last executing test programs: 4m27.711808797s ago: executing program 0 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x282, 0x82) write(r0, &(0x7f0000000300)='27', 0x2) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_PBUF_RING(0x0, 0x0, 0x4, 0x40010, r0, 0x85e2dc41) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000001500)={@remote, 0x1000000}, 0x20) 4m27.661318375s ago: executing program 0 (id=132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x164, r1, 0x1, 0x0, 0xfffffffe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x110, 0x8, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0xc4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8}]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 4m27.615491556s ago: executing program 0 (id=133): r0 = socket$inet(0x2, 0x1, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}}}, {0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x110}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 4m26.744209245s ago: executing program 0 (id=141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x164, r1, 0x1, 0x0, 0xfffffffe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x110, 0x8, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0xc4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8}]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 4m26.535874297s ago: executing program 0 (id=142): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d7, 0x0) (async) write$eventfd(r1, &(0x7f0000000480)=0x3, 0x8) (async) r2 = socket$inet(0x2, 0x1, 0x0) (async) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(r2, 0x0, r3, 0x0, 0x7ffff000, 0x0) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0xe13, @remote, 0xfffffff7}}}, &(0x7f0000000280)=0x84) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/vrf/strict_mode\x00', 0x1, 0x0) write$tun(r4, &(0x7f0000000100)={@void, @void, @llc={@snap={0x155, 0x1fe, "85", "a71d7f", 0x8863}}}, 0x8) syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000680)=ANY=[@ANYBLOB="12010102000000081e040030400001020301090275000301050049080b0101010a20070904000000010120000924010000011500050c2403e90507080402ffff09090401"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) (async) syz_clone(0x900000, &(0x7f0000000300)="15faec3a28505e672f042dd6dd0b7a5e67fcd7e6d62b0c625723b511c4a8ed7f10376076cc06407afdaf7fa86ab6b3711acd70a205c88f4130bab3d10cd808535d6347f204e1e8da8b9c045f99906245a8ce1ad2e82da0481057f1650ff9baf10eb50b7050e88e942bbdec1d058f2156a020f330473b605d17042c7a39b189199b920ed94b2c138744fdc72f", 0x8c, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="06606290") (async, rerun: 64) r5 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0xfffffffffffffffd, 0x254381) (rerun: 64) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f0000000180)=0xffffffff) 4m23.220861901s ago: executing program 0 (id=150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x164, r1, 0x1, 0x0, 0xfffffffe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x110, 0x8, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0xc4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8}]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 4m8.148370989s ago: executing program 32 (id=150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x164, r1, 0x1, 0x0, 0xfffffffe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x110, 0x8, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0xc4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8}]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1m42.055520268s ago: executing program 2 (id=1126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x40000003, 0x0, 0x1}]}) r6 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) syz_open_dev$dvb_demux(&(0x7f0000000180), 0x0, 0x41) r7 = syz_open_dev$dvb_demux(&(0x7f00000001c0), 0x0, 0x2000) close(r7) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000000c0)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000300)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$I2C(&(0x7f00000003c0), 0x1, 0x2603) ioctl$I2C_RDWR(r10, 0x707, &(0x7f0000000400)={&(0x7f0000000440)=[{0xd0, 0x2ee6685ecfa0b807, 0x0, 0x0}], 0x1}) r11 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$x86(r11, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r12, &(0x7f0000000040)={0x0, &(0x7f0000000480)=[@code={0xa, 0x64, {"0f01dc660fc7b600400000c461fb70a5000000000c66baf80cb88824ef8eef66bafc0c66edc442652c76350f013866baf80cb84b9ee288ef66bafc0cecc4e1e1dadeb9800000c00f3235000800000f300fc737"}}], 0x64}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r13 = openat$md(0xffffffffffffff9c, &(0x7f0000000280)={'/dev/md', @named={'_syz', 0x0, '0'}}, 0x800, 0x0) ioctl$CLUSTERED_DISK_NACK(r13, 0x935, 0x0) 1m38.736653948s ago: executing program 2 (id=1141): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8040, 0x0) (async) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004010) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {r5}}, './bus\x00'}) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2800000, 0x0) (async, rerun: 32) chdir(&(0x7f00000000c0)='./file0\x00') (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000140)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) open(&(0x7f0000000280)='./bus\x00', 0x414302, 0x366f51e70c1e6269) (async) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001d00), 0x2e03, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200000000000000000408000a40"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) (async) ioctl$PTP_CLOCK_GETCAPS(r6, 0x43403d0e, &(0x7f0000000440)) 1m38.424670281s ago: executing program 2 (id=1144): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000cc0)="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", 0x559, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000001240), &(0x7f0000001280)={'enc=', 'pkcs1', ' hash=', {'sha512\x00'}}, 0x0, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x1}) capset(&(0x7f0000000640)={0x20080522}, &(0x7f0000000680)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev\x00', 0x10) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyUSB0\x00', 0x2, 0x40) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000700)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x8008, &(0x7f00000007c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) chown(&(0x7f0000000880)='./file0\x00', 0xee00, 0x0) capset(&(0x7f0000000380)={0x20071026}, &(0x7f00000003c0)={0x0, 0x0, 0x1, 0x0, 0x0, 0x6}) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000440)={0x0, 0x6, 0x3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000340)={@loopback, 0x9c940000, 0x0, 0x2, 0xe, 0x5, 0x102}, 0x20) r5 = add_key$user(&(0x7f0000000100), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)="dc1954fdd97de462fb568cb3873a2198ece2367936fefdf46e71a454575549d328a5abec6890efda36810f62fd5a47b15b65dcf40c455722ce4bb27c09b9c901464614f38f4a7e15d6b32815d5c3b3b4042bd295f522b3428052b7724e2eb38a16375b2abfb9989d45b2f5c7d63e4d74216538e9d01bb923f29d9296634d5f3c74e3572e6c4efe4e6578ceb6bea2a26fd13665b3272e03e044a06f7f83c22b62f8e644e45c005deabbbe819376f7559d8b5501e2d4b9b5261f3c9cf81d14d0aaed5e7b5bb4216cc5ec49476d201c90e5219169a361571ca53f79a17f19e8c3d804d04e4e65f6fb6743188e1fb7c7", 0xee, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000200)={r5, 0xfffffffffffffdf4, 0x32}, &(0x7f0000000140)={'enc=', 'oaep', ' hash=', {'sha256-neon\x00'}}, &(0x7f0000000600)="9a3f98f061ed7eff6720ff60ffffff02cb6fafbaf5", &(0x7f0000000480)=""/61) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r6, 0x0, 0x0, 0x80800) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, 0x1412, 0x1, 0x70bd2a, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8084) 1m35.811543805s ago: executing program 2 (id=1157): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @rand_addr=0x64018105, 0x4e20, 0x3, 'dh\x00', 0x30, 0x2, 0xc}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x84, @broadcast, 0x4f29, 0x3, 'wlc\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x2, 0x1, 0x1, 0x1}}, 0x44) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000580)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 1m34.676264121s ago: executing program 2 (id=1163): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='3', 0x1) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0xfbff, 0x0, 0x5, 0x3, r2}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r2, 0x4, 0x0, 0x8, 0x9}, &(0x7f0000000100)=0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m34.270821534s ago: executing program 2 (id=1164): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1004, 0x1) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1004, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2008800, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000000700)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000002740)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f0000004740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004800)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3f, 0x0) write$FUSE_INIT(r1, &(0x7f0000004840)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffe, 0x24414809, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x8, 0x4}}, 0x50) (async) write$FUSE_INIT(r1, &(0x7f0000004840)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffe, 0x24414809, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x8, 0x4}}, 0x50) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, &(0x7f00000048c0)=""/4072, 0xfe8, 0xe9) openat(0xffffffffffffff9c, &(0x7f00000058c0)='./file0\x00', 0xc0243, 0x13) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(r6, 0x0, r4, 0x0, &(0x7f0000000280)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@new_dev={0x1, 0x2e6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x14}}}, &(0x7f0000000340)=0x0) syz_ublk_setup_queues(r6, r7, 0x0, 0x0, 0x1, 0x0, 0x0) (async) syz_ublk_setup_queues(r6, r7, 0x0, 0x0, 0x1, 0x0, 0x0) rt_sigqueueinfo(0x0, 0xb, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000005900)={0x29, 0x4, 0x0, {0x1, 0x5874, 0x1, 0x0, [0x0]}}, 0x29) close(r1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f0000000140)) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f00000006c0)=0x3) (async) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f00000006c0)=0x3) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x7fff}]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1m19.257076092s ago: executing program 33 (id=1164): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1004, 0x1) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1004, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2008800, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000000700)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000002740)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f0000004740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004800)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3f, 0x0) write$FUSE_INIT(r1, &(0x7f0000004840)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffe, 0x24414809, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x8, 0x4}}, 0x50) (async) write$FUSE_INIT(r1, &(0x7f0000004840)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffe, 0x24414809, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x8, 0x4}}, 0x50) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, &(0x7f00000048c0)=""/4072, 0xfe8, 0xe9) openat(0xffffffffffffff9c, &(0x7f00000058c0)='./file0\x00', 0xc0243, 0x13) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(r6, 0x0, r4, 0x0, &(0x7f0000000280)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@new_dev={0x1, 0x2e6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x14}}}, &(0x7f0000000340)=0x0) syz_ublk_setup_queues(r6, r7, 0x0, 0x0, 0x1, 0x0, 0x0) (async) syz_ublk_setup_queues(r6, r7, 0x0, 0x0, 0x1, 0x0, 0x0) rt_sigqueueinfo(0x0, 0xb, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000005900)={0x29, 0x4, 0x0, {0x1, 0x5874, 0x1, 0x0, [0x0]}}, 0x29) close(r1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f0000000140)) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f00000006c0)=0x3) (async) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f00000006c0)=0x3) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x7fff}]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 22.048065886s ago: executing program 1 (id=1615): mkdirat(0xffffffffffffffff, &(0x7f00000004c0)='./trace\x00', 0x0) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000001a00)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001a40)={0x1c, &(0x7f0000001a80)={0x20, 0xa, 0x2, "9cf3"}, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./trace/set_event\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="737562d751f911e16c3a65f406a35b36743a6d6f643ab6b7d996e659c1f68f8eb892797a5f6d6fdd831aeb23efe29cc6b68749780e60f63b5ec07b8def4a1cdf2cddb34f3852c04f35fccbd69b488f6a6c440e4469ddf96ece04a18c72bd6f84923e6375d2fdf1569175d7a834591fa2c2e3b6f3df92cac830649c839cf4ecfb55", 0x81) r2 = syz_create_resource$futex(&(0x7f0000001840)=0x1) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000001900)={&(0x7f0000001940)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x4}, 0x3}}, 0x80, 0x0, 0x0, &(0x7f00000019c0)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x0) r4 = syz_create_resource$futex(&(0x7f0000001880)) futex(r2, 0xb, 0x1, 0x0, r4, 0x0) futex(r2, 0xb, 0x1, 0x0, r4, 0x1) futex(r2, 0xc, 0x1, &(0x7f00000018c0)={0x0, 0x3938700}, r4, 0x1) futex(r4, 0x7, 0x0, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f00000000c0)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x100000001}, [{0x8000000000000000, 0x4}, {0x9, 0x8000000000000001}, {0xb7, 0x6}, {0xffffffff, 0x3}, {0x2f4, 0x40}, {0x1002, 0x98e}, {0x1, 0x6}, {0x2, 0x2}, {0x7}, {0xc, 0xffffffff80000000}, {0x800000000000, 0x1c}, {0xffffffffffffffff, 0x4}, {0x9, 0x9}, {0xe8ac, 0x3aac00000000000}, {0x69b7, 0x5f}, {0x0, 0x5}, {0xa, 0x2}, {0x7fff}, {0x7, 0x4}, {0x803, 0x3}, {0x1ff, 0x100000001}, {0xa2e, 0xe}, {0x30fe, 0x1}, {0x8, 0x4}, {0x100, 0x2}, {0xfb9, 0x1}, {0x6, 0x8}, {0x1, 0xfffffffffffffffd}, {0x7, 0x5}, {0x2, 0xffffffffffff7fff}, {0x9, 0x9}, {0x59f, 0x5ff5}, {0x7fff, 0x7}, {0x8, 0x3}, {0xc1d, 0x4077d962}, {0x139b, 0x1089}, {0x5, 0x81}, {0x0, 0x3}, {0x8, 0xb}, {0x5, 0x1}, {0x4a82, 0xb}, {0x200, 0x405}, {0x1c508f63, 0x1a5b5e17}, {0xc}, {0xff, 0x7d71}, {0x8000000000000001}, {0x10, 0x6}, {0x7, 0x8}, {0x5, 0x200}, {0xfffffffffffffffb, 0x6}, {0x7f, 0x7fffffffffffffff}, {0x80000001, 0x9}, {0x70, 0x9}, {0x1, 0x9}, {0x3, 0x2}, {0x81, 0x5}, {0x5, 0x9}, {0x8, 0x101}, {0x3, 0x7}, {0x9, 0x3}, {0x180, 0x59f}, {0xffff, 0x2}, {0x5}, {0x7, 0x80000000}, {0x10, 0x7fffffff}, {0xeb29, 0x9}, {0x1, 0x6}, {0x76, 0xfffffffffffffffc}, {0x40, 0x6}, {0x100000000, 0x200}, {0x4, 0x8}, {0x0, 0xf}, {0xd9, 0x63da50e0}, {0x2, 0xa987}, {0xf, 0xf800000000000003}, {0x8, 0xf405}, {0x2, 0x4}, {0x0, 0x80000001}, {0x2, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x5, 0x7}, {0x2, 0x80000000}, {0x400000000000, 0xdb6}, {0x34c0}, {0x94, 0xfffffffffffffffa}, {0x0, 0xead5}, {0x7ff, 0x8001}, {0x5, 0x2}, {0xffffffffffff7fff}, {0xd, 0x1}, {0x0, 0x99}, {0xb9, 0x8001}, {0x7, 0x6de}, {0x2}, {0xfffffffffffffff7, 0x99b1}, {0x6, 0x4}, {0xda, 0x5}, {0x2, 0x8}, {0xd8, 0x4}, {0x8, 0xb6ea}, {0x4, 0xc27}, {0x2, 0x8000000000000000}, {0x3, 0x1}, {0x4, 0x6}, {0x2125, 0xffffffffffffff14}, {0x0, 0x7}, {0x0, 0x80}, {0x2, 0xfffffc0000000000}, {0x4e9a, 0x7}, {0x10001, 0x8}, {0x7fff, 0x200}, {0x5, 0x7}, {0x7, 0xfffffffffffffffd}, {0x100, 0x3}, {0x8, 0x5}, {0x3, 0x8000000000000000}, {0x4, 0x200}, {0x5, 0x5}, {0x2, 0x6}, {0x9, 0x9}, {0xa, 0x5}, {0x7, 0xd97}, {0xff, 0x5173}, {0x2}, {0x1, 0x81}, {0x6, 0x1ff}, {0x0, 0x6}, {0x9, 0x140000000000}, {0x26, 0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x3}, {0xb, 0x5}, {0x9, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x1e12, 0x5}, {0x5, 0x4}, {0x3, 0x6}, {0x6, 0x3}, {0x4002, 0xffffffff}, {0x1, 0x5}, {0x100000000, 0x3}, {0x90a6, 0x9}, {0x9, 0x107}, {0xf, 0x80000000}, {0x9, 0x101}, {0x9, 0x8003}, {0x0, 0x1}, {0x6, 0x40}, {0x2, 0x10001}, {0x7, 0x6}, {0x200}, {0x3, 0xffff}, {0x5, 0x793}, {0x6, 0x100000000}, {0x3, 0xda}, {0xb0, 0xffffffff}, {0x6, 0x2}, {0x6, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x5d, 0x8001}, {0x38, 0x5f3}, {0x4, 0x7}, {0xffffffff, 0x5a2}, {0x1, 0x200000000000002}, {0x8, 0x1}, {0xe9, 0xfffffffffffff7b6}, {0x8e, 0x1000}, {0x80000000, 0x8000000000000001}, {0xffffffff, 0xfda9}, {0xe5, 0xffffffffffffff41}, {0x24, 0x8}, {0x5, 0x4}, {0x187, 0xa2}, {0xd6, 0xffffffffffffffa3}, {0x1, 0xa807}, {0x3723, 0x6}, {0xfffffffffffff801, 0xa9}, {}, {0x2, 0xfffffffffffffffa}, {0x10001, 0xffffffff}, {0xfffffffffffff000, 0x3}, {0x3, 0xf9e}, {0x2321, 0x8}, {0x7ff}, {0x10001, 0xffffffff}, {0x5, 0x3}, {0x7ff, 0x9}, {0x4, 0x3e}, {0x3bd14045, 0x8001}, {0xff, 0x7}, {0x8, 0xffff}, {0x575, 0x2}, {0x3, 0x2}, {0x1, 0xe}, {0x5, 0xe}, {0xa, 0x9c}, {0x3ff, 0x8001}, {0x8, 0xffffffffffff0001}, {0x0, 0x7}, {0x3, 0x1}, {0xfffffffffffffffb, 0x4}, {0x7, 0x9}, {0x7, 0x7}, {0x3ff, 0x7}, {0xf, 0xe6a}, {0x8, 0x1}, {0x10000, 0x5}, {0x7, 0x6}, {0x1, 0xb5}, {0x7, 0xdd5}, {0xffff, 0x66e}, {0x0, 0x4}, {0x3, 0x30580c97}, {0x8001}, {0x6, 0x800}, {0xcaa, 0x800000100000005}, {0x9, 0x8}, {0x0, 0xb12}, {0x7, 0x8}, {0xfab, 0x6}, {0xbf1, 0x5}, {0xfffffffffffff801, 0x951}, {0x7, 0x101}, {0x7, 0x910000}, {0x2, 0x5b}, {0xa8, 0x8}, {0x619, 0x1}, {0x8, 0xfffffffffffff775}, {0x3, 0x23}, {0x1ff, 0x8}, {0x2000000000000, 0x90000000}, {0xfff, 0x1}, {0x40002, 0x868}, {0x2ef, 0x2}, {0x0, 0x8000000000000000}, {0x3, 0xfffffffffffffffc}, {0x1, 0x1}, {0x7, 0x7}, {0x57, 0x7}, {0x401, 0x9}, {0x5, 0x75}, {0x80000001, 0xc91}, {0x800, 0x7ff}, {0x777b, 0x9}, {0xb3, 0x8}, {0x80004, 0x1}, {0x7, 0x6}, {0xd5}, {0x3, 0x401}, {0x1, 0x2}, {0x2, 0xfffffffffffff27a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) sendmsg$nl_generic(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160016000a00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b551d77f9565b777f41282e", 0xd8}], 0x1}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100, 0x1}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x310, 0x7839, {}, {0x0}, 0x7, 0x2}) mount$binderfs(0x0, &(0x7f00000006c0)='./binderfs\x00', &(0x7f0000000700), 0x48020, &(0x7f0000001ac0)={[{@max={'max', 0x3d, 0xffffffff}}], [{@flag='async'}, {@uid_eq={'uid', 0x3d, r8}}, {@context={'context', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_gt={'fowner>', r8}}]}) 18.781876566s ago: executing program 1 (id=1638): r0 = syz_open_dev$I2C(&(0x7f0000000340), 0x1, 0x402) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x4001}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000001200)={'syzkaller0\x00', 0x1}) write$tun(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000400000000001000013"], 0x4a) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000ec0)={&(0x7f0000000f00)=@hci, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000fc0)=""/248, 0x101d0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r4, &(0x7f00000010c0)={0x0, 0x18, &(0x7f0000001100), 0x31}, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000380)={0x1, 0x84, 0x6, &(0x7f00000003c0)={0x1f, "8105d6c721100f00000000400000a8267d87000200"}}) r5 = syz_usb_connect$cdc_ecm(0x6, 0x6a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x6, 0x10, 0x9c, "", [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x6, 0x24, 0x6, 0x0, 0x0, "10"}, {0x5, 0x24, 0x0, 0x27f}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0xfff9, 0x3}, [@ncm={0x6, 0x24, 0x1a, 0x0, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0xf088170ad78851d6, 0x1}, @country_functional={0x8, 0x24, 0x7, 0x4, 0x3, [0x0]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x8, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x6, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xe1, 0x9, 0x3}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x40, 0x8, 0x3, 0x10, 0x7}, 0x9d, &(0x7f0000001100)=ANY=[@ANYBLOB="050f9d000614100402de9b921512d2d265cbe4ceecbbc6b1c4071002025f050003100b5f1003e6ddeed48dd2da104c5d665a0b82e7372c3c1935be799aec97cea0c5a365fe69715ceb4b70ade4650d13c19498dd7e59b207a2413d9dc5b580ff83a6edf137771181cc312f1fce0175893e13b7dac4e601bde126ff789cc4dfe04759979431235d9941cfdb872b55e1dc9b0710021000080014100407d591c1750c1bd8986a9df8c1d1947b40b3e4a924dbbfb8030782f7b789886c608f9c0440f6edee559c1c686afc0f347148ea92d54c06b7ca27be509d65938e589eeba44300c7ea55d43b4745d1a0af644675ca7b83732ff370b20d"], 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1c24}}, {0xa2, &(0x7f0000000240)=@string={0xa2, 0x3, "d01e9fbeea5588bc93d6daf358c11c75182f71891c69ddb5152d2264336ac205f4aa68c5467365a524be4a67a377c778966290c525e147492da898e203965547429ed1112370d1b06b5a8e1cc1a7e7838fc0d628d980c89ac63d4ee96a8499b79049915c97ea1d1111080349f74466e720c5139a165d67166ec57a0e039c2a54014ff53d659fb8a06feb3ca598220774d136f6a1827b090ae108e7e7c8f83423"}}, {0x22, &(0x7f0000000300)=@string={0x22, 0x3, "6fba96de8aa216e11a5a021a8095a35b7bb58ce6823cf551d29a824466e92a2f"}}, {0x77, &(0x7f0000000400)=@string={0x77, 0x3, "a4278509891540cf50913bf37bc58e8ad433140a9952b61e0a8b10013b434c3f987d4bfe7606c5f5a4ebaa3e6736884f898adce6eee95efa5d2e922aed24b484d2df419f5ae0b390ab0ba118fa9de84a016dee613dc86c0dfbaef985c4da019b3ce6edf05cbb3a2bcf78368b1b26934205931f181f"}}, {0xf8, &(0x7f0000000480)=@string={0xf8, 0x3, "d3da648012531429e1fd545f6e57af974bd4c9e22654898d9114f2a1c45ad53617bd8c10c3ee53952cdbf655b85c0203550ae0c4ee55fcada41e161cc9a931cbeeb2cf60c72168c5757cab6d912950956063007438cf209c46e737c9d828a17b973053ed38b4da403aa54a7e24725bd73cbb14ecdb8cade5e6b068690037f0ee0d677e6cc713f2418dbfdc88fed79b7a2562c41cf4e7596a488d8372fb712c1bc03e205988d8501f6d100642106438ea3bba30d03db9d67eab3425c25d0882d6caea22da2b156897e22170171246f83c2d091a554205901fe7e02e2f197d299cbbb98d89a49bbaf77275605f20fc764e552ca02c9a6c"}}]}) syz_usb_control_io(r5, &(0x7f00000008c0)={0x2c, &(0x7f0000000600)={0x20, 0x23, 0x95, {0x95, 0x3f, "3609be1e6ae2e75f67856cb4be397304a8a1d9f5ed780481b7900e6117be51ad6b1b51532a937abaf70cc18ee3413f945cb3d8b1a8114f105d587f41c2d86cee6671867046e93a7b2a62a8deb05cb76152bf09d3b5d37a188f240fcf18db02a5699853fe09ed9eb6e92fa8accfe757b602a87edbd3de81b8bb9bc278b353d8eb7063c763d4955645a7ed25a67a6f42631162c0"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}, &(0x7f0000000700)={0x0, 0xf, 0x110, {0x5, 0xf, 0x110, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x11, 0x9, 0x2, 0x5, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x5, 0xf800}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xc7, 0x1, 0x10001, 0xf000, 0x1ff, [0xc0c0]}, @generic={0xe3, 0x10, 0x4, "74336f4f035c06b5e4554dc9c23421cb3421fe2d65b4f789b5eb6ea7ecca9c428dc9e3f73678e66c980dd9102b5b635522136ec033ea04bc3a300db1b7ee997270b7c33054adc5cf77cc8f1d046c398693cf1edecfcdc20968a6f38679c72c1ade57b0495d4254069a42d4004b715601b34569d10846fd3ba3f734660953a203e8384f70d70032f5319d2cdeb6fece1bebd994654ff9503dd3f5fe51d3fd70d20c5a081183067714012929fdf64fb7b4669680f8922eeb5953256568bcf2e135d1d2442b785b1b6853f345286365b49c048ef9f809bd2b684eddff12be1f174e"}]}}, &(0x7f0000000840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x2, 0x1d, 0xa, "1060905a", "5e1aa837"}}, &(0x7f0000000880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x60, 0x64, 0xed, 0x0, 0x2, 0xfff}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="2010cf000000f5774ba053ebd4dfd9c6baec7c683ca49cdf9effd2b7c240a7c1814fbf90ad2fdf51fbd1c2a5ac8b3870f8d4bd46c78b1f3601e890857dc84a32019d87d5cfc0924e958e2eb396950ff94183b1584d4b004fb4a8cb2c0ef24faad6e11eea6d705c00d4bd675b867d3d999d3905ccca5563190d20ebd8727775f35b108df315caeb58d1aac5370f6b693ffed4650c6d110ec127e16f46ba2142350c8f4df072adfae16bcfddd5f70015f0b9946c50e5c15532d8103554359a27d9e77a8ec0e1c8ec3cc402cd4d3d54aad16e88d7a687"], &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000ac0)={0x20, 0x0, 0x8, {0x400, 0x8, [0x0]}}, &(0x7f0000000b00)={0x40, 0x7, 0x2, 0x9ff4}, &(0x7f0000000b40)={0x40, 0x9, 0x1}, &(0x7f0000000b80)={0x40, 0xb, 0x2, "fbba"}, &(0x7f0000000bc0)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000c00)={0x40, 0x13, 0x6}, &(0x7f0000000c40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "7502"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000d00)={0x40, 0x1c, 0x1}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0x9}}) 17.819470115s ago: executing program 1 (id=1644): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000240)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000280)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/135, 0x87}], 0x1) setsockopt(r1, 0x84, 0x7f, &(0x7f00000003c0)="020000000980ffff", 0x8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x4800) socket$inet6(0xa, 0x3, 0x400006) landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x3}, 0x10, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xd, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES8=r3], 0x158}}, 0x0) ioctl(r3, 0xc4c85513, &(0x7f0000000200)) 14.727918049s ago: executing program 1 (id=1660): mknod(&(0x7f0000000040)='./bus\x00', 0x8, 0x200008) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/i2c-dev/i2c-1/device/new_device\x00', 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './sys/class/i2c-dev/i2c-1/device/new_device\x00'}) lsetxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100), &(0x7f0000000300)=@v3={0x3000000, [{0x37, 0x9}, {0x9, 0x9e1}], r1}, 0x18, 0x1) mount(&(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x242008, 0x0) 14.48888519s ago: executing program 1 (id=1661): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0/control/processing/default/bmControls\x00', 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x3, 0x2, 0x0, 0x0, 0x0, 0x8080000}) write(r0, &(0x7f0000000380)="a13f88010230a20b00e7", 0xa) prctl$PR_PAC_RESET_KEYS(0x3c, 0x15) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000000140)=[{0x0, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r2, 0x8}}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_to_bond\x00', &(0x7f00000003c0)=@ethtool_rx_ntuple={0x35, {0xe, @sctp_ip4_spec={@remote, @private=0xa010100, 0x4e23, 0x4e20, 0x6}, @hdata="04498ddedbf4148c86e4d508c0e8d95ed1c0514edb6057bb3e0adfc4db2bcc42033cb59e1dcbf2eef9f97aab62b2cd1f4a6c084d2199b1a5ef66e9335535b891026a3ffec5b2da67", 0x3, 0x81, 0x7, 0x9, 0xfffffffffffffffe}}}) 14.402769887s ago: executing program 1 (id=1662): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x8) mount(0x0, &(0x7f0000000040)='./proc_mnt\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt/kcore\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0xfdef}], 0x1, 0xe1, 0x5) (fail_nth: 7) 6.588079309s ago: executing program 3 (id=1686): ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) pipe2$watch_queue(0x0, 0x80) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x12, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8041) socket$kcm(0x10, 0x2, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="010307003000140006006d831a4f00140600fe880000000000000000000000000001ff0200000000000000000000000000014e204e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='~Y'], 0x46) (fail_nth: 4) 6.510787375s ago: executing program 3 (id=1687): openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x145842, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, 0x0, &(0x7f0000000040)) mount$nfs(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f00000006c0)={[{'udp\x00'}]}) 6.393508059s ago: executing program 3 (id=1688): r0 = socket(0x2d, 0x2, 0x0) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x30998a267b0fbb2d}, 0x40400c0) syz_usb_connect(0x0, 0x24, &(0x7f0000005800)=ANY=[@ANYBLOB="030100004b41460860163d40a92a4d86408709021e0001000000000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracefs\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x2000000000000001, 0x1a400) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xfffffffffffffffd) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000004c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000780)=ANY=[@ANYBLOB="2f45010a27a6cd4e3e"], 0x1a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[0x60000000004, 0x2001000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0x5f, 0x68ff, 0x5, 0x7, 0x3, 0x2, 0xfffffffffffffffe], 0x25000, 0x4307}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$I2C(&(0x7f0000005840), 0xffffffffffffffff, 0x6603) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x40005) ioctl$SIOCX25CALLACCPTAPPRV(r8, 0x89e8) r9 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000100)=0x20) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0xa0) 3.259995134s ago: executing program 3 (id=1696): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000380)={0x1f, 0xffff, 0x2}, 0x6) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e"], 0x16) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x8}}}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x0, 0x10, 0x5, "1807fadd2f"}, 0x0, 0x0, 0x0, 0x0}) 2.966915071s ago: executing program 5 (id=1699): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f1814bffffffffffff807000000b800000000000000060005000d4530e9", 0x24) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x7, 0x8000001}) (async) setreuid(0xffffffffffffffff, 0xee01) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) (async) sendmsg$inet(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x3a, @local, 0x4e22, 0x3, 'ovf\x00', 0x4, 0x6, 0x69}, 0x2c) 2.789415643s ago: executing program 5 (id=1701): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000080)="5cba91a4", 0xffffffd9) capget(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000200)={0x4, 0xfffffff9, 0x4, 0x1, 0x6, 0xffff}) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0x9) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x4f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000810) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000140)=0x6) 2.559566639s ago: executing program 3 (id=1703): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) capset(&(0x7f0000000280)={0x20071026}, &(0x7f00000002c0)={0x0, 0x0, 0x9, 0x2000, 0x10001, 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000300), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="1c3513000000", 0x0, 0xfffffffd, 0x30520cf7f25f0c64, 0x2, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e000000200000000000000000000000000000000000000ed000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000004200010025bd700000000000030100000f0000004400010000112233445566778899aabb86dd2c00001c00053c000111000001f500010244132403b1fd606412c3258e3d67aa5b00010000000000000000001d2bffc1264d04000280040003"], 0x64}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x6, 0x8000, 0x282d, 0x7662, r5}, &(0x7f0000000180)=0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000200)=[{{&(0x7f0000000ac0)={0x2, 0x4e1f, @empty}, 0x10, 0x0}}, {{&(0x7f0000000b00)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="10000000000000000000000007000000580000000000000000000000070000008613ff"], 0x68}}], 0x2, 0x4000800) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/power/resume', 0x62002, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r8, &(0x7f00000007c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) r9 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) ioctl$XFS_IOC_FSGEOMETRY_V4(r9, 0x8070587c, &(0x7f0000000800)) write$cgroup_int(r7, &(0x7f0000000880)=0x900, 0x12) r10 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000c40)={'ip_vti0\x00', &(0x7f0000000b80)={'sit0\x00', 0x0, 0x80, 0x40, 0x3, 0x1, {{0x1d, 0x4, 0x2, 0x7, 0x74, 0x66, 0x0, 0x4, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @remote, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xdd, [@multicast1]}, @timestamp_addr={0x44, 0x14, 0x24, 0x1, 0xf, [{@loopback, 0xfffffff9}, {@empty, 0x3a92}]}, @end, @generic={0x82, 0x11, "e46c2fedab81603fde4c180b29ff99"}, @cipso={0x86, 0x1b, 0x3, [{0x6, 0x3, "f8"}, {0x6, 0x12, "9a4804ae8f0b55fc9a5d696b6b0103bd"}]}, @noop, @lsrr={0x83, 0x13, 0x64, [@empty, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000580)={'tunl0\x00', r11, 0x80, 0x40, 0xfd7044, 0x453a, {{0x1b, 0x4, 0x3, 0x3b, 0x6c, 0x66, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x14}, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x4, "a0c2"}, {0x7, 0x9, "ee552b94209e27"}, {0x0, 0x6, "fe2e2e13"}]}, @lsrr={0x83, 0xb, 0x58, [@multicast1, @private=0xa010101]}, @lsrr={0x83, 0x7, 0x77, [@private=0xa010102]}, @generic={0x83, 0x7, "8005e8b979"}, @timestamp={0x44, 0x8, 0x3a, 0x0, 0x5, [0x4]}, @ssrr={0x89, 0x1b, 0x60, [@broadcast, @empty, @rand_addr=0x64010102, @private=0xa010100, @private=0xa010100, @private=0xa010100]}]}}}}}) connect(r10, &(0x7f0000000680)=@can={0x1d, r12}, 0x80) 2.441827111s ago: executing program 4 (id=1704): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x401, 0x7, 0x4, 0x4, 0x800}) r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x46, 0x2}, 0x80, 0x0}, 0x20048840) sendmsg$sock(r1, &(0x7f0000000540)={&(0x7f0000000280)=@qipcrtr, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)="6c11cea1812efdc065f6dc830fa8fe2fce75ab669fff220b9fe967b90af7155a6f99bb8c4c07d3aa57c6ed38409b549a7310f8586cba6a7660eddfac99d6644eeb757f16716a07209612557a7288985df3ac7d7665dba7a5b20392c356229a60812313094d89d9110fc0f0763779f4950ce8eb6e3dfea6f33d9c99554c944c4b808b898fc08c80e7d0c0345722745c2d954fb99bdbdc049521221e1edfbf6bd7698c7f3505cd67ad98829391ed6966bad711e41914834a82733fc520331595df196545f202d6679e5c09090aed449af2", 0xd0}, {&(0x7f0000000400)="d0cafe46ec7eb45ff7c0b29752627b435484421e2e0e580f7f0be050701bfbc6b6893faa4579bf5a2732dacbd41756e97e5f719a3628d4133db14cbef4f68159c03b751f386deaf440664c31e92fbc1fc107707d55740e4133a00c6509dcf59a16d765b9df94da4551f138e062a1fd3802ba9bd24c0590846dda97b71583dd3f69a043af724961ec96e457dd3a7afdf32086c45ee795dab9cb08be88dc545d8e199e91d6cb1c4f5940004a882398ef5d2b01109d072b9746a1e04c98a60b960265fc2a877b9f509467c7cba6efcf2c098a0cfde05360eb2c855ac0cac81e0c4dcecd4eb3c8890c0d3a40ab726e1e6589a7d18297adc88f8ca7", 0xf9}], 0x2}, 0x1) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000005c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r4}, 0x14) sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x0, 0x2}, 0x80, 0x0}, 0x20040010) r5 = syz_open_procfs$namespace(r0, &(0x7f0000000240)='ns/user\x00') ioctl$NS_GET_PARENT(r5, 0x8004b707, 0x0) 1.868668121s ago: executing program 5 (id=1705): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xb0) keyctl$setperm(0x5, r0, 0x30925) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f00000014c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./debug\x00', &(0x7f0000001540)='debugfs\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0xf, 0x8041) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000040)={0x1, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./debug/lru_gen\x00', 0x2, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4004001) write(r3, &(0x7f00000015c0)='- 1 0 0', 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) 1.594439011s ago: executing program 3 (id=1706): mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc_mnt\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc_mnt/kcore\x00', 0x100, 0x0) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x1b5d) 1.53355731s ago: executing program 4 (id=1707): r0 = syz_open_dev$video(&(0x7f0000000000), 0xa7, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000100)={0x3, 0x203, "90623925bc8c27449176e5f9713bd8879980c06463ccd0c93a1c29f4b0f3de04", 0x10001, 0x6, 0x1, 0x1, 0x1000010c0}) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000040)={0x0, "2a123b084c1295533fd0a4bb9ad6ca7be3ced96f00000000000100", 0x0, 0xfffffffc, 0x1, 0xdf, 0xba994d21c8ea99c1, 0x2}) r2 = socket$inet(0x2, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000001c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000240), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2, 0x22b8, @loopback}, 0x10) 923.743998ms ago: executing program 5 (id=1708): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) fanotify_init(0x40, 0x40000) mount(&(0x7f0000000140)=@filename='ubi:0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='ubifs\x00', 0x0, 0x0) 786.518597ms ago: executing program 5 (id=1709): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x549d02, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) write(r0, &(0x7f0000000100)="d7b4487682cefe2907f0a3847f7fb04be126b3b459e342ab53f33e4881afb7d75c24e3d68a6b6159a0ac37dec33786112a0cc4fb81ca484bd593630580b5bb321590e37f09e2f7154602c074a93f6736ee251e8f1ab117bb08485fb1ec6431a7e627696fee975e175aaadaaeab8aad1dae1c942cb4a8eaf45fba209fd0b39b07544f22bc6a0cf247dba2a289d3dc7b000bd9608e5305b0ac7e644faf2e41bbc21d256a79bbd1c110d4c481bf5f90ed76f6512e", 0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x7e) 689.691209ms ago: executing program 4 (id=1710): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x24, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0xb}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffff2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x40040) 676.659216ms ago: executing program 5 (id=1711): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000240)={0x0, 0x20, 0x2, 0x20, 0x100000001}, 0x48) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000340), 0x1, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000380)={&(0x7f00000003c0)=[{0x2, 0x800, 0x0, 0x0}], 0x1}) (async) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000380)={&(0x7f00000003c0)=[{0x2, 0x800, 0x0, 0x0}], 0x1}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/bond0/bonding/mode\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='-', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) landlock_restrict_self(r0, 0x2) sendmmsg$unix(r3, &(0x7f0000000380), 0x800000000000082, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140ffffffff08000840000000e205000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140ffffffff08000840000000e205000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10040047}, 0x4000084) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 582.83171ms ago: executing program 4 (id=1712): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000900)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x5, 0x1, 0x0, 0x10}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000940)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x0, @local}, @in={0x2, 0x4e21, @empty}]}, &(0x7f0000000a40)=0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060008000000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000001240)={r1}, &(0x7f0000000f80)=0x8) 432.616094ms ago: executing program 4 (id=1713): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000280)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x84000, 0x0) unshare(0x22020600) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x80000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000005c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000600), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000380200000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x48844) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f00006d6f64653d303030303030303030303030303030307329222387303031303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000340)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f00000003c0)={&(0x7f0000000400), 0x10, 0x0}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40042, 0x1) setresuid(0x0, 0xee01, 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, 0x0) write$nci(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="50040405"], 0x7) 0s ago: executing program 4 (id=1714): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ppoll(&(0x7f00000004c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_clone(0x87001400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000580)=@assoc_value, &(0x7f00000005c0)=0x8) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x0, 0x81, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x80) kernel console output (not intermixed with test programs): ollect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=36663 res=0 errno=-22 [ 340.368317][ T33] audit: type=1800 audit(1793366624.057:117): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="removable" dev="sysfs" ino=36884 res=0 errno=-22 [ 340.416822][ T33] audit: type=1800 audit(1793366624.107:118): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15851 res=0 errno=-22 [ 340.525112][ T33] audit: type=1800 audit(1793366624.217:119): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15851 res=0 errno=-22 [ 340.596228][ T33] audit: type=1800 audit(1793366624.287:120): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=36661 res=0 errno=-22 [ 340.604565][ T33] audit: type=1800 audit(1793366624.297:121): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=36648 res=0 errno=-22 [ 340.637345][ T33] audit: type=1800 audit(1793366624.317:122): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=21715 res=0 errno=-22 [ 340.660504][T10499] FAULT_INJECTION: forcing a failure. [ 340.660504][T10499] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 340.660544][T10499] CPU: 1 UID: 0 PID: 10499 Comm: syz.4.1456 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.660582][T10499] Tainted: [L]=SOFTLOCKUP [ 340.660591][T10499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 340.660605][T10499] Call Trace: [ 340.660614][T10499] [ 340.660624][T10499] dump_stack_lvl+0xe8/0x150 [ 340.660663][T10499] should_fail_ex+0x3eb/0x540 [ 340.660707][T10499] prepare_alloc_pages+0x21e/0x5f0 [ 340.660742][T10499] __alloc_frozen_pages_noprof+0x17c/0x410 [ 340.660774][T10499] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 340.660811][T10499] ? policy_nodemask+0x31b/0x980 [ 340.660848][T10499] alloc_pages_mpol+0x21e/0x390 [ 340.660885][T10499] folio_alloc_mpol_noprof+0x39/0x160 [ 340.660921][T10499] migrate_pages_batch+0xb2c/0x5020 [ 340.660975][T10499] ? __pfx_queue_folios_pte_range+0x10/0x10 [ 340.661016][T10499] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 340.661042][T10499] ? __pfx_migrate_pages_batch+0x10/0x10 [ 340.661078][T10499] ? walk_pgd_range+0x1cab/0x1dc0 [ 340.661126][T10499] ? __lock_acquire+0x747/0x2de0 [ 340.661158][T10499] ? trace_pelt_se_tp+0x3b/0x150 [ 340.661199][T10499] ? update_se+0x90/0x1080 [ 340.661242][T10499] migrate_pages+0x1b95/0x2910 [ 340.661293][T10499] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 340.661325][T10499] ? __pfx_migrate_pages+0x10/0x10 [ 340.661371][T10499] ? wake_up_q+0x99/0xd0 [ 340.661428][T10499] __se_sys_mbind+0xe82/0x10e0 [ 340.661466][T10499] ? __pfx___se_sys_mbind+0x10/0x10 [ 340.661493][T10499] ? __fget_files+0x3a2/0x420 [ 340.661530][T10499] ? fput+0xa0/0xd0 [ 340.661558][T10499] ? ksys_write+0x242/0x270 [ 340.661590][T10499] ? __pfx_ksys_write+0x10/0x10 [ 340.661623][T10499] ? __x64_sys_mbind+0x21/0xf0 [ 340.661654][T10499] do_syscall_64+0x166/0x520 [ 340.661681][T10499] ? trace_irq_disable+0x3b/0x140 [ 340.661704][T10499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.661722][T10499] ? clear_bhb_loop+0x70/0xc0 [ 340.661744][T10499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.661761][T10499] RIP: 0033:0x7fcfadd9f559 [ 340.661779][T10499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.661795][T10499] RSP: 002b:00007fcfaebf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 340.661814][T10499] RAX: ffffffffffffffda RBX: 00007fcfae026090 RCX: 00007fcfadd9f559 [ 340.661827][T10499] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 340.661839][T10499] RBP: 00007fcfaebf7090 R08: 0000000000000000 R09: 0000000000000002 [ 340.661850][T10499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.661861][T10499] R13: 00007fcfae026128 R14: 00007fcfae026090 R15: 00007ffdc728cff8 [ 340.661888][T10499] [ 340.739640][ T5717] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 340.933419][ T5717] usb 2-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 340.947803][ T5717] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 340.947880][ T5717] usb 2-1: config 1 has no interface number 0 [ 340.985198][ T5717] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 340.985286][ T5717] usb 2-1: config 1 has no interface number 0 [ 341.016214][ T5717] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 341.016244][ T5717] usb 2-1: config 1 has no interface number 0 [ 341.035497][ T5717] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 341.035536][ T5717] usb 2-1: config 1 has no interface number 0 [ 341.067320][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.067354][ T5717] usb 2-1: Product: syz [ 341.067371][ T5717] usb 2-1: Manufacturer: syz [ 341.067388][ T5717] usb 2-1: SerialNumber: syz [ 341.122715][ T5717] usb 2-1: 3:0 : does not exist [ 341.122751][ T5717] usb 2-1: 3:0 : does not exist [ 341.306980][T10525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.312691][T10525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.394194][T10531] random: crng reseeded on system resumption [ 341.452979][T10534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.453449][T10534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.477532][T10533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.478030][T10533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.499515][ T5727] usb 2-1: USB disconnect, device number 11 [ 341.535630][T10539] FAULT_INJECTION: forcing a failure. [ 341.535630][T10539] name failslab, interval 1, probability 0, space 0, times 0 [ 341.535673][T10539] CPU: 1 UID: 0 PID: 10539 Comm: syz.4.1467 Tainted: G L syzkaller #0 PREEMPT(full) [ 341.535704][T10539] Tainted: [L]=SOFTLOCKUP [ 341.535713][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 341.535727][T10539] Call Trace: [ 341.535737][T10539] [ 341.535747][T10539] dump_stack_lvl+0xe8/0x150 [ 341.535785][T10539] should_fail_ex+0x3eb/0x540 [ 341.535822][T10539] ? perf_event_alloc+0x1d5/0x2e30 [ 341.535849][T10539] should_failslab+0xa8/0x100 [ 341.535886][T10539] ? perf_event_alloc+0x1d5/0x2e30 [ 341.535910][T10539] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 341.535933][T10539] ? lockdep_hardirqs_on+0x7b/0x110 [ 341.535966][T10539] ? perf_event_alloc+0x1d5/0x2e30 [ 341.535994][T10539] ? __lock_acquire+0x747/0x2de0 [ 341.536024][T10539] perf_event_alloc+0x1d5/0x2e30 [ 341.536054][T10539] ? __pfx_ptrace_triggered+0x10/0x10 [ 341.536082][T10539] ? __lock_acquire+0x747/0x2de0 [ 341.536118][T10539] ? lock_acquire+0x115/0x350 [ 341.536142][T10539] ? __pfx_perf_event_alloc+0x10/0x10 [ 341.536179][T10539] ? __srcu_check_read_flavor+0x13d/0x2e0 [ 341.536205][T10539] ? perf_event_create_kernel_counter+0xe0/0x630 [ 341.536234][T10539] ? __pfx_ptrace_triggered+0x10/0x10 [ 341.536257][T10539] perf_event_create_kernel_counter+0x11f/0x630 [ 341.536300][T10539] ptrace_set_debugreg+0x482/0xdc0 [ 341.536342][T10539] ? __pfx_ptrace_set_debugreg+0x10/0x10 [ 341.536384][T10539] ? __lock_acquire+0x747/0x2de0 [ 341.536412][T10539] ? __lock_acquire+0x747/0x2de0 [ 341.536444][T10539] ? kstrtoull+0x137/0x1d0 [ 341.536474][T10539] ? kstrtouint+0x6e/0xe0 [ 341.536505][T10539] ? do_raw_spin_lock+0x12b/0x2f0 [ 341.536542][T10539] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 341.536576][T10539] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 341.536630][T10539] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 341.536660][T10539] ? wait_task_inactive+0x42f/0x800 [ 341.536705][T10539] ? __pfx_wait_task_inactive+0x10/0x10 [ 341.536744][T10539] arch_ptrace+0x361/0x410 [ 341.536769][T10539] __se_sys_ptrace+0x150/0x3a0 [ 341.536805][T10539] ? __pfx___se_sys_ptrace+0x10/0x10 [ 341.536849][T10539] do_syscall_64+0x166/0x520 [ 341.536880][T10539] ? trace_irq_disable+0x3b/0x140 [ 341.536907][T10539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.536931][T10539] ? clear_bhb_loop+0x70/0xc0 [ 341.536959][T10539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.536982][T10539] RIP: 0033:0x7fcfadd9f559 [ 341.537004][T10539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.537023][T10539] RSP: 002b:00007fcfaec18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 341.537048][T10539] RAX: ffffffffffffffda RBX: 00007fcfae025fa0 RCX: 00007fcfadd9f559 [ 341.537065][T10539] RDX: 0000000000000358 RSI: 00000000000002be RDI: 0000000000000006 [ 341.537080][T10539] RBP: 00007fcfaec18090 R08: 0000000000000000 R09: 0000000000000000 [ 341.537095][T10539] R10: ffff8880a120f000 R11: 0000000000000246 R12: 0000000000000001 [ 341.537111][T10539] R13: 00007fcfae026038 R14: 00007fcfae025fa0 R15: 00007ffdc728cff8 [ 341.537148][T10539] [ 342.079872][T10545] FAULT_INJECTION: forcing a failure. [ 342.079872][T10545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.079911][T10545] CPU: 0 UID: 0 PID: 10545 Comm: syz.4.1470 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.079944][T10545] Tainted: [L]=SOFTLOCKUP [ 342.079952][T10545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 342.079967][T10545] Call Trace: [ 342.079977][T10545] [ 342.079987][T10545] dump_stack_lvl+0xe8/0x150 [ 342.080026][T10545] should_fail_ex+0x3eb/0x540 [ 342.080067][T10545] _copy_from_user+0x2d/0xb0 [ 342.080103][T10545] memdup_user+0x5e/0xd0 [ 342.080128][T10545] uinput_write+0x234/0xfd0 [ 342.080175][T10545] ? __pfx_uinput_write+0x10/0x10 [ 342.080213][T10545] ? bpf_lsm_file_permission+0x9/0x20 [ 342.080241][T10545] ? security_file_permission+0x75/0x260 [ 342.080269][T10545] ? rw_verify_area+0x203/0x4c0 [ 342.080300][T10545] ? __pfx_uinput_write+0x10/0x10 [ 342.080335][T10545] vfs_write+0x296/0xba0 [ 342.080373][T10545] ? __pfx_vfs_write+0x10/0x10 [ 342.080405][T10545] ? __fget_files+0x2a/0x420 [ 342.080435][T10545] ? __fget_files+0x3a2/0x420 [ 342.080459][T10545] ? __fget_files+0x2a/0x420 [ 342.080489][T10545] ? fdget+0x1ac/0x250 [ 342.080522][T10545] ksys_write+0x150/0x270 [ 342.080554][T10545] ? __pfx_ksys_write+0x10/0x10 [ 342.080596][T10545] do_syscall_64+0x166/0x520 [ 342.080628][T10545] ? trace_irq_disable+0x3b/0x140 [ 342.080657][T10545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.080682][T10545] ? clear_bhb_loop+0x70/0xc0 [ 342.080711][T10545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.080734][T10545] RIP: 0033:0x7fcfadd9f559 [ 342.080764][T10545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.080785][T10545] RSP: 002b:00007fcfaec18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 342.080810][T10545] RAX: ffffffffffffffda RBX: 00007fcfae025fa0 RCX: 00007fcfadd9f559 [ 342.080827][T10545] RDX: 000000000000045c RSI: 00002000000006c0 RDI: 0000000000000007 [ 342.080843][T10545] RBP: 00007fcfade36b20 R08: 0000000000000000 R09: 0000000000000000 [ 342.080858][T10545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.080872][T10545] R13: 00007fcfae026038 R14: 00007fcfae025fa0 R15: 00007ffdc728cff8 [ 342.080910][T10545] [ 342.428038][T10551] No control pipe specified [ 342.610981][T10565] FAULT_INJECTION: forcing a failure. [ 342.610981][T10565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.611020][T10565] CPU: 1 UID: 0 PID: 10565 Comm: syz.5.1479 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.611056][T10565] Tainted: [L]=SOFTLOCKUP [ 342.611065][T10565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 342.611080][T10565] Call Trace: [ 342.611089][T10565] [ 342.611099][T10565] dump_stack_lvl+0xe8/0x150 [ 342.611137][T10565] should_fail_ex+0x3eb/0x540 [ 342.611177][T10565] _copy_from_user+0x2d/0xb0 [ 342.611212][T10565] do_ipv6_setsockopt+0x245/0x2960 [ 342.611246][T10565] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 342.611269][T10565] ? aa_inet_opt_perm+0x94d/0xcd0 [ 342.611300][T10565] ? get_pid_task+0x20/0x1f0 [ 342.611330][T10565] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 342.611377][T10565] ? ksys_write+0x1e6/0x270 [ 342.611415][T10565] ? lock_acquire+0x115/0x350 [ 342.611450][T10565] ? aa_sock_opt_perm+0xe1/0x1e0 [ 342.611484][T10565] ipv6_setsockopt+0x59/0x170 [ 342.611508][T10565] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 342.611533][T10565] do_sock_setsockopt+0x17c/0x1b0 [ 342.611566][T10565] __x64_sys_setsockopt+0x13d/0x1b0 [ 342.611599][T10565] do_syscall_64+0x166/0x520 [ 342.611638][T10565] ? trace_irq_disable+0x3b/0x140 [ 342.611665][T10565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.611687][T10565] ? clear_bhb_loop+0x70/0xc0 [ 342.611714][T10565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.611736][T10565] RIP: 0033:0x7f7b2439f559 [ 342.611757][T10565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.611776][T10565] RSP: 002b:00007f7b252a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 342.611799][T10565] RAX: ffffffffffffffda RBX: 00007f7b24625fa0 RCX: 00007f7b2439f559 [ 342.611816][T10565] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 342.611830][T10565] RBP: 00007f7b252a0090 R08: 0000000000000020 R09: 0000000000000000 [ 342.611845][T10565] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 342.611858][T10565] R13: 00007f7b24626038 R14: 00007f7b24625fa0 R15: 00007ffead4cca48 [ 342.611901][T10565] [ 342.901226][T10568] CacheFiles: 'bind' command doesn't take an argument [ 343.146730][T10582] FAULT_INJECTION: forcing a failure. [ 343.146730][T10582] name failslab, interval 1, probability 0, space 0, times 0 [ 343.146777][T10582] CPU: 0 UID: 0 PID: 10582 Comm: syz.4.1486 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.146809][T10582] Tainted: [L]=SOFTLOCKUP [ 343.146818][T10582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 343.146833][T10582] Call Trace: [ 343.146842][T10582] [ 343.146852][T10582] dump_stack_lvl+0xe8/0x150 [ 343.146891][T10582] should_fail_ex+0x3eb/0x540 [ 343.146930][T10582] should_failslab+0xa8/0x100 [ 343.146964][T10582] __kmalloc_noprof+0xf9/0x710 [ 343.146987][T10582] ? rcu_is_watching+0x16/0xb0 [ 343.147018][T10582] ? tomoyo_realpath_from_path+0xf2/0x640 [ 343.147050][T10582] ? tomoyo_realpath_from_path+0xf2/0x640 [ 343.147092][T10582] tomoyo_realpath_from_path+0xf2/0x640 [ 343.147140][T10582] ? tomoyo_path_number_perm+0x219/0x5f0 [ 343.147168][T10582] tomoyo_path_number_perm+0x246/0x5f0 [ 343.147201][T10582] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 343.147228][T10582] ? __lock_acquire+0x747/0x2de0 [ 343.147296][T10582] ? __fget_files+0x2a/0x420 [ 343.147326][T10582] ? __fget_files+0x2a/0x420 [ 343.147352][T10582] ? __fget_files+0x2a/0x420 [ 343.147383][T10582] security_file_ioctl+0xc3/0x2a0 [ 343.147412][T10582] __se_sys_ioctl+0x47/0x170 [ 343.147448][T10582] do_syscall_64+0x166/0x520 [ 343.147479][T10582] ? trace_irq_disable+0x3b/0x140 [ 343.147507][T10582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.147531][T10582] ? clear_bhb_loop+0x70/0xc0 [ 343.147559][T10582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.147582][T10582] RIP: 0033:0x7fcfadd9f559 [ 343.147603][T10582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.147624][T10582] RSP: 002b:00007fcfaec18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 343.147648][T10582] RAX: ffffffffffffffda RBX: 00007fcfae025fa0 RCX: 00007fcfadd9f559 [ 343.147665][T10582] RDX: 0000200000000000 RSI: 0000000000008918 RDI: 0000000000000003 [ 343.147680][T10582] RBP: 00007fcfaec18090 R08: 0000000000000000 R09: 0000000000000000 [ 343.147695][T10582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.147710][T10582] R13: 00007fcfae026038 R14: 00007fcfae025fa0 R15: 00007ffdc728cff8 [ 343.147756][T10582] [ 343.147796][T10582] ERROR: Out of memory at tomoyo_realpath_from_path. [ 343.307289][ T10] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 343.468627][ T10] usb 6-1: device descriptor read/64, error -71 [ 343.500157][ T5717] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 343.652248][ T5717] usb 2-1: unable to get BOS descriptor or descriptor too short [ 343.652305][ T5717] usb 2-1: New USB device found: idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 343.653656][ T5717] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 343.653685][ T5717] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 343.653707][ T5717] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 343.653728][ T5717] usb 2-1: config 129 has no interface number 0 [ 343.653750][ T5717] usb 2-1: config 129 has no interface number 1 [ 343.653794][ T5717] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 343.653814][ T5717] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 343.653839][ T5717] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 343.653858][ T5717] usb 2-1: config 129 interface 135 has no altsetting 0 [ 343.653872][ T5717] usb 2-1: config 129 interface 5 has no altsetting 0 [ 343.657576][ T5717] usb 2-1: string descriptor 0 read error: -22 [ 343.657705][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.718317][ T10] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 343.797887][ T5717] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 343.797929][ T5717] usb 2-1: MIDIStreaming interface descriptor not found [ 343.870010][ T10] usb 6-1: device descriptor read/64, error -71 [ 343.948649][ T196] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 343.979270][ T10] usb usb6-port1: attempt power cycle [ 344.078255][T10596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.093697][T10596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.099889][ T196] usb 5-1: Using ep0 maxpacket: 8 [ 344.106505][ T196] usb 5-1: New USB device found: idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 344.135795][ T196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 344.135835][ T196] usb 5-1: Product: syz [ 344.135850][ T196] usb 5-1: Manufacturer: syz [ 344.135869][ T196] usb 5-1: SerialNumber: syz [ 344.164923][ T196] usb 5-1: config 0 descriptor?? [ 344.185685][ T196] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 344.318996][ T10] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 344.341945][ T10] usb 6-1: device descriptor read/8, error -71 [ 344.394598][T10589] AppArmor: change_hat: Invalid input '0' [ 344.395692][ T196] gspca_sn9c2028: read1 error 0 [ 344.580064][ T10] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 344.597714][ T196] gspca_sn9c2028: read1 error -71 [ 344.599464][ T196] gspca_sn9c2028: read1 error -71 [ 344.599806][ T196] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 344.604001][ T10] usb 6-1: device descriptor read/8, error -71 [ 344.629543][ T196] usb 5-1: USB disconnect, device number 62 [ 344.708955][ T10] usb usb6-port1: unable to enumerate USB device [ 344.792701][ T10] usb 2-1: USB disconnect, device number 12 [ 345.104050][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1491'. [ 345.189177][T10603] [U] №ЙM [ 345.344813][ T33] kauditd_printk_skb: 48 callbacks suppressed [ 345.344841][ T33] audit: type=1800 audit(1793366629.037:171): pid=10610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1495" name="match_busid" dev="sysfs" ino=41704 res=0 errno=-22 [ 345.363223][T10610] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.1495'. [ 345.363313][T10610] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.1495'. [ 345.433275][T10614] FAULT_INJECTION: forcing a failure. [ 345.433275][T10614] name failslab, interval 1, probability 0, space 0, times 0 [ 345.433316][T10614] CPU: 1 UID: 0 PID: 10614 Comm: syz.1.1497 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.433351][T10614] Tainted: [L]=SOFTLOCKUP [ 345.433360][T10614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 345.433375][T10614] Call Trace: [ 345.433384][T10614] [ 345.433395][T10614] dump_stack_lvl+0xe8/0x150 [ 345.433434][T10614] should_fail_ex+0x3eb/0x540 [ 345.433474][T10614] should_failslab+0xa8/0x100 [ 345.433504][T10614] ? vm_area_dup+0x32/0x8e0 [ 345.433538][T10614] kmem_cache_alloc_noprof+0x9c/0x600 [ 345.433564][T10614] ? vm_area_dup+0x32/0x8e0 [ 345.433602][T10614] vm_area_dup+0x32/0x8e0 [ 345.433648][T10614] __split_vma+0x2c2/0xa40 [ 345.433685][T10614] ? __pfx___split_vma+0x10/0x10 [ 345.433723][T10614] ? kasan_quarantine_put+0xbb/0x1f0 [ 345.433749][T10614] ? lockdep_hardirqs_on+0x7b/0x110 [ 345.433787][T10614] vms_gather_munmap_vmas+0x322/0x1370 [ 345.433835][T10614] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 345.433872][T10614] ? __pfx_process_measurement+0x10/0x10 [ 345.433910][T10614] do_vmi_align_munmap+0x2b4/0x4b0 [ 345.433960][T10614] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 345.434010][T10614] ? mas_walk+0x37e/0x490 [ 345.434043][T10614] ? mas_find+0x642/0xcb0 [ 345.434081][T10614] do_vmi_munmap+0x252/0x2d0 [ 345.434124][T10614] mremap_at+0x233/0xba0 [ 345.434156][T10614] ? mtree_load+0x12a/0x780 [ 345.434190][T10614] ? __pfx_mremap_at+0x10/0x10 [ 345.434222][T10614] ? check_prep_vma+0x72e/0xcb0 [ 345.434278][T10614] __se_sys_mremap+0xeed/0x1260 [ 345.434334][T10614] ? __pfx___se_sys_mremap+0x10/0x10 [ 345.434362][T10614] ? fdget+0x1ac/0x250 [ 345.434391][T10614] ? fput+0xa0/0xd0 [ 345.434413][T10614] ? ksys_write+0x242/0x270 [ 345.434443][T10614] ? __pfx_ksys_write+0x10/0x10 [ 345.434478][T10614] ? __x64_sys_mremap+0x20/0xc0 [ 345.434508][T10614] do_syscall_64+0x166/0x520 [ 345.434539][T10614] ? trace_irq_disable+0x3b/0x140 [ 345.434566][T10614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.434590][T10614] ? clear_bhb_loop+0x70/0xc0 [ 345.434618][T10614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.434642][T10614] RIP: 0033:0x7f7b89b9f559 [ 345.434663][T10614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.434684][T10614] RSP: 002b:00007f7b8aace028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 345.434709][T10614] RAX: ffffffffffffffda RBX: 00007f7b89e25fa0 RCX: 00007f7b89b9f559 [ 345.434726][T10614] RDX: 0000000000002000 RSI: 0000000000003000 RDI: 0000200000ff5000 [ 345.434741][T10614] RBP: 00007f7b8aace090 R08: 0000200000ff0000 R09: 0000000000000000 [ 345.434757][T10614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.434772][T10614] R13: 00007f7b89e26038 R14: 00007f7b89e25fa0 R15: 00007ffcf67406f8 [ 345.434808][T10614] [ 345.769464][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1498'. [ 345.791040][T10616] loop5: detected capacity change from 0 to 7 [ 345.794712][T10616] Dev loop5: unable to read RDB block 7 [ 345.794760][T10616] loop5: unable to read partition table [ 345.794792][ T33] audit: type=1800 audit(1793366629.487:172): pid=10618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1499" name="pm_test" dev="sysfs" ino=1415 res=0 errno=-22 [ 345.794994][T10616] loop5: partition table beyond EOD, truncated [ 345.795014][T10616] loop_reread_partitions: partition scan of loop5 (юиў«xь—џСа– ) failed (rc=-5) [ 345.796247][T10616] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1498'. [ 345.796836][ T33] audit: type=1800 audit(1793366629.487:173): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15605 res=0 errno=-22 [ 345.801027][T10616] ./bus: Can't lookup blockdev [ 345.823155][T10618] Invalid logical block size (1792) [ 346.080042][T10627] FAULT_INJECTION: forcing a failure. [ 346.080042][T10627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.080080][T10627] CPU: 1 UID: 0 PID: 10627 Comm: syz.5.1503 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.080112][T10627] Tainted: [L]=SOFTLOCKUP [ 346.080121][T10627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 346.080135][T10627] Call Trace: [ 346.080145][T10627] [ 346.080155][T10627] dump_stack_lvl+0xe8/0x150 [ 346.080194][T10627] should_fail_ex+0x3eb/0x540 [ 346.080232][T10627] _copy_from_user+0x2d/0xb0 [ 346.080268][T10627] do_ipv6_setsockopt+0x245/0x2960 [ 346.080301][T10627] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 346.080324][T10627] ? aa_inet_opt_perm+0x94d/0xcd0 [ 346.080356][T10627] ? get_pid_task+0x20/0x1f0 [ 346.080394][T10627] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 346.080444][T10627] ? ksys_write+0x1e6/0x270 [ 346.080482][T10627] ? lock_acquire+0x115/0x350 [ 346.080517][T10627] ? aa_sock_opt_perm+0xe1/0x1e0 [ 346.080553][T10627] ipv6_setsockopt+0x59/0x170 [ 346.080583][T10627] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 346.080696][T10627] do_sock_setsockopt+0x17c/0x1b0 [ 346.080785][T10627] __x64_sys_setsockopt+0x13d/0x1b0 [ 346.080822][T10627] do_syscall_64+0x166/0x520 [ 346.080854][T10627] ? trace_irq_disable+0x3b/0x140 [ 346.080881][T10627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.080905][T10627] ? clear_bhb_loop+0x70/0xc0 [ 346.080934][T10627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.080955][T10627] RIP: 0033:0x7f7b2439f559 [ 346.080977][T10627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.080996][T10627] RSP: 002b:00007f7b252a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 346.081020][T10627] RAX: ffffffffffffffda RBX: 00007f7b24625fa0 RCX: 00007f7b2439f559 [ 346.081037][T10627] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000003 [ 346.081051][T10627] RBP: 00007f7b252a0090 R08: 0000000000000090 R09: 0000000000000000 [ 346.081066][T10627] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 346.081079][T10627] R13: 00007f7b24626038 R14: 00007f7b24625fa0 R15: 00007ffead4cca48 [ 346.081112][T10627] [ 346.087506][T10623] kvm: emulating exchange as write [ 346.555420][T10641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.555977][T10641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.584338][T10639] [U] ђ [ 346.755680][T10647] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 346.857325][T10649] FAULT_INJECTION: forcing a failure. [ 346.857325][T10649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.857363][T10649] CPU: 0 UID: 0 PID: 10649 Comm: syz.4.1512 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.857394][T10649] Tainted: [L]=SOFTLOCKUP [ 346.857402][T10649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 346.857416][T10649] Call Trace: [ 346.857426][T10649] [ 346.857436][T10649] dump_stack_lvl+0xe8/0x150 [ 346.857474][T10649] should_fail_ex+0x3eb/0x540 [ 346.857514][T10649] _copy_from_user+0x2d/0xb0 [ 346.857550][T10649] do_ipv6_setsockopt+0x245/0x2960 [ 346.857583][T10649] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 346.857607][T10649] ? aa_inet_opt_perm+0x94d/0xcd0 [ 346.857638][T10649] ? get_pid_task+0x20/0x1f0 [ 346.857668][T10649] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 346.857715][T10649] ? ksys_write+0x1e6/0x270 [ 346.857752][T10649] ? lock_acquire+0x115/0x350 [ 346.857790][T10649] ? aa_sock_opt_perm+0xe1/0x1e0 [ 346.857825][T10649] ipv6_setsockopt+0x59/0x170 [ 346.857850][T10649] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 346.857877][T10649] do_sock_setsockopt+0x17c/0x1b0 [ 346.857918][T10649] __x64_sys_setsockopt+0x13d/0x1b0 [ 346.857953][T10649] do_syscall_64+0x166/0x520 [ 346.857985][T10649] ? trace_irq_disable+0x3b/0x140 [ 346.858012][T10649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.858036][T10649] ? clear_bhb_loop+0x70/0xc0 [ 346.858065][T10649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.858088][T10649] RIP: 0033:0x7fcfadd9f559 [ 346.858108][T10649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.858132][T10649] RSP: 002b:00007fcfaec18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 346.858157][T10649] RAX: ffffffffffffffda RBX: 00007fcfae025fa0 RCX: 00007fcfadd9f559 [ 346.858174][T10649] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 346.858188][T10649] RBP: 00007fcfaec18090 R08: 0000000000000020 R09: 0000000000000000 [ 346.858204][T10649] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 346.858219][T10649] R13: 00007fcfae026038 R14: 00007fcfae025fa0 R15: 00007ffdc728cff8 [ 346.858255][T10649] [ 347.217232][T10659] netlink: 41 bytes leftover after parsing attributes in process `syz.5.1515'. [ 347.217261][T10659] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1515'. [ 347.217283][T10659] netlink: 41 bytes leftover after parsing attributes in process `syz.5.1515'. [ 347.988710][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 348.008642][ T5820] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 348.011453][T10675] FAULT_INJECTION: forcing a failure. [ 348.011453][T10675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.011487][T10675] CPU: 1 UID: 0 PID: 10675 Comm: syz.3.1519 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.011517][T10675] Tainted: [L]=SOFTLOCKUP [ 348.011526][T10675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 348.011540][T10675] Call Trace: [ 348.011550][T10675] [ 348.011560][T10675] dump_stack_lvl+0xe8/0x150 [ 348.011599][T10675] should_fail_ex+0x3eb/0x540 [ 348.011646][T10675] _copy_to_user+0x31/0xb0 [ 348.011685][T10675] simple_read_from_buffer+0xe1/0x170 [ 348.011717][T10675] proc_fail_nth_read+0x1bb/0x230 [ 348.011756][T10675] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.011793][T10675] ? rw_verify_area+0x24a/0x4c0 [ 348.011823][T10675] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.011856][T10675] vfs_read+0x213/0xa80 [ 348.011890][T10675] ? __pfx___mutex_lock+0x10/0x10 [ 348.011924][T10675] ? __pfx_vfs_read+0x10/0x10 [ 348.011958][T10675] ? __fget_files+0x2a/0x420 [ 348.011983][T10675] ? __fget_files+0x3a2/0x420 [ 348.012007][T10675] ? __fget_files+0x2a/0x420 [ 348.012036][T10675] ? fdget+0x1ac/0x250 [ 348.012070][T10675] ksys_read+0x150/0x270 [ 348.012101][T10675] ? __pfx_ksys_read+0x10/0x10 [ 348.012142][T10675] do_syscall_64+0x166/0x520 [ 348.012174][T10675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.012199][T10675] ? clear_bhb_loop+0x70/0xc0 [ 348.012227][T10675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.012250][T10675] RIP: 0033:0x7f30fe15fd8e [ 348.012272][T10675] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 348.012292][T10675] RSP: 002b:00007f30ff0e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 348.012316][T10675] RAX: ffffffffffffffda RBX: 00007f30ff0e56c0 RCX: 00007f30fe15fd8e [ 348.012333][T10675] RDX: 000000000000000f RSI: 00007f30ff0e50a0 RDI: 0000000000000006 [ 348.012348][T10675] RBP: 00007f30ff0e5090 R08: 0000000000000000 R09: 0000000000000000 [ 348.012363][T10675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.012377][T10675] R13: 00007f30fe426038 R14: 00007f30fe425fa0 R15: 00007ffe696f0938 [ 348.012414][T10675] [ 348.140855][ T5820] usb 2-1: device descriptor read/64, error -71 [ 348.149980][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 348.197454][ T10] usb 6-1: New USB device found: idVendor=09e8, idProduct=0021, bcdDevice=0.40 [ 348.254032][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.254118][ T10] usb 6-1: Product: syz [ 348.254162][ T10] usb 6-1: Manufacturer: syz [ 348.254198][ T10] usb 6-1: SerialNumber: syz [ 348.304552][ T33] audit: type=1800 audit(1793366631.997:174): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204250 res=0 errno=-22 [ 348.331606][ T33] audit: type=1800 audit(1793366632.027:175): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=204282 res=0 errno=-22 [ 348.352743][ T33] audit: type=1800 audit(1793366632.047:176): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=204257 res=0 errno=-22 [ 348.376239][ T33] audit: type=1800 audit(1793366632.067:177): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=204258 res=0 errno=-22 [ 348.379586][ T5820] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 348.381176][T10678] FAULT_INJECTION: forcing a failure. [ 348.381176][T10678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.381326][T10678] CPU: 0 UID: 0 PID: 10678 Comm: syz.1.1520 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.381412][T10678] Tainted: [L]=SOFTLOCKUP [ 348.381440][T10678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 348.381474][T10678] Call Trace: [ 348.381497][T10678] [ 348.381527][T10678] dump_stack_lvl+0xe8/0x150 [ 348.381634][T10678] should_fail_ex+0x3eb/0x540 [ 348.381749][T10678] _copy_from_user+0x2d/0xb0 [ 348.381846][T10678] memdup_user+0x5e/0xd0 [ 348.381923][T10678] raw_ioctl+0x2136/0x41c0 [ 348.382145][T10678] ? tomoyo_path_number_perm+0x219/0x5f0 [ 348.382227][T10678] ? tomoyo_path_number_perm+0x219/0x5f0 [ 348.382305][T10678] ? do_vfs_ioctl+0x116f/0x1530 [ 348.382400][T10678] ? __pfx_raw_ioctl+0x10/0x10 [ 348.382538][T10678] ? irqentry_exit+0x2a0/0x9b0 [ 348.382615][T10678] ? lockdep_hardirqs_on+0x7b/0x110 [ 348.382692][T10678] ? irqentry_exit+0x2a0/0x9b0 [ 348.382777][T10678] ? trace_irq_disable+0x3b/0x140 [ 348.382898][T10678] ? tomoyo_path_number_perm+0x590/0x5f0 [ 348.382960][T10678] ? bpf_lsm_file_ioctl+0x9/0x20 [ 348.383029][T10678] ? __pfx_raw_ioctl+0x10/0x10 [ 348.383115][T10678] __se_sys_ioctl+0xfc/0x170 [ 348.383207][T10678] do_syscall_64+0x166/0x520 [ 348.383285][T10678] ? trace_irq_disable+0x3b/0x140 [ 348.383373][T10678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.383437][T10678] ? clear_bhb_loop+0x70/0xc0 [ 348.383510][T10678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.383566][T10678] RIP: 0033:0x7f7b89b9f1eb [ 348.383627][T10678] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 348.383680][T10678] RSP: 002b:00007f7b8aacbf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.383781][T10678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f7b89b9f1eb [ 348.383824][T10678] RDX: 00007f7b8aacbfc0 RSI: 0000000040085503 RDI: 0000000000000004 [ 348.383866][T10678] RBP: 00007f7b8aaccfd0 R08: 0000000000000040 R09: 00007f7b8aacbfc8 [ 348.383909][T10678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 348.383944][T10678] R13: 0000000800000000 R14: 0000000000000012 R15: 00007f7b89c55a91 [ 348.384037][T10678] [ 348.690464][ T10] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 348.690763][ T10] usb 6-1: MIDIStreaming interface descriptor not found [ 348.835848][ T33] audit: type=1800 audit(1793366632.527:178): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=204279 res=0 errno=-22 [ 348.837076][ T33] audit: type=1800 audit(1793366632.527:179): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=204280 res=0 errno=-22 [ 348.846954][ T10] usb 6-1: USB disconnect, device number 14 [ 348.886887][ T33] audit: type=1800 audit(1793366632.577:180): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=204259 res=0 errno=-22 [ 349.095233][ T5642] udevd[5642]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.266923][T10706] batadv_slave_1: entered allmulticast mode [ 349.286814][T10706] syzkaller1: entered promiscuous mode [ 349.286841][T10706] syzkaller1: entered allmulticast mode [ 349.347128][T10708] FAULT_INJECTION: forcing a failure. [ 349.347128][T10708] name failslab, interval 1, probability 0, space 0, times 0 [ 349.347154][T10708] CPU: 0 UID: 0 PID: 10708 Comm: syz.5.1529 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.347175][T10708] Tainted: [L]=SOFTLOCKUP [ 349.347181][T10708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 349.347191][T10708] Call Trace: [ 349.347198][T10708] [ 349.347205][T10708] dump_stack_lvl+0xe8/0x150 [ 349.347234][T10708] should_fail_ex+0x3eb/0x540 [ 349.347264][T10708] should_failslab+0xa8/0x100 [ 349.347289][T10708] __kmalloc_noprof+0xf9/0x710 [ 349.347305][T10708] ? rcu_is_watching+0x16/0xb0 [ 349.347327][T10708] ? tomoyo_realpath_from_path+0xf2/0x640 [ 349.347350][T10708] ? tomoyo_realpath_from_path+0xf2/0x640 [ 349.347378][T10708] tomoyo_realpath_from_path+0xf2/0x640 [ 349.347412][T10708] ? tomoyo_path_number_perm+0x219/0x5f0 [ 349.347432][T10708] tomoyo_path_number_perm+0x246/0x5f0 [ 349.347453][T10708] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 349.347471][T10708] ? __lock_acquire+0x747/0x2de0 [ 349.347524][T10708] ? __fget_files+0x2a/0x420 [ 349.347543][T10708] ? __fget_files+0x2a/0x420 [ 349.347561][T10708] ? __fget_files+0x2a/0x420 [ 349.347581][T10708] security_file_ioctl+0xc3/0x2a0 [ 349.347601][T10708] __se_sys_ioctl+0x47/0x170 [ 349.347625][T10708] do_syscall_64+0x166/0x520 [ 349.347647][T10708] ? trace_irq_disable+0x3b/0x140 [ 349.347668][T10708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.347713][T10708] ? clear_bhb_loop+0x70/0xc0 [ 349.347741][T10708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.347764][T10708] RIP: 0033:0x7f7b2439f559 [ 349.347784][T10708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.347808][T10708] RSP: 002b:00007f7b252a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.347826][T10708] RAX: ffffffffffffffda RBX: 00007f7b24625fa0 RCX: 00007f7b2439f559 [ 349.347837][T10708] RDX: 0000200000000100 RSI: 000000000000541c RDI: 0000000000000003 [ 349.347848][T10708] RBP: 00007f7b252a0090 R08: 0000000000000000 R09: 0000000000000000 [ 349.347858][T10708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.347867][T10708] R13: 00007f7b24626038 R14: 00007f7b24625fa0 R15: 00007ffead4cca48 [ 349.347891][T10708] [ 349.347908][T10708] ERROR: Out of memory at tomoyo_realpath_from_path. [ 349.708229][T10718] netlink: 'syz.4.1532': attribute type 19 has an invalid length. [ 349.728949][ T5820] usb 2-1: device descriptor read/64, error -71 [ 349.824446][T10713] fuse: root generation should be zero [ 349.838931][ T5820] usb usb2-port1: attempt power cycle [ 350.155853][T10734] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 350.178983][ T5820] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 350.199452][ T5820] usb 2-1: device descriptor read/8, error -71 [ 350.402985][T10734] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 350.442031][ T5820] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 350.459282][ T5820] usb 2-1: device descriptor read/8, error -71 [ 350.508631][ T5796] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 350.570822][ T5820] usb usb2-port1: unable to enumerate USB device [ 350.668845][ T5796] usb 5-1: Using ep0 maxpacket: 8 [ 350.669589][ T5796] usb 5-1: New USB device found: idVendor=056e, idProduct=00e6, bcdDevice=0.00 [ 350.671018][ T5796] usb 5-1: config 0 interface 0 altsetting 235 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.671064][ T5796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 350.671100][ T5796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.676848][ T5796] usb 5-1: config 0 descriptor?? [ 350.734612][ T33] kauditd_printk_skb: 10 callbacks suppressed [ 350.734634][ T33] audit: type=1800 audit(1793366634.427:191): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204900 res=0 errno=-22 [ 350.769737][ T33] audit: type=1800 audit(1793366634.457:192): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=204929 res=0 errno=-22 [ 350.774086][ T33] audit: type=1800 audit(1793366634.467:193): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=204907 res=0 errno=-22 [ 350.775084][ T33] audit: type=1800 audit(1793366634.467:194): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=204908 res=0 errno=-22 [ 350.801317][ T33] audit: type=1800 audit(1793366634.477:195): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=204909 res=0 errno=-22 [ 350.801460][ T33] audit: type=1800 audit(1793366634.487:196): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204949 res=0 errno=-22 [ 351.154430][T10741] CIFS mount error: No usable UNC path provided in device string! [ 351.154430][T10741] [ 351.154503][T10741] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 351.192952][ T33] audit: type=1800 audit(1793366634.887:197): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=205044 res=0 errno=-22 [ 351.198232][ T5796] elecom 0003:056E:00E6.000F: reserved main item tag 0xd [ 351.235759][ T5796] elecom 0003:056E:00E6.000F: hidraw0: USB HID v80.06 Device [HID 056e:00e6] on usb-dummy_hcd.4-1/input0 [ 351.246976][ T33] audit: type=1800 audit(1793366634.937:198): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=205066 res=0 errno=-22 [ 351.371713][ T5727] usb 5-1: USB disconnect, device number 63 [ 351.460618][ T9551] udevd[9551]: 'fido_id' [10773] terminated by signal 11 (Segmentation fault) [ 351.546009][T10780] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 351.546654][T10771] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 351.983015][T10797] comedi comedi1: 8255: I/O base address not correctly aligned [ 352.002280][T10795] FAULT_INJECTION: forcing a failure. [ 352.002280][T10795] name failslab, interval 1, probability 0, space 0, times 0 [ 352.002318][T10795] CPU: 0 UID: 0 PID: 10795 Comm: syz.3.1549 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.002350][T10795] Tainted: [L]=SOFTLOCKUP [ 352.002359][T10795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 352.002372][T10795] Call Trace: [ 352.002382][T10795] [ 352.002392][T10795] dump_stack_lvl+0xe8/0x150 [ 352.002431][T10795] should_fail_ex+0x3eb/0x540 [ 352.002471][T10795] should_failslab+0xa8/0x100 [ 352.002504][T10795] __kmalloc_noprof+0xf9/0x710 [ 352.002528][T10795] ? rcu_is_watching+0x16/0xb0 [ 352.002559][T10795] ? tomoyo_realpath_from_path+0xf2/0x640 [ 352.002592][T10795] ? tomoyo_realpath_from_path+0xf2/0x640 [ 352.002633][T10795] tomoyo_realpath_from_path+0xf2/0x640 [ 352.002677][T10795] ? tomoyo_path_number_perm+0x219/0x5f0 [ 352.002706][T10795] tomoyo_path_number_perm+0x246/0x5f0 [ 352.002738][T10795] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 352.002763][T10795] ? __lock_acquire+0x747/0x2de0 [ 352.002839][T10795] ? __fget_files+0x2a/0x420 [ 352.002869][T10795] ? __fget_files+0x2a/0x420 [ 352.002895][T10795] ? __fget_files+0x2a/0x420 [ 352.002925][T10795] security_file_ioctl+0xc3/0x2a0 [ 352.002955][T10795] __se_sys_ioctl+0x47/0x170 [ 352.002989][T10795] do_syscall_64+0x166/0x520 [ 352.003020][T10795] ? trace_irq_disable+0x3b/0x140 [ 352.003048][T10795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.003072][T10795] ? clear_bhb_loop+0x70/0xc0 [ 352.003100][T10795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.003123][T10795] RIP: 0033:0x7f30fe19f559 [ 352.003145][T10795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.003165][T10795] RSP: 002b:00007f30ff0e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.003190][T10795] RAX: ffffffffffffffda RBX: 00007f30fe425fa0 RCX: 00007f30fe19f559 [ 352.003208][T10795] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 352.003222][T10795] RBP: 00007f30ff0e5090 R08: 0000000000000000 R09: 0000000000000000 [ 352.003237][T10795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.003257][T10795] R13: 00007f30fe426038 R14: 00007f30fe425fa0 R15: 00007ffe696f0938 [ 352.003294][T10795] [ 352.003304][T10795] ERROR: Out of memory at tomoyo_realpath_from_path. [ 352.289175][ T5649] Bluetooth: hci0: command 0x0c1a tx timeout [ 352.347978][ T33] audit: type=1800 audit(1793366636.037:199): pid=10800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1551" name="attach" dev="sysfs" ino=33012 res=0 errno=-13 [ 352.383835][T10800] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 352.383867][T10800] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 352.395299][T10800] vhci_hcd vhci_hcd.0: Device attached [ 352.580026][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 352.638857][ T10] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 352.788656][ T5820] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 352.847533][T10820] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1559'. [ 352.945079][ T5820] usb 6-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 352.946620][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.962357][ T5820] usb 6-1: config 0 descriptor?? [ 352.981301][ T5820] cp210x 6-1:0.0: cp210x converter detected [ 352.985189][ T33] audit: type=1800 audit(1793366636.677:200): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=205276 res=0 errno=-22 [ 353.065184][T10827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.088870][T10827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.133677][T10827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.134543][T10827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.370079][ T996] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 353.387741][ T5820] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 353.425924][ T5820] usb 6-1: cp210x converter now attached to ttyUSB0 [ 353.523960][ T996] usb 2-1: not running at top speed; connect to a high speed hub [ 353.524000][ T996] usb 2-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=25.00 [ 353.524041][ T996] usb 2-1: too many configurations: 189, using maximum allowed: 8 [ 353.525660][ T996] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 353.525700][ T996] usb 2-1: can't read configurations, error -61 [ 353.596652][ T5820] usb 6-1: USB disconnect, device number 15 [ 353.611230][ T5820] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 353.614261][ T5820] cp210x 6-1:0.0: device disconnected [ 353.659898][ T996] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 353.809036][ T27] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 353.812328][ T996] usb 2-1: not running at top speed; connect to a high speed hub [ 353.812367][ T996] usb 2-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=25.00 [ 353.812406][ T996] usb 2-1: too many configurations: 189, using maximum allowed: 8 [ 353.814081][ T996] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 353.814121][ T996] usb 2-1: can't read configurations, error -61 [ 353.815167][ T996] usb usb2-port1: attempt power cycle [ 353.959917][ T27] usb 5-1: New USB device found: idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 353.960951][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 353.960985][ T27] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 353.961004][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 353.961020][ T27] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 353.961049][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.964845][ T27] usb 5-1: config 0 descriptor?? [ 354.158637][ T996] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 354.176759][ T27] hdpvr 5-1:0.0: unexpected answer of status request, len 0 [ 354.176785][ T27] hdpvr 5-1:0.0: device init failed [ 354.176938][ T27] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 354.201410][ T996] usb 2-1: not running at top speed; connect to a high speed hub [ 354.201449][ T996] usb 2-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=25.00 [ 354.201486][ T996] usb 2-1: too many configurations: 189, using maximum allowed: 8 [ 354.205192][ T996] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 354.205234][ T996] usb 2-1: can't read configurations, error -61 [ 354.328622][ T996] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 354.355205][ T996] usb 2-1: not running at top speed; connect to a high speed hub [ 354.355245][ T996] usb 2-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=25.00 [ 354.355285][ T996] usb 2-1: too many configurations: 189, using maximum allowed: 8 [ 354.357306][ T996] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 354.357344][ T996] usb 2-1: can't read configurations, error -61 [ 354.384944][ T996] usb usb2-port1: unable to enumerate USB device [ 354.407676][T10837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.408188][T10837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.473806][ T5820] usb 5-1: USB disconnect, device number 64 [ 354.515519][T10801] vhci_hcd: connection reset by peer [ 354.543377][ T14] vhci_hcd vhci_hcd.4: stop threads [ 354.545844][ T14] vhci_hcd vhci_hcd.4: release socket [ 354.553459][ T14] vhci_hcd vhci_hcd.4: disconnect device [ 354.730041][T10850] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 354.730346][T10850] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 354.730447][T10850] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 354.774142][T10850] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 354.810843][T10850] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 354.810957][T10850] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 354.817676][T10850] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 354.952853][T10855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.966713][T10855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.886191][T10874] FAULT_INJECTION: forcing a failure. [ 355.886191][T10874] name failslab, interval 1, probability 0, space 0, times 0 [ 355.886236][T10874] CPU: 0 UID: 0 PID: 10874 Comm: syz.4.1579 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.886274][T10874] Tainted: [L]=SOFTLOCKUP [ 355.886285][T10874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 355.886301][T10874] Call Trace: [ 355.886312][T10874] [ 355.886324][T10874] dump_stack_lvl+0xe8/0x150 [ 355.886369][T10874] should_fail_ex+0x3eb/0x540 [ 355.886413][T10874] should_failslab+0xa8/0x100 [ 355.886458][T10874] ? alloc_empty_file+0x5b/0x1d0 [ 355.886484][T10874] kmem_cache_alloc_noprof+0x9c/0x600 [ 355.886513][T10874] ? alloc_empty_file+0x5b/0x1d0 [ 355.886546][T10874] alloc_empty_file+0x5b/0x1d0 [ 355.886573][T10874] alloc_file_pseudo+0x110/0x1e0 [ 355.886602][T10874] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 355.886643][T10874] __anon_inode_getfile+0x129/0x200 [ 355.886674][T10874] io_uring_create+0x57a/0x980 [ 355.886709][T10874] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 355.886747][T10874] ? __local_bh_enable_ip+0xd6/0x140 [ 355.886780][T10874] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 355.886835][T10874] ? rcu_is_watching+0x16/0xb0 [ 355.886884][T10874] do_syscall_64+0x166/0x520 [ 355.886920][T10874] ? trace_irq_disable+0x3b/0x140 [ 355.886952][T10874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.886981][T10874] ? clear_bhb_loop+0x70/0xc0 [ 355.887013][T10874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.887039][T10874] RIP: 0033:0x7fcfadd9f559 [ 355.887067][T10874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.887090][T10874] RSP: 002b:00007fcfaec17fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 355.887119][T10874] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007fcfadd9f559 [ 355.887139][T10874] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 00000000000008bf [ 355.887157][T10874] RBP: 00007fcfade36b20 R08: 0000000000000000 R09: 0000000000000000 [ 355.887175][T10874] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 355.887191][T10874] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdc728cff8 [ 355.887230][T10874] [ 356.184951][ T33] kauditd_printk_skb: 20 callbacks suppressed [ 356.184973][ T33] audit: type=1800 audit(1793366639.877:221): pid=10876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1580" name="pages_to_scan" dev="sysfs" ino=1890 res=0 errno=-22 [ 356.293695][T10881] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1581'. [ 356.517606][ T33] audit: type=1800 audit(1793366640.207:222): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=24093 res=0 errno=-22 [ 356.606224][ T33] audit: type=1800 audit(1793366640.287:223): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=24079 res=0 errno=-22 [ 356.769100][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 356.849789][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 356.849896][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 356.891570][T10905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.892054][T10905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.936599][T10906] FAULT_INJECTION: forcing a failure. [ 356.936599][T10906] name failslab, interval 1, probability 0, space 0, times 0 [ 356.936626][T10906] CPU: 0 UID: 0 PID: 10906 Comm: syz.5.1590 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.936649][T10906] Tainted: [L]=SOFTLOCKUP [ 356.936655][T10906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 356.936666][T10906] Call Trace: [ 356.936673][T10906] [ 356.936680][T10906] dump_stack_lvl+0xe8/0x150 [ 356.936709][T10906] should_fail_ex+0x3eb/0x540 [ 356.936739][T10906] should_failslab+0xa8/0x100 [ 356.936763][T10906] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 356.936783][T10906] ? shmem_getattr+0x5e9/0x780 [ 356.936805][T10906] ? ima_collect_measurement+0x5b8/0xa00 [ 356.936824][T10906] ? ima_collect_measurement+0x5b8/0xa00 [ 356.936854][T10906] ? ima_collect_measurement+0x5b8/0xa00 [ 356.936875][T10906] krealloc_node_align_noprof+0x19a/0x390 [ 356.936933][T10906] ima_collect_measurement+0x5b8/0xa00 [ 356.936971][T10906] ? __pfx_ima_collect_measurement+0x10/0x10 [ 356.937046][T10906] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 356.937080][T10906] process_measurement+0x1272/0x1c10 [ 356.937110][T10906] ? __pfx_process_measurement+0x10/0x10 [ 356.937131][T10906] ? tomoyo_check_open_permission+0x38e/0x470 [ 356.937171][T10906] ? apparmor_file_open+0x523/0x6c0 [ 356.937204][T10906] ima_file_check+0xdc/0x130 [ 356.937221][T10906] ? do_dentry_open+0xd40/0x1360 [ 356.937247][T10906] ? __pfx_ima_file_check+0x10/0x10 [ 356.937270][T10906] security_file_post_open+0xb3/0x260 [ 356.937291][T10906] path_openat+0x1748/0x20f0 [ 356.937326][T10906] do_file_open+0x23e/0x4a0 [ 356.937353][T10906] ? __pfx_do_file_open+0x10/0x10 [ 356.937390][T10906] ? _raw_spin_unlock+0x28/0x50 [ 356.937409][T10906] ? alloc_fd+0x6af/0x760 [ 356.937435][T10906] do_sys_openat2+0x115/0x200 [ 356.937450][T10906] ? __se_sys_futex+0x3a8/0x450 [ 356.937475][T10906] ? __pfx_do_sys_openat2+0x10/0x10 [ 356.937493][T10906] ? __pfx___se_sys_futex+0x10/0x10 [ 356.937516][T10906] ? fd_install+0x95/0x4e0 [ 356.937537][T10906] __x64_sys_openat+0x138/0x170 [ 356.937557][T10906] do_syscall_64+0x166/0x520 [ 356.937579][T10906] ? trace_irq_disable+0x3b/0x140 [ 356.937598][T10906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.937615][T10906] ? clear_bhb_loop+0x70/0xc0 [ 356.937634][T10906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.937650][T10906] RIP: 0033:0x7f7b2439f559 [ 356.937666][T10906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.937680][T10906] RSP: 002b:00007f7b252a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 356.937700][T10906] RAX: ffffffffffffffda RBX: 00007f7b24625fa0 RCX: 00007f7b2439f559 [ 356.937713][T10906] RDX: 0000000000105042 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 356.937724][T10906] RBP: 00007f7b24436b20 R08: 0000000000000000 R09: 0000000000000000 [ 356.937734][T10906] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000000 [ 356.937744][T10906] R13: 00007f7b24626038 R14: 00007f7b24625fa0 R15: 00007ffead4cca48 [ 356.937770][T10906] [ 356.952111][ T33] audit: type=1800 audit(1793366640.637:224): pid=10906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1590" name="file1" dev="tmpfs" ino=377 res=0 errno=-12 [ 356.952166][ T33] audit: type=1800 audit(1793366640.647:225): pid=10906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1590" name="file1" dev="tmpfs" ino=377 res=0 errno=-22 [ 356.952208][ T33] audit: type=1800 audit(1793366640.647:226): pid=10906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1590" name="file1" dev="tmpfs" ino=377 res=0 errno=-22 [ 356.952314][ T996] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 357.061700][ T27] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 357.210136][ T996] usb 5-1: Using ep0 maxpacket: 16 [ 357.219567][ T996] usb 5-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 357.290068][ T996] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.290101][ T996] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.391899][ T27] usb 2-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 357.393159][ T996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.393188][ T996] usb 5-1: Product: syz [ 357.393206][ T996] usb 5-1: Manufacturer: syz [ 357.393222][ T996] usb 5-1: SerialNumber: syz [ 357.395079][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 357.395107][ T27] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 357.395152][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.431677][ T33] audit: type=1800 audit(1793366641.127:227): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=205596 res=0 errno=-22 [ 357.494374][ T996] usb 5-1: 0:2 : does not exist [ 357.494641][ T996] usb 5-1: unit 9 not found! [ 357.509081][ T33] audit: type=1800 audit(1793366641.187:228): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=205663 res=0 errno=-22 [ 357.509142][ T33] audit: type=1800 audit(1793366641.197:229): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=205603 res=0 errno=-22 [ 357.555654][ T33] audit: type=1800 audit(1793366641.247:230): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=205604 res=0 errno=-22 [ 357.590015][ T27] spcp8x5 2-1:1.0: SPCP8x5 converter detected [ 357.607019][ T27] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 357.724203][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 357.739462][ T5820] usb 5-1: USB disconnect, device number 65 [ 357.806165][ T9551] udevd[9551]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.179132][T10917] pim6reg: entered allmulticast mode [ 358.180678][T10917] pim6reg: left allmulticast mode [ 358.468428][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1596'. [ 358.468451][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1596'. [ 358.640643][T10923] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 358.850580][T10932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.928807][ T5649] Bluetooth: hci3: command 0x0c1a tx timeout [ 358.928914][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 358.969678][T10940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.970168][T10940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.978245][T10940] FAULT_INJECTION: forcing a failure. [ 358.978245][T10940] name failslab, interval 1, probability 0, space 0, times 0 [ 358.978294][T10940] CPU: 0 UID: 0 PID: 10940 Comm: syz.3.1602 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.978327][T10940] Tainted: [L]=SOFTLOCKUP [ 358.978337][T10940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 358.978356][T10940] Call Trace: [ 358.978366][T10940] [ 358.978376][T10940] dump_stack_lvl+0xe8/0x150 [ 358.978415][T10940] should_fail_ex+0x3eb/0x540 [ 358.978460][T10940] should_failslab+0xa8/0x100 [ 358.978491][T10940] ? security_file_alloc+0x34/0x310 [ 358.978515][T10940] kmem_cache_alloc_noprof+0x9c/0x600 [ 358.978547][T10940] ? rcu_is_watching+0x16/0xb0 [ 358.978580][T10940] ? security_file_alloc+0x34/0x310 [ 358.978612][T10940] security_file_alloc+0x34/0x310 [ 358.978639][T10940] init_file+0x90/0x2b0 [ 358.978664][T10940] alloc_empty_file+0x74/0x1d0 [ 358.978687][T10940] path_openat+0x96/0x20f0 [ 358.978738][T10940] do_file_open+0x23e/0x4a0 [ 358.978774][T10940] ? __pfx_do_file_open+0x10/0x10 [ 358.978827][T10940] ? _raw_spin_unlock+0x28/0x50 [ 358.978854][T10940] ? alloc_fd+0x6af/0x760 [ 358.978890][T10940] do_sys_openat2+0x115/0x200 [ 358.978918][T10940] ? __pfx_do_sys_openat2+0x10/0x10 [ 358.978942][T10940] ? ksys_write+0x242/0x270 [ 358.978971][T10940] ? __pfx_ksys_write+0x10/0x10 [ 358.979003][T10940] __x64_sys_openat+0x138/0x170 [ 358.979032][T10940] do_syscall_64+0x166/0x520 [ 358.979064][T10940] ? trace_irq_disable+0x3b/0x140 [ 358.979092][T10940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.979116][T10940] ? clear_bhb_loop+0x70/0xc0 [ 358.979145][T10940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.979175][T10940] RIP: 0033:0x7f30fe19f559 [ 358.979197][T10940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.979217][T10940] RSP: 002b:00007f30ff0e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 358.979242][T10940] RAX: ffffffffffffffda RBX: 00007f30fe425fa0 RCX: 00007f30fe19f559 [ 358.979259][T10940] RDX: 0000000000000002 RSI: 0000200000000740 RDI: ffffffffffffff9c [ 358.979276][T10940] RBP: 00007f30ff0e5090 R08: 0000000000000000 R09: 0000000000000000 [ 358.979291][T10940] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 358.979305][T10940] R13: 00007f30fe426038 R14: 00007f30fe425fa0 R15: 00007ffe696f0938 [ 358.979341][T10940] [ 359.039655][T10933] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 359.218374][T10901] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 359.249695][ T996] usb 2-1: USB disconnect, device number 21 [ 359.300885][ T996] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 359.303355][ T996] spcp8x5 2-1:1.0: device disconnected [ 359.542442][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1606'. [ 359.619752][T10951] FAULT_INJECTION: forcing a failure. [ 359.619752][T10951] name failslab, interval 1, probability 0, space 0, times 0 [ 359.619791][T10951] CPU: 0 UID: 0 PID: 10951 Comm: syz.5.1607 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.619823][T10951] Tainted: [L]=SOFTLOCKUP [ 359.619832][T10951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 359.619845][T10951] Call Trace: [ 359.619855][T10951] [ 359.619865][T10951] dump_stack_lvl+0xe8/0x150 [ 359.619905][T10951] should_fail_ex+0x3eb/0x540 [ 359.619945][T10951] should_failslab+0xa8/0x100 [ 359.619989][T10951] __kmalloc_noprof+0xf9/0x710 [ 359.620020][T10951] ? tomoyo_encode+0x2ad/0x570 [ 359.620053][T10951] ? tomoyo_encode+0x2ad/0x570 [ 359.620094][T10951] tomoyo_encode+0x2ad/0x570 [ 359.620134][T10951] tomoyo_realpath_from_path+0x5fd/0x640 [ 359.620183][T10951] tomoyo_check_open_permission+0x229/0x470 [ 359.620213][T10951] ? tomoyo_check_open_permission+0x1d3/0x470 [ 359.620242][T10951] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 359.620273][T10951] ? __asan_memset+0x22/0x50 [ 359.620304][T10951] ? seqcount_lockdep_reader_access+0xea/0x100 [ 359.620360][T10951] ? devcgroup_check_permission+0x31/0x8f0 [ 359.620388][T10951] security_file_open+0xa9/0x240 [ 359.620416][T10951] do_dentry_open+0x495/0x1360 [ 359.620463][T10951] vfs_open_consume+0x4a/0x350 [ 359.620496][T10951] ? path_openat+0x16e1/0x20f0 [ 359.620529][T10951] path_openat+0x16fc/0x20f0 [ 359.620581][T10951] do_file_open+0x23e/0x4a0 [ 359.620616][T10951] ? __pfx_do_file_open+0x10/0x10 [ 359.620671][T10951] ? _raw_spin_unlock+0x28/0x50 [ 359.620699][T10951] ? alloc_fd+0x6af/0x760 [ 359.620736][T10951] do_sys_openat2+0x115/0x200 [ 359.620762][T10951] ? __pfx_do_sys_openat2+0x10/0x10 [ 359.620793][T10951] ? do_user_addr_fault+0xd3f/0x1480 [ 359.620822][T10951] __x64_sys_openat+0x138/0x170 [ 359.620849][T10951] do_syscall_64+0x166/0x520 [ 359.620880][T10951] ? trace_irq_disable+0x3b/0x140 [ 359.620908][T10951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.620932][T10951] ? clear_bhb_loop+0x70/0xc0 [ 359.620960][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.620991][T10951] RIP: 0033:0x7f7b2435fd8e [ 359.621013][T10951] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 359.621034][T10951] RSP: 002b:00007f7b2529dea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 359.621059][T10951] RAX: ffffffffffffffda RBX: 00007f7b252a06c0 RCX: 00007f7b2435fd8e [ 359.621076][T10951] RDX: 0000000000000002 RSI: 00007f7b24435eb2 RDI: ffffffffffffff9c [ 359.621093][T10951] RBP: 00007f7b24436b20 R08: 0000000000000000 R09: 0000000000000000 [ 359.621108][T10951] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000007a [ 359.621122][T10951] R13: 0000200000000000 R14: 0000000000000002 R15: 00007ffead4cca48 [ 359.621158][T10951] [ 359.621212][T10951] ERROR: Out of memory at tomoyo_realpath_from_path. [ 359.653134][ T5796] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 359.839020][ T5796] usb 5-1: Using ep0 maxpacket: 8 [ 359.840918][ T5796] usb 5-1: New USB device found: idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 359.847413][ T5796] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 359.847486][ T5796] usb 5-1: config 6 has no interface number 0 [ 359.847601][ T5796] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 359.847664][ T5796] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 359.847729][ T5796] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 359.847793][ T5796] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 359.896087][ T10] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 359.906145][ T5796] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 359.906228][ T5796] usb 5-1: Product: syz [ 359.906270][ T5796] usb 5-1: Manufacturer: syz [ 359.906313][ T5796] usb 5-1: SerialNumber: syz [ 360.014850][ T5796] hso 5-1:6.2: Failed to find BULK eps [ 360.025900][T10953] netlink: 'syz.3.1608': attribute type 178 has an invalid length. [ 360.075719][T10953] device-mapper: table: 248:8: integrity: Bitmap mode can be only used with internal hash (-EINVAL) [ 360.075749][T10953] device-mapper: ioctl: error adding target to table [ 360.121828][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 360.122359][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 360.122394][ T10] usb 6-1: New USB device found: idVendor=17cc, idProduct=1011, bcdDevice=0.40 [ 360.127592][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.127621][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.177276][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.177307][ T10] usb 6-1: Product: syz [ 360.177324][ T10] usb 6-1: Manufacturer: syz [ 360.177340][ T10] usb 6-1: SerialNumber: syz [ 360.191777][T10945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.193133][T10945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.450781][T10962] comedi comedi2: comedi_config --init_data is deprecated [ 360.478159][ T10] usb 6-1: unable to issue vendor read request (ret = -71) [ 360.486981][ T10] usb 6-1: unable to issue vendor read request (ret = -71) [ 360.487914][ T10] usb 6-1: unable to issue vendor read request (ret = -71) [ 360.503369][ T10] usb 6-1: unable to issue vendor read request (ret = -71) [ 360.576630][ T10] usb 6-1: USB disconnect, device number 16 [ 360.605007][T10964] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 360.647268][ T9551] udevd[9551]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.009776][ T5649] Bluetooth: hci3: command 0x0c1a tx timeout [ 361.010190][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 361.318644][ T5796] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 361.474311][ T5796] usb 6-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 361.475943][ T5796] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.476001][ T5796] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 361.476029][ T5796] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.478191][ T5796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 361.478221][ T5796] usb 6-1: Product: syz [ 361.478238][ T5796] usb 6-1: Manufacturer: syz [ 361.515661][ T33] kauditd_printk_skb: 38 callbacks suppressed [ 361.515721][ T33] audit: type=1800 audit(1793366645.207:269): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206438 res=0 errno=-22 [ 361.533449][T10974] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 361.562188][ T5796] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 361.580421][ T33] audit: type=1800 audit(1793366645.267:270): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=206469 res=0 errno=-22 [ 361.607559][ T33] audit: type=1800 audit(1793366645.307:271): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=206445 res=0 errno=-22 [ 361.608597][ T33] audit: type=1800 audit(1793366645.307:272): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=206446 res=0 errno=-22 [ 361.658081][ T5796] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 361.679421][ T33] audit: type=1800 audit(1793366645.367:273): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=206467 res=0 errno=-22 [ 361.680544][ T33] audit: type=1800 audit(1793366645.377:274): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=206468 res=0 errno=-22 [ 361.682543][ T33] audit: type=1800 audit(1793366645.377:275): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=206447 res=0 errno=-22 [ 361.709610][ T33] audit: type=1800 audit(1793366645.387:276): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206489 res=0 errno=-22 [ 361.729823][ T33] audit: type=1800 audit(1793366645.407:277): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206505 res=0 errno=-22 [ 361.798406][ T33] audit: type=1800 audit(1793366645.497:278): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206519 res=0 errno=-22 [ 361.925070][T10974] netlink: 'syz.5.1613': attribute type 21 has an invalid length. [ 362.462889][ T996] usb 5-1: USB disconnect, device number 66 [ 362.798650][ T5796] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 362.837883][T10984] FAULT_INJECTION: forcing a failure. [ 362.837883][T10984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.837964][T10984] CPU: 1 UID: 0 PID: 10984 Comm: syz.3.1617 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.837996][T10984] Tainted: [L]=SOFTLOCKUP [ 362.838005][T10984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 362.838019][T10984] Call Trace: [ 362.838028][T10984] [ 362.838039][T10984] dump_stack_lvl+0xe8/0x150 [ 362.838082][T10984] should_fail_ex+0x3eb/0x540 [ 362.838121][T10984] _copy_to_user+0x31/0xb0 [ 362.838159][T10984] simple_read_from_buffer+0xe1/0x170 [ 362.838191][T10984] proc_fail_nth_read+0x1bb/0x230 [ 362.838229][T10984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 362.838268][T10984] ? rw_verify_area+0x24a/0x4c0 [ 362.838298][T10984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 362.838331][T10984] vfs_read+0x213/0xa80 [ 362.838365][T10984] ? __pfx___mutex_lock+0x10/0x10 [ 362.838400][T10984] ? __pfx_vfs_read+0x10/0x10 [ 362.838430][T10984] ? __fget_files+0x2a/0x420 [ 362.838455][T10984] ? __fget_files+0x3a2/0x420 [ 362.838479][T10984] ? __fget_files+0x2a/0x420 [ 362.838509][T10984] ? fdget+0x1ac/0x250 [ 362.838539][T10984] ksys_read+0x150/0x270 [ 362.838564][T10984] ? __fget_files+0x3a2/0x420 [ 362.838590][T10984] ? __pfx_ksys_read+0x10/0x10 [ 362.838629][T10984] do_syscall_64+0x166/0x520 [ 362.838659][T10984] ? trace_irq_disable+0x3b/0x140 [ 362.838688][T10984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.838711][T10984] ? clear_bhb_loop+0x70/0xc0 [ 362.838738][T10984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.838760][T10984] RIP: 0033:0x7f30fe15fd8e [ 362.838790][T10984] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 362.838809][T10984] RSP: 002b:00007f30ff0e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 362.838834][T10984] RAX: ffffffffffffffda RBX: 00007f30ff0e56c0 RCX: 00007f30fe15fd8e [ 362.838851][T10984] RDX: 000000000000000f RSI: 00007f30ff0e50a0 RDI: 0000000000000005 [ 362.838865][T10984] RBP: 00007f30ff0e5090 R08: 0000000000000000 R09: 0000000000000000 [ 362.838880][T10984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.838894][T10984] R13: 00007f30fe426038 R14: 00007f30fe425fa0 R15: 00007ffe696f0938 [ 362.838932][T10984] [ 362.990986][ T5796] usb 2-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 363.024746][ T5796] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 363.024930][ T5796] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 363.095677][ T5796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.095842][ T5796] usb 2-1: Product: syz [ 363.095895][ T5796] usb 2-1: Manufacturer: syz [ 363.096001][ T5796] usb 2-1: SerialNumber: syz [ 363.343321][ T5796] usb 2-1: Limiting number of CPorts to U8_MAX [ 363.885076][ T5796] usb 2-1: failed to set cport flags for port 0 [ 363.885141][ T5796] greybus greybus1: 0/0:0: failed to enable host cport: -110 [ 363.933087][ T5796] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 364.010892][ T27] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 364.102836][ T10] usb 6-1: USB disconnect, device number 17 [ 364.161288][ T10] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 364.163695][ T10] garmin_gps 6-1:1.0: device disconnected [ 364.191197][ T27] usb 5-1: New USB device found: idVendor=0a12, idProduct=0002, bcdDevice=10.00 [ 364.192775][ T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 364.192828][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.197349][T11021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.198476][T11021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.470172][T11013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.470817][T11013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.472764][ T5820] usb 5-1: USB disconnect, device number 67 [ 365.156931][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1632'. [ 365.478988][ T5820] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 365.506578][T11043] FAULT_INJECTION: forcing a failure. [ 365.506578][T11043] name failslab, interval 1, probability 0, space 0, times 0 [ 365.506616][T11043] CPU: 1 UID: 0 PID: 11043 Comm: syz.3.1637 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.506645][T11043] Tainted: [L]=SOFTLOCKUP [ 365.506653][T11043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 365.506666][T11043] Call Trace: [ 365.506674][T11043] [ 365.506684][T11043] dump_stack_lvl+0xe8/0x150 [ 365.506721][T11043] should_fail_ex+0x3eb/0x540 [ 365.506760][T11043] should_failslab+0xa8/0x100 [ 365.506790][T11043] ? alloc_empty_file+0x5b/0x1d0 [ 365.506812][T11043] kmem_cache_alloc_noprof+0x9c/0x600 [ 365.506836][T11043] ? stack_depot_save_flags+0x33/0x810 [ 365.506880][T11043] ? alloc_empty_file+0x5b/0x1d0 [ 365.506912][T11043] alloc_empty_file+0x5b/0x1d0 [ 365.506934][T11043] path_openat+0x96/0x20f0 [ 365.506981][T11043] do_file_open+0x23e/0x4a0 [ 365.507026][T11043] ? __pfx_do_file_open+0x10/0x10 [ 365.507078][T11043] ? _raw_spin_unlock+0x28/0x50 [ 365.507107][T11043] ? alloc_fd+0x6af/0x760 [ 365.507140][T11043] do_sys_openat2+0x115/0x200 [ 365.507163][T11043] ? __se_sys_futex+0x3a8/0x450 [ 365.507200][T11043] ? __pfx_do_sys_openat2+0x10/0x10 [ 365.507229][T11043] ? rcu_is_watching+0x16/0xb0 [ 365.507268][T11043] __x64_sys_openat+0x138/0x170 [ 365.507297][T11043] do_syscall_64+0x166/0x520 [ 365.507332][T11043] ? trace_irq_disable+0x3b/0x140 [ 365.507360][T11043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.507383][T11043] ? clear_bhb_loop+0x70/0xc0 [ 365.507409][T11043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.507432][T11043] RIP: 0033:0x7f30fe15fd8e [ 365.507456][T11043] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 365.507477][T11043] RSP: 002b:00007f30ff0e4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 365.507503][T11043] RAX: ffffffffffffffda RBX: 00007f30ff0e56c0 RCX: 00007f30fe15fd8e [ 365.507523][T11043] RDX: 0000000000000002 RSI: 00007f30ff0e4f90 RDI: ffffffffffffff9c [ 365.507541][T11043] RBP: 00007f30fe236b20 R08: 0000000000000000 R09: 0000000000000000 [ 365.507556][T11043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.507570][T11043] R13: 00007f30fe426038 R14: 00007f30fe425fa0 R15: 00007ffe696f0938 [ 365.507606][T11043] [ 365.536029][ T55] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 365.536105][ T55] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 365.574073][ T27] usb 2-1: USB disconnect, device number 22 [ 365.770233][ T5820] usb 6-1: Using ep0 maxpacket: 32 [ 365.781474][ T5820] usb 6-1: New USB device found: idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 365.813938][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.813969][ T5820] usb 6-1: Product: syz [ 365.813985][ T5820] usb 6-1: Manufacturer: syz [ 365.814000][ T5820] usb 6-1: SerialNumber: syz [ 365.817263][ T5820] usb 6-1: config 0 descriptor?? [ 366.023995][T11034] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 366.118314][T11047] block device autoloading is deprecated and will be removed. [ 366.255482][ T5820] airspy 6-1:0.0: usb_control_msg() failed -71 request 0a [ 366.255514][ T5820] airspy 6-1:0.0: Could not detect board [ 366.255630][ T5820] airspy 6-1:0.0: probe with driver airspy failed with error -71 [ 366.282780][ T5820] usb 6-1: USB disconnect, device number 18 [ 366.346650][T11056] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 366.346678][T11056] block device autoloading is deprecated and will be removed. [ 366.375604][T11056] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 366.573629][ T33] kauditd_printk_skb: 40 callbacks suppressed [ 366.573650][ T33] audit: type=1800 audit(1793366650.257:319): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37440 res=0 errno=-22 [ 366.669072][ T5727] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 366.822757][ T5727] usb 5-1: unable to get BOS descriptor or descriptor too short [ 366.822813][ T5727] usb 5-1: New USB device found: idVendor=04b4, idProduct=931f, bcdDevice=0.40 [ 366.823894][ T5727] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 366.823937][ T5727] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 7 [ 366.828348][ T5727] usb 5-1: string descriptor 0 read error: -22 [ 366.828491][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.877039][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 366.900220][ T33] audit: type=1800 audit(1793366650.597:320): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207432 res=0 errno=-22 [ 366.906438][ T5727] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 366.908633][ T33] audit: type=1800 audit(1793366650.597:321): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=207461 res=0 errno=-22 [ 366.909393][ T33] audit: type=1800 audit(1793366650.607:322): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=207439 res=0 errno=-22 [ 366.921381][ T33] audit: type=1800 audit(1793366650.607:323): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=207440 res=0 errno=-22 [ 366.926467][ T33] audit: type=1800 audit(1793366650.607:324): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=207441 res=0 errno=-22 [ 367.045013][ T33] audit: type=1800 audit(1793366650.737:325): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207490 res=0 errno=-22 [ 367.062967][ T33] audit: type=1800 audit(1793366650.737:326): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207509 res=0 errno=-22 [ 367.086217][ T33] audit: type=1800 audit(1793366650.767:327): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207522 res=0 errno=-22 [ 367.109447][ T10] usb 2-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 367.110853][ T10] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 367.110889][ T10] usb 2-1: config 1 has no interface number 0 [ 367.113623][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.113654][ T10] usb 2-1: Product: syz [ 367.113670][ T10] usb 2-1: Manufacturer: syz [ 367.113687][ T10] usb 2-1: SerialNumber: syz [ 367.114573][ T33] audit: type=1800 audit(1793366650.807:328): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207563 res=0 errno=-22 [ 367.233280][ T5727] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 367.236805][ T10] usb 2-1: 3:0 : does not exist [ 367.236832][ T10] usb 2-1: 3:0 : does not exist [ 367.278388][ T5727] snd-usb-hiface 5-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 367.461804][ T5727] usb 5-1: can't set first interface for hiFace device. [ 367.461847][ T5727] snd-usb-hiface 5-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 367.467671][ T5727] usb 5-1: can't set first interface for hiFace device. [ 367.467702][ T5727] snd-usb-hiface 5-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 367.513051][ T5727] usb 5-1: USB disconnect, device number 68 [ 367.608191][T11075] FAULT_INJECTION: forcing a failure. [ 367.608191][T11075] name failslab, interval 1, probability 0, space 0, times 0 [ 367.608229][T11075] CPU: 0 UID: 0 PID: 11075 Comm: syz.5.1647 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.608262][T11075] Tainted: [L]=SOFTLOCKUP [ 367.608277][T11075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 367.608292][T11075] Call Trace: [ 367.608302][T11075] [ 367.608313][T11075] dump_stack_lvl+0xe8/0x150 [ 367.608356][T11075] should_fail_ex+0x3eb/0x540 [ 367.608398][T11075] should_failslab+0xa8/0x100 [ 367.608434][T11075] __kmalloc_noprof+0xf9/0x710 [ 367.608460][T11075] ? __kmalloc_noprof+0x1a6/0x710 [ 367.608484][T11075] ? ima_alloc_init_template+0x185/0x700 [ 367.608514][T11075] ? ima_alloc_init_template+0x185/0x700 [ 367.608548][T11075] ima_alloc_init_template+0x185/0x700 [ 367.608586][T11075] ima_store_measurement+0x1d4/0x690 [ 367.608626][T11075] ? __pfx_ima_store_measurement+0x10/0x10 [ 367.608652][T11075] ? ima_d_path+0x16b/0x230 [ 367.608689][T11075] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 367.608736][T11075] process_measurement+0x15ac/0x1c10 [ 367.608782][T11075] ? __pfx_process_measurement+0x10/0x10 [ 367.608816][T11075] ? trace_contention_end+0x3d/0x140 [ 367.608896][T11075] ? kernfs_put_active+0xa0/0x100 [ 367.608932][T11075] ? kernfs_fop_open+0xb0b/0xd20 [ 367.608966][T11075] ima_file_check+0xdc/0x130 [ 367.608993][T11075] ? do_dentry_open+0xcf9/0x1360 [ 367.609029][T11075] ? __pfx_ima_file_check+0x10/0x10 [ 367.609063][T11075] security_file_post_open+0xb3/0x260 [ 367.609094][T11075] path_openat+0x1748/0x20f0 [ 367.609145][T11075] do_file_open+0x23e/0x4a0 [ 367.609182][T11075] ? __pfx_do_file_open+0x10/0x10 [ 367.609235][T11075] ? _raw_spin_unlock+0x28/0x50 [ 367.609264][T11075] ? alloc_fd+0x6af/0x760 [ 367.609301][T11075] do_sys_openat2+0x115/0x200 [ 367.609324][T11075] ? __se_sys_futex+0x3a8/0x450 [ 367.609360][T11075] ? __pfx_do_sys_openat2+0x10/0x10 [ 367.609387][T11075] ? __pfx___se_sys_futex+0x10/0x10 [ 367.609421][T11075] ? do_user_addr_fault+0xd3f/0x1480 [ 367.609452][T11075] __x64_sys_openat+0x138/0x170 [ 367.609481][T11075] do_syscall_64+0x166/0x520 [ 367.609512][T11075] ? trace_irq_disable+0x3b/0x140 [ 367.609540][T11075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.609564][T11075] ? clear_bhb_loop+0x70/0xc0 [ 367.609591][T11075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.609614][T11075] RIP: 0033:0x7f7b2439f559 [ 367.609636][T11075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.609656][T11075] RSP: 002b:00007f7b252a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 367.609680][T11075] RAX: ffffffffffffffda RBX: 00007f7b24625fa0 RCX: 00007f7b2439f559 [ 367.609697][T11075] RDX: 0000000000082802 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 367.609715][T11075] RBP: 00007f7b24436b20 R08: 0000000000000000 R09: 0000000000000000 [ 367.609728][T11075] R10: 00000000000001f8 R11: 0000000000000246 R12: 0000000000000000 [ 367.609743][T11075] R13: 00007f7b24626038 R14: 00007f7b24625fa0 R15: 00007ffead4cca48 [ 367.609779][T11075] [ 367.660852][T11075] loop9: detected capacity change from 0 to 7 [ 367.954431][T11075] Dev loop9: unable to read RDB block 7 [ 367.954466][T11075] loop9: unable to read partition table [ 367.954610][T11075] loop9: partition table beyond EOD, truncated [ 367.954682][T11075] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 368.424105][T11097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.424557][T11097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.618699][ T5727] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 368.769074][ T5727] usb 6-1: Using ep0 maxpacket: 32 [ 368.771135][ T5727] usb 6-1: New USB device found: idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 368.774611][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.774640][ T5727] usb 6-1: Product: syz [ 368.774655][ T5727] usb 6-1: Manufacturer: syz [ 368.774702][ T5727] usb 6-1: SerialNumber: syz [ 368.777146][ T5727] usb 6-1: config 0 descriptor?? [ 369.138793][T11102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.141306][T11102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.187848][T11102] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 369.201872][ T5727] airspy 6-1:0.0: Board ID: 00 [ 369.201896][ T5727] airspy 6-1:0.0: Firmware version: [ 369.528788][ T5796] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 369.612527][ T5727] airspy 6-1:0.0: usb_control_msg() failed -71 request 0e [ 369.651877][ T5727] airspy 6-1:0.0: Registered as swradio24 [ 369.651898][ T5727] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 369.655926][ T5727] usb 6-1: USB disconnect, device number 19 [ 369.700060][ T5717] usb 2-1: USB disconnect, device number 23 [ 369.701074][ T5796] usb 5-1: New USB device found: idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 369.709086][ T5796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.730622][ T5796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.730706][ T5796] usb 5-1: Product: syz [ 369.730749][ T5796] usb 5-1: Manufacturer: syz [ 369.730794][ T5796] usb 5-1: SerialNumber: syz [ 369.774292][ T5796] usb 5-1: config 0 descriptor?? [ 369.787390][ T5796] dm9601 5-1:0.0: probe with driver dm9601 failed with error -22 [ 369.907107][ T9551] udevd[9551]: 'v4l_id /dev/swradio24' [11105] terminated by signal 11 (Segmentation fault) [ 369.993651][T11111] futex_wake_op: syz.1.1661 tries to shift op by 144; fix this program [ 370.452460][T11123] fuse: Unknown parameter '00000000000000000000' [ 370.503458][ T5717] usb 5-1: USB disconnect, device number 69 [ 370.958668][ T32] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 371.108643][ T32] usb 6-1: Using ep0 maxpacket: 16 [ 371.109369][ T32] usb 6-1: New USB device found: idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 371.111075][ T32] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 371.111101][ T32] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.111122][ T32] usb 6-1: config 1 has no interface number 0 [ 371.111175][ T32] usb 6-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 371.111205][ T32] usb 6-1: config 1 interface 105 has no altsetting 0 [ 371.114443][ T32] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 371.114470][ T32] usb 6-1: Product: syz [ 371.114486][ T32] usb 6-1: Manufacturer: syz [ 371.114502][ T32] usb 6-1: SerialNumber: syz [ 371.369072][ T32] aqc111 6-1:1.105: probe with driver aqc111 failed with error -22 [ 371.478669][ T27] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 371.573875][T11130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.574358][T11130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.700661][ T27] usb 5-1: New USB device found: idVendor=1235, idProduct=8201, bcdDevice=0.40 [ 371.704579][ T27] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 371.704629][ T27] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 371.707998][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.708026][ T27] usb 5-1: Product: syz [ 371.708042][ T27] usb 5-1: Manufacturer: syz [ 371.708058][ T27] usb 5-1: SerialNumber: syz [ 371.752654][ T33] kauditd_printk_skb: 51 callbacks suppressed [ 371.752760][ T33] audit: type=1800 audit(1793366655.447:380): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=208126 res=0 errno=-22 [ 371.796792][T11135] Bluetooth: MGMT ver 1.23 [ 371.796895][T11135] Bluetooth: hci0: expected 65520 bytes, got 19 bytes [ 371.821671][ T33] audit: type=1800 audit(1793366655.517:381): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=208158 res=0 errno=-22 [ 371.825423][ T33] audit: type=1800 audit(1793366655.517:382): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=208133 res=0 errno=-22 [ 371.826878][ T33] audit: type=1800 audit(1793366655.517:383): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=208134 res=0 errno=-22 [ 371.964554][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1668'. [ 371.965156][T11132] netlink: 'syz.4.1668': attribute type 16 has an invalid length. [ 371.965172][T11132] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1668'. [ 371.965194][T11132] veth0_macvtap: entered allmulticast mode [ 372.008467][T11132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.026131][T11132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.066865][ T27] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 372.071190][ T27] usb 5-1: cannot request logical cluster ID: 3 (err: -71) [ 372.083029][ T27] usb 5-1: unit 80 not found! [ 372.083176][ T27] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 372.109727][ T27] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 372.328135][ T27] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 372.366838][ T33] audit: type=1800 audit(1793366656.047:384): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=208155 res=0 errno=-22 [ 372.366894][ T33] audit: type=1800 audit(1793366656.057:385): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=208156 res=0 errno=-22 [ 372.381221][ T27] usb 5-1: USB disconnect, device number 70 [ 372.450073][ T33] audit: type=1800 audit(1793366656.147:386): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=208135 res=0 errno=-19 [ 372.450821][ T33] audit: type=1800 audit(1793366656.147:387): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=208157 res=0 errno=-22 [ 372.547774][ T9551] udevd[9551]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 372.917371][T11139] FAULT_INJECTION: forcing a failure. [ 372.917371][T11139] name failslab, interval 1, probability 0, space 0, times 0 [ 372.917413][T11139] CPU: 0 UID: 0 PID: 11139 Comm: syz.3.1670 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.917448][T11139] Tainted: [L]=SOFTLOCKUP [ 372.917458][T11139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 372.917474][T11139] Call Trace: [ 372.917485][T11139] [ 372.917496][T11139] dump_stack_lvl+0xe8/0x150 [ 372.917540][T11139] should_fail_ex+0x3eb/0x540 [ 372.917582][T11139] should_failslab+0xa8/0x100 [ 372.917617][T11139] ? __mpol_dup+0x79/0x330 [ 372.917662][T11139] kmem_cache_alloc_noprof+0x9c/0x600 [ 372.917693][T11139] ? __mpol_dup+0x79/0x330 [ 372.917729][T11139] ? rcu_is_watching+0x16/0xb0 [ 372.917773][T11139] __mpol_dup+0x79/0x330 [ 372.917807][T11139] ? __pfx___mpol_dup+0x10/0x10 [ 372.917841][T11139] ? mpol_set_shared_policy+0xa0/0xb80 [ 372.917876][T11139] ? kmem_cache_alloc_noprof+0x151/0x600 [ 372.917912][T11139] mpol_set_shared_policy+0xb6/0xb80 [ 372.917949][T11139] ? __pfx___mpol_dup+0x10/0x10 [ 372.917995][T11139] mbind_range+0x5da/0x800 [ 372.918028][T11139] __se_sys_mbind+0xacd/0x10e0 [ 372.918071][T11139] ? __pfx___se_sys_mbind+0x10/0x10 [ 372.918100][T11139] ? __fget_files+0x3a2/0x420 [ 372.918139][T11139] ? __se_sys_futex+0x3a8/0x450 [ 372.918186][T11139] ? rcu_is_watching+0x16/0xb0 [ 372.918228][T11139] ? __x64_sys_mbind+0x21/0xf0 [ 372.918263][T11139] do_syscall_64+0x166/0x520 [ 372.918299][T11139] ? trace_irq_disable+0x3b/0x140 [ 372.918330][T11139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.918357][T11139] ? clear_bhb_loop+0x70/0xc0 [ 372.918390][T11139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.918416][T11139] RIP: 0033:0x7f30fe19f559 [ 372.918440][T11139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.918462][T11139] RSP: 002b:00007f30ff0e5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 372.918490][T11139] RAX: ffffffffffffffda RBX: 00007f30fe425fa0 RCX: 00007f30fe19f559 [ 372.918509][T11139] RDX: 0000000000000005 RSI: 0000000000600000 RDI: 0000200000000000 [ 372.918524][T11139] RBP: 00007f30fe236b20 R08: 0000000000000008 R09: 0000000000000000 [ 372.918540][T11139] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 372.918556][T11139] R13: 00007f30fe426038 R14: 00007f30fe425fa0 R15: 00007ffe696f0938 [ 372.918594][T11139] [ 373.105686][ T5727] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 373.312981][ T5727] usb 5-1: New USB device found: idVendor=1e7d, idProduct=30d4, bcdDevice=0.01 [ 373.314979][ T5727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.315042][ T5727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.315084][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.339627][ T5727] usb 5-1: config 0 descriptor?? [ 373.343365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 373.383976][ T33] audit: type=1800 audit(1793366657.077:388): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=208338 res=0 errno=-22 [ 373.411117][ T33] audit: type=1800 audit(1793366657.107:389): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=208367 res=0 errno=-22 [ 373.507455][T11141] FAULT_INJECTION: forcing a failure. [ 373.507455][T11141] name failslab, interval 1, probability 0, space 0, times 0 [ 373.507494][T11141] CPU: 1 UID: 0 PID: 11141 Comm: syz.3.1671 Tainted: G L syzkaller #0 PREEMPT(full) [ 373.507524][T11141] Tainted: [L]=SOFTLOCKUP [ 373.507533][T11141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 373.507551][T11141] Call Trace: [ 373.507558][T11141] [ 373.507565][T11141] dump_stack_lvl+0xe8/0x150 [ 373.507593][T11141] should_fail_ex+0x3eb/0x540 [ 373.507649][T11141] should_failslab+0xa8/0x100 [ 373.507681][T11141] __kmalloc_cache_noprof+0x9e/0x600 [ 373.507712][T11141] ? proc_thread_self_get_link+0xfc/0x190 [ 373.507736][T11141] ? proc_thread_self_get_link+0xfc/0x190 [ 373.507775][T11141] ? __task_pid_nr_ns+0x399/0x470 [ 373.507805][T11141] proc_thread_self_get_link+0xfc/0x190 [ 373.507838][T11141] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 373.507878][T11141] pick_link+0x77d/0xfd0 [ 373.507904][T11141] step_into_slowpath+0x58a/0x820 [ 373.507943][T11141] ? __pfx_step_into_slowpath+0x10/0x10 [ 373.507973][T11141] ? inode_permission+0x2b8/0x600 [ 373.508001][T11141] link_path_walk+0xd50/0x1910 [ 373.508046][T11141] path_openat+0x1b7/0x20f0 [ 373.508115][T11141] do_file_open+0x23e/0x4a0 [ 373.508152][T11141] ? __pfx_do_file_open+0x10/0x10 [ 373.508227][T11141] ? _raw_spin_unlock+0x28/0x50 [ 373.508248][T11141] ? alloc_fd+0x6af/0x760 [ 373.508299][T11141] do_sys_openat2+0x115/0x200 [ 373.508320][T11141] ? __se_sys_futex+0x3a8/0x450 [ 373.508353][T11141] ? __pfx_do_sys_openat2+0x10/0x10 [ 373.508386][T11141] ? rcu_is_watching+0x16/0xb0 [ 373.508428][T11141] __x64_sys_openat+0x138/0x170 [ 373.508458][T11141] do_syscall_64+0x166/0x520 [ 373.508487][T11141] ? trace_irq_disable+0x3b/0x140 [ 373.508530][T11141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.508552][T11141] ? clear_bhb_loop+0x70/0xc0 [ 373.508580][T11141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.508603][T11141] RIP: 0033:0x7f30fe15fd8e [ 373.508624][T11141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 373.508643][T11141] RSP: 002b:00007f30ff0e4f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 373.508667][T11141] RAX: ffffffffffffffda RBX: 00007f30ff0e56c0 RCX: 00007f30fe15fd8e [ 373.508702][T11141] RDX: 0000000000000002 RSI: 00007f30fe23641a RDI: ffffffffffffff9c [ 373.508717][T11141] RBP: 00007f30fe236b20 R08: 0000000000000000 R09: 0000000000000000 [ 373.508733][T11141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.508747][T11141] R13: 00007f30fe426038 R14: 00007f30fe425fa0 R15: 00007ffe696f0938 [ 373.508783][T11141] [ 373.679871][T11141] FAULT_INJECTION: forcing a failure. [ 373.679871][T11141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.679967][T11141] CPU: 1 UID: 0 PID: 11141 Comm: syz.3.1671 Tainted: G L syzkaller #0 PREEMPT(full) [ 373.680038][T11141] Tainted: [L]=SOFTLOCKUP [ 373.680067][T11141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 373.680101][T11141] Call Trace: [ 373.680124][T11141] [ 373.680154][T11141] dump_stack_lvl+0xe8/0x150 [ 373.680238][T11141] should_fail_ex+0x3eb/0x540 [ 373.680336][T11141] _copy_from_user+0x2d/0xb0 [ 373.680431][T11141] __se_sys_mbind+0x652/0x10e0 [ 373.680542][T11141] ? __pfx___se_sys_mbind+0x10/0x10 [ 373.680613][T11141] ? __fget_files+0x3a2/0x420 [ 373.680687][T11141] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 373.680787][T11141] ? fdget+0x1ac/0x250 [ 373.680854][T11141] ? fput+0xa0/0xd0 [ 373.680926][T11141] ? rcu_is_watching+0x16/0xb0 [ 373.681022][T11141] ? __x64_sys_mbind+0x21/0xf0 [ 373.681106][T11141] do_syscall_64+0x166/0x520 [ 373.681175][T11141] ? trace_irq_disable+0x3b/0x140 [ 373.681243][T11141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.681305][T11141] ? clear_bhb_loop+0x70/0xc0 [ 373.681385][T11141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.681454][T11141] RIP: 0033:0x7f30fe19f559 [ 373.681517][T11141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.681569][T11141] RSP: 002b:00007f30ff0e5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 373.681633][T11141] RAX: ffffffffffffffda RBX: 00007f30fe425fa0 RCX: 00007f30fe19f559 [ 373.681686][T11141] RDX: 0000000000000005 RSI: 0000000000600000 RDI: 0000200000000000 [ 373.681727][T11141] RBP: 00007f30ff0e5090 R08: 0000000000000008 R09: 0000000000000000 [ 373.681769][T11141] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 373.681809][T11141] R13: 00007f30fe426038 R14: 00007f30fe425fa0 R15: 00007ffe696f0938 [ 373.681895][T11141] [ 373.752626][T11137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.772918][T11137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.137899][ T5727] usbhid 5-1:0.0: can't add hid device: -71 [ 374.138015][ T5727] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 374.160495][ T5727] usb 5-1: USB disconnect, device number 71 [ 374.200595][T11144] Invalid argument reading file caps for ./file0 [ 374.824238][T11130] syz.5.1667 (11130): drop_caches: 2 [ 374.901042][ T996] usb 6-1: USB disconnect, device number 20 [ 375.023284][T11155] phram: parameter too long [ 375.125798][T11158] rxe_eth0 speed is unknown, defaulting to 1000 [ 375.474170][T11163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.474670][T11163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.733733][T11165] FAULT_INJECTION: forcing a failure. [ 375.733733][T11165] name failslab, interval 1, probability 0, space 0, times 0 [ 375.733777][T11165] CPU: 0 UID: 0 PID: 11165 Comm: syz.5.1679 Tainted: G L syzkaller #0 PREEMPT(full) [ 375.733814][T11165] Tainted: [L]=SOFTLOCKUP [ 375.733824][T11165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 375.733840][T11165] Call Trace: [ 375.733850][T11165] [ 375.733885][T11165] dump_stack_lvl+0xe8/0x150 [ 375.733929][T11165] should_fail_ex+0x3eb/0x540 [ 375.733981][T11165] ? alloc_slab_obj_exts+0x5c/0x180 [ 375.734007][T11165] should_failslab+0xa8/0x100 [ 375.734044][T11165] ? alloc_slab_obj_exts+0x5c/0x180 [ 375.734067][T11165] __kmalloc_flags_noprof+0x123/0x790 [ 375.734101][T11165] ? alloc_slab_obj_exts+0x5c/0x180 [ 375.734133][T11165] alloc_slab_obj_exts+0x5c/0x180 [ 375.734161][T11165] __memcg_slab_post_alloc_hook+0x5f0/0xdb0 [ 375.734214][T11165] ? copy_net_ns+0x1de/0x770 [ 375.734365][T11165] kmem_cache_alloc_noprof+0x362/0x600 [ 375.734392][T11165] ? __kmalloc_noprof+0x387/0x710 [ 375.734419][T11165] ? copy_net_ns+0x1de/0x770 [ 375.734443][T11165] ? kmem_cache_alloc_noprof+0x151/0x600 [ 375.734469][T11165] ? copy_net_ns+0x1de/0x770 [ 375.734503][T11165] copy_net_ns+0x1de/0x770 [ 375.734528][T11165] ? copy_cgroup_ns+0x263/0x890 [ 375.734567][T11165] create_new_namespaces+0x3f0/0x6b0 [ 375.734606][T11165] ? security_capable+0x7e/0x2c0 [ 375.734649][T11165] unshare_nsproxy_namespaces+0x144/0x190 [ 375.734689][T11165] ksys_unshare+0x532/0x890 [ 375.734729][T11165] ? __pfx_ksys_unshare+0x10/0x10 [ 375.734767][T11165] ? rcu_is_watching+0x16/0xb0 [ 375.734814][T11165] __x64_sys_unshare+0x38/0x50 [ 375.734849][T11165] do_syscall_64+0x166/0x520 [ 375.734886][T11165] ? trace_irq_disable+0x3b/0x140 [ 375.734918][T11165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.734956][T11165] ? clear_bhb_loop+0x70/0xc0 [ 375.734994][T11165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.735022][T11165] RIP: 0033:0x7f7b2439f559 [ 375.735046][T11165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.735070][T11165] RSP: 002b:00007f7b252a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 375.735100][T11165] RAX: ffffffffffffffda RBX: 00007f7b24625fa0 RCX: 00007f7b2439f559 [ 375.735120][T11165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 375.735137][T11165] RBP: 00007f7b24436b20 R08: 0000000000000000 R09: 0000000000000000 [ 375.735154][T11165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.735170][T11165] R13: 00007f7b24626038 R14: 00007f7b24625fa0 R15: 00007ffead4cca48 [ 375.735210][T11165] [ 376.177071][T11165] rxe_eth0 speed is unknown, defaulting to 1000 [ 376.261549][T11168] FAULT_INJECTION: forcing a failure. [ 376.261549][T11168] name failslab, interval 1, probability 0, space 0, times 0 [ 376.261590][T11168] CPU: 0 UID: 0 PID: 11168 Comm: syz.3.1680 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.261624][T11168] Tainted: [L]=SOFTLOCKUP [ 376.261633][T11168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 376.261648][T11168] Call Trace: [ 376.261657][T11168] [ 376.261667][T11168] dump_stack_lvl+0xe8/0x150 [ 376.261704][T11168] should_fail_ex+0x3eb/0x540 [ 376.261744][T11168] should_failslab+0xa8/0x100 [ 376.261778][T11168] ? security_file_alloc+0x34/0x310 [ 376.261803][T11168] kmem_cache_alloc_noprof+0x9c/0x600 [ 376.261826][T11168] ? rcu_is_watching+0x16/0xb0 [ 376.261856][T11168] ? security_file_alloc+0x34/0x310 [ 376.261888][T11168] security_file_alloc+0x34/0x310 [ 376.261914][T11168] init_file+0x90/0x2b0 [ 376.261949][T11168] alloc_empty_file+0x74/0x1d0 [ 376.261973][T11168] path_openat+0x96/0x20f0 [ 376.262022][T11168] do_file_open+0x23e/0x4a0 [ 376.262056][T11168] ? __pfx_do_file_open+0x10/0x10 [ 376.262107][T11168] ? _raw_spin_unlock+0x28/0x50 [ 376.262135][T11168] ? alloc_fd+0x6af/0x760 [ 376.262169][T11168] do_sys_openat2+0x115/0x200 [ 376.262191][T11168] ? __se_sys_futex+0x3a8/0x450 [ 376.262225][T11168] ? __pfx_do_sys_openat2+0x10/0x10 [ 376.262251][T11168] ? __pfx___se_sys_futex+0x10/0x10 [ 376.262291][T11168] __x64_sys_openat+0x138/0x170 [ 376.262319][T11168] do_syscall_64+0x166/0x520 [ 376.262348][T11168] ? trace_irq_disable+0x3b/0x140 [ 376.262375][T11168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.262397][T11168] ? clear_bhb_loop+0x70/0xc0 [ 376.262425][T11168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.262447][T11168] RIP: 0033:0x7f30fe15fd8e [ 376.262468][T11168] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 376.262487][T11168] RSP: 002b:00007f30ff0e4f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 376.262511][T11168] RAX: ffffffffffffffda RBX: 00007f30ff0e56c0 RCX: 00007f30fe15fd8e [ 376.262527][T11168] RDX: 0000000000000002 RSI: 00007f30fe23641a RDI: ffffffffffffff9c [ 376.262543][T11168] RBP: 00007f30fe236b20 R08: 0000000000000000 R09: 0000000000000000 [ 376.262557][T11168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.262570][T11168] R13: 00007f30fe426038 R14: 00007f30fe425fa0 R15: 00007ffe696f0938 [ 376.262605][T11168] [ 376.719675][T11176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.720549][T11176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.757225][T11176] netlink: 'syz.3.1682': attribute type 10 has an invalid length. [ 376.757250][T11176] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1682'. [ 376.758240][T11176] bridge0: port 3(veth1_macvtap) entered blocking state [ 376.769189][T11176] bridge0: port 3(veth1_macvtap) entered disabled state [ 376.769839][T11176] veth1_macvtap: entered allmulticast mode [ 376.809590][T11176] veth1_macvtap: left allmulticast mode [ 376.809962][T11176] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 377.445575][ T33] kauditd_printk_skb: 9 callbacks suppressed [ 377.445597][ T33] audit: type=1800 audit(1793366661.137:399): pid=11189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1685" name="scheduler" dev="sysfs" ino=21256 res=0 errno=-22 [ 377.538450][T11189] FAULT_INJECTION: forcing a failure. [ 377.538450][T11189] name fail_futex, interval 1, probability 0, space 0, times 0 [ 377.538491][T11189] CPU: 0 UID: 0 PID: 11189 Comm: syz.4.1685 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.538526][T11189] Tainted: [L]=SOFTLOCKUP [ 377.538534][T11189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 377.538548][T11189] Call Trace: [ 377.538557][T11189] [ 377.538567][T11189] dump_stack_lvl+0xe8/0x150 [ 377.538606][T11189] should_fail_ex+0x3eb/0x540 [ 377.538645][T11189] get_futex_key+0x1ab/0x1410 [ 377.538689][T11189] ? __pfx_get_futex_key+0x10/0x10 [ 377.538731][T11189] futex_wake+0x119/0x5f0 [ 377.538757][T11189] ? __pfx_futex_wake+0x10/0x10 [ 377.538795][T11189] do_futex+0x458/0x4e0 [ 377.538830][T11189] ? __pfx_do_futex+0x10/0x10 [ 377.538858][T11189] ? __fget_files+0x3a2/0x420 [ 377.538883][T11189] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 377.538926][T11189] __se_sys_futex+0x3a8/0x450 [ 377.538965][T11189] ? ksys_write+0x242/0x270 [ 377.538992][T11189] ? __pfx___se_sys_futex+0x10/0x10 [ 377.539026][T11189] ? __pfx_ksys_write+0x10/0x10 [ 377.539060][T11189] ? __x64_sys_futex+0x21/0xf0 [ 377.539097][T11189] do_syscall_64+0x166/0x520 [ 377.539128][T11189] ? trace_irq_disable+0x3b/0x140 [ 377.539156][T11189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.539179][T11189] ? clear_bhb_loop+0x70/0xc0 [ 377.539208][T11189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.539249][T11189] RIP: 0033:0x7fcfadd9f559 [ 377.539271][T11189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.539292][T11189] RSP: 002b:00007fcfaec180e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 377.539317][T11189] RAX: ffffffffffffffda RBX: 00007fcfae025fa8 RCX: 00007fcfadd9f559 [ 377.539334][T11189] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcfae025fac [ 377.539348][T11189] RBP: 00007fcfae025fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 377.539364][T11189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.539377][T11189] R13: 00007fcfae026038 R14: 00007ffdc728cf10 R15: 00007ffdc728cff8 [ 377.539413][T11189] [ 377.775955][T11190] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 377.775984][T11190] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 377.776319][T11190] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 377.776341][T11190] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 377.941160][ T33] audit: type=1800 audit(1793366661.637:400): pid=11194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1687" name="bus" dev="tmpfs" ino=2103 res=0 errno=-22 [ 378.032979][T11196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.037024][T11196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.079678][ T33] audit: type=1800 audit(1793366661.777:401): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216272 res=0 errno=-22 [ 378.111284][ T33] audit: type=1800 audit(1793366661.807:402): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216282 res=0 errno=-22 [ 378.175259][ T14] nci: nci_rx_work: unknown MT 0x1 [ 378.401351][T11205] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 378.493172][T11207] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1690'. [ 378.493230][T11207] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1690'. [ 378.930441][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.406140][ T33] audit: type=1804 audit(1793366663.097:403): pid=11209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1691" name="/newroot/95/file0" dev="tmpfs" ino=537 res=1 errno=0 [ 379.430477][ T33] audit: type=1804 audit(1793366663.097:404): pid=11210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1691" name="/newroot/95/file0" dev="tmpfs" ino=537 res=1 errno=0 [ 380.657572][ T33] audit: type=1800 audit(1793366664.347:405): pid=11219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1693" name="scheduler" dev="sysfs" ino=15080 res=0 errno=-22 [ 381.027303][T11196] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 381.243493][T11228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.245269][T11228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.274925][ T55] Bluetooth: hci2: hardware error 0x08 [ 381.498115][T11236] netlink: 'syz.5.1699': attribute type 10 has an invalid length. [ 381.498142][T11236] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1699'. [ 381.498369][T11236] team0: entered promiscuous mode [ 381.498397][T11236] team_slave_0: entered promiscuous mode [ 381.527792][T11236] team_slave_1: entered promiscuous mode [ 381.529779][T11236] team0: entered allmulticast mode [ 381.529834][T11236] team_slave_0: entered allmulticast mode [ 381.529904][T11236] team_slave_1: entered allmulticast mode [ 381.532975][T11236] bridge0: port 3(team0) entered blocking state [ 381.533828][T11236] bridge0: port 3(team0) entered disabled state [ 381.554618][T11236] bridge0: port 3(team0) entered blocking state [ 381.554969][T11236] bridge0: port 3(team0) entered forwarding state [ 382.023734][ T33] audit: type=1800 audit(1793366665.717:406): pid=11249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1703" name="resume" dev="sysfs" ino=1437 res=0 errno=-22 [ 382.084159][ T33] audit: type=1800 audit(1793366665.777:407): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216589 res=0 errno=-22 [ 382.088150][T11249] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 382.088177][T11249] block device autoloading is deprecated and will be removed. [ 382.121219][ T33] audit: type=1800 audit(1793366665.807:408): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216498 res=0 errno=-22 [ 382.598433][T11252] usb usb5: usbfs: process 11252 (syz.5.1705) did not claim interface 0 before use [ 383.328652][ T55] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 383.591480][T11261] UBIFS error (pid: 11261): cannot open "ubi:0", error -19 [ 383.801815][ T33] audit: type=1800 audit(1793366667.497:409): pid=11268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1711" name="arp_interval" dev="sysfs" ino=182255 res=0 errno=-22 [ 383.861209][T11267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.861670][T11267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.915650][T11270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1712'. [ 384.028637][ T33] audit: type=1800 audit(1793366667.717:410): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216645 res=0 errno=-22 [ 384.037429][ T33] audit: type=1800 audit(1793366667.727:411): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216655 res=0 errno=-22 [ 384.089262][ T32] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 384.249677][ T32] usb 6-1: Using ep0 maxpacket: 32 [ 384.259363][ T32] usb 6-1: New USB device found: idVendor=2040, idProduct=c603, bcdDevice=1.8e [ 384.266370][ T32] usb 6-1: config 0 interface 0 has no altsetting 0 [ 384.266414][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.294762][ T33] audit: type=1800 audit(1793366667.987:412): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216674 res=0 errno=-22 [ 384.296727][ T32] usb 6-1: config 0 descriptor?? [ 384.321530][ T33] audit: type=1800 audit(1793366668.007:413): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=216703 res=0 errno=-22 [ 384.340711][ T33] audit: type=1800 audit(1793366668.017:414): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=216681 res=0 errno=-22 [ 384.364724][ T33] audit: type=1800 audit(1793366668.057:415): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=216682 res=0 errno=-22 [ 384.389717][ T33] audit: type=1800 audit(1793366668.087:416): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=216683 res=0 errno=-22 [ 384.408067][ T32] usb 6-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 384.429281][ T33] audit: type=1800 audit(1793366668.127:417): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216723 res=0 errno=-22 [ 384.475213][ T32] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 384.475801][ T32] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 384.475886][ T32] usb 6-1: media controller created [ 384.496164][ T33] audit: type=1800 audit(1793366668.187:418): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216750 res=0 errno=-22 [ 384.526879][T11268] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 384.538834][T11268] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 384.547401][T11268] CPU: 1 UID: 0 PID: 11268 Comm: syz.5.1711 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.558368][T11268] Tainted: [L]=SOFTLOCKUP [ 384.562714][T11268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 384.572836][T11268] RIP: 0010:__mutex_lock+0x143/0x15a0 [ 384.578344][T11268] Code: c0 00 ea f3 9b 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 8d 12 00 00 83 3d 1b 6e d9 0f 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 12 e3 25 f6 4d 39 64 24 58 0f 85 a0 11 00 00 [ 384.598006][T11268] RSP: 0018:ffffc900035b7460 EFLAGS: 00010206 [ 384.604110][T11268] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9bf3ea03 [ 384.612122][T11268] RDX: 0000000000000000 RSI: ffffffff8ea7a962 RDI: 00000000000000c0 [ 384.620326][T11268] RBP: ffffc900035b75f8 R08: ffffc900035b7567 R09: 0000000000000000 [ 384.628321][T11268] R10: ffffc900035b7540 R11: fffff520006b6ead R12: 0000000000000068 [ 384.636339][T11268] R13: 0000000000000000 R14: 1ffff920006b6ea0 R15: 0000000000000000 [ 384.644338][T11268] FS: 00007f7b2527f6c0(0000) GS:ffff888123476000(0000) knlGS:0000000000000000 [ 384.653304][T11268] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 384.660115][T11268] CR2: 00007fcfade61a0c CR3: 0000000035a8a000 CR4: 00000000003526f0 [ 384.668144][T11268] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000ff99 [ 384.676432][T11268] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 384.684649][T11268] Call Trace: [ 384.688059][T11268] [ 384.691040][T11268] ? __mutex_lock+0x305/0x15a0 [ 384.695875][T11268] ? dvb_usbv2_generic_write+0x26/0x60 [ 384.701549][T11268] ? __mutex_trylock_common+0x15f/0x270 [ 384.707160][T11268] ? __pfx___mutex_lock+0x10/0x10 [ 384.712238][T11268] ? __pfx___mutex_lock+0x10/0x10 [ 384.717360][T11268] ? trace_contention_end+0x3d/0x140 [ 384.722708][T11268] ? __mutex_lock+0x305/0x15a0 [ 384.727522][T11268] dvb_usbv2_generic_write+0x26/0x60 [ 384.732879][T11268] mxl111sf_ctrl_msg+0x160/0x2f0 [ 384.737968][T11268] mxl111sf_write_reg+0xa9/0x1b0 [ 384.742971][T11268] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 384.748565][T11268] mxl111sf_i2c_xfer+0x463/0x5060 [ 384.753664][T11268] ? lock_acquire+0x115/0x350 [ 384.758569][T11268] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 384.764090][T11268] ? is_bpf_text_address+0x26/0x2b0 [ 384.769334][T11268] ? kernel_text_address+0xa5/0xe0 [ 384.774517][T11268] ? __kernel_text_address+0xd/0x30 [ 384.779760][T11268] ? unwind_get_return_address+0x4d/0x90 [ 384.785442][T11268] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 384.791638][T11268] ? arch_stack_walk+0xfb/0x150 [ 384.796542][T11268] ? stack_trace_save+0xa9/0x100 [ 384.801516][T11268] ? __pfx_stack_trace_save+0x10/0x10 [ 384.806931][T11268] ? stack_depot_save_flags+0x33/0x810 [ 384.812446][T11268] ? __pfx_stack_trace_save+0x10/0x10 [ 384.817868][T11268] ? kasan_save_track+0x4f/0x80 [ 384.822757][T11268] ? look_up_lock_class+0x57/0x110 [ 384.827915][T11268] ? register_lock_class+0x31/0x2e0 [ 384.833179][T11268] ? __lock_acquire+0x747/0x2de0 [ 384.838174][T11268] ? do_raw_spin_lock+0x12b/0x2f0 [ 384.843254][T11268] __i2c_transfer+0x7bf/0x1fe0 [ 384.848157][T11268] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 384.854010][T11268] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 384.859865][T11268] ? rt_mutex_lock_nested+0x149/0x1c0 [ 384.865306][T11268] ? i2c_transfer+0xc7/0x2d0 [ 384.869945][T11268] i2c_transfer+0x1cb/0x2d0 [ 384.874498][T11268] i2cdev_ioctl_rdwr+0x460/0x740 [ 384.879585][T11268] i2cdev_ioctl+0x6a5/0x880 [ 384.884138][T11268] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 384.889212][T11268] ? __fget_files+0x2a/0x420 [ 384.893856][T11268] ? bpf_lsm_file_ioctl+0x9/0x20 [ 384.898842][T11268] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 384.903912][T11268] __se_sys_ioctl+0xfc/0x170 [ 384.908548][T11268] do_syscall_64+0x166/0x520 [ 384.913291][T11268] ? trace_irq_disable+0x3b/0x140 [ 384.918369][T11268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.924601][T11268] ? clear_bhb_loop+0x70/0xc0 [ 384.929329][T11268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.935267][T11268] RIP: 0033:0x7f7b2439f559 [ 384.939725][T11268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.959544][T11268] RSP: 002b:00007f7b2527f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 384.968007][T11268] RAX: ffffffffffffffda RBX: 00007f7b24626090 RCX: 00007f7b2439f559 [ 384.976025][T11268] RDX: 0000200000000380 RSI: 0000000000000707 RDI: 0000000000000009 [ 384.984040][T11268] RBP: 00007f7b24436b20 R08: 0000000000000000 R09: 0000000000000000 [ 384.992067][T11268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.001393][T11268] R13: 00007f7b24626128 R14: 00007f7b24626090 R15: 00007ffead4cca48 [ 385.009427][T11268] [ 385.012514][T11268] Modules linked in: [ 385.017850][T11268] ---[ end trace 0000000000000000 ]--- [ 385.031883][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 385.068895][T11268] RIP: 0010:__mutex_lock+0x143/0x15a0 [ 385.068962][T11268] Code: c0 00 ea f3 9b 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 8d 12 00 00 83 3d 1b 6e d9 0f 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 12 e3 25 f6 4d 39 64 24 58 0f 85 a0 11 00 00 [ 385.068981][T11268] RSP: 0018:ffffc900035b7460 EFLAGS: 00010206 [ 385.069003][T11268] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9bf3ea03 [ 385.069020][T11268] RDX: 0000000000000000 RSI: ffffffff8ea7a962 RDI: 00000000000000c0 [ 385.069034][T11268] RBP: ffffc900035b75f8 R08: ffffc900035b7567 R09: 0000000000000000 [ 385.069048][T11268] R10: ffffc900035b7540 R11: fffff520006b6ead R12: 0000000000000068 [ 385.069070][T11268] R13: 0000000000000000 R14: 1ffff920006b6ea0 R15: 0000000000000000 [ 385.069106][T11268] FS: 00007f7b2527f6c0(0000) GS:ffff888123476000(0000) knlGS:0000000000000000 [ 385.069126][T11268] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 385.069141][T11268] CR2: 00007f7b2525ed58 CR3: 0000000035a8a000 CR4: 00000000003526f0 [ 385.069160][T11268] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000ff99 [ 385.069174][T11268] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 385.069191][T11268] Kernel panic - not syncing: Fatal exception [ 385.188405][T11268] Kernel Offset: disabled [ 385.192764][T11268] Rebooting in 86400 seconds..