last executing test programs: 12.379118307s ago: executing program 3 (id=1001): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x8001, 0x9, 0x138) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r3 = socket(0x2, 0x2, 0x1) getsockopt$auto(r3, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r4, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r4, 0x5501, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) pread64$auto(r5, 0x0, 0x8100000041, 0x413e) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffff, 0xa8, 0x80, 0x9}, &(0x7f0000000340)=0xb, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) syz_clone3(&(0x7f00000006c0)={0x208200700, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x2c}, &(0x7f0000000500)=""/84, 0x54, &(0x7f0000000580)=""/248, &(0x7f0000000680)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6, {r1}}, 0x58) 10.192778119s ago: executing program 3 (id=1005): lseek$auto(0xffffffffffffffff, 0x8001, 0x4) r0 = socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000000c0), 0xa480, 0x0) readv$auto(0x3, &(0x7f0000000280)={0x0, 0xf7}, 0x87) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ppoll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) open(&(0x7f0000000800)='./file0\x00', 0x183242, 0x154) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x4000084) socket(0xa, 0x5, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x305080, 0x0) mmap$auto(0x2000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) setreuid$auto(0x4, 0x8) mlockall$auto(0x8000000000000001) unshare$auto(0x40000080) r3 = socket(0x848000000015, 0x805, 0x0) recvmmsg$auto(r3, &(0x7f00000001c0)={{0x0, 0x4, 0x0, 0x1, &(0x7f0000000400), 0x5, 0x6}, 0xb82}, 0x7, 0x200, 0x0) sendmsg$auto_L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x1c000}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0xa}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x30}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 8.18058108s ago: executing program 0 (id=1010): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/suspend_stats/success\x00', 0x200, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92\x90|l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00'/507, 0x1098c7) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/025/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000001040)={0x91, 0xa, 0x400, 0x1, 0x9, 0x0, &(0x7f0000000180)="6efd46d5f3ffd3a325cd3b0562ca52de6475fcf77203a18657c1f529d995769de7703f8d038e98f3cf27dd4e0bafa7cd347f3cf86e44ebdbee0983a176ad34c8f5e5beffa3b3cc2fc572595566cf3481f4b6067b1a1f4a8c35552f240f1d2a60ddf7ce98acc324cdcc1204baa6ad25bab1cef6fb1371e3cd3e6ba58bd5b760063e0b2e9c8a738192cba27cd9f9a1f966557c6e4d887ffa4d3545b278302431aba40617cd15224f23070a76c7a8cef2e8d64c024e06de69cf30dff4fc3ce50d8bc9a14baaa5e12bcf7126aa00"/216}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) getsockopt$auto(r3, 0x84, 0x1c, 0x0, 0x0) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x364f9cefc8a0a83, 0x0) ioctl$auto_tracing_buffers_fops_trace(r4, 0x5220, 0x0) r5 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x7}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0xffffffc5}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x440c0) ioctl$auto_SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f0000001080)="342ef326a819838d399831478b4000a5cb17df92cad6656ec74af55893f008163feaccf1f57bc1932d44022c39fbf48d47f9a1ccaf58f225c88e14c00cac311c5e222ca0cd6e68357ba4c11d1b841acb2060e487433d3efcba76f6688fddabe6272d47a1435d5a42bcdfae34f63853f804e643511aaa6ce4601ad1ee623870bd3209771c0e07355b7b57bf6d4fa24990f7ab230bf2343a6db480ff898ebfc7867f0ec8b80c513aa88ff8841beaa90f42c6b4d4367fca2ef5b011c8db1920") r7 = socket(0x1d, 0x2, 0x6) r8 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) preadv$auto(r8, &(0x7f0000000040)={0x0, 0x8010000}, 0x5, 0xfb, 0x8000000001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) r9 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="13000000", @ANYBLOB='N\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r9, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) setsockopt$auto(r7, 0x6a, 0x1, 0x0, 0xc) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/12, 0xc) 7.899795465s ago: executing program 0 (id=1011): ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000005c0)={{0xffffffffffffffff, &(0x7f0000000100), 0x101, &(0x7f0000000340), 0x3, &(0x7f0000000440)="4f621839f1f6f2f10f7489395483cc4f7dd0c7317d1ead5786f9fe97deb5c9d0f04b08a2f56e150c49be91d5dd489a79b391243ee22f4a", &(0x7f0000000480)=0x9}, {[0x4, 0xfffffffd, 0x8, 0x7a]}, 0x14, 0x6, &(0x7f00000004c0)="852dd6a7b259d9e7a5eb74ac697cd21ee6065f7f2a9058eed931d9b0c0d805052cd988c92166a90e294d94a568efb6f43e267a720745ddb7a6dd3667d63cf0a0446995e3f0fe3f976d21b67165901c14425fcaeb4f411a50a5a7a3f23e1aae0a582de63d8ce514ba277b9fa21aabb0990ae4611ad972ff8b46770b7191ac4b107c808c7feba9b39a6e7bc8cdeb669a6986f4aec6ab57dae1d81ccf"}) ioctl$auto_RTC_PARAM_SET(r0, 0x40187014, &(0x7f0000000640)={0x30000000000, @ptr=0xdf27, 0x9}) r1 = socket(0x2, 0x80000, 0xa) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$auto(0x5, 0x0, 0x261) mmap$auto(0x0, 0x20005, 0x4000000000df, 0x4000000eb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) mmap$auto(0x0, 0x2, 0x4000000000df, 0xeb1, 0x401, 0x7ffe) socketpair$auto(0x1e, 0x5, 0x9, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r4, 0x5412, &(0x7f0000000300)="00000000000086b76936299793c41ecd706863efcb6f53d06906d9d521") ioctl$auto_TIOCSTI2(r4, 0x5412, &(0x7f00000000c0)="c0402e39") write$auto(r3, &(0x7f0000000140)='1\x00\\\xa0\x04t\x9f\xfd)m|E\x19\xf8\xd0\xba]\xb1\xb5\xba\xf3\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x188\x9a }\f\xf6\xdb,\xd0\x03~\x1eS\xe6', 0x5) setsockopt$auto_SO_OOBINLINE(r2, 0xfffe, 0xa, &(0x7f0000000200)='#\x00\x00v\x1a\xb0a4\x1f\x96\x8f\xe3!\xf5\x7f\x1a\x13\xcdO\x00\x00\x00\x000\xa2r\xf04\x8f\x97\xdb\nq\x0f\xe6\xf0 JJ\xb9e\x13\xe9x[\xa9@\xf4h%\x0e\xe5\xacZ\x86A\n%\a\x1a\xee\xf4; x\xa1\xf7\x9a\x94i:^3:\xfd\xf2FB\"M{i\x81\xb7\xd88\xcalpS6\xcb\x00\x00\x00\x00\x00\x00\x00\x005\x9far4\xac\xd8lq\x03\xccn\x00\x00\x00\x00\x00\x00', 0x28) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mlock$auto(0xfbe8, 0x4) syz_clone(0x20000, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0) munlock$auto(0xffff, 0x1) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r5, 0x4c03, 0xfffffffffffffffd) r6 = bpf$auto(0x2, 0x0, 0xf) read$auto(r6, 0x0, 0x4) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fb1\x00', 0xf01c2, 0x0) setsockopt$auto(r1, 0xfffffffe, 0x2, &(0x7f0000000100)='\x00', 0x200000) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47fbff7a) mmap$auto(0x0, 0x4, 0x3, 0xeb2, 0x20000000000, 0x10000000008000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/queues/tx-5/xps_rxqs\x00', 0xc2481, 0x0) write$auto(r7, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 7.740192102s ago: executing program 1 (id=1013): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={0x0, 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r3 = socket(0x2, 0x2, 0x1) getsockopt$auto(r3, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r4, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r4, 0x5501, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) pread64$auto(r5, 0x0, 0x8100000041, 0x413e) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffff, 0xa8, 0x80, 0x9}, &(0x7f0000000340)=0xb, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) syz_clone3(&(0x7f00000006c0)={0x208200700, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x2c}, &(0x7f0000000500)=""/84, 0x54, &(0x7f0000000580)=""/248, &(0x7f0000000680)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6, {r1}}, 0x58) 6.991401344s ago: executing program 0 (id=1014): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r3 = socket(0x2, 0x2, 0x1) getsockopt$auto(r3, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r4, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r4, 0x5501, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) pread64$auto(r5, 0x0, 0x8100000041, 0x413e) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffff, 0xa8, 0x80, 0x9}, &(0x7f0000000340)=0xb, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) syz_clone3(&(0x7f00000006c0)={0x208200700, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x2c}, &(0x7f0000000500)=""/84, 0x54, &(0x7f0000000580)=""/248, &(0x7f0000000680)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6, {r1}}, 0x58) 6.470041377s ago: executing program 2 (id=1015): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r0) sendmsg$auto_IPVS_CMD_GET_DEST(r0, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ffa725bd0600fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) open(0x0, 0x1eb279, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x34d802, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x20a642, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r4) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu3\x00', 0x1, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r6, &(0x7f00000001c0)={{0x0, 0x5ac, 0x0, 0x4, &(0x7f0000000180), 0x5, 0x11}, 0x5}, 0x2, 0x100) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x0) getresgid$auto(0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x180342, 0x0) msgget$auto(0x0, 0x5) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) 6.363390515s ago: executing program 1 (id=1016): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f0000000280)={{0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r3 = socket(0x2, 0x2, 0x1) getsockopt$auto(r3, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r4, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r4, 0x5501, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) pread64$auto(r5, 0x0, 0x8100000041, 0x413e) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffff, 0xa8, 0x80, 0x9}, &(0x7f0000000340)=0xb, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) syz_clone3(&(0x7f00000006c0)={0x208200700, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x2c}, &(0x7f0000000500)=""/84, 0x54, &(0x7f0000000580)=""/248, &(0x7f0000000680)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6, {r1}}, 0x58) 5.862194811s ago: executing program 3 (id=1017): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xffff, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b4b, r1) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r0, 0x8004b709, &(0x7f00000000c0)=0x6) ptrace$auto(0x800, r2, 0x9, 0x1) setuid$auto(0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0xffffffffffffffff, 0x28000) rseq$auto(&(0x7f0000000300)={0xe, 0x2, 0x9, 0x6, 0x6, 0x2}, 0x8000, 0x0, 0x9) sysfs$auto(0x2, 0x4c, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x6, 0x0, 0x0, 0x0) 5.730519911s ago: executing program 2 (id=1018): mmap$auto(0x1, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x6b8) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram6\x00', 0xc6fc1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) r1 = epoll_create$auto(0x5) fremovexattr$auto(r1, &(0x7f0000000000)='&\x00') read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000280)=""/54, 0x36) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x6dea, 0x5, 0x9, 0x17, r0, 0x10001) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(r1, &(0x7f0000000080)={0x0, 0x9}, 0x6, 0x9, 0x5) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000089c0)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0xc798ee72cfbd85fc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec23\x00', 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000180)='=\xc6\b\x1f\xf3\xd6*\xd1Vc\xff\x8be\xba\x1dVh=;\xc7\xa0\x16,8Jo\x84\x81r\v\xd4\x06\x009\aG\xe7\'\x12\x03\xb0cu\xb0\xa0\xacbL\xc9\xce\xf3\t', 0x100000a3d9) msgctl$auto_IPC_STAT(0x3, 0x2, &(0x7f00000002c0)={{0x4, 0xee00, 0xffffffffffffffff, 0x7, 0x0, 0xf73f, 0x1}, &(0x7f0000000200)=0x80, &(0x7f0000000240)=0x7, 0x41, 0x5, 0x6, 0x9, 0x10, 0xfff, 0x2, 0x3, @raw=0x8, @inferred=0xffffffffffffffff}) msgctl$auto_IPC_STAT(0x4, 0x2, &(0x7f00000003c0)={{0x0, 0xffffffffffffffff, 0x0, 0x3, 0xd, 0x1, 0xd}, &(0x7f0000000340)=0x1, &(0x7f0000000380)=0xc7, 0x6, 0xe1, 0x9, 0x100, 0x8, 0x3, 0x40, 0x7f, @raw=0x4, @raw=0x10001}) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, r3, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_CREATE_VM(r6, 0x8140aecc, 0x0) keyctl$auto(0x5, r4, 0xffffffffffffffff, r5, 0x4) 4.737454395s ago: executing program 1 (id=1019): r0 = socket(0x2, 0x2, 0x88) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x440, 0x3a02, 0xdf, 0x9b72, r0, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r1 = socket(0x1f, 0x3, 0x400001) r2 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000001a14af"], 0x14}}, 0x4000000) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r1], 0x1ac}}, 0x4c041) r3 = socket(0x27, 0x80000, 0x4) setsockopt$auto(r3, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x42100, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r5) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[], 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xfffffe01, 0x22, 0x940, 0x1ffde, 0x3, 0x3, 0x7, 0x9, 0x5, 0x0, 0x8004, 0xb0, 0x7, 0x1, 0x3, 0x5, 0x7, 0xfffffffe, 0x0, 0x0, 0x1000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, [0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x7, 0x281) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r6 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) write$auto(r6, 0x0, 0x2) r7 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x900, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0xb, 0x4008) 4.731414061s ago: executing program 3 (id=1020): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) open(&(0x7f00000001c0)='./file0\x00', 0x40c4c0, 0x168) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x4, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r1 = mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) close_range$auto(0x2, 0xa, 0x0) bind$auto(r1, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x10}, 0x3) r2 = socket(0xa, 0x2, 0x73) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000f9dbdf250100000008000a0008000000050007003b000000080009009c781e01060002000100000008001700", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) close_range$auto(0x2, 0x8, 0x0) socket(0xb, 0x3, 0x1f) getsockname$auto(0x3, 0x0, 0x0) open(0x0, 0x62240, 0x154) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) 4.558912724s ago: executing program 0 (id=1021): socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) mmap$auto(0x0, 0xdb3, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) close_range$auto(0x2, 0x8, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_0={0x2, 0xfff, 0x0, 0x1, 0x5900, r1, 0xffffffff, "4b1544f3025fb1c4a7f34747b89a5c5c", 0x0, r0, 0x0, 0x3fd, 0xfffffadb, 0x8, r2, r2}, 0x6f4) bpf$auto(0x2, 0x0, 0xf) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) write$auto_drm_edid_fops_drm_debugfs(0xffffffffffffffff, &(0x7f0000000380), 0x0) socket(0x2, 0x80002, 0x1) socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0101, 0x15) mbind$auto(0xf4000000, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xd0, 0x0, 0x4) statmount$auto(0x0, &(0x7f0000000380)={0x8, 0x3, 0x1ff, 0xfffffe01, 0x5, 0x717e, 0x3ffde, 0x7, 0x3, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffc, 0xb4, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x2, 0xa, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff], "d345ebe6a230d668714f909a9853e467fa871f40bb3937ad5464c8f95e36d93c087c48d6c66320b224901eb6a27d0046fd307e3fb09bb2344901b9b3b9f28064d8f59d265e2e835367e237c21a7918b92797d74c8b4e1544cc3bd444fcf48884299fb088d10f23543b33c335cd14b8ceb9a68883f9c36a48625f15bf1d3340ca26417d6d4bac020000001a7fb206747b0baa99be8992f5e588aff85a2dc2af6a2bba0d35e1ed802b00b0a4a4849681e46712b511659f760c46f6e0bb6c18000000000000000000000000000086b97da1aba7b35636f2b6c5901bf2597971b6d43e3ed3a611"}, 0x1fe, 0xd) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffffffffffd03, &(0x7f00000001c0)) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$auto_UI_GET_VERSION(r4, 0x8004552d, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.413144729s ago: executing program 2 (id=1022): openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x80181, 0x0) acct$auto(&(0x7f0000000000)='/dev/snd/seq\x00') socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) shutdown$auto(0x200000003, 0x2) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x5, 0x2, 0x100000001, 0xc, 0x12, 0x7, 0x40, 0xe, 0xd5b, 0x101, 0xff, 0x2, 0x8007fffe]}, 0x0, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x703202, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0xa142, 0x0) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty8\x00', 0x2b7600, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x16, 0xfffffffffffffffa, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x1ffffffff, 0xfffdfffffffffffa, 0x1, 0x0, 0x6, 0x0, 0x7, 0x1224578b, 0x2, {0x100000000, 0x5}, 0x5, 0x1, 0x10000000000009, 0x1008000, 0x0, 0x8, 0x7f, 0xdfffffffffff6295, 0x10000000000406, 0x4, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0x1cad81, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0xffff}, 0x3) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) 3.591304309s ago: executing program 1 (id=1023): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x1, 0x10000000004, 0x80000011, r0, 0x50000008003) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x81, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyu6\x00', 0xa0302, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) write$auto(r1, 0x0, 0xfffffdef) r4 = socket(0x1e, 0x6, 0x1) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) mlockall$auto(0x5) mmap$auto(0x2, 0x40000a, 0x2bb, 0x14, 0x2, 0x1) syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, r4) sendmsg$auto_NLBL_MGMT_C_REMOVE(r1, 0x0, 0x4000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) socket(0x11, 0xa, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r5) sendmsg$auto_OVS_DP_CMD_GET(r5, &(0x7f0000000200)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r6, 0x374fe8f90a251713, 0x70bd29, 0x25dfdbfc, {0x3, 0x0, 0xf000}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0xfffffff7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000008) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd8/queue/iosched/async_depth\x00', 0x40800, 0x0) 3.555016296s ago: executing program 2 (id=1024): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={&(0x7f0000000780), 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r3 = socket(0x2, 0x2, 0x1) getsockopt$auto(r3, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r4, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r4, 0x5501, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) pread64$auto(r5, 0x0, 0x8100000041, 0x413e) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffff, 0xa8, 0x80, 0x9}, &(0x7f0000000340)=0xb, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) syz_clone3(&(0x7f00000006c0)={0x208200700, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x2c}, &(0x7f0000000500)=""/84, 0x54, &(0x7f0000000580)=""/248, &(0x7f0000000680)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6, {r1}}, 0x58) 2.038697315s ago: executing program 3 (id=1025): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) pread64$auto(r2, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa4\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0xe) inotify_rm_watch$auto(r1, 0x8001) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getpid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x2, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x10000, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x6, 0x81, 0x5, 0xd, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) semctl$auto(0x8, 0x86, 0x101, 0x1) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptywb\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r4, 0x80045438, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) fcntl$auto(0x3, 0x4, 0xa553) process_mrelease$auto(0xffffffffffffffff, 0x0) 2.001921846s ago: executing program 0 (id=1026): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xffff, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b4b, r0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r2, 0x0, 0x9a8, 0x7ffc) r3 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r1, 0x8004b709, &(0x7f00000000c0)=0x6) ptrace$auto(0x800, r3, 0x9, 0x1) setresuid$auto(0x0, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x11, 0x3, 0x2) getsockopt$auto(r4, 0x107, 0x1, 0x0, 0x0) setuid$auto(0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x84000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x240007, 0x19) socket(0x2, 0x1, 0x0) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) sendfile$auto(r5, r5, 0x0, 0x200) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0xffffffffffffffff, 0x28000) memfd_create$auto(0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001640)=ANY=[@ANYBLOB="b4090000", @ANYRES16=0x0, @ANYBLOB="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"], 0x9b4}, 0x1, 0x0, 0x0, 0x4040891}, 0x40000) rseq$auto(&(0x7f0000000300)={0xe, 0x2, 0x9, 0x6, 0x6, 0x2}, 0x8000, 0x0, 0x9) sysfs$auto(0x2, 0x4c, 0x0) r6 = fsopen$auto(0x0, 0x1) fsconfig$auto(r6, 0x6, 0x0, 0x0, 0x0) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x8, 0x0) 1.892260546s ago: executing program 1 (id=1027): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={0x0, 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r3 = socket(0x2, 0x2, 0x1) getsockopt$auto(r3, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r4, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r4, 0x5501, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) pread64$auto(r5, 0x0, 0x8100000041, 0x413e) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffff, 0xa8, 0x80, 0x9}, &(0x7f0000000340)=0xb, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) syz_clone3(&(0x7f00000006c0)={0x208200700, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x2c}, &(0x7f0000000500)=""/84, 0x54, &(0x7f0000000580)=""/248, &(0x7f0000000680)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6, {r1}}, 0x58) 1.809709874s ago: executing program 2 (id=1028): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, 0x0, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r3 = socket(0x2, 0x2, 0x1) getsockopt$auto(r3, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r4, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r4, 0x5501, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) pread64$auto(r5, 0x0, 0x8100000041, 0x413e) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffff, 0xa8, 0x80, 0x9}, &(0x7f0000000340)=0xb, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) syz_clone3(&(0x7f00000006c0)={0x208200700, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x2c}, &(0x7f0000000500)=""/84, 0x54, &(0x7f0000000580)=""/248, &(0x7f0000000680)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6, {r1}}, 0x58) 831.708956ms ago: executing program 0 (id=1029): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xffff, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b4b, r1) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioctl$auto_NS_GET_TGID_IN_PIDNS(r0, 0x8004b709, &(0x7f00000000c0)=0x6) setresuid$auto(0x0, 0x8, 0x0) setuid$auto(0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0xffffffffffffffff, 0x28000) rseq$auto(&(0x7f0000000300)={0xe, 0x2, 0x9, 0x6, 0x6, 0x2}, 0x8000, 0x0, 0x9) sysfs$auto(0x2, 0x4c, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x6, 0x0, 0x0, 0x0) 434.747055ms ago: executing program 1 (id=1030): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r3 = socket(0x2, 0x2, 0x1) getsockopt$auto(r3, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r4, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r4, 0x5501, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) pread64$auto(r5, 0x0, 0x8100000041, 0x413e) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffff, 0xa8, 0x80, 0x9}, &(0x7f0000000340)=0xb, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) syz_clone3(&(0x7f00000006c0)={0x208200700, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x2c}, &(0x7f0000000500)=""/84, 0x54, &(0x7f0000000580)=""/248, &(0x7f0000000680)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6, {r1}}, 0x58) 421.036667ms ago: executing program 2 (id=1031): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x20007, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r0 = socket(0xa, 0x801, 0x84) ioctl$auto(0x4000000000000c8, 0x400454cc, 0xffffffffffffffff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) socket(0x28, 0x2, 0x64b5) memfd_secret$auto(0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram8/dev\x00', 0x488981, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) write$auto(r1, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x65e0, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dri/renderD128\x00', 0x80802, 0x0) ioctl$auto(r3, 0x800064d1, r3) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/lo/disable_ipv6\x00', 0x10001, 0x0) lseek$auto(r4, 0xffffffffffffffff, 0x1) write$auto(r2, 0x0, 0x98c7) sendmmsg$auto(r0, &(0x7f0000000340)={{&(0x7f0000000140)="c877dba96cfe0c889b1525b2767fcd7b81b96097c56a60edf0e35e604fb6386a7cc41253d719a04fc8c198b243e26a6a2b6c9ae7cdd5f2c58e86", 0x1, &(0x7f0000000180)={&(0x7f0000000200)="892d8a9bb7758e1d0f704c9af198f5345b924bbfa52daa0a7b20255e12486dd61420dd2a177ef70e15b288bf1d35fab282603d04f85d165a6871babcbaca5a84b88b277f39bff96b48d01dbce83db38e95299f92ab3b00eb", 0x3}, 0x80, &(0x7f0000000280)="9ee03873ea94a7c6b45c2b9932f691767600deca4708ec2cde03ac182e10bec1b0a933d1754e4167e2e5400bd9537a3114d281efc1d82853e0285e22717ecfa1ef0164f17e0a22db5072cb2f63cc567f852625d9467ad6860b342b07aecb97afea737ab293465c24afd8381d50ba372d1a834ba9d3a792436ae3603f5cf89f4c45ae8c2bf0b344c29c393c", 0x400, 0x80000001}, 0x6ba}, 0x9, 0x6e) mmap$auto(0x0, 0x400008, 0x7d3, 0x9b72, 0xffffffffffffffff, 0x5cd) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x6) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/udplite6\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0xd, 0x6e9) mmap$auto(0x10000, 0x2020009, 0x0, 0xeb3, 0xfffffffffffffffa, 0x8) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/i8042/serio1/power/wakeup_abort_count\x00', 0x60204, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000e00)=""/4096, 0x1000) 0s ago: executing program 3 (id=1032): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r1, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r2 = socket(0x2, 0x2, 0x1) getsockopt$auto(r2, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r3, 0x41015500, &(0x7f00000002c0)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd3a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb00", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r3, 0x5501, 0x0) kernel console output (not intermixed with test programs): BP: 00007fd16c610d69 R08: 0000000000000000 R09: 0000000000000000 [ 110.802673][ T6171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.802686][ T6171] R13: 0000000000000000 R14: 00007fd16c7b5fa0 R15: 00007fff69817088 [ 110.802718][ T6171] [ 111.915866][ T6191] FAULT_INJECTION: forcing a failure. [ 111.915866][ T6191] name failslab, interval 1, probability 0, space 0, times 0 [ 111.964344][ T6191] CPU: 0 UID: 0 PID: 6191 Comm: syz.1.50 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 111.964383][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.964398][ T6191] Call Trace: [ 111.964407][ T6191] [ 111.964425][ T6191] dump_stack_lvl+0x16c/0x1f0 [ 111.964465][ T6191] should_fail_ex+0x512/0x640 [ 111.964497][ T6191] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 111.964527][ T6191] should_failslab+0xc2/0x120 [ 111.964559][ T6191] __kmalloc_cache_noprof+0x6a/0x3e0 [ 111.964583][ T6191] ? io_uring_setup+0x24f/0x2080 [ 111.964612][ T6191] io_uring_setup+0x24f/0x2080 [ 111.964644][ T6191] ? __pfx_io_uring_setup+0x10/0x10 [ 111.964669][ T6191] ? do_futex+0x122/0x350 [ 111.964702][ T6191] ? __pfx_do_futex+0x10/0x10 [ 111.964730][ T6191] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 111.964780][ T6191] ? xfd_validate_state+0x61/0x180 [ 111.964813][ T6191] ? __pfx_do_writev+0x10/0x10 [ 111.964845][ T6191] __x64_sys_io_uring_setup+0xc2/0x170 [ 111.964875][ T6191] do_syscall_64+0xcd/0x490 [ 111.964912][ T6191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.964938][ T6191] RIP: 0033:0x7fd16c58e9a9 [ 111.964959][ T6191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.964982][ T6191] RSP: 002b:00007fd16d394038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 111.965007][ T6191] RAX: ffffffffffffffda RBX: 00007fd16c7b6160 RCX: 00007fd16c58e9a9 [ 111.965024][ T6191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 111.965038][ T6191] RBP: 00007fd16c610d69 R08: 0000000000000000 R09: 0000000000000000 [ 111.965054][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.965068][ T6191] R13: 0000000000000000 R14: 00007fd16c7b6160 R15: 00007fff69817088 [ 111.965103][ T6191] [ 112.646068][ T5168] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 117.021468][ T6250] random: crng reseeded on system resumption [ 117.303485][ T6254] FAULT_INJECTION: forcing a failure. [ 117.303485][ T6254] name failslab, interval 1, probability 0, space 0, times 0 [ 117.317915][ T6254] CPU: 0 UID: 0 PID: 6254 Comm: syz.2.61 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 117.317958][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.317973][ T6254] Call Trace: [ 117.317983][ T6254] [ 117.317993][ T6254] dump_stack_lvl+0x16c/0x1f0 [ 117.318032][ T6254] should_fail_ex+0x512/0x640 [ 117.318065][ T6254] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 117.318098][ T6254] should_failslab+0xc2/0x120 [ 117.318130][ T6254] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 117.318158][ T6254] ? __proc_create+0xc3/0x8e0 [ 117.318188][ T6254] ? __proc_create+0x2ce/0x8e0 [ 117.318226][ T6254] __proc_create+0x2ce/0x8e0 [ 117.318249][ T6254] ? __pfx___proc_create+0x10/0x10 [ 117.318271][ T6254] ? _raw_write_unlock+0x28/0x50 [ 117.318287][ T6254] ? proc_register+0x314/0x5f0 [ 117.318307][ T6254] proc_create_reg+0x7d/0x180 [ 117.318327][ T6254] proc_create_data+0x86/0x110 [ 117.318346][ T6254] ? __pfx_proc_create_data+0x10/0x10 [ 117.318367][ T6254] ? cache_register_net+0x137/0x5e0 [ 117.318392][ T6254] cache_register_net+0x25a/0x5e0 [ 117.318414][ T6254] gss_svc_init_net+0x151/0x660 [ 117.318431][ T6254] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 117.318454][ T6254] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 117.318472][ T6254] ops_init+0x1e2/0x5f0 [ 117.318495][ T6254] setup_net+0x1ff/0x510 [ 117.318514][ T6254] ? lockdep_init_map_type+0x5c/0x280 [ 117.318535][ T6254] ? __pfx_setup_net+0x10/0x10 [ 117.318556][ T6254] ? debug_mutex_init+0x37/0x70 [ 117.318573][ T6254] copy_net_ns+0x2a6/0x5f0 [ 117.318587][ T6254] create_new_namespaces+0x3ea/0xa90 [ 117.318609][ T6254] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 117.318627][ T6254] ksys_unshare+0x45b/0xa40 [ 117.318647][ T6254] ? __pfx_ksys_unshare+0x10/0x10 [ 117.318668][ T6254] ? syscall_user_dispatch+0x78/0x140 [ 117.318687][ T6254] __x64_sys_unshare+0x31/0x40 [ 117.318706][ T6254] do_syscall_64+0xcd/0x490 [ 117.318726][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.318740][ T6254] RIP: 0033:0x7fa10038e9a9 [ 117.318753][ T6254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.318767][ T6254] RSP: 002b:00007fa101204038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 117.318781][ T6254] RAX: ffffffffffffffda RBX: 00007fa1005b5fa0 RCX: 00007fa10038e9a9 [ 117.318790][ T6254] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 117.318798][ T6254] RBP: 00007fa100410d69 R08: 0000000000000000 R09: 0000000000000000 [ 117.318806][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.318813][ T6254] R13: 0000000000000000 R14: 00007fa1005b5fa0 R15: 00007ffcdfd43e98 [ 117.318833][ T6254] [ 117.680789][ T6250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.697986][ T6250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.766326][ T6255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.775105][ T6255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.310443][ T6285] random: crng reseeded on system resumption [ 119.576516][ T6285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.586568][ T6285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.604838][ T6279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.659375][ T6279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.127281][ T6310] syz.2.70 uses obsolete (PF_INET,SOCK_PACKET) [ 121.323267][ T6314] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 121.592099][ T6319] random: crng reseeded on system resumption [ 121.719071][ T6302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.819552][ T6302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.183299][ T6313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.216791][ T6313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.501813][ T6330] netlink: 504 bytes leftover after parsing attributes in process `syz.1.79'. [ 122.519420][ T6330] netlink: 350 bytes leftover after parsing attributes in process `syz.1.79'. [ 122.542596][ T6329] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.664714][ T6333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.72'. [ 122.805858][ T6336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.73'. [ 122.878925][ T6333] bond0: (slave bond_slave_1): Releasing backup interface [ 123.610825][ T5168] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 124.694752][ T6350] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 125.497029][ T6363] netlink: zone id is out of range [ 125.527850][ T6363] netlink: zone id is out of range [ 125.650275][ T6363] netlink: set zone limit has 8 unknown bytes [ 125.713552][ T6370] vhci_hcd: invalid port number 16 [ 125.725119][ T6370] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 125.900649][ T6375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.81'. [ 126.000518][ T6375] bond0: (slave bond_slave_1): Releasing backup interface [ 127.322430][ T6394] random: crng reseeded on system resumption [ 127.741642][ T6385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.791741][ T6385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.306950][ T30] audit: type=1800 audit(1753850974.886:3): pid=6409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.88" name="discovery_nqn" dev="configfs" ino=9216 res=0 errno=0 [ 129.234525][ T6412] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 129.632816][ T6424] netlink: 28 bytes leftover after parsing attributes in process `syz.3.91'. [ 130.322159][ T6438] bond0: option all_slaves_active: invalid value () [ 130.546570][ T6436] random: crng reseeded on system resumption [ 130.685605][ T6432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.696556][ T6432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.740081][ T6438] bond0: option all_slaves_active: invalid value () [ 132.899202][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.922579][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.730475][ T6487] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 135.588636][ T6509] random: crng reseeded on system resumption [ 135.952870][ T6507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.965195][ T6507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.453909][ T6524] netlink: 28 bytes leftover after parsing attributes in process `syz.1.107'. [ 137.663039][ T6537] random: crng reseeded on system resumption [ 137.690463][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.109'. [ 138.083022][ T6523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.093184][ T6523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.818310][ T6550] ptp ptp0: new virtual clock ptp1 [ 138.870816][ T6550] ptp ptp0: new virtual clock ptp2 [ 138.912789][ T6550] ptp ptp0: new virtual clock ptp3 [ 138.918470][ T6550] ptp ptp0: guarantee physical clock free running [ 139.346266][ T6557] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 140.381388][ T6578] vhci_hcd: invalid port number 16 [ 140.403334][ T6578] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 140.583270][ T6584] netlink: 28 bytes leftover after parsing attributes in process `syz.2.118'. [ 141.361207][ T6588] random: crng reseeded on system resumption [ 141.967585][ T6579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.015288][ T6579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.388527][ T6603] random: crng reseeded on system resumption [ 142.616612][ T6601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.684692][ T6601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.761954][ T6640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.127'. [ 145.142143][ T6651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.129'. [ 145.394413][ T6644] could not allocate digest TFM handle [ 145.461288][ T6644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.128'. [ 146.139919][ T6658] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 146.604820][ T6671] random: crng reseeded on system resumption [ 146.778785][ T6670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.788323][ T6670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.801876][ T6666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.864142][ T6666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.449553][ T6683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.135'. [ 147.876397][ T6681] random: crng reseeded on system resumption [ 147.935775][ T6681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.964354][ T6681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.770577][ T30] audit: type=1800 audit(1753850995.346:4): pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.139" name="discovery_nqn" dev="configfs" ino=10086 res=0 errno=0 [ 150.746143][ T6730] random: crng reseeded on system resumption [ 150.933251][ T6730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.974460][ T6730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.406923][ T6745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.146'. [ 151.722469][ T6745] bond0: (slave bond_slave_1): Releasing backup interface [ 152.683514][ T6753] random: crng reseeded on system resumption [ 152.926640][ T6754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.041373][ T6754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.732101][ T980] smpboot: CPU 1 is now offline [ 154.239477][ T6792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.155'. [ 155.359158][ T6806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.158'. [ 155.486744][ T6804] netlink: zone id is out of range [ 155.561995][ T6804] netlink: zone id is out of range [ 155.768233][ T6806] bond0: (slave bond_slave_1): Releasing backup interface [ 155.800004][ T6804] netlink: set zone limit has 8 unknown bytes [ 155.839231][ T6811] random: crng reseeded on system resumption [ 156.116407][ T6802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.311894][ T6802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.214218][ T6827] random: crng reseeded on system resumption [ 157.411610][ T6819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.587728][ T6819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.365534][ T6843] ptp ptp0: guarantee physical clock free running [ 159.717644][ T6872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.170'. [ 159.825521][ T6871] bond0: option all_slaves_active: invalid value () [ 160.031559][ T6877] bond0: option all_slaves_active: invalid value () [ 160.208630][ T6881] random: crng reseeded on system resumption [ 160.674468][ T6860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.838372][ T6860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.615284][ T6923] random: crng reseeded on system resumption [ 162.878978][ T6910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.074254][ T6910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.095914][ T6914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.225889][ T6914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.997673][ T6959] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 166.017597][ T6965] random: crng reseeded on system resumption [ 166.259751][ T6955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.315061][ T6955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.547648][ T6969] ptrace attach of "./syz-executor exec"[5853] was attempted by ""[6969] [ 167.370142][ T6981] bridge0: port 3(team0) entered blocking state [ 167.399057][ T6981] bridge0: port 3(team0) entered disabled state [ 167.454456][ T6981] team0: entered allmulticast mode [ 167.496610][ T6986] netlink: 28 bytes leftover after parsing attributes in process `syz.2.186'. [ 167.528183][ T6981] team_slave_0: entered allmulticast mode [ 167.589644][ T6981] team_slave_1: entered allmulticast mode [ 167.697949][ T6981] team0: entered promiscuous mode [ 167.758185][ T6981] team_slave_0: entered promiscuous mode [ 167.818128][ T6981] team_slave_1: entered promiscuous mode [ 167.893514][ T6981] bridge0: port 3(team0) entered blocking state [ 167.899955][ T6981] bridge0: port 3(team0) entered forwarding state [ 168.129938][ T6977] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 169.508897][ T7009] random: crng reseeded on system resumption [ 169.827741][ T7001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.901893][ T7001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.573028][ T7037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.194'. [ 176.040982][ T7063] random: crng reseeded on system resumption [ 176.103162][ T7057] could not allocate digest TFM handle [ 176.322766][ T7047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.432461][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 176.475983][ T7047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.674342][ T7062] netlink: 28 bytes leftover after parsing attributes in process `syz.0.200'. [ 177.254667][ T7087] random: crng reseeded on system resumption [ 177.490859][ T7072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.649345][ T7072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.803148][ T7086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.893794][ T7086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 syzkaller syzkaller login: [ 178.950678][ T7102] random: crng reseeded on system resumption [ 179.188570][ T7094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.262417][ T7094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.201016][ T7122] random: crng reseeded on system resumption [ 180.471306][ T7109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.625373][ T7109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.493034][ T7124] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 182.249139][ T7145] random: crng reseeded on system resumption [ 182.500258][ T7136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.600528][ T7136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.498168][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 183.820549][ T7169] random: crng reseeded on system resumption [ 184.010777][ T7164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.074666][ T7164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.686291][ T7199] random: crng reseeded on system resumption [ 185.770263][ T7183] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 185.997331][ T7190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.092301][ T7190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.441220][ T7234] random: crng reseeded on system resumption [ 188.847985][ T7233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.031069][ T7233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.750270][ T7254] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 191.159976][ T7264] zswap: compressor not available [ 191.619498][ T7284] can: request_module (can-proto-0) failed. [ 191.992191][ T7294] random: crng reseeded on system resumption [ 192.304511][ T7279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.412489][ T7279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.231798][ T7293] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[7293] [ 193.721339][ T7317] random: crng reseeded on system resumption [ 193.933575][ T7311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.992687][ T7311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.255227][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.261557][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.597882][ T7331] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 197.034020][ T7359] random: crng reseeded on system resumption [ 197.305263][ T7349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.402862][ T7349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.311362][ T7373] FAULT_INJECTION: forcing a failure. [ 198.311362][ T7373] name failslab, interval 1, probability 0, space 0, times 0 [ 198.389603][ T7373] CPU: 0 UID: 0 PID: 7373 Comm: syz.2.261 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 198.389628][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.389638][ T7373] Call Trace: [ 198.389643][ T7373] [ 198.389649][ T7373] dump_stack_lvl+0x16c/0x1f0 [ 198.389683][ T7373] should_fail_ex+0x512/0x640 [ 198.389703][ T7373] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 198.389720][ T7373] should_failslab+0xc2/0x120 [ 198.389738][ T7373] __kmalloc_cache_noprof+0x6a/0x3e0 [ 198.389752][ T7373] ? devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 198.389778][ T7373] devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 198.389802][ T7373] devlink_fmsg_binary_pair_put+0x348/0x4f0 [ 198.389821][ T7373] nsim_dev_dummy_fmsg_put+0xb5/0x1e0 [ 198.389837][ T7373] devlink_health_do_dump+0x240/0x620 [ 198.389854][ T7373] devlink_health_report+0x3c9/0x9c0 [ 198.389871][ T7373] ? __pfx_devlink_health_report+0x10/0x10 [ 198.389886][ T7373] ? _copy_from_user+0x59/0xd0 [ 198.389911][ T7373] nsim_dev_health_break_write+0x166/0x210 [ 198.389926][ T7373] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 198.389946][ T7373] full_proxy_write+0x13c/0x200 [ 198.389965][ T7373] ? __pfx_full_proxy_write+0x10/0x10 [ 198.389980][ T7373] vfs_write+0x2a0/0x1150 [ 198.389998][ T7373] ? __pfx___mutex_lock+0x10/0x10 [ 198.390017][ T7373] ? __pfx_vfs_write+0x10/0x10 [ 198.390036][ T7373] ? __fget_files+0x20e/0x3c0 [ 198.390056][ T7373] ksys_write+0x12a/0x250 [ 198.390070][ T7373] ? __pfx_ksys_write+0x10/0x10 [ 198.390090][ T7373] do_syscall_64+0xcd/0x490 [ 198.390110][ T7373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.390125][ T7373] RIP: 0033:0x7fa10038e9a9 [ 198.390141][ T7373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.390155][ T7373] RSP: 002b:00007fa101204038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 198.390169][ T7373] RAX: ffffffffffffffda RBX: 00007fa1005b5fa0 RCX: 00007fa10038e9a9 [ 198.390178][ T7373] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000008 [ 198.390186][ T7373] RBP: 00007fa100410d69 R08: 0000000000000000 R09: 0000000000000000 [ 198.390195][ T7373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.390203][ T7373] R13: 0000000000000000 R14: 00007fa1005b5fa0 R15: 00007ffcdfd43e98 [ 198.390223][ T7373] [ 198.631602][ T7375] random: crng reseeded on system resumption [ 198.643290][ T7375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.652055][ T7375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.392148][ T7393] syz.0.264 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 200.496223][ T7396] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 200.757321][ T7388] kexec: Could not allocate control_code_buffer [ 201.880277][ T7421] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.940009][ T7421] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 201.959832][ T7411] zswap: compressor not available [ 202.198174][ T7421] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 202.353870][ T7421] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 202.399428][ T7423] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 202.588936][ T7421] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.635303][ T7421] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 202.837278][ T7421] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 203.055741][ T7421] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 203.102360][ T7421] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 203.219854][ T7437] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 203.288202][ T7421] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 203.323012][ T7421] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 203.485789][ T7421] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 203.514334][ T7421] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 203.601548][ T7421] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 203.818343][ T7451] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 203.925701][ T5168] Bluetooth: hci0: command 0x0c1a tx timeout [ 203.976599][ T7454] random: crng reseeded on system resumption [ 204.224580][ T7447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.363008][ T7447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.566530][ T7452] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 204.645567][ T5168] Bluetooth: hci1: command 0x0c1a tx timeout [ 205.125493][ T5168] Bluetooth: hci2: command 0x0c1a tx timeout [ 205.525052][ T5168] Bluetooth: hci3: command 0x0c1a tx timeout [ 205.830082][ T7477] zswap: compressor not available [ 206.005093][ T5168] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.727555][ T5168] Bluetooth: hci1: command 0x0c1a tx timeout [ 207.204991][ T5168] Bluetooth: hci2: command 0x0c1a tx timeout [ 207.298776][ T7507] random: crng reseeded on system resumption [ 207.522877][ T7499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.604990][ T5168] Bluetooth: hci3: command 0x0c1a tx timeout [ 207.676738][ T7499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.870592][ T7516] random: crng reseeded on system resumption [ 208.085126][ T5168] Bluetooth: hci0: command 0x0c1a tx timeout [ 208.103430][ T7505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.218840][ T7505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.242550][ T7510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.390280][ T7510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.808085][ T5168] Bluetooth: hci1: command 0x0c1a tx timeout [ 209.286394][ T5168] Bluetooth: hci2: command 0x0c1a tx timeout [ 209.685080][ T5168] Bluetooth: hci3: command 0x0c1a tx timeout [ 210.001945][ T7545] FAULT_INJECTION: forcing a failure. [ 210.001945][ T7545] name failslab, interval 1, probability 0, space 0, times 0 [ 210.075020][ T7545] CPU: 0 UID: 0 PID: 7545 Comm: syz.1.291 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 210.075043][ T7545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.075052][ T7545] Call Trace: [ 210.075057][ T7545] [ 210.075064][ T7545] dump_stack_lvl+0x16c/0x1f0 [ 210.075087][ T7545] should_fail_ex+0x512/0x640 [ 210.075105][ T7545] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 210.075124][ T7545] should_failslab+0xc2/0x120 [ 210.075142][ T7545] __kmalloc_cache_node_noprof+0x6d/0x420 [ 210.075158][ T7545] ? alloc_unbound_pwq+0x5fc/0xe10 [ 210.075177][ T7545] alloc_unbound_pwq+0x5fc/0xe10 [ 210.075195][ T7545] ? kasan_save_track+0x14/0x30 [ 210.075212][ T7545] apply_wqattrs_prepare+0x3af/0xbd0 [ 210.075236][ T7545] workqueue_apply_unbound_cpumask+0x17e/0x4f0 [ 210.075255][ T7545] ? __pfx_workqueue_apply_unbound_cpumask+0x10/0x10 [ 210.075273][ T7545] ? bitmap_parse+0x327/0x410 [ 210.075299][ T7545] cpumask_store+0x1ad/0x220 [ 210.075315][ T7545] ? __pfx_cpumask_store+0x10/0x10 [ 210.075331][ T7545] ? find_held_lock+0x2b/0x80 [ 210.075347][ T7545] ? sysfs_file_kobj+0xe4/0x290 [ 210.075362][ T7545] ? __pfx_cpumask_store+0x10/0x10 [ 210.075377][ T7545] dev_attr_store+0x55/0x80 [ 210.075398][ T7545] ? __pfx_dev_attr_store+0x10/0x10 [ 210.075418][ T7545] sysfs_kf_write+0xf2/0x150 [ 210.075433][ T7545] kernfs_fop_write_iter+0x354/0x510 [ 210.075453][ T7545] ? __pfx_sysfs_kf_write+0x10/0x10 [ 210.075469][ T7545] vfs_write+0x6c4/0x1150 [ 210.075484][ T7545] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 210.075506][ T7545] ? __pfx___mutex_lock+0x10/0x10 [ 210.075524][ T7545] ? __pfx_vfs_write+0x10/0x10 [ 210.075552][ T7545] ksys_write+0x12a/0x250 [ 210.075567][ T7545] ? __pfx_ksys_write+0x10/0x10 [ 210.075587][ T7545] do_syscall_64+0xcd/0x490 [ 210.075607][ T7545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.075622][ T7545] RIP: 0033:0x7fd16c58e9a9 [ 210.075634][ T7545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.075654][ T7545] RSP: 002b:00007fd16d3d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 210.075669][ T7545] RAX: ffffffffffffffda RBX: 00007fd16c7b5fa0 RCX: 00007fd16c58e9a9 [ 210.075678][ T7545] RDX: 0000000000000005 RSI: 0000200000000180 RDI: 0000000000000004 [ 210.075686][ T7545] RBP: 00007fd16c610d69 R08: 0000000000000000 R09: 0000000000000000 [ 210.075695][ T7545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.075703][ T7545] R13: 0000000000000000 R14: 00007fd16c7b5fa0 R15: 00007fff69817088 [ 210.075722][ T7545] [ 210.635322][ T5168] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.365126][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 211.891944][ T7555] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 212.316878][ T7570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.297'. [ 212.402822][ T7572] hub 8-0:1.0: USB hub found [ 212.424671][ T7572] hub 8-0:1.0: 1 port detected [ 212.477773][ T7565] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 212.643870][ T7577] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 212.790894][ T7579] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 213.127221][ T7581] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 213.233062][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'. [ 214.882253][ T7618] random: crng reseeded on system resumption [ 214.974429][ T7616] ptrace attach of ""[7617] was attempted by "./syz-executor exec"[7616] [ 215.054985][ T7610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.064432][ T7610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.614147][ T7614] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 216.528152][ T7637] random: crng reseeded on system resumption [ 216.818503][ T7633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.875445][ T7633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.917116][ T7669] FAULT_INJECTION: forcing a failure. [ 218.917116][ T7669] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 218.945150][ T7669] CPU: 1 UID: 0 PID: 7669 Comm: syz.2.317 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 218.945183][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.945192][ T7669] Call Trace: [ 218.945198][ T7669] [ 218.945204][ T7669] dump_stack_lvl+0x16c/0x1f0 [ 218.945229][ T7669] should_fail_ex+0x512/0x640 [ 218.945251][ T7669] _copy_from_user+0x2e/0xd0 [ 218.945272][ T7669] memdup_user+0x6b/0xe0 [ 218.945288][ T7669] strndup_user+0x78/0xe0 [ 218.945305][ T7669] __x64_sys_fsopen+0x9c/0x240 [ 218.945324][ T7669] do_syscall_64+0xcd/0x490 [ 218.945343][ T7669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.945357][ T7669] RIP: 0033:0x7fa10038e9a9 [ 218.945369][ T7669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.945382][ T7669] RSP: 002b:00007fa101204038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 218.945395][ T7669] RAX: ffffffffffffffda RBX: 00007fa1005b5fa0 RCX: 00007fa10038e9a9 [ 218.945404][ T7669] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 218.945412][ T7669] RBP: 00007fa100410d69 R08: 0000000000000000 R09: 0000000000000000 [ 218.945420][ T7669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.945427][ T7669] R13: 0000000000000000 R14: 00007fa1005b5fa0 R15: 00007ffcdfd43e98 [ 218.945445][ T7669] [ 219.813904][ T7684] random: crng reseeded on system resumption [ 219.876557][ T51] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 219.877338][ T51] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 219.899698][ T51] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 219.900536][ T51] Bluetooth: hci0: adv larger than maximum supported [ 219.909577][ T51] Bluetooth: hci0: Malformed LE Event: 0x0d [ 219.980083][ T7671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.014006][ T7671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.239746][ T7676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.251416][ T7676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.482645][ T7692] random: crng reseeded on system resumption [ 220.512034][ T7687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.543479][ T7687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.722079][ T51] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 224.722104][ T51] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 224.738191][ T51] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 224.738226][ T51] Bluetooth: hci3: adv larger than maximum supported [ 224.746386][ T51] Bluetooth: hci3: Malformed LE Event: 0x0d [ 225.122818][ T7743] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 225.617123][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 225.629911][ T7752] random: crng reseeded on system resumption [ 225.788515][ T7741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.800231][ T7741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.268258][ T7759] random: crng reseeded on system resumption [ 226.443180][ T7756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.452406][ T7756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.352028][ T10] smpboot: CPU 1 is now offline [ 227.931095][ T7770] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 228.608160][ T7789] random: crng reseeded on system resumption [ 228.874589][ T7782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.993407][ T7782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.005171][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.069490][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.227614][ T7805] random: crng reseeded on system resumption [ 230.773256][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.883474][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.687656][ T7846] random: crng reseeded on system resumption [ 232.978231][ T7837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.124193][ T7837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.185776][ T7843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.286009][ T7843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.482351][ T7853] random: crng reseeded on system resumption [ 233.680426][ T7844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.760411][ T7844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.658162][ T7869] netlink: 326 bytes leftover after parsing attributes in process `syz.1.359'. [ 235.170518][ T7878] random: crng reseeded on system resumption [ 235.364158][ T7870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.478604][ T7870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.631308][ T7902] random: crng reseeded on system resumption [ 236.853702][ T7893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.998466][ T7896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.009976][ T7893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.166854][ T7896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.382298][ T7908] random: crng reseeded on system resumption [ 237.578751][ T7903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.595660][ T7903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.405686][ T7924] FAULT_INJECTION: forcing a failure. [ 238.405686][ T7924] name failslab, interval 1, probability 0, space 0, times 0 [ 238.499129][ T7924] CPU: 0 UID: 0 PID: 7924 Comm: syz.1.372 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 238.499152][ T7924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.499160][ T7924] Call Trace: [ 238.499166][ T7924] [ 238.499172][ T7924] dump_stack_lvl+0x16c/0x1f0 [ 238.499196][ T7924] should_fail_ex+0x512/0x640 [ 238.499215][ T7924] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 238.499232][ T7924] should_failslab+0xc2/0x120 [ 238.499250][ T7924] __kmalloc_cache_noprof+0x6a/0x3e0 [ 238.499263][ T7924] ? trace_kmalloc+0x2b/0xd0 [ 238.499280][ T7924] ? __kmalloc_noprof+0x242/0x510 [ 238.499294][ T7924] ? devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 238.499320][ T7924] devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 238.499345][ T7924] devlink_fmsg_obj_nest_start+0xa2/0xc0 [ 238.499367][ T7924] nsim_dev_dummy_fmsg_put+0xd6/0x1e0 [ 238.499383][ T7924] devlink_health_do_dump+0x240/0x620 [ 238.499400][ T7924] devlink_health_report+0x3c9/0x9c0 [ 238.499418][ T7924] ? __pfx_devlink_health_report+0x10/0x10 [ 238.499433][ T7924] ? _copy_from_user+0x59/0xd0 [ 238.499455][ T7924] nsim_dev_health_break_write+0x166/0x210 [ 238.499470][ T7924] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 238.499491][ T7924] full_proxy_write+0x13c/0x200 [ 238.499509][ T7924] ? __pfx_full_proxy_write+0x10/0x10 [ 238.499525][ T7924] vfs_write+0x2a0/0x1150 [ 238.499542][ T7924] ? __pfx___mutex_lock+0x10/0x10 [ 238.499561][ T7924] ? __pfx_vfs_write+0x10/0x10 [ 238.499581][ T7924] ? __fget_files+0x20e/0x3c0 [ 238.499601][ T7924] ksys_write+0x12a/0x250 [ 238.499615][ T7924] ? __pfx_ksys_write+0x10/0x10 [ 238.499636][ T7924] do_syscall_64+0xcd/0x490 [ 238.499656][ T7924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.499670][ T7924] RIP: 0033:0x7fd16c58e9a9 [ 238.499683][ T7924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.499696][ T7924] RSP: 002b:00007fd16d3d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 238.499709][ T7924] RAX: ffffffffffffffda RBX: 00007fd16c7b5fa0 RCX: 00007fd16c58e9a9 [ 238.499718][ T7924] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000008 [ 238.499726][ T7924] RBP: 00007fd16c610d69 R08: 0000000000000000 R09: 0000000000000000 [ 238.499735][ T7924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.499743][ T7924] R13: 0000000000000000 R14: 00007fd16c7b5fa0 R15: 00007fff69817088 [ 238.499761][ T7924] [ 241.013931][ T7932] kexec: Could not allocate control_code_buffer [ 242.442072][ T7981] random: crng reseeded on system resumption [ 242.912818][ T7973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.943168][ T7974] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 243.040563][ T7973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.490964][ T7982] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 244.713739][ T8005] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 245.023356][ T7998] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 245.052360][ T8005] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 245.111249][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.383'. [ 245.543818][ T8016] random: crng reseeded on system resumption [ 245.723740][ T8006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.858777][ T8006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.054877][ T8023] random: crng reseeded on system resumption [ 246.161925][ T8014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.171623][ T8014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.533312][ T8056] random: crng reseeded on system resumption [ 248.776965][ T8055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.786644][ T8055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.328368][ T8078] zram0: detected capacity change from 0 to 8 [ 249.373953][ T8073] FAULT_INJECTION: forcing a failure. [ 249.373953][ T8073] name failslab, interval 1, probability 0, space 0, times 0 [ 249.410257][ T8073] CPU: 1 UID: 0 PID: 8073 Comm: syz.3.399 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 249.410295][ T8073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 249.410308][ T8073] Call Trace: [ 249.410317][ T8073] [ 249.410326][ T8073] dump_stack_lvl+0x16c/0x1f0 [ 249.410365][ T8073] should_fail_ex+0x512/0x640 [ 249.410396][ T8073] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 249.410424][ T8073] should_failslab+0xc2/0x120 [ 249.410455][ T8073] __kmalloc_cache_noprof+0x6a/0x3e0 [ 249.410478][ T8073] ? trace_kmalloc+0x2b/0xd0 [ 249.410507][ T8073] ? __kmalloc_noprof+0x242/0x510 [ 249.410532][ T8073] ? devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 249.410578][ T8073] devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 249.410620][ T8073] devlink_fmsg_obj_nest_start+0xa2/0xc0 [ 249.410659][ T8073] nsim_dev_dummy_fmsg_put+0xd6/0x1e0 [ 249.410688][ T8073] devlink_health_do_dump+0x240/0x620 [ 249.410719][ T8073] devlink_health_report+0x3c9/0x9c0 [ 249.410756][ T8073] ? __pfx_devlink_health_report+0x10/0x10 [ 249.410784][ T8073] ? _copy_from_user+0x59/0xd0 [ 249.410824][ T8073] nsim_dev_health_break_write+0x166/0x210 [ 249.410851][ T8073] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 249.410887][ T8073] full_proxy_write+0x13c/0x200 [ 249.410919][ T8073] ? __pfx_full_proxy_write+0x10/0x10 [ 249.410947][ T8073] vfs_write+0x2a0/0x1150 [ 249.410978][ T8073] ? __pfx___mutex_lock+0x10/0x10 [ 249.411011][ T8073] ? __pfx_vfs_write+0x10/0x10 [ 249.411048][ T8073] ? __fget_files+0x20e/0x3c0 [ 249.411096][ T8073] ksys_write+0x12a/0x250 [ 249.411124][ T8073] ? __pfx_ksys_write+0x10/0x10 [ 249.411163][ T8073] do_syscall_64+0xcd/0x490 [ 249.411200][ T8073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.411225][ T8073] RIP: 0033:0x7f565658e9a9 [ 249.411246][ T8073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.411271][ T8073] RSP: 002b:00007f565739e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 249.411294][ T8073] RAX: ffffffffffffffda RBX: 00007f56567b5fa0 RCX: 00007f565658e9a9 [ 249.411312][ T8073] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000008 [ 249.411327][ T8073] RBP: 00007f5656610d69 R08: 0000000000000000 R09: 0000000000000000 [ 249.411342][ T8073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.411356][ T8073] R13: 0000000000000000 R14: 00007f56567b5fa0 R15: 00007ffec7af40e8 [ 249.411392][ T8073] [ 250.484043][ T8088] random: crng reseeded on system resumption [ 250.870282][ T8088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.886846][ T8088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.603402][ T8072] kexec: Could not allocate control_code_buffer [ 253.380179][ T8128] random: crng reseeded on system resumption [ 253.737501][ T8122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.747572][ T8122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.913895][ T8129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.010734][ T8129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.659875][ T8149] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 255.711316][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.731992][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.977849][ T8148] warning: `syz.0.415' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 257.993631][ T8182] random: crng reseeded on system resumption [ 258.008692][ T8184] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 258.308176][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 258.468260][ T8171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.576655][ T8171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.484790][ T8202] Invalid ELF header magic: != ELF [ 259.515550][ T8207] FAULT_INJECTION: forcing a failure. [ 259.515550][ T8207] name failslab, interval 1, probability 0, space 0, times 0 [ 259.529328][ T8207] CPU: 0 UID: 0 PID: 8207 Comm: syz.0.428 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 259.529349][ T8207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.529358][ T8207] Call Trace: [ 259.529363][ T8207] [ 259.529369][ T8207] dump_stack_lvl+0x16c/0x1f0 [ 259.529394][ T8207] should_fail_ex+0x512/0x640 [ 259.529422][ T8207] ? __kmalloc_node_noprof+0xc5/0x500 [ 259.529442][ T8207] should_failslab+0xc2/0x120 [ 259.529460][ T8207] __kmalloc_node_noprof+0xd8/0x500 [ 259.529477][ T8207] ? alloc_slab_obj_exts+0x41/0xa0 [ 259.529502][ T8207] alloc_slab_obj_exts+0x41/0xa0 [ 259.529524][ T8207] __memcg_slab_post_alloc_hook+0x255/0x960 [ 259.529547][ T8207] ? kasan_save_track+0x14/0x30 [ 259.529564][ T8207] kmem_cache_alloc_noprof+0x307/0x3b0 [ 259.529579][ T8207] ? __lock_acquire+0xb8a/0x1c90 [ 259.529599][ T8207] ? ep_ptable_queue_proc+0x5b/0x280 [ 259.529623][ T8207] ep_ptable_queue_proc+0x5b/0x280 [ 259.529644][ T8207] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 259.529665][ T8207] unix_dgram_poll+0x82/0x770 [ 259.529682][ T8207] ? __pfx_unix_dgram_poll+0x10/0x10 [ 259.529696][ T8207] sock_poll+0x160/0x510 [ 259.529711][ T8207] ? __pfx_sock_poll+0x10/0x10 [ 259.529724][ T8207] ep_item_poll+0x13e/0x1f0 [ 259.529746][ T8207] do_epoll_ctl+0x1fae/0x3790 [ 259.529768][ T8207] ? __pfx_do_epoll_ctl+0x10/0x10 [ 259.529781][ T8207] ? find_held_lock+0x2b/0x80 [ 259.529795][ T8207] ? __might_fault+0xe3/0x190 [ 259.529810][ T8207] ? __might_fault+0xe3/0x190 [ 259.529830][ T8207] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 259.529874][ T8207] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 259.529894][ T8207] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 259.529917][ T8207] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 259.529951][ T8207] do_syscall_64+0xcd/0x490 [ 259.529973][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.529987][ T8207] RIP: 0033:0x7fdc1598e9a9 [ 259.530000][ T8207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.530014][ T8207] RSP: 002b:00007fdc16770038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 259.530028][ T8207] RAX: ffffffffffffffda RBX: 00007fdc15bb5fa0 RCX: 00007fdc1598e9a9 [ 259.530037][ T8207] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000005 [ 259.530045][ T8207] RBP: 00007fdc15a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 259.530053][ T8207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.530060][ T8207] R13: 0000000000000000 R14: 00007fdc15bb5fa0 R15: 00007ffdcdfbb898 [ 259.530079][ T8207] [ 260.507733][ T8218] random: crng reseeded on system resumption [ 260.811659][ T8204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.859080][ T8204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.222659][ T8229] random: crng reseeded on system resumption [ 261.462143][ T8227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.471870][ T8227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.572067][ T8222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.586390][ T8222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.856071][ T8237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.876197][ T8237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.847737][ T8247] random: crng reseeded on system resumption [ 262.957539][ T8243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.023215][ T8243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.616717][ T8254] .SR: entered promiscuous mode [ 263.664800][ T8256] Invalid ELF header magic: != ELF [ 264.845141][ T10] smpboot: CPU 1 is now offline [ 265.069304][ T8261] could not allocate digest TFM handle [ 265.120401][ T8254] could not allocate digest TFM handle [ 265.471961][ T8293] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 266.187178][ T8303] FAULT_INJECTION: forcing a failure. [ 266.187178][ T8303] name failslab, interval 1, probability 0, space 0, times 0 [ 266.311568][ T8303] CPU: 0 UID: 0 PID: 8303 Comm: syz.1.445 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 266.311592][ T8303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 266.311600][ T8303] Call Trace: [ 266.311605][ T8303] [ 266.311611][ T8303] dump_stack_lvl+0x16c/0x1f0 [ 266.311635][ T8303] should_fail_ex+0x512/0x640 [ 266.311655][ T8303] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 266.311670][ T8303] should_failslab+0xc2/0x120 [ 266.311688][ T8303] __kmalloc_cache_noprof+0x6a/0x3e0 [ 266.311701][ T8303] ? lockdep_init_map_type+0x5c/0x280 [ 266.311722][ T8303] ? nci_hci_allocate+0x45/0x330 [ 266.311743][ T8303] nci_hci_allocate+0x45/0x330 [ 266.311762][ T8303] nci_allocate_device+0x26f/0x430 [ 266.311778][ T8303] virtual_ncidev_open+0x6f/0x220 [ 266.311794][ T8303] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 266.311810][ T8303] misc_open+0x35a/0x420 [ 266.311826][ T8303] ? __pfx_misc_open+0x10/0x10 [ 266.311841][ T8303] chrdev_open+0x234/0x6a0 [ 266.311858][ T8303] ? __pfx_apparmor_file_open+0x10/0x10 [ 266.311881][ T8303] ? __pfx_chrdev_open+0x10/0x10 [ 266.311899][ T8303] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 266.311917][ T8303] do_dentry_open+0x744/0x1c10 [ 266.311933][ T8303] ? __pfx_chrdev_open+0x10/0x10 [ 266.311953][ T8303] vfs_open+0x82/0x3f0 [ 266.311974][ T8303] path_openat+0x1de4/0x2cb0 [ 266.311996][ T8303] ? __pfx_path_openat+0x10/0x10 [ 266.312011][ T8303] ? __lock_acquire+0xb8a/0x1c90 [ 266.312033][ T8303] do_filp_open+0x20b/0x470 [ 266.312048][ T8303] ? __pfx_do_filp_open+0x10/0x10 [ 266.312077][ T8303] ? alloc_fd+0x471/0x7d0 [ 266.312096][ T8303] do_sys_openat2+0x11b/0x1d0 [ 266.312114][ T8303] ? __pfx_do_sys_openat2+0x10/0x10 [ 266.312141][ T8303] __x64_sys_openat+0x174/0x210 [ 266.312161][ T8303] ? __pfx___x64_sys_openat+0x10/0x10 [ 266.312188][ T8303] do_syscall_64+0xcd/0x490 [ 266.312208][ T8303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.312221][ T8303] RIP: 0033:0x7fd16c58e9a9 [ 266.312233][ T8303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.312247][ T8303] RSP: 002b:00007fd16d3b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 266.312260][ T8303] RAX: ffffffffffffffda RBX: 00007fd16c7b6080 RCX: 00007fd16c58e9a9 [ 266.312269][ T8303] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 266.312277][ T8303] RBP: 00007fd16c610d69 R08: 0000000000000000 R09: 0000000000000000 [ 266.312285][ T8303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.312293][ T8303] R13: 0000000000000000 R14: 00007fd16c7b6080 R15: 00007fff69817088 [ 266.312310][ T8303] [ 266.875109][ T8311] random: crng reseeded on system resumption [ 266.930278][ T8311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.969202][ T8311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.018304][ T8351] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 269.659668][ T8352] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 269.768388][ T8364] random: crng reseeded on system resumption [ 270.073866][ T8350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.218140][ T8350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.420497][ T8368] random: crng reseeded on system resumption [ 270.675346][ T8362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.799270][ T8362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.226196][ T8389] random: crng reseeded on system resumption [ 272.498083][ T8381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.601367][ T8381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.909648][ T8416] random: crng reseeded on system resumption [ 274.170180][ T8407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.307059][ T8407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.577818][ T8415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.677868][ T8415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.840531][ T8431] random: crng reseeded on system resumption [ 275.032613][ T8427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.118447][ T8427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.520133][ T8456] random: crng reseeded on system resumption [ 276.807381][ T8447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.944082][ T8447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.239157][ T8463] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 279.078523][ T8487] random: crng reseeded on system resumption [ 279.360319][ T8481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.544405][ T8480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.553329][ T8481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.702929][ T8480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.192097][ T8506] FAULT_INJECTION: forcing a failure. [ 280.192097][ T8506] name failslab, interval 1, probability 0, space 0, times 0 [ 280.334357][ T8506] CPU: 0 UID: 0 PID: 8506 Comm: syz.0.488 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 280.334381][ T8506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 280.334390][ T8506] Call Trace: [ 280.334395][ T8506] [ 280.334401][ T8506] dump_stack_lvl+0x16c/0x1f0 [ 280.334426][ T8506] should_fail_ex+0x512/0x640 [ 280.334445][ T8506] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 280.334462][ T8506] should_failslab+0xc2/0x120 [ 280.334481][ T8506] __kmalloc_cache_noprof+0x6a/0x3e0 [ 280.334493][ T8506] ? lockdep_init_map_type+0x5c/0x280 [ 280.334515][ T8506] ? nci_hci_allocate+0x45/0x330 [ 280.334539][ T8506] nci_hci_allocate+0x45/0x330 [ 280.334559][ T8506] nci_allocate_device+0x26f/0x430 [ 280.334576][ T8506] virtual_ncidev_open+0x6f/0x220 [ 280.334593][ T8506] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 280.334608][ T8506] misc_open+0x35a/0x420 [ 280.334624][ T8506] ? __pfx_misc_open+0x10/0x10 [ 280.334640][ T8506] chrdev_open+0x234/0x6a0 [ 280.334656][ T8506] ? __pfx_apparmor_file_open+0x10/0x10 [ 280.334678][ T8506] ? __pfx_chrdev_open+0x10/0x10 [ 280.334696][ T8506] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 280.334714][ T8506] do_dentry_open+0x744/0x1c10 [ 280.334731][ T8506] ? __pfx_chrdev_open+0x10/0x10 [ 280.334751][ T8506] vfs_open+0x82/0x3f0 [ 280.334772][ T8506] path_openat+0x1de4/0x2cb0 [ 280.334794][ T8506] ? __pfx_path_openat+0x10/0x10 [ 280.334810][ T8506] ? __lock_acquire+0xb8a/0x1c90 [ 280.334832][ T8506] do_filp_open+0x20b/0x470 [ 280.334847][ T8506] ? __pfx_do_filp_open+0x10/0x10 [ 280.334875][ T8506] ? alloc_fd+0x471/0x7d0 [ 280.334894][ T8506] do_sys_openat2+0x11b/0x1d0 [ 280.334913][ T8506] ? __pfx_do_sys_openat2+0x10/0x10 [ 280.334940][ T8506] __x64_sys_openat+0x174/0x210 [ 280.334959][ T8506] ? __pfx___x64_sys_openat+0x10/0x10 [ 280.334987][ T8506] do_syscall_64+0xcd/0x490 [ 280.335006][ T8506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.335021][ T8506] RIP: 0033:0x7fdc1598e9a9 [ 280.335033][ T8506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.335046][ T8506] RSP: 002b:00007fdc1672e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 280.335060][ T8506] RAX: ffffffffffffffda RBX: 00007fdc15bb6160 RCX: 00007fdc1598e9a9 [ 280.335069][ T8506] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 280.335077][ T8506] RBP: 00007fdc15a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 280.335085][ T8506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.335093][ T8506] R13: 0000000000000000 R14: 00007fdc15bb6160 R15: 00007ffdcdfbb898 [ 280.335111][ T8506] [ 280.596037][ C0] vkms_vblank_simulate: vblank timer overrun [ 281.118759][ T8509] random: crng reseeded on system resumption [ 281.189159][ T8518] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 281.398159][ T8517] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 283.281346][ T8521] syz.3.491 (8521) used greatest stack depth: 19784 bytes left [ 283.523175][ T8542] random: crng reseeded on system resumption [ 283.745545][ T8537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.864145][ T8537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.975364][ T8559] random: crng reseeded on system resumption [ 285.273866][ T8553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.375858][ T8553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.761953][ T8566] FAULT_INJECTION: forcing a failure. [ 285.761953][ T8566] name fail_futex, interval 1, probability 0, space 0, times 1 [ 285.847813][ T8566] CPU: 0 UID: 0 PID: 8566 Comm: syz.2.499 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 285.847837][ T8566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.847846][ T8566] Call Trace: [ 285.847851][ T8566] [ 285.847857][ T8566] dump_stack_lvl+0x16c/0x1f0 [ 285.847880][ T8566] should_fail_ex+0x512/0x640 [ 285.847902][ T8566] get_futex_key+0x1d0/0x1540 [ 285.847924][ T8566] ? __pfx_get_futex_key+0x10/0x10 [ 285.847939][ T8566] ? find_held_lock+0x2b/0x80 [ 285.847961][ T8566] futex_wait_setup+0x84/0x510 [ 285.847987][ T8566] __futex_wait+0x194/0x2f0 [ 285.848008][ T8566] ? __pfx___futex_wait+0x10/0x10 [ 285.848032][ T8566] ? __pfx_futex_wake_mark+0x10/0x10 [ 285.848056][ T8566] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 285.848077][ T8566] ? __futex_hash.constprop.0+0x1e9/0x440 [ 285.848096][ T8566] futex_wait+0xe8/0x380 [ 285.848116][ T8566] ? __pfx_futex_wait+0x10/0x10 [ 285.848135][ T8566] ? mark_held_locks+0x49/0x80 [ 285.848164][ T8566] do_futex+0x229/0x350 [ 285.848182][ T8566] ? __pfx_do_futex+0x10/0x10 [ 285.848199][ T8566] ? __might_fault+0xe3/0x190 [ 285.848213][ T8566] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 285.848238][ T8566] __x64_sys_futex+0x1e0/0x4c0 [ 285.848259][ T8566] ? __pfx___x64_sys_futex+0x10/0x10 [ 285.848277][ T8566] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 285.848296][ T8566] do_syscall_64+0xcd/0x490 [ 285.848316][ T8566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.848330][ T8566] RIP: 0033:0x7fa10038e9a9 [ 285.848341][ T8566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.848354][ T8566] RSP: 002b:00007fa1012040e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 285.848368][ T8566] RAX: ffffffffffffffda RBX: 00007fa1005b5fa8 RCX: 00007fa10038e9a9 [ 285.848377][ T8566] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa1005b5fa8 [ 285.848385][ T8566] RBP: 00007fa1005b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 285.848393][ T8566] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa1005b5fac [ 285.848401][ T8566] R13: 0000000000000000 R14: 00007ffcdfd43db0 R15: 00007ffcdfd43e98 [ 285.848418][ T8566] [ 287.326368][ T8582] random: crng reseeded on system resumption [ 287.610897][ T8576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.815359][ T8576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.547799][ T8600] ptp ptp0: delete virtual clock ptp3 [ 288.573660][ T8600] ptp ptp0: delete virtual clock ptp2 [ 288.607058][ T8600] ptp ptp0: delete virtual clock ptp1 [ 288.633443][ T8600] ptp ptp0: only physical clock in use now [ 288.708026][ T8606] random: crng reseeded on system resumption [ 289.120784][ T8597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.231232][ T8597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.370770][ T8605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.573832][ T8605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.743106][ T8646] random: crng reseeded on system resumption [ 291.891239][ T8640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.964023][ T8640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.225185][ T8656] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 293.249782][ T8656] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 293.276718][ T8656] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 293.293020][ T8656] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 294.404458][ T8688] random: crng reseeded on system resumption [ 294.755853][ T8680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.828616][ T8687] kAFS: No cell specified [ 294.885375][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 294.905264][ T8680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.286464][ T5168] Bluetooth: hci1: command 0x0c1a tx timeout [ 295.292725][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 295.365265][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 302.564486][ T8811] random: crng reseeded on system resumption [ 303.132934][ T8807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.249925][ T8807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.359992][ T8810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.493739][ T8810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.508877][ T8789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.550827][ T8789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.355380][ T8827] random: crng reseeded on system resumption [ 304.588691][ T8820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.653108][ T8820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.245391][ T8839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.550'. [ 306.077397][ T8854] random: crng reseeded on system resumption [ 306.358327][ T8848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.480701][ T8853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.489671][ T8848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.527222][ T8853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.104722][ T8863] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 307.291160][ T8867] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 307.802858][ T8872] random: crng reseeded on system resumption [ 308.038356][ T8864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.111562][ T8864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.766469][ T8871] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 309.531993][ T8900] random: crng reseeded on system resumption [ 309.723293][ T8886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.827890][ T8886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.916580][ T8917] random: crng reseeded on system resumption [ 311.002968][ T8904] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 311.203674][ T8914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.308924][ T8914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.514445][ T8923] vivid-009: ================= START STATUS ================= [ 311.571898][ T8923] vivid-009: Enable Output Cropping: true grabbed [ 311.683274][ T8923] vivid-009: Enable Output Composing: true grabbed [ 311.725825][ T8928] block nbd7: not configured, cannot reconfigure [ 311.821756][ T8923] vivid-009: Enable Output Scaler: true grabbed [ 311.905243][ T8923] vivid-009: Tx RGB Quantization Range: Automatic grabbed [ 311.971128][ T8923] vivid-009: Transmit Mode: HDMI grabbed [ 312.004194][ T8923] vivid-009: Hotplug Present: 0x00000000 [ 312.121068][ T8923] vivid-009: RxSense Present: 0x00000000 [ 312.201080][ T8923] vivid-009: EDID Present: 0x00000000 [ 312.321603][ T8923] vivid-009: ================== END STATUS ================== [ 312.940107][ T8948] random: crng reseeded on system resumption [ 313.163201][ T8944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.271371][ T8944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.677400][ T8969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.575'. [ 316.634612][ T8970] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 316.958778][ T8995] random: crng reseeded on system resumption [ 317.128758][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.135556][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.195436][ T9014] random: crng reseeded on system resumption [ 318.476643][ T9005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.647280][ T9005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.188480][ T9026] random: crng reseeded on system resumption [ 319.410329][ T9021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.490226][ T9021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.571464][ T9032] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 321.196396][ T9049] random: crng reseeded on system resumption [ 321.444457][ T9043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.545429][ T9051] FAULT_INJECTION: forcing a failure. [ 321.545429][ T9051] name failslab, interval 1, probability 0, space 0, times 0 [ 321.559916][ T9043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.594053][ T9051] CPU: 0 UID: 0 PID: 9051 Comm: syz.0.593 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 321.594080][ T9051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.594088][ T9051] Call Trace: [ 321.594094][ T9051] [ 321.594100][ T9051] dump_stack_lvl+0x16c/0x1f0 [ 321.594125][ T9051] should_fail_ex+0x512/0x640 [ 321.594147][ T9051] should_failslab+0xc2/0x120 [ 321.594166][ T9051] __kmalloc_cache_noprof+0x6a/0x3e0 [ 321.594179][ T9051] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 321.594195][ T9051] ? tipc_group_create+0xbc/0x660 [ 321.594214][ T9051] tipc_group_create+0xbc/0x660 [ 321.594233][ T9051] tipc_setsockopt+0x7f0/0xdb0 [ 321.594255][ T9051] ? __pfx_tipc_setsockopt+0x10/0x10 [ 321.594279][ T9051] ? __fget_files+0x204/0x3c0 [ 321.594295][ T9051] ? __pfx_tipc_setsockopt+0x10/0x10 [ 321.594317][ T9051] do_sock_setsockopt+0xf0/0x1d0 [ 321.594342][ T9051] __sys_setsockopt+0x120/0x1a0 [ 321.594364][ T9051] __x64_sys_setsockopt+0xbd/0x160 [ 321.594381][ T9051] ? do_syscall_64+0x91/0x490 [ 321.594398][ T9051] ? lockdep_hardirqs_on+0x7c/0x110 [ 321.594415][ T9051] do_syscall_64+0xcd/0x490 [ 321.594435][ T9051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.594449][ T9051] RIP: 0033:0x7fdc1598e9a9 [ 321.594462][ T9051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.594475][ T9051] RSP: 002b:00007fdc16770038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 321.594488][ T9051] RAX: ffffffffffffffda RBX: 00007fdc15bb5fa0 RCX: 00007fdc1598e9a9 [ 321.594497][ T9051] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 321.594505][ T9051] RBP: 00007fdc15a10d69 R08: 0000000000000014 R09: 0000000000000000 [ 321.594514][ T9051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.594521][ T9051] R13: 0000000000000000 R14: 00007fdc15bb5fa0 R15: 00007ffdcdfbb898 [ 321.594539][ T9051] [ 322.487100][ T9069] random: crng reseeded on system resumption [ 322.755874][ T9054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.912233][ T9054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.960828][ T9055] kexec: Could not allocate control_code_buffer [ 324.239553][ T9088] random: crng reseeded on system resumption [ 324.403502][ T9082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.492371][ T9082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.892670][ T9109] random: crng reseeded on system resumption [ 326.192691][ T9112] vivid-009: ================= START STATUS ================= [ 326.212392][ T9105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.247863][ T9112] vivid-009: Enable Output Cropping: true grabbed [ 326.293285][ T9112] vivid-009: Enable Output Composing: true grabbed [ 326.349131][ T9112] vivid-009: Enable Output Scaler: true grabbed [ 326.389609][ T9105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.425439][ T9116] block nbd7: not configured, cannot reconfigure [ 326.474983][ T9112] vivid-009: Tx RGB Quantization Range: Automatic grabbed [ 326.627207][ T9112] vivid-009: Transmit Mode: HDMI grabbed [ 326.656353][ T9112] vivid-009: Hotplug Present: 0x00000000 [ 326.723817][ T9112] vivid-009: RxSense Present: 0x00000000 [ 326.762729][ T9112] vivid-009: EDID Present: 0x00000000 [ 326.865690][ T9112] vivid-009: ================== END STATUS ================== [ 327.221339][ T9130] random: crng reseeded on system resumption [ 327.379016][ T9124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.459888][ T9124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.523100][ T9155] random: crng reseeded on system resumption [ 329.552364][ T9145] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 329.742637][ T9149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.803975][ T9149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.397487][ T9191] random: crng reseeded on system resumption [ 331.753325][ T9175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.880330][ T9175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.005869][ T9189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.133768][ T9189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.202670][ T9196] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 332.993675][ T9211] misc userio: No port type given on /dev/userio [ 333.218269][ T9212] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 333.392299][ T9214] random: crng reseeded on system resumption [ 333.632974][ T9206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.735123][ T9206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.337431][ T9208] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 335.197569][ T9234] random: crng reseeded on system resumption [ 335.309952][ T9223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.375145][ T9223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.010752][ T9258] random: crng reseeded on system resumption [ 339.129273][ T9289] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 339.288712][ T9290] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 339.968519][ T9297] kAFS: No cell specified [ 340.412625][ T9283] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 340.447933][ T9308] random: crng reseeded on system resumption [ 340.656653][ T9300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.705799][ T9300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.330702][ T9322] random: crng reseeded on system resumption [ 341.964232][ T9329] ovs_: entered promiscuous mode [ 342.009555][ T9314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.054474][ T9332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.650'. [ 342.076205][ T9329] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 342.087575][ T9314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.512102][ T9333] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 343.150575][ T9347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.654'. [ 343.478072][ T9355] random: crng reseeded on system resumption [ 343.776706][ T9340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.925342][ T9340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.096285][ T9360] random: crng reseeded on system resumption [ 344.298294][ T9353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.427151][ T9353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.659831][ T9368] random: crng reseeded on system resumption [ 344.808961][ T9366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.857110][ T9366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.485999][ T9384] random: crng reseeded on system resumption [ 345.622919][ T9381] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 345.786146][ T9372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.020383][ T9372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.145959][ T9383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.268998][ T9383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.620584][ T9398] random: crng reseeded on system resumption [ 346.907793][ T9404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.664'. [ 347.006568][ T9403] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 347.978578][ T9426] usb usb36: usbfs: process 9426 (syz.0.670) did not claim interface 0 before use [ 348.049479][ T9426] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 348.281252][ T9430] random: crng reseeded on system resumption [ 348.483650][ T9418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.514085][ T9418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.863710][ T9447] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 352.301579][ T9463] kexec: Could not allocate control_code_buffer [ 352.516115][ T9474] random: crng reseeded on system resumption [ 352.750321][ T9471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.899738][ T9471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.820575][ T9524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.690'. syzkaller syzkaller login: [ 355.234102][ T9507] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 355.255736][ T9517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.413361][ T9517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.637095][ T9511] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.1.688: 7 [ 356.537151][ T9546] random: crng reseeded on system resumption [ 356.808342][ T9541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.933153][ T9541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.101732][ T9571] usb usb36: usbfs: process 9571 (syz.1.699) did not claim interface 0 before use [ 358.629865][ T9580] random: crng reseeded on system resumption [ 358.822105][ T9570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.876541][ T9570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.090721][ T9584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.701'. [ 359.948479][ T9558] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 360.474501][ T9604] random: crng reseeded on system resumption syzkaller syzkaller login: [ 360.733882][ T9597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.817778][ T9597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.109563][ T9612] random: crng reseeded on system resumption [ 361.343854][ T9602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.396727][ T9602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.154683][ T9628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.712'. [ 362.675460][ T9633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.721'. [ 362.923299][ T9642] netlink: 22784 bytes leftover after parsing attributes in process `syz.1.716'. [ 362.977743][ T9635] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 363.222995][ T9638] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 364.198864][ T9661] random: crng reseeded on system resumption [ 364.252634][ T9662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.720'. [ 364.371791][ T9653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.426981][ T9653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.619855][ T9651] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 365.653065][ T9682] random: crng reseeded on system resumption [ 365.886382][ T9674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.886685][ T9674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.102211][ T9689] random: crng reseeded on system resumption [ 366.287227][ T9683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.287489][ T9683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.515988][ T9695] kAFS: No cell specified [ 366.933813][ T9707] random: crng reseeded on system resumption [ 367.162598][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.223393][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.391651][ T9713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.733'. [ 368.128990][ T51] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 369.786982][ T9748] random: crng reseeded on system resumption [ 369.973561][ T9739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.084400][ T9739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.782621][ T9759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.742'. [ 370.915431][ T9761] random: crng reseeded on system resumption [ 371.002328][ T9753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.002576][ T9753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.062385][ T9762] kAFS: No cell specified [ 371.996654][ T9772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.745'. [ 372.627184][ T9775] random: crng reseeded on system resumption [ 372.862229][ T9771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.923360][ T9779] FAULT_INJECTION: forcing a failure. [ 372.923360][ T9779] name failslab, interval 1, probability 0, space 0, times 0 [ 372.936667][ T9771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.992028][ T9779] CPU: 0 UID: 0 PID: 9779 Comm: syz.0.754 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 372.992053][ T9779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 372.992062][ T9779] Call Trace: [ 372.992067][ T9779] [ 372.992077][ T9779] dump_stack_lvl+0x16c/0x1f0 [ 372.992101][ T9779] should_fail_ex+0x512/0x640 [ 372.992121][ T9779] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 372.992140][ T9779] should_failslab+0xc2/0x120 [ 372.992160][ T9779] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 372.992176][ T9779] ? alloc_empty_file+0x55/0x1e0 [ 372.992199][ T9779] alloc_empty_file+0x55/0x1e0 [ 372.992219][ T9779] path_openat+0xda/0x2cb0 [ 372.992233][ T9779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.992254][ T9779] ? __pfx_path_openat+0x10/0x10 [ 372.992269][ T9779] ? __lock_acquire+0xb8a/0x1c90 [ 372.992292][ T9779] do_filp_open+0x20b/0x470 [ 372.992307][ T9779] ? __pfx_do_filp_open+0x10/0x10 [ 372.992336][ T9779] ? alloc_fd+0x471/0x7d0 [ 372.992355][ T9779] do_sys_openat2+0x11b/0x1d0 [ 372.992376][ T9779] ? __pfx_do_sys_openat2+0x10/0x10 [ 372.992396][ T9779] ? __sys_sendmsg+0x18c/0x220 [ 372.992420][ T9779] __x64_sys_openat+0x174/0x210 [ 372.992440][ T9779] ? __pfx___x64_sys_openat+0x10/0x10 [ 372.992468][ T9779] do_syscall_64+0xcd/0x490 [ 372.992488][ T9779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.992502][ T9779] RIP: 0033:0x7fdc1598e9a9 [ 372.992514][ T9779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.992528][ T9779] RSP: 002b:00007fdc16770038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 372.992542][ T9779] RAX: ffffffffffffffda RBX: 00007fdc15bb5fa0 RCX: 00007fdc1598e9a9 [ 372.992551][ T9779] RDX: 0000000000101202 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 372.992560][ T9779] RBP: 00007fdc15a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 372.992568][ T9779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.992576][ T9779] R13: 0000000000000000 R14: 00007fdc15bb5fa0 R15: 00007ffdcdfbb898 [ 372.992594][ T9779] [ 373.201519][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.726908][ T9790] usb usb36: usbfs: process 9790 (syz.3.747) did not claim interface 0 before use [ 373.786519][ T9790] device-mapper: ioctl: Unable to change name on mapped device  to one that already exists: „ [ 374.306732][ T9801] random: crng reseeded on system resumption [ 374.548199][ T9795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.648307][ T9795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.050351][ T9825] random: crng reseeded on system resumption [ 376.404015][ T9818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.467436][ T9818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.824222][ T9833] random: crng reseeded on system resumption [ 377.008044][ T9833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.166970][ T9833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.569300][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.576006][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.119625][ T9879] random: crng reseeded on system resumption [ 379.171991][ T9877] blk-mq: reduced tag depth (128 -> 64) [ 379.281258][ T9874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.338138][ T9874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.551716][ T9882] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 380.183879][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.192097][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.505290][ T9899] random: crng reseeded on system resumption [ 380.546977][ T9894] kAFS: No cell specified [ 380.709910][ T9889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.758877][ T9889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.308411][ T9906] random: crng reseeded on system resumption [ 381.536428][ T9915] netlink: 22784 bytes leftover after parsing attributes in process `syz.0.773'. [ 381.582463][ T9900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.684300][ T9900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.197538][ T9925] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 382.751873][ T9939] random: crng reseeded on system resumption [ 382.873990][ T9930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.951622][ T9930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.392998][ T9948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.779'. [ 383.426672][ T9950] random: crng reseeded on system resumption [ 383.601488][ T9944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.667813][ T9944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.223156][ T9985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.786'. [ 386.411585][ T9984] FAULT_INJECTION: forcing a failure. [ 386.411585][ T9984] name failslab, interval 1, probability 0, space 0, times 0 [ 386.543883][ T9984] CPU: 0 UID: 0 PID: 9984 Comm: syz.3.787 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 386.543907][ T9984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 386.543917][ T9984] Call Trace: [ 386.543922][ T9984] [ 386.543928][ T9984] dump_stack_lvl+0x16c/0x1f0 [ 386.543953][ T9984] should_fail_ex+0x512/0x640 [ 386.543972][ T9984] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 386.543991][ T9984] should_failslab+0xc2/0x120 [ 386.544009][ T9984] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 386.544024][ T9984] ? __proc_create+0xc3/0x8e0 [ 386.544042][ T9984] ? __proc_create+0x2ce/0x8e0 [ 386.544063][ T9984] __proc_create+0x2ce/0x8e0 [ 386.544082][ T9984] ? __pfx___proc_create+0x10/0x10 [ 386.544108][ T9984] _proc_mkdir+0xb9/0x210 [ 386.544127][ T9984] ? __pfx__proc_mkdir+0x10/0x10 [ 386.544150][ T9984] ? __pfx_vlan_init_net+0x10/0x10 [ 386.544171][ T9984] vlan_proc_init+0x93/0x180 [ 386.544188][ T9984] ops_init+0x1e2/0x5f0 [ 386.544212][ T9984] setup_net+0x1ff/0x510 [ 386.544231][ T9984] ? lockdep_init_map_type+0x5c/0x280 [ 386.544253][ T9984] ? __pfx_setup_net+0x10/0x10 [ 386.544275][ T9984] ? debug_mutex_init+0x37/0x70 [ 386.544293][ T9984] copy_net_ns+0x2a6/0x5f0 [ 386.544308][ T9984] create_new_namespaces+0x3ea/0xa90 [ 386.544330][ T9984] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 386.544348][ T9984] ksys_unshare+0x45b/0xa40 [ 386.544369][ T9984] ? __pfx_ksys_unshare+0x10/0x10 [ 386.544391][ T9984] ? syscall_user_dispatch+0x78/0x140 [ 386.544409][ T9984] __x64_sys_unshare+0x31/0x40 [ 386.544429][ T9984] do_syscall_64+0xcd/0x490 [ 386.544449][ T9984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.544464][ T9984] RIP: 0033:0x7f565658e9a9 [ 386.544477][ T9984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.544490][ T9984] RSP: 002b:00007f565739e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 386.544504][ T9984] RAX: ffffffffffffffda RBX: 00007f56567b5fa0 RCX: 00007f565658e9a9 [ 386.544514][ T9984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 386.544522][ T9984] RBP: 00007f5656610d69 R08: 0000000000000000 R09: 0000000000000000 [ 386.544531][ T9984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.544540][ T9984] R13: 0000000000000000 R14: 00007f56567b5fa0 R15: 00007ffec7af40e8 [ 386.544559][ T9984] [ 386.544566][ T9984] 8021q: can't create entry in proc filesystem! [ 387.274164][ T9980] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 388.214987][T10003] netlink: 28 bytes leftover after parsing attributes in process `syz.2.791'. syzkaller syzkaller login: [ 390.200745][T10021] random: crng reseeded on system resumption [ 390.384171][T10017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.457842][T10017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.566950][T10042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.687540][T10042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.187661][T10056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.802'. [ 393.992699][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.804'. [ 394.809768][T10074] netlink: 350 bytes leftover after parsing attributes in process `syz.3.807'. [ 395.025343][T10082] random: crng reseeded on system resumption [ 395.311973][T10068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.421823][T10068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.660594][T10096] FAULT_INJECTION: forcing a failure. [ 396.660594][T10096] name failslab, interval 1, probability 0, space 0, times 0 [ 396.807722][T10096] CPU: 0 UID: 0 PID: 10096 Comm: syz.0.810 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 396.807747][T10096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 396.807756][T10096] Call Trace: [ 396.807762][T10096] [ 396.807768][T10096] dump_stack_lvl+0x16c/0x1f0 [ 396.807793][T10096] should_fail_ex+0x512/0x640 [ 396.807811][T10096] ? __kmalloc_node_noprof+0xc5/0x500 [ 396.807830][T10096] should_failslab+0xc2/0x120 [ 396.807856][T10096] __kmalloc_node_noprof+0xd8/0x500 [ 396.807872][T10096] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 396.807896][T10096] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 396.807911][T10096] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 396.807934][T10096] crypto_create_tfm_node+0x85/0x350 [ 396.807957][T10096] crypto_alloc_tfm_node+0x102/0x260 [ 396.807977][T10096] ? kasan_save_track+0x14/0x30 [ 396.807994][T10096] sctp_auth_init_hmacs+0x1e1/0x440 [ 396.808015][T10096] ? kasan_save_track+0x14/0x30 [ 396.808032][T10096] sctp_auth_init+0x90/0x570 [ 396.808056][T10096] sctp_setsockopt+0xa371/0xb870 [ 396.808074][T10096] ? __pfx_sctp_setsockopt+0x10/0x10 [ 396.808089][T10096] ? __pfx_aa_sk_perm+0x10/0x10 [ 396.808112][T10096] ? __fget_files+0x204/0x3c0 [ 396.808128][T10096] ? sock_common_setsockopt+0x2e/0xf0 [ 396.808150][T10096] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 396.808174][T10096] do_sock_setsockopt+0xf0/0x1d0 [ 396.808198][T10096] __sys_setsockopt+0x120/0x1a0 [ 396.808220][T10096] __x64_sys_setsockopt+0xbd/0x160 [ 396.808237][T10096] ? do_syscall_64+0x91/0x490 [ 396.808255][T10096] ? lockdep_hardirqs_on+0x7c/0x110 [ 396.808272][T10096] do_syscall_64+0xcd/0x490 [ 396.808291][T10096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.808305][T10096] RIP: 0033:0x7fdc1598e9a9 [ 396.808318][T10096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.808332][T10096] RSP: 002b:00007fdc1674f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 396.808345][T10096] RAX: ffffffffffffffda RBX: 00007fdc15bb6080 RCX: 00007fdc1598e9a9 [ 396.808354][T10096] RDX: 0000000000000081 RSI: 0000010000000084 RDI: 0000000000000003 [ 396.808363][T10096] RBP: 00007fdc15a10d69 R08: 0000000000000008 R09: 0000000000000000 [ 396.808372][T10096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.808380][T10096] R13: 0000000000000000 R14: 00007fdc15bb6080 R15: 00007ffdcdfbb898 [ 396.808399][T10096] [ 397.252340][T10095] random: crng reseeded on system resumption [ 397.263992][T10095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.272647][T10095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.093600][T10108] random: crng reseeded on system resumption [ 398.326610][T10105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.456911][T10105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.190228][T10126] random: crng reseeded on system resumption [ 399.460195][T10109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.606081][T10109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.958776][T10137] FAULT_INJECTION: forcing a failure. [ 399.958776][T10137] name failslab, interval 1, probability 0, space 0, times 0 [ 400.061425][T10137] CPU: 0 UID: 0 PID: 10137 Comm: syz.2.817 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 400.061449][T10137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 400.061458][T10137] Call Trace: [ 400.061464][T10137] [ 400.061469][T10137] dump_stack_lvl+0x16c/0x1f0 [ 400.061492][T10137] should_fail_ex+0x512/0x640 [ 400.061511][T10137] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 400.061537][T10137] should_failslab+0xc2/0x120 [ 400.061556][T10137] __kmalloc_cache_node_noprof+0x6d/0x420 [ 400.061571][T10137] ? kfree+0x2b4/0x4d0 [ 400.061582][T10137] ? blk_mq_init_tags+0x87/0x2b0 [ 400.061604][T10137] blk_mq_init_tags+0x87/0x2b0 [ 400.061624][T10137] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 400.061643][T10137] ? rcu_is_watching+0x12/0xc0 [ 400.061662][T10137] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 400.061681][T10137] blk_mq_alloc_tag_set+0x778/0x1260 [ 400.061703][T10137] loop_add+0x3b2/0xb70 [ 400.061719][T10137] ? __pfx_loop_add+0x10/0x10 [ 400.061746][T10137] ? find_held_lock+0x2b/0x80 [ 400.061764][T10137] loop_control_ioctl+0x13e/0x630 [ 400.061785][T10137] ? __pfx_loop_control_ioctl+0x10/0x10 [ 400.061803][T10137] ? __pfx_loop_control_ioctl+0x10/0x10 [ 400.061819][T10137] __x64_sys_ioctl+0x18b/0x210 [ 400.061843][T10137] do_syscall_64+0xcd/0x490 [ 400.061863][T10137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.061877][T10137] RIP: 0033:0x7fa10038e9a9 [ 400.061889][T10137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.061903][T10137] RSP: 002b:00007fa101204038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.061917][T10137] RAX: ffffffffffffffda RBX: 00007fa1005b5fa0 RCX: 00007fa10038e9a9 [ 400.061926][T10137] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 000000000000000a [ 400.061934][T10137] RBP: 00007fa100410d69 R08: 0000000000000000 R09: 0000000000000000 [ 400.061942][T10137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.061951][T10137] R13: 0000000000000000 R14: 00007fa1005b5fa0 R15: 00007ffcdfd43e98 [ 400.061968][T10137] [ 400.062053][T10137] blk-mq: reduced tag depth (128 -> 64) [ 400.784584][ T30] audit: type=1800 audit(6048818543.353:5): pid=10140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.818" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 401.475509][T10155] random: crng reseeded on system resumption [ 401.492302][T10149] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 401.704509][T10161] kAFS: No cell specified [ 401.910822][T10145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.052634][T10145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.345245][T10167] random: crng reseeded on system resumption [ 402.517514][T10165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.564715][T10165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.139600][T10181] FAULT_INJECTION: forcing a failure. [ 403.139600][T10181] name failslab, interval 1, probability 0, space 0, times 0 [ 403.189895][T10182] random: crng reseeded on system resumption [ 403.210108][T10181] CPU: 0 UID: 0 PID: 10181 Comm: syz.1.826 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 403.210132][T10181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 403.210141][T10181] Call Trace: [ 403.210146][T10181] [ 403.210152][T10181] dump_stack_lvl+0x16c/0x1f0 [ 403.210176][T10181] should_fail_ex+0x512/0x640 [ 403.210195][T10181] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 403.210210][T10181] should_failslab+0xc2/0x120 [ 403.210229][T10181] __kmalloc_cache_noprof+0x6a/0x3e0 [ 403.210243][T10181] ? do_eventfd+0x67/0x2c0 [ 403.210264][T10181] do_eventfd+0x67/0x2c0 [ 403.210291][T10181] ? rcu_is_watching+0x12/0xc0 [ 403.210309][T10181] __x64_sys_eventfd+0x32/0x50 [ 403.210329][T10181] do_syscall_64+0xcd/0x490 [ 403.210350][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.210364][T10181] RIP: 0033:0x7fd16c58e9a9 [ 403.210376][T10181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.210389][T10181] RSP: 002b:00007fd16d394038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 403.210402][T10181] RAX: ffffffffffffffda RBX: 00007fd16c7b6160 RCX: 00007fd16c58e9a9 [ 403.210412][T10181] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 403.210420][T10181] RBP: 00007fd16c610d69 R08: 0000000000000000 R09: 0000000000000000 [ 403.210428][T10181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.210435][T10181] R13: 0000000000000000 R14: 00007fd16c7b6160 R15: 00007fff69817088 [ 403.210453][T10181] [ 403.370814][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.394634][T10175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.403334][T10175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.913452][T10186] random: crng reseeded on system resumption [ 404.002780][T10185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.042124][T10185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.872110][T10201] netlink: 28 bytes leftover after parsing attributes in process `syz.1.829'. [ 405.002829][T10201] ipvlan0: entered allmulticast mode [ 405.098401][T10201] veth0_vlan: entered allmulticast mode [ 406.601864][T10232] random: crng reseeded on system resumption [ 406.890596][T10218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.973140][T10218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.520828][T10243] random: crng reseeded on system resumption [ 407.749194][T10238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.854414][T10238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.983965][T10269] ubi0: attaching mtd0 [ 409.017244][T10269] ubi0: scanning is finished [ 409.087058][T10269] ubi0: empty MTD device detected [ 409.126811][T10267] FAULT_INJECTION: forcing a failure. [ 409.126811][T10267] name failslab, interval 1, probability 0, space 0, times 0 [ 409.163412][T10269] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 409.199862][T10267] CPU: 0 UID: 0 PID: 10267 Comm: syz.2.840 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 409.199887][T10267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 409.199897][T10267] Call Trace: [ 409.199902][T10267] [ 409.199909][T10267] dump_stack_lvl+0x16c/0x1f0 [ 409.199932][T10267] should_fail_ex+0x512/0x640 [ 409.199952][T10267] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 409.199970][T10267] should_failslab+0xc2/0x120 [ 409.199989][T10267] __kmalloc_cache_noprof+0x6a/0x3e0 [ 409.200003][T10267] ? sctp_auth_init_hmacs+0xf2/0x440 [ 409.200027][T10267] sctp_auth_init_hmacs+0xf2/0x440 [ 409.200048][T10267] ? kasan_save_track+0x14/0x30 [ 409.200065][T10267] sctp_auth_init+0x90/0x570 [ 409.200088][T10267] sctp_setsockopt+0xa371/0xb870 [ 409.200107][T10267] ? __pfx_sctp_setsockopt+0x10/0x10 [ 409.200121][T10267] ? __pfx_aa_sk_perm+0x10/0x10 [ 409.200142][T10267] ? __fget_files+0x204/0x3c0 [ 409.200158][T10267] ? sock_common_setsockopt+0x2e/0xf0 [ 409.200180][T10267] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 409.200205][T10267] do_sock_setsockopt+0xf0/0x1d0 [ 409.200229][T10267] __sys_setsockopt+0x120/0x1a0 [ 409.200251][T10267] __x64_sys_setsockopt+0xbd/0x160 [ 409.200268][T10267] ? do_syscall_64+0x91/0x490 [ 409.200285][T10267] ? lockdep_hardirqs_on+0x7c/0x110 [ 409.200302][T10267] do_syscall_64+0xcd/0x490 [ 409.200321][T10267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.200336][T10267] RIP: 0033:0x7fa10038e9a9 [ 409.200349][T10267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.200363][T10267] RSP: 002b:00007fa1011e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 409.200376][T10267] RAX: ffffffffffffffda RBX: 00007fa1005b6080 RCX: 00007fa10038e9a9 [ 409.200386][T10267] RDX: 0000000000000081 RSI: 0000010000000084 RDI: 0000000000000003 [ 409.200394][T10267] RBP: 00007fa100410d69 R08: 0000000000000008 R09: 0000000000000000 [ 409.200402][T10267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.200410][T10267] R13: 0000000000000000 R14: 00007fa1005b6080 R15: 00007ffcdfd43e98 [ 409.200429][T10267] [ 410.078625][T10269] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 410.624354][T10288] random: crng reseeded on system resumption [ 410.762394][T10276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.762739][T10276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.836199][T10279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.836471][T10279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.304945][T10305] kAFS: No cell specified [ 412.124350][T10311] random: crng reseeded on system resumption [ 412.322670][T10302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.433647][T10302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.494150][T10309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.604403][T10309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.889265][T10317] random: crng reseeded on system resumption [ 413.071025][T10316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.174083][T10316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.659473][T10348] random: crng reseeded on system resumption [ 414.852648][T10340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.900222][T10340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.121377][T10347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.169938][T10347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.317343][T10353] kAFS: No cell specified [ 417.231796][T10378] random: crng reseeded on system resumption [ 417.505890][T10368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.597386][T10368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.889589][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'. [ 417.932173][T10384] random: crng reseeded on system resumption [ 418.278889][T10379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.391540][T10379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.647800][T10405] random: crng reseeded on system resumption [ 421.468444][T10402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.557531][T10402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.605420][T10410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.721030][T10410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.771195][T10421] random: crng reseeded on system resumption [ 421.968067][T10413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.046921][T10413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.193272][T10426] capability: warning: `syz.0.873' uses 32-bit capabilities (legacy support in use) [ 422.323198][T10426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.873'. [ 422.360045][T10430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.874'. [ 422.799249][T10426] HfR: entered promiscuous mode [ 423.738010][T10454] random: crng reseeded on system resumption [ 424.089257][T10433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.237063][T10433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.627808][T10470] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 425.769319][T10482] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 425.821626][T10482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 425.892305][T10484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.885'. [ 426.093705][T10488] random: crng reseeded on system resumption [ 426.447589][T10473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.585308][T10473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.614614][T10490] Invalid ELF header magic: != ELF [ 427.257120][T10505] random: crng reseeded on system resumption [ 427.302849][T10502] zram: Can't change algorithm for initialized device [ 427.416134][T10496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.485948][T10496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.930132][T10509] random: crng reseeded on system resumption [ 428.276307][T10504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.373167][T10504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.598967][ T5168] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 430.835493][T10561] random: crng reseeded on system resumption [ 431.151169][T10548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.266001][T10548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.484512][T10591] vivid-007: ================= START STATUS ================= [ 432.607054][T10591] vivid-007: Generate PTS: true [ 432.612163][T10591] vivid-007: Generate SCR: true [ 432.654454][T10591] tpg source WxH: 320x240 (Y'CbCr) [ 432.769564][T10591] tpg field: 1 [ 432.794693][T10591] tpg crop: (0,0)/320x240 [ 432.846601][T10591] tpg compose: (0,0)/320x240 [ 432.882395][T10591] tpg colorspace: 8 [ 432.933207][T10591] tpg transfer function: 0/0 [ 432.953245][T10591] tpg Y'CbCr encoding: 0/0 [ 432.978201][T10591] tpg quantization: 0/0 [ 433.002713][T10591] tpg RGB range: 0/2 [ 433.019126][T10591] vivid-007: ================== END STATUS ================== [ 434.108550][T10613] random: crng reseeded on system resumption [ 434.284384][T10612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.378448][T10612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.908091][T10619] Invalid ELF header magic: != ELF [ 435.237574][T10637] random: crng reseeded on system resumption [ 435.440821][T10628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.481906][T10628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.922716][T10683] block nbd9: NBD_DISCONNECT [ 437.976900][T10686] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 439.036252][T10684] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 439.610413][T10706] random: crng reseeded on system resumption [ 439.759754][T10709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.929'. [ 439.936092][T10700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.008551][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.018392][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.067899][T10700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.516769][T10721] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 440.524133][T10721] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 440.667217][T10721] FAULT_INJECTION: forcing a failure. [ 440.667217][T10721] name failslab, interval 1, probability 0, space 0, times 0 [ 440.752645][T10721] CPU: 0 UID: 0 PID: 10721 Comm: syz.1.931 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 440.752668][T10721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 440.752678][T10721] Call Trace: [ 440.752683][T10721] [ 440.752688][T10721] dump_stack_lvl+0x16c/0x1f0 [ 440.752712][T10721] should_fail_ex+0x512/0x640 [ 440.752731][T10721] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 440.752748][T10721] should_failslab+0xc2/0x120 [ 440.752767][T10721] __kmalloc_cache_noprof+0x6a/0x3e0 [ 440.752781][T10721] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 440.752796][T10721] ? trace_kmalloc+0x2b/0xd0 [ 440.752816][T10721] vb2_vmalloc_alloc+0xf9/0x3f0 [ 440.752831][T10721] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 440.752845][T10721] __vb2_queue_alloc+0x8c6/0x1280 [ 440.752870][T10721] vb2_core_reqbufs+0xa90/0xfe0 [ 440.752889][T10721] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 440.752902][T10721] ? __pfx___might_resched+0x10/0x10 [ 440.752935][T10721] ? __kmalloc_cache_noprof+0x249/0x3e0 [ 440.752954][T10721] __vb2_init_fileio+0x3f1/0x1100 [ 440.752970][T10721] ? __mutex_lock+0x1ca/0xb90 [ 440.752991][T10721] ? vb2_fop_write+0xe6/0x3f0 [ 440.753014][T10721] __vb2_perform_fileio+0x9c2/0x1660 [ 440.753033][T10721] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 440.753054][T10721] vb2_fop_write+0x207/0x3f0 [ 440.753078][T10721] v4l2_write+0x229/0x360 [ 440.753097][T10721] ? __pfx_v4l2_write+0x10/0x10 [ 440.753113][T10721] vfs_write+0x2a0/0x1150 [ 440.753132][T10721] ? __pfx_vfs_write+0x10/0x10 [ 440.753145][T10721] ? find_held_lock+0x2b/0x80 [ 440.753162][T10721] ? __fget_files+0x204/0x3c0 [ 440.753178][T10721] ? __fget_files+0x20e/0x3c0 [ 440.753197][T10721] ksys_write+0x12a/0x250 [ 440.753211][T10721] ? __pfx_ksys_write+0x10/0x10 [ 440.753231][T10721] do_syscall_64+0xcd/0x490 [ 440.753251][T10721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.753265][T10721] RIP: 0033:0x7fd16c58e9a9 [ 440.753277][T10721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.753291][T10721] RSP: 002b:00007fd16d3d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 440.753304][T10721] RAX: ffffffffffffffda RBX: 00007fd16c7b5fa0 RCX: 00007fd16c58e9a9 [ 440.753313][T10721] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000b [ 440.753322][T10721] RBP: 00007fd16c610d69 R08: 0000000000000000 R09: 0000000000000000 [ 440.753330][T10721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.753338][T10721] R13: 0000000000000000 R14: 00007fd16c7b5fa0 R15: 00007fff69817088 [ 440.753356][T10721] [ 441.087678][T10726] random: crng reseeded on system resumption [ 441.099444][T10726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.108337][T10726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.710261][T10740] random: crng reseeded on system resumption [ 441.803235][T10733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.827470][T10733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.648497][ T30] audit: type=1400 audit(6048818585.223:6): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=10752 comm="syz.2.937" [ 442.907452][T10761] random: crng reseeded on system resumption [ 443.057964][T10750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.091825][T10750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.542472][T10769] random: crng reseeded on system resumption [ 444.275548][T10762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.382243][T10762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.730978][T10785] block nbd9: NBD_DISCONNECT [ 444.768078][T10785] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 444.810153][T10787] random: crng reseeded on system resumption [ 445.035165][T10775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.105220][T10775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.605570][T10801] random: crng reseeded on system resumption [ 445.797994][T10791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.891902][T10791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.328970][T10809] random: crng reseeded on system resumption [ 446.581722][T10805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.708472][T10805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.927979][T10821] random: crng reseeded on system resumption [ 447.166413][T10815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.235124][T10815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.455546][T10819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.570584][T10819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.220811][T10837] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 449.753086][T10859] random: crng reseeded on system resumption [ 450.021691][T10846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.029812][T10846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.100618][T10872] random: crng reseeded on system resumption [ 451.260022][T10869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.323502][T10869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.872602][T10879] netlink: 'syz.0.966': attribute type 1 has an invalid length. [ 452.503687][T10896] random: crng reseeded on system resumption [ 452.616255][T10886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.671430][T10886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.911969][T10890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.990789][T10890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.366716][T10923] random: crng reseeded on system resumption [ 454.657625][T10927] mkiss: ax0: crc mode is auto. [ 454.723311][T10919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.839057][T10919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.630085][T10953] can: request_module (can-proto-0) failed. [ 455.919198][T10959] random: crng reseeded on system resumption [ 456.182841][T10946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.328870][T10955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.338135][T10946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.379030][T10955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.034130][T10973] random: crng reseeded on system resumption [ 457.925992][T10974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.934621][T10974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.089524][T10980] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 458.240154][T10967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.396983][T10967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.548300][T10991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.978'. [ 459.428146][T11003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.981'. [ 459.468272][T11006] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 459.575134][T11009] random: crng reseeded on system resumption [ 459.618013][T11003] vcan0: entered promiscuous mode [ 459.630496][T11010] Invalid ELF header magic: != ELF [ 459.753244][T11000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.796174][T11000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.828410][T11027] random: crng reseeded on system resumption [ 461.027943][T11006] could not allocate digest TFM handle [ 461.077931][T11010] could not allocate digest TFM handle [ 461.136978][T11022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.290891][T11022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.712045][T11041] random: crng reseeded on system resumption [ 461.720040][T11038] vivid-007: ================= START STATUS ================= [ 461.763240][T11038] vivid-007: Generate PTS: true [ 461.812568][T11038] vivid-007: Generate SCR: true [ 461.870716][T11038] tpg source WxH: 320x240 (Y'CbCr) [ 461.929654][T11038] tpg field: 1 [ 461.948339][T11038] tpg crop: (0,0)/320x240 [ 461.986598][T11038] tpg compose: (0,0)/320x240 [ 462.006516][T11038] tpg colorspace: 8 [ 462.010983][T11041] Restarting kernel threads ... [ 462.027133][T11038] tpg transfer function: 0/0 [ 462.033061][T11041] Done restarting kernel threads. [ 462.067531][T11038] tpg Y'CbCr encoding: 0/0 [ 462.084383][T11038] tpg quantization: 0/0 [ 462.114859][T11038] tpg RGB range: 0/2 [ 462.145485][T11038] vivid-007: ================== END STATUS ================== [ 462.851085][T11033] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 464.512099][T11084] random: crng reseeded on system resumption [ 464.811770][T11074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.947569][T11074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.310531][T11101] random: crng reseeded on system resumption [ 466.506358][T11099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.553691][T11099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.721399][T11087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.795503][T11087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.382876][T11120] loop6: detected capacity change from 0 to 2097152 [ 467.824526][T11124] random: crng reseeded on system resumption [ 468.074873][T11114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.099621][T11107] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 468.200928][T11114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.211577][T11118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.392862][T11118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.412178][T11129] FAULT_INJECTION: forcing a failure. [ 468.412178][T11129] name failslab, interval 1, probability 0, space 0, times 0 [ 468.481801][T11129] CPU: 0 UID: 0 PID: 11129 Comm: syz.0.1004 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 468.481824][T11129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 468.481834][T11129] Call Trace: [ 468.481839][T11129] [ 468.481845][T11129] dump_stack_lvl+0x16c/0x1f0 [ 468.481868][T11129] should_fail_ex+0x512/0x640 [ 468.481887][T11129] ? __kmalloc_noprof+0xbf/0x510 [ 468.481904][T11129] ? ima_write_template_field_data+0x5d/0x1f0 [ 468.481926][T11129] should_failslab+0xc2/0x120 [ 468.481944][T11129] __kmalloc_noprof+0xd2/0x510 [ 468.481963][T11129] ima_write_template_field_data+0x5d/0x1f0 [ 468.481989][T11129] ima_eventname_init_common+0x1b8/0x260 [ 468.482013][T11129] ? __pfx_ima_eventname_init_common+0x10/0x10 [ 468.482038][T11129] ? trace_kmalloc+0x2b/0xd0 [ 468.482055][T11129] ? __kmalloc_noprof+0x242/0x510 [ 468.482075][T11129] ima_alloc_init_template+0x39d/0x720 [ 468.482095][T11129] ? rcu_is_watching+0x12/0xc0 [ 468.482113][T11129] ima_store_measurement+0x1eb/0x5c0 [ 468.482133][T11129] ? __pfx_ima_store_measurement+0x10/0x10 [ 468.482153][T11129] ? vfs_getxattr_alloc+0xec/0x340 [ 468.482173][T11129] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 468.482191][T11129] process_measurement+0x1ddb/0x23e0 [ 468.482214][T11129] ? __mutex_trylock_common+0xe9/0x250 [ 468.482234][T11129] ? __pfx_process_measurement+0x10/0x10 [ 468.482252][T11129] ? __pfx___might_resched+0x10/0x10 [ 468.482270][T11129] ? rcu_is_watching+0x12/0xc0 [ 468.482285][T11129] ? find_held_lock+0x2b/0x80 [ 468.482300][T11129] ? tracing_check_open_get_tr.part.0+0xad/0x130 [ 468.482338][T11129] ? tracing_check_open_get_tr.part.0+0xb2/0x130 [ 468.482358][T11129] ? inode_to_bdi+0x9e/0x160 [ 468.482377][T11129] ima_file_check+0xc5/0x110 [ 468.482393][T11129] ? __pfx_ima_file_check+0x10/0x10 [ 468.482414][T11129] security_file_post_open+0x8e/0x210 [ 468.482447][T11129] path_openat+0x1404/0x2cb0 [ 468.482471][T11129] ? __pfx_path_openat+0x10/0x10 [ 468.482488][T11129] ? __lock_acquire+0xb8a/0x1c90 [ 468.482510][T11129] do_filp_open+0x20b/0x470 [ 468.482526][T11129] ? __pfx_do_filp_open+0x10/0x10 [ 468.482554][T11129] ? alloc_fd+0x471/0x7d0 [ 468.482573][T11129] do_sys_openat2+0x11b/0x1d0 [ 468.482594][T11129] ? __pfx_do_sys_openat2+0x10/0x10 [ 468.482621][T11129] __x64_sys_openat+0x174/0x210 [ 468.482641][T11129] ? __pfx___x64_sys_openat+0x10/0x10 [ 468.482668][T11129] do_syscall_64+0xcd/0x490 [ 468.482689][T11129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.482703][T11129] RIP: 0033:0x7fdc1598e9a9 [ 468.482716][T11129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.482730][T11129] RSP: 002b:00007fdc16770038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 468.482743][T11129] RAX: ffffffffffffffda RBX: 00007fdc15bb5fa0 RCX: 00007fdc1598e9a9 [ 468.482753][T11129] RDX: 0000000000080100 RSI: 0000200000008140 RDI: ffffffffffffff9c [ 468.482761][T11129] RBP: 00007fdc15a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 468.482770][T11129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.482778][T11129] R13: 0000000000000000 R14: 00007fdc15bb5fa0 R15: 00007ffdcdfbb898 [ 468.482797][T11129] [ 468.805541][T11130] random: crng reseeded on system resumption [ 468.829880][T11125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.838626][T11125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.070374][ T30] audit: type=1804 audit(6048818611.643:7): pid=11129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.1004" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu1/buffer_size_kb" dev="tracefs" ino=1313 res=0 errno=0 [ 471.749120][T11168] mkiss: ax0: crc mode is auto. [ 472.369399][T11179] random: crng reseeded on system resumption [ 472.588687][T11166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.670018][T11166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.679982][T11176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.749039][T11176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.665763][T11196] random: crng reseeded on system resumption [ 473.792712][T11200] kAFS: No cell specified [ 474.094617][T11185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.379370][T11192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.388454][T11185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.453520][T11192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.677009][T11235] random: crng reseeded on system resumption [ 476.941049][T11231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.000365][T11231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.218548][T11214] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 477.960587][T11251] kAFS: No cell specified [ 478.326972][T11256] random: crng reseeded on system resumption [ 478.573670][T11253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.643294][T11253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.654602][T11246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.734324][T11246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.079108][T11264] kAFS: No cell specified [ 479.685209][T10936] ================================================================== [ 479.693297][T10936] BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240 [ 479.701096][T10936] Read of size 140 at addr ffffc900045ef000 by task kworker/u11:1/10936 [ 479.709423][T10936] [ 479.711734][T10936] CPU: 0 UID: 0 PID: 10936 Comm: kworker/u11:1 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 479.711753][T10936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 479.711765][T10936] Workqueue: hci0 hci_devcd_timeout [ 479.711786][T10936] Call Trace: [ 479.711792][T10936] [ 479.711799][T10936] dump_stack_lvl+0x116/0x1f0 [ 479.711819][T10936] print_report+0xcd/0x630 [ 479.711837][T10936] ? __virt_addr_valid+0x81/0x610 [ 479.711855][T10936] ? hci_devcd_dump+0x142/0x240 [ 479.711870][T10936] kasan_report+0xe0/0x110 [ 479.711887][T10936] ? hci_devcd_dump+0x142/0x240 [ 479.711904][T10936] kasan_check_range+0x100/0x1b0 [ 479.711924][T10936] __asan_memcpy+0x23/0x60 [ 479.711937][T10936] hci_devcd_dump+0x142/0x240 [ 479.711952][T10936] hci_devcd_timeout+0xb5/0x2e0 [ 479.711967][T10936] ? rcu_is_watching+0x12/0xc0 [ 479.711984][T10936] process_one_work+0x9cf/0x1b70 [ 479.712002][T10936] ? __pfx_process_one_work+0x10/0x10 [ 479.712018][T10936] ? assign_work+0x1a0/0x250 [ 479.712039][T10936] worker_thread+0x6c8/0xf10 [ 479.712055][T10936] ? __kthread_parkme+0x19e/0x250 [ 479.712073][T10936] ? __pfx_worker_thread+0x10/0x10 [ 479.712086][T10936] kthread+0x3c2/0x780 [ 479.712107][T10936] ? __pfx_kthread+0x10/0x10 [ 479.712128][T10936] ? rcu_is_watching+0x12/0xc0 [ 479.712143][T10936] ? __pfx_kthread+0x10/0x10 [ 479.712164][T10936] ret_from_fork+0x5d7/0x6f0 [ 479.712185][T10936] ? __pfx_kthread+0x10/0x10 [ 479.712205][T10936] ret_from_fork_asm+0x1a/0x30 [ 479.712226][T10936] [ 479.712230][T10936] [ 479.863526][T10936] The buggy address belongs to a vmalloc virtual mapping [ 479.870540][T10936] Memory state around the buggy address: [ 479.876167][T10936] ffffc900045eef00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 479.884213][T10936] ffffc900045eef80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 479.892279][T10936] >ffffc900045ef000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 479.900319][T10936] ^ [ 479.904394][T10936] ffffc900045ef080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 479.912610][T10936] ffffc900045ef100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 479.920651][T10936] ================================================================== [ 479.928766][ C0] vkms_vblank_simulate: vblank timer overrun [ 479.946386][T10936] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 479.953612][T10936] CPU: 0 UID: 0 PID: 10936 Comm: kworker/u11:1 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 479.965575][T10936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 479.975621][T10936] Workqueue: hci0 hci_devcd_timeout [ 479.980814][T10936] Call Trace: [ 479.984080][T10936] [ 479.986999][T10936] dump_stack_lvl+0x3d/0x1f0 [ 479.991581][T10936] panic+0x71c/0x800 [ 479.995472][T10936] ? __pfx_panic+0x10/0x10 [ 479.999877][T10936] ? mark_held_locks+0x49/0x80 [ 480.004630][T10936] ? preempt_schedule_thunk+0x16/0x30 [ 480.009994][T10936] ? hci_devcd_dump+0x142/0x240 [ 480.014832][T10936] ? preempt_schedule_common+0x44/0xc0 [ 480.020279][T10936] ? check_panic_on_warn+0x1f/0xb0 [ 480.025397][T10936] ? hci_devcd_dump+0x142/0x240 [ 480.030233][T10936] check_panic_on_warn+0xab/0xb0 [ 480.035164][T10936] end_report+0x107/0x170 [ 480.039501][T10936] kasan_report+0xee/0x110 [ 480.043907][T10936] ? hci_devcd_dump+0x142/0x240 [ 480.048748][T10936] kasan_check_range+0x100/0x1b0 [ 480.053696][T10936] __asan_memcpy+0x23/0x60 [ 480.058098][T10936] hci_devcd_dump+0x142/0x240 [ 480.062762][T10936] hci_devcd_timeout+0xb5/0x2e0 [ 480.067597][T10936] ? rcu_is_watching+0x12/0xc0 [ 480.072348][T10936] process_one_work+0x9cf/0x1b70 [ 480.077295][T10936] ? __pfx_process_one_work+0x10/0x10 [ 480.082654][T10936] ? assign_work+0x1a0/0x250 [ 480.087236][T10936] worker_thread+0x6c8/0xf10 [ 480.091811][T10936] ? __kthread_parkme+0x19e/0x250 [ 480.096823][T10936] ? __pfx_worker_thread+0x10/0x10 [ 480.101918][T10936] kthread+0x3c2/0x780 [ 480.105994][T10936] ? __pfx_kthread+0x10/0x10 [ 480.110591][T10936] ? rcu_is_watching+0x12/0xc0 [ 480.115344][T10936] ? __pfx_kthread+0x10/0x10 [ 480.119930][T10936] ret_from_fork+0x5d7/0x6f0 [ 480.124519][T10936] ? __pfx_kthread+0x10/0x10 [ 480.129106][T10936] ret_from_fork_asm+0x1a/0x30 [ 480.133864][T10936] [ 480.136932][T10936] Kernel Offset: disabled [ 480.141273][T10936] Rebooting in 86400 seconds..