last executing test programs: 2m52.441187376s ago: executing program 3 (id=629): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./export\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='localhost 1 \\x00000000 2147483647 ./export\n', 0x2b) 2m52.359809392s ago: executing program 3 (id=631): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, 0x0, 0x0) setns(0xc9, 0x0) r1 = socket(0x1f, 0x5, 0x8) bind(r1, &(0x7f0000000140)=@generic={0x1f, "aaaaaaaaaa000100"}, 0x32) 2m52.25241014s ago: executing program 3 (id=633): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="e800", 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='p:p1 ./file0:0', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x7, r3, 0x0, 0x0) wait4(r3, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') 2m51.906624712s ago: executing program 3 (id=636): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101) 2m51.828207947s ago: executing program 3 (id=637): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0), 0x0) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='dummy_u', 0x7) close(r2) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2m51.579799335s ago: executing program 3 (id=641): socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0xa, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x1]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) socket$xdp(0x2c, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x80, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x966}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x7}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m51.46041279s ago: executing program 32 (id=641): socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0xa, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x1]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) socket$xdp(0x2c, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x80, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x966}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x7}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m39.075971345s ago: executing program 1 (id=711): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={0x0, 0x4, 0x1, 'x'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c) 2m38.95320441s ago: executing program 1 (id=712): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno', 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000800)="04", 0x1, 0x2404c081, &(0x7f00000001c0)={0xa, 0x2, 0xfffc, @empty, 0x9}, 0x1c) shutdown(r0, 0x1) 2m38.826098494s ago: executing program 1 (id=713): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000680)="0ca5ac161ae2541e0ff5602427566e18598aec611c87996d108995edde93cac9842fbb23ace316d4ada7a614ef3590992b6dc78a0bac56d4e4ce20b98febcbdcf1bc280e96f6e195c8f13779742bd1355d09a4258efb8d3b6b0eb4e4f0efd1d6d73c0cd4d970d9c1ff6eb7bab6ba", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)='R', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)='\b', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000005c0)="5976e0f07b32111b6e3a61", 0xb}], 0x1}}], 0x4, 0x4000001) 2m38.677517093s ago: executing program 1 (id=715): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="e80000", 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x7, r3, 0x0, 0x0) wait4(r3, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') 2m37.9088376s ago: executing program 1 (id=718): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x104, 0xaa180) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r1) 2m37.37188629s ago: executing program 1 (id=723): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x82000001, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x17, 0x1, 0x1, 0x0, 0x6, @random="ee52e7e07522"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="01", 0x1) 2m36.931523624s ago: executing program 33 (id=723): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x82000001, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x17, 0x1, 0x1, 0x0, 0x6, @random="ee52e7e07522"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="01", 0x1) 2m29.677294545s ago: executing program 2 (id=751): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="e80000", 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='p:p1 ./', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x7, r3, 0x0, 0x0) wait4(r3, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') 2m29.28702118s ago: executing program 2 (id=752): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x1808000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 n', 0x35) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a00100003801000001") 2m29.155818206s ago: executing program 2 (id=754): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x20000005) 2m27.968351902s ago: executing program 2 (id=760): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="e80000", 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='p:p1 ./', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x7, r3, 0x0, 0x0) wait4(r3, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') 2m27.288210804s ago: executing program 2 (id=762): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) syz_io_uring_setup(0x4a73, &(0x7f0000000480)={0x0, 0xe29b, 0x800, 0x3, 0x160}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x4, 0x8, 0x3, 0x4, 0xffff, 0x9794, 0x65, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1, 0x8}}, 0x3, 0x0, 0xbc, 0x4, 0x90000}}, &(0x7f00000004c0)=0xb0) 2m26.887876233s ago: executing program 2 (id=765): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="e80000", 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='p:p1 ./file', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x7, r3, 0x0, 0x0) wait4(r3, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') 2m26.401481461s ago: executing program 34 (id=765): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="e80000", 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='p:p1 ./file', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x7, r3, 0x0, 0x0) wait4(r3, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') 2m24.442450673s ago: executing program 4 (id=776): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000780)=ANY=[], 0x8) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A7', 0x2}], 0x1}}], 0x1, 0x4000801) 2m24.26462705s ago: executing program 4 (id=778): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040), 0x8) listen(r1, 0x1) syz_open_dev$audion(0x0, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2m24.055811908s ago: executing program 4 (id=779): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') 2m23.820955608s ago: executing program 4 (id=783): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="e80000", 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='p:p1 ./file', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x7, r3, 0x0, 0x0) wait4(r3, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') 2m22.940643903s ago: executing program 4 (id=786): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0xa) 2m22.52901122s ago: executing program 4 (id=788): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'lo\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "f1161773518504fa64f1af694b70b3d5193c2bffe4a2b397e698ebb43cc8f22b", "6fd0dc8f06c07702143b68815e35b4c8c68f61d86529730e400ec5208f44d4be", "86b4ac02d89f3b29968d4edcdeef28825cd8590e951bd2bb60732412cf270957", "e86b4d8bfc5af10ab4ee66f49c5ee8e6335a74dd424b283df20293e22d19c944", "fdf8ce2952ae34ecaebe9fb29a810daeb28c2ecdc361334b16e5abeeaf0cf4a9", "4e6d8b1e0a30b6a570ca60fe", 0xfffffff4, 0xa, 0x80000000, 0x7, 0x9}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000540)={0xc0000000, 0xe42, 0xd, 0x0, 0x3348, 0x1}) 2m21.937919134s ago: executing program 35 (id=788): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'lo\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "f1161773518504fa64f1af694b70b3d5193c2bffe4a2b397e698ebb43cc8f22b", "6fd0dc8f06c07702143b68815e35b4c8c68f61d86529730e400ec5208f44d4be", "86b4ac02d89f3b29968d4edcdeef28825cd8590e951bd2bb60732412cf270957", "e86b4d8bfc5af10ab4ee66f49c5ee8e6335a74dd424b283df20293e22d19c944", "fdf8ce2952ae34ecaebe9fb29a810daeb28c2ecdc361334b16e5abeeaf0cf4a9", "4e6d8b1e0a30b6a570ca60fe", 0xfffffff4, 0xa, 0x80000000, 0x7, 0x9}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000540)={0xc0000000, 0xe42, 0xd, 0x0, 0x3348, 0x1}) 1m32.411322145s ago: executing program 0 (id=1061): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000880)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) 1m30.80982339s ago: executing program 5 (id=1074): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000340)={0x3, 0xffffffff, 0x0, 0x4, 0x4, 0x7}) 1m30.436570461s ago: executing program 6 (id=1077): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, 0x0, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000084}, 0x44) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m29.962185904s ago: executing program 6 (id=1079): socket$inet6(0xa, 0x400000000001, 0x0) setpriority(0x0, 0x0, 0x200002a14b56) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) inotify_init1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000080)={r1, 0x80001, 0x80000004}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r2, 0x1, r0, 0x3, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000280)={r2, 0x5, 0x4000003}) 1m29.660633274s ago: executing program 6 (id=1080): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x8240, 0x48) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='scalable', 0x8) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1m29.264941639s ago: executing program 0 (id=1081): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x2, 0x1, 0x4, 0x110000, 0x5, {0x77359400}, {0x3, 0x1, 0x0, 0x2, 0x0, 0x8, "75ff52b2"}, 0x6, 0x2, {0x0}, 0x3ff, 0x0, r1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x70411, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x101, 0x0, r1}) 1m29.083098005s ago: executing program 5 (id=1083): r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09051b00200007039a0705d15b89f26d09050903"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002040)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000540)='a', 0x1) 1m26.785519654s ago: executing program 0 (id=1093): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) cachestat(r1, &(0x7f0000000000)={0x7ffc}, &(0x7f0000000040), 0x0) 1m26.774604862s ago: executing program 6 (id=1094): r0 = fsopen(0x0, 0x0) fsmount(r0, 0x0, 0x8a) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000001c0)={0x2, 0x0, @pic={0x8, 0x0, 0x3, 0x8, 0x2, 0x1, 0x6, 0x9, 0x1, 0x6, 0x0, 0x4, 0xa, 0x0, 0x8, 0x40}}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x801c581f, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 1m22.918574316s ago: executing program 5 (id=1086): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 1m22.559037937s ago: executing program 6 (id=1087): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, 0x0, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000084}, 0x44) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m20.737089334s ago: executing program 5 (id=1088): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d5, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x9c068000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000000040)=""/56, 0x38) getdents(r1, 0xffffffffffffffff, 0x5a) 1m20.704773122s ago: executing program 0 (id=1098): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000140)='./file0\x00') mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000280)='./file0\x00') syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r0, 0x2, 0x0) getdents(r0, 0x0, 0x58) 1m19.888443867s ago: executing program 0 (id=1091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/102, 0x38a}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f00000023c0)=""/4098, 0x1e1}, {&(0x7f00000000c0)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x5b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0xa}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/207, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000000000)={0x77359400}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_open_procfs(0x0, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1m19.233553773s ago: executing program 7 (id=1092): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(r0, &(0x7f0000000180)=""/145, 0x91) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x12, r1, 0x93013000) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000bcb000/0x4000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x4000}) 1m18.251080567s ago: executing program 7 (id=1095): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x695d8e8, 0x4) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1m17.98307618s ago: executing program 7 (id=1096): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38", 0xf4}, {&(0x7f0000000cc0)="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", 0x116}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c8442", 0x18}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="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", 0x124}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m17.481814972s ago: executing program 7 (id=1097): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x10000b, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000540)="ebd5", 0x2}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce24, 0x6, @empty, 0x200002d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x5, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x0, 0x6, 0xffff1896, 0x3, 0x26, 0x4, 0x1a}, 0x9c) 1m17.33052116s ago: executing program 5 (id=1099): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1:0', 0x3) 1m17.083225311s ago: executing program 7 (id=1100): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x3, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000100)={0x10, 0x0, r6}) 1m16.202528333s ago: executing program 7 (id=1101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@text32={0x20, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000001ac0)={0xb6, 0x0, 0x10}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m14.090030309s ago: executing program 5 (id=1102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580080008c0"], 0x4a) 1m12.886858283s ago: executing program 0 (id=1103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6}]}) timer_create(0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 1m12.873058798s ago: executing program 6 (id=1104): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001180), 0x0, 0x4000000) write(r0, &(0x7f0000001f00)="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", 0x3c6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000140)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) 0s ago: executing program 36 (id=1103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6}]}) timer_create(0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) kernel console output (not intermixed with test programs): CIFS: Attempting to mount //127.0.0.1/share [ 196.279446][ T8855] FAULT_INJECTION: forcing a failure. [ 196.279446][ T8855] name failslab, interval 1, probability 0, space 0, times 0 [ 196.279474][ T8855] CPU: 0 UID: 0 PID: 8855 Comm: syz.0.840 Not tainted syzkaller #0 PREEMPT(full) [ 196.279493][ T8855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.279503][ T8855] Call Trace: [ 196.279510][ T8855] [ 196.279516][ T8855] dump_stack_lvl+0xe8/0x150 [ 196.279545][ T8855] should_fail_ex+0x3eb/0x540 [ 196.279568][ T8855] should_failslab+0xa8/0x100 [ 196.279589][ T8855] __kmalloc_cache_noprof+0x9e/0x600 [ 196.279628][ T8855] ? input_allocate_device+0x4e/0x2a0 [ 196.279649][ T8855] ? input_allocate_device+0x4e/0x2a0 [ 196.279675][ T8855] input_allocate_device+0x4e/0x2a0 [ 196.279699][ T8855] uinput_ioctl_handler+0x187/0x15a0 [ 196.279726][ T8855] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 196.279755][ T8855] ? __fget_files+0x2a/0x420 [ 196.279781][ T8855] ? __fget_files+0x3a2/0x420 [ 196.279806][ T8855] ? bpf_lsm_file_ioctl+0x9/0x20 [ 196.279828][ T8855] ? __pfx_uinput_ioctl+0x10/0x10 [ 196.279844][ T8855] __se_sys_ioctl+0xfc/0x170 [ 196.279871][ T8855] do_syscall_64+0x166/0x520 [ 196.279888][ T8855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.279907][ T8855] ? clear_bhb_loop+0x70/0xc0 [ 196.279933][ T8855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.279950][ T8855] RIP: 0033:0x7f75d219e159 [ 196.279969][ T8855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.279987][ T8855] RSP: 002b:00007f75d3042028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.280008][ T8855] RAX: ffffffffffffffda RBX: 00007f75d2425fa0 RCX: 00007f75d219e159 [ 196.280023][ T8855] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 196.280036][ T8855] RBP: 00007f75d223506b R08: 0000000000000000 R09: 0000000000000000 [ 196.280048][ T8855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.280060][ T8855] R13: 00007f75d2426038 R14: 00007f75d2425fa0 R15: 00007ffe31893598 [ 196.280091][ T8855] [ 196.765966][ T8846] CIFS: VFS: cifs_mount failed w/return code = -112 [ 198.039141][ T8888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.039566][ T8888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.939161][ T8893] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 198.939161][ T8893] [ 198.939186][ T8893] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 198.939246][ T8893] CIFS: Attempting to mount //127.0.0.1/share [ 199.019310][ T8893] CIFS: VFS: cifs_mount failed w/return code = -112 [ 199.650559][ T8905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.651026][ T8905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.425271][ T8918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.428819][ T8918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.480579][ T989] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 200.631253][ T989] usb 8-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 200.632798][ T989] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 200.632830][ T989] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.632855][ T989] usb 8-1: config 0 interface 0 has no altsetting 0 [ 200.632885][ T989] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.636454][ T989] usb 8-1: config 0 descriptor?? [ 200.637163][ T8908] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 200.770556][ T5773] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 200.924650][ T5773] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 200.926077][ T5773] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 200.926106][ T5773] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 200.926130][ T5773] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 200.926154][ T5773] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024 [ 200.926193][ T5773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.936088][ T8922] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 200.936222][ T8922] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 200.936340][ T8922] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 200.956459][ T5773] pl2303 6-1:1.0: pl2303 converter detected [ 200.969479][ T5773] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 201.057975][ T989] a4tech 0003:09DA:0006.000D: ignoring exceeding usage max [ 201.094929][ T989] a4tech 0003:09DA:0006.000D: hidraw0: USB HID v0.0c Joystick [HID 09da:0006] on usb-dummy_hcd.7-1/input0 [ 201.295910][ T8922] pl2303 6-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 201.310520][ T8922] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 201.312322][ T8922] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 201.313210][ T989] usb 8-1: USB disconnect, device number 2 [ 201.317199][ T8922] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 201.337825][ T8922] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 201.605031][ T8922] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 201.607794][ T8922] pl2303 ttyUSB0: error sending break = -32 [ 201.617983][ T8941] FAULT_INJECTION: forcing a failure. [ 201.617983][ T8941] name failslab, interval 1, probability 0, space 0, times 0 [ 201.618014][ T8941] CPU: 1 UID: 0 PID: 8941 Comm: syz.0.869 Not tainted syzkaller #0 PREEMPT(full) [ 201.618035][ T8941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.618048][ T8941] Call Trace: [ 201.618057][ T8941] [ 201.618066][ T8941] dump_stack_lvl+0xe8/0x150 [ 201.618096][ T8941] should_fail_ex+0x3eb/0x540 [ 201.618135][ T8941] should_failslab+0xa8/0x100 [ 201.618159][ T8941] __kmalloc_noprof+0xf9/0x710 [ 201.618189][ T8941] ? vb2_core_create_bufs+0x46f/0xe20 [ 201.618211][ T8941] ? vb2_core_create_bufs+0x46f/0xe20 [ 201.618242][ T8941] vb2_core_create_bufs+0x46f/0xe20 [ 201.618277][ T8941] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 201.618307][ T8941] ? trace_contention_end+0x3d/0x140 [ 201.618328][ T8941] ? vb2_set_flags_and_caps+0x2ee/0x5c0 [ 201.618356][ T8941] vb2_create_bufs+0x59c/0xa90 [ 201.618388][ T8941] ? __pfx_vb2_create_bufs+0x10/0x10 [ 201.618412][ T8941] ? v4l_sanitize_format+0x5d6/0xa00 [ 201.618446][ T8941] v4l_create_bufs+0x175/0x290 [ 201.618471][ T8941] __video_do_ioctl+0x8af/0xc70 [ 201.618506][ T8941] ? __pfx___video_do_ioctl+0x10/0x10 [ 201.618536][ T8941] ? __might_fault+0xaf/0x130 [ 201.618567][ T8941] video_usercopy+0x860/0x1430 [ 201.618599][ T8941] ? __pfx___video_do_ioctl+0x10/0x10 [ 201.618626][ T8941] ? __pfx_video_usercopy+0x10/0x10 [ 201.618659][ T8941] ? __fget_files+0x2a/0x420 [ 201.618687][ T8941] ? __fget_files+0x2a/0x420 [ 201.618709][ T8941] ? __fget_files+0x3a2/0x420 [ 201.618737][ T8941] v4l2_ioctl+0x18d/0x1e0 [ 201.618761][ T8941] ? __pfx_v4l2_ioctl+0x10/0x10 [ 201.618785][ T8941] __se_sys_ioctl+0xfc/0x170 [ 201.618817][ T8941] do_syscall_64+0x166/0x520 [ 201.618835][ T8941] ? trace_irq_disable+0x3b/0x140 [ 201.618863][ T8941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.618883][ T8941] ? clear_bhb_loop+0x70/0xc0 [ 201.618907][ T8941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.618927][ T8941] RIP: 0033:0x7f75d219e159 [ 201.618946][ T8941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.618963][ T8941] RSP: 002b:00007f75d3042028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.618985][ T8941] RAX: ffffffffffffffda RBX: 00007f75d2425fa0 RCX: 00007f75d219e159 [ 201.619000][ T8941] RDX: 0000200000000140 RSI: 00000000c100565c RDI: 0000000000000004 [ 201.619014][ T8941] RBP: 00007f75d223506b R08: 0000000000000000 R09: 0000000000000000 [ 201.619026][ T8941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.619038][ T8941] R13: 00007f75d2426038 R14: 00007f75d2425fa0 R15: 00007ffe31893598 [ 201.619070][ T8941] [ 201.626824][ T5773] usb 6-1: USB disconnect, device number 4 [ 201.640341][ T5773] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 201.643729][ T5773] pl2303 6-1:1.0: device disconnected [ 202.609999][ T8976] FAULT_INJECTION: forcing a failure. [ 202.609999][ T8976] name failslab, interval 1, probability 0, space 0, times 0 [ 202.610030][ T8976] CPU: 0 UID: 0 PID: 8976 Comm: syz.7.878 Not tainted syzkaller #0 PREEMPT(full) [ 202.610054][ T8976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.610067][ T8976] Call Trace: [ 202.610074][ T8976] [ 202.610083][ T8976] dump_stack_lvl+0xe8/0x150 [ 202.610129][ T8976] should_fail_ex+0x3eb/0x540 [ 202.610158][ T8976] should_failslab+0xa8/0x100 [ 202.610182][ T8976] __kmalloc_cache_noprof+0x9e/0x600 [ 202.610213][ T8976] ? raw_ioctl+0x1b28/0x41c0 [ 202.610231][ T8976] ? raw_ioctl+0x1b28/0x41c0 [ 202.610255][ T8976] raw_ioctl+0x1b28/0x41c0 [ 202.610285][ T8976] ? tomoyo_path_number_perm+0x219/0x5f0 [ 202.610311][ T8976] ? do_vfs_ioctl+0x116f/0x1530 [ 202.610333][ T8976] ? __pfx_raw_ioctl+0x10/0x10 [ 202.610365][ T8976] ? hook_file_ioctl+0x1f2/0x600 [ 202.610409][ T8976] ? __fget_files+0x2a/0x420 [ 202.610430][ T8976] ? __fget_files+0x3a2/0x420 [ 202.610451][ T8976] ? __fget_files+0x2a/0x420 [ 202.610476][ T8976] ? bpf_lsm_file_ioctl+0x9/0x20 [ 202.610501][ T8976] ? __pfx_raw_ioctl+0x10/0x10 [ 202.610521][ T8976] __se_sys_ioctl+0xfc/0x170 [ 202.610554][ T8976] do_syscall_64+0x166/0x520 [ 202.610570][ T8976] ? trace_irq_disable+0x3b/0x140 [ 202.610598][ T8976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.610618][ T8976] ? clear_bhb_loop+0x70/0xc0 [ 202.610642][ T8976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.610661][ T8976] RIP: 0033:0x7f88fc39ddeb [ 202.610679][ T8976] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 202.610696][ T8976] RSP: 002b:00007f88fd223f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.610719][ T8976] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f88fc39ddeb [ 202.610734][ T8976] RDX: 00007f88fd224fd0 RSI: 0000000041015500 RDI: 0000000000000005 [ 202.610748][ T8976] RBP: 00007f88fd224fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 202.610762][ T8976] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f88fd223fa0 [ 202.610775][ T8976] R13: 0000200000000000 R14: 0000000000000005 R15: 0000000000000000 [ 202.610804][ T8976] [ 202.850590][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 202.850847][ T5773] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 203.010756][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 203.013575][ T5773] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 203.013891][ T25] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 203.015560][ T5773] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 203.015763][ T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 203.015794][ T25] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 203.015876][ T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 203.015904][ T25] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.015928][ T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.015952][ T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 203.015977][ T25] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 203.016027][ T25] usb 7-1: config 168 interface 0 has no altsetting 0 [ 203.017963][ T5773] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 203.018646][ T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 203.018678][ T25] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 203.018738][ T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 203.018765][ T25] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.018789][ T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.018814][ T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 203.018839][ T25] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 203.018889][ T25] usb 7-1: config 168 interface 0 has no altsetting 0 [ 203.031859][ T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 203.031894][ T25] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 203.031930][ T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 203.031955][ T25] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.031979][ T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.032003][ T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 203.032028][ T25] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 203.032052][ T25] usb 7-1: config 168 interface 0 has no altsetting 0 [ 203.032359][ T5773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.032379][ T5773] usb 6-1: Product: syz [ 203.032392][ T5773] usb 6-1: Manufacturer: syz [ 203.032405][ T5773] usb 6-1: SerialNumber: syz [ 203.046723][ T25] usb 7-1: string descriptor 0 read error: -22 [ 203.046851][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.076877][ T5773] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 203.104494][ T25] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 203.117500][ T5773] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 203.135003][ T5773] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 203.280306][ T8972] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 203.474961][ T25] usb 7-1: USB disconnect, device number 3 [ 203.815921][ T8994] FAULT_INJECTION: forcing a failure. [ 203.815921][ T8994] name failslab, interval 1, probability 0, space 0, times 0 [ 203.815967][ T8994] CPU: 1 UID: 0 PID: 8994 Comm: syz.7.880 Not tainted syzkaller #0 PREEMPT(full) [ 203.815989][ T8994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.816000][ T8994] Call Trace: [ 203.816008][ T8994] [ 203.816016][ T8994] dump_stack_lvl+0xe8/0x150 [ 203.816049][ T8994] should_fail_ex+0x3eb/0x540 [ 203.816075][ T8994] should_failslab+0xa8/0x100 [ 203.816099][ T8994] __kmalloc_noprof+0xf9/0x710 [ 203.816127][ T8994] ? __kmalloc_noprof+0x1a6/0x710 [ 203.816151][ T8994] ? vb2_core_create_bufs+0x4fc/0xe20 [ 203.816179][ T8994] ? vb2_core_create_bufs+0x4fc/0xe20 [ 203.816207][ T8994] vb2_core_create_bufs+0x4fc/0xe20 [ 203.816242][ T8994] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 203.816270][ T8994] ? trace_contention_end+0x3d/0x140 [ 203.816292][ T8994] ? vb2_set_flags_and_caps+0x2ee/0x5c0 [ 203.816319][ T8994] vb2_create_bufs+0x59c/0xa90 [ 203.816349][ T8994] ? __pfx_vb2_create_bufs+0x10/0x10 [ 203.816373][ T8994] ? v4l_sanitize_format+0x5d6/0xa00 [ 203.816403][ T8994] v4l_create_bufs+0x175/0x290 [ 203.816427][ T8994] __video_do_ioctl+0x8af/0xc70 [ 203.816462][ T8994] ? __pfx___video_do_ioctl+0x10/0x10 [ 203.816501][ T8994] ? __might_fault+0xaf/0x130 [ 203.816531][ T8994] video_usercopy+0x860/0x1430 [ 203.816563][ T8994] ? __pfx___video_do_ioctl+0x10/0x10 [ 203.816591][ T8994] ? __pfx_video_usercopy+0x10/0x10 [ 203.816633][ T8994] ? __fget_files+0x2a/0x420 [ 203.816660][ T8994] ? __fget_files+0x2a/0x420 [ 203.816682][ T8994] ? __fget_files+0x3a2/0x420 [ 203.816709][ T8994] v4l2_ioctl+0x18d/0x1e0 [ 203.816733][ T8994] ? __pfx_v4l2_ioctl+0x10/0x10 [ 203.816757][ T8994] __se_sys_ioctl+0xfc/0x170 [ 203.816790][ T8994] do_syscall_64+0x166/0x520 [ 203.816809][ T8994] ? trace_irq_disable+0x3b/0x140 [ 203.816836][ T8994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.816857][ T8994] ? clear_bhb_loop+0x70/0xc0 [ 203.816881][ T8994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.816901][ T8994] RIP: 0033:0x7f88fc39e159 [ 203.816920][ T8994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.816936][ T8994] RSP: 002b:00007f88fd226028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.816956][ T8994] RAX: ffffffffffffffda RBX: 00007f88fc625fa0 RCX: 00007f88fc39e159 [ 203.816970][ T8994] RDX: 0000200000000140 RSI: 00000000c100565c RDI: 0000000000000004 [ 203.816982][ T8994] RBP: 00007f88fc43506b R08: 0000000000000000 R09: 0000000000000000 [ 203.816995][ T8994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.817008][ T8994] R13: 00007f88fc626038 R14: 00007f88fc625fa0 R15: 00007ffec51aa358 [ 203.817039][ T8994] [ 204.370566][ T989] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 204.520513][ T989] usb 7-1: Using ep0 maxpacket: 16 [ 204.521220][ T989] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 204.524612][ T989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.524642][ T989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.524664][ T989] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 204.524703][ T989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.528879][ T989] usb 7-1: config 0 descriptor?? [ 204.581553][ T5773] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 204.740502][ T5773] usb 8-1: Using ep0 maxpacket: 16 [ 204.741223][ T5773] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 204.742204][ T5773] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.742227][ T5773] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 204.744378][ T5773] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 204.744413][ T5773] usb 8-1: Product: syz [ 204.744429][ T5773] usb 8-1: Manufacturer: syz [ 204.744442][ T5773] usb 8-1: SerialNumber: syz [ 204.977610][ T25] usb 8-1: USB disconnect, device number 3 [ 205.025448][ T989] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.000E/input/input25 [ 205.118830][ T989] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 205.268216][ T30] usb 7-1: USB disconnect, device number 4 [ 205.297941][ T9037] fido_id[9037]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 205.636771][ T30] usb 6-1: USB disconnect, device number 5 [ 205.658152][ T30] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 205.701205][ T30] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 205.709231][ T30] ti_usb_3410_5052 6-1:2.0: device disconnected [ 206.124696][ T9067] can0: slcan on pts0. [ 206.423748][ T9066] can0 (unregistered): slcan off pts0. [ 206.475040][ T9077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.477503][ T9077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.550696][ T989] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 206.701425][ T989] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 206.702414][ T989] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.704405][ T989] usb 8-1: config 0 descriptor?? [ 206.870627][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 206.911810][ T989] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 206.912247][ T989] [drm:udl_init] *ERROR* Selecting channel failed [ 206.924126][ T989] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 1 [ 206.924149][ T989] [drm] Initialized udl on minor 1 [ 206.925502][ T989] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 206.925970][ T989] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 206.928536][ T989] usb 8-1: USB disconnect, device number 4 [ 206.933287][ T7724] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 207.021756][ T10] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 207.023952][ T10] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 207.025194][ T10] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 207.028299][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.028322][ T10] usb 7-1: Product: syz [ 207.028336][ T10] usb 7-1: Manufacturer: syz [ 207.028357][ T10] usb 7-1: SerialNumber: syz [ 207.061789][ T10] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 207.066630][ T10] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 207.070924][ T10] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 207.267193][ T9085] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 207.726226][ T9109] FAULT_INJECTION: forcing a failure. [ 207.726226][ T9109] name failslab, interval 1, probability 0, space 0, times 0 [ 207.726253][ T9109] CPU: 0 UID: 0 PID: 9109 Comm: syz.0.907 Not tainted syzkaller #0 PREEMPT(full) [ 207.726272][ T9109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.726281][ T9109] Call Trace: [ 207.726301][ T9109] [ 207.726308][ T9109] dump_stack_lvl+0xe8/0x150 [ 207.726339][ T9109] should_fail_ex+0x3eb/0x540 [ 207.726367][ T9109] should_failslab+0xa8/0x100 [ 207.726388][ T9109] ? ptlock_alloc+0x20/0x70 [ 207.726414][ T9109] kmem_cache_alloc_noprof+0x9c/0x600 [ 207.726445][ T9109] ? ptlock_alloc+0x20/0x70 [ 207.726475][ T9109] ptlock_alloc+0x20/0x70 [ 207.726500][ T9109] pte_alloc_one+0x7a/0x370 [ 207.726522][ T9109] __pte_alloc+0x25/0x1a0 [ 207.726556][ T9109] do_pte_missing+0x2db7/0x34b0 [ 207.726590][ T9109] ? do_raw_spin_unlock+0xf5/0x200 [ 207.726619][ T9109] ? __pmd_alloc+0x40a/0x5c0 [ 207.726648][ T9109] handle_mm_fault+0x1a53/0x3750 [ 207.726683][ T9109] ? handle_mm_fault+0xf1/0x3750 [ 207.726711][ T9109] ? __pfx_handle_mm_fault+0x10/0x10 [ 207.726744][ T9109] ? __lock_acquire+0x747/0x2de0 [ 207.726774][ T9109] ? lock_mm_and_find_vma+0xa7/0x340 [ 207.726802][ T9109] do_user_addr_fault+0x7f6/0x1480 [ 207.726847][ T9109] exc_page_fault+0x6a/0xc0 [ 207.726878][ T9109] asm_exc_page_fault+0x26/0x30 [ 207.726898][ T9109] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 207.726923][ T9109] Code: c4 10 e9 c4 71 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 8d 71 04 00 66 2e [ 207.726940][ T9109] RSP: 0018:ffffc90004d9fcb8 EFLAGS: 00050202 [ 207.726959][ T9109] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 207.726976][ T9109] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90004d9fd70 [ 207.726989][ T9109] RBP: ffffc90004d9fe68 R08: 0000000000000003 R09: 0000000000000004 [ 207.727003][ T9109] R10: dffffc0000000000 R11: fffff520009b3fae R12: 1ffff920009b3fa4 [ 207.727018][ T9109] R13: 0000000000000000 R14: ffffc90004d9fd70 R15: 0000000000000000 [ 207.727048][ T9109] _copy_from_user+0x7a/0xb0 [ 207.727074][ T9109] do_sock_getsockopt+0x200/0x7e0 [ 207.727102][ T9109] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 207.727140][ T9109] ? __fget_files+0x3a2/0x420 [ 207.727165][ T9109] ? __fget_files+0x2a/0x420 [ 207.727196][ T9109] __x64_sys_getsockopt+0x1a4/0x240 [ 207.727225][ T9109] do_syscall_64+0x166/0x520 [ 207.727243][ T9109] ? trace_irq_disable+0x3b/0x140 [ 207.727270][ T9109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.727298][ T9109] ? clear_bhb_loop+0x70/0xc0 [ 207.727320][ T9109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.727340][ T9109] RIP: 0033:0x7f75d219e159 [ 207.727358][ T9109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.727375][ T9109] RSP: 002b:00007f75d3042028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 207.727397][ T9109] RAX: ffffffffffffffda RBX: 00007f75d2425fa0 RCX: 00007f75d219e159 [ 207.727413][ T9109] RDX: 000000000000004c RSI: 0000000000000029 RDI: 0000000000000003 [ 207.727425][ T9109] RBP: 00007f75d223506b R08: 0000000000000000 R09: 0000000000000000 [ 207.727439][ T9109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.727452][ T9109] R13: 00007f75d2426038 R14: 00007f75d2425fa0 R15: 00007ffe31893598 [ 207.727486][ T9109] [ 207.802656][ T9107] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 208.461536][ T9135] FAULT_INJECTION: forcing a failure. [ 208.461536][ T9135] name failslab, interval 1, probability 0, space 0, times 0 [ 208.461589][ T9135] CPU: 1 UID: 0 PID: 9135 Comm: syz.7.916 Not tainted syzkaller #0 PREEMPT(full) [ 208.461612][ T9135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.461625][ T9135] Call Trace: [ 208.461632][ T9135] [ 208.461642][ T9135] dump_stack_lvl+0xe8/0x150 [ 208.461675][ T9135] should_fail_ex+0x3eb/0x540 [ 208.461701][ T9135] should_failslab+0xa8/0x100 [ 208.461731][ T9135] __kmalloc_noprof+0xf9/0x710 [ 208.461760][ T9135] ? __kmalloc_cache_noprof+0x148/0x600 [ 208.461784][ T9135] ? mpi_alloc+0x77/0x140 [ 208.461804][ T9135] ? mpi_alloc+0x77/0x140 [ 208.461829][ T9135] mpi_alloc+0x77/0x140 [ 208.461855][ T9135] mpi_read_raw_data+0x139/0x970 [ 208.461882][ T9135] dh_set_secret+0x200/0x320 [ 208.461910][ T9135] ? crypto_create_tfm_node+0x81/0x3c0 [ 208.461945][ T9135] ? __pfx_dh_set_secret+0x10/0x10 [ 208.461972][ T9135] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 208.462000][ T9135] __keyctl_dh_compute+0x5ae/0xd10 [ 208.462025][ T9135] ? futex_unqueue+0x22/0x240 [ 208.462047][ T9135] ? futex_unqueue+0x211/0x240 [ 208.462071][ T9135] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 208.462103][ T9135] ? __pfx___futex_wait+0x10/0x10 [ 208.462135][ T9135] ? __pfx_futex_wake_mark+0x10/0x10 [ 208.462182][ T9135] keyctl_dh_compute+0x124/0x180 [ 208.462209][ T9135] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 208.462250][ T9135] __se_sys_keyctl+0x44c/0xbc0 [ 208.462272][ T9135] ? __pfx___se_sys_keyctl+0x10/0x10 [ 208.462293][ T9135] ? __pfx_do_futex+0x10/0x10 [ 208.462323][ T9135] ? __se_sys_futex+0x3a8/0x450 [ 208.462348][ T9135] ? rcu_is_watching+0x16/0xb0 [ 208.462373][ T9135] ? __x64_sys_keyctl+0x20/0xc0 [ 208.462398][ T9135] do_syscall_64+0x166/0x520 [ 208.462420][ T9135] ? trace_irq_disable+0x3b/0x140 [ 208.462447][ T9135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.462470][ T9135] ? clear_bhb_loop+0x70/0xc0 [ 208.462495][ T9135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.462514][ T9135] RIP: 0033:0x7f88fc39e159 [ 208.462533][ T9135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.462549][ T9135] RSP: 002b:00007f88fd226028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 208.462569][ T9135] RAX: ffffffffffffffda RBX: 00007f88fc625fa0 RCX: 00007f88fc39e159 [ 208.462583][ T9135] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000017 [ 208.462596][ T9135] RBP: 00007f88fc43506b R08: 0000000000000000 R09: 0000000000000000 [ 208.462607][ T9135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.462619][ T9135] R13: 00007f88fc626038 R14: 00007f88fc625fa0 R15: 00007ffec51aa358 [ 208.462646][ T9135] [ 209.131170][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 209.281570][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 209.282765][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.304073][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.304101][ T10] usb 6-1: Product: syz [ 209.304114][ T10] usb 6-1: Manufacturer: syz [ 209.304128][ T10] usb 6-1: SerialNumber: syz [ 209.460639][ T7724] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 209.540243][ T10] usb 6-1: unknown sample rate [ 209.603879][ T10] usb 6-1: USB disconnect, device number 6 [ 209.614495][ T7724] usb 8-1: Using ep0 maxpacket: 8 [ 209.620312][ T7724] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 209.621324][ T7724] usb 8-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 209.621346][ T7724] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.621365][ T7724] usb 8-1: config 1 has no interface number 0 [ 209.621401][ T7724] usb 8-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 209.621425][ T7724] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 209.621449][ T7724] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 209.627553][ T7724] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.627577][ T7724] usb 8-1: Product: syz [ 209.627591][ T7724] usb 8-1: Manufacturer: syz [ 209.627603][ T7724] usb 8-1: SerialNumber: syz [ 209.695043][ T5772] udevd[5772]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.802133][ T10] usb 7-1: USB disconnect, device number 5 [ 209.815962][ T10] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 209.824062][ T10] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 209.829526][ T10] ti_usb_3410_5052 7-1:2.0: device disconnected [ 209.885487][ T9164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.885912][ T9164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.282285][ T7724] usb 8-1: USB disconnect, device number 5 [ 210.507024][ T9181] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 210.634417][ T9185] FAULT_INJECTION: forcing a failure. [ 210.634417][ T9185] name failslab, interval 1, probability 0, space 0, times 0 [ 210.634449][ T9185] CPU: 1 UID: 0 PID: 9185 Comm: syz.0.933 Not tainted syzkaller #0 PREEMPT(full) [ 210.634467][ T9185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.634477][ T9185] Call Trace: [ 210.634483][ T9185] [ 210.634491][ T9185] dump_stack_lvl+0xe8/0x150 [ 210.634516][ T9185] should_fail_ex+0x3eb/0x540 [ 210.634538][ T9185] should_failslab+0xa8/0x100 [ 210.634557][ T9185] __kmalloc_noprof+0xf9/0x710 [ 210.634580][ T9185] ? down_write_nested+0x16d/0x200 [ 210.634598][ T9185] ? security_sb_alloc+0x48/0x310 [ 210.634615][ T9185] ? security_sb_alloc+0x48/0x310 [ 210.634637][ T9185] security_sb_alloc+0x48/0x310 [ 210.634677][ T9185] sget_fc+0x97f/0x1a40 [ 210.634703][ T9185] ? __pfx_set_anon_super_fc+0x10/0x10 [ 210.634726][ T9185] ? __pfx_sget_fc+0x10/0x10 [ 210.634743][ T9185] ? __kmalloc_cache_noprof+0x31c/0x600 [ 210.634769][ T9185] ? __kmalloc_cache_noprof+0x148/0x600 [ 210.634794][ T9185] ? vfs_parse_monolithic_sep+0xd0/0x360 [ 210.634823][ T9185] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 210.634855][ T9185] ? __pfx_proc_fill_super+0x10/0x10 [ 210.634878][ T9185] get_tree_nodev+0x2a/0x150 [ 210.634906][ T9185] vfs_get_tree+0x92/0x2a0 [ 210.634933][ T9185] do_new_mount+0x319/0xdc0 [ 210.634959][ T9185] ? __pfx_do_new_mount+0x10/0x10 [ 210.634983][ T9185] ? ns_capable+0x84/0xe0 [ 210.635004][ T9185] ? path_mount+0x647/0x1050 [ 210.635028][ T9185] ? user_path_at+0xd4/0x160 [ 210.635055][ T9185] __se_sys_mount+0x31d/0x420 [ 210.635083][ T9185] ? __pfx___se_sys_mount+0x10/0x10 [ 210.635111][ T9185] ? __x64_sys_mount+0x20/0xc0 [ 210.635136][ T9185] do_syscall_64+0x166/0x520 [ 210.635166][ T9185] ? trace_irq_disable+0x3b/0x140 [ 210.635193][ T9185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.635214][ T9185] ? clear_bhb_loop+0x70/0xc0 [ 210.635239][ T9185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.635261][ T9185] RIP: 0033:0x7f75d219e159 [ 210.635279][ T9185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.635298][ T9185] RSP: 002b:00007f75d3042028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 210.635321][ T9185] RAX: ffffffffffffffda RBX: 00007f75d2425fa0 RCX: 00007f75d219e159 [ 210.635335][ T9185] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 210.635349][ T9185] RBP: 00007f75d223506b R08: 0000000000000000 R09: 0000000000000000 [ 210.635362][ T9185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.635374][ T9185] R13: 00007f75d2426038 R14: 00007f75d2425fa0 R15: 00007ffe31893598 [ 210.635405][ T9185] [ 211.199530][ T9205] netlink: 84 bytes leftover after parsing attributes in process `syz.5.939'. [ 211.591793][ T9214] kvm [9212]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0xc1) = 0xe50000000401 [ 211.591967][ T9214] kvm [9212]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0xc2) = 0xe50000000401 [ 211.598975][ T9214] kvm [9212]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0x11e) = 0xe50000000401 [ 211.608247][ T9214] kvm [9212]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0x186) = 0xe50000000401 [ 211.608367][ T9214] kvm [9212]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0x187) = 0xe50000000401 [ 211.615529][ T9214] kvm_intel: kvm [9212]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0x1d9) = 0xe50000000401 [ 211.642919][ T9220] FAULT_INJECTION: forcing a failure. [ 211.642919][ T9220] name failslab, interval 1, probability 0, space 0, times 0 [ 211.642982][ T9220] CPU: 0 UID: 0 PID: 9220 Comm: syz.5.944 Not tainted syzkaller #0 PREEMPT(full) [ 211.643005][ T9220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.643017][ T9220] Call Trace: [ 211.643025][ T9220] [ 211.643034][ T9220] dump_stack_lvl+0xe8/0x150 [ 211.643065][ T9220] should_fail_ex+0x3eb/0x540 [ 211.643091][ T9220] should_failslab+0xa8/0x100 [ 211.643114][ T9220] __kmalloc_noprof+0xf9/0x710 [ 211.643142][ T9220] ? __kmalloc_cache_noprof+0x148/0x600 [ 211.643169][ T9220] ? mpi_alloc+0x77/0x140 [ 211.643190][ T9220] ? mpi_alloc+0x77/0x140 [ 211.643219][ T9220] mpi_alloc+0x77/0x140 [ 211.643244][ T9220] mpi_read_raw_data+0x139/0x970 [ 211.643275][ T9220] dh_set_secret+0x200/0x320 [ 211.643296][ T9220] ? crypto_create_tfm_node+0x81/0x3c0 [ 211.643331][ T9220] ? __pfx_dh_set_secret+0x10/0x10 [ 211.643358][ T9220] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 211.643385][ T9220] __keyctl_dh_compute+0x5ae/0xd10 [ 211.643409][ T9220] ? futex_unqueue+0x22/0x240 [ 211.643430][ T9220] ? futex_unqueue+0x211/0x240 [ 211.643453][ T9220] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 211.643483][ T9220] ? __pfx___futex_wait+0x10/0x10 [ 211.643511][ T9220] ? __pfx_futex_wake_mark+0x10/0x10 [ 211.643544][ T9220] ? futex_hash+0x4e/0x2b0 [ 211.643572][ T9220] ? futex_hash+0x275/0x2b0 [ 211.643604][ T9220] keyctl_dh_compute+0x124/0x180 [ 211.643631][ T9220] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 211.643670][ T9220] __se_sys_keyctl+0x44c/0xbc0 [ 211.643691][ T9220] ? __pfx___se_sys_keyctl+0x10/0x10 [ 211.643712][ T9220] ? __pfx_do_futex+0x10/0x10 [ 211.643740][ T9220] ? __se_sys_futex+0x3a8/0x450 [ 211.643769][ T9220] ? rcu_is_watching+0x16/0xb0 [ 211.643794][ T9220] ? __x64_sys_keyctl+0x20/0xc0 [ 211.643813][ T9220] do_syscall_64+0x166/0x520 [ 211.643832][ T9220] ? trace_irq_disable+0x3b/0x140 [ 211.643859][ T9220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.643879][ T9220] ? clear_bhb_loop+0x70/0xc0 [ 211.643901][ T9220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.643920][ T9220] RIP: 0033:0x7f8ebbf9e159 [ 211.643945][ T9220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.643963][ T9220] RSP: 002b:00007f8ebce7b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 211.643984][ T9220] RAX: ffffffffffffffda RBX: 00007f8ebc225fa0 RCX: 00007f8ebbf9e159 [ 211.643998][ T9220] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000017 [ 211.644012][ T9220] RBP: 00007f8ebc03506b R08: 0000000000000000 R09: 0000000000000000 [ 211.644025][ T9220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.644037][ T9220] R13: 00007f8ebc226038 R14: 00007f8ebc225fa0 R15: 00007ffd4e610488 [ 211.644067][ T9220] [ 212.280498][ T50] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 212.433063][ T50] usb 7-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 212.434070][ T50] usb 7-1: config 4 has an invalid interface number: 44 but max is 0 [ 212.434095][ T50] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 212.434114][ T50] usb 7-1: config 4 has no interface number 0 [ 212.434159][ T50] usb 7-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 212.436549][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.436579][ T50] usb 7-1: Product: syz [ 212.436593][ T50] usb 7-1: Manufacturer: syz [ 212.436607][ T50] usb 7-1: SerialNumber: syz [ 212.501707][ T9246] FAULT_INJECTION: forcing a failure. [ 212.501707][ T9246] name fail_futex, interval 1, probability 0, space 0, times 1 [ 212.501738][ T9246] CPU: 0 UID: 0 PID: 9246 Comm: syz.0.950 Not tainted syzkaller #0 PREEMPT(full) [ 212.501760][ T9246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.501773][ T9246] Call Trace: [ 212.501784][ T9246] [ 212.501793][ T9246] dump_stack_lvl+0xe8/0x150 [ 212.501824][ T9246] should_fail_ex+0x3eb/0x540 [ 212.501852][ T9246] get_futex_key+0x1b4/0x1580 [ 212.501888][ T9246] ? trace_sched_exit_tp+0x3a/0x130 [ 212.501912][ T9246] ? __pfx_get_futex_key+0x10/0x10 [ 212.501952][ T9246] futex_wait_setup+0x4a/0x590 [ 212.501983][ T9246] ? __futex_wait+0xdb/0x470 [ 212.502011][ T9246] __futex_wait+0x175/0x470 [ 212.502043][ T9246] ? __pfx___futex_wait+0x10/0x10 [ 212.502072][ T9246] ? __pfx_futex_wake_mark+0x10/0x10 [ 212.502101][ T9246] ? try_to_wake_up+0x901/0x14d0 [ 212.502131][ T9246] futex_wait+0x121/0x390 [ 212.502158][ T9246] ? __pfx_futex_wait+0x10/0x10 [ 212.502200][ T9246] do_futex+0x3e7/0x4e0 [ 212.502225][ T9246] ? __pfx_do_futex+0x10/0x10 [ 212.502246][ T9246] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 212.502273][ T9246] __se_sys_futex+0x3a8/0x450 [ 212.502296][ T9246] ? __pfx___se_sys_futex+0x10/0x10 [ 212.502317][ T9246] ? rcu_is_watching+0x16/0xb0 [ 212.502342][ T9246] ? __x64_sys_futex+0x21/0xf0 [ 212.502366][ T9246] do_syscall_64+0x166/0x520 [ 212.502384][ T9246] ? trace_irq_disable+0x3b/0x140 [ 212.502412][ T9246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.502439][ T9246] ? clear_bhb_loop+0x70/0xc0 [ 212.502464][ T9246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.502483][ T9246] RIP: 0033:0x7f75d219e159 [ 212.502502][ T9246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.502519][ T9246] RSP: 002b:00007f75d30420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 212.502539][ T9246] RAX: ffffffffffffffda RBX: 00007f75d2425fa8 RCX: 00007f75d219e159 [ 212.502554][ T9246] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f75d2425fa8 [ 212.502566][ T9246] RBP: 00007f75d2425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 212.502578][ T9246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.502590][ T9246] R13: 00007f75d2426038 R14: 00007ffe318934b0 R15: 00007ffe31893598 [ 212.502619][ T9246] [ 212.515231][ T25] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 212.686411][ T9249] FAULT_INJECTION: forcing a failure. [ 212.686411][ T9249] name fail_futex, interval 1, probability 0, space 0, times 0 [ 212.686441][ T9249] CPU: 0 UID: 0 PID: 9249 Comm: syz.0.951 Not tainted syzkaller #0 PREEMPT(full) [ 212.686464][ T9249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.686476][ T9249] Call Trace: [ 212.686484][ T9249] [ 212.686492][ T9249] dump_stack_lvl+0xe8/0x150 [ 212.686524][ T9249] should_fail_ex+0x3eb/0x540 [ 212.686550][ T9249] get_futex_key+0x1b4/0x1580 [ 212.686580][ T9249] ? __lock_acquire+0x747/0x2de0 [ 212.686613][ T9249] ? kasan_save_track+0x3e/0x80 [ 212.686642][ T9249] ? __kasan_slab_free+0x5c/0x80 [ 212.686659][ T9249] ? kmem_cache_free+0x182/0x650 [ 212.686688][ T9249] ? __pfx_get_futex_key+0x10/0x10 [ 212.686729][ T9249] futex_wake+0x119/0x5f0 [ 212.686758][ T9249] ? __pfx_futex_wake+0x10/0x10 [ 212.686796][ T9249] do_futex+0x458/0x4e0 [ 212.686824][ T9249] ? __pfx_do_futex+0x10/0x10 [ 212.686843][ T9249] ? kmem_cache_free+0x182/0x650 [ 212.686878][ T9249] __se_sys_futex+0x3a8/0x450 [ 212.686905][ T9249] ? __pfx___se_sys_futex+0x10/0x10 [ 212.686925][ T9249] ? rcu_is_watching+0x16/0xb0 [ 212.686947][ T9249] ? __x64_sys_futex+0x21/0xf0 [ 212.686969][ T9249] do_syscall_64+0x166/0x520 [ 212.686985][ T9249] ? trace_irq_disable+0x3b/0x140 [ 212.687012][ T9249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.687032][ T9249] ? clear_bhb_loop+0x70/0xc0 [ 212.687054][ T9249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.687073][ T9249] RIP: 0033:0x7f75d219e159 [ 212.687090][ T9249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.687108][ T9249] RSP: 002b:00007f75d30420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 212.687129][ T9249] RAX: ffffffffffffffda RBX: 00007f75d2425fa8 RCX: 00007f75d219e159 [ 212.687143][ T9249] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f75d2425fac [ 212.687156][ T9249] RBP: 00007f75d2425fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 212.687169][ T9249] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 212.687181][ T9249] R13: 00007f75d2426038 R14: 00007ffe318934b0 R15: 00007ffe31893598 [ 212.687210][ T9249] [ 212.691724][ T25] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.738032][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 212.738066][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.738087][ T25] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 212.738129][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.064246][ T25] usb 8-1: config 0 descriptor?? [ 213.195896][ T50] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 213.208792][ T50] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 213.209616][ T50] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 213.209667][ T50] usb 7-1: media controller created [ 213.234962][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.237216][ T9254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.244883][ T9254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.312970][ T50] DVB: Unable to find symbol dib7000p_attach() [ 213.312988][ T50] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 213.401130][ T50] rc_core: IR keymap rc-dib0700-rc5 not found [ 213.401148][ T50] Registered IR keymap rc-empty [ 213.455220][ T50] dvb-usb: could not initialize remote control. [ 213.455236][ T50] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 213.476719][ T9269] tipc: Started in network mode [ 213.476774][ T9269] tipc: Node identity 26651dd883e, cluster identity 4711 [ 213.478617][ T9269] tipc: Enabled bearer , priority 1 [ 213.500197][ T9267] tipc: Resetting bearer [ 213.528341][ T25] plantronics 0003:047F:FFFF.000F: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 213.574624][ T9267] tipc: Disabling bearer [ 213.664336][ T50] usb 7-1: USB disconnect, device number 6 [ 213.708570][ T10] usb 8-1: USB disconnect, device number 6 [ 213.751382][ T50] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 214.662404][ T50] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 214.830559][ T50] usb 8-1: Using ep0 maxpacket: 16 [ 214.831305][ T50] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 214.832300][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.832329][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.832350][ T50] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 214.832390][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.838413][ T50] usb 8-1: config 0 descriptor?? [ 215.117820][ T9329] FAULT_INJECTION: forcing a failure. [ 215.117820][ T9329] name failslab, interval 1, probability 0, space 0, times 0 [ 215.117881][ T9329] CPU: 1 UID: 0 PID: 9329 Comm: syz.5.963 Not tainted syzkaller #0 PREEMPT(full) [ 215.117904][ T9329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.117917][ T9329] Call Trace: [ 215.117926][ T9329] [ 215.117935][ T9329] dump_stack_lvl+0xe8/0x150 [ 215.117968][ T9329] should_fail_ex+0x3eb/0x540 [ 215.117998][ T9329] should_failslab+0xa8/0x100 [ 215.118024][ T9329] __kmalloc_noprof+0xf9/0x710 [ 215.118051][ T9329] ? __kasan_kmalloc+0x93/0xb0 [ 215.118071][ T9329] ? usb_alloc_urb+0x46/0x150 [ 215.118096][ T9329] ? usb_alloc_urb+0x46/0x150 [ 215.118123][ T9329] ? __kmalloc_cache_noprof+0x148/0x600 [ 215.118156][ T9329] usb_alloc_urb+0x46/0x150 [ 215.118184][ T9329] usb_control_msg+0x118/0x3e0 [ 215.118220][ T9329] hub_ext_port_status+0x112/0x840 [ 215.118261][ T9329] hub_activate+0x740/0x1b20 [ 215.118300][ T9329] hub_resume+0xa4/0x3f0 [ 215.118333][ T9329] ? __pfx_hub_resume+0x10/0x10 [ 215.118373][ T9329] usb_resume_both+0x5f1/0xb20 [ 215.118403][ T9329] ? __pfx_usb_runtime_resume+0x10/0x10 [ 215.118428][ T9329] __rpm_callback+0x3ff/0xa80 [ 215.118460][ T9329] ? rcu_is_watching+0x16/0xb0 [ 215.118482][ T9329] ? __pfx_usb_runtime_resume+0x10/0x10 [ 215.118508][ T9329] rpm_resume+0x1074/0x1690 [ 215.118533][ T9329] ? rcu_is_watching+0x16/0xb0 [ 215.118569][ T9329] ? __pfx_rpm_resume+0x10/0x10 [ 215.118594][ T9329] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 215.118632][ T9329] __pm_runtime_resume+0x117/0x170 [ 215.118661][ T9329] usb_autoresume_device+0x23/0xf0 [ 215.118698][ T9329] usbdev_open+0x190/0x760 [ 215.118720][ T9329] ? do_raw_spin_lock+0x12b/0x2f0 [ 215.118744][ T9329] ? __pfx_usbdev_open+0x10/0x10 [ 215.118767][ T9329] ? do_raw_spin_unlock+0xf5/0x200 [ 215.118791][ T9329] chrdev_open+0x4d9/0x600 [ 215.118811][ T9329] ? __pfx_chrdev_open+0x10/0x10 [ 215.118830][ T9329] ? devcgroup_check_permission+0x31/0x8f0 [ 215.118863][ T9329] ? __pfx_chrdev_open+0x10/0x10 [ 215.118883][ T9329] do_dentry_open+0x80e/0x1360 [ 215.118914][ T9329] vfs_open_consume+0x4a/0x350 [ 215.118933][ T9329] ? path_openat+0x14bb/0x1e40 [ 215.118963][ T9329] path_openat+0x14d7/0x1e40 [ 215.119005][ T9329] do_file_open+0x23e/0x4a0 [ 215.119034][ T9329] ? __pfx_do_file_open+0x10/0x10 [ 215.119078][ T9329] ? _raw_spin_unlock+0x28/0x50 [ 215.119104][ T9329] ? alloc_fd+0x651/0x6c0 [ 215.119138][ T9329] do_sys_openat2+0x115/0x200 [ 215.119162][ T9329] ? __pfx_do_sys_openat2+0x10/0x10 [ 215.119189][ T9329] ? do_user_addr_fault+0xd3f/0x1480 [ 215.119221][ T9329] __x64_sys_openat+0x138/0x170 [ 215.119246][ T9329] do_syscall_64+0x166/0x520 [ 215.119264][ T9329] ? trace_irq_disable+0x3b/0x140 [ 215.119289][ T9329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.119309][ T9329] ? clear_bhb_loop+0x70/0xc0 [ 215.119333][ T9329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.119352][ T9329] RIP: 0033:0x7f8ebbf5e98e [ 215.119370][ T9329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 215.119384][ T9329] RSP: 002b:00007f8ebce7ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 215.119404][ T9329] RAX: ffffffffffffffda RBX: 00007f8ebce7b6c0 RCX: 00007f8ebbf5e98e [ 215.119416][ T9329] RDX: 0000000000000000 RSI: 00007f8ebce7ac00 RDI: ffffffffffffff9c [ 215.119427][ T9329] RBP: 00007f8ebce7ac00 R08: 0000000000000000 R09: 0000000000000000 [ 215.119438][ T9329] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 215.119448][ T9329] R13: 00007f8ebc226038 R14: 00007f8ebc225fa0 R15: 00007ffd4e610488 [ 215.119474][ T9329] [ 215.507377][ T50] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0010/input/input27 [ 215.536067][ T9335] FAULT_INJECTION: forcing a failure. [ 215.536067][ T9335] name failslab, interval 1, probability 0, space 0, times 0 [ 215.536098][ T9335] CPU: 1 UID: 0 PID: 9335 Comm: syz.0.965 Not tainted syzkaller #0 PREEMPT(full) [ 215.536122][ T9335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.536135][ T9335] Call Trace: [ 215.536145][ T9335] [ 215.536154][ T9335] dump_stack_lvl+0xe8/0x150 [ 215.536186][ T9335] should_fail_ex+0x3eb/0x540 [ 215.536214][ T9335] should_failslab+0xa8/0x100 [ 215.536237][ T9335] __kmalloc_cache_noprof+0x9e/0x600 [ 215.536265][ T9335] ? __kmalloc_cache_noprof+0x148/0x600 [ 215.536290][ T9335] ? raw_ioctl+0x1b88/0x41c0 [ 215.536308][ T9335] ? raw_ioctl+0x1b88/0x41c0 [ 215.536332][ T9335] raw_ioctl+0x1b88/0x41c0 [ 215.536354][ T9335] ? tomoyo_path_number_perm+0x219/0x5f0 [ 215.536378][ T9335] ? do_vfs_ioctl+0x116f/0x1530 [ 215.536398][ T9335] ? __pfx_raw_ioctl+0x10/0x10 [ 215.536426][ T9335] ? hook_file_ioctl+0x1f2/0x600 [ 215.536466][ T9335] ? __fget_files+0x2a/0x420 [ 215.536491][ T9335] ? __fget_files+0x3a2/0x420 [ 215.536510][ T9335] ? __fget_files+0x2a/0x420 [ 215.536535][ T9335] ? bpf_lsm_file_ioctl+0x9/0x20 [ 215.536559][ T9335] ? __pfx_raw_ioctl+0x10/0x10 [ 215.536579][ T9335] __se_sys_ioctl+0xfc/0x170 [ 215.536616][ T9335] do_syscall_64+0x166/0x520 [ 215.536635][ T9335] ? trace_irq_disable+0x3b/0x140 [ 215.536662][ T9335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.536683][ T9335] ? clear_bhb_loop+0x70/0xc0 [ 215.536707][ T9335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.536736][ T9335] RIP: 0033:0x7f75d219ddeb [ 215.536755][ T9335] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 215.536780][ T9335] RSP: 002b:00007f75d303ff00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.536802][ T9335] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f75d219ddeb [ 215.536818][ T9335] RDX: 00007f75d3040fd0 RSI: 0000000041015500 RDI: 0000000000000005 [ 215.536831][ T9335] RBP: 00007f75d3040fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 215.536846][ T9335] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f75d303ffa0 [ 215.536859][ T9335] R13: 0000200000000000 R14: 0000000000000005 R15: 0000000000000000 [ 215.536885][ T9335] [ 215.808929][ T50] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 215.826567][ T50] usb 8-1: USB disconnect, device number 7 [ 215.958629][ T9338] fido_id[9338]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 216.264197][ T30] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 216.430599][ T9363] device-mapper: ioctl: Empty message received. [ 216.431717][ T30] usb 7-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 216.432886][ T30] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.432949][ T30] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 216.432973][ T30] usb 7-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 216.445246][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.445271][ T30] usb 7-1: Product: syz [ 216.445285][ T30] usb 7-1: Manufacturer: syz [ 216.445298][ T30] usb 7-1: SerialNumber: syz [ 216.879557][ T9380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.879991][ T9380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.906066][ C1] usb 7-1: received EP1 urb->status = -2 [ 216.906493][ T30] usb 7-1: unable to init card! (ret=-110) [ 216.906907][ T30] snd-usb-caiaq 7-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 216.964993][ T10] usb 7-1: USB disconnect, device number 7 [ 217.881471][ T5705] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 218.031209][ T5705] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.032224][ T5705] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.032254][ T5705] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.032275][ T5705] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.032314][ T5705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.035851][ T5705] usb 6-1: config 0 descriptor?? [ 218.276823][ T9428] FAULT_INJECTION: forcing a failure. [ 218.276823][ T9428] name failslab, interval 1, probability 0, space 0, times 0 [ 218.276854][ T9428] CPU: 1 UID: 0 PID: 9428 Comm: syz.6.984 Not tainted syzkaller #0 PREEMPT(full) [ 218.276878][ T9428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.276891][ T9428] Call Trace: [ 218.276899][ T9428] [ 218.276908][ T9428] dump_stack_lvl+0xe8/0x150 [ 218.276947][ T9428] should_fail_ex+0x3eb/0x540 [ 218.276977][ T9428] should_failslab+0xa8/0x100 [ 218.277001][ T9428] __kmalloc_noprof+0xf9/0x710 [ 218.277023][ T9428] ? lock_acquire+0x115/0x350 [ 218.277039][ T9428] ? nft_set_elem_init+0xa8/0x7e0 [ 218.277052][ T9428] ? nft_set_elem_init+0xa8/0x7e0 [ 218.277069][ T9428] nft_set_elem_init+0xa8/0x7e0 [ 218.277100][ T9428] nf_tables_newsetelem+0x2428/0x4200 [ 218.277157][ T9428] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 218.277183][ T9428] ? lock_acquire+0x115/0x350 [ 218.277219][ T9428] ? nla_validate_array+0xfc/0x260 [ 218.277269][ T9428] ? __pfx___nla_validate_parse+0x10/0x10 [ 218.277303][ T9428] ? __pfx_nf_tables_newset+0x10/0x10 [ 218.277329][ T9428] ? lock_acquire+0x115/0x350 [ 218.277347][ T9428] ? nfnl_pernet+0x23/0x240 [ 218.277364][ T9428] ? __nla_parse+0x40/0x60 [ 218.277380][ T9428] nfnetlink_rcv+0x1288/0x28c0 [ 218.277423][ T9428] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 218.277461][ T9428] ? ref_tracker_free+0x689/0x830 [ 218.277496][ T9428] ? skb_clone+0x246/0x3a0 [ 218.277514][ T9428] ? __netlink_deliver_tap+0x811/0x860 [ 218.277531][ T9428] ? netlink_deliver_tap+0x2e/0x1b0 [ 218.277546][ T9428] ? netlink_deliver_tap+0x2e/0x1b0 [ 218.277574][ T9428] netlink_unicast+0x7bd/0x940 [ 218.277609][ T9428] netlink_sendmsg+0x7c3/0xae0 [ 218.277639][ T9428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.277657][ T9428] ? apparmor_socket_sendmsg+0x98/0x360 [ 218.277670][ T9428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.277682][ T9428] sock_sendmsg_nosec+0x13a/0x180 [ 218.277700][ T9428] ____sys_sendmsg+0x54e/0x850 [ 218.277727][ T9428] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.277759][ T9428] ? import_iovec+0x73/0xa0 [ 218.277786][ T9428] ___sys_sendmsg+0x2a5/0x360 [ 218.277799][ T9428] ? __lock_acquire+0x747/0x2de0 [ 218.277819][ T9428] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.277833][ T9428] ? futex_wait+0x2a2/0x390 [ 218.277881][ T9428] ? __fget_files+0x2a/0x420 [ 218.277910][ T9428] ? __fget_files+0x3a2/0x420 [ 218.277951][ T9428] __x64_sys_sendmsg+0x1b1/0x290 [ 218.277976][ T9428] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.278006][ T9428] do_syscall_64+0x166/0x520 [ 218.278019][ T9428] ? trace_irq_disable+0x3b/0x140 [ 218.278049][ T9428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.278070][ T9428] ? clear_bhb_loop+0x70/0xc0 [ 218.278094][ T9428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.278110][ T9428] RIP: 0033:0x7f0a8259e159 [ 218.278125][ T9428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.278134][ T9428] RSP: 002b:00007f0a834c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.278146][ T9428] RAX: ffffffffffffffda RBX: 00007f0a82825fa0 RCX: 00007f0a8259e159 [ 218.278155][ T9428] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 218.278162][ T9428] RBP: 00007f0a8263506b R08: 0000000000000000 R09: 0000000000000000 [ 218.278173][ T9428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.278185][ T9428] R13: 00007f0a82826038 R14: 00007f0a82825fa0 R15: 00007ffee438bf68 [ 218.278217][ T9428] [ 218.456198][ T9430] tipc: Started in network mode [ 218.456228][ T9430] tipc: Node identity 665fa438a986, cluster identity 4711 [ 218.456520][ T9430] tipc: Enabled bearer , priority 10 [ 218.462308][ T9429] tipc: Resetting bearer [ 218.603383][ T9429] tipc: Disabling bearer [ 218.670586][ T5705] hid_parser_main: 5 callbacks suppressed [ 218.670611][ T5705] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 218.670645][ T5705] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 218.670670][ T5705] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 218.670695][ T5705] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 218.670720][ T5705] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 218.670748][ T5705] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 218.670772][ T5705] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 218.670799][ T5705] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 218.670825][ T5705] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 218.670855][ T5705] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 218.756530][ T5705] plantronics 0003:047F:FFFF.0011: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 218.780336][ T5705] usb 6-1: USB disconnect, device number 7 [ 218.876081][ T9435] fido_id[9435]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 219.488635][ T9468] FAULT_INJECTION: forcing a failure. [ 219.488635][ T9468] name failslab, interval 1, probability 0, space 0, times 0 [ 219.488665][ T9468] CPU: 1 UID: 0 PID: 9468 Comm: syz.0.993 Not tainted syzkaller #0 PREEMPT(full) [ 219.488689][ T9468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.488701][ T9468] Call Trace: [ 219.488709][ T9468] [ 219.488717][ T9468] dump_stack_lvl+0xe8/0x150 [ 219.488750][ T9468] should_fail_ex+0x3eb/0x540 [ 219.488777][ T9468] should_failslab+0xa8/0x100 [ 219.488802][ T9468] __kmalloc_noprof+0xf9/0x710 [ 219.488830][ T9468] ? nft_trans_alloc+0x22/0x2a0 [ 219.488852][ T9468] ? nft_trans_alloc+0x22/0x2a0 [ 219.488879][ T9468] nft_trans_alloc+0x22/0x2a0 [ 219.488907][ T9468] nf_tables_newsetelem+0x298a/0x4200 [ 219.488981][ T9468] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 219.489005][ T9468] ? lock_acquire+0x115/0x350 [ 219.489044][ T9468] ? nla_validate_array+0xfc/0x260 [ 219.489099][ T9468] ? __pfx___nla_validate_parse+0x10/0x10 [ 219.489132][ T9468] ? __pfx_nf_tables_newset+0x10/0x10 [ 219.489161][ T9468] ? lock_acquire+0x115/0x350 [ 219.489192][ T9468] ? nfnl_pernet+0x23/0x240 [ 219.489224][ T9468] ? __nla_parse+0x40/0x60 [ 219.489255][ T9468] nfnetlink_rcv+0x1288/0x28c0 [ 219.489310][ T9468] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 219.489347][ T9468] ? ref_tracker_free+0x689/0x830 [ 219.489394][ T9468] ? skb_clone+0x246/0x3a0 [ 219.489421][ T9468] ? __netlink_deliver_tap+0x811/0x860 [ 219.489454][ T9468] ? netlink_deliver_tap+0x2e/0x1b0 [ 219.489479][ T9468] ? netlink_deliver_tap+0x2e/0x1b0 [ 219.489510][ T9468] netlink_unicast+0x7bd/0x940 [ 219.489543][ T9468] netlink_sendmsg+0x7c3/0xae0 [ 219.489576][ T9468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.489610][ T9468] ? apparmor_socket_sendmsg+0x98/0x360 [ 219.489633][ T9468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.489657][ T9468] sock_sendmsg_nosec+0x13a/0x180 [ 219.489688][ T9468] ____sys_sendmsg+0x54e/0x850 [ 219.489716][ T9468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.489747][ T9468] ? import_iovec+0x73/0xa0 [ 219.489777][ T9468] ___sys_sendmsg+0x2a5/0x360 [ 219.489815][ T9468] ? __lock_acquire+0x747/0x2de0 [ 219.489847][ T9468] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.489874][ T9468] ? futex_wake+0x51b/0x5f0 [ 219.489932][ T9468] ? __fget_files+0x2a/0x420 [ 219.489957][ T9468] ? __fget_files+0x3a2/0x420 [ 219.489993][ T9468] __x64_sys_sendmsg+0x1b1/0x290 [ 219.490019][ T9468] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.490063][ T9468] do_syscall_64+0x166/0x520 [ 219.490081][ T9468] ? trace_irq_disable+0x3b/0x140 [ 219.490109][ T9468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.490131][ T9468] ? clear_bhb_loop+0x70/0xc0 [ 219.490156][ T9468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.490176][ T9468] RIP: 0033:0x7f75d219e159 [ 219.490194][ T9468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.490213][ T9468] RSP: 002b:00007f75d3042028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.490235][ T9468] RAX: ffffffffffffffda RBX: 00007f75d2425fa0 RCX: 00007f75d219e159 [ 219.490249][ T9468] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 219.490263][ T9468] RBP: 00007f75d223506b R08: 0000000000000000 R09: 0000000000000000 [ 219.490275][ T9468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.490288][ T9468] R13: 00007f75d2426038 R14: 00007f75d2425fa0 R15: 00007ffe31893598 [ 219.490320][ T9468] [ 220.194430][ T9489] tipc: Started in network mode [ 220.194463][ T9489] tipc: Node identity 1e57f0b674fa, cluster identity 4711 [ 220.194612][ T9489] tipc: Enabled bearer , priority 10 [ 220.213983][ T9493] loop8: detected capacity change from 0 to 16384 [ 220.228074][ T9487] tipc: Resetting bearer [ 220.268834][ T9487] tipc: Disabling bearer [ 220.324542][ T9498] FAULT_INJECTION: forcing a failure. [ 220.324542][ T9498] name failslab, interval 1, probability 0, space 0, times 0 [ 220.324576][ T9498] CPU: 1 UID: 0 PID: 9498 Comm: syz.6.999 Not tainted syzkaller #0 PREEMPT(full) [ 220.324600][ T9498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 220.324613][ T9498] Call Trace: [ 220.324621][ T9498] [ 220.324630][ T9498] dump_stack_lvl+0xe8/0x150 [ 220.324663][ T9498] should_fail_ex+0x3eb/0x540 [ 220.324691][ T9498] should_failslab+0xa8/0x100 [ 220.324716][ T9498] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 220.324746][ T9498] ? __d_lookup+0x66/0x790 [ 220.324775][ T9498] ? __d_alloc+0x37/0x6f0 [ 220.324799][ T9498] ? __d_alloc+0x37/0x6f0 [ 220.324900][ T9498] __d_alloc+0x37/0x6f0 [ 220.324934][ T9498] d_alloc+0x4b/0x190 [ 220.324959][ T9498] ? lookup_one_qstr_excl+0xc4/0x360 [ 220.324990][ T9498] lookup_one_qstr_excl+0xd8/0x360 [ 220.325018][ T9498] ? lookup_noperm_common+0x245/0x430 [ 220.325047][ T9498] start_dirop+0x5c/0x90 [ 220.325074][ T9498] simple_start_creating+0xcc/0x110 [ 220.325103][ T9498] ? __pfx_simple_start_creating+0x10/0x10 [ 220.325134][ T9498] ? do_raw_spin_unlock+0xf5/0x200 [ 220.325164][ T9498] devpts_fill_super+0x293/0x4f0 [ 220.325191][ T9498] ? __pfx_devpts_fill_super+0x10/0x10 [ 220.325219][ T9498] get_tree_nodev+0xbb/0x150 [ 220.325248][ T9498] vfs_get_tree+0x92/0x2a0 [ 220.325278][ T9498] do_new_mount+0x319/0xdc0 [ 220.325307][ T9498] ? __pfx_do_new_mount+0x10/0x10 [ 220.325343][ T9498] ? ns_capable+0x84/0xe0 [ 220.325369][ T9498] ? path_mount+0x647/0x1050 [ 220.325397][ T9498] ? user_path_at+0xd4/0x160 [ 220.325425][ T9498] __se_sys_mount+0x31d/0x420 [ 220.325457][ T9498] ? __pfx___se_sys_mount+0x10/0x10 [ 220.325488][ T9498] ? __x64_sys_mount+0x20/0xc0 [ 220.325516][ T9498] do_syscall_64+0x166/0x520 [ 220.325535][ T9498] ? trace_irq_disable+0x3b/0x140 [ 220.325567][ T9498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.325588][ T9498] ? clear_bhb_loop+0x70/0xc0 [ 220.325613][ T9498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.325633][ T9498] RIP: 0033:0x7f0a8259e159 [ 220.325653][ T9498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.325671][ T9498] RSP: 002b:00007f0a834c3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 220.325693][ T9498] RAX: ffffffffffffffda RBX: 00007f0a82825fa0 RCX: 00007f0a8259e159 [ 220.325708][ T9498] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000000 [ 220.325722][ T9498] RBP: 00007f0a8263506b R08: 0000000000000000 R09: 0000000000000000 [ 220.325736][ T9498] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 220.325749][ T9498] R13: 00007f0a82826038 R14: 00007f0a82825fa0 R15: 00007ffee438bf68 [ 220.325781][ T9498] [ 220.348198][ T9498] devpts: Unable to alloc dentry for ptmx node [ 220.697530][ T9493] loop8: detected capacity change from 16384 to 16383 [ 220.726261][ T9497] I/O error, dev loop8, sector 9472 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 220.727309][ T9497] I/O error, dev loop8, sector 9728 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 220.739664][ T9497] I/O error, dev loop8, sector 9472 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 220.739699][ T9497] Buffer I/O error on dev loop8, logical block 1184, async page read [ 220.749982][ T9497] I/O error, dev loop8, sector 9480 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 220.750017][ T9497] Buffer I/O error on dev loop8, logical block 1185, async page read [ 220.750056][ T9497] I/O error, dev loop8, sector 9488 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 220.750079][ T9497] Buffer I/O error on dev loop8, logical block 1186, async page read [ 220.750109][ T9497] I/O error, dev loop8, sector 9496 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 220.750131][ T9497] Buffer I/O error on dev loop8, logical block 1187, async page read [ 220.750160][ T9497] I/O error, dev loop8, sector 9504 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 220.750183][ T9497] Buffer I/O error on dev loop8, logical block 1188, async page read [ 220.750211][ T9497] I/O error, dev loop8, sector 9512 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 220.750234][ T9497] Buffer I/O error on dev loop8, logical block 1189, async page read [ 220.750271][ T9497] I/O error, dev loop8, sector 9520 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 220.750292][ T9497] Buffer I/O error on dev loop8, logical block 1190, async page read [ 220.750321][ T9497] I/O error, dev loop8, sector 9528 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 220.750343][ T9497] Buffer I/O error on dev loop8, logical block 1191, async page read [ 220.750375][ T9497] Buffer I/O error on dev loop8, logical block 1192, async page read [ 220.750463][ T9497] Buffer I/O error on dev loop8, logical block 1193, async page read [ 220.965444][ T9508] syz.7.1000 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 220.965489][ T9508] CPU: 0 UID: 0 PID: 9508 Comm: syz.7.1000 Not tainted syzkaller #0 PREEMPT(full) [ 220.965512][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 220.965524][ T9508] Call Trace: [ 220.965530][ T9508] [ 220.965538][ T9508] dump_stack_lvl+0xe8/0x150 [ 220.965569][ T9508] dump_header+0xd3/0x4b0 [ 220.965598][ T9508] oom_kill_process+0x3ab/0x9e0 [ 220.965626][ T9508] out_of_memory+0xfb1/0x13b0 [ 220.965647][ T9508] ? try_charge_memcg+0xc16/0x15f0 [ 220.965682][ T9508] ? __pfx_out_of_memory+0x10/0x10 [ 220.965702][ T9508] ? do_raw_spin_unlock+0xf5/0x200 [ 220.965744][ T9508] try_charge_memcg+0xccc/0x15f0 [ 220.965787][ T9508] ? __pfx_try_charge_memcg+0x10/0x10 [ 220.965817][ T9508] ? percpu_ref_tryget+0x15/0x180 [ 220.965850][ T9508] ? __obj_cgroup_charge+0x36/0x2d0 [ 220.965885][ T9508] __obj_cgroup_charge+0x20a/0x2d0 [ 220.965915][ T9508] ? __obj_cgroup_charge+0x36/0x2d0 [ 220.965948][ T9508] __memcg_slab_post_alloc_hook+0x766/0xd90 [ 220.966000][ T9508] kmem_cache_alloc_lru_noprof+0x34c/0x5f0 [ 220.966033][ T9508] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 220.966061][ T9508] ? alloc_inode+0xb8/0x1b0 [ 220.966083][ T9508] ? alloc_inode+0xb8/0x1b0 [ 220.966112][ T9508] alloc_inode+0xb8/0x1b0 [ 220.966137][ T9508] iget_locked+0x12c/0x690 [ 220.966168][ T9508] kernfs_get_inode+0x4f/0x770 [ 220.966200][ T9508] kernfs_get_tree+0x5cd/0x980 [ 220.966233][ T9508] ? __pfx_kernfs_get_tree+0x10/0x10 [ 220.966261][ T9508] ? apparmor_capable+0x126/0x170 [ 220.966292][ T9508] ? bpf_lsm_capable+0x9/0x20 [ 220.966323][ T9508] vfs_get_tree+0x92/0x2a0 [ 220.966356][ T9508] do_new_mount+0x319/0xdc0 [ 220.966390][ T9508] ? __pfx_do_new_mount+0x10/0x10 [ 220.966418][ T9508] ? ns_capable+0x84/0xe0 [ 220.966443][ T9508] ? path_mount+0x647/0x1050 [ 220.966471][ T9508] ? user_path_at+0xd4/0x160 [ 220.966501][ T9508] __se_sys_mount+0x31d/0x420 [ 220.966533][ T9508] ? __pfx___se_sys_mount+0x10/0x10 [ 220.966565][ T9508] ? __x64_sys_mount+0x20/0xc0 [ 220.966593][ T9508] do_syscall_64+0x166/0x520 [ 220.966611][ T9508] ? trace_irq_disable+0x3b/0x140 [ 220.966644][ T9508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.966665][ T9508] ? clear_bhb_loop+0x70/0xc0 [ 220.966691][ T9508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.966712][ T9508] RIP: 0033:0x7f88fc39e159 [ 220.966738][ T9508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.966757][ T9508] RSP: 002b:00007f88fd226028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 220.966779][ T9508] RAX: ffffffffffffffda RBX: 00007f88fc625fa0 RCX: 00007f88fc39e159 [ 220.966795][ T9508] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000000000000000 [ 220.966809][ T9508] RBP: 00007f88fc43506b R08: 0000000000000000 R09: 0000000000000000 [ 220.966823][ T9508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.966836][ T9508] R13: 00007f88fc626038 R14: 00007f88fc625fa0 R15: 00007ffec51aa358 [ 220.966870][ T9508] [ 220.966959][ T9508] memory: usage 8kB, limit 8kB, failcnt 21 [ 220.966972][ T9508] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 220.966986][ T9508] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 220.966999][ T9508] Memory cgroup stats for /syz7/test: [ 220.967245][ T9508] cache 0 [ 220.967255][ T9508] rss 0 [ 220.967262][ T9508] rss_huge 0 [ 220.967269][ T9508] shmem 0 [ 220.967276][ T9508] mapped_file 0 [ 220.967283][ T9508] dirty 0 [ 220.967291][ T9508] writeback 0 [ 220.967298][ T9508] workingset_refault_anon 0 [ 220.967306][ T9508] workingset_refault_file 0 [ 220.967314][ T9508] swap 0 [ 220.967321][ T9508] swapcached 0 [ 220.967329][ T9508] pgpgin 0 [ 220.967336][ T9508] pgpgout 0 [ 220.967343][ T9508] pgfault 0 [ 220.967350][ T9508] pgmajfault 0 [ 220.967357][ T9508] inactive_anon 0 [ 220.967364][ T9508] active_anon 0 [ 220.967372][ T9508] inactive_file 0 [ 220.967379][ T9508] active_file 0 [ 220.967387][ T9508] unevictable 0 [ 220.967394][ T9508] hierarchical_memory_limit 8192 [ 220.967402][ T9508] hierarchical_memsw_limit 9223372036854771712 [ 220.967411][ T9508] total_cache 0 [ 220.967419][ T9508] total_rss 0 [ 220.967426][ T9508] total_rss_huge 0 [ 220.967434][ T9508] total_shmem 0 [ 220.967441][ T9508] total_mapped_file 0 [ 220.967449][ T9508] total_dirty 0 [ 220.967455][ T9508] total_writeback 0 [ 220.967463][ T9508] total_workingset_refault_anon 0 [ 220.967471][ T9508] total_workingset_refault_file 0 [ 220.967480][ T9508] total_swap 0 [ 220.967487][ T9508] total_swapcached 0 [ 220.967494][ T9508] total_pgpgin 0 [ 220.967502][ T9508] total_pgpgout 0 [ 220.967509][ T9508] total_pgfault 0 [ 220.967516][ T9508] total_pgmajfault 0 [ 220.967523][ T9508] total_inactive_anon 0 [ 220.967531][ T9508] total_active_anon 0 [ 220.967539][ T9508] total_inactive_file 0 [ 220.967546][ T9508] total_active_file 0 [ 220.967554][ T9508] total_unevictable 0 [ 220.967561][ T9508] anon_cost 0 [ 220.967568][ T9508] file_cost 0 [ 220.967575][ T9508] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz7/test,task_memcg=/syz7/test,task=syz.7.1000,pid=9505,uid=0 [ 220.969181][ T9508] Memory cgroup out of memory: Killed process 9505 (syz.7.1000) total-vm:102252kB, anon-rss:1432kB, file-rss:22868kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 221.024304][ T9493] ldm_validate_partition_table(): Disk read failed. [ 221.024417][ T9493] Dev loop8: unable to read RDB block 0 [ 221.024640][ T9493] loop8: unable to read partition table [ 221.024828][ T9493] loop_reread_partitions: partition scan of loop8 ((õÉê—) failed (rc=-5) [ 221.130569][ T25] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 221.294231][ T25] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 221.298935][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.298982][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.377773][ T25] usb 7-1: config 0 descriptor?? [ 221.562362][ T9517] FAULT_INJECTION: forcing a failure. [ 221.562362][ T9517] name failslab, interval 1, probability 0, space 0, times 0 [ 221.562399][ T9517] CPU: 0 UID: 0 PID: 9517 Comm: syz.7.1002 Not tainted syzkaller #0 PREEMPT(full) [ 221.562421][ T9517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.562434][ T9517] Call Trace: [ 221.562442][ T9517] [ 221.562450][ T9517] dump_stack_lvl+0xe8/0x150 [ 221.562482][ T9517] should_fail_ex+0x3eb/0x540 [ 221.562509][ T9517] should_failslab+0xa8/0x100 [ 221.562533][ T9517] __kmalloc_noprof+0xf9/0x710 [ 221.562560][ T9517] ? lock_acquire+0x115/0x350 [ 221.562588][ T9517] ? nft_set_elem_init+0xa8/0x7e0 [ 221.562612][ T9517] ? nft_set_elem_init+0xa8/0x7e0 [ 221.562642][ T9517] nft_set_elem_init+0xa8/0x7e0 [ 221.562675][ T9517] nf_tables_newsetelem+0x2428/0x4200 [ 221.562733][ T9517] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 221.562756][ T9517] ? lock_acquire+0x115/0x350 [ 221.562791][ T9517] ? nla_validate_array+0xfc/0x260 [ 221.562843][ T9517] ? __pfx___nla_validate_parse+0x10/0x10 [ 221.562876][ T9517] ? __pfx_nf_tables_newset+0x10/0x10 [ 221.562901][ T9517] ? lock_acquire+0x115/0x350 [ 221.562927][ T9517] ? nfnl_pernet+0x23/0x240 [ 221.562957][ T9517] ? __nla_parse+0x40/0x60 [ 221.562988][ T9517] nfnetlink_rcv+0x1288/0x28c0 [ 221.563040][ T9517] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 221.563077][ T9517] ? ref_tracker_free+0x689/0x830 [ 221.563121][ T9517] ? skb_clone+0x246/0x3a0 [ 221.563145][ T9517] ? __netlink_deliver_tap+0x811/0x860 [ 221.563178][ T9517] ? netlink_deliver_tap+0x2e/0x1b0 [ 221.563201][ T9517] ? netlink_deliver_tap+0x2e/0x1b0 [ 221.563237][ T9517] netlink_unicast+0x7bd/0x940 [ 221.563270][ T9517] netlink_sendmsg+0x7c3/0xae0 [ 221.563301][ T9517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.563333][ T9517] ? apparmor_socket_sendmsg+0x98/0x360 [ 221.563357][ T9517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.563382][ T9517] sock_sendmsg_nosec+0x13a/0x180 [ 221.563412][ T9517] ____sys_sendmsg+0x54e/0x850 [ 221.563438][ T9517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.563471][ T9517] ? import_iovec+0x73/0xa0 [ 221.563500][ T9517] ___sys_sendmsg+0x2a5/0x360 [ 221.563521][ T9517] ? __lock_acquire+0x747/0x2de0 [ 221.563551][ T9517] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.563576][ T9517] ? futex_wait+0x2a2/0x390 [ 221.563631][ T9517] ? __fget_files+0x2a/0x420 [ 221.563654][ T9517] ? __fget_files+0x3a2/0x420 [ 221.563688][ T9517] __x64_sys_sendmsg+0x1b1/0x290 [ 221.563715][ T9517] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 221.563756][ T9517] do_syscall_64+0x166/0x520 [ 221.563774][ T9517] ? trace_irq_disable+0x3b/0x140 [ 221.563800][ T9517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.563820][ T9517] ? clear_bhb_loop+0x70/0xc0 [ 221.563843][ T9517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.563862][ T9517] RIP: 0033:0x7f88fc39e159 [ 221.563881][ T9517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.563898][ T9517] RSP: 002b:00007f88fd226028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.563920][ T9517] RAX: ffffffffffffffda RBX: 00007f88fc625fa0 RCX: 00007f88fc39e159 [ 221.563935][ T9517] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 221.563947][ T9517] RBP: 00007f88fc43506b R08: 0000000000000000 R09: 0000000000000000 [ 221.563960][ T9517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.563972][ T9517] R13: 00007f88fc626038 R14: 00007f88fc625fa0 R15: 00007ffec51aa358 [ 221.564003][ T9517] [ 221.847234][ T9522] e1000 0000:00:01.0: can't ioremap BAR 0: [??? 0x00000000 flags 0x0] [ 221.901548][ T9522] e1000 0000:00:01.0: probe with driver e1000 failed with error -5 [ 221.956626][ T25] usbhid 7-1:0.0: can't add hid device: -71 [ 221.956629][ T9526] FAULT_INJECTION: forcing a failure. [ 221.956629][ T9526] name failslab, interval 1, probability 0, space 0, times 0 [ 221.956654][ T9526] CPU: 0 UID: 0 PID: 9526 Comm: syz.7.1004 Not tainted syzkaller #0 PREEMPT(full) [ 221.956675][ T9526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.956687][ T9526] Call Trace: [ 221.956694][ T9526] [ 221.956701][ T9526] dump_stack_lvl+0xe8/0x150 [ 221.956730][ T9526] should_fail_ex+0x3eb/0x540 [ 221.956753][ T9526] should_failslab+0xa8/0x100 [ 221.956771][ T9526] ? dst_alloc+0x105/0x170 [ 221.956793][ T9526] kmem_cache_alloc_noprof+0x9c/0x600 [ 221.956818][ T9526] ? dst_alloc+0x105/0x170 [ 221.956846][ T9526] dst_alloc+0x105/0x170 [ 221.956865][ T9526] ? ip_check_mc_rcu+0x68a/0x7c0 [ 221.956890][ T9526] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 221.956920][ T9526] ? ip_route_output_key_hash+0xd8/0x2a0 [ 221.956945][ T9526] ip_route_output_key_hash+0x18d/0x2a0 [ 221.956971][ T9526] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 221.956998][ T9526] ? lock_acquire+0x115/0x350 [ 221.957033][ T9526] ip_route_output_flow+0x2a/0x150 [ 221.957056][ T9526] ? security_sk_classify_flow+0x6d/0x150 [ 221.957087][ T9526] udp_sendmsg+0x144a/0x2140 [ 221.957102][ T25] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 221.957129][ T9526] ? __pfx_udp_sendmsg+0x10/0x10 [ 221.957159][ T9526] ? trace_hrtimer_start+0x82/0x200 [ 221.957197][ T9526] ? hrtimer_start_range_ns_common+0x83b/0xb90 [ 221.957235][ T9526] ? finish_task_switch+0x40e/0xc60 [ 221.957255][ T9526] ? lockdep_hardirqs_on+0x7b/0x110 [ 221.957287][ T9526] ? rcu_is_watching+0x16/0xb0 [ 221.957309][ T9526] ? trace_sched_exit_tp+0x3a/0x130 [ 221.957328][ T9526] ? begin_current_label_crit_section+0x299/0x830 [ 221.957360][ T9526] udpv6_sendmsg+0x915/0x2610 [ 221.957404][ T9526] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 221.957461][ T9526] ? __asan_memset+0x22/0x50 [ 221.957493][ T9526] ? inet_send_prepare+0x5b/0x260 [ 221.957522][ T9526] ? inet6_sendmsg+0xe4/0x120 [ 221.957548][ T9526] ? __pfx_inet6_sendmsg+0x10/0x10 [ 221.957571][ T9526] sock_sendmsg_nosec+0x90/0x180 [ 221.957602][ T9526] sock_write_iter+0x2de/0x3e0 [ 221.957630][ T9526] ? __pfx_sock_write_iter+0x10/0x10 [ 221.957663][ T9526] ? bpf_lsm_file_permission+0x9/0x20 [ 221.957686][ T9526] ? security_file_permission+0x75/0x260 [ 221.957724][ T9526] vfs_write+0x612/0xba0 [ 221.957761][ T9526] ? __pfx_vfs_write+0x10/0x10 [ 221.957828][ T9526] ? __fget_files+0x2a/0x420 [ 221.957864][ T9526] ksys_write+0x150/0x270 [ 221.957893][ T9526] ? __pfx_ksys_write+0x10/0x10 [ 221.957929][ T9526] do_syscall_64+0x166/0x520 [ 221.957948][ T9526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.957968][ T9526] ? clear_bhb_loop+0x70/0xc0 [ 221.957991][ T9526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.958010][ T9526] RIP: 0033:0x7f88fc39e159 [ 221.958029][ T9526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.958046][ T9526] RSP: 002b:00007f88fd226028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 221.958066][ T9526] RAX: ffffffffffffffda RBX: 00007f88fc625fa0 RCX: 00007f88fc39e159 [ 221.958082][ T9526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 221.958094][ T9526] RBP: 00007f88fc43506b R08: 0000000000000000 R09: 0000000000000000 [ 221.958107][ T9526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.958119][ T9526] R13: 00007f88fc626038 R14: 00007f88fc625fa0 R15: 00007ffec51aa358 [ 221.958150][ T9526] [ 222.356208][ T25] usb 7-1: USB disconnect, device number 8 [ 222.481360][ T989] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 222.498355][ T9540] FAULT_INJECTION: forcing a failure. [ 222.498355][ T9540] name failslab, interval 1, probability 0, space 0, times 0 [ 222.498385][ T9540] CPU: 0 UID: 0 PID: 9540 Comm: syz.5.1009 Not tainted syzkaller #0 PREEMPT(full) [ 222.498407][ T9540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.498420][ T9540] Call Trace: [ 222.498427][ T9540] [ 222.498435][ T9540] dump_stack_lvl+0xe8/0x150 [ 222.498465][ T9540] should_fail_ex+0x3eb/0x540 [ 222.498491][ T9540] should_failslab+0xa8/0x100 [ 222.498514][ T9540] __kmalloc_cache_noprof+0x9e/0x600 [ 222.498548][ T9540] ? call_usermodehelper_setup+0x8e/0x270 [ 222.498569][ T9540] ? call_usermodehelper_setup+0x8e/0x270 [ 222.498597][ T9540] call_usermodehelper_setup+0x8e/0x270 [ 222.498616][ T9540] ? __pfx_umh_keys_cleanup+0x10/0x10 [ 222.498636][ T9540] ? __pfx_umh_keys_init+0x10/0x10 [ 222.498660][ T9540] call_sbin_request_key+0x7db/0xbf0 [ 222.498682][ T9540] ? request_key_auth_free_preparse+0x9/0x10 [ 222.498710][ T9540] ? __pfx_call_sbin_request_key+0x10/0x10 [ 222.498731][ T9540] ? do_raw_spin_unlock+0xf5/0x200 [ 222.498799][ T9540] ? __pfx_request_key_auth_new+0x10/0x10 [ 222.498836][ T9540] request_key_and_link+0xefa/0x1580 [ 222.498869][ T9540] ? __pfx_request_key_and_link+0x10/0x10 [ 222.498903][ T9540] ? __pfx_key_default_cmp+0x10/0x10 [ 222.498929][ T9540] ? __pfx_keyring_search_iterator+0x10/0x10 [ 222.498963][ T9540] ? down_read+0x2b9/0x320 [ 222.498983][ T9540] ? _copy_from_user+0x94/0xb0 [ 222.499015][ T9540] __se_sys_request_key+0x29a/0x350 [ 222.499047][ T9540] ? __pfx___se_sys_request_key+0x10/0x10 [ 222.499090][ T9540] do_syscall_64+0x166/0x520 [ 222.499109][ T9540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.499129][ T9540] ? clear_bhb_loop+0x70/0xc0 [ 222.499153][ T9540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.499172][ T9540] RIP: 0033:0x7f8ebbf9e159 [ 222.499190][ T9540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.499206][ T9540] RSP: 002b:00007f8ebce7b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 222.499227][ T9540] RAX: ffffffffffffffda RBX: 00007f8ebc225fa0 RCX: 00007f8ebbf9e159 [ 222.499241][ T9540] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000200000000040 [ 222.499255][ T9540] RBP: 00007f8ebc03506b R08: 0000000000000000 R09: 0000000000000000 [ 222.499268][ T9540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.499279][ T9540] R13: 00007f8ebc226038 R14: 00007f8ebc225fa0 R15: 00007ffd4e610488 [ 222.499310][ T9540] [ 222.631161][ T989] usb 8-1: Using ep0 maxpacket: 32 [ 222.633680][ T989] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 222.648677][ T989] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.648703][ T989] usb 8-1: config 0 has no interfaces? [ 222.648739][ T989] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.650856][ T9544] FAULT_INJECTION: forcing a failure. [ 222.650856][ T9544] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 222.650883][ T9544] CPU: 0 UID: 0 PID: 9544 Comm: syz.0.1011 Not tainted syzkaller #0 PREEMPT(full) [ 222.650906][ T9544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.650918][ T9544] Call Trace: [ 222.650925][ T9544] [ 222.650933][ T9544] dump_stack_lvl+0xe8/0x150 [ 222.650965][ T9544] should_fail_ex+0x3eb/0x540 [ 222.650992][ T9544] _copy_from_user+0x2d/0xb0 [ 222.651019][ T9544] copy_clone_args_from_user+0x1f9/0x740 [ 222.651054][ T9544] ? futex_private_hash_put+0x132/0x160 [ 222.651085][ T9544] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 222.651111][ T9544] ? futex_wake+0x51b/0x5f0 [ 222.651151][ T9544] __se_sys_clone3+0x142/0x360 [ 222.651178][ T9544] ? __pfx___se_sys_clone3+0x10/0x10 [ 222.651201][ T9544] ? do_futex+0x458/0x4e0 [ 222.651261][ T9544] do_syscall_64+0x166/0x520 [ 222.651279][ T9544] ? trace_irq_disable+0x3b/0x140 [ 222.651311][ T9544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.651331][ T9544] ? clear_bhb_loop+0x70/0xc0 [ 222.651354][ T9544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.651373][ T9544] RIP: 0033:0x7f75d219e159 [ 222.651391][ T9544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.651408][ T9544] RSP: 002b:00007f75d3041ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 222.651428][ T9544] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f75d219e159 [ 222.651442][ T9544] RDX: 00007f75d3041f10 RSI: 0000000000000058 RDI: 00007f75d3041f10 [ 222.651455][ T9544] RBP: 00007f75d223506b R08: 0000000000000000 R09: 0000000000000058 [ 222.651467][ T9544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.651479][ T9544] R13: 00007f75d2426038 R14: 00007f75d2425fa0 R15: 00007ffe31893598 [ 222.651508][ T9544] [ 222.677866][ T989] usb 8-1: config 0 descriptor?? [ 222.707548][ T25] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 222.927696][ T9532] FAULT_INJECTION: forcing a failure. [ 222.927696][ T9532] name failslab, interval 1, probability 0, space 0, times 0 [ 222.927727][ T9532] CPU: 0 UID: 0 PID: 9532 Comm: syz.7.1007 Not tainted syzkaller #0 PREEMPT(full) [ 222.927750][ T9532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.927763][ T9532] Call Trace: [ 222.927770][ T9532] [ 222.927778][ T9532] dump_stack_lvl+0xe8/0x150 [ 222.927808][ T9532] should_fail_ex+0x3eb/0x540 [ 222.927835][ T9532] should_failslab+0xa8/0x100 [ 222.927858][ T9532] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 222.927886][ T9532] ? __lock_acquire+0x747/0x2de0 [ 222.927913][ T9532] ? __kernfs_new_node+0xa9/0x980 [ 222.927940][ T9532] ? __kernfs_new_node+0xa9/0x980 [ 222.927973][ T9532] kstrdup+0x42/0x100 [ 222.928002][ T9532] __kernfs_new_node+0xa9/0x980 [ 222.928033][ T9532] ? rcu_is_watching+0x16/0xb0 [ 222.928056][ T9532] ? __pfx___kernfs_new_node+0x10/0x10 [ 222.928085][ T9532] ? kernfs_root+0x1c/0x230 [ 222.928117][ T9532] ? kernfs_root+0x1c/0x230 [ 222.928143][ T9532] ? kernfs_root+0x1c/0x230 [ 222.928167][ T9532] ? kernfs_root+0x1c/0x230 [ 222.928197][ T9532] kernfs_new_node+0xea/0x140 [ 222.928229][ T9532] kernfs_create_link+0xa7/0x200 [ 222.928254][ T9532] sysfs_do_create_link_sd+0x83/0x110 [ 222.928283][ T9532] module_add_driver+0x26e/0x320 [ 222.928313][ T9532] bus_add_driver+0x391/0x670 [ 222.928349][ T9532] driver_register+0x23a/0x320 [ 222.928379][ T9532] usb_gadget_register_driver_owner+0xf9/0x270 [ 222.928409][ T9532] raw_ioctl+0x1541/0x41c0 [ 222.928438][ T9532] ? tomoyo_path_number_perm+0x219/0x5f0 [ 222.928462][ T9532] ? do_vfs_ioctl+0x116f/0x1530 [ 222.928482][ T9532] ? __pfx_raw_ioctl+0x10/0x10 [ 222.928511][ T9532] ? hook_file_ioctl+0x1f2/0x600 [ 222.928549][ T9532] ? __fget_files+0x2a/0x420 [ 222.928576][ T9532] ? __fget_files+0x2a/0x420 [ 222.928598][ T9532] ? __fget_files+0x3a2/0x420 [ 222.928620][ T9532] ? __fget_files+0x2a/0x420 [ 222.928646][ T9532] ? bpf_lsm_file_ioctl+0x9/0x20 [ 222.928670][ T9532] ? __pfx_raw_ioctl+0x10/0x10 [ 222.928766][ T9532] __se_sys_ioctl+0xfc/0x170 [ 222.928799][ T9532] do_syscall_64+0x166/0x520 [ 222.928816][ T9532] ? trace_irq_disable+0x3b/0x140 [ 222.928843][ T9532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.928863][ T9532] ? clear_bhb_loop+0x70/0xc0 [ 222.928888][ T9532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.928906][ T9532] RIP: 0033:0x7f88fc39ddeb [ 222.928925][ T9532] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 222.928941][ T9532] RSP: 002b:00007f88fd223f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.928967][ T9532] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f88fc39ddeb [ 222.928981][ T9532] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 222.928994][ T9532] RBP: 00007f88fd224fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 222.929007][ T9532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.929017][ T9532] R13: 00002000000001c0 R14: 0000000000000002 R15: 0000000000000868 [ 222.929043][ T9532] [ 222.936413][ T9532] bus_add_driver: failed to create module links for raw-gadget.2 [ 222.936496][ T9532] UDC core: USB Raw Gadget: driver registration failed: -12 [ 222.936513][ T9532] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 222.939786][ T989] usb 8-1: USB disconnect, device number 8 [ 223.029081][ T25] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 223.062906][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.062955][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.327604][ T25] usb 7-1: config 0 descriptor?? [ 223.701267][ T9569] FAULT_INJECTION: forcing a failure. [ 223.701267][ T9569] name failslab, interval 1, probability 0, space 0, times 0 [ 223.701297][ T9569] CPU: 1 UID: 0 PID: 9569 Comm: syz.7.1016 Not tainted syzkaller #0 PREEMPT(full) [ 223.701321][ T9569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.701333][ T9569] Call Trace: [ 223.701340][ T9569] [ 223.701352][ T9569] dump_stack_lvl+0xe8/0x150 [ 223.701384][ T9569] should_fail_ex+0x3eb/0x540 [ 223.701412][ T9569] should_failslab+0xa8/0x100 [ 223.701441][ T9569] __kmalloc_cache_noprof+0x9e/0x600 [ 223.701473][ T9569] ? vim2m_open+0xaf/0x620 [ 223.701500][ T9569] ? vim2m_open+0xaf/0x620 [ 223.701533][ T9569] vim2m_open+0xaf/0x620 [ 223.701564][ T9569] v4l2_open+0x1bc/0x3a0 [ 223.701593][ T9569] chrdev_open+0x4d9/0x600 [ 223.701616][ T9569] ? __pfx_chrdev_open+0x10/0x10 [ 223.701639][ T9569] ? devcgroup_check_permission+0x31/0x8f0 [ 223.701673][ T9569] ? __pfx_chrdev_open+0x10/0x10 [ 223.701692][ T9569] do_dentry_open+0x80e/0x1360 [ 223.701725][ T9569] vfs_open_consume+0x4a/0x350 [ 223.701744][ T9569] ? path_openat+0x14bb/0x1e40 [ 223.701775][ T9569] path_openat+0x14d7/0x1e40 [ 223.701823][ T9569] do_file_open+0x23e/0x4a0 [ 223.701856][ T9569] ? __pfx_do_file_open+0x10/0x10 [ 223.701900][ T9569] ? _raw_spin_unlock+0x28/0x50 [ 223.701926][ T9569] ? alloc_fd+0x651/0x6c0 [ 223.701961][ T9569] do_sys_openat2+0x115/0x200 [ 223.701985][ T9569] ? __se_sys_futex+0x3a8/0x450 [ 223.702008][ T9569] ? __pfx_do_sys_openat2+0x10/0x10 [ 223.702037][ T9569] ? rcu_is_watching+0x16/0xb0 [ 223.702063][ T9569] __x64_sys_openat+0x138/0x170 [ 223.702093][ T9569] do_syscall_64+0x166/0x520 [ 223.702147][ T9569] ? trace_irq_disable+0x3b/0x140 [ 223.702176][ T9569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.702198][ T9569] ? clear_bhb_loop+0x70/0xc0 [ 223.702225][ T9569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.702245][ T9569] RIP: 0033:0x7f88fc39e159 [ 223.702264][ T9569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.702281][ T9569] RSP: 002b:00007f88fd226028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 223.702305][ T9569] RAX: ffffffffffffffda RBX: 00007f88fc625fa0 RCX: 00007f88fc39e159 [ 223.702321][ T9569] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 223.702336][ T9569] RBP: 00007f88fc43506b R08: 0000000000000000 R09: 0000000000000000 [ 223.702349][ T9569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.702361][ T9569] R13: 00007f88fc626038 R14: 00007f88fc625fa0 R15: 00007ffec51aa358 [ 223.702391][ T9569] [ 224.174829][ T25] aiptek 7-1:0.0: Aiptek using 400 ms programming speed [ 224.179633][ T25] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input28 [ 224.228431][ T9588] syzkaller1: entered promiscuous mode [ 224.228455][ T9588] syzkaller1: entered allmulticast mode [ 224.497125][ T9595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.499772][ T9595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.538412][ T989] usb 7-1: USB disconnect, device number 9 [ 224.538412][ C1] aiptek 7-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 225.257292][ T9614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.257737][ T9614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.683670][ T9627] FAULT_INJECTION: forcing a failure. [ 225.683670][ T9627] name failslab, interval 1, probability 0, space 0, times 0 [ 225.683698][ T9627] CPU: 0 UID: 0 PID: 9627 Comm: syz.6.1031 Not tainted syzkaller #0 PREEMPT(full) [ 225.683715][ T9627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.683732][ T9627] Call Trace: [ 225.683778][ T9627] [ 225.683825][ T9627] dump_stack_lvl+0xe8/0x150 [ 225.683964][ T9627] should_fail_ex+0x3eb/0x540 [ 225.684055][ T9627] should_failslab+0xa8/0x100 [ 225.684100][ T9627] __kmalloc_cache_noprof+0x9e/0x600 [ 225.684134][ T9627] ? vim2m_open+0xaf/0x620 [ 225.684268][ T9627] ? vim2m_open+0xaf/0x620 [ 225.684296][ T9627] vim2m_open+0xaf/0x620 [ 225.684321][ T9627] v4l2_open+0x1bc/0x3a0 [ 225.684387][ T9627] chrdev_open+0x4d9/0x600 [ 225.684409][ T9627] ? __pfx_chrdev_open+0x10/0x10 [ 225.684429][ T9627] ? devcgroup_check_permission+0x31/0x8f0 [ 225.684539][ T9627] ? __pfx_chrdev_open+0x10/0x10 [ 225.684558][ T9627] do_dentry_open+0x80e/0x1360 [ 225.684589][ T9627] vfs_open_consume+0x4a/0x350 [ 225.684608][ T9627] ? path_openat+0x14bb/0x1e40 [ 225.684649][ T9627] path_openat+0x14d7/0x1e40 [ 225.684689][ T9627] do_file_open+0x23e/0x4a0 [ 225.684718][ T9627] ? __pfx_do_file_open+0x10/0x10 [ 225.684765][ T9627] ? _raw_spin_unlock+0x28/0x50 [ 225.684886][ T9627] ? alloc_fd+0x651/0x6c0 [ 225.684948][ T9627] do_sys_openat2+0x115/0x200 [ 225.684969][ T9627] ? __se_sys_futex+0x3a8/0x450 [ 225.685017][ T9627] ? __pfx_do_sys_openat2+0x10/0x10 [ 225.685043][ T9627] ? rcu_is_watching+0x16/0xb0 [ 225.685071][ T9627] __x64_sys_openat+0x138/0x170 [ 225.685096][ T9627] do_syscall_64+0x166/0x520 [ 225.685143][ T9627] ? trace_irq_disable+0x3b/0x140 [ 225.685187][ T9627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.685223][ T9627] ? clear_bhb_loop+0x70/0xc0 [ 225.685248][ T9627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.685269][ T9627] RIP: 0033:0x7f0a8259e159 [ 225.685322][ T9627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.685372][ T9627] RSP: 002b:00007f0a834c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 225.685430][ T9627] RAX: ffffffffffffffda RBX: 00007f0a82825fa0 RCX: 00007f0a8259e159 [ 225.685445][ T9627] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 225.685460][ T9627] RBP: 00007f0a8263506b R08: 0000000000000000 R09: 0000000000000000 [ 225.685474][ T9627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.685485][ T9627] R13: 00007f0a82826038 R14: 00007f0a82825fa0 R15: 00007ffee438bf68 [ 225.685516][ T9627] [ 226.138099][ T9632] kvm: emulating exchange as write [ 226.397043][ T9640] syzkaller1: entered promiscuous mode [ 226.397067][ T9640] syzkaller1: entered allmulticast mode [ 226.811163][ T989] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 226.961709][ T989] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 226.962844][ T989] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 226.964552][ T989] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 226.967844][ T989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.967867][ T989] usb 6-1: Product: syz [ 226.967881][ T989] usb 6-1: Manufacturer: syz [ 226.967894][ T989] usb 6-1: SerialNumber: syz [ 227.035007][ T989] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 227.058353][ T989] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 227.063129][ T989] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 227.710638][ T31] audit: type=1800 audit(1790049655.174:10): pid=9670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1048" name="file0" dev="overlay" ino=2013 res=0 errno=0 [ 227.716187][ T31] audit: type=1804 audit(1790049655.184:11): pid=9670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1048" name="/newroot/343/bus/file0" dev="overlay" ino=2013 res=1 errno=0 [ 227.790600][ T989] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 227.800378][ T9674] syzkaller0: entered promiscuous mode [ 227.800393][ T9674] syzkaller0: entered allmulticast mode [ 227.808533][ T9674] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 227.943542][ T989] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 227.946858][ T989] usb 7-1: config 0 has no interfaces? [ 227.946893][ T989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.949616][ T989] usb 7-1: config 0 descriptor?? [ 227.953201][ T7724] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 228.101565][ T7724] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 228.102569][ T7724] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 228.102595][ T7724] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.102614][ T7724] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 228.102651][ T7724] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.104062][ T7724] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 228.104085][ T7724] usb 8-1: Product: syz [ 228.104100][ T7724] usb 8-1: Manufacturer: syz [ 228.109541][ T7724] cdc_wdm 8-1:1.0: skipping garbage [ 228.109554][ T7724] cdc_wdm 8-1:1.0: skipping garbage [ 228.114023][ T7724] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 228.114117][ T7724] cdc_wdm 8-1:1.0: Unknown control protocol [ 228.166161][ T9665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.168635][ T9665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.189581][ T50] usb 7-1: USB disconnect, device number 10 [ 228.316749][ T30] usb 8-1: USB disconnect, device number 9 [ 228.620539][ T50] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 228.760557][ T7724] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 228.791041][ T50] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 228.793569][ T50] usb 7-1: config index 0 descriptor too short (expected 551, got 45) [ 228.793597][ T50] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 228.795298][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.795323][ T50] usb 7-1: Product: syz [ 228.795337][ T50] usb 7-1: Manufacturer: syz [ 228.795350][ T50] usb 7-1: SerialNumber: syz [ 228.802681][ T50] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 228.941273][ T7724] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 228.942401][ T7724] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 228.942426][ T7724] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.942444][ T7724] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 228.942487][ T7724] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.944061][ T7724] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 228.944084][ T7724] usb 8-1: Product: syz [ 228.944098][ T7724] usb 8-1: Manufacturer: syz [ 229.022827][ T7724] cdc_wdm 8-1:1.0: skipping garbage [ 229.022846][ T7724] cdc_wdm 8-1:1.0: skipping garbage [ 229.028750][ T7724] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 229.028770][ T7724] cdc_wdm 8-1:1.0: Unknown control protocol [ 229.237367][ T9693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.237958][ T9693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.571866][ T25] usb 6-1: USB disconnect, device number 8 [ 229.585170][ T25] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 229.608130][ T25] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 229.618861][ T25] ti_usb_3410_5052 6-1:2.0: device disconnected [ 229.831041][ T50] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 229.831626][ T50] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 229.834684][ T50] usb 7-1: media controller created [ 229.849308][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.020673][ T50] usb 7-1: USB disconnect, device number 11 [ 230.259867][ T31] audit: type=1800 audit(1790049657.724:12): pid=9703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1058" name="file0" dev="overlay" ino=464 res=0 errno=0 [ 230.272722][ T31] audit: type=1804 audit(1790049657.744:13): pid=9703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1058" name="/newroot/80/bus/file0" dev="overlay" ino=464 res=1 errno=0 [ 230.353596][ T9706] syzkaller0: entered promiscuous mode [ 230.353620][ T9706] syzkaller0: entered allmulticast mode [ 230.918270][ T989] usb 8-1: USB disconnect, device number 10 [ 231.350580][ T989] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 231.489299][ T9739] ======================================================= [ 231.489299][ T9739] WARNING: The mand mount option has been deprecated and [ 231.489299][ T9739] and is ignored by this kernel. Remove the mand [ 231.489299][ T9739] option from the mount to silence this warning. [ 231.489299][ T9739] ======================================================= [ 231.533722][ T989] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 231.534894][ T989] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.534940][ T989] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 231.534962][ T989] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 231.534985][ T989] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.535025][ T989] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.676519][ T9741] syzkaller0: entered promiscuous mode [ 231.676543][ T9741] syzkaller0: entered allmulticast mode [ 231.824455][ T9744] FAULT_INJECTION: forcing a failure. [ 231.824455][ T9744] name failslab, interval 1, probability 0, space 0, times 0 [ 231.824488][ T9744] CPU: 1 UID: 0 PID: 9744 Comm: syz.6.1072 Not tainted syzkaller #0 PREEMPT(full) [ 231.824512][ T9744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.824530][ T9744] Call Trace: [ 231.824538][ T9744] [ 231.824547][ T9744] dump_stack_lvl+0xe8/0x150 [ 231.824588][ T9744] should_fail_ex+0x3eb/0x540 [ 231.824617][ T9744] should_failslab+0xa8/0x100 [ 231.824640][ T9744] ? can_rx_register+0x16d/0x7a0 [ 231.824765][ T9744] kmem_cache_alloc_noprof+0x9c/0x600 [ 231.824793][ T9744] ? can_rx_register+0x6c1/0x7a0 [ 231.824813][ T9744] ? can_rx_register+0x16d/0x7a0 [ 231.824839][ T9744] can_rx_register+0x16d/0x7a0 [ 231.824860][ T9744] ? __pfx_raw_rcv+0x10/0x10 [ 231.824912][ T9744] raw_enable_filters+0x98/0x200 [ 231.824942][ T9744] raw_setsockopt+0xf0e/0x1440 [ 231.824971][ T9744] ? __pfx_aa_sk_perm+0x10/0x10 [ 231.824994][ T9744] ? __pfx_raw_setsockopt+0x10/0x10 [ 231.825016][ T9744] ? aa_sock_opt_perm+0x142/0x1e0 [ 231.825055][ T9744] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 231.825091][ T9744] ? __pfx_raw_setsockopt+0x10/0x10 [ 231.825115][ T9744] do_sock_setsockopt+0x17c/0x1b0 [ 231.825217][ T9744] __x64_sys_setsockopt+0x13d/0x1b0 [ 231.825245][ T9744] do_syscall_64+0x166/0x520 [ 231.825265][ T9744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.825286][ T9744] ? clear_bhb_loop+0x70/0xc0 [ 231.825312][ T9744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.825332][ T9744] RIP: 0033:0x7f0a8259e159 [ 231.825353][ T9744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.825371][ T9744] RSP: 002b:00007f0a834c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 231.825393][ T9744] RAX: ffffffffffffffda RBX: 00007f0a82825fa0 RCX: 00007f0a8259e159 [ 231.825408][ T9744] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000004 [ 231.825421][ T9744] RBP: 00007f0a8263506b R08: 0000000000000f00 R09: 0000000000000000 [ 231.825434][ T9744] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 231.825447][ T9744] R13: 00007f0a82826038 R14: 00007f0a82825fa0 R15: 00007ffee438bf68 [ 231.825481][ T9744] [ 232.073248][ T9746] syzkaller1: entered promiscuous mode [ 232.073277][ T9746] syzkaller1: entered allmulticast mode [ 232.189274][ T9751] FAULT_INJECTION: forcing a failure. [ 232.189274][ T9751] name failslab, interval 1, probability 0, space 0, times 0 [ 232.189299][ T9751] CPU: 1 UID: 0 PID: 9751 Comm: syz.6.1075 Not tainted syzkaller #0 PREEMPT(full) [ 232.189320][ T9751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.189332][ T9751] Call Trace: [ 232.189341][ T9751] [ 232.189349][ T9751] dump_stack_lvl+0xe8/0x150 [ 232.189381][ T9751] should_fail_ex+0x3eb/0x540 [ 232.189404][ T9751] should_failslab+0xa8/0x100 [ 232.189430][ T9751] ? security_file_alloc+0x34/0x310 [ 232.189554][ T9751] kmem_cache_alloc_noprof+0x9c/0x600 [ 232.189570][ T9751] ? rcu_is_watching+0x16/0xb0 [ 232.189582][ T9751] ? security_file_alloc+0x34/0x310 [ 232.189602][ T9751] security_file_alloc+0x34/0x310 [ 232.189627][ T9751] init_file+0x90/0x2b0 [ 232.189652][ T9751] alloc_empty_file+0x74/0x1d0 [ 232.189676][ T9751] alloc_file_pseudo+0x110/0x1e0 [ 232.189700][ T9751] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 232.189714][ T9751] ? _raw_spin_unlock+0x28/0x50 [ 232.189732][ T9751] anon_inode_getfile_fmode+0xb0/0x1c0 [ 232.189795][ T9751] do_signalfd4+0x1a5/0x3f0 [ 232.189823][ T9751] __x64_sys_signalfd4+0x15a/0x1a0 [ 232.189846][ T9751] ? __pfx___se_sys_futex+0x10/0x10 [ 232.189862][ T9751] ? __pfx___x64_sys_signalfd4+0x10/0x10 [ 232.189880][ T9751] do_syscall_64+0x166/0x520 [ 232.189890][ T9751] ? trace_irq_disable+0x3b/0x140 [ 232.189905][ T9751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.189920][ T9751] ? clear_bhb_loop+0x70/0xc0 [ 232.189943][ T9751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.189964][ T9751] RIP: 0033:0x7f0a8259e159 [ 232.189982][ T9751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.189999][ T9751] RSP: 002b:00007f0a834c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 232.190015][ T9751] RAX: ffffffffffffffda RBX: 00007f0a82825fa0 RCX: 00007f0a8259e159 [ 232.190024][ T9751] RDX: 0000000000000008 RSI: 0000200000000280 RDI: ffffffffffffffff [ 232.190032][ T9751] RBP: 00007f0a8263506b R08: 0000000000000000 R09: 0000000000000000 [ 232.190038][ T9751] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000000 [ 232.190045][ T9751] R13: 00007f0a82826038 R14: 00007f0a82825fa0 R15: 00007ffee438bf68 [ 232.190062][ T9751] [ 232.272041][ T30] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 232.327711][ T9753] FAULT_INJECTION: forcing a failure. [ 232.327711][ T9753] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 232.327743][ T9753] CPU: 1 UID: 0 PID: 9753 Comm: syz.6.1076 Not tainted syzkaller #0 PREEMPT(full) [ 232.327769][ T9753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.327782][ T9753] Call Trace: [ 232.327790][ T9753] [ 232.327799][ T9753] dump_stack_lvl+0xe8/0x150 [ 232.327832][ T9753] should_fail_ex+0x3eb/0x540 [ 232.327858][ T9753] prepare_alloc_pages+0x21e/0x5f0 [ 232.327895][ T9753] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 232.327929][ T9753] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 232.327967][ T9753] ? policy_nodemask+0x2cc/0x8e0 [ 232.327995][ T9753] alloc_pages_mpol+0x21e/0x390 [ 232.328022][ T9753] alloc_pages_noprof+0xb1/0x2b0 [ 232.328047][ T9753] alloc_pages_exact_noprof+0x3b/0xc0 [ 232.328067][ T9753] snd_pcm_attach_substream+0x626/0xb10 [ 232.328165][ T9753] snd_pcm_open_substream+0xb9/0x24f0 [ 232.328211][ T9753] ? snd_pcm_open+0x17d/0x690 [ 232.328231][ T9753] ? __pfx___mutex_lock+0x10/0x10 [ 232.328258][ T9753] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 232.328282][ T9753] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 232.328314][ T9753] snd_pcm_open+0x1dc/0x690 [ 232.328342][ T9753] ? __pfx_snd_pcm_open+0x10/0x10 [ 232.328361][ T9753] ? __pfx_default_wake_function+0x10/0x10 [ 232.328419][ T9753] snd_pcm_playback_open+0x5f/0xc0 [ 232.328443][ T9753] chrdev_open+0x4d9/0x600 [ 232.328467][ T9753] ? __pfx_chrdev_open+0x10/0x10 [ 232.328488][ T9753] ? devcgroup_check_permission+0x31/0x8f0 [ 232.328521][ T9753] ? __pfx_chrdev_open+0x10/0x10 [ 232.328539][ T9753] do_dentry_open+0x80e/0x1360 [ 232.328570][ T9753] vfs_open_consume+0x4a/0x350 [ 232.328589][ T9753] ? path_openat+0x14bb/0x1e40 [ 232.328620][ T9753] path_openat+0x14d7/0x1e40 [ 232.328666][ T9753] do_file_open+0x23e/0x4a0 [ 232.328698][ T9753] ? __pfx_do_file_open+0x10/0x10 [ 232.328746][ T9753] ? _raw_spin_unlock+0x28/0x50 [ 232.328770][ T9753] ? alloc_fd+0x651/0x6c0 [ 232.328802][ T9753] do_sys_openat2+0x115/0x200 [ 232.328827][ T9753] ? __pfx_do_sys_openat2+0x10/0x10 [ 232.328869][ T9753] ? do_user_addr_fault+0xd3f/0x1480 [ 232.328918][ T9753] __x64_sys_openat+0x138/0x170 [ 232.328946][ T9753] do_syscall_64+0x166/0x520 [ 232.328965][ T9753] ? trace_irq_disable+0x3b/0x140 [ 232.328992][ T9753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.329012][ T9753] ? clear_bhb_loop+0x70/0xc0 [ 232.329037][ T9753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.329057][ T9753] RIP: 0033:0x7f0a8255e98e [ 232.329074][ T9753] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 232.329092][ T9753] RSP: 002b:00007f0a834c2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 232.329114][ T9753] RAX: ffffffffffffffda RBX: 00007f0a834c36c0 RCX: 00007f0a8255e98e [ 232.329129][ T9753] RDX: 0000000000101080 RSI: 00007f0a834c2c00 RDI: ffffffffffffff9c [ 232.329143][ T9753] RBP: 00007f0a834c2c00 R08: 0000000000000000 R09: 0000000000000000 [ 232.329157][ T9753] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 232.329170][ T9753] R13: 00007f0a82826038 R14: 00007f0a82825fa0 R15: 00007ffee438bf68 [ 232.329202][ T9753] [ 232.430801][ T30] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.431781][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.431808][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.431830][ T30] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.431868][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.438567][ T30] usb 6-1: config 0 descriptor?? [ 232.871870][ T30] hid_parser_main: 5 callbacks suppressed [ 232.871951][ T30] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 232.871984][ T30] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 232.872021][ T30] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 232.872047][ T30] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 232.872073][ T30] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 232.872097][ T30] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 232.872125][ T30] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 232.872150][ T30] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 232.872175][ T30] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 232.872199][ T30] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 232.879029][ T989] gud 8-1:1.0: USB-1: Failed to add TV modes (ret=-5) [ 232.879078][ T989] gud 8-1:1.0: USB-1: Failed to add properties (ret=-5) [ 232.879115][ T989] gud 8-1:1.0: Failed to get connectors (error=-5) [ 232.879137][ T989] gud 8-1:1.0: probe with driver gud failed with error -5 [ 232.883227][ T30] plantronics 0003:047F:FFFF.0012: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 233.027681][ T31] audit: type=1326 audit(1790049660.494:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.6.1079" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8259e159 code=0x7fc00000 [ 233.029759][ T31] audit: type=1326 audit(1790049660.494:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.6.1079" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f0a8259e159 code=0x7fc00000 [ 233.031930][ T31] audit: type=1326 audit(1790049660.504:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.6.1079" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8259e159 code=0x7fc00000 [ 233.092250][ T5697] usb 8-1: USB disconnect, device number 11 [ 233.147735][ T30] usb 6-1: USB disconnect, device number 9 [ 233.471157][ T9708] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.879849][ T9773] FAULT_INJECTION: forcing a failure. [ 233.879849][ T9773] name failslab, interval 1, probability 0, space 0, times 0 [ 233.879881][ T9773] CPU: 1 UID: 0 PID: 9773 Comm: syz.7.1082 Not tainted syzkaller #0 PREEMPT(full) [ 233.879905][ T9773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.879918][ T9773] Call Trace: [ 233.879926][ T9773] [ 233.879935][ T9773] dump_stack_lvl+0xe8/0x150 [ 233.879970][ T9773] should_fail_ex+0x3eb/0x540 [ 233.879997][ T9773] should_failslab+0xa8/0x100 [ 233.880021][ T9773] __kvmalloc_node_noprof+0x171/0x820 [ 233.880056][ T9773] ? __se_sys_add_key+0x289/0x420 [ 233.880208][ T9773] ? __se_sys_add_key+0x289/0x420 [ 233.880236][ T9773] ? memdup_user+0x99/0xd0 [ 233.880281][ T9773] __se_sys_add_key+0x289/0x420 [ 233.880311][ T9773] ? __pfx___se_sys_add_key+0x10/0x10 [ 233.880356][ T9773] ? __x64_sys_add_key+0x20/0xc0 [ 233.880387][ T9773] do_syscall_64+0x166/0x520 [ 233.880409][ T9773] ? trace_irq_disable+0x3b/0x140 [ 233.880434][ T9773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.880455][ T9773] ? clear_bhb_loop+0x70/0xc0 [ 233.880479][ T9773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.880500][ T9773] RIP: 0033:0x7f88fc39e159 [ 233.880519][ T9773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.880537][ T9773] RSP: 002b:00007f88fd226028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 233.880559][ T9773] RAX: ffffffffffffffda RBX: 00007f88fc625fa0 RCX: 00007f88fc39e159 [ 233.880574][ T9773] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000100 [ 233.880588][ T9773] RBP: 00007f88fc43506b R08: fffffffffffffffe R09: 0000000000000000 [ 233.880602][ T9773] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000000 [ 233.880615][ T9773] R13: 00007f88fc626038 R14: 00007f88fc625fa0 R15: 00007ffec51aa358 [ 233.880647][ T9773] [ 234.331245][ T30] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 234.487215][ T30] usb 6-1: unable to get BOS descriptor or descriptor too short [ 234.487711][ T30] usb 6-1: not running at top speed; connect to a high speed hub [ 234.487741][ T30] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 234.489426][ T30] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 234.489450][ T30] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 234.489470][ T30] usb 6-1: config 14 has no interface number 0 [ 234.489486][ T30] usb 6-1: config 14 has no interface number 1 [ 234.489544][ T30] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 234.489567][ T30] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 234.489592][ T30] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 234.489615][ T30] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 234.489642][ T30] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 234.489667][ T30] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 234.489688][ T30] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.489713][ T30] usb 6-1: config 14 interface 57 has no altsetting 0 [ 234.489731][ T30] usb 6-1: config 14 interface 228 has no altsetting 0 [ 234.678093][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.678118][ T30] usb 6-1: Product: syz [ 234.678133][ T30] usb 6-1: Manufacturer: syz [ 234.678147][ T30] usb 6-1: SerialNumber: syz [ 235.258676][ T30] legousbtower 6-1:14.57: interrupt endpoints not found [ 235.662740][ T30] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 235.667027][ T30] legousbtower 6-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 239.813057][ T5697] usb 6-1: USB disconnect, device number 10 [ 239.847259][ T5697] legousbtower 6-1:14.228: LEGO USB Tower #-159 now disconnected [ 241.080940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 241.804918][ T9795] FAULT_INJECTION: forcing a failure. [ 241.804918][ T9795] name failslab, interval 1, probability 0, space 0, times 0 [ 241.804950][ T9795] CPU: 1 UID: 0 PID: 9795 Comm: syz.5.1086 Not tainted syzkaller #0 PREEMPT(full) [ 241.804981][ T9795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.804993][ T9795] Call Trace: [ 241.805001][ T9795] [ 241.805011][ T9795] dump_stack_lvl+0xe8/0x150 [ 241.805043][ T9795] should_fail_ex+0x3eb/0x540 [ 241.805071][ T9795] should_failslab+0xa8/0x100 [ 241.805094][ T9795] ? can_rx_register+0x16d/0x7a0 [ 241.805115][ T9795] kmem_cache_alloc_noprof+0x9c/0x600 [ 241.805143][ T9795] ? can_rx_register+0x6c1/0x7a0 [ 241.805163][ T9795] ? can_rx_register+0x16d/0x7a0 [ 241.805189][ T9795] can_rx_register+0x16d/0x7a0 [ 241.805219][ T9795] ? __pfx_raw_rcv+0x10/0x10 [ 241.805245][ T9795] raw_enable_filters+0x98/0x200 [ 241.805275][ T9795] raw_setsockopt+0xf0e/0x1440 [ 241.805303][ T9795] ? __pfx_aa_sk_perm+0x10/0x10 [ 241.805326][ T9795] ? __pfx_raw_setsockopt+0x10/0x10 [ 241.805349][ T9795] ? aa_sock_opt_perm+0x142/0x1e0 [ 241.805377][ T9795] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 241.805399][ T9795] ? __pfx_raw_setsockopt+0x10/0x10 [ 241.805423][ T9795] do_sock_setsockopt+0x17c/0x1b0 [ 241.805450][ T9795] __x64_sys_setsockopt+0x13d/0x1b0 [ 241.805477][ T9795] do_syscall_64+0x166/0x520 [ 241.805496][ T9795] ? trace_irq_disable+0x3b/0x140 [ 241.805524][ T9795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.805545][ T9795] ? clear_bhb_loop+0x70/0xc0 [ 241.805569][ T9795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.805590][ T9795] RIP: 0033:0x7f8ebbf9e159 [ 241.805609][ T9795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.805626][ T9795] RSP: 002b:00007f8ebce7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 241.805648][ T9795] RAX: ffffffffffffffda RBX: 00007f8ebc225fa0 RCX: 00007f8ebbf9e159 [ 241.805664][ T9795] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000004 [ 241.805677][ T9795] RBP: 00007f8ebc03506b R08: 0000000000000f00 R09: 0000000000000000 [ 241.805690][ T9795] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 241.805703][ T9795] R13: 00007f8ebc226038 R14: 00007f8ebc225fa0 R15: 00007ffd4e610488 [ 241.805734][ T9795] [ 243.403381][ T9818] netlink: 'syz.7.1090': attribute type 4 has an invalid length. [ 243.442611][ T9818] netlink: 'syz.7.1090': attribute type 4 has an invalid length. [ 245.956746][ T9833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.056591][ T9834] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 254.297203][ C1] sched: DL replenish lagged too much [ 255.888982][ T1258] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.903402][ T1258] ieee802154 phy1 wpan1: encryption failed: -22 [ 290.063623][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 317.807869][ T1258] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.823461][ T1258] ieee802154 phy1 wpan1: encryption failed: -22 [ 354.071322][ T9851] Bluetooth: hci2: command tx timeout [ 354.071366][ T9851] Bluetooth: hci3: command tx timeout [ 378.765057][ T1258] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.781388][ T1258] ieee802154 phy1 wpan1: encryption failed: -22 [ 412.009895][ T32] INFO: task kworker/0:2:989 blocked for more than 144 seconds. [ 412.009923][ T32] Not tainted syzkaller #0 [ 412.009934][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.009944][ T32] task:kworker/0:2 state:D stack:20208 pid:989 tgid:989 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 412.010001][ T32] Workqueue: events_power_efficient reg_check_chans_work [ 412.010237][ T32] Call Trace: [ 412.010249][ T32] [ 412.010264][ T32] __schedule+0x17dd/0x5940 [ 412.028631][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 412.028716][ T32] ? __pfx___schedule+0x10/0x10 [ 412.028754][ T32] ? schedule+0x90/0x2b0 [ 412.028785][ T32] schedule+0x164/0x2b0 [ 412.028815][ T32] schedule_preempt_disabled+0x13/0x30 [ 412.028843][ T32] __mutex_lock+0x7c4/0x15a0 [ 412.028866][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 412.028889][ T32] ? reg_check_chans_work+0xac/0x1110 [ 412.028920][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 412.028946][ T32] ? look_up_lock_class+0x57/0x110 [ 412.028975][ T32] ? register_lock_class+0x31/0x2e0 [ 412.029012][ T32] reg_check_chans_work+0xac/0x1110 [ 412.029051][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 412.029077][ T32] ? __pfx_reg_check_chans_work+0x10/0x10 [ 412.029109][ T32] ? lock_acquire+0x115/0x350 [ 412.029145][ T32] ? rcu_is_watching+0x16/0xb0 [ 412.029167][ T32] ? process_scheduled_works+0x97a/0x1630 [ 412.029192][ T32] process_scheduled_works+0xc3d/0x1630 [ 412.029244][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 412.029274][ T32] ? assign_work+0x3cf/0x5d0 [ 412.029301][ T32] worker_thread+0xa47/0xfb0 [ 412.029336][ T32] ? __kthread_parkme+0x71/0x1f0 [ 412.029371][ T32] kthread+0x38b/0x480 [ 412.029406][ T32] ? __pfx_worker_thread+0x10/0x10 [ 412.029428][ T32] ? __pfx_kthread+0x10/0x10 [ 412.029456][ T32] ret_from_fork+0x514/0xb70 [ 412.029502][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 412.029529][ T32] ? __switch_to+0xc89/0x1420 [ 412.029561][ T32] ? __pfx_kthread+0x10/0x10 [ 412.029590][ T32] ret_from_fork_asm+0x1a/0x30 [ 412.029633][ T32] [ 412.029773][ T32] [ 412.029773][ T32] Showing all locks held in the system: [ 412.029783][ T32] locks held by kthreadd/2: 2, last CPU#0: [ 412.029893][ T32] #0: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 412.030033][ T32] #1: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 412.030083][ T32] locks held by kworker/R-rcu_g/4: 1, last CPU#1: [ 412.030097][ T32] #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 412.030150][ T32] locks held by kworker/R-kvfre/6: 1, on CPU#0: [ 412.030164][ T32] #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 412.030215][ T32] locks held by kworker/0:0/9: 3, last CPU#0: [ 412.030227][ T32] #0: ffff88803245b540 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.030284][ T32] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.048609][ T32] #2: ffff88807eb29440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 412.048778][ T32] locks held by kworker/0:1/10: 3, last CPU#0: [ 412.048793][ T32] #0: ffff88805c9f0d40 ((wq_completion)wg-kex-wg0#14){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.048849][ T32] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.048913][ T32] #2: ffff888029285270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 412.048967][ T32] locks held by kworker/u8:0/12: 3, last CPU#0: [ 412.048981][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.049031][ T32] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.049082][ T32] #2: ffff88805b7907a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 412.049170][ T32] locks held by kworker/u8:1/13: 4, last CPU#0: [ 412.049184][ T32] #0: ffff888033bc9940 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.049234][ T32] #1: ffffc90000127c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.049285][ T32] #2: ffff88807b539440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 412.049338][ T32] #3: ffff88807bd55270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 412.049397][ T32] locks held by kworker/R-mm_pe/14: 1, on CPU#0: [ 412.049411][ T32] #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 412.049465][ T32] locks held by kworker/1:0/25: 4, last CPU#1: [ 412.049479][ T32] #0: ffff888022bae540 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.049534][ T32] #1: ffffc900001f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.049599][ T32] #2: ffff88807f77d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 412.049653][ T32] #3: ffff88807ae9f028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 412.049708][ T32] locks held by kworker/1:1/30: 2, last CPU#1: [ 412.049722][ T32] #0: ffff88805cf82540 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.049771][ T32] #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.049835][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 412.049849][ T32] #0: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 412.049912][ T32] locks held by kworker/u8:2/38: 2, last CPU#0: [ 412.049926][ T32] #0: ffff888035220140 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.049980][ T32] #1: ffffc90000ae7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.050034][ T32] locks held by kworker/1:2/50: 3, last CPU#1: [ 412.050048][ T32] #0: ffff88805cb2e940 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.050103][ T32] #1: ffffc90000bb7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.050167][ T32] #2: ffff88807b1834b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 412.050226][ T32] locks held by kworker/1:3/51: 3, last CPU#1: [ 412.050240][ T32] #0: ffff88803245b540 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.050299][ T32] #1: ffffc90000bc7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.449646][ T32] #2: ffff888029286640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 412.449704][ T32] locks held by kworker/u8:3/52: 4, on CPU#1: [ 412.449720][ T32] #0: ffff888077164940 ((wq_completion)wg-kex-wg0#13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.449776][ T32] #1: ffffc90000bd7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.449826][ T32] #2: ffff888029d51440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 412.449879][ T32] #3: ffff888029285c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 412.449932][ T32] locks held by kworker/u8:4/58: 3, last CPU#0: [ 412.449946][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.449996][ T32] #1: ffffc90001447c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.450046][ T32] #2: ffff888064af07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 412.450100][ T32] locks held by kworker/u8:5/62: 4, on CPU#0: [ 412.450114][ T32] #0: ffff888029b21140 ((wq_completion)wg-kex-wg2#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.450168][ T32] #1: ffffc9000203fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.450218][ T32] #2: ffff88807eb29440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 412.450271][ T32] #3: ffff888029286640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 412.467962][ T32] locks held by kworker/u8:6/167: 3, last CPU#0: [ 412.467984][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.468043][ T32] #1: ffffc900025efc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.468093][ T32] #2: ffff8880625107a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 412.468150][ T32] locks held by kworker/0:2/989: 3, on CPU#0: [ 412.468164][ T32] #0: ffff88813ff41d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.468219][ T32] #1: ffffc90004e37c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.468267][ T32] #2: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110 [ 412.468331][ T32] locks held by kworker/u8:7/1159: 3, last CPU#0: [ 412.468343][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.468394][ T32] #1: ffffc90005267c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.468444][ T32] #2: ffff888064ae07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 412.468496][ T32] locks held by kworker/u8:8/1217: 4, last CPU#0: [ 412.468510][ T32] #0: ffff888033bc9940 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.468559][ T32] #1: ffffc90005877c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.468609][ T32] #2: ffff88807b539440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 412.468664][ T32] #3: ffff88807bd54888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 412.468719][ T32] locks held by kworker/u8:9/1270: 3, last CPU#0: [ 412.468736][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.468785][ T32] #1: ffffc900059f7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.468835][ T32] #2: ffff8880561207a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 412.468886][ T32] locks held by kworker/u8:10/1275: 4, last CPU#0: [ 412.468899][ T32] #0: ffff88807a1e6940 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.468952][ T32] #1: ffffc90005b27c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.469003][ T32] #2: ffff88802039d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 412.469056][ T32] #3: ffff88807b182ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 412.469108][ T32] locks held by kworker/u8:11/1286: 3, last CPU#0: [ 412.469122][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.469172][ T32] #1: ffffc90005ad7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.469221][ T32] #2: ffff8880560307a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 412.469271][ T32] locks held by kworker/u8:12/1296: 4, last CPU#0: [ 412.469291][ T32] #0: ffff88807a1e6140 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.469344][ T32] #1: ffffc90005b67c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.469394][ T32] #2: ffff88807f43d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 412.469447][ T32] #3: ffff88807b181700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 412.469499][ T32] locks held by kworker/u8:13/1309: 3, last CPU#0: [ 412.469512][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.469561][ T32] #1: ffffc90005a57c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.469609][ T32] #2: ffff888074dd07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 412.469676][ T32] locks held by kworker/R-ipv6_/3200: 3, on CPU#1: [ 412.469690][ T32] #0: ffff8880323ae140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.469739][ T32] #1: ffffc9000e69fc20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.469789][ T32] #2: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 412.469978][ T32] locks held by kworker/R-bat_e/3231: 3, last CPU#1: [ 412.469993][ T32] #0: ffff888032abd140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.470042][ T32] #1: ffffc9000e86fc20 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.470092][ T32] #2: ffffffff8ef5c8c0 (rcu_callback){....}-{0:0}, at: rcu_core+0x8a8/0x1260 [ 412.470148][ T32] locks held by kworker/u9:1/4936: 5, on CPU#0: [ 412.470161][ T32] #0: ffff88802cec6940 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.470209][ T32] #1: ffffc90006d77c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.470258][ T32] #2: ffff888079890ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 412.488053][ T32] #3: ffff8880798900b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170 [ 412.488191][ T32] #4: ffffffff8ef62b68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 [ 412.488247][ T32] locks held by udevd/4986: 2, last CPU#0: [ 412.488261][ T32] #0: ffffffff8f6f2998 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 412.488355][ T32] #1: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 412.488411][ T32] locks held by dhcpcd/5280: 1, last CPU#0: [ 412.488425][ T32] #0: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 412.488480][ T32] locks held by getty/5377: 2, on CPU#0: [ 412.488494][ T32] #0: ffff88803298e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 412.488601][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 412.488654][ T32] locks held by syz-executor/5603: 2, last CPU#0: [ 412.488668][ T32] #0: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 412.488722][ T32] #1: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 412.488769][ T32] locks held by kworker/R-wg-cr/5675: 1, on CPU#0: [ 412.488783][ T32] #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 412.488833][ T32] locks held by kworker/R-wg-cr/5676: 1, on CPU#0: [ 412.488846][ T32] #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 412.488901][ T32] locks held by kworker/R-wg-cr/5679: 1, on CPU#0: [ 412.488915][ T32] #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 412.488965][ T32] locks held by kworker/1:4/5690: 4, last CPU#1: [ 412.488979][ T32] #0: ffff88805bd13d40 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.489037][ T32] #1: ffffc900041ffc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.489104][ T32] #2: ffff88802be95440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 412.489160][ T32] #3: ffff88807b180330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 412.489214][ T32] locks held by kworker/1:5/5697: 3, last CPU#1: [ 412.489228][ T32] #0: ffff88805b672d40 ((wq_completion)wg-kex-wg0#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.489290][ T32] #1: ffffc9000427fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.489353][ T32] #2: ffff88807ae9acb0 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 412.489444][ T32] locks held by kworker/0:3/5704: 3, last CPU#0: [ 412.489459][ T32] #0: ffff888022bae540 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.489513][ T32] #1: ffffc900042efc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.489577][ T32] #2: ffff88807bd57028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 412.489631][ T32] locks held by kworker/0:5/5719: 3, last CPU#0: [ 412.489645][ T32] #0: ffff88805bd13d40 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.489699][ T32] #1: ffffc900043dfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.489766][ T32] #2: ffff88807b180ef8 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 412.489816][ T32] locks held by kworker/1:6/5723: 3, last CPU#1: [ 412.489830][ T32] #0: ffff88805cf82940 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.489884][ T32] #1: ffffc900043ffc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.489952][ T32] #2: ffff88807bd55c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 412.490006][ T32] locks held by kworker/1:8/5773: 3, last CPU#1: [ 412.490020][ T32] #0: ffff88805c9f0d40 ((wq_completion)wg-kex-wg0#14){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.490074][ T32] #1: ffffc9000498fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.490137][ T32] #2: ffff888029285c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 412.490191][ T32] locks held by kworker/0:6/7724: 3, on CPU#0: [ 412.490205][ T32] #0: ffff88813ff43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.490258][ T32] #1: ffffc90004abfc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 420.501090][ T32] #2: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 420.501267][ T32] locks held by syz-executor/8091: 4, last CPU#1: [ 420.501283][ T32] #0: ffff888079004460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 420.501346][ T32] #1: ffff8880721714d0 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x2a7/0x610 [ 420.501443][ T32] #2: ffffffff8f6f2998 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 420.501492][ T32] #3: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 420.501546][ T32] locks held by kworker/R-wg-cr/8177: 1, on CPU#0: [ 420.501561][ T32] #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 420.501613][ T32] locks held by kworker/R-wg-cr/8178: 1, on CPU#0: [ 420.501627][ T32] #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 420.501687][ T32] locks held by syz-executor/8405: 2, last CPU#1: