last executing test programs: 1m59.050397078s ago: executing program 1 (id=47): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'macvtap0\x00'}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000300)="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", 0x235}], 0x1) 1m58.936918015s ago: executing program 1 (id=48): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r2, r1, 0x80000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 1m58.822970895s ago: executing program 1 (id=50): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="210326bd7000fddbdf2501"], 0x1c}}, 0x50) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4140aecd, &(0x7f0000000200)) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x6, 0xdd0, [0x200000000040, 0x0, 0x0, 0x200000000a98, 0x200000000bb8], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x62, 0x886c, 'batadv_slave_1\x00', 'pim6reg1\x00', 'pim6reg\x00', 'vlan1\x00', @local, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0x888, 0x8d8, 0x910, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0xffffffff, 0x1}, {0xff800000, 0x1}, {0x3, 0x1}, {0x3, 0x3}, {0x7, 0x2}, {0x4, 0x1}, {0xffff, 0x2}, {0xc8, 0x2}, {0x5}, {0x8}, {0xfffffffd, 0x1}], [{0x6, 0x800}, {0x7, 0x2}, {0x4, 0x2}, {0x9, 0x8cd2}, {0x8, 0x4}, {0x3, 0x4}, {0x2, 0x2f}, {0x6, 0x7}, {0xffffffff, 0x8}, {0x1, 0x9}, {0x10001, 0x4}], 0x1, 0x5}, {[{0x5, 0x3}, {0xee2, 0x2}, {0x2, 0x3}, {0xfffffffe}, {0x4, 0x2}, {0xfff, 0x2}, {0x80, 0x2}, {0x9}, {0x10001, 0x2}, {0x7f, 0x2}, {0x5, 0x1}], [{0x1, 0xffffffff}, {0x8000, 0x9}, {0x1, 0x2}, {0x1000, 0x1}, {0x0, 0x7}, {0x7fffffff}, {0x9, 0x1}, {0x2, 0xffff}, {0xd, 0xebd}, {0xff, 0x5}, {0x200, 0x80000000}], 0x8, 0x1}, {[{0x6, 0x3}, {0x2, 0x1}, {0x6044, 0x3}, {0x3, 0x1}, {0xffff0000, 0x2}, {0x1000, 0x3}, {0x8, 0x1}, {0xf, 0x3}, {0xfffff000, 0x1}, {0x8, 0x2}, {0x5, 0x1}], [{0x1ed0, 0x6}, {0x3, 0x688}, {0x9, 0xc}, {0x6, 0x6}, {0x0, 0xce3}, {0x9, 0x2}, {0xbb, 0x8}, {0x10, 0x515d}, {0x4, 0xffffffff}, {0x7, 0xc38}, {0x8, 0x81}], 0x7}, {[{0x8, 0x1}, {0xff, 0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x3}, {0x5, 0x2}, {0x4423, 0x3}, {0x5}, {0x1000, 0x2}, {0x2, 0x3}, {0x0, 0x3}], [{0x1, 0xfffffff7}, {0xffffff80, 0xa06}, {0x7, 0x80}, {0x5, 0x9}, {0xa2bc, 0x2}, {0x1, 0x22}, {0xa39, 0x2}, {0x6, 0x57}, {0x8, 0xbfcc}, {0x3, 0x9}, {0x5, 0x1}], 0x3, 0x7}, {[{0x7d, 0x3}, {0xe834, 0x2}, {0xbb, 0x2}, {0xfff}, {0x7}, {0x6, 0x2}, {0x80000001, 0x2}, {0x2, 0x3}, {0x9ed, 0x2}, {0x4924}, {0xc90f, 0x1}], [{0x4, 0x4800000}, {0x8, 0x5}, {0x509, 0x800}, {0xffffffff, 0x2f7}, {0x87d4, 0x2}, {0x20, 0x7}, {0x233, 0x1}, {0x4, 0xa4b2}, {0xa, 0x3}, {0x9, 0x1}, {0x9b, 0x4}], 0x9, 0x9}, {[{}, {0x8, 0x2}, {0x4}, {0x9, 0x2}, {0x4, 0x1}, {0x8, 0x2}, {0x9, 0x3}, {0x33, 0x3}, {0xbf44}, {0x9}, {0x3, 0x1}], [{0x8, 0x48}, {0x1, 0x8}, {0x8, 0x256}, {0x56db}, {0x5, 0x7}, {0x8, 0xa4}, {0x4, 0x737fd7da}, {0x1, 0x4}, {0x80000000, 0x50}, {0x7, 0x1}, {0x1}], 0xb, 0x5}, {[{0x9, 0x3}, {0x3}, {0x3, 0x2}, {0x7, 0xd8935051575b0daa}, {0x4, 0x3}, {0xf}, {0x2, 0x3}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x1}, {0x6}], [{0x7fffffff, 0x8}, {0x6, 0xfffffff8}, {0x2, 0x7fffffff}, {0x3, 0x585a2bed}, {0x0, 0xd58}, {0x4, 0x80000001}, {0x1ff, 0x10}, {0x6, 0x2}, {0x400, 0x9}, {0x3, 0x9}, {0x2, 0x7}], 0x9, 0x9}, {[{0x1}, {0x0, 0x1}, {0x10000, 0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x8, 0x3}, {0x3}, {0x7d17, 0x1}, {0x6a09000}, {0x9, 0x3}, {0x1, 0x2}], [{0x10000, 0x6}, {0x401, 0xad6}, {0x7, 0x9}, {0x7, 0xdd46}, {0x7, 0x2}, {0x4, 0x7}, {0x8, 0x3}, {0xfff, 0xc}, {0x7, 0x6}, {0x9, 0x8}, {0x2, 0x2}], 0x0, 0x7}, {[{0x9, 0x2}, {0x5}, {0x81, 0x2}, {0xd1, 0x3}, {0xc, 0x1}, {0x1, 0x3}, {0x7}, {0xfffffe09, 0x1}, {0x60, 0x1}, {0x800d, 0x3}, {0x0, 0x2}], [{0x101, 0x1}, {0x3, 0x1}, {0x1, 0x9}, {0x1ff, 0x9}, {0xd88, 0x8a6}, {0x7, 0x2}, {0x9, 0xd8}, {0x7d1, 0xac14}, {0x3, 0x8}, {0x4, 0x4}, {0x8, 0xa}], 0xb, 0x6}, {[{0x1, 0x2}, {0x3, 0x2}, {0x81, 0x1}, {0x9d980000, 0x1}, {0x7, 0x3}, {0x1, 0x1}, {0xfffff000, 0x2}, {0xc, 0x2}, {0x0, 0x1}, {0x9, 0x2}, {0x570c, 0x3}], [{0x1, 0x1}, {0x101, 0xc}, {0xa95, 0x1}, {0x9, 0xe37}, {0x4, 0xfffffffe}, {0x9, 0xb9}, {0x101, 0x6}, {0x84, 0x1000}, {0x99fe, 0xff}, {0x8001, 0x6}, {0x3, 0x4}], 0x7, 0x6}, {[{0xfffff800}, {0x102, 0x3}, {0x80, 0x2}, {0x3, 0x3}, {0x0, 0x2}, {0x7fff, 0x3}, {0x6, 0x3}, {0x3}, {0x4}, {0x0, 0x2}, {0x7}], [{0x2, 0xb}, {0x7, 0x10000}, {0x8, 0x7f}, {0x5, 0x10001}, {0x6, 0x7}, {0x5, 0x6}, {0x0, 0xffff}, {0x7, 0x935}, {0x6, 0x65c5}, {0x9, 0x1ff}, {0x6f4f, 0x7fffffff}], 0x7, 0x6}], 0x7}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0xd9, 0x1}}}], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0xf, {0x6}}}}], @snat={'snat\x00', 0x10}}, {0x9, 0x52, 0x80f3, 'team_slave_1\x00', 'veth0_to_team\x00', 'vxcan1\x00', 'hsr0\x00', @remote, [0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, [0xff, 0x0, 0xff, 0x0, 0x80], 0x0, 0x70, 0xe0, 0x118, [], [@snat={'snat\x00', 0x10, {{@multicast, 0xffffffffffffffff}}}, @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffe}}}], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x5, 0x1, 0x889d, 'veth1\x00', '\x00', 'hsr0\x00', 'pimreg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, [0x0, 0x0, 0xff, 0x0, 0xff], @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x0, 0xc0, 0xc0, 0xf0, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0xffffff00, 0xff, 0xff000000], 0x4e21, 0x29, 0x7, 0x4e20, 0x1, 0x8}}}], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x11, 0x10, 0x6003, 'veth0_to_bond\x00', 'ipvlan1\x00', 'vcan0\x00', 'veth0_to_hsr\x00', @random="cf5f05c31967", [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @local, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe, 0x2, [{0x5, 0x51, 0x883e, 'pimreg1\x00', 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', 'lo\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @random="4d61b54de46a", [0xff, 0xff, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @snat={'snat\x00', 0x10, {{@random="f4b59056b6e1", 0xffffffffffffffe9}}}}, {0x11, 0x76, 0x892f, 'veth1_to_bond\x00', 'veth0_to_team\x00', 'erspan0\x00', 'syzkaller1\x00', @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff], @multicast, [0xff, 0x0, 0xff, 0xff, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @arpreply={'arpreply\x00', 0x10, {{@random="b0d2f14b1491", 0xfffffffffffffffd}}}}]}]}, 0xe48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "f81f3fe70a58a077"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x100}}, 0x0) mount(0x0, &(0x7f0000000400)='./cgroup\x00', &(0x7f0000000480)='fuseblk\x00', 0x200013, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000004c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r7 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SYNC(r7, 0xffffffff80000101, 0x0, 0x0) 1m58.717014408s ago: executing program 1 (id=51): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000180)='./dev_mnt\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev_mnt/ttyUSB0\x00', 0x2, 0x0) 1m57.515972175s ago: executing program 1 (id=55): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/ref_tracker\x00', 0x800, 0x8) getdents64(r2, &(0x7f0000000180)=""/1000, 0x3e8) r3 = openat(r2, &(0x7f0000000580), 0x0, 0x0) read$watch_queue(r3, &(0x7f00000005c0)=""/255, 0xff) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001780)={0x0, 0x0, 0x10000, 0x2000, &(0x7f0000010000/0x2000)=nil}) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x75c}) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000001840)={0x2, 0x0, [{0x40000000, 0x0, 0x1}, {0x40000001, 0x0, 0x10001}]}) (async) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000001a80)={{0x0, 0xffffffff, 0x10, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x18, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0xe, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0xff}, {0x0, 0xffffffff, 0x18, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x18, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x18, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x20, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, {}, 0x1}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000019c0)={[0x8001, 0x3ff, 0x8001, 0x8, 0x0, 0x8000000], 0x10000, 0x2}) (async, rerun: 64) r5 = syz_open_dev$sndmidi(&(0x7f0000000c40), 0x2, 0x141102) (rerun: 64) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r5, 0xc0245720, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000580)={0x1f, 0x0, @any, 0x4}, 0xe) (async) connect$bt_l2cap(r6, &(0x7f00000006c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) getpriority(0x1, 0xffffffffffffffff) (async, rerun: 32) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000700)={0x2}, 0x2) (async, rerun: 32) r7 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$DM_DEV_CREATE(r7, 0xc138fd03, &(0x7f0000000780)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x80201, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) (async) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) (async, rerun: 64) syz_ublk_setup_io_uring(0x636b, &(0x7f00000008c0)={0x0, 0xeacb, 0x8000, 0x0, 0xfb}, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) (async, rerun: 64) ptrace$setregset(0x4205, r9, 0x2, &(0x7f0000000a00)={0x0, 0xef3e856242ea1fb3}) syz_pidfd_open(r9, 0x0) (async) ioctl$DM_TABLE_LOAD(r7, 0xc138fd09, &(0x7f0000000a40)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x10, 0x0, 0x0, @by_dev={r8}, [@writecache={0x0, 0xd0, 0x0, 0x58, 'writecache\x00', {0x73, 0x20, @ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, '512', 0x20, '2 pause_writeback 100'}}]}) (async, rerun: 32) open(&(0x7f0000000c00)='.\x00', 0x0, 0x0) (rerun: 32) 1m56.64548788s ago: executing program 1 (id=62): openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000040201, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x77, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0xff, 0xffff2d37, 0xff7fff01, 0xfff, 0x5, 0x4, 0x6, 0x8006, 0x0, 0x7, 0x9, 0x1, 0x24, 0x10, 0x5, 0x400, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0xfffffffe, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x10001, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x5, 0x3ff, 0x88, 0x0, 0x5, 0x6, 0x8, 0x8000, 0xfffffffd, 0x40], [0x10000007, 0x9, 0x8000016f, 0x8003, 0x5, 0xfffffff3, 0x3, 0x2, 0xf1, 0xe, 0x2c1, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2e, 0xe, 0x312, 0x66abcbd2, 0xea0, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x400006, 0x1, 0x100000fb, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x405, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x80000000, 0x8, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x7, 0x86, 0x3, 0x303c, 0xfffffffa, 0xa, 0x5, 0x2, 0x2, 0x400003, 0x8, 0x8, 0x6d01, 0x5, 0x38, 0x800003, 0x8, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x10001, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0xffff, 0x80a2ed, 0x1, 0x25], [0x9, 0x9, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0x401, 0x1ff, 0x6, 0x57, 0x5, 0x9, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0x3, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x3, 0xfffff000, 0xffff, 0x3, 0x3, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0xffffffff, 0x4, 0xf1, 0x803, 0xd7, 0x1000200, 0xfffffffd, 0xfff]}, 0x45c) ppoll(&(0x7f0000000880)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a80)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xffffffffffffff4d) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYRES8=r0], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f0000000200), 0x181140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x3ff, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340), 0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000140)={&(0x7f0000000180)=[{0x6, 0x4201, 0x0, 0x0}, {0x401, 0x2000, 0x0, 0x0}, {0x10, 0x9000, 0x0, 0x0}], 0x3}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r6, 0x2275, &(0x7f0000000100)=0x3) 1m41.105657737s ago: executing program 32 (id=62): openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000040201, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x77, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0xff, 0xffff2d37, 0xff7fff01, 0xfff, 0x5, 0x4, 0x6, 0x8006, 0x0, 0x7, 0x9, 0x1, 0x24, 0x10, 0x5, 0x400, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0xfffffffe, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x10001, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x5, 0x3ff, 0x88, 0x0, 0x5, 0x6, 0x8, 0x8000, 0xfffffffd, 0x40], [0x10000007, 0x9, 0x8000016f, 0x8003, 0x5, 0xfffffff3, 0x3, 0x2, 0xf1, 0xe, 0x2c1, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2e, 0xe, 0x312, 0x66abcbd2, 0xea0, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x400006, 0x1, 0x100000fb, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x405, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x80000000, 0x8, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x7, 0x86, 0x3, 0x303c, 0xfffffffa, 0xa, 0x5, 0x2, 0x2, 0x400003, 0x8, 0x8, 0x6d01, 0x5, 0x38, 0x800003, 0x8, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x10001, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0xffff, 0x80a2ed, 0x1, 0x25], [0x9, 0x9, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0x401, 0x1ff, 0x6, 0x57, 0x5, 0x9, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0x3, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x3, 0xfffff000, 0xffff, 0x3, 0x3, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0xffffffff, 0x4, 0xf1, 0x803, 0xd7, 0x1000200, 0xfffffffd, 0xfff]}, 0x45c) ppoll(&(0x7f0000000880)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a80)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xffffffffffffff4d) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYRES8=r0], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f0000000200), 0x181140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x3ff, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340), 0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000140)={&(0x7f0000000180)=[{0x6, 0x4201, 0x0, 0x0}, {0x401, 0x2000, 0x0, 0x0}, {0x10, 0x9000, 0x0, 0x0}], 0x3}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r6, 0x2275, &(0x7f0000000100)=0x3) 7.530254109s ago: executing program 2 (id=656): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x242641, 0xb9}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x88}, 0x80) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f0000000140)='100', 0x3) syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xbd95, 0x10, 0xfffffffd, 0x38f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x40, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81c, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b7, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x624d, 0x40, 0x1, 0x269, 0x0, r8}}], 0x1, 0x0, 0x0) 7.069238386s ago: executing program 2 (id=658): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000540)={&(0x7f0000000580)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000600)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932da564405cc"}, 0x80c}, 0x1, 0x0, 0x0, 0x84844}, 0x20000000) (fail_nth: 7) 6.882028639s ago: executing program 2 (id=659): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./pipe\x00', 0x1ff) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='127.0.0.1:/\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./pipe\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./pipe\x00', 0x400900, 0x0) mount(&(0x7f00000001c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000080)='./mnt\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240)='vers=4.0,sec=krb5p,addr=127.0.0.1\x00') 6.523842665s ago: executing program 2 (id=662): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) r3 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x18000) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000300)={0x22, 0x40000000, 0x0, 0x0}) r5 = syz_kvm_add_vcpu$x86(r2, &(0x7f000000a000)={0x0, &(0x7f000000b000)=[@code={0xa, 0x2c, {"48c7c01d00000048c7c70300000048c7c6001000000f01c10f01d9"}}], 0x2c}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000040)=@x86={0x5, 0xff, 0x88, 0x0, 0x9, 0x3, 0x5, 0x0, 0x2, 0x5, 0x8, 0x33, 0x0, 0x8, 0x7, 0x3, 0x0, 0x2, 0x84, '\x00', 0xfe}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.961934031s ago: executing program 2 (id=668): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_usb_connect$midi(0x4, 0xb9, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x499, 0x101a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x1, 0x1, 0x2, 0xe0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x9, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x8, 0x9}, @ms_header={0x7, 0x24, 0x1, 0x40, 0x7}], [{{0x9, 0x5, 0x5, 0x3, 0x40, 0xf, 0x9, 0x0, {0x7, 0x25, 0x1, 0x3, "ee3ac8"}}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x7f, 0xc, 0x4, {0x13, 0x25, 0x1, 0xf, "aed5964aa932642f439df74506a821"}}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x0, 0x82, 0xf3, {0x7, 0x25, 0x1, 0x3, "867886"}}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0x2, 0x0, 0x3, {0x14, 0x25, 0x1, 0x10, "f636ff18cbb6817ad7d73a4c51944452"}}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x68, 0xfc, 0x6, {0x9, 0x25, 0x1, 0x5, "dd5029e663"}}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x4, 0x4, 0x1, {0x14, 0x25, 0x1, 0x10, "41e06cd6149edfff5f048d759e15e92a"}}}]}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x2, 0x5, 0x80, 0xb0, 0x9}, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="050f3500041410040bed6ccb98f7dda1c0572ed8423352470f010c2a0014060500050710021c840700"/53], 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x430}}]}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x8042, 0x40) setrlimit(0x1, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(r2, 0x0, 0x6ae8, 0x100000001) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000540)='^', 0x34000, 0x0, &(0x7f0000000580)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0x8b25714e) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x4ff3913b, 0xca0, 0xffffffff}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) getsockopt$sock_buf(r5, 0x1, 0x3d, &(0x7f00000000c0)=""/159, &(0x7f0000000180)=0x9f) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60081, 0x0) 3.892528958s ago: executing program 3 (id=690): r0 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff00000007050102400000070502024000000705040240000007050602400000070581034000010705880240"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40800) syz_usb_connect$uac2(0x4, 0xab, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x499, 0x5004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0xd4, 0x0, 0x3, {0x8, 0xb, 0x2, 0x1, 0x1, 0x4, 0x20, 0xa2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x200, 0x8, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x6, 0x0, 0x2, 0x0, 0xff, 0x90, 0x5}, @as_header={0x10, 0x24, 0x1, 0x9, 0xff, 0x3, 0x5, 0xd, 0x10001, 0x9}, @as_header={0x10, 0x24, 0x1, 0x5, 0x8, 0x3, 0x3, 0x3, 0x2, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0xd4a89b2abcc6be4c, 0x0, 0x40, 0x4, {0x8, 0x25, 0x1, 0x1, 0xc, 0xa, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x5, 0xb, {0x8, 0x25, 0x1, 0x0, 0xc, 0x85, 0x2}}}}}}}}]}}, 0x0) syz_clone3(&(0x7f0000000080)={0x100000000, 0x0, 0x0, 0x0, {0x14}, &(0x7f00000001c0)=""/96, 0x60, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) syz_emit_vhci(&(0x7f0000000780)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @any, 0x1}}}, 0xe) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0) syz_usb_ep_write(r0, 0x88, 0xfffffffffffffebe, &(0x7f00000003c0)="02c0e5db37065ae2a1e12a5d97536f0ec800ce5f58753f01a2da60238fdddfe68111cabeff08a03ebc3a5746f2c258f43bff13e494f8e527d18d984bfd8bd882952a13d60c9ed5fc0ceb3f5348c5e49ff7530ef44c8149c792f8c95ff944e5b384586e29ee432d34d71cd03b127428347545ebffe973cdbdf67c31c57df2fc6fa0d55e24c36a434d399615fe1ed5c19b87a44d6b5003c93c92") syz_usb_connect(0x2, 0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff00000007050102400000070502024000000705040240000007050602400000070581034000010705880240"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40800) (async) syz_usb_connect$uac2(0x4, 0xab, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x499, 0x5004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0xd4, 0x0, 0x3, {0x8, 0xb, 0x2, 0x1, 0x1, 0x4, 0x20, 0xa2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x200, 0x8, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x6, 0x0, 0x2, 0x0, 0xff, 0x90, 0x5}, @as_header={0x10, 0x24, 0x1, 0x9, 0xff, 0x3, 0x5, 0xd, 0x10001, 0x9}, @as_header={0x10, 0x24, 0x1, 0x5, 0x8, 0x3, 0x3, 0x3, 0x2, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0xd4a89b2abcc6be4c, 0x0, 0x40, 0x4, {0x8, 0x25, 0x1, 0x1, 0xc, 0xa, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x5, 0xb, {0x8, 0x25, 0x1, 0x0, 0xc, 0x85, 0x2}}}}}}}}]}}, 0x0) (async) syz_clone3(&(0x7f0000000080)={0x100000000, 0x0, 0x0, 0x0, {0x14}, &(0x7f00000001c0)=""/96, 0x60, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) (async) syz_emit_vhci(&(0x7f0000000780)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @any, 0x1}}}, 0xe) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0) (async) syz_usb_ep_write(r0, 0x88, 0xfffffffffffffebe, &(0x7f00000003c0)="02c0e5db37065ae2a1e12a5d97536f0ec800ce5f58753f01a2da60238fdddfe68111cabeff08a03ebc3a5746f2c258f43bff13e494f8e527d18d984bfd8bd882952a13d60c9ed5fc0ceb3f5348c5e49ff7530ef44c8149c792f8c95ff944e5b384586e29ee432d34d71cd03b127428347545ebffe973cdbdf67c31c57df2fc6fa0d55e24c36a434d399615fe1ed5c19b87a44d6b5003c93c92") (async) 3.280355007s ago: executing program 0 (id=696): socket$inet_tcp(0x2, 0x1, 0x0) eventfd2(0x6, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(&(0x7f0000000880), 0x0, 0x401) write$tun(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES64=r0], 0xb2) 3.201766035s ago: executing program 0 (id=698): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000880)=@v3={0x3000000, [{0x3, 0x3}, {0x10, 0xa}]}, 0x18, 0x1) 3.146158881s ago: executing program 0 (id=699): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000740), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000780)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000800)={0x5, 0x4, 0x3, 0x0, 0x4, 0x9, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0x6, 0x0, 0x5, 0xff}) io_setup(0x7ff, &(0x7f0000000040)=0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) r4 = eventfd2(0x5b, 0xc0800) r5 = accept$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000300)=0x1c) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TIOCMGET(r6, 0x5415, 0x0) r7 = eventfd(0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000540)={0x8, r0}) r9 = eventfd(0xf8) ioctl$TUNGETVNETHDRSZ(r8, 0x800454d7, &(0x7f0000000080)) r10 = syz_open_dev$ublk_bdev(&(0x7f0000000840), 0x0, 0x88000) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a80), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r11, 0xc08c5335, &(0x7f0000000ac0)={0x0, 0x80, 0x0, 'queue0\x00'}) io_submit(r2, 0x8, &(0x7f0000000a00)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x4, r10, &(0x7f0000000140)="91059af4bd882a4701e80ad264f5c052e18b66c76ac6d53f8812064b0ed6d8005ef10f2c13e53574fc447f75dd01381b06345fb60f6931abbbc591525ca666564781a514f86ddbc360400a54beb463ce1ab6ce2faa48dac1f41864ab2ce5c6bbcfc620dac2e49b90", 0x68, 0xc8, 0x0, 0x2, r3}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x2, r0, &(0x7f0000000240)="97e1ca0724fe0d4ccde284659da1940b3de0ff", 0x13, 0x0, 0x0, 0x2, r4}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x3b, r5, &(0x7f0000000340)="254be7ca3b831c78d4a4d087bababf41d35af2c646c83636d4c3f55414e9895be97e7935996e63b381cdcc2197b22698468ba97abacf77271a6d0b62d2259e0e40883296312f651bfb8b3263acb4d4d87d76ce5166235db0f1eaf0b17685b80314c761fea81e926a37d29c60e1bc39ba50d9e2be727ca87c95f1f63679c883cf1c1a48b17d6234d63554946e9d7a3baa19fd26e8b367e6e0ad01f2ac28ea77284143316920bb06826797035e2fb8d50fd622f675", 0xb4, 0x2, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xfffe, r6, &(0x7f0000000480)="c0bd", 0x2, 0x1, 0x0, 0x1, r7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x25, r0, &(0x7f0000000500)="6c300117f8580de373ea021295", 0xd, 0x1b, 0x0, 0x1, r8}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x200, r0, &(0x7f00000005c0)="264aa6f6349035c89240bc505b867e15a988aa2e591e8357d6230f805991e276e05f0c569cd77cf35aa40e1d5b5defd0b4c4b658a47effea5422059baefc5118bed05dcb73f14a8ba32077864d1daa6d51b3f396b44e2f8e401dec272d1f7eb878dc6623c17082a88c068630ce32b0da39281ba777ec4b6fd7576a80dce78ca23460b40abc320b8428dc272cacbe770e21f3432a6941e91a9a9b50ebcb5db75a5c335a5b1a7434c78427d4926cfe2f42cf2bbffc0e2c37201d1c147b2c1feea3b1c7a32f05a3ecee", 0xc8, 0xff, 0x0, 0x2, r9}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x5, 0x46, r8, &(0x7f0000000880)="4f703669621ebce42be839d54b3cfba2dbd42d944d4b158663c71843eba3a8cd855729bef99cd51a0f02f4f4a12445e7fc19f3ea228a2a6fa0f64fa03525d40c6f39693aa5ffc68b4b6d70f6e7c8531803eeb2d2490bb12fc7dcd875ced27357facf44ce47ee4b18550efc24c0203b4eff6718cb07f654862718dcc03a3d", 0x7e, 0x9}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x6, 0xf90b, r1, &(0x7f0000000940)="0764df09ca93b32533cf0146d98fef3b72658e18bb51a910c61ee02def786c480a8d41067c0c605a938225c7ef2f93b679fe5263219b5b5ac57d79ce80056f28168ea213b5", 0x45, 0x2fd0, 0x0, 0x2}]) r12 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r12, 0x0, &(0x7f0000000a40)={0x1c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="68c26f5b7305aa8086e1bdc0bb3439fac45e911a220103593e29a698d76096f1c77d27775bef89c8d5ba9d681af142a8308856df683b00efa12fba76b597361344d1319024d31e71d71a3c2bdbe27bcb5192bc778cb24281418136ae964387704d8aa9b262"], 0x28}], 0x1, 0x0, 0x0, 0x4000}, 0x10004090) 2.085204342s ago: executing program 4 (id=701): r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r0, &(0x7f0000000880)="0781", 0x2) 2.055643614s ago: executing program 3 (id=702): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0xffffff, 0x2}, 0x10) write(r0, &(0x7f0000000200)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) 1.950010841s ago: executing program 3 (id=703): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000880)=@v3={0x3000000, [{0x3, 0x3}, {0x10, 0xa}]}, 0x18, 0x1) (fail_nth: 3) 1.816625436s ago: executing program 3 (id=704): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x2, 0x0, [{0x40000001, 0x0, 0xd8}, {0x238, 0x0, 0x9}]}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="00020c0000000c000258"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000680)={0x24, &(0x7f0000000500)={0x40, 0xf, 0x8b, {0x8b, 0x11, "36dcefc88cea974285a6227ce86bc75182272ae474c1a26b945398d7720a320e01259335da7a3793156fce61a5f95013d66466330998ba3f13bf2065e273a605c0a6b4693ff4f8484cde17b04cf89330e5f1d41ed99f6b54b0d52c141847660f2c888fa2f814e1f6ff2263ffaa7da351b95cbeccd31b5ee7d7189fa5716ce3c746b57c06f0b23258bd"}}, &(0x7f00000005c0)={0x0, 0x3, 0x6, @string={0x6, 0x3, "4d124e66"}}, &(0x7f0000000600)={0x0, 0x22, 0xd, {[@global=@item_012={0x0, 0x1, 0x8}, @local=@item_4={0x3, 0x2, 0x9, "7d83a55e"}, @global=@item_4={0x3, 0x1, 0x3, "2b9e5737"}, @local=@item_012={0x1, 0x2, 0xa, "ea"}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x24, 0x6, 0x1, {0x22, 0x787}}}}, &(0x7f0000000880)={0x2c, &(0x7f00000006c0)={0x40, 0xe, 0x83, "338d88f8ef8a212f05e677ae2f44421c4085e1fb6e2d3571681f1d5e58740d790e170b608cff3372d654333bd42a5c79670da15564a8d0d35f0c7fd8368d7375fa6a5993b1bf53379c69f078881d64586661e29a6353a50c6b63b208451781037f8ef58eebf9ae654b5c718291c2b8f7dfcf6940416f122aca2849a78a8be2e8609530"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000800)={0x20, 0x1, 0x2d, "3721f32244c7ed31abbd2a8a42a1414c416d0f1f9fa0a1cd19fab1a437a3d4451fa0f8db851c8084f823d68f3f"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0x2}}) 1.717324459s ago: executing program 4 (id=705): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x7f, 0x5a, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f00000001c0)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, &(0x7f0000005b00)) ioctl$GET_ARRAY_INFO(r1, 0x80480911, &(0x7f0000000280)) pwrite64(r1, &(0x7f0000000300)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000001600)={0x0, 0xffffffffffffffff, 0x800}, &(0x7f0000000240)=0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000005ac0)='task\x00') getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000001680)={0x2, @in6={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}}, 0x247b, 0x1}, &(0x7f0000001740)=0x90) getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r2, 0x84, 0x84, &(0x7f0000001780)={r4, @in6={{0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x25}, 0x10000}}, 0x4e22}, &(0x7f0000001840)=0x90) sigaltstack(&(0x7f0000000540)={&(0x7f0000000580)=""/4094, 0x0, 0xffe}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000380)='sysfs\x00', 0x1214040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001940)='./mnt/trace_pipe\x00', 0x80000, 0x0) read(r5, &(0x7f0000001980)=""/16384, 0x4000) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000005b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005980)=""/151}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001640)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001580)) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x19501) ioctl$STOP_ARRAY(r1, 0x932, 0x0) 1.435635884s ago: executing program 4 (id=706): socket$inet_tcp(0x2, 0x1, 0x0) eventfd2(0x6, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(&(0x7f0000000880), 0x0, 0x401) write$tun(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="141bdf", @ANYRES64=r0], 0xb2) 1.401495011s ago: executing program 0 (id=707): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r1 = syz_create_resource$futex(&(0x7f0000000740)=0x1) r2 = syz_create_resource$futex(&(0x7f0000000780)) futex(r1, 0xb, 0x1, 0x0, r2, 0x0) futex(r1, 0x5, 0x2, 0x0, r2, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000640)='./config\x00', &(0x7f0000000680)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) rmdir(&(0x7f0000000700)='./config/nvmet/subsystems/testnqn\x00') mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1, 0x0) lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.selinux\x00') (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x500, 0x18, 0xffffffffffffffff}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x44, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x44}}, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@private1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private1}}, &(0x7f0000000340)=0xe8) r7 = socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f00000004c0)={0x1, 0x48, 0x4, 0xad1e, '\x00', '\x00', '\x00', 0xf, 0x1, 0xa74, 0x4, "2cc1053767afc8e9c9321b1fa2d4d4c5"}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)={0x28, r9, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x14001) (async) fstat(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r12, 0x0) (async) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000000, &(0x7f0000000400)=ANY=[@ANYBLOB='quota,huge=never,usrquota_block_hardlimit=-,fsuuid=d2632f9c-9e72-a\x00W6-26:5-1b1f8=77,func=BPRM_CHECK,fowner=', @ANYRESDEC=r6, @ANYBLOB="2c000000790000ffff0000122c666f776e", @ANYRESDEC=r12, @ANYBLOB=',\x00']) 1.372057123s ago: executing program 4 (id=708): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0xffffff, 0x2}, 0x10) write(r0, &(0x7f0000000200)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) (fail_nth: 3) 1.208792107s ago: executing program 4 (id=709): syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x801) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000006c0)={0x0, &(0x7f0000000700)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x27, {0x0, "b805000000b9003000000f01c1eef4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x6f}) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)="180c4552", 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mlock(&(0x7f0000158000/0x4000)=nil, 0x4000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone3(&(0x7f0000000800)={0x204801600, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) write(r5, &(0x7f0000000880)="0781", 0x2) 1.203755312s ago: executing program 2 (id=710): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000040d80402c000000000000109022200010100803209040000010300000009211101000122440007058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000040)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x5, 0x201, 0xffffffff, 0x2}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f00000002c0)="1100000010000000000e00"/22, 0x16) write(r3, &(0x7f00000000c0)="04", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r5, 0x89ed, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000180)='w', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x4}, 0x8) write$UHID_INPUT(r1, &(0x7f0000000900)={0x9, {"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", 0x1061}}, 0x1006) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0022440000000600ff0901a10185110902150026ff0075089502810285210903150026ff0075089501810285910904150026ff0075089501910285920905150026ff00750895019102c0"], 0x0}, 0x0) 936.310245ms ago: executing program 3 (id=711): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000004840)={0xc}) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x400000000000041, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (fail_nth: 2) 572.5565ms ago: executing program 4 (id=712): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/net/lo/statistics/tx_window_errors\x00', 0x0, 0x0) read(r1, &(0x7f00000001c0)=""/100, 0x64) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x1409, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4804}, 0x8805) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./gadget\x00', &(0x7f0000000380)='gadgetfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./gadget/dummy_udc\x00', 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x482, 0x0) write$binfmt_aout(r3, &(0x7f00000004c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000500)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) read$FUSE(r5, &(0x7f0000000540)={0x2020}, 0x2020) write(r2, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat(0xffffffffffffff9c, &(0x7f0000000440)='./gadget/ep1in-bulk\x00', 0x80802, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bab000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x490, 0x0, 0xffffffff}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 505.775935ms ago: executing program 0 (id=713): r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r0, &(0x7f0000000880)="0781", 0x2) 52.612073ms ago: executing program 0 (id=714): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050026bd7000000000002e0000009227ff251f384f08000300", @ANYRES32=r2, @ANYBLOB="0a003400010101010101000009002a002503010803000000"], 0x34}, 0x1, 0x0, 0x0, 0x240040d0}, 0x44000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc08c5332, &(0x7f0000000040)={{0x40, 0x13}, 0x1, 0x4, 0x88, {}, 0x0, 0x4000ffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x3}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f0000000240)={0x12f, &(0x7f00000002c0)=[{}]}) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000000a0601020000000000000000020008000900020073797a3000000042240007800c00018008000140e00000020c00028008000140ffffffff08000a40000000010500010007"], 0x4c}}, 0x800) 0s ago: executing program 3 (id=715): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x7f, 0x5a, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f00000001c0)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, &(0x7f0000005b00)) ioctl$GET_ARRAY_INFO(r1, 0x80480911, &(0x7f0000000280)) pwrite64(r1, &(0x7f0000000300)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000001600)={0x0, 0xffffffffffffffff, 0x800}, &(0x7f0000000240)=0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000005ac0)='task\x00') getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000001680)={0x2, @in6={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}}, 0x247b, 0x1}, &(0x7f0000001740)=0x90) getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r2, 0x84, 0x84, &(0x7f0000001780)={r4, @in6={{0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x25}, 0x10000}}, 0x4e22}, &(0x7f0000001840)=0x90) sigaltstack(&(0x7f0000000540)={&(0x7f0000000580)=""/4094, 0x0, 0xffe}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000380)='sysfs\x00', 0x1214040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001940)='./mnt/trace_pipe\x00', 0x80000, 0x0) read(r5, &(0x7f0000001980)=""/16384, 0x4000) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000005b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005980)=""/151}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001640)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001580)) ioctl$STOP_ARRAY(r1, 0x932, 0x0) kernel console output (not intermixed with test programs): _woken_wake_function+0x10/0x10 [ 182.727158][ T7535] __tipc_sendmsg+0x313/0x2b60 [ 182.727199][ T7535] ? process_measurement+0x7b2/0x1c10 [ 182.727221][ T7535] ? __pfx___tipc_sendmsg+0x10/0x10 [ 182.727246][ T7535] ? aa_label_sk_perm+0x532/0x6e0 [ 182.727277][ T7535] ? up_write+0x19d/0x4a0 [ 182.727305][ T7535] ? __lock_acquire+0x747/0x2de0 [ 182.727327][ T7535] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 182.727354][ T7535] ? __lock_acquire+0x747/0x2de0 [ 182.727381][ T7535] ? __lock_acquire+0x747/0x2de0 [ 182.727412][ T7535] ? __lock_acquire+0x747/0x2de0 [ 182.727450][ T7535] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 182.727482][ T7535] ? tipc_sendmsg+0x47/0x70 [ 182.727510][ T7535] ? __local_bh_enable_ip+0xd6/0x140 [ 182.727537][ T7535] tipc_sendmsg+0x55/0x70 [ 182.727574][ T7535] ? __pfx_tipc_sendmsg+0x10/0x10 [ 182.727597][ T7535] sock_sendmsg_nosec+0x14e/0x190 [ 182.727619][ T7535] ____sys_sendmsg+0x54e/0x850 [ 182.727649][ T7535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.727684][ T7535] ? import_iovec+0x73/0xa0 [ 182.727716][ T7535] ___sys_sendmsg+0x2a6/0x360 [ 182.727739][ T7535] ? __lock_acquire+0x747/0x2de0 [ 182.727764][ T7535] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.727824][ T7535] ? __fget_files+0x3a2/0x420 [ 182.727845][ T7535] ? __fget_files+0x2a/0x420 [ 182.727875][ T7535] __x64_sys_sendmsg+0x1b1/0x290 [ 182.727903][ T7535] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 182.727949][ T7535] do_syscall_64+0x166/0x520 [ 182.727976][ T7535] ? trace_irq_disable+0x3b/0x140 [ 182.727998][ T7535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.728018][ T7535] ? clear_bhb_loop+0x70/0xc0 [ 182.728041][ T7535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.728059][ T7535] RIP: 0033:0x7f5591b9f559 [ 182.728078][ T7535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.728094][ T7535] RSP: 002b:00007f55929e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.728115][ T7535] RAX: ffffffffffffffda RBX: 00007f5591e25fa0 RCX: 00007f5591b9f559 [ 182.728130][ T7535] RDX: 0000000000000010 RSI: 0000200000000b00 RDI: 0000000000000005 [ 182.728142][ T7535] RBP: 00007f55929e0090 R08: 0000000000000000 R09: 0000000000000000 [ 182.728154][ T7535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.728166][ T7535] R13: 00007f5591e26038 R14: 00007f5591e25fa0 R15: 00007ffcd138b548 [ 182.728196][ T7535] [ 182.785321][ T7535] FAULT_INJECTION: forcing a failure. [ 182.785321][ T7535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.785372][ T7535] CPU: 0 UID: 0 PID: 7535 Comm: syz.4.522 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.785401][ T7535] Tainted: [L]=SOFTLOCKUP [ 182.785407][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 182.785418][ T7535] Call Trace: [ 182.785426][ T7535] [ 182.785434][ T7535] dump_stack_lvl+0xe8/0x150 [ 182.785467][ T7535] should_fail_ex+0x3eb/0x540 [ 182.785502][ T7535] copy_fpstate_to_sigframe+0xaf8/0xe10 [ 182.785533][ T7535] ? copy_fpstate_to_sigframe+0x196/0xe10 [ 182.785567][ T7535] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 182.785599][ T7535] ? do_raw_spin_unlock+0xf5/0x200 [ 182.785635][ T7535] ? timerqueue_linked_add+0x287/0x2e0 [ 182.785661][ T7535] ? fpu__alloc_mathframe+0xac/0x130 [ 182.785690][ T7535] get_sigframe+0x603/0x830 [ 182.785726][ T7535] ? __pfx_get_sigframe+0x10/0x10 [ 182.785754][ T7535] ? posixtimer_deliver_signal+0x3da/0x540 [ 182.785790][ T7535] x64_setup_rt_frame+0x163/0xc50 [ 182.785822][ T7535] ? _raw_spin_unlock_irq+0x23/0x50 [ 182.785849][ T7535] ? _raw_spin_unlock_irq+0x2e/0x50 [ 182.785873][ T7535] ? get_signal+0x1223/0x1430 [ 182.785901][ T7535] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 182.785937][ T7535] arch_do_signal_or_restart+0x456/0x860 [ 182.785968][ T7535] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 182.785994][ T7535] ? __x64_sys_sendmsg+0x25d/0x290 [ 182.786036][ T7535] exit_to_user_mode_loop+0x10e/0x770 [ 182.786059][ T7535] ? rcu_is_watching+0x16/0xb0 [ 182.786089][ T7535] do_syscall_64+0x328/0x520 [ 182.786115][ T7535] ? trace_irq_disable+0x3b/0x140 [ 182.786145][ T7535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.786164][ T7535] ? clear_bhb_loop+0x70/0xc0 [ 182.786187][ T7535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.786206][ T7535] RIP: 0033:0x7f5591b9f557 [ 182.786224][ T7535] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 182.786240][ T7535] RSP: 002b:00007f55929e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.786260][ T7535] RAX: 000000000000002e RBX: 00007f5591e25fa0 RCX: 00007f5591b9f559 [ 182.786274][ T7535] RDX: 0000000000000010 RSI: 0000200000000b00 RDI: 0000000000000005 [ 182.786286][ T7535] RBP: 00007f55929e0090 R08: 0000000000000000 R09: 0000000000000000 [ 182.786298][ T7535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.786310][ T7535] R13: 00007f5591e26038 R14: 00007f5591e25fa0 R15: 00007ffcd138b548 [ 182.786340][ T7535] [ 182.878366][ T7538] FAULT_INJECTION: forcing a failure. [ 182.878366][ T7538] name failslab, interval 1, probability 0, space 0, times 0 [ 182.878422][ T7538] CPU: 0 UID: 0 PID: 7538 Comm: syz.4.523 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.878449][ T7538] Tainted: [L]=SOFTLOCKUP [ 182.878456][ T7538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 182.878467][ T7538] Call Trace: [ 182.878475][ T7538] [ 182.878483][ T7538] dump_stack_lvl+0xe8/0x150 [ 182.878514][ T7538] should_fail_ex+0x3eb/0x540 [ 182.878549][ T7538] ? __alloc_skb+0x1db/0x7a0 [ 182.878571][ T7538] should_failslab+0xa8/0x100 [ 182.878598][ T7538] ? __alloc_skb+0x1db/0x7a0 [ 182.878618][ T7538] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 182.878638][ T7538] ? __alloc_skb+0x18d/0x7a0 [ 182.878694][ T7538] ? __alloc_skb+0x1db/0x7a0 [ 182.878721][ T7538] __alloc_skb+0x1db/0x7a0 [ 182.878748][ T7538] netlink_sendmsg+0x5cd/0xb20 [ 182.878776][ T7538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.878800][ T7538] ? aa_sock_msg_perm+0x144/0x210 [ 182.878831][ T7538] ? apparmor_socket_sendmsg+0x98/0x360 [ 182.878856][ T7538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.878877][ T7538] sock_sendmsg_nosec+0x14e/0x190 [ 182.878898][ T7538] ____sys_sendmsg+0x54e/0x850 [ 182.878928][ T7538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.878962][ T7538] ? import_iovec+0x73/0xa0 [ 182.878993][ T7538] ___sys_sendmsg+0x2a6/0x360 [ 182.879015][ T7538] ? __lock_acquire+0x747/0x2de0 [ 182.879040][ T7538] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.879099][ T7538] ? __fget_files+0x3a2/0x420 [ 182.879119][ T7538] ? __fget_files+0x2a/0x420 [ 182.879147][ T7538] __x64_sys_sendmsg+0x1b1/0x290 [ 182.879174][ T7538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 182.879219][ T7538] do_syscall_64+0x166/0x520 [ 182.879244][ T7538] ? trace_irq_disable+0x3b/0x140 [ 182.879267][ T7538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.879287][ T7538] ? clear_bhb_loop+0x70/0xc0 [ 182.879309][ T7538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.879328][ T7538] RIP: 0033:0x7f5591b9f559 [ 182.879344][ T7538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.879358][ T7538] RSP: 002b:00007f55929e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.879377][ T7538] RAX: ffffffffffffffda RBX: 00007f5591e25fa0 RCX: 00007f5591b9f559 [ 182.879390][ T7538] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: 0000000000000003 [ 182.879401][ T7538] RBP: 00007f55929e0090 R08: 0000000000000000 R09: 0000000000000000 [ 182.879412][ T7538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.879423][ T7538] R13: 00007f5591e26038 R14: 00007f5591e25fa0 R15: 00007ffcd138b548 [ 182.879453][ T7538] [ 182.971413][ T2282] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 183.126029][ T2282] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 183.127926][ T2282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.127960][ T2282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.128005][ T2282] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 183.128045][ T2282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.133273][ T2282] usb 4-1: config 0 descriptor?? [ 183.798449][ T2282] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 183.798488][ T2282] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 183.798515][ T2282] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 183.798542][ T2282] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 183.798588][ T2282] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 183.798614][ T2282] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 183.798640][ T2282] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 183.854095][ T2282] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 183.854153][ T2282] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 183.891596][ T2282] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 183.897209][ T2282] usb 4-1: USB disconnect, device number 51 [ 184.014004][ T7552] fido_id[7552]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 184.236924][ T7557] FAULT_INJECTION: forcing a failure. [ 184.236924][ T7557] name failslab, interval 1, probability 0, space 0, times 0 [ 184.236957][ T7557] CPU: 1 UID: 0 PID: 7557 Comm: syz.4.529 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.236983][ T7557] Tainted: [L]=SOFTLOCKUP [ 184.236990][ T7557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 184.236997][ T7557] Call Trace: [ 184.237001][ T7557] [ 184.237006][ T7557] dump_stack_lvl+0xe8/0x150 [ 184.237026][ T7557] should_fail_ex+0x3eb/0x540 [ 184.237050][ T7557] should_failslab+0xa8/0x100 [ 184.237080][ T7557] __kmalloc_noprof+0xf9/0x710 [ 184.237101][ T7557] ? iovec_from_user+0x87/0x250 [ 184.237129][ T7557] ? iovec_from_user+0x87/0x250 [ 184.237151][ T7557] iovec_from_user+0x87/0x250 [ 184.237178][ T7557] __import_iovec+0x153/0x7d0 [ 184.237224][ T7557] import_iovec+0x73/0xa0 [ 184.237252][ T7557] ___sys_recvmsg+0x4ca/0x5a0 [ 184.237286][ T7557] ? __pfx____sys_recvmsg+0x10/0x10 [ 184.237317][ T7557] ? lock_acquire+0x115/0x350 [ 184.237339][ T7557] ? __fget_files+0x2a/0x420 [ 184.237357][ T7557] ? __fget_files+0x3a2/0x420 [ 184.237377][ T7557] ? __fget_files+0x2a/0x420 [ 184.237407][ T7557] __x64_sys_recvmsg+0x1ae/0x290 [ 184.237437][ T7557] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 184.237463][ T7557] do_syscall_64+0x166/0x520 [ 184.237478][ T7557] ? trace_irq_disable+0x3b/0x140 [ 184.237491][ T7557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.237506][ T7557] ? clear_bhb_loop+0x70/0xc0 [ 184.237529][ T7557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.237548][ T7557] RIP: 0033:0x7f5591b9f559 [ 184.237565][ T7557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.237581][ T7557] RSP: 002b:00007f55929e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 184.237602][ T7557] RAX: ffffffffffffffda RBX: 00007f5591e25fa0 RCX: 00007f5591b9f559 [ 184.237616][ T7557] RDX: 0000000000010082 RSI: 0000200000000180 RDI: 0000000000000003 [ 184.237628][ T7557] RBP: 00007f55929e0090 R08: 0000000000000000 R09: 0000000000000000 [ 184.237635][ T7557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.237641][ T7557] R13: 00007f5591e26038 R14: 00007f5591e25fa0 R15: 00007ffcd138b548 [ 184.237657][ T7557] [ 184.497329][ T7565] syz_tun: entered allmulticast mode [ 184.515965][ T7565] dvmrp8: entered allmulticast mode [ 184.529036][ T7564] syz_tun: left allmulticast mode [ 184.720760][ T7562] FAULT_INJECTION: forcing a failure. [ 184.720760][ T7562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.720793][ T7562] CPU: 1 UID: 0 PID: 7562 Comm: syz.4.531 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.720820][ T7562] Tainted: [L]=SOFTLOCKUP [ 184.720827][ T7562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 184.720839][ T7562] Call Trace: [ 184.720846][ T7562] [ 184.720854][ T7562] dump_stack_lvl+0xe8/0x150 [ 184.720887][ T7562] should_fail_ex+0x3eb/0x540 [ 184.720921][ T7562] _copy_to_user+0x31/0xb0 [ 184.720943][ T7562] simple_read_from_buffer+0xe1/0x170 [ 184.720970][ T7562] proc_fail_nth_read+0x1bb/0x230 [ 184.721001][ T7562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.721030][ T7562] ? rw_verify_area+0x24a/0x4c0 [ 184.721055][ T7562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.721082][ T7562] vfs_read+0x213/0xa80 [ 184.721110][ T7562] ? __pfx___mutex_lock+0x10/0x10 [ 184.721140][ T7562] ? __pfx_vfs_read+0x10/0x10 [ 184.721165][ T7562] ? __fget_files+0x2a/0x420 [ 184.721186][ T7562] ? __fget_files+0x3a2/0x420 [ 184.721205][ T7562] ? __fget_files+0x2a/0x420 [ 184.721231][ T7562] ? fdget+0x1ac/0x250 [ 184.721260][ T7562] ksys_read+0x150/0x270 [ 184.721285][ T7562] ? __pfx_ksys_read+0x10/0x10 [ 184.721320][ T7562] do_syscall_64+0x166/0x520 [ 184.721347][ T7562] ? trace_irq_disable+0x3b/0x140 [ 184.721370][ T7562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.721390][ T7562] ? clear_bhb_loop+0x70/0xc0 [ 184.721414][ T7562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.721433][ T7562] RIP: 0033:0x7f5591b5fd8e [ 184.721451][ T7562] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.721468][ T7562] RSP: 002b:00007f55929befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.721488][ T7562] RAX: ffffffffffffffda RBX: 00007f55929bf6c0 RCX: 00007f5591b5fd8e [ 184.721509][ T7562] RDX: 000000000000000f RSI: 00007f55929bf0a0 RDI: 0000000000000005 [ 184.721521][ T7562] RBP: 00007f55929bf090 R08: 0000000000000000 R09: 0000000000000000 [ 184.721534][ T7562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.721545][ T7562] R13: 00007f5591e26128 R14: 00007f5591e26090 R15: 00007ffcd138b548 [ 184.721578][ T7562] [ 184.803865][ T7572] ecryptfs: Unknown parameter 'jcryptfs_fnek_sig' [ 184.990173][ T5728] usb 3-1: 1:1 : no UAC_FORMAT_TYPE desc [ 184.990595][ T5728] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 185.069958][ T5728] usb 3-1: USB disconnect, device number 39 [ 185.078316][ T7578] FAULT_INJECTION: forcing a failure. [ 185.078316][ T7578] name failslab, interval 1, probability 0, space 0, times 0 [ 185.078348][ T7578] CPU: 1 UID: 0 PID: 7578 Comm: syz.2.537 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.078374][ T7578] Tainted: [L]=SOFTLOCKUP [ 185.078381][ T7578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 185.078392][ T7578] Call Trace: [ 185.078400][ T7578] [ 185.078407][ T7578] dump_stack_lvl+0xe8/0x150 [ 185.078441][ T7578] should_fail_ex+0x3eb/0x540 [ 185.078473][ T7578] ? __alloc_skb+0x1db/0x7a0 [ 185.078495][ T7578] should_failslab+0xa8/0x100 [ 185.078523][ T7578] ? __alloc_skb+0x1db/0x7a0 [ 185.078543][ T7578] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 185.078563][ T7578] ? __alloc_skb+0x18d/0x7a0 [ 185.078585][ T7578] ? __alloc_skb+0x1db/0x7a0 [ 185.078612][ T7578] __alloc_skb+0x1db/0x7a0 [ 185.078638][ T7578] netlink_sendmsg+0x5cd/0xb20 [ 185.078666][ T7578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.078690][ T7578] ? aa_sock_msg_perm+0x144/0x210 [ 185.078722][ T7578] ? apparmor_socket_sendmsg+0x98/0x360 [ 185.078748][ T7578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.078768][ T7578] sock_sendmsg_nosec+0x14e/0x190 [ 185.078789][ T7578] ____sys_sendmsg+0x54e/0x850 [ 185.078820][ T7578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.078853][ T7578] ? import_iovec+0x73/0xa0 [ 185.078886][ T7578] ___sys_sendmsg+0x2a6/0x360 [ 185.078908][ T7578] ? __lock_acquire+0x747/0x2de0 [ 185.078934][ T7578] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.078992][ T7578] ? __fget_files+0x3a2/0x420 [ 185.079012][ T7578] ? __fget_files+0x2a/0x420 [ 185.079042][ T7578] __x64_sys_sendmsg+0x1b1/0x290 [ 185.079078][ T7578] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.079125][ T7578] do_syscall_64+0x166/0x520 [ 185.079159][ T7578] ? trace_irq_disable+0x3b/0x140 [ 185.079182][ T7578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.079202][ T7578] ? clear_bhb_loop+0x70/0xc0 [ 185.079224][ T7578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.079243][ T7578] RIP: 0033:0x7efcc039f559 [ 185.079260][ T7578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.079276][ T7578] RSP: 002b:00007efcc1183028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.079296][ T7578] RAX: ffffffffffffffda RBX: 00007efcc0625fa0 RCX: 00007efcc039f559 [ 185.079310][ T7578] RDX: 0000000004080040 RSI: 0000200000000500 RDI: 0000000000000004 [ 185.079322][ T7578] RBP: 00007efcc1183090 R08: 0000000000000000 R09: 0000000000000000 [ 185.079334][ T7578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.079345][ T7578] R13: 00007efcc0626038 R14: 00007efcc0625fa0 R15: 00007ffde6139a48 [ 185.079375][ T7578] [ 185.502869][ T7572] rxe_eth0 speed is unknown, defaulting to 1000 [ 185.664135][ T7593] FAULT_INJECTION: forcing a failure. [ 185.664135][ T7593] name failslab, interval 1, probability 0, space 0, times 0 [ 185.664170][ T7593] CPU: 1 UID: 0 PID: 7593 Comm: syz.4.541 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.664198][ T7593] Tainted: [L]=SOFTLOCKUP [ 185.664206][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 185.664224][ T7593] Call Trace: [ 185.664232][ T7593] [ 185.664242][ T7593] dump_stack_lvl+0xe8/0x150 [ 185.664276][ T7593] should_fail_ex+0x3eb/0x540 [ 185.664308][ T7593] should_failslab+0xa8/0x100 [ 185.664315][ T7594] FAULT_INJECTION: forcing a failure. [ 185.664315][ T7594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.664345][ T7593] ? security_inode_alloc+0x39/0x310 [ 185.664374][ T7593] kmem_cache_alloc_noprof+0x9c/0x600 [ 185.664397][ T7593] ? __pfx_make_kgid+0x10/0x10 [ 185.664417][ T7593] ? security_inode_alloc+0x39/0x310 [ 185.664451][ T7593] security_inode_alloc+0x39/0x310 [ 185.664480][ T7593] inode_init_always_gfp+0x97e/0xd30 [ 185.664506][ T7593] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 185.664532][ T7593] alloc_inode+0x82/0x1b0 [ 185.664553][ T7593] new_inode+0x1f/0x170 [ 185.664576][ T7593] shmem_get_inode+0x3a4/0x1030 [ 185.664612][ T7593] ? __pfx_shmem_get_inode+0x10/0x10 [ 185.664640][ T7593] ? do_raw_spin_unlock+0xf5/0x200 [ 185.664674][ T7593] shmem_tmpfile+0x58/0x150 [ 185.664704][ T7593] vfs_tmpfile+0x53d/0xa00 [ 185.664740][ T7593] kernel_tmpfile_open+0x4d/0x90 [ 185.664766][ T7593] ovl_get_workdir+0x5ea/0x1980 [ 185.664794][ T7593] ? __lock_acquire+0x747/0x2de0 [ 185.664823][ T7593] ? __pfx_ovl_get_workdir+0x10/0x10 [ 185.664863][ T7593] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 185.664889][ T7593] ? pcpu_alloc_noprof+0x100f/0x1900 [ 185.664924][ T7593] ? rcu_is_watching+0x16/0xb0 [ 185.664956][ T7593] ? do_raw_spin_lock+0x12b/0x2f0 [ 185.664995][ T7593] ? do_raw_spin_unlock+0xf5/0x200 [ 185.665025][ T7593] ? _raw_spin_unlock+0x28/0x50 [ 185.665049][ T7593] ? ovl_inuse_trylock+0x177/0x230 [ 185.665079][ T7593] ovl_fill_super+0x1767/0x4570 [ 185.665120][ T7593] ? __mutex_unlock_slowpath+0x731/0x900 [ 185.665161][ T7593] ? __raw_spin_lock_init+0x45/0x100 [ 185.665195][ T7593] ? __pfx_ovl_fill_super+0x10/0x10 [ 185.665222][ T7593] ? shrinker_register+0x158/0x210 [ 185.665255][ T7593] ? sget_fc+0x1b47/0x1ce0 [ 185.665295][ T7593] ? __pfx_ovl_next_opt+0x10/0x10 [ 185.665322][ T7593] ? __pfx_ovl_fill_super+0x10/0x10 [ 185.665360][ T7593] get_tree_nodev+0xbe/0x150 [ 185.665386][ T7593] vfs_get_tree+0x92/0x2a0 [ 185.665417][ T7593] do_new_mount+0x325/0xb00 [ 185.665447][ T7593] ? __pfx_do_new_mount+0x10/0x10 [ 185.665472][ T7593] ? ns_capable+0x84/0xe0 [ 185.665500][ T7593] ? path_mount+0x647/0x1050 [ 185.665527][ T7593] ? user_path_at+0xd4/0x160 [ 185.665554][ T7593] __se_sys_mount+0x31d/0x420 [ 185.665581][ T7593] ? __pfx___se_sys_mount+0x10/0x10 [ 185.665606][ T7593] ? __x64_sys_mount+0x20/0xc0 [ 185.665629][ T7593] do_syscall_64+0x166/0x520 [ 185.665665][ T7593] ? trace_irq_disable+0x3b/0x140 [ 185.665691][ T7593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.665714][ T7593] ? clear_bhb_loop+0x70/0xc0 [ 185.665739][ T7593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.665761][ T7593] RIP: 0033:0x7f5591b9f559 [ 185.665782][ T7593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.665800][ T7593] RSP: 002b:00007f55929e0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 185.665822][ T7593] RAX: ffffffffffffffda RBX: 00007f5591e25fa0 RCX: 00007f5591b9f559 [ 185.665837][ T7593] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 185.665852][ T7593] RBP: 00007f5591c36b20 R08: 0000200000000240 R09: 0000000000000000 [ 185.665867][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.665881][ T7593] R13: 00007f5591e26038 R14: 00007f5591e25fa0 R15: 00007ffcd138b548 [ 185.665921][ T7593] [ 185.666637][ T7593] overlayfs: upper fs does not support tmpfile. [ 185.668392][ T7594] CPU: 0 UID: 0 PID: 7594 Comm: syz.0.542 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.668422][ T7594] Tainted: [L]=SOFTLOCKUP [ 185.668429][ T7594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 185.668440][ T7594] Call Trace: [ 185.668447][ T7594] [ 185.668455][ T7594] dump_stack_lvl+0xe8/0x150 [ 185.668489][ T7594] should_fail_ex+0x3eb/0x540 [ 185.668522][ T7594] _copy_from_user+0x2d/0xb0 [ 185.668541][ T7594] sockptr_to_sockopt+0xc0/0x3a0 [ 185.668569][ T7594] ? __pfx_sockptr_to_sockopt+0x10/0x10 [ 185.668594][ T7594] ? __might_fault+0xaf/0x130 [ 185.668627][ T7594] do_sock_getsockopt+0x36c/0x640 [ 185.668657][ T7594] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 185.668696][ T7594] ? __fget_files+0x3a2/0x420 [ 185.668716][ T7594] ? __fget_files+0x2a/0x420 [ 185.668744][ T7594] __x64_sys_getsockopt+0x1a4/0x240 [ 185.668777][ T7594] do_syscall_64+0x166/0x520 [ 185.668804][ T7594] ? trace_irq_disable+0x3b/0x140 [ 185.668827][ T7594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.668853][ T7594] ? clear_bhb_loop+0x70/0xc0 [ 185.668876][ T7594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.668895][ T7594] RIP: 0033:0x7f3eb039f559 [ 185.668913][ T7594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.668929][ T7594] RSP: 002b:00007f3eb12c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 185.668949][ T7594] RAX: ffffffffffffffda RBX: 00007f3eb0625fa0 RCX: 00007f3eb039f559 [ 185.668964][ T7594] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000003 [ 185.668976][ T7594] RBP: 00007f3eb12c9090 R08: 0000200000000000 R09: 0000000000000000 [ 185.668989][ T7594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.669001][ T7594] R13: 00007f3eb0626038 R14: 00007f3eb0625fa0 R15: 00007ffde9418528 [ 185.669031][ T7594] [ 185.900516][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'. [ 186.161248][ T7602] FAULT_INJECTION: forcing a failure. [ 186.161248][ T7602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.161280][ T7602] CPU: 0 UID: 0 PID: 7602 Comm: syz.2.546 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.161305][ T7602] Tainted: [L]=SOFTLOCKUP [ 186.161312][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 186.161323][ T7602] Call Trace: [ 186.161330][ T7602] [ 186.161338][ T7602] dump_stack_lvl+0xe8/0x150 [ 186.161372][ T7602] should_fail_ex+0x3eb/0x540 [ 186.161409][ T7602] _copy_from_user+0x2d/0xb0 [ 186.161430][ T7602] kstrtouint_from_user+0xd6/0x180 [ 186.161458][ T7602] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 186.161492][ T7602] ? lock_acquire+0x115/0x350 [ 186.161518][ T7602] proc_fail_nth_write+0x8e/0x210 [ 186.161548][ T7602] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 186.161583][ T7602] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 186.161606][ T7602] vfs_write+0x296/0xba0 [ 186.161635][ T7602] ? __pfx_vfs_write+0x10/0x10 [ 186.161658][ T7602] ? __fget_files+0x2a/0x420 [ 186.161676][ T7602] ? __fget_files+0x3a2/0x420 [ 186.161694][ T7602] ? __fget_files+0x2a/0x420 [ 186.161719][ T7602] ? fdget+0x1ac/0x250 [ 186.161747][ T7602] ksys_write+0x150/0x270 [ 186.161773][ T7602] ? __pfx_ksys_write+0x10/0x10 [ 186.161807][ T7602] do_syscall_64+0x166/0x520 [ 186.161835][ T7602] ? trace_irq_disable+0x3b/0x140 [ 186.161866][ T7602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.161884][ T7602] ? clear_bhb_loop+0x70/0xc0 [ 186.161908][ T7602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.161927][ T7602] RIP: 0033:0x7efcc035fd8e [ 186.161945][ T7602] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.161962][ T7602] RSP: 002b:00007efcc1182fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.161982][ T7602] RAX: ffffffffffffffda RBX: 00007efcc11836c0 RCX: 00007efcc035fd8e [ 186.161997][ T7602] RDX: 0000000000000001 RSI: 00007efcc11830a0 RDI: 0000000000000006 [ 186.162009][ T7602] RBP: 00007efcc1183090 R08: 0000000000000000 R09: 0000000000000000 [ 186.162021][ T7602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.162033][ T7602] R13: 00007efcc0626038 R14: 00007efcc0625fa0 R15: 00007ffde6139a48 [ 186.162065][ T7602] [ 186.371100][ T7603] loop4: detected capacity change from 0 to 7 [ 186.400840][ T7603] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 186.400870][ T7603] loop4: partition table partially beyond EOD, truncated [ 186.401061][ T7603] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 186.645625][ T7611] FAULT_INJECTION: forcing a failure. [ 186.645625][ T7611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.645658][ T7611] CPU: 1 UID: 0 PID: 7611 Comm: syz.4.549 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.645685][ T7611] Tainted: [L]=SOFTLOCKUP [ 186.645693][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 186.645705][ T7611] Call Trace: [ 186.645713][ T7611] [ 186.645721][ T7611] dump_stack_lvl+0xe8/0x150 [ 186.645755][ T7611] should_fail_ex+0x3eb/0x540 [ 186.645788][ T7611] _copy_from_user+0x2d/0xb0 [ 186.645808][ T7611] __se_sys_sendfile64+0xac/0x1a0 [ 186.645840][ T7611] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 186.645887][ T7611] do_syscall_64+0x166/0x520 [ 186.645915][ T7611] ? trace_irq_disable+0x3b/0x140 [ 186.645939][ T7611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.645959][ T7611] ? clear_bhb_loop+0x70/0xc0 [ 186.645982][ T7611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.646001][ T7611] RIP: 0033:0x7f5591b9f559 [ 186.646019][ T7611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.646034][ T7611] RSP: 002b:00007f55929e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 186.646054][ T7611] RAX: ffffffffffffffda RBX: 00007f5591e25fa0 RCX: 00007f5591b9f559 [ 186.646069][ T7611] RDX: 0000200000000640 RSI: 0000000000000004 RDI: 0000000000000004 [ 186.646081][ T7611] RBP: 00007f55929e0090 R08: 0000000000000000 R09: 0000000000000000 [ 186.646093][ T7611] R10: 0000000000000037 R11: 0000000000000246 R12: 0000000000000001 [ 186.646105][ T7611] R13: 00007f5591e26038 R14: 00007f5591e25fa0 R15: 00007ffcd138b548 [ 186.646136][ T7611] [ 186.680709][ T2282] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 186.831345][ T2282] usb 1-1: Using ep0 maxpacket: 8 [ 186.834970][ T2282] usb 1-1: unable to get BOS descriptor or descriptor too short [ 186.835018][ T2282] usb 1-1: New USB device found: idVendor=0bda, idProduct=4014, bcdDevice=0.40 [ 186.836559][ T2282] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.836623][ T2282] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 50814, setting to 1024 [ 186.836659][ T2282] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 186.845030][ T2282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.845056][ T2282] usb 1-1: Product: syz [ 186.845070][ T2282] usb 1-1: Manufacturer: syz [ 186.845084][ T2282] usb 1-1: SerialNumber: syz [ 186.953591][ T33] audit: type=1326 audit(1793917208.748:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7616 comm="syz.2.552" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efcc039f559 code=0x0 [ 187.101426][ T2282] usb 1-1: 1:1 : no UAC_FORMAT_TYPE desc [ 187.102066][ T2282] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 187.217892][ T2282] usb 1-1: USB disconnect, device number 44 [ 187.446000][ T7624] FAULT_INJECTION: forcing a failure. [ 187.446000][ T7624] name failslab, interval 1, probability 0, space 0, times 0 [ 187.446022][ T7624] CPU: 0 UID: 0 PID: 7624 Comm: syz.3.553 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.446041][ T7624] Tainted: [L]=SOFTLOCKUP [ 187.446046][ T7624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 187.446056][ T7624] Call Trace: [ 187.446061][ T7624] [ 187.446067][ T7624] dump_stack_lvl+0xe8/0x150 [ 187.446090][ T7624] should_fail_ex+0x3eb/0x540 [ 187.446111][ T7624] ? __alloc_skb+0x1db/0x7a0 [ 187.446125][ T7624] should_failslab+0xa8/0x100 [ 187.446143][ T7624] ? __alloc_skb+0x1db/0x7a0 [ 187.446159][ T7624] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 187.446173][ T7624] ? __alloc_skb+0x18d/0x7a0 [ 187.446187][ T7624] ? __alloc_skb+0x1db/0x7a0 [ 187.446205][ T7624] __alloc_skb+0x1db/0x7a0 [ 187.446222][ T7624] alloc_uevent_skb+0x7d/0x230 [ 187.446241][ T7624] kobject_uevent_net_broadcast+0x184/0x560 [ 187.446262][ T7624] kobject_uevent_env+0x566/0x9e0 [ 187.446284][ T7624] device_add+0x544/0xb80 [ 187.446302][ T7624] wiphy_register+0x2178/0x3290 [ 187.446326][ T7624] ? __pfx_wiphy_register+0x10/0x10 [ 187.446340][ T7624] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 187.446358][ T7624] ? ieee80211_init_rate_ctrl_alg+0x501/0x540 [ 187.446376][ T7624] ieee80211_register_hw+0x3d72/0x4b30 [ 187.446401][ T7624] ? ieee80211_register_hw+0x19c1/0x4b30 [ 187.446431][ T7624] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 187.446449][ T7624] ? __asan_memset+0x22/0x50 [ 187.446462][ T7624] ? __hrtimer_setup+0x1b7/0x260 [ 187.446480][ T7624] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 187.446500][ T7624] mac80211_hwsim_new_radio+0x32f1/0x5990 [ 187.446536][ T7624] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 187.446553][ T7624] ? trace_kmalloc+0x2a/0xf0 [ 187.446571][ T7624] hwsim_new_radio_nl+0xd8b/0xf90 [ 187.446596][ T7624] genl_family_rcv_msg_doit+0x233/0x340 [ 187.446622][ T7624] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 187.446683][ T7624] ? bpf_lsm_capable+0x9/0x20 [ 187.446714][ T7624] ? security_capable+0x7e/0x2c0 [ 187.446740][ T7624] genl_rcv_msg+0x614/0x7a0 [ 187.446762][ T7624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.446780][ T7624] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 187.446800][ T7624] ? __asan_memcpy+0x40/0x70 [ 187.446818][ T7624] netlink_rcv_skb+0x226/0x4a0 [ 187.446833][ T7624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.446850][ T7624] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.446873][ T7624] ? down_read+0x2b9/0x320 [ 187.446888][ T7624] genl_rcv+0x28/0x40 [ 187.446903][ T7624] netlink_unicast+0x8ef/0xa80 [ 187.446933][ T7624] netlink_sendmsg+0x7f0/0xb20 [ 187.446950][ T7624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.446967][ T7624] ? aa_sock_msg_perm+0x144/0x210 [ 187.446988][ T7624] ? apparmor_socket_sendmsg+0x98/0x360 [ 187.447005][ T7624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.447019][ T7624] sock_sendmsg_nosec+0x14e/0x190 [ 187.447034][ T7624] ____sys_sendmsg+0x54e/0x850 [ 187.447054][ T7624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.447077][ T7624] ? import_iovec+0x73/0xa0 [ 187.447098][ T7624] ___sys_sendmsg+0x2a6/0x360 [ 187.447113][ T7624] ? __lock_acquire+0x747/0x2de0 [ 187.447130][ T7624] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.447148][ T7624] ? futex_wait+0x2a2/0x390 [ 187.447184][ T7624] ? __fget_files+0x3a2/0x420 [ 187.447198][ T7624] ? __fget_files+0x2a/0x420 [ 187.447218][ T7624] __x64_sys_sendmsg+0x1b1/0x290 [ 187.447235][ T7624] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.447265][ T7624] do_syscall_64+0x166/0x520 [ 187.447282][ T7624] ? trace_irq_disable+0x3b/0x140 [ 187.447298][ T7624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.447311][ T7624] ? clear_bhb_loop+0x70/0xc0 [ 187.447327][ T7624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.447340][ T7624] RIP: 0033:0x7f228219f559 [ 187.447353][ T7624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.447364][ T7624] RSP: 002b:00007f22803f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.447379][ T7624] RAX: ffffffffffffffda RBX: 00007f2282425fa0 RCX: 00007f228219f559 [ 187.447389][ T7624] RDX: 0000000004080040 RSI: 0000200000000500 RDI: 0000000000000004 [ 187.447398][ T7624] RBP: 00007f2282236b20 R08: 0000000000000000 R09: 0000000000000000 [ 187.447407][ T7624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.447414][ T7624] R13: 00007f2282426038 R14: 00007f2282425fa0 R15: 00007ffcb4aa01f8 [ 187.447435][ T7624] [ 187.575144][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'. [ 187.575172][ T7626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.554'. [ 187.575935][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.554'. [ 187.606562][ T7626] netlink: 36 bytes leftover after parsing attributes in process `syz.3.554'. [ 187.966596][ T7638] usb usb5: usbfs: process 7638 (syz.2.558) did not claim interface 0 before use [ 188.020894][ T196] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 188.024876][ T7632] 9p: Bad value for 'rfdno' [ 188.173574][ T196] usb 4-1: Using ep0 maxpacket: 8 [ 188.174418][ T196] usb 4-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 188.179287][ T196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.179314][ T196] usb 4-1: Product: syz [ 188.179329][ T196] usb 4-1: Manufacturer: syz [ 188.179342][ T196] usb 4-1: SerialNumber: syz [ 188.181418][ T196] usb 4-1: config 0 descriptor?? [ 188.387035][ T7146] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 188.394013][ T7652] trusted_key: encrypted_key: key trusted:syz not found [ 188.400312][ T196] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 188.560433][ T7146] usb 1-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 188.573433][ T7146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.573462][ T7146] usb 1-1: Product: syz [ 188.573478][ T7146] usb 1-1: Manufacturer: syz [ 188.573493][ T7146] usb 1-1: SerialNumber: syz [ 188.638887][ T5752] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 189.075649][ T196] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 189.216259][ T7667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.218464][ T7667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.687515][ T7146] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 189.738254][ T5752] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 189.738468][ T5752] ath9k_htc: Failed to initialize the device [ 189.775826][ T5752] usb 1-1: ath9k_htc: USB layer deinitialized [ 189.794377][ T7674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.798160][ T7674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.839814][ T7146] usb 3-1: Using ep0 maxpacket: 32 [ 189.840371][ T7146] usb 3-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 189.841215][ T7146] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.841232][ T7146] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.842430][ T7146] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 189.842445][ T7146] usb 3-1: Product: syz [ 189.842453][ T7146] usb 3-1: Manufacturer: syz [ 189.847763][ T7146] hub 3-1:4.0: USB hub found [ 190.076489][ T7146] hub 3-1:4.0: 2 ports detected [ 190.484369][ T7146] hub 3-1:4.0: set hub depth failed [ 190.499022][ T7146] usb 3-1: USB disconnect, device number 40 [ 191.114591][ T7679] FAULT_INJECTION: forcing a failure. [ 191.114591][ T7679] name failslab, interval 1, probability 0, space 0, times 0 [ 191.114613][ T7679] CPU: 0 UID: 0 PID: 7679 Comm: syz.2.569 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.114628][ T7679] Tainted: [L]=SOFTLOCKUP [ 191.114632][ T7679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 191.114639][ T7679] Call Trace: [ 191.114644][ T7679] [ 191.114649][ T7679] dump_stack_lvl+0xe8/0x150 [ 191.114671][ T7679] should_fail_ex+0x3eb/0x540 [ 191.114692][ T7679] should_failslab+0xa8/0x100 [ 191.114709][ T7679] __kmalloc_cache_noprof+0x9e/0x600 [ 191.114722][ T7679] ? percpu_ref_init+0xc5/0x350 [ 191.114735][ T7679] ? percpu_ref_init+0xc5/0x350 [ 191.114752][ T7679] ? __pfx_no_op+0x10/0x10 [ 191.114767][ T7679] percpu_ref_init+0xc5/0x350 [ 191.114779][ T7679] ? __pfx_active_io_release+0x10/0x10 [ 191.114803][ T7679] mddev_init+0xa3/0x700 [ 191.114819][ T7679] md_alloc+0xb8/0xf40 [ 191.114839][ T7679] md_alloc_and_put+0x1a/0x1f0 [ 191.114853][ T7679] add_named_array+0x240/0x350 [ 191.114866][ T7679] ? __pfx___mutex_lock+0x10/0x10 [ 191.114891][ T7679] ? __pfx_add_named_array+0x10/0x10 [ 191.114906][ T7679] ? sysfs_file_kobj+0x1a/0x230 [ 191.114929][ T7679] param_attr_store+0x214/0x310 [ 191.114956][ T7679] ? __pfx_param_attr_store+0x10/0x10 [ 191.114980][ T7679] ? __pfx_sysfs_kf_write+0x10/0x10 [ 191.115001][ T7679] module_attr_store+0x65/0x90 [ 191.115028][ T7679] kernfs_fop_write_iter+0x3a4/0x540 [ 191.115049][ T7679] vfs_write+0x612/0xba0 [ 191.115068][ T7679] ? __pfx_vfs_write+0x10/0x10 [ 191.115083][ T7679] ? __fget_files+0x3a2/0x420 [ 191.115099][ T7679] ? __fget_files+0x2a/0x420 [ 191.115113][ T7679] ? fdget+0x1ac/0x250 [ 191.115129][ T7679] ksys_write+0x150/0x270 [ 191.115144][ T7679] ? __pfx_ksys_write+0x10/0x10 [ 191.115165][ T7679] do_syscall_64+0x166/0x520 [ 191.115180][ T7679] ? trace_irq_disable+0x3b/0x140 [ 191.115193][ T7679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.115204][ T7679] ? clear_bhb_loop+0x70/0xc0 [ 191.115218][ T7679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.115228][ T7679] RIP: 0033:0x7efcc039f559 [ 191.115239][ T7679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.115248][ T7679] RSP: 002b:00007efcc1183028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.115261][ T7679] RAX: ffffffffffffffda RBX: 00007efcc0625fa0 RCX: 00007efcc039f559 [ 191.115272][ T7679] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 191.115284][ T7679] RBP: 00007efcc1183090 R08: 0000000000000000 R09: 0000000000000000 [ 191.115295][ T7679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.115307][ T7679] R13: 00007efcc0626038 R14: 00007efcc0625fa0 R15: 00007ffde6139a48 [ 191.115339][ T7679] [ 191.115466][ T7679] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 191.282841][ T2282] usb 1-1: USB disconnect, device number 45 [ 191.649260][ T7696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.649686][ T7696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.671182][ T2282] usb 4-1: USB disconnect, device number 52 [ 191.733757][ T7687] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 191.734804][ T7687] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 191.755218][ T7701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.577'. [ 191.813043][ T7704] netlink: 830 bytes leftover after parsing attributes in process `syz.4.578'. [ 191.847577][ T7706] FAULT_INJECTION: forcing a failure. [ 191.847577][ T7706] name failslab, interval 1, probability 0, space 0, times 0 [ 191.847605][ T7706] CPU: 1 UID: 0 PID: 7706 Comm: syz.4.579 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.847620][ T7706] Tainted: [L]=SOFTLOCKUP [ 191.847625][ T7706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 191.847632][ T7706] Call Trace: [ 191.847637][ T7706] [ 191.847641][ T7706] dump_stack_lvl+0xe8/0x150 [ 191.847670][ T7706] should_fail_ex+0x3eb/0x540 [ 191.847702][ T7706] should_failslab+0xa8/0x100 [ 191.847726][ T7706] ? security_file_alloc+0x34/0x310 [ 191.847748][ T7706] kmem_cache_alloc_noprof+0x9c/0x600 [ 191.847767][ T7706] ? rcu_is_watching+0x16/0xb0 [ 191.847782][ T7706] ? security_file_alloc+0x34/0x310 [ 191.847797][ T7706] security_file_alloc+0x34/0x310 [ 191.847810][ T7706] init_file+0x90/0x2b0 [ 191.847827][ T7706] alloc_empty_file+0x74/0x1d0 [ 191.847842][ T7706] path_openat+0x96/0x20f0 [ 191.847868][ T7706] do_file_open+0x23e/0x4a0 [ 191.847886][ T7706] ? __pfx_do_file_open+0x10/0x10 [ 191.847928][ T7706] ? _raw_spin_unlock+0x28/0x50 [ 191.847951][ T7706] ? alloc_fd+0x6af/0x760 [ 191.847980][ T7706] do_sys_openat2+0x115/0x200 [ 191.848000][ T7706] ? __pfx_do_sys_openat2+0x10/0x10 [ 191.848020][ T7706] ? __might_fault+0xaf/0x130 [ 191.848052][ T7706] __se_sys_openat2+0x223/0x2d0 [ 191.848074][ T7706] ? __pfx___se_sys_openat2+0x10/0x10 [ 191.848104][ T7706] do_syscall_64+0x166/0x520 [ 191.848131][ T7706] ? trace_irq_disable+0x3b/0x140 [ 191.848155][ T7706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.848175][ T7706] ? clear_bhb_loop+0x70/0xc0 [ 191.848199][ T7706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.848219][ T7706] RIP: 0033:0x7f5591b9f559 [ 191.848238][ T7706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.848254][ T7706] RSP: 002b:00007f55929e0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 191.848276][ T7706] RAX: ffffffffffffffda RBX: 00007f5591e25fa0 RCX: 00007f5591b9f559 [ 191.848291][ T7706] RDX: 0000200000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 191.848306][ T7706] RBP: 00007f55929e0090 R08: 0000000000000000 R09: 0000000000000000 [ 191.848319][ T7706] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 191.848338][ T7706] R13: 00007f5591e26038 R14: 00007f5591e25fa0 R15: 00007ffcd138b548 [ 191.848368][ T7706] [ 191.893971][ T7146] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 192.113848][ T7146] usb 3-1: No LPM exit latency info found, disabling LPM. [ 192.113891][ T7146] usb 3-1: New USB device found: idVendor=04b8, idProduct=0202, bcdDevice=0.40 [ 192.114903][ T7146] usb 3-1: config 1 interface 0 altsetting 15 endpoint 0x1 is Bulk; changing to Interrupt [ 192.114931][ T7146] usb 3-1: config 1 interface 0 altsetting 15 endpoint 0x82 is Bulk; changing to Interrupt [ 192.114952][ T7146] usb 3-1: config 1 interface 0 has no altsetting 0 [ 192.115306][ T7708] FAULT_INJECTION: forcing a failure. [ 192.115306][ T7708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.115334][ T7708] CPU: 0 UID: 0 PID: 7708 Comm: syz.4.580 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.115360][ T7708] Tainted: [L]=SOFTLOCKUP [ 192.115368][ T7708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 192.115380][ T7708] Call Trace: [ 192.115388][ T7708] [ 192.115397][ T7708] dump_stack_lvl+0xe8/0x150 [ 192.115431][ T7708] should_fail_ex+0x3eb/0x540 [ 192.115467][ T7708] __kvm_write_guest_page+0x1a3/0x2c0 [ 192.115496][ T7708] nested_release_vmcs12+0x305/0x4a0 [ 192.115525][ T7708] handle_vmptrld+0x404/0x4e0 [ 192.115558][ T7708] ? __pfx_handle_vmptrld+0x10/0x10 [ 192.115588][ T7708] ? vmx_handle_exit+0xe80/0x1590 [ 192.115625][ T7708] vt_handle_exit+0x28/0x160 [ 192.115652][ T7708] vcpu_run+0x4e8a/0x7a90 [ 192.115703][ T7708] ? vcpu_run+0x35f3/0x7a90 [ 192.115759][ T7708] ? __pfx_vcpu_run+0x10/0x10 [ 192.115778][ T7708] ? lock_acquire+0x115/0x350 [ 192.115803][ T7708] ? complete_emulated_mmio+0x3cc/0x910 [ 192.115834][ T7708] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 192.115871][ T7708] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 192.115897][ T7708] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 192.115920][ T7708] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 192.115952][ T7708] kvm_vcpu_ioctl+0xa61/0xfd0 [ 192.115980][ T7708] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 192.116023][ T7708] ? __fget_files+0x2a/0x420 [ 192.116048][ T7708] ? __fget_files+0x2a/0x420 [ 192.116070][ T7708] ? __fget_files+0x2a/0x420 [ 192.116096][ T7708] ? bpf_lsm_file_ioctl+0x9/0x20 [ 192.116122][ T7708] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 192.116144][ T7708] __se_sys_ioctl+0xfc/0x170 [ 192.116174][ T7708] do_syscall_64+0x166/0x520 [ 192.116202][ T7708] ? trace_irq_disable+0x3b/0x140 [ 192.116227][ T7708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.116247][ T7708] ? clear_bhb_loop+0x70/0xc0 [ 192.116279][ T7708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.116299][ T7708] RIP: 0033:0x7f5591b9f559 [ 192.116318][ T7708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.116334][ T7708] RSP: 002b:00007f55929e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.116356][ T7708] RAX: ffffffffffffffda RBX: 00007f5591e25fa0 RCX: 00007f5591b9f559 [ 192.116372][ T7708] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 192.116384][ T7708] RBP: 00007f55929e0090 R08: 0000000000000000 R09: 0000000000000000 [ 192.116397][ T7708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.116410][ T7708] R13: 00007f5591e26038 R14: 00007f5591e25fa0 R15: 00007ffcd138b548 [ 192.116441][ T7708] [ 192.395412][ T196] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 192.548304][ T196] usb 1-1: Using ep0 maxpacket: 16 [ 192.550329][ T196] usb 1-1: New USB device found: idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 192.552183][ T196] usb 1-1: config 129 has too many interfaces: 160, using maximum allowed: 32 [ 192.552210][ T196] usb 1-1: config 129 has 1 interface, different from the descriptor's value: 160 [ 192.552263][ T196] usb 1-1: config 129 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 192.552289][ T196] usb 1-1: config 129 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 192.552315][ T196] usb 1-1: config 129 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 192.563610][ T196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.563637][ T196] usb 1-1: Product: syz [ 192.563653][ T196] usb 1-1: Manufacturer: syz [ 192.563667][ T196] usb 1-1: SerialNumber: syz [ 192.776503][ T7713] overlayfs: upper fs does not support file handles, falling back to index=off. [ 192.776544][ T7713] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 192.792396][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 192.807770][ T7713] overlayfs: upper fs does not support file handles, falling back to index=off. [ 192.807789][ T7713] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 192.833295][ T196] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 192.833472][ T196] powermate 1-1:129.0: probe with driver powermate failed with error -5 [ 192.837389][ T196] usb 1-1: USB disconnect, device number 46 [ 192.972419][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 192.972436][ T5752] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 192.973329][ T10] usb 5-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 192.976540][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.976565][ T10] usb 5-1: Product: syz [ 192.976581][ T10] usb 5-1: Manufacturer: syz [ 192.976596][ T10] usb 5-1: SerialNumber: syz [ 192.978758][ T10] usb 5-1: config 0 descriptor?? [ 193.134387][ T5752] usb 4-1: Using ep0 maxpacket: 8 [ 193.135131][ T5752] usb 4-1: New USB device found: idVendor=0e41, idProduct=4249, bcdDevice=0.40 [ 193.136229][ T5752] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.136252][ T5752] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.138632][ T5752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.138656][ T5752] usb 4-1: Product: syz [ 193.138671][ T5752] usb 4-1: Manufacturer: syz [ 193.138685][ T5752] usb 4-1: SerialNumber: syz [ 193.192020][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 193.440698][ T7727] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 193.463306][ T7728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.463845][ T7728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.507771][ T7724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.508310][ T7724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.631482][ T5752] usb 4-1: unit 0 not found! [ 193.703195][ T5752] usb 4-1: USB disconnect, device number 53 [ 193.716643][ T7732] md: could not open device unknown-block(0,0). [ 193.716706][ T7732] md: error, md_import_device() returned -6 [ 193.765238][ T5653] udevd[5653]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.826776][ T7734] md: could not open device unknown-block(0,0). [ 193.826833][ T7734] md: error, md_import_device() returned -6 [ 193.826950][ T7732] md: md0 stopped. [ 193.864678][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 194.685105][ T7146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.701772][ T5752] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 194.710759][ T7146] usb 3-1: can't set config #1, error -71 [ 194.719335][ T7146] usb 3-1: USB disconnect, device number 41 [ 194.746783][ T7756] FAULT_INJECTION: forcing a failure. [ 194.746783][ T7756] name failslab, interval 1, probability 0, space 0, times 0 [ 194.746817][ T7756] CPU: 1 UID: 0 PID: 7756 Comm: syz.2.595 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.746844][ T7756] Tainted: [L]=SOFTLOCKUP [ 194.746852][ T7756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 194.746865][ T7756] Call Trace: [ 194.746873][ T7756] [ 194.746882][ T7756] dump_stack_lvl+0xe8/0x150 [ 194.746915][ T7756] should_fail_ex+0x3eb/0x540 [ 194.746950][ T7756] should_failslab+0xa8/0x100 [ 194.746980][ T7756] __kmalloc_cache_noprof+0x9e/0x600 [ 194.747004][ T7756] ? nf_tables_newtable+0x43e/0x1990 [ 194.747024][ T7756] ? nf_tables_newtable+0x43e/0x1990 [ 194.747051][ T7756] nf_tables_newtable+0x43e/0x1990 [ 194.747092][ T7756] nfnetlink_rcv+0x1288/0x28c0 [ 194.747144][ T7756] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 194.747206][ T7756] ? skb_clone+0x246/0x3a0 [ 194.747248][ T7756] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.747271][ T7756] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.747299][ T7756] netlink_unicast+0x8ef/0xa80 [ 194.747348][ T7756] netlink_sendmsg+0x7f0/0xb20 [ 194.747377][ T7756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.747404][ T7756] ? aa_sock_msg_perm+0x144/0x210 [ 194.747447][ T7756] ? apparmor_socket_sendmsg+0x98/0x360 [ 194.747473][ T7756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.747495][ T7756] sock_sendmsg_nosec+0x14e/0x190 [ 194.747518][ T7756] ____sys_sendmsg+0x54e/0x850 [ 194.747551][ T7756] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.747587][ T7756] ? import_iovec+0x73/0xa0 [ 194.747620][ T7756] ___sys_sendmsg+0x2a6/0x360 [ 194.747644][ T7756] ? __lock_acquire+0x747/0x2de0 [ 194.747668][ T7756] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.747724][ T7756] ? __fget_files+0x3a2/0x420 [ 194.747742][ T7756] ? __fget_files+0x2a/0x420 [ 194.747771][ T7756] __x64_sys_sendmsg+0x1b1/0x290 [ 194.747799][ T7756] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.747842][ T7756] do_syscall_64+0x166/0x520 [ 194.747869][ T7756] ? trace_irq_disable+0x3b/0x140 [ 194.747893][ T7756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.747912][ T7756] ? clear_bhb_loop+0x70/0xc0 [ 194.747936][ T7756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.747955][ T7756] RIP: 0033:0x7efcc039f559 [ 194.747972][ T7756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.747988][ T7756] RSP: 002b:00007efcc1183028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.748009][ T7756] RAX: ffffffffffffffda RBX: 00007efcc0625fa0 RCX: 00007efcc039f559 [ 194.748024][ T7756] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 194.748037][ T7756] RBP: 00007efcc1183090 R08: 0000000000000000 R09: 0000000000000000 [ 194.748049][ T7756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.748061][ T7756] R13: 00007efcc0626038 R14: 00007efcc0625fa0 R15: 00007ffde6139a48 [ 194.748089][ T7756] [ 194.930725][ T5752] usb 1-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 194.951840][ T5752] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.976811][ T7760] fuse: Bad value for 'fd' [ 194.982745][ T7760] loop4: detected capacity change from 0 to 7 [ 195.000701][ T7760] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 195.000735][ T7760] loop4: partition table partially beyond EOD, truncated [ 195.000950][ T7760] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 195.004314][ T5752] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 195.004342][ T5752] usb 1-1: Product: syz [ 195.004355][ T5752] usb 1-1: Manufacturer: syz [ 195.141803][ T5752] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 195.141871][ T5752] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 195.176672][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.176727][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.338663][ T5752] usb 1-1: USB disconnect, device number 47 [ 195.369789][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 195.521322][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 195.523081][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 195.523132][ T10] usb 4-1: New USB device found: idVendor=0bda, idProduct=4014, bcdDevice=0.40 [ 195.524073][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.524139][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 50814, setting to 1024 [ 195.524172][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.526035][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.526058][ T10] usb 4-1: Product: syz [ 195.526079][ T10] usb 4-1: Manufacturer: syz [ 195.526093][ T10] usb 4-1: SerialNumber: syz [ 195.747765][ T10] usb 4-1: 1:1 : no UAC_FORMAT_TYPE desc [ 195.748929][ T10] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 195.830659][ T10] usb 4-1: USB disconnect, device number 54 [ 195.862422][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.087022][ T5752] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 196.177986][ T7146] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 196.238568][ T5752] usb 3-1: Using ep0 maxpacket: 8 [ 196.239258][ T5752] usb 3-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 196.240202][ T5752] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 196.240224][ T5752] usb 3-1: config 179 has no interface number 0 [ 196.240250][ T5752] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 196.240265][ T5752] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 196.240279][ T5752] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 196.240294][ T5752] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 196.240308][ T5752] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 196.240330][ T5752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.243039][ T7765] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 196.359885][ T7146] usb 1-1: device descriptor read/64, error -71 [ 196.405039][ T7771] FAULT_INJECTION: forcing a failure. [ 196.405039][ T7771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.405072][ T7771] CPU: 0 UID: 0 PID: 7771 Comm: syz.3.601 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.405099][ T7771] Tainted: [L]=SOFTLOCKUP [ 196.405106][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 196.405118][ T7771] Call Trace: [ 196.405127][ T7771] [ 196.405136][ T7771] dump_stack_lvl+0xe8/0x150 [ 196.405169][ T7771] should_fail_ex+0x3eb/0x540 [ 196.405206][ T7771] _copy_to_user+0x31/0xb0 [ 196.405228][ T7771] simple_read_from_buffer+0xe1/0x170 [ 196.405258][ T7771] proc_fail_nth_read+0x1bb/0x230 [ 196.405290][ T7771] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.405323][ T7771] ? rw_verify_area+0x24a/0x4c0 [ 196.405349][ T7771] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.405377][ T7771] vfs_read+0x213/0xa80 [ 196.405406][ T7771] ? __pfx___mutex_lock+0x10/0x10 [ 196.405437][ T7771] ? __pfx_vfs_read+0x10/0x10 [ 196.405463][ T7771] ? __fget_files+0x2a/0x420 [ 196.405485][ T7771] ? __fget_files+0x3a2/0x420 [ 196.405505][ T7771] ? __fget_files+0x2a/0x420 [ 196.405531][ T7771] ? fdget+0x1ac/0x250 [ 196.405559][ T7771] ksys_read+0x150/0x270 [ 196.405585][ T7771] ? __pfx_ksys_read+0x10/0x10 [ 196.405607][ T7771] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 196.405638][ T7771] do_syscall_64+0x166/0x520 [ 196.405666][ T7771] ? trace_irq_disable+0x3b/0x140 [ 196.405691][ T7771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.405711][ T7771] ? clear_bhb_loop+0x70/0xc0 [ 196.405736][ T7771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.405757][ T7771] RIP: 0033:0x7f228215fd8e [ 196.405776][ T7771] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 196.405794][ T7771] RSP: 002b:00007f22803f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.405816][ T7771] RAX: ffffffffffffffda RBX: 00007f22803f66c0 RCX: 00007f228215fd8e [ 196.405832][ T7771] RDX: 000000000000000f RSI: 00007f22803f60a0 RDI: 0000000000000004 [ 196.405845][ T7771] RBP: 00007f22803f6090 R08: 0000000000000000 R09: 0000000000000000 [ 196.405858][ T7771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.405870][ T7771] R13: 00007f2282426038 R14: 00007f2282425fa0 R15: 00007ffcb4aa01f8 [ 196.405910][ T7771] [ 196.454293][ T10] usb 5-1: USB disconnect, device number 26 [ 196.561464][ T7773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.574953][ T7775] overlayfs: upper fs does not support file handles, falling back to index=off. [ 196.574971][ T7775] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 196.578575][ T7775] tmpfs: Bad value for 'size' [ 196.630060][ T7775] overlayfs: upper fs does not support file handles, falling back to index=off. [ 196.630079][ T7775] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 196.737532][ T5752] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input20 [ 196.743576][ T7146] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 196.796308][ T7777] FAULT_INJECTION: forcing a failure. [ 196.796308][ T7777] name failslab, interval 1, probability 0, space 0, times 0 [ 196.796342][ T7777] CPU: 0 UID: 0 PID: 7777 Comm: syz.3.604 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.796378][ T7777] Tainted: [L]=SOFTLOCKUP [ 196.796385][ T7777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 196.796398][ T7777] Call Trace: [ 196.796406][ T7777] [ 196.796414][ T7777] dump_stack_lvl+0xe8/0x150 [ 196.796448][ T7777] should_fail_ex+0x3eb/0x540 [ 196.796482][ T7777] should_failslab+0xa8/0x100 [ 196.796513][ T7777] __kvmalloc_node_noprof+0x171/0x820 [ 196.796539][ T7777] ? __kvmalloc_node_noprof+0x340/0x820 [ 196.796562][ T7777] ? io_alloc_cache_init+0x42/0x140 [ 196.796586][ T7777] ? io_alloc_cache_init+0x42/0x140 [ 196.796619][ T7777] io_alloc_cache_init+0x42/0x140 [ 196.796648][ T7777] io_ring_ctx_alloc+0x54b/0xb80 [ 196.796678][ T7777] io_uring_create+0x50/0x980 [ 196.796704][ T7777] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 196.796733][ T7777] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 196.796764][ T7777] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 196.796808][ T7777] ? __pfx_ksys_write+0x10/0x10 [ 196.796843][ T7777] do_syscall_64+0x166/0x520 [ 196.796870][ T7777] ? trace_irq_disable+0x3b/0x140 [ 196.796895][ T7777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.796915][ T7777] ? clear_bhb_loop+0x70/0xc0 [ 196.796940][ T7777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.796959][ T7777] RIP: 0033:0x7f228219f559 [ 196.796978][ T7777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.796995][ T7777] RSP: 002b:00007f22803f5ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 196.797017][ T7777] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f228219f559 [ 196.797032][ T7777] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 196.797048][ T7777] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 196.797060][ T7777] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 196.797073][ T7777] R13: 0000200000000b10 R14: 00007f22803f5fd8 R15: 0000000000000000 [ 196.797104][ T7777] [ 196.914591][ T7146] usb 1-1: device descriptor read/64, error -71 [ 196.927889][ T10] usb 3-1: USB disconnect, device number 42 [ 196.930668][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 196.930722][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 196.985428][ T5653] udevd[5653]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 196.985540][ T5653] udevd[5653]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 197.030710][ T7146] usb usb1-port1: attempt power cycle [ 197.435595][ T7146] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 197.451670][ T7146] usb 1-1: device descriptor read/8, error -71 [ 197.496708][ T7791] fuse: Bad value for 'fd' [ 197.498903][ T7791] loop4: detected capacity change from 0 to 7 [ 197.514831][ T7791] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 197.514889][ T7791] loop4: partition table partially beyond EOD, truncated [ 197.515161][ T7791] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 197.703291][ T7146] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 197.734909][ T7146] usb 1-1: device descriptor read/8, error -71 [ 197.764848][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 197.844286][ T7146] usb usb1-port1: unable to enumerate USB device [ 197.914333][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 197.917573][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 197.917624][ T10] usb 3-1: New USB device found: idVendor=0bda, idProduct=4014, bcdDevice=0.40 [ 197.918759][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.918828][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 50814, setting to 1024 [ 197.918867][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.921370][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.921395][ T10] usb 3-1: Product: syz [ 197.921410][ T10] usb 3-1: Manufacturer: syz [ 197.921425][ T10] usb 3-1: SerialNumber: syz [ 198.049544][ T7795] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 198.193311][ T10] usb 3-1: 1:1 : no UAC_FORMAT_TYPE desc [ 198.193765][ T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 198.196418][ T7795] md3: detected capacity change from 0 to 12288 [ 198.297968][ T10] usb 3-1: USB disconnect, device number 43 [ 198.325847][ T7795] md3: detected capacity change from 12288 to 0 [ 198.325868][ T7795] md: md3 stopped. [ 198.357269][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.515269][ T7808] FAULT_INJECTION: forcing a failure. [ 198.515269][ T7808] name failslab, interval 1, probability 0, space 0, times 0 [ 198.515291][ T7808] CPU: 0 UID: 0 PID: 7808 Comm: syz.3.613 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.515307][ T7808] Tainted: [L]=SOFTLOCKUP [ 198.515311][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 198.515317][ T7808] Call Trace: [ 198.515322][ T7808] [ 198.515327][ T7808] dump_stack_lvl+0xe8/0x150 [ 198.515348][ T7808] should_fail_ex+0x3eb/0x540 [ 198.515369][ T7808] should_failslab+0xa8/0x100 [ 198.515385][ T7808] __kvmalloc_node_noprof+0x171/0x820 [ 198.515399][ T7808] ? __kvmalloc_node_noprof+0x340/0x820 [ 198.515412][ T7808] ? io_alloc_cache_init+0x42/0x140 [ 198.515426][ T7808] ? io_alloc_cache_init+0x42/0x140 [ 198.515443][ T7808] io_alloc_cache_init+0x42/0x140 [ 198.515458][ T7808] io_ring_ctx_alloc+0x54b/0xb80 [ 198.515475][ T7808] io_uring_create+0x50/0x980 [ 198.515489][ T7808] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 198.515505][ T7808] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 198.515523][ T7808] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 198.515550][ T7808] ? __pfx_ksys_write+0x10/0x10 [ 198.515570][ T7808] do_syscall_64+0x166/0x520 [ 198.515586][ T7808] ? trace_irq_disable+0x3b/0x140 [ 198.515600][ T7808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.515611][ T7808] ? clear_bhb_loop+0x70/0xc0 [ 198.515624][ T7808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.515634][ T7808] RIP: 0033:0x7f228219f559 [ 198.515645][ T7808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.515661][ T7808] RSP: 002b:00007f22803f5ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 198.515678][ T7808] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f228219f559 [ 198.515686][ T7808] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 0000000000000465 [ 198.515693][ T7808] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 198.515700][ T7808] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 198.515707][ T7808] R13: 0000200000000b10 R14: 00007f22803f5fd8 R15: 0000000000000000 [ 198.515723][ T7808] [ 199.013822][ T32] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 199.026289][ T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 199.185282][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 199.185300][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 199.186950][ T32] usb 5-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 199.187058][ T10] usb 4-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 199.188106][ T32] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.188135][ T32] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.188261][ T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.188287][ T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.189568][ T32] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 199.189591][ T32] usb 5-1: Product: syz [ 199.189606][ T32] usb 5-1: Manufacturer: syz [ 199.189699][ T10] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 199.189719][ T10] usb 4-1: Product: syz [ 199.189733][ T10] usb 4-1: Manufacturer: syz [ 199.258477][ T32] hub 5-1:4.0: USB hub found [ 199.276857][ T10] hub 4-1:4.0: USB hub found [ 199.337553][ T7816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 199.378562][ T196] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 199.454772][ T10] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 199.482722][ T7830] sg_write: data in/out 32732/136 bytes for SCSI command 0x0-- guessing data in; [ 199.482722][ T7830] program syz.2.618 not setting count and/or reply_len properly [ 199.530379][ T196] usb 1-1: New USB device found: idVendor=0403, idProduct=6010, bcdDevice=c9.98 [ 199.531372][ T196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.536181][ T196] usb 1-1: config 0 descriptor?? [ 199.558723][ T32] hub 5-1:4.0: 2 ports detected [ 199.567831][ T196] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 199.578899][ T196] ftdi_sio ttyUSB0: unknown device type: 0xc998 [ 199.620695][ T7834] netlink: 'syz.2.620': attribute type 10 has an invalid length. [ 199.626207][ T7834] team0: Cannot enslave team device to itself [ 199.658253][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'. [ 199.771970][ T7837] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 199.785288][ T196] usb 4-1: USB disconnect, device number 55 [ 199.918158][ T7837] md2: detected capacity change from 0 to 12288 [ 199.952720][ T7837] md2: detected capacity change from 12288 to 0 [ 199.952734][ T7837] md: md2 stopped. [ 199.971939][ T32] hub 5-1:4.0: set hub depth failed [ 199.979630][ T32] usb 5-1: USB disconnect, device number 27 [ 201.090987][ T7854] FAULT_INJECTION: forcing a failure. [ 201.090987][ T7854] name failslab, interval 1, probability 0, space 0, times 0 [ 201.091009][ T7854] CPU: 0 UID: 0 PID: 7854 Comm: syz.2.626 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.091024][ T7854] Tainted: [L]=SOFTLOCKUP [ 201.091028][ T7854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 201.091035][ T7854] Call Trace: [ 201.091040][ T7854] [ 201.091045][ T7854] dump_stack_lvl+0xe8/0x150 [ 201.091066][ T7854] should_fail_ex+0x3eb/0x540 [ 201.091086][ T7854] should_failslab+0xa8/0x100 [ 201.091103][ T7854] __kvmalloc_node_noprof+0x171/0x820 [ 201.091117][ T7854] ? __kmalloc_cache_noprof+0x31c/0x600 [ 201.091135][ T7854] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 201.091154][ T7854] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 201.091180][ T7854] io_ring_ctx_alloc+0x1ad/0xb80 [ 201.091201][ T7854] ? io_prepare_config+0x8c8/0xc70 [ 201.091235][ T7854] io_uring_create+0x50/0x980 [ 201.091261][ T7854] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 201.091279][ T7854] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 201.091297][ T7854] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 201.091320][ T7854] ? __pfx_ksys_write+0x10/0x10 [ 201.091339][ T7854] do_syscall_64+0x166/0x520 [ 201.091354][ T7854] ? trace_irq_disable+0x3b/0x140 [ 201.091371][ T7854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.091382][ T7854] ? clear_bhb_loop+0x70/0xc0 [ 201.091395][ T7854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.091409][ T7854] RIP: 0033:0x7efcc039f559 [ 201.091420][ T7854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.091430][ T7854] RSP: 002b:00007efcc1182ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 201.091442][ T7854] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007efcc039f559 [ 201.091451][ T7854] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003f7 [ 201.091458][ T7854] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 201.091465][ T7854] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 201.091472][ T7854] R13: 0000200000000b10 R14: 00007efcc1182fd8 R15: 0000000000000000 [ 201.091488][ T7854] [ 201.153740][ T7858] FAULT_INJECTION: forcing a failure. [ 201.153740][ T7858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.153772][ T7858] CPU: 0 UID: 0 PID: 7858 Comm: syz.3.628 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.153798][ T7858] Tainted: [L]=SOFTLOCKUP [ 201.153805][ T7858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 201.153816][ T7858] Call Trace: [ 201.153824][ T7858] [ 201.153833][ T7858] dump_stack_lvl+0xe8/0x150 [ 201.153871][ T7858] should_fail_ex+0x3eb/0x540 [ 201.153907][ T7858] _copy_from_iter+0x1d3/0x1680 [ 201.153945][ T7858] ? __pfx__copy_from_iter+0x10/0x10 [ 201.153974][ T7858] ? aa_file_perm+0x18b/0x15f0 [ 201.154008][ T7858] ? skb_put+0x112/0x210 [ 201.154035][ T7858] hci_sock_sendmsg+0x426/0xfd0 [ 201.154070][ T7858] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 201.154102][ T7858] ? apparmor_socket_sendmsg+0x98/0x360 [ 201.154124][ T7858] ? lock_acquire+0x115/0x350 [ 201.154147][ T7858] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 201.154172][ T7858] sock_sendmsg_nosec+0x14e/0x190 [ 201.154194][ T7858] sock_write_iter+0x2de/0x3e0 [ 201.154225][ T7858] ? __pfx_sock_write_iter+0x10/0x10 [ 201.154261][ T7858] ? bpf_lsm_file_permission+0x9/0x20 [ 201.154287][ T7858] ? security_file_permission+0x75/0x260 [ 201.154325][ T7858] vfs_write+0x612/0xba0 [ 201.154357][ T7858] ? __pfx_vfs_write+0x10/0x10 [ 201.154383][ T7858] ? __fget_files+0x3a2/0x420 [ 201.154404][ T7858] ? __fget_files+0x2a/0x420 [ 201.154429][ T7858] ? fdget+0x1ac/0x250 [ 201.154457][ T7858] ksys_write+0x150/0x270 [ 201.154481][ T7858] ? __pfx_ksys_write+0x10/0x10 [ 201.154517][ T7858] do_syscall_64+0x166/0x520 [ 201.154545][ T7858] ? trace_irq_disable+0x3b/0x140 [ 201.154568][ T7858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.154588][ T7858] ? clear_bhb_loop+0x70/0xc0 [ 201.154612][ T7858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.154631][ T7858] RIP: 0033:0x7f228219f559 [ 201.154649][ T7858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.154666][ T7858] RSP: 002b:00007f22803f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 201.154687][ T7858] RAX: ffffffffffffffda RBX: 00007f2282425fa0 RCX: 00007f228219f559 [ 201.154706][ T7858] RDX: 0000000000000008 RSI: 0000200000000980 RDI: 0000000000000004 [ 201.154722][ T7858] RBP: 00007f22803f6090 R08: 0000000000000000 R09: 0000000000000000 [ 201.154735][ T7858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.154747][ T7858] R13: 00007f2282426038 R14: 00007f2282425fa0 R15: 00007ffcb4aa01f8 [ 201.154778][ T7858] [ 201.619909][ T7871] FAULT_INJECTION: forcing a failure. [ 201.619909][ T7871] name failslab, interval 1, probability 0, space 0, times 0 [ 201.619931][ T7871] CPU: 0 UID: 0 PID: 7871 Comm: syz.3.633 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.619947][ T7871] Tainted: [L]=SOFTLOCKUP [ 201.619951][ T7871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 201.619958][ T7871] Call Trace: [ 201.619963][ T7871] [ 201.619969][ T7871] dump_stack_lvl+0xe8/0x150 [ 201.619990][ T7871] should_fail_ex+0x3eb/0x540 [ 201.620010][ T7871] should_failslab+0xa8/0x100 [ 201.620027][ T7871] __kmalloc_cache_noprof+0x9e/0x600 [ 201.620040][ T7871] ? __pfx___mutex_lock+0x10/0x10 [ 201.620056][ T7871] ? pty_common_install+0xad/0x780 [ 201.620071][ T7871] ? pty_common_install+0xad/0x780 [ 201.620089][ T7871] pty_common_install+0xad/0x780 [ 201.620110][ T7871] tty_init_dev+0xd7/0x4d0 [ 201.620128][ T7871] ptmx_open+0xeb/0x2e0 [ 201.620145][ T7871] chrdev_open+0x4d9/0x600 [ 201.620163][ T7871] ? __pfx_chrdev_open+0x10/0x10 [ 201.620177][ T7871] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 201.620193][ T7871] ? devcgroup_check_permission+0x31/0x8f0 [ 201.620208][ T7871] ? __pfx_chrdev_open+0x10/0x10 [ 201.620223][ T7871] do_dentry_open+0x80e/0x1360 [ 201.620245][ T7871] vfs_open_consume+0x4a/0x350 [ 201.620267][ T7871] ? path_openat+0x16e1/0x20f0 [ 201.620282][ T7871] path_openat+0x16fc/0x20f0 [ 201.620306][ T7871] do_file_open+0x23e/0x4a0 [ 201.620323][ T7871] ? __pfx_do_file_open+0x10/0x10 [ 201.620348][ T7871] ? _raw_spin_unlock+0x28/0x50 [ 201.620362][ T7871] ? alloc_fd+0x6af/0x760 [ 201.620379][ T7871] do_sys_openat2+0x115/0x200 [ 201.620391][ T7871] ? __pfx_do_sys_openat2+0x10/0x10 [ 201.620402][ T7871] ? ksys_write+0x242/0x270 [ 201.620417][ T7871] ? __pfx_ksys_write+0x10/0x10 [ 201.620432][ T7871] __x64_sys_openat+0x138/0x170 [ 201.620445][ T7871] do_syscall_64+0x166/0x520 [ 201.620460][ T7871] ? trace_irq_disable+0x3b/0x140 [ 201.620474][ T7871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.620485][ T7871] ? clear_bhb_loop+0x70/0xc0 [ 201.620498][ T7871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.620509][ T7871] RIP: 0033:0x7f228219f559 [ 201.620523][ T7871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.620532][ T7871] RSP: 002b:00007f22803f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 201.620545][ T7871] RAX: ffffffffffffffda RBX: 00007f2282425fa0 RCX: 00007f228219f559 [ 201.620553][ T7871] RDX: 0000000000101900 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 201.620561][ T7871] RBP: 00007f22803f6090 R08: 0000000000000000 R09: 0000000000000000 [ 201.620568][ T7871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.620574][ T7871] R13: 00007f2282426038 R14: 00007f2282425fa0 R15: 00007ffcb4aa01f8 [ 201.620592][ T7871] [ 201.663866][ T7870] gadgetfs: bound to dummy_udc driver [ 201.695179][ T196] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 201.759599][ T7874] atomic_op ffff88801cb019e0 conn xmit_atomic 0000000000000000 [ 201.847272][ T196] usb 5-1: Using ep0 maxpacket: 32 [ 201.850605][ T196] usb 5-1: New USB device found: idVendor=2c42, idProduct=16f8, bcdDevice=1e.fa [ 201.855684][ T196] usb 5-1: config 245 has an invalid interface number: 214 but max is 0 [ 201.855712][ T196] usb 5-1: config 245 has no interface number 0 [ 201.855739][ T196] usb 5-1: config 245 interface 214 has no altsetting 0 [ 201.859206][ T196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.859238][ T196] usb 5-1: Product: syz [ 201.859253][ T196] usb 5-1: Manufacturer: syz [ 201.859268][ T196] usb 5-1: SerialNumber: syz [ 201.999150][ T7878] loop4: detected capacity change from 0 to 7 [ 202.017647][ T7878] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 202.017678][ T7878] loop4: partition table partially beyond EOD, truncated [ 202.017856][ T7878] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 202.081614][ T7864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.084054][ T7864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.097039][ T11] usb 1-1: USB disconnect, device number 52 [ 202.104279][ T11] ftdi_sio 1-1:0.0: device disconnected [ 202.248210][ T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 202.268250][ T5754] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 202.273341][ T7880] loop5: detected capacity change from 0 to 7 [ 202.274442][ T7880] Dev loop5: unable to read RDB block 7 [ 202.274475][ T7880] loop5: unable to read partition table [ 202.274631][ T7880] loop5: partition table beyond EOD, truncated [ 202.274654][ T7880] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 202.284910][ T7880] Dev loop5: unable to read RDB block 7 [ 202.284980][ T7880] loop5: unable to read partition table [ 202.285220][ T7880] loop5: partition table beyond EOD, truncated [ 202.399140][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 202.399759][ T10] usb 4-1: New USB device found: idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 202.400751][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 202.400769][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 202.400781][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 202.400797][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 202.402891][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.402909][ T10] usb 4-1: Product: syz [ 202.402918][ T10] usb 4-1: Manufacturer: syz [ 202.402925][ T10] usb 4-1: SerialNumber: syz [ 202.407526][ T10] usb 4-1: config 0 descriptor?? [ 202.420937][ T5754] usb 3-1: Using ep0 maxpacket: 8 [ 202.426898][ T5754] usb 3-1: unable to get BOS descriptor or descriptor too short [ 202.426946][ T5754] usb 3-1: New USB device found: idVendor=0bda, idProduct=4014, bcdDevice=0.40 [ 202.429763][ T5754] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.429829][ T5754] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 50814, setting to 1024 [ 202.429892][ T5754] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.432336][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21 [ 202.436309][ T5754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.436331][ T5754] usb 3-1: Product: syz [ 202.436368][ T5754] usb 3-1: Manufacturer: syz [ 202.436383][ T5754] usb 3-1: SerialNumber: syz [ 202.467677][ T4992] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 202.574950][ T4992] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 202.610522][ T11] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 202.613638][ T4992] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 202.613701][ C0] xpad 4-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 202.615650][ T4992] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 202.642634][ T10] usb 4-1: USB disconnect, device number 56 [ 202.690097][ T5754] usb 3-1: 1:1 : no UAC_FORMAT_TYPE desc [ 202.696085][ T5754] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 202.762902][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 202.764103][ T11] usb 1-1: New USB device found: idVendor=041e, idProduct=3000, bcdDevice=0.40 [ 202.765164][ T11] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.765178][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.767740][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.767757][ T11] usb 1-1: Product: syz [ 202.767765][ T11] usb 1-1: Manufacturer: syz [ 202.767776][ T11] usb 1-1: SerialNumber: syz [ 202.826116][ T11] usb 1-1: 0:1 : does not exist [ 202.826217][ T11] usb 1-1: unit 1 not found! [ 202.826234][ T11] usb 1-1: unit 9 not found! [ 202.839693][ T5754] usb 3-1: USB disconnect, device number 44 [ 203.181501][ T11] usb 1-1: unit 0 not found! [ 203.425359][ T33] audit: type=1326 audit(1793917225.034:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.2.642" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efcc039f559 code=0x0 [ 203.528863][ T7898] kAFS: unable to lookup cell '' [ 203.767830][ T5754] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 203.918720][ T5754] usb 4-1: Using ep0 maxpacket: 16 [ 203.919467][ T5754] usb 4-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 203.920645][ T5754] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.920669][ T5754] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.923049][ T5754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.923072][ T5754] usb 4-1: Product: syz [ 203.923088][ T5754] usb 4-1: Manufacturer: syz [ 203.923122][ T5754] usb 4-1: SerialNumber: syz [ 203.934685][ T5754] usb 4-1: 0:2 : does not exist [ 203.993533][ T7146] usb 1-1: USB disconnect, device number 53 [ 204.130624][ T7898] netlink: 80 bytes leftover after parsing attributes in process `syz.3.643'. [ 204.155155][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.155607][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.158518][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.159683][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.200622][ T5754] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 204.281750][ T5754] usb 4-1: USB disconnect, device number 57 [ 204.360497][ T196] f81534a_ctrl 5-1:245.214: probe with driver f81534a_ctrl failed with error -71 [ 204.384122][ T196] usb 5-1: USB disconnect, device number 28 [ 204.410902][ T5653] udevd[5653]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.519143][ T7908] gadgetfs: bound to dummy_udc driver [ 204.644932][ T7913] netlink: 'syz.4.649': attribute type 10 has an invalid length. [ 204.663365][ T53] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.016732][ T196] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 205.075499][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 205.109162][ T7923] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 205.167106][ T196] usb 5-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 205.168185][ T196] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.168209][ T196] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 205.168244][ T196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.172235][ T196] usb 5-1: config 0 descriptor?? [ 205.227857][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 205.228619][ T10] usb 4-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 205.231413][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 205.231440][ T10] usb 4-1: SerialNumber: syz [ 205.235477][ T10] usb 4-1: config 0 descriptor?? [ 205.260155][ T10] as10x_usb: device has been detected [ 205.261010][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 205.275107][ T10] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 205.318375][ T7923] md0: detected capacity change from 0 to 12288 [ 205.379303][ T196] usb 5-1: USB disconnect, device number 29 [ 205.389232][ T7930] md0: detected capacity change from 12288 to 0 [ 205.389251][ T7930] md: md0 stopped. [ 205.426364][ T10] as10x_usb: error during firmware upload part1 [ 205.431746][ T10] Registered device nBox DVB-T Dongle [ 205.496031][ T10] usb 4-1: USB disconnect, device number 58 [ 205.643255][ T10] Unregistered device nBox DVB-T Dongle [ 205.649763][ T10] as10x_usb: device has been disconnected [ 205.683113][ T7933] FAULT_INJECTION: forcing a failure. [ 205.683113][ T7933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.683147][ T7933] CPU: 0 UID: 0 PID: 7933 Comm: syz.2.658 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.683174][ T7933] Tainted: [L]=SOFTLOCKUP [ 205.683181][ T7933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 205.683193][ T7933] Call Trace: [ 205.683201][ T7933] [ 205.683210][ T7933] dump_stack_lvl+0xe8/0x150 [ 205.683245][ T7933] should_fail_ex+0x3eb/0x540 [ 205.683281][ T7933] _copy_to_user+0x31/0xb0 [ 205.683304][ T7933] simple_read_from_buffer+0xe1/0x170 [ 205.683332][ T7933] proc_fail_nth_read+0x1bb/0x230 [ 205.683366][ T7933] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.683399][ T7933] ? rw_verify_area+0x24a/0x4c0 [ 205.683425][ T7933] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.683461][ T7933] vfs_read+0x213/0xa80 [ 205.683491][ T7933] ? __pfx___mutex_lock+0x10/0x10 [ 205.683522][ T7933] ? __pfx_vfs_read+0x10/0x10 [ 205.683548][ T7933] ? __fget_files+0x2a/0x420 [ 205.683570][ T7933] ? __fget_files+0x3a2/0x420 [ 205.683590][ T7933] ? __fget_files+0x2a/0x420 [ 205.683616][ T7933] ? fdget+0x1ac/0x250 [ 205.683646][ T7933] ksys_read+0x150/0x270 [ 205.683673][ T7933] ? __pfx_ksys_read+0x10/0x10 [ 205.683710][ T7933] do_syscall_64+0x166/0x520 [ 205.683738][ T7933] ? trace_irq_disable+0x3b/0x140 [ 205.683763][ T7933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.683784][ T7933] ? clear_bhb_loop+0x70/0xc0 [ 205.683808][ T7933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.683828][ T7933] RIP: 0033:0x7efcc035fd8e [ 205.683847][ T7933] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 205.683865][ T7933] RSP: 002b:00007efcc1182fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.683887][ T7933] RAX: ffffffffffffffda RBX: 00007efcc11836c0 RCX: 00007efcc035fd8e [ 205.683903][ T7933] RDX: 000000000000000f RSI: 00007efcc11830a0 RDI: 0000000000000004 [ 205.683917][ T7933] RBP: 00007efcc1183090 R08: 0000000000000000 R09: 0000000000000000 [ 205.683930][ T7933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.683942][ T7933] R13: 00007efcc0626038 R14: 00007efcc0625fa0 R15: 00007ffde6139a48 [ 205.683975][ T7933] [ 206.075835][ T7941] FAULT_INJECTION: forcing a failure. [ 206.075835][ T7941] name failslab, interval 1, probability 0, space 0, times 0 [ 206.075865][ T7941] CPU: 1 UID: 0 PID: 7941 Comm: syz.4.660 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.075891][ T7941] Tainted: [L]=SOFTLOCKUP [ 206.075898][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 206.075918][ T7941] Call Trace: [ 206.075925][ T7941] [ 206.075934][ T7941] dump_stack_lvl+0xe8/0x150 [ 206.075968][ T7941] should_fail_ex+0x3eb/0x540 [ 206.076002][ T7941] should_failslab+0xa8/0x100 [ 206.076029][ T7941] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 206.076055][ T7941] ? ceph_parse_source+0x1a6/0x1090 [ 206.076075][ T7941] ? ceph_parse_source+0x1a6/0x1090 [ 206.076103][ T7941] kstrdup+0x42/0x100 [ 206.076124][ T7941] ceph_parse_source+0x1a6/0x1090 [ 206.076156][ T7941] ? __pfx_ceph_parse_source+0x10/0x10 [ 206.076188][ T7941] ceph_parse_mount_param+0x168e/0x1a80 [ 206.076215][ T7941] ? __pfx_ceph_parse_mount_param+0x10/0x10 [ 206.076243][ T7941] ? static_key_count+0x41/0x70 [ 206.076275][ T7941] vfs_parse_fs_param+0x1a9/0x420 [ 206.076303][ T7941] __se_sys_fsconfig+0x6b9/0x810 [ 206.076338][ T7941] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 206.076366][ T7941] ? ksys_write+0x242/0x270 [ 206.076391][ T7941] ? __pfx_ksys_write+0x10/0x10 [ 206.076421][ T7941] ? __x64_sys_fsconfig+0x20/0xc0 [ 206.076451][ T7941] do_syscall_64+0x166/0x520 [ 206.076477][ T7941] ? trace_irq_disable+0x3b/0x140 [ 206.076500][ T7941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.076519][ T7941] ? clear_bhb_loop+0x70/0xc0 [ 206.076542][ T7941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.076562][ T7941] RIP: 0033:0x7f5591b9f559 [ 206.076581][ T7941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.076598][ T7941] RSP: 002b:00007f55929e0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 206.076618][ T7941] RAX: ffffffffffffffda RBX: 00007f5591e25fa0 RCX: 00007f5591b9f559 [ 206.076634][ T7941] RDX: 0000200000000200 RSI: 0000000000000001 RDI: 0000000000000003 [ 206.076646][ T7941] RBP: 00007f55929e0090 R08: feffffff00000000 R09: 0000000000000000 [ 206.076661][ T7941] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 206.076674][ T7941] R13: 00007f5591e26038 R14: 00007f5591e25fa0 R15: 00007ffcd138b548 [ 206.076707][ T7941] [ 206.667584][ T7958] loop4: detected capacity change from 0 to 7 [ 206.683410][ T7958] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 206.683433][ T7958] loop4: partition table partially beyond EOD, truncated [ 206.683580][ T7958] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 206.744127][ T7962] FAULT_INJECTION: forcing a failure. [ 206.744127][ T7962] name failslab, interval 1, probability 0, space 0, times 0 [ 206.744249][ T7962] CPU: 1 UID: 0 PID: 7962 Comm: syz.3.667 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.744276][ T7962] Tainted: [L]=SOFTLOCKUP [ 206.744283][ T7962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 206.744294][ T7962] Call Trace: [ 206.744301][ T7962] [ 206.744309][ T7962] dump_stack_lvl+0xe8/0x150 [ 206.744351][ T7962] should_fail_ex+0x3eb/0x540 [ 206.744384][ T7962] should_failslab+0xa8/0x100 [ 206.744410][ T7962] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 206.744433][ T7962] ? __d_alloc+0x37/0x820 [ 206.744452][ T7962] ? __d_alloc+0x37/0x820 [ 206.744480][ T7962] __d_alloc+0x37/0x820 [ 206.744511][ T7962] __d_alloc_parallel+0xde/0x1700 [ 206.744538][ T7962] ? lock_acquire+0x115/0x350 [ 206.744568][ T7962] ? __d_lookup+0x66/0x790 [ 206.744592][ T7962] ? __d_lookup+0x66/0x790 [ 206.744618][ T7962] ? __pfx___d_alloc_parallel+0x10/0x10 [ 206.744642][ T7962] ? d_lookup+0x1f/0xa0 [ 206.744669][ T7962] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 206.744698][ T7962] ? lockdep_hardirqs_on+0x7b/0x110 [ 206.744732][ T7962] lookup_open+0x2c2/0x1970 [ 206.744782][ T7962] path_openat+0x70c/0x20f0 [ 206.744826][ T7962] do_file_open+0x23e/0x4a0 [ 206.744857][ T7962] ? __pfx_do_file_open+0x10/0x10 [ 206.744889][ T7962] ? __pfx_kfree_link+0x10/0x10 [ 206.744919][ T7962] ? _raw_spin_unlock+0x28/0x50 [ 206.744943][ T7962] ? alloc_fd+0x6af/0x760 [ 206.744974][ T7962] do_sys_openat2+0x115/0x200 [ 206.744997][ T7962] ? __pfx_do_sys_openat2+0x10/0x10 [ 206.745018][ T7962] ? ksys_write+0x242/0x270 [ 206.745045][ T7962] ? __pfx_ksys_write+0x10/0x10 [ 206.745073][ T7962] __x64_sys_openat+0x138/0x170 [ 206.745098][ T7962] do_syscall_64+0x166/0x520 [ 206.745126][ T7962] ? trace_irq_disable+0x3b/0x140 [ 206.745150][ T7962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.745169][ T7962] ? clear_bhb_loop+0x70/0xc0 [ 206.745192][ T7962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.745210][ T7962] RIP: 0033:0x7f228215fd8e [ 206.745230][ T7962] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 206.745244][ T7962] RSP: 002b:00007f22803f5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 206.745265][ T7962] RAX: ffffffffffffffda RBX: 00007f22803f66c0 RCX: 00007f228215fd8e [ 206.745280][ T7962] RDX: 0000000000000000 RSI: 00007f228223624e RDI: ffffffffffffff9c [ 206.745293][ T7962] RBP: 00007f22803f6090 R08: 0000000000000000 R09: 0000000000000000 [ 206.745306][ T7962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.745318][ T7962] R13: 00007f2282426038 R14: 00007f2282425fa0 R15: 00007ffcb4aa01f8 [ 206.745359][ T7962] [ 206.995588][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 207.047696][ T27] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 207.069741][ T7968] FAULT_INJECTION: forcing a failure. [ 207.069741][ T7968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.069774][ T7968] CPU: 1 UID: 0 PID: 7968 Comm: syz.0.671 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.069811][ T7968] Tainted: [L]=SOFTLOCKUP [ 207.069819][ T7968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 207.069831][ T7968] Call Trace: [ 207.069839][ T7968] [ 207.069847][ T7968] dump_stack_lvl+0xe8/0x150 [ 207.069883][ T7968] should_fail_ex+0x3eb/0x540 [ 207.069917][ T7968] _copy_from_user+0x2d/0xb0 [ 207.069938][ T7968] mtdchar_read_ioctl+0x121/0xb10 [ 207.069964][ T7968] ? arch_stack_walk+0xfb/0x150 [ 207.070002][ T7968] ? stack_trace_save+0xa9/0x100 [ 207.070025][ T7968] ? __pfx_stack_trace_save+0x10/0x10 [ 207.070046][ T7968] ? kasan_save_track+0x4f/0x80 [ 207.070071][ T7968] ? __pfx_mtdchar_read_ioctl+0x10/0x10 [ 207.070107][ T7968] ? kasan_save_track+0x4f/0x80 [ 207.070129][ T7968] ? kasan_save_track+0x3e/0x80 [ 207.070152][ T7968] ? kasan_save_free_info+0x40/0x50 [ 207.070170][ T7968] ? __kasan_slab_free+0x5c/0x80 [ 207.070194][ T7968] ? kfree+0x1c5/0x650 [ 207.070211][ T7968] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 207.070235][ T7968] ? security_file_ioctl+0xc3/0x2a0 [ 207.070256][ T7968] ? __se_sys_ioctl+0x47/0x170 [ 207.070283][ T7968] ? do_syscall_64+0x166/0x520 [ 207.070311][ T7968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.070358][ T7968] mtdchar_ioctl+0xff5/0x1bc0 [ 207.070389][ T7968] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 207.070425][ T7968] ? __lock_acquire+0x747/0x2de0 [ 207.070465][ T7968] ? tomoyo_path_number_perm+0x219/0x5f0 [ 207.070498][ T7968] ? __mutex_trylock_common+0x15f/0x270 [ 207.070529][ T7968] ? __pfx___mutex_trylock_common+0x10/0x10 [ 207.070560][ T7968] ? rcu_is_watching+0x16/0xb0 [ 207.070588][ T7968] ? trace_contention_end+0x3d/0x140 [ 207.070618][ T7968] ? __mutex_lock+0x305/0x15a0 [ 207.070659][ T7968] ? mtdchar_unlocked_ioctl+0xa1/0xd0 [ 207.070685][ T7968] ? __pfx___mutex_lock+0x10/0x10 [ 207.070724][ T7968] ? __fget_files+0x2a/0x420 [ 207.070747][ T7968] ? __fget_files+0x2a/0x420 [ 207.070774][ T7968] mtdchar_unlocked_ioctl+0xae/0xd0 [ 207.070799][ T7968] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 207.070825][ T7968] __se_sys_ioctl+0xfc/0x170 [ 207.070855][ T7968] do_syscall_64+0x166/0x520 [ 207.070882][ T7968] ? trace_irq_disable+0x3b/0x140 [ 207.070907][ T7968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.070926][ T7968] ? clear_bhb_loop+0x70/0xc0 [ 207.070950][ T7968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.070970][ T7968] RIP: 0033:0x7f3eb039f559 [ 207.070989][ T7968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.071006][ T7968] RSP: 002b:00007f3eb12c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.071027][ T7968] RAX: ffffffffffffffda RBX: 00007f3eb0625fa0 RCX: 00007f3eb039f559 [ 207.071042][ T7968] RDX: 0000000000000000 RSI: 00000000c0404d1a RDI: 0000000000000003 [ 207.071056][ T7968] RBP: 00007f3eb12c9090 R08: 0000000000000000 R09: 0000000000000000 [ 207.071069][ T7968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.071081][ T7968] R13: 00007f3eb0626038 R14: 00007f3eb0625fa0 R15: 00007ffde9418528 [ 207.071114][ T7968] [ 207.123486][ T7970] FAULT_INJECTION: forcing a failure. [ 207.123486][ T7970] name failslab, interval 1, probability 0, space 0, times 0 [ 207.123517][ T7970] CPU: 0 UID: 0 PID: 7970 Comm: syz.3.672 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.123543][ T7970] Tainted: [L]=SOFTLOCKUP [ 207.123550][ T7970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 207.123562][ T7970] Call Trace: [ 207.123570][ T7970] [ 207.123577][ T7970] dump_stack_lvl+0xe8/0x150 [ 207.123611][ T7970] should_fail_ex+0x3eb/0x540 [ 207.123646][ T7970] should_failslab+0xa8/0x100 [ 207.123675][ T7970] __kmalloc_cache_noprof+0x9e/0x600 [ 207.123698][ T7970] ? percpu_ref_init+0xc5/0x350 [ 207.123721][ T7970] ? percpu_ref_init+0xc5/0x350 [ 207.123750][ T7970] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 207.123771][ T7970] percpu_ref_init+0xc5/0x350 [ 207.123800][ T7970] io_ring_ctx_alloc+0x318/0xb80 [ 207.123822][ T7970] ? io_prepare_config+0x8c8/0xc70 [ 207.123862][ T7970] io_uring_create+0x50/0x980 [ 207.123887][ T7970] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 207.123915][ T7970] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 207.123946][ T7970] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 207.123987][ T7970] ? __pfx_ksys_write+0x10/0x10 [ 207.124022][ T7970] do_syscall_64+0x166/0x520 [ 207.124050][ T7970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.124070][ T7970] ? clear_bhb_loop+0x70/0xc0 [ 207.124093][ T7970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.124113][ T7970] RIP: 0033:0x7f228219f559 [ 207.124131][ T7970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.124147][ T7970] RSP: 002b:00007f22803f5ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 207.124168][ T7970] RAX: ffffffffffffffda RBX: 0000200000000d08 RCX: 00007f228219f559 [ 207.124179][ T7970] RDX: 0000200000000d88 RSI: 0000200000000d08 RDI: 00000000000003c9 [ 207.124191][ T7970] RBP: 0000200000000d00 R08: 0000000000000000 R09: 0000000000000000 [ 207.124201][ T7970] R10: 0000200000000d90 R11: 0000000000000206 R12: 0000200000000d88 [ 207.124213][ T7970] R13: 0000200000000d90 R14: 00007f22803f5fd8 R15: 0000000000000000 [ 207.124243][ T7970] [ 207.146418][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 207.148653][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 207.148702][ T10] usb 5-1: New USB device found: idVendor=0bda, idProduct=4014, bcdDevice=0.40 [ 207.149771][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.149836][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 50814, setting to 1024 [ 207.149874][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.155149][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.155174][ T10] usb 5-1: Product: syz [ 207.155223][ T10] usb 5-1: Manufacturer: syz [ 207.155237][ T10] usb 5-1: SerialNumber: syz [ 207.399829][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 207.400353][ T10] usb 5-1: 1:1 : no UAC_FORMAT_TYPE desc [ 207.401286][ T10] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 207.411395][ T27] usb 3-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 207.490290][ T7976] netlink: 'syz.0.675': attribute type 15 has an invalid length. [ 207.490318][ T7976] netlink: 666 bytes leftover after parsing attributes in process `syz.0.675'. [ 207.574633][ T10] usb 5-1: USB disconnect, device number 30 [ 207.625771][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.625799][ T27] usb 3-1: Product: syz [ 207.625812][ T27] usb 3-1: Manufacturer: syz [ 207.625826][ T27] usb 3-1: SerialNumber: syz [ 207.651386][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.787753][ T27] usb 3-1: config 0 descriptor?? [ 207.979117][ T7988] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 208.018309][ T27] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 208.044674][ T7990] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 208.191989][ T7988] md0: detected capacity change from 0 to 12288 [ 208.202905][ T7995] FAULT_INJECTION: forcing a failure. [ 208.202905][ T7995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.202937][ T7995] CPU: 0 UID: 0 PID: 7995 Comm: syz.4.681 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.202965][ T7995] Tainted: [L]=SOFTLOCKUP [ 208.202972][ T7995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 208.202984][ T7995] Call Trace: [ 208.202992][ T7995] [ 208.203001][ T7995] dump_stack_lvl+0xe8/0x150 [ 208.203034][ T7995] should_fail_ex+0x3eb/0x540 [ 208.203070][ T7995] _copy_from_user+0x2d/0xb0 [ 208.203089][ T7995] video_usercopy+0x359/0x1430 [ 208.203124][ T7995] ? __pfx___video_do_ioctl+0x10/0x10 [ 208.203153][ T7995] ? __pfx_video_usercopy+0x10/0x10 [ 208.203193][ T7995] ? __fget_files+0x2a/0x420 [ 208.203222][ T7995] ? __fget_files+0x2a/0x420 [ 208.203246][ T7995] v4l2_ioctl+0x18d/0x1e0 [ 208.203273][ T7995] ? __pfx_v4l2_ioctl+0x10/0x10 [ 208.203297][ T7995] __se_sys_ioctl+0xfc/0x170 [ 208.203325][ T7995] do_syscall_64+0x166/0x520 [ 208.203354][ T7995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.203374][ T7995] ? clear_bhb_loop+0x70/0xc0 [ 208.203397][ T7995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.203417][ T7995] RIP: 0033:0x7f5591b9f559 [ 208.203436][ T7995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.203454][ T7995] RSP: 002b:00007f55929e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.203475][ T7995] RAX: ffffffffffffffda RBX: 00007f5591e25fa0 RCX: 00007f5591b9f559 [ 208.203489][ T7995] RDX: 0000200000000540 RSI: 0000000040045612 RDI: 0000000000000003 [ 208.203503][ T7995] RBP: 00007f55929e0090 R08: 0000000000000000 R09: 0000000000000000 [ 208.203515][ T7995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.203526][ T7995] R13: 00007f5591e26038 R14: 00007f5591e25fa0 R15: 00007ffcd138b548 [ 208.203558][ T7995] [ 208.299997][ T7988] md0: detected capacity change from 12288 to 0 [ 208.300019][ T7988] md: md0 stopped. [ 208.567368][ T8010] FAULT_INJECTION: forcing a failure. [ 208.567368][ T8010] name failslab, interval 1, probability 0, space 0, times 0 [ 208.567400][ T8010] CPU: 1 UID: 0 PID: 8010 Comm: syz.4.688 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.567429][ T8010] Tainted: [L]=SOFTLOCKUP [ 208.567438][ T8010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 208.567450][ T8010] Call Trace: [ 208.567458][ T8010] [ 208.567466][ T8010] dump_stack_lvl+0xe8/0x150 [ 208.567500][ T8010] should_fail_ex+0x3eb/0x540 [ 208.567533][ T8010] should_failslab+0xa8/0x100 [ 208.567560][ T8010] ? alloc_empty_file+0x5b/0x1d0 [ 208.567580][ T8010] kmem_cache_alloc_noprof+0x9c/0x600 [ 208.567601][ T8010] ? stack_depot_save_flags+0x33/0x810 [ 208.567631][ T8010] ? alloc_empty_file+0x5b/0x1d0 [ 208.567657][ T8010] alloc_empty_file+0x5b/0x1d0 [ 208.567685][ T8010] path_openat+0x96/0x20f0 [ 208.567728][ T8010] do_file_open+0x23e/0x4a0 [ 208.567758][ T8010] ? __pfx_do_file_open+0x10/0x10 [ 208.567803][ T8010] ? _raw_spin_unlock+0x28/0x50 [ 208.567827][ T8010] ? alloc_fd+0x6af/0x760 [ 208.567860][ T8010] do_sys_openat2+0x115/0x200 [ 208.567883][ T8010] ? __pfx_do_sys_openat2+0x10/0x10 [ 208.567909][ T8010] ? do_user_addr_fault+0xd3f/0x1480 [ 208.567935][ T8010] __x64_sys_openat+0x138/0x170 [ 208.567961][ T8010] do_syscall_64+0x166/0x520 [ 208.567989][ T8010] ? trace_irq_disable+0x3b/0x140 [ 208.568014][ T8010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.568033][ T8010] ? clear_bhb_loop+0x70/0xc0 [ 208.568057][ T8010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.568077][ T8010] RIP: 0033:0x7f5591b5fd8e [ 208.568096][ T8010] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 208.568114][ T8010] RSP: 002b:00007f55929dfb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 208.568135][ T8010] RAX: ffffffffffffffda RBX: 00007f55929e06c0 RCX: 00007f5591b5fd8e [ 208.568149][ T8010] RDX: 0000000000000082 RSI: 00007f55929dfc00 RDI: ffffffffffffff9c [ 208.568163][ T8010] RBP: 00007f55929dfc00 R08: 0000000000000000 R09: 0000000000000000 [ 208.568175][ T8010] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 208.568189][ T8010] R13: 00007f5591e26038 R14: 00007f5591e25fa0 R15: 00007ffcd138b548 [ 208.568219][ T8010] [ 208.782824][ T27] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 209.068091][ T8023] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 209.088654][ T32] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 209.223439][ T8023] md/raid0:md4: too few disks (1 of 2) - aborting! [ 209.223468][ T8023] md: pers->run() failed ... [ 209.279115][ T32] usb 4-1: not running at top speed; connect to a high speed hub [ 209.279140][ T32] usb 4-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 209.281519][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.281535][ T32] usb 4-1: Product: syz [ 209.281543][ T32] usb 4-1: Manufacturer: syz [ 209.281551][ T32] usb 4-1: SerialNumber: syz [ 209.287089][ T8023] md: md4 stopped. [ 209.290900][ T32] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 209.307453][ T32] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 209.359317][ T32] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 209.381255][ T32] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 209.406801][ T32] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 209.554403][ C1] usb 4-1: malformed indat packet [ 209.554713][ C1] usb 4-1: malformed indat packet [ 209.555001][ C1] usb 4-1: malformed indat packet [ 209.555290][ C1] usb 4-1: malformed indat packet [ 209.555580][ C1] usb 4-1: malformed indat packet [ 209.555954][ C1] usb 4-1: malformed indat packet [ 209.556240][ C1] usb 4-1: malformed indat packet [ 209.704061][ T5754] hid_parser_main: 29 callbacks suppressed [ 209.704086][ T5754] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 209.707768][ T5754] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 209.808877][ T8016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.812047][ T8016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.839614][ C1] usb 4-1: malformed indat packet [ 209.839904][ C1] usb 4-1: malformed indat packet [ 209.840159][ C1] usb 4-1: malformed indat packet [ 209.902791][ T8053] FAULT_INJECTION: forcing a failure. [ 209.902791][ T8053] name failslab, interval 1, probability 0, space 0, times 0 [ 209.902814][ T8053] CPU: 1 UID: 0 PID: 8053 Comm: syz.4.700 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.902830][ T8053] Tainted: [L]=SOFTLOCKUP [ 209.902834][ T8053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 209.902841][ T8053] Call Trace: [ 209.902846][ T8053] [ 209.902851][ T8053] dump_stack_lvl+0xe8/0x150 [ 209.902874][ T8053] should_fail_ex+0x3eb/0x540 [ 209.902898][ T8053] should_failslab+0xa8/0x100 [ 209.902915][ T8053] __kmalloc_cache_noprof+0x9e/0x600 [ 209.902929][ T8053] ? uhid_hid_open+0x78/0x2b0 [ 209.902944][ T8053] ? uhid_hid_open+0x78/0x2b0 [ 209.902962][ T8053] uhid_hid_open+0x78/0x2b0 [ 209.902983][ T8053] ? __pfx_down_write+0x10/0x10 [ 209.902994][ T8053] ? __kmalloc_cache_noprof+0x148/0x600 [ 209.903008][ T8053] hid_hw_open+0xe9/0x1f0 [ 209.903024][ T8053] hidraw_open+0x467/0x8c0 [ 209.903043][ T8053] chrdev_open+0x4d9/0x600 [ 209.903061][ T8053] ? __pfx_chrdev_open+0x10/0x10 [ 209.903076][ T8053] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 209.903092][ T8053] ? devcgroup_check_permission+0x31/0x8f0 [ 209.903107][ T8053] ? __pfx_chrdev_open+0x10/0x10 [ 209.903122][ T8053] do_dentry_open+0x80e/0x1360 [ 209.903144][ T8053] vfs_open_consume+0x4a/0x350 [ 209.903160][ T8053] ? path_openat+0x16e1/0x20f0 [ 209.903176][ T8053] path_openat+0x16fc/0x20f0 [ 209.903200][ T8053] do_file_open+0x23e/0x4a0 [ 209.903217][ T8053] ? __pfx_do_file_open+0x10/0x10 [ 209.903243][ T8053] ? _raw_spin_unlock+0x28/0x50 [ 209.903257][ T8053] ? alloc_fd+0x6af/0x760 [ 209.903275][ T8053] do_sys_openat2+0x115/0x200 [ 209.903287][ T8053] ? __pfx_do_sys_openat2+0x10/0x10 [ 209.903302][ T8053] ? do_user_addr_fault+0xd3f/0x1480 [ 209.903317][ T8053] __x64_sys_openat+0x138/0x170 [ 209.903331][ T8053] do_syscall_64+0x166/0x520 [ 209.903346][ T8053] ? trace_irq_disable+0x3b/0x140 [ 209.903360][ T8053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.903371][ T8053] ? clear_bhb_loop+0x70/0xc0 [ 209.903385][ T8053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.903397][ T8053] RIP: 0033:0x7f5591b5fd8e [ 209.903408][ T8053] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 209.903418][ T8053] RSP: 002b:00007f558f9f3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 209.903431][ T8053] RAX: ffffffffffffffda RBX: 00007f558f9f46c0 RCX: 00007f5591b5fd8e [ 209.903440][ T8053] RDX: 0000000000000081 RSI: 00007f558f9f3c00 RDI: ffffffffffffff9c [ 209.903447][ T8053] RBP: 00007f558f9f3c00 R08: 0000000000000000 R09: 0000000000000000 [ 209.903454][ T8053] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 209.903462][ T8053] R13: 00007f5591e26308 R14: 00007f5591e26270 R15: 00007ffcd138b548 [ 209.903484][ T8053] [ 209.989199][ T27] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 210.045208][ T32] usb 4-1: USB disconnect, device number 59 [ 210.069047][ T32] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 210.095013][ T32] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 210.111524][ T32] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 210.120664][ T32] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 210.126122][ T32] keyspan 4-1:1.0: device disconnected [ 210.173892][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 210.174596][ T27] usb 1-1: New USB device found: idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 210.178325][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.178350][ T27] usb 1-1: Product: syz [ 210.178364][ T27] usb 1-1: Manufacturer: syz [ 210.178378][ T27] usb 1-1: SerialNumber: syz [ 210.181711][ T27] usb 1-1: config 0 descriptor?? [ 210.591058][ T27] airspy 1-1:0.0: usb_control_msg() failed -71 request 0a [ 210.591085][ T27] airspy 1-1:0.0: Could not detect board [ 210.591182][ T27] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 210.597272][ T27] usb 1-1: USB disconnect, device number 54 [ 210.723683][ T8061] FAULT_INJECTION: forcing a failure. [ 210.723683][ T8061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.723715][ T8061] CPU: 0 UID: 0 PID: 8061 Comm: syz.3.703 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.723736][ T8061] Tainted: [L]=SOFTLOCKUP [ 210.723740][ T8061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 210.723747][ T8061] Call Trace: [ 210.723751][ T8061] [ 210.723757][ T8061] dump_stack_lvl+0xe8/0x150 [ 210.723778][ T8061] should_fail_ex+0x3eb/0x540 [ 210.723798][ T8061] _copy_from_user+0x2d/0xb0 [ 210.723809][ T8061] vmemdup_user+0x5e/0xd0 [ 210.723821][ T8061] path_setxattrat+0x2d0/0x450 [ 210.723841][ T8061] ? __pfx_path_setxattrat+0x10/0x10 [ 210.723868][ T8061] ? ksys_write+0x242/0x270 [ 210.723883][ T8061] ? __pfx_ksys_write+0x10/0x10 [ 210.723899][ T8061] __x64_sys_fsetxattr+0xbc/0xe0 [ 210.723913][ T8061] do_syscall_64+0x166/0x520 [ 210.723936][ T8061] ? trace_irq_disable+0x3b/0x140 [ 210.723950][ T8061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.723961][ T8061] ? clear_bhb_loop+0x70/0xc0 [ 210.723974][ T8061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.723984][ T8061] RIP: 0033:0x7f228219f559 [ 210.723996][ T8061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.724005][ T8061] RSP: 002b:00007f22803f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 210.724017][ T8061] RAX: ffffffffffffffda RBX: 00007f2282425fa0 RCX: 00007f228219f559 [ 210.724028][ T8061] RDX: 0000200000000880 RSI: 0000200000000040 RDI: 0000000000000003 [ 210.724035][ T8061] RBP: 00007f22803f6090 R08: 0000000000000001 R09: 0000000000000000 [ 210.724042][ T8061] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 210.724049][ T8061] R13: 00007f2282426038 R14: 00007f2282425fa0 R15: 00007ffcb4aa01f8 [ 210.724065][ T8061] [ 210.984315][ T8066] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 211.131389][ T8066] md4: detected capacity change from 0 to 12288 [ 211.167812][ T8066] md4: detected capacity change from 12288 to 0 [ 211.167835][ T8066] md: md4 stopped. [ 211.291137][ T8074] FAULT_INJECTION: forcing a failure. [ 211.291137][ T8074] name failslab, interval 1, probability 0, space 0, times 0 [ 211.291159][ T8074] CPU: 1 UID: 0 PID: 8074 Comm: syz.4.708 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.291175][ T8074] Tainted: [L]=SOFTLOCKUP [ 211.291179][ T8074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 211.291186][ T8074] Call Trace: [ 211.291191][ T8074] [ 211.291196][ T8074] dump_stack_lvl+0xe8/0x150 [ 211.291216][ T8074] should_fail_ex+0x3eb/0x540 [ 211.291236][ T8074] ? __alloc_skb+0x1db/0x7a0 [ 211.291255][ T8074] should_failslab+0xa8/0x100 [ 211.291278][ T8074] ? __alloc_skb+0x1db/0x7a0 [ 211.291290][ T8074] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 211.291302][ T8074] ? __alloc_skb+0x18d/0x7a0 [ 211.291314][ T8074] ? __alloc_skb+0x1db/0x7a0 [ 211.291329][ T8074] __alloc_skb+0x1db/0x7a0 [ 211.291344][ T8074] netlink_sendmsg+0x5cd/0xb20 [ 211.291359][ T8074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.291372][ T8074] ? aa_sock_msg_perm+0x144/0x210 [ 211.291391][ T8074] ? apparmor_socket_sendmsg+0x98/0x360 [ 211.291404][ T8074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.291416][ T8074] sock_sendmsg_nosec+0x14e/0x190 [ 211.291428][ T8074] __sys_sendto+0x408/0x5a0 [ 211.291444][ T8074] ? __pfx___sys_sendto+0x10/0x10 [ 211.291470][ T8074] ? do_user_addr_fault+0xd3f/0x1480 [ 211.291486][ T8074] __x64_sys_sendto+0xde/0x100 [ 211.291501][ T8074] do_syscall_64+0x166/0x520 [ 211.291516][ T8074] ? trace_irq_disable+0x3b/0x140 [ 211.291529][ T8074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.291540][ T8074] ? clear_bhb_loop+0x70/0xc0 [ 211.291553][ T8074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.291564][ T8074] RIP: 0033:0x7f5591b5fd8e [ 211.291575][ T8074] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 211.291584][ T8074] RSP: 002b:00007f55929dee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 211.291597][ T8074] RAX: ffffffffffffffda RBX: 00007f55929e06c0 RCX: 00007f5591b5fd8e [ 211.291605][ T8074] RDX: 0000000000000020 RSI: 00007f55929df000 RDI: 0000000000000003 [ 211.291611][ T8074] RBP: 0000000000000000 R08: 00007f55929def04 R09: 000000000000000c [ 211.291618][ T8074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 211.291625][ T8074] R13: 00007f55929def58 R14: 00007f55929df000 R15: 0000000000000000 [ 211.291642][ T8074] [ 211.371596][ T8075] autofs4:pid:8075:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.1280), cmd(0xc0189375) [ 211.371626][ T8075] autofs4:pid:8075:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 211.412965][ T7146] usb 3-1: USB disconnect, device number 45 [ 211.753154][ T8088] FAULT_INJECTION: forcing a failure. [ 211.753154][ T8088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.753188][ T8088] CPU: 1 UID: 0 PID: 8088 Comm: syz.3.711 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.753216][ T8088] Tainted: [L]=SOFTLOCKUP [ 211.753223][ T8088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 211.753236][ T8088] Call Trace: [ 211.753244][ T8088] [ 211.753253][ T8088] dump_stack_lvl+0xe8/0x150 [ 211.753287][ T8088] should_fail_ex+0x3eb/0x540 [ 211.753322][ T8088] _copy_from_user+0x2d/0xb0 [ 211.753345][ T8088] __copy_msghdr+0x390/0x590 [ 211.753377][ T8088] ___sys_sendmsg+0x213/0x360 [ 211.753401][ T8088] ? __lock_acquire+0x747/0x2de0 [ 211.753429][ T8088] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.753492][ T8088] ? __fget_files+0x3a2/0x420 [ 211.753519][ T8088] ? __fget_files+0x2a/0x420 [ 211.753551][ T8088] __x64_sys_sendmsg+0x1b1/0x290 [ 211.753582][ T8088] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.753628][ T8088] do_syscall_64+0x166/0x520 [ 211.753658][ T8088] ? trace_irq_disable+0x3b/0x140 [ 211.753683][ T8088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.753704][ T8088] ? clear_bhb_loop+0x70/0xc0 [ 211.753741][ T8088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.753762][ T8088] RIP: 0033:0x7f228219f559 [ 211.753781][ T8088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.753798][ T8088] RSP: 002b:00007f22803d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.753820][ T8088] RAX: ffffffffffffffda RBX: 00007f2282426090 RCX: 00007f228219f559 [ 211.753835][ T8088] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 211.753848][ T8088] RBP: 00007f22803d5090 R08: 0000000000000000 R09: 0000000000000000 [ 211.753861][ T8088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.753873][ T8088] R13: 00007f2282426128 R14: 00007f2282426090 R15: 00007ffcb4aa01f8 [ 211.753903][ T8088] [ 211.826238][ T7146] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 211.978926][ T7146] usb 3-1: New USB device found: idVendor=04d8, idProduct=c002, bcdDevice=0.00 [ 211.981478][ T7146] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.981509][ T7146] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.981535][ T7146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.250198][ T8094] gadgetfs: bound to dummy_udc driver [ 212.488519][ T10] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 212.488770][ C0] gadgetfs: connected [ 212.489374][ T10] gadgetfs: disconnected [ 212.608161][ T7146] input: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.000D/input/input23 [ 212.640723][ C0] gadgetfs: connected [ 212.647485][ T10] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 212.647843][ T10] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 212.647882][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.692576][ C0] gadgetfs: configuration #1 [ 212.761683][ T8097] netlink: 32 bytes leftover after parsing attributes in process `syz.0.714'. [ 212.771107][ T7146] rc_core: IR keymap rc-rc6-mce not found [ 212.771124][ T7146] Registered IR keymap rc-empty [ 212.786293][ T7146] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.000D/rc/rc0 [ 212.797871][ T7146] input: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.000D/rc/rc0/input24 [ 212.811648][ T8089] gadgetfs: suspended from state 3 [ 212.814158][ T5752] usb 1-1: USB disconnect, device number 55 [ 212.814675][ T8089] gadgetfs: disconnected [ 212.837799][ T8101] [ 212.840168][ T8101] ====================================================== [ 212.847195][ T8101] WARNING: possible circular locking dependency detected [ 212.854238][ T8101] syzkaller #0 Tainted: G L [ 212.860223][ T8101] ------------------------------------------------------ [ 212.867244][ T8101] syz.3.715/8101 is trying to acquire lock: [ 212.873132][ T8101] ffffffff9133fc80 (disks_mutex){+.+.}-{4:4}, at: md_alloc+0x40/0xf40 [ 212.881323][ T8101] [ 212.881323][ T8101] but task is already holding lock: [ 212.888674][ T8101] ffffffff9096c160 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 [ 212.898166][ T8101] [ 212.898166][ T8101] which lock already depends on the new lock. [ 212.898166][ T8101] [ 212.908562][ T8101] [ 212.908562][ T8101] the existing dependency chain (in reverse order) is: [ 212.917571][ T8101] [ 212.917571][ T8101] -> #2 (major_names_lock){+.+.}-{4:4}: [ 212.925301][ T8101] __mutex_lock+0x197/0x15a0 [ 212.930422][ T8101] blk_request_module+0x35/0x2a0 [ 212.935878][ T8101] blkdev_get_no_open+0x3f/0xe0 [ 212.941252][ T8101] bdev_file_open_by_dev+0xa0/0x240 [ 212.946973][ T8101] md_import_device+0x2e9/0x650 [ 212.952341][ T8101] md_add_new_disk+0x522/0x1850 [ 212.957714][ T8101] md_ioctl+0x2027/0x2630 [ 212.962572][ T8101] blkdev_ioctl+0x5e3/0x740 [ 212.967648][ T8101] __se_sys_ioctl+0xfc/0x170 [ 212.972775][ T8101] do_syscall_64+0x166/0x520 [ 212.977910][ T8101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.984319][ T8101] [ 212.984319][ T8101] -> #1 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 212.992570][ T8101] __mutex_lock+0x197/0x15a0 [ 212.997860][ T8101] md_alloc+0x81e/0xf40 [ 213.002570][ T8101] md_alloc_and_put+0x1a/0x1f0 [ 213.007888][ T8101] add_named_array+0x240/0x350 [ 213.013190][ T8101] param_attr_store+0x214/0x310 [ 213.018611][ T8101] module_attr_store+0x65/0x90 [ 213.023894][ T8101] kernfs_fop_write_iter+0x3a4/0x540 [ 213.029695][ T8101] vfs_write+0x612/0xba0 [ 213.034459][ T8101] ksys_write+0x150/0x270 [ 213.039302][ T8101] do_syscall_64+0x166/0x520 [ 213.044413][ T8101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.050828][ T8101] [ 213.050828][ T8101] -> #0 (disks_mutex){+.+.}-{4:4}: [ 213.058121][ T8101] __lock_acquire+0x164c/0x2de0 [ 213.063492][ T8101] lock_acquire+0x115/0x350 [ 213.068512][ T8101] __mutex_lock+0x197/0x15a0 [ 213.073627][ T8101] md_alloc+0x40/0xf40 [ 213.078221][ T8101] md_alloc_and_put+0x1a/0x1f0 [ 213.083544][ T8101] blk_request_module+0x27d/0x2a0 [ 213.089097][ T8101] blkdev_get_no_open+0x3f/0xe0 [ 213.094469][ T8101] blkdev_open+0x1d7/0x600 [ 213.099407][ T8101] do_dentry_open+0x80e/0x1360 [ 213.104705][ T8101] vfs_open_consume+0x4a/0x350 [ 213.109994][ T8101] path_openat+0x16fc/0x20f0 [ 213.115107][ T8101] do_file_open+0x23e/0x4a0 [ 213.120137][ T8101] do_sys_openat2+0x115/0x200 [ 213.125329][ T8101] __x64_sys_openat+0x138/0x170 [ 213.130725][ T8101] do_syscall_64+0x166/0x520 [ 213.135838][ T8101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.142246][ T8101] [ 213.142246][ T8101] other info that might help us debug this: [ 213.142246][ T8101] [ 213.152467][ T8101] Chain exists of: [ 213.152467][ T8101] disks_mutex --> &mddev->reconfig_mutex --> major_names_lock [ 213.152467][ T8101] [ 213.165872][ T8101] Possible unsafe locking scenario: [ 213.165872][ T8101] [ 213.173350][ T8101] CPU0 CPU1 [ 213.178727][ T8101] ---- ---- [ 213.184091][ T8101] lock(major_names_lock); [ 213.188595][ T8101] lock(&mddev->reconfig_mutex); [ 213.196131][ T8101] lock(major_names_lock); [ 213.203147][ T8101] lock(disks_mutex); [ 213.207212][ T8101] [ 213.207212][ T8101] *** DEADLOCK *** [ 213.207212][ T8101] [ 213.215344][ T8101] locks held by syz.3.715/8101: 1, last CPU#0: [ 213.221520][ T8101] #0: ffffffff9096c160 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 [ 213.231441][ T8101] [ 213.231441][ T8101] stack backtrace: [ 213.237323][ T8101] CPU: 0 UID: 0 PID: 8101 Comm: syz.3.715 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.248086][ T8101] Tainted: [L]=SOFTLOCKUP [ 213.252398][ T8101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 213.262448][ T8101] Call Trace: [ 213.265720][ T8101] [ 213.268643][ T8101] dump_stack_lvl+0xe8/0x150 [ 213.273247][ T8101] print_circular_bug+0x2e2/0x300 [ 213.278276][ T8101] check_noncircular+0x12f/0x150 [ 213.283220][ T8101] __lock_acquire+0x164c/0x2de0 [ 213.288073][ T8101] ? __flush_workqueue+0xe9e/0x10b0 [ 213.293360][ T8101] lock_acquire+0x115/0x350 [ 213.297856][ T8101] ? md_alloc+0x40/0xf40 [ 213.302101][ T8101] __mutex_lock+0x197/0x15a0 [ 213.306716][ T8101] ? md_alloc+0x40/0xf40 [ 213.310971][ T8101] ? __mutex_lock+0x305/0x15a0 [ 213.315733][ T8101] ? md_alloc+0x40/0xf40 [ 213.319977][ T8101] ? __pfx___mutex_lock+0x10/0x10 [ 213.325007][ T8101] ? __pfx___mutex_lock+0x10/0x10 [ 213.330031][ T8101] ? find_inode_fast+0xd2/0x740 [ 213.334876][ T8101] ? __pfx_md_probe+0x10/0x10 [ 213.339551][ T8101] md_alloc+0x40/0xf40 [ 213.343623][ T8101] ? find_inode_fast+0xd2/0x740 [ 213.348473][ T8101] ? __pfx_md_probe+0x10/0x10 [ 213.353145][ T8101] md_alloc_and_put+0x1a/0x1f0 [ 213.357910][ T8101] blk_request_module+0x27d/0x2a0 [ 213.362932][ T8101] blkdev_get_no_open+0x3f/0xe0 [ 213.367784][ T8101] blkdev_open+0x1d7/0x600 [ 213.372202][ T8101] ? __pfx_blkdev_open+0x10/0x10 [ 213.377141][ T8101] do_dentry_open+0x80e/0x1360 [ 213.381951][ T8101] vfs_open_consume+0x4a/0x350 [ 213.386721][ T8101] ? path_openat+0x16e1/0x20f0 [ 213.391485][ T8101] path_openat+0x16fc/0x20f0 [ 213.396083][ T8101] do_file_open+0x23e/0x4a0 [ 213.400586][ T8101] ? __pfx_do_file_open+0x10/0x10 [ 213.405615][ T8101] ? _raw_spin_unlock+0x28/0x50 [ 213.410477][ T8101] ? alloc_fd+0x6af/0x760 [ 213.414806][ T8101] do_sys_openat2+0x115/0x200 [ 213.419481][ T8101] ? __pfx_do_sys_openat2+0x10/0x10 [ 213.424671][ T8101] ? kfree+0x4d/0x650 [ 213.428647][ T8101] __x64_sys_openat+0x138/0x170 [ 213.433498][ T8101] do_syscall_64+0x166/0x520 [ 213.438091][ T8101] ? trace_irq_disable+0x3b/0x140 [ 213.443118][ T8101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.449183][ T8101] ? clear_bhb_loop+0x70/0xc0 [ 213.453872][ T8101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.459762][ T8101] RIP: 0033:0x7f228219f559 [ 213.464205][ T8101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.483805][ T8101] RSP: 002b:00007f22803d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 213.492224][ T8101] RAX: ffffffffffffffda RBX: 00007f2282426090 RCX: 00007f228219f559 [ 213.500192][ T8101] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 213.508157][ T8101] RBP: 00007f2282236b20 R08: 0000000000000000 R09: 0000000000000000 [ 213.516131][ T8101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.524129][ T8101] R13: 00007f2282426128 R14: 00007f2282426090 R15: 00007ffcb4aa01f8 [ 213.532199][ T8101] [ 213.558739][ T8099] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 213.571698][ T7146] hid-picolcd 0003:04D8:C002.000D: No report with id 0x94 found [ 213.571725][ T7146] hid-picolcd 0003:04D8:C002.000D: failed to configure display [ 213.608910][ T8101] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 213.608929][ T8101] block device autoloading is deprecated and will be removed. [ 213.638043][ T7146] usb 3-1: USB disconnect, device number 46