last executing test programs: 4m18.996859531s ago: executing program 1 (id=1098): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)={'/dev/md', @named={'_syz', 0x0, '1'}}, 0x101000, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000080)) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 4m18.940170764s ago: executing program 1 (id=1100): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='afs\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0), 0x0) fanotify_init(0x20, 0x40000) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = fsopen(&(0x7f0000001640)='jfs\x00', 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001680)='ioc\xbc\x06\x00\x00\x00\xb6', &(0x7f00000016c0)='io#h\xe0R\x92\xc4\xbaap\xd6\xb6v\xca\xdf%Om\xae\xbeXd\xad\xe4\xa6s\xa4\xa9\x00\x00\x00L^\x879`\xe0\xb8\xf22*\x1c2\x06\xd3\x01\xb7\xf8\xc7\x13\xe4\xe5jF\x0f\xb8\xba\x843\xbe\xa8^\xdca\x89\xf8+\xde!\xb8sA\x1e\x94\x02Mk\xa5q\xaa,\x18\x13\xdf\xe2\xc9\t\vy\x12\xe9nX\x9cY\xc8x^\xa6O\xcc>cu\xcc\x11\xa5U\xea\xc2y\xcdw\xb4\xcf\x99l\x9b\x06-\x80\'\xa7\x0f\xd8\xf34\xef\x95 \x02\xe3W\'JOn\x8a\xbc\xf9^\x86\xdc\x90d\x8a\xe7X\x92\x1c>\xbc\x11\xff\x8a\xfb\xc2\xdb\xeecGX\xea\xa7\x14\r\x9cEczYE\xa8\xb0\xa81\xe2_\x8c\x8e\xc1RB\x17\xd7\x15\rN\x8d\x83\x19!PsOs\xe12\x9aC\xd5\x9c\xa5\xee\xf8X\xf3\xa9\xfb\xa3\xcd\xea\xb9\xd5JP\xd4\xf6*\x18\x1a\x8e\xf8\xc2?\x90\xd0d/\xa0\xb1\x90\x92\xe01\xe0\xce89e\xd2\xeb\xe1\rM\xef\xd1^Mx\xf9v\x9b\x13\xb5\x95\xf8w1B\xcb', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='1') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001440)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000001500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x8c00, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000001580)) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f00000015c0)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000001600)={'syzkaller0\x00', @random='\x00\a\x00'}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000240)=[{&(0x7f0000000280)=""/255, 0xff}], 0x1, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040010) syz_usb_connect(0x0, 0x39, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES32, @ANYRESDEC], 0x0) 4m16.709408747s ago: executing program 3 (id=1115): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, &(0x7f0000000380)=0x48) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) 4m16.708685537s ago: executing program 3 (id=1116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_create_resource$kvm_nested_state(&(0x7f00000010c0)=@svm={0x6, 0x1, 0x1080, {0x50000, 0x40}, {"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"}}) ioctl$KVM_GET_NESTED_STATE_res(r2, 0xc080aebe, r4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f0000000040)="c4e178527b9c0fc79c4f0a0000009a00480000bd00c4e178111ceaf4d0f70f01c9660f3882928b810000c4e3417f7e07fd0f00934f046ca4", 0x38}], 0x1, 0x74, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) munlock(&(0x7f000000b000/0x4000)=nil, 0x4000) (async) munlock(&(0x7f000000b000/0x4000)=nil, 0x4000) 4m16.691924666s ago: executing program 3 (id=1117): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x80000400, &(0x7f0000000280)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x26, 0x101, 0x70bd25, 0x25dfdbfb, {0x1}, [@typed={0x8, 0x167, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24008080) io_submit(r2, 0x2, &(0x7f0000000700)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x4e}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x4, 0x6, r1, &(0x7f00000007c0)='m', 0x1, 0x1}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 4m16.641024053s ago: executing program 3 (id=1118): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b90402", 0x11}], 0x1, 0x0, 0x1, 0x7400}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x30, 0x0}, 0x21) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x82, 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000001900)={&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @empty, 'batadv_slave_1\x00'}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000240)="8fe3be536c0435f9af36fc66f06b6db359340e97b310787448653df58732d3f80038eff208cd5e8951e344390a48c1c6d714a9e6b82ddff1a3c5930e5a805243ec24792de3ec32dccb6ea2e2a66fe52c4a72ec3a7fbe8e46cc2ffb501538cba76de95ae08a3a3378a1e08a4db2d79f88e6e919fad906db2b010559efe5a8ee03c297855d91fe953b42b4a8851bc2bff0ecb01ec417b11e1c8a183a7f9613cbd3eb304bc5a9f9a4c567b7332db30a9dedbc98d53e753a38ca26eba7da9113eb3515e09550f4410cd3b57b125ad1b16105c3ce3979abaab56199ca29886fc90a9cacb4793978bb7a0542474486", 0xec}, {&(0x7f0000000340)="06feb57af42c64cf246b4e649be76a6492450078b84b5b19db694e28a86c07cc119fc4c5c47ba773dcf8d7094097676ca8910e984149bd4efe87c1f470fea03c", 0x40}, {&(0x7f0000000380)="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", 0xfe}, {&(0x7f00000014c0)="246a53194ea5b82953d9cdec6db708205e0aa3da7f4c45736f0d900f3f47c0530c0977003149f7330f0556b96b863f7c4bc2c34f65333f3e46d15a32c8d493697e28060fddea6dca9cf5ffeb10aa7d546837c93787f51304599a93a5ab89f724770a43ff7a2919739703e61362149744c470", 0x72}, {&(0x7f0000001540)="a3714a74005a3d57b193972987949545331edbab7515d47a0b0a21c819d58c5272f4cb5b08e7c5d3c445ed71dff78e133861c5382df265222a8450702f1a44b2c98daccfc13d738864b529a2d66b2083943c50469fbfcebb63225c3e8e1f200c291f80cf2bca232604f599b22f83768d8546091927d73f48cbde729709554369dd762b9c700978748d5cdcadce3b51d97a8f858a470f545a9e7ee1ebe0e4595b95ea3f3a4f19d3ea2232fd4cc3d9c846ceb0e15bd972235440c0799e6822536a", 0xc0}, {&(0x7f0000001640)="a017d16859304b04f7f335a0473c3c80d6ad3e03c3d76cd4b33c7705969edfddc83d31f59c0eda063a89a4a3076ec2ad98e45b281fbae4869bd14baab971617b5763e089948af354d319261ad898f9d737f36ffac22a7cab25c41c19c51a48e1079e848762dc6b748d774fe75b1dc1469d3adc5c141183235180b65b147875e55a08a2e2833a0a093b2a254f141a971e20e0ce7b19e60d7e2ef14e6f430e29", 0x9f}, {&(0x7f0000001700)="ade17ffda200fe523fb18a8bd350c80d19a54f189cceb61541b77e63d9ca0d7b866a3e3baa0ff7a07a6928909175a91f0cbd0fd9188129b1c6b753a9291b798617422af133135c45855645aeb20b6c70b984f3455f2748f82974677555c4cd650c5c6b76e289c20e1c84b73b4a304812c88f", 0x72}, {&(0x7f0000001780)="6f89e732e5064458bb858e5b28076b49913e0755c5aa4fc832b796299faca52f3911dd6424f04de131ba28f39b70e00ef19013", 0x33}], 0x8, &(0x7f0000001840)=[{0x28, 0x101, 0x3, "96698c4d18d73fa9922638ce5594fbd42cd4fa0332e4e5"}, {0x68, 0x10a, 0x4, "aed7dd6f221be131df87e50c36fb2d958030852deb0ce8411b04f71a7fce7a58c0e5f386640c1f7a1e262cac7e3706c38694a361e9d4efaf4728ed8a1f6a19d4de92237e572e59b0d3ed6a95050eadada455f0df2911f8"}], 0x90}, 0x2004c049) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x8}) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) (async) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33) 4m16.560554958s ago: executing program 3 (id=1119): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffc, 0x6, 0x9, @buffer={0x0, 0x1000, &(0x7f0000000d00)=""/4096}, &(0x7f0000001d00)="4ef8144c00b2", 0x0, 0x1, 0x4, 0x1, 0x0}) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r5, &(0x7f0000000140)='syz0:', 0x5) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x4000, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x390d, 0x8000, 0x0, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e6c, 0x800, 0x3, 0x26d, 0x0, r5}}], 0x1, 0x0, 0x0) 4m15.979717046s ago: executing program 3 (id=1120): r0 = syz_usb_connect$hid(0x0, 0xfffffd83, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x362e, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x99, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0) 4m15.792921344s ago: executing program 32 (id=1120): r0 = syz_usb_connect$hid(0x0, 0xfffffd83, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x362e, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x99, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0) 4m15.788666873s ago: executing program 1 (id=1123): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'macvlan1\x00', {0x2, 0x0, @multicast2}}) (async) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x0, 0x1}, 0x6) (async) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) mknod(&(0x7f0000000080)='./file0\x00', 0x1000, 0x1) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x7e, 0x0) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="9b", 0x1}], 0x1, 0x7) close(0x4) 4m15.689537352s ago: executing program 1 (id=1124): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000700)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000780)='./file0/file1/file2/file3\x00', &(0x7f00000007c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000800)='./file0/file1\x00', &(0x7f0000000840)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000880)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000940)={0x2004}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000980)='file3/file5\x00', r0, &(0x7f00000009c0)='file3/file4/file5\x00', 0x0) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0) mount(&(0x7f0000000440)=@filename='./dev/sda1\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0)='ext4\x00', 0x8410, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000540)=ANY=[@ANYBLOB="000000004c9002000000000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500ea740c613435901d3bab39f610a40000d100000000000000ffffffffff"]) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x7, 0x0, r3}) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000000140)={0x0, 0x270, "a0ffc269c962de110005387cf20da42f6596e216ec521faf34bfb5ee655a3dd2", 0x0, 0x7, 0x6, 0x2, 0x3, 0x4781, 0x5c, 0x101, [0x1, 0x9, 0x7fff, 0x1]}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000240)={0x5, r4, 'id0\x00'}) r6 = syz_open_dev$radio(&(0x7f00000002c0), 0x0, 0x2) dup2(r6, r6) r7 = fcntl$dupfd(r3, 0x0, r5) ioctl$PPPIOCCONNECT(r7, 0x4004743a, &(0x7f0000000300)) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0, 0xfffbbfff, '\x00', @p_u8=&(0x7f0000000080)=0x3}}) 4m15.669942926s ago: executing program 1 (id=1125): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000000)={0xe, &(0x7f0000000040)}) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='p', 0x1) (async) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000500)={0x10, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) (async) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r6], 0xe) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB="20c81e0000004d61501d01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_connect$midi(0x4, 0x96, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x582, 0x145, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x1, 0x1, 0x55, 0x70, 0xf, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x20, 0xe9, [@midi_out_jack={0xb, 0x24, 0x3, 0x2, 0x3, 0x2, [{0x5, 0x9}, {0x8, 0x3}]}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xc4, 0x7f}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x5, 0x1}], [{{0x9, 0x5, 0x6, 0x10, 0x10, 0x3, 0x8, 0x4, {0xc, 0x25, 0x1, 0x8, "6b186f8be5b755b9"}}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x7, 0x38, 0x0, {0x12, 0x25, 0x1, 0xe, "fe87974dd05dc504afc724f538a7"}}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x53, 0x10, 0x6, {0x8, 0x25, 0x1, 0x4, "4341a33e"}}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x1, 0x3, 0x27, {0x11, 0x25, 0x1, 0xd, "955f85969d6571138fa625091a"}}}]}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x5, 0xff, 0x42, 0x10, 0x3}, 0x6b, &(0x7f00000001c0)={0x5, 0xf, 0x6b, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9, 0x7, 0x8}, @generic={0x48, 0x10, 0x9, "9017b130ee19b54e5c4e5283349d9ae2b489fbdd10a768eca5703e7be7f750029df7b7ef24c049971ab649abc0b79e8ce011ab62dac9c3a41efdd51faea6d10e6a97cd5594"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "d4d7a660bf99acf9daf4d7bc1647f151"}]}, 0x1, [{0x26, &(0x7f0000000240)=@string={0x26, 0x3, "a35ca4eeb5ca0eb5e3e8f350b39101738ed01e557bb533bda688d93aac5ef033b6526937"}}]}) (rerun: 64) 4m15.300619307s ago: executing program 1 (id=1126): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e3000000008000100010000000800050000000000080003"], 0x40}}, 0x8084) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x24, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10002dbd7000ffdbdf250c000000080001000000000008000b0000000000080000000008000b0000000000000000"], 0x34}}, 0x4010) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) 4m15.065807809s ago: executing program 33 (id=1126): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e3000000008000100010000000800050000000000080003"], 0x40}}, 0x8084) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x24, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x24}}, 0x0) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10002dbd7000ffdbdf250c000000080001000000000008000b0000000000080000000008000b0000000000000000"], 0x34}}, 0x4010) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) 4m2.575029546s ago: executing program 5 (id=1170): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab9606aa834d3a9e7cfc120c8ac0ab1e6227c2b6ddaa5ecef690", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000300001801c00028008000200a2000000050001001d00000008000300ff0f00000d0001"], 0x44}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000940)='./sys\x00', &(0x7f0000000980)='sysfs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./sys/power/state\x00', 0x1, 0x0) write(r4, &(0x7f0000000a00)='tes', 0x3) (async, rerun: 32) syz_ublk_setup_io_uring(0x20, &(0x7f0000000080)={0x0, 0xffffffed, 0x10000, 0x0, 0xfffffffd}, 0x0, 0x0, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ce) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000340)="c753ecab382e036e059e7ddb362722882e0145a34e56d1", 0x17}, {&(0x7f0000000380)="ba05b95d1f94ffcc11e905322b371a752cbdf3faf0ac02455cc2a20651f05657746f173dc7f7cbd322ff85e14b6451345b65dc67335958b223d74f1abd6009e2095576c35c55b3ce1ec09bf883337f981dc1505095383ad6dc38a41efc57d3f58232c1609121a7e59d8aa00be77afce9c313ee45fe296b48a4bc6d10ec6fdc838be1730538827a36bf6f5e18e40171183b1928801b9f77549a50b7159da04253a99d224477ccc4b67de5a261702c99818eacf466e32e81eff0e2413398d29de95d85a2ecbae3cff2dc0f88537dce8607b26b", 0xd2}, {&(0x7f0000000540)="068f4caa8504dbe56dca21175d97c89af40cea35b99b4f6327241727744afff48054aa84c8548f8e705f29d6a841cd08409a0b4743c076c0469f50bb22743330c58108d228fec71742647ef9439e41eb2e8893aaec56b1fd853d4e7cab398ab11d754816e81cc12b7e3878ddec6b2370fbbd9b97a470d81025464089976a5798daf8886106fc952a8ccd30b75a691021", 0x90}, {&(0x7f0000000600)="ee9acd5aa4ee1c862e0d978d15494d20e768d81955", 0x15}, {&(0x7f0000000640)="2b174792e37f91290d1ad686d10f17126bddce3f71bb4da7055e1fb53b3b3ed84f9dc5af64553567f7243296c8b874e8a3", 0x31}, {&(0x7f0000000680)="be53fd3d51a45a15cd265449b2965d923b088249e88303a75ee9a763c53847816181e872d4b2c1c8e3dae1696695141a6be63147b0da05ab562446549e170ff57b439aca05814b613d211d7e0d630a29953213f9c577ddb17170783346c7725cfff799309bc11346e1221a8efdb48c886c4493068d22c9dddfdc005332b8e75372878cdbd8393824c64dbc1c11d05626a1797161f44f162030311db55414138dab9ffd023fe6fb42079bf7004542f58aeb98a60971673828cd4501faeeab545abc24696a", 0xc4}], 0x6}, 0xb06272a104952968) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/class/net/bridge_slave_0/brport/multicast_fast_leave\x00', 0xa0801, 0x29) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys_mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000800)='sys_mnt\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000880)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r6, &(0x7f00000008c0)='1', 0x1) (async) write$cgroup_pid(r5, &(0x7f0000000900), 0x32) r7 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r7, 0x9) (async, rerun: 32) recvfrom$inet(r7, 0x0, 0x0, 0x2, 0x0, 0x0) (async, rerun: 32) close(0x3) (async) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e22, 0x8001, @empty, 0x1}, 0x1c) rmdir(&(0x7f00000004c0)='./sys\x00') 4m1.681799218s ago: executing program 5 (id=1177): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ef) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='ocfs2_dlmfs\x00', 0x1801010, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000180)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f00000001c0)) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x4e]}, 0x8, 0x800) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x10000000, 0x8001}}, './file1\x00'}) 4m1.536662592s ago: executing program 5 (id=1179): pipe2$watch_queue(&(0x7f0000001340)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000001380)=ANY=[@ANYBLOB="01000000000081"]) r1 = syz_usb_connect(0x0, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502020002"], 0x0) syz_usb_ep_read(r1, 0x2, 0xffffffffffffff58, &(0x7f0000000100)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000280)={'veth0\x00', &(0x7f00000002c0)=@ethtool_channels={0x34, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) mkdirat(r2, &(0x7f0000000100)='sys_mnt\x00', 0x7b) mount(0x0, &(0x7f0000000140)='sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) syz_usb_connect(0x0, 0x7da, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x5e, 0x4c, 0xcc, 0x10, 0x525, 0x127a, 0x44f1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c8, 0x4, 0x3, 0x6, 0xa0, 0xb1, "", [{{0x9, 0x4, 0xbb, 0x6, 0x5, 0xdd, 0xcb, 0xfa, 0x8, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "c8c0aa"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x7, 0x7, 0xda}, [@mdlm_detail={0xf9, 0x24, 0x13, 0x0, "99c1c2704c51459a94e9b308c171e5a5c4a3b7e8850c3055c30f016e6541a02effbbba2de98d16d8ba7e8ce92dfa6a30d5467c27842896633466b92bb8bcdab2cee174b04b09b73228bda422a6c3ec8b5e46d90db3ab15a49c71681bc61a2e4fb73ed01cc65edd7e45a510c8539f91e03be72440e87a82455573bf2c420498ba4ea5ca6fa53a06fd6bbb71a94b9d133c53bce5ca45621717fde2f7aa2019c8877060fabdedd0ce68902351792fbe0649f7821b79d4645a24f19e9a28659824e3f5540c02f0d6267248f0560d9b555f5747ff07be009b979076087c435154744e9bff8c1ab63f10ce7116d4278e5d9da8343bd699e5"}]}], [{{0x9, 0x5, 0x80, 0x2, 0x400, 0x3f, 0x43, 0x6}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x3, 0x9, 0x9, [@generic={0x80, 0xa, "d7545fb3f1061edd9dab337d9638c7f2d46268c4ba17262ad2e3fb72ab49fca12aad195fd31faad3eca3691e4d5fb743ec4394e845f35e3f0c7c6b092c141a516de76a91fe58e04037e7b8ee90c31d5849cfac4c16ad08ea5ccd378f92d88587e7d67834e50b030e977b0cb70f4f1045889877e5023e066e08a78b188867"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x81, 0x1c}]}}, {{0x9, 0x5, 0xf, 0x8, 0x400, 0x2, 0x5, 0x6, [@generic={0x8c, 0x31, "a861ee32aeef01861f3c1161a00b4c4127518f98b13d35214ed609dfb6ee76df05c875973a4ebc22e4343c387c553c8f9f6158b85be5091c0f5c11704dc0872284b53cfb76e047951da2e7df745df40f2c0a84d1b3771aac6787714925e2f8dff46972f3928c80466483cfc4f4476e232a3406686bc566ccaf7b6dbbe146ee51d047592cdb29b0b26b8c"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7f, 0x8}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x63, 0xac, 0x54}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0xd, 0x84, 0x6, [@generic={0x87, 0xf, "edfa79e65e0c3c5569cac59b2bd99a78341ccea7bc9352bd17a150c7662ab2d8445f085e142f6b858eea7a654ebe01167f25d8986cd067e903ce5da026f3f3d62ed4bc773ca10499e3caeb07b84bbdad96ad78f2d09198d49d3c975e62f450eb5b119853ae65e49b5b86af9e6b7c0b44525e694531447c1c9230e5c5efd6e28d64c94b3b29"}]}}]}}, {{0x9, 0x4, 0xec, 0x8, 0x7, 0xe0, 0x4, 0x20, 0x91, [], [{{0x9, 0x5, 0xf, 0x2, 0x8, 0x9, 0x7}}, {{0x9, 0x5, 0x5, 0x1c, 0x79f, 0xb3, 0x9, 0x4, [@generic={0x88, 0x8, "bd1c523ad48a1a558328271c3b6008a960585778affc2d74b8807771caddc2461aa2db8a3d04b6560c01b5e073a3153667afc3aea72c437b29364c865bcb74c22de5fb6f586f59b804fc73edb96cbcc6a8a298ae40d8a37af435bf69f151ca8a798fe8f0c51bd7bd28940f508a9a34131e0a941d6f3151557e3f995d5ff9243bccfd0f05aff6"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x2, 0x62, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x8}]}}, {{0x9, 0x5, 0xe, 0x1, 0x400, 0x9, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x1000}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x2, 0xd, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9c, 0x9}, @generic={0x23, 0x6, "4abbd51f705b504ad2be81b0b8e66730f54b5466b26914f5d4bdfcc16ebd22b243"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x20, 0x5, 0x81, 0x0, [@generic={0x4b, 0x10, "3d798a47a8b96067a7bceb0084b4787309ce4fd2582d26f25aaa7c6334ac473ad93bda03840f6d1f8f61c38aabfd7f2c056e19df623010599669365cd230eb33a40a084b0ebb5298bc"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x200, 0xbc, 0x7, 0xa2, [@generic={0x19, 0xa, "e27d08b6926f022fad6983af74d851aeff268d7a89113c"}]}}]}}, {{0x9, 0x4, 0xfa, 0x1, 0x3, 0x43, 0xfd, 0x11, 0x5, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x0, 0x2, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x9, 0x9, 0xac}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0x3, 0xb7, 0x6}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x8, 0x3, 0x9, 0x7, "064bb4", "c209bc"}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "7a8b"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0xc, 0x2, 0x6, 0xd}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x8, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x7fff, 0x4, 0xfff}, @ncm={0x6, 0x24, 0x1a, 0x7}]}], [{{0x9, 0x5, 0xe, 0x1, 0x8, 0x8, 0x0, 0x0, [@generic={0xa8, 0x31, "3046b3b4470e60d51215651587110b924b9eb19644981fb4fedf29ca6c2a914d0bd8298a25ae73eacd7e82efbd404aed29a6f8dd44e8cabe2c00e5823d5603b3414f91577a5f3805b296da03b40cfe898b5ffa2f6653f2a6598437d905f86232a2fb130a516cbafb4046d5753dbbec9a1ca3448e99751be02d29bdab3768acf9c1fe30a1811668119635724409e07907022ead92d4d5d25b9afb6323a3751328cc91b3e4bf2c"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x6c, 0xff, 0x7}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x9, 0x3, 0x9}}]}}, {{0x9, 0x4, 0x2, 0xe, 0xd, 0x77, 0x2d, 0xcb, 0xc8, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, '7o'}, {0x5, 0x24, 0x0, 0xe2f}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xcf75, 0x0, 0x42}, [@mbim={0xc, 0x24, 0x1b, 0x51, 0x10, 0x4d, 0x9, 0x4, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x7fff}]}, @generic={0x7c, 0x24, "2ac12d8f386e0ba8fee7b336b4ffe17a2ae86be8cc2653b4bdf2d9abe824645b4d5444b0abb1a679549b6765c4f64a4e8f6aecc0aa1dce9fd62dbd259c4e64fb4c53e1abacbff4670f115293ba221cc803bcaa7d487bfafdd89407524dca98f506763c45c3679f8fbc661ff770e1b953b1e572ff5231de2ce44b"}], [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x4, 0xe0, 0x9}}, {{0x9, 0x5, 0x7fa56de2c2834f6f, 0x4, 0x20, 0x6, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x1}, @generic={0xd2, 0x6, "9cf4ce7ebf3d56cc342b040fb70d3657e210e66c69ab6aaf8acdcf06be0b13adb1d56409c4348ddeda81a18720c595b3124dcc855ed2c837a03bb6a442df52d0d9891d64ee08f27442edb61908d4fac89cca87f386bc34099a636becd472f0b8d5b2918fed9b5f1dda35d754ed3e69e6e7b3b38a987c9392b88761b7699459be0a1e8bbafe0095303c033954a015c4e86dbdd729c78c480a7778e14ef07eee8c8926cf905739193859ceb80b4ab8a766cce61e75404b011544e0cb5447c5799fc0ae5fdd3dd925d2122ad1696236e42c"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x200, 0x8, 0xc0, 0x6}}, {{0x9, 0x5, 0x87, 0x10, 0x200, 0x40, 0x0, 0x4}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x8, 0x4, 0x12, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x81, 0x7}, @generic={0x24, 0xe, "5c3df3c30562213d11cd01fffff45c74e735f41222c9f08212257011ad2849dece29"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x8, 0x72, 0x6}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0x3, 0xee, 0x1}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xd, 0xe, 0x1}}, {{0x9, 0x5, 0x7, 0x175f22a207325399, 0x40, 0x1, 0x8, 0xa1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xd6, 0xfffd}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x1, 0x3, 0x6}}, {{0x9, 0x5, 0x2, 0x8, 0x230, 0xc0, 0x81, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xb, 0x5}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x1, 0x8, 0x9}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x0, 0x2, 0x9}}]}}]}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x200, 0x4, 0x80, 0x14, 0x8, 0x4}, 0x5, &(0x7f0000000dc0)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x1409}}, {0xd1, &(0x7f0000000e40)=@string={0xd1, 0x3, "a1cd2972c0c53395cae936dac3f53379dfa8acc64fc1d5cb5a31f53f9e375c26c9f9c14b819018b71764407d631a5a42ef5790bc97d21648025102fdf5ba02603307beadf8f8c00c10a3393a1dd02fb4d068d070934ed0ca28e9b767629da11e03d11c8370f86959bbc8e459b86f152aecd9a4b014e486886761a997fecf958839265b2ebf8d8773a2bccf9e166a18f99a3683373d3bef36e5e46a780dd11be3a468bdaa254f66e33d93c622e773afe76c6d7b727734b25dbe362cac39c1ae68ff4bce73f9381adcdeb50cdd6b581f"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x1401}}]}) write(r4, &(0x7f0000000200)='algo=\"', 0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000198000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x70ed, 0x1) syz_open_dev$vim2m(&(0x7f0000000300), 0x800, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000340), 0x400000000000003, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000380)={0xf0f041}) r6 = syz_usb_connect(0x0, 0x39, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904"], 0x0) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000480)={0x20, 0x9, 0x2, '$8'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000001000)={0x14, &(0x7f00000004c0)={0x0, 0x11, 0x5a, {0x5a, 0x30, "73be70e518343cdc2e56e8dbe3fc003c9553f38967a1d4b2c45cea5fd5fe460d7fe4da80a52e49a37280cb7a162a83f42e911bcce4dae95f74b853e87c78efeea1fec5521b74ea36f13c1f73e921f5e7fe52ac70345b3af7"}}, &(0x7f0000000fc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000012c0)={0x44, &(0x7f0000001040)={0x20, 0x14, 0x9e, "2c78cc9b0dbf7a6235d1b6fb0ca659a4217fd6c943b579843d887d6eada2a7146fb2b554ed6f359fdbec22d273fc4d0d0737d3f122ff00489c0126132514d659335878af867659dddda1c516e78d69cdcc6c69a90383bf07873d66376e6f28aef5a5ff1c091a234697903ebda80511f5174b82f2957df58cb470486d7e611f9a7988d4ba5befbb5f088aa7f9dc9afa118752d6076d5e4f19a392049d5b35"}, &(0x7f0000001100)={0x0, 0xa, 0x1}, &(0x7f0000001140)={0x0, 0x8, 0x1, 0xd1}, &(0x7f0000001180)={0x20, 0x80, 0x1c, {0x2a2, 0xf49, 0x1, 0x5, 0x7, 0x200, 0xb, 0x9, 0x1, 0x0, 0xd00e, 0x64e}}, &(0x7f00000011c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000001200)={0x20, 0x83, 0x2}, &(0x7f0000001240)={0x20, 0x87, 0x2, 0xd}, &(0x7f0000001280)={0x20, 0x89, 0x2, 0x1}}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000440)}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r10, 0x4068aea3, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000540)='task\x00') 3m59.404710164s ago: executing program 5 (id=1189): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000180)={@void, @val={0x1, 0x3, 0x1c, 0x5, 0x14, 0x6}, @ipv4=@igmp={{0x6, 0x4, 0x3, 0x8, 0x20, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xe}]}}, {0x11, 0x8, 0x0, @multicast1}}}, 0x2a) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000040)=0x9, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 3m59.157672908s ago: executing program 5 (id=1193): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000180)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x3ff, 0x4, 0x9, 0x1, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x5, 0xf3, 0x3, 0xfffffffa, 0x0, 0x5, 0x9, 0x4, 0x9, 0x4, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0x100, 0x7, 0x1c04, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x1, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x10000, 0x7d, 0x4, 0x2, 0xa, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0x9, 0x81, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x9, 0xb, 0x4009, 0xfffffffe, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x106, 0x7, 0x9, 0x7ffffffe, 0xc, 0xfffffffe, 0x2, 0x8084, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0xffffffff, 0xb, 0x100, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x1, 0x0, 0x0, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) (async) r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000400)={0xfffffffc, 0x40002, 0x2, {0xd, @win={{0x8, 0x6, 0x2, 0xa}, 0x6, 0x2, 0x0, 0x572, 0x0, 0x5}}, 0x3}) poll(&(0x7f0000000500), 0x20000000000000b5, 0x9) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='27', 0x2) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3m59.098904746s ago: executing program 5 (id=1194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) socket(0x400000000010, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80c80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000240)=@xdp={0x2c, 0x7, r5, 0x3d}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)='[', 0x1}], 0x1}, 0x5) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa2003, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, 0x0) 3m43.858052217s ago: executing program 34 (id=1194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) socket(0x400000000010, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80c80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000240)=@xdp={0x2c, 0x7, r5, 0x3d}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)='[', 0x1}], 0x1}, 0x5) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa2003, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, 0x0) 1m53.763070913s ago: executing program 2 (id=1839): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0xa142, 0x14b) write(r0, &(0x7f0000000100)='8', 0x1) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000140), 0x3, 0x100) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x11282d) socket$inet6(0xa, 0x5, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="6700000011008188040f56ecdb4cb9cca7480ef430000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x4000010) 1m53.54716447s ago: executing program 2 (id=1840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x64, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20000014) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x64, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20000014) r3 = memfd_create(&(0x7f0000000580)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe20T\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\rt\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xea3\xac\x80\"\xf0\xca\v\"@\x81\xbdkL\x93\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb', 0x1) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x8010002}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='./dev/sda1\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000140)='reiserfs\x00', 0x0, 0x0) (async) mount(&(0x7f0000000280)=@filename='./dev/sda1\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000140)='reiserfs\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000000a00)={0x0, 0xfb, 0xfec, 0x4, 0xb, "0ae07459068002dc18e45613c45ff238", "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"}, 0xfec, 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r3, 0x0) 1m52.290057479s ago: executing program 2 (id=1853): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x0, 0x400, 0x0, 'queue0\x00', 0x800000}) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@updpolicy={0x1e4, 0x19, 0xfd3649826d894c67, 0x270bd28, 0x0, {{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0xffbe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0xfffffffffffffffe}}, [@algo_auth={0x12a, 0x1, {{'sha512-ce\x00'}, 0x710, "fb370734f68740f0a614476725734980731e880c8663eb525a7ea043f8ee8181126249a0f19052320fd13730c01fdf1c80e2b6e6e74534f85b46e5dbd2ba221db49060f70feb1c0928e585b27fb270a63d68295fcd5a6743241ff62a6cafc01e475dc02dcdb28a194e09e3a2a8943036b8625db480af548adf1a1c01778407e12fe7fbeeba7423c265cd4d72cc7d4444884bd4c8e5756da1133ebd6baa7565eb2b0fca70bf0b520fb37d0b36c53ec671bca6f7de98c5f30d8743a67dadbba35e90d4b160d9d799b1769351dbd932211a733c6d3bc5bfa8c0f643252c38063dd429c7"}}]}, 0x1e4}}, 0x0) (async) write$sndseq(r1, &(0x7f0000000100)=[{0x22, 0x0, 0x0, 0x0, @time={0x6, 0xa5a}, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0x1c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003f000500010000000000000001010000000000000c0001006f76735f647030000800020000000000"], 0x30}}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000040000100020000000000000003010000000000000c0003006f76735f64703000"], 0x24}}, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000140)={0x8000, 0x8000, 0x1, 'queue0\x00', 0x4}) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, 0x0) (async) syz_create_resource$binfmt(0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000340)={0xa, 0x0, [{0x80000007, 0xfffffffb, 0x5, 0x0, 0x3}, {0x4, 0x1, 0x4, 0xffffffff, 0x10001}, {0x2, 0x80000001, 0x6, 0x24, 0x4}, {0x2, 0x6, 0x4, 0x2, 0x1}, {0x2, 0xd, 0x5, 0xe4, 0x7}, {0x6, 0x0, 0x4, 0x80, 0x8e2}, {0x80000019, 0xc, 0x81, 0x4, 0x1}, {0x7, 0x9, 0x0, 0x3, 0x8}, {0x40000004, 0x77, 0x7ca, 0x0, 0x3}, {0x80000001, 0x6, 0xa, 0x5ca81687, 0x1}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1m51.342634167s ago: executing program 2 (id=1854): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sec\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000002900)='./tracefs\x00', &(0x7f0000002940)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002980)='./tracefs/available_tracers\x00', 0x0, 0x0) preadv(r1, &(0x7f00000029c0)=[{&(0x7f0000002a00)=""/114, 0x72}], 0x1, 0x8, 0xfffffffe) preadv(r1, &(0x7f0000002a80)=[{&(0x7f0000002ac0)=""/88, 0x58}], 0x1, 0x26, 0x7ff) mount(0x0, &(0x7f0000002700)='./sec\x00', &(0x7f0000002740)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002780)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r2, &(0x7f00000027c0)="302d434f4e4649473d646973e1626c65640a", 0x12) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000240)=@ethtool_drvinfo={0x3, "712a47568b2c402e2c5792b5adbbb82e0c1f8ee15ff7a4373a68eb060d768899", "4a3eb3768515948dfab2e1f39f58465d11fafea228a4086797ceab4b73313c93", "2a9b70e21ec29d05eb89d11e2ed69c5ab4272fac74fcaab9925fabaa303bac61", "38e51009894cae17d2b361d9fedae469737f49b6a39d85a1ca87cbbb9b8e4809", "f16f995bdf5e1d0f32a39b81f061d8cf37f3a57c678b2356afda00", "87e20d1a690faf456b2d5369", 0x7afc, 0x92d, 0x4, 0x6fa, 0x7ff}}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f00000028c0)={0x3, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x2, &(0x7f0000000140)) ptrace$cont(0x21, r3, 0x5, 0x4) prlimit64(0x0, 0x4, &(0x7f0000000400)={0x21, 0x4d}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000340)={0x53, 0xffffffffffffffff, 0x6, 0x10, @buffer={0x0, 0x0, 0x0}, &(0x7f00000026c0)="23ee03001a00", 0x0, 0x3, 0x13, 0x1, 0x0}) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r6, &(0x7f0000002480)={0x130, 0x0, r7, {0xffffffffffffffff, 0x80000333, 0x0, '\x00', {0x10, 0x800, 0xd, 0x7fff, 0x0, r8, 0x4000, '\x00', 0x2, 0x9, 0x9, 0x101, {0xffffffffffff800d, 0x5}, {0x5, 0x4}, {0x1, 0x9}, {0xa, 0x6}, 0x9, 0xdc44, 0x80000001, 0x1}}}, 0x130) getresgid(&(0x7f00000025c0), &(0x7f0000002600), &(0x7f0000002640)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000002b40)={{0x1, 0x1, 0x18, r4, {0x0, 0xee01}}, './sys\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000002800)={{0x1, 0x1, 0x18, r5}, './sec\x00'}) pread64(r11, &(0x7f0000002840)=""/113, 0x71, 0x5) setresgid(r8, r9, r10) 1m51.188368837s ago: executing program 2 (id=1855): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m50.649015579s ago: executing program 2 (id=1860): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x6f375000) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x17) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000200)={0xa, 0x4e20, 0x400006, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000240)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815", 0x45, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x22, 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}]}, 0x28}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x100, 0x0) 1m50.493642009s ago: executing program 35 (id=1860): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x6f375000) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x17) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000200)={0xa, 0x4e20, 0x400006, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000240)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815", 0x45, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x22, 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}]}, 0x28}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x100, 0x0) 1m25.264281461s ago: executing program 4 (id=1980): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x0) mount(&(0x7f0000000200)=@filename='./dev/sda1\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f00000002c0)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setresuid(0x0, 0xee01, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0xa) ioctl$FITRIM(r2, 0x40e8662e, &(0x7f0000000340)={0xc3e4, 0xd000000, 0x7}) r3 = syz_open_dev$mtd(&(0x7f0000000380), 0x0, 0x2) ioctl$BLKPG(r3, 0x40084d02, &(0x7f00000003c0)={0x2, 0x0, 0x0, 0x0}) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f00000000c0), 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1e, 0x21, 0x70bd27, 0x0, {0x7}, [@typed={0x5, 0x2a, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) remap_file_pages(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x40, 0x0) 1m24.795688887s ago: executing program 4 (id=1982): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @empty}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x2, 0x0, &(0x7f00000002c0)) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000340)=0x90000) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000340)=0x90000) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES32=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRES8=r1, @ANYRESDEC=r1, @ANYRES16=r0, @ANYRES32=r1, @ANYRES8=r0], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000019940)={0x1c, &(0x7f0000019980)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_connect(0x3, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002ffff0040950b90170001000000010902270001010080fa0904000003ffff000007058102000200070502020002"], 0x0) (async) r3 = syz_usb_connect(0x3, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002ffff0040950b90170001000000010902270001010080fa0904000003ffff000007058102000200070502020002"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6000, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x204044, &(0x7f00000001c0)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x30]}}]}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) (async) syz_usb_control_io$uac2(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x82, &(0x7f0000000000)=@generic={0x6, 0x0, 0x7a, "c0a06efe", "27124a1e8f420d781e502cb3d211d4488d0ce21e04253ac26cb3fb24f1dbd118ff2b984a199b9d19dee0feb7a970f6e4ff07808c0868f51aea9ffb1e033bec45d3608fb67ead838a7bb53b97db63bde824412f4aa97bb6db22f854b3c00fee5419950e58565eadc3d56cd492be000fe236313f6c1943f8ed1d23"}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) 1m21.775926402s ago: executing program 4 (id=2004): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) (fail_nth: 31) 1m21.6397823s ago: executing program 4 (id=2005): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x98bdb, 0x325967a8661c34d2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}, 0x8000000}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000180)={0x1}, 0x8) sendmmsg$sock(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x701}}], 0x18}}], 0x1, 0x8000) setresuid(0x0, 0xee01, 0xee00) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x1) ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) read(r2, &(0x7f0000000680)=""/4096, 0x1000) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x2d45, 0x1080, 0x400000}, &(0x7f0000ffe000), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x98bdb, 0x325967a8661c34d2) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}, 0x8000000}, 0x1c) (async) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000180)={0x1}, 0x8) (async) sendmmsg$sock(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x701}}], 0x18}}], 0x1, 0x8000) (async) setresuid(0x0, 0xee01, 0xee00) (async) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async) userfaultfd(0x1) (async) ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x1) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) read(r2, &(0x7f0000000680)=""/4096, 0x1000) (async) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x2d45, 0x1080, 0x400000}, &(0x7f0000ffe000), 0x0, 0x0) (async) 1m20.685179076s ago: executing program 4 (id=2009): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000039c0)='./trace\x00', 0x1ff) (async) mount(0x0, &(0x7f0000003a00)='./trace\x00', &(0x7f0000003a40)='tracefs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000003a80)='./trace/set_event\x00', 0x2, 0x0) write(r1, &(0x7f0000003ac0)="737562d751f911e16c3a6536743a6d6f643ab6b7d91c73797a5f6d6fdd831aeb23efe29cc6b68749787b8df9312d9d", 0x2f) (async) getsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) (async) r2 = syz_ublk_setup_io_uring(0x126a, &(0x7f0000000000)={0x0, 0x8f42, 0x200, 0x0, 0x152}, &(0x7f0000000180)=0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x173) (async) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) (async) recvmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f0000000700)=""/4093, 0xffd}, {&(0x7f0000001700)=""/151, 0x97}, {&(0x7f00000017c0)=""/109, 0x6d}, {&(0x7f0000001840)=""/127, 0x7f}], 0x5}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001900)=""/4088, 0xff8}, {&(0x7f0000002900)=""/4097, 0x1001}], 0x2}, 0x900000}], 0x7, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000203036632199d62912ea200000000000800010001"], 0x1c}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000003940)='/dev/comedi4\x00', 0x60080, 0x0) ioctl$COMEDI_BUFCONFIG(r7, 0x8020640d, &(0x7f0000003980)={0x2, 0x2, 0x3, 0x1}) (async) r8 = mmap$IORING_OFF_CQ_RING(0x0, 0x9, 0x1000000, 0x4010, r2, 0x8000000) syz_io_uring_modify_offsets$flags(r3, r8, 0x38, 0x1) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x44020}, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r9, &(0x7f00000001c0)='\\x01000000 2147483647 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000 r', 0x6d) syz_clone(0x40111, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m20.613026407s ago: executing program 4 (id=2010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) setsockopt$inet6_group_source_req(r1, 0x29, 0x2, &(0x7f00000001c0)={0x6, {{0xa, 0x4, 0x1000, @mcast1, 0x3}}, {{0xa, 0x4e21, 0x80, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x96aa}}}, 0x108) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000180)=0xfffffffa) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0xb3d) ioctl$TCXONC(r3, 0x540a, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000002e00000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40004000010800034000000014480000000c0a010100000000000000000a0000c7a2ea90ac5aa41a060900020073797a31000000000900b79a73797a31000000001c000380180c0080080003"], 0xb4}}, 0x24000041) 1m4.984441844s ago: executing program 36 (id=2010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) setsockopt$inet6_group_source_req(r1, 0x29, 0x2, &(0x7f00000001c0)={0x6, {{0xa, 0x4, 0x1000, @mcast1, 0x3}}, {{0xa, 0x4e21, 0x80, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x96aa}}}, 0x108) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000180)=0xfffffffa) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0xb3d) ioctl$TCXONC(r3, 0x540a, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000002e00000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40004000010800034000000014480000000c0a010100000000000000000a0000c7a2ea90ac5aa41a060900020073797a31000000000900b79a73797a31000000001c000380180c0080080003"], 0xb4}}, 0x24000041) 6.751550442s ago: executing program 6 (id=2363): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/fs/o2cb/logmask/TCP\x00', 0x2, 0x0) (fail_nth: 2) 6.672543347s ago: executing program 6 (id=2364): r0 = fsopen(&(0x7f0000000200)='cgroup2\x00', 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c0000002a5a0aaad23bd6f38dad45a4ff4dd347825a52b86ce8c08bd79e1ed72f6bff5dacaddc63abc9f1aaf19fe6cae467acf8b1de81362224be101fea359ffd9d48a59119a5d13d093d067eb11f47e0abaf6c5447e9e987970b49a8254b93a161c4a07ae48a6e2c236c06feae5b8d71f2facc84bd4c96af164b57b38b676bfc4fa70e54df2c4856c8447708e0b004013d5febffda3b2afddb2df574b4f604b035ffbac83617286913798dc61c62e1e7ae1014c78e83f309f914433959838d7ff832707411", @ANYRES16=r2, @ANYBLOB="200028bd7000fcdbdf25090000000800020000000000"], 0x1c}}, 0x20000000) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x9, 0x0, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000780)={0xa, 0xe22}, 0x1c) (async, rerun: 64) connect$inet6(r4, &(0x7f00000007c0)={0x2, 0x4e22, 0x0, @mcast1, 0x4}, 0x1c) (rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f0000000800)=[{&(0x7f0000000840)="580000001400add427323b472545b45602117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r0, 0x0, 0x8) r7 = openat$cgroup_ro(r6, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000001900)={0x2020}, 0x2020) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140005007e05000017200000000000000000000005010905a1018521150026ff00750895308102c0"], 0x12c) (async, rerun: 64) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) (rerun: 64) write$UHID_INPUT2(r8, &(0x7f0000000480)=ANY=[@ANYBLOB='\f\x00\x00\x001\x00!\x00'], 0x37) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000006c0), 0x41, 0x0) (async, rerun: 64) write$vga_arbiter(r2, &(0x7f00000008c0)=ANY=[], 0x33) (async, rerun: 64) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0xfffffffffffffd87, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0xdcb1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, @in6={0xa, 0x4e23, 0x57e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x203}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x2}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) (async) nanosleep(&(0x7f0000000680), 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000000180)={r10}, &(0x7f00000001c0)=0x8) 5.917238164s ago: executing program 7 (id=2365): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./sys/fs/o2cb/logmask/TCP\x00', 0xcdafd807d30a7078, 0xc0) readlinkat(r2, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)=""/50, 0x32) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000140)=@sr0, r1, &(0x7f00000002c0)={0xd, 0x2bc}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/fs/o2cb/logmask/TCP\x00', 0x2, 0x0) 5.915567378s ago: executing program 7 (id=2366): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x0) (fail_nth: 54) 5.862121963s ago: executing program 7 (id=2367): r0 = fanotify_init(0x4, 0x1000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r3 = openat2(r2, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x20000, 0xc0, 0x2}, 0x18) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 5.752899561s ago: executing program 7 (id=2368): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x1ff) r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000d0327408ca0768a8d4c4000000010902120001000000000904"], 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000040)=@other={0x20300002000001dc, &(0x7f0000000080)}) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x60, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x800}}, {0x14, 0x2, @in={0x2, 0x7, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010014}, 0x4) r5 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$uac3(r5, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)={0x20, 0x18, 0x1, '>'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f00000001c0)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r5, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000400)={0x0, 0x0, 0x2, "b2a3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x2, 0x10e, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0xccd, 0xb1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfc, 0x3, 0x1, 0x3, 0xb0, 0x10, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x34}, [@extension_unit={0x7, 0x24, 0x8, 0x1, 0x1000, 0x5}, @selector_unit={0x9, 0x24, 0x5, 0x5, 0x9, "92669338"}, @mixer_unit={0x8, 0x24, 0x4, 0x4, 0x7, "ee2a70"}, @selector_unit={0x7, 0x24, 0x5, 0x3, 0x9, "dac4"}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x5, 0x9, 'YiJ\"'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x2, 0xf8, 0x7, "04", 'R'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xee, 0x7e, 0x7, 0x5, 0xb9}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x3c1e, 0xd7, "c4fcfb7c85dd"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x2, 0xc0, "de"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x4, 0xf3, 0xf2, "e389cf", 'S,'}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xdc, 0x6, 0x7, {0x7, 0x25, 0x1, 0x8, 0x7, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1000, 0xffff, 0xc, "db67b65c09be"}, @as_header={0x7, 0x24, 0x1, 0x2, 0xe, 0x3}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x3bb, 0x8001, 0x3, "98b0845781f189"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1, 0x1000, 0x0, "ae"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x4, 0xd6, 0xc}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0xff, 0x7, {0x7, 0x25, 0x1, 0xc, 0x9, 0x9}}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x0, 0x2c, 0xd, 0x5, 0x40, 0x82}, 0x5, &(0x7f00000008c0)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0xc0a}}]}) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000005c0), 0x23ce, 0x200000) ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000700)={0x0, 0xec, &(0x7f0000000600)="fe36e47f22c6f3cd889856d291842424ed4cfecaa146dc1b9f69e19987d589997ab6658f62752760e39102eb67be34d36bc23013a3babc1639799157f5e57cf47c8d2f95d9ae4a734f27a5a7f83de5e9996bfe564a19a318539a721f86f44f069880cbf16c88732d81b59fbd174ce454bb52dbe40f79d58f8d00d251cee42b5ff9054723c3f824b165b5a8376b4ef9b638e959125116ecfe8717a5ff64b5972c212888dfe802d0647383eedbec237b56f3da4b4a38af2d0042f32eff8a8cc335753b98a1ea0200358462fddbb1cd9a43f0f1b4cbf4a974d74669222a161e94b3697bf0bf46de0f3cd59a96cb"}) write(r6, &(0x7f0000000300)='27', 0x2) openat$ttynull(0xffffffffffffff9c, 0x0, 0x6f4d83, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) 5.485798339s ago: executing program 8 (id=2370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x9, 0xc8f, 0x400}) setns(r1, 0x2000000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000004, 0x3}}], 0x20}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x6a, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.308584639s ago: executing program 8 (id=2371): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0xf, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x76dc) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='27', 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x0, 0x2000) accept$alg(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) getsockopt$inet6_tcp_int(r2, 0x6, 0x15, 0x0, &(0x7f00000002c0)) syz_open_procfs(0x0, &(0x7f0000000080)='net/nf_conntrack_expect\x00') ioctl$NILFS_IOCTL_GET_SUINFO(r4, 0x80186e84, &(0x7f0000000740)={&(0x7f0000000700)=[{0x8, 0x8, 0x1}, {0x3, 0x9, 0x1}, {0x0, 0x4, 0x2}, {0x3, 0x0, 0x2}], 0x4, 0x10, 0x4, 0x1e}) r5 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r5, 0xc138fd09, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x198, 0x138, 0x1, 0x0, 0x10, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@integrity={0x0, 0x1090, 0x0, 0x1e, 'integrity\x00', {{@ram_num={'1:', 0x0}, 0x20, '4096'}, 0x20, '-', 0x20, 'B', ' 1 internal_hash:sha256'}}]}) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/46, 0x2e}], 0x1) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000000000/0x800000)=nil, 0x800000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="204f2ea0000000250001002ebd7000fbdbdb25037c"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) socket$unix(0x1, 0x1, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.866109449s ago: executing program 0 (id=2376): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='v7\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x60840, 0xa2) fcntl$getownex(r0, 0x11, &(0x7f0000000040)) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000380)='./mnt\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x18d042, 0x15) pwrite64(r1, &(0x7f0000000400)="ff", 0x58200, 0xfb2200) 3.760908948s ago: executing program 0 (id=2377): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x0) (fail_nth: 55) 3.744905182s ago: executing program 0 (id=2378): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a80)='memory.stat\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@polexpire={0xcc, 0x1b, 0x1, 0x70bd2d, 0x25dbdbfd, {{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0xf, 0x4e23, 0x4, 0xa, 0x0, 0x80, 0x32}, {0x800, 0x80, 0xfffffffffffffff8, 0x1ff, 0x1, 0x9, 0x9, 0x1158000000000}, {0x2, 0x1, 0xfd, 0x4}, 0x10007, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x29}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x5, 0x20}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) syz_usb_connect(0x3, 0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d04210800010102000109029800020100633209040000010e0100000d24010001280000366e0201011224020101020000000000000000030000000924030201010001000705810310000a09040100010e0200000e24010147fc80d8bc25023128001b240401015955593200001000800000aa00389b711001000000001e240501028002e001000000000000000000000900151605000115160500070582020002"], 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) syz_usb_connect$midi(0x0, 0xd8, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x1, 0x1, 0x4, 0x90, 0x3e, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x0, 0x0, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x7, 0xde}, @midi_out_jack={0xf, 0x24, 0x3, 0x2, 0x5e, 0x4, [{0x9, 0x4}, {0x87, 0x1c}, {0x10, 0xbd}, {0x2}], 0x81}, @midi_out_jack={0xf, 0x24, 0x3, 0x0, 0x3, 0x4, [{0x4, 0x4}, {0x2c, 0x5}, {0x9, 0x3}, {0x7, 0xe}], 0x10}], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0xf8, 0x1, 0x10, {0xb, 0x25, 0x1, 0x7, "1511ab4c7d90c4"}}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0xcf, 0x0, 0x4, {0x8, 0x25, 0x1, 0x4, "8fed1b61"}}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xe, 0x7f, 0xc0, {0xd, 0x25, 0x1, 0x9, "4d86191bf0b7197d37"}}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x78, 0x92, 0xc, {0x10, 0x25, 0x1, 0xc, "56e8f375d1b615f01773205e"}}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x1, 0x0, 0x1, {0xc, 0x25, 0x1, 0x8, "6099d44976807991"}}}, {{0x9, 0x5, 0xe, 0x1, 0x10, 0xc9, 0x8, 0x2, {0xe, 0x25, 0x1, 0xa, "41caba069bb5ec7d174c"}}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x5, 0x1, 0x84, {0x7, 0x25, 0x1, 0x3, '_w9'}}}]}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x310, 0x46, 0x81, 0x1, 0x20, 0x1}, 0x79, &(0x7f0000000580)={0x5, 0xf, 0x79, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xd, 0x6, 0x401}, @ssp_cap={0x18, 0x10, 0xa, 0x27, 0x3, 0x4, 0xf, 0x3, [0xf0, 0xfe70, 0xff0000]}, @ssp_cap={0x1c, 0x10, 0xa, 0x3c, 0x4, 0x401, 0x1e00f, 0x9, [0x0, 0xf, 0xff3f00, 0xcf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x9, 0x8}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc8, 0x2, 0xa, 0x8, 0x6}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x7ffffff, 0xf00, 0xdc7f, [0xff00c0, 0xffc0cf, 0x3fcf, 0x3fc0, 0xff, 0x101000f]}]}, 0x6, [{0xf7, &(0x7f0000000600)=@string={0xf7, 0x3, "b84633bc94cf28a38d3fdd3c850f9c23e6ba63fc7207bc15d26c6b53b9585ad345b63fcbc0c8f0c78daccf5ed72917b134118a897f435976d5c24851f72ac655cddbf7dd53e3c1c50967097cb1d72cd8ddc4cff2862d036639cf356d5a70745c1a13df6fc0322379814c51e591354a3a0c703763134c4e750f338cc60e4bd888cee716bcb92980529fcea32970b61c29c6375e2107a1a0a4ae627a2611faf1b2148eb1c755d73e334bad375b800e55ec56eb7af0bb2ed005f93f651e638feefc960341c8ba3b4902ec544fef940a463404768769dd0ec85828fd79d163d991ee8bf81fe83b2655ead0a6f00e84ccf3bbb4c33137e2"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x42f}}, {0xb5, &(0x7f0000000740)=@string={0xb5, 0x3, "46cfe0652d6fd1829809b72db237694204beb6cce46910302df5ba0d8734ea0dcba41193cd9e51d13523e898c58ac88798f29ca4560b43feffc0b9765ba47d58cbc73e46f0218154239e0c6b7b43ed959e3ac251014dbb5e9a0557a4265b56584dbdd40f479bebcb13228c4add4c9967f11df07b49b1f1366ba6a202503da938bef9d7ad6f0208f4cca9103956d3dd3446fff48b41ab0c6908ded4245a3cde93e4c26cc620b1643dbdbade3366fcc4aea990d9"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x340a}}]}) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r3, &(0x7f0000000e40)=ANY=[@ANYBLOB=' '], 0x33) close(r3) fsetxattr$security_capability(r3, &(0x7f0000000e80), &(0x7f0000000ec0)=@v1={0x1000000, [{0x0, 0x800}]}, 0xc, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x68, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x68}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000d80), &(0x7f0000000dc0)=0x8) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x6c, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x79}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x68}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40804) syz_usb_connect$midi(0x3, 0xc6, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000200000040e40863014000010203010902b400010105500109040000070103000607240140000700072401c20007000624020203400905040310000405f908250104d11273310905070810001908010a2501067bc21d6767b60905020300020440050e25010a6d0efe79ed8cd38dde22090503001802077f0e0d250109a32366f0fbb5a0e56209050b08200005090409250105e1f44f8b4309050410080007007f0f25010bc71949e809c6018749f6bf0905000340000289010a2501066084f09e9a091f4be1951db526826eb0c98ea7e63f5f020a180b79e1c28556b795"], &(0x7f0000000340)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x3, 0x10, 0xc7}, 0xbc, &(0x7f0000000200)={0x5, 0xf, 0xbc, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x7fff, 0xf000, 0x31f4}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x3, 0xf, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x60, 0x3, 0x5, 0x2, 0x6}, @generic={0x89, 0x10, 0x2, "f8b1b3401afc618bb66db9e90174b70ceb2038c3354477a683188b532a0d0b41f8c7e7718ffc4aeb605135760998e2e2011fd90bebb77abe9be6d06dee8b24e26bb8ea8fbe1f8650000fe3cc6b331618994fcc352df8f78d5dd08a0cbd190130b4c184f396f8358371531e20e8cf328aa0b57ff5aa8237b8f1da87f5dd760ff9aed726cb04df"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x60, 0xf9, 0x7, 0x3, 0x80}]}, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x442}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x43f}}]}) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x60, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x1) 2.668493146s ago: executing program 7 (id=2379): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xe382) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000300)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='1\x00', 0x2) (async) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='gadgetfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='ext4\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x149000, 0x19a) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000480), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) write$uinput_user_dev(r3, &(0x7f0000000ac0)={'syz1\x00', {}, 0x9, [0x38, 0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x80, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x100, 0x9, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x6, 0x0, 0x7fffffff, 0xc], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x0, 0x0, 0x3, 0x3, 0x100, 0x0, 0xffffffff, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x802, 0x0, 0x2, 0x0, 0xfaea, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x27, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffce2, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000f40)={{}, 0x3, 0xb7, 0x2}, 0x18) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000002c0)=0x200000) (async) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, 0x106, 0x2}}, 0x20) socket$key(0xf, 0x3, 0x2) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000740)={0x3, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2, 0x5, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1}]}, 0x20}, 0x1, 0x7}, 0x20000030) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x1c0) sysfs$3(0x3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000880)={0x7, 'vlan0\x00', {0xffffffff}, 0xfff}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000880)={0x7, 'vlan0\x00', {0xffffffff}, 0xfff}) mknodat(0xffffffffffffff9c, &(0x7f0000000640)='./file1/file2\x00', 0x81c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x40400, 0x10) fcntl$notify(r4, 0x402, 0xd) (async) fcntl$notify(r4, 0x402, 0xd) renameat2(0xffffffffffffff9c, &(0x7f00000006c0)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f00000006c0)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f00000005c0)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @loopback}, {0xa, 0x4e20, 0x0, @loopback}, r3, 0x3e8}}, 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000400)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000440)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0xa, 0x4, 0x8}, 0x20) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x18, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x8, 0x50, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xc5}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r7, 0x0, 0x9) r8 = socket(0x28, 0x801, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="7572486e733d66642c7266839c5f18", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="7572486e733d66642c7266839c5f18", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) sendmmsg$sock(r9, &(0x7f0000000280)=[{{&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e21, @remote}, 0x0, 0x3, 0x0, 0x1}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="efe6e4cc5262cdec4d2fbf865a9179697a872b27e84a08f70b0a87cd06ea751c0d33ec8c51c94a6f504aeee8d66b98070c023f95f9af64fd66a40b6941c1396dadabf145870a53c9dc9a724dd9c7a41eba22e4e6bc4834065ab24fc595fb20d34c56a64b46e485fd27a6848dbcaef7", 0x6f}], 0x1, &(0x7f0000000200)=[@mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}], 0x30}}], 0x1, 0x0) 2.135050539s ago: executing program 6 (id=2382): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000900)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, &(0x7f0000000580)={0x20, 0x0, 0x63, {0x63, 0xe, "7ecf0b2d2096c2e326a0ffe8375da96f9baeb05c2f7999a8da74c6bf49566d9f951267c086c7131de5aab897288fe8c1f24d72c9b18b50d2b16562a9578d1b3adc41cc6c2b21f3036c306e5bef23342a54bfba5922a7bf49cffe1bb6347e6afe2c"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}, &(0x7f0000000640)={0x0, 0x22, 0x8, {[@global=@item_4={0x3, 0x1, 0xb, "b129a28e"}, @global=@item_012={0x0, 0x1, 0x6}, @local=@item_012={0x1, 0x2, 0x2, "1c"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0xdd, 0x81, 0x1, {0x22, 0xe83}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x20, 0x12, 0x9f, "59d2d1e43789ef51726f7ae5e6b3ed8cf540f4daa4a9b8702fb4e4051faceeae2b96b8a08a9e1baff3dc2803f7d4222ad8c37cf93b21c181935bebe043e28d1f448a1cccb07b81aa0aff8eff386e09f5ca5f69980aaeef5c382f9172bc0c3e95e653fe8810acd1005a8ae406ce47febe8f52ba3e6ad55abc3c2eecc938f50c20a97be7555ccf10729121b2a80fbd5abafbbd388c2fbef642c734931144ed21"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000840)={0x20, 0x1, 0x37, "d63e19468c093802c96f6009162d0b52f8e3ba6eb440b3b00c5380f9a0916a673b5bc948a76ce3910044fece23d6f5ace5cff9b1fa3089"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x8}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'dummy0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x47, 0xc, 0x0, {0x10, @esp_ip6_spec={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x1000, 0x8}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, 0x5, 0x200, [0xf2, 0x7]}, @tcp_ip4_spec={@local, @remote, 0x4e23, 0x4e20, 0x1}, {0x0, @remote, 0x4, 0x3, [0x7, 0x401]}, 0x3, 0x7}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01021f40b676ff651c290000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c000380080001"], 0xfc}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = landlock_create_ruleset(&(0x7f00000009c0)={0x520, 0xd, 0x3}, 0x30, 0x0) landlock_restrict_self(r2, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000a40)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100015800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="00002e000000d41efec0717c524312be40b532a3b9f6325b03cc37d442bd9dcb86c3069391ea70597f0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}}, &(0x7f00000001c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x82, 0x1, 'D'}, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x85, 0x3, "1fc971"}}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000a00)=ANY=[@ANYBLOB="20ec06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0x10, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x4) 925.070577ms ago: executing program 8 (id=2383): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/fs/o2cb/logmask/TCP\x00', 0x2, 0x0) (fail_nth: 4) 913.098035ms ago: executing program 8 (id=2384): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="14010000200001030000000000000000010100800c00010007"], 0x114}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x143042, 0x0) copy_file_range(r1, 0x0, r1, 0x0, 0x6, 0x130) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x5, 0x3, 0x4, 0x8, 0x8, {r2, r3/1000+10000}, {0x5, 0x8, 0x1, 0x7, 0x0, 0x40, "8bd2d087"}, 0x7, 0x1, {}, 0xfffffffe, 0x0, r1}) mount(0x0, &(0x7f00000002c0)='./file2\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/fs/o2cb/logmask/TCP\x00', 0x2, 0x0) 576.492848ms ago: executing program 0 (id=2385): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='nv', 0x2) setpriority(0x3, 0x0, 0x5) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000180)) 521.034841ms ago: executing program 8 (id=2386): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) listen(r0, 0x10) mount(&(0x7f0000000480)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f00000004c0)='./cifs\x00', &(0x7f0000000500)='cifs\x00', 0x0, &(0x7f0000000540)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,,ass=root,vers=2.1,nodfs\x00') mknod$loop(0x0, 0xfff, 0x1) mkdir(&(0x7f0000000280)='./file0\x00', 0x18b) mount$bpf(0x0, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300), 0x10008, &(0x7f0000000340)={[{@uid={'uid', 0x3d, 0xee00}}, {@mode={'mode', 0x3d, 0x27}}]}) mount$bpf(0x200000000000, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a1c000000000a0104000000000000000002000000080001006e61740040000000050a0104000000000000000002000000080001006e6174000800030073797a00080007006e61740014000400080001000000000308000200ffffff9c84000000060a010400000000000000000200000008"], 0x108}}, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x20000, 0x0) getdents64(r2, &(0x7f0000000040)=""/224, 0xe0) r3 = accept(r0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000005c0)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100100200000000000000000000000000000000000000000000000010000000100000001000"/124, 0x7c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r3) 518.342253ms ago: executing program 0 (id=2387): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000002) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xda4f, 0x200, 0x40000002, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xff7fed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff8, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000a80)={&(0x7f00000002c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x2b8, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9667}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}]}, @TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x55}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7b}, @TIPC_NLA_NODE_ID={0x3e, 0x3, "b20804cd0b3093442481f3b8d7f547a408a19f5c6e453a1046371551d6a69aaa272a2ccd9528741512074726f812cd45abca845f0815531e603e"}, @TIPC_NLA_NODE_ID={0x91, 0x3, "5c928cf699ccc52d7ca29455c105b9691ec48b4f98ebc80162086bb7e172e3a6edb13dcb10cf81a0a3817e39f6d44db8218076dfa2ce82fa83916b8e010fd6c9ddfb411cc0aeed5b9a043391c6cab8707a9755ef47659342f0f7f0fb032ebe3a68375bdb58df28a2821ee0ffcc978b06357b1fff123519b02e5ad2c54bd3c733f5f4a0eff34ab330c3c02fcb43"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "ff9c471dfd3b9205a0ce32cfd41347355fe140d5289eb88742eb1e9ccb49b0d4a7"}}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8acc}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdd9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xea}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5e}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) 345.019314ms ago: executing program 6 (id=2388): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f0000000200)="d84f7398", 0x4) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000240)=0x6, 0x4) sendto$inet6(r1, &(0x7f0000000280)="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", 0x57b, 0x0, &(0x7f0000000800)={0xa, 0x5e20, 0x9, @mcast2, 0x5}, 0x1c) readv(r1, &(0x7f0000000840)=[{&(0x7f0000000880)=""/151, 0x97}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/fail_page_alloc/min-order\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000940), &(0x7f0000000980)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') read$FUSE(r2, 0x0, 0x5a) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002080)=ANY=[@ANYBLOB="b009000041000701fefeffff00000000017c0000040042801400018006000600800a000008001300", @ANYRES32=0x0, @ANYBLOB="840902"], 0x9b0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 270.301145ms ago: executing program 6 (id=2389): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000340)='./cgroup.cpu/test\x00') r1 = landlock_create_ruleset(&(0x7f0000000200)={0x7f6e}, 0x18, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.freeze\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000180)={r5}, 0x8) getsockopt$inet_sctp_SCTP_EVENT(r2, 0x84, 0x7f, &(0x7f0000000240)={r5, 0x8009, 0x1}, &(0x7f0000000280)=0x8) landlock_restrict_self(r1, 0xe) syz_fuse_handle_req(r0, &(0x7f00000006c0)="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", 0x2000, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 511.712µs ago: executing program 0 (id=2390): r0 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x800000, 0x3, 0x2010, 0xffffffffffffffff, 0x20000000) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x525, 0x300001c, 0x12, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQES(0x0, 0x8, 0x8, 0x8010, 0xffffffffffffffff, 0x10000000) (async) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0x0}) syz_io_uring_submit$UBLK(r0, r1, r2, &(0x7f00000000c0)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r3, 0x80207502, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', @del_dev_cmd={r4}}) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x86100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0x6, r7, 0x80000}) (async) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x14000, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r8) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r9, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r10, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x4) (async) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000340)={"7c76f791df623119dd8bd7a8a6620a7c5e3d49ba6ca547227d14bf4d7fa7b660"}) (async) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r3, &(0x7f0000000380)={0x10000010}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r8, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5d}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x66}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4}, @NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x84, 0xec}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x12}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4c800) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r7) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r9, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r12, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0d0}, 0x40884) (async) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r8) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r13, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb74}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x60000}, 0x48800) close_range(r3, r11, 0x0) (async) syz_ublk_add_dev(r9, r0, r1, r2, &(0x7f0000000800)={0x2e, 0x1, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x74b9, 0x0, r6, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000007c0)=@any_dev={0x3, 0x809, 0x0, 0x0, 0x1000, 0x3, r5, 0x0, 0x160}}}, &(0x7f0000000880)=0x0) r15 = syz_ublk_setup_io_uring(0x6ca2, &(0x7f00000008c0)={0x0, 0x8db2, 0x1, 0x2, 0x367, 0x0, r9}, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) r16 = syz_ublk_setup_io_uring(0x6fae, &(0x7f0000000a80)={0x0, 0x8ef9, 0x200, 0x3, 0x1e8, 0x0, r8}, &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)) (async) r17 = syz_ublk_setup_io_uring(0x7092, &(0x7f0000000bc0)={0x0, 0xed3d, 0x0, 0x3, 0x170, 0x0, r9}, &(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)) r18 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000d00), 0x280800, 0x0) syz_ublk_setup_queues(r9, r14, &(0x7f0000000a00)={0x0, 0x5fcd, 0x200, 0x0, 0x184, 0x0, r15}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6dc4, 0x2aa0, 0x2, 0x2d, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9914, 0x1, 0x1, 0x323, 0x0, r16}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x75a6, 0x34, 0x2, 0x376, 0x0, r17}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe510, 0x40, 0x0, 0x19b, 0x0, r18}}], 0x4, &(0x7f0000001fc0)={0x2e, 0x4, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x81}, 0x0, 0x0, '\x00', {0x0, 0x138, 0x0, &(0x7f0000000fc0)=@buf_512="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"}}, &(0x7f0000002040)) (async) ioctl$KVM_CAP_XEN_HVM(r18, 0x4068aea3, &(0x7f0000002080)={0x26, 0x0, 0x62}) socket$nl_generic(0x10, 0x3, 0x10) (async) r19 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r19, &(0x7f0000002300)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x58, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x24000800) 0s ago: executing program 6 (id=2391): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000100)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000140)='fd', 0x0, r3) close(0x3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r7, &(0x7f00000001c0)=0x4000921, 0x12) bind$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r8, 0x4b3a, 0x1) listen(r2, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) syz_create_resource$binfmt(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00') write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): try_open+0xcf9/0x1360 [ 497.067240][T14722] ? __pfx_ima_file_check+0x10/0x10 [ 497.067255][T14722] security_file_post_open+0xb3/0x260 [ 497.067270][T14722] path_openat+0x1748/0x20f0 [ 497.067296][T14722] do_file_open+0x23e/0x4a0 [ 497.067312][T14722] ? __pfx_do_file_open+0x10/0x10 [ 497.067330][T14722] ? __pfx_kfree_link+0x10/0x10 [ 497.067347][T14722] ? _raw_spin_unlock+0x28/0x50 [ 497.067358][T14722] ? alloc_fd+0x6af/0x760 [ 497.067375][T14722] do_sys_openat2+0x115/0x200 [ 497.067391][T14722] ? __pfx_do_sys_openat2+0x10/0x10 [ 497.067407][T14722] ? ksys_write+0x242/0x270 [ 497.067421][T14722] ? __pfx_ksys_write+0x10/0x10 [ 497.067435][T14722] __x64_sys_openat+0x138/0x170 [ 497.067448][T14722] do_syscall_64+0x166/0x520 [ 497.067460][T14722] ? trace_irq_disable+0x3b/0x140 [ 497.067472][T14722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.067482][T14722] ? clear_bhb_loop+0x70/0xc0 [ 497.067495][T14722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.067505][T14722] RIP: 0033:0x7fa5d039f559 [ 497.067517][T14722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.067525][T14722] RSP: 002b:00007fa5d128b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 497.067537][T14722] RAX: ffffffffffffffda RBX: 00007fa5d0625fa0 RCX: 00007fa5d039f559 [ 497.067544][T14722] RDX: 0000000000000001 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 497.067551][T14722] RBP: 00007fa5d128b090 R08: 0000000000000000 R09: 0000000000000000 [ 497.067558][T14722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 497.067564][T14722] R13: 00007fa5d0626038 R14: 00007fa5d0625fa0 R15: 00007ffd18f5f168 [ 497.067581][T14722] [ 497.212214][ T10] hackrf 7-1:0.0: Board ID: 00 [ 497.212236][ T10] hackrf 7-1:0.0: Firmware version: [ 497.314303][ T10] hackrf 7-1:0.0: Registered as swradio24 [ 497.314328][ T10] videodev: could not get a free minor [ 497.314338][ T10] hackrf 7-1:0.0: Failed to register as video device (-23) [ 497.342784][T12519] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 497.381322][ T10] hackrf 7-1:0.0: probe with driver hackrf failed with error -23 [ 497.531486][T14727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.531921][T14727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.731598][T14738] fuse: Bad value for 'user_id' [ 497.731617][T14738] fuse: Bad value for 'user_id' [ 497.746028][T14237] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 498.790051][T14750] program syz.8.2244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 499.069172][T14754] netlink: 'syz.8.2246': attribute type 10 has an invalid length. [ 499.091748][T14754] team0: Device veth1_vlan failed to register rx_handler [ 499.137541][T14755] netlink: 'syz.8.2246': attribute type 10 has an invalid length. [ 499.140052][T14755] team0: Device veth1_vlan failed to register rx_handler [ 499.382516][ T10] usb 7-1: USB disconnect, device number 69 [ 499.501744][T14769] FAULT_INJECTION: forcing a failure. [ 499.501744][T14769] name failslab, interval 1, probability 0, space 0, times 0 [ 499.501778][T14769] CPU: 1 UID: 0 PID: 14769 Comm: syz.6.2248 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.501804][T14769] Tainted: [L]=SOFTLOCKUP [ 499.501811][T14769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 499.501821][T14769] Call Trace: [ 499.501829][T14769] [ 499.501837][T14769] dump_stack_lvl+0xe8/0x150 [ 499.501869][T14769] should_fail_ex+0x3eb/0x540 [ 499.501900][T14769] should_failslab+0xa8/0x100 [ 499.501928][T14769] __kmalloc_cache_noprof+0x9e/0x600 [ 499.501946][T14769] ? sha256_init+0x21/0x60 [ 499.501962][T14769] ? ima_calc_file_hash+0x40f/0x890 [ 499.501980][T14769] ? ima_calc_file_hash+0x40f/0x890 [ 499.502005][T14769] ima_calc_file_hash+0x40f/0x890 [ 499.502027][T14769] ? is_bpf_text_address+0x26/0x2b0 [ 499.502052][T14769] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 499.502121][T14769] ima_collect_measurement+0x51b/0xa00 [ 499.502149][T14769] ? __pfx_ima_collect_measurement+0x10/0x10 [ 499.502181][T14769] ? kernfs_root+0x1c/0x230 [ 499.502212][T14769] ? kernfs_root+0x1c/0x230 [ 499.502256][T14769] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 499.502292][T14769] process_measurement+0x1272/0x1c10 [ 499.502328][T14769] ? __pfx_process_measurement+0x10/0x10 [ 499.502348][T14769] ? trace_contention_end+0x3d/0x140 [ 499.502417][T14769] ? kernfs_put_active+0xa0/0x100 [ 499.502444][T14769] ? kernfs_fop_open+0xb0b/0xd20 [ 499.502471][T14769] ima_file_check+0xdc/0x130 [ 499.502492][T14769] ? do_dentry_open+0xcf9/0x1360 [ 499.502529][T14769] ? __pfx_ima_file_check+0x10/0x10 [ 499.502559][T14769] security_file_post_open+0xb3/0x260 [ 499.502584][T14769] path_openat+0x1748/0x20f0 [ 499.502628][T14769] do_file_open+0x23e/0x4a0 [ 499.502657][T14769] ? __pfx_do_file_open+0x10/0x10 [ 499.502691][T14769] ? __pfx_kfree_link+0x10/0x10 [ 499.502722][T14769] ? _raw_spin_unlock+0x28/0x50 [ 499.502743][T14769] ? alloc_fd+0x6af/0x760 [ 499.502773][T14769] do_sys_openat2+0x115/0x200 [ 499.502801][T14769] ? __pfx_do_sys_openat2+0x10/0x10 [ 499.502825][T14769] ? ksys_write+0x242/0x270 [ 499.502846][T14769] ? __pfx_ksys_write+0x10/0x10 [ 499.502870][T14769] __x64_sys_openat+0x138/0x170 [ 499.502893][T14769] do_syscall_64+0x166/0x520 [ 499.502915][T14769] ? trace_irq_disable+0x3b/0x140 [ 499.502938][T14769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.502958][T14769] ? clear_bhb_loop+0x70/0xc0 [ 499.502981][T14769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.503000][T14769] RIP: 0033:0x7fc36ed9f559 [ 499.503018][T14769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.503035][T14769] RSP: 002b:00007fc36fbb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 499.503057][T14769] RAX: ffffffffffffffda RBX: 00007fc36f025fa0 RCX: 00007fc36ed9f559 [ 499.503071][T14769] RDX: 0000000000000001 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 499.503085][T14769] RBP: 00007fc36fbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 499.503097][T14769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.503108][T14769] R13: 00007fc36f026038 R14: 00007fc36f025fa0 R15: 00007fff03514158 [ 499.503138][T14769] [ 499.880170][T14776] netlink: 'syz.6.2250': attribute type 10 has an invalid length. [ 499.936964][T14776] team0: Device gre0 is of different type [ 500.235680][T14784] 9p: Bad value for 'rfdno' [ 500.286168][T14786] FAULT_INJECTION: forcing a failure. [ 500.286168][T14786] name failslab, interval 1, probability 0, space 0, times 0 [ 500.286198][T14786] CPU: 1 UID: 0 PID: 14786 Comm: syz.8.2253 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.286221][T14786] Tainted: [L]=SOFTLOCKUP [ 500.286228][T14786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 500.286239][T14786] Call Trace: [ 500.286246][T14786] [ 500.286255][T14786] dump_stack_lvl+0xe8/0x150 [ 500.286291][T14786] should_fail_ex+0x3eb/0x540 [ 500.286322][T14786] should_failslab+0xa8/0x100 [ 500.286351][T14786] __kmalloc_cache_noprof+0x9e/0x600 [ 500.286373][T14786] ? kernfs_root+0x1c/0x230 [ 500.286396][T14786] ? ima_d_path+0xd4/0x230 [ 500.286416][T14786] ? ima_d_path+0xd4/0x230 [ 500.286452][T14786] ima_d_path+0xd4/0x230 [ 500.286476][T14786] ? __pfx_ima_d_path+0x10/0x10 [ 500.286501][T14786] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 500.286539][T14786] process_measurement+0x154a/0x1c10 [ 500.286577][T14786] ? __pfx_process_measurement+0x10/0x10 [ 500.286597][T14786] ? trace_contention_end+0x3d/0x140 [ 500.286665][T14786] ? kernfs_put_active+0xa0/0x100 [ 500.286692][T14786] ? kernfs_fop_open+0xb0b/0xd20 [ 500.286720][T14786] ima_file_check+0xdc/0x130 [ 500.286742][T14786] ? do_dentry_open+0xcf9/0x1360 [ 500.286769][T14786] ? __pfx_ima_file_check+0x10/0x10 [ 500.286799][T14786] security_file_post_open+0xb3/0x260 [ 500.286825][T14786] path_openat+0x1748/0x20f0 [ 500.286869][T14786] do_file_open+0x23e/0x4a0 [ 500.286899][T14786] ? __pfx_do_file_open+0x10/0x10 [ 500.286932][T14786] ? __pfx_kfree_link+0x10/0x10 [ 500.286964][T14786] ? _raw_spin_unlock+0x28/0x50 [ 500.286985][T14786] ? alloc_fd+0x6af/0x760 [ 500.287017][T14786] do_sys_openat2+0x115/0x200 [ 500.287045][T14786] ? __pfx_do_sys_openat2+0x10/0x10 [ 500.287074][T14786] ? ksys_write+0x242/0x270 [ 500.287098][T14786] ? __pfx_ksys_write+0x10/0x10 [ 500.287123][T14786] __x64_sys_openat+0x138/0x170 [ 500.287146][T14786] do_syscall_64+0x166/0x520 [ 500.287168][T14786] ? trace_irq_disable+0x3b/0x140 [ 500.287188][T14786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.287206][T14786] ? clear_bhb_loop+0x70/0xc0 [ 500.287227][T14786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.287246][T14786] RIP: 0033:0x7fa5d039f559 [ 500.287265][T14786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.287281][T14786] RSP: 002b:00007fa5d128b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 500.287301][T14786] RAX: ffffffffffffffda RBX: 00007fa5d0625fa0 RCX: 00007fa5d039f559 [ 500.287315][T14786] RDX: 0000000000000001 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 500.287328][T14786] RBP: 00007fa5d128b090 R08: 0000000000000000 R09: 0000000000000000 [ 500.287341][T14786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 500.287353][T14786] R13: 00007fa5d0626038 R14: 00007fa5d0625fa0 R15: 00007ffd18f5f168 [ 500.287385][T14786] [ 500.732884][T12519] Bluetooth: hci1: ACL packet for unknown connection handle 8 [ 500.814759][T14801] FAULT_INJECTION: forcing a failure. [ 500.814759][T14801] name failslab, interval 1, probability 0, space 0, times 0 [ 500.814792][T14801] CPU: 1 UID: 0 PID: 14801 Comm: syz.7.2258 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.814818][T14801] Tainted: [L]=SOFTLOCKUP [ 500.814825][T14801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 500.814837][T14801] Call Trace: [ 500.814845][T14801] [ 500.814853][T14801] dump_stack_lvl+0xe8/0x150 [ 500.814886][T14801] should_fail_ex+0x3eb/0x540 [ 500.814919][T14801] should_failslab+0xa8/0x100 [ 500.814956][T14801] __kvmalloc_node_noprof+0x171/0x820 [ 500.814981][T14801] ? seq_read_iter+0x1ea/0xca0 [ 500.815007][T14801] ? seq_read_iter+0x1ea/0xca0 [ 500.815039][T14801] seq_read_iter+0x1ea/0xca0 [ 500.815063][T14801] ? ima_calc_file_hash+0x40f/0x890 [ 500.815082][T14801] ? ima_collect_measurement+0x51b/0xa00 [ 500.815110][T14801] ? kernfs_fop_read_iter+0x144/0x6a0 [ 500.815138][T14801] __kernel_read+0x4ca/0x960 [ 500.815165][T14801] ? __pfx___kernel_read+0x10/0x10 [ 500.815206][T14801] ? rcu_is_watching+0x16/0xb0 [ 500.815239][T14801] integrity_kernel_read+0x89/0xd0 [ 500.815266][T14801] ? __pfx_integrity_kernel_read+0x10/0x10 [ 500.815291][T14801] ? __kmalloc_cache_noprof+0x148/0x600 [ 500.815310][T14801] ? ima_calc_file_hash+0x40f/0x890 [ 500.815329][T14801] ? ima_calc_file_hash+0x40f/0x890 [ 500.815357][T14801] ima_calc_file_hash+0x451/0x890 [ 500.815385][T14801] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 500.815460][T14801] ima_collect_measurement+0x51b/0xa00 [ 500.815494][T14801] ? __pfx_ima_collect_measurement+0x10/0x10 [ 500.815526][T14801] ? kernfs_root+0x1c/0x230 [ 500.815559][T14801] ? kernfs_root+0x1c/0x230 [ 500.815604][T14801] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 500.815642][T14801] process_measurement+0x1272/0x1c10 [ 500.815680][T14801] ? __pfx_process_measurement+0x10/0x10 [ 500.815701][T14801] ? trace_contention_end+0x3d/0x140 [ 500.815770][T14801] ? kernfs_put_active+0xa0/0x100 [ 500.815797][T14801] ? kernfs_fop_open+0xb0b/0xd20 [ 500.815824][T14801] ima_file_check+0xdc/0x130 [ 500.815844][T14801] ? do_dentry_open+0xcf9/0x1360 [ 500.815870][T14801] ? __pfx_ima_file_check+0x10/0x10 [ 500.815900][T14801] security_file_post_open+0xb3/0x260 [ 500.815924][T14801] path_openat+0x1748/0x20f0 [ 500.815975][T14801] do_file_open+0x23e/0x4a0 [ 500.816004][T14801] ? __pfx_do_file_open+0x10/0x10 [ 500.816039][T14801] ? __pfx_kfree_link+0x10/0x10 [ 500.816070][T14801] ? _raw_spin_unlock+0x28/0x50 [ 500.816090][T14801] ? alloc_fd+0x6af/0x760 [ 500.816123][T14801] do_sys_openat2+0x115/0x200 [ 500.816153][T14801] ? __pfx_do_sys_openat2+0x10/0x10 [ 500.816182][T14801] ? ksys_write+0x242/0x270 [ 500.816208][T14801] ? __pfx_ksys_write+0x10/0x10 [ 500.816235][T14801] __x64_sys_openat+0x138/0x170 [ 500.816260][T14801] do_syscall_64+0x166/0x520 [ 500.816282][T14801] ? trace_irq_disable+0x3b/0x140 [ 500.816305][T14801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.816325][T14801] ? clear_bhb_loop+0x70/0xc0 [ 500.816349][T14801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.816367][T14801] RIP: 0033:0x7f587db9f559 [ 500.816387][T14801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.816403][T14801] RSP: 002b:00007f587eac9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 500.816423][T14801] RAX: ffffffffffffffda RBX: 00007f587de25fa0 RCX: 00007f587db9f559 [ 500.816438][T14801] RDX: 0000000000000001 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 500.816451][T14801] RBP: 00007f587eac9090 R08: 0000000000000000 R09: 0000000000000000 [ 500.816463][T14801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 500.816474][T14801] R13: 00007f587de26038 R14: 00007f587de25fa0 R15: 00007ffd8a35c4e8 [ 500.816507][T14801] [ 500.832089][ T10] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 500.982777][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 500.985903][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 500.985951][ T10] usb 9-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 500.989542][ T10] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 500.989567][ T10] usb 9-1: Manufacturer: syz [ 500.989648][ T10] usb 9-1: SerialNumber: syz [ 501.225946][ T10] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 501.237152][ T10] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 501.237735][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 501.237783][ T10] usb 9-1: media controller created [ 501.267004][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 501.296343][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 501.354739][ T32] kauditd_printk_skb: 18 callbacks suppressed [ 501.354758][ T32] audit: type=1800 audit(1792973890.208:9670): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=294252 res=0 errno=-22 [ 501.355004][ T32] audit: type=1800 audit(1792973890.208:9671): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=294232 res=0 errno=-22 [ 501.355711][ T10] usb 9-1: USB disconnect, device number 10 [ 501.360304][ T32] audit: type=1800 audit(1792973890.208:9672): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=294253 res=0 errno=-22 [ 501.703306][T14821] FAULT_INJECTION: forcing a failure. [ 501.703306][T14821] name failslab, interval 1, probability 0, space 0, times 0 [ 501.703338][T14821] CPU: 1 UID: 0 PID: 14821 Comm: syz.0.2263 Tainted: G L syzkaller #0 PREEMPT(full) [ 501.703363][T14821] Tainted: [L]=SOFTLOCKUP [ 501.703370][T14821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 501.703381][T14821] Call Trace: [ 501.703390][T14821] [ 501.703398][T14821] dump_stack_lvl+0xe8/0x150 [ 501.703430][T14821] should_fail_ex+0x3eb/0x540 [ 501.703461][T14821] should_failslab+0xa8/0x100 [ 501.703489][T14821] __kmalloc_noprof+0xf9/0x710 [ 501.703510][T14821] ? ima_alloc_init_template+0xa4/0x700 [ 501.703531][T14821] ? ima_alloc_init_template+0xa4/0x700 [ 501.703552][T14821] ? __asan_memcpy+0x40/0x70 [ 501.703575][T14821] ima_alloc_init_template+0xa4/0x700 [ 501.703604][T14821] ima_store_measurement+0x1d4/0x690 [ 501.703635][T14821] ? __pfx_ima_store_measurement+0x10/0x10 [ 501.703655][T14821] ? ima_d_path+0x16b/0x230 [ 501.703685][T14821] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 501.703722][T14821] process_measurement+0x15ac/0x1c10 [ 501.703761][T14821] ? __pfx_process_measurement+0x10/0x10 [ 501.703790][T14821] ? trace_contention_end+0x3d/0x140 [ 501.703858][T14821] ? kernfs_put_active+0xa0/0x100 [ 501.703885][T14821] ? kernfs_fop_open+0xb0b/0xd20 [ 501.703912][T14821] ima_file_check+0xdc/0x130 [ 501.703933][T14821] ? do_dentry_open+0xcf9/0x1360 [ 501.703962][T14821] ? __pfx_ima_file_check+0x10/0x10 [ 501.703991][T14821] security_file_post_open+0xb3/0x260 [ 501.704016][T14821] path_openat+0x1748/0x20f0 [ 501.704059][T14821] do_file_open+0x23e/0x4a0 [ 501.704081][ T32] audit: type=1800 audit(1792974146.560:9673): pid=14821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2263" name="cur_state" dev="sysfs" ino=5818 res=0 errno=-22 [ 501.704086][T14821] ? __pfx_do_file_open+0x10/0x10 [ 501.704119][T14821] ? __pfx_kfree_link+0x10/0x10 [ 501.704149][T14821] ? _raw_spin_unlock+0x28/0x50 [ 501.704168][T14821] ? alloc_fd+0x6af/0x760 [ 501.704200][T14821] do_sys_openat2+0x115/0x200 [ 501.704230][T14821] ? __pfx_do_sys_openat2+0x10/0x10 [ 501.704259][T14821] ? ksys_write+0x242/0x270 [ 501.704283][T14821] ? __pfx_ksys_write+0x10/0x10 [ 501.704309][T14821] __x64_sys_openat+0x138/0x170 [ 501.704333][T14821] do_syscall_64+0x166/0x520 [ 501.704356][T14821] ? trace_irq_disable+0x3b/0x140 [ 501.704378][T14821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.704398][T14821] ? clear_bhb_loop+0x70/0xc0 [ 501.704422][T14821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.704441][T14821] RIP: 0033:0x7f066479f559 [ 501.704458][T14821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.704472][T14821] RSP: 002b:00007f066562a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 501.704492][T14821] RAX: ffffffffffffffda RBX: 00007f0664a25fa0 RCX: 00007f066479f559 [ 501.704506][T14821] RDX: 0000000000000001 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 501.704518][T14821] RBP: 00007f066562a090 R08: 0000000000000000 R09: 0000000000000000 [ 501.704529][T14821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.704540][T14821] R13: 00007f0664a26038 R14: 00007f0664a25fa0 R15: 00007ffc33166a78 [ 501.704573][T14821] [ 501.704862][ T32] audit: type=1804 audit(1792974146.560:9674): pid=14821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.2263" name="/newroot/110/sys/devices/system/cpu/cpu0/thermal/cooling_device0/cur_state" dev="sysfs" ino=5818 res=0 errno=-12 [ 501.745298][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.038750][T14829] FAULT_INJECTION: forcing a failure. [ 502.038750][T14829] name failslab, interval 1, probability 0, space 0, times 0 [ 502.038782][T14829] CPU: 0 UID: 0 PID: 14829 Comm: syz.0.2267 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.038808][T14829] Tainted: [L]=SOFTLOCKUP [ 502.038815][T14829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 502.038826][T14829] Call Trace: [ 502.038834][T14829] [ 502.038843][T14829] dump_stack_lvl+0xe8/0x150 [ 502.038875][T14829] should_fail_ex+0x3eb/0x540 [ 502.038910][T14829] should_failslab+0xa8/0x100 [ 502.038945][T14829] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 502.038967][T14829] ? ima_collect_measurement+0x5b8/0xa00 [ 502.038987][T14829] ? ima_collect_measurement+0x5b8/0xa00 [ 502.039012][T14829] ? ima_collect_measurement+0x5b8/0xa00 [ 502.039034][T14829] krealloc_node_align_noprof+0x19a/0x390 [ 502.039062][T14829] ima_collect_measurement+0x5b8/0xa00 [ 502.039093][T14829] ? __pfx_ima_collect_measurement+0x10/0x10 [ 502.039124][T14829] ? kernfs_root+0x1c/0x230 [ 502.039156][T14829] ? kernfs_root+0x1c/0x230 [ 502.039198][T14829] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 502.039236][T14829] process_measurement+0x1272/0x1c10 [ 502.039272][T14829] ? __pfx_process_measurement+0x10/0x10 [ 502.039292][T14829] ? trace_contention_end+0x3d/0x140 [ 502.039358][T14829] ? kernfs_put_active+0xa0/0x100 [ 502.039384][T14829] ? kernfs_fop_open+0xb0b/0xd20 [ 502.039411][T14829] ima_file_check+0xdc/0x130 [ 502.039431][T14829] ? do_dentry_open+0xcf9/0x1360 [ 502.039458][T14829] ? __pfx_ima_file_check+0x10/0x10 [ 502.039486][T14829] security_file_post_open+0xb3/0x260 [ 502.039511][T14829] path_openat+0x1748/0x20f0 [ 502.039554][T14829] do_file_open+0x23e/0x4a0 [ 502.039582][T14829] ? __pfx_do_file_open+0x10/0x10 [ 502.039615][T14829] ? __pfx_kfree_link+0x10/0x10 [ 502.039646][T14829] ? _raw_spin_unlock+0x28/0x50 [ 502.039666][T14829] ? alloc_fd+0x6af/0x760 [ 502.039696][T14829] do_sys_openat2+0x115/0x200 [ 502.039726][T14829] ? __pfx_do_sys_openat2+0x10/0x10 [ 502.039754][T14829] ? ksys_write+0x242/0x270 [ 502.039778][T14829] ? __pfx_ksys_write+0x10/0x10 [ 502.039804][T14829] __x64_sys_openat+0x138/0x170 [ 502.039828][T14829] do_syscall_64+0x166/0x520 [ 502.039849][T14829] ? trace_irq_disable+0x3b/0x140 [ 502.039871][T14829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.039890][T14829] ? clear_bhb_loop+0x70/0xc0 [ 502.039913][T14829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.039937][T14829] RIP: 0033:0x7f066479f559 [ 502.039955][T14829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.039971][T14829] RSP: 002b:00007f066562a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 502.039990][T14829] RAX: ffffffffffffffda RBX: 00007f0664a25fa0 RCX: 00007f066479f559 [ 502.040004][T14829] RDX: 0000000000000001 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 502.040018][T14829] RBP: 00007f066562a090 R08: 0000000000000000 R09: 0000000000000000 [ 502.040030][T14829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.040042][T14829] R13: 00007f0664a26038 R14: 00007f0664a25fa0 R15: 00007ffc33166a78 [ 502.040074][T14829] [ 502.040396][ T32] audit: type=1800 audit(1792974146.890:9675): pid=14829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2267" name="msi_bus" dev="sysfs" ino=2737 res=0 errno=-12 [ 502.252282][ T9] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 502.268453][T14832] binder: Write failure EFAULT in pid:364 [ 502.306817][T14833] binder: Write failure EFAULT in pid:364 [ 502.402740][ T9] usb 9-1: New USB device found: idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 502.403849][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.414542][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.414567][ T9] usb 9-1: Product: syz [ 502.414581][ T9] usb 9-1: Manufacturer: syz [ 502.414594][ T9] usb 9-1: SerialNumber: syz [ 502.420494][T12462] svc: failed to register nfsdv3 RPC service (errno 5). [ 502.420513][T12462] failed to unregister udp with rpcbind [ 502.437450][ T9] usb 9-1: config 0 descriptor?? [ 502.447105][ T32] audit: type=1800 audit(1792974147.300:9676): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294435 res=0 errno=-22 [ 502.451792][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 502.461542][ T32] audit: type=1800 audit(1792974147.310:9677): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=294467 res=0 errno=-22 [ 502.467378][ T32] audit: type=1800 audit(1792974147.320:9678): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=294442 res=0 errno=-22 [ 502.474997][ T32] audit: type=1800 audit(1792974147.330:9679): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=294443 res=0 errno=-22 [ 502.782210][T12519] Bluetooth: hci1: command tx timeout [ 502.903373][T14846] FAULT_INJECTION: forcing a failure. [ 502.903373][T14846] name failslab, interval 1, probability 0, space 0, times 0 [ 502.903405][T14846] CPU: 0 UID: 0 PID: 14846 Comm: syz.0.2273 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.903431][T14846] Tainted: [L]=SOFTLOCKUP [ 502.903438][T14846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 502.903450][T14846] Call Trace: [ 502.903461][T14846] [ 502.903469][T14846] dump_stack_lvl+0xe8/0x150 [ 502.903502][T14846] should_fail_ex+0x3eb/0x540 [ 502.903534][T14846] should_failslab+0xa8/0x100 [ 502.903571][T14846] __kmalloc_noprof+0xf9/0x710 [ 502.903592][T14846] ? ima_alloc_init_template+0xa4/0x700 [ 502.903613][T14846] ? ima_alloc_init_template+0xa4/0x700 [ 502.903635][T14846] ? __asan_memcpy+0x40/0x70 [ 502.903657][T14846] ima_alloc_init_template+0xa4/0x700 [ 502.903688][T14846] ima_store_measurement+0x1d4/0x690 [ 502.903720][T14846] ? __pfx_ima_store_measurement+0x10/0x10 [ 502.903740][T14846] ? ima_d_path+0x16b/0x230 [ 502.903769][T14846] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 502.903807][T14846] process_measurement+0x15ac/0x1c10 [ 502.903845][T14846] ? __pfx_process_measurement+0x10/0x10 [ 502.903866][T14846] ? trace_contention_end+0x3d/0x140 [ 502.903934][T14846] ? kernfs_put_active+0xa0/0x100 [ 502.903961][T14846] ? kernfs_fop_open+0xb0b/0xd20 [ 502.903985][T14846] ima_file_check+0xdc/0x130 [ 502.904005][T14846] ? do_dentry_open+0xcf9/0x1360 [ 502.904032][T14846] ? __pfx_ima_file_check+0x10/0x10 [ 502.904052][T14846] security_file_post_open+0xb3/0x260 [ 502.904067][T14846] path_openat+0x1748/0x20f0 [ 502.904090][T14846] do_file_open+0x23e/0x4a0 [ 502.904106][T14846] ? __pfx_do_file_open+0x10/0x10 [ 502.904123][T14846] ? __pfx_kfree_link+0x10/0x10 [ 502.904140][T14846] ? _raw_spin_unlock+0x28/0x50 [ 502.904152][T14846] ? alloc_fd+0x6af/0x760 [ 502.904169][T14846] do_sys_openat2+0x115/0x200 [ 502.904185][T14846] ? __pfx_do_sys_openat2+0x10/0x10 [ 502.904253][T14846] ? ksys_write+0x242/0x270 [ 502.904268][T14846] ? __pfx_ksys_write+0x10/0x10 [ 502.904282][T14846] __x64_sys_openat+0x138/0x170 [ 502.904295][T14846] do_syscall_64+0x166/0x520 [ 502.904307][T14846] ? trace_irq_disable+0x3b/0x140 [ 502.904320][T14846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.904330][T14846] ? clear_bhb_loop+0x70/0xc0 [ 502.904343][T14846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.904354][T14846] RIP: 0033:0x7f066479f559 [ 502.904365][T14846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.904374][T14846] RSP: 002b:00007f066562a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 502.904386][T14846] RAX: ffffffffffffffda RBX: 00007f0664a25fa0 RCX: 00007f066479f559 [ 502.904394][T14846] RDX: 0000000000000001 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 502.904401][T14846] RBP: 00007f066562a090 R08: 0000000000000000 R09: 0000000000000000 [ 502.904408][T14846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.904415][T14846] R13: 00007f0664a26038 R14: 00007f0664a25fa0 R15: 00007ffc33166a78 [ 502.904432][T14846] [ 503.295658][ T9] input: gspca_pac7302 as /devices/platform/dummy_hcd.8/usb9/9-1/input/input45 [ 503.408133][T14856] FAULT_INJECTION: forcing a failure. [ 503.408133][T14856] name failslab, interval 1, probability 0, space 0, times 0 [ 503.408174][T14856] CPU: 1 UID: 0 PID: 14856 Comm: syz.0.2277 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.408200][T14856] Tainted: [L]=SOFTLOCKUP [ 503.408208][T14856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 503.408220][T14856] Call Trace: [ 503.408228][T14856] [ 503.408237][T14856] dump_stack_lvl+0xe8/0x150 [ 503.408269][T14856] should_fail_ex+0x3eb/0x540 [ 503.408301][T14856] should_failslab+0xa8/0x100 [ 503.408329][T14856] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 503.408353][T14856] ? ima_collect_measurement+0x5b8/0xa00 [ 503.408374][T14856] ? ima_collect_measurement+0x5b8/0xa00 [ 503.408398][T14856] ? ima_collect_measurement+0x5b8/0xa00 [ 503.408422][T14856] krealloc_node_align_noprof+0x19a/0x390 [ 503.408452][T14856] ima_collect_measurement+0x5b8/0xa00 [ 503.408484][T14856] ? __pfx_ima_collect_measurement+0x10/0x10 [ 503.408516][T14856] ? kernfs_root+0x1c/0x230 [ 503.408548][T14856] ? kernfs_root+0x1c/0x230 [ 503.408590][T14856] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 503.408628][T14856] process_measurement+0x1272/0x1c10 [ 503.408664][T14856] ? __pfx_process_measurement+0x10/0x10 [ 503.408684][T14856] ? trace_contention_end+0x3d/0x140 [ 503.408751][T14856] ? kernfs_put_active+0xa0/0x100 [ 503.408779][T14856] ? kernfs_fop_open+0xb0b/0xd20 [ 503.408807][T14856] ima_file_check+0xdc/0x130 [ 503.408828][T14856] ? do_dentry_open+0xcf9/0x1360 [ 503.408856][T14856] ? __pfx_ima_file_check+0x10/0x10 [ 503.408884][T14856] security_file_post_open+0xb3/0x260 [ 503.408910][T14856] path_openat+0x1748/0x20f0 [ 503.408954][T14856] do_file_open+0x23e/0x4a0 [ 503.408984][T14856] ? __pfx_do_file_open+0x10/0x10 [ 503.409017][T14856] ? __pfx_kfree_link+0x10/0x10 [ 503.409047][T14856] ? _raw_spin_unlock+0x28/0x50 [ 503.409067][T14856] ? alloc_fd+0x6af/0x760 [ 503.409098][T14856] do_sys_openat2+0x115/0x200 [ 503.409127][T14856] ? __pfx_do_sys_openat2+0x10/0x10 [ 503.409156][T14856] ? ksys_write+0x242/0x270 [ 503.409188][T14856] ? __pfx_ksys_write+0x10/0x10 [ 503.409215][T14856] __x64_sys_openat+0x138/0x170 [ 503.409268][T14856] do_syscall_64+0x166/0x520 [ 503.409290][T14856] ? trace_irq_disable+0x3b/0x140 [ 503.409312][T14856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.409331][T14856] ? clear_bhb_loop+0x70/0xc0 [ 503.409354][T14856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.409373][T14856] RIP: 0033:0x7f066479f559 [ 503.409392][T14856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.409409][T14856] RSP: 002b:00007f066562a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 503.409430][T14856] RAX: ffffffffffffffda RBX: 00007f0664a25fa0 RCX: 00007f066479f559 [ 503.409445][T14856] RDX: 0000000000000001 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 503.409458][T14856] RBP: 00007f066562a090 R08: 0000000000000000 R09: 0000000000000000 [ 503.409471][T14856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 503.409483][T14856] R13: 00007f0664a26038 R14: 00007f0664a25fa0 R15: 00007ffc33166a78 [ 503.409516][T14856] [ 503.499779][T12679] usb 9-1: USB disconnect, device number 11 [ 503.660429][T14859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.660955][T14859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.679394][T14859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.679804][T14859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.746033][T10708] svc: failed to register nfsdv3 RPC service (errno 5). [ 503.746055][T10708] failed to unregister tcp with rpcbind [ 503.763104][T14859] No fuse device found [ 503.763159][T14859] No fuse device found [ 503.763189][T14859] No fuse device found [ 503.763218][T14859] No fuse device found [ 503.763256][T14859] No fuse device found [ 503.763285][T14859] No fuse device found [ 503.763314][T14859] No fuse device found [ 503.763343][T14859] No fuse device found [ 503.763371][T14859] No fuse device found [ 503.763400][T14859] No fuse device found [ 504.526191][T14876] FAULT_INJECTION: forcing a failure. [ 504.526191][T14876] name failslab, interval 1, probability 0, space 0, times 0 [ 504.526224][T14876] CPU: 1 UID: 0 PID: 14876 Comm: syz.8.2283 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.526241][T14876] Tainted: [L]=SOFTLOCKUP [ 504.526245][T14876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 504.526252][T14876] Call Trace: [ 504.526257][T14876] [ 504.526262][T14876] dump_stack_lvl+0xe8/0x150 [ 504.526283][T14876] should_fail_ex+0x3eb/0x540 [ 504.526302][T14876] should_failslab+0xa8/0x100 [ 504.526317][T14876] __kmalloc_noprof+0xf9/0x710 [ 504.526328][T14876] ? ima_alloc_init_template+0x185/0x700 [ 504.526341][T14876] ? ima_write_template_field_data+0x47/0x490 [ 504.526355][T14876] ? ima_write_template_field_data+0x47/0x490 [ 504.526369][T14876] ? __x64_sys_openat+0x138/0x170 [ 504.526382][T14876] ima_write_template_field_data+0x47/0x490 [ 504.526396][T14876] ? ima_eventdigest_init_common+0x2b1/0x400 [ 504.526413][T14876] ima_eventdigest_init_common+0x2cc/0x400 [ 504.526428][T14876] ? ima_eventdigest_init_common+0x1e1/0x400 [ 504.526443][T14876] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 504.526470][T14876] ? __kmalloc_noprof+0x387/0x710 [ 504.526480][T14876] ? __kmalloc_noprof+0x1a6/0x710 [ 504.526490][T14876] ? ima_alloc_init_template+0x185/0x700 [ 504.526503][T14876] ? __pfx_ima_eventdigest_ng_init+0x10/0x10 [ 504.526523][T14876] ima_alloc_init_template+0x323/0x700 [ 504.526552][T14876] ima_store_measurement+0x1d4/0x690 [ 504.526581][T14876] ? __pfx_ima_store_measurement+0x10/0x10 [ 504.526601][T14876] ? ima_d_path+0x16b/0x230 [ 504.526619][T14876] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 504.526638][T14876] process_measurement+0x15ac/0x1c10 [ 504.526659][T14876] ? __pfx_process_measurement+0x10/0x10 [ 504.526672][T14876] ? trace_contention_end+0x3d/0x140 [ 504.526708][T14876] ? kernfs_put_active+0xa0/0x100 [ 504.526724][T14876] ? kernfs_fop_open+0xb0b/0xd20 [ 504.526738][T14876] ima_file_check+0xdc/0x130 [ 504.526749][T14876] ? do_dentry_open+0xcf9/0x1360 [ 504.526764][T14876] ? __pfx_ima_file_check+0x10/0x10 [ 504.526780][T14876] security_file_post_open+0xb3/0x260 [ 504.526794][T14876] path_openat+0x1748/0x20f0 [ 504.526817][T14876] do_file_open+0x23e/0x4a0 [ 504.526832][T14876] ? __pfx_do_file_open+0x10/0x10 [ 504.526850][T14876] ? __pfx_kfree_link+0x10/0x10 [ 504.526866][T14876] ? _raw_spin_unlock+0x28/0x50 [ 504.526878][T14876] ? alloc_fd+0x6af/0x760 [ 504.526895][T14876] do_sys_openat2+0x115/0x200 [ 504.526911][T14876] ? __pfx_do_sys_openat2+0x10/0x10 [ 504.526926][T14876] ? ksys_write+0x242/0x270 [ 504.526939][T14876] ? __pfx_ksys_write+0x10/0x10 [ 504.526953][T14876] __x64_sys_openat+0x138/0x170 [ 504.526966][T14876] do_syscall_64+0x166/0x520 [ 504.526978][T14876] ? trace_irq_disable+0x3b/0x140 [ 504.526990][T14876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.527000][T14876] ? clear_bhb_loop+0x70/0xc0 [ 504.527012][T14876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.527023][T14876] RIP: 0033:0x7fa5d039f559 [ 504.527034][T14876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.527043][T14876] RSP: 002b:00007fa5d128b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 504.527055][T14876] RAX: ffffffffffffffda RBX: 00007fa5d0625fa0 RCX: 00007fa5d039f559 [ 504.527062][T14876] RDX: 0000000000000001 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 504.527070][T14876] RBP: 00007fa5d128b090 R08: 0000000000000000 R09: 0000000000000000 [ 504.527076][T14876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 504.527082][T14876] R13: 00007fa5d0626038 R14: 00007fa5d0625fa0 R15: 00007ffd18f5f168 [ 504.527099][T14876] [ 504.937901][T14882] ubi0: attaching mtd0 [ 504.941010][T14882] ubi0: scanning is finished [ 504.941136][T14882] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 504.964595][T14880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 505.053979][T14880] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 505.177745][T14882] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 505.242061][ T31] usb 7-1: new full-speed USB device number 70 using dummy_hcd [ 505.294921][T14888] FAULT_INJECTION: forcing a failure. [ 505.294921][T14888] name failslab, interval 1, probability 0, space 0, times 0 [ 505.294953][T14888] CPU: 0 UID: 0 PID: 14888 Comm: syz.7.2287 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.294979][T14888] Tainted: [L]=SOFTLOCKUP [ 505.294986][T14888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 505.294999][T14888] Call Trace: [ 505.295007][T14888] [ 505.295015][T14888] dump_stack_lvl+0xe8/0x150 [ 505.295056][T14888] should_fail_ex+0x3eb/0x540 [ 505.295089][T14888] ? __alloc_skb+0x1db/0x7a0 [ 505.295110][T14888] should_failslab+0xa8/0x100 [ 505.295136][T14888] ? __alloc_skb+0x1db/0x7a0 [ 505.295153][T14888] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 505.295174][T14888] ? __alloc_skb+0x18d/0x7a0 [ 505.295193][T14888] ? __alloc_skb+0x1db/0x7a0 [ 505.295219][T14888] __alloc_skb+0x1db/0x7a0 [ 505.295243][T14888] audit_log_start+0x1b3/0xa10 [ 505.295278][T14888] ? __pfx_audit_log_start+0x10/0x10 [ 505.295309][T14888] ? lock_acquire+0x115/0x350 [ 505.295339][T14888] integrity_audit_msg+0x10a/0x4d0 [ 505.295366][T14888] ? take_dentry_name_snapshot+0x2b/0x510 [ 505.295392][T14888] ? __pfx_integrity_audit_msg+0x10/0x10 [ 505.295416][T14888] ? take_dentry_name_snapshot+0x4f6/0x510 [ 505.295438][T14888] ? take_dentry_name_snapshot+0x2b/0x510 [ 505.295465][T14888] ima_collect_measurement+0x81d/0xa00 [ 505.295499][T14888] ? __pfx_ima_collect_measurement+0x10/0x10 [ 505.295531][T14888] ? kernfs_root+0x1c/0x230 [ 505.295562][T14888] ? kernfs_root+0x1c/0x230 [ 505.295605][T14888] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 505.295643][T14888] process_measurement+0x1272/0x1c10 [ 505.295680][T14888] ? __pfx_process_measurement+0x10/0x10 [ 505.295701][T14888] ? trace_contention_end+0x3d/0x140 [ 505.295767][T14888] ? kernfs_put_active+0xa0/0x100 [ 505.295794][T14888] ? kernfs_fop_open+0xb0b/0xd20 [ 505.295821][T14888] ima_file_check+0xdc/0x130 [ 505.295842][T14888] ? do_dentry_open+0xcf9/0x1360 [ 505.295870][T14888] ? __pfx_ima_file_check+0x10/0x10 [ 505.295900][T14888] security_file_post_open+0xb3/0x260 [ 505.295923][T14888] path_openat+0x1748/0x20f0 [ 505.295965][T14888] do_file_open+0x23e/0x4a0 [ 505.295995][T14888] ? __pfx_do_file_open+0x10/0x10 [ 505.296030][T14888] ? __pfx_kfree_link+0x10/0x10 [ 505.296068][T14888] ? _raw_spin_unlock+0x28/0x50 [ 505.296088][T14888] ? alloc_fd+0x6af/0x760 [ 505.296120][T14888] do_sys_openat2+0x115/0x200 [ 505.296150][T14888] ? __pfx_do_sys_openat2+0x10/0x10 [ 505.296179][T14888] ? ksys_write+0x242/0x270 [ 505.296203][T14888] ? __pfx_ksys_write+0x10/0x10 [ 505.296230][T14888] __x64_sys_openat+0x138/0x170 [ 505.296254][T14888] do_syscall_64+0x166/0x520 [ 505.296276][T14888] ? trace_irq_disable+0x3b/0x140 [ 505.296298][T14888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.296317][T14888] ? clear_bhb_loop+0x70/0xc0 [ 505.296341][T14888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.296360][T14888] RIP: 0033:0x7f587db9f559 [ 505.296379][T14888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.296395][T14888] RSP: 002b:00007f587eac9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 505.296416][T14888] RAX: ffffffffffffffda RBX: 00007f587de25fa0 RCX: 00007f587db9f559 [ 505.296430][T14888] RDX: 0000000000000001 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 505.296444][T14888] RBP: 00007f587eac9090 R08: 0000000000000000 R09: 0000000000000000 [ 505.296457][T14888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 505.296469][T14888] R13: 00007f587de26038 R14: 00007f587de25fa0 R15: 00007ffd8a35c4e8 [ 505.296502][T14888] [ 505.466373][ T31] usb 7-1: New USB device found: idVendor=046d, idProduct=c298, bcdDevice=0.00 [ 505.502292][ T31] usb 7-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 505.502336][ T31] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 505.502361][ T31] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 505.502386][ T31] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 505.502412][ T31] usb 7-1: config 0 interface 0 has no altsetting 0 [ 505.502445][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.654130][ T31] usb 7-1: config 0 descriptor?? [ 505.691919][T14884] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 506.128260][ T31] logitech 0003:046D:C298.0015: unknown main item tag 0x2 [ 506.128297][ T31] logitech 0003:046D:C298.0015: unknown main item tag 0x0 [ 506.128322][ T31] logitech 0003:046D:C298.0015: unknown main item tag 0x0 [ 506.141769][ T31] input: HID 046d:c298 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:046D:C298.0015/input/input46 [ 506.144431][ T31] logitech 0003:046D:C298.0015: offset (39) exceeds report_count (19) [ 506.144629][ T31] logitech 0003:046D:C298.0015: offset (25) exceeds report_count (19) [ 506.363206][ T32] kauditd_printk_skb: 56 callbacks suppressed [ 506.363222][ T32] audit: type=1800 audit(1792974151.220:9734): pid=5009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294896 res=0 errno=-22 [ 506.369469][ T32] audit: type=1800 audit(1792974151.220:9735): pid=5009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294910 res=0 errno=-22 [ 506.370105][T14897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 506.377327][T14897] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 506.382717][ T31] logitech 0003:046D:C298.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c298] on usb-dummy_hcd.6-1/input0 [ 506.383454][ T31] logitech 0003:046D:C298.0015: implement() called with too large value 245 (n: 0)! (kworker/1:1) [ 506.389943][ T31] logitech 0003:046D:C298.0015: implement() called with too large value 248 (n: 0)! (kworker/1:1) [ 506.389973][ T31] logitech 0003:046D:C298.0015: implement() called with too large value 3 (n: 0)! (kworker/1:1) [ 506.390030][ T31] logitech 0003:046D:C298.0015: implement() called with too large value 129 (n: 0)! (kworker/1:1) [ 506.390051][ T31] logitech 0003:046D:C298.0015: implement() called with too large value 11 (n: 0)! (kworker/1:1) [ 506.390093][ T31] logitech 0003:046D:C298.0015: Force feedback support for Logitech Gaming Wheels [ 506.421330][ T32] audit: type=1800 audit(1792974151.250:9736): pid=5009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294926 res=0 errno=-22 [ 506.421378][ T32] audit: type=1800 audit(1792974151.250:9737): pid=5009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294962 res=0 errno=-22 [ 506.437124][ T32] audit: type=1800 audit(1792974151.280:9738): pid=5009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294946 res=0 errno=-22 [ 506.514430][ T32] audit: type=1800 audit(1792974151.360:9739): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="phys" dev="sysfs" ino=294771 res=0 errno=-22 [ 506.555901][ T31] usb 7-1: USB disconnect, device number 70 [ 506.682498][T14236] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 506.684633][T14898] fido_id[14898]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 506.853172][T14236] usb 9-1: Using ep0 maxpacket: 8 [ 506.855427][T14236] usb 9-1: unable to get BOS descriptor or descriptor too short [ 506.855477][T14236] usb 9-1: New USB device found: idVendor=046d, idProduct=089d, bcdDevice=f7.63 [ 506.855519][T14236] usb 9-1: no configurations [ 506.855526][T14236] usb 9-1: can't read configurations, error -22 [ 506.982978][T14236] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 507.135560][T14236] usb 9-1: Using ep0 maxpacket: 8 [ 507.138558][T14236] usb 9-1: unable to get BOS descriptor or descriptor too short [ 507.138609][T14236] usb 9-1: New USB device found: idVendor=046d, idProduct=089d, bcdDevice=f7.63 [ 507.138643][T14236] usb 9-1: no configurations [ 507.138655][T14236] usb 9-1: can't read configurations, error -22 [ 507.138951][T14236] usb usb9-port1: attempt power cycle [ 507.164281][ T32] audit: type=1800 audit(1792974152.020:9740): pid=14905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2293" name="cur_state" dev="sysfs" ino=5818 res=0 errno=-22 [ 507.164430][T14905] FAULT_INJECTION: forcing a failure. [ 507.164430][T14905] name failslab, interval 1, probability 0, space 0, times 0 [ 507.164455][T14905] CPU: 0 UID: 0 PID: 14905 Comm: syz.6.2293 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.164477][T14905] Tainted: [L]=SOFTLOCKUP [ 507.164484][T14905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 507.164494][T14905] Call Trace: [ 507.164505][T14905] [ 507.164512][T14905] dump_stack_lvl+0xe8/0x150 [ 507.164543][T14905] should_fail_ex+0x3eb/0x540 [ 507.164571][T14905] should_failslab+0xa8/0x100 [ 507.164595][T14905] __kmalloc_noprof+0xf9/0x710 [ 507.164613][T14905] ? ima_alloc_init_template+0x185/0x700 [ 507.164634][T14905] ? ima_write_template_field_data+0x47/0x490 [ 507.164659][T14905] ? ima_write_template_field_data+0x47/0x490 [ 507.164686][T14905] ? __x64_sys_openat+0x138/0x170 [ 507.164708][T14905] ima_write_template_field_data+0x47/0x490 [ 507.164734][T14905] ? ima_eventdigest_init_common+0x2b1/0x400 [ 507.164764][T14905] ima_eventdigest_init_common+0x2cc/0x400 [ 507.164792][T14905] ? ima_eventdigest_init_common+0x1e1/0x400 [ 507.164820][T14905] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 507.164879][T14905] ? __kmalloc_noprof+0x387/0x710 [ 507.164898][T14905] ? __kmalloc_noprof+0x1a6/0x710 [ 507.164917][T14905] ? ima_alloc_init_template+0x185/0x700 [ 507.164942][T14905] ? __pfx_ima_eventdigest_ng_init+0x10/0x10 [ 507.164988][T14905] ima_alloc_init_template+0x323/0x700 [ 507.165018][T14905] ima_store_measurement+0x1d4/0x690 [ 507.165049][T14905] ? __pfx_ima_store_measurement+0x10/0x10 [ 507.165069][T14905] ? ima_d_path+0x16b/0x230 [ 507.165098][T14905] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 507.165133][T14905] process_measurement+0x15ac/0x1c10 [ 507.165172][T14905] ? __pfx_process_measurement+0x10/0x10 [ 507.165191][T14905] ? trace_contention_end+0x3d/0x140 [ 507.165256][T14905] ? kernfs_put_active+0xa0/0x100 [ 507.165282][T14905] ? kernfs_fop_open+0xb0b/0xd20 [ 507.165309][T14905] ima_file_check+0xdc/0x130 [ 507.165329][T14905] ? do_dentry_open+0xcf9/0x1360 [ 507.165355][T14905] ? __pfx_ima_file_check+0x10/0x10 [ 507.165383][T14905] security_file_post_open+0xb3/0x260 [ 507.165408][T14905] path_openat+0x1748/0x20f0 [ 507.165449][T14905] do_file_open+0x23e/0x4a0 [ 507.165478][T14905] ? __pfx_do_file_open+0x10/0x10 [ 507.165511][T14905] ? __pfx_kfree_link+0x10/0x10 [ 507.165538][T14905] ? _raw_spin_unlock+0x28/0x50 [ 507.165557][T14905] ? alloc_fd+0x6af/0x760 [ 507.165588][T14905] do_sys_openat2+0x115/0x200 [ 507.165617][T14905] ? __pfx_do_sys_openat2+0x10/0x10 [ 507.165645][T14905] ? ksys_write+0x242/0x270 [ 507.165669][T14905] ? __pfx_ksys_write+0x10/0x10 [ 507.165695][T14905] __x64_sys_openat+0x138/0x170 [ 507.165719][T14905] do_syscall_64+0x166/0x520 [ 507.165740][T14905] ? trace_irq_disable+0x3b/0x140 [ 507.165762][T14905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.165781][T14905] ? clear_bhb_loop+0x70/0xc0 [ 507.165804][T14905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.165822][T14905] RIP: 0033:0x7fc36ed9f559 [ 507.165840][T14905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.165861][T14905] RSP: 002b:00007fc36fbb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 507.165882][T14905] RAX: ffffffffffffffda RBX: 00007fc36f025fa0 RCX: 00007fc36ed9f559 [ 507.165896][T14905] RDX: 0000000000000001 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 507.165909][T14905] RBP: 00007fc36fbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 507.165921][T14905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 507.165932][T14905] R13: 00007fc36f026038 R14: 00007fc36f025fa0 R15: 00007fff03514158 [ 507.165964][T14905] [ 507.169524][ T32] audit: type=1804 audit(1792974152.020:9741): pid=14905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.6.2293" name="/newroot/254/sys/devices/system/cpu/cpu0/thermal/cooling_device0/cur_state" dev="sysfs" ino=5818 res=0 errno=-12 [ 507.565223][T14236] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 507.633256][T14236] usb 9-1: Using ep0 maxpacket: 8 [ 507.640991][T14236] usb 9-1: unable to get BOS descriptor or descriptor too short [ 507.641042][T14236] usb 9-1: New USB device found: idVendor=046d, idProduct=089d, bcdDevice=f7.63 [ 507.641067][T14236] usb 9-1: no configurations [ 507.641074][T14236] usb 9-1: can't read configurations, error -22 [ 507.812061][T14236] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 507.842872][T14236] usb 9-1: Using ep0 maxpacket: 8 [ 507.844965][T14236] usb 9-1: unable to get BOS descriptor or descriptor too short [ 507.845013][T14236] usb 9-1: New USB device found: idVendor=046d, idProduct=089d, bcdDevice=f7.63 [ 507.845059][T14236] usb 9-1: no configurations [ 507.845070][T14236] usb 9-1: can't read configurations, error -22 [ 507.845311][T14236] usb usb9-port1: unable to enumerate USB device [ 508.480542][T14918] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 508.480556][T14918] audit: out of memory in audit_log_start [ 508.518758][T14920] PKCS7: Unknown OID: [158] 2.16.840.1.101.3.4.2.13 [ 508.518772][T14920] Unsupported digest algo: 106 [ 508.947569][T12519] Bluetooth: hci1: command 0x0406 tx timeout [ 509.732166][T14236] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 509.804698][T14926] overlayfs: conflicting lowerdir path [ 509.892135][T14236] usb 9-1: Using ep0 maxpacket: 8 [ 509.894455][T14236] usb 9-1: unable to get BOS descriptor or descriptor too short [ 509.894503][T14236] usb 9-1: New USB device found: idVendor=07ca, idProduct=b800, bcdDevice=1a.86 [ 509.895921][T14236] usb 9-1: config 3 has an invalid interface number: 171 but max is 0 [ 509.895946][T14236] usb 9-1: config 3 has no interface number 0 [ 509.898418][T14236] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.898441][T14236] usb 9-1: Product: syz [ 509.898456][T14236] usb 9-1: Manufacturer: syz [ 509.898469][T14236] usb 9-1: SerialNumber: syz [ 509.988817][T14936] FAULT_INJECTION: forcing a failure. [ 509.988817][T14936] name failslab, interval 1, probability 0, space 0, times 0 [ 509.988850][T14936] CPU: 0 UID: 0 PID: 14936 Comm: syz.0.2304 Tainted: G L syzkaller #0 PREEMPT(full) [ 509.988876][T14936] Tainted: [L]=SOFTLOCKUP [ 509.988884][T14936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 509.988898][T14936] Call Trace: [ 509.988905][T14936] [ 509.988912][T14936] dump_stack_lvl+0xe8/0x150 [ 509.988932][T14936] should_fail_ex+0x3eb/0x540 [ 509.988950][T14936] should_failslab+0xa8/0x100 [ 509.988969][T14936] __kmalloc_noprof+0xf9/0x710 [ 509.988987][T14936] ? ima_eventdigest_init_common+0x2cc/0x400 [ 509.989015][T14936] ? ima_write_template_field_data+0x47/0x490 [ 509.989040][T14936] ? ima_write_template_field_data+0x47/0x490 [ 509.989069][T14936] ima_write_template_field_data+0x47/0x490 [ 509.989087][T14936] ima_eventname_init_common+0x1dd/0x250 [ 509.989103][T14936] ? __pfx_ima_eventname_init_common+0x10/0x10 [ 509.989122][T14936] ? __kmalloc_noprof+0x387/0x710 [ 509.989141][T14936] ? __kmalloc_noprof+0x1a6/0x710 [ 509.989159][T14936] ? ima_alloc_init_template+0x185/0x700 [ 509.989185][T14936] ? __pfx_ima_eventname_ng_init+0x10/0x10 [ 509.989211][T14936] ima_alloc_init_template+0x323/0x700 [ 509.989228][T14936] ima_store_measurement+0x1d4/0x690 [ 509.989245][T14936] ? __pfx_ima_store_measurement+0x10/0x10 [ 509.989255][T14936] ? ima_d_path+0x16b/0x230 [ 509.989272][T14936] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 509.989308][T14936] process_measurement+0x15ac/0x1c10 [ 509.989348][T14936] ? __pfx_process_measurement+0x10/0x10 [ 509.989365][T14936] ? trace_contention_end+0x3d/0x140 [ 509.989400][T14936] ? kernfs_put_active+0xa0/0x100 [ 509.989416][T14936] ? kernfs_fop_open+0xb0b/0xd20 [ 509.989437][T14936] ima_file_check+0xdc/0x130 [ 509.989459][T14936] ? do_dentry_open+0xcf9/0x1360 [ 509.989486][T14936] ? __pfx_ima_file_check+0x10/0x10 [ 509.989514][T14936] security_file_post_open+0xb3/0x260 [ 509.989528][T14936] path_openat+0x1748/0x20f0 [ 509.989552][T14936] do_file_open+0x23e/0x4a0 [ 509.989576][T14936] ? __pfx_do_file_open+0x10/0x10 [ 509.989610][T14936] ? __pfx_kfree_link+0x10/0x10 [ 509.989642][T14936] ? _raw_spin_unlock+0x28/0x50 [ 509.989662][T14936] ? alloc_fd+0x6af/0x760 [ 509.989679][T14936] do_sys_openat2+0x115/0x200 [ 509.989696][T14936] ? __pfx_do_sys_openat2+0x10/0x10 [ 509.989711][T14936] ? ksys_write+0x242/0x270 [ 509.989726][T14936] ? __pfx_ksys_write+0x10/0x10 [ 509.989752][T14936] __x64_sys_openat+0x138/0x170 [ 509.989775][T14936] do_syscall_64+0x166/0x520 [ 509.989797][T14936] ? trace_irq_disable+0x3b/0x140 [ 509.989820][T14936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.989839][T14936] ? clear_bhb_loop+0x70/0xc0 [ 509.989860][T14936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.989871][T14936] RIP: 0033:0x7f066479f559 [ 509.989882][T14936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.989897][T14936] RSP: 002b:00007f066562a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 509.989919][T14936] RAX: ffffffffffffffda RBX: 00007f0664a25fa0 RCX: 00007f066479f559 [ 509.989933][T14936] RDX: 0000000000000001 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 509.989947][T14936] RBP: 00007f066562a090 R08: 0000000000000000 R09: 0000000000000000 [ 509.989959][T14936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 509.989971][T14936] R13: 00007f0664a26038 R14: 00007f0664a25fa0 R15: 00007ffc33166a78 [ 509.989991][T14936] [ 510.229123][T14943] FAULT_INJECTION: forcing a failure. [ 510.229123][T14943] name failslab, interval 1, probability 0, space 0, times 0 [ 510.229152][T14943] CPU: 0 UID: 0 PID: 14943 Comm: syz.0.2307 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.229177][T14943] Tainted: [L]=SOFTLOCKUP [ 510.229185][T14943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 510.229196][T14943] Call Trace: [ 510.229205][T14943] [ 510.229212][T14943] dump_stack_lvl+0xe8/0x150 [ 510.229245][T14943] should_fail_ex+0x3eb/0x540 [ 510.229276][T14943] should_failslab+0xa8/0x100 [ 510.229304][T14943] __kmalloc_noprof+0xf9/0x710 [ 510.229325][T14943] ? aa_label_asxprint+0x70/0x130 [ 510.229344][T14943] ? aa_label_asxprint+0x70/0x130 [ 510.229371][T14943] aa_label_asxprint+0x70/0x130 [ 510.229393][T14943] apparmor_lsmprop_to_secctx+0x9d/0x170 [ 510.229423][T14943] audit_log_subj_ctx+0x11b/0x530 [ 510.229445][T14943] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 510.229473][T14943] ? apparmor_current_getlsmprop_subj+0xc9/0x150 [ 510.229500][T14943] audit_log_task_context+0x94/0xe0 [ 510.229519][T14943] ? __pfx_audit_log_task_context+0x10/0x10 [ 510.229556][T14943] integrity_audit_msg+0x201/0x4d0 [ 510.229588][T14943] ? __pfx_integrity_audit_msg+0x10/0x10 [ 510.229612][T14943] ? take_dentry_name_snapshot+0x4f6/0x510 [ 510.229636][T14943] ? take_dentry_name_snapshot+0x2b/0x510 [ 510.229662][T14943] ima_collect_measurement+0x81d/0xa00 [ 510.229694][T14943] ? __pfx_ima_collect_measurement+0x10/0x10 [ 510.229725][T14943] ? kernfs_root+0x1c/0x230 [ 510.229759][T14943] ? kernfs_root+0x1c/0x230 [ 510.229801][T14943] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 510.229838][T14943] process_measurement+0x1272/0x1c10 [ 510.229874][T14943] ? __pfx_process_measurement+0x10/0x10 [ 510.229893][T14943] ? trace_contention_end+0x3d/0x140 [ 510.229959][T14943] ? kernfs_put_active+0xa0/0x100 [ 510.229985][T14943] ? kernfs_fop_open+0xb0b/0xd20 [ 510.230011][T14943] ima_file_check+0xdc/0x130 [ 510.230031][T14943] ? do_dentry_open+0xcf9/0x1360 [ 510.230057][T14943] ? __pfx_ima_file_check+0x10/0x10 [ 510.230085][T14943] security_file_post_open+0xb3/0x260 [ 510.230108][T14943] path_openat+0x1748/0x20f0 [ 510.230151][T14943] do_file_open+0x23e/0x4a0 [ 510.230179][T14943] ? __pfx_do_file_open+0x10/0x10 [ 510.230212][T14943] ? __pfx_kfree_link+0x10/0x10 [ 510.230242][T14943] ? _raw_spin_unlock+0x28/0x50 [ 510.230261][T14943] ? alloc_fd+0x6af/0x760 [ 510.230291][T14943] do_sys_openat2+0x115/0x200 [ 510.230316][T14943] ? sched_clock+0x41/0x60 [ 510.230343][T14943] ? __pfx_do_sys_openat2+0x10/0x10 [ 510.230376][T14943] ? rcu_is_watching+0x16/0xb0 [ 510.230404][T14943] __x64_sys_openat+0x138/0x170 [ 510.230427][T14943] do_syscall_64+0x166/0x520 [ 510.230450][T14943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.230470][T14943] ? clear_bhb_loop+0x70/0xc0 [ 510.230491][T14943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.230510][T14943] RIP: 0033:0x7f066479f559 [ 510.230527][T14943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.230549][T14943] RSP: 002b:00007f066562a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 510.230569][T14943] RAX: ffffffffffffffda RBX: 00007f0664a25fa0 RCX: 00007f066479f559 [ 510.230582][T14943] RDX: 0000000000000001 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 510.230595][T14943] RBP: 00007f066562a090 R08: 0000000000000000 R09: 0000000000000000 [ 510.230607][T14943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 510.230618][T14943] R13: 00007f0664a26038 R14: 00007f0664a25fa0 R15: 00007ffc33166a78 [ 510.230650][T14943] [ 510.326057][T14236] (null): radio-mr800 - initialization failed [ 510.328732][T14236] radio-mr800 9-1:3.171: probe with driver radio-mr800 failed with error -22 [ 510.329075][T14236] usbhid 9-1:3.171: couldn't find an input interrupt endpoint [ 510.336319][T14236] usb 9-1: USB disconnect, device number 16 [ 510.430426][T14945] WARNING! power/level is deprecated; use power/control instead [ 510.585374][T14948] rxe_eth0 speed is unknown, defaulting to 1000 [ 511.052055][T14236] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 511.202021][T14236] usb 9-1: Using ep0 maxpacket: 16 [ 511.205204][T14236] usb 9-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 511.206463][T14236] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 511.206503][T14236] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 511.206526][T14236] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 511.209175][T14236] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.209198][T14236] usb 9-1: Product: ꛎ탬 [ 511.209212][T14236] usb 9-1: Manufacturer: 碾듋é‚쿀ᑦ빳e⊶ì–뚖穉뀧젰䖽退ã‹âƒ«îµ¢ï…¾á…‹à½®î°ˆã¤¼á’—㱒뎅猽Ø襣仗ãªâ–¬í‚⮾摥ꪱꜫϢ [ 511.209232][T14236] usb 9-1: SerialNumber: syz [ 511.491391][T14236] cdc_ncm 9-1:1.0: bind() failure [ 511.505523][T14236] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 511.505571][T14236] cdc_ncm 9-1:1.1: bind() failure [ 511.518457][ T32] kauditd_printk_skb: 17 callbacks suppressed [ 511.518475][ T32] audit: type=1800 audit(1792974156.370:9758): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=299112 res=0 errno=-22 [ 511.519546][ T32] audit: type=1800 audit(1792974156.370:9759): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=299113 res=0 errno=-22 [ 511.528448][T14236] usb 9-1: USB disconnect, device number 17 [ 511.543417][ T32] audit: type=1800 audit(1792974156.390:9760): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=299092 res=0 errno=-22 [ 511.548378][ T32] audit: type=1800 audit(1792974156.400:9761): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=299114 res=0 errno=-22 [ 511.703845][T14967] Bluetooth: MGMT ver 1.23 [ 511.749901][T14970] FAULT_INJECTION: forcing a failure. [ 511.749901][T14970] name failslab, interval 1, probability 0, space 0, times 0 [ 511.749931][T14970] CPU: 0 UID: 0 PID: 14970 Comm: syz.0.2314 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.749956][T14970] Tainted: [L]=SOFTLOCKUP [ 511.749963][T14970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 511.749975][T14970] Call Trace: [ 511.749983][T14970] [ 511.749991][T14970] dump_stack_lvl+0xe8/0x150 [ 511.750023][T14970] should_fail_ex+0x3eb/0x540 [ 511.750056][T14970] should_failslab+0xa8/0x100 [ 511.750083][T14970] __kmalloc_cache_noprof+0x9e/0x600 [ 511.750106][T14970] ? ima_add_digest_entry+0x56/0x5e0 [ 511.750133][T14970] ? ima_add_digest_entry+0x56/0x5e0 [ 511.750168][T14970] ima_add_digest_entry+0x56/0x5e0 [ 511.750192][T14970] ? ima_add_template_entry+0x20a/0x8d0 [ 511.750225][T14970] ima_add_template_entry+0x661/0x8d0 [ 511.750255][T14970] ? ima_add_template_entry+0x20a/0x8d0 [ 511.750292][T14970] ? __pfx_ima_add_template_entry+0x10/0x10 [ 511.750324][T14970] ? ima_calc_field_array_hash+0x432/0x4a0 [ 511.750362][T14970] ima_store_measurement+0x2af/0x690 [ 511.750394][T14970] ? __pfx_ima_store_measurement+0x10/0x10 [ 511.750414][T14970] ? ima_d_path+0x16b/0x230 [ 511.750442][T14970] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 511.750475][T14970] process_measurement+0x15ac/0x1c10 [ 511.750513][T14970] ? __pfx_process_measurement+0x10/0x10 [ 511.750532][T14970] ? trace_contention_end+0x3d/0x140 [ 511.750599][T14970] ? kernfs_put_active+0xa0/0x100 [ 511.750626][T14970] ? kernfs_fop_open+0xb0b/0xd20 [ 511.750652][T14970] ima_file_check+0xdc/0x130 [ 511.750674][T14970] ? do_dentry_open+0xcf9/0x1360 [ 511.750702][T14970] ? __pfx_ima_file_check+0x10/0x10 [ 511.750730][T14970] security_file_post_open+0xb3/0x260 [ 511.750755][T14970] path_openat+0x1748/0x20f0 [ 511.750798][T14970] do_file_open+0x23e/0x4a0 [ 511.750826][T14970] ? __pfx_do_file_open+0x10/0x10 [ 511.750856][T14970] ? __pfx_kfree_link+0x10/0x10 [ 511.750887][T14970] ? _raw_spin_unlock+0x28/0x50 [ 511.750908][T14970] ? alloc_fd+0x6af/0x760 [ 511.750940][T14970] do_sys_openat2+0x115/0x200 [ 511.750970][T14970] ? __pfx_do_sys_openat2+0x10/0x10 [ 511.750997][T14970] ? ksys_write+0x242/0x270 [ 511.751019][T14970] ? __pfx_ksys_write+0x10/0x10 [ 511.751040][ T32] audit: type=1800 audit(1792974156.600:9762): pid=14970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2314" name="cur_state" dev="sysfs" ino=5818 res=0 errno=-22 [ 511.751044][T14970] __x64_sys_openat+0x138/0x170 [ 511.751068][T14970] do_syscall_64+0x166/0x520 [ 511.751088][T14970] ? trace_irq_disable+0x3b/0x140 [ 511.751107][T14970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.751123][T14970] ? clear_bhb_loop+0x70/0xc0 [ 511.751143][T14970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.751159][T14970] RIP: 0033:0x7f066479f559 [ 511.751176][T14970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.751191][T14970] RSP: 002b:00007f066562a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 511.751211][T14970] RAX: ffffffffffffffda RBX: 00007f0664a25fa0 RCX: 00007f066479f559 [ 511.751225][T14970] RDX: 0000000000000001 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 511.751239][T14970] RBP: 00007f066562a090 R08: 0000000000000000 R09: 0000000000000000 [ 511.751251][T14970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 511.751263][T14970] R13: 00007f0664a26038 R14: 00007f0664a25fa0 R15: 00007ffc33166a78 [ 511.751295][T14970] [ 511.751341][T14970] ima: OUT OF MEMORY ERROR creating queue entry [ 511.753152][ T32] audit: type=1804 audit(1792974156.600:9763): pid=14970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.2314" name="/newroot/134/sys/devices/system/cpu/cpu0/thermal/cooling_device0/cur_state" dev="sysfs" ino=5818 res=0 errno=-12 [ 511.966837][T14152] IPVS: starting estimator thread 0... [ 512.052469][T14974] IPVS: using max 31 ests per chain, 74400 per kthread [ 512.183099][T14977] FAULT_INJECTION: forcing a failure. [ 512.183099][T14977] name failslab, interval 1, probability 0, space 0, times 0 [ 512.183129][T14977] CPU: 0 UID: 0 PID: 14977 Comm: syz.6.2317 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.183154][T14977] Tainted: [L]=SOFTLOCKUP [ 512.183161][T14977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 512.183171][T14977] Call Trace: [ 512.183178][T14977] [ 512.183186][T14977] dump_stack_lvl+0xe8/0x150 [ 512.183219][T14977] should_fail_ex+0x3eb/0x540 [ 512.183251][T14977] should_failslab+0xa8/0x100 [ 512.183278][T14977] __kmalloc_cache_noprof+0x9e/0x600 [ 512.183299][T14977] ? kernfs_root+0x1c/0x230 [ 512.183329][T14977] ? ima_d_path+0xd4/0x230 [ 512.183349][T14977] ? ima_d_path+0xd4/0x230 [ 512.183376][T14977] ima_d_path+0xd4/0x230 [ 512.183400][T14977] ? __pfx_ima_d_path+0x10/0x10 [ 512.183424][T14977] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 512.183463][T14977] process_measurement+0x154a/0x1c10 [ 512.183499][T14977] ? __pfx_process_measurement+0x10/0x10 [ 512.183520][T14977] ? trace_contention_end+0x3d/0x140 [ 512.183592][T14977] ? kernfs_put_active+0xa0/0x100 [ 512.183620][T14977] ? kernfs_fop_open+0xb0b/0xd20 [ 512.183647][T14977] ima_file_check+0xdc/0x130 [ 512.183669][T14977] ? do_dentry_open+0xcf9/0x1360 [ 512.183697][T14977] ? __pfx_ima_file_check+0x10/0x10 [ 512.183726][T14977] security_file_post_open+0xb3/0x260 [ 512.183750][T14977] path_openat+0x1748/0x20f0 [ 512.183795][T14977] do_file_open+0x23e/0x4a0 [ 512.183823][T14977] ? __pfx_do_file_open+0x10/0x10 [ 512.183857][T14977] ? __pfx_kfree_link+0x10/0x10 [ 512.183888][T14977] ? _raw_spin_unlock+0x28/0x50 [ 512.183906][T14977] ? alloc_fd+0x6af/0x760 [ 512.183937][T14977] do_sys_openat2+0x115/0x200 [ 512.183968][T14977] ? __pfx_do_sys_openat2+0x10/0x10 [ 512.183996][T14977] ? ksys_write+0x242/0x270 [ 512.184019][T14977] ? __pfx_ksys_write+0x10/0x10 [ 512.184040][ T32] audit: type=1800 audit(1792974157.040:9764): pid=14977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2317" name="msi_bus" dev="sysfs" ino=2737 res=0 errno=-22 [ 512.184042][T14977] __x64_sys_openat+0x138/0x170 [ 512.184066][T14977] do_syscall_64+0x166/0x520 [ 512.184088][T14977] ? trace_irq_disable+0x3b/0x140 [ 512.184108][T14977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.184127][T14977] ? clear_bhb_loop+0x70/0xc0 [ 512.184151][T14977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.184170][T14977] RIP: 0033:0x7fc36ed9f559 [ 512.184189][T14977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.184206][T14977] RSP: 002b:00007fc36fbb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 512.184227][T14977] RAX: ffffffffffffffda RBX: 00007fc36f025fa0 RCX: 00007fc36ed9f559 [ 512.184242][T14977] RDX: 0000000000000001 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 512.184255][T14977] RBP: 00007fc36fbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 512.184269][T14977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 512.184281][T14977] R13: 00007fc36f026038 R14: 00007fc36f025fa0 R15: 00007fff03514158 [ 512.184325][T14977] [ 512.768374][ T32] audit: type=1800 audit(1792974157.620:9765): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=19712 res=0 errno=-22 [ 512.792527][ T5641] block nbd6: Receive control failed (result -107) [ 512.873005][ T8630] block nbd6: shutting down sockets [ 513.274344][ T32] audit: type=1800 audit(1792974158.130:9766): pid=15001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2324" name="cur_state" dev="sysfs" ino=5818 res=0 errno=-22 [ 513.274492][T15001] FAULT_INJECTION: forcing a failure. [ 513.274492][T15001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.274509][T15001] CPU: 1 UID: 0 PID: 15001 Comm: syz.8.2324 Tainted: G L syzkaller #0 PREEMPT(full) [ 513.274523][T15001] Tainted: [L]=SOFTLOCKUP [ 513.274527][T15001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 513.274534][T15001] Call Trace: [ 513.274538][T15001] [ 513.274543][T15001] dump_stack_lvl+0xe8/0x150 [ 513.274564][T15001] should_fail_ex+0x3eb/0x540 [ 513.274582][T15001] _copy_to_user+0x31/0xb0 [ 513.274599][T15001] simple_read_from_buffer+0xe1/0x170 [ 513.274614][T15001] proc_fail_nth_read+0x1bb/0x230 [ 513.274715][T15001] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 513.274731][T15001] ? rw_verify_area+0x24a/0x4c0 [ 513.274744][T15001] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 513.274758][T15001] vfs_read+0x213/0xa80 [ 513.274773][T15001] ? __pfx___mutex_lock+0x10/0x10 [ 513.274787][T15001] ? __pfx_vfs_read+0x10/0x10 [ 513.274800][T15001] ? __fget_files+0x2a/0x420 [ 513.274810][T15001] ? __fget_files+0x3a2/0x420 [ 513.274820][T15001] ? __fget_files+0x2a/0x420 [ 513.274833][T15001] ? fdget+0x1ac/0x250 [ 513.274848][T15001] ksys_read+0x150/0x270 [ 513.274861][T15001] ? __pfx_ksys_read+0x10/0x10 [ 513.274879][T15001] do_syscall_64+0x166/0x520 [ 513.274891][T15001] ? trace_irq_disable+0x3b/0x140 [ 513.274903][T15001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.274913][T15001] ? clear_bhb_loop+0x70/0xc0 [ 513.274926][T15001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.274936][T15001] RIP: 0033:0x7fa5d035fd8e [ 513.274947][T15001] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 513.274956][T15001] RSP: 002b:00007fa5d128afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 513.274967][T15001] RAX: ffffffffffffffda RBX: 00007fa5d128b6c0 RCX: 00007fa5d035fd8e [ 513.274975][T15001] RDX: 000000000000000f RSI: 00007fa5d128b0a0 RDI: 0000000000000003 [ 513.274982][T15001] RBP: 00007fa5d128b090 R08: 0000000000000000 R09: 0000000000000000 [ 513.274989][T15001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 513.274995][T15001] R13: 00007fa5d0626038 R14: 00007fa5d0625fa0 R15: 00007ffd18f5f168 [ 513.275012][T15001] [ 513.552033][ T9] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 513.642163][ T26] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 513.712012][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 513.712787][ T9] usb 7-1: New USB device found: idVendor=0403, idProduct=97c3, bcdDevice=0.00 [ 513.712825][ T9] usb 7-1: too many configurations: 22, using maximum allowed: 8 [ 513.713704][ T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 5: 255, using maximum allowed: 30 [ 513.713739][ T9] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.713754][ T9] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 513.713768][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 513.714549][ T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 5: 255, using maximum allowed: 30 [ 513.714571][ T9] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.714584][ T9] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 513.714598][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 513.715344][ T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 5: 255, using maximum allowed: 30 [ 513.715369][ T9] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.715382][ T9] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 513.715396][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 513.716146][ T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 5: 255, using maximum allowed: 30 [ 513.716167][ T9] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.716180][ T9] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 513.716193][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 513.716941][ T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 5: 255, using maximum allowed: 30 [ 513.716961][ T9] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.716974][ T9] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 513.716987][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 513.717743][ T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 5: 255, using maximum allowed: 30 [ 513.717764][ T9] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.717777][ T9] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 513.717790][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 513.718543][ T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 5: 255, using maximum allowed: 30 [ 513.718567][ T9] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.718580][ T9] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 513.718594][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 513.719353][ T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 5: 255, using maximum allowed: 30 [ 513.719387][ T9] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.719407][ T9] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 513.719421][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 513.719440][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.721317][ T9] usb 7-1: config 0 descriptor?? [ 513.727404][ T32] audit: type=1800 audit(1792974158.580:9767): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=299252 res=0 errno=-22 [ 513.794067][ T26] usb 9-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 513.795596][ T26] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 513.795619][ T26] usb 9-1: config 1 has no interface number 0 [ 513.798115][ T26] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.798137][ T26] usb 9-1: Product: syz [ 513.798150][ T26] usb 9-1: Manufacturer: syz [ 513.798164][ T26] usb 9-1: SerialNumber: syz [ 513.888164][ T26] usb 9-1: 3:0 : does not exist [ 513.888186][ T26] usb 9-1: 3:0 : does not exist [ 514.094147][T15007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.095136][T15007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.325451][ T9] input: HID 0403:97c3 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0403:97C3.0016/input/input47 [ 514.414837][ T9] hid-generic 0003:0403:97C3.0016: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0403:97c3] on usb-dummy_hcd.6-1/input0 [ 514.520721][ T9] usb 7-1: USB disconnect, device number 71 [ 514.858787][T15019] FAULT_INJECTION: forcing a failure. [ 514.858787][T15019] name failslab, interval 1, probability 0, space 0, times 0 [ 514.858809][T15019] CPU: 0 UID: 0 PID: 15019 Comm: syz.7.2327 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.858826][T15019] Tainted: [L]=SOFTLOCKUP [ 514.858831][T15019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 514.858837][T15019] Call Trace: [ 514.858842][T15019] [ 514.858847][T15019] dump_stack_lvl+0xe8/0x150 [ 514.858868][T15019] should_fail_ex+0x3eb/0x540 [ 514.858886][T15019] should_failslab+0xa8/0x100 [ 514.858902][T15019] __kmalloc_noprof+0xf9/0x710 [ 514.858914][T15019] ? ima_alloc_init_template+0xa4/0x700 [ 514.858926][T15019] ? ima_alloc_init_template+0xa4/0x700 [ 514.858938][T15019] ? __asan_memcpy+0x40/0x70 [ 514.858951][T15019] ima_alloc_init_template+0xa4/0x700 [ 514.858967][T15019] ima_store_measurement+0x1d4/0x690 [ 514.858984][T15019] ? __pfx_ima_store_measurement+0x10/0x10 [ 514.858995][T15019] ? ima_d_path+0x16b/0x230 [ 514.859010][T15019] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 514.859030][T15019] process_measurement+0x15ac/0x1c10 [ 514.859051][T15019] ? __pfx_process_measurement+0x10/0x10 [ 514.859062][T15019] ? trace_contention_end+0x3d/0x140 [ 514.859100][T15019] ? kernfs_put_active+0xa0/0x100 [ 514.859116][T15019] ? kernfs_fop_open+0xb0b/0xd20 [ 514.859130][T15019] ima_file_check+0xdc/0x130 [ 514.859142][T15019] ? do_dentry_open+0xcf9/0x1360 [ 514.859157][T15019] ? __pfx_ima_file_check+0x10/0x10 [ 514.859173][T15019] security_file_post_open+0xb3/0x260 [ 514.859187][T15019] path_openat+0x1748/0x20f0 [ 514.859211][T15019] do_file_open+0x23e/0x4a0 [ 514.859226][T15019] ? __pfx_do_file_open+0x10/0x10 [ 514.859244][T15019] ? __pfx_kfree_link+0x10/0x10 [ 514.859261][T15019] ? _raw_spin_unlock+0x28/0x50 [ 514.859273][T15019] ? alloc_fd+0x6af/0x760 [ 514.859289][T15019] do_sys_openat2+0x115/0x200 [ 514.859305][T15019] ? __pfx_do_sys_openat2+0x10/0x10 [ 514.859321][T15019] ? ksys_write+0x242/0x270 [ 514.859334][T15019] ? __pfx_ksys_write+0x10/0x10 [ 514.859348][T15019] __x64_sys_openat+0x138/0x170 [ 514.859361][T15019] do_syscall_64+0x166/0x520 [ 514.859373][T15019] ? trace_irq_disable+0x3b/0x140 [ 514.859386][T15019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.859403][T15019] ? clear_bhb_loop+0x70/0xc0 [ 514.859425][T15019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.859441][T15019] RIP: 0033:0x7f587db9f559 [ 514.859459][T15019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.859474][T15019] RSP: 002b:00007f587eac9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 514.859495][T15019] RAX: ffffffffffffffda RBX: 00007f587de25fa0 RCX: 00007f587db9f559 [ 514.859509][T15019] RDX: 0000000000000001 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 514.859516][T15019] RBP: 00007f587eac9090 R08: 0000000000000000 R09: 0000000000000000 [ 514.859523][T15019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 514.859529][T15019] R13: 00007f587de26038 R14: 00007f587de25fa0 R15: 00007ffd8a35c4e8 [ 514.859546][T15019] [ 515.207831][T15023] loop5: detected capacity change from 0 to 7 [ 515.221812][T15023] Dev loop5: unable to read RDB block 7 [ 515.221856][T15023] loop5: unable to read partition table [ 515.222130][T15023] loop5: partition table beyond EOD, truncated [ 515.222166][T15023] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑû) failed (rc=-5) [ 515.245141][T15023] netlink: 'syz.6.2329': attribute type 4 has an invalid length. [ 515.330870][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2328'. [ 515.538977][T14152] IPVS: starting estimator thread 0... [ 515.539384][T15030] IPVS: sh: FWM 3 0x00000003 - no destination available [ 515.562975][T15030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2332'. [ 515.623423][T15031] IPVS: using max 34 ests per chain, 81600 per kthread [ 515.712065][ T9] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 515.774424][T15043] FAULT_INJECTION: forcing a failure. [ 515.774424][T15043] name failslab, interval 1, probability 0, space 0, times 0 [ 515.774476][T15043] CPU: 0 UID: 0 PID: 15043 Comm: syz.7.2337 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.774491][T15043] Tainted: [L]=SOFTLOCKUP [ 515.774495][T15043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 515.774502][T15043] Call Trace: [ 515.774507][T15043] [ 515.774513][T15043] dump_stack_lvl+0xe8/0x150 [ 515.774533][T15043] should_fail_ex+0x3eb/0x540 [ 515.774551][T15043] should_failslab+0xa8/0x100 [ 515.774566][T15043] __kmalloc_noprof+0xf9/0x710 [ 515.774577][T15043] ? __kmalloc_noprof+0x1a6/0x710 [ 515.774590][T15043] ? ima_alloc_init_template+0x185/0x700 [ 515.774604][T15043] ? ima_alloc_init_template+0x185/0x700 [ 515.774618][T15043] ima_alloc_init_template+0x185/0x700 [ 515.774635][T15043] ima_store_measurement+0x1d4/0x690 [ 515.774651][T15043] ? __pfx_ima_store_measurement+0x10/0x10 [ 515.774666][T15043] ? ima_d_path+0x16b/0x230 [ 515.774694][T15043] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 515.774729][T15043] process_measurement+0x15ac/0x1c10 [ 515.774755][T15043] ? __pfx_process_measurement+0x10/0x10 [ 515.774766][T15043] ? trace_contention_end+0x3d/0x140 [ 515.774802][T15043] ? kernfs_put_active+0xa0/0x100 [ 515.774817][T15043] ? kernfs_fop_open+0xb0b/0xd20 [ 515.774831][T15043] ima_file_check+0xdc/0x130 [ 515.774842][T15043] ? do_dentry_open+0xcf9/0x1360 [ 515.774857][T15043] ? __pfx_ima_file_check+0x10/0x10 [ 515.774872][T15043] security_file_post_open+0xb3/0x260 [ 515.774886][T15043] path_openat+0x1748/0x20f0 [ 515.774909][T15043] do_file_open+0x23e/0x4a0 [ 515.774925][T15043] ? __pfx_do_file_open+0x10/0x10 [ 515.774943][T15043] ? __pfx_kfree_link+0x10/0x10 [ 515.774959][T15043] ? _raw_spin_unlock+0x28/0x50 [ 515.774971][T15043] ? alloc_fd+0x6af/0x760 [ 515.774987][T15043] do_sys_openat2+0x115/0x200 [ 515.775003][T15043] ? __pfx_do_sys_openat2+0x10/0x10 [ 515.775019][T15043] ? ksys_write+0x242/0x270 [ 515.775032][T15043] ? __pfx_ksys_write+0x10/0x10 [ 515.775046][T15043] __x64_sys_openat+0x138/0x170 [ 515.775059][T15043] do_syscall_64+0x166/0x520 [ 515.775070][T15043] ? trace_irq_disable+0x3b/0x140 [ 515.775083][T15043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.775102][T15043] ? clear_bhb_loop+0x70/0xc0 [ 515.775115][T15043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.775125][T15043] RIP: 0033:0x7f587db9f559 [ 515.775136][T15043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.775145][T15043] RSP: 002b:00007f587eac9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 515.775157][T15043] RAX: ffffffffffffffda RBX: 00007f587de25fa0 RCX: 00007f587db9f559 [ 515.775165][T15043] RDX: 0000000000000001 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 515.775173][T15043] RBP: 00007f587eac9090 R08: 0000000000000000 R09: 0000000000000000 [ 515.775180][T15043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 515.775186][T15043] R13: 00007f587de26038 R14: 00007f587de25fa0 R15: 00007ffd8a35c4e8 [ 515.775203][T15043] [ 515.882575][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 515.883564][ T9] usb 7-1: New USB device found: idVendor=2c42, idProduct=16f8, bcdDevice=1e.fa [ 515.885923][ T9] usb 7-1: config 245 has an invalid descriptor of length 0, skipping remainder of the config [ 515.893607][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.893653][ T9] usb 7-1: Product: syz [ 515.893667][ T9] usb 7-1: Manufacturer: syz [ 515.893681][ T9] usb 7-1: SerialNumber: syz [ 516.159038][T15028] FAULT_INJECTION: forcing a failure. [ 516.159038][T15028] name failslab, interval 1, probability 0, space 0, times 0 [ 516.159071][T15028] CPU: 0 UID: 0 PID: 15028 Comm: syz.6.2331 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.159102][T15028] Tainted: [L]=SOFTLOCKUP [ 516.159109][T15028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 516.159122][T15028] Call Trace: [ 516.159130][T15028] [ 516.159139][T15028] dump_stack_lvl+0xe8/0x150 [ 516.159173][T15028] should_fail_ex+0x3eb/0x540 [ 516.159206][T15028] should_failslab+0xa8/0x100 [ 516.159234][T15028] __kmalloc_cache_noprof+0x9e/0x600 [ 516.159258][T15028] ? shrinker_alloc+0x59/0xb90 [ 516.159285][T15028] ? shrinker_alloc+0x59/0xb90 [ 516.159318][T15028] shrinker_alloc+0x59/0xb90 [ 516.159345][T15028] ? __raw_spin_lock_init+0x45/0x100 [ 516.159377][T15028] ? __raw_spin_lock_init+0x45/0x100 [ 516.159410][T15028] sget_fc+0xe75/0x1a60 [ 516.159440][T15028] ? __pfx_set_anon_super_fc+0x10/0x10 [ 516.159463][T15028] ? __pfx_sget_fc+0x10/0x10 [ 516.159481][T15028] ? __kmalloc_cache_noprof+0x31c/0x600 [ 516.159502][T15028] ? vfs_parse_monolithic_sep+0xd0/0x360 [ 516.159527][T15028] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 516.159560][T15028] ? __pfx_devpts_fill_super+0x10/0x10 [ 516.159683][T15028] get_tree_nodev+0x2a/0x150 [ 516.159709][T15028] vfs_get_tree+0x92/0x2a0 [ 516.159736][T15028] do_new_mount+0x325/0xb00 [ 516.159763][T15028] ? __pfx_do_new_mount+0x10/0x10 [ 516.159787][T15028] ? ns_capable+0x84/0xe0 [ 516.159812][T15028] ? path_mount+0x647/0x1050 [ 516.159836][T15028] ? user_path_at+0xd4/0x160 [ 516.159862][T15028] __se_sys_mount+0x31d/0x420 [ 516.159889][T15028] ? __pfx___se_sys_mount+0x10/0x10 [ 516.159918][T15028] ? __x64_sys_mount+0x20/0xc0 [ 516.159941][T15028] do_syscall_64+0x166/0x520 [ 516.159966][T15028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.159986][T15028] ? clear_bhb_loop+0x70/0xc0 [ 516.160011][T15028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.160038][T15028] RIP: 0033:0x7fc36ed9f559 [ 516.160057][T15028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.160075][T15028] RSP: 002b:00007fc36fbb4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 516.160097][T15028] RAX: ffffffffffffffda RBX: 00007fc36f025fa0 RCX: 00007fc36ed9f559 [ 516.160112][T15028] RDX: 0000200000000440 RSI: 0000200000000280 RDI: 0000000000000000 [ 516.160125][T15028] RBP: 00007fc36ee36b20 R08: 0000000000000000 R09: 0000000000000000 [ 516.160138][T15028] R10: 0000000000810000 R11: 0000000000000246 R12: 0000000000000000 [ 516.160151][T15028] R13: 00007fc36f026038 R14: 00007fc36f025fa0 R15: 00007fff03514158 [ 516.160186][T15028] [ 516.581587][T15028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.592902][T15028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.691722][T15066] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2344'. [ 516.705614][T15069] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2344'. [ 516.770670][T15072] FAULT_INJECTION: forcing a failure. [ 516.770670][T15072] name failslab, interval 1, probability 0, space 0, times 0 [ 516.770700][T15072] CPU: 1 UID: 0 PID: 15072 Comm: syz.7.2345 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.770728][T15072] Tainted: [L]=SOFTLOCKUP [ 516.770734][T15072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 516.770745][T15072] Call Trace: [ 516.770753][T15072] [ 516.770760][T15072] dump_stack_lvl+0xe8/0x150 [ 516.770794][T15072] should_fail_ex+0x3eb/0x540 [ 516.770822][T15072] should_failslab+0xa8/0x100 [ 516.770847][T15072] ? __kernfs_new_node+0xe6/0x980 [ 516.770873][T15072] kmem_cache_alloc_noprof+0x9c/0x600 [ 516.770895][T15072] ? __kernfs_new_node+0xe6/0x980 [ 516.770928][T15072] __kernfs_new_node+0xe6/0x980 [ 516.770962][T15072] ? __pfx___kernfs_new_node+0x10/0x10 [ 516.770989][T15072] ? kernfs_root+0x1c/0x230 [ 516.771029][T15072] ? kernfs_root+0x1c/0x230 [ 516.771054][T15072] ? kernfs_root+0x1c/0x230 [ 516.771077][T15072] ? kernfs_root+0x1c/0x230 [ 516.771107][T15072] kernfs_new_node+0xeb/0x140 [ 516.771138][T15072] kernfs_create_link+0xe3/0x240 [ 516.771164][T15072] sysfs_do_create_link_sd+0x83/0x110 [ 516.771192][T15072] device_add_class_symlinks+0xb6/0x240 [ 516.771221][T15072] device_add+0x467/0xb80 [ 516.771245][T15072] netdev_register_kobject+0x197/0x350 [ 516.771395][T15072] register_netdevice+0x17be/0x2280 [ 516.771446][T15072] ? alloc_netdev_mqs+0xd5b/0x1240 [ 516.771508][T15072] ? __pfx_register_netdevice+0x10/0x10 [ 516.771531][T15072] ? tun_net_initialize+0x199/0x460 [ 516.771626][T15072] ? __pfx_tun_net_initialize+0x10/0x10 [ 516.771648][T15072] ? alloc_netdev_mqs+0xe77/0x1240 [ 516.771679][T15072] tun_set_iff+0x830/0xf30 [ 516.771706][T15072] __tun_chr_ioctl+0x7e5/0x1e70 [ 516.771734][T15072] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 516.771751][T15072] ? __fget_files+0x2a/0x420 [ 516.771779][T15072] ? __fget_files+0x2a/0x420 [ 516.771802][T15072] ? bpf_lsm_file_ioctl+0x9/0x20 [ 516.771824][T15072] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 516.771842][T15072] __se_sys_ioctl+0xfc/0x170 [ 516.771868][T15072] do_syscall_64+0x166/0x520 [ 516.771889][T15072] ? trace_irq_disable+0x3b/0x140 [ 516.771911][T15072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.771929][T15072] ? clear_bhb_loop+0x70/0xc0 [ 516.771950][T15072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.771967][T15072] RIP: 0033:0x7f587db9f559 [ 516.771984][T15072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.772007][T15072] RSP: 002b:00007f587eac9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 516.772026][T15072] RAX: ffffffffffffffda RBX: 00007f587de25fa0 RCX: 00007f587db9f559 [ 516.772040][T15072] RDX: 00002000000004c0 RSI: 00000000400454ca RDI: 0000000000000004 [ 516.772053][T15072] RBP: 00007f587dc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 516.772065][T15072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.772075][T15072] R13: 00007f587de26038 R14: 00007f587de25fa0 R15: 00007ffd8a35c4e8 [ 516.772105][T15072] [ 516.785126][T15076] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 517.213996][ T32] kauditd_printk_skb: 50 callbacks suppressed [ 517.214014][ T32] audit: type=1800 audit(1792974162.070:9818): pid=15085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2347" name="msi_bus" dev="sysfs" ino=2737 res=0 errno=-22 [ 517.214015][T15085] FAULT_INJECTION: forcing a failure. [ 517.214015][T15085] name failslab, interval 1, probability 0, space 0, times 0 [ 517.214062][T15085] CPU: 0 UID: 0 PID: 15085 Comm: syz.7.2347 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.214088][T15085] Tainted: [L]=SOFTLOCKUP [ 517.214095][T15085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 517.214103][T15085] Call Trace: [ 517.214108][T15085] [ 517.214113][T15085] dump_stack_lvl+0xe8/0x150 [ 517.214133][T15085] should_fail_ex+0x3eb/0x540 [ 517.214152][T15085] should_failslab+0xa8/0x100 [ 517.214168][T15085] __kmalloc_noprof+0xf9/0x710 [ 517.214181][T15085] ? ima_alloc_init_template+0x185/0x700 [ 517.214194][T15085] ? ima_write_template_field_data+0x47/0x490 [ 517.214208][T15085] ? ima_write_template_field_data+0x47/0x490 [ 517.214222][T15085] ? __x64_sys_openat+0x138/0x170 [ 517.214234][T15085] ima_write_template_field_data+0x47/0x490 [ 517.214249][T15085] ? ima_eventdigest_init_common+0x2b1/0x400 [ 517.214266][T15085] ima_eventdigest_init_common+0x2cc/0x400 [ 517.214281][T15085] ? ima_eventdigest_init_common+0x1e1/0x400 [ 517.214295][T15085] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 517.214322][T15085] ? __kmalloc_noprof+0x387/0x710 [ 517.214333][T15085] ? __kmalloc_noprof+0x1a6/0x710 [ 517.214343][T15085] ? ima_alloc_init_template+0x185/0x700 [ 517.214356][T15085] ? __pfx_ima_eventdigest_ng_init+0x10/0x10 [ 517.214370][T15085] ima_alloc_init_template+0x323/0x700 [ 517.214386][T15085] ima_store_measurement+0x1d4/0x690 [ 517.214403][T15085] ? __pfx_ima_store_measurement+0x10/0x10 [ 517.214414][T15085] ? ima_d_path+0x16b/0x230 [ 517.214429][T15085] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 517.214454][T15085] process_measurement+0x15ac/0x1c10 [ 517.214474][T15085] ? __pfx_process_measurement+0x10/0x10 [ 517.214485][T15085] ? trace_contention_end+0x3d/0x140 [ 517.214521][T15085] ? kernfs_put_active+0xa0/0x100 [ 517.214536][T15085] ? kernfs_fop_open+0xb0b/0xd20 [ 517.214551][T15085] ima_file_check+0xdc/0x130 [ 517.214562][T15085] ? do_dentry_open+0xcf9/0x1360 [ 517.214577][T15085] ? __pfx_ima_file_check+0x10/0x10 [ 517.214592][T15085] security_file_post_open+0xb3/0x260 [ 517.214606][T15085] path_openat+0x1748/0x20f0 [ 517.214629][T15085] do_file_open+0x23e/0x4a0 [ 517.214645][T15085] ? __pfx_do_file_open+0x10/0x10 [ 517.214662][T15085] ? __pfx_kfree_link+0x10/0x10 [ 517.214679][T15085] ? _raw_spin_unlock+0x28/0x50 [ 517.214690][T15085] ? alloc_fd+0x6af/0x760 [ 517.214706][T15085] do_sys_openat2+0x115/0x200 [ 517.214722][T15085] ? __pfx_do_sys_openat2+0x10/0x10 [ 517.214738][T15085] ? ksys_write+0x242/0x270 [ 517.214751][T15085] ? __pfx_ksys_write+0x10/0x10 [ 517.214765][T15085] __x64_sys_openat+0x138/0x170 [ 517.214778][T15085] do_syscall_64+0x166/0x520 [ 517.214790][T15085] ? trace_irq_disable+0x3b/0x140 [ 517.214802][T15085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.214813][T15085] ? clear_bhb_loop+0x70/0xc0 [ 517.214825][T15085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.214835][T15085] RIP: 0033:0x7f587db9f559 [ 517.214846][T15085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.214855][T15085] RSP: 002b:00007f587eac9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 517.214866][T15085] RAX: ffffffffffffffda RBX: 00007f587de25fa0 RCX: 00007f587db9f559 [ 517.214874][T15085] RDX: 0000000000000001 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 517.214881][T15085] RBP: 00007f587eac9090 R08: 0000000000000000 R09: 0000000000000000 [ 517.214888][T15085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 517.214894][T15085] R13: 00007f587de26038 R14: 00007f587de25fa0 R15: 00007ffd8a35c4e8 [ 517.214911][T15085] [ 517.215113][ T32] audit: type=1804 audit(1792974162.070:9819): pid=15085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.7.2347" name="/newroot/144/sys/devices/pci0000:00/0000:00:01.0/msi_bus" dev="sysfs" ino=2737 res=0 errno=-12 [ 518.643231][ T9] usb 7-1: USB disconnect, device number 72 [ 518.644391][ T9] f81534a_ctrl 7-1:245.0: failed to enable ports: -19 [ 518.724670][ T32] audit: type=1800 audit(1792974163.580:9820): pid=15095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2351" name="TCP" dev="sysfs" ino=5405 res=0 errno=-22 [ 518.887487][T15100] FAULT_INJECTION: forcing a failure. [ 518.887487][T15100] name failslab, interval 1, probability 0, space 0, times 0 [ 518.887521][T15100] CPU: 1 UID: 0 PID: 15100 Comm: syz.7.2353 Tainted: G L syzkaller #0 PREEMPT(full) [ 518.887547][T15100] Tainted: [L]=SOFTLOCKUP [ 518.887554][T15100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 518.887565][T15100] Call Trace: [ 518.887573][T15100] [ 518.887582][T15100] dump_stack_lvl+0xe8/0x150 [ 518.887614][T15100] should_fail_ex+0x3eb/0x540 [ 518.887648][T15100] should_failslab+0xa8/0x100 [ 518.887672][T15100] ? do_getname+0x2e/0x250 [ 518.887707][T15100] kmem_cache_alloc_noprof+0x9c/0x600 [ 518.887728][T15100] ? do_getname+0x2e/0x250 [ 518.887758][T15100] do_getname+0x2e/0x250 [ 518.887783][T15100] ? getname_flags+0x11/0x20 [ 518.887811][T15100] do_sys_openat2+0xce/0x200 [ 518.887842][T15100] ? __pfx_do_sys_openat2+0x10/0x10 [ 518.887870][T15100] ? ksys_write+0x242/0x270 [ 518.887894][T15100] ? __pfx_ksys_write+0x10/0x10 [ 518.887920][T15100] __x64_sys_openat+0x138/0x170 [ 518.887943][T15100] do_syscall_64+0x166/0x520 [ 518.887964][T15100] ? trace_irq_disable+0x3b/0x140 [ 518.887986][T15100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.888006][T15100] ? clear_bhb_loop+0x70/0xc0 [ 518.888028][T15100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.888048][T15100] RIP: 0033:0x7f587db9f559 [ 518.888065][T15100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.888082][T15100] RSP: 002b:00007f587eac9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 518.888103][T15100] RAX: ffffffffffffffda RBX: 00007f587de25fa0 RCX: 00007f587db9f559 [ 518.888117][T15100] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 518.888130][T15100] RBP: 00007f587eac9090 R08: 0000000000000000 R09: 0000000000000000 [ 518.888142][T15100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.888153][T15100] R13: 00007f587de26038 R14: 00007f587de25fa0 R15: 00007ffd8a35c4e8 [ 518.888190][T15100] [ 518.989533][T15102] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2354'. [ 519.130427][T15105] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2355'. [ 519.130568][T15105] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2355'. [ 519.130721][T15105] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2355'. [ 519.130944][T15105] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2355'. [ 519.131080][T15105] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2355'. [ 519.270435][T15109] FAULT_INJECTION: forcing a failure. [ 519.270435][T15109] name failslab, interval 1, probability 0, space 0, times 0 [ 519.270465][T15109] CPU: 0 UID: 0 PID: 15109 Comm: syz.7.2356 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.270488][T15109] Tainted: [L]=SOFTLOCKUP [ 519.270496][T15109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 519.270507][T15109] Call Trace: [ 519.270516][T15109] [ 519.270524][T15109] dump_stack_lvl+0xe8/0x150 [ 519.270557][T15109] should_fail_ex+0x3eb/0x540 [ 519.270589][T15109] should_failslab+0xa8/0x100 [ 519.270615][T15109] __kmalloc_noprof+0xf9/0x710 [ 519.270634][T15109] ? ima_eventdigest_init_common+0x2cc/0x400 [ 519.270662][T15109] ? ima_write_template_field_data+0x47/0x490 [ 519.270687][T15109] ? ima_write_template_field_data+0x47/0x490 [ 519.270721][T15109] ima_write_template_field_data+0x47/0x490 [ 519.270755][T15109] ima_eventname_init_common+0x1dd/0x250 [ 519.270786][T15109] ? __pfx_ima_eventname_init_common+0x10/0x10 [ 519.270818][T15109] ? __kmalloc_noprof+0x387/0x710 [ 519.270837][T15109] ? __kmalloc_noprof+0x1a6/0x710 [ 519.270856][T15109] ? ima_alloc_init_template+0x185/0x700 [ 519.270882][T15109] ? __pfx_ima_eventname_ng_init+0x10/0x10 [ 519.270909][T15109] ima_alloc_init_template+0x323/0x700 [ 519.270939][T15109] ima_store_measurement+0x1d4/0x690 [ 519.270971][T15109] ? __pfx_ima_store_measurement+0x10/0x10 [ 519.270992][T15109] ? ima_d_path+0x16b/0x230 [ 519.271022][T15109] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 519.271059][T15109] process_measurement+0x15ac/0x1c10 [ 519.271126][T15109] ? __pfx_process_measurement+0x10/0x10 [ 519.271147][T15109] ? trace_contention_end+0x3d/0x140 [ 519.271215][T15109] ? kernfs_put_active+0xa0/0x100 [ 519.271243][T15109] ? kernfs_fop_open+0xb0b/0xd20 [ 519.271270][T15109] ima_file_check+0xdc/0x130 [ 519.271291][T15109] ? do_dentry_open+0xcf9/0x1360 [ 519.271319][T15109] ? __pfx_ima_file_check+0x10/0x10 [ 519.271345][T15109] security_file_post_open+0xb3/0x260 [ 519.271372][T15109] path_openat+0x1748/0x20f0 [ 519.271410][T15109] do_file_open+0x23e/0x4a0 [ 519.271439][T15109] ? __pfx_do_file_open+0x10/0x10 [ 519.271473][T15109] ? __pfx_kfree_link+0x10/0x10 [ 519.271501][T15109] ? _raw_spin_unlock+0x28/0x50 [ 519.271522][T15109] ? alloc_fd+0x6af/0x760 [ 519.271552][T15109] do_sys_openat2+0x115/0x200 [ 519.271583][T15109] ? __pfx_do_sys_openat2+0x10/0x10 [ 519.271611][T15109] ? ksys_write+0x242/0x270 [ 519.271635][T15109] ? __pfx_ksys_write+0x10/0x10 [ 519.271662][T15109] __x64_sys_openat+0x138/0x170 [ 519.271686][T15109] do_syscall_64+0x166/0x520 [ 519.271708][T15109] ? trace_irq_disable+0x3b/0x140 [ 519.271730][T15109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.271749][T15109] ? clear_bhb_loop+0x70/0xc0 [ 519.271773][T15109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.271791][T15109] RIP: 0033:0x7f587db9f559 [ 519.271810][T15109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.271831][T15109] RSP: 002b:00007f587eac9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 519.271851][T15109] RAX: ffffffffffffffda RBX: 00007f587de25fa0 RCX: 00007f587db9f559 [ 519.271866][T15109] RDX: 0000000000000001 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 519.271879][T15109] RBP: 00007f587eac9090 R08: 0000000000000000 R09: 0000000000000000 [ 519.271892][T15109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 519.271906][T15109] R13: 00007f587de26038 R14: 00007f587de25fa0 R15: 00007ffd8a35c4e8 [ 519.271933][T15109] [ 519.297334][ T32] audit: type=1800 audit(1792974164.120:9821): pid=15109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2356" name="msi_bus" dev="sysfs" ino=2737 res=0 errno=-22 [ 519.297369][ T32] audit: type=1804 audit(1792974164.130:9822): pid=15109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.7.2356" name="/newroot/150/sys/devices/pci0000:00/0000:00:01.0/msi_bus" dev="sysfs" ino=2737 res=0 errno=-12 [ 519.366193][ T9] usb 9-1: USB disconnect, device number 18 [ 519.693017][T15111] device-mapper: table: 248:11: crypt: Device lookup failed (-ENOENT) [ 519.693042][T15111] device-mapper: ioctl: error adding target to table [ 519.778508][ T32] audit: type=1800 audit(1792974164.630:9823): pid=15122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2360" name="add_target_port" dev="sysfs" ino=21913 res=0 errno=-13 [ 519.793994][T15122] PKCS7: Unsupported SignerInfo version [ 519.875476][ T32] audit: type=1800 audit(1792974164.730:9824): pid=15126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2362" name="TCP" dev="sysfs" ino=5405 res=0 errno=-22 [ 519.913260][ T9] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 519.935328][T15128] FAULT_INJECTION: forcing a failure. [ 519.935328][T15128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.935359][T15128] CPU: 0 UID: 0 PID: 15128 Comm: syz.6.2363 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.935385][T15128] Tainted: [L]=SOFTLOCKUP [ 519.935392][T15128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 519.935403][T15128] Call Trace: [ 519.935411][T15128] [ 519.935420][T15128] dump_stack_lvl+0xe8/0x150 [ 519.935453][T15128] should_fail_ex+0x3eb/0x540 [ 519.935484][T15128] strncpy_from_user+0x36/0x2c0 [ 519.935514][T15128] do_getname+0x77/0x250 [ 519.935546][T15128] do_sys_openat2+0xce/0x200 [ 519.935584][T15128] ? __pfx_do_sys_openat2+0x10/0x10 [ 519.935613][T15128] ? ksys_write+0x242/0x270 [ 519.935641][T15128] ? __pfx_ksys_write+0x10/0x10 [ 519.935667][T15128] __x64_sys_openat+0x138/0x170 [ 519.935691][T15128] do_syscall_64+0x166/0x520 [ 519.935714][T15128] ? trace_irq_disable+0x3b/0x140 [ 519.935736][T15128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.935755][T15128] ? clear_bhb_loop+0x70/0xc0 [ 519.935778][T15128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.935797][T15128] RIP: 0033:0x7fc36ed9f559 [ 519.935815][T15128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.935831][T15128] RSP: 002b:00007fc36fbb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 519.935851][T15128] RAX: ffffffffffffffda RBX: 00007fc36f025fa0 RCX: 00007fc36ed9f559 [ 519.935866][T15128] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 519.935878][T15128] RBP: 00007fc36fbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 519.935891][T15128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.935903][T15128] R13: 00007fc36f026038 R14: 00007fc36f025fa0 R15: 00007fff03514158 [ 519.935934][T15128] [ 520.094455][ T9] usb 9-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 520.095620][ T9] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 520.095667][ T9] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 520.095689][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 520.105995][ T9] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 520.106023][ T9] usb 9-1: Product: syz [ 520.106037][ T9] usb 9-1: Manufacturer: syz [ 520.106050][ T9] usb 9-1: SerialNumber: syz [ 520.114797][ T9] usb 9-1: config 0 descriptor?? [ 520.122775][ T32] audit: type=1800 audit(1792974164.960:9825): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=299751 res=0 errno=-22 [ 520.136694][ T9] hub 9-1:0.0: bad descriptor, ignoring hub [ 520.136722][ T9] hub 9-1:0.0: probe with driver hub failed with error -5 [ 520.140255][ T32] audit: type=1800 audit(1792974164.990:9826): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=299783 res=0 errno=-22 [ 520.146478][ T32] audit: type=1800 audit(1792974164.990:9827): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=299758 res=0 errno=-22 [ 520.154201][ T9] usb 9-1: selecting invalid altsetting 0 [ 520.343584][T12679] nintendo 0005:057E:2017.0017: hidraw0: BLUETOOTH HID v80.00 Gamepad [syz0] on syz0 [ 520.394784][ T9] usb 9-1: USB disconnect, device number 19 [ 521.138312][T15156] __nla_validate_parse: 31 callbacks suppressed [ 521.138357][T15156] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2369'. [ 521.185423][ T9458] wlan1: Trigger new scan to find an IBSS to join [ 521.235731][T15158] kvm: kvm [15157]: vcpu0, guest rIP: 0x5408d Unhandled WRMSR(0x40000004) = 0x3 [ 521.602117][ T31] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 521.754131][ T31] usb 9-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 521.754173][ T31] usb 9-1: too many configurations: 15, using maximum allowed: 8 [ 521.782146][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.782171][ T31] usb 9-1: Product: syz [ 521.782185][ T31] usb 9-1: Manufacturer: syz [ 521.782198][ T31] usb 9-1: SerialNumber: syz [ 521.831445][T15165] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 521.994453][T15161] FAULT_INJECTION: forcing a failure. [ 521.994453][T15161] name failslab, interval 1, probability 0, space 0, times 0 [ 521.994474][T15161] CPU: 1 UID: 0 PID: 15161 Comm: syz.8.2371 Tainted: G L syzkaller #0 PREEMPT(full) [ 521.994489][T15161] Tainted: [L]=SOFTLOCKUP [ 521.994493][T15161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 521.994500][T15161] Call Trace: [ 521.994505][T15161] [ 521.994510][T15161] dump_stack_lvl+0xe8/0x150 [ 521.994531][T15161] should_fail_ex+0x3eb/0x540 [ 521.994550][T15161] should_failslab+0xa8/0x100 [ 521.994567][T15161] ? security_file_alloc+0x34/0x310 [ 521.994580][T15161] kmem_cache_alloc_noprof+0x9c/0x600 [ 521.994591][T15161] ? rcu_is_watching+0x16/0xb0 [ 521.994606][T15161] ? security_file_alloc+0x34/0x310 [ 521.994620][T15161] security_file_alloc+0x34/0x310 [ 521.994633][T15161] init_file+0x90/0x2b0 [ 521.994650][T15161] alloc_empty_file+0x74/0x1d0 [ 521.994665][T15161] alloc_file_pseudo+0x110/0x1e0 [ 521.994683][T15161] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 521.994698][T15161] ? security_inode_alloc+0xd5/0x310 [ 521.994713][T15161] ? inode_init_always_gfp+0x994/0xd30 [ 521.994727][T15161] sock_alloc_file+0xb8/0x2e0 [ 521.994744][T15161] do_accept+0x380/0x730 [ 521.994762][T15161] ? __pfx_do_accept+0x10/0x10 [ 521.994788][T15161] __sys_accept4+0x135/0x230 [ 521.994805][T15161] ? __pfx___sys_accept4+0x10/0x10 [ 521.994827][T15161] __x64_sys_accept+0x7d/0x90 [ 521.994846][T15161] do_syscall_64+0x166/0x520 [ 521.994860][T15161] ? trace_irq_disable+0x3b/0x140 [ 521.994873][T15161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.994885][T15161] ? clear_bhb_loop+0x70/0xc0 [ 521.994898][T15161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.994909][T15161] RIP: 0033:0x7fa5d039f559 [ 521.994920][T15161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.994929][T15161] RSP: 002b:00007fa5d128b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 521.994942][T15161] RAX: ffffffffffffffda RBX: 00007fa5d0625fa0 RCX: 00007fa5d039f559 [ 521.994950][T15161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 521.994956][T15161] RBP: 00007fa5d0436b20 R08: 0000000000000000 R09: 0000000000000000 [ 521.994963][T15161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.994969][T15161] R13: 00007fa5d0626038 R14: 00007fa5d0625fa0 R15: 00007ffd18f5f168 [ 521.994986][T15161] [ 522.050318][ T31] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 522.050375][ T31] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 522.050393][ T31] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 522.057178][ T31] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 522.490633][T15173] FAULT_INJECTION: forcing a failure. [ 522.490633][T15173] name failslab, interval 1, probability 0, space 0, times 0 [ 522.490661][T15173] CPU: 0 UID: 0 PID: 15173 Comm: syz.0.2374 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.490677][T15173] Tainted: [L]=SOFTLOCKUP [ 522.490681][T15173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 522.490688][T15173] Call Trace: [ 522.490693][T15173] [ 522.490698][T15173] dump_stack_lvl+0xe8/0x150 [ 522.490719][T15173] should_fail_ex+0x3eb/0x540 [ 522.490736][T15173] should_failslab+0xa8/0x100 [ 522.490750][T15173] ? alloc_empty_file+0x5b/0x1d0 [ 522.490766][T15173] kmem_cache_alloc_noprof+0x9c/0x600 [ 522.490776][T15173] ? stack_depot_save_flags+0x33/0x810 [ 522.490791][T15173] ? alloc_empty_file+0x5b/0x1d0 [ 522.490809][T15173] alloc_empty_file+0x5b/0x1d0 [ 522.490824][T15173] path_openat+0x96/0x20f0 [ 522.490847][T15173] do_file_open+0x23e/0x4a0 [ 522.490863][T15173] ? __pfx_do_file_open+0x10/0x10 [ 522.490886][T15173] ? _raw_spin_unlock+0x28/0x50 [ 522.490898][T15173] ? alloc_fd+0x6af/0x760 [ 522.490914][T15173] do_sys_openat2+0x115/0x200 [ 522.490939][T15173] ? __pfx_do_sys_openat2+0x10/0x10 [ 522.490954][T15173] ? ksys_write+0x242/0x270 [ 522.490967][T15173] ? __pfx_ksys_write+0x10/0x10 [ 522.490981][T15173] __x64_sys_openat+0x138/0x170 [ 522.490993][T15173] do_syscall_64+0x166/0x520 [ 522.491005][T15173] ? trace_irq_disable+0x3b/0x140 [ 522.491018][T15173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.491029][T15173] ? clear_bhb_loop+0x70/0xc0 [ 522.491041][T15173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.491052][T15173] RIP: 0033:0x7f066479f559 [ 522.491063][T15173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.491072][T15173] RSP: 002b:00007f066562a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 522.491085][T15173] RAX: ffffffffffffffda RBX: 00007f0664a25fa0 RCX: 00007f066479f559 [ 522.491092][T15173] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 522.491100][T15173] RBP: 00007f066562a090 R08: 0000000000000000 R09: 0000000000000000 [ 522.491106][T15173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.491113][T15173] R13: 00007f0664a26038 R14: 00007f0664a25fa0 R15: 00007ffc33166a78 [ 522.491129][T15173] [ 522.595892][ T32] kauditd_printk_skb: 29 callbacks suppressed [ 522.595912][ T32] audit: type=1800 audit(1792974167.450:9857): pid=5009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300183 res=0 errno=-22 [ 522.604426][ T32] audit: type=1800 audit(1792974167.460:9858): pid=5009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300198 res=0 errno=-22 [ 522.810733][ T32] audit: type=1800 audit(1792974167.660:9859): pid=15179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2376" name="file2" dev="tmpfs" ino=851 res=0 errno=-22 [ 522.866742][ T32] audit: type=1800 audit(1792974167.720:9860): pid=15181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2377" name="msi_bus" dev="sysfs" ino=2737 res=0 errno=-22 [ 522.866910][T15181] FAULT_INJECTION: forcing a failure. [ 522.866910][T15181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.866930][T15181] CPU: 1 UID: 0 PID: 15181 Comm: syz.0.2377 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.866945][T15181] Tainted: [L]=SOFTLOCKUP [ 522.866948][T15181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 522.866955][T15181] Call Trace: [ 522.866960][T15181] [ 522.866965][T15181] dump_stack_lvl+0xe8/0x150 [ 522.866985][T15181] should_fail_ex+0x3eb/0x540 [ 522.867003][T15181] _copy_to_user+0x31/0xb0 [ 522.867020][T15181] simple_read_from_buffer+0xe1/0x170 [ 522.867035][T15181] proc_fail_nth_read+0x1bb/0x230 [ 522.867052][T15181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 522.867069][T15181] ? rw_verify_area+0x24a/0x4c0 [ 522.867082][T15181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 522.867096][T15181] vfs_read+0x213/0xa80 [ 522.867111][T15181] ? __pfx___mutex_lock+0x10/0x10 [ 522.867125][T15181] ? __pfx_vfs_read+0x10/0x10 [ 522.867138][T15181] ? __fget_files+0x2a/0x420 [ 522.867149][T15181] ? __fget_files+0x3a2/0x420 [ 522.867159][T15181] ? __fget_files+0x2a/0x420 [ 522.867172][T15181] ? fdget+0x1ac/0x250 [ 522.867187][T15181] ksys_read+0x150/0x270 [ 522.867200][T15181] ? __pfx_ksys_read+0x10/0x10 [ 522.867217][T15181] do_syscall_64+0x166/0x520 [ 522.867230][T15181] ? trace_irq_disable+0x3b/0x140 [ 522.867243][T15181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.867254][T15181] ? clear_bhb_loop+0x70/0xc0 [ 522.867266][T15181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.867277][T15181] RIP: 0033:0x7f066475fd8e [ 522.867287][T15181] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 522.867296][T15181] RSP: 002b:00007f0665629fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 522.867308][T15181] RAX: ffffffffffffffda RBX: 00007f066562a6c0 RCX: 00007f066475fd8e [ 522.867316][T15181] RDX: 000000000000000f RSI: 00007f066562a0a0 RDI: 0000000000000003 [ 522.867323][T15181] RBP: 00007f066562a090 R08: 0000000000000000 R09: 0000000000000000 [ 522.867329][T15181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 522.867336][T15181] R13: 00007f0664a26038 R14: 00007f0664a25fa0 R15: 00007ffc33166a78 [ 522.867353][T15181] [ 524.009764][T15185] input: syz1 as /devices/virtual/input/input48 [ 524.022326][ T32] audit: type=1800 audit(1792974168.870:9861): pid=5009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300221 res=0 errno=-22 [ 524.143370][T14152] wlan1: Trigger new scan to find an IBSS to join [ 524.378452][ T10] usb 9-1: USB disconnect, device number 20 [ 524.463807][T12679] nintendo 0005:057E:2017.0017: Failed to get joycon info; ret=-110 [ 524.463833][T12679] nintendo 0005:057E:2017.0017: Failed to retrieve controller info; ret=-110 [ 524.463949][T12679] nintendo 0005:057E:2017.0017: Failed to initialize controller; ret=-110 [ 524.487613][T12679] nintendo 0005:057E:2017.0017: probe - fail = -110 [ 524.487763][T12679] nintendo 0005:057E:2017.0017: probe with driver nintendo failed with error -110 [ 524.772052][ T10] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 524.772062][ T31] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 524.922798][ T31] usb 7-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 524.924005][ T31] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.924057][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.925675][ T31] usb 7-1: config 0 descriptor?? [ 524.927565][ T32] audit: type=1800 audit(1792974169.780:9862): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300296 res=0 errno=-22 [ 524.929769][ T32] audit: type=1800 audit(1792974169.780:9863): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=300325 res=0 errno=-22 [ 524.930820][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 524.930965][ T32] audit: type=1800 audit(1792974169.780:9864): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=300303 res=0 errno=-22 [ 524.931890][ T32] audit: type=1800 audit(1792974169.780:9865): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=300304 res=0 errno=-22 [ 524.942326][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 524.942442][ T32] audit: type=1800 audit(1792974169.790:9866): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=300305 res=0 errno=-22 [ 524.945513][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 524.945564][ T10] usb 9-1: New USB device found: idVendor=1235, idProduct=0018, bcdDevice=0.40 [ 524.949057][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.949082][ T10] usb 9-1: Product: syz [ 524.949096][ T10] usb 9-1: Manufacturer: syz [ 524.949109][ T10] usb 9-1: SerialNumber: syz [ 525.170846][ T10] usb 9-1: selecting invalid altsetting 1 [ 525.209038][ T10] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 525.212465][ T10] usb 9-1: USB disconnect, device number 21 [ 525.236522][ T8630] udevd[8630]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.332683][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 525.333219][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 525.536271][T15195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.537004][ T31] pwc: recv_control_msg error -32 req 04 val 1000 [ 525.537577][ T31] pwc: recv_control_msg error -32 req 04 val 1300 [ 525.538215][ T31] pwc: recv_control_msg error -32 req 04 val 1400 [ 525.538734][ T31] pwc: recv_control_msg error -32 req 02 val 2000 [ 525.539932][T15195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.540374][T15195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.704624][T15197] FAULT_INJECTION: forcing a failure. [ 525.704624][T15197] name failslab, interval 1, probability 0, space 0, times 0 [ 525.704646][T15197] CPU: 1 UID: 0 PID: 15197 Comm: syz.8.2383 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.704661][T15197] Tainted: [L]=SOFTLOCKUP [ 525.704666][T15197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 525.704672][T15197] Call Trace: [ 525.704677][T15197] [ 525.704682][T15197] dump_stack_lvl+0xe8/0x150 [ 525.704705][T15197] should_fail_ex+0x3eb/0x540 [ 525.704723][T15197] should_failslab+0xa8/0x100 [ 525.704737][T15197] ? security_file_alloc+0x34/0x310 [ 525.704757][T15197] kmem_cache_alloc_noprof+0x9c/0x600 [ 525.704768][T15197] ? rcu_is_watching+0x16/0xb0 [ 525.704782][T15197] ? security_file_alloc+0x34/0x310 [ 525.704796][T15197] security_file_alloc+0x34/0x310 [ 525.704808][T15197] init_file+0x90/0x2b0 [ 525.704825][T15197] alloc_empty_file+0x74/0x1d0 [ 525.704840][T15197] path_openat+0x96/0x20f0 [ 525.704864][T15197] do_file_open+0x23e/0x4a0 [ 525.704879][T15197] ? __pfx_do_file_open+0x10/0x10 [ 525.704903][T15197] ? _raw_spin_unlock+0x28/0x50 [ 525.704914][T15197] ? alloc_fd+0x6af/0x760 [ 525.704930][T15197] do_sys_openat2+0x115/0x200 [ 525.704947][T15197] ? __pfx_do_sys_openat2+0x10/0x10 [ 525.704962][T15197] ? ksys_write+0x242/0x270 [ 525.704975][T15197] ? __pfx_ksys_write+0x10/0x10 [ 525.704989][T15197] __x64_sys_openat+0x138/0x170 [ 525.705001][T15197] do_syscall_64+0x166/0x520 [ 525.705013][T15197] ? trace_irq_disable+0x3b/0x140 [ 525.705025][T15197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.705040][T15197] ? clear_bhb_loop+0x70/0xc0 [ 525.705053][T15197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.705063][T15197] RIP: 0033:0x7fa5d039f559 [ 525.705074][T15197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.705083][T15197] RSP: 002b:00007fa5d128b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 525.705095][T15197] RAX: ffffffffffffffda RBX: 00007fa5d0625fa0 RCX: 00007fa5d039f559 [ 525.705106][T15197] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 525.705114][T15197] RBP: 00007fa5d128b090 R08: 0000000000000000 R09: 0000000000000000 [ 525.705120][T15197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.705126][T15197] R13: 00007fa5d0626038 R14: 00007fa5d0625fa0 R15: 00007ffd18f5f168 [ 525.705143][T15197] [ 525.760722][ T31] pwc: recv_control_msg error -71 req 04 val 1500 [ 525.764794][ T31] pwc: recv_control_msg error -71 req 02 val 2500 [ 525.766785][ T31] pwc: recv_control_msg error -71 req 02 val 2400 [ 525.770796][ T31] pwc: recv_control_msg error -71 req 02 val 2600 [ 525.772798][ T31] pwc: recv_control_msg error -71 req 02 val 2900 [ 525.774835][ T31] pwc: recv_control_msg error -71 req 02 val 2800 [ 525.776132][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 525.777834][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 525.782388][ T31] pwc: Registered as video103. [ 525.788289][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input49 [ 525.809860][ T31] usb 7-1: USB disconnect, device number 73 [ 525.960120][T15200] netlink: 'syz.8.2384': attribute type 1 has an invalid length. [ 525.960142][T15200] netlink: 244 bytes leftover after parsing attributes in process `syz.8.2384'. [ 526.180102][T15206] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2386'. [ 526.355030][T15213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.499834][T15215] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 526.499944][T15215] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 526.524877][T15215] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 526.524991][T15215] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 526.569156][T15215] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 526.582734][T15215] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 526.582869][T15215] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 526.712329][T15219] [ 526.714702][T15219] ====================================================== [ 526.721723][T15219] WARNING: possible circular locking dependency detected [ 526.728791][T15219] syzkaller #0 Tainted: G L [ 526.734866][T15219] ------------------------------------------------------ [ 526.741902][T15219] syz.6.2391/15219 is trying to acquire lock: [ 526.747973][T15219] ffff888079839938 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x75d/0xf10 [ 526.757902][T15219] [ 526.757902][T15219] but task is already holding lock: [ 526.765275][T15219] ffff88806781d880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 526.774604][T15219] [ 526.774604][T15219] which lock already depends on the new lock. [ 526.774604][T15219] [ 526.785016][T15219] [ 526.785016][T15219] the existing dependency chain (in reverse order) is: [ 526.794038][T15219] [ 526.794038][T15219] -> #5 (&of->mutex){+.+.}-{4:4}: [ 526.801361][T15219] __mutex_lock+0x197/0x15a0 [ 526.806495][T15219] kernfs_seq_start+0x5d/0x420 [ 526.811800][T15219] seq_read_iter+0x37e/0xca0 [ 526.816936][T15219] __kernel_read+0x4ca/0x960 [ 526.822062][T15219] integrity_kernel_read+0x89/0xd0 [ 526.827708][T15219] ima_calc_file_hash+0x451/0x890 [ 526.833274][T15219] ima_collect_measurement+0x51b/0xa00 [ 526.839319][T15219] process_measurement+0x1272/0x1c10 [ 526.845141][T15219] ima_file_check+0xdc/0x130 [ 526.850269][T15219] security_file_post_open+0xb3/0x260 [ 526.856176][T15219] path_openat+0x1748/0x20f0 [ 526.861295][T15219] do_file_open+0x23e/0x4a0 [ 526.866337][T15219] do_sys_openat2+0x115/0x200 [ 526.871550][T15219] __x64_sys_openat+0x138/0x170 [ 526.876937][T15219] do_syscall_64+0x166/0x520 [ 526.882066][T15219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.888501][T15219] [ 526.888501][T15219] -> #4 (&p->lock){+.+.}-{4:4}: [ 526.895559][T15219] __mutex_lock+0x197/0x15a0 [ 526.900691][T15219] seq_read_iter+0xa4/0xca0 [ 526.905736][T15219] __kernel_read+0x4ca/0x960 [ 526.910865][T15219] integrity_kernel_read+0x89/0xd0 [ 526.916563][T15219] ima_calc_file_hash+0x451/0x890 [ 526.922147][T15219] ima_collect_measurement+0x51b/0xa00 [ 526.928136][T15219] process_measurement+0x1272/0x1c10 [ 526.933948][T15219] ima_file_check+0xdc/0x130 [ 526.939063][T15219] security_file_post_open+0xb3/0x260 [ 526.944971][T15219] path_openat+0x1748/0x20f0 [ 526.950094][T15219] do_file_open+0x23e/0x4a0 [ 526.955164][T15219] do_sys_openat2+0x115/0x200 [ 526.960411][T15219] __x64_sys_openat+0x138/0x170 [ 526.965794][T15219] do_syscall_64+0x166/0x520 [ 526.970925][T15219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.977406][T15219] [ 526.977406][T15219] -> #3 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 526.986023][T15219] __mutex_lock+0x197/0x15a0 [ 526.991148][T15219] process_measurement+0x7d0/0x1c10 [ 526.996894][T15219] ima_file_check+0xdc/0x130 [ 527.002015][T15219] security_file_post_open+0xb3/0x260 [ 527.007929][T15219] path_openat+0x1748/0x20f0 [ 527.013051][T15219] do_file_open+0x23e/0x4a0 [ 527.018076][T15219] filp_open+0x16d/0x1d0 [ 527.022835][T15219] kernel_read_file_from_path_initns+0xde/0x1e0 [ 527.029594][T15219] _request_firmware+0xa2b/0x1750 [ 527.035265][T15219] request_firmware+0x36/0x50 [ 527.040453][T15219] reg_reload_regdb+0x94/0x580 [ 527.045872][T15219] genl_family_rcv_msg_doit+0x233/0x340 [ 527.051938][T15219] genl_rcv_msg+0x614/0x7a0 [ 527.056955][T15219] netlink_rcv_skb+0x226/0x4a0 [ 527.062240][T15219] genl_rcv+0x28/0x40 [ 527.066734][T15219] netlink_unicast+0x8ef/0xa80 [ 527.072011][T15219] netlink_sendmsg+0x7f0/0xb20 [ 527.077325][T15219] sock_sendmsg_nosec+0x14e/0x190 [ 527.082863][T15219] ____sys_sendmsg+0x54e/0x850 [ 527.088139][T15219] ___sys_sendmsg+0x2a5/0x360 [ 527.093333][T15219] __x64_sys_sendmsg+0x1b1/0x290 [ 527.098785][T15219] do_syscall_64+0x166/0x520 [ 527.103891][T15219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.110291][T15219] [ 527.110291][T15219] -> #2 (cb_lock){++++}-{4:4}: [ 527.117232][T15219] down_read+0x45/0x320 [ 527.121907][T15219] genl_rcv+0x19/0x40 [ 527.126400][T15219] netlink_unicast+0x8ef/0xa80 [ 527.131681][T15219] netlink_sendmsg+0x7f0/0xb20 [ 527.136960][T15219] sock_sendmsg_nosec+0x14e/0x190 [ 527.142506][T15219] sock_sendmsg+0x1ca/0x2d0 [ 527.147521][T15219] splice_to_socket+0xc4d/0x1460 [ 527.152972][T15219] do_splice+0xf9e/0x19f0 [ 527.157815][T15219] __se_sys_splice+0x353/0x490 [ 527.163090][T15219] do_syscall_64+0x166/0x520 [ 527.168195][T15219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.174601][T15219] [ 527.174601][T15219] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 527.181974][T15219] __mutex_lock+0x197/0x15a0 [ 527.187081][T15219] anon_pipe_write+0x28f/0x1a90 [ 527.192462][T15219] __kernel_write_iter+0x44a/0x8f0 [ 527.198111][T15219] __kernel_write+0x106/0x170 [ 527.203400][T15219] autofs_notify_daemon+0x770/0xf10 [ 527.209133][T15219] autofs_wait+0x11aa/0x18a0 [ 527.214242][T15219] autofs_mount_wait+0x16b/0x390 [ 527.219712][T15219] autofs_d_automount+0x64e/0x810 [ 527.225266][T15219] __traverse_mounts+0x2fe/0x5d0 [ 527.230724][T15219] step_into_slowpath+0x4ba/0x820 [ 527.236261][T15219] path_lookupat+0x433/0x8c0 [ 527.241376][T15219] filename_lookup+0x265/0x5d0 [ 527.246672][T15219] user_path_at+0x40/0x160 [ 527.251620][T15219] __x64_sys_umount+0xf6/0x170 [ 527.256913][T15219] do_syscall_64+0x166/0x520 [ 527.262041][T15219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.268463][T15219] [ 527.268463][T15219] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 527.276223][T15219] __lock_acquire+0x164c/0x2de0 [ 527.281589][T15219] lock_acquire+0x115/0x350 [ 527.286605][T15219] __mutex_lock+0x197/0x15a0 [ 527.291712][T15219] autofs_notify_daemon+0x75d/0xf10 [ 527.297431][T15219] autofs_wait+0x11aa/0x18a0 [ 527.302626][T15219] autofs_mount_wait+0x16b/0x390 [ 527.308082][T15219] autofs_d_automount+0x64e/0x810 [ 527.313626][T15219] __traverse_mounts+0x2fe/0x5d0 [ 527.320017][T15219] step_into_slowpath+0x4ba/0x820 [ 527.325574][T15219] path_lookupat+0x433/0x8c0 [ 527.330680][T15219] filename_lookup+0x265/0x5d0 [ 527.335953][T15219] kern_path+0x3d/0x150 [ 527.340622][T15219] lookup_bdev+0xc8/0x2b0 [ 527.345544][T15219] resume_store+0x181/0x500 [ 527.350563][T15219] kernfs_fop_write_iter+0x3a4/0x540 [ 527.356359][T15219] vfs_write+0x612/0xba0 [ 527.361111][T15219] ksys_write+0x150/0x270 [ 527.365956][T15219] do_syscall_64+0x166/0x520 [ 527.371101][T15219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.377508][T15219] [ 527.377508][T15219] other info that might help us debug this: [ 527.377508][T15219] [ 527.387723][T15219] Chain exists of: [ 527.387723][T15219] &sbi->pipe_mutex --> &p->lock --> &of->mutex [ 527.387723][T15219] [ 527.399823][T15219] Possible unsafe locking scenario: [ 527.399823][T15219] [ 527.407262][T15219] CPU0 CPU1 [ 527.412614][T15219] ---- ---- [ 527.417999][T15219] lock(&of->mutex); [ 527.421975][T15219] lock(&p->lock); [ 527.428294][T15219] lock(&of->mutex); [ 527.434785][T15219] lock(&sbi->pipe_mutex); [ 527.439277][T15219] [ 527.439277][T15219] *** DEADLOCK *** [ 527.439277][T15219] [ 527.447408][T15219] locks held by syz.6.2391/15219: 4, last CPU#1: [ 527.453734][T15219] #0: ffff888033a95eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 527.462813][T15219] #1: ffff888037868460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 527.471768][T15219] #2: ffff88806781d880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 527.481502][T15219] #3: ffff888020eaff08 (kn->active#72){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 527.491502][T15219] [ 527.491502][T15219] stack backtrace: [ 527.497386][T15219] CPU: 1 UID: 0 PID: 15219 Comm: syz.6.2391 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.508403][T15219] Tainted: [L]=SOFTLOCKUP [ 527.512716][T15219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 527.522762][T15219] Call Trace: [ 527.526032][T15219] [ 527.528961][T15219] dump_stack_lvl+0xe8/0x150 [ 527.533551][T15219] print_circular_bug+0x2e2/0x300 [ 527.538574][T15219] check_noncircular+0x12f/0x150 [ 527.543505][T15219] __lock_acquire+0x164c/0x2de0 [ 527.548354][T15219] lock_acquire+0x115/0x350 [ 527.552852][T15219] ? autofs_notify_daemon+0x75d/0xf10 [ 527.558223][T15219] __mutex_lock+0x197/0x15a0 [ 527.562803][T15219] ? autofs_notify_daemon+0x75d/0xf10 [ 527.568171][T15219] ? autofs_notify_daemon+0x70e/0xf10 [ 527.573552][T15219] ? autofs_notify_daemon+0x75d/0xf10 [ 527.579044][T15219] ? __pfx___mutex_lock+0x10/0x10 [ 527.584071][T15219] ? from_kgid_munged+0x20a/0x6b0 [ 527.589106][T15219] ? __pfx_from_kgid_munged+0x10/0x10 [ 527.594498][T15219] ? __kasan_kmalloc+0x93/0xb0 [ 527.599278][T15219] ? autofs_wait+0xd3f/0x18a0 [ 527.603995][T15219] ? autofs_mount_wait+0x16b/0x390 [ 527.609116][T15219] ? autofs_d_automount+0x64e/0x810 [ 527.614312][T15219] ? autofs_notify_daemon+0x52f/0xf10 [ 527.619715][T15219] autofs_notify_daemon+0x75d/0xf10 [ 527.624917][T15219] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 527.630648][T15219] ? __raw_spin_lock_init+0x45/0x100 [ 527.635936][T15219] ? autofs_wait+0xe17/0x18a0 [ 527.640613][T15219] autofs_wait+0x11aa/0x18a0 [ 527.645204][T15219] ? __pfx_autofs_wait+0x10/0x10 [ 527.650136][T15219] ? do_raw_spin_unlock+0xf5/0x200 [ 527.655244][T15219] autofs_mount_wait+0x16b/0x390 [ 527.660177][T15219] autofs_d_automount+0x64e/0x810 [ 527.665199][T15219] __traverse_mounts+0x2fe/0x5d0 [ 527.670140][T15219] step_into_slowpath+0x4ba/0x820 [ 527.675167][T15219] ? __pfx_step_into_slowpath+0x10/0x10 [ 527.680703][T15219] ? lookup_slow+0x64/0x80 [ 527.685111][T15219] path_lookupat+0x433/0x8c0 [ 527.689695][T15219] filename_lookup+0x265/0x5d0 [ 527.694449][T15219] ? __pfx_filename_lookup+0x10/0x10 [ 527.699732][T15219] ? do_getname_kernel+0x54/0x230 [ 527.704746][T15219] ? do_getname_kernel+0x97/0x230 [ 527.709759][T15219] ? __asan_memcpy+0x40/0x70 [ 527.714341][T15219] ? do_getname_kernel+0x183/0x230 [ 527.719454][T15219] kern_path+0x3d/0x150 [ 527.723603][T15219] lookup_bdev+0xc8/0x2b0 [ 527.727929][T15219] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 527.734509][T15219] ? resume_store+0x160/0x500 [ 527.739180][T15219] ? __pfx_lookup_bdev+0x10/0x10 [ 527.744116][T15219] ? __asan_memcpy+0x40/0x70 [ 527.748702][T15219] ? kstrndup+0xbd/0x160 [ 527.752936][T15219] resume_store+0x181/0x500 [ 527.757438][T15219] ? sysfs_file_kobj+0x1a/0x230 [ 527.762279][T15219] ? __pfx_resume_store+0x10/0x10 [ 527.767304][T15219] ? sysfs_file_kobj+0x1a/0x230 [ 527.772151][T15219] ? sysfs_file_kobj+0x1a/0x230 [ 527.776991][T15219] ? sysfs_file_kobj+0x1a/0x230 [ 527.781834][T15219] ? sysfs_file_kobj+0x1e4/0x230 [ 527.786767][T15219] ? sysfs_kf_write+0x166/0x260 [ 527.791611][T15219] ? __pfx_sysfs_kf_write+0x10/0x10 [ 527.796801][T15219] kernfs_fop_write_iter+0x3a4/0x540 [ 527.802080][T15219] vfs_write+0x612/0xba0 [ 527.806327][T15219] ? __pfx_vfs_write+0x10/0x10 [ 527.811081][T15219] ? __fget_files+0x3a2/0x420 [ 527.815747][T15219] ? __fget_files+0x2a/0x420 [ 527.820333][T15219] ? fdget+0x1ac/0x250 [ 527.824396][T15219] ksys_write+0x150/0x270 [ 527.828720][T15219] ? __pfx_ksys_write+0x10/0x10 [ 527.833601][T15219] do_syscall_64+0x166/0x520 [ 527.838186][T15219] ? trace_irq_disable+0x3b/0x140 [ 527.843205][T15219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.849372][T15219] ? clear_bhb_loop+0x70/0xc0 [ 527.854060][T15219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.859951][T15219] RIP: 0033:0x7fc36ed9f559 [ 527.864359][T15219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.883966][T15219] RSP: 002b:00007fc36fbb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 527.892381][T15219] RAX: ffffffffffffffda RBX: 00007fc36f025fa0 RCX: 00007fc36ed9f559 [ 527.900349][T15219] RDX: 0000000000000012 RSI: 00002000000001c0 RDI: 000000000000000a [ 527.908311][T15219] RBP: 00007fc36ee36b20 R08: 0000000000000000 R09: 0000000000000000 [ 527.916277][T15219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.924246][T15219] R13: 00007fc36f026038 R14: 00007fc36f025fa0 R15: 00007fff03514158 [ 527.932227][T15219] [ 527.939462][ T1110] wlan1: Trigger new scan to find an IBSS to join [ 528.197527][T15219] PM: Image not found (code -6) [ 528.462034][ T5641] Bluetooth: hci1: command 0x0406 tx timeout [ 528.542069][ T5641] Bluetooth: hci2: command 0x0c1a tx timeout [ 528.622096][ T5641] Bluetooth: hci3: command 0x0406 tx timeout [ 528.824178][ T1110] wlan1: Creating new IBSS network, BSSID 66:9c:4a:9b:30:91 [ 530.542074][ T5641] Bluetooth: hci1: command 0x0406 tx timeout [ 530.622029][ T5641] Bluetooth: hci2: command 0x0c1a tx timeout [ 530.702054][ T5641] Bluetooth: hci3: command 0x0406 tx timeout [ 532.702026][ T5641] Bluetooth: hci2: command 0x0c1a tx timeout