last executing test programs: 1m29.886982882s ago: executing program 1 (id=692): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130726bd70000000000000000000000000000020ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000100280000000000000068001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000080"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m29.637458008s ago: executing program 1 (id=694): ptrace$ARCH_SET_GS(0x1e, 0x0, 0x0, 0x1001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) wait4(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x15}, 0x4000000) 1m28.482449153s ago: executing program 1 (id=695): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='100', 0x3) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @empty}, 0x1c) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x4cec2000) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000002280)={0x48, 0x2, 0x0, 0x3e00}) 1m27.949709943s ago: executing program 1 (id=697): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56e, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1f0, 0x1c, "", [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x210a, 0xfd, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xb3, 0x4d, 0xf3}}}}}]}}]}}, 0x0) (async) pipe(0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rpc\x00') r2 = openat(r1, &(0x7f00000001c0)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='nf ::7.0.0.1 2\\000000\\0 l\\calhost\n', 0x24) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x72bdf5a5, 0x8ca8}}, './file0\x00'}) (async) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0xb}}, './file0\x00'}) (async) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x20, 0xc, 0x6, {0x6, 0x10, "0166d74b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m24.783183784s ago: executing program 1 (id=711): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_clone(0x1000000, &(0x7f0000000280)="64a036715aa643cf9f5d111e9493f4ece7610b7d31d0226f2297673ecc820011c655cb961eebb45dda6bb0d21ada0daafd458bf467c3cd503b67b0bfcf2364468513756ad0fc91be1f0216ef430725562e9d83baef86679778aae3bcd4fa4d9d84f33b6c60e3c2bc5cd2497c8ff8897b8efa8d32583ed7ef70be085682386c08ac2895d4de2a5bdd9c697207a7c1e9dac8f49269f46a96bb87c9579dd422f6bc807bd1481fe8c6e75fe0112fbaa7577762aeed1c6d", 0xb5, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="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") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f00000013c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440), 0x8, &(0x7f0000001480)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdir(&(0x7f0000001500)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001540)='./file1\x00', 0x143142, 0x120) fsetxattr$security_evm(r0, &(0x7f0000001580), &(0x7f00000015c0)=@v2={0x5, 0x3, 0x6, 0x3}, 0x9, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000001640)='./file0\x00', &(0x7f0000001680), 0x8, &(0x7f00000016c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000001700)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000001740)='./file0/file2\x00', 0x1000) mount$fuse(0x0, &(0x7f00000014c0)='./file0\x00', 0x0, 0x20, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x224042) write(r1, &(0x7f00000001c0)="166a920d5c5e50281ba80dd3f2b646f8ff396ba009136f9e49fcbcf97bb793c1", 0x20) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @empty}, 0x1c) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000002280)={0x48}) 1m24.136469443s ago: executing program 1 (id=713): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_usb_connect$cdc_ecm(0x3, 0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002020000402505a1a4400001020301090254000101f7880e0904000503020600030524060000052400"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000/0x6000)=nil, 0x6000, 0x1, 0x11, r2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$CEC_ADAP_S_PHYS_ADDR(r1, 0x40026102, &(0x7f0000000600)=0x8) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000300000010f0030400400001020301090224000101044040090400be02070102ff090501021004060d430905826d0000009db4"], &(0x7f0000000580)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0x2, 0x81, 0xb, 0x10, 0xb1}, 0x2e, &(0x7f0000000380)={0x5, 0xf, 0x2e, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0xc, 0x2, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x3, 0x7, 0x17ff}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0x8d, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0x9, 0xaa, 0xfff, 0x9}]}, 0x6, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x7d, &(0x7f0000000400)=@string={0x7d, 0x3, "820e8420b3bdc9037b943efacd7d84c043fb92a77527319f9df5a9153b1c7d26c4f7cc5272e7532ad43f5802069c61dae355aaa1216eb2c83c6156f89759fef407b7067196e8e549d4dde7a0dbd1a8a370fb3587c78a53e65cd1a61edb2b08580e83a7ab9f99bd427d7d83ab908f333e7a33b78b5214d8d50f6aee"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x280a}}, {0x11, &(0x7f00000004c0)=@string={0x11, 0x3, "dc847b01f21be0ee3ef526c658b103"}}, {0x30, &(0x7f0000000500)=@string={0x30, 0x3, "e737fdd1c1fad45e8da6329596090f6772107d552af0fa5d710ec009efa0d2f2d87ef953db3dd67502e73867d55a"}}, {0x26, &(0x7f0000000540)=@string={0x26, 0x3, "f4ecc8c3061467b91ad1661b24e697f8f6f07abe10b0c85acb118bbf7061104affd0ba0e"}}]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000280)={@raw_ptr={0x70742a85, 0x0, &(0x7f0000001740)='\x00'/8192, 0x2000}}, &(0x7f0000003740)}, 0x2000}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003780)={0x4, 0x0, &(0x7f00000037c0)=[@enter_looper], 0x100, 0x0, &(0x7f0000003800)=@transaction={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003900)={0xc, 0x0, &(0x7f0000003940)=[@free_buffer={0x40086303, r4}]}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000003980)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f00000039c0)='2', 0x1) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 1m8.917367324s ago: executing program 32 (id=713): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_usb_connect$cdc_ecm(0x3, 0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002020000402505a1a4400001020301090254000101f7880e0904000503020600030524060000052400"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000/0x6000)=nil, 0x6000, 0x1, 0x11, r2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$CEC_ADAP_S_PHYS_ADDR(r1, 0x40026102, &(0x7f0000000600)=0x8) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000300000010f0030400400001020301090224000101044040090400be02070102ff090501021004060d430905826d0000009db4"], &(0x7f0000000580)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0x2, 0x81, 0xb, 0x10, 0xb1}, 0x2e, &(0x7f0000000380)={0x5, 0xf, 0x2e, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0xc, 0x2, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x3, 0x7, 0x17ff}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0x8d, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0x9, 0xaa, 0xfff, 0x9}]}, 0x6, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x7d, &(0x7f0000000400)=@string={0x7d, 0x3, "820e8420b3bdc9037b943efacd7d84c043fb92a77527319f9df5a9153b1c7d26c4f7cc5272e7532ad43f5802069c61dae355aaa1216eb2c83c6156f89759fef407b7067196e8e549d4dde7a0dbd1a8a370fb3587c78a53e65cd1a61edb2b08580e83a7ab9f99bd427d7d83ab908f333e7a33b78b5214d8d50f6aee"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x280a}}, {0x11, &(0x7f00000004c0)=@string={0x11, 0x3, "dc847b01f21be0ee3ef526c658b103"}}, {0x30, &(0x7f0000000500)=@string={0x30, 0x3, "e737fdd1c1fad45e8da6329596090f6772107d552af0fa5d710ec009efa0d2f2d87ef953db3dd67502e73867d55a"}}, {0x26, &(0x7f0000000540)=@string={0x26, 0x3, "f4ecc8c3061467b91ad1661b24e697f8f6f07abe10b0c85acb118bbf7061104affd0ba0e"}}]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000280)={@raw_ptr={0x70742a85, 0x0, &(0x7f0000001740)='\x00'/8192, 0x2000}}, &(0x7f0000003740)}, 0x2000}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003780)={0x4, 0x0, &(0x7f00000037c0)=[@enter_looper], 0x100, 0x0, &(0x7f0000003800)=@transaction={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003900)={0xc, 0x0, &(0x7f0000003940)=[@free_buffer={0x40086303, r4}]}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000003980)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f00000039c0)='2', 0x1) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 19.108710521s ago: executing program 3 (id=1052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x539ac0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'geneve1\x00', 0x4000}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000e00001c"], 0x4a) 18.83596025s ago: executing program 3 (id=1054): openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000100)=0xc000000, 0x4) r1 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000500)=ANY=[@ANYBLOB="120100020000004086800000000000000001090222000101008032090400000103000000092111010001224e0007058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt1\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000340)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt1/domain1\x00', 0x1ff) 17.364966627s ago: executing program 3 (id=1062): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000780)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000007c0)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000050000007d01ff020000000000000000000000000001"], 0xfdef) 17.057563155s ago: executing program 3 (id=1066): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) (async) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) (async) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 16.949722692s ago: executing program 3 (id=1068): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130726bd700000000000000000000000001d0000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000100280000000000000068001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000080"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 16.626679968s ago: executing program 3 (id=1071): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mnt\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) r1 = getpgrp(0xffffffffffffffff) setns(0xc9, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$getown(r2, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000300)={0x806, 0x0, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r4], 0x20}}, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r3, &(0x7f0000000200), 0x4003) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, r5, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'bond_slave_1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x2, 0x2, 0x1, 0x10, r1}) 16.133644362s ago: executing program 33 (id=1071): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mnt\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) r1 = getpgrp(0xffffffffffffffff) setns(0xc9, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$getown(r2, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000300)={0x806, 0x0, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r4], 0x20}}, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r3, &(0x7f0000000200), 0x4003) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, r5, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'bond_slave_1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x2, 0x2, 0x1, 0x10, r1}) 7.512853973s ago: executing program 2 (id=1118): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 7.354698834s ago: executing program 2 (id=1119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002100)={0x0, 0x35, &(0x7f0000002140)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010011000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 7.139263642s ago: executing program 2 (id=1121): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffff8, 0x8, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x10001, &(0x7f0000000040)) r0 = syz_clone(0x80000, &(0x7f0000000080)="f7b7c338358d61fbb2936500bb190dacb7ba547838f219d94a6e64d9779dfab496", 0x21, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="728de69f59cc2b68ec2e6041d82b43457ad3566370a8cadcc799e8586a5c9d00764f059a3c27b5c90751a7c2d9fc3830f4f87a57c402ffe5a9c4767ea8e35047613a10c1641fd2e1ffd79ae5464a96f48c465646fce45e890b7292a74f4be5") r1 = syz_create_resource$futex(&(0x7f00000001c0)=0x2) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r4 = syz_create_resource$futex(&(0x7f0000000280)=0x1) futex(r1, 0x2, 0x1, &(0x7f0000000240)={r2, r3+10000000}, r4, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x8000, &(0x7f00000002c0)=0x1) futex(r1, 0x6, 0x1, &(0x7f0000000300), r1, 0x1) clock_settime(0x6, &(0x7f0000000340)) syz_create_resource$futex(&(0x7f0000000380)=0x2) socket$kcm(0x29, 0x5, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800, 0xf23, &(0x7f00000003c0)=0x1) syz_create_resource$futex(&(0x7f0000000400)=0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000440)={0x2, 0x7, 0x30}, &(0x7f0000000480)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000004c0)={r5, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000500)={0xb, 0x8, 0x8004, 0x629b, 0x0, 0x5, 0x3, 0x100, r5}, &(0x7f0000000540)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000580)={r6, 0x8}, 0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$nsim_port_qreset(0xffffffffffffff9c, &(0x7f0000001c40)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x33}, 0x1, 0x0) r10 = getuid() stat(&(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r7, &(0x7f0000001d80)={&(0x7f00000005c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x400000}, 0xc, &(0x7f0000001bc0)=[{&(0x7f0000000600)={0x10, 0x1c, 0x10, 0x70bd28, 0x25dfdbff}, 0x10}, {&(0x7f0000000640)={0xa4, 0x2b, 0x100, 0x70bd28, 0x25dfdbff, "", [@nested={0x92, 0x17, 0x0, 0x1, [@nested={0x4, 0xf3}, @generic="37a9846979c862ebc91848dddb790e53388fbedf528ad617cb218f8ea26703219e5b51fb8a3e3f2ecdfe5053cd28345550cec83004ec7094408f4953ada5bd70fe43798cf42af6760bbb8465df862f28b4a044c4d92f0d7f5c41e218edd72f3fb67668b260c261d7dea80ca53f92f916fcdbc203df8f7990f9f53b27e341a68cb82d", @typed={0x8, 0x9b, 0x0, 0x0, @u32=0x100}]}]}, 0xa4}, {&(0x7f0000000700)={0x1200, 0x2d, 0x100, 0x70bd28, 0x25dfdbfb, "", [@nested={0x11ee, 0x154, 0x0, 0x1, [@generic="e0b75aa5cc1370e4b22dfae434965e35c870f7a082aa019c363dfcc87e5386a6f914daf6c56e5f5969a08f2eab8bed0c1c031630312219027d786baf99820eaad36147428d1f4cc801c0a7a0ab86305652e4243f84e672dc749dfedbe51d3f6e3840fef83eca74c80ab67f8b064cae80cdaecf0f70c32fe1b77440ceeacae14285a6351ef5e9478f0ad31ac0793d96e5fbf2d78b3df1bb0bce2ee09c4837a9c9c935da385728ab148ead7bd8fd4cffebd881e3a86ddcfdfbe77b087c70c80638d6791b7291d9144585e1b30366eb556feb638157e33a", @nested={0x4, 0xe7}, @typed={0x102, 0x10a, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x76}, @generic="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", @nested={0x4, 0x74}, @nested={0x4, 0x51}]}]}, 0x1200}, {&(0x7f0000001900)={0x18, 0x2d, 0x8, 0x70bd29, 0x25dfdbfb, "", [@typed={0x8, 0x102, 0x0, 0x0, @u32=0x4}]}, 0x18}, {&(0x7f0000001940)={0x10c, 0x1d, 0x300, 0x70bd25, 0x25dfdbff, "", [@nested={0xf7, 0x14c, 0x0, 0x1, [@generic="4e8b7c52", @nested={0x4, 0x3a}, @generic="cda1737e4a503db729ad561b29e6740d6580e6b7e0f3b42d9307b9fc9c41250f5650d8f2ae2b3a1f65916998c941e0a20d96f0fe3112136393df9fc65f3c7382bd6fbc23bc604e4a36167c70a0cc564c180e37f49be7a861ba9203df61b79d9b1cfc5a224c04b7384a12ef768c6336f435dd0ec4f7bbdc8c4c64db0fb6bde981c2857cf63a49da39b7547fafcdced95d1b35eebe2c8e4f41503be40582db392a9c7acbe2734ad985854be9f90329bae48602793a09e0232ee1c4e772c9a13be57238758cc2f9f560c62836abe670b44236341a254da9bd7c996082e344a14a0c5fae62", @typed={0x8, 0xeb, 0x0, 0x0, @pid=r0}]}, @typed={0x4, 0xfa}]}, 0x10c}, {&(0x7f0000001a80)={0x104, 0x36, 0x400, 0x70bd27, 0x25dfdbfd, "", [@nested={0xc, 0xe8, 0x0, 0x1, [@typed={0x8, 0x160, 0x0, 0x0, @ipv4=@remote}]}, @generic="2c89693afb3bccd3281a693f162711af0e71acae3d49a961ed54db30331ce43da3aa52b0a52a2815e85d419d08931011947452898841b0247004dbe3afb1711f6ec77c72e3090bc00ef8852bde0e180fd622ac7d89c289ede477d3c66759bc844e255a74b4479c49852a6ed3cf183696936dac0a243c41b5a08050fd123cce92e2d548ff40f78eae056acccf8393cff2f1e3ec6250271d2d2b1e8613df1ba75f30e74dd2a3ed4eca13ccf77dcf0d985156652eb0e09a308dff32953d407fd939c1a63b5547864a279c8fea8a0ac484dce96df29652fa9fc32e621059", @typed={0xc, 0x169, 0x0, 0x0, @u64=0x1000}]}, 0x104}], 0x6, &(0x7f0000001d40)=[@rights={{0x18, 0x1, 0x1, [r8, r9]}}, @cred={{0x1c, 0x1, 0x2, {r0, r10, r11}}}], 0x38, 0x40000}, 0x804) r12 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) futex$unlock_pi_list32(r1, 0x607, 0x716eca26, &(0x7f0000001dc0), &(0x7f0000001e00)=0x1, 0x7) futex_waitv(&(0x7f0000003cc0)=[{0x1, &(0x7f0000001e40)=0x687b, 0x2}, {0x2, &(0x7f0000001e80)=0xfffffffffffffff1, 0x82}, {0x3, &(0x7f0000001ec0)=0x8, 0x2}, {0x8, &(0x7f0000001f00)=0x8, 0x82}, {0x8000000000000001, &(0x7f0000001f40)=0x800, 0x82}, {0x3, &(0x7f0000001f80)=0x9, 0x2}, {0xff, &(0x7f0000001fc0), 0x82}, {0x8, &(0x7f0000002000)=0x1, 0x82}, {0x0, &(0x7f0000002040)=0x5, 0x2}, {0x6, &(0x7f0000002080)=0x1ff, 0x2}, {0x10400000, &(0x7f00000020c0), 0x2}, {0x80000001, &(0x7f0000002100)=0x9, 0x2}, {0x6, &(0x7f0000002140)=0x6, 0x2}, {0x4, &(0x7f0000002180)=0xd1, 0x82}, {0x8, &(0x7f00000021c0)=0x10001, 0x82}, {0x8, &(0x7f0000002200)=0xce, 0x82}, {0x4, &(0x7f0000002240)=0xffffffffffff8001, 0x82}, {0x17, &(0x7f0000002280)=0x7, 0x2}, {0x8, &(0x7f00000022c0)=0x8000000000000001, 0x82}, {0x6, &(0x7f0000002300)=0xffcd, 0x82}, {0x8, &(0x7f0000002340)=0xf7, 0x2}, {0x0, &(0x7f0000002380)=0x2, 0x82}, {0x2, &(0x7f00000023c0)=0x8000, 0x2}, {0xd8b, &(0x7f0000002400)=0xd7, 0x2}, {0xfffffffffffffe00, &(0x7f0000002440)=0x4, 0x82}, {0xfa68, &(0x7f0000002480)=0xbeb0, 0x2}, {0x5, &(0x7f00000024c0)=0xfff, 0x82}, {0xffffffffffffff1b, &(0x7f0000002500)=0x401, 0x82}, {0x1, &(0x7f0000002540)=0xac, 0x2}, {0x8, &(0x7f0000002580)=0x6, 0x2}, {0x3, &(0x7f00000025c0)=0xfffffffffffffffd, 0x82}, {0x1000, &(0x7f0000002600)=0xe}, {0x2, &(0x7f0000002640)=0x8000000000000000, 0x80}, {0xa3e, &(0x7f0000002680)=0x1, 0x2}, {0x7fffffff, &(0x7f00000026c0)=0x3, 0x80}, {0x92, &(0x7f0000002700)=0x10001, 0x84}, {0x100, &(0x7f0000002740)=0xe95, 0x82}, {0x1a1, &(0x7f0000002780)=0xfd, 0x82}, {0xf, &(0x7f00000027c0)=0x7911, 0x2}, {0x2, &(0x7f0000002800)=0x8}, {0xfffffffffffffc01, &(0x7f0000002840)=0x5, 0x82}, {0xff, &(0x7f0000002880)=0x7ff, 0x82}, {0x1, &(0x7f00000028c0)=0x3, 0x2}, {0xf, &(0x7f0000002900)=0x8000000000000000, 0x82}, {0x1ff, &(0x7f0000002940)=0x7, 0x2}, {0x7fffffff, &(0x7f0000002980)=0x7, 0x82}, {0x0, &(0x7f00000029c0)=0xc4, 0x82}, {0x1, &(0x7f0000002a00)=0x2, 0x82}, {0x0, &(0x7f0000002a40)=0xcb, 0x82}, {0x400, &(0x7f0000002a80)=0x5, 0x80}, {0x2, &(0x7f0000002ac0)=0xfffffffffffffff9, 0x82}, {0x6, &(0x7f0000002b00)=0x5, 0x2}, {0x6, &(0x7f0000002b40)=0x2, 0x82}, {0x7, &(0x7f0000002b80)=0x6, 0x82}, {0x2, &(0x7f0000002bc0)=0x4, 0x2}, {0x2, &(0x7f0000002c00)=0x8000, 0x2}, {0x3, &(0x7f0000002c40)=0x2, 0x2}, {0x7, &(0x7f0000002c80)=0x6, 0x2}, {0x8000000000000001, &(0x7f0000002cc0)=0x5, 0x2}, {0x1000, &(0x7f0000002d00)=0x53, 0x80}, {0x6, &(0x7f0000002d40)=0xd8f0, 0x82}, {0x1, &(0x7f0000002d80)=0x4}, {0xfffffffffffff000, &(0x7f0000002dc0)=0x3, 0x82}, {0x800, &(0x7f0000002e00)=0x80, 0x82}, {0xbf3, &(0x7f0000002e40)=0x5, 0x82}, {0x9, &(0x7f0000002e80)=0xfffffffffffffff9, 0x82}, {0x1, &(0x7f0000002ec0)=0x8, 0x2}, {0x2, &(0x7f0000002f00)=0xf8, 0x2}, {0xf33, &(0x7f0000002f40)=0x2, 0x82}, {0x40, &(0x7f0000002f80)=0x18fa43fb, 0x2}, {0x1000, &(0x7f0000002fc0)=0xfffffffffffffa2c, 0x82}, {0x8, &(0x7f0000003000), 0x2}, {0x9, &(0x7f0000003040)=0xf, 0x82}, {0x9, &(0x7f0000003080)=0x800, 0x2}, {0x7ff, &(0x7f00000030c0)=0xf, 0x82}, {0x2, &(0x7f0000003100)=0x4, 0x2}, {0xef89, &(0x7f0000003140)=0x6, 0x2}, {0xffffffffffffff0e, &(0x7f0000003180)=0x7, 0x2}, {0x8d9, &(0x7f00000031c0), 0x82}, {0xa7c0, &(0x7f0000003200)=0x6, 0x2}, {0x4, &(0x7f0000003240)=0x1, 0x82}, {0x0, &(0x7f0000003280)=0x7f, 0x2}, {0x8, &(0x7f00000032c0)=0x5, 0x2}, {0x6, &(0x7f0000003300)=0x6, 0x2}, {0x5, &(0x7f0000003340)=0xb, 0x82}, {0x7d, &(0x7f0000003380)=0x10000}, {0xaac, &(0x7f00000033c0)=0x6, 0x82}, {0x5, &(0x7f0000003400)=0x1, 0x2}, {0x9, &(0x7f0000003440)=0x2, 0x2}, {0x1, &(0x7f0000003480)=0x1, 0x2}, {0x8, &(0x7f00000034c0)=0xfffffffffffffb63, 0x2}, {0x3, &(0x7f0000003500)=0x6, 0xbd93851b79443025}, {0x1, &(0x7f0000003540)=0x8, 0x2}, {0x7, &(0x7f0000003580)=0x401, 0x82}, {0xfffffffffffffffc, &(0x7f00000035c0)=0x2, 0x82}, {0x5, &(0x7f0000003600)=0x22b, 0x2}, {0x5, &(0x7f0000003640)=0xe44, 0x2}, {0x100, &(0x7f0000003680)=0x7, 0x2}, {0x2, &(0x7f00000036c0)=0x8000000000000001, 0x12e6983d1c15cb09}, {0xfffffffffffffa17, &(0x7f0000003700)=0x1, 0x82}, {0x81, &(0x7f0000003740)=0x9, 0x82}, {0x100, &(0x7f0000003780)=0x80, 0x82}, {0x7, &(0x7f00000037c0)=0x35b5, 0x82}, {0x1, &(0x7f0000003800)=0x7ff, 0x82}, {0x9, &(0x7f0000003840)=0xfffffffffffffff8, 0x2}, {0x80000000, &(0x7f0000003880)=0x7, 0x80}, {0x9, &(0x7f00000038c0)=0x7ad119b0, 0x82}, {0xffffffff, &(0x7f0000003900)=0x8001, 0x2}, {0x9, &(0x7f0000003940)=0x3, 0x82}, {0xab, &(0x7f0000003980)=0xa, 0x2}, {0x401, &(0x7f00000039c0)=0xb1ab, 0x82}, {0x0, &(0x7f0000003a00)=0x6, 0x80}, {0xb8b7, &(0x7f0000003a40)=0x8, 0x2}, {0x8, &(0x7f0000003a80)=0x18}, {0x5, &(0x7f0000003ac0)=0x4b, 0x82}, {0x2, &(0x7f0000003b00)=0x5, 0x2}, {0x10001, &(0x7f0000003b40)=0x8d, 0x2}, {0x4, &(0x7f0000003b80)=0x9}, {0x7, &(0x7f0000003bc0)=0x6, 0x2}, {0x2, &(0x7f0000003c00)=0x5, 0x82}, {0x100, &(0x7f0000003c40), 0x2}, {0x5, &(0x7f0000003c80)=0x3ff, 0x82}], 0x7a, 0x0, &(0x7f0000004840), 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 3.843457988s ago: executing program 2 (id=1139): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff020000000000000000000000feff010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2, @ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2.939477988s ago: executing program 4 (id=1144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000200100000000000000000037000004d232000000fc020000000000000000000000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000030000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd70000535004002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r2, @ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2.725870662s ago: executing program 4 (id=1147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0504010000fffffff5000a0000000900010073797a300000000040000000120a050402000000000000000a0000000900010073797a30000000000900020073797a310000000008000300060000050c0004"], 0x88}}, 0x0) 2.702431223s ago: executing program 2 (id=1148): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="23003300e098020008021100000008021100000400000000000000071800cdc0070119cf3206d6faa484705203000800cd000400ffffdc417e3989ec2f640d913dd73cfe15511a"], 0x48}}, 0x4000000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f00000005c0), &(0x7f0000000600)=0x2) write(r0, &(0x7f00000001c0)='100', 0x3) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @empty}, 0x1c) connect$unix(r6, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x4cec2000) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r7, &(0x7f00000005c0)=ANY=[], 0xfe33) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000002280)={0x48}) 2.314724145s ago: executing program 4 (id=1150): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130726bd70000000000000000000000000fc0000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000100280000000000000068001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000080"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.313911691s ago: executing program 2 (id=1151): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000180)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40280, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl(r3, 0x4048aecb, &(0x7f0000000200)="070000000000000001000000ffffffff40894088") r4 = socket(0x2, 0x805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r6, &(0x7f00000003c0)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x5, 0x18, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x8}}}}, 0x36) shutdown(r5, 0x0) getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000440)={0x2, @in={{0x2, 0x4e24, @local}}, 0x4e24}, &(0x7f0000000500)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={r8, 0x0, &(0x7f0000000280)}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000ac0)=""/4102, &(0x7f0000001b00)=0x1006) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) syz_usb_connect(0x1, 0x562, &(0x7f0000001b40)={{0x12, 0x1, 0x300, 0x5, 0xe4, 0xe2, 0x40, 0x82d, 0x300, 0x7dc1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x550, 0x3, 0xe, 0x77, 0x40, 0x9, "", [{{0x9, 0x4, 0x19, 0x5, 0x6, 0x58, 0x22, 0x99, 0x7, [], [{{0x9, 0x5, 0xb, 0x3, 0x200, 0x8, 0x2, 0x8}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x8, 0x16, 0xfe, [@generic={0x25, 0x8, "28ccff301aa4745fdc2adca6b302f55b99e5107cd89e4685896c7137779284a4ef31d6"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x10, 0x6, 0x2, 0xee, [@generic={0x26, 0x21, "db45372f98b71d8a6d2383cf8f38501a613318c5e875baed551f01e679243bacb60869f7"}]}}, {{0x9, 0x5, 0xed84d618fdc8047c, 0x2, 0x3ff, 0x1, 0x80, 0x9}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0x8, 0x2, 0x8}}, {{0x9, 0x5, 0x0, 0x13, 0x10, 0xff, 0xf5, 0xa6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x3}]}}]}}, {{0x9, 0x4, 0x6c, 0x9, 0x4, 0xff, 0x6, 0x12, 0x9, [], [{{0x9, 0x5, 0xa, 0x2, 0x10, 0x3e, 0x9, 0x30, [@generic={0x5b, 0x22, "2c600fc91b004c152cb284e5b436d0dab73728570bfb47c9888f97740ad1ce7eed3a6f30e77eff5ad8ca9584828d9a3750c6b3cb561349df638ecdfc1b94c87f1f66f69d68b81c97efebd99cc6de917cf56dd3f56ed1dcf2c0"}, @generic={0x99, 0xb, "81d3263e198e37f2470df510da24b7a2188717420978f5b1de357e131b7c0ad82a9840c8ef82ae8ea8e3b0e70c5b84b24208301ddfc9e34a59b20c11e870cf09ef31c3ce22b4cac99aff812530610092c40c40bfb9105aa3c36b1f3279ccede9743647cd618133aa6e10cff5310c551ab98b909056b0ea96a2b7536102cbd841d4ec70c243f9d1f2ff62be3a8f36a43ab8fdd2a6140687"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x3, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xc1, 0x101}, @generic={0x37, 0x8, "499e49d4b9db4e088cd82d15fb3cc08720c17ba2b3bf98e4b947b732c696ee644b98efb5e67c0ee3e7be3cce248741f92829b3f060"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x10, 0xf0, 0xa, 0x5}}, {{0x9, 0x5, 0x13, 0x10, 0x10, 0x2, 0x1, 0x2}}]}}, {{0x9, 0x4, 0x7, 0xff, 0x8, 0x26, 0x37, 0x8a, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x2d}, [@processing_unit={0x8, 0x24, 0x7, 0x1, 0x3, 0x7, "cc"}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x1, 0x0, "b7ea"}, @processing_unit={0x8, 0x24, 0x7, 0x4, 0x6, 0xe3, 'J'}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0x5, 0x4, "1d1a79"}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "c9665a1114"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xddfc820, 0x1, 0x8, 0x11}, [@dmm={0x7, 0x24, 0x14, 0x29, 0x3ff}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x66}, @obex={0x5, 0x24, 0x15, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xe}, @country_functional={0xc, 0x24, 0x7, 0x7, 0x2a, [0x9, 0xa9c, 0x5]}]}], [{{0x9, 0x5, 0xa, 0x10, 0x40, 0x1, 0x3, 0xe, [@generic={0xa4, 0x23, "f38c7deadd53d9fa7f3f24bfc9ac42c44985b91019f4b05cbd7d91a243a1c844ebb3dd56964d89009e99c28a6f812bc2ebd5811343555791c0754eb819e70204f69ec0bfd3ee358fd220cb8edcbcb4711ba92c2595a04adeba22faf9317381a28fef69cf51d7b01127fd174cc58cf12ec64643db0d7f088a915dd8cd366e15cbc05be8512b3af1794cffb4284eebb57ec9224072e4d10105d6534cd24285adcded5f"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0xf9, 0x7, 0x0, [@generic={0xe4, 0x24, "11af372fb3c4015b3ed793abaafdf898ef6eb8da3dabc55c407744b6cbf21d603c0caccc4cd76febbab35b61524f7377a4212e0c0170d2b68be2c7c35c8bba73c19360d77879e2c18f54bb35074f4a20a093297fd00287dad5bd329d595883dbfe799cd5d72a7cac4deabc19edac98272e69704d441f2e59fdf69d4950179ae556244f2d94e59036cfd46a2b29fe648583ce1b551cd53c9f2baa9ef075f1cb03631ca6e2b01cbb7114c6533d8b638cd59d6a9e37f653cd57a00a9366264a26c44db8e56a1f4fce11d42dced4bce2cc3e576a192de3ed136047307d51871d526b03fc"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x2, 0xf9, 0x3, [@generic={0xd1, 0x23, "8ff5cae56735f32e92b449519f7cdeede5b387c70092101c166d6a77effc25ceeeafff26255b945abf0479f509ca16f6ecf97d8616777734761505e819ce51f3707354b9f426ef5cc64eb51f284cfd238406096f8b68d86f01cdbdf0f6730fc6807f692f1bb04c1de87190b624b748eb399584c34cbf487e03f8e3c4a88de5025f9a8624e4bab8e5264e8981f4beea847961a624f21ce98a15632b6f60f40db92115b92c211ed7bc7ddbe6399b71fe522253c4af95eca1c2f1729e5f23f8f5e9975f2e0a745512f2d1fb0c8efef510"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x11, 0x7fff}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x0, 0xb, 0x2}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x1, 0x4c, 0x37, [@generic={0x1f, 0x2, "566d16292d397ddbf84738551ac121742c0e0474a1f30bfdb9cdb4ccfe"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0x5, 0x7, 0x5c, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xabf}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x1}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x5, 0xf, 0xe2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x8001}]}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000020c0)={0xa, 0x6, 0x200, 0x4, 0x1, 0x0, 0x20, 0x8}, 0x43, &(0x7f0000002100)={0x5, 0xf, 0x43, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x9, 0xfffd}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x1, 0x1, 0x3}, @ssp_cap={0x24, 0x10, 0xa, 0xeb, 0x6, 0xb5, 0xff0f, 0x9, [0xc000, 0xc000, 0xff30, 0xff3fc0, 0x0, 0x0]}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x5, 0xf00}]}, 0x3, [{0x4, &(0x7f0000002180)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f00000021c0)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000002200)=@lang_id={0x4, 0x3, 0xfcff}}]}) r10 = open$dir(&(0x7f0000000100)='./mnt\x00', 0x40080, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r10, 0x660c, 0x0) r11 = openat(r10, &(0x7f00000000c0)='./proc\x00', 0x2, 0x1d8) read$FUSE(r11, 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x15}, 0x4000000) 2.161515071s ago: executing program 0 (id=1153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000200)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d232100000fffe000000000100001c11223344000800000005000500000005000c0008"], 0x4a) 2.033565276s ago: executing program 4 (id=1154): openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000100)=0xc000000, 0x4) r1 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000500)=ANY=[@ANYBLOB="120100020000004086800000000000000001090222000101008032090400000103000000092111010001224e0007058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt1\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt1\x00', &(0x7f0000000340)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 1.7478187s ago: executing program 0 (id=1156): r0 = syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103ffff0a09040100020a00000007050202ffff0007058202ff"], 0x0) r1 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[!\x14<\x9b\xd1A8\xa6\xae\x82/j\x87\xe6\xe4\xcfN\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcbI\xd99\xa3l\x93^ \a\x9c\xe7hHH\xae\xc5\xc9V\xfd\x1e\xaa\x84\xf2b$\x8c\x14*^g\x0e\xd4\x99\xa6\xa9\xa3\xde\xdf\xd8\xdaSA\x94I\xa80\xad!ew\xfd\x8f\x02\xe3\xb4?\xfdb$%\x13a\'\xd9\x1a\x98\xec\"\xad\xf2\xcd&i\xe8r\x93q\x9ce\x15\xf2\xcf[\x06\x93e\xe0\x1d\xceL\x13.\xbc\x18\x86\x13W\xdaP\x87\x88Y`R\x88\xe9\xf6Q\xc8B\xcb?)\xef\xc4HkC\xc9\xf5&[r\x93*&BZt\xab\x85\x1b\x11x\x0ei\xef\x99\xbdeJJ#\xdf\xe2\n\xce1\xae\x94@\xd6\x1b?m\xe2U\xbd\xd1y\x03\xb7\\\xae+\xa2\x89\xad\x90\xa2od\xe3%^(R\x02\xe61\xef\xa1\x12\x83\x93\'x8+\v\x87R', 0x5) syz_ublk_setup_io_uring(0xd61, &(0x7f0000000540)={0x0, 0xdf75, 0x1000, 0x40002, 0x393}, &(0x7f00000005c0), &(0x7f0000000600)=0x0, &(0x7f0000000640)) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) munmap$IORING_OFF_CQ_RING(r2, 0x5) socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="d80000001c0081064e81f782db44b9040a1d080403000000f70002a11800ff000607002603600e12080b0f0000810401a800160520000140020000082f3d4e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9851627504575107ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100001340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bff00e0b42a9ecbee5de6ccd40dd6e4edef5d2defd5cc9b8d3fb7c27a1059ae31c60e", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_ublk_setup_io_uring(0x409, &(0x7f0000000680)={0x0, 0x0, 0x101, 0x2, 0x1e5}, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) pipe2(&(0x7f00000002c0), 0x0) (async) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) splice(r5, 0x0, r1, &(0x7f0000000300)=0xe8, 0x9, 0x1) (async) splice(r5, 0x0, r1, &(0x7f0000000300)=0xe8, 0x9, 0x1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000480)={&(0x7f0000000400)="8f684254b70173e3d4dfe4f23e5c814aaee474b870cf83d9db14ef0dfc6b7c1bc83d4f13fb391f23cd05362d0d29dcfc9882f3e6e7a4bd30147a61fc041c876f4f3d5f", 0x43, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[r6, r7], 0x2, 0x800}) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000a00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xbf, 0x2, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0xd1e4, 0x2, 0x1, {0x22, 0x725}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x5, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xc3, 0x7f}}]}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x200, 0x1, 0x0, 0x1, 0x20, 0x3}, 0x1d, &(0x7f0000000a80)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0xfb, 0x3, 0x8, 0xf, 0x8001, [0x30, 0x0, 0x0]}]}, 0x2, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x169ecadc3666e101}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x445}}]}) syz_open_dev$video4linux(&(0x7f0000000940), 0xf, 0x0) (async) r8 = syz_open_dev$video4linux(&(0x7f0000000940), 0xf, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r8, 0xc0585605, &(0x7f0000000980)={0x1, 0x1, @raw_data=[0x6, 0x80000000, 0x6, 0x4, 0x400, 0x104, 0x5, 0x6, 0x20002000, 0x1, 0x0, 0x8, 0x0, 0x5, 0x9, 0xff]}) (async) ioctl$VIDIOC_TRY_DECODER_CMD(r8, 0xc0585605, &(0x7f0000000980)={0x1, 0x1, @raw_data=[0x6, 0x80000000, 0x6, 0x4, 0x400, 0x104, 0x5, 0x6, 0x20002000, 0x1, 0x0, 0x8, 0x0, 0x5, 0x9, 0xff]}) syz_usb_control_io$uac2(r0, 0x0, 0x0) 1.470221335s ago: executing program 5 (id=1157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002100)={0x0, 0x35, &(0x7f0000002140)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010040000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 1.234308234s ago: executing program 5 (id=1158): r0 = socket(0x15, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040040}, 0x4004) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="740100001000130700000000fbdbdf25ff01000000000000000000000000000100000000000000000000000014000001000900000002ffff0000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d432000000ac1e0001000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"], 0x174}, 0x1, 0x0, 0x0, 0x40}, 0x40082) getpgid(0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001900010000000000fedbdf250a010900140012800800f8800400438008001e0000000000100009"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x80, @mcast2, 0x1574}, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0203ff030e000000000000000000000004000900a8000000658a287c7753b50d3102372719494a5133d6d9ba2e000000030006000000000002004e270a010101000000000000000102000100000004d30000000101000060030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0xfffffffffffffffe, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@polexpire={0x1a0, 0x1b, 0x1, 0x70bd2d, 0x25dfdbfd, {{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x4e23, 0xfff9, 0xa, 0x0, 0x80, 0x32}, {0x800, 0x80, 0xfffffffffffffff8, 0x1ff, 0x1, 0x8000000000000001, 0x9, 0x1158000000000}, {0x2, 0x1, 0xfd, 0x4}, 0xc, 0x0, 0x0, 0x0, 0x5, 0x3}, 0x29}, [@iptfs_init_delay={0x8, 0x27, 0x2c}, @sec_ctx={0xd6, 0x8, {0xd2, 0x8, 0x1, 0x5, 0xca, "07870702752e8c35146c375e398a0f40d91b467b64c69b3a95347bc16e2129699ffaac38d800c962a176842fe3dd75203bfb8d5512b67583f55541c7a55290455abb20a48ed423600a60883f67c696a5d2b701eb94ac3486a0ec84fc676a745dea3a516288feacc980e55a5552ec1d08645d14283e8fec248f6c0d1c45e54173a9d22f47c142f59785b005ff142ac2885f31c268f4a1c509dbb52e890982a4684d2d7c71b5acf366b284858c4265f71d4f98f658407f22271fa23beee09d77fba3ce74e139d0d583c9d6"}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xe7) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x70201, 0x0) ioctl$FE_GET_INFO(r7, 0x80a86f3d, &(0x7f0000000080)) 957.557475ms ago: executing program 0 (id=1159): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0xd, 0x7, @mcast2, 0x9}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="671723d7c6012c94717e3b6903ff3f503e825efa5390be209eeb9a44f302f1307c2127811e5e9f08c4e5", 0x2a}], 0x1}, 0x20008b88) (async) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0xd, 0x7, @mcast2, 0x9}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="671723d7c6012c94717e3b6903ff3f503e825efa5390be209eeb9a44f302f1307c2127811e5e9f08c4e5", 0x2a}], 0x1}, 0x20008b88) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 877.969498ms ago: executing program 5 (id=1160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="140000001000010000000000000000050200000a20000000000a01060000000000000000020000000900010073797a300000000040000000160a01060000000000000000020000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400008000040000000030a01060000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000002080002400000000058000000060a01060000000000000000020000000900010073797a30000010000900020073797a30000000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a300000000014000000110001"], 0x120}}, 0x0) 781.000795ms ago: executing program 0 (id=1161): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110200000000000000000100800030000180060005004e21000014000400000000000000000000000000000000010800060001000000060009000a"], 0x44}}, 0x0) 712.74008ms ago: executing program 5 (id=1162): r0 = gettid() (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x22, 0x800000000004, @thr={&(0x7f0000000500)="a160514d7b0d5c0b8101ef1800080000000000001c004713717829aa4fb76d9334", &(0x7f0000000540)="22e6bfa622388eb767358ff0e952400b5a4e54cb4be808747e0f13437666516c7bbda69f27f636f6f2ca1800"/56}}, &(0x7f00000001c0)) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)) (async) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r2 = syz_open_dev$mouse(&(0x7f0000000400), 0x0, 0x2) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000580)=0x0) ptrace$setopts(0x4200, r3, 0x401, 0x10) mq_notify(r2, &(0x7f0000000200)={0x0, 0x40, 0x4, @tid=r0}) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000480)=""/58, 0x3a}], 0x1) (async) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x20) (async) write$binfmt_script(r2, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xffffffffbeae3146, 0x1800005, 0x81, 0x1, 0xfff8, 0x7fff, 0x7, 0x40000000009, 0x4bfb, 0x2, 0x10, 0xa8000000000004, 0x401, 0x2, 0x3570e1cc, 0x52e], 0x0, 0x28657}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x80, &(0x7f0000004b00)=ANY=[@ANYBLOB="66643da038bc0f4e46295f7c16879e5dfd0bac8fb66bbfb52749a6dfcd6d0fca853ebec47c53b2d49d7745ae3cb160b7c270247695fd04324acc1757c3fbbc2bd610f9294c3bb6", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) read$FUSE(r5, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f00000028c0)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004bc0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004a00)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0\x00', 0x20100, 0x44) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f0000004a80)={0x1, 0x3, 0x1000, 0xffffffffffffffbc, 0x0, 0x0, 0x0, 0x0}) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdir(&(0x7f0000000240)='./tracefs\x00', 0x1ff) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs/trace_options\x00', 0x2, 0x0) write(r9, &(0x7f00000006c0)='raw\n', 0x4) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0104000000000000000000000009fd74b8e71d511346f8ca611db12b0900010073797a30000000002c000000030a0101000000f2ffffffff000000000900010073797a30000000000900030073797a300000000060000000060a010400000000000000000100000308000b4000000000380004800c00018008000100647570000600018008000100636d70001c00028034ba418100000001080001400000000308000240000000000900010073797a300000000014000000110000000a"], 0xd4}}, 0x0) (async) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_EVBIT(r10, 0x40045564, 0x12) 553.854843ms ago: executing program 0 (id=1163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x15}, 0x4000000) 455.653594ms ago: executing program 4 (id=1164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000200)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210001c0000000000000100001c1122334400080000000500050000000580020008"], 0x4a) 425.385603ms ago: executing program 0 (id=1165): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) (async) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr(r1, &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', &(0x7f00000000c0)='{\x00', 0x2, 0x1) (async) socket$packet(0x11, 0x2, 0x300) (async) socket(0x10, 0x803, 0x0) r2 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a', @ANYRESHEX], 0x0) 289.610779ms ago: executing program 5 (id=1166): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000780)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000007c0)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003083300fe88a43de1a400000000001200007d01ff020000000000000000000000000001"], 0xfdef) 155.067462ms ago: executing program 4 (id=1167): r0 = socket(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000001680)="44000000100005060000000000000000000000000000000000000000000000000c0003006d796c6f7770616e0800050002000020100012000b0001006c6f7770616e0000", 0x44, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 5 (id=1168): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x131) write(r0, &(0x7f00000001c0)='270', 0x3) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000240)={0x2, @win={{0x9, 0x7, 0x47524247, 0x5}, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8}}) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x2, 0x0) unshare(0x40000000) kernel console output (not intermixed with test programs): mmu_group_alloc+0x2c0/0x3c0 [ 225.682097][ T8478] __iommu_probe_device+0x5d2/0x1260 [ 225.682134][ T8478] iommu_bus_notifier+0x87/0x2c0 [ 225.682165][ T8478] notifier_call_chain+0x1a5/0x3d0 [ 225.682196][ T8478] blocking_notifier_call_chain+0x6a/0x90 [ 225.682222][ T8478] bus_notify+0x143/0x180 [ 225.682247][ T8478] device_add+0x53a/0xb80 [ 225.682272][ T8478] iommu_mock_device_add+0x83/0x1e0 [ 225.682304][ T8478] iommufd_test+0x38d1/0x6360 [ 225.682338][ T8478] ? __lock_acquire+0x747/0x2de0 [ 225.682363][ T8478] ? __pfx_iommufd_test+0x10/0x10 [ 225.682398][ T8478] ? tomoyo_path_number_perm+0x219/0x5f0 [ 225.682429][ T8478] ? tomoyo_path_number_perm+0x219/0x5f0 [ 225.682462][ T8478] ? lock_acquire+0x115/0x350 [ 225.682502][ T8478] ? __might_fault+0xaf/0x130 [ 225.682531][ T8478] iommufd_fops_ioctl+0x465/0x600 [ 225.682564][ T8478] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 225.682596][ T8478] ? __fget_files+0x2a/0x420 [ 225.682649][ T8478] ? bpf_lsm_file_ioctl+0x9/0x20 [ 225.682678][ T8478] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 225.682706][ T8478] __se_sys_ioctl+0xfc/0x170 [ 225.682742][ T8478] do_syscall_64+0x16a/0x530 [ 225.682772][ T8478] ? trace_irq_disable+0x3b/0x140 [ 225.682808][ T8478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.682832][ T8478] ? clear_bhb_loop+0x70/0xc0 [ 225.682860][ T8478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.682881][ T8478] RIP: 0033:0x7fd327fa8f19 [ 225.682903][ T8478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.682922][ T8478] RSP: 002b:00007fd328ed8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.682946][ T8478] RAX: ffffffffffffffda RBX: 00007fd328225fa0 RCX: 00007fd327fa8f19 [ 225.682963][ T8478] RDX: 0000200000002280 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 225.682978][ T8478] RBP: 00007fd328037f6d R08: 0000000000000000 R09: 0000000000000000 [ 225.682993][ T8478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.683006][ T8478] R13: 00007fd328226038 R14: 00007fd328225fa0 R15: 00007fff6a658c28 [ 225.683043][ T8478] [ 225.826908][ T8483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.827028][ T8483] FAULT_INJECTION: forcing a failure. [ 225.827028][ T8483] name failslab, interval 1, probability 0, space 0, times 0 [ 225.827056][ T8483] CPU: 0 UID: 0 PID: 8483 Comm: syz.4.944 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.827085][ T8483] Tainted: [L]=SOFTLOCKUP [ 225.827093][ T8483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 225.827106][ T8483] Call Trace: [ 225.827114][ T8483] [ 225.827122][ T8483] dump_stack_lvl+0xe8/0x150 [ 225.827159][ T8483] should_fail_ex+0x3eb/0x540 [ 225.827187][ T8483] should_failslab+0xa8/0x100 [ 225.827219][ T8483] ? skb_clone+0x212/0x3a0 [ 225.827247][ T8483] kmem_cache_alloc_noprof+0x9c/0x600 [ 225.827274][ T8483] ? skb_clone+0x212/0x3a0 [ 225.827307][ T8483] skb_clone+0x212/0x3a0 [ 225.827333][ T8483] ? netlink_broadcast_filtered+0x5a0/0x1070 [ 225.827366][ T8483] netlink_broadcast_filtered+0x5ae/0x1070 [ 225.827413][ T8483] netlink_broadcast+0x37/0x50 [ 225.827446][ T8483] kobject_uevent_net_broadcast+0x378/0x560 [ 225.827478][ T8483] kobject_uevent_env+0x566/0x9e0 [ 225.827511][ T8483] device_add+0x544/0xb80 [ 225.827537][ T8483] iommu_mock_device_add+0x83/0x1e0 [ 225.827569][ T8483] iommufd_test+0x38d1/0x6360 [ 225.827603][ T8483] ? __lock_acquire+0x747/0x2de0 [ 225.827627][ T8483] ? __pfx_iommufd_test+0x10/0x10 [ 225.827659][ T8483] ? tomoyo_path_number_perm+0x219/0x5f0 [ 225.827691][ T8483] ? tomoyo_path_number_perm+0x219/0x5f0 [ 225.827723][ T8483] ? lock_acquire+0x115/0x350 [ 225.827762][ T8483] ? __might_fault+0xaf/0x130 [ 225.827789][ T8483] iommufd_fops_ioctl+0x465/0x600 [ 225.827821][ T8483] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 225.827851][ T8483] ? __fget_files+0x2a/0x420 [ 225.827896][ T8483] ? bpf_lsm_file_ioctl+0x9/0x20 [ 225.827924][ T8483] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 225.827949][ T8483] __se_sys_ioctl+0xfc/0x170 [ 225.827983][ T8483] do_syscall_64+0x16a/0x530 [ 225.828011][ T8483] ? trace_irq_disable+0x3b/0x140 [ 225.828037][ T8483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.828057][ T8483] ? clear_bhb_loop+0x70/0xc0 [ 225.828082][ T8483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.828103][ T8483] RIP: 0033:0x7f15d4ba8f19 [ 225.828122][ T8483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.828139][ T8483] RSP: 002b:00007f15d5a3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.828162][ T8483] RAX: ffffffffffffffda RBX: 00007f15d4e25fa0 RCX: 00007f15d4ba8f19 [ 225.828178][ T8483] RDX: 0000200000002280 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 225.828191][ T8483] RBP: 00007f15d4c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 225.828204][ T8483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.828217][ T8483] R13: 00007f15d4e26038 R14: 00007f15d4e25fa0 R15: 00007ffce26d79c8 [ 225.828251][ T8483] [ 226.119685][ T8485] FAULT_INJECTION: forcing a failure. [ 226.119685][ T8485] name failslab, interval 1, probability 0, space 0, times 0 [ 226.119718][ T8485] CPU: 0 UID: 0 PID: 8485 Comm: syz.3.945 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.119744][ T8485] Tainted: [L]=SOFTLOCKUP [ 226.119751][ T8485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 226.119763][ T8485] Call Trace: [ 226.119771][ T8485] [ 226.119779][ T8485] dump_stack_lvl+0xe8/0x150 [ 226.119812][ T8485] should_fail_ex+0x3eb/0x540 [ 226.119838][ T8485] should_failslab+0xa8/0x100 [ 226.119869][ T8485] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 226.119895][ T8485] ? kobject_set_name_vargs+0x61/0x110 [ 226.119915][ T8485] ? kobject_set_name_vargs+0x61/0x110 [ 226.119942][ T8485] kvasprintf+0xeb/0x1a0 [ 226.119967][ T8485] ? __pfx_kvasprintf+0x10/0x10 [ 226.119985][ T8485] ? rcu_is_watching+0x16/0xb0 [ 226.120012][ T8485] ? kfree+0x4d/0x650 [ 226.120031][ T8485] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 226.120059][ T8485] ? kvasprintf_const+0xe1/0x240 [ 226.120083][ T8485] kobject_set_name_vargs+0x61/0x110 [ 226.120105][ T8485] kobject_init_and_add+0xee/0x1a0 [ 226.120131][ T8485] ? __pfx_kobject_init_and_add+0x10/0x10 [ 226.120154][ T8485] ? __kmalloc_cache_noprof+0x31c/0x600 [ 226.120177][ T8485] ? __kmalloc_cache_noprof+0x148/0x600 [ 226.120203][ T8485] ? __raw_spin_lock_init+0x45/0x100 [ 226.120233][ T8485] swnode_register+0x3ba/0x590 [ 226.120259][ T8485] fwnode_create_software_node+0x194/0x1f0 [ 226.120284][ T8485] device_create_managed_software_node+0xce/0x1f0 [ 226.120311][ T8485] iommufd_test+0x38a0/0x6360 [ 226.120343][ T8485] ? __lock_acquire+0x747/0x2de0 [ 226.120371][ T8485] ? __pfx_iommufd_test+0x10/0x10 [ 226.120402][ T8485] ? tomoyo_path_number_perm+0x219/0x5f0 [ 226.120430][ T8485] ? tomoyo_path_number_perm+0x219/0x5f0 [ 226.120459][ T8485] ? lock_acquire+0x115/0x350 [ 226.120494][ T8485] ? __might_fault+0xaf/0x130 [ 226.120519][ T8485] iommufd_fops_ioctl+0x465/0x600 [ 226.120548][ T8485] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 226.120576][ T8485] ? __fget_files+0x2a/0x420 [ 226.120611][ T8485] ? bpf_lsm_file_ioctl+0x9/0x20 [ 226.120638][ T8485] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 226.120661][ T8485] __se_sys_ioctl+0xfc/0x170 [ 226.120691][ T8485] do_syscall_64+0x16a/0x530 [ 226.120716][ T8485] ? trace_irq_disable+0x3b/0x140 [ 226.120740][ T8485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.120759][ T8485] ? clear_bhb_loop+0x70/0xc0 [ 226.120783][ T8485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.120802][ T8485] RIP: 0033:0x7fd327fa8f19 [ 226.120821][ T8485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.120837][ T8485] RSP: 002b:00007fd328ed8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.120857][ T8485] RAX: ffffffffffffffda RBX: 00007fd328225fa0 RCX: 00007fd327fa8f19 [ 226.120869][ T8485] RDX: 0000200000002280 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 226.120879][ T8485] RBP: 00007fd328ed8090 R08: 0000000000000000 R09: 0000000000000000 [ 226.120889][ T8485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.120898][ T8485] R13: 00007fd328226038 R14: 00007fd328225fa0 R15: 00007fff6a658c28 [ 226.120927][ T8485] [ 226.126532][ T8485] kobject: can not set name properly! [ 226.126609][ T8485] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 226.510473][ T1769] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 226.530009][ T8493] FAULT_INJECTION: forcing a failure. [ 226.530009][ T8493] name failslab, interval 1, probability 0, space 0, times 0 [ 226.530042][ T8493] CPU: 0 UID: 0 PID: 8493 Comm: syz.3.948 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.530069][ T8493] Tainted: [L]=SOFTLOCKUP [ 226.530077][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 226.530090][ T8493] Call Trace: [ 226.530098][ T8493] [ 226.530106][ T8493] dump_stack_lvl+0xe8/0x150 [ 226.530141][ T8493] should_fail_ex+0x3eb/0x540 [ 226.530167][ T8493] should_failslab+0xa8/0x100 [ 226.530199][ T8493] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 226.530233][ T8493] ? __lock_acquire+0x747/0x2de0 [ 226.530255][ T8493] ? __kernfs_new_node+0xa9/0x980 [ 226.530274][ T8493] ? __kernfs_new_node+0xa9/0x980 [ 226.530300][ T8493] kstrdup+0x42/0x100 [ 226.530322][ T8493] __kernfs_new_node+0xa9/0x980 [ 226.530350][ T8493] ? __pfx___kernfs_new_node+0x10/0x10 [ 226.530370][ T8493] ? kernfs_root+0x1c/0x230 [ 226.530394][ T8493] ? kernfs_root+0x1c/0x230 [ 226.530412][ T8493] ? kernfs_root+0x1c/0x230 [ 226.530427][ T8493] ? kernfs_root+0x1c/0x230 [ 226.530449][ T8493] kernfs_create_dir_ns+0xfe/0x230 [ 226.530476][ T8493] sysfs_create_dir_ns+0x12f/0x2a0 [ 226.530508][ T8493] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 226.530539][ T8493] ? do_raw_spin_unlock+0xf5/0x200 [ 226.530571][ T8493] kobject_add_internal+0x622/0xcd0 [ 226.530599][ T8493] kobject_init_and_add+0x12b/0x1a0 [ 226.530625][ T8493] ? __pfx_kobject_init_and_add+0x10/0x10 [ 226.530648][ T8493] ? __kmalloc_cache_noprof+0x31c/0x600 [ 226.530671][ T8493] ? __kmalloc_cache_noprof+0x148/0x600 [ 226.530697][ T8493] ? __raw_spin_lock_init+0x45/0x100 [ 226.530746][ T8493] swnode_register+0x3ba/0x590 [ 226.530773][ T8493] fwnode_create_software_node+0x194/0x1f0 [ 226.530797][ T8493] device_create_managed_software_node+0xce/0x1f0 [ 226.530824][ T8493] iommufd_test+0x38a0/0x6360 [ 226.530853][ T8493] ? __lock_acquire+0x747/0x2de0 [ 226.530876][ T8493] ? __pfx_iommufd_test+0x10/0x10 [ 226.530907][ T8493] ? tomoyo_path_number_perm+0x219/0x5f0 [ 226.530935][ T8493] ? tomoyo_path_number_perm+0x219/0x5f0 [ 226.530964][ T8493] ? lock_acquire+0x115/0x350 [ 226.530999][ T8493] ? __might_fault+0xaf/0x130 [ 226.531024][ T8493] iommufd_fops_ioctl+0x465/0x600 [ 226.531054][ T8493] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 226.531081][ T8493] ? __fget_files+0x2a/0x420 [ 226.531116][ T8493] ? bpf_lsm_file_ioctl+0x9/0x20 [ 226.531141][ T8493] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 226.531165][ T8493] __se_sys_ioctl+0xfc/0x170 [ 226.531195][ T8493] do_syscall_64+0x16a/0x530 [ 226.531221][ T8493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.531246][ T8493] ? clear_bhb_loop+0x70/0xc0 [ 226.531269][ T8493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.531289][ T8493] RIP: 0033:0x7fd327fa8f19 [ 226.531307][ T8493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.531324][ T8493] RSP: 002b:00007fd328ed8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.531345][ T8493] RAX: ffffffffffffffda RBX: 00007fd328225fa0 RCX: 00007fd327fa8f19 [ 226.531359][ T8493] RDX: 0000200000002280 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 226.531372][ T8493] RBP: 00007fd328ed8090 R08: 0000000000000000 R09: 0000000000000000 [ 226.531384][ T8493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.531396][ T8493] R13: 00007fd328226038 R14: 00007fd328225fa0 R15: 00007fff6a658c28 [ 226.531426][ T8493] [ 226.539967][ T8493] kobject: kobject_add_internal failed for node1 (error: -12 parent: software_nodes) [ 226.540064][ T8493] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 226.672830][ T1769] usb 5-1: New USB device found: idVendor=8086, idProduct=0000, bcdDevice=0.00 [ 226.673957][ T1769] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.673998][ T1769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.688203][ T1769] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 226.905166][ T8503] netlink: 44 bytes leftover after parsing attributes in process `syz.0.952'. [ 227.245600][ T8510] o2cb: This node has not been configured. [ 227.245617][ T8510] o2cb: Cluster check failed. Fix errors before retrying. [ 227.245640][ T8510] (syz.4.946,8510,0):user_dlm_register:682 ERROR: status = -22 [ 227.245665][ T8510] (syz.4.946,8510,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 227.278414][ T8513] autofs4:pid:8513:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.1280), cmd(0xc0189375) [ 227.278443][ T8513] autofs4:pid:8513:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 227.281218][ T8514] autofs4:pid:8514:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.1280), cmd(0xc0189375) [ 227.281246][ T8514] autofs4:pid:8514:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 227.614513][ T5804] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 227.767118][ T5804] usb 4-1: Using ep0 maxpacket: 32 [ 227.770826][ T5804] usb 4-1: New USB device found: idVendor=06f8, idProduct=301b, bcdDevice=ad.39 [ 227.771179][ T8518] FAULT_INJECTION: forcing a failure. [ 227.771179][ T8518] name failslab, interval 1, probability 0, space 0, times 0 [ 227.771208][ T8518] CPU: 0 UID: 0 PID: 8518 Comm: syz.3.957 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.771237][ T8518] Tainted: [L]=SOFTLOCKUP [ 227.771245][ T8518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 227.771258][ T8518] Call Trace: [ 227.771276][ T8518] [ 227.771286][ T8518] dump_stack_lvl+0xe8/0x150 [ 227.771323][ T8518] should_fail_ex+0x3eb/0x540 [ 227.771350][ T8518] should_failslab+0xa8/0x100 [ 227.771385][ T8518] __kmalloc_noprof+0xf9/0x710 [ 227.771409][ T8518] ? rcu_is_watching+0x16/0xb0 [ 227.771438][ T8518] ? tomoyo_realpath_from_path+0xf2/0x640 [ 227.771458][ T8518] ? tomoyo_realpath_from_path+0xf2/0x640 [ 227.771487][ T8518] tomoyo_realpath_from_path+0xf2/0x640 [ 227.771518][ T8518] ? tomoyo_path_number_perm+0x219/0x5f0 [ 227.771547][ T8518] tomoyo_path_number_perm+0x246/0x5f0 [ 227.771579][ T8518] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 227.771607][ T8518] ? __lock_acquire+0x747/0x2de0 [ 227.771669][ T8518] ? __fget_files+0x2a/0x420 [ 227.771698][ T8518] ? __fget_files+0x2a/0x420 [ 227.771723][ T8518] ? __fget_files+0x2a/0x420 [ 227.771754][ T8518] security_file_ioctl+0xc3/0x2a0 [ 227.771792][ T8518] __se_sys_ioctl+0x47/0x170 [ 227.771835][ T8518] do_syscall_64+0x16a/0x530 [ 227.771865][ T8518] ? trace_irq_disable+0x3b/0x140 [ 227.771893][ T8518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.771916][ T8518] ? clear_bhb_loop+0x70/0xc0 [ 227.771943][ T8518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.771964][ T8518] RIP: 0033:0x7fd327fa8bab [ 227.771985][ T8518] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 227.772004][ T8518] RSP: 002b:00007fd328ed5f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.772028][ T8518] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007fd327fa8bab [ 227.772043][ T8518] RDX: 00007fd328ed5fc0 RSI: 0000000040085503 RDI: 0000000000000007 [ 227.772058][ T8518] RBP: 00007fd328ed6fd0 R08: 0000000000000009 R09: 00007fd328ed5fc8 [ 227.772074][ T8518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 227.772087][ T8518] R13: 0000000800000000 R14: 0000000000000009 R15: 00007fd32805709b [ 227.772121][ T8518] [ 227.774250][ T8518] ERROR: Out of memory at tomoyo_realpath_from_path. [ 227.777050][ T5804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.786709][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=6, SerialNumber=0 [ 227.786736][ T5804] usb 4-1: Product: syz [ 227.786751][ T5804] usb 4-1: Manufacturer: syz [ 227.794002][ T5804] usb 4-1: config 0 descriptor?? [ 227.802905][ T5804] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 228.121953][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.960'. [ 228.121984][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.960'. [ 228.313871][ T8531] FAULT_INJECTION: forcing a failure. [ 228.313871][ T8531] name failslab, interval 1, probability 0, space 0, times 0 [ 228.313909][ T8531] CPU: 1 UID: 0 PID: 8531 Comm: syz.0.963 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.313939][ T8531] Tainted: [L]=SOFTLOCKUP [ 228.313947][ T8531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 228.313960][ T8531] Call Trace: [ 228.313969][ T8531] [ 228.313978][ T8531] dump_stack_lvl+0xe8/0x150 [ 228.314016][ T8531] should_fail_ex+0x3eb/0x540 [ 228.314044][ T8531] should_failslab+0xa8/0x100 [ 228.314080][ T8531] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 228.314109][ T8531] ? __lock_acquire+0x747/0x2de0 [ 228.314132][ T8531] ? __kernfs_new_node+0xa9/0x980 [ 228.314153][ T8531] ? __kernfs_new_node+0xa9/0x980 [ 228.314181][ T8531] kstrdup+0x42/0x100 [ 228.314205][ T8531] __kernfs_new_node+0xa9/0x980 [ 228.314240][ T8531] ? __pfx___kernfs_new_node+0x10/0x10 [ 228.314263][ T8531] ? kernfs_root+0x1c/0x230 [ 228.314290][ T8531] ? kernfs_root+0x1c/0x230 [ 228.314309][ T8531] ? kernfs_root+0x1c/0x230 [ 228.314327][ T8531] ? kernfs_root+0x1c/0x230 [ 228.314352][ T8531] kernfs_create_dir_ns+0xfe/0x230 [ 228.314377][ T8531] sysfs_create_dir_ns+0x12f/0x2a0 [ 228.314408][ T8531] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 228.314440][ T8531] ? do_raw_spin_unlock+0xf5/0x200 [ 228.314493][ T8531] kobject_add_internal+0x622/0xcd0 [ 228.314522][ T8531] kobject_init_and_add+0x12b/0x1a0 [ 228.314550][ T8531] ? __pfx_kobject_init_and_add+0x10/0x10 [ 228.314579][ T8531] ? __raw_spin_lock_init+0x45/0x100 [ 228.314612][ T8531] iommu_group_alloc+0x1df/0x3c0 [ 228.314646][ T8531] __iommu_probe_device+0x5d2/0x1260 [ 228.314697][ T8531] iommu_bus_notifier+0x87/0x2c0 [ 228.314730][ T8531] notifier_call_chain+0x1a5/0x3d0 [ 228.314762][ T8531] blocking_notifier_call_chain+0x6a/0x90 [ 228.314786][ T8531] bus_notify+0x143/0x180 [ 228.314808][ T8531] device_add+0x53a/0xb80 [ 228.314832][ T8531] iommu_mock_device_add+0x83/0x1e0 [ 228.314863][ T8531] iommufd_test+0x38d1/0x6360 [ 228.314896][ T8531] ? __lock_acquire+0x747/0x2de0 [ 228.314920][ T8531] ? __pfx_iommufd_test+0x10/0x10 [ 228.314954][ T8531] ? tomoyo_path_number_perm+0x219/0x5f0 [ 228.314987][ T8531] ? tomoyo_path_number_perm+0x219/0x5f0 [ 228.315020][ T8531] ? lock_acquire+0x115/0x350 [ 228.315060][ T8531] ? __might_fault+0xaf/0x130 [ 228.315087][ T8531] iommufd_fops_ioctl+0x465/0x600 [ 228.315118][ T8531] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 228.315149][ T8531] ? __fget_files+0x2a/0x420 [ 228.315183][ T8531] ? bpf_lsm_file_ioctl+0x9/0x20 [ 228.315208][ T8531] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 228.315234][ T8531] __se_sys_ioctl+0xfc/0x170 [ 228.315267][ T8531] do_syscall_64+0x16a/0x530 [ 228.315295][ T8531] ? trace_irq_disable+0x3b/0x140 [ 228.315319][ T8531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.315339][ T8531] ? clear_bhb_loop+0x70/0xc0 [ 228.315363][ T8531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.315385][ T8531] RIP: 0033:0x7f8937fa8f19 [ 228.315406][ T8531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.315425][ T8531] RSP: 002b:00007f8938ecd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.315449][ T8531] RAX: ffffffffffffffda RBX: 00007f8938225fa0 RCX: 00007f8937fa8f19 [ 228.315466][ T8531] RDX: 0000200000000300 RSI: 0000000000003ba0 RDI: 0000000000000006 [ 228.315481][ T8531] RBP: 00007f8938037f6d R08: 0000000000000000 R09: 0000000000000000 [ 228.315495][ T8531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.315508][ T8531] R13: 00007f8938226038 R14: 00007f8938225fa0 R15: 00007fff92503148 [ 228.315544][ T8531] [ 228.326464][ T8531] kobject: kobject_add_internal failed for 0 (error: -12 parent: iommu_groups) [ 228.419889][ T8532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.568828][ T5804] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 228.568921][ T5804] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 228.580113][ T8536] SQUASHFS error: Failed to read block 0x0: -5 [ 228.580167][ T8536] unable to read squashfs_super_block on nbd0 [ 229.037306][ T8545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.037812][ T8545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.158772][ T5639] usb 5-1: USB disconnect, device number 6 [ 229.364332][ T8554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.972'. [ 229.739189][ T8562] FAULT_INJECTION: forcing a failure. [ 229.739189][ T8562] name failslab, interval 1, probability 0, space 0, times 0 [ 229.739225][ T8562] CPU: 0 UID: 0 PID: 8562 Comm: syz.2.974 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.739252][ T8562] Tainted: [L]=SOFTLOCKUP [ 229.739259][ T8562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 229.739271][ T8562] Call Trace: [ 229.739279][ T8562] [ 229.739288][ T8562] dump_stack_lvl+0xe8/0x150 [ 229.739324][ T8562] should_fail_ex+0x3eb/0x540 [ 229.739352][ T8562] should_failslab+0xa8/0x100 [ 229.739385][ T8562] __kmalloc_noprof+0xf9/0x710 [ 229.739412][ T8562] ? ip_options_get+0x51/0x570 [ 229.739435][ T8562] ? ip_options_get+0x51/0x570 [ 229.739462][ T8562] ip_options_get+0x51/0x570 [ 229.739495][ T8562] do_ip_setsockopt+0x1d80/0x2e30 [ 229.739530][ T8562] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 229.739557][ T8562] ? do_futex+0x458/0x4e0 [ 229.739584][ T8562] ? __asan_memcpy+0x40/0x70 [ 229.739610][ T8562] ? lock_acquire+0x115/0x350 [ 229.739643][ T8562] ? aa_sock_opt_perm+0xe8/0x1e0 [ 229.739678][ T8562] ip_setsockopt+0x66/0x110 [ 229.739704][ T8562] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 229.739741][ T8562] do_sock_setsockopt+0x17c/0x1b0 [ 229.739770][ T8562] __x64_sys_setsockopt+0x13d/0x1b0 [ 229.739799][ T8562] do_syscall_64+0x16a/0x530 [ 229.739826][ T8562] ? trace_irq_disable+0x3b/0x140 [ 229.739853][ T8562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.739876][ T8562] ? clear_bhb_loop+0x70/0xc0 [ 229.739902][ T8562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.739923][ T8562] RIP: 0033:0x7f3d7a1a8f19 [ 229.739942][ T8562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.739960][ T8562] RSP: 002b:00007f3d783f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 229.739984][ T8562] RAX: ffffffffffffffda RBX: 00007f3d7a425fa0 RCX: 00007f3d7a1a8f19 [ 229.739999][ T8562] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000009 [ 229.740019][ T8562] RBP: 00007f3d7a237f6d R08: 0000000000000005 R09: 0000000000000000 [ 229.740033][ T8562] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 229.740046][ T8562] R13: 00007f3d7a426038 R14: 00007f3d7a425fa0 R15: 00007ffe7be412a8 [ 229.740079][ T8562] [ 229.901917][ T8562] FAULT_INJECTION: forcing a failure. [ 229.901917][ T8562] name failslab, interval 1, probability 0, space 0, times 0 [ 229.901952][ T8562] CPU: 1 UID: 0 PID: 8562 Comm: syz.2.974 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.901981][ T8562] Tainted: [L]=SOFTLOCKUP [ 229.901989][ T8562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 229.902000][ T8562] Call Trace: [ 229.902008][ T8562] [ 229.902017][ T8562] dump_stack_lvl+0xe8/0x150 [ 229.902053][ T8562] should_fail_ex+0x3eb/0x540 [ 229.902080][ T8562] should_failslab+0xa8/0x100 [ 229.902115][ T8562] __kmalloc_noprof+0xf9/0x710 [ 229.902139][ T8562] ? __mutex_trylock_common+0x15f/0x270 [ 229.902169][ T8562] ? io_cache_alloc_new+0x40/0x100 [ 229.902198][ T8562] ? io_cache_alloc_new+0x40/0x100 [ 229.902234][ T8562] io_cache_alloc_new+0x40/0x100 [ 229.902264][ T8562] io_uring_cmd_prep+0x39a/0x600 [ 229.902296][ T8562] io_submit_sqes+0xd6e/0x2500 [ 229.902360][ T8562] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 229.902403][ T8562] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 229.902434][ T8562] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 229.902474][ T8562] ? rcu_is_watching+0x16/0xb0 [ 229.902521][ T8562] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 229.902556][ T8562] do_syscall_64+0x16a/0x530 [ 229.902585][ T8562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.902606][ T8562] ? clear_bhb_loop+0x70/0xc0 [ 229.902631][ T8562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.902651][ T8562] RIP: 0033:0x7f3d7a1a8f19 [ 229.902670][ T8562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.902687][ T8562] RSP: 002b:00007f3d783f5f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 229.902710][ T8562] RAX: ffffffffffffffda RBX: 0000200000000300 RCX: 00007f3d7a1a8f19 [ 229.902725][ T8562] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 229.902737][ T8562] RBP: 000000000000004d R08: 0000000000000000 R09: 0000000000000008 [ 229.902750][ T8562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.902763][ T8562] R13: 0000000000000008 R14: 000000000000013c R15: 0000000000000000 [ 229.902792][ T8562] [ 229.923979][ T8568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.927315][ T8568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.985089][ T8568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.987172][ T8568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.408885][ T47] usb 4-1: USB disconnect, device number 36 [ 230.585439][ T5639] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 230.592624][ T8580] binder: BINDER_SET_CONTEXT_MGR already set [ 230.592727][ T8580] binder: BINDER_SET_CONTEXT_MGR already set [ 230.592805][ T8580] binder: BINDER_SET_CONTEXT_MGR already set [ 230.592884][ T8580] binder: BINDER_SET_CONTEXT_MGR already set [ 230.592962][ T8580] binder: BINDER_SET_CONTEXT_MGR already set [ 230.593041][ T8580] binder: BINDER_SET_CONTEXT_MGR already set [ 230.593118][ T8580] binder: BINDER_SET_CONTEXT_MGR already set [ 230.593194][ T8580] binder: BINDER_SET_CONTEXT_MGR already set [ 230.593271][ T8580] binder: BINDER_SET_CONTEXT_MGR already set [ 230.593351][ T8580] binder: BINDER_SET_CONTEXT_MGR already set [ 230.698365][ T8580] FAULT_INJECTION: forcing a failure. [ 230.698365][ T8580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.698397][ T8580] CPU: 0 UID: 0 PID: 8580 Comm: syz.2.981 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.698420][ T8580] Tainted: [L]=SOFTLOCKUP [ 230.698426][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 230.698438][ T8580] Call Trace: [ 230.698445][ T8580] [ 230.698453][ T8580] dump_stack_lvl+0xe8/0x150 [ 230.698486][ T8580] should_fail_ex+0x3eb/0x540 [ 230.698511][ T8580] _copy_to_user+0x31/0xb0 [ 230.698534][ T8580] tty_mode_ioctl+0x4e9/0x7c0 [ 230.698569][ T8580] ? __pfx_tty_mode_ioctl+0x10/0x10 [ 230.698590][ T8580] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 230.698631][ T8580] ? n_tty_ioctl_helper+0x84/0x4d0 [ 230.698652][ T8580] ? __pfx_n_tty_ioctl+0x10/0x10 [ 230.698679][ T8580] tty_ioctl+0x9bd/0xde0 [ 230.698701][ T8580] ? __pfx_tty_ioctl+0x10/0x10 [ 230.698721][ T8580] __se_sys_ioctl+0xfc/0x170 [ 230.698749][ T8580] do_syscall_64+0x16a/0x530 [ 230.698775][ T8580] ? trace_irq_disable+0x3b/0x140 [ 230.698800][ T8580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.698820][ T8580] ? clear_bhb_loop+0x70/0xc0 [ 230.698845][ T8580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.698864][ T8580] RIP: 0033:0x7f3d7a1a8f19 [ 230.698883][ T8580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.698898][ T8580] RSP: 002b:00007f3d783f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.698919][ T8580] RAX: ffffffffffffffda RBX: 00007f3d7a425fa0 RCX: 00007f3d7a1a8f19 [ 230.698934][ T8580] RDX: 0000200000000140 RSI: 00000000802c542a RDI: 0000000000000049 [ 230.698948][ T8580] RBP: 00007f3d7a237f6d R08: 0000000000000000 R09: 0000000000000000 [ 230.698960][ T8580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.698979][ T8580] R13: 00007f3d7a426038 R14: 00007f3d7a425fa0 R15: 00007ffe7be412a8 [ 230.699008][ T8580] [ 230.703239][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.703336][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.703405][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.703467][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.703530][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.703590][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.703652][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.703716][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.703779][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.703841][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.703909][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.703979][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.704037][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.704097][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.704159][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.704215][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.704281][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.704452][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.704515][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.704579][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.704642][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.719402][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.719477][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.719543][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.719607][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.719785][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.719850][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.719914][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.719985][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.720050][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.720114][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.720179][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.720243][ T5645] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 230.902942][ T5639] usb 5-1: New USB device found: idVendor=8086, idProduct=0000, bcdDevice=0.00 [ 230.908837][ T5639] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.908883][ T5639] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.938376][ T5639] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 231.185334][ T8585] 0x000000000003-0x000000010001 : "" [ 231.201170][ T8588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.983'. [ 231.484324][ T8585] ftl_cs: FTL header corrupt! [ 231.621812][ T8594] o2cb: This node has not been configured. [ 231.621827][ T8594] o2cb: Cluster check failed. Fix errors before retrying. [ 231.621848][ T8594] (syz.4.978,8594,0):user_dlm_register:682 ERROR: status = -22 [ 231.621872][ T8594] (syz.4.978,8594,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 232.233357][ T8601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.243926][ T8601] FAULT_INJECTION: forcing a failure. [ 232.243926][ T8601] name failslab, interval 1, probability 0, space 0, times 0 [ 232.243968][ T8601] CPU: 0 UID: 0 PID: 8601 Comm: syz.3.986 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.243998][ T8601] Tainted: [L]=SOFTLOCKUP [ 232.244006][ T8601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 232.244019][ T8601] Call Trace: [ 232.244028][ T8601] [ 232.244037][ T8601] dump_stack_lvl+0xe8/0x150 [ 232.244073][ T8601] should_fail_ex+0x3eb/0x540 [ 232.244099][ T8601] ? __pfx_dev_uevent_name+0x10/0x10 [ 232.244130][ T8601] should_failslab+0xa8/0x100 [ 232.244164][ T8601] __kmalloc_cache_noprof+0x9e/0x600 [ 232.244190][ T8601] ? kobject_uevent_env+0x289/0x9e0 [ 232.244213][ T8601] ? kobject_uevent_env+0x289/0x9e0 [ 232.244240][ T8601] ? __pfx_dev_uevent_name+0x10/0x10 [ 232.244270][ T8601] kobject_uevent_env+0x289/0x9e0 [ 232.244297][ T8601] ? kobject_put+0x50f/0x550 [ 232.244326][ T8601] device_del+0x74d/0x8f0 [ 232.244355][ T8601] ? __pfx_device_del+0x10/0x10 [ 232.244375][ T8601] ? iommufd_test+0x3a22/0x6360 [ 232.244403][ T8601] device_unregister+0x21/0xf0 [ 232.244427][ T8601] iommufd_test+0x3dff/0x6360 [ 232.244457][ T8601] ? __lock_acquire+0x747/0x2de0 [ 232.244482][ T8601] ? __pfx_iommufd_test+0x10/0x10 [ 232.244514][ T8601] ? tomoyo_path_number_perm+0x219/0x5f0 [ 232.244544][ T8601] ? tomoyo_path_number_perm+0x219/0x5f0 [ 232.244574][ T8601] ? lock_acquire+0x115/0x350 [ 232.244612][ T8601] ? __might_fault+0xaf/0x130 [ 232.244639][ T8601] iommufd_fops_ioctl+0x465/0x600 [ 232.244671][ T8601] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 232.244700][ T8601] ? __fget_files+0x2a/0x420 [ 232.244738][ T8601] ? bpf_lsm_file_ioctl+0x9/0x20 [ 232.244767][ T8601] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 232.244793][ T8601] __se_sys_ioctl+0xfc/0x170 [ 232.244826][ T8601] do_syscall_64+0x16a/0x530 [ 232.244854][ T8601] ? trace_irq_disable+0x3b/0x140 [ 232.244879][ T8601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.244901][ T8601] ? clear_bhb_loop+0x70/0xc0 [ 232.244926][ T8601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.244957][ T8601] RIP: 0033:0x7fd327fa8f19 [ 232.244976][ T8601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.244995][ T8601] RSP: 002b:00007fd328ed8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.245017][ T8601] RAX: ffffffffffffffda RBX: 00007fd328225fa0 RCX: 00007fd327fa8f19 [ 232.245033][ T8601] RDX: 0000200000002280 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 232.245047][ T8601] RBP: 00007fd328037f6d R08: 0000000000000000 R09: 0000000000000000 [ 232.245061][ T8601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.245074][ T8601] R13: 00007fd328226038 R14: 00007fd328225fa0 R15: 00007fff6a658c28 [ 232.245108][ T8601] [ 232.511973][ T8608] FAULT_INJECTION: forcing a failure. [ 232.511973][ T8608] name failslab, interval 1, probability 0, space 0, times 0 [ 232.512007][ T8608] CPU: 1 UID: 0 PID: 8608 Comm: syz.2.989 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.512033][ T8608] Tainted: [L]=SOFTLOCKUP [ 232.512040][ T8608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 232.512052][ T8608] Call Trace: [ 232.512060][ T8608] [ 232.512068][ T8608] dump_stack_lvl+0xe8/0x150 [ 232.512101][ T8608] should_fail_ex+0x3eb/0x540 [ 232.512127][ T8608] should_failslab+0xa8/0x100 [ 232.512158][ T8608] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 232.512183][ T8608] ? __lock_acquire+0x747/0x2de0 [ 232.512204][ T8608] ? __kernfs_new_node+0xa9/0x980 [ 232.512223][ T8608] ? __kernfs_new_node+0xa9/0x980 [ 232.512252][ T8608] kstrdup+0x42/0x100 [ 232.512275][ T8608] __kernfs_new_node+0xa9/0x980 [ 232.512303][ T8608] ? __pfx___kernfs_new_node+0x10/0x10 [ 232.512323][ T8608] ? kernfs_root+0x1c/0x230 [ 232.512348][ T8608] ? kernfs_root+0x1c/0x230 [ 232.512365][ T8608] ? kernfs_root+0x1c/0x230 [ 232.512407][ T8608] ? kernfs_root+0x1c/0x230 [ 232.512430][ T8608] kernfs_create_dir_ns+0xfe/0x230 [ 232.512456][ T8608] sysfs_create_dir_ns+0x12f/0x2a0 [ 232.512488][ T8608] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 232.512530][ T8608] ? do_raw_spin_unlock+0xf5/0x200 [ 232.512562][ T8608] kobject_add_internal+0x622/0xcd0 [ 232.512591][ T8608] kobject_init_and_add+0x12b/0x1a0 [ 232.512616][ T8608] ? __pfx_kobject_init_and_add+0x10/0x10 [ 232.512638][ T8608] ? __kmalloc_cache_noprof+0x31c/0x600 [ 232.512661][ T8608] ? __kmalloc_cache_noprof+0x148/0x600 [ 232.512687][ T8608] ? __raw_spin_lock_init+0x45/0x100 [ 232.512716][ T8608] swnode_register+0x3ba/0x590 [ 232.512742][ T8608] fwnode_create_software_node+0x194/0x1f0 [ 232.512766][ T8608] device_create_managed_software_node+0xce/0x1f0 [ 232.512792][ T8608] iommufd_test+0x38a0/0x6360 [ 232.512820][ T8608] ? __lock_acquire+0x747/0x2de0 [ 232.512841][ T8608] ? __pfx_iommufd_test+0x10/0x10 [ 232.512872][ T8608] ? tomoyo_path_number_perm+0x219/0x5f0 [ 232.512900][ T8608] ? tomoyo_path_number_perm+0x219/0x5f0 [ 232.512929][ T8608] ? lock_acquire+0x115/0x350 [ 232.512963][ T8608] ? __might_fault+0xaf/0x130 [ 232.512988][ T8608] iommufd_fops_ioctl+0x465/0x600 [ 232.513016][ T8608] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 232.513044][ T8608] ? __fget_files+0x2a/0x420 [ 232.513079][ T8608] ? bpf_lsm_file_ioctl+0x9/0x20 [ 232.513104][ T8608] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 232.513127][ T8608] __se_sys_ioctl+0xfc/0x170 [ 232.513157][ T8608] do_syscall_64+0x16a/0x530 [ 232.513182][ T8608] ? trace_irq_disable+0x3b/0x140 [ 232.513206][ T8608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.513225][ T8608] ? clear_bhb_loop+0x70/0xc0 [ 232.513248][ T8608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.513267][ T8608] RIP: 0033:0x7f3d7a1a8f19 [ 232.513285][ T8608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.513302][ T8608] RSP: 002b:00007f3d783f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.513323][ T8608] RAX: ffffffffffffffda RBX: 00007f3d7a425fa0 RCX: 00007f3d7a1a8f19 [ 232.513337][ T8608] RDX: 0000200000002280 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 232.513351][ T8608] RBP: 00007f3d783f6090 R08: 0000000000000000 R09: 0000000000000000 [ 232.513363][ T8608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.513375][ T8608] R13: 00007f3d7a426038 R14: 00007f3d7a425fa0 R15: 00007ffe7be412a8 [ 232.513411][ T8608] [ 232.521625][ T8608] kobject: kobject_add_internal failed for node1 (error: -12 parent: software_nodes) [ 232.521714][ T8608] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 232.666518][ T8610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.681259][ T8610] FAULT_INJECTION: forcing a failure. [ 232.681259][ T8610] name failslab, interval 1, probability 0, space 0, times 0 [ 232.681294][ T8610] CPU: 1 UID: 0 PID: 8610 Comm: syz.3.988 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.681323][ T8610] Tainted: [L]=SOFTLOCKUP [ 232.681331][ T8610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 232.681344][ T8610] Call Trace: [ 232.681352][ T8610] [ 232.681361][ T8610] dump_stack_lvl+0xe8/0x150 [ 232.681399][ T8610] should_fail_ex+0x3eb/0x540 [ 232.681425][ T8610] should_failslab+0xa8/0x100 [ 232.681455][ T8610] ? skb_clone+0x212/0x3a0 [ 232.681489][ T8610] kmem_cache_alloc_noprof+0x9c/0x600 [ 232.681515][ T8610] ? skb_clone+0x212/0x3a0 [ 232.681547][ T8610] skb_clone+0x212/0x3a0 [ 232.681571][ T8610] ? netlink_broadcast_filtered+0x5a0/0x1070 [ 232.681607][ T8610] netlink_broadcast_filtered+0x5ae/0x1070 [ 232.681653][ T8610] netlink_broadcast+0x37/0x50 [ 232.681685][ T8610] kobject_uevent_net_broadcast+0x378/0x560 [ 232.681718][ T8610] kobject_uevent_env+0x566/0x9e0 [ 232.681751][ T8610] __kobject_del+0xd1/0x310 [ 232.681775][ T8610] kobject_put+0x23a/0x550 [ 232.681795][ T8610] ? software_node_notify_remove+0x24a/0x270 [ 232.681823][ T8610] device_del+0x53c/0x8f0 [ 232.681854][ T8610] ? __pfx_device_del+0x10/0x10 [ 232.681873][ T8610] ? iommufd_test+0x3a22/0x6360 [ 232.681903][ T8610] device_unregister+0x21/0xf0 [ 232.681927][ T8610] iommufd_test+0x3dff/0x6360 [ 232.681957][ T8610] ? __lock_acquire+0x747/0x2de0 [ 232.681980][ T8610] ? __pfx_iommufd_test+0x10/0x10 [ 232.682013][ T8610] ? tomoyo_path_number_perm+0x219/0x5f0 [ 232.682044][ T8610] ? tomoyo_path_number_perm+0x219/0x5f0 [ 232.682076][ T8610] ? lock_acquire+0x115/0x350 [ 232.682113][ T8610] ? __might_fault+0xaf/0x130 [ 232.682140][ T8610] iommufd_fops_ioctl+0x465/0x600 [ 232.682172][ T8610] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 232.682201][ T8610] ? __fget_files+0x2a/0x420 [ 232.682239][ T8610] ? bpf_lsm_file_ioctl+0x9/0x20 [ 232.682266][ T8610] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 232.682290][ T8610] __se_sys_ioctl+0xfc/0x170 [ 232.682323][ T8610] do_syscall_64+0x16a/0x530 [ 232.682351][ T8610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.682372][ T8610] ? clear_bhb_loop+0x70/0xc0 [ 232.682396][ T8610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.682417][ T8610] RIP: 0033:0x7fd327fa8f19 [ 232.682437][ T8610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.682455][ T8610] RSP: 002b:00007fd328ed8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.682483][ T8610] RAX: ffffffffffffffda RBX: 00007fd328225fa0 RCX: 00007fd327fa8f19 [ 232.682499][ T8610] RDX: 0000200000002280 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 232.682514][ T8610] RBP: 00007fd328037f6d R08: 0000000000000000 R09: 0000000000000000 [ 232.682528][ T8610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.682541][ T8610] R13: 00007fd328226038 R14: 00007fd328225fa0 R15: 00007fff6a658c28 [ 232.682575][ T8610] [ 232.793320][ T8614] FAULT_INJECTION: forcing a failure. [ 232.793320][ T8614] name failslab, interval 1, probability 0, space 0, times 0 [ 232.796115][ T8614] CPU: 1 UID: 0 PID: 8614 Comm: syz.0.991 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.796146][ T8614] Tainted: [L]=SOFTLOCKUP [ 232.796153][ T8614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 232.796166][ T8614] Call Trace: [ 232.796174][ T8614] [ 232.796182][ T8614] dump_stack_lvl+0xe8/0x150 [ 232.796216][ T8614] should_fail_ex+0x3eb/0x540 [ 232.796242][ T8614] should_failslab+0xa8/0x100 [ 232.796271][ T8614] ? __kernfs_new_node+0xe6/0x980 [ 232.796291][ T8614] kmem_cache_alloc_noprof+0x9c/0x600 [ 232.796313][ T8614] ? kstrdup+0x81/0x100 [ 232.796334][ T8614] ? __kernfs_new_node+0xe6/0x980 [ 232.796360][ T8614] __kernfs_new_node+0xe6/0x980 [ 232.796388][ T8614] ? __pfx___kernfs_new_node+0x10/0x10 [ 232.796407][ T8614] ? kernfs_root+0x1c/0x230 [ 232.796431][ T8614] ? kernfs_root+0x1c/0x230 [ 232.796448][ T8614] ? kernfs_root+0x1c/0x230 [ 232.796465][ T8614] ? kernfs_root+0x1c/0x230 [ 232.796487][ T8614] kernfs_create_dir_ns+0xfe/0x230 [ 232.796514][ T8614] sysfs_create_dir_ns+0x12f/0x2a0 [ 232.796546][ T8614] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 232.796578][ T8614] ? do_raw_spin_unlock+0xf5/0x200 [ 232.796610][ T8614] kobject_add_internal+0x622/0xcd0 [ 232.796638][ T8614] kobject_init_and_add+0x12b/0x1a0 [ 232.796665][ T8614] ? __pfx_kobject_init_and_add+0x10/0x10 [ 232.796687][ T8614] ? __kmalloc_cache_noprof+0x31c/0x600 [ 232.796710][ T8614] ? __kmalloc_cache_noprof+0x148/0x600 [ 232.796732][ T8614] ? __raw_spin_lock_init+0x45/0x100 [ 232.796759][ T8614] swnode_register+0x3ba/0x590 [ 232.796783][ T8614] fwnode_create_software_node+0x194/0x1f0 [ 232.796807][ T8614] device_create_managed_software_node+0xce/0x1f0 [ 232.796832][ T8614] iommufd_test+0x38a0/0x6360 [ 232.796861][ T8614] ? __lock_acquire+0x747/0x2de0 [ 232.796907][ T8614] ? __pfx_iommufd_test+0x10/0x10 [ 232.796936][ T8614] ? tomoyo_path_number_perm+0x219/0x5f0 [ 232.796964][ T8614] ? tomoyo_path_number_perm+0x219/0x5f0 [ 232.796993][ T8614] ? lock_acquire+0x115/0x350 [ 232.797027][ T8614] ? __might_fault+0xaf/0x130 [ 232.797052][ T8614] iommufd_fops_ioctl+0x465/0x600 [ 232.797082][ T8614] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 232.797109][ T8614] ? __fget_files+0x2a/0x420 [ 232.797144][ T8614] ? bpf_lsm_file_ioctl+0x9/0x20 [ 232.797171][ T8614] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 232.797195][ T8614] __se_sys_ioctl+0xfc/0x170 [ 232.797224][ T8614] do_syscall_64+0x16a/0x530 [ 232.797250][ T8614] ? trace_irq_disable+0x3b/0x140 [ 232.797274][ T8614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.797294][ T8614] ? clear_bhb_loop+0x70/0xc0 [ 232.797317][ T8614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.797336][ T8614] RIP: 0033:0x7f8937fa8f19 [ 232.797355][ T8614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.797372][ T8614] RSP: 002b:00007f8938ecd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.797393][ T8614] RAX: ffffffffffffffda RBX: 00007f8938225fa0 RCX: 00007f8937fa8f19 [ 232.797408][ T8614] RDX: 0000200000002280 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 232.797421][ T8614] RBP: 00007f8938ecd090 R08: 0000000000000000 R09: 0000000000000000 [ 232.797433][ T8614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.797445][ T8614] R13: 00007f8938226038 R14: 00007f8938225fa0 R15: 00007fff92503148 [ 232.797475][ T8614] [ 232.804066][ T8614] kobject: kobject_add_internal failed for node1 (error: -12 parent: software_nodes) [ 232.804153][ T8614] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 233.118606][ T8621] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 233.433513][ T5639] usb 5-1: USB disconnect, device number 7 [ 233.658919][ T8628] netlink: 44 bytes leftover after parsing attributes in process `syz.4.995'. [ 234.046765][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 234.046793][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 234.224526][ T5639] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 234.282710][ T8654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.283283][ T8654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.288415][ T8654] befs: (nbd0): No write support. Marking filesystem read-only [ 234.290925][ T8654] befs: (nbd0): unable to read superblock [ 234.317501][ T8654] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.334721][ T47] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 234.375209][ T5639] usb 4-1: New USB device found: idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 234.376529][ T5639] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 234.376558][ T5639] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 234.376585][ T5639] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 234.379017][ T5639] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.379042][ T5639] usb 4-1: Product: syz [ 234.379057][ T5639] usb 4-1: Manufacturer: syz [ 234.379072][ T5639] usb 4-1: SerialNumber: syz [ 234.381972][ T5639] usb 4-1: config 0 descriptor?? [ 234.382759][ T8644] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 234.382911][ T8644] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 234.384516][ T5639] usb 4-1: ucan: probing device on interface #0 [ 234.505771][ T47] usb 5-1: New USB device found: idVendor=8086, idProduct=0000, bcdDevice=0.00 [ 234.509571][ T47] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.509603][ T47] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.509669][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.584567][ T5639] usb 4-1: ucan: could not read protocol version, ret=0 [ 234.584595][ T5639] usb 4-1: ucan: probe failed; try to update the device firmware [ 234.785837][ T8644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.786448][ T8644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.791030][ T8658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.791567][ T8658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.802768][ T8658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.803321][ T8658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.812281][ T8658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.814226][ T8658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.815478][ T27] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 234.820547][ T8658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.829213][ T8658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.922477][ T47] usbhid 5-1:1.0: can't add hid device: -71 [ 234.922588][ T47] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 234.931669][ T47] usb 5-1: USB disconnect, device number 8 [ 234.956942][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 234.957667][ T27] usb 3-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 234.958638][ T27] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 234.958683][ T27] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 234.958711][ T27] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 234.958738][ T27] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 234.960751][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.960774][ T27] usb 3-1: Product: syz [ 234.960789][ T27] usb 3-1: Manufacturer: syz [ 234.960804][ T27] usb 3-1: SerialNumber: syz [ 234.969090][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 234.971159][ T27] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input19 [ 235.194545][ T27] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 235.194568][ T27] (id 0x00) [ 235.265495][ T27] rc_core: IR keymap rc-imon-pad not found [ 235.265518][ T27] Registered IR keymap rc-empty [ 235.265596][ T27] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 235.265616][ T27] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 235.395609][ T27] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 235.397876][ T27] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input20 [ 235.403442][ T27] imon 3-1:155.0: iMON device (15c2:ffdc) on usb<3:38> initialized [ 235.599254][ T47] usb 3-1: USB disconnect, device number 38 [ 236.199818][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1014'. [ 236.442805][ T8685] FAULT_INJECTION: forcing a failure. [ 236.442805][ T8685] name failslab, interval 1, probability 0, space 0, times 0 [ 236.442858][ T8685] CPU: 1 UID: 0 PID: 8685 Comm: syz.0.1017 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.442888][ T8685] Tainted: [L]=SOFTLOCKUP [ 236.442896][ T8685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 236.442917][ T8685] Call Trace: [ 236.442926][ T8685] [ 236.442935][ T8685] dump_stack_lvl+0xe8/0x150 [ 236.442971][ T8685] should_fail_ex+0x3eb/0x540 [ 236.443000][ T8685] should_failslab+0xa8/0x100 [ 236.443035][ T8685] __kmalloc_noprof+0xf9/0x710 [ 236.443060][ T8685] ? __pfx_update_last_data+0x10/0x10 [ 236.443084][ T8685] ? trace_parser_get_init+0x3d/0xc0 [ 236.443111][ T8685] ? trace_parser_get_init+0x3d/0xc0 [ 236.443147][ T8685] trace_parser_get_init+0x3d/0xc0 [ 236.443183][ T8685] ftrace_event_write+0x119/0x2b0 [ 236.443216][ T8685] ? __pfx_ftrace_event_write+0x10/0x10 [ 236.443257][ T8685] ? __pfx_ftrace_event_write+0x10/0x10 [ 236.443287][ T8685] vfs_write+0x296/0xba0 [ 236.443326][ T8685] ? __pfx_vfs_write+0x10/0x10 [ 236.443354][ T8685] ? __fget_files+0x2a/0x420 [ 236.443379][ T8685] ? __fget_files+0x3a2/0x420 [ 236.443402][ T8685] ? __fget_files+0x2a/0x420 [ 236.443432][ T8685] ? fdget+0x1ac/0x250 [ 236.443463][ T8685] ksys_write+0x150/0x270 [ 236.443492][ T8685] ? __pfx_ksys_write+0x10/0x10 [ 236.443532][ T8685] do_syscall_64+0x16a/0x530 [ 236.443561][ T8685] ? trace_irq_disable+0x3b/0x140 [ 236.443587][ T8685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.443609][ T8685] ? clear_bhb_loop+0x70/0xc0 [ 236.443635][ T8685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.443656][ T8685] RIP: 0033:0x7f8937fa8f19 [ 236.443676][ T8685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.443695][ T8685] RSP: 002b:00007f8938ecd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 236.443719][ T8685] RAX: ffffffffffffffda RBX: 00007f8938225fa0 RCX: 00007f8937fa8f19 [ 236.443735][ T8685] RDX: 0000000000000048 RSI: 0000200000000680 RDI: 0000000000000004 [ 236.443750][ T8685] RBP: 00007f8938037f6d R08: 0000000000000000 R09: 0000000000000000 [ 236.443764][ T8685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.443777][ T8685] R13: 00007f8938226038 R14: 00007f8938225fa0 R15: 00007fff92503148 [ 236.443812][ T8685] [ 236.554618][ T27] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 236.595875][ T47] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 236.714576][ T8691] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 236.719002][ T27] usb 3-1: New USB device found: idVendor=8086, idProduct=0000, bcdDevice=0.00 [ 236.720570][ T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.720599][ T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.720634][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.757262][ T47] usb 5-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.00 [ 236.758419][ T47] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.758448][ T47] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 236.758498][ T47] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 236.758538][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.767935][ T8683] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 237.074807][ T5753] usb 4-1: USB disconnect, device number 37 [ 237.152289][ T27] usbhid 3-1:1.0: can't add hid device: -71 [ 237.152399][ T27] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 237.187430][ T27] usb 3-1: USB disconnect, device number 39 [ 237.390458][ T8683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.414722][ T8683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.632409][ T8699] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 237.852383][ T8703] ceph: No source [ 238.047883][ T8712] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1026'. [ 238.348215][ T8727] FAULT_INJECTION: forcing a failure. [ 238.348215][ T8727] name failslab, interval 1, probability 0, space 0, times 0 [ 238.348247][ T8727] CPU: 1 UID: 0 PID: 8727 Comm: syz.2.1030 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.348273][ T8727] Tainted: [L]=SOFTLOCKUP [ 238.348281][ T8727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 238.348293][ T8727] Call Trace: [ 238.348301][ T8727] [ 238.348312][ T8727] dump_stack_lvl+0xe8/0x150 [ 238.348345][ T8727] should_fail_ex+0x3eb/0x540 [ 238.348372][ T8727] should_failslab+0xa8/0x100 [ 238.348401][ T8727] ? __kernfs_new_node+0xe6/0x980 [ 238.348422][ T8727] kmem_cache_alloc_noprof+0x9c/0x600 [ 238.348444][ T8727] ? kstrdup+0x81/0x100 [ 238.348464][ T8727] ? __kernfs_new_node+0xe6/0x980 [ 238.348490][ T8727] __kernfs_new_node+0xe6/0x980 [ 238.348519][ T8727] ? __pfx___kernfs_new_node+0x10/0x10 [ 238.348541][ T8727] ? kernfs_root+0x1c/0x230 [ 238.348572][ T8727] ? kernfs_root+0x1c/0x230 [ 238.348591][ T8727] ? kernfs_root+0x1c/0x230 [ 238.348607][ T8727] ? kernfs_root+0x1c/0x230 [ 238.348631][ T8727] kernfs_create_dir_ns+0xfe/0x230 [ 238.348658][ T8727] sysfs_create_dir_ns+0x12f/0x2a0 [ 238.348690][ T8727] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 238.348722][ T8727] ? do_raw_spin_unlock+0xf5/0x200 [ 238.348756][ T8727] kobject_add_internal+0x622/0xcd0 [ 238.348784][ T8727] kobject_init_and_add+0x12b/0x1a0 [ 238.348811][ T8727] ? __pfx_kobject_init_and_add+0x10/0x10 [ 238.348834][ T8727] ? __kmalloc_cache_noprof+0x31c/0x600 [ 238.348858][ T8727] ? __kmalloc_cache_noprof+0x148/0x600 [ 238.348883][ T8727] ? __raw_spin_lock_init+0x45/0x100 [ 238.348914][ T8727] swnode_register+0x3ba/0x590 [ 238.348941][ T8727] fwnode_create_software_node+0x194/0x1f0 [ 238.348965][ T8727] device_create_managed_software_node+0xce/0x1f0 [ 238.348993][ T8727] iommufd_test+0x38a0/0x6360 [ 238.349023][ T8727] ? __lock_acquire+0x747/0x2de0 [ 238.349044][ T8727] ? __pfx_iommufd_test+0x10/0x10 [ 238.349075][ T8727] ? tomoyo_path_number_perm+0x219/0x5f0 [ 238.349103][ T8727] ? tomoyo_path_number_perm+0x219/0x5f0 [ 238.349133][ T8727] ? lock_acquire+0x115/0x350 [ 238.349168][ T8727] ? __might_fault+0xaf/0x130 [ 238.349195][ T8727] iommufd_fops_ioctl+0x465/0x600 [ 238.349225][ T8727] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 238.349254][ T8727] ? __fget_files+0x2a/0x420 [ 238.349288][ T8727] ? bpf_lsm_file_ioctl+0x9/0x20 [ 238.349310][ T8727] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 238.349333][ T8727] __se_sys_ioctl+0xfc/0x170 [ 238.349364][ T8727] do_syscall_64+0x16a/0x530 [ 238.349391][ T8727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.349411][ T8727] ? clear_bhb_loop+0x70/0xc0 [ 238.349435][ T8727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.349455][ T8727] RIP: 0033:0x7f3d7a1a8f19 [ 238.349473][ T8727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.349490][ T8727] RSP: 002b:00007f3d783f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.349511][ T8727] RAX: ffffffffffffffda RBX: 00007f3d7a425fa0 RCX: 00007f3d7a1a8f19 [ 238.349527][ T8727] RDX: 0000200000002280 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 238.349540][ T8727] RBP: 00007f3d783f6090 R08: 0000000000000000 R09: 0000000000000000 [ 238.349553][ T8727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 238.349571][ T8727] R13: 00007f3d7a426038 R14: 00007f3d7a425fa0 R15: 00007ffe7be412a8 [ 238.349604][ T8727] [ 238.349670][ T8727] kobject: kobject_add_internal failed for node1 (error: -12 parent: software_nodes) [ 238.349751][ T8727] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 238.393939][ T47] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 238.398145][ T47] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input21 [ 238.454129][ T47] usb 5-1: USB disconnect, device number 9 [ 238.454226][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 238.844655][ T5754] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 238.915229][ T5753] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 238.994439][ T5754] usb 4-1: Using ep0 maxpacket: 8 [ 238.995261][ T5754] usb 4-1: New USB device found: idVendor=06cb, idProduct=0003, bcdDevice=0.00 [ 238.996258][ T5754] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 238.996282][ T5754] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.996301][ T5754] usb 4-1: config 0 has no interface number 0 [ 238.996341][ T5754] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 238.996367][ T5754] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 238.996388][ T5754] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.996415][ T5754] usb 4-1: config 0 interface 52 has no altsetting 0 [ 238.998345][ T5754] usb 4-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 238.998370][ T5754] usb 4-1: Product: syz [ 238.998385][ T5754] usb 4-1: SerialNumber: syz [ 239.002700][ T5754] usb 4-1: config 0 descriptor?? [ 239.076849][ T5753] usb 3-1: New USB device found: idVendor=8086, idProduct=0000, bcdDevice=0.00 [ 239.078297][ T5753] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.078326][ T5753] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.078362][ T5753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.220358][ T5754] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 239.220640][ T5754] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -5 [ 239.224815][ T8748] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1037'. [ 239.417491][ T8731] EXT4-fs (nbd3): unable to read superblock [ 239.471321][ T8758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.476983][ T8731] EXT4-fs (nbd3): unable to read superblock [ 239.500250][ T8758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.513487][ T5753] usbhid 3-1:1.0: can't add hid device: -71 [ 239.513588][ T5753] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 239.524271][ T5753] usb 3-1: USB disconnect, device number 40 [ 239.901961][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1043'. [ 239.901988][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1043'. [ 240.018497][ T8773] tipc: Enabling of bearer rejected, failed to enable media [ 240.424488][ T5753] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 240.575221][ T5753] usb 5-1: New USB device found: idVendor=0079, idProduct=1801, bcdDevice=0.00 [ 240.576580][ T5753] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.576611][ T5753] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.576636][ T5753] usb 5-1: config 0 interface 0 has no altsetting 0 [ 240.576669][ T5753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.579483][ T5753] usb 5-1: config 0 descriptor?? [ 240.735385][ T8783] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1048'. [ 240.813926][ T8785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.814021][ T8785] FAULT_INJECTION: forcing a failure. [ 240.814021][ T8785] name failslab, interval 1, probability 0, space 0, times 0 [ 240.814051][ T8785] CPU: 1 UID: 0 PID: 8785 Comm: syz.2.1049 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.814082][ T8785] Tainted: [L]=SOFTLOCKUP [ 240.814091][ T8785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 240.814105][ T8785] Call Trace: [ 240.814114][ T8785] [ 240.814123][ T8785] dump_stack_lvl+0xe8/0x150 [ 240.814158][ T8785] should_fail_ex+0x3eb/0x540 [ 240.814185][ T8785] ? __alloc_skb+0x1db/0x7a0 [ 240.814208][ T8785] should_failslab+0xa8/0x100 [ 240.814240][ T8785] ? __alloc_skb+0x1db/0x7a0 [ 240.814260][ T8785] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 240.814285][ T8785] ? __alloc_skb+0x18d/0x7a0 [ 240.814307][ T8785] ? __alloc_skb+0x1db/0x7a0 [ 240.814334][ T8785] __alloc_skb+0x1db/0x7a0 [ 240.814358][ T8785] alloc_uevent_skb+0x7d/0x230 [ 240.814386][ T8785] kobject_uevent_net_broadcast+0x2fa/0x560 [ 240.814415][ T8785] kobject_uevent_env+0x566/0x9e0 [ 240.814445][ T8785] device_add+0x544/0xb80 [ 240.814472][ T8785] iommu_mock_device_add+0x83/0x1e0 [ 240.814505][ T8785] iommufd_test+0x38d1/0x6360 [ 240.814539][ T8785] ? __lock_acquire+0x747/0x2de0 [ 240.814563][ T8785] ? __pfx_iommufd_test+0x10/0x10 [ 240.814598][ T8785] ? tomoyo_path_number_perm+0x219/0x5f0 [ 240.814630][ T8785] ? tomoyo_path_number_perm+0x219/0x5f0 [ 240.814662][ T8785] ? lock_acquire+0x115/0x350 [ 240.814701][ T8785] ? __might_fault+0xaf/0x130 [ 240.814729][ T8785] iommufd_fops_ioctl+0x465/0x600 [ 240.814762][ T8785] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 240.814802][ T8785] ? __fget_files+0x2a/0x420 [ 240.814841][ T8785] ? bpf_lsm_file_ioctl+0x9/0x20 [ 240.814870][ T8785] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 240.814897][ T8785] __se_sys_ioctl+0xfc/0x170 [ 240.814931][ T8785] do_syscall_64+0x16a/0x530 [ 240.814958][ T8785] ? trace_irq_disable+0x3b/0x140 [ 240.814982][ T8785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.815004][ T8785] ? clear_bhb_loop+0x70/0xc0 [ 240.815030][ T8785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.815051][ T8785] RIP: 0033:0x7f3d7a1a8f19 [ 240.815069][ T8785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.815087][ T8785] RSP: 002b:00007f3d783f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.815110][ T8785] RAX: ffffffffffffffda RBX: 00007f3d7a425fa0 RCX: 00007f3d7a1a8f19 [ 240.815127][ T8785] RDX: 0000200000002280 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 240.815142][ T8785] RBP: 00007f3d7a237f6d R08: 0000000000000000 R09: 0000000000000000 [ 240.815157][ T8785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.815170][ T8785] R13: 00007f3d7a426038 R14: 00007f3d7a425fa0 R15: 00007ffe7be412a8 [ 240.815204][ T8785] [ 240.998140][ T5753] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0 [ 240.998183][ T5753] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0 [ 240.998210][ T5753] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0 [ 240.998236][ T5753] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0 [ 240.998263][ T5753] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0 [ 240.998289][ T5753] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0 [ 240.998315][ T5753] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0 [ 240.998341][ T5753] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0 [ 240.998367][ T5753] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0 [ 240.998393][ T5753] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0 [ 240.998462][ T5753] hid_mf 0003:0079:1801.0003: unbalanced collection at end of report description [ 240.999175][ T5753] hid_mf 0003:0079:1801.0003: HID parse failed. [ 240.999242][ T5753] hid_mf 0003:0079:1801.0003: probe with driver hid_mf failed with error -22 [ 241.156362][ T47] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 241.195566][ T5753] usb 5-1: USB disconnect, device number 10 [ 241.295634][ T47] usb 3-1: New USB device found: idVendor=0460, idProduct=0008, bcdDevice=0.00 [ 241.295678][ T47] usb 3-1: no configurations [ 241.295692][ T47] usb 3-1: can't read configurations, error -22 [ 241.434501][ T47] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 241.514086][ T5753] usb 4-1: USB disconnect, device number 38 [ 241.588916][ T47] usb 3-1: New USB device found: idVendor=0460, idProduct=0008, bcdDevice=0.00 [ 241.588961][ T47] usb 3-1: no configurations [ 241.588974][ T47] usb 3-1: can't read configurations, error -22 [ 241.589226][ T47] usb usb3-port1: attempt power cycle [ 241.924672][ T47] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 241.948431][ T47] usb 3-1: New USB device found: idVendor=0460, idProduct=0008, bcdDevice=0.00 [ 241.948474][ T47] usb 3-1: no configurations [ 241.948488][ T47] usb 3-1: can't read configurations, error -22 [ 242.074552][ T47] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 242.096140][ T47] usb 3-1: New USB device found: idVendor=0460, idProduct=0008, bcdDevice=0.00 [ 242.096183][ T47] usb 3-1: no configurations [ 242.096204][ T47] usb 3-1: can't read configurations, error -22 [ 242.096500][ T47] usb usb3-port1: unable to enumerate USB device [ 242.192676][ T8803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1056'. [ 242.328026][ T5753] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 242.477383][ T5753] usb 4-1: New USB device found: idVendor=8086, idProduct=0000, bcdDevice=0.00 [ 242.480387][ T5753] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.480420][ T5753] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.480458][ T5753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.484595][ T47] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 242.635081][ T47] usb 5-1: New USB device found: idVendor=056a, idProduct=00b1, bcdDevice=0.00 [ 242.636669][ T47] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.636701][ T47] usb 5-1: config 0 interface 0 has no altsetting 0 [ 242.636735][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.639999][ T47] usb 5-1: config 0 descriptor?? [ 242.893983][ T5753] usbhid 4-1:1.0: can't add hid device: -71 [ 242.894123][ T5753] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 242.899647][ T5753] usb 4-1: USB disconnect, device number 39 [ 243.051221][ T47] usbhid 5-1:0.0: can't add hid device: -71 [ 243.051331][ T47] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 243.066722][ T47] usb 5-1: USB disconnect, device number 11 [ 243.787070][ T8831] overlay: Unknown parameter './file0' [ 244.364494][ T1769] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 244.390744][ T7142] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.528918][ T1769] usb 3-1: New USB device found: idVendor=8086, idProduct=0000, bcdDevice=0.00 [ 244.531361][ T1769] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.531391][ T1769] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.531429][ T1769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.595942][ T7142] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.796353][ T7142] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.839605][ T8852] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.839706][ T8852] FAULT_INJECTION: forcing a failure. [ 244.839706][ T8852] name failslab, interval 1, probability 0, space 0, times 0 [ 244.839735][ T8852] CPU: 1 UID: 0 PID: 8852 Comm: syz.4.1075 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.839763][ T8852] Tainted: [L]=SOFTLOCKUP [ 244.839772][ T8852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 244.839785][ T8852] Call Trace: [ 244.839794][ T8852] [ 244.839803][ T8852] dump_stack_lvl+0xe8/0x150 [ 244.839844][ T8852] should_fail_ex+0x3eb/0x540 [ 244.839873][ T8852] should_failslab+0xa8/0x100 [ 244.839905][ T8852] ? skb_clone+0x212/0x3a0 [ 244.839933][ T8852] kmem_cache_alloc_noprof+0x9c/0x600 [ 244.839960][ T8852] ? skb_clone+0x212/0x3a0 [ 244.839993][ T8852] skb_clone+0x212/0x3a0 [ 244.840018][ T8852] ? netlink_broadcast_filtered+0x5a0/0x1070 [ 244.840053][ T8852] netlink_broadcast_filtered+0x5ae/0x1070 [ 244.840108][ T8852] netlink_broadcast+0x37/0x50 [ 244.840142][ T8852] kobject_uevent_net_broadcast+0x378/0x560 [ 244.840175][ T8852] kobject_uevent_env+0x566/0x9e0 [ 244.840208][ T8852] device_add+0x544/0xb80 [ 244.840235][ T8852] iommu_mock_device_add+0x83/0x1e0 [ 244.840268][ T8852] iommufd_test+0x38d1/0x6360 [ 244.840301][ T8852] ? __lock_acquire+0x747/0x2de0 [ 244.840325][ T8852] ? __pfx_iommufd_test+0x10/0x10 [ 244.840359][ T8852] ? tomoyo_path_number_perm+0x219/0x5f0 [ 244.840390][ T8852] ? tomoyo_path_number_perm+0x219/0x5f0 [ 244.840423][ T8852] ? lock_acquire+0x115/0x350 [ 244.840461][ T8852] ? __might_fault+0xaf/0x130 [ 244.840490][ T8852] iommufd_fops_ioctl+0x465/0x600 [ 244.840523][ T8852] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 244.840554][ T8852] ? __fget_files+0x2a/0x420 [ 244.840593][ T8852] ? bpf_lsm_file_ioctl+0x9/0x20 [ 244.840621][ T8852] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 244.840647][ T8852] __se_sys_ioctl+0xfc/0x170 [ 244.840681][ T8852] do_syscall_64+0x16a/0x530 [ 244.840708][ T8852] ? trace_irq_disable+0x3b/0x140 [ 244.840734][ T8852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.840756][ T8852] ? clear_bhb_loop+0x70/0xc0 [ 244.840781][ T8852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.840802][ T8852] RIP: 0033:0x7f15d4ba8f19 [ 244.840823][ T8852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.840842][ T8852] RSP: 002b:00007f15d5a3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.840865][ T8852] RAX: ffffffffffffffda RBX: 00007f15d4e25fa0 RCX: 00007f15d4ba8f19 [ 244.840882][ T8852] RDX: 0000200000002280 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 244.840896][ T8852] RBP: 00007f15d4c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 244.840910][ T8852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.840924][ T8852] R13: 00007f15d4e26038 R14: 00007f15d4e25fa0 R15: 00007ffce26d79c8 [ 244.840958][ T8852] [ 244.981158][ T1769] usbhid 3-1:1.0: can't add hid device: -71 [ 244.981253][ T1769] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 245.178548][ T1769] usb 3-1: USB disconnect, device number 45 [ 245.226633][ T7142] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.303936][ T4955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.308159][ T4955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.308952][ T4955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.312577][ T4955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.313179][ T4955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 245.351310][ T8862] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1078'. [ 245.770824][ T8882] FAULT_INJECTION: forcing a failure. [ 245.770824][ T8882] name failslab, interval 1, probability 0, space 0, times 0 [ 245.770857][ T8882] CPU: 0 UID: 0 PID: 8882 Comm: syz.4.1081 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.770885][ T8882] Tainted: [L]=SOFTLOCKUP [ 245.770892][ T8882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 245.770904][ T8882] Call Trace: [ 245.770911][ T8882] [ 245.770919][ T8882] dump_stack_lvl+0xe8/0x150 [ 245.770963][ T8882] should_fail_ex+0x3eb/0x540 [ 245.770987][ T8882] should_failslab+0xa8/0x100 [ 245.771016][ T8882] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 245.771039][ T8882] ? __d_alloc+0x37/0x820 [ 245.771060][ T8882] ? __d_alloc+0x37/0x820 [ 245.771088][ T8882] __d_alloc+0x37/0x820 [ 245.771115][ T8882] d_make_root+0x41/0x80 [ 245.771139][ T8882] proc_fill_super+0x55d/0x770 [ 245.771164][ T8882] ? __pfx_proc_fill_super+0x10/0x10 [ 245.771188][ T8882] get_tree_nodev+0xbe/0x150 [ 245.771219][ T8882] vfs_get_tree+0x92/0x2a0 [ 245.771250][ T8882] do_new_mount+0x325/0xb00 [ 245.771280][ T8882] ? __pfx_do_new_mount+0x10/0x10 [ 245.771305][ T8882] ? ns_capable+0x84/0xe0 [ 245.771330][ T8882] ? path_mount+0x647/0x1050 [ 245.771354][ T8882] ? user_path_at+0xd4/0x160 [ 245.771383][ T8882] __se_sys_mount+0x31d/0x420 [ 245.771410][ T8882] ? __pfx___se_sys_mount+0x10/0x10 [ 245.771439][ T8882] ? __x64_sys_mount+0x20/0xc0 [ 245.771464][ T8882] do_syscall_64+0x16a/0x530 [ 245.771490][ T8882] ? trace_irq_disable+0x3b/0x140 [ 245.771518][ T8882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.771538][ T8882] ? clear_bhb_loop+0x70/0xc0 [ 245.771563][ T8882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.771584][ T8882] RIP: 0033:0x7f15d4ba8f19 [ 245.771602][ T8882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.771619][ T8882] RSP: 002b:00007f15d5a3f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 245.771643][ T8882] RAX: ffffffffffffffda RBX: 00007f15d4e25fa0 RCX: 00007f15d4ba8f19 [ 245.771659][ T8882] RDX: 00002000000002c0 RSI: 0000200000000240 RDI: 0000000000000000 [ 245.771672][ T8882] RBP: 00007f15d4c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 245.771691][ T8882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.771703][ T8882] R13: 00007f15d4e26038 R14: 00007f15d4e25fa0 R15: 00007ffce26d79c8 [ 245.771736][ T8882] [ 245.774149][ T8882] proc_fill_super: allocate dentry failed [ 245.801060][ T7142] bridge_slave_1: left allmulticast mode [ 245.801101][ T7142] bridge_slave_1: left promiscuous mode [ 245.802120][ T7142] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.829923][ T7142] bridge_slave_0: left allmulticast mode [ 245.829950][ T7142] bridge_slave_0: left promiscuous mode [ 245.831389][ T7142] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.838354][ T8882] FAULT_INJECTION: forcing a failure. [ 245.838354][ T8882] name failslab, interval 1, probability 0, space 0, times 0 [ 245.838394][ T8882] CPU: 1 UID: 0 PID: 8882 Comm: syz.4.1081 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.838429][ T8882] Tainted: [L]=SOFTLOCKUP [ 245.838437][ T8882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 245.838450][ T8882] Call Trace: [ 245.838460][ T8882] [ 245.838469][ T8882] dump_stack_lvl+0xe8/0x150 [ 245.838506][ T8882] should_fail_ex+0x3eb/0x540 [ 245.838543][ T8882] should_failslab+0xa8/0x100 [ 245.838576][ T8882] __kmalloc_noprof+0xf9/0x710 [ 245.838598][ T8882] ? __pfx_update_last_data+0x10/0x10 [ 245.838621][ T8882] ? trace_parser_get_init+0x3d/0xc0 [ 245.838649][ T8882] ? trace_parser_get_init+0x3d/0xc0 [ 245.838685][ T8882] trace_parser_get_init+0x3d/0xc0 [ 245.838714][ T8882] ftrace_event_write+0x119/0x2b0 [ 245.838743][ T8882] ? __pfx_ftrace_event_write+0x10/0x10 [ 245.838779][ T8882] ? __pfx_ftrace_event_write+0x10/0x10 [ 245.838806][ T8882] vfs_write+0x296/0xba0 [ 245.838842][ T8882] ? __pfx_vfs_write+0x10/0x10 [ 245.838872][ T8882] ? __fget_files+0x2a/0x420 [ 245.838897][ T8882] ? __fget_files+0x3a2/0x420 [ 245.838919][ T8882] ? __fget_files+0x2a/0x420 [ 245.838950][ T8882] ? fdget+0x1ac/0x250 [ 245.838981][ T8882] ksys_write+0x150/0x270 [ 245.839009][ T8882] ? __pfx_ksys_write+0x10/0x10 [ 245.839046][ T8882] do_syscall_64+0x16a/0x530 [ 245.839074][ T8882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.839097][ T8882] ? clear_bhb_loop+0x70/0xc0 [ 245.839124][ T8882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.839146][ T8882] RIP: 0033:0x7f15d4ba8f19 [ 245.839182][ T8882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.839201][ T8882] RSP: 002b:00007f15d5a3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 245.839223][ T8882] RAX: ffffffffffffffda RBX: 00007f15d4e25fa0 RCX: 00007f15d4ba8f19 [ 245.839239][ T8882] RDX: 0000000000000048 RSI: 0000200000000680 RDI: 0000000000000006 [ 245.839253][ T8882] RBP: 00007f15d4c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 245.839268][ T8882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.839280][ T8882] R13: 00007f15d4e26038 R14: 00007f15d4e25fa0 R15: 00007ffce26d79c8 [ 245.839317][ T8882] [ 246.348776][ T8892] netlink: 'syz.2.1084': attribute type 3 has an invalid length. [ 246.668593][ T7142] team0: Port device geneve1 removed [ 246.719389][ T7142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.738323][ T7142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.740332][ T7142] bond0 (unregistering): Released all slaves [ 246.762770][ T1769] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 246.909080][ T1769] usb 3-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 246.911476][ T1769] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.911531][ T1769] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 246.911560][ T1769] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 246.911603][ T1769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.247543][ T1769] cxacru 3-1:1.0: send of cm 0x90 failed (-71) [ 247.253880][ T8915] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 247.274264][ T8858] rxe_eth0 speed is unknown, defaulting to 1000 [ 247.287426][ T1769] usb 3-1: USB disconnect, device number 46 [ 247.365101][ T4955] Bluetooth: hci1: command tx timeout [ 247.544606][ T5624] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 247.715824][ T5624] usb 5-1: New USB device found: idVendor=8086, idProduct=0000, bcdDevice=0.00 [ 247.717076][ T5624] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.717107][ T5624] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.717144][ T5624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.093489][ T8920] FAULT_INJECTION: forcing a failure. [ 248.093489][ T8920] name failslab, interval 1, probability 0, space 0, times 0 [ 248.093541][ T8920] CPU: 0 UID: 0 PID: 8920 Comm: syz.2.1091 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.093572][ T8920] Tainted: [L]=SOFTLOCKUP [ 248.093581][ T8920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 248.093594][ T8920] Call Trace: [ 248.093603][ T8920] [ 248.093615][ T8920] dump_stack_lvl+0xe8/0x150 [ 248.093654][ T8920] should_fail_ex+0x3eb/0x540 [ 248.093683][ T8920] should_failslab+0xa8/0x100 [ 248.093716][ T8920] ? security_inode_alloc+0x39/0x310 [ 248.093738][ T8920] kmem_cache_alloc_noprof+0x9c/0x600 [ 248.093765][ T8920] ? security_inode_alloc+0x39/0x310 [ 248.093793][ T8920] security_inode_alloc+0x39/0x310 [ 248.093816][ T8920] inode_init_always_gfp+0x97e/0xd30 [ 248.093846][ T8920] ? __pfx_proc_alloc_inode+0x10/0x10 [ 248.093868][ T8920] alloc_inode+0x82/0x1b0 [ 248.093892][ T8920] new_inode+0x1f/0x170 [ 248.093915][ T8920] ? proc_get_inode+0x1a/0x6a0 [ 248.093940][ T8920] proc_get_inode+0x22/0x6a0 [ 248.093960][ T8920] ? proc_fill_super+0x537/0x770 [ 248.093987][ T8920] proc_fill_super+0x550/0x770 [ 248.094011][ T8920] ? __pfx_proc_fill_super+0x10/0x10 [ 248.094036][ T8920] get_tree_nodev+0xbe/0x150 [ 248.094065][ T8920] vfs_get_tree+0x92/0x2a0 [ 248.094096][ T8920] do_new_mount+0x325/0xb00 [ 248.094126][ T8920] ? __pfx_do_new_mount+0x10/0x10 [ 248.094153][ T8920] ? ns_capable+0x84/0xe0 [ 248.094182][ T8920] ? path_mount+0x647/0x1050 [ 248.094218][ T8920] ? user_path_at+0xd4/0x160 [ 248.094249][ T8920] __se_sys_mount+0x31d/0x420 [ 248.094280][ T8920] ? __pfx___se_sys_mount+0x10/0x10 [ 248.094313][ T8920] ? __x64_sys_mount+0x20/0xc0 [ 248.094340][ T8920] do_syscall_64+0x16a/0x530 [ 248.094365][ T8920] ? trace_irq_disable+0x3b/0x140 [ 248.094392][ T8920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.094413][ T8920] ? clear_bhb_loop+0x70/0xc0 [ 248.094438][ T8920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.094460][ T8920] RIP: 0033:0x7f3d7a1a8f19 [ 248.094479][ T8920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.094497][ T8920] RSP: 002b:00007f3d783f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 248.094521][ T8920] RAX: ffffffffffffffda RBX: 00007f3d7a425fa0 RCX: 00007f3d7a1a8f19 [ 248.094537][ T8920] RDX: 00002000000002c0 RSI: 0000200000000240 RDI: 0000000000000000 [ 248.094553][ T8920] RBP: 00007f3d7a237f6d R08: 0000000000000000 R09: 0000000000000000 [ 248.094566][ T8920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.094580][ T8920] R13: 00007f3d7a426038 R14: 00007f3d7a425fa0 R15: 00007ffe7be412a8 [ 248.094615][ T8920] [ 248.126274][ T8920] proc_fill_super: get root inode failed [ 248.193377][ T8920] FAULT_INJECTION: forcing a failure. [ 248.193377][ T8920] name failslab, interval 1, probability 0, space 0, times 0 [ 248.193414][ T8920] CPU: 0 UID: 0 PID: 8920 Comm: syz.2.1091 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.193441][ T8920] Tainted: [L]=SOFTLOCKUP [ 248.193450][ T8920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 248.193463][ T8920] Call Trace: [ 248.193472][ T8920] [ 248.193481][ T8920] dump_stack_lvl+0xe8/0x150 [ 248.193518][ T8920] should_fail_ex+0x3eb/0x540 [ 248.193546][ T8920] should_failslab+0xa8/0x100 [ 248.193579][ T8920] __kmalloc_noprof+0xf9/0x710 [ 248.193605][ T8920] ? __pfx_update_last_data+0x10/0x10 [ 248.193627][ T8920] ? trace_parser_get_init+0x3d/0xc0 [ 248.193722][ T8920] ? trace_parser_get_init+0x3d/0xc0 [ 248.193764][ T8920] trace_parser_get_init+0x3d/0xc0 [ 248.193797][ T8920] ftrace_event_write+0x119/0x2b0 [ 248.193831][ T8920] ? __pfx_ftrace_event_write+0x10/0x10 [ 248.193871][ T8920] ? __pfx_ftrace_event_write+0x10/0x10 [ 248.193900][ T8920] vfs_write+0x296/0xba0 [ 248.193937][ T8920] ? __pfx_vfs_write+0x10/0x10 [ 248.193966][ T8920] ? __fget_files+0x2a/0x420 [ 248.193990][ T8920] ? __fget_files+0x3a2/0x420 [ 248.194013][ T8920] ? __fget_files+0x2a/0x420 [ 248.194043][ T8920] ? fdget+0x1ac/0x250 [ 248.194074][ T8920] ksys_write+0x150/0x270 [ 248.194106][ T8920] ? __pfx_ksys_write+0x10/0x10 [ 248.194142][ T8920] do_syscall_64+0x16a/0x530 [ 248.194172][ T8920] ? trace_irq_disable+0x3b/0x140 [ 248.194197][ T8920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.194219][ T8920] ? clear_bhb_loop+0x70/0xc0 [ 248.194244][ T8920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.194264][ T8920] RIP: 0033:0x7f3d7a1a8f19 [ 248.194285][ T8920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.194303][ T8920] RSP: 002b:00007f3d783f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 248.194326][ T8920] RAX: ffffffffffffffda RBX: 00007f3d7a425fa0 RCX: 00007f3d7a1a8f19 [ 248.194345][ T8920] RDX: 0000000000000048 RSI: 0000200000000680 RDI: 0000000000000006 [ 248.194359][ T8920] RBP: 00007f3d7a237f6d R08: 0000000000000000 R09: 0000000000000000 [ 248.194373][ T8920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.194386][ T8920] R13: 00007f3d7a426038 R14: 00007f3d7a425fa0 R15: 00007ffe7be412a8 [ 248.194420][ T8920] [ 248.277390][ T5624] usbhid 5-1:1.0: can't add hid device: -71 [ 248.277485][ T5624] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 248.337157][ T5624] usb 5-1: USB disconnect, device number 12 [ 248.579467][ T7142] hsr_slave_0: left promiscuous mode [ 248.590120][ T7142] hsr_slave_1: left promiscuous mode [ 248.594028][ T7142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.594086][ T7142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.605142][ T8924] FAULT_INJECTION: forcing a failure. [ 248.605142][ T8924] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 248.605179][ T8924] CPU: 1 UID: 0 PID: 8924 Comm: syz.2.1093 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.605208][ T8924] Tainted: [L]=SOFTLOCKUP [ 248.605216][ T8924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 248.605229][ T8924] Call Trace: [ 248.605238][ T8924] [ 248.605247][ T8924] dump_stack_lvl+0xe8/0x150 [ 248.605282][ T8924] should_fail_ex+0x3eb/0x540 [ 248.605310][ T8924] prepare_alloc_pages+0x21e/0x5f0 [ 248.605344][ T8924] __alloc_frozen_pages_noprof+0x189/0x450 [ 248.605379][ T8924] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 248.605405][ T8924] ? __alloc_frozen_pages_noprof+0x274/0x450 [ 248.605438][ T8924] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 248.605474][ T8924] __alloc_pages_noprof+0x10/0x100 [ 248.605501][ T8924] alloc_pages_bulk_noprof+0x6df/0x8f0 [ 248.605530][ T8924] ? alloc_pages_mpol+0x256/0x390 [ 248.605566][ T8924] ? alloc_pages_noprof+0x140/0x2b0 [ 248.605602][ T8924] __kasan_populate_vmalloc+0xb7/0x1c0 [ 248.605635][ T8924] alloc_vmap_area+0xd10/0x1410 [ 248.605669][ T8924] ? __pfx_alloc_vmap_area+0x10/0x10 [ 248.605688][ T8924] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 248.605714][ T8924] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 248.605745][ T8924] ? __get_vm_area_node+0x155/0x2f0 [ 248.605770][ T8924] __get_vm_area_node+0x200/0x2f0 [ 248.605798][ T8924] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 248.605821][ T8924] ? snd_dma_alloc_dir_pages+0x120/0x220 [ 248.605850][ T8924] ? __mutex_trylock_common+0x15f/0x270 [ 248.605881][ T8924] ? __pfx___mutex_trylock_common+0x10/0x10 [ 248.605915][ T8924] ? rcu_is_watching+0x16/0xb0 [ 248.605963][ T8924] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 248.605985][ T8924] ? __mutex_unlock_slowpath+0x731/0x900 [ 248.606023][ T8924] ? snd_dma_alloc_dir_pages+0x120/0x220 [ 248.606049][ T8924] vmalloc_noprof+0xb2/0xe0 [ 248.606070][ T8924] ? snd_dma_alloc_dir_pages+0x120/0x220 [ 248.606098][ T8924] snd_dma_alloc_dir_pages+0x120/0x220 [ 248.606128][ T8924] do_alloc_pages+0x11c/0x260 [ 248.606158][ T8924] snd_pcm_lib_malloc_pages+0x33a/0x780 [ 248.606191][ T8924] snd_pcm_hw_params+0x887/0x1c00 [ 248.606235][ T8924] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 248.606266][ T8924] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 248.606296][ T8924] ? snd_pcm_kernel_ioctl+0x336/0xb20 [ 248.606324][ T8924] ? snd_pcm_drop+0x544/0x730 [ 248.606354][ T8924] snd_pcm_oss_change_params_locked+0x1e90/0x3c80 [ 248.606405][ T8924] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 248.606442][ T8924] ? lock_acquire+0x115/0x350 [ 248.606473][ T8924] snd_pcm_oss_get_active_substream+0x1e2/0x280 [ 248.606501][ T8924] snd_pcm_oss_set_format+0x10d/0x510 [ 248.606522][ T8924] ? __might_fault+0xaf/0x130 [ 248.606546][ T8924] snd_pcm_oss_ioctl+0xbe9/0xdf0 [ 248.606579][ T8924] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 248.606611][ T8924] __se_sys_ioctl+0xfc/0x170 [ 248.606644][ T8924] do_syscall_64+0x16a/0x530 [ 248.606671][ T8924] ? trace_irq_disable+0x3b/0x140 [ 248.606697][ T8924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.606718][ T8924] ? clear_bhb_loop+0x70/0xc0 [ 248.606749][ T8924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.606770][ T8924] RIP: 0033:0x7f3d7a1a8f19 [ 248.606788][ T8924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.606808][ T8924] RSP: 002b:00007f3d783f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.606830][ T8924] RAX: ffffffffffffffda RBX: 00007f3d7a425fa0 RCX: 00007f3d7a1a8f19 [ 248.606846][ T8924] RDX: 0000200000000340 RSI: 00000000c0045005 RDI: 0000000000000007 [ 248.606861][ T8924] RBP: 00007f3d7a237f6d R08: 0000000000000000 R09: 0000000000000000 [ 248.606874][ T8924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.606887][ T8924] R13: 00007f3d7a426038 R14: 00007f3d7a425fa0 R15: 00007ffe7be412a8 [ 248.606921][ T8924] [ 248.611501][ T8924] syz.2.1093: vmalloc error: size 2097152, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 248.612885][ T8924] CPU: 1 UID: 0 PID: 8924 Comm: syz.2.1093 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.612915][ T8924] Tainted: [L]=SOFTLOCKUP [ 248.612923][ T8924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 248.612936][ T8924] Call Trace: [ 248.612944][ T8924] [ 248.612952][ T8924] dump_stack_lvl+0xe8/0x150 [ 248.612988][ T8924] warn_alloc+0x24d/0x270 [ 248.613015][ T8924] ? lockdep_hardirqs_on+0x7b/0x110 [ 248.613047][ T8924] ? __pfx_warn_alloc+0x10/0x10 [ 248.613071][ T8924] ? kfree+0x1c7/0x650 [ 248.613100][ T8924] ? __get_vm_area_node+0x219/0x2f0 [ 248.613129][ T8924] __vmalloc_node_range_noprof+0x396/0x16f0 [ 248.613154][ T8924] ? __mutex_trylock_common+0x15f/0x270 [ 248.613185][ T8924] ? __pfx___mutex_trylock_common+0x10/0x10 [ 248.613217][ T8924] ? rcu_is_watching+0x16/0xb0 [ 248.613264][ T8924] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 248.613288][ T8924] ? __mutex_unlock_slowpath+0x731/0x900 [ 248.613326][ T8924] ? snd_dma_alloc_dir_pages+0x120/0x220 [ 248.613352][ T8924] vmalloc_noprof+0xb2/0xe0 [ 248.613374][ T8924] ? snd_dma_alloc_dir_pages+0x120/0x220 [ 248.613401][ T8924] snd_dma_alloc_dir_pages+0x120/0x220 [ 248.613431][ T8924] do_alloc_pages+0x11c/0x260 [ 248.613461][ T8924] snd_pcm_lib_malloc_pages+0x33a/0x780 [ 248.613494][ T8924] snd_pcm_hw_params+0x887/0x1c00 [ 248.613539][ T8924] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 248.613569][ T8924] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 248.613600][ T8924] ? snd_pcm_kernel_ioctl+0x336/0xb20 [ 248.613629][ T8924] ? snd_pcm_drop+0x544/0x730 [ 248.613659][ T8924] snd_pcm_oss_change_params_locked+0x1e90/0x3c80 [ 248.613709][ T8924] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 248.613752][ T8924] ? lock_acquire+0x115/0x350 [ 248.613783][ T8924] snd_pcm_oss_get_active_substream+0x1e2/0x280 [ 248.613813][ T8924] snd_pcm_oss_set_format+0x10d/0x510 [ 248.613833][ T8924] ? __might_fault+0xaf/0x130 [ 248.613857][ T8924] snd_pcm_oss_ioctl+0xbe9/0xdf0 [ 248.613891][ T8924] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 248.613922][ T8924] __se_sys_ioctl+0xfc/0x170 [ 248.613955][ T8924] do_syscall_64+0x16a/0x530 [ 248.613982][ T8924] ? trace_irq_disable+0x3b/0x140 [ 248.614008][ T8924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.614029][ T8924] ? clear_bhb_loop+0x70/0xc0 [ 248.614054][ T8924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.614074][ T8924] RIP: 0033:0x7f3d7a1a8f19 [ 248.614094][ T8924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.614112][ T8924] RSP: 002b:00007f3d783f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.614133][ T8924] RAX: ffffffffffffffda RBX: 00007f3d7a425fa0 RCX: 00007f3d7a1a8f19 [ 248.614149][ T8924] RDX: 0000200000000340 RSI: 00000000c0045005 RDI: 0000000000000007 [ 248.614163][ T8924] RBP: 00007f3d7a237f6d R08: 0000000000000000 R09: 0000000000000000 [ 248.614177][ T8924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.614190][ T8924] R13: 00007f3d7a426038 R14: 00007f3d7a425fa0 R15: 00007ffe7be412a8 [ 248.614223][ T8924] [ 248.619514][ T7142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.619535][ T7142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.620118][ T8924] Mem-Info: [ 248.620130][ T8924] active_anon:7646 inactive_anon:3 isolated_anon:0 [ 248.620130][ T8924] active_file:878 inactive_file:56169 isolated_file:0 [ 248.620130][ T8924] unevictable:0 dirty:57 writeback:0 [ 248.620130][ T8924] slab_reclaimable:21700 slab_unreclaimable:87633 [ 248.620130][ T8924] mapped:25893 shmem:543 pagetables:1195 [ 248.620130][ T8924] sec_pagetables:0 bounce:0 [ 248.620130][ T8924] kernel_misc_reclaimable:0 [ 248.620130][ T8924] free:1316180 free_pcp:9974 free_cma:0 [ 248.620205][ T8924] Node 0 active_anon:30584kB inactive_anon:12kB active_file:3512kB inactive_file:224468kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:103572kB dirty:224kB writeback:0kB shmem:2172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12284kB pagetables:4628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 248.620263][ T8924] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 248.620316][ T8924] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 248.620378][ T8924] lowmem_reserve[]: 0 2460 2461 2461 2461 [ 248.620416][ T8924] Node 0 DMA32 free:1314556kB boost:0kB min:33896kB low:42368kB high:50840kB reserved_highatomic:0kB free_highatomic:0kB active_anon:30560kB inactive_anon:12kB active_file:3512kB inactive_file:224484kB unevictable:0kB writepending:224kB zspages:520kB present:3129332kB managed:2519180kB mlocked:0kB bounce:0kB free_pcp:39892kB local_pcp:17740kB free_cma:0kB [ 248.620479][ T8924] lowmem_reserve[]: 0 0 1 1 1 [ 248.620512][ T8924] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1052kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 248.620570][ T8924] lowmem_reserve[]: 0 0 0 0 0 [ 248.620604][ T8924] Node 1 Normal free:3934804kB boost:0kB min:55988kB low:69984kB high:83980kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 248.620663][ T8924] lowmem_reserve[]: 0 0 0 0 0 [ 248.620696][ T8924] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 248.621421][ T8924] Node 0 DMA32: 4*4kB (UE) 145*8kB (UME) 758*16kB (UME) 814*32kB (UME) 470*64kB (UME) 360*128kB (UME) 252*256kB (UME) 150*512kB (UME) 75*1024kB (UME) 27*2048kB (ME) 226*4096kB (UM) = 1314616kB [ 248.621578][ T8924] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 248.621675][ T8924] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 12*16kB (UM) 7*32kB (UM) 10*64kB (UM) 6*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 959*4096kB (M) = 3934804kB [ 248.621840][ T8924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 248.624246][ T8924] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 248.624266][ T8924] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 248.624284][ T8924] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 248.624301][ T8924] 57592 total pagecache pages [ 248.624319][ T8924] 2 pages in swap cache [ 248.624327][ T8924] Free swap = 124852kB [ 248.624335][ T8924] Total swap = 124996kB [ 248.624430][ T8924] 2097051 pages RAM [ 248.624438][ T8924] 0 pages HighMem/MovableOnly [ 248.624446][ T8924] 435377 pages reserved [ 248.624897][ T8924] 0 pages cma reserved [ 248.677782][ T8924] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.740418][ T7142] veth1_macvtap: left promiscuous mode [ 248.740519][ T7142] veth0_macvtap: left promiscuous mode [ 248.744147][ T7142] veth1_vlan: left promiscuous mode [ 248.748486][ T7142] veth0_vlan: left promiscuous mode [ 249.271464][ T8926] device-mapper: table: 248:3: thin-pool: Error getting data device (-ENOENT) [ 249.271495][ T8926] device-mapper: ioctl: error adding target to table [ 249.444789][ T4955] Bluetooth: hci1: command tx timeout [ 250.212365][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1099'. [ 250.379852][ T7142] team0 (unregistering): Port device team_slave_1 removed [ 250.418835][ T7142] team0 (unregistering): Port device team_slave_0 removed [ 250.657353][ T5753] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 250.818929][ T5753] usb 3-1: New USB device found: idVendor=8086, idProduct=0000, bcdDevice=0.00 [ 250.824730][ T5753] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.824763][ T5753] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.824801][ T5753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.293366][ T7142] IPVS: stop unused estimator thread 0... [ 251.333487][ T8858] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.333661][ T8858] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.333777][ T8858] bridge_slave_0: entered allmulticast mode [ 251.337222][ T8858] bridge_slave_0: entered promiscuous mode [ 251.340080][ T8858] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.340241][ T8858] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.340359][ T8858] bridge_slave_1: entered allmulticast mode [ 251.341918][ T8858] bridge_slave_1: entered promiscuous mode [ 251.392672][ T8858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.409240][ T8858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.509454][ T5753] usbhid 3-1:1.0: can't add hid device: -71 [ 251.509558][ T5753] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 251.513589][ T5753] usb 3-1: USB disconnect, device number 47 [ 251.531540][ T4955] Bluetooth: hci1: command tx timeout [ 251.581086][ T8858] team0: Port device team_slave_0 added [ 251.591431][ T8858] team0: Port device team_slave_1 added [ 251.619169][ T8858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.619188][ T8858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.619214][ T8858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.622713][ T8858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.622728][ T8858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.622755][ T8858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.704643][ T8858] hsr_slave_0: entered promiscuous mode [ 251.705618][ T8858] hsr_slave_1: entered promiscuous mode [ 251.710259][ T8858] debugfs: 'hsr0' already exists in 'hsr' [ 251.710278][ T8858] Cannot create hsr debugfs directory [ 251.763177][ T32] audit: type=1326 audit(1794297131.174:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.0.1109" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8937fa8f19 code=0x0 [ 251.814526][ T1769] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 251.964898][ T1769] usb 5-1: Using ep0 maxpacket: 8 [ 251.966729][ T1769] usb 5-1: New USB device found: idVendor=0644, idProduct=8020, bcdDevice=0.40 [ 251.970188][ T1769] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.970213][ T1769] usb 5-1: Product: syz [ 251.970228][ T1769] usb 5-1: Manufacturer: syz [ 251.970243][ T1769] usb 5-1: SerialNumber: syz [ 252.049843][ T8858] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 252.067370][ T8858] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 252.071289][ T8858] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 252.079380][ T8858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 252.080763][ T8858] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 252.097360][ T8858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 252.100488][ T8858] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 252.119152][ T8858] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.241489][ T1769] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 252.242436][ T1769] usb 5-1: unit 3 not found! [ 252.387485][ T8858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.438449][ T1769] usb 5-1: USB disconnect, device number 13 [ 252.448939][ T8858] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.480095][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.480200][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.502190][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.502305][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.772057][ T8998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1112'. [ 253.117407][ T9010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.117484][ T9010] FAULT_INJECTION: forcing a failure. [ 253.117484][ T9010] name failslab, interval 1, probability 0, space 0, times 0 [ 253.117514][ T9010] CPU: 0 UID: 0 PID: 9010 Comm: syz.2.1116 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.117576][ T9010] Tainted: [L]=SOFTLOCKUP [ 253.117595][ T9010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 253.117609][ T9010] Call Trace: [ 253.117618][ T9010] [ 253.117627][ T9010] dump_stack_lvl+0xe8/0x150 [ 253.117664][ T9010] should_fail_ex+0x3eb/0x540 [ 253.117691][ T9010] ? __alloc_skb+0x1db/0x7a0 [ 253.117713][ T9010] should_failslab+0xa8/0x100 [ 253.117747][ T9010] ? __alloc_skb+0x1db/0x7a0 [ 253.117768][ T9010] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 253.117794][ T9010] ? __alloc_skb+0x18d/0x7a0 [ 253.117817][ T9010] ? __alloc_skb+0x1db/0x7a0 [ 253.117846][ T9010] __alloc_skb+0x1db/0x7a0 [ 253.117873][ T9010] alloc_uevent_skb+0x7d/0x230 [ 253.117909][ T9010] kobject_uevent_net_broadcast+0x2fa/0x560 [ 253.117938][ T9010] kobject_uevent_env+0x566/0x9e0 [ 253.117969][ T9010] device_add+0x544/0xb80 [ 253.117995][ T9010] iommu_mock_device_add+0x83/0x1e0 [ 253.118028][ T9010] iommufd_test+0x38d1/0x6360 [ 253.118061][ T9010] ? __lock_acquire+0x747/0x2de0 [ 253.118086][ T9010] ? __pfx_iommufd_test+0x10/0x10 [ 253.118119][ T9010] ? tomoyo_path_number_perm+0x219/0x5f0 [ 253.118152][ T9010] ? tomoyo_path_number_perm+0x219/0x5f0 [ 253.118185][ T9010] ? lock_acquire+0x115/0x350 [ 253.118224][ T9010] ? __might_fault+0xaf/0x130 [ 253.118252][ T9010] iommufd_fops_ioctl+0x465/0x600 [ 253.118285][ T9010] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 253.118315][ T9010] ? __fget_files+0x2a/0x420 [ 253.118354][ T9010] ? bpf_lsm_file_ioctl+0x9/0x20 [ 253.118382][ T9010] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 253.118407][ T9010] __se_sys_ioctl+0xfc/0x170 [ 253.118440][ T9010] do_syscall_64+0x16a/0x530 [ 253.118468][ T9010] ? trace_irq_disable+0x3b/0x140 [ 253.118493][ T9010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.118515][ T9010] ? clear_bhb_loop+0x70/0xc0 [ 253.118540][ T9010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.118561][ T9010] RIP: 0033:0x7f3d7a1a8f19 [ 253.118580][ T9010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.118598][ T9010] RSP: 002b:00007f3d783f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.118620][ T9010] RAX: ffffffffffffffda RBX: 00007f3d7a425fa0 RCX: 00007f3d7a1a8f19 [ 253.118634][ T9010] RDX: 0000200000002280 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 253.118646][ T9010] RBP: 00007f3d7a237f6d R08: 0000000000000000 R09: 0000000000000000 [ 253.118658][ T9010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.118670][ T9010] R13: 00007f3d7a426038 R14: 00007f3d7a425fa0 R15: 00007ffe7be412a8 [ 253.118701][ T9010] [ 253.544708][ T5753] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 253.604834][ T4955] Bluetooth: hci1: command tx timeout [ 253.641656][ T8858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.657610][ T9022] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1120'. [ 253.716238][ T5753] usb 5-1: New USB device found: idVendor=8086, idProduct=0000, bcdDevice=0.00 [ 253.717282][ T5753] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.717313][ T5753] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.717351][ T5753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.133636][ T9034] netlink: 'syz.0.1123': attribute type 6 has an invalid length. [ 254.309857][ T8858] veth0_vlan: entered promiscuous mode [ 254.356790][ T8858] veth1_vlan: entered promiscuous mode [ 254.364607][ T5753] usbhid 5-1:1.0: can't add hid device: -71 [ 254.364709][ T5753] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 254.378286][ T5753] usb 5-1: USB disconnect, device number 14 [ 254.456967][ T9038] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1124'. [ 254.516143][ T8858] veth0_macvtap: entered promiscuous mode [ 254.544554][ T8858] veth1_macvtap: entered promiscuous mode [ 254.623905][ T8858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.677386][ T8858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.716721][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.717077][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.717116][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.796264][ T1155] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.027536][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.027560][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.249119][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.249142][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.686690][ T9059] overlayfs: failed to resolve './file0:/': -2 [ 255.719825][ T9060] SQUASHFS error: Failed to read block 0x0: -5 [ 255.719881][ T9060] unable to read squashfs_super_block on nbd5 [ 255.861638][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.861699][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.167559][ T7142] nci: nci_rx_work: unknown MT 0x6 [ 256.184576][ T9064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 256.618909][ T9076] fuse: fd is not a fuse device [ 256.754493][ T5804] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 256.905284][ T5804] usb 6-1: New USB device found: idVendor=8086, idProduct=0000, bcdDevice=0.00 [ 256.906411][ T5804] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.906443][ T5804] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.906482][ T5804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.053774][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1138'. [ 257.396100][ T5804] usbhid 6-1:1.0: can't add hid device: -71 [ 257.396204][ T5804] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 257.425091][ T5804] usb 6-1: USB disconnect, device number 2 [ 257.831578][ T9105] tmpfs: Unknown parameter 'mpl' [ 258.207220][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1148'. [ 258.233294][ T9121] FAULT_INJECTION: forcing a failure. [ 258.233294][ T9121] name failslab, interval 1, probability 0, space 0, times 0 [ 258.233329][ T9121] CPU: 0 UID: 0 PID: 9121 Comm: syz.2.1148 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.233359][ T9121] Tainted: [L]=SOFTLOCKUP [ 258.233366][ T9121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 258.233381][ T9121] Call Trace: [ 258.233389][ T9121] [ 258.233398][ T9121] dump_stack_lvl+0xe8/0x150 [ 258.233434][ T9121] should_fail_ex+0x3eb/0x540 [ 258.233463][ T9121] should_failslab+0xa8/0x100 [ 258.233497][ T9121] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 258.233524][ T9121] ? __lock_acquire+0x747/0x2de0 [ 258.233562][ T9121] ? __kernfs_new_node+0xa9/0x980 [ 258.233582][ T9121] ? __kernfs_new_node+0xa9/0x980 [ 258.233610][ T9121] kstrdup+0x42/0x100 [ 258.233635][ T9121] __kernfs_new_node+0xa9/0x980 [ 258.233667][ T9121] ? __pfx___kernfs_new_node+0x10/0x10 [ 258.233689][ T9121] ? kernfs_root+0x1c/0x230 [ 258.233715][ T9121] ? kernfs_root+0x1c/0x230 [ 258.233735][ T9121] ? kernfs_root+0x1c/0x230 [ 258.233753][ T9121] ? kernfs_root+0x1c/0x230 [ 258.233775][ T9121] kernfs_create_dir_ns+0xfe/0x230 [ 258.233802][ T9121] sysfs_create_dir_ns+0x12f/0x2a0 [ 258.233834][ T9121] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 258.233872][ T9121] ? do_raw_spin_unlock+0xf5/0x200 [ 258.233907][ T9121] kobject_add_internal+0x622/0xcd0 [ 258.233938][ T9121] kobject_init_and_add+0x12b/0x1a0 [ 258.233966][ T9121] ? __pfx_kobject_init_and_add+0x10/0x10 [ 258.233991][ T9121] ? __kmalloc_cache_noprof+0x31c/0x600 [ 258.234017][ T9121] ? __kmalloc_cache_noprof+0x148/0x600 [ 258.234045][ T9121] ? __raw_spin_lock_init+0x45/0x100 [ 258.234078][ T9121] swnode_register+0x3ba/0x590 [ 258.234128][ T9121] fwnode_create_software_node+0x194/0x1f0 [ 258.234154][ T9121] device_create_managed_software_node+0xce/0x1f0 [ 258.234183][ T9121] iommufd_test+0x38a0/0x6360 [ 258.234215][ T9121] ? __lock_acquire+0x747/0x2de0 [ 258.234238][ T9121] ? __pfx_iommufd_test+0x10/0x10 [ 258.234271][ T9121] ? tomoyo_path_number_perm+0x219/0x5f0 [ 258.234302][ T9121] ? tomoyo_path_number_perm+0x219/0x5f0 [ 258.234332][ T9121] ? lock_acquire+0x115/0x350 [ 258.234364][ T9121] ? __might_fault+0xaf/0x130 [ 258.234387][ T9121] iommufd_fops_ioctl+0x465/0x600 [ 258.234415][ T9121] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 258.234442][ T9121] ? __fget_files+0x2a/0x420 [ 258.234475][ T9121] ? bpf_lsm_file_ioctl+0x9/0x20 [ 258.234502][ T9121] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 258.234530][ T9121] __se_sys_ioctl+0xfc/0x170 [ 258.234573][ T9121] do_syscall_64+0x16a/0x530 [ 258.234601][ T9121] ? trace_irq_disable+0x3b/0x140 [ 258.234626][ T9121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.234645][ T9121] ? clear_bhb_loop+0x70/0xc0 [ 258.234668][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.234689][ T9121] RIP: 0033:0x7f3d7a1a8f19 [ 258.234708][ T9121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.234727][ T9121] RSP: 002b:00007f3d783f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.234751][ T9121] RAX: ffffffffffffffda RBX: 00007f3d7a425fa0 RCX: 00007f3d7a1a8f19 [ 258.234770][ T9121] RDX: 0000200000002280 RSI: 0000000000003ba0 RDI: 0000000000000009 [ 258.234785][ T9121] RBP: 00007f3d7a237f6d R08: 0000000000000000 R09: 0000000000000000 [ 258.234798][ T9121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.234824][ T9121] R13: 00007f3d7a426038 R14: 00007f3d7a425fa0 R15: 00007ffe7be412a8 [ 258.234859][ T9121] [ 258.330745][ T9121] kobject: kobject_add_internal failed for node1 (error: -12 parent: software_nodes) [ 258.330841][ T9121] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 258.446629][ T9126] 9p: Bad value for 'wfdno' [ 258.640547][ T9131] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1150'. [ 259.065343][ T9151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 259.066216][ T9151] FAULT_INJECTION: forcing a failure. [ 259.066216][ T9151] name failslab, interval 1, probability 0, space 0, times 0 [ 259.066245][ T9151] CPU: 0 UID: 0 PID: 9151 Comm: syz.5.1155 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.066273][ T9151] Tainted: [L]=SOFTLOCKUP [ 259.066281][ T9151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 259.066292][ T9151] Call Trace: [ 259.066301][ T9151] [ 259.066310][ T9151] dump_stack_lvl+0xe8/0x150 [ 259.066342][ T9151] should_fail_ex+0x3eb/0x540 [ 259.066368][ T9151] should_failslab+0xa8/0x100 [ 259.066398][ T9151] __kmalloc_cache_noprof+0x9e/0x600 [ 259.066424][ T9151] ? kobject_uevent_env+0x289/0x9e0 [ 259.066446][ T9151] ? kobject_uevent_env+0x289/0x9e0 [ 259.066474][ T9151] kobject_uevent_env+0x289/0x9e0 [ 259.066503][ T9151] __kobject_del+0xd1/0x310 [ 259.066525][ T9151] kobject_put+0x23a/0x550 [ 259.066542][ T9151] ? software_node_notify_remove+0x24a/0x270 [ 259.066567][ T9151] device_del+0x53c/0x8f0 [ 259.066598][ T9151] ? __pfx_device_del+0x10/0x10 [ 259.066617][ T9151] ? iommufd_test+0x3a22/0x6360 [ 259.066644][ T9151] device_unregister+0x21/0xf0 [ 259.066667][ T9151] iommufd_test+0x3dff/0x6360 [ 259.066696][ T9151] ? __lock_acquire+0x747/0x2de0 [ 259.066720][ T9151] ? __pfx_iommufd_test+0x10/0x10 [ 259.066752][ T9151] ? tomoyo_path_number_perm+0x219/0x5f0 [ 259.066783][ T9151] ? tomoyo_path_number_perm+0x219/0x5f0 [ 259.066816][ T9151] ? lock_acquire+0x115/0x350 [ 259.066853][ T9151] ? __might_fault+0xaf/0x130 [ 259.066881][ T9151] iommufd_fops_ioctl+0x465/0x600 [ 259.066917][ T9151] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 259.066947][ T9151] ? __fget_files+0x2a/0x420 [ 259.066995][ T9151] ? bpf_lsm_file_ioctl+0x9/0x20 [ 259.067025][ T9151] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 259.067052][ T9151] __se_sys_ioctl+0xfc/0x170 [ 259.067086][ T9151] do_syscall_64+0x16a/0x530 [ 259.067114][ T9151] ? trace_irq_disable+0x3b/0x140 [ 259.067140][ T9151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.067162][ T9151] ? clear_bhb_loop+0x70/0xc0 [ 259.067187][ T9151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.067209][ T9151] RIP: 0033:0x7f2639fa8f19 [ 259.067227][ T9151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.067244][ T9151] RSP: 002b:00007f263ae12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.067267][ T9151] RAX: ffffffffffffffda RBX: 00007f263a225fa0 RCX: 00007f2639fa8f19 [ 259.067284][ T9151] RDX: 0000200000002280 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 259.067297][ T9151] RBP: 00007f263a037f6d R08: 0000000000000000 R09: 0000000000000000 [ 259.067311][ T9151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.067324][ T9151] R13: 00007f263a226038 R14: 00007f263a225fa0 R15: 00007ffdfeb2caf8 [ 259.067357][ T9151] [ 259.075712][ T27] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 259.094436][ T5804] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 259.204928][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1156'. [ 259.209011][ T9154] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1156'. [ 259.266824][ T27] usb 3-1: Invalid ep0 maxpacket: 64 [ 259.305203][ T5804] usb 5-1: New USB device found: idVendor=8086, idProduct=0000, bcdDevice=0.00 [ 259.306214][ T5804] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.306242][ T5804] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.306279][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.472836][ T27] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 259.634534][ T27] usb 3-1: Invalid ep0 maxpacket: 64 [ 259.634784][ T27] usb usb3-port1: attempt power cycle [ 259.736356][ T9159] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1158'. [ 259.746722][ T5804] usbhid 5-1:1.0: can't add hid device: -71 [ 259.746826][ T5804] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 259.771266][ T5804] usb 5-1: USB disconnect, device number 15 [ 259.984837][ T27] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 260.006289][ T27] usb 3-1: Invalid ep0 maxpacket: 64 [ 260.134425][ T27] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 260.156994][ T27] usb 3-1: Invalid ep0 maxpacket: 64 [ 260.157268][ T27] usb usb3-port1: unable to enumerate USB device [ 260.299238][ T9169] fuse: Bad value for 'fd' [ 260.332156][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1162'. [ 260.862553][ T9187] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 260.876520][ T9187] FAULT_INJECTION: forcing a failure. [ 260.876520][ T9187] name failslab, interval 1, probability 0, space 0, times 0 [ 260.876559][ T9187] CPU: 1 UID: 0 PID: 9187 Comm: syz.5.1168 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.876588][ T9187] Tainted: [L]=SOFTLOCKUP [ 260.876596][ T9187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 260.876610][ T9187] Call Trace: [ 260.876618][ T9187] [ 260.876627][ T9187] dump_stack_lvl+0xe8/0x150 [ 260.876663][ T9187] should_fail_ex+0x3eb/0x540 [ 260.876690][ T9187] should_failslab+0xa8/0x100 [ 260.876725][ T9187] __kmalloc_cache_noprof+0x9e/0x600 [ 260.876750][ T9187] ? __kmalloc_node_track_caller_noprof+0x4cd/0x720 [ 260.876778][ T9187] ? neigh_hash_alloc+0x67/0x250 [ 260.876803][ T9187] ? neigh_hash_alloc+0x67/0x250 [ 260.876837][ T9187] neigh_hash_alloc+0x67/0x250 [ 260.876873][ T9187] neigh_table_register+0x54b/0x14e0 [ 260.876899][ T9187] ? ip6mr_net_init+0x455/0x6b0 [ 260.876933][ T9187] ndisc_net_init+0x82/0x3f0 [ 260.876960][ T9187] ? __pfx_ndisc_net_init+0x10/0x10 [ 260.876988][ T9187] ? ac6_proc_init+0x59/0x70 [ 260.877023][ T9187] ops_init+0x35d/0x5d0 [ 260.877054][ T9187] setup_net+0x118/0x350 [ 260.877081][ T9187] ? __pfx_setup_net+0x10/0 ** replaying previous printk message ** [ 260.877081][ T9187] ? __pfx_setup_net+0x10/0x10 [ 260.877101][ T9187] ? down_read_killable+0x1b6/0x3b0 [ 260.877132][ T9187] ? __ns_common_init+0x384/0x590 [ 260.877166][ T9187] copy_net_ns+0x536/0x770 [ 260.877191][ T9187] create_new_namespaces+0x3f0/0x6b0 [ 260.877223][ T9187] ? security_capable+0x7e/0x2c0 [ 260.877272][ T9187] unshare_nsproxy_namespaces+0x144/0x190 [ 260.877305][ T9187] ksys_unshare+0x532/0x890 [ 260.877338][ T9187] ? __pfx_ksys_unshare+0x10/0x10 [ 260.877369][ T9187] ? rcu_is_watching+0x16/0xb0 [ 260.877408][ T9187] __x64_sys_unshare+0x38/0x50 [ 260.877437][ T9187] do_syscall_64+0x16a/0x530 [ 260.877463][ T9187] ? trace_irq_disable+0x3b/0x140 [ 260.877488][ T9187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.877511][ T9187] ? clear_bhb_loop+0x70/0xc0 [ 260.877537][ T9187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.877559][ T9187] RIP: 0033:0x7f2639fa8f19 [ 260.877580][ T9187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.877599][ T9187] RSP: 002b:00007f263ae12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 260.877622][ T9187] RAX: ffffffffffffffda RBX: 00007f263a225fa0 RCX: 00007f2639fa8f19 [ 260.877639][ T9187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 260.877652][ T9187] RBP: 00007f263a037f6d R08: 0000000000000000 R09: 0000000000000000 [ 260.877666][ T9187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.877679][ T9187] R13: 00007f263a226038 R14: 00007f263a225fa0 R15: 00007ffdfeb2caf8 [ 260.877712][ T9187] [ 261.019460][ C1] [ 261.185748][ C1] ============================= [ 261.190591][ C1] [ BUG: Invalid wait context ] [ 261.195805][ C1] syzkaller #0 Tainted: G L [ 261.201865][ C1] ----------------------------- [ 261.206702][ C1] udevd/5005 is trying to lock: [ 261.211544][ C1] ffff88802ce99bc8 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 261.221028][ C1] other info that might help us debug this: [ 261.227109][ C1] context-{2:2} [ 261.230559][ C1] locks held by udevd/5005: 2, on CPU#1: [ 261.236180][ C1] #0: ffffffff904b3910 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 261.245754][ C1] #1: ffff88802ce9a118 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1d2/0x8d0 [ 261.255679][ C1] stack backtrace: [ 261.259390][ C1] CPU: 1 UID: 0 PID: 5005 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 261.270183][ C1] Tainted: [L]=SOFTLOCKUP [ 261.274521][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 261.284590][ C1] Call Trace: [ 261.287882][ C1] [ 261.290731][ C1] dump_stack_lvl+0xe8/0x150 [ 261.295337][ C1] __lock_acquire+0xf5b/0x2de0 [ 261.300131][ C1] lock_acquire+0x115/0x350 [ 261.305337][ C1] ? kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 261.310980][ C1] ? xa_load+0x1db/0x210 [ 261.315230][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 261.320515][ C1] ? kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 261.326148][ C1] kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 261.331620][ C1] ? kvm_xen_set_evtchn_fast+0x1d2/0x8d0 [ 261.337253][ C1] xen_timer_callback+0x109/0x220 [ 261.342285][ C1] ? __pfx_xen_timer_callback+0x10/0x10 [ 261.347922][ C1] __hrtimer_run_queues+0x371/0xa10 [ 261.353169][ C1] hrtimer_interrupt+0x4cd/0xaa0 [ 261.358112][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 261.364095][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 261.369744][ C1] [ 261.372691][ C1] [ 261.378665][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 261.384653][ C1] RIP: 0010:__slab_free+0x106/0x2c0 [ 261.389960][ C1] Code: e8 8f 9b 00 00 89 c3 eb 52 49 89 de 48 8b 44 24 40 48 8b 54 24 48 48 8b 5c 24 30 48 8b 4c 24 38 48 8b 34 24 f0 48 0f c7 4e 20 <0f> 84 9d 00 00 00 48 89 44 24 40 48 89 54 24 48 eb 3b e8 43 02 9c [ 261.409578][ C1] RSP: 0018:ffffc90002e97cc0 EFLAGS: 00000242 [ 261.415653][ C1] RAX: ffff8880512a09c0 RBX: ffff8880512a0820 RCX: 000000020013000b [ 261.423621][ C1] RDX: 000000020013000c RSI: ffffea000144a800 RDI: 00000000000000b0 [ 261.431715][ C1] RBP: ffffc90002e97d48 R08: 0000000000000001 R09: ffffffff8241bffe [ 261.439695][ C1] R10: dffffc0000000000 R11: fffffbfff23c2198 R12: 0000000000000000 [ 261.447661][ C1] R13: ffff8880512a09c0 R14: 0000000000000000 R15: ffff888140415280 [ 261.455636][ C1] ? qlist_free_all+0x8e/0x100 [ 261.460418][ C1] qlist_free_all+0x99/0x100 [ 261.465005][ C1] ? do_getname+0x2e/0x250 [ 261.469414][ C1] ? kmem_cache_alloc_noprof+0x151/0x600 [ 261.475044][ C1] kasan_quarantine_reduce+0x148/0x160 [ 261.480510][ C1] __kasan_slab_alloc+0x22/0x80 [ 261.485366][ C1] kmem_cache_alloc_noprof+0x2b4/0x600 [ 261.490823][ C1] ? do_getname+0x2e/0x250 [ 261.495234][ C1] ? kmem_cache_alloc_noprof+0x151/0x600 [ 261.500874][ C1] ? do_getname+0x2e/0x250 [ 261.505294][ C1] do_getname+0x2e/0x250 [ 261.509547][ C1] ? __se_sys_unlink+0x12/0x140 [ 261.514400][ C1] __se_sys_unlink+0x1e/0x140 [ 261.519093][ C1] do_syscall_64+0x16a/0x530 [ 261.523697][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.529770][ C1] ? clear_bhb_loop+0x70/0xc0 [ 261.534455][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.540872][ C1] RIP: 0033:0x7f00c8915937 [ 261.545283][ C1] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 261.564899][ C1] RSP: 002b:00007fffcd966b88 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 261.573319][ C1] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f00c8915937 [ 261.581304][ C1] RDX: 0000000000000000 RSI: 000000000f7f4900 RDI: 000055b53398902e [ 261.589283][ C1] RBP: 0000000000000000 R08: 000000000f8e243f R09: 3fffffffffffffff [ 261.597256][ C1] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 261.605765][ C1] R13: 000055b5339a4100 R14: 0000000000000001 R15: 0000000000000000 [ 261.613765][ C1]