last executing test programs: 6m8.692100326s ago: executing program 3 (id=60): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xe02c0, 0x124) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000005e00cf5767c3fffffffffff807000000000000000000008eb8fc0942637d8856", 0x24) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001000010700000000ffffffff0a000000060001001400000008000a00", @ANYRES32=r0, @ANYBLOB="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"], 0x24}}, 0x20008080) 6m7.597790982s ago: executing program 3 (id=66): socket$can_j1939(0x1d, 0x2, 0x7) socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) socket$inet6_sctp(0xa, 0x1, 0x84) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4126}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6m7.14491676s ago: executing program 3 (id=68): socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 6m6.989159406s ago: executing program 3 (id=69): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x136) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x44, 0x18, 0x8, 0x0, 0x0, 0x40, 0x1}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f0000ffd000/0x3000)=nil) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) 6m6.757599679s ago: executing program 3 (id=70): syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14ffff0037000900ff060000fedbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000200)={0x5, @meta={0x53314b52, 0x5cd9edd2, 0x10dd, 0x2c34, 0x128e7f1c}}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000001000)=0x200, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x0, r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f00000000c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000480)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r5, &(0x7f0000000500)="04dfaf05", 0x4, 0x6}]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000080)=0xfffffffc, 0x4) r7 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r7, 0x80106f53, &(0x7f0000000380)={0x9, &(0x7f0000000100)=[{0x3f, '\x00', @data=0x4, 0x2}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000004c0)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0xfffff, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x2000004, 0x1000a, 0x5, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x1, 0xaa, 0x4, 0x45, 0x180000, 0x4007, 0x400, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x80000000, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x5, 0x8, 0x752, 0xc303, 0x1008, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0x6cf, 0x42a2, 0x1, 0x2, 0x2, 0x5, 0x8, 0xfffffffe, 0x4, 0x5, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x9, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r9, 0xc4c03d09, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r8, &(0x7f0000000380)=[{0x84, 0x77, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7, 0x9}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x4, 0x0, 0x5, 0x83, @tick, {0xfd}, {0x23}, @ext={0x0, 0x0}}, {0x6, 0x3, 0x9, 0x3, @time={0x2, 0x8}, {0x9, 0x5}, {0xce, 0x2}, @connect={{0x10, 0x3}, {0x6, 0xb}}}], 0x54) ioctl$PTP_PIN_GETFUNC(r9, 0xc0603d06, &(0x7f0000000140)={'\x00', 0x2, 0x0, 0x7}) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) 6m4.477922099s ago: executing program 3 (id=73): r0 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xe, 0x10, 0xa1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x4, 0x2, {0x7, 0x25, 0x1, 0xc, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xe, 0x5, {0x7, 0x25, 0x1, 0x8, 0xeb, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x4, [{0xe, &(0x7f00000001c0)=@string={0xe, 0x3, "e5c5d1a12236fb18e9d6ae11"}}, {0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="660395598066dce02c3d410833aaf8d279dbbc06e3d61da8d899179f4dcb8cd259529d7f46415da54d9ae2b1f197d992c99e2e23fb914326aa0b448166d60532f63e1f29454547be83b769f847557a0f0d43f7965d129bd4e4a046f2aaa072928ae16019461e"]}, {0x0, 0x0}, {0x0, 0x0}]}) 6m4.237077546s ago: executing program 32 (id=73): r0 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xe, 0x10, 0xa1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x4, 0x2, {0x7, 0x25, 0x1, 0xc, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xe, 0x5, {0x7, 0x25, 0x1, 0x8, 0xeb, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x4, [{0xe, &(0x7f00000001c0)=@string={0xe, 0x3, "e5c5d1a12236fb18e9d6ae11"}}, {0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="660395598066dce02c3d410833aaf8d279dbbc06e3d61da8d899179f4dcb8cd259529d7f46415da54d9ae2b1f197d992c99e2e23fb914326aa0b448166d60532f63e1f29454547be83b769f847557a0f0d43f7965d129bd4e4a046f2aaa072928ae16019461e"]}, {0x0, 0x0}, {0x0, 0x0}]}) 5m50.208223495s ago: executing program 2 (id=115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m50.022223615s ago: executing program 2 (id=116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) (fail_nth: 4) 5m49.971036839s ago: executing program 2 (id=117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8910, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 5m48.84239646s ago: executing program 1 (id=118): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c2688110000000000000000000025", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000bc0)=""/181, 0xb5}, {&(0x7f00000001c0)=""/243, 0xf3}, {&(0x7f00000038c0)=""/4022, 0xfb6}, {&(0x7f00000048c0)=""/4100, 0x1004}, {&(0x7f00000002c0)=""/127, 0x7f}], 0x5}, 0x10000) 5m48.538312315s ago: executing program 2 (id=119): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x136) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x44, 0x18, 0x8, 0x0, 0x0, 0x40, 0x1}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f0000ffd000/0x3000)=nil) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 5m48.239102859s ago: executing program 2 (id=120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000100000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c0002"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 5m47.890526576s ago: executing program 1 (id=121): r0 = socket(0x2, 0x80805, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000380)="d9", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000280)={r2, 0x1367, 0xd0, "7816e7962e4d854ab94eaf7eea307c42eedef1172eebe82831e9d5e9cb02326236d5cd3b36f1c41ec924e95544690cddfe84e01c15869168598cc3dcf92f1bd10f2ee800b7f7bacaaa6808c0dc484d65f60f20736b02274f5d264c4075c6c44018436498c3e7a2120ef80b8de0050982d44a5a673ee4b0d95e05b24cb56a9af01cc0b864c58ba7ecd6476850b4a8621c0b3ef8cdac83a37ab9a68dc679a22ce7797d5abf801e49b0c209b01847f50fb5e61f9e1aecba6d67abc2ef07236cc6599107f7d246f2c7e5d0c29dc66c6e5bd5"}, 0xd8) connect$rds(r0, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000080)=""/31) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000002680)={r2, 0x2}, 0x8) syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 5m47.045750438s ago: executing program 2 (id=122): sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000000001032000000000000000010000080900ba0773797a30000000000800054000000001"], 0x28}, 0x1, 0x0, 0x0, 0x20044004}, 0x44050) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0004f1cfa8a30964e7b0c0e5b0b29253688227bd7000ffdb5f255a000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008814}, 0x40040) 5m46.786023665s ago: executing program 33 (id=122): sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000000001032000000000000000010000080900ba0773797a30000000000800054000000001"], 0x28}, 0x1, 0x0, 0x0, 0x20044004}, 0x44050) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0004f1cfa8a30964e7b0c0e5b0b29253688227bd7000ffdb5f255a000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008814}, 0x40040) 5m46.32142799s ago: executing program 1 (id=124): r0 = openat$comedi(0xffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x2c83, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000200000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000084000000160a0101000b000000000000010000000900020073797a31000000000900010073797a30000000005800038054000380140001007663616e3000000000000000000000001400010076657468315f746f5f626f6e64"], 0x124}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = userfaultfd(0x80001) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000140)={&(0x7f00003ef000/0x2000)=nil, &(0x7f00009a8000/0x1000)=nil, 0x2000, 0x1}) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x10c}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000002400010026bd7000fedbdf256926ffff060004000000000006000400008afd"], 0x54}, 0x1, 0x0, 0x0, 0x24008800}, 0x80) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x100000002) setsockopt$sock_int(r2, 0x1, 0x2b, 0x0, 0x0) poll(&(0x7f0000000040)=[{r0, 0x31}], 0x1, 0x8) 5m44.395725196s ago: executing program 1 (id=125): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x136) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x44, 0x18, 0x8, 0x0, 0x0, 0x40, 0x1}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f0000ffd000/0x3000)=nil) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) 5m44.258671044s ago: executing program 1 (id=126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x2}, 0x10) (async) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x20000010) (async) socket(0x1e, 0x4, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x6, 0x5, 0x448, '\x00', 0x8}, 0x1, [0x0, 0xd5, 0x2, 0xfff, 0x6, 0x6, 0x2, 0x4, 0x2, 0xbd, 0x80000000, 0x102d, 0x8001, 0x1, 0x3, 0x1, 0x1, 0x7, 0x6, 0x200, 0x80, 0x7, 0x7, 0x7, 0x8, 0x1, 0x2, 0x7, 0xffffffffffffffff, 0x3, 0x100000001, 0x403, 0x1, 0x4, 0x101, 0x3, 0x3, 0x1, 0x0, 0x9, 0x9, 0x4, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0x5, 0x88b, 0x6, 0x6, 0xffffffffffffffff, 0x400, 0x3, 0x2, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x0, 0x5, 0x4, 0x4, 0x4, 0x9, 0x6, 0x0, 0x9, 0xfffffffffffffffa, 0x3ff, 0x6, 0x2, 0x2f, 0x1, 0x7, 0x40, 0x2, 0x42843379, 0x1, 0x7, 0x200, 0x77d, 0xb3, 0x5, 0x539, 0x623a, 0x6, 0x0, 0x7, 0x4, 0x200, 0x5, 0x8, 0x0, 0x5, 0x93, 0x8, 0x80, 0x2, 0x2775e12f, 0x680000000000, 0x8, 0x8, 0xe88, 0x80000004, 0x0, 0xfffffffffffffffa, 0x10001, 0x8, 0x8, 0x1000, 0x0, 0x5, 0x79, 0xfffffffffffff000, 0x10000, 0x7fff, 0xfffffffffffffff7, 0x6, 0x46b, 0x8, 0x5, 0x2000000000006, 0x4, 0x7ffe, 0x7f, 0xd1]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)=ANY=[@ANYBLOB="640000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440040000000900010073797a30000000000800034000000004140000001100010000000000000000000010000a"], 0x64}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 5m43.341595541s ago: executing program 1 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) clock_adjtime(0x17, &(0x7f0000000000)={0x80ea33, 0x5, 0x379ee6, 0x10000, 0x9, 0x9, 0x2, 0x3, 0x8, 0x4, 0xc, 0x8, 0xb, 0x80000000000002, 0xfff, 0x3, 0x80, 0x2, 0x9, 0x5, 0x200, 0x3, 0x11cb, 0x101, 0x40}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m43.131485017s ago: executing program 34 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) clock_adjtime(0x17, &(0x7f0000000000)={0x80ea33, 0x5, 0x379ee6, 0x10000, 0x9, 0x9, 0x2, 0x3, 0x8, 0x4, 0xc, 0x8, 0xb, 0x80000000000002, 0xfff, 0x3, 0x80, 0x2, 0x9, 0x5, 0x200, 0x3, 0x11cb, 0x101, 0x40}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m33.952857874s ago: executing program 0 (id=129): r0 = socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x3, 0x2}) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f00000002c0)={0x3, 0x8005, 0xa, 0x8, 0x1, 0x81}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x1, 0x3}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) 5m33.84154501s ago: executing program 0 (id=130): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000000)={'vlan0\x00', @local}) 5m33.750612154s ago: executing program 0 (id=131): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='highspeed', 0x9) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x40000}, 0x700) 5m33.653637119s ago: executing program 0 (id=132): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x136) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x44, 0x18, 0x8, 0x0, 0x0, 0x40, 0x1}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f0000ffd000/0x3000)=nil) unshare(0x6020400) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) 5m33.406768698s ago: executing program 0 (id=133): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40186f40, &(0x7f0000000700)={0x1f, 0x0, 0xb, 0x1, 'syz1\x00', 0x1}) 5m31.559968966s ago: executing program 0 (id=134): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x136) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x44, 0x18, 0x8, 0x0, 0x0, 0x40, 0x1}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f0000ffd000/0x3000)=nil) 5m31.291804183s ago: executing program 35 (id=134): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x136) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x44, 0x18, 0x8, 0x0, 0x0, 0x40, 0x1}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f0000ffd000/0x3000)=nil) 5m28.620590791s ago: executing program 4 (id=74): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) (async) r3 = fanotify_init(0x10, 0x80000) write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="000000003100007f"], 0x20) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0x0, 0xffffffff}, 0x4, 0x3ff, &(0x7f0000000040)={{0x7, 0x0, 0x2}}, 0x0, 0x0}}) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000010000000000fcdbdf25ac1414bb000000000000080000000000ff020000000000000000000000000001000400004e200082000000a021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES16=r1, @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x4044}, 0x2040) (async) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2, 0x4}, 0x1c) (async) sendmmsg$inet6(r5, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)="d6cf681cb2", 0x5}], 0x1}}], 0x2, 0x400c404) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000000040)={0x1, 'nr0\x00'}) 5m28.410394775s ago: executing program 4 (id=136): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc0585668, &(0x7f0000000440)=@userptr={0x0, 0x2, 0x4, 0x408, 0x3, {}, {0x0, 0x1, 0x0, 0x0, 0xff, 0x14, "c4363c16"}, 0x1, 0x2, {0x0}, 0x2}) 5m28.066145525s ago: executing program 4 (id=137): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40186f40, &(0x7f0000000700)={0x1f, 0x0, 0xf3d, 0x1, '\x00', 0x10000}) 5m27.261925489s ago: executing program 4 (id=138): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x136) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x44, 0x18, 0x8, 0x0, 0x0, 0x40, 0x1}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x6020400) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) 5m27.093349467s ago: executing program 4 (id=139): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500211dff000401a8001600a400014020", 0x39}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='wlan0\x00'}) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000540), 0x4) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500211dff000401a8001600a400014020", 0x39}], 0x1}, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) (async) socket$inet6(0xa, 0x2, 0x0) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='wlan0\x00'}) (async) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000540), 0x4) (async) 5m26.161857529s ago: executing program 4 (id=140): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="97a000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x0, 0x6, 0xe3, {0xe3, 0x0, "b72ea01eabb2a85e9b019bbca805ba3659c82c11b1c138a32a417f549972017ee3f34071c84fad95e44cf27e1542e73405addfd68c02f7a345a65776f7432f775747cc7df02f944cb06ed49ea26d835ac6e1fb1196c639b59e8781a631ce69c9c5db31b890227936d701e1af73de75a2cbc2b772590f24c926c8e6672cc3392cd26fbc7bf308f357c8f3332c8726c8d220f8b352cb8cdd594385ffbfacffb1f70b6d6f57075508836eb203894153c184804a9fabe5320d0b5f6acd65cadcf9029f560bda06aa03508879193c24b6d3b5813dd514a88e7b0a59d25fbaa03211a51d"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x457}}}, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x20, 0xb}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000002c0)={0x20, 0x0, 0xe6, {0xe4, "74da7ca28e45cfe7814f50fffed1ddf892e68df540dc1db20e6550c10cc7902b86e4805b884ddaf61abb09ff24455c564ec7b2d27b3c8b4bcdd8735e931a843257137533f7a1ef30b5ca3001e9bb7b8a2b2e64f34711432317ee357aa265ad3710008e2610443af38f9b5460c463d5820bf060354dde43646f20764f6978126ca893e67bc8bead97430efc7d061f8292da97c44427ab449293b76939d8640b64fc1b84fe22da7d286e22bde4e5ef11e6aa4f150af7bbb9f6362d23720439ff74b80948642ca825e3eaeda7af200acf2438d5b391167b59c0167e2ceca7780edaafec7b3f"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0xa2}}) 5m26.032020055s ago: executing program 36 (id=140): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="97a000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x0, 0x6, 0xe3, {0xe3, 0x0, "b72ea01eabb2a85e9b019bbca805ba3659c82c11b1c138a32a417f549972017ee3f34071c84fad95e44cf27e1542e73405addfd68c02f7a345a65776f7432f775747cc7df02f944cb06ed49ea26d835ac6e1fb1196c639b59e8781a631ce69c9c5db31b890227936d701e1af73de75a2cbc2b772590f24c926c8e6672cc3392cd26fbc7bf308f357c8f3332c8726c8d220f8b352cb8cdd594385ffbfacffb1f70b6d6f57075508836eb203894153c184804a9fabe5320d0b5f6acd65cadcf9029f560bda06aa03508879193c24b6d3b5813dd514a88e7b0a59d25fbaa03211a51d"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x457}}}, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x20, 0xb}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000002c0)={0x20, 0x0, 0xe6, {0xe4, "74da7ca28e45cfe7814f50fffed1ddf892e68df540dc1db20e6550c10cc7902b86e4805b884ddaf61abb09ff24455c564ec7b2d27b3c8b4bcdd8735e931a843257137533f7a1ef30b5ca3001e9bb7b8a2b2e64f34711432317ee357aa265ad3710008e2610443af38f9b5460c463d5820bf060354dde43646f20764f6978126ca893e67bc8bead97430efc7d061f8292da97c44427ab449293b76939d8640b64fc1b84fe22da7d286e22bde4e5ef11e6aa4f150af7bbb9f6362d23720439ff74b80948642ca825e3eaeda7af200acf2438d5b391167b59c0167e2ceca7780edaafec7b3f"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0xa2}}) 5.972684095s ago: executing program 7 (id=2361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0x20}) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000003c0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000480)=0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000540)={0x280000, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x36}, &(0x7f0000000200)=""/123, 0x7b, &(0x7f0000000280)=""/212, &(0x7f00000004c0)=[r1, r2, r3, r4, 0xffffffffffffffff], 0x5, {r5}}, 0x58) r7 = syz_io_uring_setup(0x4e6f, &(0x7f00000005c0)={0x0, 0x3e50, 0x10000, 0x1, 0x36}, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) poll(&(0x7f0000000800)=[{r0, 0x1310}, {r6, 0x100}, {0xffffffffffffffff, 0x34}, {r5, 0x2000}, {r7, 0xc020}, {0xffffffffffffffff, 0x80}, {r6, 0xf40e}, {r7, 0x4402}], 0x8, 0x9) 5.722105568s ago: executing program 7 (id=2365): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) ioctl$RNDADDTOENTCNT(r0, 0x5207, 0x0) 5.705456339s ago: executing program 7 (id=2367): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4b20710200e0101"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002feb080027bd700000000000040000000c0016000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) 4.304939609s ago: executing program 5 (id=2385): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r0, 0x0, 0x0) (fail_nth: 5) 4.165795068s ago: executing program 5 (id=2386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)={0xac, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac=@broadcast}, 0x3, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_IE_PROBE_RESP={0x3f, 0x7f, [@supported_rates={0x1, 0x4, [{0x9, 0x1}, {0x60}, {0x2, 0x1}, {0x16, 0x1}]}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x0, 0x0, {0x5, 0x2, 0x0, 0xd, 0x0, 0x1, 0x1}, 0x1, 0x4a10, 0x10}}, @channel_switch={0x25, 0x3, {0x0, 0x40}}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 4.053002345s ago: executing program 5 (id=2387): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000380), 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}, 0x1, 0x0, 0x0, 0x24048801}, 0x0) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x5, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xfffd}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x4004) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan1\x00'}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/74, 0x4a}], 0x2}, 0x0) 3.973528417s ago: executing program 5 (id=2389): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a8001600200003401c000200035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="4274aa814c8f", 0x6}, {&(0x7f0000000600)="1a13a7837ea8ca56a91f616de628b8", 0xf}], 0x2}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x7, 0x8001, 0xb, 0x3}, 0x3a, [0x8, 0x40, 0xf, 0x101, 0x5, 0x457, 0xc951, 0x9, 0x7, 0x5, 0x2, 0xf, 0xd8b681d, 0x7, 0x8001, 0x401, 0xc9c3, 0x400, 0x431a5f4b, 0x8001, 0x1000, 0x1, 0xf, 0xb1, 0xe0c8, 0x10000709, 0x10001, 0x2, 0x9, 0x4, 0x2, 0x1000, 0x80000001, 0x55, 0x9, 0x7, 0x5, 0x1, 0x6, 0xffff, 0x7fff, 0xa8b, 0x257, 0x6, 0x1, 0x6, 0x1, 0x4, 0x5, 0x1, 0x80, 0x3, 0x9, 0xff, 0x25, 0x2, 0x80000000, 0x8, 0x7, 0xff, 0x8, 0x9, 0x7, 0x51c8], [0x7, 0x6, 0x7ff, 0x2, 0x1, 0xb4, 0x4, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8, 0xffff, 0x9, 0xfffffbb7, 0x5, 0x4, 0x9, 0xfffff27b, 0x7fff, 0x79, 0x6, 0x8, 0xf, 0x100, 0x4, 0x10, 0xfffffffd, 0xf9, 0xfb, 0x60000000, 0xfffffff6, 0x35e, 0x3, 0x10000, 0x9d2, 0x1, 0x7f, 0xa, 0xa7, 0xad1, 0x9, 0x4, 0x4, 0x5, 0x5, 0xfffffff8, 0x1, 0x9a31, 0x2, 0x4, 0x8, 0x0, 0x8, 0x8, 0x5ba, 0x7, 0x2, 0x5, 0x800, 0x1, 0xffff, 0x8], [0xcde, 0x75, 0x1, 0x7, 0x0, 0x2, 0x30, 0x2, 0x5, 0x200, 0xa9b, 0x40, 0x3, 0xc, 0x3, 0xce, 0x1, 0x4, 0x9, 0x7, 0x2, 0x0, 0x1, 0x2, 0xff, 0x8, 0x8, 0x6, 0xffff, 0x40, 0x9a05, 0x9, 0xd38, 0x8, 0x4040, 0x400, 0xe, 0x2600000, 0x0, 0x3, 0x80000001, 0x7fff, 0x1, 0x8b8b, 0x6, 0x200, 0x1, 0x40, 0x2, 0x1, 0x6, 0xe8d6, 0xe, 0x80, 0x0, 0x80, 0x800, 0x9, 0x3ff, 0x6, 0x0, 0x7fffffff, 0xfffffffe, 0x9], [0x6, 0x8, 0x9, 0x4, 0x1, 0x0, 0x4, 0x2, 0x5, 0x6, 0x2, 0x8, 0xffffff7f, 0xfffffffc, 0x6, 0x1, 0x6, 0xfff, 0x2, 0x58c, 0x7, 0x7, 0x400, 0x10001, 0x2, 0x5, 0x1, 0xb, 0x4, 0x5, 0x7, 0x8001, 0x1, 0x401, 0x2, 0x1, 0x2, 0x5, 0x2, 0x829, 0x7, 0x7, 0x61, 0x1, 0x3, 0x2, 0x5, 0x6, 0x5, 0x5, 0xff, 0xfffff36d, 0x9, 0x1ff, 0x0, 0x56, 0xe9, 0x5852, 0x8001, 0x1, 0x5, 0x1, 0x8000, 0x3ff]}, 0x45c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000023c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f00000000c0)={0x30, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040014}, 0x8) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r5, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4dd}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.603633776s ago: executing program 7 (id=2398): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r0, 0x1) connect$bt_rfcomm(r0, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x1, 0xffffffff82048008, 0x3, 0x40, 0x7fef, 0x2, 0x0, 0x0, 0x104, 0x8}}, 0x50) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) file_getattr(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x18, 0x1000) close_range(r1, 0xffffffffffffffff, 0x0) 3.49684877s ago: executing program 7 (id=2400): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0040402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x35}, 0x60044084) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89b1, &(0x7f0000000040)={'vlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'vlan1\x00'}}, 0xfffffd54) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x462002, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000180), 0x80) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'geneve0\x00'}}, 0x1e) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0x1c) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, 0x0) 3.370625647s ago: executing program 7 (id=2403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xe8302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0x0, 0x0, {[0x9, 0xc9, 0xf3, 0x100bd, 0x7, 0xab, 0x2, 0x2]}}) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') r5 = fanotify_init(0x2, 0x800) fanotify_mark(r5, 0x401, 0x1000, r4, 0x0) syz_clone3(&(0x7f0000001ac0)={0x200000, &(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x21}, &(0x7f0000000980)=""/4096, 0x1000, &(0x7f0000001980)=""/219, &(0x7f0000001a80)=[0xffffffffffffffff], 0x1, {r2}}, 0x58) syz_open_procfs(r6, &(0x7f0000001b40)='net/udp\x00') ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000100)={0x11, 0x4b, &(0x7f0000000000)="48afe6fa897bff3047060f9e4b9c70126c6034e20270a92f81e4f760083389903382415ad17835afaa0d6521e27a88bfee843342d6c703a48eb51397680963390534e2d1fe2f4dca953ba4"}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="00f61da2deaa3e050052"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000200)={0x0, 0x14, 0x4, "da9483aa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.259094632s ago: executing program 6 (id=2405): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a8001600200003401c000200035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="4274aa", 0x3}, {&(0x7f0000000600)="1a13a7837ea8ca56a91f616de628b8b1b2107d", 0x13}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x7, 0x8001, 0xb, 0x3}, 0x3a, [0x8, 0x40, 0xf, 0x101, 0x5, 0x457, 0xc951, 0x9, 0x7, 0x5, 0x2, 0xf, 0xd8b681d, 0x7, 0x8001, 0x401, 0xc9c3, 0x400, 0x431a5f4b, 0x8001, 0x1000, 0x1, 0xf, 0xb1, 0xe0c8, 0x10000709, 0x10001, 0x2, 0x9, 0x4, 0x2, 0x1000, 0x80000001, 0x55, 0x9, 0x7, 0x5, 0x1, 0x6, 0xffff, 0x7fff, 0xa8b, 0x257, 0x6, 0x1, 0x6, 0x1, 0x4, 0x5, 0x1, 0x80, 0x3, 0x9, 0xff, 0x25, 0x2, 0x80000000, 0x8, 0x7, 0xff, 0x8, 0x9, 0x7, 0x51c8], [0x7, 0x6, 0x7ff, 0x2, 0x1, 0xb4, 0x4, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8, 0xffff, 0x9, 0xfffffbb7, 0x5, 0x4, 0x9, 0xfffff27b, 0x7fff, 0x79, 0x6, 0x8, 0xf, 0x100, 0x4, 0x10, 0xfffffffd, 0xf9, 0xfb, 0x60000000, 0xfffffff6, 0x35e, 0x3, 0x10000, 0x9d2, 0x1, 0x7f, 0xa, 0xa7, 0xad1, 0x9, 0x4, 0x4, 0x5, 0x5, 0xfffffff8, 0x1, 0x9a31, 0x2, 0x4, 0x8, 0x0, 0x8, 0x8, 0x5ba, 0x7, 0x2, 0x5, 0x800, 0x1, 0xffff, 0x8], [0xcde, 0x75, 0x1, 0x7, 0x0, 0x2, 0x30, 0x2, 0x5, 0x200, 0xa9b, 0x40, 0x3, 0xc, 0x3, 0xce, 0x1, 0x4, 0x9, 0x7, 0x2, 0x0, 0x1, 0x2, 0xff, 0x8, 0x8, 0x6, 0xffff, 0x40, 0x9a05, 0x9, 0xd38, 0x8, 0x4040, 0x400, 0xe, 0x2600000, 0x0, 0x3, 0x80000001, 0x7fff, 0x1, 0x8b8b, 0x6, 0x200, 0x1, 0x40, 0x2, 0x1, 0x6, 0xe8d6, 0xe, 0x80, 0x0, 0x80, 0x800, 0x9, 0x3ff, 0x6, 0x0, 0x7fffffff, 0xfffffffe, 0x9], [0x6, 0x8, 0x9, 0x4, 0x1, 0x0, 0x4, 0x2, 0x5, 0x6, 0x2, 0x8, 0xffffff7f, 0xfffffffc, 0x6, 0x1, 0x6, 0xfff, 0x2, 0x58c, 0x7, 0x7, 0x400, 0x10001, 0x2, 0x5, 0x1, 0xb, 0x4, 0x5, 0x7, 0x8001, 0x1, 0x401, 0x2, 0x1, 0x2, 0x5, 0x2, 0x829, 0x7, 0x7, 0x61, 0x1, 0x3, 0x2, 0x5, 0x6, 0x5, 0x5, 0xff, 0xfffff36d, 0x9, 0x1ff, 0x0, 0x56, 0xe9, 0x5852, 0x8001, 0x1, 0x5, 0x1, 0x8000, 0x3ff]}, 0x45c) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x9000000) 2.667509727s ago: executing program 5 (id=2408): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_connect$uac3(0x2, 0xd5, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x3, 0x1, 0x29, 0xc8, 0x8, {0x8, 0xb, 0x0, 0x0, 0x1, 0x22, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x16, 0x81}, [@source_unit={0xc, 0x24, 0xb, 0x3, 0x1, 0x7, 0x6, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x3, 0x75, 0x1, "bc82", "66b6c7"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0xc, 0x10, {0xa, 0x25, 0x25, 0x57113b96, 0xfa, 0xd7c4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x5, 0x1, 0xd, 0x6, "9c23c3e94b5546"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x3, 0x7, 0x0, "559a"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x3, 0x4, 0xfd, 0x8}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x79, 0x1, 0x5}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x1}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xea, 0x7f, 0x2, "ef27b8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x100, 0x4, 0xc, 0x3, {0xa, 0x25, 0x25, 0x7ff, 0xa3, 0x4}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0xfa, 0x5, 0x6, 0x20, 0x40}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41a}}, {0x47, &(0x7f0000000300)=@string={0x47, 0x3, "05b178622382ab48576240113559658191ad394347206da2b3569acdd134d0935990bae6a6d6dc12d4224b668535a7fd3d282314b7b6bf8ec3d2a3a397a35d25733a01277f"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1000}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x100a}}, {0x32, &(0x7f0000000400)=ANY=[@ANYBLOB="32038c62ed90a54735e691782efd22302140e7bfaef6783705e0a5fa28aa74b3fce96400c2bbceb2a86f60c5cafd71a5e0db"]}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x429}}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2089c6"], 0x0, 0x0}) 2.138628128s ago: executing program 6 (id=2409): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r0, 0x1) connect$bt_rfcomm(r0, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x1, 0xffffffff82048008, 0x3, 0x40, 0x7fef, 0x2, 0x0, 0x0, 0x104, 0x8}}, 0x50) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) file_getattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1000) close_range(r1, 0xffffffffffffffff, 0x0) 1.839695747s ago: executing program 6 (id=2411): mkdir(&(0x7f0000000000)='./control\x00', 0x101) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = landlock_create_ruleset(&(0x7f0000000200)={0x40, 0x3, 0x2}, 0x7, 0x3) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0xa) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x1881, 0x3, 0x3}, 0xfffffffffffffcca, 0x1) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x228200, 0x20) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000140)={0x100, r4}, 0x0) landlock_restrict_self(r3, 0x4) r5 = landlock_create_ruleset(&(0x7f0000000240)={0x400}, 0x18, 0x2) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000180)=0x40, 0x4) landlock_restrict_self(r5, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) rmdir(&(0x7f0000000080)='./control\x00') 1.799175748s ago: executing program 8 (id=2412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0x20}) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000003c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000480)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) poll(&(0x7f0000000800)=[{r0, 0x1310}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x34}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0xc020}, {r1, 0x80}, {0xffffffffffffffff, 0xf40e}, {0xffffffffffffffff, 0x4402}], 0x8, 0x9) 1.646101044s ago: executing program 8 (id=2413): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0xd, 0x1, "1d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000440)={0x14, &(0x7f0000000100)={0x0, 0x23, 0x98, {0x98, 0x9, "15fa10f1c7e9b071bbf7ad98e27d2c1e6e58dd23f2b0d87692e15559821684c455c4ff102a7260349d999445ea96af36a946bae87ce2ce5774ae59860b59b3dbdf84ae519d0df8d1e6f1cadb9e370716fc628aa3672ed9335e00d2bf7333672b917d810ce0251a6d10dbe78c64346c30412cea85934d64077b989fcc2b9fa7e2484ba45f734d3907fc5ad9c824c669a823e453f4d371"}}, &(0x7f00000001c0)={0x0, 0x3, 0x8b, @string={0x8b, 0x3, "739cfb944249f6208932b9d378b3e2a88b5889cf9d3bcdc157aaec9112c257165e12e40c164d98ebc9c5d685ccd927c6a2ff80fe673ef2add9f2c9cdea1ec02bbeb6f02f7b6aa4db964d3222c3f839c0d9c5a351a207ee830f27adf807ee1b1664a343025e06323c4e266ee79719197dfa394003bfea8decd68a0133e4d11689a794da43cb04c282cb"}}}, &(0x7f0000000740)={0x44, &(0x7f0000000480)={0x40, 0x9, 0x83, "ab8c068289c27f41978682e32005f0bf80e1d1b40acd3918505850d887a92d922902228ea703834c5d0147f97a33c93886eaed4d802c845d7d1f43a44081dc9b9dca85fa702346ad10fd7b5ce4299029852ea3e0ff7e96525c52bbd583b34fe23e8b8599d9ef569a22805096809e469d870401da8682732b41d2651a4f3b8273723bf2"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000005c0)={0x20, 0x81, 0x3, "3106d1"}, &(0x7f0000000600)={0x20, 0x82, 0x2, '-\\'}, &(0x7f0000000640)={0x20, 0x83, 0x2, "0ffe"}, &(0x7f0000000680)={0x20, 0x84, 0x4, "6c63c757"}, &(0x7f00000006c0)={0x20, 0x85, 0x3, "fcbc1e"}}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000940)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.621061968s ago: executing program 8 (id=2414): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f00000000c0)={{[0xd1, 0x4, 0xda, 0x5]}, 0x0, 0x1, 0x1, 0x0, &(0x7f0000000040)=[{{@_ha_fsid={[0x3, 0x401]}, {0x2, 0x2, 0x0, 0x8000000000000000}}, 0x2c, 0x0, 'syz_tun\x00'}, {{@_ha_fsid={[0x7, 0x5]}, {0x1, 0x3, 0x7fffffff, 0x10001}}, 0xdd, 0x0, ',\xbf.\'\'(@,&)@\':p[\x00'}, {{@align=0x1, {0x2fba, 0xe524, 0x47a, 0x1}}, 0x3, 0x0, '(U&)*[(\x00'}]}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_stats}) 1.517141875s ago: executing program 8 (id=2415): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a8001600200003401c000200035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 5) 862.279947ms ago: executing program 6 (id=2416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 853.576696ms ago: executing program 6 (id=2417): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r2], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000340)={0x0, 0xdd, r1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) 736.862069ms ago: executing program 6 (id=2418): epoll_create(0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x454400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x40047451, &(0x7f0000000180)) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575960000dd6067", 0x14}, {&(0x7f0000000480)="b70e000400005abeef4ba0d598827f23e4d2a78c1ede7ea5f78ffa9e44d2b640bb56a171537cfbbe9b9b6be9ae07f53317ef9c28a09d58af80f5efefd4a3", 0xd}, {&(0x7f0000000200)="37a8a6c41ef711513a5555633f6e4259616da007f3c18c191f", 0xffffffcd}], 0x3) syz_usb_connect$midi(0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000015203512020040000102030109022f0001010e503f09040000f2ffffffff090503b7f47882520114250110620ce3530314a05964222e0000000000"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) epoll_create(0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x454400, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) close(r1) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r1, 0x40047451, &(0x7f0000000180)) (async) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575960000dd6067", 0x14}, {&(0x7f0000000480)="b70e000400005abeef4ba0d598827f23e4d2a78c1ede7ea5f78ffa9e44d2b640bb56a171537cfbbe9b9b6be9ae07f53317ef9c28a09d58af80f5efefd4a3", 0xd}, {&(0x7f0000000200)="37a8a6c41ef711513a5555633f6e4259616da007f3c18c191f", 0xffffffcd}], 0x3) (async) syz_usb_connect$midi(0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000015203512020040000102030109022f0001010e503f09040000f2ffffffff090503b7f47882520114250110620ce3530314a05964222e0000000000"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) (async) 346.80196ms ago: executing program 8 (id=2419): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r0, 0x1) connect$bt_rfcomm(r0, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x1, 0xffffffff82048008, 0x3, 0x40, 0x7fef, 0x2, 0x0, 0x0, 0x104, 0x8}}, 0x50) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) file_getattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1000) close_range(r1, 0xffffffffffffffff, 0x0) 346.312203ms ago: executing program 8 (id=2420): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a8001600200003401c000200035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006", 0xa2}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)}, {&(0x7f0000000600)="1a13a7837ea8ca56a91f616de628b8b1b2107d04", 0x14}], 0x2}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x7, 0x8001, 0xb, 0x3}, 0x3a, [0x8, 0x40, 0xf, 0x101, 0x5, 0x457, 0xc951, 0x9, 0x7, 0x5, 0x2, 0xf, 0xd8b681d, 0x7, 0x8001, 0x401, 0xc9c3, 0x400, 0x431a5f4b, 0x8001, 0x1000, 0x1, 0xf, 0xb1, 0xe0c8, 0x10000709, 0x10001, 0x2, 0x9, 0x4, 0x2, 0x1000, 0x80000001, 0x55, 0x9, 0x7, 0x5, 0x1, 0x6, 0xffff, 0x7fff, 0xa8b, 0x257, 0x6, 0x1, 0x6, 0x1, 0x4, 0x5, 0x1, 0x80, 0x3, 0x9, 0xff, 0x25, 0x2, 0x80000000, 0x8, 0x7, 0xff, 0x8, 0x9, 0x7, 0x51c8], [0x7, 0x6, 0x7ff, 0x2, 0x1, 0xb4, 0x4, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8, 0xffff, 0x9, 0xfffffbb7, 0x5, 0x4, 0x9, 0xfffff27b, 0x7fff, 0x79, 0x6, 0x8, 0xf, 0x100, 0x4, 0x10, 0xfffffffd, 0xf9, 0xfb, 0x60000000, 0xfffffff6, 0x35e, 0x3, 0x10000, 0x9d2, 0x1, 0x7f, 0xa, 0xa7, 0xad1, 0x9, 0x4, 0x4, 0x5, 0x5, 0xfffffff8, 0x1, 0x9a31, 0x2, 0x4, 0x8, 0x0, 0x8, 0x8, 0x5ba, 0x7, 0x2, 0x5, 0x800, 0x1, 0xffff, 0x8], [0xcde, 0x75, 0x1, 0x7, 0x0, 0x2, 0x30, 0x2, 0x5, 0x200, 0xa9b, 0x40, 0x3, 0xc, 0x3, 0xce, 0x1, 0x4, 0x9, 0x7, 0x2, 0x0, 0x1, 0x2, 0xff, 0x8, 0x8, 0x6, 0xffff, 0x40, 0x9a05, 0x9, 0xd38, 0x8, 0x4040, 0x400, 0xe, 0x2600000, 0x0, 0x3, 0x80000001, 0x7fff, 0x1, 0x8b8b, 0x6, 0x200, 0x1, 0x40, 0x2, 0x1, 0x6, 0xe8d6, 0xe, 0x80, 0x0, 0x80, 0x800, 0x9, 0x3ff, 0x6, 0x0, 0x7fffffff, 0xfffffffe, 0x9], [0x6, 0x8, 0x9, 0x4, 0x1, 0x0, 0x4, 0x2, 0x5, 0x6, 0x2, 0x8, 0xffffff7f, 0xfffffffc, 0x6, 0x1, 0x6, 0xfff, 0x2, 0x58c, 0x7, 0x7, 0x400, 0x10001, 0x2, 0x5, 0x1, 0xb, 0x4, 0x5, 0x7, 0x8001, 0x1, 0x401, 0x2, 0x1, 0x2, 0x5, 0x2, 0x829, 0x7, 0x7, 0x61, 0x1, 0x3, 0x2, 0x5, 0x6, 0x5, 0x5, 0xff, 0xfffff36d, 0x9, 0x1ff, 0x0, 0x56, 0xe9, 0x5852, 0x8001, 0x1, 0x5, 0x1, 0x8000, 0x3ff]}, 0x45c) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (fail_nth: 5) 0s ago: executing program 5 (id=2421): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a8001600200003401c000200035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x7, 0x8001, 0xb, 0x3}, 0x3a, [0x8, 0x40, 0xf, 0x101, 0x5, 0x457, 0xc951, 0x9, 0x7, 0x5, 0x2, 0xf, 0xd8b681d, 0x7, 0x8001, 0x401, 0xc9c3, 0x400, 0x431a5f4b, 0x8001, 0x1000, 0x1, 0xf, 0xb1, 0xe0c8, 0x10000709, 0x10001, 0x2, 0x9, 0x4, 0x2, 0x1000, 0x80000001, 0x55, 0x9, 0x7, 0x5, 0x1, 0x6, 0xffff, 0x7fff, 0xa8b, 0x257, 0x6, 0x1, 0x6, 0x1, 0x4, 0x5, 0x1, 0x80, 0x3, 0x9, 0xff, 0x25, 0x2, 0x80000000, 0x8, 0x7, 0xff, 0x8, 0x9, 0x7, 0x51c8], [0x7, 0x6, 0x7ff, 0x2, 0x1, 0xb4, 0x4, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8, 0xffff, 0x9, 0xfffffbb7, 0x5, 0x4, 0x9, 0xfffff27b, 0x7fff, 0x79, 0x6, 0x8, 0xf, 0x100, 0x4, 0x10, 0xfffffffd, 0xf9, 0xfb, 0x60000000, 0xfffffff6, 0x35e, 0x3, 0x10000, 0x9d2, 0x1, 0x7f, 0xa, 0xa7, 0xad1, 0x9, 0x4, 0x4, 0x5, 0x5, 0xfffffff8, 0x1, 0x9a31, 0x2, 0x4, 0x8, 0x0, 0x8, 0x8, 0x5ba, 0x7, 0x2, 0x5, 0x800, 0x1, 0xffff, 0x8], [0xcde, 0x75, 0x1, 0x7, 0x0, 0x2, 0x30, 0x2, 0x5, 0x200, 0xa9b, 0x40, 0x3, 0xc, 0x3, 0xce, 0x1, 0x4, 0x9, 0x7, 0x2, 0x0, 0x1, 0x2, 0xff, 0x8, 0x8, 0x6, 0xffff, 0x40, 0x9a05, 0x9, 0xd38, 0x8, 0x4040, 0x400, 0xe, 0x2600000, 0x0, 0x3, 0x80000001, 0x7fff, 0x1, 0x8b8b, 0x6, 0x200, 0x1, 0x40, 0x2, 0x1, 0x6, 0xe8d6, 0xe, 0x80, 0x0, 0x80, 0x800, 0x9, 0x3ff, 0x6, 0x0, 0x7fffffff, 0xfffffffe, 0x9], [0x6, 0x8, 0x9, 0x4, 0x1, 0x0, 0x4, 0x2, 0x5, 0x6, 0x2, 0x8, 0xffffff7f, 0xfffffffc, 0x6, 0x1, 0x6, 0xfff, 0x2, 0x58c, 0x7, 0x7, 0x400, 0x10001, 0x2, 0x5, 0x1, 0xb, 0x4, 0x5, 0x7, 0x8001, 0x1, 0x401, 0x2, 0x1, 0x2, 0x5, 0x2, 0x829, 0x7, 0x7, 0x61, 0x1, 0x3, 0x2, 0x5, 0x6, 0x5, 0x5, 0xff, 0xfffff36d, 0x9, 0x1ff, 0x0, 0x56, 0xe9, 0x5852, 0x8001, 0x1, 0x5, 0x1, 0x8000, 0x3ff]}, 0x45c) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (fail_nth: 5) kernel console output (not intermixed with test programs): 443.279985][T12573] CPU: 0 UID: 0 PID: 12573 Comm: syz.7.2124 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 443.280012][T12573] Tainted: [L]=SOFTLOCKUP [ 443.280019][T12573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 443.280030][T12573] Call Trace: [ 443.280037][T12573] [ 443.280045][T12573] dump_stack_lvl+0xe8/0x150 [ 443.280071][T12573] should_fail_ex+0x46b/0x600 [ 443.280103][T12573] should_failslab+0xa8/0x100 [ 443.280129][T12573] kmem_cache_alloc_noprof+0x87/0x680 [ 443.280151][T12573] ? skb_clone+0x212/0x3a0 [ 443.280172][T12573] skb_clone+0x212/0x3a0 [ 443.280194][T12573] __netlink_deliver_tap+0x424/0x8b0 [ 443.280233][T12573] ? netlink_deliver_tap+0x2e/0x1b0 [ 443.280261][T12573] netlink_deliver_tap+0x19c/0x1b0 [ 443.280290][T12573] netlink_unicast+0x754/0x920 [ 443.280331][T12573] netlink_sendmsg+0x813/0xb40 [ 443.280358][T12573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.280377][T12573] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 443.280405][T12573] ? aa_sock_msg_perm+0x122/0x200 [ 443.280426][T12573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.280442][T12573] sock_sendmsg_nosec+0x13a/0x180 [ 443.280467][T12573] ____sys_sendmsg+0x55c/0x870 [ 443.280500][T12573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.280535][T12573] ? import_iovec+0x73/0xa0 [ 443.280559][T12573] ___sys_sendmsg+0x2a5/0x360 [ 443.280586][T12573] ? __lock_acquire+0x6b5/0x2d10 [ 443.280611][T12573] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.280670][T12573] ? __fget_files+0x2a/0x420 [ 443.280691][T12573] ? __fget_files+0x3a6/0x420 [ 443.280721][T12573] __x64_sys_sendmsg+0x1c3/0x2a0 [ 443.280751][T12573] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 443.280788][T12573] ? __pfx_ksys_write+0x10/0x10 [ 443.280817][T12573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.280837][T12573] do_syscall_64+0x174/0x580 [ 443.280861][T12573] ? trace_irq_disable+0x3b/0x140 [ 443.280881][T12573] ? clear_bhb_loop+0x40/0x90 [ 443.280903][T12573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.280922][T12573] RIP: 0033:0x7ff0a98dce59 [ 443.280939][T12573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.280955][T12573] RSP: 002b:00007ff0a7b36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.280975][T12573] RAX: ffffffffffffffda RBX: 00007ff0a9b55fa0 RCX: 00007ff0a98dce59 [ 443.280989][T12573] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 443.281001][T12573] RBP: 00007ff0a7b36090 R08: 0000000000000000 R09: 0000000000000000 [ 443.281013][T12573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.281024][T12573] R13: 00007ff0a9b56038 R14: 00007ff0a9b55fa0 R15: 00007fff7ab46ac8 [ 443.281052][T12573] [ 443.379046][T12575] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2125'. [ 443.379065][T12575] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2125'. [ 443.519089][ T5719] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 443.687084][T12585] autofs: Bad value for 'fd' [ 443.711744][ T5719] usb 7-1: no configurations [ 443.711765][ T5719] usb 7-1: can't read configurations, error -22 [ 443.713230][ T5719] usb usb7-port1: attempt power cycle [ 443.755104][ T5622] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 443.983830][T12591] vcan0: tx drop: invalid da for name 0x0000010000000000 [ 444.250989][ T5719] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 444.273710][ T5719] usb 7-1: no configurations [ 444.273739][ T5719] usb 7-1: can't read configurations, error -22 [ 444.336768][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2134'. [ 444.413067][ T5719] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 444.432125][ T5719] usb 7-1: no configurations [ 444.432146][ T5719] usb 7-1: can't read configurations, error -22 [ 444.435631][ T5719] usb usb7-port1: unable to enumerate USB device [ 444.608767][T12608] autofs: Unknown parameter '0x0000000000000004' [ 444.817989][T12617] FAULT_INJECTION: forcing a failure. [ 444.817989][T12617] name failslab, interval 1, probability 0, space 0, times 0 [ 444.818013][T12617] CPU: 1 UID: 0 PID: 12617 Comm: syz.7.2140 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 444.818029][T12617] Tainted: [L]=SOFTLOCKUP [ 444.818033][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 444.818040][T12617] Call Trace: [ 444.818045][T12617] [ 444.818050][T12617] dump_stack_lvl+0xe8/0x150 [ 444.818068][T12617] should_fail_ex+0x46b/0x600 [ 444.818086][T12617] should_failslab+0xa8/0x100 [ 444.818100][T12617] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 444.818113][T12617] ? __d_alloc+0x37/0x6f0 [ 444.818128][T12617] __d_alloc+0x37/0x6f0 [ 444.818140][T12617] ? register_lock_class+0x31/0x2e0 [ 444.818157][T12617] d_alloc_parallel+0xe6/0x1610 [ 444.818174][T12617] ? do_raw_spin_lock+0x12b/0x2f0 [ 444.818185][T12617] ? register_lock_class+0x31/0x2e0 [ 444.818198][T12617] ? __lock_acquire+0x6b5/0x2d10 [ 444.818211][T12617] ? __pfx_d_alloc_parallel+0x10/0x10 [ 444.818232][T12617] ? __rt_spin_lock_init+0x3e/0x50 [ 444.818248][T12617] ? __init_waitqueue_head+0xae/0x160 [ 444.818260][T12617] __lookup_slow+0x152/0x440 [ 444.818274][T12617] ? __pfx___lookup_slow+0x10/0x10 [ 444.818293][T12617] ? down_read+0x156/0x200 [ 444.818302][T12617] ? __pfx_down_read+0x10/0x10 [ 444.818313][T12617] ? lookup_fast+0x1a3/0x5b0 [ 444.818327][T12617] lookup_slow+0x53/0x70 [ 444.818340][T12617] path_lookupat+0x3f5/0x8c0 [ 444.818362][T12617] filename_lookup+0x256/0x5d0 [ 444.818376][T12617] ? __pfx_filename_lookup+0x10/0x10 [ 444.818399][T12617] ? __might_fault+0xaf/0x130 [ 444.818412][T12617] ? __might_fault+0xaf/0x130 [ 444.818427][T12617] filename_linkat+0x11a/0x600 [ 444.818442][T12617] ? __pfx_filename_linkat+0x10/0x10 [ 444.818454][T12617] ? do_getname+0x151/0x250 [ 444.818464][T12617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.818476][T12617] __se_sys_link+0x55/0x2c0 [ 444.818486][T12617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.818497][T12617] do_syscall_64+0x174/0x580 [ 444.818511][T12617] ? trace_irq_disable+0x3b/0x140 [ 444.818523][T12617] ? clear_bhb_loop+0x40/0x90 [ 444.818535][T12617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.818546][T12617] RIP: 0033:0x7ff0a98dce59 [ 444.818556][T12617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.818566][T12617] RSP: 002b:00007ff0a7b15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 444.818577][T12617] RAX: ffffffffffffffda RBX: 00007ff0a9b56090 RCX: 00007ff0a98dce59 [ 444.818585][T12617] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000200000000280 [ 444.818592][T12617] RBP: 00007ff0a7b15090 R08: 0000000000000000 R09: 0000000000000000 [ 444.818598][T12617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.818605][T12617] R13: 00007ff0a9b56128 R14: 00007ff0a9b56090 R15: 00007fff7ab46ac8 [ 444.818620][T12617] [ 445.741127][ T5705] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 445.815777][T12631] autofs: Unknown parameter '0x0000000000000004' [ 445.918944][ T5705] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 445.918973][ T5705] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.918993][ T5705] usb 9-1: Product: syz [ 445.919006][ T5705] usb 9-1: Manufacturer: syz [ 445.919020][ T5705] usb 9-1: SerialNumber: syz [ 445.962588][ T5705] usb 9-1: config 0 descriptor?? [ 445.984091][ T5705] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 446.059469][T12640] netlink: 'syz.7.2150': attribute type 29 has an invalid length. [ 446.059490][T12640] netlink: 'syz.7.2150': attribute type 3 has an invalid length. [ 446.059503][T12640] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2150'. [ 446.331231][ T5733] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 446.365026][ T38] audit: type=1326 audit(1780418451.933:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12622 comm="syz.8.2142" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42a73fce59 code=0x0 [ 446.414729][ T38] audit: type=1326 audit(1780418451.983:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12622 comm="syz.8.2142" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42a73fce59 code=0x0 [ 446.501939][ T5733] usb 8-1: Using ep0 maxpacket: 16 [ 446.504036][ T5733] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 446.504063][ T5733] usb 8-1: config 1 has no interface number 0 [ 446.504137][ T5733] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 446.504151][ T5733] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 446.504164][ T5733] usb 8-1: config 1 interface 105 has no altsetting 0 [ 446.506828][ T5733] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 446.506851][ T5733] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 446.506862][ T5733] usb 8-1: Product: syz [ 446.506869][ T5733] usb 8-1: Manufacturer: syz [ 446.506911][ T5733] usb 8-1: SerialNumber: syz [ 446.544525][T12640] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 446.544660][T12640] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 446.558820][ T5795] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 446.673834][ T5705] gspca_sunplus: reg_w_riv err -110 [ 446.673926][ T5705] sunplus 9-1:0.0: probe with driver sunplus failed with error -110 [ 446.691071][ T5795] usb 6-1: device descriptor read/64, error -71 [ 446.823285][ T5733] aqc111 8-1:1.105: probe with driver aqc111 failed with error -71 [ 446.862499][ T5733] usb 8-1: USB disconnect, device number 95 [ 446.931058][ T5795] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 447.062461][ T5795] usb 6-1: device descriptor read/64, error -71 [ 447.184753][ T5795] usb usb6-port1: attempt power cycle [ 447.287089][T12649] FAULT_INJECTION: forcing a failure. [ 447.287089][T12649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.287110][T12649] CPU: 1 UID: 0 PID: 12649 Comm: syz.6.2154 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 447.287126][T12649] Tainted: [L]=SOFTLOCKUP [ 447.287129][T12649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 447.287136][T12649] Call Trace: [ 447.287141][T12649] [ 447.287146][T12649] dump_stack_lvl+0xe8/0x150 [ 447.287164][T12649] should_fail_ex+0x46b/0x600 [ 447.287182][T12649] _copy_to_user+0x31/0xb0 [ 447.287196][T12649] simple_read_from_buffer+0xe1/0x170 [ 447.287211][T12649] proc_fail_nth_read+0x1be/0x230 [ 447.287226][T12649] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 447.287239][T12649] ? rw_verify_area+0x2ac/0x4e0 [ 447.287253][T12649] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 447.287266][T12649] vfs_read+0x212/0xa80 [ 447.287283][T12649] ? __pfx_vfs_read+0x10/0x10 [ 447.287297][T12649] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 447.287312][T12649] ? lockdep_hardirqs_on+0x7a/0x110 [ 447.287327][T12649] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 447.287341][T12649] ? mutex_lock_nested+0x152/0x1d0 [ 447.287352][T12649] ? fdget_pos+0x252/0x320 [ 447.287368][T12649] ksys_read+0x156/0x270 [ 447.287383][T12649] ? __pfx_ksys_read+0x10/0x10 [ 447.287395][T12649] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 447.287412][T12649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.287423][T12649] do_syscall_64+0x174/0x580 [ 447.287438][T12649] ? clear_bhb_loop+0x40/0x90 [ 447.287451][T12649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.287461][T12649] RIP: 0033:0x7fc8dc8ed68e [ 447.287472][T12649] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 447.287481][T12649] RSP: 002b:00007fc8dab85fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 447.287493][T12649] RAX: ffffffffffffffda RBX: 00007fc8dab866c0 RCX: 00007fc8dc8ed68e [ 447.287501][T12649] RDX: 000000000000000f RSI: 00007fc8dab860a0 RDI: 0000000000000004 [ 447.287508][T12649] RBP: 00007fc8dab86090 R08: 0000000000000000 R09: 0000000000000000 [ 447.287514][T12649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.287527][T12649] R13: 00007fc8dcba6038 R14: 00007fc8dcba5fa0 R15: 00007ffc9ea2b178 [ 447.287543][T12649] [ 447.536562][T12653] autofs: Unknown parameter '0x0000000000000004' [ 447.551649][ T5795] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 447.573117][ T5795] usb 6-1: device descriptor read/8, error -71 [ 447.610046][ T5622] Bluetooth: hci4: link tx timeout [ 447.610267][ T5622] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 447.811012][ T5795] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 447.820702][T12657] FAULT_INJECTION: forcing a failure. [ 447.820702][T12657] name failslab, interval 1, probability 0, space 0, times 0 [ 447.825681][T12657] CPU: 1 UID: 0 PID: 12657 Comm: syz.7.2157 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 447.825713][T12657] Tainted: [L]=SOFTLOCKUP [ 447.825720][T12657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 447.825731][T12657] Call Trace: [ 447.825739][T12657] [ 447.825747][T12657] dump_stack_lvl+0xe8/0x150 [ 447.825776][T12657] should_fail_ex+0x46b/0x600 [ 447.825809][T12657] should_failslab+0xa8/0x100 [ 447.825836][T12657] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 447.825860][T12657] ? __get_vm_area_node+0x13f/0x300 [ 447.825886][T12657] __get_vm_area_node+0x13f/0x300 [ 447.825911][T12657] __vmalloc_node_range_noprof+0x36a/0x1750 [ 447.825933][T12657] ? copy_process+0x837/0x43d0 [ 447.825958][T12657] ? percpu_ref_get_many+0x19/0x140 [ 447.826006][T12657] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 447.826032][T12657] ? rcu_is_watching+0x15/0xb0 [ 447.826058][T12657] ? memcpy_and_pad+0x48/0x80 [ 447.826085][T12657] __vmalloc_node_noprof+0xc2/0x100 [ 447.826107][T12657] ? copy_process+0x837/0x43d0 [ 447.826131][T12657] ? copy_process+0x837/0x43d0 [ 447.826159][T12657] dup_task_struct+0x298/0x860 [ 447.826183][T12657] ? rt_spin_unlock+0x160/0x200 [ 447.826208][T12657] copy_process+0x837/0x43d0 [ 447.826263][T12657] ? __pfx_copy_process+0x10/0x10 [ 447.826300][T12657] vhost_task_create+0x1f9/0x380 [ 447.826322][T12657] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 447.826349][T12657] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 447.826375][T12657] ? __pfx_vhost_task_create+0x10/0x10 [ 447.826403][T12657] ? __pfx_vhost_task_fn+0x10/0x10 [ 447.826428][T12657] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 447.826455][T12657] ? lockdep_hardirqs_on+0x7a/0x110 [ 447.826488][T12657] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 447.826514][T12657] ? mutex_lock_nested+0x152/0x1d0 [ 447.826536][T12657] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 447.826567][T12657] kvm_mmu_post_init_vm+0x147/0x2d0 [ 447.826598][T12657] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 447.826632][T12657] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 447.826655][T12657] ? do_raw_spin_lock+0x12b/0x2f0 [ 447.826685][T12657] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 447.826711][T12657] ? lockdep_hardirqs_on+0x7a/0x110 [ 447.826738][T12657] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 447.826763][T12657] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 447.826791][T12657] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 447.826815][T12657] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 447.826841][T12657] ? lockdep_hardirqs_on+0x7a/0x110 [ 447.826866][T12657] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 447.826892][T12657] ? rt_write_unlock+0x190/0x230 [ 447.826918][T12657] kvm_vcpu_ioctl+0xa65/0xfe0 [ 447.826948][T12657] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 447.826992][T12657] ? __fget_files+0x2a/0x420 [ 447.827016][T12657] ? __fget_files+0x2a/0x420 [ 447.827036][T12657] ? __fget_files+0x3a6/0x420 [ 447.827055][T12657] ? __fget_files+0x2a/0x420 [ 447.827079][T12657] ? bpf_lsm_file_ioctl+0x9/0x20 [ 447.827106][T12657] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 447.827132][T12657] __se_sys_ioctl+0xff/0x170 [ 447.827157][T12657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.827177][T12657] do_syscall_64+0x174/0x580 [ 447.827202][T12657] ? trace_irq_disable+0x3b/0x140 [ 447.827223][T12657] ? clear_bhb_loop+0x40/0x90 [ 447.827245][T12657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.827264][T12657] RIP: 0033:0x7ff0a98dce59 [ 447.827282][T12657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.827298][T12657] RSP: 002b:00007ff0a7b15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.827318][T12657] RAX: ffffffffffffffda RBX: 00007ff0a9b56090 RCX: 00007ff0a98dce59 [ 447.827332][T12657] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 447.827342][T12657] RBP: 00007ff0a7b15090 R08: 0000000000000000 R09: 0000000000000000 [ 447.827354][T12657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.827365][T12657] R13: 00007ff0a9b56128 R14: 00007ff0a9b56090 R15: 00007fff7ab46ac8 [ 447.827396][T12657] [ 447.828232][T12657] warn_alloc: 2 callbacks suppressed [ 447.828245][T12657] syz.7.2157: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 447.828323][T12657] CPU: 1 UID: 0 PID: 12657 Comm: syz.7.2157 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 447.828348][T12657] Tainted: [L]=SOFTLOCKUP [ 447.828355][T12657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 447.828367][T12657] Call Trace: [ 447.828375][T12657] [ 447.828383][T12657] dump_stack_lvl+0xe8/0x150 [ 447.828406][T12657] warn_alloc+0x24c/0x270 [ 447.828436][T12657] ? __pfx_warn_alloc+0x10/0x10 [ 447.828458][T12657] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 447.828488][T12657] ? __get_vm_area_node+0x13f/0x300 [ 447.828512][T12657] ? __get_vm_area_node+0x2b5/0x300 [ 447.828538][T12657] __vmalloc_node_range_noprof+0x38f/0x1750 [ 447.828560][T12657] ? percpu_ref_get_many+0x19/0x140 [ 447.828612][T12657] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 447.828635][T12657] ? rcu_is_watching+0x15/0xb0 [ 447.828662][T12657] ? memcpy_and_pad+0x48/0x80 [ 447.828689][T12657] __vmalloc_node_noprof+0xc2/0x100 [ 447.828711][T12657] ? copy_process+0x837/0x43d0 [ 447.828735][T12657] ? copy_process+0x837/0x43d0 [ 447.828763][T12657] dup_task_struct+0x298/0x860 [ 447.828787][T12657] ? rt_spin_unlock+0x160/0x200 [ 447.828812][T12657] copy_process+0x837/0x43d0 [ 447.828866][T12657] ? __pfx_copy_process+0x10/0x10 [ 447.828904][T12657] vhost_task_create+0x1f9/0x380 [ 447.828925][T12657] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 447.828950][T12657] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 447.828977][T12657] ? __pfx_vhost_task_create+0x10/0x10 [ 447.829005][T12657] ? __pfx_vhost_task_fn+0x10/0x10 [ 447.829028][T12657] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 447.829055][T12657] ? lockdep_hardirqs_on+0x7a/0x110 [ 447.829080][T12657] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 447.829107][T12657] ? mutex_lock_nested+0x152/0x1d0 [ 447.829126][T12657] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 447.829157][T12657] kvm_mmu_post_init_vm+0x147/0x2d0 [ 447.829187][T12657] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 447.829220][T12657] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 447.829244][T12657] ? do_raw_spin_lock+0x12b/0x2f0 [ 447.829273][T12657] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 447.829299][T12657] ? lockdep_hardirqs_on+0x7a/0x110 [ 447.829325][T12657] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 447.829350][T12657] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 447.829378][T12657] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 447.829401][T12657] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 447.829426][T12657] ? lockdep_hardirqs_on+0x7a/0x110 [ 447.829452][T12657] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 447.829485][T12657] ? rt_write_unlock+0x190/0x230 [ 447.829509][T12657] kvm_vcpu_ioctl+0xa65/0xfe0 [ 447.829540][T12657] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 447.829585][T12657] ? __fget_files+0x2a/0x420 [ 447.829609][T12657] ? __fget_files+0x2a/0x420 [ 447.829628][T12657] ? __fget_files+0x3a6/0x420 [ 447.829649][T12657] ? __fget_files+0x2a/0x420 [ 447.829673][T12657] ? bpf_lsm_file_ioctl+0x9/0x20 [ 447.829698][T12657] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 447.829723][T12657] __se_sys_ioctl+0xff/0x170 [ 447.829749][T12657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.829769][T12657] do_syscall_64+0x174/0x580 [ 447.829795][T12657] ? trace_irq_disable+0x3b/0x140 [ 447.829815][T12657] ? clear_bhb_loop+0x40/0x90 [ 447.829837][T12657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.829856][T12657] RIP: 0033:0x7ff0a98dce59 [ 447.829873][T12657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.829888][T12657] RSP: 002b:00007ff0a7b15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.829905][T12657] RAX: ffffffffffffffda RBX: 00007ff0a9b56090 RCX: 00007ff0a98dce59 [ 447.829918][T12657] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 447.829929][T12657] RBP: 00007ff0a7b15090 R08: 0000000000000000 R09: 0000000000000000 [ 447.829941][T12657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.829954][T12657] R13: 00007ff0a9b56128 R14: 00007ff0a9b56090 R15: 00007fff7ab46ac8 [ 447.829983][T12657] [ 447.830095][T12657] Mem-Info: [ 447.830110][T12657] active_anon:18326 inactive_anon:0 isolated_anon:0 [ 447.830110][T12657] active_file:0 inactive_file:54539 isolated_file:0 [ 447.830110][T12657] unevictable:768 dirty:223 writeback:0 [ 447.830110][T12657] slab_reclaimable:12185 slab_unreclaimable:100649 [ 447.830110][T12657] mapped:34202 shmem:11381 pagetables:1904 [ 447.830110][T12657] sec_pagetables:2 bounce:0 [ 447.830110][T12657] kernel_misc_reclaimable:0 [ 447.830110][T12657] free:1313230 free_pcp:1691 free_cma:0 [ 447.830161][T12657] Node 0 active_anon:73304kB inactive_anon:0kB active_file:0kB inactive_file:217948kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136808kB dirty:892kB writeback:0kB shmem:43988kB kernel_stack:15676kB pagetables:7468kB sec_pagetables:8kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 447.830207][T12657] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 447.830250][T12657] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 447.830308][T12657] lowmem_reserve[]: 0 2492 2492 2492 2492 [ 447.830431][T12657] Node 0 DMA32 free:1307656kB boost:0kB min:3912kB low:6436kB high:8960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:73304kB inactive_anon:0kB active_file:0kB inactive_file:217948kB unevictable:1536kB writepending:892kB zspages:0kB present:3129332kB managed:2551952kB mlocked:0kB bounce:0kB free_pcp:6752kB local_pcp:4156kB free_cma:0kB [ 447.830494][T12657] lowmem_reserve[]: 0 0 0 0 0 [ 447.830523][T12657] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:856kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 447.830575][T12657] lowmem_reserve[]: 0 0 0 0 0 [ 447.830689][T12657] Node 1 Normal free:3929904kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 447.830744][T12657] lowmem_reserve[]: 0 0 0 0 0 [ 447.830976][T12657] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB [ 447.831576][ T5795] usb 6-1: device descriptor read/8, error -71 [ 447.831865][T12657] (M) = 15360kB [ 447.831880][T12657] Node 0 DMA32: 1144*4kB (UME) 187*8kB (U) 49*16kB (UME) 249*32kB (UM) 75*64kB (UM) 90*128kB (UM) 98*256kB (UM) 54*512kB (UME) 25*1024kB (UME) 9*2048kB (UME) 288*4096kB (UM) = 1307560kB [ 447.832024][T12657] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 447.832115][T12657] Node 1 Normal: 4*4kB (UM) 4*8kB (UM) 6*16kB (UM) 9*32kB (UM) 10*64kB (UM) 4*128kB (UM) 1*256kB (M) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 958*4096kB (M) = 3929904kB [ 447.833004][T12657] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 447.833020][T12657] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 447.833035][T12657] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 447.833049][T12657] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 447.833064][T12657] 65941 total pagecache pages [ 447.833082][T12657] 0 pages in swap cache [ 447.833089][T12657] Free swap = 124996kB [ 447.833096][T12657] Total swap = 124996kB [ 447.833105][T12657] 2097051 pages RAM [ 447.833111][T12657] 0 pages HighMem/MovableOnly [ 447.833118][T12657] 427235 pages reserved [ 447.833124][T12657] 0 pages cma reserved [ 447.943392][ T5795] usb usb6-port1: unable to enumerate USB device [ 448.580515][ T5795] usb 9-1: USB disconnect, device number 85 [ 448.742073][ T5719] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 448.892054][ T5719] usb 7-1: Using ep0 maxpacket: 8 [ 448.894558][ T5719] usb 7-1: unable to get BOS descriptor or descriptor too short [ 448.895866][ T5719] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 448.898183][ T5719] usb 7-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 448.898208][ T5719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.898228][ T5719] usb 7-1: Product: syz [ 448.898241][ T5719] usb 7-1: Manufacturer: syz [ 448.898256][ T5719] usb 7-1: SerialNumber: syz [ 449.140693][ T5719] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 449.216018][ T5719] usb 7-1: cannot setup if 2: error -71 [ 449.364651][ T5719] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 449.371631][ T5719] usb 7-1: USB disconnect, device number 97 [ 449.524135][ T8882] udevd[8882]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.663126][ T5622] Bluetooth: hci4: command 0x0406 tx timeout [ 449.820006][T12675] autofs: Unknown parameter '0x0000000000000004' [ 449.876769][T12679] FAULT_INJECTION: forcing a failure. [ 449.876769][T12679] name failslab, interval 1, probability 0, space 0, times 0 [ 449.876823][T12679] CPU: 0 UID: 0 PID: 12679 Comm: syz.6.2167 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 449.876850][T12679] Tainted: [L]=SOFTLOCKUP [ 449.876857][T12679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 449.876869][T12679] Call Trace: [ 449.876876][T12679] [ 449.876885][T12679] dump_stack_lvl+0xe8/0x150 [ 449.876911][T12679] should_fail_ex+0x46b/0x600 [ 449.876943][T12679] should_failslab+0xa8/0x100 [ 449.876969][T12679] kmem_cache_alloc_noprof+0x87/0x680 [ 449.876992][T12679] ? skb_clone+0x212/0x3a0 [ 449.877013][T12679] skb_clone+0x212/0x3a0 [ 449.877030][T12679] ? nfnetlink_rcv+0x4b0/0x27b0 [ 449.877059][T12679] nfnetlink_rcv+0x4e2/0x27b0 [ 449.877086][T12679] ? sock_sendmsg_nosec+0x13a/0x180 [ 449.877110][T12679] ? __pfx_snprintf+0x10/0x10 [ 449.877135][T12679] ? unwind_get_return_address+0x4d/0x90 [ 449.877170][T12679] ? trim_netdev_trace+0x7ac/0x840 [ 449.877194][T12679] ? __pfx_trim_netdev_trace+0x10/0x10 [ 449.877213][T12679] ? stack_trace_save+0xa9/0x100 [ 449.877235][T12679] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 449.877275][T12679] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 449.877294][T12679] ? ref_tracker_free+0x673/0x820 [ 449.877321][T12679] ? __netlink_deliver_tap+0x636/0x8b0 [ 449.877348][T12679] ? netlink_deliver_tap+0x19c/0x1b0 [ 449.877375][T12679] ? netlink_unicast+0x754/0x920 [ 449.877398][T12679] ? netlink_sendmsg+0x813/0xb40 [ 449.877415][T12679] ? sock_sendmsg_nosec+0x13a/0x180 [ 449.877435][T12679] ? ____sys_sendmsg+0x55c/0x870 [ 449.877465][T12679] ? ___sys_sendmsg+0x2a5/0x360 [ 449.877490][T12679] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 449.877516][T12679] ? do_syscall_64+0x174/0x580 [ 449.877542][T12679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.877574][T12679] ? skb_clone+0x246/0x3a0 [ 449.877595][T12679] ? __netlink_deliver_tap+0x866/0x8b0 [ 449.877624][T12679] ? netlink_deliver_tap+0x2e/0x1b0 [ 449.877658][T12679] ? netlink_deliver_tap+0x2e/0x1b0 [ 449.877685][T12679] ? netlink_deliver_tap+0x2e/0x1b0 [ 449.877716][T12679] netlink_unicast+0x780/0x920 [ 449.877747][T12679] netlink_sendmsg+0x813/0xb40 [ 449.877772][T12679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.877799][T12679] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 449.877826][T12679] ? aa_sock_msg_perm+0x122/0x200 [ 449.877847][T12679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.877864][T12679] sock_sendmsg_nosec+0x13a/0x180 [ 449.877888][T12679] ____sys_sendmsg+0x55c/0x870 [ 449.877920][T12679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.877956][T12679] ? import_iovec+0x73/0xa0 [ 449.877981][T12679] ___sys_sendmsg+0x2a5/0x360 [ 449.878007][T12679] ? __lock_acquire+0x6b5/0x2d10 [ 449.878034][T12679] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.878093][T12679] ? __fget_files+0x2a/0x420 [ 449.878115][T12679] ? __fget_files+0x3a6/0x420 [ 449.878145][T12679] __x64_sys_sendmsg+0x1c3/0x2a0 [ 449.878175][T12679] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 449.878212][T12679] ? __pfx_ksys_write+0x10/0x10 [ 449.878245][T12679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.878265][T12679] do_syscall_64+0x174/0x580 [ 449.878291][T12679] ? trace_irq_disable+0x3b/0x140 [ 449.878312][T12679] ? clear_bhb_loop+0x40/0x90 [ 449.878336][T12679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.878354][T12679] RIP: 0033:0x7fc8dc92ce59 [ 449.878371][T12679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.878388][T12679] RSP: 002b:00007fc8dab86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.878410][T12679] RAX: ffffffffffffffda RBX: 00007fc8dcba5fa0 RCX: 00007fc8dc92ce59 [ 449.878424][T12679] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 449.878437][T12679] RBP: 00007fc8dab86090 R08: 0000000000000000 R09: 0000000000000000 [ 449.878449][T12679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.878458][T12679] R13: 00007fc8dcba6038 R14: 00007fc8dcba5fa0 R15: 00007ffc9ea2b178 [ 449.878487][T12679] [ 450.261939][ T5719] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 450.393104][ T1848] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 450.415711][ T5719] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 450.415739][ T5719] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.415758][ T5719] usb 9-1: config 0 has no interface number 0 [ 450.419952][ T5719] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 450.419979][ T5719] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.422459][ T5719] usb 9-1: Product: syz [ 450.422477][ T5719] usb 9-1: Manufacturer: syz [ 450.422491][ T5719] usb 9-1: SerialNumber: syz [ 450.442052][ T5719] usb 9-1: config 0 descriptor?? [ 450.469298][ T5719] uvcvideo 9-1:0.64: probe with driver uvcvideo failed with error -22 [ 450.541240][ T1848] usb 7-1: Using ep0 maxpacket: 8 [ 450.557669][ T1848] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 450.557695][ T1848] usb 7-1: config 1 has no interface number 0 [ 450.560022][ T1848] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 450.560049][ T1848] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 450.560070][ T1848] usb 7-1: Product: syz [ 450.560085][ T1848] usb 7-1: Manufacturer: syz [ 450.560100][ T1848] usb 7-1: SerialNumber: syz [ 450.715611][T12682] binder: 12680:12682 ioctl c0306201 200000000080 returned -14 [ 450.730482][ T5719] usb 9-1: USB disconnect, device number 86 [ 450.799174][T12686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.799794][T12686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.804672][ T1848] usb 7-1: Handspring Visor / Palm OS: No valid connect info available [ 450.804693][ T1848] usb 7-1: Handspring Visor / Palm OS: port 83, is for Debugger use [ 450.804714][ T1848] usb 7-1: Handspring Visor / Palm OS: port 171, is for unknown use [ 450.804731][ T1848] usb 7-1: Handspring Visor / Palm OS: Number of ports: 2 [ 451.009279][ T1848] visor 7-1:1.1: Handspring Visor / Palm OS converter detected [ 451.033026][ T1848] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 451.045436][T12702] autofs: Unknown parameter '0x0000000000000004' [ 451.057758][ T1848] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 451.077538][ T5795] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 451.173470][T12704] FAULT_INJECTION: forcing a failure. [ 451.173470][T12704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.173501][T12704] CPU: 1 UID: 0 PID: 12704 Comm: syz.7.2178 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 451.173523][T12704] Tainted: [L]=SOFTLOCKUP [ 451.173528][T12704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 451.173538][T12704] Call Trace: [ 451.173544][T12704] [ 451.173551][T12704] dump_stack_lvl+0xe8/0x150 [ 451.173577][T12704] should_fail_ex+0x46b/0x600 [ 451.173607][T12704] _copy_to_user+0x31/0xb0 [ 451.173630][T12704] handle_eviocgbit+0x194/0x1e0 [ 451.173658][T12704] evdev_ioctl_handler+0x131c/0x1fe0 [ 451.173687][T12704] ? __pfx_evdev_ioctl_handler+0x10/0x10 [ 451.173742][T12704] ? __fget_files+0x2a/0x420 [ 451.173762][T12704] ? bpf_lsm_file_ioctl+0x9/0x20 [ 451.173784][T12704] ? __pfx_evdev_ioctl+0x10/0x10 [ 451.173809][T12704] __se_sys_ioctl+0xff/0x170 [ 451.173836][T12704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.173851][T12704] do_syscall_64+0x174/0x580 [ 451.173871][T12704] ? trace_irq_disable+0x3b/0x140 [ 451.173886][T12704] ? clear_bhb_loop+0x40/0x90 [ 451.173903][T12704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.173916][T12704] RIP: 0033:0x7ff0a98dce59 [ 451.173931][T12704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.173942][T12704] RSP: 002b:00007ff0a7b36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 451.173957][T12704] RAX: ffffffffffffffda RBX: 00007ff0a9b55fa0 RCX: 00007ff0a98dce59 [ 451.173967][T12704] RDX: 0000200000000480 RSI: 0000000080404525 RDI: 0000000000000003 [ 451.173977][T12704] RBP: 00007ff0a7b36090 R08: 0000000000000000 R09: 0000000000000000 [ 451.173985][T12704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.173994][T12704] R13: 00007ff0a9b56038 R14: 00007ff0a9b55fa0 R15: 00007fff7ab46ac8 [ 451.174016][T12704] [ 451.219320][ T1848] usb 7-1: USB disconnect, device number 98 [ 451.237260][ T5795] usb 6-1: Using ep0 maxpacket: 8 [ 451.251591][ T5795] usb 6-1: config 0 has no interfaces? [ 451.284910][ T5795] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 451.284940][ T5795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.284960][ T5795] usb 6-1: Product: syz [ 451.284974][ T5795] usb 6-1: Manufacturer: syz [ 451.284988][ T5795] usb 6-1: SerialNumber: syz [ 451.327287][ T5795] usb 6-1: config 0 descriptor?? [ 451.482649][ T1848] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 451.539515][T12694] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 451.599925][ T1848] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 451.602730][ T5794] usb 6-1: USB disconnect, device number 103 [ 451.677709][ T1848] visor 7-1:1.1: device disconnected [ 451.911090][ T5795] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 452.061171][ T5795] usb 9-1: Using ep0 maxpacket: 32 [ 452.063471][ T5795] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 452.063501][ T5795] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 452.063517][ T5795] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 452.063529][ T5795] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 452.065642][ T5795] usb 9-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 452.065669][ T5795] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.065689][ T5795] usb 9-1: Product: syz [ 452.065707][ T5795] usb 9-1: Manufacturer: syz [ 452.065716][ T5795] usb 9-1: SerialNumber: syz [ 452.154115][ T5795] usb 9-1: config 0 descriptor?? [ 452.359145][T12713] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2181'. [ 452.360326][T12713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.361347][T12713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.387175][ T5795] usb 9-1: USB disconnect, device number 87 [ 452.732975][T12722] trusted_key: encrypted_key: master key parameter '¸>ffâ>4ëfÉdŽèf¹ž' is invalid [ 452.738514][T12722] ucma_write: process 1202 (syz.5.2184) changed security contexts after opening file descriptor, this is not allowed. [ 452.791022][ T4926] Bluetooth: hci0: command 0x0c1a tx timeout [ 452.906349][T12727] autofs: Unknown parameter '0x0000000000000004' [ 453.020674][T12731] loop8: detected capacity change from 0 to 7 [ 453.053808][T12731] Dev loop8: unable to read RDB block 7 [ 453.053836][T12731] loop8: unable to read partition table [ 453.053952][T12731] loop8: partition table beyond EOD, truncated [ 453.053976][T12731] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 453.144672][T12732] binder: 12728:12732 unknown command 0 [ 453.144693][T12732] binder: 12728:12732 ioctl c0306201 200000000480 returned -22 [ 453.381109][ T5794] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 453.527076][T12743] FAULT_INJECTION: forcing a failure. [ 453.527076][T12743] name failslab, interval 1, probability 0, space 0, times 0 [ 453.527100][T12743] CPU: 0 UID: 0 PID: 12743 Comm: syz.7.2191 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 453.527115][T12743] Tainted: [L]=SOFTLOCKUP [ 453.527119][T12743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 453.527125][T12743] Call Trace: [ 453.527130][T12743] [ 453.527135][T12743] dump_stack_lvl+0xe8/0x150 [ 453.527152][T12743] should_fail_ex+0x46b/0x600 [ 453.527171][T12743] should_failslab+0xa8/0x100 [ 453.527185][T12743] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 453.527202][T12743] ? __get_vm_area_node+0x13f/0x300 [ 453.527216][T12743] __get_vm_area_node+0x13f/0x300 [ 453.527230][T12743] __vmalloc_node_range_noprof+0x36a/0x1750 [ 453.527242][T12743] ? copy_process+0x837/0x43d0 [ 453.527256][T12743] ? percpu_ref_get_many+0x19/0x140 [ 453.527285][T12743] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 453.527299][T12743] ? rcu_is_watching+0x15/0xb0 [ 453.527313][T12743] ? memcpy_and_pad+0x48/0x80 [ 453.527329][T12743] __vmalloc_node_noprof+0xc2/0x100 [ 453.527341][T12743] ? copy_process+0x837/0x43d0 [ 453.527354][T12743] ? copy_process+0x837/0x43d0 [ 453.527372][T12743] dup_task_struct+0x298/0x860 [ 453.527386][T12743] ? rt_spin_unlock+0x160/0x200 [ 453.527399][T12743] copy_process+0x837/0x43d0 [ 453.527428][T12743] ? __pfx_copy_process+0x10/0x10 [ 453.527454][T12743] vhost_task_create+0x1f9/0x380 [ 453.527467][T12743] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 453.527482][T12743] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 453.527496][T12743] ? __pfx_vhost_task_create+0x10/0x10 [ 453.527512][T12743] ? __pfx_vhost_task_fn+0x10/0x10 [ 453.527525][T12743] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 453.527546][T12743] ? lockdep_hardirqs_on+0x7a/0x110 [ 453.527571][T12743] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 453.527608][T12743] ? mutex_lock_nested+0x152/0x1d0 [ 453.527627][T12743] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 453.527654][T12743] kvm_mmu_post_init_vm+0x147/0x2d0 [ 453.527670][T12743] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 453.527689][T12743] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 453.527702][T12743] ? do_raw_spin_lock+0x12b/0x2f0 [ 453.527719][T12743] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 453.527733][T12743] ? lockdep_hardirqs_on+0x7a/0x110 [ 453.527747][T12743] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 453.527760][T12743] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 453.527775][T12743] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 453.527788][T12743] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 453.527802][T12743] ? lockdep_hardirqs_on+0x7a/0x110 [ 453.527816][T12743] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 453.527830][T12743] ? rt_write_unlock+0x190/0x230 [ 453.527844][T12743] kvm_vcpu_ioctl+0xa65/0xfe0 [ 453.527868][T12743] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 453.527892][T12743] ? __fget_files+0x2a/0x420 [ 453.527906][T12743] ? __fget_files+0x2a/0x420 [ 453.527919][T12743] ? __fget_files+0x3a6/0x420 [ 453.527939][T12743] ? __fget_files+0x2a/0x420 [ 453.527964][T12743] ? bpf_lsm_file_ioctl+0x9/0x20 [ 453.527990][T12743] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 453.528013][T12743] __se_sys_ioctl+0xff/0x170 [ 453.528028][T12743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.528039][T12743] do_syscall_64+0x174/0x580 [ 453.528054][T12743] ? trace_irq_disable+0x3b/0x140 [ 453.528066][T12743] ? clear_bhb_loop+0x40/0x90 [ 453.528078][T12743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.528089][T12743] RIP: 0033:0x7ff0a98dce59 [ 453.528100][T12743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.528109][T12743] RSP: 002b:00007ff0a7b15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 453.528121][T12743] RAX: ffffffffffffffda RBX: 00007ff0a9b56090 RCX: 00007ff0a98dce59 [ 453.528129][T12743] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 453.528136][T12743] RBP: 00007ff0a7b15090 R08: 0000000000000000 R09: 0000000000000000 [ 453.528142][T12743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.528148][T12743] R13: 00007ff0a9b56128 R14: 00007ff0a9b56090 R15: 00007fff7ab46ac8 [ 453.528164][T12743] [ 453.569297][ T5794] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.569322][ T5794] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 453.573550][ T5794] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 453.573578][ T5794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 453.573596][ T5794] usb 7-1: SerialNumber: syz [ 453.817103][T12729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.826580][T12729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.888219][ T5794] usb 7-1: invalid UAC_HEADER (v1) [ 454.042465][ T5794] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 454.047911][ T5794] usb 7-1: USB disconnect, device number 99 [ 454.089377][ T8882] udevd[8882]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 454.455748][ T5719] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 454.613349][ T5719] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.613402][ T5719] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 454.613431][ T5719] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.617691][ T5719] usb 9-1: config 0 descriptor?? [ 454.639777][ T5719] pwc: Askey VC010 type 2 USB webcam detected. [ 454.736070][T12758] autofs: Unknown parameter 'fd0x0000000000000004' [ 454.823394][ T5719] pwc: send_video_command error -71 [ 454.823406][ T5719] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 454.823468][ T5719] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 454.830301][ T5719] usb 9-1: USB disconnect, device number 88 [ 455.038944][T12768] FAULT_INJECTION: forcing a failure. [ 455.038944][T12768] name failslab, interval 1, probability 0, space 0, times 0 [ 455.038967][T12768] CPU: 1 UID: 0 PID: 12768 Comm: syz.5.2199 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 455.038983][T12768] Tainted: [L]=SOFTLOCKUP [ 455.038987][T12768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 455.038993][T12768] Call Trace: [ 455.038998][T12768] [ 455.039004][T12768] dump_stack_lvl+0xe8/0x150 [ 455.039021][T12768] should_fail_ex+0x46b/0x600 [ 455.039040][T12768] should_failslab+0xa8/0x100 [ 455.039054][T12768] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 455.039069][T12768] ? __get_vm_area_node+0x13f/0x300 [ 455.039082][T12768] __get_vm_area_node+0x13f/0x300 [ 455.039097][T12768] __vmalloc_node_range_noprof+0x36a/0x1750 [ 455.039109][T12768] ? copy_process+0x837/0x43d0 [ 455.039123][T12768] ? percpu_ref_get_many+0x19/0x140 [ 455.039151][T12768] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 455.039165][T12768] ? rcu_is_watching+0x15/0xb0 [ 455.039179][T12768] ? memcpy_and_pad+0x48/0x80 [ 455.039198][T12768] __vmalloc_node_noprof+0xc2/0x100 [ 455.039211][T12768] ? copy_process+0x837/0x43d0 [ 455.039223][T12768] ? copy_process+0x837/0x43d0 [ 455.039238][T12768] dup_task_struct+0x298/0x860 [ 455.039252][T12768] ? rt_spin_unlock+0x160/0x200 [ 455.039273][T12768] copy_process+0x837/0x43d0 [ 455.039302][T12768] ? __pfx_copy_process+0x10/0x10 [ 455.039323][T12768] vhost_task_create+0x1f9/0x380 [ 455.039334][T12768] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 455.039350][T12768] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 455.039365][T12768] ? __pfx_vhost_task_create+0x10/0x10 [ 455.039380][T12768] ? __pfx_vhost_task_fn+0x10/0x10 [ 455.039399][T12768] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 455.039415][T12768] ? lockdep_hardirqs_on+0x7a/0x110 [ 455.039430][T12768] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 455.039444][T12768] ? mutex_lock_nested+0x152/0x1d0 [ 455.039455][T12768] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 455.039484][T12768] kvm_mmu_post_init_vm+0x147/0x2d0 [ 455.039512][T12768] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 455.039545][T12768] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 455.039568][T12768] ? do_raw_spin_lock+0x12b/0x2f0 [ 455.039591][T12768] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 455.039605][T12768] ? lockdep_hardirqs_on+0x7a/0x110 [ 455.039620][T12768] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 455.039634][T12768] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 455.039648][T12768] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 455.039661][T12768] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 455.039675][T12768] ? lockdep_hardirqs_on+0x7a/0x110 [ 455.039689][T12768] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 455.039703][T12768] ? rt_write_unlock+0x190/0x230 [ 455.039717][T12768] kvm_vcpu_ioctl+0xa65/0xfe0 [ 455.039740][T12768] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 455.039764][T12768] ? __fget_files+0x2a/0x420 [ 455.039778][T12768] ? __fget_files+0x2a/0x420 [ 455.039789][T12768] ? __fget_files+0x3a6/0x420 [ 455.039800][T12768] ? __fget_files+0x2a/0x420 [ 455.039813][T12768] ? bpf_lsm_file_ioctl+0x9/0x20 [ 455.039827][T12768] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 455.039841][T12768] __se_sys_ioctl+0xff/0x170 [ 455.039856][T12768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.039867][T12768] do_syscall_64+0x174/0x580 [ 455.039882][T12768] ? trace_irq_disable+0x3b/0x140 [ 455.039896][T12768] ? clear_bhb_loop+0x40/0x90 [ 455.039909][T12768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.039920][T12768] RIP: 0033:0x7f6d874ace59 [ 455.039931][T12768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.039940][T12768] RSP: 002b:00007f6d856e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 455.039953][T12768] RAX: ffffffffffffffda RBX: 00007f6d87726090 RCX: 00007f6d874ace59 [ 455.039961][T12768] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 455.039968][T12768] RBP: 00007f6d856e5090 R08: 0000000000000000 R09: 0000000000000000 [ 455.039974][T12768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.039980][T12768] R13: 00007f6d87726128 R14: 00007f6d87726090 R15: 00007ffd91707c88 [ 455.039997][T12768] [ 455.241137][ T5794] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 455.332222][ T5795] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 455.390994][ T5794] usb 8-1: Using ep0 maxpacket: 32 [ 455.395868][ T5794] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 455.395894][ T5794] usb 8-1: config 0 has no interface number 0 [ 455.395937][ T5794] usb 8-1: config 0 interface 184 has no altsetting 0 [ 455.400627][ T5794] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 455.400653][ T5794] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.400673][ T5794] usb 8-1: Product: syz [ 455.400687][ T5794] usb 8-1: Manufacturer: syz [ 455.400701][ T5794] usb 8-1: SerialNumber: syz [ 455.413602][ T5794] usb 8-1: config 0 descriptor?? [ 455.483968][ T5795] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.484223][ T5795] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 455.484247][ T5795] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.506952][ T5795] usb 9-1: config 0 descriptor?? [ 455.559217][ T5795] pwc: Askey VC010 type 2 USB webcam detected. [ 455.628502][T12771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.629756][T12771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.688347][ T5794] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 455.688367][ T5794] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 455.688378][ T5794] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 455.688701][ T5794] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 455.765878][ T5794] usb 8-1: USB disconnect, device number 96 [ 455.916569][ T5795] pwc: recv_control_msg error -32 req 02 val 2b00 [ 455.917216][ T5795] pwc: recv_control_msg error -32 req 02 val 2700 [ 455.917746][ T5795] pwc: recv_control_msg error -32 req 02 val 2c00 [ 455.918260][ T5795] pwc: recv_control_msg error -32 req 04 val 1000 [ 455.922667][ T1848] usb 7-1: new full-speed USB device number 100 using dummy_hcd [ 456.008555][T12775] FAULT_INJECTION: forcing a failure. [ 456.008555][T12775] name failslab, interval 1, probability 0, space 0, times 0 [ 456.008579][T12775] CPU: 1 UID: 0 PID: 12775 Comm: syz.7.2202 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 456.008597][T12775] Tainted: [L]=SOFTLOCKUP [ 456.008602][T12775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 456.008608][T12775] Call Trace: [ 456.008613][T12775] [ 456.008618][T12775] dump_stack_lvl+0xe8/0x150 [ 456.008638][T12775] should_fail_ex+0x46b/0x600 [ 456.008656][T12775] should_failslab+0xa8/0x100 [ 456.008671][T12775] __kmalloc_noprof+0xdf/0x7b0 [ 456.008686][T12775] ? mutex_rt_init_lockdep+0x66/0x80 [ 456.008701][T12775] ? security_task_alloc+0x4d/0x330 [ 456.008720][T12775] security_task_alloc+0x4d/0x330 [ 456.008736][T12775] copy_process+0x1c4c/0x43d0 [ 456.008756][T12775] ? copy_process+0xd4e/0x43d0 [ 456.008779][T12775] ? __pfx_copy_process+0x10/0x10 [ 456.008799][T12775] vhost_task_create+0x1f9/0x380 [ 456.008812][T12775] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 456.008827][T12775] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 456.008842][T12775] ? __pfx_vhost_task_create+0x10/0x10 [ 456.008857][T12775] ? __pfx_vhost_task_fn+0x10/0x10 [ 456.008870][T12775] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 456.008886][T12775] ? lockdep_hardirqs_on+0x7a/0x110 [ 456.008901][T12775] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 456.008915][T12775] ? mutex_lock_nested+0x152/0x1d0 [ 456.008926][T12775] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 456.008944][T12775] kvm_mmu_post_init_vm+0x147/0x2d0 [ 456.008960][T12775] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 456.008980][T12775] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 456.008992][T12775] ? do_raw_spin_lock+0x12b/0x2f0 [ 456.009009][T12775] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 456.009023][T12775] ? lockdep_hardirqs_on+0x7a/0x110 [ 456.009036][T12775] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 456.009050][T12775] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 456.009065][T12775] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 456.009078][T12775] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 456.009092][T12775] ? lockdep_hardirqs_on+0x7a/0x110 [ 456.009105][T12775] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 456.009122][T12775] ? rt_write_unlock+0x190/0x230 [ 456.009136][T12775] kvm_vcpu_ioctl+0xa65/0xfe0 [ 456.009153][T12775] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 456.009182][T12775] ? __fget_files+0x2a/0x420 [ 456.009196][T12775] ? __fget_files+0x2a/0x420 [ 456.009207][T12775] ? __fget_files+0x3a6/0x420 [ 456.009218][T12775] ? __fget_files+0x2a/0x420 [ 456.009231][T12775] ? bpf_lsm_file_ioctl+0x9/0x20 [ 456.009246][T12775] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 456.009260][T12775] __se_sys_ioctl+0xff/0x170 [ 456.009275][T12775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.009286][T12775] do_syscall_64+0x174/0x580 [ 456.009300][T12775] ? trace_irq_disable+0x3b/0x140 [ 456.009312][T12775] ? clear_bhb_loop+0x40/0x90 [ 456.009324][T12775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.009334][T12775] RIP: 0033:0x7ff0a98dce59 [ 456.009345][T12775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.009354][T12775] RSP: 002b:00007ff0a7b15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.009366][T12775] RAX: ffffffffffffffda RBX: 00007ff0a9b56090 RCX: 00007ff0a98dce59 [ 456.009373][T12775] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 456.009380][T12775] RBP: 00007ff0a7b15090 R08: 0000000000000000 R09: 0000000000000000 [ 456.009386][T12775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.009392][T12775] R13: 00007ff0a9b56128 R14: 00007ff0a9b56090 R15: 00007fff7ab46ac8 [ 456.009408][T12775] [ 456.050953][ T1848] usb 7-1: device descriptor read/64, error -71 [ 456.132469][ T5795] pwc: recv_control_msg error -32 req 04 val 1400 [ 456.175483][ T5795] pwc: recv_control_msg error -32 req 02 val 2000 [ 456.181477][ T5795] pwc: recv_control_msg error -32 req 02 val 2100 [ 456.182559][ T5795] pwc: recv_control_msg error -32 req 04 val 1500 [ 456.310452][ T1848] usb 7-1: new full-speed USB device number 101 using dummy_hcd [ 456.441087][ T1848] usb 7-1: device descriptor read/64, error -71 [ 456.447073][ T5795] pwc: recv_control_msg error -71 req 02 val 2400 [ 456.447525][ T5795] pwc: recv_control_msg error -71 req 02 val 2600 [ 456.447958][ T5795] pwc: recv_control_msg error -71 req 02 val 2900 [ 456.448554][ T5795] pwc: recv_control_msg error -71 req 02 val 2800 [ 456.450263][ T5795] pwc: recv_control_msg error -71 req 04 val 1100 [ 456.452682][ T5795] pwc: recv_control_msg error -71 req 04 val 1200 [ 456.483118][ T5795] pwc: Registered as video103. [ 456.493175][ T5795] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input36 [ 456.529805][ T5795] usb 9-1: USB disconnect, device number 89 [ 456.554765][ T1848] usb usb7-port1: attempt power cycle [ 456.901861][ T1848] usb 7-1: new full-speed USB device number 102 using dummy_hcd [ 456.923967][ T1848] usb 7-1: device descriptor read/8, error -71 [ 457.120984][ T9] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 457.161066][ T1848] usb 7-1: new full-speed USB device number 103 using dummy_hcd [ 457.194228][ T1848] usb 7-1: device descriptor read/8, error -71 [ 457.282949][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 457.282979][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 457.283112][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 457.283135][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 457.283173][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 457.283196][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.290765][ T9] usb 8-1: config 0 descriptor?? [ 457.301236][ T1848] usb usb7-port1: unable to enumerate USB device [ 457.501166][ T5705] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 457.532754][ T9] hdpvr 8-1:0.0: firmware version 0x0 dated [ 457.532773][ T9] hdpvr 8-1:0.0: untested firmware, the driver might not work. [ 457.666577][ T5705] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 457.666599][ T5705] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 457.669000][ T5705] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 457.669017][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.669037][ T5705] usb 6-1: Product: syz [ 457.669045][ T5705] usb 6-1: Manufacturer: syz [ 457.669053][ T5705] usb 6-1: SerialNumber: syz [ 457.736756][ T5705] usb 6-1: config 0 descriptor?? [ 457.748860][ T5705] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 457.776523][T12812] FAULT_INJECTION: forcing a failure. [ 457.776523][T12812] name failslab, interval 1, probability 0, space 0, times 0 [ 457.776557][T12812] CPU: 1 UID: 0 PID: 12812 Comm: syz.8.2219 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 457.776583][T12812] Tainted: [L]=SOFTLOCKUP [ 457.776590][T12812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 457.776601][T12812] Call Trace: [ 457.776609][T12812] [ 457.776618][T12812] dump_stack_lvl+0xe8/0x150 [ 457.776645][T12812] should_fail_ex+0x46b/0x600 [ 457.776664][T12812] should_failslab+0xa8/0x100 [ 457.776679][T12812] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 457.776705][T12812] ? __get_vm_area_node+0x13f/0x300 [ 457.776731][T12812] __get_vm_area_node+0x13f/0x300 [ 457.776757][T12812] __vmalloc_node_range_noprof+0x36a/0x1750 [ 457.776781][T12812] ? copy_process+0x837/0x43d0 [ 457.776804][T12812] ? percpu_ref_get_many+0x19/0x140 [ 457.776832][T12812] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 457.776849][T12812] ? rcu_is_watching+0x15/0xb0 [ 457.776877][T12812] ? memcpy_and_pad+0x48/0x80 [ 457.776906][T12812] __vmalloc_node_noprof+0xc2/0x100 [ 457.776928][T12812] ? copy_process+0x837/0x43d0 [ 457.776952][T12812] ? copy_process+0x837/0x43d0 [ 457.776973][T12812] dup_task_struct+0x298/0x860 [ 457.776987][T12812] ? rt_spin_unlock+0x160/0x200 [ 457.777001][T12812] copy_process+0x837/0x43d0 [ 457.777052][T12812] ? __pfx_copy_process+0x10/0x10 [ 457.777101][T12812] vhost_task_create+0x1f9/0x380 [ 457.777122][T12812] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 457.777140][T12812] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 457.777155][T12812] ? __pfx_vhost_task_create+0x10/0x10 [ 457.777171][T12812] ? __pfx_vhost_task_fn+0x10/0x10 [ 457.777195][T12812] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 457.777223][T12812] ? lockdep_hardirqs_on+0x7a/0x110 [ 457.777250][T12812] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 457.777277][T12812] ? mutex_lock_nested+0x152/0x1d0 [ 457.777295][T12812] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 457.777312][T12812] kvm_mmu_post_init_vm+0x147/0x2d0 [ 457.777329][T12812] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 457.777359][T12812] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 457.777384][T12812] ? do_raw_spin_lock+0x12b/0x2f0 [ 457.777416][T12812] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 457.777443][T12812] ? lockdep_hardirqs_on+0x7a/0x110 [ 457.777463][T12812] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 457.777477][T12812] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 457.777492][T12812] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 457.777512][T12812] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 457.777539][T12812] ? lockdep_hardirqs_on+0x7a/0x110 [ 457.777566][T12812] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 457.777593][T12812] ? rt_write_unlock+0x190/0x230 [ 457.777619][T12812] kvm_vcpu_ioctl+0xa65/0xfe0 [ 457.777639][T12812] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 457.777666][T12812] ? __fget_files+0x2a/0x420 [ 457.777691][T12812] ? __fget_files+0x2a/0x420 [ 457.777713][T12812] ? __fget_files+0x3a6/0x420 [ 457.777733][T12812] ? __fget_files+0x2a/0x420 [ 457.777759][T12812] ? bpf_lsm_file_ioctl+0x9/0x20 [ 457.777784][T12812] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 457.777798][T12812] __se_sys_ioctl+0xff/0x170 [ 457.777812][T12812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.777824][T12812] do_syscall_64+0x174/0x580 [ 457.777849][T12812] ? trace_irq_disable+0x3b/0x140 [ 457.777871][T12812] ? clear_bhb_loop+0x40/0x90 [ 457.777895][T12812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.777914][T12812] RIP: 0033:0x7f42a73fce59 [ 457.777932][T12812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.777946][T12812] RSP: 002b:00007f42a5656028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 457.777958][T12812] RAX: ffffffffffffffda RBX: 00007f42a7675fa0 RCX: 00007f42a73fce59 [ 457.777966][T12812] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 457.777972][T12812] RBP: 00007f42a5656090 R08: 0000000000000000 R09: 0000000000000000 [ 457.777978][T12812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.777984][T12812] R13: 00007f42a7676038 R14: 00007f42a7675fa0 R15: 00007ffdf1f543d8 [ 457.778013][T12812] [ 458.242989][ T9] hdpvr 8-1:0.0: Could not setup controls [ 458.245364][ T9] hdpvr 8-1:0.0: registering videodev failed [ 458.284050][ T9] hdpvr 8-1:0.0: probe with driver hdpvr failed with error -71 [ 458.300391][ T9] usb 8-1: USB disconnect, device number 97 [ 458.548125][ T5705] gspca_sunplus: reg_r err -71 [ 458.548212][ T5705] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 458.570126][ T5705] usb 6-1: USB disconnect, device number 104 [ 458.828988][T12826] FAULT_INJECTION: forcing a failure. [ 458.828988][T12826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.829022][T12826] CPU: 1 UID: 0 PID: 12826 Comm: syz.8.2223 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 458.829047][T12826] Tainted: [L]=SOFTLOCKUP [ 458.829054][T12826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 458.829065][T12826] Call Trace: [ 458.829073][T12826] [ 458.829082][T12826] dump_stack_lvl+0xe8/0x150 [ 458.829109][T12826] should_fail_ex+0x46b/0x600 [ 458.829142][T12826] _copy_from_user+0x2d/0xb0 [ 458.829164][T12826] video_usercopy+0xac7/0x1450 [ 458.829195][T12826] ? __pfx___video_do_ioctl+0x10/0x10 [ 458.829220][T12826] ? __pfx_video_usercopy+0x10/0x10 [ 458.829254][T12826] ? __fget_files+0x2a/0x420 [ 458.829279][T12826] ? __fget_files+0x2a/0x420 [ 458.829299][T12826] ? __fget_files+0x3a6/0x420 [ 458.829324][T12826] v4l2_ioctl+0x190/0x1e0 [ 458.829347][T12826] ? __pfx_v4l2_ioctl+0x10/0x10 [ 458.829373][T12826] __se_sys_ioctl+0xff/0x170 [ 458.829399][T12826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.829420][T12826] do_syscall_64+0x174/0x580 [ 458.829446][T12826] ? trace_irq_disable+0x3b/0x140 [ 458.829468][T12826] ? clear_bhb_loop+0x40/0x90 [ 458.829490][T12826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.829508][T12826] RIP: 0033:0x7f42a73fce59 [ 458.829533][T12826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.829549][T12826] RSP: 002b:00007f42a5656028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 458.829569][T12826] RAX: ffffffffffffffda RBX: 00007f42a7675fa0 RCX: 00007f42a73fce59 [ 458.829584][T12826] RDX: 0000200000000080 RSI: 00000000c0285628 RDI: 0000000000000003 [ 458.829597][T12826] RBP: 00007f42a5656090 R08: 0000000000000000 R09: 0000000000000000 [ 458.829610][T12826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.829621][T12826] R13: 00007f42a7676038 R14: 00007f42a7675fa0 R15: 00007ffdf1f543d8 [ 458.829651][T12826] [ 459.457004][T12854] FAULT_INJECTION: forcing a failure. [ 459.457004][T12854] name failslab, interval 1, probability 0, space 0, times 0 [ 459.457027][T12854] CPU: 1 UID: 0 PID: 12854 Comm: syz.8.2236 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 459.457046][T12854] Tainted: [L]=SOFTLOCKUP [ 459.457053][T12854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 459.457065][T12854] Call Trace: [ 459.457072][T12854] [ 459.457081][T12854] dump_stack_lvl+0xe8/0x150 [ 459.457108][T12854] should_fail_ex+0x46b/0x600 [ 459.457140][T12854] should_failslab+0xa8/0x100 [ 459.457166][T12854] kmem_cache_alloc_noprof+0x87/0x680 [ 459.457180][T12854] ? skb_clone+0x212/0x3a0 [ 459.457192][T12854] skb_clone+0x212/0x3a0 [ 459.457204][T12854] __netlink_deliver_tap+0x424/0x8b0 [ 459.457225][T12854] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.457240][T12854] netlink_deliver_tap+0x19c/0x1b0 [ 459.457256][T12854] netlink_unicast+0x754/0x920 [ 459.457275][T12854] netlink_sendmsg+0x813/0xb40 [ 459.457289][T12854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.457300][T12854] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 459.457315][T12854] ? aa_sock_msg_perm+0x122/0x200 [ 459.457327][T12854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.457336][T12854] sock_sendmsg_nosec+0x13a/0x180 [ 459.457349][T12854] ____sys_sendmsg+0x55c/0x870 [ 459.457367][T12854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.457386][T12854] ? import_iovec+0x73/0xa0 [ 459.457400][T12854] ___sys_sendmsg+0x2a5/0x360 [ 459.457414][T12854] ? __lock_acquire+0x6b5/0x2d10 [ 459.457435][T12854] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.457466][T12854] ? __fget_files+0x2a/0x420 [ 459.457478][T12854] ? __fget_files+0x3a6/0x420 [ 459.457494][T12854] __x64_sys_sendmsg+0x1c3/0x2a0 [ 459.457510][T12854] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.457530][T12854] ? __pfx_ksys_write+0x10/0x10 [ 459.457548][T12854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.457559][T12854] do_syscall_64+0x174/0x580 [ 459.457575][T12854] ? trace_irq_disable+0x3b/0x140 [ 459.457587][T12854] ? clear_bhb_loop+0x40/0x90 [ 459.457599][T12854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.457609][T12854] RIP: 0033:0x7f42a73fce59 [ 459.457620][T12854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.457630][T12854] RSP: 002b:00007f42a5656028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.457642][T12854] RAX: ffffffffffffffda RBX: 00007f42a7675fa0 RCX: 00007f42a73fce59 [ 459.457650][T12854] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 459.457657][T12854] RBP: 00007f42a5656090 R08: 0000000000000000 R09: 0000000000000000 [ 459.457663][T12854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.457670][T12854] R13: 00007f42a7676038 R14: 00007f42a7675fa0 R15: 00007ffdf1f543d8 [ 459.457685][T12854] [ 460.044890][T12870] FAULT_INJECTION: forcing a failure. [ 460.044890][T12870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.044925][T12870] CPU: 1 UID: 0 PID: 12870 Comm: syz.8.2244 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 460.044952][T12870] Tainted: [L]=SOFTLOCKUP [ 460.044959][T12870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 460.044971][T12870] Call Trace: [ 460.044978][T12870] [ 460.044987][T12870] dump_stack_lvl+0xe8/0x150 [ 460.045020][T12870] should_fail_ex+0x46b/0x600 [ 460.045053][T12870] _copy_from_user+0x2d/0xb0 [ 460.045076][T12870] iommufd_fops_ioctl+0x461/0x5d0 [ 460.045103][T12870] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 460.045130][T12870] ? __fget_files+0x2a/0x420 [ 460.045155][T12870] ? __fget_files+0x2a/0x420 [ 460.045176][T12870] ? bpf_lsm_file_ioctl+0x9/0x20 [ 460.045200][T12870] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 460.045221][T12870] __se_sys_ioctl+0xff/0x170 [ 460.045247][T12870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.045265][T12870] do_syscall_64+0x174/0x580 [ 460.045290][T12870] ? trace_irq_disable+0x3b/0x140 [ 460.045309][T12870] ? clear_bhb_loop+0x40/0x90 [ 460.045330][T12870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.045346][T12870] RIP: 0033:0x7f42a73fce59 [ 460.045363][T12870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.045379][T12870] RSP: 002b:00007f42a5656028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.045397][T12870] RAX: ffffffffffffffda RBX: 00007f42a7675fa0 RCX: 00007f42a73fce59 [ 460.045409][T12870] RDX: 0000200000000240 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 460.045420][T12870] RBP: 00007f42a5656090 R08: 0000000000000000 R09: 0000000000000000 [ 460.045430][T12870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.045441][T12870] R13: 00007f42a7676038 R14: 00007f42a7675fa0 R15: 00007ffdf1f543d8 [ 460.045473][T12870] [ 460.099770][T12872] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2245'. [ 460.531412][ T5719] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 460.543126][ T5795] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 460.607542][T12889] FAULT_INJECTION: forcing a failure. [ 460.607542][T12889] name failslab, interval 1, probability 0, space 0, times 0 [ 460.607564][T12889] CPU: 1 UID: 0 PID: 12889 Comm: syz.6.2251 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 460.607580][T12889] Tainted: [L]=SOFTLOCKUP [ 460.607584][T12889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 460.607590][T12889] Call Trace: [ 460.607595][T12889] [ 460.607600][T12889] dump_stack_lvl+0xe8/0x150 [ 460.607618][T12889] should_fail_ex+0x46b/0x600 [ 460.607636][T12889] should_failslab+0xa8/0x100 [ 460.607651][T12889] __kmalloc_noprof+0xdf/0x7b0 [ 460.607663][T12889] ? mutex_rt_init_lockdep+0x66/0x80 [ 460.607679][T12889] ? security_task_alloc+0x4d/0x330 [ 460.607697][T12889] security_task_alloc+0x4d/0x330 [ 460.607722][T12889] copy_process+0x1c4c/0x43d0 [ 460.607741][T12889] ? copy_process+0xd4e/0x43d0 [ 460.607764][T12889] ? __pfx_copy_process+0x10/0x10 [ 460.607799][T12889] vhost_task_create+0x1f9/0x380 [ 460.607820][T12889] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 460.607846][T12889] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 460.607872][T12889] ? __pfx_vhost_task_create+0x10/0x10 [ 460.607896][T12889] ? __pfx_vhost_task_fn+0x10/0x10 [ 460.607909][T12889] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 460.607925][T12889] ? lockdep_hardirqs_on+0x7a/0x110 [ 460.607939][T12889] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 460.607953][T12889] ? mutex_lock_nested+0x152/0x1d0 [ 460.607964][T12889] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 460.607982][T12889] kvm_mmu_post_init_vm+0x147/0x2d0 [ 460.607999][T12889] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 460.608018][T12889] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 460.608031][T12889] ? do_raw_spin_lock+0x12b/0x2f0 [ 460.608047][T12889] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 460.608061][T12889] ? lockdep_hardirqs_on+0x7a/0x110 [ 460.608074][T12889] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 460.608088][T12889] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 460.608103][T12889] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 460.608115][T12889] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 460.608130][T12889] ? lockdep_hardirqs_on+0x7a/0x110 [ 460.608144][T12889] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 460.608157][T12889] ? rt_write_unlock+0x190/0x230 [ 460.608171][T12889] kvm_vcpu_ioctl+0xa65/0xfe0 [ 460.608188][T12889] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 460.608214][T12889] ? __fget_files+0x2a/0x420 [ 460.608229][T12889] ? __fget_files+0x2a/0x420 [ 460.608240][T12889] ? __fget_files+0x3a6/0x420 [ 460.608250][T12889] ? __fget_files+0x2a/0x420 [ 460.608263][T12889] ? bpf_lsm_file_ioctl+0x9/0x20 [ 460.608278][T12889] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 460.608292][T12889] __se_sys_ioctl+0xff/0x170 [ 460.608308][T12889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.608319][T12889] do_syscall_64+0x174/0x580 [ 460.608334][T12889] ? trace_irq_disable+0x3b/0x140 [ 460.608346][T12889] ? clear_bhb_loop+0x40/0x90 [ 460.608359][T12889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.608369][T12889] RIP: 0033:0x7fc8dc92ce59 [ 460.608379][T12889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.608388][T12889] RSP: 002b:00007fc8dab65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.608400][T12889] RAX: ffffffffffffffda RBX: 00007fc8dcba6090 RCX: 00007fc8dc92ce59 [ 460.608407][T12889] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 460.608414][T12889] RBP: 00007fc8dab65090 R08: 0000000000000000 R09: 0000000000000000 [ 460.608420][T12889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.608428][T12889] R13: 00007fc8dcba6128 R14: 00007fc8dcba6090 R15: 00007ffc9ea2b178 [ 460.608446][T12889] [ 460.680915][ T5719] usb 6-1: Using ep0 maxpacket: 32 [ 460.683245][ T5719] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.685603][ T5719] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 460.685630][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.685649][ T5719] usb 6-1: Product: syz [ 460.685664][ T5719] usb 6-1: Manufacturer: syz [ 460.685677][ T5719] usb 6-1: SerialNumber: syz [ 460.691439][ T5795] usb 9-1: Using ep0 maxpacket: 8 [ 460.695217][ T5719] usb 6-1: config 0 descriptor?? [ 460.714151][ T5719] cdc_ether 6-1:0.0: missing cdc header descriptor [ 460.717417][ T5719] usb 6-1: unsupported MDLM descriptors [ 460.771489][ T5795] usb 9-1: config 0 has no interfaces? [ 460.801662][ T5795] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 460.801689][ T5795] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.801708][ T5795] usb 9-1: Product: syz [ 460.801799][ T5795] usb 9-1: Manufacturer: syz [ 460.801813][ T5795] usb 9-1: SerialNumber: syz [ 460.815785][ T5795] usb 9-1: config 0 descriptor?? [ 461.019737][T12878] FAULT_INJECTION: forcing a failure. [ 461.019737][T12878] name failslab, interval 1, probability 0, space 0, times 0 [ 461.019777][T12878] CPU: 1 UID: 0 PID: 12878 Comm: syz.8.2246 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 461.019804][T12878] Tainted: [L]=SOFTLOCKUP [ 461.019811][T12878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 461.019822][T12878] Call Trace: [ 461.019829][T12878] [ 461.019837][T12878] dump_stack_lvl+0xe8/0x150 [ 461.019866][T12878] should_fail_ex+0x46b/0x600 [ 461.019898][T12878] should_failslab+0xa8/0x100 [ 461.019924][T12878] __kmalloc_noprof+0xdf/0x7b0 [ 461.019946][T12878] ? drm_atomic_commit_init+0xa1/0x3b0 [ 461.019975][T12878] drm_atomic_commit_init+0xa1/0x3b0 [ 461.020001][T12878] drm_atomic_commit_alloc+0xbc/0x100 [ 461.020026][T12878] drm_mode_atomic_ioctl+0x4ae/0xdd0 [ 461.020054][T12878] ? do_raw_spin_lock+0x12b/0x2f0 [ 461.020083][T12878] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 461.020129][T12878] ? rt_spin_unlock+0x14f/0x200 [ 461.020156][T12878] ? rt_spin_unlock+0x160/0x200 [ 461.020179][T12878] ? drm_is_current_master+0x1a2/0x210 [ 461.020209][T12878] drm_ioctl_kernel+0x2e2/0x3b0 [ 461.020236][T12878] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 461.020263][T12878] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 461.020293][T12878] drm_ioctl+0x6c0/0xb80 [ 461.020321][T12878] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 461.020351][T12878] ? __pfx_drm_ioctl+0x10/0x10 [ 461.020385][T12878] ? __fget_files+0x2a/0x420 [ 461.020409][T12878] ? bpf_lsm_file_ioctl+0x9/0x20 [ 461.020435][T12878] ? __pfx_drm_ioctl+0x10/0x10 [ 461.020457][T12878] __se_sys_ioctl+0xff/0x170 [ 461.020482][T12878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.020503][T12878] do_syscall_64+0x174/0x580 [ 461.020528][T12878] ? trace_irq_disable+0x3b/0x140 [ 461.020548][T12878] ? clear_bhb_loop+0x40/0x90 [ 461.020570][T12878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.020589][T12878] RIP: 0033:0x7f42a73fce59 [ 461.020605][T12878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.020622][T12878] RSP: 002b:00007f42a5656028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.020641][T12878] RAX: ffffffffffffffda RBX: 00007f42a7675fa0 RCX: 00007f42a73fce59 [ 461.020655][T12878] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000013 [ 461.020667][T12878] RBP: 00007f42a5656090 R08: 0000000000000000 R09: 0000000000000000 [ 461.020679][T12878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.020690][T12878] R13: 00007f42a7676038 R14: 00007f42a7675fa0 R15: 00007ffdf1f543d8 [ 461.020719][T12878] [ 461.055874][T12879] ISOFS: Unable to identify CD-ROM format. [ 461.381923][ T5795] usb 6-1: USB disconnect, device number 105 [ 461.426187][ T5719] usb 9-1: USB disconnect, device number 90 [ 461.911079][ T5719] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 462.064475][ T5719] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.064510][ T5719] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.064543][ T5719] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 462.064566][ T5719] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.077069][ T5719] usb 7-1: config 0 descriptor?? [ 462.369200][T12913] FAULT_INJECTION: forcing a failure. [ 462.369200][T12913] name failslab, interval 1, probability 0, space 0, times 0 [ 462.369234][T12913] CPU: 1 UID: 0 PID: 12913 Comm: syz.8.2262 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 462.369262][T12913] Tainted: [L]=SOFTLOCKUP [ 462.369270][T12913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 462.369281][T12913] Call Trace: [ 462.369289][T12913] [ 462.369297][T12913] dump_stack_lvl+0xe8/0x150 [ 462.369324][T12913] should_fail_ex+0x46b/0x600 [ 462.369357][T12913] should_failslab+0xa8/0x100 [ 462.369383][T12913] __kmalloc_noprof+0xdf/0x7b0 [ 462.369406][T12913] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 462.369436][T12913] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 462.369467][T12913] genl_family_rcv_msg_doit+0xd9/0x330 [ 462.369491][T12913] ? __asan_memcpy+0x40/0x70 [ 462.369514][T12913] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 462.369545][T12913] ? apparmor_capable+0x126/0x170 [ 462.369572][T12913] ? bpf_lsm_capable+0x9/0x20 [ 462.369589][T12913] ? security_capable+0x7e/0x2c0 [ 462.369615][T12913] genl_rcv_msg+0x61c/0x7a0 [ 462.369644][T12913] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.369666][T12913] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 462.369690][T12913] ? __pfx_nl802154_set_llsec_params+0x10/0x10 [ 462.369716][T12913] ? __pfx_nl802154_post_doit+0x10/0x10 [ 462.369753][T12913] netlink_rcv_skb+0x232/0x4b0 [ 462.369781][T12913] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.369803][T12913] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 462.369840][T12913] ? netlink_deliver_tap+0x2e/0x1b0 [ 462.369868][T12913] ? netlink_deliver_tap+0x2e/0x1b0 [ 462.369901][T12913] genl_rcv+0x28/0x40 [ 462.369921][T12913] netlink_unicast+0x780/0x920 [ 462.369959][T12913] netlink_sendmsg+0x813/0xb40 [ 462.369986][T12913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.370007][T12913] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 462.370041][T12913] ? aa_sock_msg_perm+0x122/0x200 [ 462.370063][T12913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.370080][T12913] sock_sendmsg_nosec+0x13a/0x180 [ 462.370112][T12913] ____sys_sendmsg+0x55c/0x870 [ 462.370147][T12913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.370184][T12913] ? import_iovec+0x73/0xa0 [ 462.370210][T12913] ___sys_sendmsg+0x2a5/0x360 [ 462.370237][T12913] ? __lock_acquire+0x6b5/0x2d10 [ 462.370263][T12913] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.370327][T12913] ? __fget_files+0x2a/0x420 [ 462.370348][T12913] ? __fget_files+0x3a6/0x420 [ 462.370380][T12913] __x64_sys_sendmsg+0x1c3/0x2a0 [ 462.370410][T12913] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 462.370447][T12913] ? __pfx_ksys_write+0x10/0x10 [ 462.370479][T12913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.370497][T12913] do_syscall_64+0x174/0x580 [ 462.370524][T12913] ? clear_bhb_loop+0x40/0x90 [ 462.370546][T12913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.370564][T12913] RIP: 0033:0x7f42a73fce59 [ 462.370582][T12913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.370597][T12913] RSP: 002b:00007f42a5656028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.370618][T12913] RAX: ffffffffffffffda RBX: 00007f42a7675fa0 RCX: 00007f42a73fce59 [ 462.370631][T12913] RDX: 0000000020040400 RSI: 00002000000001c0 RDI: 0000000000000005 [ 462.370643][T12913] RBP: 00007f42a5656090 R08: 0000000000000000 R09: 0000000000000000 [ 462.370656][T12913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.370668][T12913] R13: 00007f42a7676038 R14: 00007f42a7675fa0 R15: 00007ffdf1f543d8 [ 462.370699][T12913] [ 462.545548][ T5719] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 462.545674][ T5719] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 462.560405][ T6879] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 462.569387][ T5719] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.0011/input/input37 [ 462.783147][ T6879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.783180][ T6879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.783218][ T6879] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 462.783242][ T6879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.911812][ T6879] usb 6-1: config 0 descriptor?? [ 463.256734][ T5719] cm6533_jd 0003:0D8C:0022.0011: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 463.269705][ T5719] usb 7-1: USB disconnect, device number 104 [ 463.454035][T12932] fido_id[12932]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 463.502067][T12934] FAULT_INJECTION: forcing a failure. [ 463.502067][T12934] name failslab, interval 1, probability 0, space 0, times 0 [ 463.502100][T12934] CPU: 1 UID: 0 PID: 12934 Comm: syz.8.2269 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 463.502128][T12934] Tainted: [L]=SOFTLOCKUP [ 463.502135][T12934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 463.502147][T12934] Call Trace: [ 463.502154][T12934] [ 463.502163][T12934] dump_stack_lvl+0xe8/0x150 [ 463.502190][T12934] should_fail_ex+0x46b/0x600 [ 463.502220][T12934] should_failslab+0xa8/0x100 [ 463.502245][T12934] kmem_cache_alloc_noprof+0x87/0x680 [ 463.502267][T12934] ? skb_clone+0x212/0x3a0 [ 463.502289][T12934] skb_clone+0x212/0x3a0 [ 463.502310][T12934] __netlink_deliver_tap+0x424/0x8b0 [ 463.502350][T12934] ? netlink_deliver_tap+0x2e/0x1b0 [ 463.502383][T12934] netlink_deliver_tap+0x19c/0x1b0 [ 463.502412][T12934] netlink_unicast+0x754/0x920 [ 463.502447][T12934] netlink_sendmsg+0x813/0xb40 [ 463.502475][T12934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.502495][T12934] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 463.502523][T12934] ? aa_sock_msg_perm+0x122/0x200 [ 463.502545][T12934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.502563][T12934] sock_sendmsg_nosec+0x13a/0x180 [ 463.502589][T12934] ____sys_sendmsg+0x55c/0x870 [ 463.502621][T12934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.502658][T12934] ? import_iovec+0x73/0xa0 [ 463.502683][T12934] ___sys_sendmsg+0x2a5/0x360 [ 463.502710][T12934] ? __lock_acquire+0x6b5/0x2d10 [ 463.502736][T12934] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.502796][T12934] ? __fget_files+0x2a/0x420 [ 463.502818][T12934] ? __fget_files+0x3a6/0x420 [ 463.502849][T12934] __x64_sys_sendmsg+0x1c3/0x2a0 [ 463.502880][T12934] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 463.502917][T12934] ? __pfx_ksys_write+0x10/0x10 [ 463.502969][T12934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.502991][T12934] do_syscall_64+0x174/0x580 [ 463.503023][T12934] ? trace_irq_disable+0x3b/0x140 [ 463.503045][T12934] ? clear_bhb_loop+0x40/0x90 [ 463.503069][T12934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.503087][T12934] RIP: 0033:0x7f42a73fce59 [ 463.503106][T12934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.503123][T12934] RSP: 002b:00007f42a5656028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.503144][T12934] RAX: ffffffffffffffda RBX: 00007f42a7675fa0 RCX: 00007f42a73fce59 [ 463.503158][T12934] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 463.503170][T12934] RBP: 00007f42a5656090 R08: 0000000000000000 R09: 0000000000000000 [ 463.503183][T12934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.503194][T12934] R13: 00007f42a7676038 R14: 00007f42a7675fa0 R15: 00007ffdf1f543d8 [ 463.503225][T12934] [ 463.620574][ T6879] usbhid 6-1:0.0: can't add hid device: -32 [ 463.620692][ T6879] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 463.648987][T12908] sg_write: process 1229 (syz.5.2260) changed security contexts after opening file descriptor, this is not allowed. [ 463.886026][ T6879] usb 6-1: USB disconnect, device number 106 [ 464.590939][ T6879] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 464.744014][ T6879] usb 8-1: Using ep0 maxpacket: 16 [ 464.746232][ T6879] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 464.746285][ T6879] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 464.746325][ T6879] usb 8-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 464.746348][ T6879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.772303][ T6879] usb 8-1: config 0 descriptor?? [ 465.188827][T12999] netlink: 'syz.6.2296': attribute type 4 has an invalid length. [ 465.188880][T12999] netlink: 'syz.6.2296': attribute type 64 has an invalid length. [ 465.188889][T12999] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2296'. [ 465.312968][T13003] IPVS: sync thread started: state = MASTER, mcast_ifn = gretap0, syncid = 4, id = 0 [ 465.313815][T13002] IPVS: stopping master sync thread 13003 ... [ 467.255069][ T6879] usbhid 8-1:0.0: can't add hid device: -71 [ 467.255194][ T6879] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 467.268365][ T6879] usb 8-1: USB disconnect, device number 98 [ 467.293560][ T5795] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 467.463116][ T5795] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 467.463144][ T5795] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.463162][ T5795] usb 7-1: config 0 has no interface number 0 [ 467.467195][ T5795] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 467.467224][ T5795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.467244][ T5795] usb 7-1: Product: syz [ 467.467259][ T5795] usb 7-1: Manufacturer: syz [ 467.467274][ T5795] usb 7-1: SerialNumber: syz [ 467.530079][ T5795] usb 7-1: config 0 descriptor?? [ 467.540696][ T5795] uvcvideo 7-1:0.64: probe with driver uvcvideo failed with error -22 [ 467.781672][ T6879] usb 7-1: USB disconnect, device number 105 [ 468.276183][T13084] netlink: 'syz.5.2334': attribute type 4 has an invalid length. [ 468.276197][T13084] netlink: 'syz.5.2334': attribute type 64 has an invalid length. [ 468.276204][T13084] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2334'. [ 468.778033][T13110] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2342'. [ 468.778059][T13110] openvswitch: netlink: Message has 512 unknown bytes. [ 468.900919][ T6879] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 468.925630][T13113] XFS (nullb0): Invalid superblock magic number [ 469.108618][ T6879] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 469.108645][ T6879] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.108664][ T6879] usb 8-1: config 0 has no interface number 0 [ 469.116131][ T6879] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 469.116159][ T6879] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.116178][ T6879] usb 8-1: Product: syz [ 469.116192][ T6879] usb 8-1: Manufacturer: syz [ 469.116207][ T6879] usb 8-1: SerialNumber: syz [ 469.130309][ T6879] usb 8-1: config 0 descriptor?? [ 469.143322][ T6879] uvcvideo 8-1:0.64: probe with driver uvcvideo failed with error -22 [ 469.391421][ T6879] usb 8-1: USB disconnect, device number 99 [ 469.821060][ T4926] Bluetooth: hci4: command 0x0406 tx timeout [ 470.481900][ T5795] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 470.655423][ T5795] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.655476][ T5795] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 470.655499][ T5795] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.679211][ T5795] usb 8-1: config 0 descriptor?? [ 470.902972][T13194] netlink: 'syz.5.2382': attribute type 4 has an invalid length. [ 470.902987][T13194] netlink: 'syz.5.2382': attribute type 64 has an invalid length. [ 470.902995][T13194] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2382'. [ 470.906571][ T5610] usb 8-1: USB disconnect, device number 100 [ 470.994981][T13197] FAULT_INJECTION: forcing a failure. [ 470.994981][T13197] name failslab, interval 1, probability 0, space 0, times 0 [ 470.995006][T13197] CPU: 0 UID: 0 PID: 13197 Comm: syz.8.2380 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 470.995021][T13197] Tainted: [L]=SOFTLOCKUP [ 470.995025][T13197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 470.995032][T13197] Call Trace: [ 470.995037][T13197] [ 470.995042][T13197] dump_stack_lvl+0xe8/0x150 [ 470.995060][T13197] should_fail_ex+0x46b/0x600 [ 470.995079][T13197] should_failslab+0xa8/0x100 [ 470.995093][T13197] __kmalloc_noprof+0xdf/0x7b0 [ 470.995106][T13197] ? mutex_rt_init_lockdep+0x66/0x80 [ 470.995121][T13197] ? security_task_alloc+0x4d/0x330 [ 470.995140][T13197] security_task_alloc+0x4d/0x330 [ 470.995156][T13197] copy_process+0x1c4c/0x43d0 [ 470.995176][T13197] ? copy_process+0xd4e/0x43d0 [ 470.995199][T13197] ? __pfx_copy_process+0x10/0x10 [ 470.995220][T13197] vhost_task_create+0x1f9/0x380 [ 470.995232][T13197] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 470.995247][T13197] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 470.995262][T13197] ? __pfx_vhost_task_create+0x10/0x10 [ 470.995281][T13197] ? __pfx_vhost_task_fn+0x10/0x10 [ 470.995295][T13197] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 470.995312][T13197] ? lockdep_hardirqs_on+0x7a/0x110 [ 470.995326][T13197] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 470.995341][T13197] ? mutex_lock_nested+0x152/0x1d0 [ 470.995352][T13197] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 470.995369][T13197] kvm_mmu_post_init_vm+0x147/0x2d0 [ 470.995386][T13197] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 470.995405][T13197] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 470.995418][T13197] ? do_raw_spin_lock+0x12b/0x2f0 [ 470.995434][T13197] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 470.995448][T13197] ? lockdep_hardirqs_on+0x7a/0x110 [ 470.995462][T13197] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 470.995476][T13197] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 470.995490][T13197] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 470.995503][T13197] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 470.995517][T13197] ? lockdep_hardirqs_on+0x7a/0x110 [ 470.995531][T13197] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 470.995545][T13197] ? rt_write_unlock+0x190/0x230 [ 470.995558][T13197] kvm_vcpu_ioctl+0xa65/0xfe0 [ 470.995576][T13197] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 470.995599][T13197] ? __fget_files+0x2a/0x420 [ 470.995613][T13197] ? __fget_files+0x2a/0x420 [ 470.995624][T13197] ? __fget_files+0x3a6/0x420 [ 470.995635][T13197] ? __fget_files+0x2a/0x420 [ 470.995648][T13197] ? bpf_lsm_file_ioctl+0x9/0x20 [ 470.995662][T13197] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 470.995676][T13197] __se_sys_ioctl+0xff/0x170 [ 470.995690][T13197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.995701][T13197] do_syscall_64+0x174/0x580 [ 470.995715][T13197] ? trace_irq_disable+0x3b/0x140 [ 470.995726][T13197] ? clear_bhb_loop+0x40/0x90 [ 470.995738][T13197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.995749][T13197] RIP: 0033:0x7f42a73fce59 [ 470.995759][T13197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.995768][T13197] RSP: 002b:00007f42a5635028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 470.995787][T13197] RAX: ffffffffffffffda RBX: 00007f42a7676090 RCX: 00007f42a73fce59 [ 470.995795][T13197] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 470.995801][T13197] RBP: 00007f42a5635090 R08: 0000000000000000 R09: 0000000000000000 [ 470.995808][T13197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.995814][T13197] R13: 00007f42a7676128 R14: 00007f42a7676090 R15: 00007ffdf1f543d8 [ 470.995830][T13197] [ 471.080918][ T6879] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 471.233172][ T6879] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 471.233199][ T6879] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.233218][ T6879] usb 7-1: config 0 has no interface number 0 [ 471.240453][ T6879] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 471.240482][ T6879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.240501][ T6879] usb 7-1: Product: syz [ 471.240515][ T6879] usb 7-1: Manufacturer: syz [ 471.240529][ T6879] usb 7-1: SerialNumber: syz [ 471.249421][ T6879] usb 7-1: config 0 descriptor?? [ 471.272116][ T6879] uvcvideo 7-1:0.64: probe with driver uvcvideo failed with error -22 [ 471.361208][ T5610] usb 8-1: new full-speed USB device number 101 using dummy_hcd [ 471.420910][ T4926] Bluetooth: hci2: command 0x0c1a tx timeout [ 471.466464][ T6879] usb 7-1: USB disconnect, device number 106 [ 471.516804][ T5610] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.516859][ T5610] usb 8-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 471.516882][ T5610] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.533388][ T5610] usb 8-1: config 0 descriptor?? [ 471.554871][ T5610] pegasus_notetaker 8-1:0.0: Invalid number of endpoints [ 471.554906][ T5610] pegasus_notetaker 8-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 471.645255][T13201] FAULT_INJECTION: forcing a failure. [ 471.645255][T13201] name failslab, interval 1, probability 0, space 0, times 0 [ 471.645279][T13201] CPU: 1 UID: 0 PID: 13201 Comm: syz.5.2385 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 471.645294][T13201] Tainted: [L]=SOFTLOCKUP [ 471.645297][T13201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 471.645304][T13201] Call Trace: [ 471.645308][T13201] [ 471.645313][T13201] dump_stack_lvl+0xe8/0x150 [ 471.645330][T13201] should_fail_ex+0x46b/0x600 [ 471.645348][T13201] should_failslab+0xa8/0x100 [ 471.645363][T13201] kmem_cache_alloc_noprof+0x87/0x680 [ 471.645375][T13201] ? rcu_is_watching+0x15/0xb0 [ 471.645388][T13201] ? security_file_alloc+0x34/0x310 [ 471.645404][T13201] security_file_alloc+0x34/0x310 [ 471.645419][T13201] init_file+0x96/0x2d0 [ 471.645432][T13201] alloc_empty_file+0x74/0x1d0 [ 471.645444][T13201] alloc_file_pseudo+0x155/0x240 [ 471.645456][T13201] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 471.645474][T13201] do_accept+0x4a4/0x930 [ 471.645491][T13201] ? __pfx_do_accept+0x10/0x10 [ 471.645513][T13201] __sys_accept4+0x139/0x230 [ 471.645528][T13201] ? __pfx___sys_accept4+0x10/0x10 [ 471.645541][T13201] ? __pfx_ksys_write+0x10/0x10 [ 471.645556][T13201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.645567][T13201] __x64_sys_accept+0x7d/0x90 [ 471.645581][T13201] do_syscall_64+0x174/0x580 [ 471.645596][T13201] ? trace_irq_disable+0x3b/0x140 [ 471.645607][T13201] ? clear_bhb_loop+0x40/0x90 [ 471.645620][T13201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.645630][T13201] RIP: 0033:0x7f6d874ace59 [ 471.645640][T13201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.645650][T13201] RSP: 002b:00007f6d85706028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 471.645662][T13201] RAX: ffffffffffffffda RBX: 00007f6d87725fa0 RCX: 00007f6d874ace59 [ 471.645670][T13201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 471.645676][T13201] RBP: 00007f6d85706090 R08: 0000000000000000 R09: 0000000000000000 [ 471.645683][T13201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.645689][T13201] R13: 00007f6d87726038 R14: 00007f6d87725fa0 R15: 00007ffd91707c88 [ 471.645704][T13201] [ 471.759763][ T6879] usb 8-1: USB disconnect, device number 101 [ 472.035479][T13211] netlink: 'syz.6.2391': attribute type 4 has an invalid length. [ 472.035500][T13211] netlink: 'syz.6.2391': attribute type 64 has an invalid length. [ 472.035514][T13211] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2391'. [ 472.477248][T13233] netlink: 'syz.7.2400': attribute type 4 has an invalid length. [ 472.477270][T13233] netlink: 'syz.7.2400': attribute type 64 has an invalid length. [ 472.477284][T13233] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2400'. [ 472.862636][ T5795] usb 8-1: new high-speed USB device number 102 using dummy_hcd [ 472.933837][T13249] FAULT_INJECTION: forcing a failure. [ 472.933837][T13249] name failslab, interval 1, probability 0, space 0, times 0 [ 472.933859][T13249] CPU: 0 UID: 0 PID: 13249 Comm: syz.8.2407 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 472.933877][T13249] Tainted: [L]=SOFTLOCKUP [ 472.933881][T13249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 472.933888][T13249] Call Trace: [ 472.933892][T13249] [ 472.933897][T13249] dump_stack_lvl+0xe8/0x150 [ 472.933914][T13249] should_fail_ex+0x46b/0x600 [ 472.933933][T13249] should_failslab+0xa8/0x100 [ 472.933948][T13249] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 472.933961][T13249] ? __get_vm_area_node+0x13f/0x300 [ 472.933975][T13249] __get_vm_area_node+0x13f/0x300 [ 472.933989][T13249] __vmalloc_node_range_noprof+0x36a/0x1750 [ 472.934002][T13249] ? copy_process+0x837/0x43d0 [ 472.934015][T13249] ? percpu_ref_get_many+0x19/0x140 [ 472.934044][T13249] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 472.934058][T13249] ? rcu_is_watching+0x15/0xb0 [ 472.934072][T13249] ? memcpy_and_pad+0x48/0x80 [ 472.934095][T13249] __vmalloc_node_noprof+0xc2/0x100 [ 472.934107][T13249] ? copy_process+0x837/0x43d0 [ 472.934120][T13249] ? copy_process+0x837/0x43d0 [ 472.934135][T13249] dup_task_struct+0x298/0x860 [ 472.934149][T13249] ? rt_spin_unlock+0x160/0x200 [ 472.934163][T13249] copy_process+0x837/0x43d0 [ 472.934192][T13249] ? __pfx_copy_process+0x10/0x10 [ 472.934212][T13249] vhost_task_create+0x1f9/0x380 [ 472.934224][T13249] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 472.934239][T13249] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 472.934254][T13249] ? __pfx_vhost_task_create+0x10/0x10 [ 472.934269][T13249] ? __pfx_vhost_task_fn+0x10/0x10 [ 472.934282][T13249] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 472.934297][T13249] ? lockdep_hardirqs_on+0x7a/0x110 [ 472.934312][T13249] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 472.934326][T13249] ? mutex_lock_nested+0x152/0x1d0 [ 472.934337][T13249] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 472.934355][T13249] kvm_mmu_post_init_vm+0x147/0x2d0 [ 472.934371][T13249] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 472.934389][T13249] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 472.934402][T13249] ? do_raw_spin_lock+0x12b/0x2f0 [ 472.934418][T13249] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 472.934433][T13249] ? lockdep_hardirqs_on+0x7a/0x110 [ 472.934447][T13249] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 472.934461][T13249] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 472.934476][T13249] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 472.934489][T13249] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 472.934502][T13249] ? lockdep_hardirqs_on+0x7a/0x110 [ 472.934516][T13249] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 472.934530][T13249] ? rt_write_unlock+0x190/0x230 [ 472.934544][T13249] kvm_vcpu_ioctl+0xa65/0xfe0 [ 472.934561][T13249] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 472.934589][T13249] ? __fget_files+0x2a/0x420 [ 472.934602][T13249] ? __fget_files+0x2a/0x420 [ 472.934613][T13249] ? __fget_files+0x3a6/0x420 [ 472.934624][T13249] ? __fget_files+0x2a/0x420 [ 472.934637][T13249] ? bpf_lsm_file_ioctl+0x9/0x20 [ 472.934652][T13249] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 472.934665][T13249] __se_sys_ioctl+0xff/0x170 [ 472.934680][T13249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.934691][T13249] do_syscall_64+0x174/0x580 [ 472.934705][T13249] ? trace_irq_disable+0x3b/0x140 [ 472.934718][T13249] ? clear_bhb_loop+0x40/0x90 [ 472.934730][T13249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.934740][T13249] RIP: 0033:0x7f42a73fce59 [ 472.934751][T13249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.934760][T13249] RSP: 002b:00007f42a5635028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.934772][T13249] RAX: ffffffffffffffda RBX: 00007f42a7676090 RCX: 00007f42a73fce59 [ 472.934779][T13249] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 472.934786][T13249] RBP: 00007f42a5635090 R08: 0000000000000000 R09: 0000000000000000 [ 472.934792][T13249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.934798][T13249] R13: 00007f42a7676128 R14: 00007f42a7676090 R15: 00007ffdf1f543d8 [ 472.934814][T13249] [ 472.934879][T13249] warn_alloc: 3 callbacks suppressed [ 472.934890][T13249] syz.8.2407: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 472.934940][T13249] CPU: 0 UID: 0 PID: 13249 Comm: syz.8.2407 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 472.934954][T13249] Tainted: [L]=SOFTLOCKUP [ 472.934958][T13249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 472.934964][T13249] Call Trace: [ 472.934969][T13249] [ 472.934973][T13249] dump_stack_lvl+0xe8/0x150 [ 472.934987][T13249] warn_alloc+0x24c/0x270 [ 472.935003][T13249] ? __pfx_warn_alloc+0x10/0x10 [ 472.935015][T13249] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 472.935029][T13249] ? __get_vm_area_node+0x13f/0x300 [ 472.935042][T13249] ? __get_vm_area_node+0x2b5/0x300 [ 472.935057][T13249] __vmalloc_node_range_noprof+0x38f/0x1750 [ 472.935068][T13249] ? percpu_ref_get_many+0x19/0x140 [ 472.935129][T13249] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 472.935143][T13249] ? rcu_is_watching+0x15/0xb0 [ 472.935157][T13249] ? memcpy_and_pad+0x48/0x80 [ 472.935173][T13249] __vmalloc_node_noprof+0xc2/0x100 [ 472.935184][T13249] ? copy_process+0x837/0x43d0 [ 472.935197][T13249] ? copy_process+0x837/0x43d0 [ 472.935212][T13249] dup_task_struct+0x298/0x860 [ 472.935226][T13249] ? rt_spin_unlock+0x160/0x200 [ 472.935240][T13249] copy_process+0x837/0x43d0 [ 472.935269][T13249] ? __pfx_copy_process+0x10/0x10 [ 472.935289][T13249] vhost_task_create+0x1f9/0x380 [ 472.935301][T13249] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 472.935315][T13249] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 472.935330][T13249] ? __pfx_vhost_task_create+0x10/0x10 [ 472.935346][T13249] ? __pfx_vhost_task_fn+0x10/0x10 [ 472.935359][T13249] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 472.935373][T13249] ? lockdep_hardirqs_on+0x7a/0x110 [ 472.935387][T13249] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 472.935401][T13249] ? mutex_lock_nested+0x152/0x1d0 [ 472.935412][T13249] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 472.935429][T13249] kvm_mmu_post_init_vm+0x147/0x2d0 [ 472.935445][T13249] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 472.935464][T13249] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 472.935477][T13249] ? do_raw_spin_lock+0x12b/0x2f0 [ 472.935492][T13249] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 472.935506][T13249] ? lockdep_hardirqs_on+0x7a/0x110 [ 472.935521][T13249] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 472.935535][T13249] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 472.935550][T13249] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 472.935563][T13249] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 472.935578][T13249] ? lockdep_hardirqs_on+0x7a/0x110 [ 472.935593][T13249] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 472.935607][T13249] ? rt_write_unlock+0x190/0x230 [ 472.935621][T13249] kvm_vcpu_ioctl+0xa65/0xfe0 [ 472.935638][T13249] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 472.935662][T13249] ? __fget_files+0x2a/0x420 [ 472.935675][T13249] ? __fget_files+0x2a/0x420 [ 472.935686][T13249] ? __fget_files+0x3a6/0x420 [ 472.935697][T13249] ? __fget_files+0x2a/0x420 [ 472.935710][T13249] ? bpf_lsm_file_ioctl+0x9/0x20 [ 472.935723][T13249] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 472.935737][T13249] __se_sys_ioctl+0xff/0x170 [ 472.935751][T13249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.935762][T13249] do_syscall_64+0x174/0x580 [ 472.935776][T13249] ? trace_irq_disable+0x3b/0x140 [ 472.935787][T13249] ? clear_bhb_loop+0x40/0x90 [ 472.935799][T13249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.935809][T13249] RIP: 0033:0x7f42a73fce59 [ 472.935819][T13249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.935828][T13249] RSP: 002b:00007f42a5635028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.935839][T13249] RAX: ffffffffffffffda RBX: 00007f42a7676090 RCX: 00007f42a73fce59 [ 472.935846][T13249] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 472.935852][T13249] RBP: 00007f42a5635090 R08: 0000000000000000 R09: 0000000000000000 [ 472.935859][T13249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.935865][T13249] R13: 00007f42a7676128 R14: 00007f42a7676090 R15: 00007ffdf1f543d8 [ 472.935881][T13249] [ 472.935937][T13249] Mem-Info: [ 472.935947][T13249] active_anon:8333 inactive_anon:0 isolated_anon:0 [ 472.935947][T13249] active_file:0 inactive_file:54570 isolated_file:0 [ 472.935947][T13249] unevictable:768 dirty:133 writeback:0 [ 472.935947][T13249] slab_reclaimable:12267 slab_unreclaimable:100739 [ 472.935947][T13249] mapped:25558 shmem:1311 pagetables:1906 [ 472.935947][T13249] sec_pagetables:0 bounce:0 [ 472.935947][T13249] kernel_misc_reclaimable:0 [ 472.935947][T13249] free:1318240 free_pcp:5037 free_cma:0 [ 472.935996][T13249] Node 0 active_anon:33332kB inactive_anon:0kB active_file:0kB inactive_file:218072kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102232kB dirty:532kB writeback:0kB shmem:3708kB kernel_stack:15684kB pagetables:7476kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 472.936043][T13249] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 472.936091][T13249] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 472.936121][T13249] lowmem_reserve[]: 0 2492 2492 2492 2492 [ 472.936138][T13249] Node 0 DMA32 free:1327696kB boost:0kB min:3912kB low:6436kB high:8960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33332kB inactive_anon:0kB active_file:0kB inactive_file:218072kB unevictable:1536kB writepending:496kB zspages:0kB present:3129332kB managed:2551952kB mlocked:0kB bounce:0kB free_pcp:20136kB local_pcp:12076kB free_cma:0kB [ 472.936169][T13249] lowmem_reserve[]: 0 0 0 0 0 [ 472.936184][T13249] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:856kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 472.936212][T13249] lowmem_reserve[]: 0 0 0 0 0 [ 472.936227][T13249] Node 1 Normal free:3929904kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 472.936256][T13249] lowmem_reserve[]: 0 0 0 0 0 [ 472.936271][T13249] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 472.936328][T13249] Node 0 DMA32: 337*4kB (UME) 192*8kB (UM) 327*16kB (UM) 402*32kB (UME) 204*64kB (UM) 144*128kB (UME) 105*256kB (UM) 52*512kB (UM) 27*1024kB (UME) 7*2048kB (UME) 288*4096kB (UM) = 1327604kB [ 472.936403][T13249] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 472.936449][T13249] Node 1 Normal: 4*4kB (UM) 4*8kB (UM) 6*16kB (UM) 9*32kB (UM) 10*64kB (UM) 4*128kB (UM) 1*256kB (M) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 958*4096kB (M) = 3929904kB [ 472.936522][T13249] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 472.936531][T13249] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 472.936539][T13249] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 472.936547][T13249] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 472.936555][T13249] 55877 total pagecache pages [ 472.936559][T13249] 0 pages in swap cache [ 472.936563][T13249] Free swap = 124996kB [ 472.936567][T13249] Total swap = 124996kB [ 472.936571][T13249] 2097051 pages RAM [ 472.936575][T13249] 0 pages HighMem/MovableOnly [ 472.936581][T13249] 427235 pages reserved [ 472.936585][T13249] 0 pages cma reserved [ 473.040898][ T5795] usb 8-1: Using ep0 maxpacket: 32 [ 473.057948][ T5795] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 473.057977][ T5795] usb 8-1: config 0 has no interface number 0 [ 473.058024][ T5795] usb 8-1: config 0 interface 184 has no altsetting 0 [ 473.139758][ T5795] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 473.139776][ T5795] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.139788][ T5795] usb 8-1: Product: syz [ 473.139795][ T5795] usb 8-1: Manufacturer: syz [ 473.139803][ T5795] usb 8-1: SerialNumber: syz [ 473.501341][ T4926] Bluetooth: hci4: command 0x0406 tx timeout [ 473.502807][ T5795] usb 8-1: config 0 descriptor?? [ 473.531033][ T6879] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 473.699228][ T6879] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.699280][ T6879] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 473.699304][ T6879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.707236][ T6879] usb 6-1: config 0 descriptor?? [ 473.720686][ T6879] pwc: Askey VC010 type 2 USB webcam detected. [ 473.939823][ T6879] pwc: send_video_command error -71 [ 473.939839][ T6879] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 473.939944][ T6879] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 473.969298][ T6879] usb 6-1: USB disconnect, device number 107 [ 474.218071][ T38] audit: type=1326 audit(1780418479.783:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13257 comm="syz.6.2411" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8dc92ce59 code=0x0 [ 474.368755][ T5795] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 474.368784][ T5795] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 474.368804][ T5795] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 474.369075][ T5795] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -61 [ 474.565116][T13270] FAULT_INJECTION: forcing a failure. [ 474.565116][T13270] name failslab, interval 1, probability 0, space 0, times 0 [ 474.565150][T13270] CPU: 1 UID: 0 PID: 13270 Comm: syz.8.2415 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 474.565174][T13270] Tainted: [L]=SOFTLOCKUP [ 474.565181][T13270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 474.565193][T13270] Call Trace: [ 474.565201][T13270] [ 474.565209][T13270] dump_stack_lvl+0xe8/0x150 [ 474.565228][T13270] should_fail_ex+0x46b/0x600 [ 474.565247][T13270] should_failslab+0xa8/0x100 [ 474.565261][T13270] __kmalloc_noprof+0xdf/0x7b0 [ 474.565274][T13270] ? mutex_rt_init_lockdep+0x66/0x80 [ 474.565289][T13270] ? security_task_alloc+0x4d/0x330 [ 474.565308][T13270] security_task_alloc+0x4d/0x330 [ 474.565324][T13270] copy_process+0x1c4c/0x43d0 [ 474.565343][T13270] ? copy_process+0xd4e/0x43d0 [ 474.565367][T13270] ? __pfx_copy_process+0x10/0x10 [ 474.565387][T13270] vhost_task_create+0x1f9/0x380 [ 474.565399][T13270] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 474.565414][T13270] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 474.565429][T13270] ? __pfx_vhost_task_create+0x10/0x10 [ 474.565453][T13270] ? __pfx_vhost_task_fn+0x10/0x10 [ 474.565466][T13270] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 474.565482][T13270] ? lockdep_hardirqs_on+0x7a/0x110 [ 474.565496][T13270] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 474.565511][T13270] ? mutex_lock_nested+0x152/0x1d0 [ 474.565522][T13270] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 474.565539][T13270] kvm_mmu_post_init_vm+0x147/0x2d0 [ 474.565556][T13270] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 474.565575][T13270] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 474.565588][T13270] ? do_raw_spin_lock+0x12b/0x2f0 [ 474.565606][T13270] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 474.565621][T13270] ? lockdep_hardirqs_on+0x7a/0x110 [ 474.565635][T13270] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 474.565649][T13270] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 474.565664][T13270] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 474.565677][T13270] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 474.565692][T13270] ? lockdep_hardirqs_on+0x7a/0x110 [ 474.565706][T13270] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 474.565719][T13270] ? rt_write_unlock+0x190/0x230 [ 474.565733][T13270] kvm_vcpu_ioctl+0xa65/0xfe0 [ 474.565750][T13270] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 474.565774][T13270] ? __fget_files+0x2a/0x420 [ 474.565788][T13270] ? __fget_files+0x2a/0x420 [ 474.565799][T13270] ? __fget_files+0x3a6/0x420 [ 474.565809][T13270] ? __fget_files+0x2a/0x420 [ 474.565835][T13270] ? bpf_lsm_file_ioctl+0x9/0x20 [ 474.565850][T13270] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 474.565864][T13270] __se_sys_ioctl+0xff/0x170 [ 474.565879][T13270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.565891][T13270] do_syscall_64+0x174/0x580 [ 474.565905][T13270] ? trace_irq_disable+0x3b/0x140 [ 474.565917][T13270] ? clear_bhb_loop+0x40/0x90 [ 474.565930][T13270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.565942][T13270] RIP: 0033:0x7f42a73fce59 [ 474.565954][T13270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.565964][T13270] RSP: 002b:00007f42a5635028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.565976][T13270] RAX: ffffffffffffffda RBX: 00007f42a7676090 RCX: 00007f42a73fce59 [ 474.565984][T13270] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 474.565990][T13270] RBP: 00007f42a5635090 R08: 0000000000000000 R09: 0000000000000000 [ 474.565997][T13270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.566003][T13270] R13: 00007f42a7676128 R14: 00007f42a7676090 R15: 00007ffdf1f543d8 [ 474.566019][T13270] [ 474.681060][ T6879] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 474.881735][ T6879] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.881788][ T6879] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 474.881812][ T6879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.888889][ T6879] usb 6-1: config 0 descriptor?? [ 474.904767][ T6879] pwc: Askey VC010 type 2 USB webcam detected. [ 475.116053][ T6879] pwc: send_video_command error -71 [ 475.116072][ T6879] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 475.116172][ T6879] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 475.132294][ T6879] usb 6-1: USB disconnect, device number 108 [ 475.485397][ T5610] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 475.662035][ T5610] usb 7-1: Using ep0 maxpacket: 32 [ 475.664412][ T5610] usb 7-1: unable to get BOS descriptor or descriptor too short [ 475.665496][ T5610] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 242, using maximum allowed: 30 [ 475.665541][ T5610] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 130, changing to 11 [ 475.665568][ T5610] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24820, setting to 1024 [ 475.665583][ T5610] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 475.668413][ T5610] usb 7-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40 [ 475.668441][ T5610] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.668462][ T5610] usb 7-1: Product: syz [ 475.668476][ T5610] usb 7-1: Manufacturer: syz [ 475.668483][ T5610] usb 7-1: SerialNumber: syz [ 475.698496][T13281] FAULT_INJECTION: forcing a failure. [ 475.698496][T13281] name failslab, interval 1, probability 0, space 0, times 0 [ 475.698580][T13281] CPU: 0 UID: 0 PID: 13281 Comm: syz.8.2420 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 475.698607][T13281] Tainted: [L]=SOFTLOCKUP [ 475.698615][T13281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 475.698626][T13281] Call Trace: [ 475.698634][T13281] [ 475.698642][T13281] dump_stack_lvl+0xe8/0x150 [ 475.698672][T13281] should_fail_ex+0x46b/0x600 [ 475.698706][T13281] should_failslab+0xa8/0x100 [ 475.698731][T13281] __kmalloc_noprof+0xdf/0x7b0 [ 475.698752][T13281] ? mutex_rt_init_lockdep+0x66/0x80 [ 475.698780][T13281] ? security_task_alloc+0x4d/0x330 [ 475.698813][T13281] security_task_alloc+0x4d/0x330 [ 475.698842][T13281] copy_process+0x1c4c/0x43d0 [ 475.698877][T13281] ? copy_process+0xd4e/0x43d0 [ 475.698920][T13281] ? __pfx_copy_process+0x10/0x10 [ 475.698958][T13281] vhost_task_create+0x1f9/0x380 [ 475.698979][T13281] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 475.699005][T13281] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 475.699033][T13281] ? __pfx_vhost_task_create+0x10/0x10 [ 475.699061][T13281] ? __pfx_vhost_task_fn+0x10/0x10 [ 475.699086][T13281] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 475.699112][T13281] ? lockdep_hardirqs_on+0x7a/0x110 [ 475.699139][T13281] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 475.699165][T13281] ? mutex_lock_nested+0x152/0x1d0 [ 475.699185][T13281] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 475.699215][T13281] kvm_mmu_post_init_vm+0x147/0x2d0 [ 475.699245][T13281] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 475.699279][T13281] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 475.699303][T13281] ? do_raw_spin_lock+0x12b/0x2f0 [ 475.699332][T13281] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 475.699358][T13281] ? lockdep_hardirqs_on+0x7a/0x110 [ 475.699392][T13281] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 475.699418][T13281] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 475.699445][T13281] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 475.699468][T13281] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 475.699494][T13281] ? lockdep_hardirqs_on+0x7a/0x110 [ 475.699520][T13281] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 475.699545][T13281] ? rt_write_unlock+0x190/0x230 [ 475.699571][T13281] kvm_vcpu_ioctl+0xa65/0xfe0 [ 475.699603][T13281] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 475.699647][T13281] ? __fget_files+0x2a/0x420 [ 475.699671][T13281] ? __fget_files+0x2a/0x420 [ 475.699691][T13281] ? __fget_files+0x3a6/0x420 [ 475.699711][T13281] ? __fget_files+0x2a/0x420 [ 475.699735][T13281] ? bpf_lsm_file_ioctl+0x9/0x20 [ 475.699762][T13281] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 475.699788][T13281] __se_sys_ioctl+0xff/0x170 [ 475.699815][T13281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.699835][T13281] do_syscall_64+0x174/0x580 [ 475.699860][T13281] ? trace_irq_disable+0x3b/0x140 [ 475.699880][T13281] ? clear_bhb_loop+0x40/0x90 [ 475.699903][T13281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.699921][T13281] RIP: 0033:0x7f42a73fce59 [ 475.699938][T13281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.699953][T13281] RSP: 002b:00007f42a5635028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.699974][T13281] RAX: ffffffffffffffda RBX: 00007f42a7676090 RCX: 00007f42a73fce59 [ 475.699988][T13281] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 475.699999][T13281] RBP: 00007f42a5635090 R08: 0000000000000000 R09: 0000000000000000 [ 475.700011][T13281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.700022][T13281] R13: 00007f42a7676128 R14: 00007f42a7676090 R15: 00007ffdf1f543d8 [ 475.700052][T13281] [ 476.209684][ T5705] usb 8-1: USB disconnect, device number 102 [ 476.347514][ T5610] ================================================================== [ 476.347514][ T5610] ================================================================== [ 476.347596][ T5610] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 476.347632][ T5610] Read of size 8 at addr ffffc90011e17008 by task kworker/0:3/5610 [ 476.347648][ T5610] [ 476.347662][ T5610] CPU: 0 UID: 0 PID: 5610 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 476.347688][ T5610] Tainted: [L]=SOFTLOCKUP [ 476.347695][ T5610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 476.347706][ T5610] Workqueue: usb_hub_wq hub_event [ 476.347726][ T5610] Call Trace: [ 476.347733][ T5610] [ 476.347742][ T5610] dump_stack_lvl+0xe8/0x150 [ 476.347764][ T5610] print_address_description+0x55/0x1e0 [ 476.347788][ T5610] ? __list_add_valid_or_report+0x4e/0x130 [ 476.347815][ T5610] print_report+0x58/0x70 [ 476.347835][ T5610] kasan_report+0x117/0x150 [ 476.347858][ T5610] ? __list_add_valid_or_report+0x4e/0x130 [ 476.347889][ T5610] __list_add_valid_or_report+0x4e/0x130 [ 476.347920][ T5610] kcov_remote_stop+0x457/0x680 [ 476.347942][ T5610] hub_event+0x49d8/0x4f60 [ 476.347979][ T5610] ? __pfx_hub_event+0x10/0x10 [ 476.347997][ T5610] ? process_one_work+0x8be/0x1630 [ 476.348027][ T5610] ? process_one_work+0x8be/0x1630 [ 476.348050][ T5610] process_one_work+0x98b/0x1630 [ 476.348083][ T5610] ? __pfx_process_one_work+0x10/0x10 [ 476.348106][ T5610] ? do_raw_spin_lock+0x12b/0x2f0 [ 476.348131][ T5610] worker_thread+0xb49/0x1140 [ 476.348159][ T5610] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 476.348191][ T5610] kthread+0x388/0x470 [ 476.348210][ T5610] ? __pfx_worker_thread+0x10/0x10 [ 476.348235][ T5610] ? __pfx_kthread+0x10/0x10 [ 476.348254][ T5610] ret_from_fork+0x514/0xb70 [ 476.348277][ T5610] ? __pfx_ret_from_fork+0x10/0x10 [ 476.348297][ T5610] ? __switch_to+0xc79/0x1410 [ 476.348316][ T5610] ? __pfx_kthread+0x10/0x10 [ 476.348336][ T5610] ret_from_fork_asm+0x1a/0x30 [ 476.348371][ T5610] [ 476.348379][ T5610] [ 476.348384][ T5610] The buggy address belongs to a vmalloc virtual mapping [ 476.348399][ T5610] Memory state around the buggy address: [ 476.348414][ T5610] ffffc90011e16f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 476.348427][ T5610] ffffc90011e16f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 476.348439][ T5610] >ffffc90011e17000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 476.348448][ T5610] ^ [ 476.348458][ T5610] ffffc90011e17080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 476.348470][ T5610] ffffc90011e17100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 476.348479][ T5610] ================================================================== [ 476.358001][ T5610] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 476.358022][ T5610] CPU: 0 UID: 0 PID: 5610 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 476.358048][ T5610] Tainted: [L]=SOFTLOCKUP [ 476.358055][ T5610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 476.358068][ T5610] Workqueue: usb_hub_wq hub_event [ 476.358090][ T5610] Call Trace: [ 476.358098][ T5610] [ 476.358106][ T5610] vpanic+0x56c/0xa60 [ 476.358138][ T5610] ? __pfx_vpanic+0x10/0x10 [ 476.358162][ T5610] ? __pfx___schedule+0x10/0x10 [ 476.358188][ T5610] panic+0xc5/0xd0 [ 476.358212][ T5610] ? __pfx_panic+0x10/0x10 [ 476.358236][ T5610] ? preempt_schedule_thunk+0x16/0x40 [ 476.358266][ T5610] ? __list_add_valid_or_report+0x4e/0x130 [ 476.358293][ T5610] check_panic_on_warn+0x89/0xb0 [ 476.358315][ T5610] ? __list_add_valid_or_report+0x4e/0x130 [ 476.358341][ T5610] end_report+0x73/0x170 [ 476.358370][ T5610] ? __list_add_valid_or_report+0x4e/0x130 [ 476.358395][ T5610] kasan_report+0x128/0x150 [ 476.358418][ T5610] ? __list_add_valid_or_report+0x4e/0x130 [ 476.358448][ T5610] __list_add_valid_or_report+0x4e/0x130 [ 476.358477][ T5610] kcov_remote_stop+0x457/0x680 [ 476.358499][ T5610] hub_event+0x49d8/0x4f60 [ 476.358536][ T5610] ? __pfx_hub_event+0x10/0x10 [ 476.358553][ T5610] ? process_one_work+0x8be/0x1630 [ 476.358582][ T5610] ? process_one_work+0x8be/0x1630 [ 476.358605][ T5610] process_one_work+0x98b/0x1630 [ 476.358637][ T5610] ? __pfx_process_one_work+0x10/0x10 [ 476.358661][ T5610] ? do_raw_spin_lock+0x12b/0x2f0 [ 476.358684][ T5610] worker_thread+0xb49/0x1140 [ 476.358712][ T5610] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 476.358743][ T5610] kthread+0x388/0x470 [ 476.358762][ T5610] ? __pfx_worker_thread+0x10/0x10 [ 476.358785][ T5610] ? __pfx_kthread+0x10/0x10 [ 476.358804][ T5610] ret_from_fork+0x514/0xb70 [ 476.358826][ T5610] ? __pfx_ret_from_fork+0x10/0x10 [ 476.358846][ T5610] ? __switch_to+0xc79/0x1410 [ 476.358861][ T5610] ? __pfx_kthread+0x10/0x10 [ 476.358876][ T5610] ret_from_fork_asm+0x1a/0x30 [ 476.358899][ T5610] [ 476.359216][ T5610] Kernel Offset: disabled