last executing test programs: 2m3.808707424s ago: executing program 2 (id=191): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001ec0)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYBLOB="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"], 0xae0}, 0x1, 0x0, 0x0, 0x4008810}, 0x80) recvmmsg(r4, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002500)=""/189, 0xbd}, {&(0x7f00000025c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003600)={&(0x7f0000003640)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f80)={&(0x7f0000005fc0)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in=@local, @in6=@mcast2, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0xe0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@broadcast, 0x3c, 0x4, 0x0, 0x2, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x0) gettid() r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001140)={@private0, 0x0}, &(0x7f0000001180)=0x14) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0x22, &(0x7f0000001d00)=0x1, 0x4) sendmmsg$inet(r8, &(0x7f0000001d40)=[{{&(0x7f0000001dc0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001e00)=[{&(0x7f0000001e40)="eb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x200080fc) r9 = socket$igmp(0x2, 0x3, 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003700)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000003740)=0x0) r11 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000003780)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000003800), &(0x7f0000003840), &(0x7f0000003880)) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r10, &(0x7f00000038c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80, 0x0, r11}, &(0x7f0000003940)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000003bc0)=@assoc_value, &(0x7f0000003c00)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000001200)={0x1d, r14, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r15 = openat$nci(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r15, 0x0, &(0x7f00000012c0)=0x0) sendmmsg(r13, &(0x7f0000001240)=[{{&(0x7f0000003cc0)=@nfc_llcp={0x27, r16, 0x0, 0x3, 0x5, 0xcb, "a1efd1c2adfc3637a68bae4bf8361523ad6afb2c7bc7d2b3a1a897ac1581e4251ed9be0afe9758c4a7d35b3a41326d48d24a1e8e5951ba17e60233b0928301", 0x2e}, 0x80, &(0x7f0000001300)=[{&(0x7f0000003c40)="7cb76a00000013b5be4ed8b02e8c3cb38e3330b9d301000080847610dd36d26e866ce7676d360b37d89b9b892fcdb823ab741596f5d8cb9fe20000000000000000", 0x41}, {&(0x7f0000001380)="297aab37d5f95ed84a016028ea9206040bdf749a66bdd0ee63e7fc371ebd361048d641abdb147b1399ce9950617717224d28682f8c8b1c6e3db0c04d6710fba422897a58dcc5addaf6a3f6340944", 0x4e}, {&(0x7f0000001400)="54f896b068096ab158057ade4380958ae99ea4bd2709d907fd0f86997d834e6a2bc91d465634fa2afad052b262defb9d5ceb5359e94a52a19a6d137f72dec34a62e7e070c310e09d2372a306029ffa56c833239748717ef6da0279c03df864e028cbfe06242cd96f2655b41d03cd6247ba43650593565a0c96ba52eea8f7904cd69f405a8cf12e543742005f90e818a68df49986b336a4bcbc343e1c1783ed3cd5896594b9019006ae64b227d0922849eb4273db89552c5810fdce218547b09a15f06b2a4498b888", 0xc8}, {&(0x7f0000001500)="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", 0x5e0}], 0x4}}], 0x1, 0x24000006) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001b00)={0x0, @loopback, @private}, &(0x7f0000001b40)=0xc) sendmsg$inet(r5, &(0x7f0000001cc0)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="69672bfd67c4284c854f4d27da675a53419e7637f96d82544a96bdcf9e9ef46dbb4963", 0x23}, {&(0x7f0000001080)="4568c396f037247e5c2ac50b333049ef0ddb133b3eaaa705587de16218ef299c0e9c5c1b8f777e14fa2134", 0x2b}, {&(0x7f00000010c0)="e70fc37e7037abc49c2e39fd97193ba005981d1ece340e95f37db29170627d1738705ad07d502845763c5c5327dd72abb5a9c554984b199f", 0x38}], 0x4, &(0x7f0000001b80)=[@ip_retopts={{0x28, 0x0, 0x7, {[@end, @noop, @noop, @generic={0x89, 0x7, "fed09a4f1a"}, @noop, @lsrr={0x83, 0xb, 0x97, [@broadcast, @remote]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x44, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0x4d, 0x3, 0x9, [{@broadcast, 0x3}, {@rand_addr=0x64010100, 0x7}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x903d}, {@empty, 0xffc00000}, {@local, 0x2}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @loopback, @dev={0xac, 0x14, 0x14, 0x42}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x34}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r17, @private=0xa010102, @remote}}}], 0x140}, 0x20040840) 2m3.396453392s ago: executing program 2 (id=195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x0, 'hsr0\x00', {0x3}, 0x8}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'hsr0\x00', {0x1}, 0x7}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64) shutdown(0xffffffffffffffff, 0x0) (async, rerun: 64) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'hsr0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) (async) syz_genetlink_get_family_id$devlink(0x0, r0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x321, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x4000000) 2m2.810150356s ago: executing program 2 (id=197): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) io_setup(0x9, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (fail_nth: 5) 2m1.769856709s ago: executing program 2 (id=201): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x20044080) setresgid(r0, 0x0, 0x0) r2 = syz_clone(0xc4000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r2, 0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/ocfs2/heartbeat/hb0/dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='3', 0x1) 2m0.801355394s ago: executing program 2 (id=204): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/tracing/trace_pipe\x00', 0x20480, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x5, &(0x7f0000000380)) ptrace$cont(0x9, r1, 0x7, 0x1) (async) ptrace$cont(0x9, r1, 0x7, 0x1) ptrace$cont(0x21, r1, 0x80000001, 0x4) syz_open_procfs(r1, &(0x7f0000000380)='net/nfsfs\x00') write$binfmt_script(r0, &(0x7f00000001c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000300)=0x40b, 0x4) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000300)=0x40b, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r2) lsm_set_self_attr(0x66, 0x0, 0xfeaa, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x111000, 0x0) (async) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x111000, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f00000002c0), 0x4) (async) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f00000002c0), 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000200)=""/173) 2m0.361453399s ago: executing program 2 (id=207): waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0xa000000c, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m59.294309553s ago: executing program 0 (id=214): r0 = landlock_create_ruleset(&(0x7f0000000680)={0x7f6e}, 0x18, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/sockcreate\x00') read$FUSE(r1, 0x0, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$FICLONE(r0, 0x40049409, r2) landlock_restrict_self(r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 1m59.109477209s ago: executing program 0 (id=215): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) r0 = getpid() getrlimit(0x7, &(0x7f0000000040)) sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x5}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='./proc\x00', 0x412282, 0x0) write(r3, &(0x7f00000002c0)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x2000007, 0x401d031, r3, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000480)=0x10001, 0x4) syz_open_procfs$userns(r0, &(0x7f0000000300)) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) io_setup(0x9, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x143040, 0x0) r5 = syz_clone(0x20080000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)=ANY=[], 0x28}], 0x1, 0x0, 0x17, 0x4044801}, 0x8000) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000000)={0x0, 0x340}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201ddff09003a2083041ccb4000000000010902240060c0f85e01000921000800012201000000000000000000000000002d4b0b71ccb869ebb2754bdad3240d5c1e861e25075bfd6a009af1931d5dc3ab5b92cfb0fff9ab4b6544"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x80, 0x7, "06729f44", "fb6cb76e"}}, 0x0}, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 1m55.868112747s ago: executing program 0 (id=221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x7, 0x4000) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/204, 0xcc}, {&(0x7f0000001340)=""/160, 0xa0}, {&(0x7f0000001400)=""/94, 0x5e}, {&(0x7f0000001480)=""/4112, 0x1010}], 0x5}, 0x8}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x4080}, {{0x0, 0x0, 0x0}, 0x3}], 0x4, 0x102, 0x0) 1m55.70882965s ago: executing program 0 (id=223): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) syz_open_dev$vbi(&(0x7f0000000480), 0x3, 0x2) (async) syz_open_dev$vbi(&(0x7f0000000480), 0x3, 0x2) mkdir(&(0x7f00000007c0)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='mnt\x00', &(0x7f0000000840)='devtmpfs\x00', 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x0) mount$bind(&(0x7f00000008c0)='.\x00', &(0x7f0000000900)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000940)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000980)='\x00', 0x89901) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000980)='\x00', 0x89901) mount_setattr(r0, &(0x7f00000009c0)='./file0\x00', 0x9000, &(0x7f0000000a00)={0x200005, 0xd, 0x80000}, 0x20) syz_open_procfs(0x0, &(0x7f00000004c0)='fd/3\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='fd/3\x00') r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, r3, 0x303, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x8000) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, r3, 0x303, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x8000) mount$9p_fd(0x0, &(0x7f0000000500)='.\x00', &(0x7f0000000540), 0x8000, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB]) (async) mount$9p_fd(0x0, &(0x7f0000000500)='.\x00', &(0x7f0000000540), 0x8000, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB]) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r5], 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) mount(0x0, &(0x7f0000001080)='./proc\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='romfs\x00', 0x200011, 0x0) (async) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='romfs\x00', 0x200011, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r7, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000005c0)={0x3, &(0x7f0000000600)=[{0x2}, {0x30, 0xfe, 0x0, 0x1b}, {0x6, 0x4, 0x0, 0xffff0001}]}) open$dir(&(0x7f0000000640)='./file0\x00', 0x1e1241, 0xf0) (async) open$dir(&(0x7f0000000640)='./file0\x00', 0x1e1241, 0xf0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x28, 0x0, 0xfb, 0xfffff034}]}, 0x10) 1m53.549311268s ago: executing program 0 (id=234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f00000003c0)="b805000000b9000000800f01c1410f01c866ba610066b8002066efc441fe7fc3660f3881b4193ac073ce48b872880000000000000f23c00f21f83501000f000f23f8660f388293e400000066baf80cb857db0485ef66bafc0cec67f20f080f01cf", 0x61}], 0x1, 0xb, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=@ng={0x4, 0xb, "82805173"}, 0x6, 0x7) prctl$PR_MCE_KILL(0x4f, 0x1, 0x1000000) r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1010901a10075089102c0c0"], 0x0}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000002c0)=@get={0x1, 0x0}) r5 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000000140)={0x2, 0x100}) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000001c0)={0x4, 0x7, 0x4, {0x1, @pix={0x0, 0x0, 0x30324c4a, 0x3, 0x2, 0xfffffffe, 0x2, 0x4}}, 0xb}) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b0500000000000904"], 0x0) 1m53.207477616s ago: executing program 0 (id=236): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000001280)='0', 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x2000, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e6574"], 0x5c}}, 0x0) 1m52.436144001s ago: executing program 32 (id=236): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000001280)='0', 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x2000, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e6574"], 0x5c}}, 0x0) 1m45.098856202s ago: executing program 33 (id=207): waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0xa000000c, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m43.01403656s ago: executing program 3 (id=260): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x402, 0x21) mkdirat(r1, 0x0, 0x155) mount(0x0, 0x0, &(0x7f0000000000)='qnx4\x00', 0x2000092, 0x0) read(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="2e00000010008188041f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121ff37ee450ad5abeb6326dea0642e6d68fa1627aa5cb6b04c117821dbbacb7a5ebeee854bf2f1c8442aa41304d2990aca74709124a459206ec921876f04c7819a9df6690a1421b4a469211605a9006bc", 0x7d}], 0x1}, 0x40045) 1m42.699903098s ago: executing program 3 (id=262): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-sm4-aesni-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="01234596e767fd363012d2cb6fa3d352d581b39d8477cd7490c689f6a0569f7028c5a8acbb538492ea782e8dbda5c0226756024d73aecbbde25b4ae94a10c27f501a9143483a1cc98736d61100"/92, 0x5c) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)='\x00'/128, 0x80}], 0x1, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10000000}, 0x4080) read$alg(r1, &(0x7f0000000900)=""/128, 0x80) 1m42.418833563s ago: executing program 3 (id=263): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write(0xffffffffffffffff, &(0x7f0000000040)='\a', 0x1) 1m42.17734699s ago: executing program 3 (id=265): mkdirat(0xffffffffffffff9c, &(0x7f00000016c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001740)='./sys\x00', &(0x7f0000001780)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x103496, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x23fd080, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x2940, 0x2, 0x10}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000017c0)='./sys/class/tty/rfcomm0/address\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./sys\x00', 0x0) openat(r0, &(0x7f00000002c0)='./file0\x00', 0x2001, 0x0) read(r1, &(0x7f0000001800)=""/64, 0x40) 1m42.033803465s ago: executing program 3 (id=266): openat$nsim_port_qreset(0xffffffffffffff9c, &(0x7f0000000000)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x30}, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000340)={0x0, 0xfe, &(0x7f0000000380)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 1m41.437089432s ago: executing program 3 (id=267): mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4006, 0x0, 0x6, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001e80)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x36}, &(0x7f0000001f00)=""/4096, 0x1000, &(0x7f0000001c40)=""/198, &(0x7f0000001e00)=[0x0, 0x0], 0x2}, 0x58) 1m41.083406776s ago: executing program 34 (id=267): mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4006, 0x0, 0x6, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001e80)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x36}, &(0x7f0000001f00)=""/4096, 0x1000, &(0x7f0000001c40)=""/198, &(0x7f0000001e00)=[0x0, 0x0], 0x2}, 0x58) 1m19.973314022s ago: executing program 4 (id=320): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) setrlimit(0x40000000000008, 0x0) mlockall(0x1) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, 0x0, 0x48) ioctl(r1, 0x40186f40, &(0x7f0000000240)="ffffffff0100"/23) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x8000, 0x3, 0x0, 0x902}, 0x30, 0x0) landlock_restrict_self(r3, 0x1) landlock_restrict_self(r3, 0x6) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000030100000001dccc7e94448e6560000500000a050001000700"], 0x1c}}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c00030000002400000004920800024000000001"], 0xfea1}}, 0x800) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$packet(0x11, 0x2, 0x300) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_buf(r5, 0x107, 0x2, &(0x7f00000001c0)="5ec78db485c534bdf7a2172f3f1f30da", 0x10) landlock_restrict_self(r3, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000480)={0x1801a, 0x2, 0x3, 0x2100}, 0x30, 0x0) landlock_restrict_self(r6, 0xa) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0\x00', 0x1c0) landlock_restrict_self(r3, 0x0) 1m18.42854599s ago: executing program 4 (id=321): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x4010618a, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x3c, &(0x7f00000009c0)="900100"/60) 1m15.28282374s ago: executing program 4 (id=327): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$LOOP_CONFIGURE(r0, 0xc01070ce, 0x0) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x8) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x2000004) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="00214717a7070000000003060000000000000000aaa6721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x73a, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000001c0)={0x1, r2, 0x1}) 1m15.002829582s ago: executing program 4 (id=328): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0xc9080, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f23, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x46, 0x5, 0x3ff, 0x2000, 0x600, 0x1, 0x2, 0x9, 0xe1c9, 0x7, 0x4, 0x3, 0x395, 0x80000089, 0x83, 0xa, 0xfffffff5, 0x3, 0x8, 0xfffffffc, 0xffffffec, 0x4, 0x3, 0xdffffffa]}) 1m14.831353257s ago: executing program 4 (id=330): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) chdir(&(0x7f0000000380)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x804040, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='befs\x00', 0x800080, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000600)={0x4, 0x6, 0x20}) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) (async, rerun: 32) r2 = fsopen(&(0x7f0000000740)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000780)='source\x00', &(0x7f00000007c0)='0.0.0.00::/\x00', 0x0) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='0fc5:1227:gi', 0xc) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) ptrace$cont(0x18, r5, 0x9, 0x800) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)="2e00000010008188040f80ec0300000013d9b3b3300000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) rt_sigqueueinfo(r5, 0x27, &(0x7f00000006c0)={0x15, 0x7, 0xff}) (async) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000040)={0x54, 0x2, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000004, 0x0, 0x0, 0x237, 0x0, 0x0, 0x4, 0x46}) (async) openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) r7 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) openat2(r7, &(0x7f0000000640)='./dev/sda\x00', &(0x7f0000000680)={0xc0000, 0x23, 0x19}, 0x18) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x10800, 0x104) write(r8, &(0x7f00000004c0)='27', 0x2) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file2\x00', 0x101042, 0x15) (rerun: 32) 1m14.523203254s ago: executing program 4 (id=332): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd02, &(0x7f0000000240)="04000000000000000000000038013000000000000200000000000000ffff") (fail_nth: 6) 59.286357182s ago: executing program 35 (id=332): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd02, &(0x7f0000000240)="04000000000000000000000038013000000000000200000000000000ffff") (fail_nth: 6) 5.789411121s ago: executing program 5 (id=619): add_key(0x0, 0x0, &(0x7f0000001180)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361", 0x48, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x148) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x8, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r2 = open(&(0x7f0000000480)='./bus\x00', 0x4ca7e, 0x10) sendfile(r2, r2, 0x0, 0x40000000800) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) setns(0xc9, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x10f) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000001080)={'syzkaller0\x00', 0x1}) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000001c0)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r5, 0x50) getsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000240), &(0x7f0000000280)=0x4) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000001100), 0x12) landlock_create_ruleset(&(0x7f0000000040)={0x1}, 0x30, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000080)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r7], 0x20}}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)=0x2) 4.971727633s ago: executing program 5 (id=620): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x14be40, 0x0) write$dsp(r0, &(0x7f00000000c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000001c0)="4d9d9ebdd22d25ae4a1343c2155d0ba2c5cf6310d6885a78ccede6e4093ad2cf05000000000000", 0x27, 0xfffffffffffffff9) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x2, "21b2"}, 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) keyctl$instantiate(0xc, r1, &(0x7f0000000140)=ANY=[@ANYBLOB="6c6f610300000072797074667320757365723a203030303030303030303030303030303030303331203200"], 0x2b, 0xfffffffffffffffa) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}, 0x8000000}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f00000002c0)={0x1}, 0x8) sendmmsg$sock(r5, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x701}}], 0x18}}], 0x1, 0x8000) r6 = add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000100), &(0x7f0000000140), 0xca, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)='id_legacy\x00') keyctl$read(0xb, r6, 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 3.109192463s ago: executing program 6 (id=626): pipe2$9p(&(0x7f0000000040), 0x0) socket$inet6(0xa, 0x1, 0x0) syz_io_uring_setup(0xec6, &(0x7f0000000340)={0x0, 0x0, 0x3000}, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@any_dev={0x3, 0x41a, 0x0, 0x0, 0x1000, 0x1bd, 0x0, 0x0, 0xb0}}}, &(0x7f0000000400)=0x0) syz_ublk_setup_queues(r1, r2, 0x0, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1bee, 0x80000, 0x1000002, 0x141, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x40000, 0x0, 0x8004146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e8b, 0x1000, 0xffffffff, 0x2f9, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2, 0x2, 0xc5, 0x0, r1}}], 0x1, 0x0, 0x0) (fail_nth: 6) socketpair$unix(0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 3.037924776s ago: executing program 7 (id=627): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000080)='w', 0x1}], 0x1, 0x6) userfaultfd(0x80001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000002380), r2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000024c0), r2) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000002500)={'xfrm0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket(0x25, 0x80000, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x11e, 0x1, 0x0, 0xfffffffffffffd61) r8 = syz_open_dev$vim2m(&(0x7f0000002800), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000002840)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000002880)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000028c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000002900)='./sys\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000002940)='./config\x00', &(0x7f0000002980)='configfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000029c0)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r9, &(0x7f0000002a00)='M00\n\x00\x00\x00\x00\x00', 0x9) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000002540)='`', 0x500, 0x0, &(0x7f0000002580)={0x2f, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000002680)={'erspan0\x00', &(0x7f00000025c0)={'ip_vti0\x00', 0x0, 0x8000, 0x8000, 0x7, 0xbd, {{0x19, 0x4, 0x1, 0x3, 0x64, 0x64, 0x0, 0x0, 0x4, 0x0, @local, @empty, {[@timestamp={0x44, 0x8, 0x7f, 0x0, 0x9, [0x7]}, @ssrr={0x89, 0xf, 0x85, [@local, @remote, @remote]}, @rr={0x7, 0xf, 0x97, [@multicast1, @remote, @private=0xa010102]}, @timestamp={0x44, 0x10, 0xc7, 0x0, 0x5, [0x5, 0x1, 0x80000000]}, @generic={0x44, 0x6, "53c2f7a4"}, @timestamp={0x44, 0x14, 0x20, 0x0, 0x5, [0x4, 0x0, 0x1, 0x3]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000026c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000027c0)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x74, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040085}, 0xaaef3d4049e30bb0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002440)={0x24, r3, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020) 2.493660442s ago: executing program 6 (id=629): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x38, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0xc, 0x80c5, "0800080001000000"}]}, 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private, @multicast1}, &(0x7f0000000100)=0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r9, @ANYBLOB="05002f"], 0x2c}}, 0x18) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9c00539ee1635b8fbaf2ac17843a9dc76ec64b24838345f97fa9caa468fd39a4e257e02293ce451325f3a0ce561d18", @ANYRES16=r4, @ANYBLOB="200026bd7000fbdbdf25110000001400018008000100", @ANYRES32=r5, @ANYBLOB="08000300020000005400018014000200766574683000000000000000000000001400020064766d7270310000000000000000000014000200000000000000000000000000000000001400020065727370616e30000000000000000000040001801c00018008000100", @ANYRES32=r6, @ANYBLOB="080003000200000008000100", @ANYRES32=r9, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x804) 2.459731772s ago: executing program 7 (id=630): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000880)=[@text32={0x20, &(0x7f00000008c0)="b9004d564bb800100000ba000000000f300f01c20f01df0f001366ba38f8ffef66bafc0ceeb9d80900000f32b8010000000f01d9ad34b6d0b6d00000c0d741e88fe88f0400000f300f01c866baf80cb8dcfd4f8aef66bafc0cb80f000000ef", 0x5f}], 0x1, 0x41, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='3', 0x4e) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000200)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xffffffff, 0x0, 0x4}, 0x1c) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000280)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000300)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000340)={0x11, 0x0, r6}, 0x14) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.386005129s ago: executing program 1 (id=631): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0xf) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000900)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r1, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000940)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x20, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) (fail_nth: 6) 2.27747556s ago: executing program 6 (id=632): r0 = syz_open_dev$video(&(0x7f0000000240), 0x7, 0x40) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000280)={0x1, 0x4f424752, 0x640, 0xf8, 0x4, @stepwise={{0x0, 0x7}, {0xffffffff, 0xd09}, {0x0, 0x4}}}) 1.991218915s ago: executing program 6 (id=633): prlimit64(0x0, 0x6, &(0x7f0000000000), 0x0) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000001140)='27', 0x2) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x30, 0x2, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xffffffce, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x31}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x22}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000810}, 0x1000) setresuid(0xee01, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xae642, 0x0) r2 = creat(&(0x7f0000001280)='./file1\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', 0x1d0) mount$afs(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000001340), 0x5, &(0x7f0000001380)=ANY=[@ANYBLOB='dyn']) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000013c0)={'hsr0\x00'}) mount$afs(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x14000, &(0x7f0000001480)={[{@dyn}]}) preadv2(r1, &(0x7f00000010c0)=[{&(0x7f0000003240)=""/4096, 0x1000}, {&(0x7f0000000080)=""/4093, 0xffd}, {&(0x7f0000001080)=""/42, 0x2a}], 0x3, 0x40d68, 0x2, 0x1f) 1.449206997s ago: executing program 7 (id=634): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/144, 0x90}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000006c0)=""/4097, 0x1001}, {&(0x7f0000001700)=""/151, 0xa6}], 0x4}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001800)=""/4072, 0xfe8}, {&(0x7f0000002800)=""/4105, 0x1009}], 0x2}, 0x7}], 0x7, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000680), 0x0, 0x80840) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f00000006c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x83c0550b, 0x0) 1.321383982s ago: executing program 1 (id=635): setns(0xc9, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000580)='ns/net\x00') sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000005c0)={0x0, 0xfc, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c00000002140100000000000000000008000100000000000900020073797a310000000008004400", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 1.251497044s ago: executing program 1 (id=636): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB='f'], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f00000001c0)=0x7f, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x14, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r4, 0x4068aea3, &(0x7f0000000300)) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000002c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.099455989s ago: executing program 5 (id=637): r0 = syz_open_dev$video(&(0x7f0000000140), 0x9, 0x400040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x0, 0x0, {0x22}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, 0x0) 933.667701ms ago: executing program 5 (id=638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x206, 0x3, 0x4, {0x1, @raw_data="abbabe64129057abc8c4fb896a0b8da587c1d5af16dc29a535e3a25467478bd971bac15e06d24e642a6557807e1453da17be5a1b3d23f4028bd1b9fe5b74476a79ebf29c293d4082b7e7c7adfa6871b86fe98baae59d6f0dd89349aad3ff6df39e02e6d6fb815070a81e867fa3aab7457e2093990a462f9c1d69825f0ba52aa90512510bf598078df96eeb32dd8ab64f3a5e628e75c142c0b86c7559e6545e068e7f2003f24d31cdc9bb104647183de10652b89fd0d22a2c998b7b00"}, 0x6}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f00000010c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x30, 0x2c, 0x0, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, "010380", 0x3ff, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, @loopback}}}}}}, 0x66) 933.470212ms ago: executing program 1 (id=639): r0 = socket(0x1, 0x2, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x20000810}, 0x20044001) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 879.185441ms ago: executing program 1 (id=640): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0xf) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000900)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r1, 0xc) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x1, @pix_mp={0x0, 0x0, 0x32314752, 0x0, 0x2, [{}, {0x0, 0x800}, {}, {0x80000000}, {0xfffffffc}, {0x9}]}}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x98}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) shmget(0x1, 0x4000, 0x1000, &(0x7f000076c000/0x4000)=nil) connect$inet(r3, &(0x7f0000000940)={0x2, 0x4e22, @broadcast}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x20, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) 672.57087ms ago: executing program 5 (id=641): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./tracefs\x00', &(0x7f00000019c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001e40)='./tracefs/dynamic_events\x00', 0x2, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, 0x0, 0x0) write(r0, &(0x7f0000001e80)="653a6d7967726f75702f6d796576656e742073636865642e73636865645f737769746368e80c4dee", 0x28) 618.019112ms ago: executing program 6 (id=642): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000240)={0x8, 0xfcdf}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000140)={0x3, 0xfa}, 0x2) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x4, 0x4, 0x8, 0x84, 0x10, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x9}, {0x8, 0xaff3, 0xa, 0x5, 0xc, 0x5, 0x9, 0x3, 0x6, 0x13, 0x1, 0x6, 0x12005}, {0x2, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0x3, 0x7, 0xeb, 0x1, 0x3, 0x2}], 0x8}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80102, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = eventfd2(0xa5a, 0x80000) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000002c0)={r7, 0x8, 0x2, r7}) r8 = eventfd2(0x7fffffff, 0x80000) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000300)={r7, 0x4, 0x2, r8}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0xa99604aa03370b7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x9, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x3, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0x0, 0x2a, 0x14, 0xffff, 0x4, 0x0, 0x8, 0x7], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000200)={0xffffffff80000001, 0xe, 0x0, 0x3, 0x2}) 597.621561ms ago: executing program 7 (id=643): mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./sys\x00', &(0x7f00000007c0)='sysfs\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000800)={'dummy0\x00'}) write(0xffffffffffffffff, &(0x7f0000000880), 0x0) close(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f00000008c0)='./sys/class/net/bond1/bonding/mode\x00', 0x404344, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010020000000000000020a0101000000000000000000000008140000001000010000000000000000000084000a000000000000000000"], 0x3c}}, 0x0) modify_ldt$write(0x1, &(0x7f00000000c0)={0x92, 0x20000000, 0x0, 0x0, 0x2, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000100)={0x7fff, 0x20001000, 0x2000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) timerfd_create(0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000001c0)={{0x80, 0x1}, 'port1\x00', 0x18, 0x418fe, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x8}) read$FUSE(r2, &(0x7f0000000d40)={0x2020}, 0x229) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000002d80)={0x0, 0x21, 0x2}, &(0x7f0000002dc0)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000002e00)={0x0, 0x0, 0x10001, 0x4}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000002e40)=[@in6={0xa, 0x4e36, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x1}], 0x1c) clock_gettime(0xa, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000002e80)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$kcm(0x23, 0x5, 0x0) modify_ldt$write2(0x11, &(0x7f0000002ec0)={0x0, 0x20001000, 0x400, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 467.485057ms ago: executing program 6 (id=644): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000005c0)={0x1, 0x0, [{0x400000f2}]}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000700)={0x1d, r5, 0x3, {0x0, 0xf0}}, 0x18) connect$can_j1939(r4, &(0x7f0000000740)={0x1d, r5}, 0x18) writev(r4, &(0x7f0000000780)=[{&(0x7f00000007c0)='8tQ', 0x3}], 0x1) bind$alg(r3, &(0x7f000000c140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f000000c1c0)="000102030405060708090a0b0c0d0e0f", 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000640)={0x24, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0022220000009623132742a0be5003e7e036042a0008070200000083"], 0x0}, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20040845, &(0x7f0000000400)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet6_buf(r6, 0x29, 0x3d, 0x0, &(0x7f0000000440)=0x37) r8 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f000000c200)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracefs_dir\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r9, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x8, 0x6, 0x207, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048015}, 0x4004) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x89901) execve(&(0x7f0000000240)='./tracefs_dir\x00', &(0x7f00000002c0)={[&(0x7f0000000280)='skcipher\x00']}, &(0x7f00000003c0)={[&(0x7f0000000300)='\x00', &(0x7f0000000340)='+\x00', &(0x7f0000000380)='ecb-cast6-avx\x00']}) move_mount(r10, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./tracefs_dir\x00', 0x0) read$alg(r8, &(0x7f0000009f80)=""/144, 0x90) 418.003707ms ago: executing program 5 (id=645): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) timer_create(0x4, &(0x7f0000000400)={0x0, 0x21}, &(0x7f00000000c0)) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) r1 = socket(0x2, 0x80805, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000380), 0x1ff, 0x80402) r3 = dup(r2) r4 = syz_open_dev$dvb_demux(&(0x7f0000000300), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000c80)={0x7, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x3, 0x5}) close(0x3) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000003c0)={0x23, 0x3, 0x14, 0x1, 0x0, 0x5, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000440)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000840)={r5, 0x5, 0x1, [0x0, 0x6, 0x8, 0xffffffffffffffff, 0x3], [0x2, 0x1ff, 0x7fff, 0x0, 0x31e, 0x0, 0x1, 0x7, 0xfffffffffffffff7, 0xe94, 0x3, 0x5, 0x6585, 0x7f, 0x140, 0x1000, 0xe, 0x80, 0x2, 0x1000, 0x5, 0xaa6, 0x8, 0x6, 0x3, 0x9, 0x7f, 0x8, 0x5, 0x5, 0x2, 0x5, 0x0, 0x3, 0x2, 0x6, 0x3, 0x2, 0x0, 0x3ff, 0x353d122a, 0x4, 0x654, 0x6, 0x6, 0x4c, 0x2, 0x6, 0x3, 0x4, 0x8, 0xfff, 0x8f3, 0x6, 0x800, 0x7, 0x4, 0x4, 0x5, 0x9, 0x3, 0x7, 0x800, 0x9, 0x7a16, 0x400, 0x7, 0xf826, 0x1, 0x5, 0x8937, 0xf4d, 0x8, 0x0, 0x0, 0x5, 0xb061, 0xb65, 0x6, 0x81b, 0x4, 0x5, 0x7, 0x4, 0x9, 0x3, 0x17f, 0x8, 0x8001, 0x8, 0x0, 0x1ff, 0x0, 0xfffffffffffffffb, 0x1fc, 0xfff, 0x7690, 0x1, 0x2, 0x8, 0x0, 0x7, 0x400, 0x5, 0x5, 0x8000, 0x4, 0x6, 0x5, 0xffffffffffffffff, 0x8001, 0xffffffffffffffff, 0x6, 0x8, 0xdb, 0x6, 0x2, 0x9, 0xffffffffffff23b3, 0x8, 0x5]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000200)={r7}, &(0x7f0000000240)=0x8) fcntl$notify(r6, 0x402, 0x80000014) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000280)={r7, 0x8}, &(0x7f0000000340)=0x8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000cc0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000d00)={0xaa, 0x100}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa04, &(0x7f0000000d40)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) 409.680985ms ago: executing program 7 (id=646): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3000000}]}]}]}, 0x3c}}, 0x4000004) (fail_nth: 6) 329.311645ms ago: executing program 1 (id=647): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x15c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0xe0, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28a31c39}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ad4478}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35ecbc11}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x80e}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc8b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x751f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75cf555b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x555d094}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8d0880f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x439b}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62463edc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2264da17}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xefe5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3132a5e2}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65e135b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ec0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f73}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5303b9eb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b99}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b51}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x55be}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae99}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f3d}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3000000}]}]}]}, 0x15c}}, 0x10) 0s ago: executing program 7 (id=648): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3b}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '}[\\:\x00'}]}, 0x78}}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='test,0x8000000000000000,0x1000', 0x1e) kernel console output (not intermixed with test programs): op+0x70/0xc0 [ 226.619933][ T8087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.619956][ T8087] RIP: 0033:0x7f820c79e559 [ 226.619977][ T8087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.619997][ T8087] RSP: 002b:00007f820d5b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 226.620021][ T8087] RAX: ffffffffffffffda RBX: 00007f820ca25fa0 RCX: 00007f820c79e559 [ 226.620038][ T8087] RDX: 0000000000000046 RSI: 0000200000000000 RDI: 0000000000000003 [ 226.620052][ T8087] RBP: 00007f820d5b7090 R08: 0000000000000000 R09: 0000000000000000 [ 226.620065][ T8087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.620079][ T8087] R13: 00007f820ca26038 R14: 00007f820ca25fa0 R15: 00007fffce8c7588 [ 226.620115][ T8087] [ 226.770438][ T8088] netlink: 'syz.1.470': attribute type 10 has an invalid length. [ 226.791045][ T5342] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 226.797505][ T5729] usb 8-1: failed to fetch extended address, random address set [ 227.019273][ T5342] usb 6-1: unable to get BOS descriptor or descriptor too short [ 227.019430][ T5342] usb 6-1: New USB device found: idVendor=0d8c, idProduct=0102, bcdDevice=0.40 [ 227.026492][ T5342] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 227.043120][ T5342] usb 6-1: string descriptor 0 read error: -22 [ 227.043484][ T5342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.153474][ T8088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.156784][ T8088] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 227.248872][ T5729] usb 8-1: USB disconnect, device number 4 [ 227.420518][ T8096] netlink: 1 bytes leftover after parsing attributes in process `syz.1.472'. [ 227.571049][ T8081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.578101][ T8081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.630154][ T5342] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 227.701933][ T5342] usb 6-1: USB disconnect, device number 16 [ 227.757190][ T8112] FAULT_INJECTION: forcing a failure. [ 227.757190][ T8112] name failslab, interval 1, probability 0, space 0, times 0 [ 227.757224][ T8112] CPU: 0 UID: 0 PID: 8112 Comm: syz.7.473 Not tainted syzkaller #0 PREEMPT(full) [ 227.757249][ T8112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 227.757263][ T8112] Call Trace: [ 227.757272][ T8112] [ 227.757282][ T8112] dump_stack_lvl+0xe8/0x150 [ 227.757318][ T8112] should_fail_ex+0x3eb/0x540 [ 227.757356][ T8112] should_failslab+0xa8/0x100 [ 227.757383][ T8112] __kmalloc_noprof+0xf9/0x710 [ 227.757416][ T8112] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 227.757449][ T8112] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 227.757493][ T8112] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 227.757535][ T8112] genl_family_rcv_msg_doit+0xda/0x340 [ 227.757576][ T8112] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 227.757619][ T8112] ? apparmor_capable+0x126/0x170 [ 227.757646][ T8112] ? bpf_lsm_capable+0x9/0x20 [ 227.757669][ T8112] ? security_capable+0x7e/0x2c0 [ 227.757706][ T8112] genl_rcv_msg+0x614/0x7a0 [ 227.757744][ T8112] ? __pfx_genl_rcv_msg+0x10/0x10 [ 227.757774][ T8112] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 227.757827][ T8112] netlink_rcv_skb+0x226/0x4a0 [ 227.757853][ T8112] ? __pfx_genl_rcv_msg+0x10/0x10 [ 227.757886][ T8112] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 227.757928][ T8112] ? down_read+0x2b9/0x320 [ 227.757974][ T8112] genl_rcv+0x28/0x40 [ 227.758002][ T8112] netlink_unicast+0x8ef/0xa80 [ 227.758058][ T8112] netlink_sendmsg+0x7f0/0xb20 [ 227.758090][ T8112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.758121][ T8112] ? aa_sock_msg_perm+0x144/0x210 [ 227.758162][ T8112] ? apparmor_socket_sendmsg+0x98/0x360 [ 227.758194][ T8112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.758218][ T8112] sock_sendmsg_nosec+0x14e/0x190 [ 227.758246][ T8112] ____sys_sendmsg+0x54e/0x850 [ 227.758285][ T8112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.758327][ T8112] ? import_iovec+0x73/0xa0 [ 227.758364][ T8112] ___sys_sendmsg+0x2a5/0x360 [ 227.758393][ T8112] ? __lock_acquire+0x747/0x2de0 [ 227.758421][ T8112] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.758495][ T8112] ? __fget_files+0x3a2/0x420 [ 227.758526][ T8112] ? __fget_files+0x2a/0x420 [ 227.758569][ T8112] __x64_sys_sendmsg+0x1b1/0x290 [ 227.758604][ T8112] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 227.758661][ T8112] do_syscall_64+0x166/0x520 [ 227.758690][ T8112] ? trace_irq_disable+0x3b/0x140 [ 227.758715][ T8112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.758738][ T8112] ? clear_bhb_loop+0x70/0xc0 [ 227.758766][ T8112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.758788][ T8112] RIP: 0033:0x7ff9c0d9e559 [ 227.758809][ T8112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.758828][ T8112] RSP: 002b:00007ff9c1d4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.758851][ T8112] RAX: ffffffffffffffda RBX: 00007ff9c1025fa0 RCX: 00007ff9c0d9e559 [ 227.758868][ T8112] RDX: 0000000004000004 RSI: 0000200000000380 RDI: 0000000000000004 [ 227.758883][ T8112] RBP: 00007ff9c1d4c090 R08: 0000000000000000 R09: 0000000000000000 [ 227.758897][ T8112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.758911][ T8112] R13: 00007ff9c1026038 R14: 00007ff9c1025fa0 R15: 00007fff521d9ac8 [ 227.758948][ T8112] [ 228.239621][ T5342] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 228.392483][ T5342] usb 2-1: Using ep0 maxpacket: 32 [ 228.399069][ T5342] usb 2-1: unable to get BOS descriptor or descriptor too short [ 228.399124][ T5342] usb 2-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 228.405863][ T5342] usb 2-1: config 14 has an invalid interface number: 57 but max is 0 [ 228.405948][ T5342] usb 2-1: config 14 has no interface number 0 [ 228.406034][ T5342] usb 2-1: config 14 interface 57 has no altsetting 0 [ 228.450124][ T5342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.450154][ T5342] usb 2-1: Product: syz [ 228.450171][ T5342] usb 2-1: Manufacturer: syz [ 228.450187][ T5342] usb 2-1: SerialNumber: syz [ 229.014386][ T5342] legousbtower 2-1:14.57: interrupt endpoints not found [ 229.036921][ T5342] usb 2-1: USB disconnect, device number 32 [ 229.895044][ T8189] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 229.895073][ T8189] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 229.895309][ T8189] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 229.895332][ T8189] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 230.019612][ T5739] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 230.099902][ T5729] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 230.178956][ T5739] usb 8-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 230.193648][ T5739] usb 8-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 230.193683][ T5739] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.193704][ T5739] usb 8-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 230.193770][ T5739] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.236696][ T5739] usb 8-1: config 0 descriptor?? [ 230.251869][ T5729] usb 2-1: New USB device found: idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 230.252685][ T5739] uvcvideo 8-1:0.0: Found UVC 9.00 device (046d:0825) [ 230.255066][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.286092][ T5729] usb 2-1: config 0 descriptor?? [ 230.304616][ T5729] pwc: Samsung MPC-C10 USB webcam detected. [ 230.324509][ T8204] FAULT_INJECTION: forcing a failure. [ 230.324509][ T8204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.324543][ T8204] CPU: 1 UID: 0 PID: 8204 Comm: syz.5.492 Not tainted syzkaller #0 PREEMPT(full) [ 230.324568][ T8204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 230.324582][ T8204] Call Trace: [ 230.324590][ T8204] [ 230.324600][ T8204] dump_stack_lvl+0xe8/0x150 [ 230.324638][ T8204] should_fail_ex+0x3eb/0x540 [ 230.324676][ T8204] strncpy_from_user+0x36/0x2c0 [ 230.324711][ T8204] do_getname+0x77/0x250 [ 230.324744][ T8204] do_sys_openat2+0xce/0x200 [ 230.324776][ T8204] ? __pfx_do_sys_openat2+0x10/0x10 [ 230.324806][ T8204] ? ksys_write+0x242/0x270 [ 230.324842][ T8204] ? __pfx_ksys_write+0x10/0x10 [ 230.324880][ T8204] __x64_sys_openat+0x138/0x170 [ 230.324915][ T8204] do_syscall_64+0x166/0x520 [ 230.324947][ T8204] ? trace_irq_disable+0x3b/0x140 [ 230.324972][ T8204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.324994][ T8204] ? clear_bhb_loop+0x70/0xc0 [ 230.325022][ T8204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.325044][ T8204] RIP: 0033:0x7f497ed9e559 [ 230.325065][ T8204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.325084][ T8204] RSP: 002b:00007f497fbc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 230.325109][ T8204] RAX: ffffffffffffffda RBX: 00007f497f025fa0 RCX: 00007f497ed9e559 [ 230.325125][ T8204] RDX: 0000000000000000 RSI: 0000200000000740 RDI: ffffffffffffff9c [ 230.325140][ T8204] RBP: 00007f497fbc8090 R08: 0000000000000000 R09: 0000000000000000 [ 230.325154][ T8204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.325167][ T8204] R13: 00007f497f026038 R14: 00007f497f025fa0 R15: 00007ffc76971228 [ 230.325202][ T8204] [ 230.529878][ T5729] pwc: send_video_command error -71 [ 230.529899][ T5729] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 230.530008][ T5729] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 230.546781][ T5729] usb 2-1: USB disconnect, device number 33 [ 231.029650][ T5729] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 231.107221][ T5739] uvcvideo 8-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 231.107286][ T5739] uvcvideo 8-1:0.1: Failed to initialize the device (-71). [ 231.107896][ T5739] uvcvideo 8-1:0.0: probe with driver uvcvideo failed with error -71 [ 231.148388][ T5739] usb 8-1: USB disconnect, device number 5 [ 231.191437][ T5729] usb 2-1: New USB device found: idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 231.192649][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.196297][ T5729] usb 2-1: config 0 descriptor?? [ 231.205137][ T5785] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 231.230790][ T5729] pwc: Samsung MPC-C10 USB webcam detected. [ 231.365002][ T5785] usb 6-1: New USB device found: idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 231.366743][ T5785] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 231.366771][ T5785] usb 6-1: config 0 has no interface number 0 [ 231.366814][ T5785] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 231.366871][ T5785] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 231.366900][ T5785] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 231.366929][ T5785] usb 6-1: config 0 interface 2 has no altsetting 0 [ 231.390192][ T5785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.390219][ T5785] usb 6-1: Product: syz [ 231.390235][ T5785] usb 6-1: Manufacturer: syz [ 231.390250][ T5785] usb 6-1: SerialNumber: syz [ 231.415546][ T5785] usb 6-1: config 0 descriptor?? [ 231.445008][ T8224] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 231.445372][ T8224] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 231.493285][ T5785] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 231.661699][ T5729] pwc: recv_control_msg error -32 req 02 val 2b00 [ 231.662569][ T5729] pwc: recv_control_msg error -32 req 02 val 2700 [ 231.865748][ T9] usb 6-1: USB disconnect, device number 17 [ 231.887735][ T8191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.888187][ T8191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.893649][ T5729] pwc: recv_control_msg error -71 req 02 val 2c00 [ 231.896118][ T5729] pwc: recv_control_msg error -71 req 04 val 1000 [ 231.899103][ T5729] pwc: recv_control_msg error -71 req 04 val 1300 [ 231.904606][ T5729] pwc: recv_control_msg error -71 req 04 val 1400 [ 231.908516][ T5729] pwc: recv_control_msg error -71 req 02 val 2000 [ 231.916097][ T5729] pwc: recv_control_msg error -71 req 02 val 2100 [ 231.918793][ T5729] pwc: recv_control_msg error -71 req 02 val 2200 [ 231.934453][ T5729] pwc: recv_control_msg error -71 req 06 val 0600 [ 231.936124][ T5729] pwc: recv_control_msg error -71 req 04 val 1500 [ 231.938617][ T5729] pwc: recv_control_msg error -71 req 02 val 2500 [ 231.954762][ T8245] FAULT_INJECTION: forcing a failure. [ 231.954762][ T8245] name failslab, interval 1, probability 0, space 0, times 0 [ 231.954794][ T8245] CPU: 0 UID: 0 PID: 8245 Comm: syz.7.498 Not tainted syzkaller #0 PREEMPT(full) [ 231.954819][ T8245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 231.954833][ T8245] Call Trace: [ 231.954841][ T8245] [ 231.954850][ T8245] dump_stack_lvl+0xe8/0x150 [ 231.954886][ T8245] should_fail_ex+0x3eb/0x540 [ 231.954983][ T8245] should_failslab+0xa8/0x100 [ 231.955064][ T8245] ? mas_alloc_nodes+0x291/0x350 [ 231.955153][ T8245] kmem_cache_alloc_noprof+0x9c/0x600 [ 231.955245][ T8245] ? mas_alloc_nodes+0x291/0x350 [ 231.955338][ T8245] mas_alloc_nodes+0x291/0x350 [ 231.955429][ T8245] mas_preallocate+0x42a/0x840 [ 231.955513][ T8245] ? rcu_is_watching+0x16/0xb0 [ 231.955586][ T8245] ? trace_kmem_cache_alloc+0x29/0xe0 [ 231.955662][ T8245] ? __pfx_mas_preallocate+0x10/0x10 [ 231.955779][ T8245] ? __mas_set_range+0x11a/0x3a0 [ 231.955861][ T8245] __split_vma+0x2fb/0xa90 [ 231.955962][ T8245] ? mas_next_slot+0xc91/0xd70 [ 231.956045][ T8245] ? __pfx___split_vma+0x10/0x10 [ 231.956158][ T8245] ? mas_find+0x6d6/0xcb0 [ 231.956256][ T8245] vms_gather_munmap_vmas+0x4e3/0x1370 [ 231.956403][ T8245] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 231.956520][ T8245] ? mas_walk+0x37e/0x490 [ 231.956619][ T8245] mmap_region+0x95a/0x2840 [ 231.956749][ T8245] ? __pfx_mmap_region+0x10/0x10 [ 231.956810][ T8245] ? lock_acquire+0x115/0x350 [ 231.956904][ T8245] ? process_measurement+0x7b2/0x1c10 [ 231.956985][ T8245] ? up_write+0x19d/0x4a0 [ 231.957058][ T8245] ? __lock_acquire+0x747/0x2de0 [ 231.957356][ T8245] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 231.957479][ T8245] ? __lock_acquire+0x747/0x2de0 [ 231.957531][ T8245] ? cap_mmap_addr+0xaa/0xf0 [ 231.957605][ T8245] ? bpf_lsm_mmap_addr+0x9/0x50 [ 231.957656][ T8245] ? security_mmap_addr+0x71/0x240 [ 231.957735][ T8245] ? shmem_mapping+0xd/0x50 [ 231.957810][ T8245] ? memfd_check_seals_mmap+0xc5/0x220 [ 231.957906][ T8245] do_mmap+0xe0a/0x1300 [ 231.957968][ T8245] ? get_pid_task+0x20/0x1f0 [ 231.958070][ T8245] ? __pfx_do_mmap+0x10/0x10 [ 231.958149][ T8245] ? vm_mmap_pgoff+0x1ed/0x520 [ 231.958221][ T8245] ? down_write_killable+0x179/0x230 [ 231.958348][ T8245] ? __pfx_down_write_killable+0x10/0x10 [ 231.958429][ T8245] ? apparmor_mmap_file+0x2e7/0x390 [ 231.958511][ T8245] vm_mmap_pgoff+0x27a/0x520 [ 231.958615][ T8245] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 231.958697][ T8245] ? __fget_files+0x2a/0x420 [ 231.958788][ T8245] ? __fget_files+0x3a2/0x420 [ 231.958868][ T8245] ? __fget_files+0x2a/0x420 [ 231.958953][ T8245] ksys_mmap_pgoff+0x4dc/0x760 [ 231.959033][ T8245] do_syscall_64+0x166/0x520 [ 231.959099][ T8245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.959166][ T8245] ? clear_bhb_loop+0x70/0xc0 [ 231.959269][ T8245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.959325][ T8245] RIP: 0033:0x7ff9c0d9e559 [ 231.959388][ T8245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.959453][ T8245] RSP: 002b:00007ff9c1d4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 231.959535][ T8245] RAX: ffffffffffffffda RBX: 00007ff9c1025fa0 RCX: 00007ff9c0d9e559 [ 231.959569][ T8245] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000000000 [ 231.959609][ T8245] RBP: 00007ff9c1d4c090 R08: 0000000000000003 R09: 0000000000000000 [ 231.959647][ T8245] R10: 0000000004010012 R11: 0000000000000246 R12: 0000000000000001 [ 231.959681][ T8245] R13: 00007ff9c1026038 R14: 00007ff9c1025fa0 R15: 00007fff521d9ac8 [ 231.959772][ T8245] [ 231.960810][ T5729] pwc: recv_control_msg error -71 req 02 val 2400 [ 231.962221][ T5729] pwc: recv_control_msg error -71 req 02 val 2600 [ 231.963966][ T5729] pwc: recv_control_msg error -71 req 02 val 2900 [ 231.975776][ T5729] pwc: recv_control_msg error -71 req 02 val 2800 [ 231.983779][ T5729] pwc: recv_control_msg error -71 req 04 val 1100 [ 231.987720][ T5729] pwc: recv_control_msg error -71 req 04 val 1200 [ 232.227974][ T5729] pwc: Registered as video103. [ 232.398281][ T5729] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 232.433813][ T5729] usb 2-1: USB disconnect, device number 34 [ 232.640345][ T8185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.714789][ T8177] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.983625][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 233.132815][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 233.134861][ T9] usb 6-1: New USB device found: idVendor=2c7c, idProduct=0620, bcdDevice=ce.e1 [ 233.138892][ T9] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 233.138922][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.138943][ T9] usb 6-1: config 0 has no interface number 0 [ 233.138974][ T9] usb 6-1: config 0 interface 133 has no altsetting 0 [ 233.153501][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.153578][ T9] usb 6-1: Product: syz [ 233.153621][ T9] usb 6-1: Manufacturer: syz [ 233.153664][ T9] usb 6-1: SerialNumber: syz [ 233.217912][ T9] usb 6-1: config 0 descriptor?? [ 233.226551][ T8273] FAULT_INJECTION: forcing a failure. [ 233.226551][ T8273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.226581][ T8273] CPU: 1 UID: 0 PID: 8273 Comm: syz.1.505 Not tainted syzkaller #0 PREEMPT(full) [ 233.226606][ T8273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 233.226619][ T8273] Call Trace: [ 233.226628][ T8273] [ 233.226637][ T8273] dump_stack_lvl+0xe8/0x150 [ 233.226672][ T8273] should_fail_ex+0x3eb/0x540 [ 233.226708][ T8273] _copy_from_user+0x2d/0xb0 [ 233.226741][ T8273] simple_transaction_get+0x120/0x160 [ 233.226778][ T8273] nfsctl_transaction_write+0xc7/0x160 [ 233.226809][ T8273] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 233.226838][ T8273] vfs_write+0x296/0xba0 [ 233.226882][ T8273] ? __pfx_vfs_write+0x10/0x10 [ 233.226918][ T8273] ? __fget_files+0x2a/0x420 [ 233.226950][ T8273] ? __fget_files+0x3a2/0x420 [ 233.226980][ T8273] ? __fget_files+0x2a/0x420 [ 233.227028][ T8273] ? fdget+0x1ac/0x250 [ 233.227069][ T8273] ksys_write+0x150/0x270 [ 233.227106][ T8273] ? __pfx_ksys_write+0x10/0x10 [ 233.227155][ T8273] do_syscall_64+0x166/0x520 [ 233.227187][ T8273] ? trace_irq_disable+0x3b/0x140 [ 233.227211][ T8273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.227235][ T8273] ? clear_bhb_loop+0x70/0xc0 [ 233.227264][ T8273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.227287][ T8273] RIP: 0033:0x7f15a079e559 [ 233.227312][ T8273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.227332][ T8273] RSP: 002b:00007f15a15b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 233.227356][ T8273] RAX: ffffffffffffffda RBX: 00007f15a0a25fa0 RCX: 00007f15a079e559 [ 233.227373][ T8273] RDX: 000000000000001b RSI: 0000200000000380 RDI: 0000000000000003 [ 233.227388][ T8273] RBP: 00007f15a15b0090 R08: 0000000000000000 R09: 0000000000000000 [ 233.227402][ T8273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.227415][ T8273] R13: 00007f15a0a26038 R14: 00007f15a0a25fa0 R15: 00007ffdc925f188 [ 233.227453][ T8273] [ 233.463206][ T9] qmi_wwan 6-1:0.133: bogus CDC Union: master=0, slave=1 [ 233.472845][ T9] qmi_wwan 6-1:0.133: probe with driver qmi_wwan failed with error -22 [ 233.508457][ T9] usb 6-1: USB disconnect, device number 18 [ 233.654369][ T8285] FAULT_INJECTION: forcing a failure. [ 233.654369][ T8285] name failslab, interval 1, probability 0, space 0, times 0 [ 233.654401][ T8285] CPU: 0 UID: 0 PID: 8285 Comm: syz.7.509 Not tainted syzkaller #0 PREEMPT(full) [ 233.654426][ T8285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 233.654440][ T8285] Call Trace: [ 233.654448][ T8285] [ 233.654466][ T8285] dump_stack_lvl+0xe8/0x150 [ 233.654502][ T8285] should_fail_ex+0x3eb/0x540 [ 233.654539][ T8285] should_failslab+0xa8/0x100 [ 233.654562][ T8285] ? mas_alloc_nodes+0x291/0x350 [ 233.654592][ T8285] kmem_cache_alloc_noprof+0x9c/0x600 [ 233.654625][ T8285] ? mas_alloc_nodes+0x291/0x350 [ 233.654665][ T8285] mas_alloc_nodes+0x291/0x350 [ 233.654701][ T8285] mas_preallocate+0x42a/0x840 [ 233.654736][ T8285] ? rcu_is_watching+0x16/0xb0 [ 233.654764][ T8285] ? trace_kmem_cache_alloc+0x29/0xe0 [ 233.654793][ T8285] ? __pfx_mas_preallocate+0x10/0x10 [ 233.654839][ T8285] ? __mas_set_range+0x11a/0x3a0 [ 233.654868][ T8285] __split_vma+0x2fb/0xa90 [ 233.654904][ T8285] ? mas_next_slot+0xc91/0xd70 [ 233.654938][ T8285] ? __pfx___split_vma+0x10/0x10 [ 233.654985][ T8285] ? mas_find+0x6d6/0xcb0 [ 233.655021][ T8285] vms_gather_munmap_vmas+0x4e3/0x1370 [ 233.655074][ T8285] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 233.655117][ T8285] ? mas_walk+0x37e/0x490 [ 233.655156][ T8285] mmap_region+0x95a/0x2840 [ 233.655204][ T8285] ? __pfx_mmap_region+0x10/0x10 [ 233.655227][ T8285] ? lock_acquire+0x115/0x350 [ 233.655267][ T8285] ? process_measurement+0x7b2/0x1c10 [ 233.655313][ T8285] ? up_write+0x19d/0x4a0 [ 233.655345][ T8285] ? __lock_acquire+0x747/0x2de0 [ 233.655471][ T8285] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 233.655517][ T8285] ? __lock_acquire+0x747/0x2de0 [ 233.655539][ T8285] ? cap_mmap_addr+0xaa/0xf0 [ 233.655567][ T8285] ? bpf_lsm_mmap_addr+0x9/0x50 [ 233.655586][ T8285] ? security_mmap_addr+0x71/0x240 [ 233.655616][ T8285] ? shmem_mapping+0xd/0x50 [ 233.655643][ T8285] ? memfd_check_seals_mmap+0xc5/0x220 [ 233.655675][ T8285] do_mmap+0xe0a/0x1300 [ 233.655697][ T8285] ? get_pid_task+0x20/0x1f0 [ 233.655738][ T8285] ? __pfx_do_mmap+0x10/0x10 [ 233.655774][ T8285] ? vm_mmap_pgoff+0x1ed/0x520 [ 233.655803][ T8285] ? down_write_killable+0x179/0x230 [ 233.655841][ T8285] ? __pfx_down_write_killable+0x10/0x10 [ 233.655875][ T8285] ? apparmor_mmap_file+0x2e7/0x390 [ 233.655909][ T8285] vm_mmap_pgoff+0x27a/0x520 [ 233.655960][ T8285] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 233.655994][ T8285] ? __fget_files+0x2a/0x420 [ 233.656030][ T8285] ? __fget_files+0x3a2/0x420 [ 233.656059][ T8285] ? __fget_files+0x2a/0x420 [ 233.656094][ T8285] ksys_mmap_pgoff+0x4dc/0x760 [ 233.656125][ T8285] do_syscall_64+0x166/0x520 [ 233.656153][ T8285] ? trace_irq_disable+0x3b/0x140 [ 233.656176][ T8285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.656217][ T8285] ? clear_bhb_loop+0x70/0xc0 [ 233.656254][ T8285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.656276][ T8285] RIP: 0033:0x7ff9c0d9e559 [ 233.656296][ T8285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.656315][ T8285] RSP: 002b:00007ff9c1d4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 233.656338][ T8285] RAX: ffffffffffffffda RBX: 00007ff9c1025fa0 RCX: 00007ff9c0d9e559 [ 233.656355][ T8285] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000000000 [ 233.656370][ T8285] RBP: 00007ff9c1d4c090 R08: 0000000000000003 R09: 0000000000000000 [ 233.656384][ T8285] R10: 0000000004010012 R11: 0000000000000246 R12: 0000000000000001 [ 233.656397][ T8285] R13: 00007ff9c1026038 R14: 00007ff9c1025fa0 R15: 00007fff521d9ac8 [ 233.656434][ T8285] [ 233.711635][ T5716] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 233.904885][ T5716] usb 7-1: New USB device found: idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 234.033969][ T5716] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.034000][ T5716] usb 7-1: Product: syz [ 234.034015][ T5716] usb 7-1: Manufacturer: syz [ 234.034032][ T5716] usb 7-1: SerialNumber: syz [ 234.083305][ T5716] usb 7-1: config 0 descriptor?? [ 234.096682][ T5716] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 234.155015][ T8292] FAULT_INJECTION: forcing a failure. [ 234.155015][ T8292] name failslab, interval 1, probability 0, space 0, times 0 [ 234.155077][ T8292] CPU: 1 UID: 0 PID: 8292 Comm: syz.7.511 Not tainted syzkaller #0 PREEMPT(full) [ 234.155101][ T8292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 234.155116][ T8292] Call Trace: [ 234.155125][ T8292] [ 234.155135][ T8292] dump_stack_lvl+0xe8/0x150 [ 234.155171][ T8292] should_fail_ex+0x3eb/0x540 [ 234.155210][ T8292] ? __alloc_skb+0x1db/0x7a0 [ 234.155238][ T8292] should_failslab+0xa8/0x100 [ 234.155263][ T8292] ? __alloc_skb+0x1db/0x7a0 [ 234.155289][ T8292] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 234.155329][ T8292] ? __alloc_skb+0x18d/0x7a0 [ 234.155358][ T8292] ? __alloc_skb+0x1db/0x7a0 [ 234.155393][ T8292] __alloc_skb+0x1db/0x7a0 [ 234.155426][ T8292] netlink_sendmsg+0x5cd/0xb20 [ 234.155460][ T8292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.155489][ T8292] ? aa_sock_msg_perm+0x144/0x210 [ 234.155528][ T8292] ? apparmor_socket_sendmsg+0x98/0x360 [ 234.155559][ T8292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.155583][ T8292] sock_sendmsg_nosec+0x14e/0x190 [ 234.155610][ T8292] ____sys_sendmsg+0x54e/0x850 [ 234.155648][ T8292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.155690][ T8292] ? import_iovec+0x73/0xa0 [ 234.155725][ T8292] ___sys_sendmsg+0x2a5/0x360 [ 234.155754][ T8292] ? __lock_acquire+0x747/0x2de0 [ 234.155782][ T8292] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.155852][ T8292] ? __fget_files+0x3a2/0x420 [ 234.155883][ T8292] ? __fget_files+0x2a/0x420 [ 234.155925][ T8292] __x64_sys_sendmsg+0x1b1/0x290 [ 234.155960][ T8292] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 234.156015][ T8292] do_syscall_64+0x166/0x520 [ 234.156044][ T8292] ? trace_irq_disable+0x3b/0x140 [ 234.156067][ T8292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.156090][ T8292] ? clear_bhb_loop+0x70/0xc0 [ 234.156117][ T8292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.156140][ T8292] RIP: 0033:0x7ff9c0d9e559 [ 234.156160][ T8292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.156179][ T8292] RSP: 002b:00007ff9c1d4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.156202][ T8292] RAX: ffffffffffffffda RBX: 00007ff9c1025fa0 RCX: 00007ff9c0d9e559 [ 234.156219][ T8292] RDX: 0000000000000080 RSI: 00002000000007c0 RDI: 0000000000000003 [ 234.156233][ T8292] RBP: 00007ff9c1d4c090 R08: 0000000000000000 R09: 0000000000000000 [ 234.156247][ T8292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.156260][ T8292] R13: 00007ff9c1026038 R14: 00007ff9c1025fa0 R15: 00007fff521d9ac8 [ 234.156295][ T8292] [ 234.469128][ T5716] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 234.469150][ T5716] sq905c 7-1:0.0: Get version command failed [ 234.469226][ T5716] sq905c 7-1:0.0: probe with driver sq905c failed with error -71 [ 234.504326][ T5716] usb 7-1: USB disconnect, device number 22 [ 234.935768][ T8319] FAULT_INJECTION: forcing a failure. [ 234.935768][ T8319] name failslab, interval 1, probability 0, space 0, times 0 [ 234.935805][ T8319] CPU: 1 UID: 0 PID: 8319 Comm: syz.5.516 Not tainted syzkaller #0 PREEMPT(full) [ 234.935831][ T8319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 234.935854][ T8319] Call Trace: [ 234.935864][ T8319] [ 234.935874][ T8319] dump_stack_lvl+0xe8/0x150 [ 234.935912][ T8319] should_fail_ex+0x3eb/0x540 [ 234.935951][ T8319] should_failslab+0xa8/0x100 [ 234.935979][ T8319] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 234.936021][ T8319] ? __kernfs_new_node+0xa9/0x980 [ 234.936048][ T8319] ? __kernfs_new_node+0xa9/0x980 [ 234.936082][ T8319] kstrdup+0x42/0x100 [ 234.936114][ T8319] __kernfs_new_node+0xa9/0x980 [ 234.936151][ T8319] ? __pfx___kernfs_new_node+0x10/0x10 [ 234.936177][ T8319] ? kernfs_root+0x1c/0x230 [ 234.936208][ T8319] ? kernfs_root+0x1c/0x230 [ 234.936232][ T8319] ? kernfs_root+0x1c/0x230 [ 234.936262][ T8319] kernfs_new_node+0xeb/0x140 [ 234.936293][ T8319] kernfs_create_link+0xe3/0x240 [ 234.936332][ T8319] sysfs_do_create_link_sd+0x83/0x110 [ 234.936359][ T8319] driver_sysfs_add+0x89/0x210 [ 234.936392][ T8319] really_probe+0x142/0xae0 [ 234.936428][ T8319] __driver_probe_device+0x1e8/0x360 [ 234.936462][ T8319] driver_probe_device+0x4f/0x240 [ 234.936495][ T8319] __driver_attach+0x339/0x600 [ 234.936527][ T8319] bus_for_each_dev+0x23b/0x2c0 [ 234.936564][ T8319] ? __pfx___driver_attach+0x10/0x10 [ 234.936593][ T8319] ? __pfx_bus_for_each_dev+0x10/0x10 [ 234.936634][ T8319] ? do_raw_spin_unlock+0xf5/0x200 [ 234.936671][ T8319] bus_add_driver+0x38f/0x6e0 [ 234.936719][ T8319] driver_register+0x23a/0x320 [ 234.936754][ T8319] usb_gadget_register_driver_owner+0xf9/0x270 [ 234.936796][ T8319] raw_ioctl+0x1541/0x41c0 [ 234.936831][ T8319] ? tomoyo_path_number_perm+0x219/0x5f0 [ 234.936877][ T8319] ? do_vfs_ioctl+0x116f/0x1530 [ 234.936906][ T8319] ? __pfx_raw_ioctl+0x10/0x10 [ 234.936935][ T8319] ? handle_mm_fault+0xee/0x3540 [ 234.936994][ T8319] ? __fget_files+0x2a/0x420 [ 234.937032][ T8319] ? __fget_files+0x2a/0x420 [ 234.937065][ T8319] ? __fget_files+0x2a/0x420 [ 234.937102][ T8319] ? bpf_lsm_file_ioctl+0x9/0x20 [ 234.937126][ T8319] ? __pfx_raw_ioctl+0x10/0x10 [ 234.937153][ T8319] __se_sys_ioctl+0xfc/0x170 [ 234.937194][ T8319] do_syscall_64+0x166/0x520 [ 234.937222][ T8319] ? trace_irq_disable+0x3b/0x140 [ 234.937247][ T8319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.937270][ T8319] ? clear_bhb_loop+0x70/0xc0 [ 234.937298][ T8319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.937321][ T8319] RIP: 0033:0x7f497ed9e1eb [ 234.937342][ T8319] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 234.937361][ T8319] RSP: 002b:00007f497fbc5f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.937386][ T8319] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f497ed9e1eb [ 234.937403][ T8319] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009 [ 234.937417][ T8319] RBP: 00007f497fbc6fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 234.937433][ T8319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.937446][ T8319] R13: 00002000000001c0 R14: 0000000000000005 R15: 0000000000000000 [ 234.937481][ T8319] [ 234.939318][ T8319] raw-gadget.0 gadget.5: really_probe: driver_sysfs_add failed [ 234.988418][ T8319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.988946][ T8319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.253089][ T8320] netlink: 260 bytes leftover after parsing attributes in process `syz.7.515'. [ 235.292036][ T8320] netlink: 64 bytes leftover after parsing attributes in process `syz.7.515'. [ 235.570549][ T5716] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 235.719571][ T5716] usb 2-1: Using ep0 maxpacket: 8 [ 235.721969][ T5716] usb 2-1: unable to get BOS descriptor or descriptor too short [ 235.722021][ T5716] usb 2-1: New USB device found: idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 235.723766][ T5716] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 235.723794][ T5716] usb 2-1: config 0 has no interface number 0 [ 235.723838][ T5716] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 235.723867][ T5716] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 235.723893][ T5716] usb 2-1: config 0 interface 88 has no altsetting 0 [ 235.796447][ T5716] usb 2-1: string descriptor 0 read error: -22 [ 235.796589][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 235.805975][ T5716] usb 2-1: config 0 descriptor?? [ 235.832275][ T5716] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input29 [ 236.001844][ T5625] udevd[5625]: Error opening device "/dev/input/event4": Input/output error [ 236.001996][ T5625] udevd[5625]: Unable to EVIOCGABS device "/dev/input/event4" [ 236.002112][ T5625] udevd[5625]: Unable to EVIOCGABS device "/dev/input/event4" [ 236.064801][ T8325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.066921][ T8325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.087142][ T5716] usb 2-1: USB disconnect, device number 35 [ 236.399963][ T8365] FAULT_INJECTION: forcing a failure. [ 236.399963][ T8365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.400011][ T8365] CPU: 1 UID: 0 PID: 8365 Comm: syz.6.526 Not tainted syzkaller #0 PREEMPT(full) [ 236.400034][ T8365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 236.400052][ T8365] Call Trace: [ 236.400061][ T8365] [ 236.400070][ T8365] dump_stack_lvl+0xe8/0x150 [ 236.400105][ T8365] should_fail_ex+0x3eb/0x540 [ 236.400138][ T8365] _copy_to_user+0x31/0xb0 [ 236.400171][ T8365] comedi_unlocked_ioctl+0xdd3/0x1af0 [ 236.400216][ T8365] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 236.400250][ T8365] ? tomoyo_path_number_perm+0x219/0x5f0 [ 236.400280][ T8365] ? tomoyo_path_number_perm+0x219/0x5f0 [ 236.400313][ T8365] ? do_vfs_ioctl+0x116f/0x1530 [ 236.400341][ T8365] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 236.400403][ T8365] ? __fget_files+0x2a/0x420 [ 236.400438][ T8365] ? __fget_files+0x2a/0x420 [ 236.400470][ T8365] ? __fget_files+0x2a/0x420 [ 236.400505][ T8365] ? bpf_lsm_file_ioctl+0x9/0x20 [ 236.400528][ T8365] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 236.400554][ T8365] __se_sys_ioctl+0xfc/0x170 [ 236.400581][ T8365] do_syscall_64+0x166/0x520 [ 236.400611][ T8365] ? trace_irq_disable+0x3b/0x140 [ 236.400634][ T8365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.400658][ T8365] ? clear_bhb_loop+0x70/0xc0 [ 236.400686][ T8365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.400709][ T8365] RIP: 0033:0x7f820c79e559 [ 236.400729][ T8365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.400748][ T8365] RSP: 002b:00007f820d5b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.400777][ T8365] RAX: ffffffffffffffda RBX: 00007f820ca25fa0 RCX: 00007f820c79e559 [ 236.400801][ T8365] RDX: 00002000000003c0 RSI: 0000000080506409 RDI: 0000000000000003 [ 236.400814][ T8365] RBP: 00007f820d5b7090 R08: 0000000000000000 R09: 0000000000000000 [ 236.400828][ T8365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.400841][ T8365] R13: 00007f820ca26038 R14: 00007f820ca25fa0 R15: 00007fffce8c7588 [ 236.400878][ T8365] [ 236.874671][ T8378] netlink: 68 bytes leftover after parsing attributes in process `syz.5.531'. [ 236.949706][ T5729] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 237.100376][ T5729] usb 2-1: New USB device found: idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 237.101589][ T5729] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.101622][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 237.101651][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 237.104027][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.104054][ T5729] usb 2-1: Product: syz [ 237.104071][ T5729] usb 2-1: Manufacturer: syz [ 237.104088][ T5729] usb 2-1: SerialNumber: syz [ 237.108126][ T5729] usb 2-1: config 0 descriptor?? [ 237.131133][ T8367] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 237.254684][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 237.269603][ T5729] rc_core: IR keymap rc-streamzap not found [ 237.269623][ T5729] Registered IR keymap rc-empty [ 237.271477][ T5729] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 237.273948][ T5729] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input30 [ 237.386565][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 237.402506][ T9] usb 8-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=1.00 [ 237.408078][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.408130][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.506071][ T9] metro_usb 8-1:1.0: Metrologic USB to Serial converter detected [ 237.533946][ T9] usb 8-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 237.657495][ T5612] Bluetooth: hci2: connection err: -111 [ 237.742613][ T5716] usb 8-1: USB disconnect, device number 6 [ 237.761021][ T5716] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 237.764145][ T5716] metro_usb 8-1:1.0: device disconnected [ 238.129791][ T5716] usb 2-1: USB disconnect, device number 36 [ 238.287946][ T8415] netlink: 52 bytes leftover after parsing attributes in process `syz.1.538'. [ 238.488261][ T8427] FAULT_INJECTION: forcing a failure. [ 238.488261][ T8427] name failslab, interval 1, probability 0, space 0, times 0 [ 238.488287][ T8427] CPU: 1 UID: 0 PID: 8427 Comm: syz.5.544 Not tainted syzkaller #0 PREEMPT(full) [ 238.488305][ T8427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 238.488316][ T8427] Call Trace: [ 238.488321][ T8427] [ 238.488329][ T8427] dump_stack_lvl+0xe8/0x150 [ 238.488355][ T8427] should_fail_ex+0x3eb/0x540 [ 238.488381][ T8427] should_failslab+0xa8/0x100 [ 238.488399][ T8427] __kmalloc_noprof+0xf9/0x710 [ 238.488422][ T8427] ? tomoyo_encode+0x2ad/0x570 [ 238.488445][ T8427] ? tomoyo_encode+0x2ad/0x570 [ 238.488476][ T8427] tomoyo_encode+0x2ad/0x570 [ 238.488505][ T8427] tomoyo_realpath_from_path+0x5fa/0x640 [ 238.488538][ T8427] ? tomoyo_path_number_perm+0x219/0x5f0 [ 238.488559][ T8427] tomoyo_path_number_perm+0x246/0x5f0 [ 238.488583][ T8427] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 238.488602][ T8427] ? __lock_acquire+0x747/0x2de0 [ 238.488651][ T8427] ? __fget_files+0x2a/0x420 [ 238.488677][ T8427] ? __fget_files+0x2a/0x420 [ 238.488700][ T8427] ? __fget_files+0x2a/0x420 [ 238.488727][ T8427] security_file_ioctl+0xc3/0x2a0 [ 238.488748][ T8427] __se_sys_ioctl+0x47/0x170 [ 238.488768][ T8427] do_syscall_64+0x166/0x520 [ 238.488790][ T8427] ? trace_irq_disable+0x3b/0x140 [ 238.488808][ T8427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.488851][ T8427] ? clear_bhb_loop+0x70/0xc0 [ 238.488871][ T8427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.488886][ T8427] RIP: 0033:0x7f497ed9e559 [ 238.488901][ T8427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.488914][ T8427] RSP: 002b:00007f497fbc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.488932][ T8427] RAX: ffffffffffffffda RBX: 00007f497f025fa0 RCX: 00007f497ed9e559 [ 238.488944][ T8427] RDX: 0000200000000300 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 238.488960][ T8427] RBP: 00007f497fbc8090 R08: 0000000000000000 R09: 0000000000000000 [ 238.488971][ T8427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.488988][ T8427] R13: 00007f497f026038 R14: 00007f497f025fa0 R15: 00007ffc76971228 [ 238.489013][ T8427] [ 238.489077][ T8427] ERROR: Out of memory at tomoyo_realpath_from_path. [ 238.699560][ T5716] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 238.706419][ T5729] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 238.785985][ T8431] FAULT_INJECTION: forcing a failure. [ 238.785985][ T8431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.786011][ T8431] CPU: 1 UID: 0 PID: 8431 Comm: syz.5.545 Not tainted syzkaller #0 PREEMPT(full) [ 238.786030][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 238.786040][ T8431] Call Trace: [ 238.786046][ T8431] [ 238.786052][ T8431] dump_stack_lvl+0xe8/0x150 [ 238.786078][ T8431] should_fail_ex+0x3eb/0x540 [ 238.786106][ T8431] _copy_to_user+0x31/0xb0 [ 238.786132][ T8431] copy_siginfo_to_user+0x22/0xc0 [ 238.786153][ T8431] x64_setup_rt_frame+0x764/0xc50 [ 238.786191][ T8431] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 238.786222][ T8431] arch_do_signal_or_restart+0x456/0x860 [ 238.786246][ T8431] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 238.786283][ T8431] exit_to_user_mode_loop+0x10e/0x770 [ 238.786301][ T8431] ? rcu_is_watching+0x16/0xb0 [ 238.786324][ T8431] do_syscall_64+0x328/0x520 [ 238.786346][ T8431] ? trace_irq_disable+0x3b/0x140 [ 238.786363][ T8431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.786379][ T8431] ? clear_bhb_loop+0x70/0xc0 [ 238.786400][ T8431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.786416][ T8431] RIP: 0033:0x7f497ed9e559 [ 238.786434][ T8431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.786449][ T8431] RSP: 002b:00007f497fbc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000081 [ 238.786466][ T8431] RAX: 0000000000000000 RBX: 00007f497f025fa0 RCX: 00007f497ed9e559 [ 238.786478][ T8431] RDX: 0000200000000680 RSI: 0000000000000021 RDI: 00000000000000e5 [ 238.786488][ T8431] RBP: 00007f497ee35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 238.786498][ T8431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.786507][ T8431] R13: 00007f497f026038 R14: 00007f497f025fa0 R15: 00007ffc76971228 [ 238.786533][ T8431] [ 238.888713][ T5716] usb 7-1: unable to get BOS descriptor or descriptor too short [ 238.888858][ T5716] usb 7-1: New USB device found: idVendor=200c, idProduct=100b, bcdDevice=0.40 [ 238.897335][ T5716] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.941646][ T5716] usb 7-1: string descriptor 0 read error: -22 [ 238.942017][ T5716] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.049740][ T5729] usb 8-1: Using ep0 maxpacket: 8 [ 239.052634][ T5729] usb 8-1: New USB device found: idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 239.077354][ T5729] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.077385][ T5729] usb 8-1: Product: syz [ 239.077411][ T5729] usb 8-1: Manufacturer: syz [ 239.077427][ T5729] usb 8-1: SerialNumber: syz [ 239.104902][ T5729] usb 8-1: config 0 descriptor?? [ 239.109327][ T5729] radio-usb-si4713 8-1:0.0: Si4713 development board discovered: (10C4:8244) [ 239.137065][ T8434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.137717][ T8434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.187211][ T8434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.195359][ T8434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.202370][ T8435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.208895][ T8435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.217316][ T8434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.226515][ T8434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.325846][ T8437] FAULT_INJECTION: forcing a failure. [ 239.325846][ T8437] name fail_futex, interval 1, probability 0, space 0, times 0 [ 239.325892][ T8437] CPU: 1 UID: 0 PID: 8437 Comm: syz.1.547 Not tainted syzkaller #0 PREEMPT(full) [ 239.325920][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 239.325938][ T8437] Call Trace: [ 239.325947][ T8437] [ 239.325957][ T8437] dump_stack_lvl+0xe8/0x150 [ 239.326015][ T8437] should_fail_ex+0x3eb/0x540 [ 239.326055][ T8437] get_futex_key+0x1ab/0x1410 [ 239.326096][ T8437] ? __pfx_get_futex_key+0x10/0x10 [ 239.326126][ T8437] ? __lock_acquire+0x747/0x2de0 [ 239.326145][ T8437] futex_wait_setup+0x4a/0x590 [ 239.326198][ T8437] ? __futex_wait+0xdb/0x470 [ 239.326238][ T8437] __futex_wait+0x175/0x470 [ 239.326283][ T8437] ? __pfx___futex_wait+0x10/0x10 [ 239.326312][ T8437] ? __pfx_futex_wake_mark+0x10/0x10 [ 239.326366][ T8437] ? try_to_wake_up+0x8ce/0x14e0 [ 239.326403][ T8437] futex_wait+0x121/0x390 [ 239.326430][ T8437] ? __pfx_futex_wait+0x10/0x10 [ 239.326450][ T8437] ? fd_install+0x39e/0x4e0 [ 239.326476][ T8437] ? __lock_acquire+0x747/0x2de0 [ 239.326515][ T8437] do_futex+0x3e7/0x4e0 [ 239.326550][ T8437] ? __pfx_do_futex+0x10/0x10 [ 239.326607][ T8437] __se_sys_futex+0x3a8/0x450 [ 239.326648][ T8437] ? __pfx___se_sys_futex+0x10/0x10 [ 239.326682][ T8437] ? __task_pid_nr_ns+0x28/0x470 [ 239.326721][ T8437] ? __x64_sys_futex+0x21/0xf0 [ 239.326758][ T8437] do_syscall_64+0x166/0x520 [ 239.326796][ T8437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.326824][ T8437] ? clear_bhb_loop+0x70/0xc0 [ 239.326852][ T8437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.326884][ T8437] RIP: 0033:0x7f15a079e559 [ 239.326900][ T8437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.326914][ T8437] RSP: 002b:00007f15a15b00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 239.326931][ T8437] RAX: ffffffffffffffda RBX: 00007f15a0a25fa8 RCX: 00007f15a079e559 [ 239.326962][ T8437] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f15a0a25fa8 [ 239.326979][ T8437] RBP: 00007f15a0a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 239.326994][ T8437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.327008][ T8437] R13: 00007f15a0a26038 R14: 00007ffdc925f0a0 R15: 00007ffdc925f188 [ 239.327047][ T8437] [ 239.400000][ T5739] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 239.583080][ T5739] usb 6-1: New USB device found: idVendor=0079, idProduct=1801, bcdDevice=0.00 [ 239.585283][ T5739] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.585318][ T5739] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.585375][ T5739] usb 6-1: config 0 interface 0 has no altsetting 0 [ 239.585412][ T5739] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.595969][ T5739] usb 6-1: config 0 descriptor?? [ 239.645950][ T5716] usb 7-1: 1:1: cannot get freq at ep 0x1 [ 239.741628][ T5729] radio-usb-si4713 8-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 239.742093][ T5729] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 239.745187][ T5729] usb 8-1: USB disconnect, device number 7 [ 239.781359][ T8439] FAULT_INJECTION: forcing a failure. [ 239.781359][ T8439] name failslab, interval 1, probability 0, space 0, times 0 [ 239.781385][ T8439] CPU: 1 UID: 0 PID: 8439 Comm: syz.1.548 Not tainted syzkaller #0 PREEMPT(full) [ 239.781410][ T8439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 239.781421][ T8439] Call Trace: [ 239.781428][ T8439] [ 239.781435][ T8439] dump_stack_lvl+0xe8/0x150 [ 239.781492][ T8439] should_fail_ex+0x3eb/0x540 [ 239.781532][ T8439] should_failslab+0xa8/0x100 [ 239.781562][ T8439] __kmalloc_cache_noprof+0x9e/0x600 [ 239.781602][ T8439] ? fuse_dev_chan_new+0x65/0x4b0 [ 239.781627][ T8439] ? fuse_dev_chan_new+0x65/0x4b0 [ 239.781670][ T8439] ? __pfx_cuse_channel_open+0x10/0x10 [ 239.781693][ T8439] fuse_dev_chan_new+0x65/0x4b0 [ 239.781718][ T8439] ? __pfx_cuse_channel_open+0x10/0x10 [ 239.781744][ T8439] ? __pfx_cuse_channel_open+0x10/0x10 [ 239.781766][ T8439] cuse_channel_open+0x1f/0x7a0 [ 239.781793][ T8439] ? __pfx_cuse_channel_open+0x10/0x10 [ 239.781814][ T8439] misc_open+0x2d5/0x350 [ 239.781838][ T8439] chrdev_open+0x4d9/0x600 [ 239.781860][ T8439] ? __pfx_chrdev_open+0x10/0x10 [ 239.781878][ T8439] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 239.781899][ T8439] ? devcgroup_check_permission+0x31/0x8f0 [ 239.781921][ T8439] ? __pfx_chrdev_open+0x10/0x10 [ 239.781939][ T8439] do_dentry_open+0x80e/0x1360 [ 239.781968][ T8439] vfs_open_consume+0x4a/0x350 [ 239.781987][ T8439] ? path_openat+0x16e1/0x20f0 [ 239.782006][ T8439] path_openat+0x16fc/0x20f0 [ 239.782037][ T8439] do_file_open+0x23e/0x4a0 [ 239.782058][ T8439] ? __pfx_do_file_open+0x10/0x10 [ 239.782092][ T8439] ? _raw_spin_unlock+0x28/0x50 [ 239.782111][ T8439] ? alloc_fd+0x6af/0x760 [ 239.782143][ T8439] do_sys_openat2+0x115/0x200 [ 239.782164][ T8439] ? __se_sys_futex+0x3a8/0x450 [ 239.782188][ T8439] ? __pfx_do_sys_openat2+0x10/0x10 [ 239.782214][ T8439] ? rcu_is_watching+0x16/0xb0 [ 239.782238][ T8439] __x64_sys_openat+0x138/0x170 [ 239.782264][ T8439] do_syscall_64+0x166/0x520 [ 239.782286][ T8439] ? trace_irq_disable+0x3b/0x140 [ 239.782304][ T8439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.782321][ T8439] ? clear_bhb_loop+0x70/0xc0 [ 239.782341][ T8439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.782358][ T8439] RIP: 0033:0x7f15a079e559 [ 239.782374][ T8439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.782388][ T8439] RSP: 002b:00007f15a15b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 239.782412][ T8439] RAX: ffffffffffffffda RBX: 00007f15a0a25fa0 RCX: 00007f15a079e559 [ 239.782425][ T8439] RDX: 0000000000000002 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 239.782437][ T8439] RBP: 00007f15a0835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 239.782447][ T8439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.782457][ T8439] R13: 00007f15a0a26038 R14: 00007f15a0a25fa0 R15: 00007ffdc925f188 [ 239.782483][ T8439] [ 239.934770][ T5739] usbhid 6-1:0.0: can't add hid device: -71 [ 239.935100][ T5739] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 240.053596][ T5739] usb 6-1: USB disconnect, device number 19 [ 240.167807][ T5716] usb 7-1: USB disconnect, device number 23 [ 240.465251][ T8451] FAULT_INJECTION: forcing a failure. [ 240.465251][ T8451] name failslab, interval 1, probability 0, space 0, times 0 [ 240.465376][ T8451] CPU: 0 UID: 0 PID: 8451 Comm: syz.7.553 Not tainted syzkaller #0 PREEMPT(full) [ 240.465398][ T8451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 240.465409][ T8451] Call Trace: [ 240.465418][ T8451] [ 240.465436][ T8451] dump_stack_lvl+0xe8/0x150 [ 240.465464][ T8451] should_fail_ex+0x3eb/0x540 [ 240.465492][ T8451] should_failslab+0xa8/0x100 [ 240.465510][ T8451] ? do_getname+0x2e/0x250 [ 240.465531][ T8451] kmem_cache_alloc_noprof+0x9c/0x600 [ 240.465553][ T8451] ? do_futex+0x3e7/0x4e0 [ 240.465576][ T8451] ? do_getname+0x2e/0x250 [ 240.465602][ T8451] do_getname+0x2e/0x250 [ 240.465624][ T8451] ? getname_flags+0x11/0x20 [ 240.465646][ T8451] do_sys_openat2+0xce/0x200 [ 240.465668][ T8451] ? __se_sys_futex+0x3a8/0x450 [ 240.465690][ T8451] ? __pfx_do_sys_openat2+0x10/0x10 [ 240.465714][ T8451] ? __pfx___se_sys_futex+0x10/0x10 [ 240.465743][ T8451] __x64_sys_openat+0x138/0x170 [ 240.465772][ T8451] do_syscall_64+0x166/0x520 [ 240.465794][ T8451] ? trace_irq_disable+0x3b/0x140 [ 240.465812][ T8451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.465830][ T8451] ? clear_bhb_loop+0x70/0xc0 [ 240.465851][ T8451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.465868][ T8451] RIP: 0033:0x7ff9c0d9e559 [ 240.465884][ T8451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.465899][ T8451] RSP: 002b:00007ff9c1d4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 240.465916][ T8451] RAX: ffffffffffffffda RBX: 00007ff9c1025fa0 RCX: 00007ff9c0d9e559 [ 240.465929][ T8451] RDX: 0000000000000042 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 240.465940][ T8451] RBP: 00007ff9c0e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 240.465951][ T8451] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000000 [ 240.465962][ T8451] R13: 00007ff9c1026038 R14: 00007ff9c1025fa0 R15: 00007fff521d9ac8 [ 240.465988][ T8451] [ 240.742496][ T8453] FAULT_INJECTION: forcing a failure. [ 240.742496][ T8453] name failslab, interval 1, probability 0, space 0, times 0 [ 240.742532][ T8453] CPU: 1 UID: 0 PID: 8453 Comm: syz.7.554 Not tainted syzkaller #0 PREEMPT(full) [ 240.742558][ T8453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 240.742573][ T8453] Call Trace: [ 240.742582][ T8453] [ 240.742593][ T8453] dump_stack_lvl+0xe8/0x150 [ 240.742629][ T8453] should_fail_ex+0x3eb/0x540 [ 240.742671][ T8453] should_failslab+0xa8/0x100 [ 240.742695][ T8453] ? __pmd_alloc+0xc1/0x630 [ 240.742721][ T8453] kmem_cache_alloc_noprof+0x9c/0x600 [ 240.742759][ T8453] ? alloc_pages_mpol+0x256/0x390 [ 240.742787][ T8453] ? __pmd_alloc+0xc1/0x630 [ 240.742819][ T8453] __pmd_alloc+0xc1/0x630 [ 240.742849][ T8453] handle_mm_fault+0xe8e/0x3540 [ 240.742885][ T8453] ? handle_mm_fault+0xee/0x3540 [ 240.742923][ T8453] ? __pfx_stack_trace_save+0x10/0x10 [ 240.742947][ T8453] ? __pfx_handle_mm_fault+0x10/0x10 [ 240.742988][ T8453] ? lockdep_unlock+0x5c/0xd0 [ 240.743019][ T8453] ? __lock_acquire+0x1511/0x2de0 [ 240.743045][ T8453] ? lock_mm_and_find_vma+0xa7/0x340 [ 240.743077][ T8453] do_user_addr_fault+0x7f6/0x1480 [ 240.743133][ T8453] exc_page_fault+0x6a/0xc0 [ 240.743165][ T8453] asm_exc_page_fault+0x26/0x30 [ 240.743188][ T8453] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 240.743213][ T8453] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 240.743232][ T8453] RSP: 0018:ffffc900070a7ab8 EFLAGS: 00050202 [ 240.743254][ T8453] RAX: 00007ffffffff001 RBX: 0000000000000018 RCX: 0000000000000018 [ 240.743271][ T8453] RDX: 0000000000000001 RSI: 0000200000000280 RDI: ffffc900070a7bd0 [ 240.743286][ T8453] RBP: ffffc900070a7cb0 R08: ffffc900070a7be7 R09: 1ffff92000e14f7c [ 240.743303][ T8453] R10: dffffc0000000000 R11: fffff52000e14f7d R12: ffff88802ba23000 [ 240.743320][ T8453] R13: dffffc0000000000 R14: ffffc900070a7bd0 R15: 0000200000000280 [ 240.743355][ T8453] _copy_from_user+0x7a/0xb0 [ 240.743390][ T8453] rfcomm_dev_ioctl+0x1b4/0x21b0 [ 240.743434][ T8453] ? kasan_quarantine_put+0xbb/0x1f0 [ 240.743468][ T8453] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 240.743510][ T8453] ? tomoyo_path_number_perm+0x219/0x5f0 [ 240.743549][ T8453] ? do_vfs_ioctl+0x116f/0x1530 [ 240.743578][ T8453] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 240.743611][ T8453] sock_do_ioctl+0x101/0x320 [ 240.743639][ T8453] ? __pfx_sock_do_ioctl+0x10/0x10 [ 240.743681][ T8453] sock_ioctl+0x57a/0x7e0 [ 240.743704][ T8453] ? __fget_files+0x2a/0x420 [ 240.743746][ T8453] ? __pfx_sock_ioctl+0x10/0x10 [ 240.743769][ T8453] ? __fget_files+0x2a/0x420 [ 240.743802][ T8453] ? __fget_files+0x2a/0x420 [ 240.743839][ T8453] ? bpf_lsm_file_ioctl+0x9/0x20 [ 240.743862][ T8453] ? __pfx_sock_ioctl+0x10/0x10 [ 240.743885][ T8453] __se_sys_ioctl+0xfc/0x170 [ 240.743913][ T8453] do_syscall_64+0x166/0x520 [ 240.743943][ T8453] ? trace_irq_disable+0x3b/0x140 [ 240.743968][ T8453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.743992][ T8453] ? clear_bhb_loop+0x70/0xc0 [ 240.744022][ T8453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.744044][ T8453] RIP: 0033:0x7ff9c0d9e559 [ 240.744066][ T8453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.744086][ T8453] RSP: 002b:00007ff9c1d4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.744109][ T8453] RAX: ffffffffffffffda RBX: 00007ff9c1025fa0 RCX: 00007ff9c0d9e559 [ 240.744126][ T8453] RDX: 0000200000000280 RSI: 00000000400452c9 RDI: 0000000000000004 [ 240.744142][ T8453] RBP: 00007ff9c1d4c090 R08: 0000000000000000 R09: 0000000000000000 [ 240.744156][ T8453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.744170][ T8453] R13: 00007ff9c1026038 R14: 00007ff9c1025fa0 R15: 00007fff521d9ac8 [ 240.744208][ T8453] [ 241.292637][ T8465] warning: `syz.5.558' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 241.363514][ T8469] FAULT_INJECTION: forcing a failure. [ 241.363514][ T8469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.363594][ T8469] CPU: 1 UID: 0 PID: 8469 Comm: syz.1.560 Not tainted syzkaller #0 PREEMPT(full) [ 241.363626][ T8469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 241.363642][ T8469] Call Trace: [ 241.363665][ T8469] [ 241.363677][ T8469] dump_stack_lvl+0xe8/0x150 [ 241.363716][ T8469] should_fail_ex+0x3eb/0x540 [ 241.363763][ T8469] _copy_from_user+0x2d/0xb0 [ 241.363807][ T8469] __se_sys_mount+0x18b/0x420 [ 241.363855][ T8469] ? __pfx___se_sys_mount+0x10/0x10 [ 241.363900][ T8469] ? __x64_sys_mount+0x20/0xc0 [ 241.363940][ T8469] do_syscall_64+0x166/0x520 [ 241.363976][ T8469] ? trace_irq_disable+0x3b/0x140 [ 241.364004][ T8469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.364031][ T8469] ? clear_bhb_loop+0x70/0xc0 [ 241.364072][ T8469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.364105][ T8469] RIP: 0033:0x7f15a079e559 [ 241.364134][ T8469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.364155][ T8469] RSP: 002b:00007f15a15b0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 241.364183][ T8469] RAX: ffffffffffffffda RBX: 00007f15a0a25fa0 RCX: 00007f15a079e559 [ 241.364204][ T8469] RDX: 0000200000000900 RSI: 00002000000008c0 RDI: 0000200000000880 [ 241.364223][ T8469] RBP: 00007f15a15b0090 R08: 0000200000000940 R09: 0000000000000000 [ 241.364240][ T8469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.364257][ T8469] R13: 00007f15a0a26038 R14: 00007f15a0a25fa0 R15: 00007ffdc925f188 [ 241.364298][ T8469] [ 241.579864][ T5739] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 241.732886][ T5739] usb 7-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 241.734320][ T5739] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.755430][ T5739] usb 7-1: config 0 descriptor?? [ 241.882545][ T8476] tipc: Started in network mode [ 241.882590][ T8476] tipc: Node identity 7f000001, cluster identity 4711 [ 241.920386][ T8476] tipc: Enabled bearer , priority 10 [ 241.935933][ T8476] tipc: Enabling of bearer rejected, failed to enable media [ 241.951454][ T8476] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 241.951957][ T8476] tipc: Enabled bearer , priority 10 [ 241.989304][ T5739] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 242.029187][ T8478] FAULT_INJECTION: forcing a failure. [ 242.029187][ T8478] name failslab, interval 1, probability 0, space 0, times 0 [ 242.029228][ T8478] CPU: 1 UID: 0 PID: 8478 Comm: syz.5.563 Not tainted syzkaller #0 PREEMPT(full) [ 242.029257][ T8478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 242.029272][ T8478] Call Trace: [ 242.029283][ T8478] [ 242.029298][ T8478] dump_stack_lvl+0xe8/0x150 [ 242.029345][ T8478] should_fail_ex+0x3eb/0x540 [ 242.029394][ T8478] ? __alloc_skb+0x1db/0x7a0 [ 242.029428][ T8478] should_failslab+0xa8/0x100 [ 242.029457][ T8478] ? __alloc_skb+0x1db/0x7a0 [ 242.029486][ T8478] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 242.029515][ T8478] ? __alloc_skb+0x18d/0x7a0 [ 242.029542][ T8478] ? __alloc_skb+0x1db/0x7a0 [ 242.029581][ T8478] __alloc_skb+0x1db/0x7a0 [ 242.029618][ T8478] mgmt_cmd_status+0x42/0x570 [ 242.029649][ T8478] ? stack_depot_save_flags+0x33/0x7f0 [ 242.029689][ T8478] set_appearance+0x10d/0x4c0 [ 242.029730][ T8478] ? __pfx_set_appearance+0x10/0x10 [ 242.029763][ T8478] ? kmem_cache_free+0x182/0x650 [ 242.029803][ T8478] ? hci_mgmt_cmd+0x4db/0xfc0 [ 242.029834][ T8478] ? hci_sock_sendmsg+0x6e8/0xfd0 [ 242.029866][ T8478] ? sock_sendmsg_nosec+0x14e/0x190 [ 242.029892][ T8478] ? sock_write_iter+0x2de/0x3e0 [ 242.029913][ T8478] ? vfs_write+0x612/0xba0 [ 242.029947][ T8478] ? ksys_write+0x150/0x270 [ 242.029983][ T8478] ? do_syscall_64+0x166/0x520 [ 242.030024][ T8478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.030063][ T8478] ? __lock_acquire+0x747/0x2de0 [ 242.030133][ T8478] ? lock_acquire+0x115/0x350 [ 242.030191][ T8478] hci_mgmt_cmd+0xa2c/0xfc0 [ 242.030239][ T8478] hci_sock_sendmsg+0x6e8/0xfd0 [ 242.030282][ T8478] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 242.030335][ T8478] ? apparmor_socket_sendmsg+0x98/0x360 [ 242.030373][ T8478] ? lock_acquire+0x115/0x350 [ 242.030400][ T8478] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 242.030431][ T8478] sock_sendmsg_nosec+0x14e/0x190 [ 242.030462][ T8478] sock_write_iter+0x2de/0x3e0 [ 242.030492][ T8478] ? __pfx_sock_write_iter+0x10/0x10 [ 242.030525][ T8478] ? bpf_lsm_file_permission+0x9/0x20 [ 242.030549][ T8478] ? security_file_permission+0x75/0x260 [ 242.030596][ T8478] vfs_write+0x612/0xba0 [ 242.030662][ T8478] ? __pfx_vfs_write+0x10/0x10 [ 242.030707][ T8478] ? __fget_files+0x3a2/0x420 [ 242.030745][ T8478] ? __fget_files+0x2a/0x420 [ 242.030789][ T8478] ? fdget+0x1ac/0x250 [ 242.030833][ T8478] ksys_write+0x150/0x270 [ 242.030879][ T8478] ? __pfx_ksys_write+0x10/0x10 [ 242.030947][ T8478] do_syscall_64+0x166/0x520 [ 242.030986][ T8478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.031013][ T8478] ? clear_bhb_loop+0x70/0xc0 [ 242.031047][ T8478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.031075][ T8478] RIP: 0033:0x7f497ed9e559 [ 242.031109][ T8478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.031130][ T8478] RSP: 002b:00007f497fbc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 242.031157][ T8478] RAX: ffffffffffffffda RBX: 00007f497f025fa0 RCX: 00007f497ed9e559 [ 242.031183][ T8478] RDX: 0000000000000008 RSI: 0000200000000c80 RDI: 0000000000000004 [ 242.031202][ T8478] RBP: 00007f497fbc8090 R08: 0000000000000000 R09: 0000000000000000 [ 242.031229][ T8478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.031250][ T8478] R13: 00007f497f026038 R14: 00007f497f025fa0 R15: 00007ffc76971228 [ 242.031292][ T8478] [ 242.448177][ T8466] netlink: 52 bytes leftover after parsing attributes in process `syz.6.559'. [ 242.545365][ T5739] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1 [ 242.545394][ T5739] [drm] Initialized udl on minor 1 [ 242.562537][ T8484] FAULT_INJECTION: forcing a failure. [ 242.562537][ T8484] name failslab, interval 1, probability 0, space 0, times 0 [ 242.562574][ T8484] CPU: 1 UID: 0 PID: 8484 Comm: syz.6.559 Not tainted syzkaller #0 PREEMPT(full) [ 242.562601][ T8484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 242.562616][ T8484] Call Trace: [ 242.562626][ T8484] [ 242.562637][ T8484] dump_stack_lvl+0xe8/0x150 [ 242.562674][ T8484] should_fail_ex+0x3eb/0x540 [ 242.562713][ T8484] should_failslab+0xa8/0x100 [ 242.562750][ T8484] __kmalloc_cache_noprof+0x9e/0x600 [ 242.562785][ T8484] ? tcp_fastopen_reset_cipher+0x5e/0x3a0 [ 242.562823][ T8484] ? tcp_fastopen_reset_cipher+0x5e/0x3a0 [ 242.562867][ T8484] tcp_fastopen_reset_cipher+0x5e/0x3a0 [ 242.562909][ T8484] do_tcp_setsockopt+0x5a4/0x1f80 [ 242.562941][ T8484] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 242.562976][ T8484] ? aa_sock_opt_perm+0xe1/0x1e0 [ 242.563013][ T8484] ? sock_common_setsockopt+0x36/0xc0 [ 242.563038][ T8484] ? tcp_setsockopt+0x3d/0xe0 [ 242.563061][ T8484] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 242.563091][ T8484] do_sock_setsockopt+0x17c/0x1b0 [ 242.563127][ T8484] __x64_sys_setsockopt+0x13d/0x1b0 [ 242.563166][ T8484] do_syscall_64+0x166/0x520 [ 242.563197][ T8484] ? trace_irq_disable+0x3b/0x140 [ 242.563222][ T8484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.563248][ T8484] ? clear_bhb_loop+0x70/0xc0 [ 242.563283][ T8484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.563308][ T8484] RIP: 0033:0x7f820c79e559 [ 242.563330][ T8484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.563351][ T8484] RSP: 002b:00007f820d596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 242.563376][ T8484] RAX: ffffffffffffffda RBX: 00007f820ca26090 RCX: 00007f820c79e559 [ 242.563394][ T8484] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 000000000000000a [ 242.563408][ T8484] RBP: 00007f820c835ab8 R08: 0000000000000010 R09: 0000000000000000 [ 242.563423][ T8484] R10: 0000200000009bc0 R11: 0000000000000246 R12: 0000000000000000 [ 242.563440][ T8484] R13: 00007f820ca26128 R14: 00007f820ca26090 R15: 00007fffce8c7588 [ 242.563477][ T8484] [ 242.952424][ T46] tipc: Node number set to 2130706433 [ 243.103828][ T8497] FAULT_INJECTION: forcing a failure. [ 243.103828][ T8497] name failslab, interval 1, probability 0, space 0, times 0 [ 243.103866][ T8497] CPU: 1 UID: 0 PID: 8497 Comm: syz.1.568 Not tainted syzkaller #0 PREEMPT(full) [ 243.103897][ T8497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 243.103912][ T8497] Call Trace: [ 243.103921][ T8497] [ 243.103932][ T8497] dump_stack_lvl+0xe8/0x150 [ 243.103971][ T8497] should_fail_ex+0x3eb/0x540 [ 243.104009][ T8497] should_failslab+0xa8/0x100 [ 243.104038][ T8497] __kmalloc_cache_noprof+0x9e/0x600 [ 243.104076][ T8497] ? ufs_init_fs_context+0x54/0x2a0 [ 243.104105][ T8497] ? ufs_init_fs_context+0x54/0x2a0 [ 243.104143][ T8497] ufs_init_fs_context+0x54/0x2a0 [ 243.104176][ T8497] alloc_fs_context+0x99e/0xd00 [ 243.104212][ T8497] __se_sys_fsopen+0x118/0x370 [ 243.104245][ T8497] do_syscall_64+0x166/0x520 [ 243.104276][ T8497] ? trace_irq_disable+0x3b/0x140 [ 243.104302][ T8497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.104327][ T8497] ? clear_bhb_loop+0x70/0xc0 [ 243.104358][ T8497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.104382][ T8497] RIP: 0033:0x7f15a079e559 [ 243.104404][ T8497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.104425][ T8497] RSP: 002b:00007f15a15b0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 243.104451][ T8497] RAX: ffffffffffffffda RBX: 00007f15a0a25fa0 RCX: 00007f15a079e559 [ 243.104469][ T8497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 243.104485][ T8497] RBP: 00007f15a0835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 243.104508][ T8497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.104523][ T8497] R13: 00007f15a0a26038 R14: 00007f15a0a25fa0 R15: 00007ffdc925f188 [ 243.104559][ T8497] [ 243.929747][ T5729] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 244.079845][ T5716] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 244.082095][ T5729] usb 2-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 244.083621][ T5729] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.083673][ T5729] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.085915][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.085943][ T5729] usb 2-1: Product: syz [ 244.085968][ T5729] usb 2-1: Manufacturer: syz [ 244.085984][ T5729] usb 2-1: SerialNumber: syz [ 244.249821][ T5716] usb 8-1: Using ep0 maxpacket: 8 [ 244.250780][ T5716] usb 8-1: New USB device found: idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 244.251832][ T5716] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.254267][ T5716] usb 8-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 244.254295][ T5716] usb 8-1: Product: syz [ 244.254340][ T5716] usb 8-1: Manufacturer: syz [ 244.254359][ T5716] usb 8-1: SerialNumber: syz [ 244.257101][ T5716] usb 8-1: config 0 descriptor?? [ 244.272340][ T5716] imon_raw 8-1:0.0: IR endpoint missing [ 244.325176][ T8500] trusted_key: encrypted_key: insufficient parameters specified [ 244.473011][ T1223] usb 8-1: USB disconnect, device number 8 [ 244.489165][ T8507] overlayfs: statfs failed on './file0' [ 244.866155][ T32] audit: type=1326 audit(1792316674.305:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.5.576" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f497ed9e559 code=0x0 [ 244.866251][ T32] audit: type=1326 audit(1792316674.305:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.5.576" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f497ed9e559 code=0x0 [ 245.279648][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 245.431542][ T9] usb 6-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 245.433723][ T9] usb 6-1: config 0 has no interfaces? [ 245.437157][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 245.437186][ T9] usb 6-1: Product: syz [ 245.437203][ T9] usb 6-1: Manufacturer: syz [ 245.477025][ T9] usb 6-1: config 0 descriptor?? [ 245.669640][ T5729] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 245.682844][ T9] usb 6-1: USB disconnect, device number 20 [ 245.821992][ T5729] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.40 [ 245.823595][ T5729] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 245.823626][ T5729] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 245.823645][ T5729] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.826463][ T5729] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.826489][ T5729] usb 8-1: Product: syz [ 245.826505][ T5729] usb 8-1: Manufacturer: syz [ 245.826549][ T5729] usb 8-1: SerialNumber: syz [ 245.857987][ T5729] hub 8-1:1.0: bad descriptor, ignoring hub [ 245.858066][ T5729] hub 8-1:1.0: probe with driver hub failed with error -5 [ 246.099794][ T8528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.101653][ T8528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.109132][ T5729] usblp 8-1:1.0: usblp1: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 246.512114][ T5716] usb 2-1: USB disconnect, device number 37 [ 246.590314][ T5729] usb 8-1: USB disconnect, device number 9 [ 246.599167][ T5729] usblp1: removed [ 246.860596][ T8540] FAULT_INJECTION: forcing a failure. [ 246.860596][ T8540] name failslab, interval 1, probability 0, space 0, times 0 [ 246.860621][ T8540] CPU: 1 UID: 0 PID: 8540 Comm: syz.1.583 Not tainted syzkaller #0 PREEMPT(full) [ 246.860640][ T8540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 246.860679][ T8540] Call Trace: [ 246.860691][ T8540] [ 246.860702][ T8540] dump_stack_lvl+0xe8/0x150 [ 246.860738][ T8540] should_fail_ex+0x3eb/0x540 [ 246.860781][ T8540] should_failslab+0xa8/0x100 [ 246.860801][ T8540] __kmalloc_noprof+0xf9/0x710 [ 246.860825][ T8540] ? tomoyo_encode+0x2ad/0x570 [ 246.860849][ T8540] ? tomoyo_encode+0x2ad/0x570 [ 246.860878][ T8540] tomoyo_encode+0x2ad/0x570 [ 246.860907][ T8540] tomoyo_realpath_from_path+0x5fa/0x640 [ 246.860940][ T8540] ? tomoyo_path_number_perm+0x219/0x5f0 [ 246.860962][ T8540] tomoyo_path_number_perm+0x246/0x5f0 [ 246.860986][ T8540] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 246.861005][ T8540] ? __lock_acquire+0x747/0x2de0 [ 246.861050][ T8540] ? __fget_files+0x2a/0x420 [ 246.861076][ T8540] ? __fget_files+0x2a/0x420 [ 246.861099][ T8540] ? __fget_files+0x2a/0x420 [ 246.861126][ T8540] security_file_ioctl+0xc3/0x2a0 [ 246.861148][ T8540] __se_sys_ioctl+0x47/0x170 [ 246.861167][ T8540] do_syscall_64+0x166/0x520 [ 246.861189][ T8540] ? trace_irq_disable+0x3b/0x140 [ 246.861207][ T8540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.861224][ T8540] ? clear_bhb_loop+0x70/0xc0 [ 246.861249][ T8540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.861265][ T8540] RIP: 0033:0x7f15a079e559 [ 246.861281][ T8540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.861295][ T8540] RSP: 002b:00007f15a15b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.861312][ T8540] RAX: ffffffffffffffda RBX: 00007f15a0a25fa0 RCX: 00007f15a079e559 [ 246.861325][ T8540] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 246.861335][ T8540] RBP: 00007f15a15b0090 R08: 0000000000000000 R09: 0000000000000000 [ 246.861345][ T8540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.861355][ T8540] R13: 00007f15a0a26038 R14: 00007f15a0a25fa0 R15: 00007ffdc925f188 [ 246.861380][ T8540] [ 246.861414][ T8540] ERROR: Out of memory at tomoyo_realpath_from_path. [ 247.310801][ T8548] FAULT_INJECTION: forcing a failure. [ 247.310801][ T8548] name failslab, interval 1, probability 0, space 0, times 0 [ 247.310828][ T8548] CPU: 1 UID: 0 PID: 8548 Comm: syz.7.586 Not tainted syzkaller #0 PREEMPT(full) [ 247.310847][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 247.310857][ T8548] Call Trace: [ 247.310864][ T8548] [ 247.310871][ T8548] dump_stack_lvl+0xe8/0x150 [ 247.310901][ T8548] should_fail_ex+0x3eb/0x540 [ 247.310928][ T8548] should_failslab+0xa8/0x100 [ 247.310947][ T8548] __kmalloc_noprof+0xf9/0x710 [ 247.310972][ T8548] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 247.310997][ T8548] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 247.311027][ T8548] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 247.311058][ T8548] genl_family_rcv_msg_doit+0xda/0x340 [ 247.311086][ T8548] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 247.311116][ T8548] ? apparmor_capable+0x126/0x170 [ 247.311136][ T8548] ? bpf_lsm_capable+0x9/0x20 [ 247.311154][ T8548] ? security_capable+0x7e/0x2c0 [ 247.311182][ T8548] genl_rcv_msg+0x614/0x7a0 [ 247.311211][ T8548] ? __pfx_genl_rcv_msg+0x10/0x10 [ 247.311234][ T8548] ? __pfx_ip_vs_genl_get_cmd+0x10/0x10 [ 247.311260][ T8548] ? __asan_memcpy+0x40/0x70 [ 247.311289][ T8548] netlink_rcv_skb+0x226/0x4a0 [ 247.311308][ T8548] ? __pfx_genl_rcv_msg+0x10/0x10 [ 247.311331][ T8548] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 247.311361][ T8548] ? down_read+0x2b9/0x320 [ 247.311389][ T8548] genl_rcv+0x28/0x40 [ 247.311410][ T8548] netlink_unicast+0x8ef/0xa80 [ 247.311449][ T8548] netlink_sendmsg+0x7f0/0xb20 [ 247.311472][ T8548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.311493][ T8548] ? aa_sock_msg_perm+0x144/0x210 [ 247.311521][ T8548] ? apparmor_socket_sendmsg+0x98/0x360 [ 247.311543][ T8548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.311561][ T8548] sock_sendmsg_nosec+0x14e/0x190 [ 247.311581][ T8548] ____sys_sendmsg+0x54e/0x850 [ 247.311608][ T8548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.311639][ T8548] ? import_iovec+0x73/0xa0 [ 247.311692][ T8548] ___sys_sendmsg+0x2a5/0x360 [ 247.311758][ T8548] ? __lock_acquire+0x747/0x2de0 [ 247.311779][ T8548] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.311829][ T8548] ? __fget_files+0x3a2/0x420 [ 247.311853][ T8548] ? __fget_files+0x2a/0x420 [ 247.311883][ T8548] __x64_sys_sendmsg+0x1b1/0x290 [ 247.311909][ T8548] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 247.311948][ T8548] do_syscall_64+0x166/0x520 [ 247.311970][ T8548] ? trace_irq_disable+0x3b/0x140 [ 247.311988][ T8548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.312005][ T8548] ? clear_bhb_loop+0x70/0xc0 [ 247.312025][ T8548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.312041][ T8548] RIP: 0033:0x7ff9c0d9e559 [ 247.312056][ T8548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.312070][ T8548] RSP: 002b:00007ff9c1d4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.312087][ T8548] RAX: ffffffffffffffda RBX: 00007ff9c1025fa0 RCX: 00007ff9c0d9e559 [ 247.312100][ T8548] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 247.312110][ T8548] RBP: 00007ff9c1d4c090 R08: 0000000000000000 R09: 0000000000000000 [ 247.312121][ T8548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.312130][ T8548] R13: 00007ff9c1026038 R14: 00007ff9c1025fa0 R15: 00007fff521d9ac8 [ 247.312156][ T8548] [ 247.472130][ T5716] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 247.687884][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 247.688026][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 247.688108][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 247.688211][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 247.688313][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 247.690575][ T5739] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 247.734352][ T5716] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 247.742913][ T5716] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.743011][ T5716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 247.743081][ T5716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 247.743134][ T5716] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.743254][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.763140][ T5716] usb 2-1: config 0 descriptor?? [ 247.772753][ T5739] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 247.828533][ T5739] usb 7-1: USB disconnect, device number 24 [ 247.986763][ T5716] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 247.986807][ T5716] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 247.986838][ T5716] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 247.986868][ T5716] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 247.986898][ T5716] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 247.986927][ T5716] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 247.986956][ T5716] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 247.986984][ T5716] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 247.987012][ T5716] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 247.987040][ T5716] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 248.132531][ T5716] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 248.188631][ T5739] usb 2-1: USB disconnect, device number 38 [ 248.217456][ T8563] fido_id[8563]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 248.339655][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 248.490395][ T5729] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 248.508452][ T9] usb 6-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 248.519153][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.519210][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 248.519240][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 248.519284][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.640408][ T5729] usb 7-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 248.641540][ T5729] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.641613][ T5729] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 248.641683][ T5729] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 248.641729][ T5729] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.805928][ T9] cxacru 6-1:1.0: invalid response length to cm 0x90: 63 [ 248.808408][ T8574] cxacru 6-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 248.850137][ T8565] FAULT_INJECTION: forcing a failure. [ 248.850137][ T8565] name failslab, interval 1, probability 0, space 0, times 0 [ 248.850181][ T8565] CPU: 1 UID: 0 PID: 8565 Comm: syz.6.590 Not tainted syzkaller #0 PREEMPT(full) [ 248.850207][ T8565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 248.850221][ T8565] Call Trace: [ 248.850230][ T8565] [ 248.850240][ T8565] dump_stack_lvl+0xe8/0x150 [ 248.850276][ T8565] should_fail_ex+0x3eb/0x540 [ 248.850315][ T8565] should_failslab+0xa8/0x100 [ 248.850342][ T8565] __kmalloc_noprof+0xf9/0x710 [ 248.850372][ T8565] ? rcu_is_watching+0x16/0xb0 [ 248.850401][ T8565] ? tomoyo_realpath_from_path+0xef/0x640 [ 248.850436][ T8565] ? tomoyo_realpath_from_path+0xef/0x640 [ 248.850480][ T8565] tomoyo_realpath_from_path+0xef/0x640 [ 248.850526][ T8565] ? tomoyo_path_number_perm+0x219/0x5f0 [ 248.850556][ T8565] tomoyo_path_number_perm+0x246/0x5f0 [ 248.850590][ T8565] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 248.850618][ T8565] ? __lock_acquire+0x747/0x2de0 [ 248.850684][ T8565] ? __fget_files+0x2a/0x420 [ 248.850722][ T8565] ? __fget_files+0x2a/0x420 [ 248.850755][ T8565] ? __fget_files+0x2a/0x420 [ 248.850793][ T8565] security_file_ioctl+0xc3/0x2a0 [ 248.850824][ T8565] __se_sys_ioctl+0x47/0x170 [ 248.850853][ T8565] do_syscall_64+0x166/0x520 [ 248.850883][ T8565] ? trace_irq_disable+0x3b/0x140 [ 248.850911][ T8565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.850935][ T8565] ? clear_bhb_loop+0x70/0xc0 [ 248.850964][ T8565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.850987][ T8565] RIP: 0033:0x7f820c79e559 [ 248.851009][ T8565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.851029][ T8565] RSP: 002b:00007f820d5b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.851054][ T8565] RAX: ffffffffffffffda RBX: 00007f820ca25fa0 RCX: 00007f820c79e559 [ 248.851071][ T8565] RDX: 0000200000000780 RSI: 000000004010618a RDI: 0000000000000004 [ 248.851084][ T8565] RBP: 00007f820d5b7090 R08: 0000000000000000 R09: 0000000000000000 [ 248.851096][ T8565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.851107][ T8565] R13: 00007f820ca26038 R14: 00007f820ca25fa0 R15: 00007fffce8c7588 [ 248.851141][ T8565] [ 248.851230][ T8565] ERROR: Out of memory at tomoyo_realpath_from_path. [ 248.958240][ T5729] cxacru 7-1:1.0: invalid response length to cm 0x90: 63 [ 248.983155][ T8577] cxacru 7-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 249.105446][ T5729] usb 6-1: USB disconnect, device number 21 [ 249.167442][ T9] usb 7-1: USB disconnect, device number 25 [ 249.449891][ T5824] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 249.600495][ T5824] usb 2-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 249.601566][ T5824] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.601592][ T5824] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 249.601619][ T5824] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 249.601650][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.610778][ T5824] cxacru 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 249.689622][ T5612] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 249.917605][ T5739] usb 2-1: USB disconnect, device number 39 [ 250.077619][ T8602] FAULT_INJECTION: forcing a failure. [ 250.077619][ T8602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.077652][ T8602] CPU: 0 UID: 0 PID: 8602 Comm: syz.6.598 Not tainted syzkaller #0 PREEMPT(full) [ 250.077679][ T8602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 250.077692][ T8602] Call Trace: [ 250.077702][ T8602] [ 250.077712][ T8602] dump_stack_lvl+0xe8/0x150 [ 250.077748][ T8602] should_fail_ex+0x3eb/0x540 [ 250.077785][ T8602] _copy_to_user+0x31/0xb0 [ 250.077821][ T8602] simple_read_from_buffer+0xe1/0x170 [ 250.077859][ T8602] proc_fail_nth_read+0x1bb/0x230 [ 250.077889][ T8602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 250.077919][ T8602] ? rw_verify_area+0x24a/0x4c0 [ 250.077956][ T8602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 250.077981][ T8602] vfs_read+0x213/0xa80 [ 250.078021][ T8602] ? __pfx___mutex_lock+0x10/0x10 [ 250.078055][ T8602] ? __pfx_vfs_read+0x10/0x10 [ 250.078092][ T8602] ? __fget_files+0x2a/0x420 [ 250.078124][ T8602] ? __fget_files+0x3a2/0x420 [ 250.078156][ T8602] ? __fget_files+0x2a/0x420 [ 250.078193][ T8602] ? fdget+0x1ac/0x250 [ 250.078233][ T8602] ksys_read+0x150/0x270 [ 250.078271][ T8602] ? __pfx_ksys_read+0x10/0x10 [ 250.078305][ T8602] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 250.078344][ T8602] do_syscall_64+0x166/0x520 [ 250.078374][ T8602] ? trace_irq_disable+0x3b/0x140 [ 250.078399][ T8602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.078423][ T8602] ? clear_bhb_loop+0x70/0xc0 [ 250.078452][ T8602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.078486][ T8602] RIP: 0033:0x7f820c75ed8e [ 250.078508][ T8602] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 250.078528][ T8602] RSP: 002b:00007f820d5b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 250.078553][ T8602] RAX: ffffffffffffffda RBX: 00007f820d5b76c0 RCX: 00007f820c75ed8e [ 250.078570][ T8602] RDX: 000000000000000f RSI: 00007f820d5b70a0 RDI: 0000000000000004 [ 250.078585][ T8602] RBP: 00007f820d5b7090 R08: 0000000000000000 R09: 0000000000000000 [ 250.078599][ T8602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.078613][ T8602] R13: 00007f820ca26038 R14: 00007f820ca25fa0 R15: 00007fffce8c7588 [ 250.078651][ T8602] [ 250.295873][ T5824] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 250.369743][ T5716] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 250.471773][ T5824] usb 8-1: not running at top speed; connect to a high speed hub [ 250.471813][ T5824] usb 8-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=1.00 [ 250.473191][ T5824] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 250.473217][ T5824] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.473240][ T5824] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 250.473293][ T5824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.507273][ T8608] netlink: 132 bytes leftover after parsing attributes in process `syz.1.602'. [ 250.521845][ T5716] usb 6-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=0.00 [ 250.527998][ T5716] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.528025][ T5716] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 250.548547][ T5716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.548697][ T5716] usb 6-1: Product: syz [ 250.548809][ T5716] usb 6-1: Manufacturer: syz [ 250.554239][ T5716] usb 6-1: SerialNumber: syz [ 250.598806][ T5824] gspca_main: spca501-2.14.0 probing 0000:0000 [ 250.607076][ T8608] syz_tun: entered allmulticast mode [ 250.632485][ T8607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.651564][ T5342] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 250.701417][ T5824] gspca_spca501: reg write: error -71 [ 250.701437][ T5824] spca501 8-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 250.701522][ T5824] spca501 8-1:1.0: probe with driver spca501 failed with error -22 [ 250.704208][ T5824] uvcvideo 8-1:1.0: Found multiple Units with ID 1 [ 250.704270][ T5824] uvcvideo 8-1:1.0: Found UVC 71.01 device (0000:0000) [ 250.704334][ T5824] uvcvideo 8-1:1.0: No streaming interface found for terminal 32770. [ 250.756649][ T5824] usb 8-1: USB disconnect, device number 10 [ 250.810678][ T5342] usb 7-1: device descriptor read/64, error -71 [ 251.027707][ T5716] usb 6-1: USB disconnect, device number 22 [ 251.028150][ T5612] Bluetooth: hci1: CSR: Local version failed (-71) [ 251.051360][ T5342] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 251.180438][ T5342] usb 7-1: device descriptor read/64, error -71 [ 251.289963][ T5342] usb usb7-port1: attempt power cycle [ 251.291862][ T8615] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 251.294036][ T8615] FAULT_INJECTION: forcing a failure. [ 251.294036][ T8615] name failslab, interval 1, probability 0, space 0, times 0 [ 251.294065][ T8615] CPU: 1 UID: 0 PID: 8615 Comm: syz.7.604 Not tainted syzkaller #0 PREEMPT(full) [ 251.294090][ T8615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 251.294105][ T8615] Call Trace: [ 251.294115][ T8615] [ 251.294125][ T8615] dump_stack_lvl+0xe8/0x150 [ 251.294161][ T8615] should_fail_ex+0x3eb/0x540 [ 251.294199][ T8615] should_failslab+0xa8/0x100 [ 251.294224][ T8615] ? fcntl_setlk+0xa9/0x1060 [ 251.294269][ T8615] kmem_cache_alloc_noprof+0x9c/0x600 [ 251.294304][ T8615] ? fcntl_setlk+0xa9/0x1060 [ 251.294337][ T8615] fcntl_setlk+0xa9/0x1060 [ 251.294373][ T8615] ? lock_acquire+0x115/0x350 [ 251.294402][ T8615] ? __pfx_fcntl_setlk+0x10/0x10 [ 251.294436][ T8615] ? __might_fault+0xaf/0x130 [ 251.294471][ T8615] do_fcntl+0x988/0x1a80 [ 251.294498][ T8615] ? lock_acquire+0x115/0x350 [ 251.294522][ T8615] ? __pfx_do_fcntl+0x10/0x10 [ 251.294554][ T8615] ? __fget_files+0x2a/0x420 [ 251.294594][ T8615] ? __fget_files+0x2a/0x420 [ 251.294636][ T8615] ? bpf_lsm_file_fcntl+0x9/0x20 [ 251.294664][ T8615] __se_sys_fcntl+0xc8/0x150 [ 251.294691][ T8615] do_syscall_64+0x166/0x520 [ 251.294724][ T8615] ? trace_irq_disable+0x3b/0x140 [ 251.294751][ T8615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.294776][ T8615] ? clear_bhb_loop+0x70/0xc0 [ 251.294806][ T8615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.294841][ T8615] RIP: 0033:0x7ff9c0d9e559 [ 251.294863][ T8615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.294884][ T8615] RSP: 002b:00007ff9c1d4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 251.294911][ T8615] RAX: ffffffffffffffda RBX: 00007ff9c1025fa0 RCX: 00007ff9c0d9e559 [ 251.294928][ T8615] RDX: 0000200000000140 RSI: 0000000000000006 RDI: 0000000000000004 [ 251.294945][ T8615] RBP: 00007ff9c0e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 251.294960][ T8615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.294975][ T8615] R13: 00007ff9c1026038 R14: 00007ff9c1025fa0 R15: 00007fff521d9ac8 [ 251.295012][ T8615] [ 251.679592][ T5342] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 251.700711][ T5342] usb 7-1: device descriptor read/8, error -71 [ 251.789641][ T5716] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 251.830718][ T5824] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 251.939921][ T5342] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 251.953302][ T5716] usb 2-1: Using ep0 maxpacket: 8 [ 251.958955][ T5716] usb 2-1: unable to get BOS descriptor or descriptor too short [ 251.959003][ T5716] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=33.40 [ 251.964160][ T5716] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.964186][ T5716] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 251.964232][ T5716] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.972856][ T5716] usb 2-1: New USB device strings: Mfr=235, Product=123, SerialNumber=127 [ 251.972931][ T5716] usb 2-1: Product: syz [ 251.972975][ T5716] usb 2-1: Manufacturer: syz [ 251.973016][ T5716] usb 2-1: SerialNumber: syz [ 251.992449][ T5342] usb 7-1: device descriptor read/8, error -71 [ 252.002021][ T5824] usb 8-1: New USB device found: idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 252.044205][ T5824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.069399][ T5824] usb 8-1: config 0 descriptor?? [ 252.086974][ T5824] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 252.099953][ T5342] usb usb7-port1: unable to enumerate USB device [ 252.229703][ T8617] rxe_eth0 speed is unknown, defaulting to 1000 [ 252.284306][ T5824] gp8psk: usb in 128 operation failed. [ 252.399961][ T5342] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 252.485876][ T5824] gp8psk: usb in 146 operation failed. [ 252.485898][ T5824] gp8psk: failed to get FW version [ 252.487789][ T5824] gp8psk: FPGA Version = 0 [ 252.549621][ T5342] usb 6-1: Using ep0 maxpacket: 8 [ 252.553445][ T5342] usb 6-1: unable to get BOS descriptor or descriptor too short [ 252.553494][ T5342] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=33.40 [ 252.554783][ T5342] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.554810][ T5342] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 252.554896][ T5342] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.558044][ T5342] usb 6-1: New USB device strings: Mfr=235, Product=123, SerialNumber=127 [ 252.558108][ T5342] usb 6-1: Product: syz [ 252.558125][ T5342] usb 6-1: Manufacturer: syz [ 252.558142][ T5342] usb 6-1: SerialNumber: syz [ 252.668960][ T5716] cdc_ncm 2-1:1.0: skipping garbage [ 252.668984][ T5716] cdc_ncm 2-1:1.0: skipping garbage [ 252.669005][ T5716] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 252.669048][ T5716] cdc_ncm 2-1:1.0: bind() failure [ 252.695764][ T5824] gp8psk: usb in 138 operation failed. [ 252.695793][ T5824] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 252.695840][ T5824] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 252.739399][ T5716] usb 2-1: USB disconnect, device number 40 [ 252.747138][ T5824] usb 8-1: USB disconnect, device number 11 [ 252.851638][ T8630] FAULT_INJECTION: forcing a failure. [ 252.851638][ T8630] name failslab, interval 1, probability 0, space 0, times 0 [ 252.851664][ T8630] CPU: 1 UID: 0 PID: 8630 Comm: syz.5.610 Not tainted syzkaller #0 PREEMPT(full) [ 252.851698][ T8630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 252.851712][ T8630] Call Trace: [ 252.851722][ T8630] [ 252.851733][ T8630] dump_stack_lvl+0xe8/0x150 [ 252.851767][ T8630] should_fail_ex+0x3eb/0x540 [ 252.851805][ T8630] should_failslab+0xa8/0x100 [ 252.851825][ T8630] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 252.851864][ T8630] ? __d_alloc+0x37/0x820 [ 252.851898][ T8630] ? __d_alloc+0x37/0x820 [ 252.851937][ T8630] __d_alloc+0x37/0x820 [ 252.851976][ T8630] d_alloc+0x4b/0x190 [ 252.851999][ T8630] ? lookup_one_qstr_excl+0xc4/0x360 [ 252.852049][ T8630] lookup_one_qstr_excl+0xd8/0x360 [ 252.852084][ T8630] ? lookup_noperm_common+0x245/0x430 [ 252.852122][ T8630] start_dirop+0x5c/0x90 [ 252.852146][ T8630] simple_start_creating+0xcc/0x110 [ 252.852162][ T8630] ? __pfx_simple_start_creating+0x10/0x10 [ 252.852220][ T8630] ? do_raw_spin_unlock+0xf5/0x200 [ 252.852249][ T8630] ? mntput+0x65/0xc0 [ 252.852283][ T8630] debugfs_start_creating+0xca/0x1b0 [ 252.852302][ T8630] __debugfs_create_file+0x6f/0x400 [ 252.852323][ T8630] debugfs_create_file_full+0x3f/0x60 [ 252.852366][ T8630] ref_tracker_dir_debugfs+0x197/0x360 [ 252.852400][ T8630] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 252.852459][ T8630] ? __kasan_kmalloc+0x93/0xb0 [ 252.852478][ T8630] ? __raw_spin_lock_init+0x45/0x100 [ 252.852524][ T8630] preinit_net+0x1ca/0x760 [ 252.852554][ T8630] copy_net_ns+0x2c3/0x770 [ 252.852590][ T8630] create_new_namespaces+0x3f0/0x6b0 [ 252.852613][ T8630] ? security_capable+0x7e/0x2c0 [ 252.852656][ T8630] unshare_nsproxy_namespaces+0x144/0x190 [ 252.852690][ T8630] ksys_unshare+0x532/0x890 [ 252.852720][ T8630] ? __pfx_ksys_unshare+0x10/0x10 [ 252.852750][ T8630] ? ksys_write+0x242/0x270 [ 252.852777][ T8630] ? __pfx_ksys_write+0x10/0x10 [ 252.852830][ T8630] __x64_sys_unshare+0x38/0x50 [ 252.852859][ T8630] do_syscall_64+0x166/0x520 [ 252.852886][ T8630] ? trace_irq_disable+0x3b/0x140 [ 252.852912][ T8630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.852928][ T8630] ? clear_bhb_loop+0x70/0xc0 [ 252.852949][ T8630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.852984][ T8630] RIP: 0033:0x7f497ed9e559 [ 252.853005][ T8630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.853024][ T8630] RSP: 002b:00007f497fbc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 252.853047][ T8630] RAX: ffffffffffffffda RBX: 00007f497f025fa0 RCX: 00007f497ed9e559 [ 252.853068][ T8630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 252.853079][ T8630] RBP: 00007f497fbc8090 R08: 0000000000000000 R09: 0000000000000000 [ 252.853089][ T8630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.853099][ T8630] R13: 00007f497f026038 R14: 00007f497f025fa0 R15: 00007ffc76971228 [ 252.853145][ T8630] [ 252.977536][ T8630] rxe_eth0 speed is unknown, defaulting to 1000 [ 253.617954][ T8644] FAULT_INJECTION: forcing a failure. [ 253.617954][ T8644] name failslab, interval 1, probability 0, space 0, times 0 [ 253.617990][ T8644] CPU: 1 UID: 0 PID: 8644 Comm: syz.6.614 Not tainted syzkaller #0 PREEMPT(full) [ 253.618015][ T8644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 253.618030][ T8644] Call Trace: [ 253.618040][ T8644] [ 253.618050][ T8644] dump_stack_lvl+0xe8/0x150 [ 253.618087][ T8644] should_fail_ex+0x3eb/0x540 [ 253.618125][ T8644] should_failslab+0xa8/0x100 [ 253.618149][ T8644] ? do_getname+0x2e/0x250 [ 253.618176][ T8644] kmem_cache_alloc_noprof+0x9c/0x600 [ 253.618211][ T8644] ? do_getname+0x2e/0x250 [ 253.618246][ T8644] do_getname+0x2e/0x250 [ 253.618272][ T8644] ? getname_flags+0x11/0x20 [ 253.618304][ T8644] do_sys_openat2+0xce/0x200 [ 253.618336][ T8644] ? __pfx_do_sys_openat2+0x10/0x10 [ 253.618367][ T8644] ? ksys_write+0x242/0x270 [ 253.618403][ T8644] ? __pfx_ksys_write+0x10/0x10 [ 253.618442][ T8644] __x64_sys_openat+0x138/0x170 [ 253.618478][ T8644] do_syscall_64+0x166/0x520 [ 253.618512][ T8644] ? trace_irq_disable+0x3b/0x140 [ 253.618537][ T8644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.618561][ T8644] ? clear_bhb_loop+0x70/0xc0 [ 253.618589][ T8644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.618622][ T8644] RIP: 0033:0x7f820c79e559 [ 253.618644][ T8644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.618664][ T8644] RSP: 002b:00007f820d5b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 253.618688][ T8644] RAX: ffffffffffffffda RBX: 00007f820ca25fa0 RCX: 00007f820c79e559 [ 253.618706][ T8644] RDX: 0000000000000000 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 253.618721][ T8644] RBP: 00007f820d5b7090 R08: 0000000000000000 R09: 0000000000000000 [ 253.618735][ T8644] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 253.618749][ T8644] R13: 00007f820ca26038 R14: 00007f820ca25fa0 R15: 00007fffce8c7588 [ 253.618786][ T8644] [ 254.022332][ T5342] cdc_ncm 6-1:1.0: skipping garbage [ 254.022357][ T5342] cdc_ncm 6-1:1.0: skipping garbage [ 254.022372][ T5342] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 254.022415][ T5342] cdc_ncm 6-1:1.0: bind() failure [ 254.075944][ T5342] usb 6-1: USB disconnect, device number 23 [ 254.139608][ T1223] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 254.189983][ T5716] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 254.290956][ T1223] usb 7-1: device descriptor read/64, error -71 [ 254.349882][ T5716] usb 2-1: Using ep0 maxpacket: 32 [ 254.350630][ T5716] usb 2-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 254.352201][ T5716] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 254.352228][ T5716] usb 2-1: config 0 has no interface number 0 [ 254.352273][ T5716] usb 2-1: config 0 interface 184 has no altsetting 0 [ 254.355058][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.355086][ T5716] usb 2-1: Product: syz [ 254.355102][ T5716] usb 2-1: Manufacturer: syz [ 254.355119][ T5716] usb 2-1: SerialNumber: syz [ 254.358254][ T5716] usb 2-1: config 0 descriptor?? [ 254.559733][ T1223] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 254.700888][ T1223] usb 7-1: device descriptor read/64, error -71 [ 254.723870][ T32] audit: type=1800 audit(1792316684.145:6): pid=8656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.619" name="bus" dev="overlay" ino=588 res=0 errno=-22 [ 254.771518][ T8653] FAULT_INJECTION: forcing a failure. [ 254.771518][ T8653] name failslab, interval 1, probability 0, space 0, times 0 [ 254.771564][ T8653] CPU: 1 UID: 0 PID: 8653 Comm: syz.7.618 Not tainted syzkaller #0 PREEMPT(full) [ 254.771595][ T8653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 254.771611][ T8653] Call Trace: [ 254.771621][ T8653] [ 254.771632][ T8653] dump_stack_lvl+0xe8/0x150 [ 254.771672][ T8653] should_fail_ex+0x3eb/0x540 [ 254.771713][ T8653] should_failslab+0xa8/0x100 [ 254.771741][ T8653] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 254.771774][ T8653] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 254.771804][ T8653] ? xas_split_alloc+0x19c/0x4c0 [ 254.771836][ T8653] ? xas_split_alloc+0x19c/0x4c0 [ 254.771876][ T8653] xas_split_alloc+0x19c/0x4c0 [ 254.771925][ T8653] __folio_split+0xc2e/0x2250 [ 254.771976][ T8653] ? __pfx___folio_split+0x10/0x10 [ 254.772010][ T8653] ? __up_read+0x29c/0x930 [ 254.772044][ T8653] ? folio_alloc_swap+0x2cc/0x12e0 [ 254.772080][ T8653] shmem_writeout+0x571/0x17a0 [ 254.772122][ T8653] ? lock_acquire+0x115/0x350 [ 254.772146][ T8653] ? __pfx_shmem_writeout+0x10/0x10 [ 254.772180][ T8653] ? folio_mapping+0x16f/0x1f0 [ 254.772215][ T8653] ? folio_clear_dirty_for_io+0x162/0x820 [ 254.772246][ T8653] ? try_to_unmap_flush_dirty+0x96/0x100 [ 254.772274][ T8653] shrink_folio_list+0x2f65/0x4d90 [ 254.772325][ T8653] ? __pfx_shrink_folio_list+0x10/0x10 [ 254.772354][ T8653] ? finish_task_switch+0x40e/0xc60 [ 254.772377][ T8653] ? lockdep_hardirqs_on+0x7b/0x110 [ 254.772407][ T8653] ? __lock_acquire+0x747/0x2de0 [ 254.772449][ T8653] ? __bfs+0x153/0x290 [ 254.772466][ T8653] ? __pfx_hlock_conflict+0x10/0x10 [ 254.772495][ T8653] ? check_noncircular+0xdb/0x150 [ 254.772522][ T8653] ? __pfx___css_rstat_updated+0x10/0x10 [ 254.772562][ T8653] reclaim_folio_list+0x100/0x430 [ 254.772602][ T8653] ? __pfx_reclaim_folio_list+0x10/0x10 [ 254.772643][ T8653] reclaim_pages+0x452/0x530 [ 254.772674][ T8653] ? __pfx_reclaim_pages+0x10/0x10 [ 254.772701][ T8653] ? do_raw_spin_unlock+0xf5/0x200 [ 254.772732][ T8653] madvise_cold_or_pageout_pte_range+0x18e5/0x2390 [ 254.772771][ T8653] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 254.772794][ T8653] ? lru_gen_update_size+0x719/0xd00 [ 254.772833][ T8653] walk_pgd_range+0x102d/0x1dc0 [ 254.772890][ T8653] ? __pfx_walk_pgd_range+0x10/0x10 [ 254.772911][ T8653] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 254.772938][ T8653] __walk_page_range+0x16d/0x720 [ 254.772979][ T8653] walk_page_range_vma_unsafe+0x309/0x410 [ 254.773007][ T8653] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 254.773036][ T8653] ? mlock_drain_local+0x79/0x490 [ 254.773074][ T8653] ? walk_page_range_vma+0x6b/0x90 [ 254.773098][ T8653] madvise_vma_behavior+0x2ba2/0x4a00 [ 254.773129][ T8653] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 254.773159][ T8653] ? do_raw_spin_lock+0x12b/0x2f0 [ 254.773198][ T8653] ? rcu_is_watching+0x16/0xb0 [ 254.773225][ T8653] ? trace_hrtimer_start+0x82/0x200 [ 254.773266][ T8653] ? hrtimer_start_range_ns_common+0x7cd/0xb60 [ 254.773315][ T8653] ? finish_task_switch+0x40e/0xc60 [ 254.773343][ T8653] ? lockdep_hardirqs_on+0x7b/0x110 [ 254.773378][ T8653] ? rcu_is_watching+0x16/0xb0 [ 254.773405][ T8653] ? trace_sched_exit_tp+0x3a/0x130 [ 254.773435][ T8653] ? __lock_acquire+0x747/0x2de0 [ 254.773475][ T8653] ? mas_prev_slot+0xb76/0xbf0 [ 254.773526][ T8653] ? find_vma_prev+0x123/0x1b0 [ 254.773567][ T8653] ? __pfx_find_vma_prev+0x10/0x10 [ 254.773592][ T8653] ? futex_unqueue+0x22/0x240 [ 254.773627][ T8653] ? __futex_wait+0x3c7/0x470 [ 254.773673][ T8653] madvise_walk_vmas+0x57d/0xb70 [ 254.773711][ T8653] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 254.773740][ T8653] ? blk_start_plug+0x6e/0x1b0 [ 254.773778][ T8653] madvise_do_behavior+0x385/0x540 [ 254.773823][ T8653] ? __pfx_madvise_do_behavior+0x10/0x10 [ 254.773868][ T8653] ? down_read+0x2b9/0x320 [ 254.773913][ T8653] do_madvise+0x327/0x3a0 [ 254.773950][ T8653] ? __pfx_do_madvise+0x10/0x10 [ 254.773998][ T8653] ? __se_sys_futex+0x3a8/0x450 [ 254.774037][ T8653] ? rcu_is_watching+0x16/0xb0 [ 254.774071][ T8653] __x64_sys_madvise+0xa6/0xc0 [ 254.774107][ T8653] do_syscall_64+0x166/0x520 [ 254.774137][ T8653] ? trace_irq_disable+0x3b/0x140 [ 254.774163][ T8653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.774189][ T8653] ? clear_bhb_loop+0x70/0xc0 [ 254.774220][ T8653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.774244][ T8653] RIP: 0033:0x7ff9c0d9e559 [ 254.774268][ T8653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.774289][ T8653] RSP: 002b:00007ff9c1d4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 254.774315][ T8653] RAX: ffffffffffffffda RBX: 00007ff9c1025fa0 RCX: 00007ff9c0d9e559 [ 254.774332][ T8653] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000 [ 254.774348][ T8653] RBP: 00007ff9c0e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 254.774363][ T8653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.774377][ T8653] R13: 00007ff9c1026038 R14: 00007ff9c1025fa0 R15: 00007fff521d9ac8 [ 254.774411][ T8653] [ 254.812557][ T1223] usb usb7-port1: attempt power cycle [ 255.094597][ T5716] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 255.094629][ T5716] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 255.206992][ T1223] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 255.282743][ T1223] usb 7-1: device descriptor read/8, error -71 [ 255.520826][ T1223] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 255.541327][ T1223] usb 7-1: device descriptor read/8, error -71 [ 255.650159][ T1223] usb usb7-port1: unable to enumerate USB device [ 255.820186][ T5824] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 255.852401][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.852470][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.853055][ T1315] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 255.934623][ T5716] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 255.934655][ T5716] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 255.934691][ T5716] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 255.934945][ T5716] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 255.980186][ T5716] usb 2-1: USB disconnect, device number 41 [ 255.992546][ T5824] usb 6-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 256.007851][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.007958][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.008069][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.045381][ T5824] usb 6-1: config 0 descriptor?? [ 256.280458][ T5824] usbhid 6-1:0.0: can't add hid device: -71 [ 256.280575][ T5824] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 256.290637][ T5824] usb 6-1: USB disconnect, device number 24 [ 256.624616][ T8687] FAULT_INJECTION: forcing a failure. [ 256.624616][ T8687] name failslab, interval 1, probability 0, space 0, times 0 [ 256.624652][ T8687] CPU: 1 UID: 0 PID: 8687 Comm: syz.1.622 Not tainted syzkaller #0 PREEMPT(full) [ 256.624677][ T8687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 256.624692][ T8687] Call Trace: [ 256.624702][ T8687] [ 256.624712][ T8687] dump_stack_lvl+0xe8/0x150 [ 256.624748][ T8687] should_fail_ex+0x3eb/0x540 [ 256.624783][ T8687] ? __alloc_skb+0x1db/0x7a0 [ 256.624810][ T8687] should_failslab+0xa8/0x100 [ 256.624836][ T8687] ? __alloc_skb+0x1db/0x7a0 [ 256.624862][ T8687] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 256.624902][ T8687] ? __alloc_skb+0x18d/0x7a0 [ 256.624931][ T8687] ? __alloc_skb+0x1db/0x7a0 [ 256.624971][ T8687] __alloc_skb+0x1db/0x7a0 [ 256.625006][ T8687] netlink_sendmsg+0x5cd/0xb20 [ 256.625039][ T8687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.625069][ T8687] ? aa_sock_msg_perm+0x144/0x210 [ 256.625109][ T8687] ? apparmor_socket_sendmsg+0x98/0x360 [ 256.625140][ T8687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.625166][ T8687] sock_sendmsg_nosec+0x14e/0x190 [ 256.625193][ T8687] ____sys_sendmsg+0x54e/0x850 [ 256.625234][ T8687] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.625276][ T8687] ? import_iovec+0x73/0xa0 [ 256.625312][ T8687] ___sys_sendmsg+0x2a5/0x360 [ 256.625342][ T8687] ? __lock_acquire+0x747/0x2de0 [ 256.625370][ T8687] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.625442][ T8687] ? __fget_files+0x3a2/0x420 [ 256.625474][ T8687] ? __fget_files+0x2a/0x420 [ 256.625517][ T8687] __x64_sys_sendmsg+0x1b1/0x290 [ 256.625552][ T8687] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 256.625607][ T8687] do_syscall_64+0x166/0x520 [ 256.625638][ T8687] ? trace_irq_disable+0x3b/0x140 [ 256.625662][ T8687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.625687][ T8687] ? clear_bhb_loop+0x70/0xc0 [ 256.625715][ T8687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.625738][ T8687] RIP: 0033:0x7f15a079e559 [ 256.625759][ T8687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.625779][ T8687] RSP: 002b:00007f15a15b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.625804][ T8687] RAX: ffffffffffffffda RBX: 00007f15a0a25fa0 RCX: 00007f15a079e559 [ 256.625821][ T8687] RDX: 0000000000000090 RSI: 0000200000000140 RDI: 0000000000000003 [ 256.625835][ T8687] RBP: 00007f15a15b0090 R08: 0000000000000000 R09: 0000000000000000 [ 256.625849][ T8687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.625861][ T8687] R13: 00007f15a0a26038 R14: 00007f15a0a25fa0 R15: 00007ffdc925f188 [ 256.625904][ T8687] [ 256.799989][ T5824] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 256.954364][ T5824] usb 6-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 256.960515][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.960601][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.960729][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.003389][ T5824] usb 6-1: config 0 descriptor?? [ 257.435921][ T5824] hid_parser_main: 5 callbacks suppressed [ 257.435948][ T5824] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 257.436001][ T5824] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 257.436036][ T5824] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 257.436069][ T5824] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 257.436096][ T5824] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 257.436129][ T5824] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 257.436167][ T5824] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 257.505067][ T5824] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 257.626497][ T5824] cp2112 0003:10C4:EA90.000B: Part Number: 0x00 Device Version: 0x00 [ 258.195797][ T8733] FAULT_INJECTION: forcing a failure. [ 258.195797][ T8733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.195834][ T8733] CPU: 1 UID: 0 PID: 8733 Comm: syz.7.630 Not tainted syzkaller #0 PREEMPT(full) [ 258.195859][ T8733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 258.195873][ T8733] Call Trace: [ 258.195883][ T8733] [ 258.195893][ T8733] dump_stack_lvl+0xe8/0x150 [ 258.195930][ T8733] should_fail_ex+0x3eb/0x540 [ 258.195971][ T8733] _copy_from_user+0x2d/0xb0 [ 258.196004][ T8733] copy_from_sockptr+0x5e/0x90 [ 258.196043][ T8733] packet_setsockopt+0x83e/0x1510 [ 258.196080][ T8733] ? __pfx_packet_setsockopt+0x10/0x10 [ 258.196125][ T8733] ? aa_sk_perm+0x6ff/0x8f0 [ 258.196164][ T8733] ? __pfx_aa_sk_perm+0x10/0x10 [ 258.196200][ T8733] ? aa_sock_opt_perm+0x142/0x1e0 [ 258.196237][ T8733] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 258.196270][ T8733] ? __pfx_packet_setsockopt+0x10/0x10 [ 258.196313][ T8733] do_sock_setsockopt+0x17c/0x1b0 [ 258.196350][ T8733] __x64_sys_setsockopt+0x13d/0x1b0 [ 258.196388][ T8733] do_syscall_64+0x166/0x520 [ 258.196418][ T8733] ? trace_irq_disable+0x3b/0x140 [ 258.196443][ T8733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.196467][ T8733] ? clear_bhb_loop+0x70/0xc0 [ 258.196497][ T8733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.196520][ T8733] RIP: 0033:0x7ff9c0d9e559 [ 258.196541][ T8733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.196560][ T8733] RSP: 002b:00007ff9c1d2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 258.196585][ T8733] RAX: ffffffffffffffda RBX: 00007ff9c1026090 RCX: 00007ff9c0d9e559 [ 258.196603][ T8733] RDX: 000000000000000a RSI: 0000000000000107 RDI: 0000000000000007 [ 258.196617][ T8733] RBP: 00007ff9c0e35ab8 R08: 0000000000000004 R09: 0000000000000000 [ 258.196632][ T8733] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 258.196647][ T8733] R13: 00007ff9c1026128 R14: 00007ff9c1026090 R15: 00007fff521d9ac8 [ 258.196684][ T8733] [ 258.234970][ T8738] FAULT_INJECTION: forcing a failure. [ 258.234970][ T8738] name failslab, interval 1, probability 0, space 0, times 0 [ 258.235066][ T8738] CPU: 0 UID: 0 PID: 8738 Comm: syz.1.631 Not tainted syzkaller #0 PREEMPT(full) [ 258.235132][ T8738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 258.235173][ T8738] Call Trace: [ 258.235196][ T8738] [ 258.235227][ T8738] dump_stack_lvl+0xe8/0x150 [ 258.235309][ T8738] should_fail_ex+0x3eb/0x540 [ 258.235406][ T8738] should_failslab+0xa8/0x100 [ 258.235481][ T8738] __kmalloc_noprof+0xf9/0x710 [ 258.235569][ T8738] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 258.235656][ T8738] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 258.235765][ T8738] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 258.235871][ T8738] genl_family_rcv_msg_doit+0xda/0x340 [ 258.235982][ T8738] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 258.236085][ T8738] ? apparmor_capable+0x126/0x170 [ 258.236161][ T8738] ? bpf_lsm_capable+0x9/0x20 [ 258.236226][ T8738] ? security_capable+0x7e/0x2c0 [ 258.236288][ T8738] genl_rcv_msg+0x614/0x7a0 [ 258.236326][ T8738] ? __pfx_genl_rcv_msg+0x10/0x10 [ 258.236357][ T8738] ? __pfx_mptcp_pm_nl_set_flags_doit+0x10/0x10 [ 258.236388][ T8738] ? __asan_memcpy+0x40/0x70 [ 258.236427][ T8738] netlink_rcv_skb+0x226/0x4a0 [ 258.236453][ T8738] ? __pfx_genl_rcv_msg+0x10/0x10 [ 258.236485][ T8738] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 258.236524][ T8738] ? down_read+0x2b9/0x320 [ 258.236562][ T8738] genl_rcv+0x28/0x40 [ 258.236590][ T8738] netlink_unicast+0x8ef/0xa80 [ 258.236647][ T8738] netlink_sendmsg+0x7f0/0xb20 [ 258.236682][ T8738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.236712][ T8738] ? aa_sock_msg_perm+0x144/0x210 [ 258.236751][ T8738] ? apparmor_socket_sendmsg+0x18b/0x360 [ 258.236793][ T8738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.236819][ T8738] sock_sendmsg_nosec+0x14e/0x190 [ 258.236848][ T8738] ____sys_sendmsg+0x54e/0x850 [ 258.236887][ T8738] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.236931][ T8738] ? import_iovec+0x73/0xa0 [ 258.236968][ T8738] ___sys_sendmsg+0x2a5/0x360 [ 258.236998][ T8738] ? __lock_acquire+0x747/0x2de0 [ 258.237027][ T8738] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.237102][ T8738] ? __fget_files+0x3a2/0x420 [ 258.237134][ T8738] ? __fget_files+0x2a/0x420 [ 258.237220][ T8738] __x64_sys_sendmsg+0x1b1/0x290 [ 258.237310][ T8738] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 258.237470][ T8738] do_syscall_64+0x166/0x520 [ 258.237547][ T8738] ? trace_irq_disable+0x3b/0x140 [ 258.237610][ T8738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.237676][ T8738] ? clear_bhb_loop+0x70/0xc0 [ 258.237757][ T8738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.237822][ T8738] RIP: 0033:0x7f15a079e559 [ 258.237876][ T8738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.237936][ T8738] RSP: 002b:00007f15a158f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.238001][ T8738] RAX: ffffffffffffffda RBX: 00007f15a0a26090 RCX: 00007f15a079e559 [ 258.238045][ T8738] RDX: 0000000020008080 RSI: 00002000000009c0 RDI: 0000000000000006 [ 258.238086][ T8738] RBP: 00007f15a158f090 R08: 0000000000000000 R09: 0000000000000000 [ 258.238127][ T8738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.238160][ T8738] R13: 00007f15a0a26128 R14: 00007f15a0a26090 R15: 00007ffdc925f188 [ 258.238258][ T8738] [ 258.700524][ T8662] trusted_key: encrypted_key: insufficient parameters specified [ 259.116009][ T8755] smbdirect: ib_dev[rxe0] renamed to [syz1] [ 259.600510][ T5729] usb 6-1: USB disconnect, device number 25 [ 260.062316][ T8790] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 260.095269][ T8792] FAULT_INJECTION: forcing a failure. [ 260.095269][ T8792] name failslab, interval 1, probability 0, space 0, times 0 [ 260.095305][ T8792] CPU: 0 UID: 0 PID: 8792 Comm: syz.7.646 Not tainted syzkaller #0 PREEMPT(full) [ 260.095335][ T8792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 260.095351][ T8792] Call Trace: [ 260.095362][ T8792] [ 260.095373][ T8792] dump_stack_lvl+0xe8/0x150 [ 260.095413][ T8792] should_fail_ex+0x3eb/0x540 [ 260.095456][ T8792] should_failslab+0xa8/0x100 [ 260.095485][ T8792] __kmalloc_cache_noprof+0x9e/0x600 [ 260.095536][ T8792] ? netlbl_cipsov4_add+0x4d5/0x22b0 [ 260.095575][ T8792] ? netlbl_cipsov4_add+0x4d5/0x22b0 [ 260.095623][ T8792] netlbl_cipsov4_add+0x4d5/0x22b0 [ 260.095668][ T8792] ? __kmalloc_noprof+0x387/0x710 [ 260.095708][ T8792] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 260.095752][ T8792] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 260.095790][ T8792] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 260.095838][ T8792] genl_family_rcv_msg_doit+0x233/0x340 [ 260.095884][ T8792] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 260.095938][ T8792] ? bpf_lsm_capable+0x9/0x20 [ 260.095965][ T8792] ? security_capable+0x7e/0x2c0 [ 260.096011][ T8792] genl_rcv_msg+0x614/0x7a0 [ 260.096055][ T8792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.096090][ T8792] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 260.096150][ T8792] netlink_rcv_skb+0x226/0x4a0 [ 260.096180][ T8792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.096218][ T8792] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 260.096266][ T8792] ? down_read+0x2b9/0x320 [ 260.096310][ T8792] genl_rcv+0x28/0x40 [ 260.096343][ T8792] netlink_unicast+0x8ef/0xa80 [ 260.096407][ T8792] netlink_sendmsg+0x7f0/0xb20 [ 260.096444][ T8792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.096479][ T8792] ? aa_sock_msg_perm+0x144/0x210 [ 260.096531][ T8792] ? apparmor_socket_sendmsg+0x98/0x360 [ 260.096566][ T8792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.096593][ T8792] sock_sendmsg_nosec+0x14e/0x190 [ 260.096625][ T8792] ____sys_sendmsg+0x54e/0x850 [ 260.096669][ T8792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.096717][ T8792] ? import_iovec+0x73/0xa0 [ 260.096751][ T8792] ___sys_sendmsg+0x2a5/0x360 [ 260.096779][ T8792] ? __lock_acquire+0x747/0x2de0 [ 260.096807][ T8792] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.096878][ T8792] ? __fget_files+0x3a2/0x420 [ 260.096911][ T8792] ? __fget_files+0x2a/0x420 [ 260.096957][ T8792] __x64_sys_sendmsg+0x1b1/0x290 [ 260.096996][ T8792] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.097050][ T8792] do_syscall_64+0x166/0x520 [ 260.097078][ T8792] ? trace_irq_disable+0x3b/0x140 [ 260.097102][ T8792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.097124][ T8792] ? clear_bhb_loop+0x70/0xc0 [ 260.097152][ T8792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.097175][ T8792] RIP: 0033:0x7ff9c0d9e559 [ 260.097197][ T8792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.097216][ T8792] RSP: 002b:00007ff9c1d4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.097240][ T8792] RAX: ffffffffffffffda RBX: 00007ff9c1025fa0 RCX: 00007ff9c0d9e559 [ 260.097258][ T8792] RDX: 0000000004000004 RSI: 0000200000000380 RDI: 0000000000000004 [ 260.097274][ T8792] RBP: 00007ff9c1d4c090 R08: 0000000000000000 R09: 0000000000000000 [ 260.097289][ T8792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.097303][ T8792] R13: 00007ff9c1026038 R14: 00007ff9c1025fa0 R15: 00007fff521d9ac8 [ 260.097340][ T8792] [ 260.310027][ T5729] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 260.461148][ T5729] usb 7-1: Using ep0 maxpacket: 16 [ 260.475057][ T5729] usb 7-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 260.477846][ T5729] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.477886][ T5729] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.477914][ T5729] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 260.477972][ T5729] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.506622][ T5729] usb 7-1: config 0 descriptor?? [ 260.562567][ T8798] ioremap: invalid physical address 8000000000000000 [ 260.562685][ T8798] ------------[ cut here ]------------ [ 260.562698][ T8798] 1 [ 260.562713][ T8798] WARNING: arch/x86/mm/ioremap.c:206 at __ioremap_caller+0x51e/0x620, CPU#1: syz.7.648/8798 [ 260.588311][ T8798] Modules linked in: [ 260.592344][ T8798] CPU: 1 UID: 0 PID: 8798 Comm: syz.7.648 Not tainted syzkaller #0 PREEMPT(full) [ 260.601661][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 260.611857][ T8798] RIP: 0010:__ioremap_caller+0x51e/0x620 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 260.617597][ T8798] Code: 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0a 54 92 0a cc e8 c4 22 4f 00 48 8b 74 24 60 48 c7 c7 a0 0c 2a 8c e8 a3 d9 ad ff 90 <0f> 0b 90 e9 49 fd ff ff 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 [ 260.637336][ T8798] RSP: 0018:ffffc90005cc7880 EFLAGS: 00010246 [ 260.644765][ T8798] RAX: 0000000000000032 RBX: 1ffff92000b98f00 RCX: e4d61d560c7e1d00 [ 260.652910][ T8798] RDX: ffffc90011ad7000 RSI: 0000000000000270 RDI: 0000000000000271 [ 260.661072][ T8798] RBP: ffffc90005cc7990 R08: ffffc90005cc7607 R09: 1ffff92000b98ec0 [ 260.669110][ T8798] R10: dffffc0000000000 R11: fffff52000b98ec1 R12: 0000000000020000 [ 260.677311][ T8798] R13: 000000000000002e R14: 8000000000000fff R15: dffffc0000000000 [ 260.685377][ T8798] FS: 00007ff9c1d4c6c0(0000) GS:ffff8881234f7000(0000) knlGS:0000000000000000 [ 260.694502][ T8798] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.701190][ T8798] CR2: 000000110c3989b7 CR3: 000000005a470000 CR4: 00000000003526f0 [ 260.709218][ T8798] Call Trace: [ 260.712583][ T8798] [ 260.715566][ T8798] ? register_device+0x12c/0x570 [ 260.720668][ T8798] ? __pfx___ioremap_caller+0x10/0x10 [ 260.726111][ T8798] ? __kasan_kmalloc+0x93/0xb0 [ 260.730993][ T8798] ? __kmalloc_cache_noprof+0x31c/0x600 [ 260.736612][ T8798] ? __kmalloc_cache_noprof+0x148/0x600 [ 260.742285][ T8798] ? register_device+0xc6/0x570 [ 260.747205][ T8798] ? register_device+0xc6/0x570 [ 260.752288][ T8798] register_device+0x12c/0x570 [ 260.757139][ T8798] phram_setup+0x412/0x620 [ 260.761703][ T8798] ? __pfx_phram_setup+0x10/0x10 [ 260.766725][ T8798] ? __pfx___mutex_lock+0x10/0x10 [ 260.771871][ T8798] ? sysfs_file_kobj+0x1a/0x230 [ 260.776814][ T8798] param_attr_store+0x214/0x310 [ 260.781915][ T8798] ? __pfx_param_attr_store+0x10/0x10 [ 260.787361][ T8798] ? __pfx_sysfs_kf_write+0x10/0x10 [ 260.792725][ T8798] module_attr_store+0x65/0x90 [ 260.797562][ T8798] kernfs_fop_write_iter+0x3a4/0x540 [ 260.802986][ T8798] vfs_write+0x612/0xba0 [ 260.807344][ T8798] ? __pfx_vfs_write+0x10/0x10 [ 260.812379][ T8798] ? __fget_files+0x3a2/0x420 [ 260.817147][ T8798] ? __fget_files+0x2a/0x420 [ 260.821852][ T8798] ? fdget+0x1ac/0x250 [ 260.826038][ T8798] ksys_write+0x150/0x270 [ 260.830516][ T8798] ? __pfx_ksys_write+0x10/0x10 [ 260.835460][ T8798] do_syscall_64+0x166/0x520 [ 260.840213][ T8798] ? trace_irq_disable+0x3b/0x140 [ 260.845301][ T8798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.851499][ T8798] ? clear_bhb_loop+0x70/0xc0 [ 260.856245][ T8798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.862257][ T8798] RIP: 0033:0x7ff9c0d9e559 [ 260.866728][ T8798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.886656][ T8798] RSP: 002b:00007ff9c1d4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 260.895228][ T8798] RAX: ffffffffffffffda RBX: 00007ff9c1025fa0 RCX: 00007ff9c0d9e559 [ 260.903289][ T8798] RDX: 000000000000001e RSI: 0000200000000b00 RDI: 0000000000000003 [ 260.911393][ T8798] RBP: 00007ff9c0e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 260.919421][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.927496][ T8798] R13: 00007ff9c1026038 R14: 00007ff9c1025fa0 R15: 00007fff521d9ac8 [ 260.935604][ T8798] [ 260.938670][ T8798] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 260.945982][ T8798] CPU: 1 UID: 0 PID: 8798 Comm: syz.7.648 Not tainted syzkaller #0 PREEMPT(full) [ 260.955212][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 260.965303][ T8798] Call Trace: [ 260.968625][ T8798] [ 260.971593][ T8798] vpanic+0x26f/0x710 [ 260.975626][ T8798] panic+0xc5/0xd0 [ 260.979405][ T8798] ? __pfx_panic+0x10/0x10 [ 260.983890][ T8798] __warn+0x315/0x4c0 [ 260.987930][ T8798] ? __ioremap_caller+0x51e/0x620 [ 260.993042][ T8798] ? __ioremap_caller+0x51e/0x620 [ 260.998110][ T8798] __report_bug+0x276/0x570 [ 261.002663][ T8798] ? __ioremap_caller+0x51e/0x620 [ 261.007740][ T8798] ? __pfx___report_bug+0x10/0x10 [ 261.012821][ T8798] ? irq_work_queue+0xbf/0x150 [ 261.017632][ T8798] ? vprintk_emit+0x55c/0x5f0 [ 261.022354][ T8798] ? __kmalloc_cache_noprof+0x31c/0x600 [ 261.027952][ T8798] ? register_device+0xc6/0x570 [ 261.032856][ T8798] ? __pfx_vprintk_emit+0x10/0x10 [ 261.037921][ T8798] ? ksys_write+0x150/0x270 [ 261.042482][ T8798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.048686][ T8798] ? __ioremap_caller+0x51e/0x620 [ 261.053764][ T8798] report_bug+0x16b/0x220 [ 261.058166][ T8798] ? __ioremap_caller+0x51e/0x620 [ 261.063280][ T8798] ? __ioremap_caller+0x520/0x620 [ 261.068435][ T8798] handle_bug+0x9c/0x200 [ 261.072752][ T8798] exc_invalid_op+0x1a/0x50 [ 261.077329][ T8798] asm_exc_invalid_op+0x1a/0x20 [ 261.082235][ T8798] RIP: 0010:__ioremap_caller+0x51e/0x620 [ 261.087917][ T8798] Code: 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0a 54 92 0a cc e8 c4 22 4f 00 48 8b 74 24 60 48 c7 c7 a0 0c 2a 8c e8 a3 d9 ad ff 90 <0f> 0b 90 e9 49 fd ff ff 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 [ 261.107573][ T8798] RSP: 0018:ffffc90005cc7880 EFLAGS: 00010246 [ 261.113693][ T8798] RAX: 0000000000000032 RBX: 1ffff92000b98f00 RCX: e4d61d560c7e1d00 [ 261.121713][ T8798] RDX: ffffc90011ad7000 RSI: 0000000000000270 RDI: 0000000000000271 [ 261.129728][ T8798] RBP: ffffc90005cc7990 R08: ffffc90005cc7607 R09: 1ffff92000b98ec0 [ 261.137750][ T8798] R10: dffffc0000000000 R11: fffff52000b98ec1 R12: 0000000000020000 [ 261.145765][ T8798] R13: 000000000000002e R14: 8000000000000fff R15: dffffc0000000000 [ 261.153813][ T8798] ? register_device+0x12c/0x570 [ 261.158805][ T8798] ? __pfx___ioremap_caller+0x10/0x10 [ 261.164226][ T8798] ? __kasan_kmalloc+0x93/0xb0 [ 261.169043][ T8798] ? __kmalloc_cache_noprof+0x31c/0x600 [ 261.174635][ T8798] ? __kmalloc_cache_noprof+0x148/0x600 [ 261.180245][ T8798] ? register_device+0xc6/0x570 [ 261.185158][ T8798] ? register_device+0xc6/0x570 [ 261.190066][ T8798] register_device+0x12c/0x570 [ 261.194894][ T8798] phram_setup+0x412/0x620 [ 261.199413][ T8798] ? __pfx_phram_setup+0x10/0x10 [ 261.204438][ T8798] ? __pfx___mutex_lock+0x10/0x10 [ 261.209529][ T8798] ? sysfs_file_kobj+0x1a/0x230 [ 261.214463][ T8798] param_attr_store+0x214/0x310 [ 261.219376][ T8798] ? __pfx_param_attr_store+0x10/0x10 [ 261.224801][ T8798] ? __pfx_sysfs_kf_write+0x10/0x10 [ 261.230057][ T8798] module_attr_store+0x65/0x90 [ 261.234873][ T8798] kernfs_fop_write_iter+0x3a4/0x540 [ 261.240226][ T8798] vfs_write+0x612/0xba0 [ 261.244541][ T8798] ? __pfx_vfs_write+0x10/0x10 [ 261.249363][ T8798] ? __fget_files+0x3a2/0x420 [ 261.254090][ T8798] ? __fget_files+0x2a/0x420 [ 261.258743][ T8798] ? fdget+0x1ac/0x250 [ 261.262873][ T8798] ksys_write+0x150/0x270 [ 261.267279][ T8798] ? __pfx_ksys_write+0x10/0x10 [ 261.272198][ T8798] do_syscall_64+0x166/0x520 [ 261.276834][ T8798] ? trace_irq_disable+0x3b/0x140 [ 261.281926][ T8798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.288058][ T8798] ? clear_bhb_loop+0x70/0xc0 [ 261.292830][ T8798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.298768][ T8798] RIP: 0033:0x7ff9c0d9e559 [ 261.303224][ T8798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.322882][ T8798] RSP: 002b:00007ff9c1d4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 261.331349][ T8798] RAX: ffffffffffffffda RBX: 00007ff9c1025fa0 RCX: 00007ff9c0d9e559 [ 261.339372][ T8798] RDX: 000000000000001e RSI: 0000200000000b00 RDI: 0000000000000003 [ 261.347396][ T8798] RBP: 00007ff9c0e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 261.355416][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.363433][ T8798] R13: 00007ff9c1026038 R14: 00007ff9c1025fa0 R15: 00007fff521d9ac8 [ 261.371472][ T8798] [ 261.375146][ T8798] Kernel Offset: disabled [ 261.379507][ T8798] Rebooting in 86400 seconds..