f849469a329a46209ebc45e8a421d15c149349caddeb2e1f9024fe937fcdc840b4378d91f014c"}]}, 0x3, [{0xb4, &(0x7f0000000580)=@string={0xb4, 0x3, "961d820793e3516b7080dc49a0159292e6dac2993d4bdb46ec0868d748dcd32156531374b607b10986b18d6ebee6fa01b41e8518278ad5612dcf49ba2f0a6441c3fef83aa7717b39ecef42a7a04e35c9f7c4a712481430d11071f2e6303ec050b6a9b5469c62ea0bdf260ddd96c67ab24b1925b050ce5ebe86e0bfe78316a2aa4ee0a5be077ef2f528b8302d62bf44ae9be95946e2325281d1bbcadeb99cf35f95d1dde6cb772ea477a5bac4bd0d7928e7e7"}}, {0xfd, &(0x7f0000000640)=@string={0xfd, 0x3, "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"}}, {0x18, &(0x7f0000000740)=@string={0x18, 0x3, "febba90d63b892b789ca607ad320e000f3c3ad207344"}}]}) 5m32.421884026s ago: executing program 2 (id=166): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x1f00000000000000) 5m32.338164142s ago: executing program 2 (id=168): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000280), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000300)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/kernel\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/devcoredump/disabled\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)="b1", 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) 5m32.28917554s ago: executing program 2 (id=169): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0xf5}}], 0x1, 0x4001c00) 5m31.828688296s ago: executing program 2 (id=174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000ec0)={0x24, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="00220108000078"], 0x0}, 0x0) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000500)={0x14, &(0x7f00000003c0)={0x0, 0xe, 0x74, {0x74, 0x11, "beaf082c2564dee6cfef7ee622530d2be9564e0abbf9475a7f327c4d35edf299c214d36c8dbb9bde596028800b4ee6583afd41bcba6d5a2a5350395d2fca0d5b06846d6f2cbb9198c17c7b7c6c3d33c1c1991451f6c4331d29d5ddd7f10de6c949c5d3e5d4c4d1acf980a328dbbe853f951e"}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 5m31.675465134s ago: executing program 32 (id=174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000ec0)={0x24, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="00220108000078"], 0x0}, 0x0) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000500)={0x14, &(0x7f00000003c0)={0x0, 0xe, 0x74, {0x74, 0x11, "beaf082c2564dee6cfef7ee622530d2be9564e0abbf9475a7f327c4d35edf299c214d36c8dbb9bde596028800b4ee6583afd41bcba6d5a2a5350395d2fca0d5b06846d6f2cbb9198c17c7b7c6c3d33c1c1991451f6c4331d29d5ddd7f10de6c949c5d3e5d4c4d1acf980a328dbbe853f951e"}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 5m20.332432235s ago: executing program 3 (id=233): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000300)={&(0x7f0000000340)="dcef58b7f29c1f7c93d183044a97d93a7a", 0x11}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000400)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000480)={0x10000000000000cf, 0x0, [{}]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = eventfd2(0xe5c, 0x80000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r6) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000ffffffff1b0000002000018008000400", @ANYRES32, @ANYBLOB="140002007465616d30"], 0x34}}, 0x0) r8 = memfd_secret(0x0) ioctl$UI_SET_KEYBIT(r8, 0x40045565, 0xd5) r9 = socket$rds(0x15, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x2714, 0x0, &(0x7f0000000200)) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./security/ima/policy\x00', 0x1, 0x0) writev(r10, &(0x7f0000000280)=[{0x0, 0x23}, {&(0x7f00000002c0)="84", 0x1}], 0x2) ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f00000001c0)={r5, 0xa8a4, 0x2, r5}) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_TDX_INIT_MEM_REGION(r1, 0xc008aeba, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, 0x3000, 0x88f}}) close_range(r11, 0xffffffffffffffff, 0x0) 5m20.088576573s ago: executing program 3 (id=236): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x8) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x6) landlock_restrict_self(r1, 0x1e) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x1c) landlock_restrict_self(r2, 0x2) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0xa) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0xf) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000180)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r2, 0x2) landlock_restrict_self(r3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x76, 0x3004, 0x1000000}) r4 = syz_clone(0x1100011, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f00000000c0)={0x1, 0x1}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0xa000000c, 0x0) ptrace$cont(0x7, 0x0, 0x5, 0xa) ptrace(0x10, r4) 5m19.95802771s ago: executing program 3 (id=237): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt(r1, 0x1000, 0x5209929b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x0) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000003c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0xd1, 0xffffffffffffffff}, {0xfffbffff, 0x0, 0x8001}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) setfsuid(0xee01) setfsuid(0xee01) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000080)=@v1={0x1000000, [{0x90000000, 0x2}]}, 0xc, 0x2) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000000)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000200)="f7", 0x1}], 0x1}}], 0x1, 0x0) 5m17.302901669s ago: executing program 3 (id=247): socket(0x18, 0x80000, 0x1) socket$key(0xf, 0x3, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') socket$tipc(0x1e, 0x2, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5202) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000001c0)={'multiq3\x00', [0x100, 0x4, 0x0, 0x2, 0x44, 0xf3, 0x79, 0x4, 0x80008, 0x5, 0x2, 0x64, 0xea, 0x1, 0x80006, 0xfd, 0x6, 0x3, 0x3, 0x7fffffff, 0xb740, 0xca9d, 0xdc, 0x20001e58, 0x8, 0xf39c, 0x8003, 0x1539b804, 0x5, 0x1, 0x2]}) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x4010012, r1, 0x0) 5m17.198127806s ago: executing program 3 (id=248): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000240), 0x12) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r1, 0x4018aee3, &(0x7f00000000c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0x5, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100), 0x10000, 0x400000) ioctl$SG_BLKTRACESTART(r3, 0x1274, 0x0) 5m17.09112682s ago: executing program 3 (id=249): socket$inet_sctp(0x2, 0x1, 0x84) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000a00)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./cifs\x00', 0x1ff) mount(&(0x7f0000000cc0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='\\\\127.0.0.1\\share\x00', &(0x7f0000000d40)='cifs\x00', 0x0, &(0x7f0000000d80)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') (async) syz_emit_vhci(&(0x7f0000000e00)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x1, 0xc9, 0x0, 0x8}}}, 0x9) r1 = accept(0xffffffffffffffff, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000e40)="00000078fe534d4240000100160000c00100010001000000000000000100000000000000000000000000000001000000000000000000000000000000000000000000000009", 0x45, 0x0, 0x0, 0x0) 5m2.065362369s ago: executing program 33 (id=249): socket$inet_sctp(0x2, 0x1, 0x84) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000a00)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./cifs\x00', 0x1ff) mount(&(0x7f0000000cc0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='\\\\127.0.0.1\\share\x00', &(0x7f0000000d40)='cifs\x00', 0x0, &(0x7f0000000d80)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') (async) syz_emit_vhci(&(0x7f0000000e00)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x1, 0xc9, 0x0, 0x8}}}, 0x9) r1 = accept(0xffffffffffffffff, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000e40)="00000078fe534d4240000100160000c00100010001000000000000000100000000000000000000000000000001000000000000000000000000000000000000000000000009", 0x45, 0x0, 0x0, 0x0) 4m37.586335842s ago: executing program 0 (id=488): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc038563c, &(0x7f0000000580)={0x0, 0x1, "119f04499489f733dcaa932034d61433a5ba43d2103eb3221503dc2984dea6e2", 0x0, 0xfffffffffffffffc, 0x0, 0xff, 0x0, 0x0, 0x3, 0x0, [0x0, 0x800000]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000d00)='./proc\x00', &(0x7f0000000d40)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./proc/thread-self/fail-nth\x00', 0x802, 0x165) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f00000000c0)={0x18, r2, 0x0, 0x280000000}) write(r1, &(0x7f0000000dc0)='10', 0x2) syz_open_dev$video4linux(&(0x7f0000000e00), 0x2, 0x80002) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) r3 = socket$kcm(0x1e, 0x1, 0x0) recvmsg(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x10042, 0x20010002}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000200)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000b40)={0x0, @reserved}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x169802, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000980)=@assoc_value, &(0x7f00000009c0)=0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) r10 = syz_open_dev$dvb_frontend(&(0x7f0000000280), 0x8000, 0x101000) ioctl$FE_GET_PROPERTY(r10, 0x80106f53, &(0x7f0000000500)={0x39, &(0x7f00000002c0)=[{0x31, '\x00', @data=0xffffffff, 0x4}, {0x43, '\x00', @buffer={"9c7210dab21705543fddb9d0cc3ceb7a340527b5ba27457c96df878a690465bf", 0x20}, 0x8}, {0x33, '\x00', @st={0x4, [{0x2, @svalue=0x1}, {0x2, @uvalue=0x3e7}, {0x3, @uvalue=0x4000000000}, {0x2, @uvalue=0x3}]}, 0x4}, {0x21, '\x00', @st={0x4, [{0x3, @uvalue=0x3}, {0x2, @svalue=0xc}, {0x2, @svalue=0xba}, {0x3, @uvalue=0x4}]}, 0x5f}, {0x3a, '\x00', @data=0x7, 0x5}, {0x30, '\x00', @st={0x4, [{0x3, @uvalue=0xafa}, {0x3, @uvalue=0x4}, {0x1, @uvalue=0x8889}, {0x1, @uvalue=0x54}]}, 0x7}, {0x16, '\x00', @st={0x4, [{0x3, @svalue=0x7}, {0x2, @svalue=0x1}, {0x1, @svalue=0x1}, {0x2, @svalue=0x9}]}, 0x95e0}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x4000, 0x0) 4m37.430945876s ago: executing program 0 (id=490): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000140), 0x8000, 0x40400) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/bridge0/bridge/nf_call_arptables\x00', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000004c0)=ANY=[@ANYRESOCT], 0x30) 4m37.206467543s ago: executing program 0 (id=491): socket$kcm(0x29, 0x2, 0x0) 4m37.149254072s ago: executing program 0 (id=493): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x1}) (fail_nth: 4) 4m37.1022534s ago: executing program 0 (id=494): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x32, 0xfa, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) r2 = socket$inet6(0xa, 0x3, 0x7) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000480)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x4c1d, 0x7, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x0) write(r1, &(0x7f0000000540)='2', 0x1) syz_clone(0x100211, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 4m37.001995186s ago: executing program 0 (id=495): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f0000000080)={0x1, 0x1, 0x1, 0xfffe}) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000d00)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000000d00)={0x2020}, 0x2020) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000002dc0)=[@text16={0x10, &(0x7f0000002d40)="260fc76cd02e0f01cfba4000b80781ef66b9800000c00f326635001000000f300f380696ba001e0fa266b8003000000f23c00f21f8663503000f000f23f8cf0f07", 0x41}], 0x1, 0x0, &(0x7f0000002e00), 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) r3 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x02Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\xff\xec\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xf3H\xf9\x7f\x102\x83\x9b\xdaR\a\xfeU\xc8\xc3\xa76\xe7%\x0eyx\x15\n\xe3l\x98\xcf\xbaU6\xf9\xb5S21Bk\xad\xe60P\xa2c)\xca\xc4`_\x15\xc4\t\xaa\xc4e\x12\x103\xf9\xc4\xba\x86[N\xb27BD\xab`\xae\x1c&\xdb\ns\x8c\x92\xe0\xa52\b\x8bj\x01X\xfa\xf2\x8b\xe1\xf9\n\xc4Ux\xa9\x1b\xc6\xad\xb4\xf0\xba+\x91/&\x81\xba\xa5\x8emr2, 0x2}) ioctl$XFS_IOC_BULKSTAT(r4, 0x8040587f, &(0x7f0000000500)={{0x46d692ca, 0x1, 0x3, 0x2, 0x4}, &(0x7f0000000380)=[{}, {}]}) write$P9_RWSTAT(r4, &(0x7f0000000580)={0x7, 0x7f, 0x1}, 0x7) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0016800800b6008848", @ANYRES8], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) fcntl$notify(r1, 0x402, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@acquire={0x174, 0x17, 0x1, 0x0, 0xfffffffc, {{@in=@loopback, 0x4d6}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x8000, 0x0, 0x8000, 0x0, 0x0, 0x80, 0x0, 0x0, 0xee00}, {{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4}, {}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x2}, 0xfffffff9, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x4d2, 0x33}, 0x2, @in=@empty, 0x0, 0x1, 0x0, 0x5, 0x800, 0x401, 0x1}]}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000)="2616fc040cb209e66152bdc1c99b47b35a80090b0e42b7a9219d5cc67757e9fc", 0x20, r1}, 0x68) 4m21.876813943s ago: executing program 34 (id=495): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f0000000080)={0x1, 0x1, 0x1, 0xfffe}) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000d00)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000000d00)={0x2020}, 0x2020) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000002dc0)=[@text16={0x10, &(0x7f0000002d40)="260fc76cd02e0f01cfba4000b80781ef66b9800000c00f326635001000000f300f380696ba001e0fa266b8003000000f23c00f21f8663503000f000f23f8cf0f07", 0x41}], 0x1, 0x0, &(0x7f0000002e00), 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) r3 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x02Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\xff\xec\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xf3H\xf9\x7f\x102\x83\x9b\xdaR\a\xfeU\xc8\xc3\xa76\xe7%\x0eyx\x15\n\xe3l\x98\xcf\xbaU6\xf9\xb5S21Bk\xad\xe60P\xa2c)\xca\xc4`_\x15\xc4\t\xaa\xc4e\x12\x103\xf9\xc4\xba\x86[N\xb27BD\xab`\xae\x1c&\xdb\ns\x8c\x92\xe0\xa52\b\x8bj\x01X\xfa\xf2\x8b\xe1\xf9\n\xc4Ux\xa9\x1b\xc6\xad\xb4\xf0\xba+\x91/&\x81\xba\xa5\x8em0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, &(0x7f0000000200)) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="0000aa9d0000", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x1, 0x4, 0x87) 4m20.136008022s ago: executing program 4 (id=633): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000580)=0x8000000ffffffff) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x0) shutdown(r2, 0x1) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x24, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str=':*b\xc3{\x00'}, @typed={0x8, 0x19, 0x0, 0x0, @fd}]}, 0x24}], 0x1, 0x0, 0x0, 0x44040}, 0x880) socket$igmp(0x2, 0x3, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f0000000800)={&(0x7f0000000840)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000900)="897a20ccf6041d6d", 0xffd8}], 0x1, 0x0, 0x0, 0x900}, 0x60) socket(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101002, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x800000, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000002c0)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000300)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4706, 0x1, 0x3, 0x1e0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x40, 0x0, 0x2a8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x82, 0x80000, 0x2, 0x1ec, 0x0, r8}}], 0x1, 0x0, 0x0) exit(0x0) close_range(r4, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000600), 0x0, 0x0) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000640)={0x53, 0xfffffffffffffffb, 0x6, 0x68, @scatter={0x0, 0x0, 0x0}, &(0x7f00000006c0)="1e3513000000", 0x0, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) read(r9, &(0x7f0000000700)=""/201, 0xc9) 4m19.126970323s ago: executing program 4 (id=640): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1a8, r1, 0x1, 0x70bd23, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x179, 0x1, 'n\x01l\xb1\xd7jt/l\xdc\x82{V \xb82cap\x00\x83\xf2\xa6L6\xeb;\xe6\xd9\xa7\x1bsj\xb0$\x96\xda\xf5/\x9ct\xdb@\x82-\x97.O\xd6w\xce\xe5\xe1Ik^\xee\xa9=\x98\xdf\xf0S\x96\x0fr2\x9c\xdc\a\x90\xcc\x198\xf3\r\x96\x8fM*F\xa2Y7\xc3\xfd\x1br.<\x1b\xbd)^\x9f\xaar\xaexpW%\xf7L\xc9\x1d:\xb1\xc5f\xe3K{\xa3\xb1\xd5N\xf4Yj\x9fz\x03w\xd3\x8f\x11\xefC\x8d\xa9\xfe\"T=4\x89\xe6S6G)\xef\x8c\x0fm\xab\xa4\x15\x0f\x84\x15\xdf\x87\xc8\x82$\x18.~\xdf8\x92\xf5\xd9c\xd8.\xceyZ\xed\xfb\xd22\x86\xc7Q\xd5\x99\xf3Mbs\xb4n\x8d#\x04\x99qBF\r\x0f\xa9!<\xben\n\x802l\x05I\x1e\xbf=\xfd\x1a\xff\xaa=R\x19\xc6L\xb3./9\xb8W\n\xd1s\xba\xc5\xf8\xda(\xfe\x9cty\xb0:PE\xee\xd2\x176\x10L\xf9\x9a\x1d\xe8\xcb\x93\xc9\x8d\x1e\xc5<\xc8m\xa0.`x\x88\x18\xe9#\xf4\x0e\xb5t\x825\x94\x1b\xa0\x11a\x00\xab\xbfL\x88\x0e\xfb\xc3\xb1\xab\x04&K\xcf-\x19\xe4\x00\x94\xa8\xc6\xe1L\xb82\x1ed\xa6W\xed|\xafM7\xab\xc9R\xef\xcfgp\x94>]fk\xe9\x15\x93K\xdeUDUdQ\xb7\xc4\x19\xd3\xda\xcd\x91;C`\x90\'\x9b\x80\xf0\xb7\xc7\x1eb\x0e\xe2\xa2\xb9\x8b\x8d\x98\xca\x96\xe1\xbf]\x8b\xc7\xaa\xbb6\xa2f\xd8'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x169) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000100)={0x1, 0xffffffffffffffff, 0x40800}, &(0x7f0000000180)=0xc) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000340)=0xfe78) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f00000002c0)=r5, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000001800)={r5, 0x806, 0x1002, "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"/4098}, 0x100a) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000300)={r5, 0xffff, 0x6, [0xe, 0x5, 0x6, 0x5, 0x7ff, 0x7]}, 0x14) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000740)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f00000005c0), 0x2, 0x40102) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r9, 0xc0045543, &(0x7f0000000600)=0xfdfdfffd) mkdirat(0xffffffffffffff9c, &(0x7f0000001680)='./security\x00', 0x1ff) syz_emit_vhci(&(0x7f00000016c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x401}}}, 0x7) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r12, 0x1, &(0x7f00000006c0)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x8, 0x1, r11, 0x0, 0x0, 0x8000}]) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r10, 0x84, 0x20, 0x0, &(0x7f00000017c0)) ioctl$VIDIOC_QUERYMENU(r8, 0xc008561c, 0x0) 4m18.093416657s ago: executing program 4 (id=648): syz_open_dev$I2C(&(0x7f0000000540), 0x1, 0xae00) (async) r0 = syz_open_dev$I2C(&(0x7f0000000540), 0x1, 0xae00) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000580)={&(0x7f00000005c0)=[{0xf79, 0x4001, 0x0, 0x0}], 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000600)={0x0, 0x3, {0x2, @usage=0x2, 0x0, 0x8000, 0x80000001, 0x5, 0x1, 0x81, 0x414, @usage=0xf783, 0x40, 0x7fffffff, [0xfffffffffffff912, 0x7, 0x2, 0x4, 0x1, 0x175b]}, {0xa, @struct={0x1, 0x5}, 0x0, 0x100000001, 0x1, 0x232, 0xd, 0x3, 0x26, @usage=0x7, 0x0, 0x2, [0xfffffffffffff5fa, 0xd, 0x1, 0x3, 0x9, 0x4]}, {0x4, @usage=0x8001, 0x0, 0xa9, 0x3, 0x5, 0x8, 0xd, 0x40a, @usage=0x4, 0x0, 0x1, [0x9, 0x10000, 0x1ff, 0x5, 0x7, 0x2]}, {0x2, 0xffffffffffffffeb, 0x101}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000a00)={r1, 0x8, 0x3, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$XFS_IOC_DIOINFO(r2, 0x800c581e, &(0x7f0000000e00)) (async) ioctl$XFS_IOC_DIOINFO(r2, 0x800c581e, &(0x7f0000000e00)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0xfffffffffffffdf4}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000001c0)={0x7e, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x5, 0x800, 0x4}}]}) semget$private(0x0, 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)='27', 0x2) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) read$FUSE(r4, &(0x7f00000025c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r5, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000002580), 0x80200, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f00000003c0)={r3, &(0x7f0000000180)='/dev/kvm\x00', 0x440002, &(0x7f0000000240)={@_ha_fsid={[0x7, 0x1]}, {0x9c8, 0x7, 0x50, 0xffff}}, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffc00}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f00000003c0)={r3, &(0x7f0000000180)='/dev/kvm\x00', 0x440002, &(0x7f0000000240)={@_ha_fsid={[0x7, 0x1]}, {0x9c8, 0x7, 0x50, 0xffff}}, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffc00}) syz_usb_connect(0x6, 0xaf, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x56, 0x60, 0xd3, 0x20, 0x4e8, 0x6615, 0x38db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x1, 0x5, 0x5, 0x70, 0x80, "", [{{0x9, 0x4, 0xe1, 0x8, 0x2, 0x8f, 0xfa, 0x3a, 0xff, [], [{{0x9, 0x5, 0x6, 0xc, 0x40, 0x0, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x5}, @generic={0x72, 0x1, "1472d2d10b6a177efce5224e18efa563b7f9c880d1fc6dc9f735b02541e0b2d9f681a9869c3b2c68081348bc54e2e35fcba58d100cfed628e0b2ba31397e4902b39362cb99b4a9a10e4daccb13ad792836e49f34c6b429717d8af95b4673ea0a3ed552e8e9687735d1834741c60249d7"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x9, 0x1, 0x3e}}]}}]}}]}}, 0x0) (async) syz_usb_connect(0x6, 0xaf, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x56, 0x60, 0xd3, 0x20, 0x4e8, 0x6615, 0x38db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x1, 0x5, 0x5, 0x70, 0x80, "", [{{0x9, 0x4, 0xe1, 0x8, 0x2, 0x8f, 0xfa, 0x3a, 0xff, [], [{{0x9, 0x5, 0x6, 0xc, 0x40, 0x0, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x5}, @generic={0x72, 0x1, "1472d2d10b6a177efce5224e18efa563b7f9c880d1fc6dc9f735b02541e0b2d9f681a9869c3b2c68081348bc54e2e35fcba58d100cfed628e0b2ba31397e4902b39362cb99b4a9a10e4daccb13ad792836e49f34c6b429717d8af95b4673ea0a3ed552e8e9687735d1834741c60249d7"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x9, 0x1, 0x3e}}]}}]}}]}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x2, &(0x7f0000000180)) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x40000000788, 0x5, 0x185, 0x4, 0xfffffffffffffffe, 0xee, 0x80000001, 0x4, 0x4, 0x2, 0xb, 0x200000000000000f, 0x6, 0x0, 0x2], 0x8000000, 0x80c10}) ioctl$KVM_SMI(r7, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4m16.8591846s ago: executing program 4 (id=659): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x180) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="a000000024000105010000000000000000000000020000000000ffffffffffff000000000b00010074617072696f00007000028056000100010000000000000000000000000001000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000c80080001000000000008000200dc050000", 0xa0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='7', 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020605000000001e00000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640002000000800134000000000050005000a00000012000300686173683a6e6574"], 0x60}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f00000004c0)=0x9, 0x8, 0x0) 4m1.613792439s ago: executing program 35 (id=659): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x180) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="a000000024000105010000000000000000000000020000000000ffffffffffff000000000b00010074617072696f00007000028056000100010000000000000000000000000001000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000c80080001000000000008000200dc050000", 0xa0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='7', 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020605000000001e00000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640002000000800134000000000050005000a00000012000300686173683a6e6574"], 0x60}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f00000004c0)=0x9, 0x8, 0x0) 1m23.750539959s ago: executing program 1 (id=2251): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0x800000e, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001080, 0x80000002, 0x1, 0x200008, 0x40, 0x3, 0x3ff, 0x40000005, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x8000, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0xd8, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x9, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x0, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffe7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x8, 0x6, 0x6, 0x200007, 0x8], [0x2002, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0xc, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x7ffe, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x1, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x81, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0xc84, 0xc, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x6, 0xf, 0x21, 0x200, 0xa, 0x106, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x8000, 0x10, 0x1002, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x9, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x40, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0xfe, 0x6, 0x1f0}}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x107, 0x500, 0x100, 0x1, 0x4000}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bridge0\x00'}) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000001c0)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) (async) sendmmsg$inet6(r3, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)='A', 0x1}], 0x1}}], 0x1, 0x4000801) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) (async) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x526, 0x400) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='\x00', &(0x7f00000000c0)='-[+,\x00', 0x0) 1m23.727804203s ago: executing program 1 (id=2252): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x1ff) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000000006, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x4, 0x5, 0x3011, 0x5, 0x8, 0x1, 0x0, 0x7}}) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000500)='xfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) linkat(r1, &(0x7f0000000200)='./sys\x00', r1, 0x0, 0x400) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000000c0)) write(r1, &(0x7f00000005c0)='1:', 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0xf, 0x200, 0x6, 0x8, 0x131, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000180)={0xffffff81, 0x9, {r2}, {0xee00}, 0xfffffffffffffff0, 0x8}) 1m23.697695224s ago: executing program 1 (id=2253): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x20241, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x80c4, 0xb, 0x0, 0x10000, 0x8}, 0x30, 0x2) landlock_restrict_self(r1, 0x12) landlock_restrict_self(r1, 0x1) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, 0x0) 1m23.606538881s ago: executing program 1 (id=2254): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/sda\x00', 0x2, 0x142) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000100)={0x5, 0x2}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x2) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x89901) move_mount(r2, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mysys\x00', 0x1ff) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./mysys\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000500)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000580)={0x18, 0x154a, 0x0, 0x3}) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000005c0)={0x9, 0x8, 0x1ff, 0x16eb5067, 0x1}) move_mount(r3, &(0x7f0000000340)='.\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x102) syz_clone3(&(0x7f0000000240)={0x1882000, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x80) 1m23.578007135s ago: executing program 1 (id=2255): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="20c81e0000004d61501d0100000000000000100000000000800700000000000038"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_create_resource$binfmt(&(0x7f0000000bc0)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f0000000c00), &(0x7f0000000c40), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f0000000c80), &(0x7f0000000cc0), 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r1, 0x2, 0x0) write(r3, &(0x7f0000000d00)="01010101", 0x4) close(r3) execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f0000000d40), &(0x7f0000000dc0), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x42, 0x0) close(r4) execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f0000000e40), &(0x7f0000000e80), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f0000000f00), &(0x7f0000000f40), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mkdir(&(0x7f0000000a00)='mnt\x00', 0x1ff) syz_emit_vhci(&(0x7f0000000a40)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_AUTH_ENABLE={{0xfe}, 0x8}}}, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./trace\x00', &(0x7f0000000b40)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./trace/set_event\x00', 0x2, 0x0) read$FUSE(r5, &(0x7f0000001040)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r6, 0xc138fd03, &(0x7f00000009c0)="0400000000000000000000003801000000000000000000fffffffffffffffe000000000000000fffff000000000000002e2e") syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="40830100000081"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12d41003000000406a05280040000102030109022d0001010900000301030103d109210600060122cc01090581014000030f07090502031000070600"], &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x5, 0x5, 0x3, 0x10, 0x7}, 0x3a, &(0x7f0000000180)={0x5, 0xf, 0x3a, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x22, 0xc, 0x9, 0xc, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "43063eb56051a1b9af8d8f6aa04767be"}, @generic={0x16, 0x10, 0x6, "96d07e190bb7f02e715dda2adeb85e92251554"}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x412}}, {0x98, &(0x7f00000002c0)=@string={0x98, 0x3, "961a99b6af0ae185af6ded5f2360ebebb3ef14728287a9f2b6358f85373ab1ae481d6ea34f00e1f42fcf0bed9d59d10bd08045901e6866e55d245081546e9e060c8e3cf0b0263d538f9942efb19d47feb6ce930b03a37b496e701745aabf63c5a9da5e44f01df8e7f7c54d31750d98691400f902c85e27d49c84d7638367fd5bea307ba96cb5d7d990e3d2da1bd959522a73be0fcdfc"}}]}) syz_usb_control_io$hid(r7, &(0x7f0000000640)={0x24, &(0x7f00000003c0)={0x20, 0x5, 0xeb, {0xeb, 0x21, "2e6dc1cbf7b5f08a47025981a5cd40de9768fc623640f9720f9527f2de60e43853383d3b11a0721febe2441665aa48ac2a7cfb85616c1ca5900b52996857c3acd027075af6e45f338ecaae6a80b26aa7b11ea234773be66bb54cf092910d796faf6898c819b6d55f9af501090806d9e70ec0b515549b7749a298d627b2ed957f18c2524327f6426f078a52d2d759603cf3c309208585b60fefa1b7193df8489d9512fc402e0c1b12fe0f9def0dd878b97186787287edf4e1ba0edecae0e273213a2885c7d6e935ed0217f0444bc777044454794b9bec1947bd5079960cb3248d5243e9befd03431856"}}, &(0x7f00000004c0)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "db8adba3d45fd5f044b06b40639234f83e19635fdc4f823731d4ee91fede2fc0b542a5240e5b24e76f16a9df7395bab98e33fc487f7eee7019b064ffe320a5bdcba96d16931bac5b3ff94704a65777a1d67581567482acf5713934a9787ffc37ae33554fd019d23a3912df56c5be3a9969e5d68716cf0dd82e7daebc8ba5f2e3af331f3cf70368601e94ecbf926089f245dabbd4c7041b60e697ff5f646cf73006a03609f1c4a002212028651d77e82b1b92468268db5a46fa63a6093b6dc948d9cd4d02ff5b648ef807c5ed231072"}}, &(0x7f00000005c0)={0x0, 0x22, 0x1a, {[@local=@item_4={0x3, 0x2, 0x2, "2ad87c82"}, @local=@item_4={0x3, 0x2, 0x7, "30bb40be"}, @local=@item_012={0x2, 0x2, 0x5, "a5fa"}, @local=@item_4={0x3, 0x2, 0x5, "1deb85d9"}, @local=@item_4={0x3, 0x2, 0x1, "f84bbb1a"}, @global=@item_012={0x2, 0x1, 0x5, "51f0"}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0xdc, 0xb, 0x1, {0x22, 0x4a6}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000680)={0x40, 0x15, 0x97, "68c3e01a5a99c8ca6bdbd7bef3eea2a6846a3852cfb8cc8785ba709f2b38a141e66729640140e3e56ae0c49a63dbd9b1dda1171bc8cec3c4811539d86b8c7b77014ed2ea4d0f064b3d12d5ae6906d71c036b5c7808a3db7f097730d6f80ad19f7056b75a2970370577a351f8ccc4baddd7c83d63e8a8ff35afebd6cf9e2953d3cdb0e9b6df1640b1b0af969bcd7b43b78836e6cb18123a"}, &(0x7f0000000740)={0x0, 0xa, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000007c0)={0x20, 0x1, 0xc9, "98210b413c00ff2e6fae60db29a34e5b69a69fc2ca105634dac3ef21216b8a2b8056187ac10c65cb628ed18689192cb4e58cad49516b14380bf308c7ab70bd4308ff760e1838107f89f6722b4e95f083f8fa7dd3b3d934d6c81e922ddf5875975ef7d3a11b7b7067d026fde3abad9e185ddde02103024e6aceca2c81283f9828c0fd7df3c51d03d32376baa4464479e63972b7d4fcdfa2ca24911b5602af723faf3eda6e6189cf93251bae7449cd50d8be28b7af3df6f65326d2808919fe772464e2d4c70e1d884d99"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x6}}) 1m23.346783736s ago: executing program 1 (id=2256): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="d80000001e0081064e81f782db44b904000e080006007c09e8fe11a10a0015c00200142603600e120800080024000000a80009001100014003001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}], 0x1}, 0x24000000) 1m23.068889385s ago: executing program 36 (id=2256): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="d80000001e0081064e81f782db44b904000e080006007c09e8fe11a10a0015c00200142603600e120800080024000000a80009001100014003001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}], 0x1}, 0x24000000) 4.770514373s ago: executing program 6 (id=2781): bind$bt_hci(0xffffffffffffffff, &(0x7f00000003c0)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000400)="14000000070000000000000000", 0xd) 4.714923944s ago: executing program 6 (id=2782): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='27', 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 4.541622019s ago: executing program 6 (id=2784): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 4.228709656s ago: executing program 6 (id=2787): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e13"], 0x16) 3.502273585s ago: executing program 6 (id=2793): syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff00000007058303"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000480)=ANY=[], 0xfdef) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000003bc0)={{0x1, 0x1, 0x18, r1, {0x2}}, './proc/sys/net/sctp/udp_port\x00'}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000003c00)={0xde, 0x3ff, 0xe46, 0x0, 0xb, "ff7471b923a3e0697d88d1ea1f0ca5e8b51fbd"}) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000003740), 0x10) listen(r3, 0x5) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000003780), 0x10) capset(&(0x7f0000000480)={0x20080522}, &(0x7f0000003c40)={0x20000a, 0x200003, 0x2, 0x4, 0x7, 0xfffffffd}) mkdirat(0xffffffffffffff9c, &(0x7f0000003900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000003940)='./proc\x00', &(0x7f0000003980)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000039c0)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) write(r5, &(0x7f0000003a00)='9', 0x1) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f00000037c0)={0x1, 0x79e}, 0x8) sendmmsg(r4, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000003880)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/133, 0x85}, {&(0x7f0000000500)=""/238, 0xee}, {&(0x7f0000000600)=""/64, 0x40}, {&(0x7f0000000640)=""/4092, 0xffc}], 0x4}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001680)=""/4103, 0x1007}, {&(0x7f00000026c0)=""/4092, 0xffc}, {&(0x7f00000036c0)=""/83, 0x53}], 0x3}, 0x900000}], 0x7, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000003a40)={0x2, 0x2, 0x1, 0x1, 0xfd, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x10, &(0x7f0000003ac0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000003b00)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000003b40)=@assoc_value={r7, 0x9}, &(0x7f0000003b80)=0x8) mount$9p_fd(0x0, 0x0, 0x0, 0x8401, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) 2.80297236s ago: executing program 8 (id=2804): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usbip_server_init(0x5) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000001c0)}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r2, r0, 0x0) 2.331150506s ago: executing program 7 (id=2807): ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x9000, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c81, 0x80000003) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000600)={0x4, 0x0, 0x0, 0x210, 0x138, 0x1, 0x0, 0x1200, 0x0, 0x0, @by_dev={r0}, [@multipath={0x0, 0x14d8, 0x0, 0xd8, 'multipath\x00', {'1 retain_attached_hw_handler', 0x20, '1 emc', 0x20, 0x1, 0x20, 0x32, [{0x20, 'historical-service-time 0', 0x20, 0x2, 0x20, '2', [{0x20, @ram={'/dev/ram', 0x1}, ' 1000 100'}, {0x20, @ram_num={'1:', 0x0}, ' 1 1'}]}]}}]}) 2.253967717s ago: executing program 7 (id=2808): r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) socket(0x2a, 0x2, 0x9) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f0000000240)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000340)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000440)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000540)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @auto=[0x31, 0x30, 0x34, 0x30, 0x30, 0x30, 0x5f, 0x39, 0x30, 0x62, 0x31, 0x30, 0x30, 0x30, 0x36, 0x34]}, &(0x7f0000000740)={0x0, "151122330e66778899aabbccddeeff00132233445566778899aabbccddeeff0011223344556677ff00112233445566770399aabbccddeeff00001b00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000007c0), &(0x7f0000000800)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000008c0), &(0x7f0000000900)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000940)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f0000000a00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000a40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000ac0), &(0x7f0000000b00)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x63, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x31, 0x30, 0x64, 0x30, 0x32, 0x61]}, &(0x7f0000000b40)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000bc0), &(0x7f0000000c00)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000c40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000cc0), &(0x7f0000000d00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000d40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000dc0), &(0x7f0000000e00)={'fscrypt:', @auto=[0x64, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x36, 0x30, 0x30, 0x37, 0x30, 0x33, 0x30, 0x30, 0x65]}, &(0x7f0000000e40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000ec0), &(0x7f0000000f00)={'fscrypt:', @auto=[0x65, 0x35, 0x31, 0x37, 0x38, 0x66, 0x65, 0x32, 0x39, 0x63, 0x66, 0x62, 0x9, 0x34, 0x38, 0x62]}, &(0x7f0000000f40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000fc0), &(0x7f0000001000)={'fscrypt:', @auto=[0x30, 0x39, 0x30, 0x30, 0x64, 0x66, 0x62, 0x30, 0x30, 0x32, 0x30, 0x65, 0x36, 0x30, 0x31, 0x30]}, &(0x7f0000001040)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @desc1}, &(0x7f0000001140)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f00000011c0), &(0x7f0000001200)={'syz', 0x2}, &(0x7f0000001240)='c', 0x1, r0) 2.253538334s ago: executing program 7 (id=2809): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$nbd(0xffffffffffffffff, &(0x7f0000000040)={0x1000000, 0x0, 0x0, 0x2, 0x200000, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/48}, 0x40) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, r1, 0x9, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x4000000}, 0x0) 2.232693967s ago: executing program 7 (id=2810): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)='27', 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 2.157660762s ago: executing program 7 (id=2811): mknodat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x60000000004, 0x1000000000, 0x5, 0x3d, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x2000000068ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{0xd000, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xe6ee2000, 0x3000, 0xc, 0x0, 0x8, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0xeee96000, 0xa, 0x0, 0x1, 0xa6, 0x9, 0x0, 0x8, 0xfe, 0x7, 0x4}, {0xf000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x8000000, 0x0, 0xb, 0x78, 0x5, 0x83, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x81a0002, 0x6000, 0xf, 0x0, 0x0, 0x5, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x41000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x114, 0xd, 0x0, 0x0, [0x80000005, 0x8, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.09911277s ago: executing program 8 (id=2812): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='27', 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x102, 0x0, 0x0, {0x7, 0x0, 0x2}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 2.014742951s ago: executing program 8 (id=2813): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000400)="14000000070000000000000000", 0xd) 1.917899812s ago: executing program 7 (id=2815): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000406d0499c200120102000109022200010100a032090400000103000000092110010001221f0007058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000a40)={0x2, &(0x7f0000000a80)=[{0xc, 0x2, 0x0, 0x1}, {0x6, 0x80, 0xdf, 0x10}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xcd, 0x82, 0x78, 0x40, 0xe41, 0x5057, 0x739f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0xc6, 0x0, 0x7, "", [{{0x9, 0x4, 0x45, 0x5, 0x0, 0x61, 0xe0, 0x12, 0x7f}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000000001010000000000000000000000000500f8ff0300000005e4648b000100070000000900020073797a4ac12efb0005000400000000b70c000300686173683a"], 0x44}, 0x1, 0x0, 0x0, 0x24040844}, 0x801) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x0, 0xf, 0x6a, {0x6a, 0x9, "d35515141109360d667894991bf761c75987188d6130f3bc189256b342571a146990a0d9c4bc8d6ccdd1b8580595bf0c82001d4d304a222628c254e506dba580a925d299f969792aba547608228c6c0673bc8136bf16e7b74fe7765ce701570c2c3d683adc0e1efa"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}, &(0x7f0000000240)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x8, 0x6, 0x6, "f3faa6b4", "c3345d2d"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0x9, 0x5, 0xd8, 0x4, 0x8}}}, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x40, 0x9, 0xee, "69372700e04b35ccfdb53eeee5a2fd7033f4dff9035f29f18f563b987acebe976060206d32bcfc58f72af872e21b090f1260d277efc95bb4d2852f4d654815ced2d8ef7a3cd33f31fb2408afb9bf339ad33e5268bc405f41bc8c86bfbb1c677cc1e2c2c53a45e2c3b1f689a7a03e0020f7afc97928722cd4db733660dd57516cff763759532594c34f9dc5333d696c7dc526ddcb156581418e0a6e10afd8ea91631e1cc0bffa0450406c17b54103b42a509f2a304ce23c3427a006b761bf7bddfde8a5a5452f9e72c316dedd3a06119bf27bd6711c213b7d56f4009c983adee60afefb0f36f365bcffa9acec202f"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0xe0, 0x40}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x2410}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000600)={0x40, 0xb, 0x2, "a373"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000680)={0x40, 0x13, 0x6}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, &(0x7f0000000700)={0x40, 0x19, 0x2, "d6cf"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x75}, &(0x7f0000000780)={0x40, 0x1c, 0x1}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0xbb}, &(0x7f0000000800)={0x40, 0x21, 0x1}}) 1.786008022s ago: executing program 8 (id=2816): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x52, &(0x7f0000000180)=0x27, 0x4) bind$inet6(r2, &(0x7f0000000640)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x44000, &(0x7f0000000680)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40018160, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x128}) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000100)={0x0, &(0x7f0000000880)=[@out_dx={0x6a, 0x28, {0x311c, 0x2, 0x8}}, @nested_load_syzos={0x136, 0x90, {0x2, 0x2, [@uexit={0x0, 0x18, 0x200}, @wrmsr={0x65, 0x20, {0x85c, 0x401}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0xba, 0x400, 0x4, 0x3ff}}]}}, @in_dx={0x69, 0x20, {0x5620, 0x3}}, @uexit={0x0, 0x18, 0x800000000000000}, @nested_amd_clgi={0x17f, 0x10}, @code={0xa, 0x80, {"c744240059000000c7442402136c17c5ff2c2466b86d000f00d8653e0f01c964f30f09c744240093803ce5c7442402a2c60000c7442406000000000f011424c744240000000000c74424021e000000c7442406000000000f011424660f38800866b80d010f00d0d0d866420f38811f"}}, @wr_drn={0x68, 0x20, {0x1, 0x9}}, @in_dx={0x69, 0x20, {0x9a50, 0x2}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @rdmsr={0x66, 0x18, {0x272}}, @nested_amd_stgi={0x17e, 0x10}, @out_dx={0x6a, 0x28, {0x4325, 0x6, 0x1}}, @code={0xa, 0x45, {"0f01c82e470f01df0f0964450fc73a3e0f35f30f09d9e936660f3882242a66baf80cb8989d1084ef66bafc0cb0e3ee66ba4300ec"}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x7, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0x25ec}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x91, 0x6, 0x4, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0xac, 0x2, 0x100000001, 0x1}}, @enable_nested={0x12c, 0x18}], 0x365}) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x11, 0x2, {0x4, 0x3, 0x3}}, 0x14) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000440)="a1a61c29b989995cb12a868890c6fac86dc50a5519cc53cf50006c13bec651b4502d6614e434918256181a469eda38f2795c13231563a7d53a9959911677456ab402619cfaf017923ea924d4523e8cbd54f60b1804de63dabf766e75efeea34fd07ddaf3d0daf6e2ef0817887744b133ab0d65c486f89902bcfcb51dcf6c855ed19492e5501f148ca7602aa10f3dca9c4d22e244b7a452ddba23dfc8", 0x9c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000004010902120001000000000904"], 0x0) munmap(&(0x7f0000000000/0x3000)=nil, 0x3000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000800)={{0x8, @rand_addr=0x64010102, 0x4e20, 0x2, 'wrr\x00', 0x1, 0x6, 0x46}, {@multicast2, 0x4e23, 0x5, 0x5, 0x10000, 0x67c}}, 0x44) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = add_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$update(0x2, r8, &(0x7f0000000580)="d5", 0x1) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x20000000) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x40000001, 0x4, 0x2, 0x6, 0x6, 0x2, 0x80}, {0x4, 0x258, 0x3, 0x9, 0x10000, 0x6, 0x2}]}) tee(r0, r1, 0xfffffffffffffffe, 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x8, 0x42, 0xb, 0x200000000000003, 0xceb, 0x4, 0x7, 0x10, 0x10003, 0xe, 0x1, 0xffffffffffff986a, 0x3, 0x6, 0x1], 0x0, 0x110b03}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 502.762739ms ago: executing program 5 (id=2818): r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) socket(0x2a, 0x2, 0x9) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f0000000240)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000340)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000440)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000540)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @auto=[0x31, 0x30, 0x34, 0x30, 0x30, 0x30, 0x5f, 0x39, 0x30, 0x62, 0x31, 0x30, 0x30, 0x30, 0x36, 0x34]}, &(0x7f0000000740)={0x0, "151122330e66778899aabbccddeeff00132233445566778899aabbccddeeff0011223344556677ff00112233445566770399aabbccddeeff00001b00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000007c0), &(0x7f0000000800)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000008c0), &(0x7f0000000900)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000940)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f0000000a00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000a40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000ac0), &(0x7f0000000b00)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x63, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x31, 0x30, 0x64, 0x30, 0x32, 0x61]}, &(0x7f0000000b40)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000bc0), &(0x7f0000000c00)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000c40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000cc0), &(0x7f0000000d00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000d40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000dc0), &(0x7f0000000e00)={'fscrypt:', @auto=[0x64, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x36, 0x30, 0x30, 0x37, 0x30, 0x33, 0x30, 0x30, 0x65]}, &(0x7f0000000e40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000ec0), &(0x7f0000000f00)={'fscrypt:', @auto=[0x65, 0x35, 0x31, 0x37, 0x38, 0x66, 0x65, 0x32, 0x39, 0x63, 0x66, 0x62, 0x9, 0x34, 0x38, 0x62]}, &(0x7f0000000f40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000fc0), &(0x7f0000001000)={'fscrypt:', @auto=[0x30, 0x39, 0x30, 0x30, 0x64, 0x66, 0x62, 0x30, 0x30, 0x32, 0x30, 0x65, 0x36, 0x30, 0x31, 0x30]}, &(0x7f0000001040)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @desc1}, &(0x7f0000001140)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f00000011c0), &(0x7f0000001200)={'syz', 0x2}, &(0x7f0000001240)='c', 0x1, r0) 502.466582ms ago: executing program 5 (id=2819): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) write$nbd(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, r1, 0x9, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x4000000}, 0x0) 430.524057ms ago: executing program 5 (id=2820): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)='27', 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 401.718481ms ago: executing program 8 (id=2821): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000002640), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002680)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000026c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r1, &(0x7f0000002700)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b03"], 0xfdef) write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='maps\x00') read$FUSE(r3, &(0x7f0000000580)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./sys/module/block2mtd/parameters/block2mtd\x00', &(0x7f0000000340)='sysv\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000440)="9bbf5461023b709072e176d4872d344f92037c08f229978a5fcad5a4cf0ff3ca457672211e34bc8e3e3d5a73900fe0424d515c71198c9147f9b35d9d4fce6151034b3cc75c8aca6952d0c41a46aaf645", 0x50}, {&(0x7f00000004c0)="5f71634668cc3f3f0401677be82bbb075d2e31c818f5d56c25d606108386ea570706f5284fbb74e2f25cd9aeeaa42f2e37b5b3b27f3e480b8c37f2db79fbe673026ac87f2ac04161d59ffdca35c7f9ed7b121844bea4be9fe5ef8fa0a5e452e887bfb28a", 0x64}], 0x2, 0x3, 0x9) write$md_sysfs(0xffffffffffffffff, &(0x7f0000000100)=@str='raid1', 0x5) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002780)='.\x00', 0x0, 0x140) openat$tun(0xffffffffffffff9c, &(0x7f0000002840), 0xc002, 0x0) fcntl$notify(r5, 0x402, 0x91ea6c12f182534) fcntl$setownex(r5, 0xf, &(0x7f00000027c0)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002800)='memory.events.local\x00', 0x275a, 0x0) openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) write$md_sysfs(0xffffffffffffffff, &(0x7f0000000200)=@str='512', 0x3) r6 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0) write$md_sysfs(r6, &(0x7f00000002c0)=@dev={'1:', 0x1}, 0x16) r7 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000000)={'/sys/block/md', @named={'_syz', 0x0, '1'}, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'slot\x00'}}, 0x1, 0x0) openat$md_new_array(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$md_sysfs(r7, &(0x7f00000003c0)=@str='1', 0x1) r8 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000025c0)={'/sys/block/md', @num=0x0, '/md/', @array='max_read_errors\x00'}, 0x2, 0x0) write$md_sysfs(r8, &(0x7f0000002600)=@dev={'1:', 0x1}, 0x16) openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000280)={'/sys/block/md', @named={'_syz', 0x0, '0'}, '/md/', @array='journal_mode\x00'}, 0x1, 0x0) 259.006824ms ago: executing program 6 (id=2822): syz_emit_vhci(0x0, 0x8) 257.974715ms ago: executing program 5 (id=2823): mknodat(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x60000000004, 0x1000000000, 0x5, 0x3d, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x2000000068ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{0xd000, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xe6ee2000, 0x3000, 0xc, 0x0, 0x8, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0xeee96000, 0xa, 0x0, 0x1, 0xa6, 0x9, 0x0, 0x8, 0xfe, 0x7, 0x4}, {0xf000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x8000000, 0x0, 0xb, 0x78, 0x5, 0x83, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x81a0002, 0x6000, 0xf, 0x0, 0x0, 0x5, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x41000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x114, 0xd, 0x0, 0x0, [0x80000005, 0x8, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 134.862105ms ago: executing program 5 (id=2824): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000400)="14000000070000000000000000", 0xd) 101.733455ms ago: executing program 5 (id=2825): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="2e00330020180600080211000000080211000001ffffffffffff64000002080008021100000000060101010101010000080057"], 0x54}, 0x1, 0x0, 0x0, 0x4018010}, 0x804) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000001900010029bd7000000000001d01090050000f80"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x804) syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) 0s ago: executing program 8 (id=2826): fstatfs(0xffffffffffffffff, 0x0) r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3) r1 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='level\x00'}, 0x1, 0x0) write$md_sysfs(r1, &(0x7f0000000100)=@str='raid1', 0x5) r2 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000300), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000580)={0x6, @win={{0x9, 0x8, 0x2, 0x8001}, 0x0, 0x1, 0x0, 0x3, 0x0, 0xe}}) write$md_sysfs(r2, &(0x7f0000000180)=@str='2', 0x1) r4 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000001c0)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x1, 0x0) write$md_sysfs(r4, &(0x7f0000000200)=@str='512', 0x3) r5 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0) write$md_sysfs(r5, &(0x7f00000002c0)=@dev={'1:', 0x1}, 0x16) openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000380)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r1, &(0x7f0000000280)=@num=0x1f, 0x14) r6 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000400)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r6, &(0x7f0000000440)=@str='active', 0x6) r7 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000000)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0) write$md_sysfs(r7, &(0x7f0000000540)=@dev={'1:', 0x0}, 0x16) kernel console output (not intermixed with test programs): slave device specified does not support setting the MAC address [ 383.268666][T14037] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 383.268683][T14037] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 383.556520][T14009] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 383.572617][T14009] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 383.585631][T14009] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 383.594515][T14009] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 383.603995][T14009] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 383.734539][T14043] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 383.817017][T14054] fuse: fd is not a fuse device [ 384.042552][ T5712] usb 6-1: USB disconnect, device number 38 [ 384.257215][ C1] net_ratelimit: 66 callbacks suppressed [ 384.341752][T14066] netlink: 'syz.7.2462': attribute type 21 has an invalid length. [ 384.341770][T14066] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2462'. [ 384.411169][ T45] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.411196][ T45] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.473847][T14066] netlink: 'syz.7.2462': attribute type 4 has an invalid length. [ 384.473863][T14066] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2462'. [ 384.481162][T14069] 0x000000000008-0x00000000000e : "" [ 384.543450][T14069] ftl_cs: FTL header corrupt! [ 384.774032][ T45] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.774058][ T45] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.885242][T14080] gretap0: entered promiscuous mode [ 384.971651][ T45] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.971677][ T45] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.016916][T14009] Bluetooth: hci2: unexpected event for opcode 0x2087 [ 385.095990][ T45] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.096015][ T45] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.136798][T14044] rxe_eth0 speed is unknown, defaulting to 1000 [ 385.349258][ T45] bridge_slave_1: left allmulticast mode [ 385.349277][ T45] bridge_slave_1: left promiscuous mode [ 385.349477][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.355648][ T45] bridge_slave_0: left allmulticast mode [ 385.355667][ T45] bridge_slave_0: left promiscuous mode [ 385.355866][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.381752][T14090] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 385.700932][ T5616] Bluetooth: hci3: command tx timeout [ 385.854264][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.864849][T14102] netlink: 'syz.7.2472': attribute type 21 has an invalid length. [ 385.864866][T14102] __nla_validate_parse: 1 callbacks suppressed [ 385.864877][T14102] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2472'. [ 385.878574][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.901911][ T45] bond0 (unregistering): Released all slaves [ 385.922432][T14102] netlink: 'syz.7.2472': attribute type 4 has an invalid length. [ 385.922448][T14102] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2472'. [ 385.954394][ T5686] syz2: Port: 1 Link DOWN [ 385.990237][ T45] : left promiscuous mode [ 386.168135][ T45] tipc: Left network mode [ 386.541991][ T45] team0: Port device wlan0 removed [ 386.666680][T14120] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 386.687499][ T5768] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 386.849733][ T5768] usb 9-1: Using ep0 maxpacket: 8 [ 386.856822][ T5768] usb 9-1: New USB device found: idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 386.873543][ T5768] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.873562][ T5768] usb 9-1: Product: syz [ 386.873576][ T5768] usb 9-1: Manufacturer: syz [ 386.873589][ T5768] usb 9-1: SerialNumber: syz [ 386.908594][ T5768] usb 9-1: config 0 descriptor?? [ 386.916666][ T5768] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 386.916716][ T5768] dvb-usb: bulk message failed: -22 (2/0) [ 386.916781][ T5768] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 386.949856][ T5768] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 386.949982][ T5768] usb 9-1: media controller created [ 387.005451][ T5768] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 387.086168][T14139] netlink: 'syz.6.2482': attribute type 21 has an invalid length. [ 387.086208][T14139] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2482'. [ 387.110005][ T5274] 8021q: adding VLAN 0 to HW filter on device eth21 [ 387.114216][ T5768] dvb-usb: bulk message failed: -22 (1/0) [ 387.114332][ T5768] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 387.115885][T14139] netlink: 'syz.6.2482': attribute type 4 has an invalid length. [ 387.116054][T14139] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2482'. [ 387.178255][ T5768] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input25 [ 387.180688][ T5768] dvb-usb: schedule remote query interval to 50 msecs. [ 387.180709][ T5768] dvb-usb: bulk message failed: -22 (2/0) [ 387.180723][ T5768] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 387.225879][ T5768] usb 9-1: USB disconnect, device number 11 [ 387.510626][ T5768] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 387.777617][ T5616] Bluetooth: hci3: command tx timeout [ 387.887669][T14151] FAULT_INJECTION: forcing a failure. [ 387.887669][T14151] name failslab, interval 1, probability 0, space 0, times 0 [ 387.887695][T14151] CPU: 1 UID: 0 PID: 14151 Comm: syz.8.2487 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.887721][T14151] Tainted: [L]=SOFTLOCKUP [ 387.887729][T14151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 387.887740][T14151] Call Trace: [ 387.887748][T14151] [ 387.887758][T14151] dump_stack_lvl+0xe8/0x150 [ 387.887788][T14151] should_fail_ex+0x3eb/0x540 [ 387.887824][T14151] should_failslab+0xa8/0x100 [ 387.887850][T14151] __kmalloc_cache_noprof+0x9e/0x600 [ 387.887879][T14151] ? __kasan_kmalloc+0x93/0xb0 [ 387.887900][T14151] ? nci_allocate_device+0xe7/0x380 [ 387.887936][T14151] ? nci_allocate_device+0xe7/0x380 [ 387.887970][T14151] ? __pfx_virtual_nci_send+0x10/0x10 [ 387.887995][T14151] nci_allocate_device+0xe7/0x380 [ 387.888027][T14151] virtual_ncidev_open+0x75/0x1a0 [ 387.888051][T14151] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 387.888074][T14151] misc_open+0x2d5/0x350 [ 387.888106][T14151] chrdev_open+0x4d9/0x600 [ 387.888133][T14151] ? __pfx_chrdev_open+0x10/0x10 [ 387.888156][T14151] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 387.888180][T14151] ? devcgroup_check_permission+0x31/0x8f0 [ 387.888210][T14151] ? __pfx_chrdev_open+0x10/0x10 [ 387.888233][T14151] do_dentry_open+0x80e/0x1360 [ 387.888269][T14151] vfs_open_consume+0x4a/0x350 [ 387.888293][T14151] ? path_openat+0x16e1/0x20f0 [ 387.888317][T14151] path_openat+0x16fc/0x20f0 [ 387.888358][T14151] do_file_open+0x23e/0x4a0 [ 387.888386][T14151] ? __pfx_do_file_open+0x10/0x10 [ 387.888428][T14151] ? _raw_spin_unlock+0x28/0x50 [ 387.888450][T14151] ? alloc_fd+0x6af/0x760 [ 387.888489][T14151] do_sys_openat2+0x115/0x200 [ 387.888512][T14151] ? __se_sys_futex+0x3a8/0x450 [ 387.888537][T14151] ? __pfx_do_sys_openat2+0x10/0x10 [ 387.888568][T14151] ? rcu_is_watching+0x16/0xb0 [ 387.888596][T14151] __x64_sys_openat+0x138/0x170 [ 387.888627][T14151] do_syscall_64+0x166/0x520 [ 387.888649][T14151] ? trace_irq_disable+0x3b/0x140 [ 387.888669][T14151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.888688][T14151] ? clear_bhb_loop+0x70/0xc0 [ 387.888711][T14151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.888729][T14151] RIP: 0033:0x7f694739f559 [ 387.888748][T14151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.888765][T14151] RSP: 002b:00007f69455f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 387.888786][T14151] RAX: ffffffffffffffda RBX: 00007f6947625fa0 RCX: 00007f694739f559 [ 387.888801][T14151] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 387.888814][T14151] RBP: 00007f6947436b20 R08: 0000000000000000 R09: 0000000000000000 [ 387.888827][T14151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.888838][T14151] R13: 00007f6947626038 R14: 00007f6947625fa0 R15: 00007fff6e5b6478 [ 387.888870][T14151] [ 388.612997][T14175] netlink: 'syz.8.2491': attribute type 21 has an invalid length. [ 388.613016][T14175] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2491'. [ 388.655490][T14175] netlink: 'syz.8.2491': attribute type 4 has an invalid length. [ 388.655504][T14175] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2491'. [ 388.702175][T14177] fuse: fd is not a fuse device [ 388.731704][T14181] netlink: 'syz.6.2492': attribute type 10 has an invalid length. [ 388.913210][T14181] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 388.913451][T14181] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 388.913468][T14181] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 388.981155][ T45] hsr_slave_0: left promiscuous mode [ 388.984452][ T45] hsr_slave_1: left promiscuous mode [ 388.991954][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.992055][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.016353][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.016365][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.042767][ T45] veth1_macvtap: left promiscuous mode [ 389.042803][ T45] veth0_macvtap: left promiscuous mode [ 389.045271][ T45] veth1_vlan: left promiscuous mode [ 389.045318][ T45] veth0_vlan: left promiscuous mode [ 389.190219][T14191] 0x000000000008-0x00000000000e : "" [ 389.246115][T14191] ftl_cs: FTL header corrupt! [ 389.457999][T13354] net_ratelimit: 123 callbacks suppressed [ 389.612700][ T7677] Bluetooth: hci4: Frame reassembly failed (-84) [ 389.754426][T14202] netlink: 'syz.7.2498': attribute type 8 has an invalid length. [ 389.857443][ T5616] Bluetooth: hci3: command tx timeout [ 389.960021][ T45] team0 (unregistering): Port device team_slave_1 removed [ 389.991462][ T45] team0 (unregistering): Port device team_slave_0 removed [ 390.019280][ T7677] smc: removing ib device syz2 [ 390.153448][T14208] fuse: fd is not a fuse device [ 390.345076][ T5274] 8021q: adding VLAN 0 to HW filter on device eth22 [ 390.451712][T14218] netlink: 'syz.7.2503': attribute type 10 has an invalid length. [ 390.501031][T14218] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 390.501243][T14218] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 390.501257][T14218] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 390.505056][T14044] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.505207][T14044] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.505380][T14044] bridge_slave_0: entered allmulticast mode [ 390.508348][T14044] bridge_slave_0: entered promiscuous mode [ 390.513297][T14044] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.513460][T14044] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.513621][T14044] bridge_slave_1: entered allmulticast mode [ 390.518032][T14044] bridge_slave_1: entered promiscuous mode [ 390.635646][T14044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.662073][T14044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.682429][ T7677] smbdirect: ib_dev[syz2] removed [ 391.015088][T14044] team0: Port device team_slave_0 added [ 391.063229][T14044] team0: Port device team_slave_1 added [ 391.431757][T14044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.431767][T14044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.431789][T14044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.507579][T14044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.507598][T14044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.507622][T14044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.627287][ T5619] Bluetooth: hci4: command 0x1003 tx timeout [ 391.628135][T14009] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 391.699984][T14009] Bluetooth: hci0: command 0x0401 tx timeout [ 391.700296][T14197] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 391.844306][T14044] hsr_slave_0: entered promiscuous mode [ 391.845590][T14044] hsr_slave_1: entered promiscuous mode [ 391.852787][T14044] debugfs: 'hsr0' already exists in 'hsr' [ 391.852804][T14044] Cannot create hsr debugfs directory [ 391.937872][T14009] Bluetooth: hci3: command tx timeout [ 391.973972][T14244] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 393.291195][T14280] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 393.356614][ T5274] 8021q: adding VLAN 0 to HW filter on device eth23 [ 393.931832][ T45] IPVS: stop unused estimator thread 0... [ 394.291702][T14308] netlink: 'syz.7.2523': attribute type 10 has an invalid length. [ 394.535594][T14319] fuse: fd is not a fuse device [ 394.587931][ T7677] net_ratelimit: 188 callbacks suppressed [ 395.061182][T14331] fuse: fd is not a fuse device [ 395.171936][T14044] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 395.203398][T14044] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 395.210626][T14044] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 395.234799][T14044] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 395.237118][T14044] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 395.262519][T14044] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 395.266786][T14044] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 395.295746][T14044] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 395.376388][T14345] 0x000000000008-0x00000000000e : "" [ 395.394740][T14345] ftl_cs: FTL header corrupt! [ 395.610915][T14044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.654928][T14044] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.676242][ T7676] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.676342][ T7676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.705551][ T7677] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.705668][ T7677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.249530][T14374] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 396.383966][T14387] overlayfs: failed to clone lowerpath [ 396.585582][T14044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.124243][T14414] 0x000000000008-0x00000000000e : "" [ 397.194358][T14414] ftl_cs: FTL header corrupt! [ 397.329293][T14044] veth0_vlan: entered promiscuous mode [ 397.359873][T14044] veth1_vlan: entered promiscuous mode [ 397.483135][T14044] veth0_macvtap: entered promiscuous mode [ 397.505697][T14044] veth1_macvtap: entered promiscuous mode [ 397.584571][T14044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.605415][T14044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.753202][ T7676] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.756044][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.756079][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.756109][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.920886][ T7678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.920898][ T7678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.105767][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.105779][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.156156][T14446] fuse: fd is not a fuse device [ 398.284372][T14453] netlink: 'syz.8.2545': attribute type 10 has an invalid length. [ 398.315317][T14453] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode [ 398.349922][T14453] team0: Port device wlan0 added [ 398.766140][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 398.779675][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 398.782767][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 398.787522][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 398.810660][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 399.607271][ T10] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 399.615843][T14473] net_ratelimit: 250 callbacks suppressed [ 399.692463][T14473] rxe_eth0 speed is unknown, defaulting to 1000 [ 399.757232][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 399.758086][ T10] usb 6-1: New USB device found: idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 399.761780][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.761799][ T10] usb 6-1: Product: syz [ 399.761813][ T10] usb 6-1: Manufacturer: syz [ 399.761826][ T10] usb 6-1: SerialNumber: syz [ 399.766376][ T10] usb 6-1: config 0 descriptor?? [ 399.784070][ T10] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 399.784109][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 399.784122][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 399.790482][ T10] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 399.790547][ T10] usb 6-1: media controller created [ 399.901217][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 399.964984][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 399.965024][ T10] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 399.989537][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input26 [ 399.994338][ T10] dvb-usb: schedule remote query interval to 50 msecs. [ 399.994356][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 399.994368][ T10] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 400.060288][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 400.060305][ T10] dvb-usb: error while querying for an remote control event. [ 400.117354][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 400.117373][ T10] dvb-usb: error while querying for an remote control event. [ 400.178263][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 400.178282][ T10] dvb-usb: error while querying for an remote control event. [ 400.237327][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 400.237348][ T10] dvb-usb: error while querying for an remote control event. [ 400.255093][ T10] usb 6-1: USB disconnect, device number 39 [ 400.480707][ T10] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 400.897481][T14009] Bluetooth: hci4: command tx timeout [ 401.186724][T14009] Bluetooth: hci1: unexpected cc 0x2006 length: 2 > 1 [ 401.196490][T14473] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.196660][T14473] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.196821][T14473] bridge_slave_0: entered allmulticast mode [ 401.199763][T14473] bridge_slave_0: entered promiscuous mode [ 401.202766][T14473] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.202917][T14473] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.203326][T14473] bridge_slave_1: entered allmulticast mode [ 401.204998][T14473] bridge_slave_1: entered promiscuous mode [ 401.267113][T14473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.277868][T14473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.421164][T14473] team0: Port device team_slave_0 added [ 401.426090][T14473] team0: Port device team_slave_1 added [ 401.526576][T14473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.526587][T14473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.526610][T14473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.530874][T14473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.530883][T14473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.530906][T14473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.678335][T14473] hsr_slave_0: entered promiscuous mode [ 401.679189][T14473] hsr_slave_1: entered promiscuous mode [ 401.683909][T14473] debugfs: 'hsr0' already exists in 'hsr' [ 401.683918][T14473] Cannot create hsr debugfs directory [ 402.827758][T14473] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.987634][T14009] Bluetooth: hci4: command tx timeout [ 403.060729][T14473] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.173164][T14473] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.271957][T14473] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.495860][T14594] netlink: 'syz.5.2581': attribute type 8 has an invalid length. [ 404.063536][T14473] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 404.112625][T14473] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 404.116602][T14473] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 404.141320][T14473] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 404.146533][T14473] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 404.173462][T14473] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 404.181856][T14473] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 404.222735][T14473] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 404.499944][T14473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.574012][T14473] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.610728][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.610821][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.643537][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.643633][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.817312][ C0] net_ratelimit: 113 callbacks suppressed [ 405.057755][T14009] Bluetooth: hci4: command tx timeout [ 405.185505][T14631] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 405.185726][T14631] kvm: user requested TSC rate below hardware speed [ 405.411619][T14473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.666708][T14473] veth0_vlan: entered promiscuous mode [ 405.681921][T14473] veth1_vlan: entered promiscuous mode [ 405.724396][T14473] veth0_macvtap: entered promiscuous mode [ 405.728820][T14473] veth1_macvtap: entered promiscuous mode [ 405.747435][ T31] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 405.751623][T14473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.764843][T14473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.844203][ T7676] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.845368][ T7676] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.845403][ T7676] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.845431][ T7676] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.918715][ T31] usb 9-1: New USB device found: idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 405.919904][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.922691][ T31] usb 9-1: config 0 descriptor?? [ 405.939453][ T196] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 405.943267][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.943280][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.979093][ T31] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 406.016949][ T7676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.016964][ T7676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.088096][ T196] usb 6-1: New USB device found: idVendor=27b8, idProduct=01ed, bcdDevice=0.00 [ 406.089907][ T196] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.089930][ T196] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.089988][ T196] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.104874][ T196] usb 6-1: config 0 descriptor?? [ 406.161892][T14647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.164078][T14647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.166134][ T31] gspca_sunplus: reg_w_riv err -71 [ 406.166201][ T31] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 406.218218][ T31] usb 9-1: USB disconnect, device number 12 [ 406.966779][ T196] hid-led 0003:27B8:01ED.0006: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.5-1/input0 [ 407.139098][ T5619] Bluetooth: hci4: command tx timeout [ 407.178801][ T196] hid-led 0003:27B8:01ED.0006: ThingM blink(1) initialized [ 407.349180][ T5619] Bluetooth: hci4: unexpected cc 0x2006 length: 2 > 1 [ 407.442826][T14692] FAULT_INJECTION: forcing a failure. [ 407.442826][T14692] name failslab, interval 1, probability 0, space 0, times 0 [ 407.442862][T14692] CPU: 1 UID: 0 PID: 14692 Comm: syz.6.2602 Tainted: G L syzkaller #0 PREEMPT(full) [ 407.442887][T14692] Tainted: [L]=SOFTLOCKUP [ 407.442894][T14692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 407.442905][T14692] Call Trace: [ 407.442913][T14692] [ 407.442922][T14692] dump_stack_lvl+0xe8/0x150 [ 407.442955][T14692] should_fail_ex+0x3eb/0x540 [ 407.442992][T14692] should_failslab+0xa8/0x100 [ 407.443019][T14692] __kmalloc_noprof+0xf9/0x710 [ 407.443046][T14692] ? rcu_is_watching+0x16/0xb0 [ 407.443070][T14692] ? tomoyo_realpath_from_path+0xef/0x640 [ 407.443093][T14692] ? tomoyo_realpath_from_path+0xef/0x640 [ 407.443122][T14692] tomoyo_realpath_from_path+0xef/0x640 [ 407.443155][T14692] tomoyo_check_open_permission+0x229/0x470 [ 407.443185][T14692] ? tomoyo_check_open_permission+0x1d3/0x470 [ 407.443212][T14692] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 407.443237][T14692] ? __asan_memset+0x22/0x50 [ 407.443266][T14692] ? seqcount_lockdep_reader_access+0xea/0x100 [ 407.443309][T14692] ? devcgroup_check_permission+0x31/0x8f0 [ 407.443338][T14692] security_file_open+0xa9/0x240 [ 407.443368][T14692] do_dentry_open+0x495/0x1360 [ 407.443404][T14692] vfs_open_consume+0x4a/0x350 [ 407.443428][T14692] ? path_openat+0x16e1/0x20f0 [ 407.443452][T14692] path_openat+0x16fc/0x20f0 [ 407.443491][T14692] do_file_open+0x23e/0x4a0 [ 407.443517][T14692] ? __pfx_do_file_open+0x10/0x10 [ 407.443558][T14692] ? _raw_spin_unlock+0x28/0x50 [ 407.443585][T14692] ? alloc_fd+0x6af/0x760 [ 407.443623][T14692] do_sys_openat2+0x115/0x200 [ 407.443649][T14692] ? __se_sys_futex+0x3a8/0x450 [ 407.443677][T14692] ? __pfx_do_sys_openat2+0x10/0x10 [ 407.443709][T14692] ? rcu_is_watching+0x16/0xb0 [ 407.443737][T14692] __x64_sys_openat+0x138/0x170 [ 407.443774][T14692] do_syscall_64+0x166/0x520 [ 407.443803][T14692] ? trace_irq_disable+0x3b/0x140 [ 407.443825][T14692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.443878][T14692] ? clear_bhb_loop+0x70/0xc0 [ 407.443900][T14692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.443918][T14692] RIP: 0033:0x7f7d6339f559 [ 407.443937][T14692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.443954][T14692] RSP: 002b:00007f7d641cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 407.443974][T14692] RAX: ffffffffffffffda RBX: 00007f7d63625fa0 RCX: 00007f7d6339f559 [ 407.443989][T14692] RDX: 0000000000000000 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 407.444003][T14692] RBP: 00007f7d63436b20 R08: 0000000000000000 R09: 0000000000000000 [ 407.444015][T14692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.444028][T14692] R13: 00007f7d63626038 R14: 00007f7d63625fa0 R15: 00007fff60e86fc8 [ 407.444060][T14692] [ 407.444081][T14692] ERROR: Out of memory at tomoyo_realpath_from_path. [ 407.843418][T14698] futex_wake_op: syz.8.2604 tries to shift op by 144; fix this program [ 408.033087][T14711] netlink: 'syz.5.2609': attribute type 83 has an invalid length. [ 408.053555][T14711] FAULT_INJECTION: forcing a failure. [ 408.053555][T14711] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 408.053586][T14711] CPU: 1 UID: 0 PID: 14711 Comm: syz.5.2609 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.053612][T14711] Tainted: [L]=SOFTLOCKUP [ 408.053620][T14711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 408.053631][T14711] Call Trace: [ 408.053638][T14711] [ 408.053647][T14711] dump_stack_lvl+0xe8/0x150 [ 408.053680][T14711] should_fail_ex+0x3eb/0x540 [ 408.053724][T14711] prepare_alloc_pages+0x21e/0x5f0 [ 408.053822][T14711] __alloc_frozen_pages_noprof+0x17c/0x410 [ 408.053842][T14711] ? __lock_acquire+0x747/0x2de0 [ 408.053865][T14711] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 408.053889][T14711] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 408.053916][T14711] ? __get_vm_area_node+0x155/0x2f0 [ 408.053988][T14711] ? __vmalloc_node_range_noprof+0x36e/0x16f0 [ 408.054019][T14711] ? policy_nodemask+0x31b/0x980 [ 408.054097][T14711] alloc_pages_mpol+0x21e/0x390 [ 408.054127][T14711] alloc_pages_noprof+0xb1/0x2b0 [ 408.054154][T14711] get_free_pages_noprof+0xf/0x80 [ 408.054175][T14711] __kasan_populate_vmalloc+0x38/0x1c0 [ 408.054204][T14711] ? do_raw_spin_unlock+0xf5/0x200 [ 408.054231][T14711] alloc_vmap_area+0xd10/0x1410 [ 408.054271][T14711] ? __pfx_alloc_vmap_area+0x10/0x10 [ 408.054294][T14711] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 408.054327][T14711] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 408.054355][T14711] ? __get_vm_area_node+0x155/0x2f0 [ 408.054384][T14711] __get_vm_area_node+0x200/0x2f0 [ 408.054416][T14711] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 408.054443][T14711] ? write_ldt+0x4f7/0x930 [ 408.054506][T14711] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 408.054534][T14711] ? __kasan_kmalloc+0x93/0xb0 [ 408.054555][T14711] ? __kmalloc_cache_noprof+0x31c/0x600 [ 408.054582][T14711] ? write_ldt+0x4f7/0x930 [ 408.054601][T14711] __vmalloc_noprof+0xd2/0x120 [ 408.054626][T14711] ? write_ldt+0x4f7/0x930 [ 408.054648][T14711] write_ldt+0x4f7/0x930 [ 408.054668][T14711] ? __se_sys_futex+0x3a8/0x450 [ 408.054696][T14711] ? __pfx_write_ldt+0x10/0x10 [ 408.054725][T14711] ? rcu_is_watching+0x16/0xb0 [ 408.054755][T14711] __se_sys_modify_ldt+0x6c/0x310 [ 408.054780][T14711] do_syscall_64+0x166/0x520 [ 408.054805][T14711] ? trace_irq_disable+0x3b/0x140 [ 408.054825][T14711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.054844][T14711] ? clear_bhb_loop+0x70/0xc0 [ 408.054867][T14711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.054885][T14711] RIP: 0033:0x7fd7d539f559 [ 408.054902][T14711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.054918][T14711] RSP: 002b:00007fd7d6226028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 408.054939][T14711] RAX: ffffffffffffffda RBX: 00007fd7d5625fa0 RCX: 00007fd7d539f559 [ 408.054953][T14711] RDX: 0000000000000010 RSI: 00002000000004c0 RDI: 0000000000000001 [ 408.054965][T14711] RBP: 00007fd7d5436b20 R08: 0000000000000000 R09: 0000000000000000 [ 408.054975][T14711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.054984][T14711] R13: 00007fd7d5626038 R14: 00007fd7d5625fa0 R15: 00007ffe3bb24f58 [ 408.055010][T14711] [ 408.055067][T14711] syz.5.2609: vmalloc error: size 65536, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 408.055134][T14711] CPU: 1 UID: 0 PID: 14711 Comm: syz.5.2609 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.055160][T14711] Tainted: [L]=SOFTLOCKUP [ 408.055168][T14711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 408.055179][T14711] Call Trace: [ 408.055187][T14711] [ 408.055195][T14711] dump_stack_lvl+0xe8/0x150 [ 408.055221][T14711] warn_alloc+0x24d/0x270 [ 408.055251][T14711] ? lockdep_hardirqs_on+0x7b/0x110 [ 408.055279][T14711] ? __pfx_warn_alloc+0x10/0x10 [ 408.055306][T14711] ? kfree+0x1c5/0x650 [ 408.055336][T14711] ? __get_vm_area_node+0x219/0x2f0 [ 408.055369][T14711] __vmalloc_node_range_noprof+0x396/0x16f0 [ 408.055429][T14711] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 408.055460][T14711] ? __kasan_kmalloc+0x93/0xb0 [ 408.055482][T14711] ? __kmalloc_cache_noprof+0x31c/0x600 [ 408.055513][T14711] ? write_ldt+0x4f7/0x930 [ 408.055533][T14711] __vmalloc_noprof+0xd2/0x120 [ 408.055559][T14711] ? write_ldt+0x4f7/0x930 [ 408.055582][T14711] write_ldt+0x4f7/0x930 [ 408.055602][T14711] ? __se_sys_futex+0x3a8/0x450 [ 408.055630][T14711] ? __pfx_write_ldt+0x10/0x10 [ 408.055652][T14711] ? rcu_is_watching+0x16/0xb0 [ 408.055683][T14711] __se_sys_modify_ldt+0x6c/0x310 [ 408.055706][T14711] do_syscall_64+0x166/0x520 [ 408.055736][T14711] ? trace_irq_disable+0x3b/0x140 [ 408.055758][T14711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.055777][T14711] ? clear_bhb_loop+0x70/0xc0 [ 408.055801][T14711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.055820][T14711] RIP: 0033:0x7fd7d539f559 [ 408.055836][T14711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.055852][T14711] RSP: 002b:00007fd7d6226028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 408.055871][T14711] RAX: ffffffffffffffda RBX: 00007fd7d5625fa0 RCX: 00007fd7d539f559 [ 408.055886][T14711] RDX: 0000000000000010 RSI: 00002000000004c0 RDI: 0000000000000001 [ 408.055900][T14711] RBP: 00007fd7d5436b20 R08: 0000000000000000 R09: 0000000000000000 [ 408.055912][T14711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.055924][T14711] R13: 00007fd7d5626038 R14: 00007fd7d5625fa0 R15: 00007ffe3bb24f58 [ 408.055955][T14711] [ 408.055968][T14711] Mem-Info: [ 408.055978][T14711] active_anon:8571 inactive_anon:2 isolated_anon:0 [ 408.055978][T14711] active_file:1095 inactive_file:24967 isolated_file:0 [ 408.055978][T14711] unevictable:0 dirty:101 writeback:0 [ 408.055978][T14711] slab_reclaimable:11134 slab_unreclaimable:100971 [ 408.055978][T14711] mapped:25693 shmem:1057 pagetables:2135 [ 408.055978][T14711] sec_pagetables:0 bounce:0 [ 408.055978][T14711] kernel_misc_reclaimable:0 [ 408.055978][T14711] free:1316449 free_pcp:9886 free_cma:0 [ 408.056035][T14711] Node 0 active_anon:34284kB inactive_anon:8kB active_file:4380kB inactive_file:99672kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102772kB dirty:404kB writeback:0kB shmem:4228kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14260kB pagetables:8376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 408.056087][T14711] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 408.056140][T14711] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 408.056194][T14711] lowmem_reserve[]: 0 2461 2463 2463 2463 [ 408.056229][T14711] Node 0 DMA32 free:1310500kB boost:0kB min:33916kB low:42392kB high:50868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34284kB inactive_anon:8kB active_file:4380kB inactive_file:99672kB unevictable:0kB writepending:404kB zspages:0kB present:3129332kB managed:2520792kB mlocked:0kB bounce:0kB free_pcp:37508kB local_pcp:16396kB free_cma:0kB [ 408.056285][T14711] lowmem_reserve[]: 0 0 1 1 1 [ 408.056316][T14711] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1368kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 408.056367][T14711] lowmem_reserve[]: 0 0 0 0 0 [ 408.056399][T14711] Node 1 Normal free:3939936kB boost:0kB min:55964kB low:69952kB high:83940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:0kB free_cma:0kB [ 408.056454][T14711] lowmem_reserve[]: 0 0 0 0 0 [ 408.056485][T14711] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 408.056619][T14711] Node 0 DMA32: 1224*4kB (UM) 1630*8kB (UME) 753*16kB (M) [ 408.057089][T14711] 809*32kB [ 408.081263][T14711] (UME) 321*64kB (UME) 166*128kB (UM) 121*256kB (UME) 66*512kB (UME) 39*1024kB (UM) 37*2048kB (UME) 252*4096kB (UM) = 1310336kB [ 408.081365][T14711] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 408.081461][T14711] Node 1 Normal: 2*4kB (M) 3*8kB (UM) 8*16kB (UM) 8*32kB (UM) 5*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3939936kB ** 173 printk messages dropped ** ** 1 printk messages dropped ** [ 409.124432][T14733] tipc: Started in network mode [ 409.124455][T14733] tipc: Node identity de366902b092, cluster identity 4711 [ 409.124603][T14733] tipc: Enabled bearer , priority 10 [ 409.145070][T14729] serio: Serial port ptm0 [ 409.160097][T14733] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2616'. [ 409.179518][T14732] tipc: Resetting bearer [ 409.242366][T14732] tipc: Disabling bearer [ 409.496757][T14749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.497614][T14749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.942186][T14341] net_ratelimit: 271 callbacks suppressed [ 410.069545][ T5619] Bluetooth: hci3: unexpected cc 0x2006 length: 2 > 1 [ 410.201485][T14757] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 410.202700][T14757] kvm: user requested TSC rate below hardware speed [ 411.137623][ T5768] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 411.288756][ T5768] usb 9-1: Using ep0 maxpacket: 8 [ 411.296727][ T5768] usb 9-1: New USB device found: idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 411.313705][ T5768] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 411.313725][ T5768] usb 9-1: Product: syz [ 411.313740][ T5768] usb 9-1: Manufacturer: syz [ 411.313760][ T5768] usb 9-1: SerialNumber: syz [ 411.325658][ T5768] usb 9-1: config 0 descriptor?? [ 411.337096][ T5768] gspca_main: sq905-2.14.0 probing 2770:9120 [ 411.663745][T14784] serio: Serial port ptm0 [ 411.833147][T14788] atomic_op ffff88802cc9b9e0 conn xmit_atomic 0000000000000000 [ 412.270991][T14796] random: crng reseeded on system resumption [ 412.364280][ T5619] Bluetooth: hci4: unexpected cc 0x2006 length: 2 > 1 [ 412.747606][ T5768] gspca_sq905: sq905_read_data: usb_control_msg failed (-110) [ 412.747682][ T5768] sq905 9-1:0.0: probe with driver sq905 failed with error -110 [ 412.775176][T14799] Unrecognized hibernate image header format! [ 412.775185][T14799] PM: hibernation: Image mismatch: architecture specific data [ 412.800552][ T9] usb 9-1: USB disconnect, device number 13 [ 412.860524][T14807] CIFS: VFS: UNC: path must begin with // or \\ [ 412.860540][T14807] Malformed UNC in devname [ 412.860540][T14807] [ 412.860707][T14807] CIFS: VFS: Malformed UNC in devname [ 412.912104][T14811] FAULT_INJECTION: forcing a failure. [ 412.912104][T14811] name fail_futex, interval 1, probability 0, space 0, times 0 [ 412.912175][T14811] CPU: 1 UID: 0 PID: 14811 Comm: syz.5.2639 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.912190][T14811] Tainted: [L]=SOFTLOCKUP [ 412.912195][T14811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 412.912202][T14811] Call Trace: [ 412.912207][T14811] [ 412.912213][T14811] dump_stack_lvl+0xe8/0x150 [ 412.912237][T14811] should_fail_ex+0x3eb/0x540 [ 412.912257][T14811] get_futex_key+0x1ab/0x1410 [ 412.912275][T14811] ? __lock_acquire+0x747/0x2de0 [ 412.912286][T14811] ? __pfx_get_futex_key+0x10/0x10 [ 412.912300][T14811] ? __lock_acquire+0x747/0x2de0 [ 412.912312][T14811] futex_wait_setup+0x4a/0x590 [ 412.912331][T14811] ? __futex_wait+0xdb/0x470 [ 412.912345][T14811] __futex_wait+0x175/0x470 [ 412.912358][T14811] ? __pfx___futex_wait+0x10/0x10 [ 412.912371][T14811] ? __pfx_futex_wake_mark+0x10/0x10 [ 412.912389][T14811] ? try_to_wake_up+0x8ce/0x14e0 [ 412.912435][T14811] futex_wait+0x121/0x390 [ 412.912447][T14811] ? __pfx_futex_wait+0x10/0x10 [ 412.912466][T14811] do_futex+0x3e7/0x4e0 [ 412.912483][T14811] ? __pfx_do_futex+0x10/0x10 [ 412.912495][T14811] ? __fget_files+0x3a2/0x420 [ 412.912506][T14811] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 412.912524][T14811] __se_sys_futex+0x3a8/0x450 [ 412.912539][T14811] ? ksys_write+0x242/0x270 [ 412.912551][T14811] ? __pfx___se_sys_futex+0x10/0x10 [ 412.912565][T14811] ? __pfx_ksys_write+0x10/0x10 [ 412.912578][T14811] ? __x64_sys_futex+0x21/0xf0 [ 412.912593][T14811] do_syscall_64+0x166/0x520 [ 412.912607][T14811] ? trace_irq_disable+0x3b/0x140 [ 412.912618][T14811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.912629][T14811] ? clear_bhb_loop+0x70/0xc0 [ 412.912641][T14811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.912651][T14811] RIP: 0033:0x7fd7d539f559 [ 412.912662][T14811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.912671][T14811] RSP: 002b:00007fd7d62260e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 412.912682][T14811] RAX: ffffffffffffffda RBX: 00007fd7d5625fa8 RCX: 00007fd7d539f559 [ 412.912690][T14811] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd7d5625fa8 [ 412.912697][T14811] RBP: 00007fd7d5625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 412.912704][T14811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.912710][T14811] R13: 00007fd7d5626038 R14: 00007ffe3bb24e70 R15: 00007ffe3bb24f58 [ 412.912726][T14811] [ 413.388299][T14832] program syz.5.2644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.142708][T14009] Bluetooth: hci4: unexpected cc 0x2006 length: 2 > 1 [ 414.301822][T14847] FAULT_INJECTION: forcing a failure. [ 414.301822][T14847] name failslab, interval 1, probability 0, space 0, times 0 [ 414.301855][T14847] CPU: 0 UID: 0 PID: 14847 Comm: syz.6.2650 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.301880][T14847] Tainted: [L]=SOFTLOCKUP [ 414.301888][T14847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 414.301899][T14847] Call Trace: [ 414.301907][T14847] [ 414.301916][T14847] dump_stack_lvl+0xe8/0x150 [ 414.301947][T14847] should_fail_ex+0x3eb/0x540 [ 414.301980][T14847] ? __pfx_sock_alloc_inode+0x10/0x10 [ 414.302074][T14847] should_failslab+0xa8/0x100 [ 414.302096][T14847] ? __pfx_sock_alloc_inode+0x10/0x10 [ 414.302119][T14847] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 414.302147][T14847] ? sock_alloc_inode+0x2c/0x1a0 [ 414.302163][T14847] ? sock_alloc_inode+0x2c/0x1a0 [ 414.302180][T14847] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 414.302209][T14847] ? __pfx_sock_alloc_inode+0x10/0x10 [ 414.302226][T14847] sock_alloc_inode+0x2c/0x1a0 [ 414.302246][T14847] ? __pfx_sock_alloc_inode+0x10/0x10 [ 414.302262][T14847] alloc_inode+0x6a/0x1b0 [ 414.302292][T14847] __sock_create+0x127/0xac0 [ 414.302378][T14847] __sys_socket+0xd6/0x1b0 [ 414.302402][T14847] __x64_sys_socket+0x7a/0x90 [ 414.302423][T14847] do_syscall_64+0x166/0x520 [ 414.302446][T14847] ? trace_irq_disable+0x3b/0x140 [ 414.302466][T14847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.302485][T14847] ? clear_bhb_loop+0x70/0xc0 [ 414.302508][T14847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.302528][T14847] RIP: 0033:0x7f7d6339f559 [ 414.302547][T14847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.302564][T14847] RSP: 002b:00007f7d641cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 414.302584][T14847] RAX: ffffffffffffffda RBX: 00007f7d63625fa0 RCX: 00007f7d6339f559 [ 414.302601][T14847] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 414.302612][T14847] RBP: 00007f7d63436b20 R08: 0000000000000000 R09: 0000000000000000 [ 414.302625][T14847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.302636][T14847] R13: 00007f7d63626038 R14: 00007f7d63625fa0 R15: 00007fff60e86fc8 [ 414.302668][T14847] [ 414.508915][T14009] Bluetooth: hci0: command 0x0401 tx timeout [ 414.653977][T14852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.654750][T14852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.656245][T14852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.656904][T14852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.977269][ C1] net_ratelimit: 123 callbacks suppressed [ 415.231393][T14865] netlink: 'syz.8.2658': attribute type 1 has an invalid length. [ 415.231643][T14865] nbd: couldn't find device at index 393236 [ 415.399619][T14873] FAULT_INJECTION: forcing a failure. [ 415.399619][T14873] name failslab, interval 1, probability 0, space 0, times 0 [ 415.400513][T14873] CPU: 1 UID: 0 PID: 14873 Comm: syz.8.2660 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.400541][T14873] Tainted: [L]=SOFTLOCKUP [ 415.400549][T14873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 415.400566][T14873] Call Trace: [ 415.400574][T14873] [ 415.400583][T14873] dump_stack_lvl+0xe8/0x150 [ 415.400614][T14873] should_fail_ex+0x3eb/0x540 [ 415.400648][T14873] ? __pfx_sock_alloc_inode+0x10/0x10 [ 415.400668][T14873] should_failslab+0xa8/0x100 [ 415.400692][T14873] ? __pfx_sock_alloc_inode+0x10/0x10 [ 415.400709][T14873] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 415.400739][T14873] ? sock_alloc_inode+0x2c/0x1a0 [ 415.400755][T14873] ? sock_alloc_inode+0x2c/0x1a0 [ 415.400773][T14873] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 415.400803][T14873] ? __pfx_sock_alloc_inode+0x10/0x10 [ 415.400821][T14873] sock_alloc_inode+0x2c/0x1a0 [ 415.400840][T14873] ? __pfx_sock_alloc_inode+0x10/0x10 [ 415.400857][T14873] alloc_inode+0x6a/0x1b0 [ 415.400887][T14873] __sock_create+0x127/0xac0 [ 415.400915][T14873] __sys_socket+0xd6/0x1b0 [ 415.400938][T14873] __x64_sys_socket+0x7a/0x90 [ 415.400959][T14873] do_syscall_64+0x166/0x520 [ 415.400983][T14873] ? trace_irq_disable+0x3b/0x140 [ 415.401005][T14873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.401025][T14873] ? clear_bhb_loop+0x70/0xc0 [ 415.401049][T14873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.401067][T14873] RIP: 0033:0x7f694739f559 [ 415.401086][T14873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.401102][T14873] RSP: 002b:00007f69455f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 415.401124][T14873] RAX: ffffffffffffffda RBX: 00007f6947625fa0 RCX: 00007f694739f559 [ 415.401139][T14873] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 415.401151][T14873] RBP: 00007f6947436b20 R08: 0000000000000000 R09: 0000000000000000 [ 415.401167][T14873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.401179][T14873] R13: 00007f6947626038 R14: 00007f6947625fa0 R15: 00007fff6e5b6478 [ 415.401210][T14873] [ 415.661098][T14009] Bluetooth: hci1: unexpected cc 0x2006 length: 2 > 1 [ 415.954722][T14888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.955372][T14888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.253260][T14902] FAULT_INJECTION: forcing a failure. [ 416.253260][T14902] name failslab, interval 1, probability 0, space 0, times 0 [ 416.253275][T14902] CPU: 0 UID: 0 PID: 14902 Comm: syz.7.2671 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.253300][T14902] Tainted: [L]=SOFTLOCKUP [ 416.253306][T14902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 416.253318][T14902] Call Trace: [ 416.253325][T14902] [ 416.253333][T14902] dump_stack_lvl+0xe8/0x150 [ 416.253362][T14902] should_fail_ex+0x3eb/0x540 [ 416.253397][T14902] should_failslab+0xa8/0x100 [ 416.253411][T14902] __kmalloc_cache_noprof+0x9e/0x600 [ 416.253427][T14902] ? __kmalloc_noprof+0x1a6/0x710 [ 416.253442][T14902] ? __alloc_workqueue+0x15a/0x21d0 [ 416.253466][T14902] ? __alloc_workqueue+0x15a/0x21d0 [ 416.253496][T14902] __alloc_workqueue+0x15a/0x21d0 [ 416.253522][T14902] ? __asan_memcpy+0x40/0x70 [ 416.253548][T14902] ? vsnprintf+0xe42/0xef0 [ 416.253588][T14902] alloc_workqueue_noprof+0xe3/0x210 [ 416.253618][T14902] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 416.253647][T14902] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 416.253673][T14902] nci_register_device+0x22c/0xa00 [ 416.253709][T14902] ? __pfx_nci_register_device+0x10/0x10 [ 416.253735][T14902] ? __raw_spin_lock_init+0x45/0x100 [ 416.253761][T14902] ? __raw_spin_lock_init+0x45/0x100 [ 416.253786][T14902] ? __init_waitqueue_head+0xa8/0x150 [ 416.253812][T14902] virtual_ncidev_open+0x129/0x1a0 [ 416.253833][T14902] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 416.253850][T14902] misc_open+0x2d5/0x350 [ 416.253876][T14902] chrdev_open+0x4d9/0x600 [ 416.253898][T14902] ? __pfx_chrdev_open+0x10/0x10 [ 416.253916][T14902] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 416.253935][T14902] ? devcgroup_check_permission+0x31/0x8f0 [ 416.253958][T14902] ? __pfx_chrdev_open+0x10/0x10 [ 416.253975][T14902] do_dentry_open+0x80e/0x1360 [ 416.254003][T14902] vfs_open_consume+0x4a/0x350 [ 416.254020][T14902] ? path_openat+0x16e1/0x20f0 [ 416.254039][T14902] path_openat+0x16fc/0x20f0 [ 416.254070][T14902] do_file_open+0x23e/0x4a0 [ 416.254091][T14902] ? __pfx_do_file_open+0x10/0x10 [ 416.254124][T14902] ? _raw_spin_unlock+0x28/0x50 [ 416.254139][T14902] ? alloc_fd+0x6af/0x760 [ 416.254168][T14902] do_sys_openat2+0x115/0x200 [ 416.254188][T14902] ? __se_sys_futex+0x3a8/0x450 [ 416.254209][T14902] ? __pfx_do_sys_openat2+0x10/0x10 [ 416.254231][T14902] ? __pfx___se_sys_futex+0x10/0x10 [ 416.254256][T14902] __x64_sys_openat+0x138/0x170 [ 416.254280][T14902] do_syscall_64+0x166/0x520 [ 416.254298][T14902] ? trace_irq_disable+0x3b/0x140 [ 416.254314][T14902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.254329][T14902] ? clear_bhb_loop+0x70/0xc0 [ 416.254347][T14902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.254363][T14902] RIP: 0033:0x7f9b91f9f559 [ 416.254379][T14902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.254391][T14902] RSP: 002b:00007f9b92d7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 416.254409][T14902] RAX: ffffffffffffffda RBX: 00007f9b92225fa0 RCX: 00007f9b91f9f559 [ 416.254421][T14902] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 416.254432][T14902] RBP: 00007f9b92036b20 R08: 0000000000000000 R09: 0000000000000000 [ 416.254442][T14902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.254451][T14902] R13: 00007f9b92226038 R14: 00007f9b92225fa0 R15: 00007fff5c550758 [ 416.254480][T14902] [ 416.577631][T14009] Bluetooth: hci0: command 0x0401 tx timeout [ 416.746500][T14914] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 416.935083][ T5619] Bluetooth: hci4: unexpected cc 0x2006 length: 2 > 1 [ 417.225791][T14929] FAULT_INJECTION: forcing a failure. [ 417.225791][T14929] name failslab, interval 1, probability 0, space 0, times 0 [ 417.225808][T14929] CPU: 0 UID: 0 PID: 14929 Comm: syz.5.2682 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.225823][T14929] Tainted: [L]=SOFTLOCKUP [ 417.225827][T14929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 417.225835][T14929] Call Trace: [ 417.225847][T14929] [ 417.225852][T14929] dump_stack_lvl+0xe8/0x150 [ 417.225871][T14929] should_fail_ex+0x3eb/0x540 [ 417.225892][T14929] should_failslab+0xa8/0x100 [ 417.225906][T14929] __kmalloc_cache_noprof+0x9e/0x600 [ 417.225922][T14929] ? __kmalloc_noprof+0x1a6/0x710 [ 417.225936][T14929] ? __alloc_workqueue+0x15a/0x21d0 [ 417.225951][T14929] ? __alloc_workqueue+0x15a/0x21d0 [ 417.225969][T14929] __alloc_workqueue+0x15a/0x21d0 [ 417.225984][T14929] ? __asan_memcpy+0x40/0x70 [ 417.225999][T14929] ? vsnprintf+0xe42/0xef0 [ 417.226017][T14929] alloc_workqueue_noprof+0xe3/0x210 [ 417.226034][T14929] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 417.226052][T14929] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 417.226066][T14929] nci_register_device+0x22c/0xa00 [ 417.226086][T14929] ? __pfx_nci_register_device+0x10/0x10 [ 417.226101][T14929] ? __raw_spin_lock_init+0x45/0x100 [ 417.226116][T14929] ? __raw_spin_lock_init+0x45/0x100 [ 417.226130][T14929] ? __init_waitqueue_head+0xa8/0x150 [ 417.226145][T14929] virtual_ncidev_open+0x129/0x1a0 [ 417.226158][T14929] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 417.226169][T14929] misc_open+0x2d5/0x350 [ 417.226186][T14929] chrdev_open+0x4d9/0x600 [ 417.226201][T14929] ? __pfx_chrdev_open+0x10/0x10 [ 417.226213][T14929] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 417.226226][T14929] ? devcgroup_check_permission+0x31/0x8f0 [ 417.226241][T14929] ? __pfx_chrdev_open+0x10/0x10 [ 417.226254][T14929] do_dentry_open+0x80e/0x1360 [ 417.226273][T14929] vfs_open_consume+0x4a/0x350 [ 417.226285][T14929] ? path_openat+0x16e1/0x20f0 [ 417.226298][T14929] path_openat+0x16fc/0x20f0 [ 417.226319][T14929] do_file_open+0x23e/0x4a0 [ 417.226333][T14929] ? __pfx_do_file_open+0x10/0x10 [ 417.226361][T14929] ? _raw_spin_unlock+0x28/0x50 [ 417.226372][T14929] ? alloc_fd+0x6af/0x760 [ 417.226392][T14929] do_sys_openat2+0x115/0x200 [ 417.226405][T14929] ? __se_sys_futex+0x3a8/0x450 [ 417.226420][T14929] ? __pfx_do_sys_openat2+0x10/0x10 [ 417.226435][T14929] ? __pfx___se_sys_futex+0x10/0x10 [ 417.226452][T14929] __x64_sys_openat+0x138/0x170 [ 417.226469][T14929] do_syscall_64+0x166/0x520 [ 417.226482][T14929] ? trace_irq_disable+0x3b/0x140 [ 417.226492][T14929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.226503][T14929] ? clear_bhb_loop+0x70/0xc0 [ 417.226516][T14929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.226526][T14929] RIP: 0033:0x7fd7d539f559 [ 417.226537][T14929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.226546][T14929] RSP: 002b:00007fd7d6226028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 417.226558][T14929] RAX: ffffffffffffffda RBX: 00007fd7d5625fa0 RCX: 00007fd7d539f559 [ 417.226566][T14929] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 417.226573][T14929] RBP: 00007fd7d5436b20 R08: 0000000000000000 R09: 0000000000000000 [ 417.226579][T14929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.226585][T14929] R13: 00007fd7d5626038 R14: 00007fd7d5625fa0 R15: 00007ffe3bb24f58 [ 417.226602][T14929] [ 417.701427][T14938] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 417.773345][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2688'. [ 417.774886][T14942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.784977][T14942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.838264][T14942] md: array md5 already has disks! [ 418.056172][T14949] FAULT_INJECTION: forcing a failure. [ 418.056172][T14949] name failslab, interval 1, probability 0, space 0, times 0 [ 418.056203][T14949] CPU: 1 UID: 0 PID: 14949 Comm: syz.8.2691 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.056231][T14949] Tainted: [L]=SOFTLOCKUP [ 418.056238][T14949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 418.056250][T14949] Call Trace: [ 418.056258][T14949] [ 418.056266][T14949] dump_stack_lvl+0xe8/0x150 [ 418.056297][T14949] should_fail_ex+0x3eb/0x540 [ 418.056332][T14949] should_failslab+0xa8/0x100 [ 418.056357][T14949] __kmalloc_cache_node_noprof+0xa5/0x620 [ 418.056386][T14949] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 418.056411][T14949] ? __alloc_workqueue+0x7dc/0x21d0 [ 418.056437][T14949] ? __alloc_workqueue+0x7dc/0x21d0 [ 418.056466][T14949] __alloc_workqueue+0x7dc/0x21d0 [ 418.056509][T14949] alloc_workqueue_noprof+0xe3/0x210 [ 418.056538][T14949] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 418.056569][T14949] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 418.056595][T14949] nci_register_device+0x22c/0xa00 [ 418.056634][T14949] ? __pfx_nci_register_device+0x10/0x10 [ 418.056661][T14949] ? __raw_spin_lock_init+0x45/0x100 [ 418.056688][T14949] ? __raw_spin_lock_init+0x45/0x100 [ 418.056719][T14949] ? __init_waitqueue_head+0xa8/0x150 [ 418.056745][T14949] virtual_ncidev_open+0x129/0x1a0 [ 418.056770][T14949] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 418.056790][T14949] misc_open+0x2d5/0x350 [ 418.056831][T14949] chrdev_open+0x4d9/0x600 [ 418.056860][T14949] ? __pfx_chrdev_open+0x10/0x10 [ 418.056881][T14949] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 418.056904][T14949] ? devcgroup_check_permission+0x31/0x8f0 [ 418.056933][T14949] ? __pfx_chrdev_open+0x10/0x10 [ 418.056955][T14949] do_dentry_open+0x80e/0x1360 [ 418.056991][T14949] vfs_open_consume+0x4a/0x350 [ 418.057013][T14949] ? path_openat+0x16e1/0x20f0 [ 418.057036][T14949] path_openat+0x16fc/0x20f0 [ 418.057076][T14949] do_file_open+0x23e/0x4a0 [ 418.057102][T14949] ? __pfx_do_file_open+0x10/0x10 [ 418.057145][T14949] ? _raw_spin_unlock+0x28/0x50 [ 418.057165][T14949] ? alloc_fd+0x6af/0x760 [ 418.057201][T14949] do_sys_openat2+0x115/0x200 [ 418.057223][T14949] ? __se_sys_futex+0x3a8/0x450 [ 418.057246][T14949] ? __pfx_do_sys_openat2+0x10/0x10 [ 418.057281][T14949] ? rcu_is_watching+0x16/0xb0 [ 418.057309][T14949] __x64_sys_openat+0x138/0x170 [ 418.057341][T14949] do_syscall_64+0x166/0x520 [ 418.057363][T14949] ? trace_irq_disable+0x3b/0x140 [ 418.057383][T14949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.057403][T14949] ? clear_bhb_loop+0x70/0xc0 [ 418.057427][T14949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.057445][T14949] RIP: 0033:0x7f694739f559 [ 418.057464][T14949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.057481][T14949] RSP: 002b:00007f69455f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 418.057502][T14949] RAX: ffffffffffffffda RBX: 00007f6947625fa0 RCX: 00007f694739f559 [ 418.057517][T14949] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 418.057530][T14949] RBP: 00007f6947436b20 R08: 0000000000000000 R09: 0000000000000000 [ 418.057543][T14949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.057554][T14949] R13: 00007f6947626038 R14: 00007f6947625fa0 R15: 00007fff6e5b6478 [ 418.057585][T14949] [ 418.333130][T14951] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 418.339192][T14957] serio: Serial port ptm0 [ 418.485270][ T5619] Bluetooth: hci0: unexpected cc 0x2006 length: 2 > 1 [ 418.485316][ T5619] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 418.543627][T14964] atomic_op ffff888026a089e0 conn xmit_atomic 0000000000000000 [ 418.737441][ T5619] Bluetooth: hci3: command 0x2016 tx timeout [ 418.765194][T14969] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 419.102534][T14981] FAULT_INJECTION: forcing a failure. [ 419.102534][T14981] name failslab, interval 1, probability 0, space 0, times 0 [ 419.102549][T14981] CPU: 0 UID: 0 PID: 14981 Comm: syz.6.2700 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.102565][T14981] Tainted: [L]=SOFTLOCKUP [ 419.102569][T14981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 419.102576][T14981] Call Trace: [ 419.102581][T14981] [ 419.102587][T14981] dump_stack_lvl+0xe8/0x150 [ 419.102606][T14981] should_fail_ex+0x3eb/0x540 [ 419.102625][T14981] should_failslab+0xa8/0x100 [ 419.102642][T14981] __kmalloc_cache_noprof+0x9e/0x600 [ 419.102659][T14981] ? __kmalloc_noprof+0x1a6/0x710 [ 419.102673][T14981] ? __alloc_workqueue+0x15a/0x21d0 [ 419.102688][T14981] ? __alloc_workqueue+0x15a/0x21d0 [ 419.102707][T14981] __alloc_workqueue+0x15a/0x21d0 [ 419.102723][T14981] ? __asan_memcpy+0x40/0x70 [ 419.102738][T14981] ? vsnprintf+0xe42/0xef0 [ 419.102755][T14981] alloc_workqueue_noprof+0xe3/0x210 [ 419.102773][T14981] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 419.102790][T14981] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 419.102805][T14981] nci_register_device+0x22c/0xa00 [ 419.102836][T14981] ? __pfx_nci_register_device+0x10/0x10 [ 419.102861][T14981] ? __raw_spin_lock_init+0x45/0x100 [ 419.102888][T14981] ? __raw_spin_lock_init+0x45/0x100 [ 419.102915][T14981] ? __init_waitqueue_head+0xa8/0x150 [ 419.102935][T14981] virtual_ncidev_open+0x129/0x1a0 [ 419.102949][T14981] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 419.102960][T14981] misc_open+0x2d5/0x350 [ 419.102977][T14981] chrdev_open+0x4d9/0x600 [ 419.102992][T14981] ? __pfx_chrdev_open+0x10/0x10 [ 419.103004][T14981] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 419.103017][T14981] ? devcgroup_check_permission+0x31/0x8f0 [ 419.103039][T14981] ? __pfx_chrdev_open+0x10/0x10 [ 419.103052][T14981] do_dentry_open+0x80e/0x1360 [ 419.103072][T14981] vfs_open_consume+0x4a/0x350 [ 419.103084][T14981] ? path_openat+0x16e1/0x20f0 [ 419.103098][T14981] path_openat+0x16fc/0x20f0 [ 419.103119][T14981] do_file_open+0x23e/0x4a0 [ 419.103134][T14981] ? __pfx_do_file_open+0x10/0x10 [ 419.103164][T14981] ? _raw_spin_unlock+0x28/0x50 [ 419.103176][T14981] ? alloc_fd+0x6af/0x760 [ 419.103198][T14981] do_sys_openat2+0x115/0x200 [ 419.103212][T14981] ? __se_sys_futex+0x3a8/0x450 [ 419.103226][T14981] ? __pfx_do_sys_openat2+0x10/0x10 [ 419.103241][T14981] ? __pfx___se_sys_futex+0x10/0x10 [ 419.103259][T14981] __x64_sys_openat+0x138/0x170 [ 419.103275][T14981] do_syscall_64+0x166/0x520 [ 419.103289][T14981] ? trace_irq_disable+0x3b/0x140 [ 419.103300][T14981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.103311][T14981] ? clear_bhb_loop+0x70/0xc0 [ 419.103323][T14981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.103333][T14981] RIP: 0033:0x7f7d6339f559 [ 419.103344][T14981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.103353][T14981] RSP: 002b:00007f7d641cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 419.103366][T14981] RAX: ffffffffffffffda RBX: 00007f7d63625fa0 RCX: 00007f7d6339f559 [ 419.103374][T14981] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 419.103381][T14981] RBP: 00007f7d63436b20 R08: 0000000000000000 R09: 0000000000000000 [ 419.103388][T14981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.103395][T14981] R13: 00007f7d63626038 R14: 00007f7d63625fa0 R15: 00007fff60e86fc8 [ 419.103411][T14981] [ 419.734499][T14999] FAULT_INJECTION: forcing a failure. [ 419.734499][T14999] name failslab, interval 1, probability 0, space 0, times 0 [ 419.734525][T14999] CPU: 0 UID: 0 PID: 14999 Comm: syz.5.2706 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.734551][T14999] Tainted: [L]=SOFTLOCKUP [ 419.734560][T14999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 419.734571][T14999] Call Trace: [ 419.734579][T14999] [ 419.734588][T14999] dump_stack_lvl+0xe8/0x150 [ 419.734618][T14999] should_fail_ex+0x3eb/0x540 [ 419.734652][T14999] should_failslab+0xa8/0x100 [ 419.734678][T14999] __kmalloc_noprof+0xf9/0x710 [ 419.734708][T14999] ? __alloc_workqueue+0x10d/0x21d0 [ 419.734734][T14999] ? __alloc_workqueue+0x10d/0x21d0 [ 419.734761][T14999] ? nci_hci_allocate+0x53/0x2b0 [ 419.734868][T14999] __alloc_workqueue+0x10d/0x21d0 [ 419.734896][T14999] ? vsnprintf+0x3a0/0xef0 [ 419.734918][T14999] ? __asan_memcpy+0x40/0x70 [ 419.734950][T14999] ? vsnprintf+0xe42/0xef0 [ 419.734983][T14999] alloc_workqueue_noprof+0xe3/0x210 [ 419.735027][T14999] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 419.735059][T14999] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 419.735088][T14999] nci_register_device+0x22c/0xa00 [ 419.735122][T14999] ? __pfx_nci_register_device+0x10/0x10 [ 419.735146][T14999] ? __raw_spin_lock_init+0x45/0x100 [ 419.735174][T14999] ? __raw_spin_lock_init+0x45/0x100 [ 419.735202][T14999] ? __init_waitqueue_head+0xa8/0x150 [ 419.735232][T14999] virtual_ncidev_open+0x129/0x1a0 [ 419.735259][T14999] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 419.735281][T14999] misc_open+0x2d5/0x350 [ 419.735312][T14999] chrdev_open+0x4d9/0x600 [ 419.735337][T14999] ? __pfx_chrdev_open+0x10/0x10 [ 419.735357][T14999] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 419.735379][T14999] ? devcgroup_check_permission+0x31/0x8f0 [ 419.735406][T14999] ? __pfx_chrdev_open+0x10/0x10 [ 419.735426][T14999] do_dentry_open+0x80e/0x1360 [ 419.735457][T14999] vfs_open_consume+0x4a/0x350 [ 419.735481][T14999] ? path_openat+0x16e1/0x20f0 [ 419.735502][T14999] path_openat+0x16fc/0x20f0 [ 419.735537][T14999] do_file_open+0x23e/0x4a0 [ 419.735561][T14999] ? __pfx_do_file_open+0x10/0x10 [ 419.735598][T14999] ? _raw_spin_unlock+0x28/0x50 [ 419.735616][T14999] ? alloc_fd+0x6af/0x760 [ 419.735654][T14999] do_sys_openat2+0x115/0x200 [ 419.735676][T14999] ? __se_sys_futex+0x3a8/0x450 [ 419.735699][T14999] ? __pfx_do_sys_openat2+0x10/0x10 [ 419.735727][T14999] ? rcu_is_watching+0x16/0xb0 [ 419.735753][T14999] __x64_sys_openat+0x138/0x170 [ 419.735782][T14999] do_syscall_64+0x166/0x520 [ 419.735803][T14999] ? trace_irq_disable+0x3b/0x140 [ 419.735822][T14999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.735839][T14999] ? clear_bhb_loop+0x70/0xc0 [ 419.735859][T14999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.735876][T14999] RIP: 0033:0x7fd7d539f559 [ 419.735892][T14999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.735906][T14999] RSP: 002b:00007fd7d6226028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 419.735924][T14999] RAX: ffffffffffffffda RBX: 00007fd7d5625fa0 RCX: 00007fd7d539f559 [ 419.735937][T14999] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 419.735949][T14999] RBP: 00007fd7d5436b20 R08: 0000000000000000 R09: 0000000000000000 [ 419.735959][T14999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.735970][T14999] R13: 00007fd7d5626038 R14: 00007fd7d5625fa0 R15: 00007ffe3bb24f58 [ 419.736004][T14999] [ 419.813154][ T5619] Bluetooth: hci0: unexpected cc 0x2006 length: 2 > 1 [ 419.813197][ T5619] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 419.897072][T15001] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 419.955361][ T31] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 420.019567][T15006] FAULT_INJECTION: forcing a failure. [ 420.019567][T15006] name failslab, interval 1, probability 0, space 0, times 0 [ 420.019593][T15006] CPU: 1 UID: 0 PID: 15006 Comm: syz.5.2709 Tainted: G L syzkaller #0 PREEMPT(full) [ 420.019619][T15006] Tainted: [L]=SOFTLOCKUP [ 420.019626][T15006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 420.019639][T15006] Call Trace: [ 420.019646][T15006] [ 420.019655][T15006] dump_stack_lvl+0xe8/0x150 [ 420.019687][T15006] should_fail_ex+0x3eb/0x540 [ 420.019722][T15006] should_failslab+0xa8/0x100 [ 420.019746][T15006] __kmalloc_noprof+0xf9/0x710 [ 420.019775][T15006] ? __alloc_workqueue+0x655/0x21d0 [ 420.019801][T15006] ? __alloc_workqueue+0x655/0x21d0 [ 420.019834][T15006] __alloc_workqueue+0x655/0x21d0 [ 420.019870][T15006] ? vsnprintf+0xe42/0xef0 [ 420.019901][T15006] alloc_workqueue_noprof+0xe3/0x210 [ 420.019953][T15006] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 420.019988][T15006] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 420.020015][T15006] nci_register_device+0x22c/0xa00 [ 420.020052][T15006] ? __pfx_nci_register_device+0x10/0x10 [ 420.020079][T15006] ? __raw_spin_lock_init+0x45/0x100 [ 420.020107][T15006] ? __raw_spin_lock_init+0x45/0x100 [ 420.020134][T15006] ? __init_waitqueue_head+0xa8/0x150 [ 420.020162][T15006] virtual_ncidev_open+0x129/0x1a0 [ 420.020187][T15006] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 420.020207][T15006] misc_open+0x2d5/0x350 [ 420.020238][T15006] chrdev_open+0x4d9/0x600 [ 420.020265][T15006] ? __pfx_chrdev_open+0x10/0x10 [ 420.020287][T15006] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 420.020310][T15006] ? devcgroup_check_permission+0x31/0x8f0 [ 420.020339][T15006] ? __pfx_chrdev_open+0x10/0x10 [ 420.020362][T15006] do_dentry_open+0x80e/0x1360 [ 420.020397][T15006] vfs_open_consume+0x4a/0x350 [ 420.020419][T15006] ? path_openat+0x16e1/0x20f0 [ 420.020449][T15006] path_openat+0x16fc/0x20f0 [ 420.020489][T15006] do_file_open+0x23e/0x4a0 [ 420.020515][T15006] ? __pfx_do_file_open+0x10/0x10 [ 420.020557][T15006] ? _raw_spin_unlock+0x28/0x50 [ 420.020577][T15006] ? alloc_fd+0x6af/0x760 [ 420.020614][T15006] do_sys_openat2+0x115/0x200 [ 420.020640][T15006] ? __se_sys_futex+0x3a8/0x450 [ 420.020665][T15006] ? __pfx_do_sys_openat2+0x10/0x10 [ 420.020696][T15006] ? rcu_is_watching+0x16/0xb0 [ 420.020724][T15006] __x64_sys_openat+0x138/0x170 [ 420.020755][T15006] do_syscall_64+0x166/0x520 [ 420.020778][T15006] ? trace_irq_disable+0x3b/0x140 [ 420.020798][T15006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.020817][T15006] ? clear_bhb_loop+0x70/0xc0 [ 420.020840][T15006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.020858][T15006] RIP: 0033:0x7fd7d539f559 [ 420.020877][T15006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.020893][T15006] RSP: 002b:00007fd7d6226028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 420.020913][T15006] RAX: ffffffffffffffda RBX: 00007fd7d5625fa0 RCX: 00007fd7d539f559 [ 420.020927][T15006] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 420.020941][T15006] RBP: 00007fd7d5436b20 R08: 0000000000000000 R09: 0000000000000000 [ 420.020953][T15006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.020964][T15006] R13: 00007fd7d5626038 R14: 00007fd7d5625fa0 R15: 00007ffe3bb24f58 [ 420.020994][T15006] [ 420.138673][ T31] usb 8-1: Invalid ep0 maxpacket: 16 [ 420.267248][ C1] net_ratelimit: 263 callbacks suppressed [ 420.281063][ T31] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 420.306554][T15008] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 420.310589][T15008] openvswitch: netlink: Missing valid actions attribute. [ 420.310620][T15008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.500299][ T31] usb 8-1: Invalid ep0 maxpacket: 16 [ 420.534588][ T31] usb usb8-port1: attempt power cycle [ 420.590463][T15018] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 420.608198][ T5712] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 420.608582][T15018] md: could not open device unknown-block(1,11). [ 420.709513][T15022] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2716'. [ 420.709615][T15022] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2716'. [ 420.709687][T15022] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2716'. [ 420.709757][T15022] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2716'. [ 420.709847][T15022] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2716'. [ 420.709920][T15022] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2716'. [ 420.709996][T15022] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2716'. [ 420.710067][T15022] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2716'. [ 420.710148][T15022] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2716'. [ 420.794386][ T5712] usb 9-1: Using ep0 maxpacket: 32 [ 420.809297][ T5712] usb 9-1: New USB device found: idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 420.812059][T15022] netlink: 'syz.6.2716': attribute type 10 has an invalid length. [ 420.812089][T15022] ipvlan0: entered allmulticast mode [ 420.812104][T15022] veth0_vlan: entered allmulticast mode [ 420.817779][ T5619] Bluetooth: hci3: command 0x2016 tx timeout [ 420.830428][T15022] team0: Device ipvlan0 failed to register rx_handler [ 420.882435][ T5712] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.882454][ T5712] usb 9-1: Product: syz [ 420.882466][ T5712] usb 9-1: Manufacturer: syz [ 420.882480][ T5712] usb 9-1: SerialNumber: syz [ 420.885423][ T5712] usb 9-1: config 0 descriptor?? [ 420.921461][T15028] 9p: Bad value for 'wfdno' [ 420.950765][ T31] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 420.978760][ T31] usb 8-1: Invalid ep0 maxpacket: 16 [ 421.010392][T15031] FAULT_INJECTION: forcing a failure. [ 421.010392][T15031] name failslab, interval 1, probability 0, space 0, times 0 [ 421.010415][T15031] CPU: 1 UID: 0 PID: 15031 Comm: syz.5.2719 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.010439][T15031] Tainted: [L]=SOFTLOCKUP [ 421.010447][T15031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 421.010458][T15031] Call Trace: [ 421.010468][T15031] [ 421.010476][T15031] dump_stack_lvl+0xe8/0x150 [ 421.010504][T15031] should_fail_ex+0x3eb/0x540 [ 421.010536][T15031] should_failslab+0xa8/0x100 [ 421.010558][T15031] __kmalloc_cache_noprof+0x9e/0x600 [ 421.010586][T15031] ? __kmalloc_noprof+0x1a6/0x710 [ 421.010610][T15031] ? __alloc_workqueue+0x15a/0x21d0 [ 421.010634][T15031] ? __alloc_workqueue+0x15a/0x21d0 [ 421.010664][T15031] __alloc_workqueue+0x15a/0x21d0 [ 421.010690][T15031] ? __asan_memcpy+0x40/0x70 [ 421.010715][T15031] ? vsnprintf+0xe42/0xef0 [ 421.010744][T15031] alloc_workqueue_noprof+0xe3/0x210 [ 421.010774][T15031] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 421.010804][T15031] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 421.010829][T15031] nci_register_device+0x22c/0xa00 [ 421.010868][T15031] ? __pfx_nci_register_device+0x10/0x10 [ 421.010893][T15031] ? __raw_spin_lock_init+0x45/0x100 [ 421.010919][T15031] ? __raw_spin_lock_init+0x45/0x100 [ 421.010944][T15031] ? __init_waitqueue_head+0xa8/0x150 [ 421.010970][T15031] virtual_ncidev_open+0x129/0x1a0 [ 421.010992][T15031] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 421.011011][T15031] misc_open+0x2d5/0x350 [ 421.011039][T15031] chrdev_open+0x4d9/0x600 [ 421.011062][T15031] ? __pfx_chrdev_open+0x10/0x10 [ 421.011083][T15031] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 421.011104][T15031] ? devcgroup_check_permission+0x31/0x8f0 [ 421.011129][T15031] ? __pfx_chrdev_open+0x10/0x10 [ 421.011150][T15031] do_dentry_open+0x80e/0x1360 [ 421.011181][T15031] vfs_open_consume+0x4a/0x350 [ 421.011202][T15031] ? path_openat+0x16e1/0x20f0 [ 421.011223][T15031] path_openat+0x16fc/0x20f0 [ 421.011257][T15031] do_file_open+0x23e/0x4a0 [ 421.011281][T15031] ? __pfx_do_file_open+0x10/0x10 [ 421.011319][T15031] ? _raw_spin_unlock+0x28/0x50 [ 421.011337][T15031] ? alloc_fd+0x6af/0x760 [ 421.011371][T15031] do_sys_openat2+0x115/0x200 [ 421.011394][T15031] ? __se_sys_futex+0x3a8/0x450 [ 421.011417][T15031] ? __pfx_do_sys_openat2+0x10/0x10 [ 421.011444][T15031] ? rcu_is_watching+0x16/0xb0 [ 421.011469][T15031] __x64_sys_openat+0x138/0x170 [ 421.011497][T15031] do_syscall_64+0x166/0x520 [ 421.011518][T15031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.011536][T15031] ? clear_bhb_loop+0x70/0xc0 [ 421.011557][T15031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.011574][T15031] RIP: 0033:0x7fd7d539f559 [ 421.011590][T15031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.011605][T15031] RSP: 002b:00007fd7d6226028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 421.011623][T15031] RAX: ffffffffffffffda RBX: 00007fd7d5625fa0 RCX: 00007fd7d539f559 [ 421.011636][T15031] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 421.011648][T15031] RBP: 00007fd7d5436b20 R08: 0000000000000000 R09: 0000000000000000 [ 421.011659][T15031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.011670][T15031] R13: 00007fd7d5626038 R14: 00007fd7d5625fa0 R15: 00007ffe3bb24f58 [ 421.011697][T15031] [ 421.012042][T15032] FAULT_INJECTION: forcing a failure. [ 421.012042][T15032] name failslab, interval 1, probability 0, space 0, times 0 [ 421.012065][T15032] CPU: 0 UID: 0 PID: 15032 Comm: syz.6.2718 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.012090][T15032] Tainted: [L]=SOFTLOCKUP [ 421.012097][T15032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 421.012108][T15032] Call Trace: [ 421.012114][T15032] [ 421.012123][T15032] dump_stack_lvl+0xe8/0x150 [ 421.012152][T15032] should_fail_ex+0x3eb/0x540 [ 421.012186][T15032] should_failslab+0xa8/0x100 [ 421.012211][T15032] __kmalloc_cache_noprof+0x9e/0x600 [ 421.012242][T15032] ? __kmalloc_noprof+0x1a6/0x710 [ 421.012267][T15032] ? __alloc_workqueue+0x15a/0x21d0 [ 421.012292][T15032] ? __alloc_workqueue+0x15a/0x21d0 [ 421.012323][T15032] __alloc_workqueue+0x15a/0x21d0 [ 421.012350][T15032] ? __asan_memcpy+0x40/0x70 [ 421.012386][T15032] ? vsnprintf+0xe42/0xef0 [ 421.012417][T15032] alloc_workqueue_noprof+0xe3/0x210 [ 421.012452][T15032] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 421.012488][T15032] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 421.012516][T15032] nci_register_device+0x22c/0xa00 [ 421.012552][T15032] ? __pfx_nci_register_device+0x10/0x10 [ 421.012578][T15032] ? __raw_spin_lock_init+0x45/0x100 [ 421.012607][T15032] ? __raw_spin_lock_init+0x45/0x100 [ 421.012634][T15032] ? __init_waitqueue_head+0xa8/0x150 [ 421.012662][T15032] virtual_ncidev_open+0x129/0x1a0 [ 421.012687][T15032] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 421.012708][T15032] misc_open+0x2d5/0x350 [ 421.012738][T15032] chrdev_open+0x4d9/0x600 [ 421.012764][T15032] ? __pfx_chrdev_open+0x10/0x10 [ 421.012785][T15032] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 421.012805][T15032] ? devcgroup_check_permission+0x31/0x8f0 [ 421.012830][T15032] ? __pfx_chrdev_open+0x10/0x10 [ 421.012851][T15032] do_dentry_open+0x80e/0x1360 [ 421.012884][T15032] vfs_open_consume+0x4a/0x350 [ 421.012906][T15032] ? path_openat+0x16e1/0x20f0 [ 421.012929][T15032] path_openat+0x16fc/0x20f0 [ 421.012962][T15032] do_file_open+0x23e/0x4a0 [ 421.012985][T15032] ? __pfx_do_file_open+0x10/0x10 [ 421.013027][T15032] ? _raw_spin_unlock+0x28/0x50 [ 421.013048][T15032] ? alloc_fd+0x6af/0x760 [ 421.013084][T15032] do_sys_openat2+0x115/0x200 [ 421.013108][T15032] ? __se_sys_futex+0x3a8/0x450 [ 421.013133][T15032] ? __pfx_do_sys_openat2+0x10/0x10 [ 421.013164][T15032] ? rcu_is_watching+0x16/0xb0 [ 421.013191][T15032] __x64_sys_openat+0x138/0x170 [ 421.013221][T15032] do_syscall_64+0x166/0x520 [ 421.013245][T15032] ? trace_irq_disable+0x3b/0x140 [ 421.013266][T15032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.013285][T15032] ? clear_bhb_loop+0x70/0xc0 [ 421.013308][T15032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.013327][T15032] RIP: 0033:0x7f7d6339f559 [ 421.013345][T15032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.013369][T15032] RSP: 002b:00007f7d641cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 421.013390][T15032] RAX: ffffffffffffffda RBX: 00007f7d63625fa0 RCX: 00007f7d6339f559 [ 421.013405][T15032] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 421.013418][T15032] RBP: 00007f7d63436b20 R08: 0000000000000000 R09: 0000000000000000 [ 421.013431][T15032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.013443][T15032] R13: 00007f7d63626038 R14: 00007f7d63625fa0 R15: 00007fff60e86fc8 [ 421.013474][T15032] [ 421.127277][ T31] usb 8-1: new low-speed USB device number 23 using dummy_hcd [ 421.153746][ T31] usb 8-1: Invalid ep0 maxpacket: 16 [ 421.154186][ T31] usb usb8-port1: unable to enumerate USB device [ 421.253536][T15034] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 421.309287][T14009] Bluetooth: hci3: unexpected cc 0x2006 length: 2 > 1 [ 421.309352][T14009] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 421.313446][ T5712] airspy 9-1:0.0: Board ID: 00 [ 421.313459][ T5712] airspy 9-1:0.0: Firmware version: [ 421.638453][T15041] vers=2.0 not permitted when mounting with smb3 [ 421.638453][T15041] [ 421.638737][T15041] CIFS: VFS: vers=2.0 not permitted when mounting with smb3 [ 421.762471][ T5712] airspy 9-1:0.0: usb_control_msg() failed -71 request 0e [ 421.815603][ T5712] airspy 9-1:0.0: Registered as swradio24 [ 421.815621][ T5712] airspy 9-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 421.844049][ T5712] usb 9-1: USB disconnect, device number 14 [ 422.121697][T15053] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 422.276674][T15061] FAULT_INJECTION: forcing a failure. [ 422.276674][T15061] name failslab, interval 1, probability 0, space 0, times 0 [ 422.276699][T15061] CPU: 0 UID: 0 PID: 15061 Comm: syz.6.2729 Tainted: G L syzkaller #0 PREEMPT(full) [ 422.276724][T15061] Tainted: [L]=SOFTLOCKUP [ 422.276732][T15061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 422.276744][T15061] Call Trace: [ 422.276752][T15061] [ 422.276769][T15061] dump_stack_lvl+0xe8/0x150 [ 422.276801][T15061] should_fail_ex+0x3eb/0x540 [ 422.276839][T15061] should_failslab+0xa8/0x100 [ 422.276865][T15061] __kmalloc_cache_noprof+0x9e/0x600 [ 422.276895][T15061] ? __kmalloc_noprof+0x1a6/0x710 [ 422.276921][T15061] ? __alloc_workqueue+0x15a/0x21d0 [ 422.276948][T15061] ? __alloc_workqueue+0x15a/0x21d0 [ 422.276982][T15061] __alloc_workqueue+0x15a/0x21d0 [ 422.277012][T15061] ? __asan_memcpy+0x40/0x70 [ 422.277040][T15061] ? vsnprintf+0xe42/0xef0 [ 422.277073][T15061] alloc_workqueue_noprof+0xe3/0x210 [ 422.277106][T15061] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 422.277141][T15061] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 422.277166][T15061] nci_register_device+0x22c/0xa00 [ 422.277198][T15061] ? __pfx_nci_register_device+0x10/0x10 [ 422.277225][T15061] ? __raw_spin_lock_init+0x45/0x100 [ 422.277252][T15061] ? __raw_spin_lock_init+0x45/0x100 [ 422.277278][T15061] ? __init_waitqueue_head+0xa8/0x150 [ 422.277305][T15061] virtual_ncidev_open+0x129/0x1a0 [ 422.277331][T15061] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 422.277352][T15061] misc_open+0x2d5/0x350 [ 422.277381][T15061] chrdev_open+0x4d9/0x600 [ 422.277408][T15061] ? __pfx_chrdev_open+0x10/0x10 [ 422.277431][T15061] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 422.277455][T15061] ? devcgroup_check_permission+0x31/0x8f0 [ 422.277485][T15061] ? __pfx_chrdev_open+0x10/0x10 [ 422.277508][T15061] do_dentry_open+0x80e/0x1360 [ 422.277543][T15061] vfs_open_consume+0x4a/0x350 [ 422.277567][T15061] ? path_openat+0x16e1/0x20f0 [ 422.277591][T15061] path_openat+0x16fc/0x20f0 [ 422.277631][T15061] do_file_open+0x23e/0x4a0 [ 422.277659][T15061] ? __pfx_do_file_open+0x10/0x10 [ 422.277701][T15061] ? _raw_spin_unlock+0x28/0x50 [ 422.277723][T15061] ? alloc_fd+0x6af/0x760 [ 422.277774][T15061] do_sys_openat2+0x115/0x200 [ 422.277802][T15061] ? __se_sys_futex+0x3a8/0x450 [ 422.277829][T15061] ? __pfx_do_sys_openat2+0x10/0x10 [ 422.277861][T15061] ? rcu_is_watching+0x16/0xb0 [ 422.277889][T15061] __x64_sys_openat+0x138/0x170 [ 422.277920][T15061] do_syscall_64+0x166/0x520 [ 422.277945][T15061] ? trace_irq_disable+0x3b/0x140 [ 422.277965][T15061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.277985][T15061] ? clear_bhb_loop+0x70/0xc0 [ 422.278009][T15061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.278028][T15061] RIP: 0033:0x7f7d6339f559 [ 422.278047][T15061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.278064][T15061] RSP: 002b:00007f7d641cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 422.278085][T15061] RAX: ffffffffffffffda RBX: 00007f7d63625fa0 RCX: 00007f7d6339f559 [ 422.278100][T15061] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 422.278114][T15061] RBP: 00007f7d63436b20 R08: 0000000000000000 R09: 0000000000000000 [ 422.278127][T15061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.278139][T15061] R13: 00007f7d63626038 R14: 00007f7d63625fa0 R15: 00007fff60e86fc8 [ 422.278171][T15061] [ 422.549736][T15063] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 422.771210][T15074] random: crng reseeded on system resumption [ 422.845980][T14009] Bluetooth: hci0: unexpected cc 0x2006 length: 2 > 1 [ 422.846037][T14009] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 422.871492][T15078] loop4: detected capacity change from 0 to 7 [ 422.923188][ C1] blk_print_req_error: 11 callbacks suppressed [ 422.923206][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 422.923504][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 422.923561][ C1] buffer_io_error: 11 callbacks suppressed [ 422.923572][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 423.013260][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 423.013347][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 423.014055][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 423.014121][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 423.014286][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 423.014346][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 423.014485][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 423.014544][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 423.014725][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 423.014781][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 423.015432][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 423.015496][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 423.020390][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 423.020456][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 423.021075][T15078] ldm_validate_partition_table(): Disk read failed. [ 423.021200][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 423.021258][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 423.021816][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 423.023800][T15078] Dev loop4: unable to read RDB block 0 [ 423.024813][T15078] loop4: unable to read partition table [ 423.025002][T15078] loop4: partition table beyond EOD, truncated [ 423.025031][T15078] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾-ý?‹ºÐ ¥ëÜ%õ«`Éæˆ{í©³­ô÷5 FLQkÝŠA€) failed (rc=-5) [ 423.479868][T15091] FAULT_INJECTION: forcing a failure. [ 423.479868][T15091] name failslab, interval 1, probability 0, space 0, times 0 [ 423.479895][T15091] CPU: 1 UID: 0 PID: 15091 Comm: syz.7.2740 Tainted: G L syzkaller #0 PREEMPT(full) [ 423.479923][T15091] Tainted: [L]=SOFTLOCKUP [ 423.479931][T15091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 423.479943][T15091] Call Trace: [ 423.479951][T15091] [ 423.479960][T15091] dump_stack_lvl+0xe8/0x150 [ 423.479992][T15091] should_fail_ex+0x3eb/0x540 [ 423.480028][T15091] should_failslab+0xa8/0x100 [ 423.480054][T15091] __kmalloc_noprof+0xf9/0x710 [ 423.480084][T15091] ? __alloc_workqueue+0x655/0x21d0 [ 423.480122][T15091] ? __alloc_workqueue+0x655/0x21d0 [ 423.480156][T15091] __alloc_workqueue+0x655/0x21d0 [ 423.480191][T15091] ? vsnprintf+0xe42/0xef0 [ 423.480224][T15091] alloc_workqueue_noprof+0xe3/0x210 [ 423.480258][T15091] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 423.480294][T15091] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 423.480328][T15091] nci_register_device+0x22c/0xa00 [ 423.480365][T15091] ? __pfx_nci_register_device+0x10/0x10 [ 423.480392][T15091] ? __raw_spin_lock_init+0x45/0x100 [ 423.480421][T15091] ? __raw_spin_lock_init+0x45/0x100 [ 423.480449][T15091] ? __init_waitqueue_head+0xa8/0x150 [ 423.480478][T15091] virtual_ncidev_open+0x129/0x1a0 [ 423.480503][T15091] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 423.480525][T15091] misc_open+0x2d5/0x350 [ 423.480556][T15091] chrdev_open+0x4d9/0x600 [ 423.480584][T15091] ? __pfx_chrdev_open+0x10/0x10 [ 423.480608][T15091] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 423.480631][T15091] ? devcgroup_check_permission+0x31/0x8f0 [ 423.480661][T15091] ? __pfx_chrdev_open+0x10/0x10 [ 423.480683][T15091] do_dentry_open+0x80e/0x1360 [ 423.480719][T15091] vfs_open_consume+0x4a/0x350 [ 423.480743][T15091] ? path_openat+0x16e1/0x20f0 [ 423.480767][T15091] path_openat+0x16fc/0x20f0 [ 423.480808][T15091] do_file_open+0x23e/0x4a0 [ 423.480835][T15091] ? __pfx_do_file_open+0x10/0x10 [ 423.480878][T15091] ? _raw_spin_unlock+0x28/0x50 [ 423.480899][T15091] ? alloc_fd+0x6af/0x760 [ 423.480938][T15091] do_sys_openat2+0x115/0x200 [ 423.480964][T15091] ? __se_sys_futex+0x3a8/0x450 [ 423.480990][T15091] ? __pfx_do_sys_openat2+0x10/0x10 [ 423.481022][T15091] ? rcu_is_watching+0x16/0xb0 [ 423.481051][T15091] __x64_sys_openat+0x138/0x170 [ 423.481083][T15091] do_syscall_64+0x166/0x520 [ 423.481107][T15091] ? trace_irq_disable+0x3b/0x140 [ 423.481138][T15091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.481158][T15091] ? clear_bhb_loop+0x70/0xc0 [ 423.481182][T15091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.481202][T15091] RIP: 0033:0x7f9b91f9f559 [ 423.481221][T15091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.481238][T15091] RSP: 002b:00007f9b92d7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 423.481260][T15091] RAX: ffffffffffffffda RBX: 00007f9b92225fa0 RCX: 00007f9b91f9f559 [ 423.481275][T15091] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 423.481289][T15091] RBP: 00007f9b92036b20 R08: 0000000000000000 R09: 0000000000000000 [ 423.481303][T15091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.481314][T15091] R13: 00007f9b92226038 R14: 00007f9b92225fa0 R15: 00007fff5c550758 [ 423.481346][T15091] [ 424.249849][ T32] audit: type=1800 audit(1792624255.668:45): pid=15104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2745" name="bus" dev="tmpfs" ino=667 res=0 errno=-22 [ 424.595077][T15116] __nla_validate_parse: 24 callbacks suppressed [ 424.595095][T15116] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2749'. [ 424.758190][T15118] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 424.758206][T15118] block device autoloading is deprecated and will be removed. [ 424.901627][T15121] FAULT_INJECTION: forcing a failure. [ 424.901627][T15121] name failslab, interval 1, probability 0, space 0, times 0 [ 424.901655][T15121] CPU: 1 UID: 0 PID: 15121 Comm: syz.7.2751 Tainted: G L syzkaller #0 PREEMPT(full) [ 424.901683][T15121] Tainted: [L]=SOFTLOCKUP [ 424.901690][T15121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 424.901703][T15121] Call Trace: [ 424.901711][T15121] [ 424.901720][T15121] dump_stack_lvl+0xe8/0x150 [ 424.901753][T15121] should_fail_ex+0x3eb/0x540 [ 424.901788][T15121] should_failslab+0xa8/0x100 [ 424.901813][T15121] __kmalloc_cache_noprof+0x9e/0x600 [ 424.901844][T15121] ? __kmalloc_noprof+0x1a6/0x710 [ 424.901870][T15121] ? __alloc_workqueue+0x15a/0x21d0 [ 424.901895][T15121] ? __alloc_workqueue+0x15a/0x21d0 [ 424.901929][T15121] __alloc_workqueue+0x15a/0x21d0 [ 424.901960][T15121] ? __asan_memcpy+0x40/0x70 [ 424.901988][T15121] ? vsnprintf+0xe42/0xef0 [ 424.902021][T15121] alloc_workqueue_noprof+0xe3/0x210 [ 424.902056][T15121] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 424.902091][T15121] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 424.902118][T15121] nci_register_device+0x22c/0xa00 [ 424.902153][T15121] ? __pfx_nci_register_device+0x10/0x10 [ 424.902179][T15121] ? __raw_spin_lock_init+0x45/0x100 [ 424.902206][T15121] ? __raw_spin_lock_init+0x45/0x100 [ 424.902234][T15121] ? __init_waitqueue_head+0xa8/0x150 [ 424.902263][T15121] virtual_ncidev_open+0x129/0x1a0 [ 424.902288][T15121] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 424.902310][T15121] misc_open+0x2d5/0x350 [ 424.902340][T15121] chrdev_open+0x4d9/0x600 [ 424.902369][T15121] ? __pfx_chrdev_open+0x10/0x10 [ 424.902393][T15121] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 424.902418][T15121] ? devcgroup_check_permission+0x31/0x8f0 [ 424.902449][T15121] ? __pfx_chrdev_open+0x10/0x10 [ 424.902472][T15121] do_dentry_open+0x80e/0x1360 [ 424.902508][T15121] vfs_open_consume+0x4a/0x350 [ 424.902538][T15121] ? path_openat+0x16e1/0x20f0 [ 424.902564][T15121] path_openat+0x16fc/0x20f0 [ 424.902604][T15121] do_file_open+0x23e/0x4a0 [ 424.902631][T15121] ? __pfx_do_file_open+0x10/0x10 [ 424.902673][T15121] ? _raw_spin_unlock+0x28/0x50 [ 424.902695][T15121] ? alloc_fd+0x6af/0x760 [ 424.902732][T15121] do_sys_openat2+0x115/0x200 [ 424.902757][T15121] ? __se_sys_futex+0x3a8/0x450 [ 424.902783][T15121] ? __pfx_do_sys_openat2+0x10/0x10 [ 424.902812][T15121] ? rcu_is_watching+0x16/0xb0 [ 424.902840][T15121] __x64_sys_openat+0x138/0x170 [ 424.902871][T15121] do_syscall_64+0x166/0x520 [ 424.902895][T15121] ? trace_irq_disable+0x3b/0x140 [ 424.902916][T15121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.902936][T15121] ? clear_bhb_loop+0x70/0xc0 [ 424.902959][T15121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.902977][T15121] RIP: 0033:0x7f9b91f9f559 [ 424.902996][T15121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.903013][T15121] RSP: 002b:00007f9b92d7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 424.903035][T15121] RAX: ffffffffffffffda RBX: 00007f9b92225fa0 RCX: 00007f9b91f9f559 [ 424.903050][T15121] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 424.903063][T15121] RBP: 00007f9b92036b20 R08: 0000000000000000 R09: 0000000000000000 [ 424.903076][T15121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.903089][T15121] R13: 00007f9b92226038 R14: 00007f9b92225fa0 R15: 00007fff5c550758 [ 424.903121][T15121] [ 425.239638][T14009] Bluetooth: hci4: unexpected cc 0x2006 length: 2 > 1 ** 772 printk messages dropped ** [ 425.309166][ T7676] net_ratelimit: 81 callbacks suppressed [ 425.901576][T15130] FAULT_INJECTION: forcing a failure. [ 425.901576][T15130] name failslab, interval 1, probability 0, space 0, times 0 [ 425.901602][T15130] CPU: 1 UID: 0 PID: 15130 Comm: syz.6.2756 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.901629][T15130] Tainted: [L]=SOFTLOCKUP [ 425.901636][T15130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 425.901648][T15130] Call Trace: [ 425.901656][T15130] [ 425.901665][T15130] dump_stack_lvl+0xe8/0x150 [ 425.901697][T15130] should_fail_ex+0x3eb/0x540 [ 425.901733][T15130] should_failslab+0xa8/0x100 [ 425.901759][T15130] __kmalloc_cache_node_noprof+0xa5/0x620 [ 425.901790][T15130] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 425.901819][T15130] ? __alloc_workqueue+0x7dc/0x21d0 ** 6 printk messages dropped ** [ 425.902074][T15130] ? __pfx_nci_register_device+0x10/0x10 ** 647 printk messages dropped ** ** 241 printk messages dropped ** ** 239 printk messages dropped ** ** 207 printk messages dropped ** ** 1382 printk messages dropped ** [ 426.617924][T14009] Bluetooth: hci1: unexpected cc 0x2006 length: 2 > 1 [ 426.973831][T15156] FAULT_INJECTION: forcing a failure. [ 426.973831][T15156] name failslab, interval 1, probability 0, space 0, times 0 [ 426.973859][T15156] CPU: 0 UID: 0 PID: 15156 Comm: syz.6.2765 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.973886][T15156] Tainted: [L]=SOFTLOCKUP [ 426.973893][T15156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 426.973906][T15156] Call Trace: [ 426.973914][T15156] [ 426.973923][T15156] dump_stack_lvl+0xe8/0x150 [ 426.973955][T15156] should_fail_ex+0x3eb/0x540 [ 426.973992][T15156] should_failslab+0xa8/0x100 [ 426.974017][T15156] __kmalloc_cache_node_noprof+0xa5/0x620 [ 426.974050][T15156] ? init_rescuer+0x167/0x530 [ 426.974069][T15156] ? init_rescuer+0x167/0x530 [ 426.974094][T15156] init_rescuer+0x167/0x530 [ 426.974117][T15156] ? __pfx_init_rescuer+0x10/0x10 [ 426.974138][T15156] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 426.974171][T15156] ? wq_adjust_max_active+0x1eb/0x570 [ 426.974199][T15156] ? __alloc_workqueue+0x1bf2/0x21d0 [ 426.974233][T15156] __alloc_workqueue+0x1d85/0x21d0 [ 426.974291][T15156] alloc_workqueue_noprof+0xe3/0x210 [ 426.974326][T15156] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 426.974361][T15156] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 426.974390][T15156] nci_register_device+0x22c/0xa00 [ 426.974424][T15156] ? __pfx_nci_register_device+0x10/0x10 [ 426.974449][T15156] ? __raw_spin_lock_init+0x45/0x100 [ 426.974477][T15156] ? __raw_spin_lock_init+0x45/0x100 [ 426.974503][T15156] ? __init_waitqueue_head+0xa8/0x150 [ 426.974530][T15156] virtual_ncidev_open+0x129/0x1a0 [ 426.974556][T15156] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 426.974577][T15156] misc_open+0x2d5/0x350 [ 426.974609][T15156] chrdev_open+0x4d9/0x600 [ 426.974637][T15156] ? __pfx_chrdev_open+0x10/0x10 [ 426.974661][T15156] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 426.974685][T15156] ? devcgroup_check_permission+0x31/0x8f0 [ 426.974713][T15156] ? __pfx_chrdev_open+0x10/0x10 [ 426.974737][T15156] do_dentry_open+0x80e/0x1360 [ 426.974902][T15156] vfs_open_consume+0x4a/0x350 [ 426.974935][T15156] ? path_openat+0x16e1/0x20f0 [ 426.974959][T15156] path_openat+0x16fc/0x20f0 [ 426.974999][T15156] do_file_open+0x23e/0x4a0 [ 426.975028][T15156] ? __pfx_do_file_open+0x10/0x10 [ 426.975071][T15156] ? _raw_spin_unlock+0x28/0x50 [ 426.975094][T15156] ? alloc_fd+0x6af/0x760 [ 426.975133][T15156] do_sys_openat2+0x115/0x200 [ 426.975161][T15156] ? __se_sys_futex+0x3a8/0x450 [ 426.975186][T15156] ? __pfx_do_sys_openat2+0x10/0x10 [ 426.975215][T15156] ? rcu_is_watching+0x16/0xb0 [ 426.975246][T15156] __x64_sys_openat+0x138/0x170 [ 426.975279][T15156] do_syscall_64+0x166/0x520 [ 426.975305][T15156] ? trace_irq_disable+0x3b/0x140 [ 426.975327][T15156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.975347][T15156] ? clear_bhb_loop+0x70/0xc0 [ 426.975371][T15156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.975389][T15156] RIP: 0033:0x7f7d6339f559 [ 426.975409][T15156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.975426][T15156] RSP: 002b:00007f7d641cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 426.975449][T15156] RAX: ffffffffffffffda RBX: 00007f7d63625fa0 RCX: 00007f7d6339f559 [ 426.975464][T15156] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 426.975477][T15156] RBP: 00007f7d63436b20 R08: 0000000000000000 R09: 0000000000000000 [ 426.975488][T15156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.975499][T15156] R13: 00007f7d63626038 R14: 00007f7d63625fa0 R15: 00007fff60e86fc8 [ 426.975529][T15156] [ 426.975571][T15156] workqueue: Failed to allocate a rescuer for wq "nfc2_nci_cmd_wq" [ 427.043877][T15154] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 427.658140][ T31] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 427.690522][ T5712] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 427.745042][T15178] FAULT_INJECTION: forcing a failure. [ 427.745042][T15178] name failslab, interval 1, probability 0, space 0, times 0 [ 427.745072][T15178] CPU: 1 UID: 0 PID: 15178 Comm: syz.6.2773 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.745107][T15178] Tainted: [L]=SOFTLOCKUP [ 427.745115][T15178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 427.745127][T15178] Call Trace: [ 427.745136][T15178] [ 427.745145][T15178] dump_stack_lvl+0xe8/0x150 [ 427.745176][T15178] should_fail_ex+0x3eb/0x540 [ 427.745211][T15178] should_failslab+0xa8/0x100 [ 427.745237][T15178] __kmalloc_cache_noprof+0x9e/0x600 [ 427.745269][T15178] ? virtual_ncidev_open+0x54/0x1a0 [ 427.745291][T15178] ? virtual_ncidev_open+0x54/0x1a0 [ 427.745320][T15178] virtual_ncidev_open+0x54/0x1a0 [ 427.745345][T15178] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 427.745367][T15178] misc_open+0x2d5/0x350 [ 427.745398][T15178] chrdev_open+0x4d9/0x600 [ 427.745427][T15178] ? __pfx_chrdev_open+0x10/0x10 [ 427.745450][T15178] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 427.745474][T15178] ? devcgroup_check_permission+0x31/0x8f0 [ 427.745503][T15178] ? __pfx_chrdev_open+0x10/0x10 [ 427.745527][T15178] do_dentry_open+0x80e/0x1360 [ 427.745563][T15178] vfs_open_consume+0x4a/0x350 [ 427.745585][T15178] ? path_openat+0x16e1/0x20f0 [ 427.745607][T15178] path_openat+0x16fc/0x20f0 [ 427.745646][T15178] do_file_open+0x23e/0x4a0 [ 427.745674][T15178] ? __pfx_do_file_open+0x10/0x10 [ 427.745715][T15178] ? _raw_spin_unlock+0x28/0x50 [ 427.745737][T15178] ? alloc_fd+0x6af/0x760 [ 427.745785][T15178] do_sys_openat2+0x115/0x200 [ 427.745812][T15178] ? __se_sys_futex+0x3a8/0x450 [ 427.745839][T15178] ? __pfx_do_sys_openat2+0x10/0x10 [ 427.745871][T15178] ? rcu_is_watching+0x16/0xb0 [ 427.745900][T15178] __x64_sys_openat+0x138/0x170 [ 427.745932][T15178] do_syscall_64+0x166/0x520 [ 427.745957][T15178] ? trace_irq_disable+0x3b/0x140 [ 427.745978][T15178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.745998][T15178] ? clear_bhb_loop+0x70/0xc0 [ 427.746021][T15178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.746040][T15178] RIP: 0033:0x7f7d6339f559 [ 427.746059][T15178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.746076][T15178] RSP: 002b:00007f7d641cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 427.746104][T15178] RAX: ffffffffffffffda RBX: 00007f7d63625fa0 RCX: 00007f7d6339f559 [ 427.746119][T15178] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 427.746133][T15178] RBP: 00007f7d63436b20 R08: 0000000000000000 R09: 0000000000000000 [ 427.746145][T15178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.746158][T15178] R13: 00007f7d63626038 R14: 00007f7d63625fa0 R15: 00007fff60e86fc8 [ 427.746195][T15178] [ 427.812182][ T31] usb 8-1: New USB device found: idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 427.814007][ T31] usb 8-1: config 0 has an invalid interface number: 231 but max is 0 [ 427.814027][ T31] usb 8-1: config 0 has no interface number 0 [ 427.814080][ T31] usb 8-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 427.818029][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.818046][ T31] usb 8-1: Product: syz [ 427.818058][ T31] usb 8-1: Manufacturer: syz [ 427.818072][ T31] usb 8-1: SerialNumber: syz [ 427.852079][ T31] usb 8-1: config 0 descriptor?? [ 427.853896][T15160] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 427.863688][ T5712] usb 9-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 427.872739][ T5712] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 427.872786][ T5712] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.962908][ T5712] pegasus 9-1:1.0: Missing or invalid endpoints [ 428.012250][ T31] plusb 8-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.7-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 8e:0a:a8:70:8c:b2 [ 428.097061][ T5712] usb 9-1: USB disconnect, device number 15 [ 428.324626][T15190] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 428.538804][T15201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.539571][T15201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.705159][T15211] FAULT_INJECTION: forcing a failure. [ 428.705159][T15211] name failslab, interval 1, probability 0, space 0, times 0 [ 428.705184][T15211] CPU: 0 UID: 0 PID: 15211 Comm: syz.6.2782 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.705212][T15211] Tainted: [L]=SOFTLOCKUP [ 428.705220][T15211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 428.705232][T15211] Call Trace: [ 428.705240][T15211] [ 428.705248][T15211] dump_stack_lvl+0xe8/0x150 [ 428.705280][T15211] should_fail_ex+0x3eb/0x540 [ 428.705315][T15211] should_failslab+0xa8/0x100 [ 428.705342][T15211] __kmalloc_cache_noprof+0x9e/0x600 [ 428.705373][T15211] ? nfc_allocate_device+0x129/0x560 [ 428.705465][T15211] ? nfc_allocate_device+0x129/0x560 [ 428.705495][T15211] ? __pfx_nci_transceive+0x10/0x10 [ 428.705515][T15211] nfc_allocate_device+0x129/0x560 [ 428.705539][T15211] ? __init_swait_queue_head+0xa8/0x150 [ 428.705567][T15211] nci_allocate_device+0x1da/0x380 [ 428.705598][T15211] virtual_ncidev_open+0x75/0x1a0 [ 428.705634][T15211] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 428.705656][T15211] misc_open+0x2d5/0x350 [ 428.705690][T15211] chrdev_open+0x4d9/0x600 [ 428.705718][T15211] ? __pfx_chrdev_open+0x10/0x10 [ 428.705745][T15211] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 428.705769][T15211] ? devcgroup_check_permission+0x31/0x8f0 [ 428.705800][T15211] ? __pfx_chrdev_open+0x10/0x10 [ 428.705823][T15211] do_dentry_open+0x80e/0x1360 [ 428.705858][T15211] vfs_open_consume+0x4a/0x350 [ 428.705881][T15211] ? path_openat+0x16e1/0x20f0 [ 428.705905][T15211] path_openat+0x16fc/0x20f0 [ 428.705943][T15211] do_file_open+0x23e/0x4a0 [ 428.705970][T15211] ? __pfx_do_file_open+0x10/0x10 [ 428.706013][T15211] ? _raw_spin_unlock+0x28/0x50 [ 428.706035][T15211] ? alloc_fd+0x6af/0x760 [ 428.706074][T15211] do_sys_openat2+0x115/0x200 [ 428.706100][T15211] ? __se_sys_futex+0x3a8/0x450 [ 428.706126][T15211] ? __pfx_do_sys_openat2+0x10/0x10 [ 428.706157][T15211] ? rcu_is_watching+0x16/0xb0 [ 428.706185][T15211] __x64_sys_openat+0x138/0x170 [ 428.706217][T15211] do_syscall_64+0x166/0x520 [ 428.706241][T15211] ? trace_irq_disable+0x3b/0x140 [ 428.706262][T15211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.706281][T15211] ? clear_bhb_loop+0x70/0xc0 [ 428.706301][T15211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.706319][T15211] RIP: 0033:0x7f7d6339f559 [ 428.706337][T15211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.706353][T15211] RSP: 002b:00007f7d641cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 428.706372][T15211] RAX: ffffffffffffffda RBX: 00007f7d63625fa0 RCX: 00007f7d6339f559 [ 428.706385][T15211] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 428.706398][T15211] RBP: 00007f7d63436b20 R08: 0000000000000000 R09: 0000000000000000 [ 428.706411][T15211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.706422][T15211] R13: 00007f7d63626038 R14: 00007f7d63625fa0 R15: 00007fff60e86fc8 [ 428.706451][T15211] [ 429.183034][T15224] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 429.314003][ T5768] usb 8-1: USB disconnect, device number 24 [ 429.326098][ T5768] plusb 8-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.7-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 429.682806][T15245] FAULT_INJECTION: forcing a failure. [ 429.682806][T15245] name failslab, interval 1, probability 0, space 0, times 0 [ 429.682832][T15245] CPU: 1 UID: 0 PID: 15245 Comm: syz.8.2792 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.682856][T15245] Tainted: [L]=SOFTLOCKUP [ 429.682864][T15245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 429.682876][T15245] Call Trace: [ 429.682885][T15245] [ 429.682893][T15245] dump_stack_lvl+0xe8/0x150 [ 429.682925][T15245] should_fail_ex+0x3eb/0x540 [ 429.682961][T15245] should_failslab+0xa8/0x100 [ 429.682997][T15245] __kmalloc_cache_noprof+0x9e/0x600 [ 429.683029][T15245] ? nfc_allocate_device+0x129/0x560 [ 429.683054][T15245] ? nfc_allocate_device+0x129/0x560 [ 429.683085][T15245] ? __pfx_nci_transceive+0x10/0x10 [ 429.683102][T15245] nfc_allocate_device+0x129/0x560 [ 429.683126][T15245] ? __init_swait_queue_head+0xa8/0x150 [ 429.683153][T15245] nci_allocate_device+0x1da/0x380 [ 429.683185][T15245] virtual_ncidev_open+0x75/0x1a0 [ 429.683209][T15245] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 429.683230][T15245] misc_open+0x2d5/0x350 [ 429.683259][T15245] chrdev_open+0x4d9/0x600 [ 429.683287][T15245] ? __pfx_chrdev_open+0x10/0x10 [ 429.683311][T15245] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 429.683335][T15245] ? devcgroup_check_permission+0x31/0x8f0 [ 429.683364][T15245] ? __pfx_chrdev_open+0x10/0x10 [ 429.683387][T15245] do_dentry_open+0x80e/0x1360 [ 429.683421][T15245] vfs_open_consume+0x4a/0x350 [ 429.683444][T15245] ? path_openat+0x16e1/0x20f0 [ 429.683469][T15245] path_openat+0x16fc/0x20f0 [ 429.683507][T15245] do_file_open+0x23e/0x4a0 [ 429.683533][T15245] ? __pfx_do_file_open+0x10/0x10 [ 429.683572][T15245] ? _raw_spin_unlock+0x28/0x50 [ 429.683590][T15245] ? alloc_fd+0x6af/0x760 [ 429.683627][T15245] do_sys_openat2+0x115/0x200 [ 429.683649][T15245] ? __se_sys_futex+0x3a8/0x450 [ 429.683683][T15245] ? __pfx_do_sys_openat2+0x10/0x10 [ 429.683720][T15245] ? rcu_is_watching+0x16/0xb0 [ 429.683750][T15245] __x64_sys_openat+0x138/0x170 [ 429.683781][T15245] do_syscall_64+0x166/0x520 [ 429.683809][T15245] ? trace_irq_disable+0x3b/0x140 [ 429.683830][T15245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.683845][T15245] ? clear_bhb_loop+0x70/0xc0 [ 429.683868][T15245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.683886][T15245] RIP: 0033:0x7f694739f559 [ 429.683904][T15245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.683918][T15245] RSP: 002b:00007f69455f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 429.683940][T15245] RAX: ffffffffffffffda RBX: 00007f6947625fa0 RCX: 00007f694739f559 [ 429.683956][T15245] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 429.683970][T15245] RBP: 00007f6947436b20 R08: 0000000000000000 R09: 0000000000000000 [ 429.683991][T15245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.684002][T15245] R13: 00007f6947626038 R14: 00007f6947625fa0 R15: 00007fff6e5b6478 [ 429.684032][T15245] [ 430.333553][T15265] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 430.471545][T15277] FAULT_INJECTION: forcing a failure. [ 430.471545][T15277] name failslab, interval 1, probability 0, space 0, times 0 [ 430.471571][T15277] CPU: 1 UID: 0 PID: 15277 Comm: syz.8.2802 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.471603][T15277] Tainted: [L]=SOFTLOCKUP [ 430.471610][T15277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 430.471621][T15277] Call Trace: [ 430.471630][T15277] [ 430.471638][T15277] dump_stack_lvl+0xe8/0x150 [ 430.471672][T15277] should_fail_ex+0x3eb/0x540 [ 430.471707][T15277] should_failslab+0xa8/0x100 [ 430.471732][T15277] __kmalloc_cache_noprof+0x9e/0x600 [ 430.471763][T15277] ? nci_hci_allocate+0x53/0x2b0 [ 430.471785][T15277] ? nci_hci_allocate+0x53/0x2b0 [ 430.471814][T15277] nci_hci_allocate+0x53/0x2b0 [ 430.471839][T15277] nci_allocate_device+0x207/0x380 [ 430.471872][T15277] virtual_ncidev_open+0x75/0x1a0 [ 430.471906][T15277] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 430.471928][T15277] misc_open+0x2d5/0x350 [ 430.471960][T15277] chrdev_open+0x4d9/0x600 [ 430.471989][T15277] ? __pfx_chrdev_open+0x10/0x10 [ 430.472012][T15277] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 430.472034][T15277] ? devcgroup_check_permission+0x31/0x8f0 [ 430.472064][T15277] ? __pfx_chrdev_open+0x10/0x10 [ 430.472084][T15277] do_dentry_open+0x80e/0x1360 [ 430.472118][T15277] vfs_open_consume+0x4a/0x350 [ 430.472147][T15277] ? path_openat+0x16e1/0x20f0 [ 430.472171][T15277] path_openat+0x16fc/0x20f0 [ 430.472208][T15277] do_file_open+0x23e/0x4a0 [ 430.472234][T15277] ? __pfx_do_file_open+0x10/0x10 [ 430.472276][T15277] ? _raw_spin_unlock+0x28/0x50 [ 430.472297][T15277] ? alloc_fd+0x6af/0x760 [ 430.472335][T15277] do_sys_openat2+0x115/0x200 [ 430.472362][T15277] ? __se_sys_futex+0x3a8/0x450 [ 430.472387][T15277] ? __pfx_do_sys_openat2+0x10/0x10 [ 430.472419][T15277] ? rcu_is_watching+0x16/0xb0 [ 430.472447][T15277] __x64_sys_openat+0x138/0x170 [ 430.472476][T15277] do_syscall_64+0x166/0x520 [ 430.472500][T15277] ? trace_irq_disable+0x3b/0x140 [ 430.472519][T15277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.472538][T15277] ? clear_bhb_loop+0x70/0xc0 [ 430.472563][T15277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.472582][T15277] RIP: 0033:0x7f694739f559 [ 430.472602][T15277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.472619][T15277] RSP: 002b:00007f69455f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 430.472639][T15277] RAX: ffffffffffffffda RBX: 00007f6947625fa0 RCX: 00007f694739f559 [ 430.472655][T15277] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 430.472669][T15277] RBP: 00007f6947436b20 R08: 0000000000000000 R09: 0000000000000000 [ 430.472683][T15277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.472695][T15277] R13: 00007f6947626038 R14: 00007f6947625fa0 R15: 00007fff6e5b6478 [ 430.472726][T15277] [ 430.629390][T15283] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 430.629416][T15283] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 430.629717][T15283] vhci_hcd vhci_hcd.0: Device attached [ 430.691980][T15284] vhci_hcd: connection closed [ 430.693030][ T7678] vhci_hcd vhci_hcd.8: stop threads [ 430.693049][ T7678] vhci_hcd vhci_hcd.8: release socket [ 430.693068][ T7678] vhci_hcd vhci_hcd.8: disconnect device [ 430.827251][ C1] net_ratelimit: 128 callbacks suppressed [ 431.042342][T15294] deleting an unspecified loop device is not supported. [ 431.258692][T15307] FAULT_INJECTION: forcing a failure. [ 431.258692][T15307] name failslab, interval 1, probability 0, space 0, times 0 [ 431.258715][T15307] CPU: 0 UID: 0 PID: 15307 Comm: syz.8.2812 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.258746][T15307] Tainted: [L]=SOFTLOCKUP [ 431.258750][T15307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 431.258757][T15307] Call Trace: [ 431.258762][T15307] [ 431.258767][T15307] dump_stack_lvl+0xe8/0x150 [ 431.258792][T15307] should_fail_ex+0x3eb/0x540 [ 431.258813][T15307] should_failslab+0xa8/0x100 [ 431.258827][T15307] __kmalloc_cache_noprof+0x9e/0x600 [ 431.258844][T15307] ? __kasan_kmalloc+0x93/0xb0 [ 431.258855][T15307] ? nci_allocate_device+0xe7/0x380 [ 431.258870][T15307] ? nci_allocate_device+0xe7/0x380 [ 431.258887][T15307] ? __pfx_virtual_nci_send+0x10/0x10 [ 431.258900][T15307] nci_allocate_device+0xe7/0x380 [ 431.258917][T15307] virtual_ncidev_open+0x75/0x1a0 [ 431.258931][T15307] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 431.258942][T15307] misc_open+0x2d5/0x350 [ 431.258960][T15307] chrdev_open+0x4d9/0x600 [ 431.258975][T15307] ? __pfx_chrdev_open+0x10/0x10 [ 431.258987][T15307] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 431.259000][T15307] ? devcgroup_check_permission+0x31/0x8f0 [ 431.259016][T15307] ? __pfx_chrdev_open+0x10/0x10 [ 431.259028][T15307] do_dentry_open+0x80e/0x1360 [ 431.259047][T15307] vfs_open_consume+0x4a/0x350 [ 431.259059][T15307] ? path_openat+0x16e1/0x20f0 [ 431.259072][T15307] path_openat+0x16fc/0x20f0 [ 431.259093][T15307] do_file_open+0x23e/0x4a0 [ 431.259107][T15307] ? __pfx_do_file_open+0x10/0x10 [ 431.259129][T15307] ? _raw_spin_unlock+0x28/0x50 [ 431.259141][T15307] ? alloc_fd+0x6af/0x760 [ 431.259161][T15307] do_sys_openat2+0x115/0x200 [ 431.259174][T15307] ? __se_sys_futex+0x3a8/0x450 [ 431.259189][T15307] ? __pfx_do_sys_openat2+0x10/0x10 [ 431.259205][T15307] ? rcu_is_watching+0x16/0xb0 [ 431.259220][T15307] __x64_sys_openat+0x138/0x170 [ 431.259236][T15307] do_syscall_64+0x166/0x520 [ 431.259250][T15307] ? trace_irq_disable+0x3b/0x140 [ 431.259261][T15307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.259272][T15307] ? clear_bhb_loop+0x70/0xc0 [ 431.259290][T15307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.259301][T15307] RIP: 0033:0x7f694739f559 [ 431.259312][T15307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.259321][T15307] RSP: 002b:00007f69455f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 431.259333][T15307] RAX: ffffffffffffffda RBX: 00007f6947625fa0 RCX: 00007f694739f559 [ 431.259341][T15307] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 431.259348][T15307] RBP: 00007f6947436b20 R08: 0000000000000000 R09: 0000000000000000 [ 431.259355][T15307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.259361][T15307] R13: 00007f6947626038 R14: 00007f6947625fa0 R15: 00007fff6e5b6478 [ 431.259378][T15307] [ 431.270745][T15306] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 431.767363][ T10] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 431.867340][ T9] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 431.918026][ T10] usb 8-1: New USB device found: idVendor=046d, idProduct=c299, bcdDevice=12.00 [ 431.919025][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.919038][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.920364][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 431.920374][ T10] usb 8-1: Product: syz [ 431.920381][ T10] usb 8-1: Manufacturer: syz [ 432.025283][T15318] netlink: 'syz.5.2817': attribute type 4 has an invalid length. [ 432.047534][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 432.048097][ T9] usb 9-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 432.050269][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 432.050279][ T9] usb 9-1: SerialNumber: syz [ 432.052472][ T9] usb 9-1: config 0 descriptor?? [ 432.101143][ T9] as10x_usb: device has been detected [ 432.101844][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 432.115295][ T9] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 432.162315][ T9] as10x_usb: error during firmware upload part1 [ 432.162703][ T9] Registered device nBox DVB-T Dongle [ 432.239572][T15318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.240457][T15318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.241608][T15318] netlink: 'syz.5.2817': attribute type 4 has an invalid length. [ 432.281018][ T5712] usb 9-1: USB disconnect, device number 16 [ 432.328887][ T5712] Unregistered device nBox DVB-T Dongle [ 432.331864][ T5712] as10x_usb: device has been disconnected [ 432.350568][ T32] audit: type=1326 audit(1792624263.798:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15313 comm="syz.7.2815" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b91f9f559 code=0x0 [ 432.440601][T15320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.441445][T15320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.446165][ T10] hid_parser_main: 4 callbacks suppressed [ 432.446173][ T10] logitech 0003:046D:C299.0007: unknown main item tag 0x1 [ 432.446209][ T10] logitech 0003:046D:C299.0007: item fetching failed at offset 15/31 [ 432.446590][ T10] logitech 0003:046D:C299.0007: parse failed [ 432.446644][ T10] logitech 0003:046D:C299.0007: probe with driver logitech failed with error -22 [ 433.030106][T15331] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 433.256859][T15331] block device autoloading is deprecated and will be removed. [ 433.309674][T15340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.310545][T15340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.378386][T15342] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 433.507210][ C0] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0 [ 433.507551][T15342] md: could not open device unknown-block(1,17). [ 433.509744][T15342] [ 433.526629][T15342] ====================================================== [ 433.533632][T15342] WARNING: possible circular locking dependency detected [ 433.537240][ C0] wireguard: wg0: Handshake for peer 43 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 433.552157][T15342] syzkaller #0 Tainted: G L [ 433.558244][T15342] ------------------------------------------------------ [ 433.561293][T15343] kcov: kcov_start: t = ffff88803714be80, size = 524288, area = ffffc9000e152000 [ 433.574422][T15342] syz.8.2826/15342 is trying to acquire lock: [ 433.580476][T15342] ffff888024316358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: array_state_store+0x4a5/0xe90 [ 433.590680][T15342] [ 433.590680][T15342] but task is already holding lock: [ 433.598052][T15342] ffff88805d5592d8 (kn->active#69){++++}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 433.604846][ C0] virtqueue callback for ffff888020b7b200 (ffffffff85790680) [ 433.604913][ C0] virtqueue interrupt with no work for ffff888020b7b400 [ 433.604927][ C0] virtqueue interrupt with no work for ffff888020b7b600 [ 433.604990][ T10] Added buffer head 0 to ffff888020b7b200 [ 433.634596][T15342] [ 433.634596][T15342] which lock already depends on the new lock. [ 433.634596][T15342] [ 433.645100][T15342] [ 433.645100][T15342] the existing dependency chain (in reverse order) is: [ 433.654119][T15342] [ 433.654119][T15342] -> #4 (kn->active#69){++++}-{0:0}: [ 433.661603][T15342] kernfs_drain+0x293/0x640 [ 433.666646][T15342] __kernfs_remove+0x493/0x910 [ 433.671934][T15342] kernfs_remove_by_name_ns+0xc0/0x140 [ 433.677923][T15342] sysfs_remove_group+0x101/0x2e0 [ 433.683470][T15342] sysfs_remove_groups+0x54/0xb0 [ 433.689014][T15342] __kobject_del+0x83/0x310 [ 433.694104][T15342] kobject_put+0x23a/0x550 [ 433.699045][T15342] process_scheduled_works+0xc3d/0x1630 [ 433.705115][T15342] worker_thread+0xa47/0xfb0 [ 433.710224][T15342] kthread+0x38b/0x480 [ 433.714817][T15342] ret_from_fork+0x514/0xb70 [ 433.719933][T15342] ret_from_fork_asm+0x1a/0x30 [ 433.725221][T15342] [ 433.725221][T15342] -> #3 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}: [ 433.734600][T15342] process_scheduled_works+0xc03/0x1630 [ 433.740676][T15342] worker_thread+0xa47/0xfb0 [ 433.745808][T15342] kthread+0x38b/0x480 [ 433.750419][T15342] ret_from_fork+0x514/0xb70 [ 433.755546][T15342] ret_from_fork_asm+0x1a/0x30 [ 433.760841][T15342] [ 433.760841][T15342] -> #2 ((wq_completion)md_misc){+.+.}-{0:0}: [ 433.769096][T15342] touch_wq_lockdep_map+0xcb/0x180 [ 433.774733][T15342] __flush_workqueue+0x148/0x10b0 [ 433.780283][T15342] md_alloc+0x32/0xf20 [ 433.784963][T15342] md_alloc_and_put+0x1a/0x1f0 [ 433.790248][T15342] blk_request_module+0x27d/0x2a0 [ 433.795948][T15342] blkdev_get_no_open+0x3f/0xe0 [ 433.801389][T15342] blkdev_open+0x1d7/0x600 [ 433.806327][T15342] do_dentry_open+0x80e/0x1360 [ 433.811616][T15342] vfs_open_consume+0x4a/0x350 [ 433.815093][T15340] kcov: kcov_task_exit: t = ffff88802fb29f40, kcov->t = ffff88802fb29f40 [ 433.825394][T15342] path_openat+0x16fc/0x20f0 [ 433.830509][T15342] do_file_open+0x23e/0x4a0 [ 433.835526][T15342] do_sys_openat2+0x115/0x200 [ 433.840741][T15342] __x64_sys_openat+0x138/0x170 [ 433.846134][T15342] do_syscall_64+0x166/0x520 [ 433.851242][T15342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.857649][T15342] [ 433.857649][T15342] -> #1 (major_names_lock){+.+.}-{4:4}: [ 433.865370][T15342] __mutex_lock+0x197/0x15a0 [ 433.870484][T15342] blk_request_module+0x35/0x2a0 [ 433.875977][T15342] blkdev_get_no_open+0x3f/0xe0 [ 433.881384][T15342] bdev_file_open_by_dev+0xa0/0x240 [ 433.887112][T15342] md_import_device+0x2e9/0x650 [ 433.892505][T15342] new_dev_store+0x46d/0x860 [ 433.897628][T15342] md_attr_store+0x3b7/0x640 [ 433.902753][T15342] kernfs_fop_write_iter+0x3a4/0x540 [ 433.908558][T15342] vfs_write+0x612/0xba0 [ 433.913313][T15342] ksys_write+0x150/0x270 [ 433.918153][T15342] do_syscall_64+0x166/0x520 [ 433.923264][T15342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.929668][T15342] [ 433.929668][T15342] -> #0 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 433.937913][T15342] __lock_acquire+0x164c/0x2de0 [ 433.943275][T15342] lock_acquire+0x115/0x350 [ 433.948288][T15342] __mutex_lock+0x197/0x15a0 [ 433.953398][T15342] array_state_store+0x4a5/0xe90 [ 433.958935][T15342] md_attr_store+0x3b7/0x640 [ 433.964038][T15342] kernfs_fop_write_iter+0x3a4/0x540 [ 433.969839][T15342] vfs_write+0x612/0xba0 [ 433.974609][T15342] ksys_write+0x150/0x270 [ 433.979443][T15342] do_syscall_64+0x166/0x520 [ 433.984548][T15342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.990953][T15342] [ 433.990953][T15342] other info that might help us debug this: [ 433.990953][T15342] [ 434.001170][T15342] Chain exists of: [ 434.001170][T15342] &mddev->reconfig_mutex --> (work_completion)(&mddev->del_work) --> kn->active#69 [ 434.001170][T15342] [ 434.016371][T15342] Possible unsafe locking scenario: [ 434.016371][T15342] [ 434.023809][T15342] CPU0 CPU1 [ 434.029160][T15342] ---- ---- [ 434.034517][T15342] rlock(kn->active#69); [ 434.038842][T15342] lock((work_completion)(&mddev->del_work)); [ 434.047501][T15342] lock(kn->active#69); [ 434.054262][T15342] lock(&mddev->reconfig_mutex); [ 434.059271][T15342] [ 434.059271][T15342] *** DEADLOCK *** [ 434.059271][T15342] [ 434.067401][T15342] locks held by syz.8.2826/15342: 5, last CPU#1: [ 434.073712][T15342] #0: ffff8880348137b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 434.082758][T15342] #1: ffff88807f978460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 434.091650][T15342] #2: ffff8880270de108 (&of->prealloc_mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x147/0x540 [ 434.102192][T15342] #3: ffff8880270de080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 434.111949][T15342] #4: ffff88805d5592d8 (kn->active#69){++++}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 434.121970][T15342] [ 434.121970][T15342] stack backtrace: [ 434.127850][T15342] CPU: 1 UID: 0 PID: 15342 Comm: syz.8.2826 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.138871][T15342] Tainted: [L]=SOFTLOCKUP [ 434.143183][T15342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 434.153226][T15342] Call Trace: [ 434.156498][T15342] [ 434.159419][T15342] dump_stack_lvl+0xe8/0x150 [ 434.164008][T15342] print_circular_bug+0x2e2/0x300 [ 434.169058][T15342] check_noncircular+0x12f/0x150 [ 434.174080][T15342] __lock_acquire+0x164c/0x2de0 [ 434.178924][T15342] ? look_up_lock_class+0x57/0x110 [ 434.184031][T15342] ? register_lock_class+0x31/0x2e0 [ 434.189217][T15342] ? __lock_acquire+0x747/0x2de0 [ 434.194160][T15342] lock_acquire+0x115/0x350 [ 434.198654][T15342] ? array_state_store+0x4a5/0xe90 [ 434.203778][T15342] __mutex_lock+0x197/0x15a0 [ 434.208388][T15342] ? array_state_store+0x4a5/0xe90 [ 434.213509][T15342] ? lockdep_unlock+0x5c/0xd0 [ 434.218274][T15342] ? __lock_acquire+0x1511/0x2de0 [ 434.223296][T15342] ? array_state_store+0x4a5/0xe90 [ 434.228419][T15342] ? __pfx___mutex_lock+0x10/0x10 [ 434.233464][T15342] ? do_raw_spin_lock+0x12b/0x2f0 [ 434.238501][T15342] array_state_store+0x4a5/0xe90 [ 434.243447][T15342] md_attr_store+0x3b7/0x640 [ 434.248037][T15342] ? __pfx_sysfs_kf_write+0x10/0x10 [ 434.253229][T15342] kernfs_fop_write_iter+0x3a4/0x540 [ 434.258520][T15342] vfs_write+0x612/0xba0 [ 434.262765][T15342] ? __pfx_vfs_write+0x10/0x10 [ 434.267528][T15342] ? __fget_files+0x3a2/0x420 [ 434.272195][T15342] ? __fget_files+0x2a/0x420 [ 434.276771][T15342] ? fdget+0x1ac/0x250 [ 434.280860][T15342] ksys_write+0x150/0x270 [ 434.285198][T15342] ? __pfx_ksys_write+0x10/0x10 [ 434.290042][T15342] do_syscall_64+0x166/0x520 [ 434.294629][T15342] ? trace_irq_disable+0x3b/0x140 [ 434.299644][T15342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.305709][T15342] ? clear_bhb_loop+0x70/0xc0 [ 434.310393][T15342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.316280][T15342] RIP: 0033:0x7f694739f559 [ 434.320689][T15342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.340292][T15342] RSP: 002b:00007f69455f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 434.348746][T15342] RAX: ffffffffffffffda RBX: 00007f6947625fa0 RCX: 00007f694739f559 [ 434.356714][T15342] RDX: 0000000000000006 RSI: 0000200000000440 RDI: 0000000000000009 [ 434.364675][T15342] RBP: 00007f6947436b20 R08: 0000000000000000 R09: 0000000000000000 [ 434.372639][T15342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.380786][T15342] R13: 00007f6947626038 R14: 00007f6947625fa0 R15: 00007fff6e5b6478 [ 434.388768][T15342] [ 434.391915][ C1] virtqueue callback for ffff888027299a00 (ffffffff86d98c60) [ 434.393358][ C1] No more buffers in queue [ 434.393651][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 434.393731][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 434.393763][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 434.393795][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 434.393810][ C1] No more buffers in queue [ 434.394001][ C1] eth0: xmit ffff888058428500 42:01:0a:80:00:01 [ 434.394025][ C1] Added buffer head 25 to ffff888027299800 [ 434.394064][ C1] virtqueue callback for ffff888027299800 (ffffffff86d98da0) [ 434.394153][ C1] eth0: xmit ffff88805c6fdc80 42:01:0a:80:00:01 [ 434.394171][ C1] Added buffer head 5 to ffff888027299800 [ 434.394252][ C1] eth0: xmit ffff88805c6fdb40 42:01:0a:80:00:01 [ 434.394269][ C1] Added buffer head 17 to ffff888027299800 [ 434.394629][ C1] Sent skb ffff888058428500 [ 434.394660][ C1] Sent skb ffff88805c6fdc80 [ 434.394685][ C1] Sent skb ffff88805c6fdb40 [ 434.394711][ C1] No more buffers in queue [ 434.395043][ T5712] firmware_class: device_uncache_fw_images [ 434.395508][ C1] virtqueue interrupt with no work for ffff888027299800 [ 434.408373][ C0] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0 [ 434.417692][T15344] async_waiting @ 15344 [ 434.417711][T15344] async_continuing @ 15344 after 0 usec [ 434.461808][T15343] kcov: kcov_task_exit: t = ffff88803714be80, kcov->t = ffff88803714be80 [ 434.489474][T15342] md: pers->run() failed ... [ 434.489574][T15342] kcov: kcov_task_exit: t = ffff88804635ddc0, kcov->t = ffff88804635ddc0 [ 434.506521][T15336] kcov: kcov_task_exit: t = ffff888033285dc0, kcov->t = ffff888033285dc0 [ 434.526286][T15320] kcov: kcov_task_exit: t = ffff88805db03e80, kcov->t = ffff88805db03e80 [ 434.581090][T15320] bus: 'gadget': remove driver raw-gadget.1 [ 434.581108][T15320] kernfs bind: removing [ 434.581127][T15320] kernfs unbind: removing [ 434.581142][T15320] kernfs uevent: removing [ 434.581157][T15320] kernfs gadget.7: removing [ 434.581174][T15320] kernfs driver: removing [ 434.581193][T15320] udc dummy_udc.7: unbinding gadget driver [USB Raw Gadget] [ 434.581206][T15320] raw-gadget.1 gadget.7: gadget suspended [ 434.581223][T15320] dummy_hcd dummy_hcd.7: port status 0x00010100 has changes [ 434.581262][ C1] kcov: kcov_remote_start: handle = 100000000000008, context: softirq [ 434.581273][ C1] kcov: kcov_start: t = ffff88801fabbe80, size = 262144, area = ffffc900022f2000 [ 434.581304][ C1] kcov: kcov_move_area: ffffc9001d008000 1048576 <= ffffc900022f2000 94 [ 434.581327][ T31] kcov: kcov_remote_start: handle = 100000000000008, context: task [ 434.581336][ T31] kcov: kcov_start: t = ffff88801feb3e80, size = 1048576, area = ffffc90017189000 [ 434.581348][ T31] hub 8-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 434.581380][ T31] dummy_hcd dummy_hcd.7: port status 0x00010100 has changes [ 434.581426][ C1] kcov: kcov_remote_start: handle = 100000000000008, context: softirq [ 434.581435][ C1] kcov: kcov_start: t = ffff88801fabbe80, size = 262144, area = ffffc900022f2000 [ 434.581457][ C1] kcov: kcov_move_area: ffffc9001d008000 1048576 <= ffffc900022f2000 94 [ 434.581472][ C1] kcov: kcov_remote_start: handle = 100000000000008, context: softirq [ 434.581480][ C1] kcov: kcov_start: t = ffff88801fabbe80, size = 262144, area = ffffc900022f2000 [ 434.581494][ C1] kcov: kcov_move_area: ffffc9001d008000 1048576 <= ffffc900022f2000 15 [ 434.581567][ C1] kcov: kcov_remote_start: handle = 100000000000008, context: softirq [ 434.581576][ C1] kcov: kcov_start: t = ffff88801fabbe80, size = 262144, area = ffffc900022f2000 [ 434.581591][ C1] kcov: kcov_move_area: ffffc9001d008000 1048576 <= ffffc900022f2000 15 [ 434.581615][ T31] usb usb8-port1: status 0100, change 0001, 12 Mb/s [ 434.581632][ T31] usb 8-1: USB disconnect, device number 25 [ 434.581641][ T31] usb 8-1: unregistering device [ 434.581648][ T31] usb 8-1: unregistering interface 8-1:1.0 [ 434.581656][ T31] device: 'ep_81': device_unregister [ 434.581673][ T31] kernfs runtime_status: removing [ 434.581691][ T31] kernfs control: removing [ 434.581706][ T31] kernfs runtime_suspended_time: removing [ 434.581720][ T31] kernfs runtime_active_time: removing [ 434.581733][ T31] kernfs autosuspend_delay_ms: removing [ 434.581755][ T31] kernfs power: removing [ 434.581770][ T31] kernfs uevent: removing [ 434.581787][ T31] kernfs bLength: removing [ 434.581802][ T31] kernfs bEndpointAddress: removing [ 434.581815][ T31] kernfs bmAttributes: removing [ 434.581829][ T31] kernfs bInterval: removing [ 434.581843][ T31] kernfs wMaxPacketSize: removing [ 434.581857][ T31] kernfs interval: removing [ 434.581870][ T31] kernfs type: removing [ 434.581883][ T31] kernfs direction: removing [ 434.581896][ T31] PM: Removing info for No Bus:ep_81 [ 434.581912][ T31] kobject: 'ep_81' (ffff888035fc0010): kobject_uevent_env [ 434.581921][ T31] kobject: 'ep_81' (ffff888035fc0010): kobject_uevent_env: filter function caused the event to drop! [ 434.581931][ T31] kernfs ep_81: removing [ 434.581945][ T31] kobject: 'ep_81' (ffff888035fc0010): kobject_cleanup, parent 0000000000000000 [ 434.581955][ T31] kobject: 'ep_81' (ffff888035fc0010): calling ktype release [ 434.581972][ T31] kobject: 'ep_81': free name [ 434.582004][ T31] kernfs power: removing [ 434.582028][ T31] kernfs uevent: removing [ 434.582049][ T31] kernfs bInterfaceNumber: removing [ 434.582073][ T31] kernfs bAlternateSetting: removing [ 434.582098][ T31] kernfs bNumEndpoints: removing [ 434.582123][ T31] kernfs bInterfaceClass: removing [ 434.582142][ T31] kernfs bInterfaceSubClass: removing [ 434.582156][ T31] kernfs bInterfaceProtocol: removing [ 434.582170][ T31] kernfs modalias: removing [ 434.582183][ T31] kernfs supports_autosuspend: removing [ 434.582197][ T31] kernfs authorized: removing [ 434.582216][ T31] kernfs subsystem: removing [ 434.582226][ T31] kernfs 8-1:1.0: removing [ 434.582240][ T31] bus: 'usb': remove device 8-1:1.0 [ 434.582252][ T31] kernfs 8-1:1.0: removing [ 434.582265][ T31] kernfs driver: removing [ 434.582297][ T31] kernfs runtime_status: removing [ 434.582314][ T31] kernfs control: removing [ 434.582328][ T31] kernfs runtime_suspended_time: removing [ 434.582342][ T31] kernfs runtime_active_time: removing [ 434.582357][ T31] kernfs autosuspend_delay_ms: removing [ 434.582377][ T31] kernfs power: removing [ 434.582392][ T31] kernfs uevent: removing [ 434.582412][ T31] kernfs subsystem: removing [ 434.582427][ T31] kernfs 0003:046D:C299.0007: removing [ 434.582442][ T31] kernfs modalias: removing [ 434.582457][ T31] kernfs report_descriptor: removing [ 434.582472][ T31] kernfs bustype: removing [ 434.582487][ T31] kernfs vendor: removing [ 434.582501][ T31] kernfs product: removing [ 434.582515][ T31] kernfs version: removing [ 434.582528][ T31] kernfs id: removing [ 434.582542][ T31] bus: 'hid': remove device 0003:046D:C299.0007 [ 434.582549][ T31] PM: Removing info for hid:0003:046D:C299.0007 [ 434.582559][ T31] kobject: '0003:046D:C299.0007' (ffff88805c60d930): kobject_uevent_env [ 434.582581][ T31] kobject: '0003:046D:C299.0007' (ffff88805c60d930): fill_kobj_path: path = '/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/0003:046D:C299.0007' [ 434.582681][ T31] kernfs 0003:046D:C299.0007: removing [ 434.582840][ T31] kobject: '0003:046D:C299.0007' (ffff88805c60d930): kobject_cleanup, parent 0000000000000000 [ 434.582861][ T31] kobject: '0003:046D:C299.0007' (ffff88805c60d930): calling ktype release [ 434.582914][ T31] kobject: '0003:046D:C299.0007': free name [ 434.582973][ T31] kobject: '8-1:1.0' (ffff888046a92078): kobject_uevent_env [ 434.583006][ T31] kobject: '8-1:1.0' (ffff888046a92078): fill_kobj_path: path = '/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0' [ 434.583146][ T31] PM: Removing info for usb:8-1:1.0 [ 434.583165][ T31] kobject: '8-1:1.0' (ffff888046a92078): kobject_uevent_env [ 434.583193][ T31] kobject: '8-1:1.0' (ffff888046a92078): fill_kobj_path: path = '/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0' [ 434.583293][ T31] kernfs 8-1:1.0: removing [ 434.583310][ T31] kobject: '8-1:1.0' (ffff888046a92078): kobject_cleanup, parent 0000000000000000 [ 434.583328][ T31] kobject: '8-1:1.0' (ffff888046a92078): calling ktype release [ 434.583357][ T31] kobject: '8-1:1.0': free name [ 434.583378][ T31] usb 8-1: usb_disable_device nuking all URBs [ 434.583397][ T31] kernfs port: removing [ 434.583433][ T31] kernfs device: removing [ 434.583454][ T31] device: 'ep_00': device_unregister [ 434.583478][ T31] kernfs runtime_status: removing [ 434.583500][ T31] kernfs control: removing [ 434.583521][ T31] kernfs runtime_suspended_time: removing [ 434.583543][ T31] kernfs runtime_active_time: removing [ 434.583563][ T31] kernfs autosuspend_delay_ms: removing [ 434.583597][ T31] kernfs power: removing [ 434.583621][ T31] kernfs uevent: removing [ 434.583644][ T31] kernfs bLength: removing [ 434.583665][ T31] kernfs bEndpointAddress: removing [ 434.583682][ T31] kernfs bmAttributes: removing [ 434.583704][ T31] kernfs bInterval: removing [ 434.583727][ T31] kernfs wMaxPacketSize: removing [ 434.583816][ T31] kernfs interval: removing [ 434.583842][ T31] kernfs type: removing [ 434.583865][ T31] kernfs direction: removing [ 434.583887][ T31] PM: Removing info for No Bus:ep_00 [ 434.583903][ T31] kobject: 'ep_00' (ffff888036c76010): kobject_uevent_env [ 434.583917][ T31] kobject: 'ep_00' (ffff888036c76010): kobject_uevent_env: filter function caused the event to drop! [ 434.583935][ T31] kernfs ep_00: removing [ 434.583966][ T31] kobject: 'ep_00' (ffff888036c76010): kobject_cleanup, parent 0000000000000000 [ 434.583984][ T31] kobject: 'ep_00' (ffff888036c76010): calling ktype release [ 434.584012][ T31] kobject: 'ep_00': free name [ 434.584046][ T31] kernfs autosuspend: removing [ 434.584072][ T31] kernfs level: removing [ 434.584098][ T31] kernfs connected_duration: removing [ 434.584125][ T31] kernfs active_duration: removing [ 434.584155][ T31] kernfs persist: removing [ 434.584191][ T31] kernfs runtime_status: removing [ 434.584215][ T31] kernfs control: removing [ 434.584239][ T31] kernfs runtime_suspended_time: removing [ 434.584264][ T31] kernfs runtime_active_time: removing [ 434.584288][ T31] kernfs autosuspend_delay_ms: removing [ 434.584314][ T31] kernfs wakeup: removing [ 434.584338][ T31] kernfs wakeup_count: removing [ 434.584362][ T31] kernfs wakeup_active_count: removing [ 434.584386][ T31] kernfs wakeup_abort_count: removing [ 434.584417][ T31] kernfs wakeup_expire_count: removing [ 434.584441][ T31] kernfs wakeup_active: removing [ 434.584466][ T31] kernfs wakeup_total_time_ms: removing [ 434.584491][ T31] kernfs wakeup_max_time_ms: removing [ 434.584515][ T31] kernfs wakeup_last_time_ms: removing [ 434.584541][ T31] kernfs power: removing [ 434.584742][ T31] kernfs 189:920: removing [ 434.584769][ T31] kernfs dev: removing [ 434.584794][ T31] kernfs uevent: removing [ 434.584811][ T31] kernfs removable: removing [ 434.584838][ T31] kernfs configuration: removing [ 434.584863][ T31] kernfs bNumInterfaces: removing [ 434.584888][ T31] kernfs bConfigurationValue: removing [ 434.584912][ T31] kernfs bmAttributes: removing [ 434.584936][ T31] kernfs bMaxPower: removing [ 434.584961][ T31] kernfs urbnum: removing [ 434.585019][T15320] raw-gadget.1 gadget.7: gadget disconnected [ 434.585057][ T31] kernfs idVendor: removing [ 434.585075][ T31] kernfs idProduct: removing [ 434.585091][ T31] kernfs bcdDevice: removing [ 434.585106][ T31] kernfs bDeviceClass: removing [ 434.585131][ T31] kernfs bDeviceSubClass: removing [ 434.585155][ T31] kernfs bDeviceProtocol: removing [ 434.585179][ T31] kernfs bNumConfigurations: removing [ 434.585201][ T31] kernfs bMaxPacketSize0: removing [ 434.585224][ T31] kernfs speed: removing [ 434.585247][ T31] kernfs rx_lanes: removing [ 434.585270][ T31] kernfs tx_lanes: removing [ 434.585294][ T31] kernfs busnum: removing [ 434.585319][ T31] kernfs devnum: removing [ 434.585341][ T31] kernfs devpath: removing [ 434.585366][ T31] kernfs version: removing [ 434.585390][ T31] kernfs maxchild: removing [ 434.585457][T15320] kobject: 'dummy_udc.7' (ffff88802c1ee018): kobject_uevent_env [ 434.585499][T15320] kobject: 'dummy_udc.7' (ffff88802c1ee018): fill_kobj_path: path = '/devices/platform/dummy_udc.7/udc/dummy_udc.7' [ 434.585587][ T31] kernfs quirks: removing [ 434.585615][ T31] kernfs avoid_reset_quirk: removing [ 434.585640][ T31] kernfs authorized: removing [ 434.585665][ T31] kernfs remove: removing [ 434.585760][T15320] kobject: 'gadget.7' (ffff88802b4c0cd8): kobject_uevent_env [ 434.585795][T15320] kobject: 'gadget.7' (ffff88802b4c0cd8): fill_kobj_path: path = '/devices/platform/dummy_udc.7/gadget.7' [ 434.586688][ T31] kernfs ltm_capable: removing [ 434.586729][ T31] kernfs devspec: removing [ 434.586756][ T31] kernfs manufacturer: removing [ 434.586773][ T31] kernfs product: removing [ 434.586794][ T31] kernfs descriptors: removing [ 434.586816][ T31] kernfs subsystem: removing [ 434.586834][ T31] kernfs 8-1: removing [ 434.586859][ T31] bus: 'usb': remove device 8-1 [ 434.586876][ T31] kernfs 8-1: removing [ 434.586900][ T31] kernfs driver: removing [ 434.586937][ T31] kobject: '8-1' (ffff888026a800b0): kobject_uevent_env [ 434.586967][ T31] kobject: '8-1' (ffff888026a800b0): fill_kobj_path: path = '/devices/platform/dummy_hcd.7/usb8/8-1' [ 434.587092][ T31] PM: Removing info for usb:8-1 [ 434.587117][ T31] kobject: '8-1' (ffff888026a800b0): kobject_uevent_env [ 434.587584][ T31] kobject: '8-1' (ffff888026a800b0): fill_kobj_path: path = '/devices/platform/dummy_hcd.7/usb8/8-1' [ 434.587701][ T31] kernfs 8-1: removing [ 434.587720][ T31] kobject: '8-1' (ffff888026a800b0): kobject_cleanup, parent 0000000000000000 [ 434.587737][ T31] kobject: '8-1' (ffff888026a800b0): calling ktype release [ 434.587811][ T31] kobject: '8-1': free name [ 434.588041][ C1] kcov: kcov_remote_start: handle = 100000000000008, context: softirq [ 434.588057][ C1] kcov: kcov_start: t = ffff88807eee8000, size = 262144, area = ffffc900022f2000 [ 434.588086][ C1] kcov: kcov_move_area: ffffc9001d008000 1048576 <= ffffc900022f2000 15 [ 434.588698][T15320] kernfs module: removing [ 434.588746][T15320] kernfs gadget:raw-gadget.1: removing [ 434.588781][T15320] kobject: 'raw-gadget.1' (ffff88802b279a00): kobject_cleanup, parent ffff88801cb0c750 [ 434.588799][T15320] kobject: 'raw-gadget.1' (ffff88802b279a00): auto cleanup kobject_del [ 434.588813][T15320] kobject: 'raw-gadget.1' (ffff88802b279a00): auto cleanup 'remove' event [ 434.588826][T15320] kobject: 'raw-gadget.1' (ffff88802b279a00): kobject_uevent_env [ 434.588861][T15320] kobject: 'raw-gadget.1' (ffff88802b279a00): fill_kobj_path: path = '/bus/gadget/drivers/raw-gadget.1' [ 434.588958][T15320] kernfs raw-gadget.1: removing [ 434.588973][T15320] kobject: 'raw-gadget.1' (ffff88802b279a00): calling ktype release [ 434.588986][T15320] driver: 'raw-gadget.1': driver_release [ 434.589005][T15320] kobject: 'raw-gadget.1': free name [ 434.605949][ C0] virtqueue callback for ffff888020b7b200 (ffffffff85790680) [ 434.606006][ C0] virtqueue interrupt with no work for ffff888020b7b400 [ 434.606020][ C0] virtqueue interrupt with no work for ffff888020b7b600 [ 434.610739][ T9] Added buffer head 0 to ffff888020b7b200 [ 434.637356][ C1] kcov: kcov_remote_start: handle = 100000000000008, context: softirq [ 434.637381][ C1] kcov: kcov_start: t = ffff88801fabbe80, size = 262144, area = ffffc900022f2000 [ 434.637457][ C1] kcov: kcov_move_area: ffffc9001d008000 1048576 <= ffffc900022f2000 2 [ 434.677380][ C1] kcov: kcov_remote_start: handle = 100000000000008, context: softirq [ 434.677406][ C1] kcov: kcov_start: t = ffff88801fabbe80, size = 262144, area = ffffc900022f2000 [ 434.677430][ C1] kcov: kcov_move_area: ffffc9001d008000 1048576 <= ffffc900022f2000 2 [ 434.717288][ C1] kcov: kcov_remote_start: handle = 100000000000008, context: softirq [ 434.717315][ C1] kcov: kcov_start: t = ffff88801fabbe80, size = 262144, area = ffffc900022f2000 [ 434.717345][ C1] kcov: kcov_move_area: ffffc9001d008000 1048576 <= ffffc900022f2000 15 [ 434.757631][ C1] kcov: kcov_remote_start: handle = 100000000000008, context: softirq [ 434.757659][ C1] kcov: kcov_start: t = ffff88801fabbe80, size = 262144, area = ffffc900022f2000 [ 434.757688][ C1] kcov: kcov_move_area: ffffc9001d008000 1048576 <= ffffc900022f2000 15 [ 434.757766][ T31] usb usb8-port1: debounce total 100ms stable 100ms status 0x100 [ 434.757797][ T31] kcov: kcov_move_area: ffffc9001d008000 1048576 <= ffffc90017189000 115322 [ 434.757999][ T31] kcov: kcov_remote_start: handle = 100000000000008, context: task [ 434.758016][ T31] kcov: kcov_start: t = ffff88801feb3e80, size = 1048576, area = ffffc90017189000 [ 434.758047][ T31] hub 8-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 434.758139][ C1] kcov: kcov_remote_start: handle = 100000000000008, context: softirq [ 434.758156][ C1] kcov: kcov_start: t = ffff88801fabbe80, size = 262144, area = ffffc900022f2000 [ 434.758179][ C1] kcov: kcov_move_area: ffffc9001d008000 1048576 <= ffffc900022f2000 2 [ 434.758274][ T31] kcov: kcov_move_area: ffffc9001d008000 1048576 <= ffffc90017189000 1083 [ 434.762809][ T1108] hub 8-0:1.0: hub_suspend [ 434.762867][ C0] kcov: kcov_remote_start: handle = 100000000000008, context: softirq [ 434.762878][ C0] kcov: kcov_start: t = ffff88801f6a1f40, size = 262144, area = ffffc900022f2000 [ 434.762891][ C0] kcov: kcov_move_area: ffffc9001d008000 1048576 <= ffffc900022f2000 3 [ 434.762939][ T1108] usb usb8: bus auto-suspend, wakeup 1 [ 434.762955][ T1108] usb usb8: dummy_bus_suspend [ 434.900871][ T7678] IPv6: now = 4294980608, schedule = 4294992697, rounded schedule = 4294992797 => 4294992697 [ 435.606534][ C0] virtqueue callback for ffff888020b7b200 (ffffffff85790680) [ 435.606586][ C0] virtqueue interrupt with no work for ffff888020b7b400 [ 435.606594][ C0] virtqueue interrupt with no work for ffff888020b7b600 [ 435.606655][ T9] Added buffer head 0 to ffff888020b7b200 [ 435.939590][ C0] net_ratelimit: 83 callbacks suppressed [ 435.939604][ C0] wireguard: wg0: Sending keepalive packet to peer 38 ([::1]:20003/0%0) [ 435.949846][ T8242] wireguard: wg2: Receiving keepalive packet from peer 41 ([::1]:20001/0%0) [ 436.101251][ C0] wireguard: wg1: Handshake for peer 46 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 9) [ 436.101336][ T7678] wireguard: wg1: Sending handshake initiation to peer 46 (127.0.0.1:20003) [ 436.101613][ T7678] wireguard: wg1: No route to 127.0.0.1:20003, error -101 [ 436.178263][ C0] ipv6_addr_label(addr=fc00:0000:0000:0000:0000:0000:0000:0001, type=0, ifindex=0) => 00000005 [ 436.178290][ C0] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=1) => 00000000 [ 436.178302][ C0] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:0000:000a, type=0, ifindex=1) => 00000001 [ 436.178315][ C0] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:0000:000e, type=0, ifindex=2) => 00000001 [ 436.178329][ C0] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:ac14:140d, type=0, ifindex=3) => 00000001 [ 436.178341][ C0] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:ac14:140c, type=0, ifindex=3) => 00000001 [ 436.178460][ C0] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 436.604633][ C0] virtqueue callback for ffff888020b7b200 (ffffffff85790680) [ 436.604686][ C0] virtqueue interrupt with no work for ffff888020b7b400 [ 436.604694][ C0] virtqueue interrupt with no work for ffff888020b7b600 [ 436.604757][ T9] Added buffer head 0 to ffff888020b7b200 [ 437.459071][ T4942] sd 0:0:1:0: cmd ffff88802e8ae210 CDB: 0x2a [ 437.459094][ T4942] Added buffer head 38 to ffff888027b1a200 [ 437.476585][ C1] virtqueue callback for ffff888027b1a200 (ffffffff8687dca0) [ 437.476621][ C1] sd 0:0:1:0: cmd ffff88802e8ae210 response 0 status 0x0 sense_len 0 [ 437.476643][ C1] No more buffers in queue [ 437.477076][ T2045] sd 0:0:1:0: cmd ffff8880284af910 CDB: 0x35 [ 437.477100][ T2045] Added buffer head 38 to ffff888027b1a200 [ 437.477197][ C1] virtqueue callback for ffff888027b1a200 (ffffffff8687dca0) [ 437.477216][ C1] sd 0:0:1:0: cmd ffff8880284af910 response 0 status 0x0 sense_len 0 [ 437.477237][ C1] No more buffers in queue [ 437.477317][ T2045] sd 0:0:1:0: cmd ffff88802e8ae5d0 CDB: 0x2a [ 437.477337][ T2045] Added buffer head 38 to ffff888027b1a200 [ 437.478555][ C1] virtqueue callback for ffff888027b1a200 (ffffffff8687dca0) [ 437.478578][ C1] sd 0:0:1:0: cmd ffff88802e8ae5d0 response 0 status 0x0 sense_len 0 [ 437.478599][ C1] No more buffers in queue [ 437.604548][ C0] virtqueue callback for ffff888020b7b200 (ffffffff85790680) [ 437.604612][ C0] virtqueue interrupt with no work for ffff888020b7b400 [ 437.604620][ C0] virtqueue interrupt with no work for ffff888020b7b600 [ 437.604673][ T9] Added buffer head 0 to ffff888020b7b200 [ 437.637196][ T45] rxe0: qp#16 rxe_completer: state = GET ACK [ 437.637221][ T45] rxe0: qp#16 rxe_completer: state = GET WQE [ 437.637234][ T45] rxe0: qp#16 rxe_completer: state = COMP WQE [ 437.639586][ T7678] rxe0: qp#16 rxe_receiver: state = GET_REQ [ 437.639607][ T7678] rxe0: qp#16 rxe_receiver: state = CHK_PSN [ 437.639619][ T7678] rxe0: qp#16 rxe_receiver: state = CHK_OP_SEQ [ 437.639633][ T7678] rxe0: qp#16 rxe_receiver: state = CHK_OP_VALID [ 437.639646][ T7678] rxe0: qp#16 rxe_receiver: state = CHK_RESOURCE [ 437.639659][ T7678] rxe0: qp#16 rxe_receiver: state = CHK_LENGTH [ 437.639673][ T7678] rxe0: qp#16 rxe_receiver: state = EXECUTE [ 437.639691][ T7678] rxe0: qp#16 rxe_receiver: state = COMPLETE [ 437.639884][ T7678] rxe0: qp#16 rxe_receiver: state = CLEANUP [ 437.639915][ T7678] rxe0: qp#16 rxe_receiver: state = DONE [ 437.639929][ T7678] rxe0: qp#16 rxe_receiver: state = GET_REQ [ 437.639942][ T7678] rxe0: qp#16 rxe_receiver: state = EXIT [ 437.641982][ T45] rxe0: qp#16 rxe_completer: state = GET WQE [ 437.642001][ T45] rxe0: qp#16 rxe_completer: state = EXIT [ 437.642018][ T45] rxe0: qp#16 rxe_completer: state = GET ACK [ 437.642031][ T45] rxe0: qp#16 rxe_completer: state = GET WQE [ 437.642044][ T45] rxe0: qp#16 rxe_completer: state = EXIT [ 438.097166][ C0] wireguard: wg2: Handshake for peer 48 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 20) [ 438.097247][ C0] wireguard: wg1: Handshake for peer 45 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 10) [ 438.097303][ C0] wireguard: wg2: Handshake for peer 47 ([::1]:20001/0%0) did not complete after 20 attempts, giving up [ 438.604447][ C0] virtqueue callback for ffff888020b7b200 (ffffffff85790680) [ 438.604498][ C0] virtqueue interrupt with no work for ffff888020b7b400 [ 438.604505][ C0] virtqueue interrupt with no work for ffff888020b7b600 [ 438.604558][ T10] Added buffer head 0 to ffff888020b7b200 [ 438.737193][ C1] wireguard: wg0: Handshake for peer 44 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 438.737193][ C0] wireguard: wg0: Handshake for peer 43 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 439.604368][ C0] virtqueue callback for ffff888020b7b200 (ffffffff85790680) [ 439.604420][ C0] virtqueue interrupt with no work for ffff888020b7b400 [ 439.604428][ C0] virtqueue interrupt with no work for ffff888020b7b600 [ 439.604482][ T10] Added buffer head 0 to ffff888020b7b200 [ 440.018591][ T1316] eth0: xmit ffff8880733db280 ff:ff:ff:ff:ff:ff [ 440.018626][ T1316] Added buffer head 177 to ffff888027299c00 [ 440.018645][ C0] virtqueue callback for ffff888027299c00 (ffffffff86d98da0) [ 440.018680][ C0] Sent skb ffff8880733db280 [ 440.018712][ C0] No more buffers in queue [ 440.018726][ C0] No more buffers in queue [ 440.018792][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.018827][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.249187][ C1] virtqueue callback for ffff888027299a00 (ffffffff86d98c60) [ 440.249218][ C1] No more buffers in queue [ 440.249388][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 440.249402][ C1] No more buffers in queue [ 440.249480][ C1] eth0: xmit ffff888061ac38c0 42:01:0a:80:00:01 [ 440.249495][ C1] Added buffer head 17 to ffff888027299800 [ 440.249556][ C1] virtqueue callback for ffff888027299800 (ffffffff86d98da0) [ 440.249569][ C1] Sent skb ffff888061ac38c0 [ 440.249587][ C1] No more buffers in queue [ 440.604295][ C0] virtqueue callback for ffff888020b7b200 (ffffffff85790680) [ 440.604370][ C0] virtqueue interrupt with no work for ffff888020b7b400 [ 440.604378][ C0] virtqueue interrupt with no work for ffff888020b7b600 [ 440.604437][ T9] Added buffer head 0 to ffff888020b7b200 [ 441.297184][ C1] wireguard: wg1: Handshake for peer 46 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 10) [ 441.297293][ T7678] net_ratelimit: 92 callbacks suppressed [ 441.297307][ T7678] wireguard: wg1: Sending handshake initiation to peer 46 (127.0.0.1:20003) [ 441.297559][ T7678] wireguard: wg1: No route to 127.0.0.1:20003, error -101 [ 441.604196][ C0] virtqueue callback for ffff888020b7b200 (ffffffff85790680) [ 441.604263][ C0] virtqueue interrupt with no work for ffff888020b7b400 [ 441.604272][ C0] virtqueue interrupt with no work for ffff888020b7b600 [ 441.611817][ T10] Added buffer head 0 to ffff888020b7b200 [ 441.618863][ C0] wireguard: wg0: Sending keepalive packet to peer 56 ([::1]:20003/0%0) [ 441.626078][T13354] wireguard: wg2: Receiving keepalive packet from peer 59 ([::1]:20001/0%0) [ 441.697202][ C1] wireguard: wg0: Sending keepalive packet to peer 55 (127.0.0.1:20002) [ 441.697267][ C1] wireguard: wg0: Sending keepalive packet to peer 67 ([::1]:20002/0%0) [ 441.697548][T14610] wireguard: wg1: Receiving keepalive packet from peer 69 ([::1]:20001/0%0) [ 441.697808][T13352] wireguard: wg1: Receiving keepalive packet from peer 57 (127.0.0.1:20001) [ 441.777181][ C1] wireguard: wg0: Sending keepalive packet to peer 61 (127.0.0.1:20002) [ 441.777251][ C1] wireguard: wg0: Sending keepalive packet to peer 37 ([::1]:20002/0%0) [ 442.257401][ T45] rxe0: qp#16 rxe_completer: state = GET ACK [ 442.257434][ T45] rxe0: qp#16 rxe_completer: state = GET WQE [ 442.257447][ T45] rxe0: qp#16 rxe_completer: state = COMP WQE [ 442.257449][ T7677] rxe0: qp#16 rxe_receiver: state = GET_REQ [ 442.257464][ T7677] rxe0: qp#16 rxe_receiver: state = CHK_PSN [ 442.257475][ T7677] rxe0: qp#16 rxe_receiver: state = CHK_OP_SEQ [ 442.257487][ T7677] rxe0: qp#16 rxe_receiver: state = CHK_OP_VALID [ 442.257498][ T7677] rxe0: qp#16 rxe_receiver: state = CHK_RESOURCE [ 442.257511][ T7677] rxe0: qp#16 rxe_receiver: state = CHK_LENGTH [ 442.257523][ T7677] rxe0: qp#16 rxe_receiver: state = EXECUTE [ 442.257538][ T7677] rxe0: qp#16 rxe_receiver: state = COMPLETE [ 442.257582][ T7677] rxe0: qp#16 rxe_receiver: state = CLEANUP [ 442.257609][ T7677] rxe0: qp#16 rxe_receiver: state = DONE [ 442.257621][ T7677] rxe0: qp#16 rxe_receiver: state = GET_REQ [ 442.257631][ T7677] rxe0: qp#16 rxe_receiver: state = EXIT [ 442.257668][ T45] rxe0: qp#16 rxe_completer: state = GET WQE [ 442.257680][ T45] rxe0: qp#16 rxe_completer: state = EXIT [ 442.257693][ T45] rxe0: qp#16 rxe_completer: state = GET ACK [ 442.257703][ T45] rxe0: qp#16 rxe_completer: state = GET WQE [ 442.257713][ T45] rxe0: qp#16 rxe_completer: state = EXIT [ 442.604092][ C0] virtqueue callback for ffff888020b7b200 (ffffffff85790680) [ 442.604144][ C0] virtqueue interrupt with no work for ffff888020b7b400 [ 442.604152][ C0] virtqueue interrupt with no work for ffff888020b7b600 [ 442.604201][ T10] Added buffer head 0 to ffff888020b7b200 [ 443.217166][ C1] wireguard: wg1: Handshake for peer 45 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 11) [ 443.217239][ C1] wireguard: wg2: Handshake for peer 48 (127.0.0.1:20002) did not complete after 20 attempts, giving up