last executing test programs: 36.256119592s ago: executing program 2 (id=503): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f0000000c40)={'md', @named={'_syz', 0x0, '1'}}, 0x8) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000c80)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000cc0)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, &(0x7f0000000240)) 35.97423546s ago: executing program 2 (id=505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 35.852135505s ago: executing program 2 (id=506): r0 = syz_open_dev$usbfs(&(0x7f0000002000), 0x100000000003, 0x161341) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x3, 0x56a, 0x3f, 0x0, 0x0, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) nanosleep(&(0x7f0000000240)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000280)={0xc, {0x1, "8c"}}, 0x7) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0xf00, 0x6, 0x0, 0xfffffff9, 0x0}) 35.528151817s ago: executing program 2 (id=510): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x841}, 0x0) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x40000180) 35.499541509s ago: executing program 2 (id=512): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000940)={0x0, 0x10, &(0x7f0000000980)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000c00)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000c80)={0x6, 0x2, 0x6, 0xffffffff, r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc\x00', 0x1ff) timer_create(0x2, 0x0, &(0x7f0000000680)) mount(0x0, &(0x7f0000000a00)='./proc\x00', &(0x7f0000000a40)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000cc0), 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000d00)={0x1, [{0x1, 0x1cf0, 0x6, &(0x7f0000000ec0)="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"}, {0x0, 0x0, 0x7fffffff, 0x0}, {0x3, 0x0, 0x100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x104, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001280)={0x0, &(0x7f00000012c0)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001300)={0x0, &(0x7f0000001340)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000001400), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000001440)={0x0, 0xaaa, &(0x7f0000001480), 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000001540)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa], 0x10000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 35.29641476s ago: executing program 2 (id=515): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x2000) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r1, 0x0, 0x0) syz_clone(0x10080011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x600, 0x1000000}) 20.232195108s ago: executing program 32 (id=515): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x2000) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r1, 0x0, 0x0) syz_clone(0x10080011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x600, 0x1000000}) 12.025025515s ago: executing program 4 (id=681): r0 = socket(0x40000000015, 0x5, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000240)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x60010000, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) mknodat$md(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x6180, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="740000001e0001032a9d70f8fddbdf24ac14140f000000000000000000000000000004d60a002b00ac1e11010000000000000000000000000300000007350000200017"], 0x74}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r2 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000040)='./md0\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000080)=0xfffff7fffffffff8) 11.872062048s ago: executing program 4 (id=682): r0 = socket(0x10, 0x3, 0x0) r1 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x7, 0xb, 0x1010, 0xffffffffffffffff, 0x20000000) r2 = syz_ublk_setup_io_uring(0x2e2d, &(0x7f0000000000)={0x0, 0xab10, 0x400, 0x1, 0xc5}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_modify_offsets$flags(r1, r4, 0x38, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000002b80), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000002bc0)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f0000002c00)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2fb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x2, 0xbfa, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x18}}}, &(0x7f0000000280)=0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_trace_dev_match', 0x20000, 0x130) read$char_usb(r10, &(0x7f0000000380)=""/138, 0x8a) r11 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000440), 0x18000, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x0, 0x5338, 0x4, 0x1, 0x2d6, 0x0, r2}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeb65, 0x400, 0x2, 0x385, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe3f3, 0x2000, 0x0, 0x107, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd862, 0x2, 0x3, 0x2f, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd84f, 0x11, 0x0, 0x84, 0x0, r2}}], 0x4, &(0x7f0000001a00)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x98d9}, 0x0, 0x0, '\x00', {0x4, 0x1bf, 0x0, &(0x7f0000000a00)=@buf_512="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"}}, &(0x7f0000001a80)) syz_ublk_setup_queues(r8, r9, &(0x7f00000002c0)={0x0, 0x38d1, 0x20000, 0x0, 0x3d3, 0x0, r2}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe731, 0x10, 0x1, 0x11c, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x894e, 0x100, 0x3, 0x1c3, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdefb, 0x2, 0x3, 0x51}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8699, 0x200, 0x0, 0x16f, 0x0, r11}}], 0x4, &(0x7f0000002ac0)={0x2e, 0x40, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xa}, 0x0, 0x0, '\x00', {0x3, 0xe8b, 0x0, &(0x7f0000001ac0)=@buf_max_buf="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"}}, &(0x7f0000002b40)) 11.701497622s ago: executing program 4 (id=686): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x841}, 0x0) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000001140)=""/259, 0x103}, {&(0x7f0000001280)=""/4105, 0x1009}], 0x2}, 0x40000180) 11.62225368s ago: executing program 4 (id=688): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='usb3503 0x08\n\x00', 0xd) (fail_nth: 2) 11.328772663s ago: executing program 4 (id=691): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rxrpc/calls\x00', 0x0, 0x0) pread64$ublk_bdev(r0, &(0x7f00000001c0)=""/220, 0xdc, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xd) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x7a) close(r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x8a900, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000380), &(0x7f00000003c0)='.\x00', &(0x7f0000000400)='devtmpfs\x00', 0x12040dc, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaac8f, 0x44, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x1a1000, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setopts(0x4200, r5, 0x0, 0x1) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0x4212, r5, 0x58, &(0x7f0000000300)) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x48) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 10.989959099s ago: executing program 4 (id=696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x8, 0x1c, 0x0, 0x1, [@nested={0x4, 0xfb}]}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x8000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000003c0)=0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x54, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @device_a, @initial, {0x3, 0x9}}, 0x9, @val={0x8c, 0x18, {0x283, "726712ea0202", @long="a25804145623b94ac2157c57a5ea2c8c"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) 1.811923883s ago: executing program 3 (id=765): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="2c0000001a", 0x5) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000880)={0x2bc, 0x12, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0xc, 0x1, {0x4e23, 0x4e22, [0x1dd, 0x3, 0xffffffff, 0xffffffff], [0x8, 0x7, 0x5, 0x101], 0x0, [0x401, 0x8]}, 0x7fff, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x23, 0x1, "daa516739e470f1c96ec62a2b1ab488f0d48ea84160ea451880859f45886f7"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "771d7688fe1fbbdc04a484f4c4085d1dfe2653d0947ef4fef88e741fe24797bceed8c81353d3d004c9eb207ed6831073435371ec0349d3ce7035d4f2687d176edcbcd00ec0912c269942df14eacaec8897dcfb3d36e2cf47b87c0ae5d2c44f3c5b0b17d79c783c6cf18de509f83b9820ae0a17081cbd2f34f65d53c28e8224b4ef9bd65f0945d6edefe89b030e"}, @INET_DIAG_REQ_BYTECODE={0x69, 0x1, "cc438cb944e3c00bccb7bc57238af408d28d941f95ebd041a478c31eb88ae688dcfa078b6165bc7f7154f95343f201c9f52578ee8338fe4d88f46fe4287ffe25afc639fbe51458f2e11e0260f05be054bf1c38027977451ed85a94326e9ffc9e78438402ef"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x8d, 0x1, "2b1f9b15364e20e77d6e2a65ccb3ecfc626a0044d37de1c728641c7122dcb6256ff150066c135120ad74ac5e455f75536c0363ac96f7104ff037c1ad181babacf755e7455e4830aaa129a0b4a7aa15ed2149093f7ed385302616adb3bd1427d1a68a4df68652d42068aa560259d2172406141af26ec65e47117d862e75f5149a63bc348a8824ef0aca"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "2f86fba2101775eaed143c85ea9c8f16833edffca236e3d5df3750ea577eee944b3b5f55e0c4ae74e43775db6d16cdb3b2e42c27b59c02e2f9e569037e04b203f2202e7fd617f157346e1432f7781f5ee89eeab1ba5446a5f889badb4db52430bd6fea93ef48df5efc69a6688bb858a44cbc50a52611e889b6a360392b68eee841e876bea02a57f274118ec0519df591742588b8cfba05bec230ef7ed6de5c2779694593f86ddd474626633097"}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.676422184s ago: executing program 0 (id=766): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r1 = dup2(r0, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0xec, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3fc}, @CTA_NAT_DST={0x5c, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xec}}, 0x0) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1.653193527s ago: executing program 1 (id=767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001cc0)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 1.564956676s ago: executing program 3 (id=768): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000440)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000004c0)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 1.517656091s ago: executing program 0 (id=769): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x841}, 0x0) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000001280)=""/4105, 0x1009}, {&(0x7f00000022c0)=""/114, 0x72}, {&(0x7f0000002340)=""/4094, 0xffe}, {&(0x7f0000003340)=""/196, 0xc4}, {&(0x7f0000003440)=""/119, 0x77}, {&(0x7f00000034c0)=""/107, 0x6b}, {&(0x7f0000003540)=""/4100, 0x1004}, {&(0x7f0000004780)=""/55, 0x37}, {&(0x7f00000047c0)=""/214, 0xd6}], 0x9}, 0x40000180) 1.512738663s ago: executing program 1 (id=770): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000140)={0x1b, 0x5, 0x6b}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.34608304s ago: executing program 0 (id=771): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000380)='./file0\x00') r0 = open(&(0x7f00000003c0)='./bus\x00', 0x4ca7e, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x80042, 0x4d) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x98, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_USERDATA={0x5c, 0xd, 0x1, 0x0, "71ad6de765c8994cc27e824477ce294c91dd44b999bc56031e30eaef87c49eb8542ac3e5fd4af50d10acb9ceb2e9b69c20417e2a1aa83d8e314361e2b0d2bbcda6ab6c787d6d9b3d050631c9c63a892e65b4a75b88405005"}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x4}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) 1.132274312s ago: executing program 0 (id=772): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c9000c00080005"], 0x11) 1.078390711s ago: executing program 1 (id=773): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x841}, 0x0) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000001140)=""/259, 0x103}, {&(0x7f0000001280)=""/4105, 0x1009}, {&(0x7f0000002340)=""/4094, 0xffe}, {&(0x7f0000003340)=""/196, 0xc4}, {&(0x7f0000003440)=""/119, 0x77}, {&(0x7f00000034c0)=""/107, 0x6b}, {&(0x7f0000003540)=""/4100, 0x1004}, {&(0x7f0000004580)=""/246, 0xf6}, {&(0x7f0000004740)=""/24, 0x18}, {0x0}], 0xa}, 0x40000180) 987.128974ms ago: executing program 3 (id=774): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20000, 0x130) read$char_usb(r0, &(0x7f0000000380)=""/138, 0x8a) 853.130731ms ago: executing program 1 (id=775): mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./config\x00', &(0x7f0000000b40)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000c80)='./config/usb_gadget/g1\x00', 0xffffffffffffff9c, &(0x7f0000000cc0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') (fail_nth: 2) 774.381034ms ago: executing program 3 (id=776): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="2c0000001a", 0x5) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000880)={0x2bc, 0x12, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0xc, 0x1, {0x4e23, 0x4e22, [0x1dd, 0x3, 0xffffffff, 0xffffffff], [0x8, 0x7, 0x5, 0x101], 0x0, [0x401, 0x8]}, 0x7fff, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x24, 0x1, "daa516739e470f1c96ec62a2b1ab488f0d48ea84160ea451880859f45886f7f8"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "771d7688fe1fbbdc04a484f4c4085d1dfe2653d0947ef4fef88e741fe24797bceed8c81353d3d004c9eb207ed6831073435371ec0349d3ce7035d4f2687d176edcbcd00ec0912c269942df14eacaec8897dcfb3d36e2cf47b87c0ae5d2c44f3c5b0b17d79c783c6cf18de509f83b9820ae0a17081cbd2f34f65d53c28e8224b4ef9bd65f0945d6edefe89b030e"}, @INET_DIAG_REQ_BYTECODE={0x69, 0x1, "cc438cb944e3c00bccb7bc57238af408d28d941f95ebd041a478c31eb88ae688dcfa078b6165bc7f7154f95343f201c9f52578ee8338fe4d88f46fe4287ffe25afc639fbe51458f2e11e0260f05be054bf1c38027977451ed85a94326e9ffc9e78438402ef"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x8d, 0x1, "2b1f9b15364e20e77d6e2a65ccb3ecfc626a0044d37de1c728641c7122dcb6256ff150066c135120ad74ac5e455f75536c0363ac96f7104ff037c1ad181babacf755e7455e4830aaa129a0b4a7aa15ed2149093f7ed385302616adb3bd1427d1a68a4df68652d42068aa560259d2172406141af26ec65e47117d862e75f5149a63bc348a8824ef0aca"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "2f86fba2101775eaed143c85ea9c8f16833edffca236e3d5df3750ea577eee944b3b5f55e0c4ae74e43775db6d16cdb3b2e42c27b59c02e2f9e569037e04b203f2202e7fd617f157346e1432f7781f5ee89eeab1ba5446a5f889badb4db52430bd6fea93ef48df5efc69a6688bb858a44cbc50a52611e889b6a360392b68eee841e876bea02a57f274118ec0519df591742588b8cfba05bec230ef7ed6de5c2779694593f86ddd474626633097"}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 600.001479ms ago: executing program 1 (id=777): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x1000) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @private=0xa010100}, {0x0, @broadcast}, 0x8, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, 'veth0_to_batadv\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x4e23, @private=0xa010100}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x48, {0x2, 0x4e20, @remote}, 'veth0_to_bridge\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000d80)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000dc0)='./proc\x00', &(0x7f0000000e00)='proc\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0xffffff41) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e40)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000e80)='10', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./dev\x00', 0x1ff) 577.601236ms ago: executing program 3 (id=778): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000d80)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000dc0)='./proc\x00', &(0x7f0000000e00)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e40)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000e80)='10', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./dev\x00', 0x1ff) 436.918304ms ago: executing program 0 (id=779): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x841}, 0x0) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000001280)=""/4105, 0x1009}, {&(0x7f00000022c0)=""/114, 0x72}, {&(0x7f0000002340)=""/4094, 0xffe}, {&(0x7f0000003340)=""/196, 0xc4}, {&(0x7f0000003440)=""/119, 0x77}, {&(0x7f00000034c0)=""/107, 0x6b}, {&(0x7f0000003540)=""/4100, 0x1004}, {&(0x7f0000004780)=""/55, 0x37}, {&(0x7f00000047c0)=""/214, 0xd6}], 0x9}, 0x40000180) 135.80964ms ago: executing program 3 (id=780): syz_usb_connect(0x5, 0x2d, &(0x7f0000001b40)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d000905", @ANYRES16], 0x0) (async) syz_open_dev$mouse(&(0x7f0000001b80), 0x1, 0x224800) 131.692312ms ago: executing program 1 (id=781): r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f00000001c0)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r0, 0x400c0930, &(0x7f0000000240)) ioctl$GET_ARRAY_INFO(r0, 0x80480911, &(0x7f0000000280)) pwrite64(r0, &(0x7f0000000300)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000) ioctl$STOP_ARRAY(r0, 0x932, 0x0) 0s ago: executing program 0 (id=782): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000440)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000004c0)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 10 [ 131.059627][ T6872] ? __lock_acquire+0x747/0x2de0 [ 131.059680][ T6872] ? __fget_files+0x2a/0x420 [ 131.059696][ T6872] ? __fget_files+0x2a/0x420 [ 131.059709][ T6872] ? __fget_files+0x2a/0x420 [ 131.059726][ T6872] security_file_ioctl+0xc3/0x2a0 [ 131.059765][ T6872] __se_sys_ioctl+0x47/0x170 [ 131.059786][ T6872] do_syscall_64+0x166/0x520 [ 131.059800][ T6872] ? trace_irq_disable+0x3b/0x140 [ 131.059817][ T6872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.059831][ T6872] ? clear_bhb_loop+0x70/0xc0 [ 131.059848][ T6872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.059862][ T6872] RIP: 0033:0x7fe0e979f559 [ 131.059896][ T6872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.059912][ T6872] RSP: 002b:00007fe0ea70e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.059933][ T6872] RAX: ffffffffffffffda RBX: 00007fe0e9a25fa0 RCX: 00007fe0e979f559 [ 131.059948][ T6872] RDX: 00002000000003c0 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 131.059968][ T6872] RBP: 00007fe0ea70e090 R08: 0000000000000000 R09: 0000000000000000 [ 131.059979][ T6872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.059995][ T6872] R13: 00007fe0e9a26038 R14: 00007fe0e9a25fa0 R15: 00007ffe704c3fe8 [ 131.060016][ T6872] [ 131.060038][ T6872] ERROR: Out of memory at tomoyo_realpath_from_path. [ 131.142426][ T5790] usb 3-1: device descriptor read/64, error -71 [ 131.266915][ T5790] usb usb3-port1: attempt power cycle [ 131.349292][ T6872] device-mapper: table: 248:5: crypt: Error decoding and setting key (-EINVAL) [ 131.349315][ T6872] device-mapper: ioctl: error adding target to table [ 131.380886][ T5710] usb 1-1: USB disconnect, device number 8 [ 131.451239][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'. [ 131.524730][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'. [ 131.630564][ T5790] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 131.650998][ T5790] usb 3-1: device descriptor read/8, error -71 [ 131.750705][ T1563] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 131.901308][ T1563] usb 2-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.40 [ 131.901339][ T1563] usb 2-1: no configurations [ 131.901348][ T1563] usb 2-1: can't read configurations, error -22 [ 131.930698][ T5790] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 131.951500][ T5790] usb 3-1: device descriptor read/8, error -71 [ 132.030778][ T1563] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 132.050554][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 132.068977][ T5790] usb usb3-port1: unable to enumerate USB device [ 132.080850][ T5710] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 132.181239][ T1563] usb 2-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.40 [ 132.181281][ T1563] usb 2-1: no configurations [ 132.181293][ T1563] usb 2-1: can't read configurations, error -22 [ 132.181518][ T1563] usb usb2-port1: attempt power cycle [ 132.204329][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 132.216930][ T31] usb 1-1: New USB device found: idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 132.231110][ T5710] usb 4-1: Using ep0 maxpacket: 16 [ 132.232087][ T5710] usb 4-1: New USB device found: idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 132.232419][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.232444][ T31] usb 1-1: Product: syz [ 132.232457][ T31] usb 1-1: Manufacturer: syz [ 132.232472][ T31] usb 1-1: SerialNumber: syz [ 132.240603][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.240662][ T5710] usb 4-1: Product: syz [ 132.240710][ T5710] usb 4-1: Manufacturer: syz [ 132.240757][ T5710] usb 4-1: SerialNumber: syz [ 132.244466][ T31] usb 1-1: config 0 descriptor?? [ 132.514525][ T6898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.514956][ T6898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.530980][ T1563] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 132.553030][ T5710] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 132.557298][ T1563] usb 2-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.40 [ 132.557325][ T1563] usb 2-1: no configurations [ 132.557335][ T1563] usb 2-1: can't read configurations, error -22 [ 132.593757][ T5710] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 132.594103][ T5710] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 132.594137][ T5710] usb 4-1: media controller created [ 132.626351][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.647584][ T5710] zl10353_read_register: readreg error (reg=127, ret==-71) [ 132.662330][ T31] airspy 1-1:0.0: usb_control_msg() failed -32 request 0a [ 132.662355][ T31] airspy 1-1:0.0: Could not detect board [ 132.662435][ T31] airspy 1-1:0.0: probe with driver airspy failed with error -32 [ 132.686232][ T1563] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 132.705681][ T1563] usb 2-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.40 [ 132.705721][ T1563] usb 2-1: no configurations [ 132.705733][ T1563] usb 2-1: can't read configurations, error -22 [ 132.706003][ T1563] usb usb2-port1: unable to enumerate USB device [ 132.738128][ T5710] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 132.741762][ T5710] usb 4-1: USB disconnect, device number 11 [ 132.912478][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.912562][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.108814][ T6901] nbd: must specify a size in bytes for the device [ 133.110575][ T6901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.388'. [ 133.209732][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'. [ 133.257636][ T6909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.391'. [ 133.399045][ T6915] FAULT_INJECTION: forcing a failure. [ 133.399045][ T6915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.399067][ T6915] CPU: 0 UID: 0 PID: 6915 Comm: syz.2.393 Not tainted syzkaller #0 PREEMPT(full) [ 133.399082][ T6915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 133.399092][ T6915] Call Trace: [ 133.399097][ T6915] [ 133.399103][ T6915] dump_stack_lvl+0xe8/0x150 [ 133.399128][ T6915] should_fail_ex+0x3eb/0x540 [ 133.399148][ T6915] _copy_from_user+0x2d/0xb0 [ 133.399166][ T6915] sctp_setsockopt+0x1c4/0x12c0 [ 133.399184][ T6915] ? sock_common_setsockopt+0x36/0xc0 [ 133.399203][ T6915] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 133.399224][ T6915] do_sock_setsockopt+0x17c/0x1b0 [ 133.399267][ T6915] __x64_sys_setsockopt+0x13d/0x1b0 [ 133.399294][ T6915] do_syscall_64+0x166/0x520 [ 133.399310][ T6915] ? trace_irq_disable+0x3b/0x140 [ 133.399329][ T6915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.399344][ T6915] ? clear_bhb_loop+0x70/0xc0 [ 133.399365][ T6915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.399380][ T6915] RIP: 0033:0x7fef1119f559 [ 133.399393][ T6915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.399405][ T6915] RSP: 002b:00007fef0f3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 133.399421][ T6915] RAX: ffffffffffffffda RBX: 00007fef11425fa0 RCX: 00007fef1119f559 [ 133.399432][ T6915] RDX: 0000000000000019 RSI: 0000000000000084 RDI: 0000000000000003 [ 133.399441][ T6915] RBP: 00007fef0f3f6090 R08: 0000000000000008 R09: 0000000000000000 [ 133.399450][ T6915] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 133.399460][ T6915] R13: 00007fef11426038 R14: 00007fef11425fa0 R15: 00007ffd0895cb38 [ 133.399483][ T6915] [ 133.411180][ T5710] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 133.588165][ T5710] usb 4-1: Using ep0 maxpacket: 32 [ 133.601583][ T5710] usb 4-1: unable to get BOS descriptor or descriptor too short [ 133.601633][ T5710] usb 4-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 133.601672][ T5710] usb 4-1: too many configurations: 122, using maximum allowed: 8 [ 133.602773][ T5710] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 171 [ 133.602797][ T5710] usb 4-1: can't read configurations, error -22 [ 133.623815][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 133.730651][ T5710] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 133.871922][ T6924] process 'syz.2.397' launched './file0' with NULL argv: empty string added [ 133.890791][ T5710] usb 4-1: Using ep0 maxpacket: 32 [ 133.893529][ T5710] usb 4-1: unable to get BOS descriptor or descriptor too short [ 133.893579][ T5710] usb 4-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 133.893615][ T5710] usb 4-1: too many configurations: 122, using maximum allowed: 8 [ 133.894588][ T5710] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 171 [ 133.894624][ T5710] usb 4-1: can't read configurations, error -22 [ 133.894889][ T5710] usb usb4-port1: attempt power cycle [ 134.111016][ T1563] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 134.230664][ T5710] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 134.251366][ T5710] usb 4-1: Using ep0 maxpacket: 32 [ 134.253594][ T5710] usb 4-1: unable to get BOS descriptor or descriptor too short [ 134.253628][ T5710] usb 4-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 134.253654][ T5710] usb 4-1: too many configurations: 122, using maximum allowed: 8 [ 134.254643][ T5710] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 171 [ 134.254671][ T5710] usb 4-1: can't read configurations, error -22 [ 134.291317][ T1563] usb 3-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 134.318612][ T1563] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.318631][ T1563] usb 3-1: Product: syz [ 134.318642][ T1563] usb 3-1: Manufacturer: syz [ 134.318652][ T1563] usb 3-1: SerialNumber: syz [ 134.400623][ T5710] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 134.421335][ T5710] usb 4-1: Using ep0 maxpacket: 32 [ 134.423584][ T5710] usb 4-1: unable to get BOS descriptor or descriptor too short [ 134.423616][ T5710] usb 4-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 134.423641][ T5710] usb 4-1: too many configurations: 122, using maximum allowed: 8 [ 134.424614][ T5710] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 171 [ 134.424638][ T5710] usb 4-1: can't read configurations, error -22 [ 134.425022][ T5710] usb usb4-port1: unable to enumerate USB device [ 134.607695][ T1563] rtl8150 3-1:1.0: couldn't reset the device [ 134.608017][ T1563] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 134.633584][ T1563] usb 3-1: USB disconnect, device number 16 [ 134.822320][ T5790] usb 1-1: USB disconnect, device number 9 [ 134.865222][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 134.911718][ T6932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.401'. [ 134.955795][ T6934] FAULT_INJECTION: forcing a failure. [ 134.955795][ T6934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.955817][ T6934] CPU: 0 UID: 0 PID: 6934 Comm: syz.0.402 Not tainted syzkaller #0 PREEMPT(full) [ 134.955835][ T6934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 134.955844][ T6934] Call Trace: [ 134.955849][ T6934] [ 134.955855][ T6934] dump_stack_lvl+0xe8/0x150 [ 134.955881][ T6934] should_fail_ex+0x3eb/0x540 [ 134.955903][ T6934] _copy_from_iter+0x1d3/0x1680 [ 134.955924][ T6934] ? rcu_is_watching+0x16/0xb0 [ 134.955944][ T6934] ? file_tty_write+0x2a0/0xa20 [ 134.955960][ T6934] ? trace_kmalloc+0x2a/0xf0 [ 134.955975][ T6934] ? __pfx__copy_from_iter+0x10/0x10 [ 134.955989][ T6934] ? file_tty_write+0x2a0/0xa20 [ 134.956008][ T6934] ? rcu_is_watching+0x16/0xb0 [ 134.956027][ T6934] ? kfree+0x4d/0x650 [ 134.956053][ T6934] file_tty_write+0x48c/0xa20 [ 134.956078][ T6934] vfs_write+0x612/0xba0 [ 134.956101][ T6934] ? __pfx_vfs_write+0x10/0x10 [ 134.956128][ T6934] ? __fget_files+0x3a2/0x420 [ 134.956144][ T6934] ? __fget_files+0x2a/0x420 [ 134.956162][ T6934] ? fdget+0x1ac/0x250 [ 134.956182][ T6934] ksys_write+0x150/0x270 [ 134.956201][ T6934] ? __pfx_ksys_write+0x10/0x10 [ 134.956227][ T6934] do_syscall_64+0x166/0x520 [ 134.956243][ T6934] ? trace_irq_disable+0x3b/0x140 [ 134.956260][ T6934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.956275][ T6934] ? clear_bhb_loop+0x70/0xc0 [ 134.956294][ T6934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.956309][ T6934] RIP: 0033:0x7ffabcf9f559 [ 134.956322][ T6934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.956335][ T6934] RSP: 002b:00007ffabdee8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.956351][ T6934] RAX: ffffffffffffffda RBX: 00007ffabd225fa0 RCX: 00007ffabcf9f559 [ 134.956362][ T6934] RDX: 0000000000001006 RSI: 0000200000000580 RDI: 0000000000000004 [ 134.956371][ T6934] RBP: 00007ffabdee8090 R08: 0000000000000000 R09: 0000000000000000 [ 134.956380][ T6934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.956389][ T6934] R13: 00007ffabd226038 R14: 00007ffabd225fa0 R15: 00007ffe5992cbf8 [ 134.956413][ T6934] [ 135.211033][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'. [ 135.328619][ T6943] FAULT_INJECTION: forcing a failure. [ 135.328619][ T6943] name failslab, interval 1, probability 0, space 0, times 0 [ 135.328659][ T6943] CPU: 1 UID: 0 PID: 6943 Comm: syz.0.406 Not tainted syzkaller #0 PREEMPT(full) [ 135.328691][ T6943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 135.328706][ T6943] Call Trace: [ 135.328716][ T6943] [ 135.328729][ T6943] dump_stack_lvl+0xe8/0x150 [ 135.328772][ T6943] should_fail_ex+0x3eb/0x540 [ 135.328809][ T6943] should_failslab+0xa8/0x100 [ 135.328845][ T6943] __kmalloc_cache_noprof+0x9e/0x600 [ 135.328874][ T6943] ? cgroup_show_path+0xaa/0x5d0 [ 135.328900][ T6943] ? cgroup_show_path+0xaa/0x5d0 [ 135.328930][ T6943] ? kernfs_root+0x1c/0x230 [ 135.328964][ T6943] cgroup_show_path+0xaa/0x5d0 [ 135.328992][ T6943] ? kernfs_sop_show_path+0xc9/0x120 [ 135.329027][ T6943] show_mountinfo+0x1cd/0xb70 [ 135.329066][ T6943] ? __pfx_show_mountinfo+0x10/0x10 [ 135.329109][ T6943] traverse+0x229/0x620 [ 135.329159][ T6943] seq_lseek+0x134/0x260 [ 135.329199][ T6943] __x64_sys_lseek+0x14f/0x1e0 [ 135.329241][ T6943] do_syscall_64+0x166/0x520 [ 135.329268][ T6943] ? trace_irq_disable+0x3b/0x140 [ 135.329299][ T6943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.329327][ T6943] ? clear_bhb_loop+0x70/0xc0 [ 135.329358][ T6943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.329384][ T6943] RIP: 0033:0x7ffabcf9f559 [ 135.329408][ T6943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.329430][ T6943] RSP: 002b:00007ffabdee8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 135.329457][ T6943] RAX: ffffffffffffffda RBX: 00007ffabd225fa0 RCX: 00007ffabcf9f559 [ 135.329477][ T6943] RDX: 0000000000000000 RSI: 00000000000009d2 RDI: 0000000000000003 [ 135.329498][ T6943] RBP: 00007ffabd036b20 R08: 0000000000000000 R09: 0000000000000000 [ 135.329514][ T6943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.329528][ T6943] R13: 00007ffabd226038 R14: 00007ffabd225fa0 R15: 00007ffe5992cbf8 [ 135.329569][ T6943] [ 135.580352][ T6947] netlink: 'syz.0.407': attribute type 2 has an invalid length. [ 135.599618][ T6947] : entered promiscuous mode [ 135.728254][ T6955] netlink: 24 bytes leftover after parsing attributes in process `syz.0.411'. [ 135.776976][ T6957] FAULT_INJECTION: forcing a failure. [ 135.776976][ T6957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.777000][ T6957] CPU: 1 UID: 0 PID: 6957 Comm: syz.0.412 Not tainted syzkaller #0 PREEMPT(full) [ 135.777018][ T6957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 135.777027][ T6957] Call Trace: [ 135.777033][ T6957] [ 135.777039][ T6957] dump_stack_lvl+0xe8/0x150 [ 135.777066][ T6957] should_fail_ex+0x3eb/0x540 [ 135.777088][ T6957] _copy_from_user+0x2d/0xb0 [ 135.777112][ T6957] ___sys_recvmsg+0x173/0x5a0 [ 135.777134][ T6957] ? __pfx____sys_recvmsg+0x10/0x10 [ 135.777153][ T6957] ? lock_acquire+0x115/0x350 [ 135.777187][ T6957] ? __fget_files+0x2a/0x420 [ 135.777203][ T6957] ? __fget_files+0x3a2/0x420 [ 135.777218][ T6957] ? __fget_files+0x2a/0x420 [ 135.777241][ T6957] __x64_sys_recvmsg+0x1ae/0x290 [ 135.777259][ T6957] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 135.777292][ T6957] do_syscall_64+0x166/0x520 [ 135.777308][ T6957] ? trace_irq_disable+0x3b/0x140 [ 135.777326][ T6957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.777342][ T6957] ? clear_bhb_loop+0x70/0xc0 [ 135.777361][ T6957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.777376][ T6957] RIP: 0033:0x7ffabcf9f559 [ 135.777390][ T6957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.777403][ T6957] RSP: 002b:00007ffabdee8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 135.777420][ T6957] RAX: ffffffffffffffda RBX: 00007ffabd225fa0 RCX: 00007ffabcf9f559 [ 135.777431][ T6957] RDX: 0000000040000180 RSI: 0000200000001000 RDI: 0000000000000003 [ 135.777441][ T6957] RBP: 00007ffabdee8090 R08: 0000000000000000 R09: 0000000000000000 [ 135.777450][ T6957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.777459][ T6957] R13: 00007ffabd226038 R14: 00007ffabd225fa0 R15: 00007ffe5992cbf8 [ 135.777483][ T6957] [ 136.175433][ T6964] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 136.210298][ T6964] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 136.274927][ T5710] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 136.298641][ T6969] netlink: 'syz.1.417': attribute type 1 has an invalid length. [ 136.423511][ T5710] usb 1-1: Using ep0 maxpacket: 8 [ 136.426626][ T5710] usb 1-1: New USB device found: idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 136.428762][ T5710] usb 1-1: config 3 has an invalid interface number: 45 but max is 0 [ 136.428786][ T5710] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 136.428804][ T5710] usb 1-1: config 3 has no interface number 0 [ 136.428844][ T5710] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.428872][ T5710] usb 1-1: config 3 interface 45 has no altsetting 0 [ 136.447691][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.447764][ T5710] usb 1-1: Product: syz [ 136.447804][ T5710] usb 1-1: Manufacturer: syz [ 136.447838][ T5710] usb 1-1: SerialNumber: syz [ 136.518806][ T6977] FAULT_INJECTION: forcing a failure. [ 136.518806][ T6977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.518892][ T6977] CPU: 1 UID: 0 PID: 6977 Comm: syz.2.420 Not tainted syzkaller #0 PREEMPT(full) [ 136.518926][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 136.518940][ T6977] Call Trace: [ 136.518948][ T6977] [ 136.518958][ T6977] dump_stack_lvl+0xe8/0x150 [ 136.518994][ T6977] should_fail_ex+0x3eb/0x540 [ 136.519030][ T6977] _copy_from_user+0x2d/0xb0 [ 136.519058][ T6977] ___sys_recvmsg+0x173/0x5a0 [ 136.519089][ T6977] ? __pfx____sys_recvmsg+0x10/0x10 [ 136.519117][ T6977] ? lock_acquire+0x115/0x350 [ 136.519158][ T6977] ? __fget_files+0x2a/0x420 [ 136.519181][ T6977] ? __fget_files+0x3a2/0x420 [ 136.519202][ T6977] ? __fget_files+0x2a/0x420 [ 136.519236][ T6977] __x64_sys_recvmsg+0x1ae/0x290 [ 136.519263][ T6977] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 136.519310][ T6977] do_syscall_64+0x166/0x520 [ 136.519333][ T6977] ? trace_irq_disable+0x3b/0x140 [ 136.519359][ T6977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.519381][ T6977] ? clear_bhb_loop+0x70/0xc0 [ 136.519409][ T6977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.519432][ T6977] RIP: 0033:0x7fef1119f559 [ 136.519452][ T6977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.519471][ T6977] RSP: 002b:00007fef0f3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 136.519505][ T6977] RAX: ffffffffffffffda RBX: 00007fef11425fa0 RCX: 00007fef1119f559 [ 136.519521][ T6977] RDX: 0000000000010082 RSI: 00002000000000c0 RDI: 0000000000000003 [ 136.519535][ T6977] RBP: 00007fef0f3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 136.519549][ T6977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.519562][ T6977] R13: 00007fef11426038 R14: 00007fef11425fa0 R15: 00007ffd0895cb38 [ 136.519598][ T6977] [ 136.886022][ T6986] FAULT_INJECTION: forcing a failure. [ 136.886022][ T6986] name failslab, interval 1, probability 0, space 0, times 0 [ 136.886054][ T6986] CPU: 0 UID: 0 PID: 6986 Comm: syz.3.422 Not tainted syzkaller #0 PREEMPT(full) [ 136.886080][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 136.886093][ T6986] Call Trace: [ 136.886103][ T6986] [ 136.886112][ T6986] dump_stack_lvl+0xe8/0x150 [ 136.886152][ T6986] should_fail_ex+0x3eb/0x540 [ 136.886185][ T6986] should_failslab+0xa8/0x100 [ 136.886230][ T6986] __kmalloc_cache_noprof+0x9e/0x600 [ 136.886256][ T6986] ? cgroup_show_path+0xaa/0x5d0 [ 136.886278][ T6986] ? cgroup_show_path+0xaa/0x5d0 [ 136.886301][ T6986] ? kernfs_root+0x1c/0x230 [ 136.886331][ T6986] cgroup_show_path+0xaa/0x5d0 [ 136.886355][ T6986] ? kernfs_sop_show_path+0xc9/0x120 [ 136.886383][ T6986] show_mountinfo+0x1cd/0xb70 [ 136.886417][ T6986] ? __pfx_show_mountinfo+0x10/0x10 [ 136.886459][ T6986] traverse+0x229/0x620 [ 136.886522][ T6986] seq_lseek+0x134/0x260 [ 136.886562][ T6986] __x64_sys_lseek+0x14f/0x1e0 [ 136.886592][ T6986] do_syscall_64+0x166/0x520 [ 136.886616][ T6986] ? trace_irq_disable+0x3b/0x140 [ 136.886642][ T6986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.886666][ T6986] ? clear_bhb_loop+0x70/0xc0 [ 136.886694][ T6986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.886717][ T6986] RIP: 0033:0x7fb25a19f559 [ 136.886739][ T6986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.886758][ T6986] RSP: 002b:00007fb25afc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 136.886783][ T6986] RAX: ffffffffffffffda RBX: 00007fb25a425fa0 RCX: 00007fb25a19f559 [ 136.886799][ T6986] RDX: 0000000000000000 RSI: 00000000000009d2 RDI: 0000000000000007 [ 136.886812][ T6986] RBP: 00007fb25a236b20 R08: 0000000000000000 R09: 0000000000000000 [ 136.886827][ T6986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.886841][ T6986] R13: 00007fb25a426038 R14: 00007fb25a425fa0 R15: 00007ffd3176a0c8 [ 136.886877][ T6986] [ 136.908411][ T5710] usb 1-1: USB disconnect, device number 10 [ 137.080096][ T6987] __nla_validate_parse: 2 callbacks suppressed [ 137.080143][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'. [ 137.129324][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.350804][ T4953] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 137.352442][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.428'. [ 137.844940][ T7014] md: could not open device unknown-block(1,0). [ 138.741576][ T1232] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 138.770548][ T7047] FAULT_INJECTION: forcing a failure. [ 138.770548][ T7047] name fail_futex, interval 1, probability 0, space 0, times 1 [ 138.770583][ T7047] CPU: 1 UID: 0 PID: 7047 Comm: syz.1.445 Not tainted syzkaller #0 PREEMPT(full) [ 138.770610][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 138.770624][ T7047] Call Trace: [ 138.770633][ T7047] [ 138.770643][ T7047] dump_stack_lvl+0xe8/0x150 [ 138.770682][ T7047] should_fail_ex+0x3eb/0x540 [ 138.770716][ T7047] get_futex_key+0x1ab/0x1410 [ 138.770753][ T7047] ? __schedule+0x17f3/0x5830 [ 138.770792][ T7047] ? __pfx_get_futex_key+0x10/0x10 [ 138.770825][ T7047] ? update_se+0x90/0x1080 [ 138.770862][ T7047] futex_wait_setup+0x4a/0x590 [ 138.770888][ T7047] ? rcu_is_watching+0x16/0xb0 [ 138.770919][ T7047] ? __futex_wait+0xdb/0x470 [ 138.770948][ T7047] __futex_wait+0x175/0x470 [ 138.770981][ T7047] ? __pfx___futex_wait+0x10/0x10 [ 138.771010][ T7047] ? __pfx_futex_wake_mark+0x10/0x10 [ 138.771040][ T7047] ? try_to_wake_up+0x90a/0x14e0 [ 138.771080][ T7047] futex_wait+0x121/0x390 [ 138.771107][ T7047] ? __pfx_futex_wait+0x10/0x10 [ 138.771138][ T7047] ? __raw_spin_lock_init+0x45/0x100 [ 138.771181][ T7047] do_futex+0x3e7/0x4e0 [ 138.771212][ T7047] ? __asan_memcpy+0x40/0x70 [ 138.771239][ T7047] ? __pfx_do_futex+0x10/0x10 [ 138.771281][ T7047] __se_sys_futex+0x3a8/0x450 [ 138.771325][ T7047] ? __pfx___se_sys_futex+0x10/0x10 [ 138.771359][ T7047] ? rcu_is_watching+0x16/0xb0 [ 138.771396][ T7047] ? __x64_sys_futex+0x21/0xf0 [ 138.771432][ T7047] do_syscall_64+0x166/0x520 [ 138.771463][ T7047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.771488][ T7047] ? clear_bhb_loop+0x70/0xc0 [ 138.771517][ T7047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.771539][ T7047] RIP: 0033:0x7fe0e979f559 [ 138.771561][ T7047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.771582][ T7047] RSP: 002b:00007fe0ea70e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 138.771608][ T7047] RAX: ffffffffffffffda RBX: 00007fe0e9a25fa8 RCX: 00007fe0e979f559 [ 138.771624][ T7047] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe0e9a25fa8 [ 138.771639][ T7047] RBP: 00007fe0e9a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 138.771653][ T7047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.771667][ T7047] R13: 00007fe0e9a26038 R14: 00007ffe704c3f00 R15: 00007ffe704c3fe8 [ 138.771704][ T7047] [ 138.958263][ T1232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 138.984046][ T1232] usb 4-1: not running at top speed; connect to a high speed hub [ 138.984082][ T1232] usb 4-1: New USB device found: idVendor=03f0, idProduct=0307, bcdDevice=0.01 [ 139.034383][ T1232] usb 4-1: config 1 has an invalid interface number: 116 but max is 0 [ 139.034412][ T1232] usb 4-1: config 1 has no interface number 0 [ 139.034453][ T1232] usb 4-1: config 1 interface 116 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 139.034489][ T1232] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 139.034514][ T1232] usb 4-1: config 1 interface 116 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 139.034539][ T1232] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 64 [ 139.034565][ T1232] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0x3 has invalid wMaxPacketSize 0 [ 139.034586][ T1232] usb 4-1: config 1 interface 116 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.034613][ T1232] usb 4-1: config 1 interface 116 has no altsetting 0 [ 139.123714][ T1232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.123742][ T1232] usb 4-1: Product: syz [ 139.123759][ T1232] usb 4-1: Manufacturer: syz [ 139.123775][ T1232] usb 4-1: SerialNumber: syz [ 139.184813][ T7043] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 139.185066][ T7043] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 139.348095][ T7054] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 139.367013][ T7054] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 139.401065][ T1232] ums-usbat 4-1:1.116: USB Mass Storage device detected [ 139.466109][ T1232] ums-usbat 4-1:1.116: probe with driver ums-usbat failed with error -5 [ 139.478768][ T1232] usb 4-1: USB disconnect, device number 16 [ 139.560603][ T5710] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 139.581393][ T7060] FAULT_INJECTION: forcing a failure. [ 139.581393][ T7060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.581421][ T7060] CPU: 0 UID: 0 PID: 7060 Comm: syz.1.449 Not tainted syzkaller #0 PREEMPT(full) [ 139.581443][ T7060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 139.581456][ T7060] Call Trace: [ 139.581463][ T7060] [ 139.581471][ T7060] dump_stack_lvl+0xe8/0x150 [ 139.581504][ T7060] should_fail_ex+0x3eb/0x540 [ 139.581533][ T7060] strncpy_from_user+0x36/0x2c0 [ 139.581561][ T7060] do_getname+0x77/0x250 [ 139.581593][ T7060] do_sys_openat2+0xce/0x200 [ 139.581626][ T7060] ? __pfx_do_sys_openat2+0x10/0x10 [ 139.581657][ T7060] ? ksys_write+0x1fc/0x270 [ 139.581682][ T7060] ? __pfx_ksys_write+0x10/0x10 [ 139.581711][ T7060] __x64_sys_openat+0x138/0x170 [ 139.581746][ T7060] do_syscall_64+0x166/0x520 [ 139.581767][ T7060] ? trace_irq_disable+0x3b/0x140 [ 139.581791][ T7060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.581811][ T7060] ? clear_bhb_loop+0x70/0xc0 [ 139.581835][ T7060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.581855][ T7060] RIP: 0033:0x7fe0e979f559 [ 139.581873][ T7060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.581897][ T7060] RSP: 002b:00007fe0ea70e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 139.581919][ T7060] RAX: ffffffffffffffda RBX: 00007fe0e9a25fa0 RCX: 00007fe0e979f559 [ 139.581933][ T7060] RDX: 0000000000000002 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 139.581946][ T7060] RBP: 00007fe0ea70e090 R08: 0000000000000000 R09: 0000000000000000 [ 139.581958][ T7060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.581970][ T7060] R13: 00007fe0e9a26038 R14: 00007fe0e9a25fa0 R15: 00007ffe704c3fe8 [ 139.582003][ T7060] [ 139.785045][ T5710] usb 3-1: New USB device found: idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 139.797171][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 139.797202][ T5710] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 139.797229][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 139.797253][ T5710] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 139.797294][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.811514][ T5710] usb 3-1: config 0 descriptor?? [ 139.980194][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.451'. [ 140.075459][ T5710] hdpvr 3-1:0.0: firmware version 0x1e dated þÀq|RC¾@µ2£¹ö2[Ì7ÔB½Ë†Ã“‘êpY [ 140.171920][ T7072] syz.1.455 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 140.520541][ T1232] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 140.521749][ T5710] hdpvr 3-1:0.0: Could not setup controls [ 140.545616][ T5710] hdpvr 3-1:0.0: registering videodev failed [ 140.577834][ T5710] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -71 [ 140.595240][ T5710] usb 3-1: USB disconnect, device number 17 [ 140.671074][ T1232] usb 4-1: Using ep0 maxpacket: 32 [ 140.671776][ T1232] usb 4-1: New USB device found: idVendor=16c0, idProduct=05df, bcdDevice=7d.bd [ 140.672738][ T1232] usb 4-1: config 3 has an invalid interface number: 160 but max is 0 [ 140.672762][ T1232] usb 4-1: config 3 has no interface number 0 [ 140.672799][ T1232] usb 4-1: config 3 interface 160 altsetting 3 bulk endpoint 0xF has invalid maxpacket 16 [ 140.672824][ T1232] usb 4-1: config 3 interface 160 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.672849][ T1232] usb 4-1: config 3 interface 160 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0 [ 140.672871][ T1232] usb 4-1: config 3 interface 160 has no altsetting 0 [ 140.676569][ T1232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.676599][ T1232] usb 4-1: Product: syz [ 140.676613][ T1232] usb 4-1: Manufacturer: syz [ 140.676627][ T1232] usb 4-1: SerialNumber: syz [ 140.691947][ T7078] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 140.862400][ T7080] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 140.897235][ T4953] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 140.935144][ T7080] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 140.984615][ T1232] usb 4-1: USB disconnect, device number 17 [ 141.202792][ T7089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.462'. [ 141.283476][ T7093] input: syz0 as /devices/virtual/input/input8 [ 141.446001][ T7098] FAULT_INJECTION: forcing a failure. [ 141.446001][ T7098] name failslab, interval 1, probability 0, space 0, times 0 [ 141.446040][ T7098] CPU: 1 UID: 0 PID: 7098 Comm: syz.0.466 Not tainted syzkaller #0 PREEMPT(full) [ 141.446071][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 141.446087][ T7098] Call Trace: [ 141.446097][ T7098] [ 141.446108][ T7098] dump_stack_lvl+0xe8/0x150 [ 141.446154][ T7098] should_fail_ex+0x3eb/0x540 [ 141.446194][ T7098] should_failslab+0xa8/0x100 [ 141.446233][ T7098] __kmalloc_node_noprof+0xfb/0x720 [ 141.446262][ T7098] ? __raw_spin_lock_init+0x45/0x100 [ 141.446299][ T7098] ? mempool_init_node+0x121/0x510 [ 141.446335][ T7098] ? mempool_init_node+0x121/0x510 [ 141.446372][ T7098] ? __init_waitqueue_head+0xa8/0x150 [ 141.446414][ T7098] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 141.446450][ T7098] mempool_init_node+0x121/0x510 [ 141.446491][ T7098] ? __pfx_mempool_free_slab+0x10/0x10 [ 141.446547][ T7098] ? xa_load+0x1db/0x210 [ 141.446581][ T7098] ? __pfx_mempool_free_slab+0x10/0x10 [ 141.446617][ T7098] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 141.446654][ T7098] mempool_init_noprof+0x3a/0x50 [ 141.446696][ T7098] bioset_init+0x2ee/0x7e0 [ 141.446721][ T7098] ? __kasan_kmalloc+0x93/0xb0 [ 141.446756][ T7098] ? __pfx_bioset_init+0x10/0x10 [ 141.446797][ T7098] ? __kmalloc_cache_noprof+0x148/0x600 [ 141.446825][ T7098] ? percpu_ref_init+0xc5/0x350 [ 141.446848][ T7098] ? percpu_ref_init+0xc5/0x350 [ 141.446882][ T7098] ? percpu_ref_init+0x215/0x350 [ 141.446907][ T7098] ? __pfx_no_op+0x10/0x10 [ 141.446948][ T7098] mddev_init+0xdc/0x700 [ 141.446990][ T7098] md_alloc+0xb8/0xf20 [ 141.447023][ T7098] md_alloc_and_put+0x1a/0x1f0 [ 141.447061][ T7098] add_named_array+0x240/0x350 [ 141.447098][ T7098] ? __pfx___mutex_lock+0x10/0x10 [ 141.447129][ T7098] ? __pfx_add_named_array+0x10/0x10 [ 141.447171][ T7098] ? sysfs_file_kobj+0x1a/0x230 [ 141.447215][ T7098] param_attr_store+0x214/0x310 [ 141.447256][ T7098] ? __pfx_param_attr_store+0x10/0x10 [ 141.447290][ T7098] ? __pfx_sysfs_kf_write+0x10/0x10 [ 141.447318][ T7098] module_attr_store+0x65/0x90 [ 141.447356][ T7098] kernfs_fop_write_iter+0x3a4/0x540 [ 141.447390][ T7098] vfs_write+0x612/0xba0 [ 141.447433][ T7098] ? __pfx_vfs_write+0x10/0x10 [ 141.447468][ T7098] ? __fget_files+0x3a2/0x420 [ 141.447496][ T7098] ? __fget_files+0x2a/0x420 [ 141.447539][ T7098] ? fdget+0x1ac/0x250 [ 141.447579][ T7098] ksys_write+0x150/0x270 [ 141.447614][ T7098] ? __pfx_ksys_write+0x10/0x10 [ 141.447660][ T7098] do_syscall_64+0x166/0x520 [ 141.447688][ T7098] ? trace_irq_disable+0x3b/0x140 [ 141.447719][ T7098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.447750][ T7098] ? clear_bhb_loop+0x70/0xc0 [ 141.447783][ T7098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.447811][ T7098] RIP: 0033:0x7ffabcf9f559 [ 141.447836][ T7098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.447858][ T7098] RSP: 002b:00007ffabdee8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 141.447886][ T7098] RAX: ffffffffffffffda RBX: 00007ffabd225fa0 RCX: 00007ffabcf9f559 [ 141.447906][ T7098] RDX: 0000000000000003 RSI: 0000200000000800 RDI: 0000000000000003 [ 141.447923][ T7098] RBP: 00007ffabd036b20 R08: 0000000000000000 R09: 0000000000000000 [ 141.447940][ T7098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.447957][ T7098] R13: 00007ffabd226038 R14: 00007ffabd225fa0 R15: 00007ffe5992cbf8 [ 141.447999][ T7098] [ 141.448111][ T7098] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 141.887854][ T7100] FAULT_INJECTION: forcing a failure. [ 141.887854][ T7100] name failslab, interval 1, probability 0, space 0, times 0 [ 141.887887][ T7100] CPU: 1 UID: 0 PID: 7100 Comm: syz.0.467 Not tainted syzkaller #0 PREEMPT(full) [ 141.887914][ T7100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 141.887927][ T7100] Call Trace: [ 141.887936][ T7100] [ 141.887945][ T7100] dump_stack_lvl+0xe8/0x150 [ 141.887982][ T7100] should_fail_ex+0x3eb/0x540 [ 141.888018][ T7100] should_failslab+0xa8/0x100 [ 141.888049][ T7100] __kmalloc_cache_noprof+0x9e/0x600 [ 141.888075][ T7100] ? proc_thread_self_get_link+0xfc/0x190 [ 141.888105][ T7100] ? proc_thread_self_get_link+0xfc/0x190 [ 141.888137][ T7100] ? __task_pid_nr_ns+0x399/0x470 [ 141.888164][ T7100] proc_thread_self_get_link+0xfc/0x190 [ 141.888195][ T7100] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 141.888227][ T7100] pick_link+0x77d/0xfd0 [ 141.888263][ T7100] step_into_slowpath+0x58a/0x820 [ 141.888291][ T7100] ? __pfx_step_into_slowpath+0x10/0x10 [ 141.888318][ T7100] ? inode_permission+0x2b8/0x600 [ 141.888345][ T7100] link_path_walk+0xd50/0x1910 [ 141.888391][ T7100] path_openat+0x1b7/0x20f0 [ 141.888439][ T7100] do_file_open+0x23e/0x4a0 [ 141.888473][ T7100] ? __pfx_do_file_open+0x10/0x10 [ 141.888547][ T7100] ? _raw_spin_unlock+0x28/0x50 [ 141.888579][ T7100] ? alloc_fd+0x6af/0x760 [ 141.888613][ T7100] do_sys_openat2+0x115/0x200 [ 141.888647][ T7100] ? __se_sys_futex+0x3a8/0x450 [ 141.888679][ T7100] ? __pfx_do_sys_openat2+0x10/0x10 [ 141.888718][ T7100] ? rcu_is_watching+0x16/0xb0 [ 141.888753][ T7100] __x64_sys_openat+0x138/0x170 [ 141.888792][ T7100] do_syscall_64+0x166/0x520 [ 141.888816][ T7100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.888839][ T7100] ? clear_bhb_loop+0x70/0xc0 [ 141.888867][ T7100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.888889][ T7100] RIP: 0033:0x7ffabcf5fd8e [ 141.888909][ T7100] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 141.888928][ T7100] RSP: 002b:00007ffabdee7f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 141.888952][ T7100] RAX: ffffffffffffffda RBX: 00007ffabdee86c0 RCX: 00007ffabcf5fd8e [ 141.888969][ T7100] RDX: 0000000000000002 RSI: 00007ffabd03641a RDI: ffffffffffffff9c [ 141.888984][ T7100] RBP: 00007ffabd036b20 R08: 0000000000000000 R09: 0000000000000000 [ 141.888998][ T7100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.889011][ T7100] R13: 00007ffabd226038 R14: 00007ffabd225fa0 R15: 00007ffe5992cbf8 [ 141.889047][ T7100] [ 141.889615][ T7100] FAULT_INJECTION: forcing a failure. [ 141.889615][ T7100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.889642][ T7100] CPU: 1 UID: 0 PID: 7100 Comm: syz.0.467 Not tainted syzkaller #0 PREEMPT(full) [ 141.889666][ T7100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 141.889679][ T7100] Call Trace: [ 141.889687][ T7100] [ 141.889695][ T7100] dump_stack_lvl+0xe8/0x150 [ 141.889730][ T7100] should_fail_ex+0x3eb/0x540 [ 141.889761][ T7100] _copy_from_iter+0x1d3/0x1680 [ 141.889799][ T7100] ? __pfx__copy_from_iter+0x10/0x10 [ 141.889821][ T7100] ? trace_kmalloc+0x2a/0xf0 [ 141.889848][ T7100] ? __kmalloc_noprof+0x387/0x710 [ 141.889870][ T7100] ? __kmalloc_noprof+0x1a6/0x710 [ 141.889891][ T7100] ? kernfs_fop_write_iter+0x157/0x540 [ 141.889922][ T7100] kernfs_fop_write_iter+0x19a/0x540 [ 141.889951][ T7100] vfs_write+0x612/0xba0 [ 141.889986][ T7100] ? __pfx_vfs_write+0x10/0x10 [ 141.890016][ T7100] ? __fget_files+0x3a2/0x420 [ 141.890038][ T7100] ? __fget_files+0x2a/0x420 [ 141.890067][ T7100] ? fdget+0x1ac/0x250 [ 141.890098][ T7100] ksys_write+0x150/0x270 [ 141.890127][ T7100] ? __pfx_ksys_write+0x10/0x10 [ 141.890166][ T7100] do_syscall_64+0x166/0x520 [ 141.890189][ T7100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.890212][ T7100] ? clear_bhb_loop+0x70/0xc0 [ 141.890240][ T7100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.890262][ T7100] RIP: 0033:0x7ffabcf9f559 [ 141.890281][ T7100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.890300][ T7100] RSP: 002b:00007ffabdee8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 141.890321][ T7100] RAX: ffffffffffffffda RBX: 00007ffabd225fa0 RCX: 00007ffabcf9f559 [ 141.890338][ T7100] RDX: 0000000000000003 RSI: 0000200000000800 RDI: 0000000000000003 [ 141.890352][ T7100] RBP: 00007ffabdee8090 R08: 0000000000000000 R09: 0000000000000000 [ 141.890365][ T7100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.890379][ T7100] R13: 00007ffabd226038 R14: 00007ffabd225fa0 R15: 00007ffe5992cbf8 [ 141.890415][ T7100] [ 142.542432][ T7109] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 142.572622][ T7109] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 142.727191][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.472'. [ 142.877893][ T7122] FAULT_INJECTION: forcing a failure. [ 142.877893][ T7122] name failslab, interval 1, probability 0, space 0, times 0 [ 142.877928][ T7122] CPU: 0 UID: 0 PID: 7122 Comm: syz.3.475 Not tainted syzkaller #0 PREEMPT(full) [ 142.877955][ T7122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 142.877969][ T7122] Call Trace: [ 142.877978][ T7122] [ 142.877987][ T7122] dump_stack_lvl+0xe8/0x150 [ 142.878026][ T7122] should_fail_ex+0x3eb/0x540 [ 142.878059][ T7122] should_failslab+0xa8/0x100 [ 142.878089][ T7122] ? security_file_alloc+0x34/0x310 [ 142.878125][ T7122] kmem_cache_alloc_noprof+0x9c/0x600 [ 142.878160][ T7122] ? rcu_is_watching+0x16/0xb0 [ 142.878190][ T7122] ? security_file_alloc+0x34/0x310 [ 142.878231][ T7122] security_file_alloc+0x34/0x310 [ 142.878266][ T7122] init_file+0x90/0x2b0 [ 142.878301][ T7122] alloc_empty_file+0x74/0x1d0 [ 142.878335][ T7122] path_openat+0x96/0x20f0 [ 142.878401][ T7122] do_file_open+0x23e/0x4a0 [ 142.878437][ T7122] ? __pfx_do_file_open+0x10/0x10 [ 142.878490][ T7122] ? _raw_spin_unlock+0x28/0x50 [ 142.878523][ T7122] ? alloc_fd+0x6af/0x760 [ 142.878558][ T7122] do_sys_openat2+0x115/0x200 [ 142.878595][ T7122] ? __pfx_do_sys_openat2+0x10/0x10 [ 142.878636][ T7122] ? do_user_addr_fault+0xd3f/0x1480 [ 142.878666][ T7122] __x64_sys_openat+0x138/0x170 [ 142.878705][ T7122] do_syscall_64+0x166/0x520 [ 142.878729][ T7122] ? trace_irq_disable+0x3b/0x140 [ 142.878756][ T7122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.878780][ T7122] ? clear_bhb_loop+0x70/0xc0 [ 142.878820][ T7122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.878842][ T7122] RIP: 0033:0x7fb25a15fd8e [ 142.878862][ T7122] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 142.878893][ T7122] RSP: 002b:00007fb25afc3ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 142.878916][ T7122] RAX: ffffffffffffffda RBX: 00007fb25afc66c0 RCX: 00007fb25a15fd8e [ 142.878931][ T7122] RDX: 0000000000000002 RSI: 00007fb25a235eb2 RDI: ffffffffffffff9c [ 142.878946][ T7122] RBP: 00007fb25a236b20 R08: 0000000000000000 R09: 0000000000000000 [ 142.878959][ T7122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000082 [ 142.878972][ T7122] R13: 0000200000000100 R14: 0000000000000003 R15: 00007ffd3176a0c8 [ 142.879003][ T7122] [ 143.018753][ T7125] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 143.028667][ T7125] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 143.096589][ T7125] md: couldn't update array info. -22 [ 143.136781][ T7125] md: could not open device unknown-block(1,0). [ 143.136936][ T7125] md: md_import_device returned -16 [ 143.163336][ T1232] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 143.310680][ T1232] usb 4-1: Using ep0 maxpacket: 16 [ 143.311847][ T1232] usb 4-1: New USB device found: idVendor=18ec, idProduct=3188, bcdDevice=91.33 [ 143.312989][ T1232] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 143.313012][ T1232] usb 4-1: config 0 has no interface number 0 [ 143.313049][ T1232] usb 4-1: config 0 interface 84 has no altsetting 0 [ 143.316515][ T1232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.316540][ T1232] usb 4-1: Product: syz [ 143.316557][ T1232] usb 4-1: Manufacturer: syz [ 143.316572][ T1232] usb 4-1: SerialNumber: syz [ 143.330360][ T1232] usb 4-1: config 0 descriptor?? [ 143.486755][ T7140] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 143.517987][ T7140] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 143.626458][ T7144] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 143.703724][ T1232] uvcvideo 4-1:0.84: Found UVC 0.00 device syz (18ec:3188) [ 143.703774][ T1232] uvcvideo 4-1:0.84: No valid video chain found. [ 143.741978][ T1232] usb 4-1: USB disconnect, device number 18 [ 143.795610][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 143.958528][ T7154] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 143.999629][ T7154] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 144.249786][ T7154] md/raid1:md2: active with 1 out of 1 mirrors [ 144.265091][ T7169] FAULT_INJECTION: forcing a failure. [ 144.265091][ T7169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.265123][ T7169] CPU: 0 UID: 0 PID: 7169 Comm: syz.1.492 Not tainted syzkaller #0 PREEMPT(full) [ 144.265148][ T7169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 144.265162][ T7169] Call Trace: [ 144.265171][ T7169] [ 144.265180][ T7169] dump_stack_lvl+0xe8/0x150 [ 144.265217][ T7169] should_fail_ex+0x3eb/0x540 [ 144.265249][ T7169] _copy_from_user+0x2d/0xb0 [ 144.265287][ T7169] memdup_user_nul+0x66/0x110 [ 144.265310][ T7169] subsystem_filter_write+0x76/0xf0 [ 144.265341][ T7169] ? __pfx_subsystem_filter_write+0x10/0x10 [ 144.265371][ T7169] vfs_write+0x296/0xba0 [ 144.265407][ T7169] ? __pfx_vfs_write+0x10/0x10 [ 144.265436][ T7169] ? __fget_files+0x2a/0x420 [ 144.265458][ T7169] ? __fget_files+0x3a2/0x420 [ 144.265481][ T7169] ? __fget_files+0x2a/0x420 [ 144.265509][ T7169] ? fdget+0x1ac/0x250 [ 144.265541][ T7169] ksys_write+0x150/0x270 [ 144.265570][ T7169] ? __pfx_ksys_write+0x10/0x10 [ 144.265610][ T7169] do_syscall_64+0x166/0x520 [ 144.265633][ T7169] ? trace_irq_disable+0x3b/0x140 [ 144.265658][ T7169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.265681][ T7169] ? clear_bhb_loop+0x70/0xc0 [ 144.265709][ T7169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.265731][ T7169] RIP: 0033:0x7fe0e979f559 [ 144.265752][ T7169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.265771][ T7169] RSP: 002b:00007fe0ea70e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.265794][ T7169] RAX: ffffffffffffffda RBX: 00007fe0e9a25fa0 RCX: 00007fe0e979f559 [ 144.265811][ T7169] RDX: 0000000000000002 RSI: 00002000000006c0 RDI: 0000000000000003 [ 144.265826][ T7169] RBP: 00007fe0ea70e090 R08: 0000000000000000 R09: 0000000000000000 [ 144.265840][ T7169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.265853][ T7169] R13: 00007fe0e9a26038 R14: 00007fe0e9a25fa0 R15: 00007ffe704c3fe8 [ 144.265895][ T7169] [ 144.269457][ T7154] md2: detected capacity change from 0 to 4096 [ 144.604423][ T7178] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 144.625468][ T7178] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 144.783756][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 145.344203][ T7213] FAULT_INJECTION: forcing a failure. [ 145.344203][ T7213] name failslab, interval 1, probability 0, space 0, times 0 [ 145.344237][ T7213] CPU: 1 UID: 0 PID: 7213 Comm: syz.1.502 Not tainted syzkaller #0 PREEMPT(full) [ 145.344260][ T7213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 145.344273][ T7213] Call Trace: [ 145.344282][ T7213] [ 145.344291][ T7213] dump_stack_lvl+0xe8/0x150 [ 145.344325][ T7213] should_fail_ex+0x3eb/0x540 [ 145.344355][ T7213] ? __alloc_skb+0x1db/0x7a0 [ 145.344386][ T7213] should_failslab+0xa8/0x100 [ 145.344416][ T7213] ? __alloc_skb+0x1db/0x7a0 [ 145.344444][ T7213] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 145.344466][ T7213] ? __alloc_skb+0x18d/0x7a0 [ 145.344498][ T7213] ? __alloc_skb+0x1db/0x7a0 [ 145.344535][ T7213] __alloc_skb+0x1db/0x7a0 [ 145.344571][ T7213] netlink_sendmsg+0x5cd/0xb20 [ 145.344607][ T7213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.344641][ T7213] ? aa_sock_msg_perm+0x144/0x210 [ 145.344671][ T7213] ? apparmor_socket_sendmsg+0x98/0x360 [ 145.344709][ T7213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.344735][ T7213] sock_sendmsg_nosec+0x14e/0x190 [ 145.344764][ T7213] ____sys_sendmsg+0x54e/0x850 [ 145.344788][ T7213] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.344816][ T7213] ? import_iovec+0x73/0xa0 [ 145.344846][ T7213] ___sys_sendmsg+0x2a5/0x360 [ 145.344868][ T7213] ? __lock_acquire+0x747/0x2de0 [ 145.344897][ T7213] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.344947][ T7213] ? __fget_files+0x3a2/0x420 [ 145.344968][ T7213] ? __fget_files+0x2a/0x420 [ 145.345002][ T7213] __x64_sys_sendmsg+0x1b1/0x290 [ 145.345025][ T7213] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.345067][ T7213] do_syscall_64+0x166/0x520 [ 145.345088][ T7213] ? trace_irq_disable+0x3b/0x140 [ 145.345112][ T7213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.345132][ T7213] ? clear_bhb_loop+0x70/0xc0 [ 145.345158][ T7213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.345178][ T7213] RIP: 0033:0x7fe0e979f559 [ 145.345202][ T7213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.345220][ T7213] RSP: 002b:00007fe0ea70e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.345241][ T7213] RAX: ffffffffffffffda RBX: 00007fe0e9a25fa0 RCX: 00007fe0e979f559 [ 145.345256][ T7213] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 145.345269][ T7213] RBP: 00007fe0ea70e090 R08: 0000000000000000 R09: 0000000000000000 [ 145.345282][ T7213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.345294][ T7213] R13: 00007fe0e9a26038 R14: 00007fe0e9a25fa0 R15: 00007ffe704c3fe8 [ 145.345326][ T7213] [ 145.365161][ T7214] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 145.369190][ T7214] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 145.403024][ T7214] md: couldn't update array info. -22 [ 145.485704][ T7214] md: could not open device unknown-block(1,5). [ 145.485875][ T7214] md: md_import_device returned -16 [ 145.678272][ T7217] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 145.695391][ T7217] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 145.698303][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 145.849428][ T5790] wacom 0003:056A:003F.0008: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 145.982891][ T7227] fido_id[7227]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 146.155757][ T7239] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 146.157156][ T7239] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 146.191406][ T7239] md: couldn't update array info. -22 [ 146.346643][ T7246] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 146.385878][ T7246] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 146.684507][ T7258] FAULT_INJECTION: forcing a failure. [ 146.684507][ T7258] name failslab, interval 1, probability 0, space 0, times 0 [ 146.684548][ T7258] CPU: 1 UID: 0 PID: 7258 Comm: syz.1.518 Not tainted syzkaller #0 PREEMPT(full) [ 146.684573][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 146.684587][ T7258] Call Trace: [ 146.684595][ T7258] [ 146.684604][ T7258] dump_stack_lvl+0xe8/0x150 [ 146.684641][ T7258] should_fail_ex+0x3eb/0x540 [ 146.684673][ T7258] should_failslab+0xa8/0x100 [ 146.684704][ T7258] __kmalloc_noprof+0xf9/0x710 [ 146.684728][ T7258] ? tomoyo_encode+0x2ad/0x570 [ 146.684753][ T7258] ? tomoyo_encode+0x2ad/0x570 [ 146.684787][ T7258] tomoyo_encode+0x2ad/0x570 [ 146.684820][ T7258] tomoyo_realpath_from_path+0x5fa/0x640 [ 146.684859][ T7258] ? tomoyo_path_number_perm+0x219/0x5f0 [ 146.684886][ T7258] tomoyo_path_number_perm+0x246/0x5f0 [ 146.684913][ T7258] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 146.684934][ T7258] ? __lock_acquire+0x747/0x2de0 [ 146.685010][ T7258] ? __fget_files+0x2a/0x420 [ 146.685037][ T7258] ? __fget_files+0x2a/0x420 [ 146.685060][ T7258] ? __fget_files+0x2a/0x420 [ 146.685087][ T7258] security_file_ioctl+0xc3/0x2a0 [ 146.685122][ T7258] __se_sys_ioctl+0x47/0x170 [ 146.685153][ T7258] do_syscall_64+0x166/0x520 [ 146.685176][ T7258] ? trace_irq_disable+0x3b/0x140 [ 146.685201][ T7258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.685222][ T7258] ? clear_bhb_loop+0x70/0xc0 [ 146.685249][ T7258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.685270][ T7258] RIP: 0033:0x7fe0e979f559 [ 146.685290][ T7258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.685308][ T7258] RSP: 002b:00007fe0ea70e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.685331][ T7258] RAX: ffffffffffffffda RBX: 00007fe0e9a25fa0 RCX: 00007fe0e979f559 [ 146.685347][ T7258] RDX: 0000200000000500 RSI: 00000000c0306201 RDI: 0000000000000003 [ 146.685361][ T7258] RBP: 00007fe0ea70e090 R08: 0000000000000000 R09: 0000000000000000 [ 146.685374][ T7258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.685387][ T7258] R13: 00007fe0e9a26038 R14: 00007fe0e9a25fa0 R15: 00007ffe704c3fe8 [ 146.685423][ T7258] [ 146.687096][ T7258] ERROR: Out of memory at tomoyo_realpath_from_path. [ 146.910181][ T7260] binder: BINDER_SET_CONTEXT_MGR already set [ 147.265326][ T7268] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 147.267985][ T7268] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 147.311783][ T7268] md: couldn't update array info. -22 [ 147.458619][ T7279] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 147.493364][ T7279] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 147.529115][ T4953] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 147.549407][ T7284] FAULT_INJECTION: forcing a failure. [ 147.549407][ T7284] name failslab, interval 1, probability 0, space 0, times 0 [ 147.550410][ T7284] CPU: 1 UID: 0 PID: 7284 Comm: syz.3.528 Not tainted syzkaller #0 PREEMPT(full) [ 147.550446][ T7284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 147.550460][ T7284] Call Trace: [ 147.550472][ T7284] [ 147.550483][ T7284] dump_stack_lvl+0xe8/0x150 [ 147.550523][ T7284] should_fail_ex+0x3eb/0x540 [ 147.550559][ T7284] should_failslab+0xa8/0x100 [ 147.550592][ T7284] ? anon_vma_fork+0x10b/0x4d0 [ 147.550629][ T7284] kmem_cache_alloc_noprof+0x9c/0x600 [ 147.550668][ T7284] ? anon_vma_fork+0x6a/0x4d0 [ 147.550702][ T7284] ? kmem_cache_alloc_noprof+0x151/0x600 [ 147.550740][ T7284] ? anon_vma_fork+0x10b/0x4d0 [ 147.550783][ T7284] anon_vma_fork+0x10b/0x4d0 [ 147.550819][ T7284] ? vm_area_dup+0x564/0x760 [ 147.550858][ T7284] dup_mmap+0x9a8/0x1e10 [ 147.550915][ T7284] ? __pfx_dup_mmap+0x10/0x10 [ 147.550953][ T7284] ? do_raw_spin_lock+0x12b/0x2f0 [ 147.551006][ T7284] ? lock_acquire+0x115/0x350 [ 147.551063][ T7284] copy_mm+0x115/0x470 [ 147.551100][ T7284] copy_process+0x1ecc/0x44b0 [ 147.551145][ T7284] ? copy_process+0xd17/0x44b0 [ 147.551195][ T7284] ? __pfx_copy_process+0x10/0x10 [ 147.551228][ T7284] ? futex_private_hash_put+0x132/0x160 [ 147.551270][ T7284] kernel_clone+0x2d7/0x940 [ 147.551301][ T7284] ? __pfx_futex_wake+0x10/0x10 [ 147.551331][ T7284] ? __pfx_kernel_clone+0x10/0x10 [ 147.551372][ T7284] ? do_futex+0x458/0x4e0 [ 147.551415][ T7284] __x64_sys_clone+0x1b6/0x230 [ 147.551451][ T7284] ? __pfx___x64_sys_clone+0x10/0x10 [ 147.551502][ T7284] ? rcu_is_watching+0x16/0xb0 [ 147.551550][ T7284] do_syscall_64+0x166/0x520 [ 147.551579][ T7284] ? trace_irq_disable+0x3b/0x140 [ 147.551610][ T7284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.551636][ T7284] ? clear_bhb_loop+0x70/0xc0 [ 147.551668][ T7284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.551694][ T7284] RIP: 0033:0x7fb25a19f559 [ 147.551717][ T7284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.551738][ T7284] RSP: 002b:00007fb25afc5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 147.551765][ T7284] RAX: ffffffffffffffda RBX: 00007fb25a425fa0 RCX: 00007fb25a19f559 [ 147.551783][ T7284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004200 [ 147.551798][ T7284] RBP: 00007fb25a236b20 R08: 0000000000000000 R09: 0000000000000000 [ 147.551814][ T7284] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 147.551829][ T7284] R13: 00007fb25a426038 R14: 00007fb25a425fa0 R15: 00007ffd3176a0c8 [ 147.551868][ T7284] [ 147.862979][ T7287] FAULT_INJECTION: forcing a failure. [ 147.862979][ T7287] name failslab, interval 1, probability 0, space 0, times 0 [ 147.863010][ T7287] CPU: 1 UID: 0 PID: 7287 Comm: syz.3.529 Not tainted syzkaller #0 PREEMPT(full) [ 147.863041][ T7287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 147.863053][ T7287] Call Trace: [ 147.863062][ T7287] [ 147.863071][ T7287] dump_stack_lvl+0xe8/0x150 [ 147.863106][ T7287] should_fail_ex+0x3eb/0x540 [ 147.863138][ T7287] should_failslab+0xa8/0x100 [ 147.863169][ T7287] __kmalloc_cache_node_noprof+0xa5/0x620 [ 147.863195][ T7287] ? __get_vm_area_node+0x155/0x2f0 [ 147.863224][ T7287] ? __get_vm_area_node+0x155/0x2f0 [ 147.863261][ T7287] __get_vm_area_node+0x155/0x2f0 [ 147.863298][ T7287] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 147.863332][ T7287] ? copy_process+0x7ea/0x44b0 [ 147.863373][ T7287] ? percpu_ref_get_many+0x19/0x140 [ 147.863412][ T7287] ? __memcg_slab_post_alloc_hook+0x46f/0xdb0 [ 147.863450][ T7287] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 147.863484][ T7287] ? dup_task_struct+0x52/0xa00 [ 147.863506][ T7287] ? trace_kmem_cache_alloc+0x29/0xe0 [ 147.863541][ T7287] ? memcpy_and_pad+0x48/0x80 [ 147.863576][ T7287] __vmalloc_node_noprof+0xc2/0x100 [ 147.863608][ T7287] ? copy_process+0x7ea/0x44b0 [ 147.863630][ T7287] ? copy_process+0x7ea/0x44b0 [ 147.863658][ T7287] dup_task_struct+0x2c6/0xa00 [ 147.863691][ T7287] copy_process+0x7ea/0x44b0 [ 147.863735][ T7287] ? kstrtouint+0x6e/0xe0 [ 147.863769][ T7287] ? lock_acquire+0x115/0x350 [ 147.863793][ T7287] ? get_pid_task+0x20/0x1f0 [ 147.863818][ T7287] ? __pfx_copy_process+0x10/0x10 [ 147.863844][ T7287] ? get_pid_task+0x20/0x1f0 [ 147.863863][ T7287] ? get_pid_task+0x20/0x1f0 [ 147.863901][ T7287] kernel_clone+0x2d7/0x940 [ 147.863933][ T7287] ? __pfx_kernel_clone+0x10/0x10 [ 147.863977][ T7287] __x64_sys_clone+0x1b6/0x230 [ 147.864007][ T7287] ? __pfx___x64_sys_clone+0x10/0x10 [ 147.864056][ T7287] ? __pfx_ksys_write+0x10/0x10 [ 147.864092][ T7287] do_syscall_64+0x166/0x520 [ 147.864113][ T7287] ? trace_irq_disable+0x3b/0x140 [ 147.864137][ T7287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.864158][ T7287] ? clear_bhb_loop+0x70/0xc0 [ 147.864201][ T7287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.864223][ T7287] RIP: 0033:0x7fb25a19f559 [ 147.864243][ T7287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.864261][ T7287] RSP: 002b:00007fb25afc5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 147.864284][ T7287] RAX: ffffffffffffffda RBX: 00007fb25a425fa0 RCX: 00007fb25a19f559 [ 147.864300][ T7287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004200 [ 147.864313][ T7287] RBP: 00007fb25afc6090 R08: 0000000000000000 R09: 0000000000000000 [ 147.864327][ T7287] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 147.864340][ T7287] R13: 00007fb25a426038 R14: 00007fb25a425fa0 R15: 00007ffd3176a0c8 [ 147.864374][ T7287] [ 147.864413][ T7287] syz.3.529: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 147.864487][ T7287] CPU: 1 UID: 0 PID: 7287 Comm: syz.3.529 Not tainted syzkaller #0 PREEMPT(full) [ 147.864512][ T7287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 147.864524][ T7287] Call Trace: [ 147.864532][ T7287] [ 147.864541][ T7287] dump_stack_lvl+0xe8/0x150 [ 147.864572][ T7287] warn_alloc+0x24d/0x270 [ 147.864594][ T7287] ? __kasan_kmalloc+0x22/0xb0 [ 147.864625][ T7287] ? __pfx_warn_alloc+0x10/0x10 [ 147.864646][ T7287] ? __get_vm_area_node+0x155/0x2f0 [ 147.864683][ T7287] ? __get_vm_area_node+0x2a9/0x2f0 [ 147.864722][ T7287] __vmalloc_node_range_noprof+0x396/0x16f0 [ 147.864768][ T7287] ? percpu_ref_get_many+0x19/0x140 [ 147.864806][ T7287] ? __memcg_slab_post_alloc_hook+0x46f/0xdb0 [ 147.864845][ T7287] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 147.864879][ T7287] ? dup_task_struct+0x52/0xa00 [ 147.864902][ T7287] ? trace_kmem_cache_alloc+0x29/0xe0 [ 147.864936][ T7287] ? memcpy_and_pad+0x48/0x80 [ 147.864971][ T7287] __vmalloc_node_noprof+0xc2/0x100 [ 147.865003][ T7287] ? copy_process+0x7ea/0x44b0 [ 147.865034][ T7287] ? copy_process+0x7ea/0x44b0 [ 147.865062][ T7287] dup_task_struct+0x2c6/0xa00 [ 147.865095][ T7287] copy_process+0x7ea/0x44b0 [ 147.865138][ T7287] ? kstrtouint+0x6e/0xe0 [ 147.865173][ T7287] ? lock_acquire+0x115/0x350 [ 147.865196][ T7287] ? get_pid_task+0x20/0x1f0 [ 147.865221][ T7287] ? __pfx_copy_process+0x10/0x10 [ 147.865247][ T7287] ? get_pid_task+0x20/0x1f0 [ 147.865265][ T7287] ? get_pid_task+0x20/0x1f0 [ 147.865293][ T7287] kernel_clone+0x2d7/0x940 [ 147.865327][ T7287] ? __pfx_kernel_clone+0x10/0x10 [ 147.865375][ T7287] __x64_sys_clone+0x1b6/0x230 [ 147.865407][ T7287] ? __pfx___x64_sys_clone+0x10/0x10 [ 147.865453][ T7287] ? __pfx_ksys_write+0x10/0x10 [ 147.865489][ T7287] do_syscall_64+0x166/0x520 [ 147.865511][ T7287] ? trace_irq_disable+0x3b/0x140 [ 147.865535][ T7287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.865557][ T7287] ? clear_bhb_loop+0x70/0xc0 [ 147.865587][ T7287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.865608][ T7287] RIP: 0033:0x7fb25a19f559 [ 147.865631][ T7287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.865650][ T7287] RSP: 002b:00007fb25afc5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 147.865671][ T7287] RAX: ffffffffffffffda RBX: 00007fb25a425fa0 RCX: 00007fb25a19f559 [ 147.865709][ T7287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004200 [ 147.865723][ T7287] RBP: 00007fb25afc6090 R08: 0000000000000000 R09: 0000000000000000 [ 147.865737][ T7287] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 147.865751][ T7287] R13: 00007fb25a426038 R14: 00007fb25a425fa0 R15: 00007ffd3176a0c8 [ 147.865787][ T7287] [ 147.865920][ T7287] Mem-Info: [ 147.865931][ T7287] active_anon:5628 inactive_anon:7 isolated_anon:0 [ 147.865931][ T7287] active_file:9779 inactive_file:42889 isolated_file:0 [ 147.865931][ T7287] unevictable:0 dirty:458 writeback:0 [ 147.865931][ T7287] slab_reclaimable:11372 slab_unreclaimable:93861 [ 147.865931][ T7287] mapped:25475 shmem:521 pagetables:1423 [ 147.865931][ T7287] sec_pagetables:10 bounce:0 [ 147.865931][ T7287] kernel_misc_reclaimable:0 [ 147.865931][ T7287] free:1319438 free_pcp:12818 free_cma:0 [ 147.865990][ T7287] Node 0 active_anon:22512kB inactive_anon:28kB active_file:39116kB inactive_file:171348kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:101900kB dirty:1828kB writeback:0kB shmem:2084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11980kB pagetables:5560kB sec_pagetables:40kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 147.866060][ T7287] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 147.866117][ T7287] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 147.866181][ T7287] lowmem_reserve[]: 0 2460 2461 2461 2461 [ 147.866223][ T7287] Node 0 DMA32 free:1331848kB boost:0kB min:33916kB low:42392kB high:50868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22512kB inactive_anon:28kB active_file:39116kB inactive_file:171348kB unevictable:0kB writepending:1828kB zspages:0kB present:3129332kB managed:2519620kB mlocked:0kB bounce:0kB free_pcp:51236kB local_pcp:27272kB free_cma:0kB [ 147.866290][ T7287] lowmem_reserve[]: 0 0 1 1 1 [ 147.866329][ T7287] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1320kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 147.866391][ T7287] lowmem_reserve[]: 0 0 0 0 0 [ 147.866429][ T7287] Node 1 Normal free:3930544kB boost:0kB min:55968kB low:69960kB high:83952kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 147.866493][ T7287] lowmem_reserve[]: 0 0 0 0 0 [ 147.866531][ T7287] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 147.866735][ T7287] Node 0 DMA32: 1386*4kB (UME) 460*8kB (UM) 273*16kB (UME) 187*32kB (ME) 111*64kB (M) 55*128kB (UME) 27*256kB (UME) 4*512kB (M) 3*1024kB (UM) 4*2048kB (UM) 312*4096kB (M) = 1331896kB [ 147.866922][ T7287] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 147.867036][ T7287] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 7*16kB (UM) 9*32kB (UM) 10*64kB (UM) 3*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 957*4096kB (M) = 3930544kB [ 147.867202][ T7287] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.867221][ T7287] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 147.867239][ T7287] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.867256][ T7287] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 147.867273][ T7287] 53185 total pagecache pages [ 147.867282][ T7287] 0 pages in swap cache [ 147.867289][ T7287] Free swap = 124996kB [ 147.867298][ T7287] Total swap = 124996kB [ 147.867306][ T7287] 2097051 pages RAM [ 147.867314][ T7287] 0 pages HighMem/MovableOnly [ 147.867321][ T7287] 435200 pages reserved [ 147.867328][ T7287] 0 pages cma reserved [ 149.148692][ T7305] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 149.161784][ T7305] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 149.212133][ T7305] md: could not open device unknown-block(1,2). [ 149.212197][ T7305] md: md_import_device returned -16 [ 149.512015][ T7314] 9p: Bad value for 'wfdno' [ 149.638807][ T7316] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 149.699975][ T7316] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 150.463740][ T7327] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 150.517560][ T7329] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 150.567405][ T7332] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 150.567428][ T7332] block device autoloading is deprecated and will be removed. [ 150.587524][ T7327] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 150.910344][ T7336] Bluetooth: MGMT ver 1.23 [ 150.910395][ T7336] Bluetooth: hci0: unsupported parameter 5135 [ 150.910411][ T7336] Bluetooth: hci0: invalid len left 9, exp >= 19 [ 151.127265][ T7342] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 151.168644][ T7342] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 151.487906][ T7351] FAULT_INJECTION: forcing a failure. [ 151.487906][ T7351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.487938][ T7351] CPU: 1 UID: 0 PID: 7351 Comm: syz.1.553 Not tainted syzkaller #0 PREEMPT(full) [ 151.487962][ T7351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 151.487975][ T7351] Call Trace: [ 151.487983][ T7351] [ 151.487992][ T7351] dump_stack_lvl+0xe8/0x150 [ 151.488026][ T7351] should_fail_ex+0x3eb/0x540 [ 151.488057][ T7351] _copy_from_user+0x2d/0xb0 [ 151.488085][ T7351] ___sys_recvmsg+0x173/0x5a0 [ 151.488115][ T7351] ? __pfx____sys_recvmsg+0x10/0x10 [ 151.488146][ T7351] ? lock_acquire+0x115/0x350 [ 151.488184][ T7351] ? __fget_files+0x2a/0x420 [ 151.488207][ T7351] ? __fget_files+0x3a2/0x420 [ 151.488229][ T7351] ? __fget_files+0x2a/0x420 [ 151.488261][ T7351] __x64_sys_recvmsg+0x1ae/0x290 [ 151.488287][ T7351] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 151.488333][ T7351] do_syscall_64+0x166/0x520 [ 151.488365][ T7351] ? trace_irq_disable+0x3b/0x140 [ 151.488389][ T7351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.488427][ T7351] ? clear_bhb_loop+0x70/0xc0 [ 151.488453][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.488475][ T7351] RIP: 0033:0x7fe0e979f559 [ 151.488494][ T7351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.488513][ T7351] RSP: 002b:00007fe0ea70e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 151.488536][ T7351] RAX: ffffffffffffffda RBX: 00007fe0e9a25fa0 RCX: 00007fe0e979f559 [ 151.488551][ T7351] RDX: 0000000040000180 RSI: 0000200000001000 RDI: 0000000000000003 [ 151.488585][ T7351] RBP: 00007fe0ea70e090 R08: 0000000000000000 R09: 0000000000000000 [ 151.488598][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.488610][ T7351] R13: 00007fe0e9a26038 R14: 00007fe0e9a25fa0 R15: 00007ffe704c3fe8 [ 151.488642][ T7351] [ 151.927422][ T7357] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 151.928766][ T7357] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 151.962022][ T7357] md: could not open device unknown-block(1,0). [ 151.962082][ T7357] md: md_import_device returned -16 [ 152.433315][ T1232] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 152.511554][ T5790] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 152.580533][ T1232] usb 4-1: Using ep0 maxpacket: 8 [ 152.581768][ T1232] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.583090][ T1232] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 152.583141][ T1232] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 152.583170][ T1232] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 152.583196][ T1232] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 152.583223][ T1232] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 152.583247][ T1232] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.583290][ T1232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.701323][ T5790] usb 2-1: New USB device found: idVendor=041e, idProduct=3020, bcdDevice=0.40 [ 152.703855][ T5790] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.704858][ T5790] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.709586][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.709612][ T5790] usb 2-1: Product: syz [ 152.709627][ T5790] usb 2-1: Manufacturer: syz [ 152.709644][ T5790] usb 2-1: SerialNumber: syz [ 153.034698][ T5790] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 153.046953][ T5790] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 153.046987][ T5790] usb 2-1: found format II with max.bitrate = 44931, frame size=8 [ 153.047154][ T5790] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 153.047175][ T5790] usb 2-1: found format II with max.bitrate = 44931, frame size=8 [ 153.094952][ T5790] usb 2-1: 2:1: cannot set freq 4584960 to ep 0x82 [ 153.162864][ T1232] usb 4-1: usb_control_msg returned -32 [ 153.162917][ T1232] usbtmc 4-1:16.0: can't read capabilities [ 153.233911][ T5790] usb 2-1: USB disconnect, device number 19 [ 153.470271][ T7369] udevd[7369]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.734232][ T7376] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 153.736241][ T7376] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 153.811108][ T7377] md: could not open device unknown-block(1,2). [ 153.811171][ T7377] md: md_import_device returned -16 [ 153.813616][ T7376] md: couldn't update array info. -22 [ 153.878854][ T7376] md1: detected capacity change from 4096 to 0 [ 153.878875][ T7376] md: md1 stopped. [ 154.763399][ T7391] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 154.805632][ T7391] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 155.052358][ T7393] Bluetooth: hci0: unsupported parameter 5135 [ 155.052383][ T7393] Bluetooth: hci0: invalid len left 9, exp >= 19 [ 155.199529][ T1563] usb 4-1: USB disconnect, device number 19 [ 155.264638][ T7396] FAULT_INJECTION: forcing a failure. [ 155.264638][ T7396] name failslab, interval 1, probability 0, space 0, times 0 [ 155.264669][ T7396] CPU: 1 UID: 0 PID: 7396 Comm: syz.1.569 Not tainted syzkaller #0 PREEMPT(full) [ 155.264693][ T7396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 155.264707][ T7396] Call Trace: [ 155.264716][ T7396] [ 155.264725][ T7396] dump_stack_lvl+0xe8/0x150 [ 155.264762][ T7396] should_fail_ex+0x3eb/0x540 [ 155.264791][ T7396] ? __alloc_skb+0x1db/0x7a0 [ 155.264822][ T7396] should_failslab+0xa8/0x100 [ 155.264852][ T7396] ? __alloc_skb+0x1db/0x7a0 [ 155.264881][ T7396] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 155.264903][ T7396] ? __alloc_skb+0x18d/0x7a0 [ 155.264934][ T7396] ? __alloc_skb+0x1db/0x7a0 [ 155.264971][ T7396] __alloc_skb+0x1db/0x7a0 [ 155.265007][ T7396] netlink_sendmsg+0x5cd/0xb20 [ 155.265044][ T7396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.265078][ T7396] ? aa_sock_msg_perm+0x144/0x210 [ 155.265113][ T7396] ? apparmor_socket_sendmsg+0x98/0x360 [ 155.265137][ T7396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.265166][ T7396] sock_sendmsg_nosec+0x14e/0x190 [ 155.265197][ T7396] ____sys_sendmsg+0x54e/0x850 [ 155.265232][ T7396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.265275][ T7396] ? import_iovec+0x73/0xa0 [ 155.265303][ T7396] ___sys_sendmsg+0x2a5/0x360 [ 155.265321][ T7396] ? __lock_acquire+0x747/0x2de0 [ 155.265348][ T7396] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.265404][ T7396] ? __fget_files+0x3a2/0x420 [ 155.265425][ T7396] ? __fget_files+0x2a/0x420 [ 155.265456][ T7396] __x64_sys_sendmsg+0x1b1/0x290 [ 155.265479][ T7396] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.265540][ T7396] do_syscall_64+0x166/0x520 [ 155.265562][ T7396] ? trace_irq_disable+0x3b/0x140 [ 155.265588][ T7396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.265610][ T7396] ? clear_bhb_loop+0x70/0xc0 [ 155.265637][ T7396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.265659][ T7396] RIP: 0033:0x7fe0e979f559 [ 155.265690][ T7396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.265707][ T7396] RSP: 002b:00007fe0ea70e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.265729][ T7396] RAX: ffffffffffffffda RBX: 00007fe0e9a25fa0 RCX: 00007fe0e979f559 [ 155.265743][ T7396] RDX: 0000000000000040 RSI: 0000200000000380 RDI: 0000000000000004 [ 155.265756][ T7396] RBP: 00007fe0ea70e090 R08: 0000000000000000 R09: 0000000000000000 [ 155.265769][ T7396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.265781][ T7396] R13: 00007fe0e9a26038 R14: 00007fe0e9a25fa0 R15: 00007ffe704c3fe8 [ 155.265813][ T7396] [ 155.659856][ T7404] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 155.666237][ T7404] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 155.720024][ T7406] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 155.857724][ T7409] md/raid1:md1: active with 1 out of 1 mirrors [ 155.858503][ T7409] md1: detected capacity change from 0 to 4096 [ 155.888621][ T7404] md1: detected capacity change from 4096 to 0 [ 155.888641][ T7404] md: md1 stopped. [ 155.978019][ T7413] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 156.002915][ T7413] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 156.074611][ T7415] FAULT_INJECTION: forcing a failure. [ 156.074611][ T7415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.074638][ T7415] CPU: 1 UID: 0 PID: 7415 Comm: syz.1.577 Not tainted syzkaller #0 PREEMPT(full) [ 156.074661][ T7415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 156.074673][ T7415] Call Trace: [ 156.074681][ T7415] [ 156.074689][ T7415] dump_stack_lvl+0xe8/0x150 [ 156.074723][ T7415] should_fail_ex+0x3eb/0x540 [ 156.074752][ T7415] _copy_from_iter+0x1d3/0x1680 [ 156.074782][ T7415] ? rcu_is_watching+0x16/0xb0 [ 156.074809][ T7415] ? file_tty_write+0x2a0/0xa20 [ 156.074838][ T7415] ? trace_kmalloc+0x2a/0xf0 [ 156.074859][ T7415] ? __pfx__copy_from_iter+0x10/0x10 [ 156.074879][ T7415] ? file_tty_write+0x2a0/0xa20 [ 156.074905][ T7415] ? rcu_is_watching+0x16/0xb0 [ 156.074932][ T7415] ? kfree+0x4d/0x650 [ 156.074968][ T7415] file_tty_write+0x48c/0xa20 [ 156.075002][ T7415] vfs_write+0x612/0xba0 [ 156.075035][ T7415] ? __pfx_vfs_write+0x10/0x10 [ 156.075062][ T7415] ? __fget_files+0x3a2/0x420 [ 156.075083][ T7415] ? __fget_files+0x2a/0x420 [ 156.075109][ T7415] ? fdget+0x1ac/0x250 [ 156.075137][ T7415] ksys_write+0x150/0x270 [ 156.075167][ T7415] ? __pfx_ksys_write+0x10/0x10 [ 156.075203][ T7415] do_syscall_64+0x166/0x520 [ 156.075224][ T7415] ? trace_irq_disable+0x3b/0x140 [ 156.075248][ T7415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.075268][ T7415] ? clear_bhb_loop+0x70/0xc0 [ 156.075293][ T7415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.075313][ T7415] RIP: 0033:0x7fe0e979f559 [ 156.075331][ T7415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.075350][ T7415] RSP: 002b:00007fe0ea70e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 156.075371][ T7415] RAX: ffffffffffffffda RBX: 00007fe0e9a25fa0 RCX: 00007fe0e979f559 [ 156.075386][ T7415] RDX: 0000000000001006 RSI: 0000200000000c40 RDI: 0000000000000004 [ 156.075399][ T7415] RBP: 00007fe0ea70e090 R08: 0000000000000000 R09: 0000000000000000 [ 156.075412][ T7415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.075424][ T7415] R13: 00007fe0e9a26038 R14: 00007fe0e9a25fa0 R15: 00007ffe704c3fe8 [ 156.075468][ T7415] [ 156.428694][ T7420] Bluetooth: hci0: unsupported parameter 5135 [ 156.428719][ T7420] Bluetooth: hci0: invalid len left 9, exp >= 19 [ 156.527756][ T7423] sctp: [Deprecated]: syz.3.580 (pid 7423) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.527756][ T7423] Use struct sctp_sack_info instead [ 156.970238][ T7432] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 156.993847][ T7432] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 157.030507][ T7432] md: array md3 already has disks! [ 157.060661][ T7432] md: ram6 has different UUID to ram7 [ 157.060678][ T7432] md: ram6 has different UUID to ram7 [ 157.078315][ T7434] FAULT_INJECTION: forcing a failure. [ 157.078315][ T7434] name failslab, interval 1, probability 0, space 0, times 0 [ 157.078407][ T7434] CPU: 1 UID: 0 PID: 7434 Comm: syz.0.585 Not tainted syzkaller #0 PREEMPT(full) [ 157.078482][ T7434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 157.078513][ T7434] Call Trace: [ 157.078541][ T7434] [ 157.078561][ T7434] dump_stack_lvl+0xe8/0x150 [ 157.078683][ T7434] should_fail_ex+0x3eb/0x540 [ 157.078776][ T7434] should_failslab+0xa8/0x100 [ 157.078858][ T7434] __kmalloc_noprof+0xf9/0x710 [ 157.078923][ T7434] ? rcu_is_watching+0x16/0xb0 [ 157.079017][ T7434] ? tomoyo_realpath_from_path+0xef/0x640 [ 157.079087][ T7434] ? tomoyo_realpath_from_path+0xef/0x640 [ 157.079177][ T7434] tomoyo_realpath_from_path+0xef/0x640 [ 157.079281][ T7434] tomoyo_check_open_permission+0x229/0x470 [ 157.079342][ T7434] ? tomoyo_check_open_permission+0x1d3/0x470 [ 157.079401][ T7434] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 157.079462][ T7434] ? __asan_memset+0x22/0x50 [ 157.079532][ T7434] ? seqcount_lockdep_reader_access+0xea/0x100 [ 157.079662][ T7434] ? devcgroup_check_permission+0x31/0x8f0 [ 157.079753][ T7434] security_file_open+0xa9/0x240 [ 157.079812][ T7434] do_dentry_open+0x495/0x1360 [ 157.079924][ T7434] vfs_open_consume+0x4a/0x350 [ 157.080004][ T7434] ? path_openat+0x16e1/0x20f0 [ 157.080070][ T7434] path_openat+0x16fc/0x20f0 [ 157.080201][ T7434] do_file_open+0x23e/0x4a0 [ 157.080301][ T7434] ? __pfx_do_file_open+0x10/0x10 [ 157.080438][ T7434] ? _raw_spin_unlock+0x28/0x50 [ 157.080519][ T7434] ? alloc_fd+0x6af/0x760 [ 157.080589][ T7434] do_sys_openat2+0x115/0x200 [ 157.080672][ T7434] ? __se_sys_futex+0x3a8/0x450 [ 157.080755][ T7434] ? __pfx_do_sys_openat2+0x10/0x10 [ 157.080855][ T7434] ? rcu_is_watching+0x16/0xb0 [ 157.080944][ T7434] __x64_sys_openat+0x138/0x170 [ 157.081037][ T7434] do_syscall_64+0x166/0x520 [ 157.081099][ T7434] ? trace_irq_disable+0x3b/0x140 [ 157.081168][ T7434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.081227][ T7434] ? clear_bhb_loop+0x70/0xc0 [ 157.081291][ T7434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.081362][ T7434] RIP: 0033:0x7ffabcf9f559 [ 157.081404][ T7434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.081423][ T7434] RSP: 002b:00007ffabdee8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 157.081445][ T7434] RAX: ffffffffffffffda RBX: 00007ffabd225fa0 RCX: 00007ffabcf9f559 [ 157.081461][ T7434] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 157.081476][ T7434] RBP: 00007ffabd036b20 R08: 0000000000000000 R09: 0000000000000000 [ 157.081490][ T7434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.081504][ T7434] R13: 00007ffabd226038 R14: 00007ffabd225fa0 R15: 00007ffe5992cbf8 [ 157.081550][ T7434] [ 157.108278][ T7434] ERROR: Out of memory at tomoyo_realpath_from_path. [ 157.184069][ T7432] md: could not open device unknown-block(1,7). [ 157.184220][ T7432] md: md_import_device returned -16 [ 157.208514][ T7432] md: md3 stopped. [ 157.543119][ T7438] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 158.901027][ T7477] FAULT_INJECTION: forcing a failure. [ 158.901027][ T7477] name failslab, interval 1, probability 0, space 0, times 0 [ 158.901061][ T7477] CPU: 0 UID: 0 PID: 7477 Comm: syz.1.599 Not tainted syzkaller #0 PREEMPT(full) [ 158.901086][ T7477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 158.901100][ T7477] Call Trace: [ 158.901109][ T7477] [ 158.901118][ T7477] dump_stack_lvl+0xe8/0x150 [ 158.901156][ T7477] should_fail_ex+0x3eb/0x540 [ 158.901190][ T7477] should_failslab+0xa8/0x100 [ 158.901221][ T7477] __kmalloc_noprof+0xf9/0x710 [ 158.901245][ T7477] ? tomoyo_encode+0x2ad/0x570 [ 158.901270][ T7477] ? tomoyo_encode+0x2ad/0x570 [ 158.901304][ T7477] tomoyo_encode+0x2ad/0x570 [ 158.901338][ T7477] tomoyo_realpath_from_path+0x5fa/0x640 [ 158.901378][ T7477] ? tomoyo_path_number_perm+0x219/0x5f0 [ 158.901401][ T7477] tomoyo_path_number_perm+0x246/0x5f0 [ 158.901428][ T7477] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 158.901449][ T7477] ? __lock_acquire+0x747/0x2de0 [ 158.901525][ T7477] ? __fget_files+0x2a/0x420 [ 158.901553][ T7477] ? __fget_files+0x2a/0x420 [ 158.901577][ T7477] ? __fget_files+0x2a/0x420 [ 158.901606][ T7477] security_file_ioctl+0xc3/0x2a0 [ 158.901644][ T7477] __se_sys_ioctl+0x47/0x170 [ 158.901676][ T7477] do_syscall_64+0x166/0x520 [ 158.901699][ T7477] ? trace_irq_disable+0x3b/0x140 [ 158.901725][ T7477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.901748][ T7477] ? clear_bhb_loop+0x70/0xc0 [ 158.901776][ T7477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.901798][ T7477] RIP: 0033:0x7fe0e979f559 [ 158.901818][ T7477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.901838][ T7477] RSP: 002b:00007fe0ea70e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.901861][ T7477] RAX: ffffffffffffffda RBX: 00007fe0e9a25fa0 RCX: 00007fe0e979f559 [ 158.901877][ T7477] RDX: 0000200000000180 RSI: 00000000c138fd0f RDI: 0000000000000003 [ 158.901892][ T7477] RBP: 00007fe0ea70e090 R08: 0000000000000000 R09: 0000000000000000 [ 158.901906][ T7477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.901919][ T7477] R13: 00007fe0e9a26038 R14: 00007fe0e9a25fa0 R15: 00007ffe704c3fe8 [ 158.901956][ T7477] [ 158.901993][ T7477] ERROR: Out of memory at tomoyo_realpath_from_path. [ 159.990632][ T7510] netlink: 20 bytes leftover after parsing attributes in process `syz.1.613'. [ 161.108503][ T7527] FAULT_INJECTION: forcing a failure. [ 161.108503][ T7527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.108535][ T7527] CPU: 0 UID: 0 PID: 7527 Comm: syz.1.619 Not tainted syzkaller #0 PREEMPT(full) [ 161.108559][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 161.108572][ T7527] Call Trace: [ 161.108580][ T7527] [ 161.108589][ T7527] dump_stack_lvl+0xe8/0x150 [ 161.108625][ T7527] should_fail_ex+0x3eb/0x540 [ 161.108657][ T7527] _copy_from_user+0x2d/0xb0 [ 161.108685][ T7527] memdup_user+0x5e/0xd0 [ 161.108707][ T7527] strndup_user+0x68/0xd0 [ 161.108727][ T7527] __se_sys_mount+0x9d/0x420 [ 161.108760][ T7527] ? ksys_write+0x242/0x270 [ 161.108788][ T7527] ? __pfx___se_sys_mount+0x10/0x10 [ 161.108818][ T7527] ? __x64_sys_mount+0x20/0xc0 [ 161.108842][ T7527] do_syscall_64+0x166/0x520 [ 161.108864][ T7527] ? trace_irq_disable+0x3b/0x140 [ 161.108890][ T7527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.108911][ T7527] ? clear_bhb_loop+0x70/0xc0 [ 161.108937][ T7527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.108959][ T7527] RIP: 0033:0x7fe0e979f559 [ 161.108979][ T7527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.108997][ T7527] RSP: 002b:00007fe0ea70e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 161.109021][ T7527] RAX: ffffffffffffffda RBX: 00007fe0e9a25fa0 RCX: 00007fe0e979f559 [ 161.109037][ T7527] RDX: 00002000000004c0 RSI: 0000200000000480 RDI: 0000000000000000 [ 161.109055][ T7527] RBP: 00007fe0ea70e090 R08: 0000200000000500 R09: 0000000000000000 [ 161.109069][ T7527] R10: 0000000001008441 R11: 0000000000000246 R12: 0000000000000001 [ 161.109083][ T7527] R13: 00007fe0e9a26038 R14: 00007fe0e9a25fa0 R15: 00007ffe704c3fe8 [ 161.109129][ T7527] [ 161.563935][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 161.567872][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 161.570971][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 161.594638][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 161.595304][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 161.630803][ T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 161.781778][ T31] usb 2-1: New USB device found: idVendor=1660, idProduct=0932, bcdDevice=1.00 [ 161.782836][ T31] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 161.782868][ T31] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 161.784922][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.784948][ T31] usb 2-1: Product: syz [ 161.784965][ T31] usb 2-1: Manufacturer: syz [ 161.784982][ T31] usb 2-1: SerialNumber: syz [ 161.838658][ T31] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 161.838714][ T31] usb 2-1: setting power ON [ 161.977532][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.027174][ T31] dvb-usb: bulk message failed: -71 (2/0) [ 162.055582][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 162.058085][ T31] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 162.058146][ T31] usb 2-1: media controller created [ 162.125553][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.154524][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.186306][ T31] usb 2-1: selecting invalid altsetting 6 [ 162.186331][ T31] usb 2-1: digital interface selection failed (-22) [ 162.186356][ T31] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 162.189432][ T31] usb 2-1: setting power OFF [ 162.218579][ T31] dvb-usb: bulk message failed: -71 (2/0) [ 162.218630][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 162.218678][ T31] usb 2-1: setting power ON [ 162.222199][ T31] dvb-usb: bulk message failed: -71 (2/0) [ 162.247205][ T31] usb 2-1: analog interface selection failed (-71) [ 162.343811][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.397140][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 162.397171][ T31] dvb_usb_cxusb 2-1:1.0: probe with driver dvb_usb_cxusb failed with error -71 [ 162.430278][ T31] usb 2-1: USB disconnect, device number 20 [ 162.473394][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.597773][ T7531] rxe_eth0 speed is unknown, defaulting to 1000 [ 162.719231][ T7560] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 162.949585][ T64] bridge_slave_1: left allmulticast mode [ 162.949630][ T64] bridge_slave_1: left promiscuous mode [ 162.950878][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.019600][ T64] bridge_slave_0: left allmulticast mode [ 163.019626][ T64] bridge_slave_0: left promiscuous mode [ 163.019841][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.352487][ T7588] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 163.631588][ T55] Bluetooth: hci4: command tx timeout [ 163.667249][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.694393][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.696050][ T64] bond0 (unregistering): Released all slaves [ 163.775995][ T7601] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 163.896487][ T5297] 8021q: adding VLAN 0 to HW filter on device eth1 [ 164.193091][ T7615] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 164.287326][ T7622] FAULT_INJECTION: forcing a failure. [ 164.287326][ T7622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.287355][ T7622] CPU: 0 UID: 0 PID: 7622 Comm: syz.1.648 Not tainted syzkaller #0 PREEMPT(full) [ 164.287384][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 164.287396][ T7622] Call Trace: [ 164.287403][ T7622] [ 164.287412][ T7622] dump_stack_lvl+0xe8/0x150 [ 164.287443][ T7622] should_fail_ex+0x3eb/0x540 [ 164.287470][ T7622] _copy_from_user+0x2d/0xb0 [ 164.287492][ T7622] sctp_setsockopt+0x1c4/0x12c0 [ 164.287515][ T7622] ? sock_common_setsockopt+0x36/0xc0 [ 164.287541][ T7622] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 164.287570][ T7622] do_sock_setsockopt+0x17c/0x1b0 [ 164.287609][ T7622] __x64_sys_setsockopt+0x13d/0x1b0 [ 164.287644][ T7622] do_syscall_64+0x166/0x520 [ 164.287664][ T7622] ? trace_irq_disable+0x3b/0x140 [ 164.287688][ T7622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.287708][ T7622] ? clear_bhb_loop+0x70/0xc0 [ 164.287733][ T7622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.287752][ T7622] RIP: 0033:0x7fe0e979f559 [ 164.287771][ T7622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.287789][ T7622] RSP: 002b:00007fe0ea6ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 164.287810][ T7622] RAX: ffffffffffffffda RBX: 00007fe0e9a26090 RCX: 00007fe0e979f559 [ 164.287824][ T7622] RDX: 0000000000000005 RSI: 0000000000000084 RDI: 0000000000000003 [ 164.287836][ T7622] RBP: 00007fe0ea6ed090 R08: 0000000000000084 R09: 0000000000000000 [ 164.287849][ T7622] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 164.287862][ T7622] R13: 00007fe0e9a26128 R14: 00007fe0e9a26090 R15: 00007ffe704c3fe8 [ 164.287893][ T7622] [ 164.883260][ T7635] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 165.000072][ T7635] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 165.279262][ T5297] 8021q: adding VLAN 0 to HW filter on device eth2 [ 165.343888][ T64] hsr_slave_0: left promiscuous mode [ 165.346461][ T64] hsr_slave_1: left promiscuous mode [ 165.347871][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.347905][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.373499][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.373557][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.408478][ T64] veth1_macvtap: left promiscuous mode [ 165.408533][ T64] veth0_macvtap: left promiscuous mode [ 165.408641][ T64] veth1_vlan: left promiscuous mode [ 165.408729][ T64] veth0_vlan: left promiscuous mode [ 165.684915][ T1232] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 165.710902][ T55] Bluetooth: hci4: command tx timeout [ 165.735311][ T64] team0 (unregistering): Port device team_slave_1 removed [ 165.759343][ T64] team0 (unregistering): Port device team_slave_0 removed [ 165.850522][ T1232] usb 2-1: Using ep0 maxpacket: 8 [ 165.851258][ T1232] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 165.852471][ T1232] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 165.852524][ T1232] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 165.852552][ T1232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 165.852582][ T1232] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 165.852601][ T1232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 165.852618][ T1232] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.852647][ T1232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.098453][ T1232] usb 2-1: usb_control_msg returned -32 [ 166.098500][ T1232] usbtmc 2-1:16.0: can't read capabilities [ 166.129273][ T7531] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.130362][ T7531] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.146452][ T7531] bridge_slave_0: entered allmulticast mode [ 166.149891][ T7531] bridge_slave_0: entered promiscuous mode [ 166.168197][ T7531] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.170282][ T7531] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.185273][ T7531] bridge_slave_1: entered allmulticast mode [ 166.187001][ T7531] bridge_slave_1: entered promiscuous mode [ 166.254031][ T7531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.257393][ T7531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.319557][ T7531] team0: Port device team_slave_0 added [ 166.329564][ T7531] team0: Port device team_slave_1 added [ 166.376952][ T7531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.376970][ T7531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.376998][ T7531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.428814][ T7531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.428832][ T7531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.428859][ T7531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.635060][ T7531] hsr_slave_0: entered promiscuous mode [ 166.636351][ T7531] hsr_slave_1: entered promiscuous mode [ 166.637868][ T7531] debugfs: 'hsr0' already exists in 'hsr' [ 166.637889][ T7531] Cannot create hsr debugfs directory [ 167.017884][ T7531] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 167.029033][ T7531] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 167.038047][ T7531] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 167.049774][ T7531] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.054362][ T7531] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 167.068020][ T7531] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.069307][ T7531] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 167.093862][ T7531] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.102763][ T5297] 8021q: adding VLAN 0 to HW filter on device eth3 [ 167.213534][ T7531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.237382][ T7531] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.250480][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.250587][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.273864][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.274319][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.790815][ T55] Bluetooth: hci4: command tx timeout [ 168.057026][ T5297] 8021q: adding VLAN 0 to HW filter on device eth4 [ 168.134135][ T7531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.376944][ T5735] usb 2-1: USB disconnect, device number 21 [ 168.617280][ T7531] veth0_vlan: entered promiscuous mode [ 168.647446][ T7531] veth1_vlan: entered promiscuous mode [ 168.745378][ T7531] veth0_macvtap: entered promiscuous mode [ 168.772026][ T7531] veth1_macvtap: entered promiscuous mode [ 168.828014][ T7531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.856298][ T7531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.981539][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.981580][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.981611][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.020940][ T3279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.064889][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.672'. [ 169.064914][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.672'. [ 169.115107][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.115128][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.174694][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.174714][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.287994][ T7783] FAULT_INJECTION: forcing a failure. [ 169.287994][ T7783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.288020][ T7783] CPU: 1 UID: 0 PID: 7783 Comm: syz.4.678 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.288040][ T7783] Tainted: [L]=SOFTLOCKUP [ 169.288046][ T7783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 169.288056][ T7783] Call Trace: [ 169.288062][ T7783] [ 169.288068][ T7783] dump_stack_lvl+0xe8/0x150 [ 169.288095][ T7783] should_fail_ex+0x3eb/0x540 [ 169.288117][ T7783] _copy_from_user+0x2d/0xb0 [ 169.288137][ T7783] __copy_msghdr+0x390/0x590 [ 169.288156][ T7783] ___sys_sendmsg+0x213/0x360 [ 169.288170][ T7783] ? __lock_acquire+0x747/0x2de0 [ 169.288191][ T7783] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.288211][ T7783] ? kstrtouint+0x6e/0xe0 [ 169.288253][ T7783] ? __fget_files+0x3a2/0x420 [ 169.288269][ T7783] ? __fget_files+0x2a/0x420 [ 169.288292][ T7783] __sys_sendmmsg+0x273/0x4e0 [ 169.288311][ T7783] ? __pfx___sys_sendmmsg+0x10/0x10 [ 169.288334][ T7783] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 169.288361][ T7783] ? ksys_write+0x242/0x270 [ 169.288381][ T7783] ? __pfx_ksys_write+0x10/0x10 [ 169.288404][ T7783] __x64_sys_sendmmsg+0xa0/0xc0 [ 169.288421][ T7783] do_syscall_64+0x166/0x520 [ 169.288446][ T7783] ? trace_irq_disable+0x3b/0x140 [ 169.288477][ T7783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.288492][ T7783] ? clear_bhb_loop+0x70/0xc0 [ 169.288511][ T7783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.288525][ T7783] RIP: 0033:0x7f2cb639f559 [ 169.288539][ T7783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.288552][ T7783] RSP: 002b:00007f2cb71c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 169.288568][ T7783] RAX: ffffffffffffffda RBX: 00007f2cb6625fa0 RCX: 00007f2cb639f559 [ 169.288578][ T7783] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000004 [ 169.288588][ T7783] RBP: 00007f2cb71c7090 R08: 0000000000000000 R09: 0000000000000000 [ 169.288597][ T7783] R10: 0000000020080058 R11: 0000000000000246 R12: 0000000000000001 [ 169.288606][ T7783] R13: 00007f2cb6626038 R14: 00007f2cb6625fa0 R15: 00007ffe032f9068 [ 169.288629][ T7783] [ 169.663447][ T7794] netlink: 20 bytes leftover after parsing attributes in process `syz.4.681'. [ 169.688416][ T7794] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 169.688439][ T7794] block device autoloading is deprecated and will be removed. [ 169.841723][ T7802] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 169.841747][ T7802] block device autoloading is deprecated and will be removed. [ 169.868125][ T7803] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 169.871693][ T55] Bluetooth: hci4: command tx timeout [ 170.011486][ T7811] FAULT_INJECTION: forcing a failure. [ 170.011486][ T7811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.011521][ T7811] CPU: 0 UID: 0 PID: 7811 Comm: syz.4.688 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.011551][ T7811] Tainted: [L]=SOFTLOCKUP [ 170.011560][ T7811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 170.011573][ T7811] Call Trace: [ 170.011581][ T7811] [ 170.011591][ T7811] dump_stack_lvl+0xe8/0x150 [ 170.011627][ T7811] should_fail_ex+0x3eb/0x540 [ 170.011660][ T7811] _copy_from_iter+0x1d3/0x1680 [ 170.011698][ T7811] ? __pfx__copy_from_iter+0x10/0x10 [ 170.011719][ T7811] ? trace_kmalloc+0x2a/0xf0 [ 170.011746][ T7811] ? __kmalloc_noprof+0x387/0x710 [ 170.011768][ T7811] ? __kmalloc_noprof+0x1a6/0x710 [ 170.011789][ T7811] ? kernfs_fop_write_iter+0x157/0x540 [ 170.011820][ T7811] kernfs_fop_write_iter+0x19a/0x540 [ 170.011849][ T7811] vfs_write+0x612/0xba0 [ 170.011892][ T7811] ? __pfx_vfs_write+0x10/0x10 [ 170.011922][ T7811] ? __fget_files+0x3a2/0x420 [ 170.011957][ T7811] ? __fget_files+0x2a/0x420 [ 170.011984][ T7811] ? fdget+0x1ac/0x250 [ 170.012014][ T7811] ksys_write+0x150/0x270 [ 170.012042][ T7811] ? __pfx_ksys_write+0x10/0x10 [ 170.012080][ T7811] do_syscall_64+0x166/0x520 [ 170.012102][ T7811] ? trace_irq_disable+0x3b/0x140 [ 170.012128][ T7811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.012150][ T7811] ? clear_bhb_loop+0x70/0xc0 [ 170.012176][ T7811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.012202][ T7811] RIP: 0033:0x7f2cb639f559 [ 170.012222][ T7811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.012240][ T7811] RSP: 002b:00007f2cb71c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 170.012262][ T7811] RAX: ffffffffffffffda RBX: 00007f2cb6625fa0 RCX: 00007f2cb639f559 [ 170.012277][ T7811] RDX: 000000000000000d RSI: 0000200000000480 RDI: 0000000000000003 [ 170.012291][ T7811] RBP: 00007f2cb71c7090 R08: 0000000000000000 R09: 0000000000000000 [ 170.012304][ T7811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.012316][ T7811] R13: 00007f2cb6626038 R14: 00007f2cb6625fa0 R15: 00007ffe032f9068 [ 170.012376][ T7811] [ 170.355746][ T7820] FAULT_INJECTION: forcing a failure. [ 170.355746][ T7820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.355789][ T7820] CPU: 1 UID: 0 PID: 7820 Comm: syz.1.693 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.355823][ T7820] Tainted: [L]=SOFTLOCKUP [ 170.355832][ T7820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 170.355847][ T7820] Call Trace: [ 170.355857][ T7820] [ 170.355867][ T7820] dump_stack_lvl+0xe8/0x150 [ 170.355908][ T7820] should_fail_ex+0x3eb/0x540 [ 170.355950][ T7820] _copy_from_iter+0x1d3/0x1680 [ 170.355993][ T7820] ? __pfx__copy_from_iter+0x10/0x10 [ 170.356019][ T7820] ? trace_kmalloc+0x2a/0xf0 [ 170.356049][ T7820] ? __kmalloc_noprof+0x387/0x710 [ 170.356074][ T7820] ? __kmalloc_noprof+0x1a6/0x710 [ 170.356099][ T7820] ? kernfs_fop_write_iter+0x157/0x540 [ 170.356135][ T7820] kernfs_fop_write_iter+0x19a/0x540 [ 170.356167][ T7820] vfs_write+0x612/0xba0 [ 170.356207][ T7820] ? __pfx_vfs_write+0x10/0x10 [ 170.356241][ T7820] ? __fget_files+0x3a2/0x420 [ 170.356267][ T7820] ? __fget_files+0x2a/0x420 [ 170.356299][ T7820] ? fdget+0x1ac/0x250 [ 170.356343][ T7820] ksys_write+0x150/0x270 [ 170.356376][ T7820] ? __pfx_ksys_write+0x10/0x10 [ 170.356420][ T7820] do_syscall_64+0x166/0x520 [ 170.356446][ T7820] ? trace_irq_disable+0x3b/0x140 [ 170.356476][ T7820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.356502][ T7820] ? clear_bhb_loop+0x70/0xc0 [ 170.356534][ T7820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.356559][ T7820] RIP: 0033:0x7fe0e979f559 [ 170.356581][ T7820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.356602][ T7820] RSP: 002b:00007fe0ea70e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 170.356628][ T7820] RAX: ffffffffffffffda RBX: 00007fe0e9a25fa0 RCX: 00007fe0e979f559 [ 170.356647][ T7820] RDX: 0000000000000007 RSI: 00002000000004c0 RDI: 0000000000000003 [ 170.356663][ T7820] RBP: 00007fe0ea70e090 R08: 0000000000000000 R09: 0000000000000000 [ 170.356678][ T7820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.356693][ T7820] R13: 00007fe0e9a26038 R14: 00007fe0e9a25fa0 R15: 00007ffe704c3fe8 [ 170.356741][ T7820] [ 170.672888][ T7822] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 170.672921][ T7822] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 170.672955][ T7822] raw: 017ff00000002000 ffffea0004600008 ffffea0004600008 0000000000000000 [ 170.672977][ T7822] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 170.672991][ T7822] page dumped because: unmovable page [ 170.673017][ T7822] page_owner info is not present (never set?) [ 170.963699][ T7832] input: syz0 as /devices/virtual/input/input14 [ 171.546588][ T7846] FAULT_INJECTION: forcing a failure. [ 171.546588][ T7846] name failslab, interval 1, probability 0, space 0, times 0 [ 171.546629][ T7846] CPU: 1 UID: 0 PID: 7846 Comm: syz.1.704 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.546666][ T7846] Tainted: [L]=SOFTLOCKUP [ 171.546674][ T7846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 171.546687][ T7846] Call Trace: [ 171.546696][ T7846] [ 171.546706][ T7846] dump_stack_lvl+0xe8/0x150 [ 171.546747][ T7846] should_fail_ex+0x3eb/0x540 [ 171.546781][ T7846] should_failslab+0xa8/0x100 [ 171.546814][ T7846] ? ptlock_alloc+0x20/0x70 [ 171.546848][ T7846] kmem_cache_alloc_noprof+0x9c/0x600 [ 171.546892][ T7846] ? ptlock_alloc+0x20/0x70 [ 171.546931][ T7846] ptlock_alloc+0x20/0x70 [ 171.546964][ T7846] pte_alloc_one+0x7a/0x3d0 [ 171.546997][ T7846] do_huge_pmd_anonymous_page+0x6c2/0xbf0 [ 171.547042][ T7846] handle_mm_fault+0x1992/0x3540 [ 171.547085][ T7846] ? handle_mm_fault+0xee/0x3540 [ 171.547133][ T7846] ? __pfx_handle_mm_fault+0x10/0x10 [ 171.547206][ T7846] __get_user_pages+0x1670/0x2750 [ 171.547273][ T7846] populate_vma_page_range+0x311/0x3f0 [ 171.547306][ T7846] ? __pfx_populate_vma_page_range+0x10/0x10 [ 171.547339][ T7846] ? down_read+0x2b9/0x320 [ 171.547382][ T7846] __mm_populate+0x25f/0x390 [ 171.547439][ T7846] ? __pfx___mm_populate+0x10/0x10 [ 171.547480][ T7846] do_mlock+0x63e/0x760 [ 171.547521][ T7846] ? __pfx_do_mlock+0x10/0x10 [ 171.547557][ T7846] ? __pfx___se_sys_futex+0x10/0x10 [ 171.547598][ T7846] ? rcu_is_watching+0x16/0xb0 [ 171.547640][ T7846] __x64_sys_mlock+0x77/0xa0 [ 171.547672][ T7846] do_syscall_64+0x166/0x520 [ 171.547698][ T7846] ? trace_irq_disable+0x3b/0x140 [ 171.547728][ T7846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.547754][ T7846] ? clear_bhb_loop+0x70/0xc0 [ 171.547787][ T7846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.547813][ T7846] RIP: 0033:0x7fe0e979f559 [ 171.547837][ T7846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.547858][ T7846] RSP: 002b:00007fe0ea70e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 171.547888][ T7846] RAX: ffffffffffffffda RBX: 00007fe0e9a25fa0 RCX: 00007fe0e979f559 [ 171.547907][ T7846] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 171.547924][ T7846] RBP: 00007fe0e9836b20 R08: 0000000000000000 R09: 0000000000000000 [ 171.547940][ T7846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.547956][ T7846] R13: 00007fe0e9a26038 R14: 00007fe0e9a25fa0 R15: 00007ffe704c3fe8 [ 171.547995][ T7846] [ 172.460496][ T7858] md: array md1 already has disks! [ 172.500705][ T7858] md: could not open device unknown-block(1,2). [ 172.500783][ T7858] md: error, md_import_device() returned -16 [ 172.966568][ T7864] syzkaller1: entered allmulticast mode [ 172.976931][ T7864] FAULT_INJECTION: forcing a failure. [ 172.976931][ T7864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.976974][ T7864] CPU: 0 UID: 0 PID: 7864 Comm: syz.1.713 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.977001][ T7864] Tainted: [L]=SOFTLOCKUP [ 172.977009][ T7864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 172.977020][ T7864] Call Trace: [ 172.977028][ T7864] [ 172.977036][ T7864] dump_stack_lvl+0xe8/0x150 [ 172.977070][ T7864] should_fail_ex+0x3eb/0x540 [ 172.977099][ T7864] _copy_from_iter+0x1d3/0x1680 [ 172.977124][ T7864] ? lock_acquire+0x115/0x350 [ 172.977148][ T7864] ? __lock_acquire+0x747/0x2de0 [ 172.977170][ T7864] ? __pfx__copy_from_iter+0x10/0x10 [ 172.977207][ T7864] tun_get_user+0x51a/0x4470 [ 172.977254][ T7864] ? aa_file_perm+0x18b/0x15f0 [ 172.977285][ T7864] ? aa_file_perm+0x4ed/0x15f0 [ 172.977309][ T7864] ? __pfx_tun_get_user+0x10/0x10 [ 172.977340][ T7864] ? __lock_acquire+0x747/0x2de0 [ 172.977364][ T7864] ? kstrtoull+0x137/0x1d0 [ 172.977401][ T7864] ? ref_tracker_alloc+0x172/0x530 [ 172.977426][ T7864] ? lock_acquire+0x115/0x350 [ 172.977465][ T7864] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 172.977495][ T7864] ? lock_acquire+0x115/0x350 [ 172.977518][ T7864] ? tun_get+0x1c/0x2f0 [ 172.977553][ T7864] ? tun_get+0x1c/0x2f0 [ 172.977581][ T7864] ? tun_get+0x1c/0x2f0 [ 172.977613][ T7864] tun_chr_write_iter+0x113/0x200 [ 172.977646][ T7864] vfs_write+0x612/0xba0 [ 172.977680][ T7864] ? __pfx_vfs_write+0x10/0x10 [ 172.977716][ T7864] ? __fget_files+0x3a2/0x420 [ 172.977737][ T7864] ? __fget_files+0x2a/0x420 [ 172.977763][ T7864] ? fdget+0x1ac/0x250 [ 172.977793][ T7864] ksys_write+0x150/0x270 [ 172.977821][ T7864] ? __pfx_ksys_write+0x10/0x10 [ 172.977857][ T7864] do_syscall_64+0x166/0x520 [ 172.977902][ T7864] ? trace_irq_disable+0x3b/0x140 [ 172.977929][ T7864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.977956][ T7864] ? clear_bhb_loop+0x70/0xc0 [ 172.977984][ T7864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.978007][ T7864] RIP: 0033:0x7fe0e979f559 [ 172.978026][ T7864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.978044][ T7864] RSP: 002b:00007fe0ea70e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.978067][ T7864] RAX: ffffffffffffffda RBX: 00007fe0e9a25fa0 RCX: 00007fe0e979f559 [ 172.978083][ T7864] RDX: 000000000000003a RSI: 0000200000000ac0 RDI: 0000000000000003 [ 172.978097][ T7864] RBP: 00007fe0ea70e090 R08: 0000000000000000 R09: 0000000000000000 [ 172.978111][ T7864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.978124][ T7864] R13: 00007fe0e9a26038 R14: 00007fe0e9a25fa0 R15: 00007ffe704c3fe8 [ 172.978159][ T7864] [ 175.307302][ T7932] netlink: 88 bytes leftover after parsing attributes in process `syz.1.739'. [ 175.434593][ T7936] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20002 [ 175.499528][ T7936] rxe_eth0 speed is unknown, defaulting to 1000 [ 175.624253][ T7941] md: md3 stopped. [ 176.089272][ T7956] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 176.089310][ T7956] block device autoloading is deprecated and will be removed. [ 176.142286][ T7956] md: md3 stopped. [ 176.624331][ T1232] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 176.770705][ T1232] usb 2-1: Using ep0 maxpacket: 32 [ 176.771541][ T1232] usb 2-1: New USB device found: idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 176.776656][ T1232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.776682][ T1232] usb 2-1: Product: syz [ 176.776698][ T1232] usb 2-1: Manufacturer: syz [ 176.776714][ T1232] usb 2-1: SerialNumber: syz [ 176.827869][ T1232] usb 2-1: config 0 descriptor?? [ 177.241505][ T1232] airspy 2-1:0.0: Board ID: 00 [ 177.241530][ T1232] airspy 2-1:0.0: Firmware version: [ 178.251724][ T1232] airspy 2-1:0.0: usb_control_msg() failed -71 request 10 [ 178.284247][ T1232] airspy 2-1:0.0: Registered as swradio24 [ 178.284268][ T1232] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 178.287715][ T1232] usb 2-1: USB disconnect, device number 22 [ 180.809122][ T8065] FAULT_INJECTION: forcing a failure. [ 180.809122][ T8065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.809158][ T8065] CPU: 1 UID: 0 PID: 8065 Comm: syz.1.775 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.809189][ T8065] Tainted: [L]=SOFTLOCKUP [ 180.809197][ T8065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 180.809210][ T8065] Call Trace: [ 180.809219][ T8065] [ 180.809229][ T8065] dump_stack_lvl+0xe8/0x150 [ 180.809264][ T8065] should_fail_ex+0x3eb/0x540 [ 180.809297][ T8065] strncpy_from_user+0x36/0x2c0 [ 180.809328][ T8065] do_getname+0x77/0x250 [ 180.809366][ T8065] __se_sys_symlinkat+0x2e/0x2b0 [ 180.809401][ T8065] do_syscall_64+0x166/0x520 [ 180.809424][ T8065] ? trace_irq_disable+0x3b/0x140 [ 180.809450][ T8065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.809473][ T8065] ? clear_bhb_loop+0x70/0xc0 [ 180.809501][ T8065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.809524][ T8065] RIP: 0033:0x7fe0e979f559 [ 180.809543][ T8065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.809562][ T8065] RSP: 002b:00007fe0ea70e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 180.809585][ T8065] RAX: ffffffffffffffda RBX: 00007fe0e9a25fa0 RCX: 00007fe0e979f559 [ 180.809601][ T8065] RDX: 0000200000000cc0 RSI: ffffffffffffff9c RDI: 0000200000000c80 [ 180.809617][ T8065] RBP: 00007fe0ea70e090 R08: 0000000000000000 R09: 0000000000000000 [ 180.809631][ T8065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.809645][ T8065] R13: 00007fe0e9a26038 R14: 00007fe0e9a25fa0 R15: 00007ffe704c3fe8 [ 180.809680][ T8065] [ 181.153852][ T8071] FAULT_INJECTION: forcing a failure. [ 181.153852][ T8071] name failslab, interval 1, probability 0, space 0, times 0 [ 181.153889][ T8071] CPU: 1 UID: 0 PID: 8071 Comm: syz.1.777 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.153920][ T8071] Tainted: [L]=SOFTLOCKUP [ 181.153929][ T8071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 181.153942][ T8071] Call Trace: [ 181.153951][ T8071] [ 181.153960][ T8071] dump_stack_lvl+0xe8/0x150 [ 181.154000][ T8071] should_fail_ex+0x3eb/0x540 [ 181.154034][ T8071] should_failslab+0xa8/0x100 [ 181.154067][ T8071] __kmalloc_noprof+0xf9/0x710 [ 181.154093][ T8071] ? tomoyo_supervisor+0xc4e/0x1550 [ 181.154121][ T8071] ? tomoyo_supervisor+0xc4e/0x1550 [ 181.154158][ T8071] tomoyo_supervisor+0xc4e/0x1550 [ 181.154202][ T8071] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 181.154245][ T8071] ? snprintf+0xe8/0x140 [ 181.154285][ T8071] ? __pfx_snprintf+0x10/0x10 [ 181.154329][ T8071] ? tomoyo_check_acl+0x386/0x400 [ 181.154373][ T8071] tomoyo_path_number_perm+0x463/0x5f0 [ 181.154396][ T8071] ? tomoyo_path_number_perm+0x219/0x5f0 [ 181.154420][ T8071] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 181.154487][ T8071] ? __pfx_current_check_access_path+0x10/0x10 [ 181.154514][ T8071] ? d_splice_alias_ops+0x11c/0x440 [ 181.154544][ T8071] ? d_splice_alias+0x12/0x30 [ 181.154575][ T8071] ? lookup_one_qstr_excl+0x1d4/0x360 [ 181.154609][ T8071] tomoyo_path_mkdir+0xb0/0xf0 [ 181.154648][ T8071] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 181.154680][ T8071] ? __pfx_filename_create+0x10/0x10 [ 181.154712][ T8071] security_path_mkdir+0x169/0x350 [ 181.154741][ T8071] filename_mkdirat+0x200/0x510 [ 181.154767][ T8071] ? __might_fault+0xaf/0x130 [ 181.154800][ T8071] ? __pfx_filename_mkdirat+0x10/0x10 [ 181.154832][ T8071] ? do_getname+0x151/0x250 [ 181.154867][ T8071] __se_sys_mkdirat+0x35/0x150 [ 181.154898][ T8071] do_syscall_64+0x166/0x520 [ 181.154919][ T8071] ? trace_irq_disable+0x3b/0x140 [ 181.154943][ T8071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.154964][ T8071] ? clear_bhb_loop+0x70/0xc0 [ 181.154989][ T8071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.155010][ T8071] RIP: 0033:0x7fe0e979f559 [ 181.155029][ T8071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.155047][ T8071] RSP: 002b:00007fe0ea70e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 181.155069][ T8071] RAX: ffffffffffffffda RBX: 00007fe0e9a25fa0 RCX: 00007fe0e979f559 [ 181.155084][ T8071] RDX: 00000000000001ff RSI: 0000200000000ec0 RDI: ffffffffffffff9c [ 181.155098][ T8071] RBP: 00007fe0e9836b20 R08: 0000000000000000 R09: 0000000000000000 [ 181.155111][ T8071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.155123][ T8071] R13: 00007fe0e9a26038 R14: 00007fe0e9a25fa0 R15: 00007ffe704c3fe8 [ 181.155160][ T8071] [ 181.649219][ T8082] md: array md1 already has disks! [ 181.691051][ T8082] md: could not open device unknown-block(1,2). [ 181.691115][ T8082] md: error, md_import_device() returned -16 [ 181.788586][ T8082] ------------[ cut here ]------------ [ 181.788603][ T8082] 1 [ 181.788618][ T8082] WARNING: mm/slub.c:5459 at ___kmalloc_large_node+0x10c/0x170, CPU#1: syz.1.781/8082 [ 181.809629][ T8082] Modules linked in: [ 181.814787][ T8082] CPU: 1 UID: 0 PID: 8082 Comm: syz.1.781 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.825954][ T8082] Tainted: [L]=SOFTLOCKUP [ 181.830307][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 181.840518][ T8082] RIP: 0010:___kmalloc_large_node+0x10c/0x170 [ 181.846680][ T8082] Code: 41 c7 46 30 00 00 00 f8 eb 03 45 31 ff 4c 89 ff 48 89 de 89 ea 5b 41 5c 41 5e 41 5f 5d e9 ec d3 0b 00 c6 05 48 f1 75 0f 01 90 <0f> 0b 90 31 c0 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 89 ef 89 [ 181.866431][ T8082] RSP: 0018:ffffc9000329f6b8 EFLAGS: 00010246 [ 181.872772][ T8082] RAX: 0000000000000000 RBX: ffffffffffffffff RCX: 0000000000000018 [ 181.880841][ T8082] RDX: 00000000ffffffff RSI: 0000000000000dc0 RDI: ffffffffffffffff [ 181.888894][ T8082] RBP: 0000000000000dc0 R08: 0000000000400000 R09: 000000000000d520 [ 181.897578][ T8082] R10: 000000000000d548 R11: ffffed100567e619 R12: 00000000fffbffff [ 181.907185][ T8082] R13: ffffffff88a77865 R14: ffffffffffffffff R15: ffff88805838e224 [ 181.916452][ T8082] FS: 00007fe0ea70e6c0(0000) GS:ffff88812347c000(0000) knlGS:0000000000000000 [ 181.926020][ T8082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.933152][ T8082] CR2: 0000001b35711d80 CR3: 0000000034e9e000 CR4: 00000000003526f0 [ 181.941762][ T8082] Call Trace: [ 181.945083][ T8082] [ 181.948047][ T8082] __kmalloc_large_node_noprof+0x18/0x90 [ 181.954600][ T8082] __kmalloc_noprof+0x3f6/0x710 [ 181.959501][ T8082] ? __raw_spin_lock_init+0x45/0x100 [ 181.964891][ T8082] ? setup_conf+0xc15/0x2ad0 [ 181.969537][ T8082] setup_conf+0xc15/0x2ad0 [ 181.974077][ T8082] ? __pfx_setup_conf+0x10/0x10 [ 181.978987][ T8082] raid5_run+0x8cc/0x2560 [ 181.983432][ T8082] ? _raw_spin_unlock+0x28/0x50 [ 181.988326][ T8082] ? get_pers+0x22b/0x2e0 [ 181.992745][ T8082] ? __pfx_get_pers+0x10/0x10 [ 181.997470][ T8082] md_run+0xc3d/0x1cd0 [ 182.001691][ T8082] ? __pfx_md_run+0x10/0x10 [ 182.007222][ T8082] do_md_run+0x35/0x720 [ 182.012120][ T8082] ? md_ioctl+0x1e23/0x2610 [ 182.016702][ T8082] md_ioctl+0x1e2b/0x2610 [ 182.021136][ T8082] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 182.026821][ T8082] ? tomoyo_path_number_perm+0x219/0x5f0 [ 182.032817][ T8082] ? __pfx_md_ioctl+0x10/0x10 [ 182.037561][ T8082] ? do_vfs_ioctl+0x116f/0x1530 [ 182.042522][ T8082] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 182.047614][ T8082] ? do_futex+0x3e7/0x4e0 [ 182.052147][ T8082] ? __pfx_md_ioctl+0x10/0x10 [ 182.056873][ T8082] blkdev_ioctl+0x5e3/0x740 [ 182.061478][ T8082] ? __pfx_blkdev_ioctl+0x10/0x10 [ 182.066578][ T8082] ? bpf_lsm_file_ioctl+0x9/0x20 [ 182.071636][ T8082] ? __pfx_blkdev_ioctl+0x10/0x10 [ 182.076708][ T8082] __se_sys_ioctl+0xfc/0x170 [ 182.081409][ T8082] do_syscall_64+0x166/0x520 [ 182.086039][ T8082] ? trace_irq_disable+0x3b/0x140 [ 182.091146][ T8082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.097265][ T8082] ? clear_bhb_loop+0x70/0xc0 [ 182.102057][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.109032][ T8082] RIP: 0033:0x7fe0e979f559 [ 182.114318][ T8082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.134026][ T8082] RSP: 002b:00007fe0ea70e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.142556][ T8082] RAX: ffffffffffffffda RBX: 00007fe0e9a25fa0 RCX: 00007fe0e979f559 [ 182.150634][ T8082] RDX: 0000200000000240 RSI: 00000000400c0930 RDI: 0000000000000003 [ 182.158646][ T8082] RBP: 00007fe0e9836b20 R08: 0000000000000000 R09: 0000000000000000 [ 182.166712][ T8082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.174841][ T8082] R13: 00007fe0e9a26038 R14: 00007fe0e9a25fa0 R15: 00007ffe704c3fe8 [ 182.182915][ T8082] [ 182.185992][ T8082] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 182.193304][ T8082] CPU: 1 UID: 0 PID: 8082 Comm: syz.1.781 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.204202][ T8082] Tainted: [L]=SOFTLOCKUP [ 182.208560][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 182.218655][ T8082] Call Trace: [ 182.221967][ T8082] [ 182.224930][ T8082] vpanic+0x26f/0x710 [ 182.228959][ T8082] panic+0xc5/0xd0 [ 182.232732][ T8082] ? __pfx_panic+0x10/0x10 [ 182.237204][ T8082] __warn+0x315/0x4c0 [ 182.241220][ T8082] ? ___kmalloc_large_node+0x10c/0x170 [ 182.246729][ T8082] ? ___kmalloc_large_node+0x10c/0x170 [ 182.252229][ T8082] __report_bug+0x276/0x570 [ 182.256783][ T8082] ? ___kmalloc_large_node+0x10c/0x170 [ 182.262286][ T8082] ? __pfx___report_bug+0x10/0x10 [ 182.267354][ T8082] ? irqentry_exit+0x2a0/0x9b0 [ 182.272153][ T8082] ? trace_irq_disable+0x3b/0x140 [ 182.277249][ T8082] ? ___kmalloc_large_node+0x10e/0x170 [ 182.282753][ T8082] ? ___kmalloc_large_node+0x10c/0x170 [ 182.288259][ T8082] ? ___kmalloc_large_node+0x10c/0x170 [ 182.293758][ T8082] report_bug+0x16b/0x220 [ 182.298133][ T8082] ? ___kmalloc_large_node+0x10c/0x170 [ 182.303639][ T8082] ? ___kmalloc_large_node+0x10e/0x170 [ 182.309138][ T8082] handle_bug+0x9c/0x200 [ 182.313421][ T8082] exc_invalid_op+0x1a/0x50 [ 182.317963][ T8082] asm_exc_invalid_op+0x1a/0x20 [ 182.322844][ T8082] RIP: 0010:___kmalloc_large_node+0x10c/0x170 [ 182.328948][ T8082] Code: 41 c7 46 30 00 00 00 f8 eb 03 45 31 ff 4c 89 ff 48 89 de 89 ea 5b 41 5c 41 5e 41 5f 5d e9 ec d3 0b 00 c6 05 48 f1 75 0f 01 90 <0f> 0b 90 31 c0 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 89 ef 89 [ 182.348624][ T8082] RSP: 0018:ffffc9000329f6b8 EFLAGS: 00010246 [ 182.354729][ T8082] RAX: 0000000000000000 RBX: ffffffffffffffff RCX: 0000000000000018 [ 182.362724][ T8082] RDX: 00000000ffffffff RSI: 0000000000000dc0 RDI: ffffffffffffffff [ 182.370715][ T8082] RBP: 0000000000000dc0 R08: 0000000000400000 R09: 000000000000d520 [ 182.378708][ T8082] R10: 000000000000d548 R11: ffffed100567e619 R12: 00000000fffbffff [ 182.386718][ T8082] R13: ffffffff88a77865 R14: ffffffffffffffff R15: ffff88805838e224 [ 182.394726][ T8082] ? setup_conf+0xc15/0x2ad0 [ 182.399380][ T8082] __kmalloc_large_node_noprof+0x18/0x90 [ 182.405055][ T8082] __kmalloc_noprof+0x3f6/0x710 [ 182.409945][ T8082] ? __raw_spin_lock_init+0x45/0x100 [ 182.415284][ T8082] ? setup_conf+0xc15/0x2ad0 [ 182.419910][ T8082] setup_conf+0xc15/0x2ad0 [ 182.424373][ T8082] ? __pfx_setup_conf+0x10/0x10 [ 182.429272][ T8082] raid5_run+0x8cc/0x2560 [ 182.433675][ T8082] ? _raw_spin_unlock+0x28/0x50 [ 182.438572][ T8082] ? get_pers+0x22b/0x2e0 [ 182.442928][ T8082] ? __pfx_get_pers+0x10/0x10 [ 182.447643][ T8082] md_run+0xc3d/0x1cd0 [ 182.451758][ T8082] ? __pfx_md_run+0x10/0x10 [ 182.456305][ T8082] do_md_run+0x35/0x720 [ 182.460488][ T8082] ? md_ioctl+0x1e23/0x2610 [ 182.465032][ T8082] md_ioctl+0x1e2b/0x2610 [ 182.469422][ T8082] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 182.475089][ T8082] ? tomoyo_path_number_perm+0x219/0x5f0 [ 182.480757][ T8082] ? __pfx_md_ioctl+0x10/0x10 [ 182.485467][ T8082] ? do_vfs_ioctl+0x116f/0x1530 [ 182.490365][ T8082] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 182.495452][ T8082] ? do_futex+0x3e7/0x4e0 [ 182.499847][ T8082] ? __pfx_md_ioctl+0x10/0x10 [ 182.504564][ T8082] blkdev_ioctl+0x5e3/0x740 [ 182.509118][ T8082] ? __pfx_blkdev_ioctl+0x10/0x10 [ 182.514195][ T8082] ? bpf_lsm_file_ioctl+0x9/0x20 [ 182.519177][ T8082] ? __pfx_blkdev_ioctl+0x10/0x10 [ 182.524241][ T8082] __se_sys_ioctl+0xfc/0x170 [ 182.528924][ T8082] do_syscall_64+0x166/0x520 [ 182.533561][ T8082] ? trace_irq_disable+0x3b/0x140 [ 182.538616][ T8082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.544715][ T8082] ? clear_bhb_loop+0x70/0xc0 [ 182.549459][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.555390][ T8082] RIP: 0033:0x7fe0e979f559 [ 182.559844][ T8082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.579471][ T8082] RSP: 002b:00007fe0ea70e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.587917][ T8082] RAX: ffffffffffffffda RBX: 00007fe0e9a25fa0 RCX: 00007fe0e979f559 [ 182.595915][ T8082] RDX: 0000200000000240 RSI: 00000000400c0930 RDI: 0000000000000003 [ 182.603923][ T8082] RBP: 00007fe0e9836b20 R08: 0000000000000000 R09: 0000000000000000 [ 182.611923][ T8082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.619927][ T8082] R13: 00007fe0e9a26038 R14: 00007fe0e9a25fa0 R15: 00007ffe704c3fe8 [ 182.627941][ T8082] [ 182.631594][ T8082] Kernel Offset: disabled [ 182.635947][ T8082] Rebooting in 86400 seconds..