last executing test programs: 7.920206635s ago: executing program 2 (id=2153): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='proc\x00', 0x1a) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x40, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) read$FUSE(r0, 0x0, 0x0) r1 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000480)) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$md_new_array(r1, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r3, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r3, 0x400c0930, &(0x7f0000000240)) 7.793630908s ago: executing program 2 (id=2156): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) 7.66897812s ago: executing program 1 (id=2158): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) 7.119450886s ago: executing program 1 (id=2161): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='27', 0x2) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000780)='1.', 0x2) 6.647015614s ago: executing program 1 (id=2162): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev_mnt\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.573203502s ago: executing program 2 (id=2163): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd03010000092100000001220100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000200), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, 0x0) 4.483332544s ago: executing program 1 (id=2171): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x40, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="401001"], 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x4, 0x16e, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x75, 0xba, 0xc4, 0x40, 0x10c4, 0x80f6, 0x9a99, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15c, 0x1, 0x5, 0x7, 0xb0, 0x81, "", [{{0x9, 0x4, 0x9, 0xf, 0x4, 0x48, 0xb2, 0x7d, 0x7, [@hid_hid={0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0x138}}], [{{0x9, 0x5, 0x80, 0xc, 0x10, 0x8d, 0x5, 0x57}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x7, 0x16, 0x2, [@generic={0xd3, 0x3, "b115e49753d5db352cb2969fffb46480af6afaad37ba414ca6fe2c0c2170ca3d0b0edd9f81a0bb068df0ee22798804f9a48b87a3238922cfbb314fefd36ef1372552b3470925f83831203573b7b4a58fa6c9a3998e197395075c6e58b50b4eeb496b7f57f2ae16831efdd48e451b5a3237e5ec604eee06ecfcf72442bc98335dfaf08085af91f1ee063d667f3ac66cda491065da859d4d08508d2010e338a7b7a8e68c3dfebbca1975f72a0bca4349eeca4073f87a4686e1d781a7476025911e2d1ce1b11069c6d1d42d56b3907972c3e7"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x40, 0x7, 0x9, 0x9d}}, {{0x9, 0x5, 0x2, 0x8, 0x200, 0x4f, 0x9, 0x0, [@generic={0x4a, 0x8, "1d4d43b8540d583fa7913546c49e7ef9c63ff24cf60eb4be2fb32292205af324eaee19b5366b9c452c61cb32cd12e23c45c73562827269634e271aee59901e8b4efc37287ba70132"}]}}]}}]}}]}}, 0x0) syz_usb_ep_write(r1, 0x81, 0xffffffffffffffac, &(0x7f0000000140)="9001000000000000") read$char_usb(r2, &(0x7f0000001640)=""/243, 0xf3) 3.461694268s ago: executing program 4 (id=2175): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x1, 0x2, 0x2, "90"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 3.428731311s ago: executing program 2 (id=2176): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvfrom(r2, &(0x7f00000002c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x3}, 0x10, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2.472016299s ago: executing program 1 (id=2185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x6}}, 0x6}, 0x1c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="29000000140005b7ff000000040860eb0101b6", 0x13) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.278644718s ago: executing program 2 (id=2186): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='proc\x00', 0x1a) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x40, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) read$FUSE(r0, 0x0, 0x0) openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000480)) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r2, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r2, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r2, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r2, 0x400c0930, &(0x7f0000000240)) 2.088670448s ago: executing program 2 (id=2187): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd03010000092100000001220100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000200), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, 0x0) 2.06214517s ago: executing program 1 (id=2188): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x0, 0x95, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0xf8, 0x20, 0x0, {0x8, 0xb, 0x2, 0x0, 0x1, 0x6, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x4, 0xf, 0xde}, [@selector_unit={0x6, 0x24, 0xb, 0x8, 0x1, 'h'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xfb, 0x8, 0x4, 0x8, 0x6}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x1, 0x6, 0x1, "abbbf0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x8, 0x1, {0x8, 0x25, 0x1, 0x2, 0x30, 0xff, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8e, 0x4e, 0x1, {0x8, 0x25, 0x1, 0x85, 0xc, 0xb, 0xfffc}}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x80a, 0x7, 0x4, 0x7, 0x5, 0x3, 0x7, 0x47, 0x14, 0x9, 0x7e4, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200f14"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="400cf202"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.441045043s ago: executing program 4 (id=2191): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='27', 0x2) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000780)='1.', 0x2) 1.042313304s ago: executing program 3 (id=2192): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='proc\x00', 0x1a) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x40, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) read$FUSE(r0, 0x0, 0x0) r1 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000480)) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$md_new_array(r1, 0x0, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r3, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r3, 0x400c0930, &(0x7f0000000240)) 962.250712ms ago: executing program 4 (id=2193): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000140)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='10', 0x2) kexec_load(0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40000000, 0x1980000}], 0x0) 919.786646ms ago: executing program 3 (id=2194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="29000000140005b7ff00", 0xa) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 710.136568ms ago: executing program 3 (id=2195): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='0\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000440)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='readonly\n', 0x9) 676.959261ms ago: executing program 4 (id=2196): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x101081, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/md0\x00', 0x105042, 0x0) ioctl(r1, 0x40480923, &(0x7f00000005c0)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") syz_open_dev$evdev(&(0x7f0000000140), 0x72, 0x2) ioctl(r1, 0x40140921, &(0x7f0000000640)="0100000001000000010000000100000006") unshare(0x40200) r2 = semget(0x2, 0x3, 0x39c) semop(r2, 0x0, 0x0) ioctl(r1, 0x400c0930, 0x0) ioctl(r1, 0x40140921, 0x0) openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000880)={'/sys/block/md', @num=0x0, '/md/', @array='bitmap/location\x00'}, 0x2, 0x0) 591.9308ms ago: executing program 3 (id=2197): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='mtd0\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='jffs2\x00', 0x800000, 0x0) utimes(0x0, 0x0) 591.25476ms ago: executing program 0 (id=2207): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='0\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000440)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='readonly\n', 0x9) 572.457672ms ago: executing program 4 (id=2198): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./sys\x00', &(0x7f00000008c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f00000002c0)='wg2\x00', 0x4) bind$xdp(r4, &(0x7f00000003c0)={0x2c, 0x0, r3, 0x2a, r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001004000000000000000000000000000a3c000000090a010200000000000000000700000008000a40000000000900020073797a30000000000900010073797a31000000000000000000000000000084000a36decb9a16574c5c5c851f2622ed747a0f9c10bb34e49a474ecc18dfed45095c52bcda49000000"], 0x64}}, 0x20050800) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000400)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1f, 0x4010012, r0, 0x0) socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x200, 0x3}, &(0x7f0000000100)=0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000740)={'syzkaller1\x00', 0xc201}) socket$inet6_tcp(0xa, 0x1, 0x0) 460.433463ms ago: executing program 3 (id=2199): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x1}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x70, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) 448.578214ms ago: executing program 0 (id=2200): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='proc\x00', 0x1a) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x40, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) read$FUSE(r0, 0x0, 0x0) r1 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000480)) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$md_new_array(r1, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r3, 0x40140921, &(0x7f0000000640)={0x4, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r3, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r3, 0x400c0930, &(0x7f0000000240)) 443.230205ms ago: executing program 4 (id=2201): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) 379.835301ms ago: executing program 3 (id=2202): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev_mnt\x00', 0x1ff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) 303.504199ms ago: executing program 0 (id=2203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x6}}, 0x6}, 0x1c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="29000000140005b7ff000000040860eb0101b6", 0x13) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 133.889037ms ago: executing program 0 (id=2204): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='proc\x00', 0x1a) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x40, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x82, 0x184) read$FUSE(r0, 0x0, 0x0) r1 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000480)) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$md_new_array(r1, 0x0, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$ADD_NEW_DISK(r3, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r3, 0x400c0930, &(0x7f0000000240)) 70.284913ms ago: executing program 0 (id=2205): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='0\n', 0x2) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f00000004c0)='writemostly\n', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r6, &(0x7f0000000640)='readonly\n', 0x9) 0s ago: executing program 0 (id=2206): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="29000000140005b7ff00", 0xa) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): e= 0.00 [ 650.020366][ T4598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.040623][ T4598] usb 3-1: config 0 descriptor?? [ 650.156374][ T4349] usb 4-1: USB disconnect, device number 42 [ 650.277196][T11171] device-mapper: table: 248:8: thin-pool: Error opening metadata block device (-EBUSY) [ 650.288014][ T4550] usbhid 5-1:0.0: can't add hid device: -71 [ 650.296208][T11171] device-mapper: ioctl: error adding target to table [ 650.309272][ T4550] usbhid: probe of 5-1:0.0 failed with error -71 [ 650.345982][ T4550] usb 5-1: USB disconnect, device number 30 [ 650.454490][ T4598] savu 0003:1E7D:2D5A.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 650.467593][T11177] FAULT_INJECTION: forcing a failure. [ 650.467593][T11177] name fail_futex, interval 1, probability 0, space 0, times 0 [ 650.500926][T11177] CPU: 0 PID: 11177 Comm: syz.0.1992 Not tainted syzkaller #0 [ 650.508440][T11177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 650.518520][T11177] Call Trace: [ 650.521835][T11177] [ 650.524798][T11177] dump_stack_lvl+0x188/0x24e [ 650.529536][T11177] ? show_regs_print_info+0x12/0x12 [ 650.534776][T11177] ? load_image+0x410/0x410 [ 650.539335][T11177] should_fail_ex+0x390/0x4c0 [ 650.544053][T11177] get_futex_key+0x1a6/0xe70 [ 650.548679][T11177] ? futex_setup_timer+0xc0/0xc0 [ 650.553642][T11177] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 650.559645][T11177] ? __lock_acquire+0x7ea0/0x7ea0 [ 650.564703][T11177] ? lock_chain_count+0x20/0x20 [ 650.569605][T11177] futex_wait_setup+0xb8/0x270 [ 650.574402][T11177] ? futex_wait_multiple+0x970/0x970 [ 650.579707][T11177] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 650.585653][T11177] ? _raw_spin_unlock+0x40/0x40 [ 650.590526][T11177] futex_wait+0x1cb/0x640 [ 650.594885][T11177] ? futex_wait_setup+0x270/0x270 [ 650.599968][T11177] ? __mutex_lock+0x1ab/0xb40 [ 650.604685][T11177] do_futex+0x310/0x320 [ 650.608861][T11177] ? __ia32_sys_get_robust_list+0x100/0x100 [ 650.614786][T11177] __se_sys_futex+0x381/0x410 [ 650.619487][T11177] ? __x64_sys_futex+0xf0/0xf0 [ 650.624279][T11177] ? __x64_sys_futex+0x1d/0xf0 [ 650.629055][T11177] do_syscall_64+0x4c/0xa0 [ 650.633506][T11177] ? clear_bhb_loop+0x60/0xb0 [ 650.638202][T11177] ? clear_bhb_loop+0x60/0xb0 [ 650.642904][T11177] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.648834][T11177] RIP: 0033:0x7f755539f559 [ 650.653266][T11177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.672884][T11177] RSP: 002b:00007f755631b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 650.681315][T11177] RAX: ffffffffffffffda RBX: 00007f7555625fa8 RCX: 00007f755539f559 [ 650.689294][T11177] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7555625fa8 [ 650.697279][T11177] RBP: 00007f7555625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 650.705312][T11177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.713291][T11177] R13: 00007f7555626038 R14: 00007ffe48fe8590 R15: 00007ffe48fe8678 [ 650.721296][T11177] [ 650.809545][ T4349] usb 3-1: USB disconnect, device number 31 [ 650.876664][T11183] md: could not open device unknown-block(1,0). [ 650.883339][T11183] md: md_import_device returned -16 [ 650.889025][T11183] md: could not open device unknown-block(1,1). [ 650.896705][T11183] md: md_import_device returned -16 [ 650.902118][ T4351] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 651.036965][T11189] md: could not open device unknown-block(1,9). [ 651.043591][T11189] md: md_import_device returned -16 [ 651.099153][ T4351] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.117648][ T4351] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 651.132620][ T4351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.160042][ T4351] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 651.168061][ T4351] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 651.180564][ T4351] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 651.189246][ T4351] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 651.205652][ T4351] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 651.216074][ T4351] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 651.231487][ T4351] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 651.239197][ T4351] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 651.253695][ T4351] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 651.326314][ T7137] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 651.372326][ T4351] usb 4-1: USB disconnect, device number 43 [ 651.396289][ T4351] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 651.436672][ T4351] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 651.456095][ T4351] keyspan 4-1:1.0: device disconnected [ 651.525288][ T7137] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.540591][ T7137] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 651.556087][ T7137] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 651.571002][ T7137] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 651.584172][ T7137] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 651.593399][ T7137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.680833][ T4349] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 651.872646][ T4349] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.890878][ T4349] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 651.933847][ T4349] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 651.959295][ T4349] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 651.983856][ T4349] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 652.009573][T11201] device-mapper: table: 248:9: thin-pool: Error getting data device (-EBUSY) [ 652.012073][ T4349] usb 3-1: Manufacturer: syz [ 652.019859][T11201] device-mapper: ioctl: error adding target to table [ 652.036869][ T7137] gud: probe of 1-1:1.0 failed with error -71 [ 652.047614][ T7137] usb 1-1: USB disconnect, device number 30 [ 652.085410][ T4349] usb 3-1: config 0 descriptor?? [ 652.133942][ T4349] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 652.530837][ T4351] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 652.669180][T11216] md: could not open device unknown-block(1,0). [ 652.700909][T11216] md: md_import_device returned -16 [ 652.711373][T11216] md: could not open device unknown-block(1,1). [ 652.717715][T11216] md: md_import_device returned -16 [ 652.724558][ T4351] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.750923][ T4351] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 652.790809][ T4351] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 652.800721][ T4351] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 652.827072][T11219] md: couldn't update array info. -22 [ 652.834270][ T4351] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 652.850821][ T4351] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 14 [ 652.875829][T11219] md: could not open device unknown-block(1,6). [ 652.896043][T11219] md: md_import_device returned -16 [ 652.901632][ T4351] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 652.925820][ T4351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.940805][ T4351] usb 5-1: Product: syz [ 652.945124][ T4351] usb 5-1: Manufacturer: syz [ 652.949750][ T4351] usb 5-1: SerialNumber: syz [ 652.954833][T11221] md: invalid raid superblock magic on ram7 [ 652.964612][T11221] md: ram7 does not have a valid v0.90 superblock, not importing! [ 652.989796][T11208] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 653.009670][T11208] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 653.017080][T11208] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 653.024424][T11221] md: md_import_device returned -22 [ 653.032623][ T4351] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 653.040330][ T4351] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 87 [ 653.070870][ T4351] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 653.091227][ T4351] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 653.098855][ T4351] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 653.130869][ T4351] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 85 [ 653.138707][ T4351] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 5 [ 653.162410][ T4351] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 653.192336][ T4351] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 653.200049][ T4351] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 3 [ 653.230854][ T4351] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 4 [ 653.238473][ T4548] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 653.238502][ T4351] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 86 [ 653.277905][ T4351] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 653.291914][ T4351] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 653.303831][T11225] md: invalid raid superblock magic on ram7 [ 653.309778][T11225] md: ram7 does not have a valid v0.90 superblock, not importing! [ 653.341860][ T4351] usb 5-1: USB disconnect, device number 31 [ 653.361589][ T4351] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 653.380975][T11225] md: md_import_device returned -22 [ 653.394118][ T4351] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 653.422302][ T4351] keyspan 5-1:1.0: device disconnected [ 653.442385][ T4548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.462013][ T4548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.485654][ T4548] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 653.502486][ T4548] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.523484][ T4548] usb 1-1: config 0 descriptor?? [ 653.931990][ T4349] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 654.120930][ T4349] usb 2-1: Using ep0 maxpacket: 8 [ 654.127914][ T4349] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 654.146365][ T4548] usbhid 1-1:0.0: can't add hid device: -71 [ 654.153725][ T4548] usbhid: probe of 1-1:0.0 failed with error -71 [ 654.166054][ T4548] usb 1-1: USB disconnect, device number 31 [ 654.173484][ T4349] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 654.188038][ T4349] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 654.207595][ T4349] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.228579][ T4349] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 654.237982][ T4349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.454977][ T4548] usb 3-1: USB disconnect, device number 32 [ 654.464752][ T4349] usb 2-1: usb_control_msg returned -71 [ 654.470365][ T4349] usbtmc 2-1:16.0: can't read capabilities [ 654.515259][ T4349] usb 2-1: USB disconnect, device number 26 [ 654.545524][T11234] FAULT_INJECTION: forcing a failure. [ 654.545524][T11234] name failslab, interval 1, probability 0, space 0, times 0 [ 654.572113][T11234] CPU: 1 PID: 11234 Comm: syz.4.2015 Not tainted syzkaller #0 [ 654.579616][T11234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 654.589704][T11234] Call Trace: [ 654.593020][T11234] [ 654.595987][T11234] dump_stack_lvl+0x188/0x24e [ 654.600721][T11234] ? show_regs_print_info+0x12/0x12 [ 654.605973][T11234] ? load_image+0x410/0x410 [ 654.610530][T11234] ? __might_sleep+0xd0/0xd0 [ 654.615165][T11234] ? __lock_acquire+0x7ea0/0x7ea0 [ 654.620241][T11234] should_fail_ex+0x390/0x4c0 [ 654.625021][T11234] should_failslab+0x5/0x20 [ 654.629569][T11234] slab_pre_alloc_hook+0x59/0x300 [ 654.634643][T11234] ? __register_sysctl_table+0x9b0/0xed0 [ 654.640321][T11234] __kmem_cache_alloc_node+0x4f/0x270 [ 654.645746][T11234] ? __register_sysctl_table+0x9b0/0xed0 [ 654.651408][T11234] __kmalloc+0xa3/0x240 [ 654.655601][T11234] __register_sysctl_table+0x9b0/0xed0 [ 654.661100][T11234] setup_mq_sysctls+0x4d1/0x560 [ 654.665993][T11234] copy_ipcs+0x2fc/0x500 [ 654.670300][T11234] create_new_namespaces+0x212/0x700 [ 654.675667][T11234] unshare_nsproxy_namespaces+0x116/0x160 [ 654.681426][T11234] ksys_unshare+0x4f6/0x8e0 [ 654.685967][T11234] ? sighand_ctor+0x40/0x40 [ 654.690502][T11234] ? lock_chain_count+0x20/0x20 [ 654.695397][T11234] ? syscall_enter_from_user_mode+0x21/0x80 [ 654.701334][T11234] __x64_sys_unshare+0x34/0x40 [ 654.706130][T11234] do_syscall_64+0x4c/0xa0 [ 654.710630][T11234] ? clear_bhb_loop+0x60/0xb0 [ 654.715348][T11234] ? clear_bhb_loop+0x60/0xb0 [ 654.720083][T11234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 654.726026][T11234] RIP: 0033:0x7fa1dc99f559 [ 654.730471][T11234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.750104][T11234] RSP: 002b:00007fa1dd923028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 654.758550][T11234] RAX: ffffffffffffffda RBX: 00007fa1dcc25fa0 RCX: 00007fa1dc99f559 [ 654.766557][T11234] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 654.774569][T11234] RBP: 00007fa1dca36b50 R08: 0000000000000000 R09: 0000000000000000 [ 654.782579][T11234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.790584][T11234] R13: 00007fa1dcc26038 R14: 00007fa1dcc25fa0 R15: 00007fffb7341808 [ 654.798603][T11234] [ 654.877718][T11234] sysctl could not get directory: /fs -12 [ 654.884559][T11234] CPU: 1 PID: 11234 Comm: syz.4.2015 Not tainted syzkaller #0 [ 654.892069][T11234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 654.902173][T11234] Call Trace: [ 654.905489][T11234] [ 654.908456][T11234] dump_stack_lvl+0x188/0x24e [ 654.913207][T11234] ? show_regs_print_info+0x12/0x12 [ 654.918465][T11234] ? slab_free_freelist_hook+0x133/0x1b0 [ 654.924155][T11234] ? __register_sysctl_table+0xe35/0xed0 [ 654.929821][T11234] ? __kmem_cache_free+0xb6/0x200 [ 654.934882][T11234] __register_sysctl_table+0xe3a/0xed0 [ 654.940395][T11234] setup_mq_sysctls+0x4d1/0x560 [ 654.945315][T11234] copy_ipcs+0x2fc/0x500 [ 654.949607][T11234] create_new_namespaces+0x212/0x700 [ 654.954953][T11234] unshare_nsproxy_namespaces+0x116/0x160 [ 654.960745][T11234] ksys_unshare+0x4f6/0x8e0 [ 654.965274][T11234] ? sighand_ctor+0x40/0x40 [ 654.969787][T11234] ? lock_chain_count+0x20/0x20 [ 654.974668][T11234] ? syscall_enter_from_user_mode+0x21/0x80 [ 654.980585][T11234] __x64_sys_unshare+0x34/0x40 [ 654.985363][T11234] do_syscall_64+0x4c/0xa0 [ 654.989800][T11234] ? clear_bhb_loop+0x60/0xb0 [ 654.994502][T11234] ? clear_bhb_loop+0x60/0xb0 [ 654.999219][T11234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 655.005146][T11234] RIP: 0033:0x7fa1dc99f559 [ 655.009579][T11234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.029206][T11234] RSP: 002b:00007fa1dd923028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 655.037636][T11234] RAX: ffffffffffffffda RBX: 00007fa1dcc25fa0 RCX: 00007fa1dc99f559 [ 655.045625][T11234] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 655.053634][T11234] RBP: 00007fa1dca36b50 R08: 0000000000000000 R09: 0000000000000000 [ 655.061635][T11234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.069615][T11234] R13: 00007fa1dcc26038 R14: 00007fa1dcc25fa0 R15: 00007fffb7341808 [ 655.077606][T11234] [ 655.246559][T11251] md: could not open device unknown-block(1,2). [ 655.264590][T11251] md: md_import_device returned -16 [ 655.291307][T11251] md: could not open device unknown-block(1,3). [ 655.297642][T11251] md: md_import_device returned -16 [ 655.351421][T11256] FAULT_INJECTION: forcing a failure. [ 655.351421][T11256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.393796][T11256] CPU: 0 PID: 11256 Comm: syz.4.2020 Not tainted syzkaller #0 [ 655.401313][T11256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 655.409639][T11258] md: could not open device unknown-block(1,5). [ 655.411387][T11256] Call Trace: [ 655.411398][T11256] [ 655.411407][T11256] dump_stack_lvl+0x188/0x24e [ 655.411449][T11256] ? show_regs_print_info+0x12/0x12 [ 655.420708][T11258] md: md_import_device returned -16 [ 655.421053][T11256] ? load_image+0x410/0x410 [ 655.421086][T11256] ? __lock_acquire+0x7ea0/0x7ea0 [ 655.421124][T11256] should_fail_ex+0x390/0x4c0 [ 655.421154][T11256] _copy_from_user+0x2c/0x170 [ 655.458256][T11256] do_replace+0x2ec/0x430 [ 655.462757][T11256] ? do_ebt_get_ctl+0x1d00/0x1d00 [ 655.467834][T11256] ? bpf_lsm_capable+0x5/0x10 [ 655.472552][T11256] ? security_capable+0x85/0xb0 [ 655.477457][T11256] do_ebt_set_ctl+0x268/0xe80 [ 655.482184][T11256] ? ebt_pernet_exit+0x90/0x90 [ 655.487008][T11256] ? nf_setsockopt+0x218/0x280 [ 655.491814][T11256] ? __lock_acquire+0x7ea0/0x7ea0 [ 655.496886][T11256] ? trace_contention_end+0x5f/0x170 [ 655.502228][T11256] ? __mutex_lock+0x1ab/0xb40 [ 655.506973][T11256] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 655.512639][T11256] ? mutex_unlock+0x10/0x10 [ 655.517182][T11256] ? aa_sk_perm+0x795/0x8c0 [ 655.521814][T11256] ? __ia32_sys_get_robust_list+0x100/0x100 [ 655.527747][T11256] ? aa_af_perm+0x340/0x340 [ 655.532306][T11256] nf_setsockopt+0x25f/0x280 [ 655.536956][T11256] ? sock_common_recvmsg+0x190/0x190 [ 655.542320][T11256] __sys_setsockopt+0x2bf/0x3d0 [ 655.547218][T11256] __x64_sys_setsockopt+0xb1/0xc0 [ 655.552289][T11256] do_syscall_64+0x4c/0xa0 [ 655.556780][T11256] ? clear_bhb_loop+0x60/0xb0 [ 655.561512][T11256] ? clear_bhb_loop+0x60/0xb0 [ 655.566250][T11256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 655.572183][T11256] RIP: 0033:0x7fa1dc99f559 [ 655.576641][T11256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.596282][T11256] RSP: 002b:00007fa1dd902028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 655.604741][T11256] RAX: ffffffffffffffda RBX: 00007fa1dcc26090 RCX: 00007fa1dc99f559 [ 655.612749][T11256] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000004 [ 655.620750][T11256] RBP: 00007fa1dca36b50 R08: 0000000000000296 R09: 0000000000000000 [ 655.628789][T11256] R10: 0000200000000e00 R11: 0000000000000246 R12: 0000000000000000 [ 655.636797][T11256] R13: 00007fa1dcc26128 R14: 00007fa1dcc26090 R15: 00007fffb7341808 [ 655.644823][T11256] [ 655.777851][T11260] md: could not open device unknown-block(1,3). [ 655.794187][T11260] md: md_import_device returned -16 [ 656.100824][ T4598] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 656.153138][ T4548] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 656.181705][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2026'. [ 656.312808][ T4598] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.332906][ T4598] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 656.362429][ T4548] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.370913][ T4598] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 656.381067][ T4548] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 656.405067][ T4548] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.424900][ T4598] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 656.451407][ T4598] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 656.461959][ T4548] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 656.470900][ T4598] usb 5-1: Manufacturer: syz [ 656.489810][ T4548] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 656.496552][ T4598] usb 5-1: config 0 descriptor?? [ 656.514114][ T4598] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 656.531641][ T4548] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 656.567204][ T4548] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 656.580072][T11277] No source specified [ 656.595409][ T4548] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 656.634242][ T4548] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 656.666227][ T4548] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 656.693176][ T4548] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 656.725136][ T4548] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 656.756291][ T4548] usb 1-1: USB disconnect, device number 32 [ 656.786630][ T4548] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 656.826029][ T4548] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 656.846926][ T4548] keyspan 1-1:1.0: device disconnected [ 656.886655][T11273] md: md0: raid1 would not accept array [ 656.898119][T11278] md: could not open device unknown-block(1,0). [ 657.196429][T11296] md: could not open device unknown-block(1,2). [ 657.210574][T11296] md: md_import_device returned -16 [ 657.241683][T11296] md: could not open device unknown-block(1,3). [ 657.248005][T11296] md: md_import_device returned -16 [ 657.273712][T11285] md: md0: raid1 would not accept array [ 657.299902][T11294] md: could not open device unknown-block(1,0). [ 657.338025][T11299] FAULT_INJECTION: forcing a failure. [ 657.338025][T11299] name fail_futex, interval 1, probability 0, space 0, times 0 [ 657.360890][T11299] CPU: 0 PID: 11299 Comm: syz.2.2034 Not tainted syzkaller #0 [ 657.368394][T11299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 657.378493][T11299] Call Trace: [ 657.381827][T11299] [ 657.384797][T11299] dump_stack_lvl+0x188/0x24e [ 657.389554][T11299] ? show_regs_print_info+0x12/0x12 [ 657.394805][T11299] ? load_image+0x410/0x410 [ 657.399353][T11299] ? __cgroup_rstat_updated+0xce/0x350 [ 657.404853][T11299] ? rcu_read_lock_sched_held+0x86/0x110 [ 657.410574][T11299] should_fail_ex+0x390/0x4c0 [ 657.415295][T11299] get_futex_key+0x1a6/0xe70 [ 657.419933][T11299] ? futex_setup_timer+0xc0/0xc0 [ 657.424911][T11299] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 657.430933][T11299] ? __lock_acquire+0x7ea0/0x7ea0 [ 657.436003][T11299] ? lock_chain_count+0x20/0x20 [ 657.440899][T11299] futex_wait_setup+0xb8/0x270 [ 657.445709][T11299] ? futex_wait_multiple+0x970/0x970 [ 657.451040][T11299] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 657.456979][T11299] ? _raw_spin_unlock+0x40/0x40 [ 657.461885][T11299] futex_wait+0x1cb/0x640 [ 657.466268][T11299] ? futex_wait_setup+0x270/0x270 [ 657.471378][T11299] ? __mutex_lock+0x1ab/0xb40 [ 657.476125][T11299] do_futex+0x310/0x320 [ 657.480339][T11299] ? __ia32_sys_get_robust_list+0x100/0x100 [ 657.486275][T11299] __se_sys_futex+0x381/0x410 [ 657.490995][T11299] ? __x64_sys_futex+0xf0/0xf0 [ 657.495802][T11299] ? __x64_sys_futex+0x1d/0xf0 [ 657.500600][T11299] do_syscall_64+0x4c/0xa0 [ 657.505055][T11299] ? clear_bhb_loop+0x60/0xb0 [ 657.509782][T11299] ? clear_bhb_loop+0x60/0xb0 [ 657.514533][T11299] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 657.520470][T11299] RIP: 0033:0x7f544919f559 [ 657.524928][T11299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.544573][T11299] RSP: 002b:00007f54473f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 657.553023][T11299] RAX: ffffffffffffffda RBX: 00007f5449425fa8 RCX: 00007f544919f559 [ 657.561029][T11299] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5449425fa8 [ 657.569041][T11299] RBP: 00007f5449425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 657.577044][T11299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 657.585049][T11299] R13: 00007f5449426038 R14: 00007ffd89fc2480 R15: 00007ffd89fc2568 [ 657.593075][T11299] [ 657.627993][T11304] md: could not open device unknown-block(1,3). [ 657.634425][T11304] md: md_import_device returned -16 [ 657.768049][T11310] FAULT_INJECTION: forcing a failure. [ 657.768049][T11310] name failslab, interval 1, probability 0, space 0, times 0 [ 657.796542][T11310] CPU: 1 PID: 11310 Comm: syz.1.2038 Not tainted syzkaller #0 [ 657.804046][T11310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 657.814131][T11310] Call Trace: [ 657.817462][T11310] [ 657.820423][T11310] dump_stack_lvl+0x188/0x24e [ 657.825155][T11310] ? show_regs_print_info+0x12/0x12 [ 657.830453][T11310] ? load_image+0x410/0x410 [ 657.835006][T11310] ? __might_sleep+0xd0/0xd0 [ 657.839648][T11310] ? __lock_acquire+0x7ea0/0x7ea0 [ 657.844734][T11310] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 657.850763][T11310] should_fail_ex+0x390/0x4c0 [ 657.855533][T11310] should_failslab+0x5/0x20 [ 657.860093][T11310] slab_pre_alloc_hook+0x59/0x300 [ 657.865165][T11310] ? lockdep_hardirqs_on+0x94/0x140 [ 657.870407][T11310] ? setup_mq_sysctls+0x50/0x560 [ 657.875402][T11310] __kmem_cache_alloc_node+0x4f/0x270 [ 657.880818][T11310] ? setup_mq_sysctls+0x50/0x560 [ 657.885825][T11310] __kmalloc_node_track_caller+0xa0/0x240 [ 657.891635][T11310] kmemdup+0x27/0x60 [ 657.895613][T11310] setup_mq_sysctls+0x50/0x560 [ 657.900443][T11310] ? copy_ipcs+0x2e9/0x500 [ 657.904914][T11310] copy_ipcs+0x2fc/0x500 [ 657.909201][T11310] create_new_namespaces+0x212/0x700 [ 657.914550][T11310] unshare_nsproxy_namespaces+0x116/0x160 [ 657.920312][T11310] ksys_unshare+0x4f6/0x8e0 [ 657.924862][T11310] ? sighand_ctor+0x40/0x40 [ 657.929395][T11310] ? lock_chain_count+0x20/0x20 [ 657.934289][T11310] ? syscall_enter_from_user_mode+0x21/0x80 [ 657.940226][T11310] __x64_sys_unshare+0x34/0x40 [ 657.945031][T11310] do_syscall_64+0x4c/0xa0 [ 657.949516][T11310] ? clear_bhb_loop+0x60/0xb0 [ 657.954238][T11310] ? clear_bhb_loop+0x60/0xb0 [ 657.958957][T11310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 657.964886][T11310] RIP: 0033:0x7f0cfe99f559 [ 657.969333][T11310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.988970][T11310] RSP: 002b:00007f0cff8e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 657.997418][T11310] RAX: ffffffffffffffda RBX: 00007f0cfec25fa0 RCX: 00007f0cfe99f559 [ 658.005429][T11310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 658.013432][T11310] RBP: 00007f0cfea36b50 R08: 0000000000000000 R09: 0000000000000000 [ 658.021435][T11310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.029432][T11310] R13: 00007f0cfec26038 R14: 00007f0cfec25fa0 R15: 00007ffdff82c238 [ 658.037443][T11310] [ 658.120834][ T4598] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 658.312983][ T4598] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 658.323983][ T4598] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.341933][ T4598] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 658.361966][ T4598] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.388161][ T4598] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.421118][ T4598] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 658.442742][ T4598] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 658.459835][ T4598] usb 3-1: Product: syz [ 658.469749][ T4598] usb 3-1: Manufacturer: syz [ 658.506526][ T4598] cdc_wdm 3-1:1.0: skipping garbage [ 658.525838][ T4598] cdc_wdm 3-1:1.0: skipping garbage [ 658.542582][ T4598] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 658.555530][ T4598] cdc_wdm 3-1:1.0: Unknown control protocol [ 658.727439][ T4598] usb 3-1: USB disconnect, device number 33 [ 658.845123][T11330] md: could not open device unknown-block(1,0). [ 658.878796][ T4302] usb 5-1: USB disconnect, device number 32 [ 659.045922][T11334] md: couldn't update array info. -22 [ 659.066945][T11334] md: could not open device unknown-block(1,1). [ 659.121961][T11334] md: md_import_device returned -16 [ 659.137903][T11336] md: could not open device unknown-block(1,0). [ 659.144665][T11336] md: md_import_device returned -16 [ 659.170311][T11338] md: could not open device unknown-block(1,1). [ 659.189332][T11338] md: md_import_device returned -16 [ 659.270501][T11342] md: could not open device unknown-block(1,9). [ 659.310837][T11342] md: md_import_device returned -16 [ 659.351092][ T4598] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 659.380980][T11344] FAULT_INJECTION: forcing a failure. [ 659.380980][T11344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.451339][T11344] CPU: 0 PID: 11344 Comm: syz.0.2049 Not tainted syzkaller #0 [ 659.458947][T11344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 659.469041][T11344] Call Trace: [ 659.472348][T11344] [ 659.475322][T11344] dump_stack_lvl+0x188/0x24e [ 659.480075][T11344] ? show_regs_print_info+0x12/0x12 [ 659.485304][T11344] ? load_image+0x410/0x410 [ 659.489832][T11344] ? __lock_acquire+0x7ea0/0x7ea0 [ 659.494884][T11344] should_fail_ex+0x390/0x4c0 [ 659.499582][T11344] _copy_from_user+0x2c/0x170 [ 659.504280][T11344] do_replace+0x2ec/0x430 [ 659.508630][T11344] ? do_ebt_get_ctl+0x1d00/0x1d00 [ 659.513681][T11344] ? bpf_lsm_capable+0x5/0x10 [ 659.518392][T11344] ? security_capable+0x85/0xb0 [ 659.523290][T11344] do_ebt_set_ctl+0x268/0xe80 [ 659.527996][T11344] ? ebt_pernet_exit+0x90/0x90 [ 659.532797][T11344] ? nf_setsockopt+0x218/0x280 [ 659.537611][T11344] ? __lock_acquire+0x7ea0/0x7ea0 [ 659.542652][T11344] ? trace_contention_end+0x5f/0x170 [ 659.547951][T11344] ? __mutex_lock+0x1ab/0xb40 [ 659.552642][T11344] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 659.558287][T11344] ? mutex_unlock+0x10/0x10 [ 659.562796][T11344] ? aa_sk_perm+0x795/0x8c0 [ 659.567315][T11344] ? __ia32_sys_get_robust_list+0x100/0x100 [ 659.573223][T11344] ? aa_af_perm+0x340/0x340 [ 659.577752][T11344] nf_setsockopt+0x25f/0x280 [ 659.582372][T11344] ? sock_common_recvmsg+0x190/0x190 [ 659.587700][T11344] __sys_setsockopt+0x2bf/0x3d0 [ 659.592572][T11344] __x64_sys_setsockopt+0xb1/0xc0 [ 659.597626][T11344] do_syscall_64+0x4c/0xa0 [ 659.602064][T11344] ? clear_bhb_loop+0x60/0xb0 [ 659.606768][T11344] ? clear_bhb_loop+0x60/0xb0 [ 659.611480][T11344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 659.617404][T11344] RIP: 0033:0x7f755539f559 [ 659.621842][T11344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.641478][T11344] RSP: 002b:00007f755631b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 659.649908][T11344] RAX: ffffffffffffffda RBX: 00007f7555625fa0 RCX: 00007f755539f559 [ 659.657891][T11344] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000004 [ 659.665875][T11344] RBP: 00007f7555436b50 R08: 0000000000000296 R09: 0000000000000000 [ 659.673854][T11344] R10: 0000200000000e00 R11: 0000000000000246 R12: 0000000000000000 [ 659.681878][T11344] R13: 00007f7555626038 R14: 00007f7555625fa0 R15: 00007ffe48fe8678 [ 659.689869][T11344] [ 659.722756][T11348] md: could not open device unknown-block(1,0). [ 659.732632][ T4598] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 659.750884][ T4598] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 659.769204][ T4598] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 659.780877][ T4598] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.797082][ T4598] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.817401][ T4598] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 659.830787][ T4598] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 659.845645][ T4598] usb 3-1: Product: syz [ 659.849917][ T4598] usb 3-1: Manufacturer: syz [ 659.871491][ T4598] cdc_wdm 3-1:1.0: skipping garbage [ 659.876778][ T4598] cdc_wdm 3-1:1.0: skipping garbage [ 659.893853][ T4598] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 659.899798][ T4598] cdc_wdm 3-1:1.0: Unknown control protocol [ 659.987187][T11352] FAULT_INJECTION: forcing a failure. [ 659.987187][T11352] name failslab, interval 1, probability 0, space 0, times 0 [ 660.108348][T11352] CPU: 0 PID: 11352 Comm: syz.3.2053 Not tainted syzkaller #0 [ 660.115954][T11352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 660.126064][T11352] Call Trace: [ 660.129378][T11352] [ 660.132336][T11352] dump_stack_lvl+0x188/0x24e [ 660.137074][T11352] ? show_regs_print_info+0x12/0x12 [ 660.142319][T11352] ? load_image+0x410/0x410 [ 660.146869][T11352] ? __might_sleep+0xd0/0xd0 [ 660.151503][T11352] ? __lock_acquire+0x7ea0/0x7ea0 [ 660.156569][T11352] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 660.162598][T11352] should_fail_ex+0x390/0x4c0 [ 660.167324][T11352] should_failslab+0x5/0x20 [ 660.171857][T11352] slab_pre_alloc_hook+0x59/0x300 [ 660.176920][T11352] ? lockdep_hardirqs_on+0x94/0x140 [ 660.182185][T11352] ? setup_mq_sysctls+0x50/0x560 [ 660.187178][T11352] __kmem_cache_alloc_node+0x4f/0x270 [ 660.192593][T11352] ? setup_mq_sysctls+0x50/0x560 [ 660.197567][T11352] __kmalloc_node_track_caller+0xa0/0x240 [ 660.203324][T11352] kmemdup+0x27/0x60 [ 660.207281][T11352] setup_mq_sysctls+0x50/0x560 [ 660.212097][T11352] ? copy_ipcs+0x2e9/0x500 [ 660.216554][T11352] copy_ipcs+0x2fc/0x500 [ 660.220886][T11352] create_new_namespaces+0x212/0x700 [ 660.226217][T11352] unshare_nsproxy_namespaces+0x116/0x160 [ 660.231976][T11352] ksys_unshare+0x4f6/0x8e0 [ 660.236539][T11352] ? sighand_ctor+0x40/0x40 [ 660.241082][T11352] ? lock_chain_count+0x20/0x20 [ 660.245975][T11352] ? syscall_enter_from_user_mode+0x21/0x80 [ 660.251913][T11352] __x64_sys_unshare+0x34/0x40 [ 660.256713][T11352] do_syscall_64+0x4c/0xa0 [ 660.261179][T11352] ? clear_bhb_loop+0x60/0xb0 [ 660.265920][T11352] ? clear_bhb_loop+0x60/0xb0 [ 660.270636][T11352] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.276566][T11352] RIP: 0033:0x7fc44cf9f559 [ 660.281024][T11352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.300670][T11352] RSP: 002b:00007fc44de5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 660.309111][T11352] RAX: ffffffffffffffda RBX: 00007fc44d225fa0 RCX: 00007fc44cf9f559 [ 660.317113][T11352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 660.325113][T11352] RBP: 00007fc44d036b50 R08: 0000000000000000 R09: 0000000000000000 [ 660.333123][T11352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 660.341150][T11352] R13: 00007fc44d226038 R14: 00007fc44d225fa0 R15: 00007fff94e98b08 [ 660.349195][T11352] [ 660.392417][ T4550] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 660.515307][ T4598] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 660.661571][ T4550] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 660.738443][ T4598] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 660.759716][ T4598] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 660.805127][ T4598] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 660.826437][T11357] ceph: No mds server is up or the cluster is laggy [ 660.840947][ T4598] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 660.854861][ T4598] usb 1-1: Manufacturer: syz [ 660.864763][ T4598] usb 1-1: config 0 descriptor?? [ 660.877246][ T4598] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 661.695813][ T4552] usb 3-1: USB disconnect, device number 34 [ 662.290934][ T4552] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 662.442064][T11379] md: invalid raid superblock magic on ram7 [ 662.482663][ T4552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.524767][ T4552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.571012][T11379] md: ram7 does not have a valid v0.90 superblock, not importing! [ 662.578944][T11379] md: md_import_device returned -22 [ 662.590849][ T4552] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 662.621051][ T4552] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.636746][ T4552] usb 3-1: config 0 descriptor?? [ 662.683921][T11381] md: could not open device unknown-block(1,2). [ 662.711000][T11381] md: md_import_device returned -16 [ 662.731442][T11381] md: could not open device unknown-block(1,3). [ 662.737786][T11381] md: md_import_device returned -16 [ 662.915743][ T7137] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 662.976302][T11393] FAULT_INJECTION: forcing a failure. [ 662.976302][T11393] name fail_futex, interval 1, probability 0, space 0, times 0 [ 663.024468][T11393] CPU: 0 PID: 11393 Comm: syz.4.2066 Not tainted syzkaller #0 [ 663.032011][T11393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 663.042095][T11393] Call Trace: [ 663.045402][T11393] [ 663.048366][T11393] dump_stack_lvl+0x188/0x24e [ 663.053098][T11393] ? show_regs_print_info+0x12/0x12 [ 663.058345][T11393] ? load_image+0x410/0x410 [ 663.062905][T11393] should_fail_ex+0x390/0x4c0 [ 663.067627][T11393] get_futex_key+0x1a6/0xe70 [ 663.072272][T11393] ? futex_setup_timer+0xc0/0xc0 [ 663.077265][T11393] futex_wake+0x123/0x4f0 [ 663.081630][T11393] ? futex_wake_mark+0x150/0x150 [ 663.086622][T11393] ? trace_contention_end+0x5f/0x170 [ 663.091969][T11393] ? __mutex_lock+0x1ab/0xb40 [ 663.096683][T11393] do_futex+0x2e2/0x320 [ 663.100883][T11393] ? __ia32_sys_get_robust_list+0x100/0x100 [ 663.106816][T11393] __se_sys_futex+0x381/0x410 [ 663.111564][T11393] ? __x64_sys_futex+0xf0/0xf0 [ 663.116418][T11393] ? __x64_sys_futex+0x1d/0xf0 [ 663.121214][T11393] do_syscall_64+0x4c/0xa0 [ 663.125697][T11393] ? clear_bhb_loop+0x60/0xb0 [ 663.130413][T11393] ? clear_bhb_loop+0x60/0xb0 [ 663.135137][T11393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 663.141080][T11393] RIP: 0033:0x7fa1dc99f559 [ 663.145529][T11393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.165202][T11393] RSP: 002b:00007fa1dd9230e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 663.173654][T11393] RAX: ffffffffffffffda RBX: 00007fa1dcc25fa8 RCX: 00007fa1dc99f559 [ 663.181695][T11393] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa1dcc25fac [ 663.189702][T11393] RBP: 00007fa1dcc25fa0 R08: 0037cb7787bed83e R09: 0000000000000000 [ 663.197706][T11393] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 663.205714][T11393] R13: 00007fa1dcc26038 R14: 00007fffb7341720 R15: 00007fffb7341808 [ 663.213728][T11393] [ 663.230820][ T7137] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 663.261838][ T7137] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 663.270208][ T4552] usbhid 3-1:0.0: can't add hid device: -71 [ 663.280095][ T4552] usbhid: probe of 3-1:0.0 failed with error -71 [ 663.323683][ T4552] usb 3-1: USB disconnect, device number 35 [ 663.375833][ T4551] usb 1-1: USB disconnect, device number 33 [ 663.521785][ T4548] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 663.528320][ T7137] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 663.678934][T11387] ceph: No mds server is up or the cluster is laggy [ 663.751550][ T7137] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 663.781466][ T4548] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 663.918181][T11409] md: could not open device unknown-block(1,0). [ 664.071649][ T4302] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 664.083551][T11395] ceph: No mds server is up or the cluster is laggy [ 664.098746][T11413] md: could not open device unknown-block(1,0). [ 664.159650][T11415] md: could not open device unknown-block(1,0). [ 664.291873][ T4551] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 664.308225][T11400] ceph: No mds server is up or the cluster is laggy [ 664.361755][T11419] md: could not open device unknown-block(1,5). [ 664.379853][T11419] md: md_import_device returned -16 [ 664.576965][T11423] md: could not open device unknown-block(1,6). [ 664.587767][T11423] md: md_import_device returned -16 [ 664.595395][T11423] md: invalid raid superblock magic on ram7 [ 664.606634][T11423] md: ram7 does not have a valid v0.90 superblock, not importing! [ 664.616282][T11423] md: md_import_device returned -22 [ 664.628842][T11427] FAULT_INJECTION: forcing a failure. [ 664.628842][T11427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.675963][T11427] CPU: 1 PID: 11427 Comm: syz.2.2079 Not tainted syzkaller #0 [ 664.683477][T11427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 664.693590][T11427] Call Trace: [ 664.696893][T11427] [ 664.699864][T11427] dump_stack_lvl+0x188/0x24e [ 664.704652][T11427] ? show_regs_print_info+0x12/0x12 [ 664.709917][T11427] ? load_image+0x410/0x410 [ 664.714497][T11427] ? __lock_acquire+0x7ea0/0x7ea0 [ 664.719586][T11427] should_fail_ex+0x390/0x4c0 [ 664.724311][T11427] _copy_from_user+0x2c/0x170 [ 664.729055][T11427] do_replace+0x2ec/0x430 [ 664.733452][T11427] ? do_ebt_get_ctl+0x1d00/0x1d00 [ 664.738529][T11427] ? bpf_lsm_capable+0x5/0x10 [ 664.743258][T11427] ? security_capable+0x85/0xb0 [ 664.748179][T11427] do_ebt_set_ctl+0x268/0xe80 [ 664.752926][T11427] ? ebt_pernet_exit+0x90/0x90 [ 664.757780][T11427] ? nf_setsockopt+0x218/0x280 [ 664.762601][T11427] ? __lock_acquire+0x7ea0/0x7ea0 [ 664.767688][T11427] ? trace_contention_end+0x5f/0x170 [ 664.773059][T11427] ? __mutex_lock+0x1ab/0xb40 [ 664.777819][T11427] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 664.783513][T11427] ? mutex_unlock+0x10/0x10 [ 664.788069][T11427] ? aa_sk_perm+0x795/0x8c0 [ 664.792677][T11427] ? __ia32_sys_get_robust_list+0x100/0x100 [ 664.798624][T11427] ? aa_af_perm+0x340/0x340 [ 664.803189][T11427] nf_setsockopt+0x25f/0x280 [ 664.807820][T11427] ? sock_common_recvmsg+0x190/0x190 [ 664.813181][T11427] __sys_setsockopt+0x2bf/0x3d0 [ 664.818110][T11427] __x64_sys_setsockopt+0xb1/0xc0 [ 664.823205][T11427] do_syscall_64+0x4c/0xa0 [ 664.827693][T11427] ? clear_bhb_loop+0x60/0xb0 [ 664.832433][T11427] ? clear_bhb_loop+0x60/0xb0 [ 664.837175][T11427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 664.843113][T11427] RIP: 0033:0x7f544919f559 [ 664.847616][T11427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.867254][T11427] RSP: 002b:00007f54473f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 664.875706][T11427] RAX: ffffffffffffffda RBX: 00007f5449425fa0 RCX: 00007f544919f559 [ 664.883732][T11427] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000004 [ 664.891737][T11427] RBP: 00007f5449236b50 R08: 0000000000000296 R09: 0000000000000000 [ 664.899756][T11427] R10: 0000200000000e00 R11: 0000000000000246 R12: 0000000000000000 [ 664.907763][T11427] R13: 00007f5449426038 R14: 00007f5449425fa0 R15: 00007ffd89fc2568 [ 664.915783][T11427] [ 665.005833][ T4548] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 665.201041][ T4551] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 665.210340][ T4548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.222438][ T4548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.236494][ T4548] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 665.256022][ T4548] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.284858][ T4548] usb 1-1: config 0 descriptor?? [ 665.311454][T11439] FAULT_INJECTION: forcing a failure. [ 665.311454][T11439] name failslab, interval 1, probability 0, space 0, times 0 [ 665.324663][T11439] CPU: 1 PID: 11439 Comm: syz.4.2083 Not tainted syzkaller #0 [ 665.332161][T11439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 665.342241][T11439] Call Trace: [ 665.345560][T11439] [ 665.348515][T11439] dump_stack_lvl+0x188/0x24e [ 665.353239][T11439] ? show_regs_print_info+0x12/0x12 [ 665.358480][T11439] ? load_image+0x410/0x410 [ 665.363015][T11439] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 665.369305][T11439] should_fail_ex+0x390/0x4c0 [ 665.374059][T11439] should_failslab+0x5/0x20 [ 665.378599][T11439] slab_pre_alloc_hook+0x59/0x300 [ 665.383686][T11439] ? lockdep_hardirqs_on+0x94/0x140 [ 665.387019][ T7137] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 665.388921][T11439] ? proc_thread_self_get_link+0xf8/0x190 [ 665.402230][T11439] __kmem_cache_alloc_node+0x4f/0x270 [ 665.407646][T11439] ? proc_thread_self_get_link+0xf8/0x190 [ 665.413406][T11439] kmalloc_trace+0x26/0xe0 [ 665.417868][T11439] proc_thread_self_get_link+0xf8/0x190 [ 665.423457][T11439] ? proc_setup_thread_self+0x2d0/0x2d0 [ 665.429056][T11439] pick_link+0x6ed/0xe20 [ 665.433343][T11439] step_into+0xc14/0xee0 [ 665.437622][T11439] ? set_root+0x3a0/0x3a0 [ 665.441982][T11439] ? lookup_fast+0x14a/0x4c0 [ 665.446619][T11439] ? security_inode_permission+0xac/0xf0 [ 665.452286][T11439] link_path_walk+0x744/0xea0 [ 665.456987][T11439] ? handle_lookup_down+0x130/0x130 [ 665.462211][T11439] path_openat+0x285/0x2f10 [ 665.466749][T11439] ? kasan_set_track+0x60/0x70 [ 665.471523][T11439] ? verify_lock_unused+0x140/0x140 [ 665.476749][T11439] ? do_sys_openat2+0xdd/0x4f0 [ 665.481543][T11439] ? do_filp_open+0x420/0x420 [ 665.486299][T11439] do_filp_open+0x1ee/0x420 [ 665.490844][T11439] ? vfs_tmpfile+0x490/0x490 [ 665.495511][T11439] ? _raw_spin_unlock+0x24/0x40 [ 665.500365][T11439] ? alloc_fd+0x590/0x640 [ 665.504703][T11439] do_sys_openat2+0x14b/0x4f0 [ 665.509413][T11439] ? do_sys_open+0xe0/0xe0 [ 665.513856][T11439] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 665.519894][T11439] ? lock_chain_count+0x20/0x20 [ 665.524794][T11439] __x64_sys_openat+0x135/0x160 [ 665.529719][T11439] do_syscall_64+0x4c/0xa0 [ 665.534173][T11439] ? clear_bhb_loop+0x60/0xb0 [ 665.538913][T11439] ? clear_bhb_loop+0x60/0xb0 [ 665.543660][T11439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 665.549625][T11439] RIP: 0033:0x7fa1dc95fd8e [ 665.554068][T11439] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 665.573735][T11439] RSP: 002b:00007fa1dd901ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 665.582197][T11439] RAX: ffffffffffffffda RBX: 00007fa1dd9026c0 RCX: 00007fa1dc95fd8e [ 665.590061][ T4302] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 665.590190][T11439] RDX: 0000000000000002 RSI: 00007fa1dd901f90 RDI: ffffffffffffff9c [ 665.604963][T11439] RBP: 00007fa1dca36b50 R08: 0000000000000000 R09: 0000000000000000 [ 665.612968][T11439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 665.621005][T11439] R13: 00007fa1dcc26128 R14: 00007fa1dcc26090 R15: 00007fffb7341808 [ 665.629026][T11439] [ 665.633568][ T7137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.647891][ T7137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.658784][ T7137] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 665.665080][ T4551] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 665.668409][ T7137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.697230][ T7137] usb 3-1: config 0 descriptor?? [ 665.706961][ T4551] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 665.741407][ T4551] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 665.750478][ T4551] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 665.771131][ T4551] usb 2-1: Manufacturer: syz [ 665.795913][ T4551] usb 2-1: config 0 descriptor?? [ 665.807740][ T4551] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 665.844952][ T4548] usbhid 1-1:0.0: can't add hid device: -71 [ 665.852127][ T4598] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 665.871238][ T4548] usbhid: probe of 1-1:0.0 failed with error -71 [ 665.891571][ T4548] usb 1-1: USB disconnect, device number 34 [ 665.917588][T11445] md: could not open device unknown-block(1,0). [ 666.143582][ T4302] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 666.319044][ T7137] usbhid 3-1:0.0: can't add hid device: -71 [ 666.325355][ T7137] usbhid: probe of 3-1:0.0 failed with error -71 [ 666.334262][ T7137] usb 3-1: USB disconnect, device number 36 [ 666.361108][T11441] ceph: No mds server is up or the cluster is laggy [ 666.369528][ T4302] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 666.417798][ T4351] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 666.466371][T11456] md: could not open device unknown-block(1,1). [ 666.474810][T11456] md: md_import_device returned -16 [ 666.589864][T11462] md: could not open device unknown-block(1,0). [ 666.596372][T11462] md: md_import_device returned -16 [ 666.607491][T11464] FAULT_INJECTION: forcing a failure. [ 666.607491][T11464] name fail_futex, interval 1, probability 0, space 0, times 0 [ 666.608524][T11462] md: could not open device unknown-block(1,1). [ 666.621242][T11464] CPU: 0 PID: 11464 Comm: syz.3.2092 Not tainted syzkaller #0 [ 666.634119][T11464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 666.644199][T11464] Call Trace: [ 666.645471][T11462] md: md_import_device returned -16 [ 666.647490][T11464] [ 666.647500][T11464] dump_stack_lvl+0x188/0x24e [ 666.647537][T11464] ? show_regs_print_info+0x12/0x12 [ 666.665599][T11464] ? load_image+0x410/0x410 [ 666.670160][T11464] should_fail_ex+0x390/0x4c0 [ 666.674885][T11464] get_futex_key+0x1a6/0xe70 [ 666.679503][T11464] ? futex_setup_timer+0xc0/0xc0 [ 666.684468][T11464] futex_wake+0x123/0x4f0 [ 666.688854][T11464] ? futex_wake_mark+0x150/0x150 [ 666.693866][T11464] ? trace_contention_end+0x5f/0x170 [ 666.699199][T11464] ? __mutex_lock+0x1ab/0xb40 [ 666.703909][T11464] do_futex+0x2e2/0x320 [ 666.708088][T11464] ? __ia32_sys_get_robust_list+0x100/0x100 [ 666.714011][T11464] __se_sys_futex+0x381/0x410 [ 666.718736][T11464] ? __x64_sys_futex+0xf0/0xf0 [ 666.723555][T11464] ? __x64_sys_futex+0x1d/0xf0 [ 666.728359][T11464] do_syscall_64+0x4c/0xa0 [ 666.732818][T11464] ? clear_bhb_loop+0x60/0xb0 [ 666.737541][T11464] ? clear_bhb_loop+0x60/0xb0 [ 666.742256][T11464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 666.748186][T11464] RIP: 0033:0x7fc44cf9f559 [ 666.752666][T11464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.772304][T11464] RSP: 002b:00007fc44de5e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 666.780738][T11464] RAX: ffffffffffffffda RBX: 00007fc44d225fa8 RCX: 00007fc44cf9f559 [ 666.788753][T11464] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc44d225fac [ 666.796755][T11464] RBP: 00007fc44d225fa0 R08: 0021bdb74af15200 R09: 0000000000000000 [ 666.804755][T11464] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 666.812771][T11464] R13: 00007fc44d226038 R14: 00007fff94e98a20 R15: 00007fff94e98b08 [ 666.820798][T11464] [ 666.936345][ T7137] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 666.970912][T11451] ceph: No mds server is up or the cluster is laggy [ 667.190882][ T4552] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 667.236819][T11473] loop3: detected capacity change from 0 to 32768 [ 667.253567][T11473] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 667.369355][ T4266] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 667.392506][ T4552] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.410909][ T4552] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 667.419986][ T4552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.447645][T11473] loop3: detected capacity change from 0 to 4096 [ 667.455418][ T4552] usb 1-1: config 0 descriptor?? [ 667.471890][ T4552] pwc: Askey VC010 type 2 USB webcam detected. [ 667.492692][T11473] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 667.510675][T11473] jffs2: notice: (11473) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 667.661618][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 667.681204][ T4552] pwc: send_video_command error -71 [ 667.686598][ T4552] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 667.718841][ T4552] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 667.733035][ T4552] usb 1-1: USB disconnect, device number 35 [ 667.807431][ T4598] usb 2-1: USB disconnect, device number 27 [ 667.866962][T11483] md: could not open device unknown-block(1,0). [ 667.914204][ T7137] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 668.119680][T11494] md: could not open device unknown-block(1,3). [ 668.129311][T11494] md: md_import_device returned -16 [ 668.138215][ T7137] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.154573][ T7137] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 668.165769][ T7137] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 668.200923][ T7137] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 668.219169][ T7137] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 668.228852][ T7137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.250927][ T4302] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 668.277850][T11497] md: could not open device unknown-block(1,6). [ 668.284828][T11497] md: md_import_device returned -16 [ 668.290647][T11497] md: invalid raid superblock magic on ram7 [ 668.297762][T11497] md: ram7 does not have a valid v0.90 superblock, not importing! [ 668.301105][ T4552] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 668.306746][T11497] md: md_import_device returned -22 [ 668.371934][T11501] FAULT_INJECTION: forcing a failure. [ 668.371934][T11501] name fail_futex, interval 1, probability 0, space 0, times 0 [ 668.389284][T11501] CPU: 1 PID: 11501 Comm: syz.3.2105 Not tainted syzkaller #0 [ 668.396778][T11501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 668.406873][T11501] Call Trace: [ 668.410170][T11501] [ 668.413130][T11501] dump_stack_lvl+0x188/0x24e [ 668.417856][T11501] ? verify_lock_unused+0x140/0x140 [ 668.423085][T11501] ? show_regs_print_info+0x12/0x12 [ 668.428321][T11501] ? load_image+0x410/0x410 [ 668.432856][T11501] ? __kmem_cache_free+0xb6/0x200 [ 668.437901][T11501] should_fail_ex+0x390/0x4c0 [ 668.442615][T11501] get_futex_key+0x1a6/0xe70 [ 668.447228][T11501] ? futex_setup_timer+0xc0/0xc0 [ 668.452186][T11501] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 668.458184][T11501] ? __lock_acquire+0x7ea0/0x7ea0 [ 668.463232][T11501] ? lock_chain_count+0x20/0x20 [ 668.468111][T11501] futex_wait_setup+0xb8/0x270 [ 668.472905][T11501] ? futex_wait_multiple+0x970/0x970 [ 668.478203][T11501] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 668.484119][T11501] ? _raw_spin_unlock+0x40/0x40 [ 668.489021][T11501] futex_wait+0x1cb/0x640 [ 668.493420][T11501] ? futex_wait_setup+0x270/0x270 [ 668.498470][T11501] ? __mutex_lock+0x1ab/0xb40 [ 668.503157][T11501] do_futex+0x310/0x320 [ 668.507331][T11501] ? __ia32_sys_get_robust_list+0x100/0x100 [ 668.513253][T11501] __se_sys_futex+0x381/0x410 [ 668.517972][T11501] ? __x64_sys_futex+0xf0/0xf0 [ 668.522756][T11501] ? __x64_sys_futex+0x1d/0xf0 [ 668.527541][T11501] do_syscall_64+0x4c/0xa0 [ 668.531975][T11501] ? clear_bhb_loop+0x60/0xb0 [ 668.536672][T11501] ? clear_bhb_loop+0x60/0xb0 [ 668.541367][T11501] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 668.547278][T11501] RIP: 0033:0x7fc44cf9f559 [ 668.551704][T11501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.571363][T11501] RSP: 002b:00007fc44de5e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 668.579799][T11501] RAX: ffffffffffffffda RBX: 00007fc44d225fa8 RCX: 00007fc44cf9f559 [ 668.587802][T11501] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc44d225fa8 [ 668.595800][T11501] RBP: 00007fc44d225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 668.603805][T11501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.611809][T11501] R13: 00007fc44d226038 R14: 00007fff94e98a20 R15: 00007fff94e98b08 [ 668.619808][T11501] [ 668.672944][ T4302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.684261][ T4302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.694597][ T4302] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 668.703967][ T4302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.720369][ T4302] usb 5-1: config 0 descriptor?? [ 668.735284][ T4552] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.747368][ T4552] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 668.756582][ T4552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.767132][ T4552] usb 1-1: config 0 descriptor?? [ 668.775724][ T4552] pwc: Askey VC010 type 2 USB webcam detected. [ 668.782098][ T4551] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 668.834807][ T7137] gud: probe of 3-1:1.0 failed with error -71 [ 668.853481][ T7137] usb 3-1: USB disconnect, device number 37 [ 668.965251][ T4551] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.978097][ T4551] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.988434][ T4551] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 668.997596][ T4551] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.008682][ T4551] usb 2-1: config 0 descriptor?? [ 669.133679][ T4302] usbhid 5-1:0.0: can't add hid device: -71 [ 669.145853][ T4302] usbhid: probe of 5-1:0.0 failed with error -71 [ 669.154770][ T4302] usb 5-1: USB disconnect, device number 33 [ 669.188835][ T4552] pwc: recv_control_msg error -32 req 02 val 2b00 [ 669.196742][ T4552] pwc: recv_control_msg error -32 req 02 val 2700 [ 669.206805][ T4552] pwc: recv_control_msg error -32 req 02 val 2c00 [ 669.214144][ T4552] pwc: recv_control_msg error -32 req 04 val 1000 [ 669.221954][ T4552] pwc: recv_control_msg error -32 req 04 val 1300 [ 669.229618][ T4552] pwc: recv_control_msg error -32 req 04 val 1400 [ 669.237080][ T4552] pwc: recv_control_msg error -32 req 02 val 2000 [ 669.245935][ T4552] pwc: recv_control_msg error -32 req 02 val 2100 [ 669.253377][ T4552] pwc: recv_control_msg error -32 req 04 val 1500 [ 669.260298][ T4552] pwc: recv_control_msg error -32 req 02 val 2500 [ 669.267574][ T4552] pwc: recv_control_msg error -32 req 02 val 2400 [ 669.274755][ T4552] pwc: recv_control_msg error -32 req 02 val 2600 [ 669.282223][ T4552] pwc: recv_control_msg error -32 req 02 val 2900 [ 669.289326][ T4552] pwc: recv_control_msg error -32 req 02 val 2800 [ 669.298111][ T4552] pwc: recv_control_msg error -32 req 04 val 1100 [ 669.305790][ T4552] pwc: recv_control_msg error -32 req 04 val 1200 [ 669.316861][ T4552] pwc: Registered as video103. [ 669.323056][ T4552] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input41 [ 669.337228][ T4552] usb 1-1: USB disconnect, device number 36 [ 669.477555][T11507] md: could not open device unknown-block(1,0). [ 669.630350][ T4551] usbhid 2-1:0.0: can't add hid device: -71 [ 669.638877][ T4551] usbhid: probe of 2-1:0.0 failed with error -71 [ 669.660393][ T4551] usb 2-1: USB disconnect, device number 28 [ 669.732651][ T4302] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 669.890833][ T4552] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 669.955454][ T4302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.967243][ T4302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.977461][ T4302] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 669.986635][ T4302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.004710][ T4302] usb 4-1: config 0 descriptor?? [ 670.072578][ T4552] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 670.092784][ T4552] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 670.121865][ T4552] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 670.140811][ T4552] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 670.149004][ T4552] usb 3-1: Manufacturer: syz [ 670.172573][ T4552] usb 3-1: config 0 descriptor?? [ 670.180900][ T4552] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 670.216858][T11516] loop0: detected capacity change from 0 to 32768 [ 670.230635][T11516] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 670.348117][ T4266] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 670.410382][T11516] loop0: detected capacity change from 0 to 4096 [ 670.422222][ T4302] savu 0003:1E7D:2D5A.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 670.454523][T11516] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 670.488155][T11516] jffs2: notice: (11516) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 670.618513][T11521] jffs2: notice: (11521) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 670.648637][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 670.677601][ T4552] usb 4-1: USB disconnect, device number 44 [ 670.761755][T11525] md: could not open device unknown-block(1,9). [ 670.789814][T11525] md: md_import_device returned -16 [ 670.846977][T11530] md: could not open device unknown-block(1,2). [ 670.863619][T11530] md: md_import_device returned -16 [ 670.874992][T11530] md: could not open device unknown-block(1,3). [ 670.905980][T11530] md: md_import_device returned -16 [ 671.224740][ T4548] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 671.241449][ T4302] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 671.300830][ T7137] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 671.330843][ T4598] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 671.442474][ T4302] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 671.451486][ T4302] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 671.461813][ T4302] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 671.470949][ T4302] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.483630][ T4302] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 671.492951][ T4302] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 671.501212][ T4548] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 671.508347][ T4302] usb 5-1: Product: syz [ 671.512748][ T4302] usb 5-1: Manufacturer: syz [ 671.518831][ T7137] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 671.529368][ T7137] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 671.541015][ T7137] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 671.552609][ T4302] cdc_wdm 5-1:1.0: skipping garbage [ 671.557877][ T4302] cdc_wdm 5-1:1.0: skipping garbage [ 671.564037][ T7137] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 671.577305][ T4598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.590112][ T4598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.600352][ T4302] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 671.606705][ T4302] cdc_wdm 5-1:1.0: Unknown control protocol [ 671.612851][ T7137] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 671.623671][ T4598] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 671.633028][ T7137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.641265][ T4598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.666660][ T4598] usb 2-1: config 0 descriptor?? [ 671.782400][ T4302] usb 5-1: USB disconnect, device number 34 [ 672.012619][ T4548] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 672.049185][T11543] ceph: No mds server is up or the cluster is laggy [ 672.067225][ T7137] gud: probe of 1-1:1.0 failed with error -71 [ 672.084450][ T4598] usbhid 2-1:0.0: can't add hid device: -71 [ 672.096568][ T4598] usbhid: probe of 2-1:0.0 failed with error -71 [ 672.115039][ T7137] usb 1-1: USB disconnect, device number 37 [ 672.127367][ T4598] usb 2-1: USB disconnect, device number 29 [ 672.649503][ T4551] usb 3-1: USB disconnect, device number 38 [ 672.679865][T11553] jffs2: notice: (11553) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 672.758980][T11557] md: could not open device unknown-block(1,0). [ 672.780043][T11559] md: invalid raid superblock magic on ram7 [ 672.786345][T11559] md: ram7 does not have a valid v0.90 superblock, not importing! [ 672.794498][T11559] md: md_import_device returned -22 [ 672.850827][ T4598] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 672.898109][T11564] FAULT_INJECTION: forcing a failure. [ 672.898109][T11564] name fail_futex, interval 1, probability 0, space 0, times 0 [ 672.917754][T11564] CPU: 0 PID: 11564 Comm: syz.3.2130 Not tainted syzkaller #0 [ 672.925253][T11564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 672.935341][T11564] Call Trace: [ 672.938669][T11564] [ 672.941631][T11564] dump_stack_lvl+0x188/0x24e [ 672.946379][T11564] ? show_regs_print_info+0x12/0x12 [ 672.951631][T11564] ? load_image+0x410/0x410 [ 672.956178][T11564] ? ____sys_sendmsg+0x805/0x9a0 [ 672.961171][T11564] ? __sys_sendmsg_sock+0x30/0x30 [ 672.966232][T11564] should_fail_ex+0x390/0x4c0 [ 672.970944][T11564] get_futex_key+0x1a6/0xe70 [ 672.975586][T11564] ? rcu_is_watching+0x11/0xa0 [ 672.980400][T11564] ? ___sys_sendmsg+0x2b2/0x360 [ 672.985295][T11564] ? futex_setup_timer+0xc0/0xc0 [ 672.990433][T11564] ? __sys_sendmsg+0x2a0/0x2a0 [ 672.995273][T11564] futex_wake+0x123/0x4f0 [ 672.999640][T11564] ? futex_wake_mark+0x150/0x150 [ 673.004628][T11564] do_futex+0x2e2/0x320 [ 673.008824][T11564] ? __ia32_sys_get_robust_list+0x100/0x100 [ 673.014754][T11564] ? fput+0x150/0x1a0 [ 673.018783][T11564] __se_sys_futex+0x381/0x410 [ 673.023497][T11564] ? __x64_sys_futex+0xf0/0xf0 [ 673.028305][T11564] ? __x64_sys_futex+0x1d/0xf0 [ 673.033149][T11564] do_syscall_64+0x4c/0xa0 [ 673.037603][T11564] ? clear_bhb_loop+0x60/0xb0 [ 673.042318][T11564] ? clear_bhb_loop+0x60/0xb0 [ 673.047076][T11564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 673.053022][T11564] RIP: 0033:0x7fc44cf9f559 [ 673.057480][T11564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.077116][T11564] RSP: 002b:00007fc44de5e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 673.085573][T11564] RAX: ffffffffffffffda RBX: 00007fc44d225fa8 RCX: 00007fc44cf9f559 [ 673.093577][T11564] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc44d225fac [ 673.101580][T11564] RBP: 00007fc44d225fa0 R08: 003306c43f61777e R09: 0000000000000000 [ 673.109583][T11564] R10: 000000000000009c R11: 0000000000000246 R12: 0000000000000000 [ 673.117575][T11564] R13: 00007fc44d226038 R14: 00007fff94e98a20 R15: 00007fff94e98b08 [ 673.125575][T11564] [ 673.155155][T11571] FAULT_INJECTION: forcing a failure. [ 673.155155][T11571] name failslab, interval 1, probability 0, space 0, times 0 [ 673.188163][T11571] CPU: 1 PID: 11571 Comm: syz.2.2132 Not tainted syzkaller #0 [ 673.195762][T11571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 673.205871][T11571] Call Trace: [ 673.209186][T11571] [ 673.212150][T11571] dump_stack_lvl+0x188/0x24e [ 673.216875][T11571] ? show_regs_print_info+0x12/0x12 [ 673.222112][T11571] ? load_image+0x410/0x410 [ 673.226649][T11571] ? __might_sleep+0xd0/0xd0 [ 673.231284][T11571] ? __lock_acquire+0x7ea0/0x7ea0 [ 673.236373][T11571] should_fail_ex+0x390/0x4c0 [ 673.241089][T11571] should_failslab+0x5/0x20 [ 673.245628][T11571] slab_pre_alloc_hook+0x59/0x300 [ 673.250708][T11571] kmem_cache_alloc_lru+0x49/0x2e0 [ 673.255856][T11571] ? __d_alloc+0x2e/0x6e0 [ 673.260266][T11571] __d_alloc+0x2e/0x6e0 [ 673.264469][T11571] d_alloc_parallel+0xdc/0x1590 [ 673.269389][T11571] ? __d_lookup+0x8b/0x7c0 [ 673.273823][T11571] ? __lock_acquire+0x7ea0/0x7ea0 [ 673.278904][T11571] ? __d_lookup+0x8b/0x7c0 [ 673.283324][T11571] ? d_hash_and_lookup+0x1b0/0x1b0 [ 673.288449][T11571] path_openat+0x949/0x2f10 [ 673.293000][T11571] ? kasan_set_track+0x60/0x70 [ 673.294954][ T4598] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.297786][T11571] ? verify_lock_unused+0x140/0x140 [ 673.313138][T11571] ? do_filp_open+0x420/0x420 [ 673.316411][ T4598] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 673.317848][T11571] do_filp_open+0x1ee/0x420 [ 673.331411][T11571] ? vfs_tmpfile+0x490/0x490 [ 673.336049][T11571] ? noop_direct_IO+0x10/0x10 [ 673.340785][T11571] ? _raw_spin_unlock+0x24/0x40 [ 673.345687][T11571] ? alloc_fd+0x590/0x640 [ 673.347625][ T4598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.350057][T11571] do_sys_openat2+0x14b/0x4f0 [ 673.350092][T11571] ? do_sys_open+0xe0/0xe0 [ 673.367232][T11571] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 673.373274][T11571] ? lock_chain_count+0x20/0x20 [ 673.378194][T11571] __x64_sys_openat+0x135/0x160 [ 673.383117][T11571] do_syscall_64+0x4c/0xa0 [ 673.387586][T11571] ? clear_bhb_loop+0x60/0xb0 [ 673.392309][T11571] ? clear_bhb_loop+0x60/0xb0 [ 673.397040][T11571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 673.402973][T11571] RIP: 0033:0x7f544915fd8e [ 673.407421][T11571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 673.427065][T11571] RSP: 002b:00007f54473d4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 673.435492][T11571] RAX: ffffffffffffffda RBX: 00007f54473d56c0 RCX: 00007f544915fd8e [ 673.443501][T11571] RDX: 0000000000000002 RSI: 00007f54473d4f90 RDI: ffffffffffffff9c [ 673.451530][T11571] RBP: 00007f5449236b50 R08: 0000000000000000 R09: 0000000000000000 [ 673.459537][T11571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.467533][T11571] R13: 00007f5449426128 R14: 00007f5449426090 R15: 00007ffd89fc2568 [ 673.475584][T11571] [ 673.481342][ T4598] usb 5-1: config 0 descriptor?? [ 673.491005][ T4598] pwc: Askey VC010 type 2 USB webcam detected. [ 673.525902][ T4302] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 673.601147][T11577] md: could not open device unknown-block(1,0). [ 673.647870][T11579] md: could not open device unknown-block(1,0). [ 673.651332][ T4552] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 673.699679][ T4598] pwc: send_video_command error -71 [ 673.713600][ T4598] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 673.729328][ T4598] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 673.746321][ T4598] usb 5-1: USB disconnect, device number 35 [ 673.801946][ T7137] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 673.843088][ T4552] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 673.854524][ T4552] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 673.864322][ T4552] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 673.874081][ T4552] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 673.886942][ T4552] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 673.896047][ T4552] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.950944][ T4302] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 674.060895][ T4551] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 674.083265][T11573] ceph: No mds server is up or the cluster is laggy [ 674.128746][ T4552] usb 2-1: USB disconnect, device number 30 [ 674.143000][ T4302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.170293][ T4302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.184829][ T4302] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 674.198319][ T4302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.216928][ T4302] usb 1-1: config 0 descriptor?? [ 674.252259][ T4551] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 674.264461][ T4551] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.274569][ T4551] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 674.289617][ T4551] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 674.298838][ T4551] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 674.309679][ T4551] usb 3-1: Manufacturer: syz [ 674.316322][ T4551] usb 3-1: config 0 descriptor?? [ 674.324624][ T4551] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 674.340915][ T4598] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 674.562894][ T4598] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.573731][ T4598] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 674.583220][ T4598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.594092][ T4598] usb 5-1: config 0 descriptor?? [ 674.603683][ T4598] pwc: Askey VC010 type 2 USB webcam detected. [ 674.629818][ T4302] usbhid 1-1:0.0: can't add hid device: -71 [ 674.639150][ T4302] usbhid: probe of 1-1:0.0 failed with error -71 [ 674.662687][ T4302] usb 1-1: USB disconnect, device number 38 [ 674.708001][T11587] jffs2: notice: (11587) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 674.796109][T11590] md: invalid raid superblock magic on ram7 [ 674.803016][T11590] md: ram7 does not have a valid v0.90 superblock, not importing! [ 674.811989][T11590] md: md_import_device returned -22 [ 674.848011][T11592] md: could not open device unknown-block(1,0). [ 674.932043][T11597] FAULT_INJECTION: forcing a failure. [ 674.932043][T11597] name failslab, interval 1, probability 0, space 0, times 0 [ 674.946890][T11597] CPU: 1 PID: 11597 Comm: syz.1.2144 Not tainted syzkaller #0 [ 674.954408][T11597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 674.964499][T11597] Call Trace: [ 674.967804][T11597] [ 674.970764][T11597] dump_stack_lvl+0x188/0x24e [ 674.975496][T11597] ? show_regs_print_info+0x12/0x12 [ 674.980738][T11597] ? load_image+0x410/0x410 [ 674.985291][T11597] ? __might_sleep+0xd0/0xd0 [ 674.989923][T11597] ? __lock_acquire+0x7ea0/0x7ea0 [ 674.994992][T11597] should_fail_ex+0x390/0x4c0 [ 674.999738][T11597] should_failslab+0x5/0x20 [ 675.004281][T11597] slab_pre_alloc_hook+0x59/0x300 [ 675.009344][T11597] ? memcg_list_lru_alloc+0x331/0xb00 [ 675.014753][T11597] __kmem_cache_alloc_node+0x4f/0x270 [ 675.020166][T11597] ? memcg_list_lru_alloc+0x331/0xb00 [ 675.025562][T11597] __kmalloc+0xa3/0x240 [ 675.029750][T11597] memcg_list_lru_alloc+0x331/0xb00 [ 675.034997][T11597] ? slab_pre_alloc_hook+0xb1/0x300 [ 675.040240][T11597] ? memcg_reparent_list_lrus+0x850/0x850 [ 675.046005][T11597] ? get_obj_cgroup_from_current+0xd0/0x280 [ 675.052090][T11597] ? get_obj_cgroup_from_current+0xd0/0x280 [ 675.058045][T11597] slab_pre_alloc_hook+0x2ad/0x300 [ 675.063209][T11597] ? slab_pre_alloc_hook+0xb1/0x300 [ 675.068442][T11597] kmem_cache_alloc_lru+0x49/0x2e0 [ 675.073587][T11597] ? iget_locked+0x201/0x8c0 [ 675.078221][T11597] iget_locked+0x201/0x8c0 [ 675.082680][T11597] kernfs_get_inode+0x4a/0x680 [ 675.087547][T11597] ? down_read+0x1a8/0x2d0 [ 675.092004][T11597] kernfs_get_tree+0x455/0x710 [ 675.096819][T11597] sysfs_get_tree+0x42/0x110 [ 675.101481][T11597] vfs_get_tree+0x88/0x270 [ 675.105936][T11597] do_new_mount+0x247/0xa50 [ 675.110486][T11597] __se_sys_mount+0x2e3/0x3d0 [ 675.115219][T11597] ? __x64_sys_mount+0xc0/0xc0 [ 675.120046][T11597] ? lockdep_hardirqs_on+0x94/0x140 [ 675.125281][T11597] ? __x64_sys_mount+0x1c/0xc0 [ 675.130084][T11597] do_syscall_64+0x4c/0xa0 [ 675.134581][T11597] ? clear_bhb_loop+0x60/0xb0 [ 675.139332][T11597] ? clear_bhb_loop+0x60/0xb0 [ 675.144059][T11597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 675.150009][T11597] RIP: 0033:0x7f0cfe99f559 [ 675.154467][T11597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.174103][T11597] RSP: 002b:00007f0cff8e8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 675.182555][T11597] RAX: ffffffffffffffda RBX: 00007f0cfec25fa0 RCX: 00007f0cfe99f559 [ 675.190559][T11597] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000000000 [ 675.198563][T11597] RBP: 00007f0cfea36b50 R08: 0000000000000000 R09: 0000000000000000 [ 675.206560][T11597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.214583][T11597] R13: 00007f0cfec26038 R14: 00007f0cfec25fa0 R15: 00007ffdff82c238 [ 675.221935][ T4598] pwc: recv_control_msg error -32 req 02 val 2b00 [ 675.222597][T11597] [ 675.233875][ T4598] pwc: recv_control_msg error -32 req 02 val 2700 [ 675.242311][ T4598] pwc: recv_control_msg error -32 req 02 val 2c00 [ 675.254069][ T4598] pwc: recv_control_msg error -32 req 04 val 1000 [ 675.261484][ T4598] pwc: recv_control_msg error -32 req 04 val 1300 [ 675.268734][ T4598] pwc: recv_control_msg error -32 req 04 val 1400 [ 675.276061][ T4598] pwc: recv_control_msg error -32 req 02 val 2000 [ 675.284410][ T4598] pwc: recv_control_msg error -32 req 02 val 2100 [ 675.299374][ T4598] pwc: recv_control_msg error -32 req 04 val 1500 [ 675.306747][ T4598] pwc: recv_control_msg error -32 req 02 val 2500 [ 675.314131][ T4598] pwc: recv_control_msg error -32 req 02 val 2400 [ 675.321508][ T4598] pwc: recv_control_msg error -32 req 02 val 2600 [ 675.328821][ T4598] pwc: recv_control_msg error -32 req 02 val 2900 [ 675.345656][ T4598] pwc: recv_control_msg error -32 req 02 val 2800 [ 675.363245][ T4598] pwc: recv_control_msg error -32 req 04 val 1100 [ 675.372161][ T4598] pwc: recv_control_msg error -32 req 04 val 1200 [ 675.390212][ T4598] pwc: Registered as video103. [ 675.396173][ T4598] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input42 [ 675.419466][ T4598] usb 5-1: USB disconnect, device number 36 [ 675.720925][ T4551] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 675.922847][ T4551] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 675.937450][ T4551] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 675.948070][ T4551] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 675.970807][ T4551] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.002349][ T4551] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 676.008274][T11606] md: could not open device unknown-block(1,0). [ 676.027412][ T4551] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 676.039154][ T4551] usb 1-1: Product: syz [ 676.045926][ T4551] usb 1-1: Manufacturer: syz [ 676.058321][ T4551] cdc_wdm 1-1:1.0: skipping garbage [ 676.073915][ T4551] cdc_wdm 1-1:1.0: skipping garbage [ 676.093696][ T4551] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 676.109640][ T4551] cdc_wdm 1-1:1.0: Unknown control protocol [ 676.126317][T11610] FAULT_INJECTION: forcing a failure. [ 676.126317][T11610] name failslab, interval 1, probability 0, space 0, times 0 [ 676.176890][T11610] CPU: 0 PID: 11610 Comm: syz.4.2147 Not tainted syzkaller #0 [ 676.178268][T11612] md: could not open device unknown-block(1,0). [ 676.184448][T11610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 676.184464][T11610] Call Trace: [ 676.184474][T11610] [ 676.184495][T11610] dump_stack_lvl+0x188/0x24e [ 676.211772][T11610] ? show_regs_print_info+0x12/0x12 [ 676.217014][T11610] ? load_image+0x410/0x410 [ 676.221557][T11610] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 676.227865][T11610] should_fail_ex+0x390/0x4c0 [ 676.232606][T11610] should_failslab+0x5/0x20 [ 676.237140][T11610] slab_pre_alloc_hook+0x59/0x300 [ 676.242220][T11610] ? current_time+0x19b/0x2c0 [ 676.246951][T11610] ? proc_thread_self_get_link+0xf8/0x190 [ 676.252743][T11610] __kmem_cache_alloc_node+0x4f/0x270 [ 676.258157][T11610] ? proc_thread_self_get_link+0xf8/0x190 [ 676.263922][T11610] kmalloc_trace+0x26/0xe0 [ 676.268378][T11610] proc_thread_self_get_link+0xf8/0x190 [ 676.273967][T11610] ? proc_setup_thread_self+0x2d0/0x2d0 [ 676.279555][T11610] pick_link+0x6ed/0xe20 [ 676.283847][T11610] step_into+0xc14/0xee0 [ 676.288135][T11610] ? set_root+0x3a0/0x3a0 [ 676.292511][T11610] ? lookup_fast+0x14a/0x4c0 [ 676.297151][T11610] ? security_inode_permission+0xac/0xf0 [ 676.302827][T11610] link_path_walk+0x744/0xea0 [ 676.307567][T11610] ? handle_lookup_down+0x130/0x130 [ 676.312819][T11610] path_openat+0x285/0x2f10 [ 676.317429][T11610] ? kasan_set_track+0x60/0x70 [ 676.322231][T11610] ? verify_lock_unused+0x140/0x140 [ 676.323004][ T4551] usb 1-1: USB disconnect, device number 39 [ 676.327459][T11610] ? do_sys_openat2+0xdd/0x4f0 [ 676.327498][T11610] ? do_filp_open+0x420/0x420 [ 676.327568][T11610] do_filp_open+0x1ee/0x420 [ 676.347405][T11610] ? vfs_tmpfile+0x490/0x490 [ 676.352090][T11610] ? _raw_spin_unlock+0x24/0x40 [ 676.356976][T11610] ? alloc_fd+0x590/0x640 [ 676.361353][T11610] do_sys_openat2+0x14b/0x4f0 [ 676.366071][T11610] ? do_sys_open+0xe0/0xe0 [ 676.368113][T11614] FAULT_INJECTION: forcing a failure. [ 676.368113][T11614] name failslab, interval 1, probability 0, space 0, times 0 [ 676.370510][T11610] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 676.370546][T11610] ? lock_chain_count+0x20/0x20 [ 676.394037][T11610] __x64_sys_openat+0x135/0x160 [ 676.398931][T11610] do_syscall_64+0x4c/0xa0 [ 676.403404][T11610] ? clear_bhb_loop+0x60/0xb0 [ 676.408128][T11610] ? clear_bhb_loop+0x60/0xb0 [ 676.412861][T11610] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.418799][T11610] RIP: 0033:0x7fa1dc95fd8e [ 676.423255][T11610] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 676.442882][T11610] RSP: 002b:00007fa1dd901ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 676.451316][T11610] RAX: ffffffffffffffda RBX: 00007fa1dd9026c0 RCX: 00007fa1dc95fd8e [ 676.459356][T11610] RDX: 0000000000000002 RSI: 00007fa1dd901f90 RDI: ffffffffffffff9c [ 676.467345][T11610] RBP: 00007fa1dca36b50 R08: 0000000000000000 R09: 0000000000000000 [ 676.475341][T11610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.483344][T11610] R13: 00007fa1dcc26128 R14: 00007fa1dcc26090 R15: 00007fffb7341808 [ 676.491360][T11610] [ 676.513699][T11614] CPU: 0 PID: 11614 Comm: syz.1.2150 Not tainted syzkaller #0 [ 676.521234][T11614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 676.531314][T11614] Call Trace: [ 676.534633][T11614] [ 676.537593][T11614] dump_stack_lvl+0x188/0x24e [ 676.542337][T11614] ? show_regs_print_info+0x12/0x12 [ 676.547578][T11614] ? load_image+0x410/0x410 [ 676.552127][T11614] ? __might_sleep+0xd0/0xd0 [ 676.556756][T11614] ? __lock_acquire+0x7ea0/0x7ea0 [ 676.561834][T11614] should_fail_ex+0x390/0x4c0 [ 676.566552][T11614] should_failslab+0x5/0x20 [ 676.571117][T11614] slab_pre_alloc_hook+0x59/0x300 [ 676.576176][T11614] ? __register_sysctl_table+0x9b0/0xed0 [ 676.581848][T11614] __kmem_cache_alloc_node+0x4f/0x270 [ 676.587259][T11614] ? __register_sysctl_table+0x9b0/0xed0 [ 676.592919][T11614] __kmalloc+0xa3/0x240 [ 676.597109][T11614] __register_sysctl_table+0x9b0/0xed0 [ 676.602600][T11614] setup_ipc_sysctls+0x2c3/0x350 [ 676.607582][T11614] copy_ipcs+0x308/0x500 [ 676.611865][T11614] create_new_namespaces+0x212/0x700 [ 676.617194][T11614] unshare_nsproxy_namespaces+0x116/0x160 [ 676.622959][T11614] ksys_unshare+0x4f6/0x8e0 [ 676.627520][T11614] ? sighand_ctor+0x40/0x40 [ 676.632076][T11614] ? lock_chain_count+0x20/0x20 [ 676.636996][T11614] ? syscall_enter_from_user_mode+0x21/0x80 [ 676.642927][T11614] __x64_sys_unshare+0x34/0x40 [ 676.647744][T11614] do_syscall_64+0x4c/0xa0 [ 676.652229][T11614] ? clear_bhb_loop+0x60/0xb0 [ 676.656949][T11614] ? clear_bhb_loop+0x60/0xb0 [ 676.661673][T11614] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.667605][T11614] RIP: 0033:0x7f0cfe99f559 [ 676.672050][T11614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.691699][T11614] RSP: 002b:00007f0cff8e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 676.700143][T11614] RAX: ffffffffffffffda RBX: 00007f0cfec25fa0 RCX: 00007f0cfe99f559 [ 676.708173][T11614] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 676.716186][T11614] RBP: 00007f0cfea36b50 R08: 0000000000000000 R09: 0000000000000000 [ 676.724190][T11614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.732232][T11614] R13: 00007f0cfec26038 R14: 00007f0cfec25fa0 R15: 00007ffdff82c238 [ 676.740276][T11614] [ 676.752895][T11614] sysctl could not get directory: /kernel -12 [ 676.759201][T11614] CPU: 0 PID: 11614 Comm: syz.1.2150 Not tainted syzkaller #0 [ 676.766689][T11614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 676.776764][T11614] Call Trace: [ 676.780072][T11614] [ 676.783015][T11614] dump_stack_lvl+0x188/0x24e [ 676.787724][T11614] ? show_regs_print_info+0x12/0x12 [ 676.792947][T11614] ? slab_free_freelist_hook+0x133/0x1b0 [ 676.798612][T11614] ? __register_sysctl_table+0xe35/0xed0 [ 676.804259][T11614] ? __kmem_cache_free+0xb6/0x200 [ 676.809302][T11614] __register_sysctl_table+0xe3a/0xed0 [ 676.814780][T11614] setup_ipc_sysctls+0x2c3/0x350 [ 676.819750][T11614] copy_ipcs+0x308/0x500 [ 676.824038][T11614] create_new_namespaces+0x212/0x700 [ 676.829363][T11614] unshare_nsproxy_namespaces+0x116/0x160 [ 676.835101][T11614] ksys_unshare+0x4f6/0x8e0 [ 676.839635][T11614] ? sighand_ctor+0x40/0x40 [ 676.844172][T11614] ? lock_chain_count+0x20/0x20 [ 676.849050][T11614] ? syscall_enter_from_user_mode+0x21/0x80 [ 676.854964][T11614] __x64_sys_unshare+0x34/0x40 [ 676.859792][T11614] do_syscall_64+0x4c/0xa0 [ 676.864243][T11614] ? clear_bhb_loop+0x60/0xb0 [ 676.868939][T11614] ? clear_bhb_loop+0x60/0xb0 [ 676.873640][T11614] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.879555][T11614] RIP: 0033:0x7f0cfe99f559 [ 676.884000][T11614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.903635][T11614] RSP: 002b:00007f0cff8e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 676.912059][T11614] RAX: ffffffffffffffda RBX: 00007f0cfec25fa0 RCX: 00007f0cfe99f559 [ 676.920073][T11614] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 676.928059][T11614] RBP: 00007f0cfea36b50 R08: 0000000000000000 R09: 0000000000000000 [ 676.936044][T11614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.944050][T11614] R13: 00007f0cfec26038 R14: 00007f0cfec25fa0 R15: 00007ffdff82c238 [ 676.952076][T11614] [ 677.007240][ T4548] usb 3-1: USB disconnect, device number 39 [ 677.087453][T11620] md: could not open device unknown-block(1,5). [ 677.095960][T11620] md: md_import_device returned -16 [ 677.103843][T11622] jffs2: notice: (11622) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 677.237082][T11629] FAULT_INJECTION: forcing a failure. [ 677.237082][T11629] name failslab, interval 1, probability 0, space 0, times 0 [ 677.249973][T11629] CPU: 1 PID: 11629 Comm: syz.0.2157 Not tainted syzkaller #0 [ 677.257466][T11629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 677.267580][T11629] Call Trace: [ 677.270871][T11629] [ 677.273816][T11629] dump_stack_lvl+0x188/0x24e [ 677.278524][T11629] ? show_regs_print_info+0x12/0x12 [ 677.283748][T11629] ? load_image+0x410/0x410 [ 677.288283][T11629] ? __might_sleep+0xd0/0xd0 [ 677.292886][T11629] ? __lock_acquire+0x7ea0/0x7ea0 [ 677.297932][T11629] should_fail_ex+0x390/0x4c0 [ 677.302636][T11629] should_failslab+0x5/0x20 [ 677.307154][T11629] slab_pre_alloc_hook+0x59/0x300 [ 677.312193][T11629] ? memcg_list_lru_alloc+0x331/0xb00 [ 677.317599][T11629] __kmem_cache_alloc_node+0x4f/0x270 [ 677.323015][T11629] ? memcg_list_lru_alloc+0x331/0xb00 [ 677.328420][T11629] __kmalloc+0xa3/0x240 [ 677.332593][T11629] memcg_list_lru_alloc+0x331/0xb00 [ 677.337816][T11629] ? slab_pre_alloc_hook+0xb1/0x300 [ 677.343065][T11629] ? memcg_reparent_list_lrus+0x850/0x850 [ 677.348807][T11629] ? get_obj_cgroup_from_current+0xd0/0x280 [ 677.354772][T11629] ? get_obj_cgroup_from_current+0xd0/0x280 [ 677.360697][T11629] slab_pre_alloc_hook+0x2ad/0x300 [ 677.365828][T11629] ? slab_pre_alloc_hook+0xb1/0x300 [ 677.371042][T11629] kmem_cache_alloc_lru+0x49/0x2e0 [ 677.376169][T11629] ? iget_locked+0x201/0x8c0 [ 677.380786][T11629] iget_locked+0x201/0x8c0 [ 677.385222][T11629] kernfs_get_inode+0x4a/0x680 [ 677.390020][T11629] ? down_read+0x1a8/0x2d0 [ 677.394490][T11629] kernfs_get_tree+0x455/0x710 [ 677.399300][T11629] sysfs_get_tree+0x42/0x110 [ 677.403930][T11629] vfs_get_tree+0x88/0x270 [ 677.408363][T11629] do_new_mount+0x247/0xa50 [ 677.412907][T11629] __se_sys_mount+0x2e3/0x3d0 [ 677.417631][T11629] ? __x64_sys_mount+0xc0/0xc0 [ 677.422425][T11629] ? lockdep_hardirqs_on+0x94/0x140 [ 677.427637][T11629] ? __x64_sys_mount+0x1c/0xc0 [ 677.432421][T11629] do_syscall_64+0x4c/0xa0 [ 677.436855][T11629] ? clear_bhb_loop+0x60/0xb0 [ 677.441578][T11629] ? clear_bhb_loop+0x60/0xb0 [ 677.446274][T11629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 677.452183][T11629] RIP: 0033:0x7f755539f559 [ 677.456610][T11629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.476229][T11629] RSP: 002b:00007f755631b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 677.484660][T11629] RAX: ffffffffffffffda RBX: 00007f7555625fa0 RCX: 00007f755539f559 [ 677.492641][T11629] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000000000 [ 677.500631][T11629] RBP: 00007f7555436b50 R08: 0000000000000000 R09: 0000000000000000 [ 677.508620][T11629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.516623][T11629] R13: 00007f7555626038 R14: 00007f7555625fa0 R15: 00007ffe48fe8678 [ 677.524653][T11629] [ 677.528864][ T4598] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 677.582283][T11632] FAULT_INJECTION: forcing a failure. [ 677.582283][T11632] name failslab, interval 1, probability 0, space 0, times 0 [ 677.599693][T11632] CPU: 0 PID: 11632 Comm: syz.1.2158 Not tainted syzkaller #0 [ 677.607213][T11632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 677.617288][T11632] Call Trace: [ 677.620610][T11632] [ 677.623540][T11632] dump_stack_lvl+0x188/0x24e [ 677.628229][T11632] ? show_regs_print_info+0x12/0x12 [ 677.633434][T11632] ? load_image+0x410/0x410 [ 677.637944][T11632] ? __might_sleep+0xd0/0xd0 [ 677.642550][T11632] ? __lock_acquire+0x7ea0/0x7ea0 [ 677.647638][T11632] should_fail_ex+0x390/0x4c0 [ 677.652323][T11632] should_failslab+0x5/0x20 [ 677.656828][T11632] slab_pre_alloc_hook+0x59/0x300 [ 677.661861][T11632] kmem_cache_alloc+0x56/0x2f0 [ 677.666636][T11632] ? getname_flags+0xb7/0x500 [ 677.671320][T11632] getname_flags+0xb7/0x500 [ 677.675826][T11632] __x64_sys_mkdirat+0x78/0x90 [ 677.680620][T11632] do_syscall_64+0x4c/0xa0 [ 677.685043][T11632] ? clear_bhb_loop+0x60/0xb0 [ 677.689723][T11632] ? clear_bhb_loop+0x60/0xb0 [ 677.694434][T11632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 677.700336][T11632] RIP: 0033:0x7f0cfe99f559 [ 677.704756][T11632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.724365][T11632] RSP: 002b:00007f0cff8e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 677.732775][T11632] RAX: ffffffffffffffda RBX: 00007f0cfec25fa0 RCX: 00007f0cfe99f559 [ 677.740786][T11632] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c [ 677.748787][T11632] RBP: 00007f0cfea36b50 R08: 0000000000000000 R09: 0000000000000000 [ 677.756785][T11632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.764788][T11632] R13: 00007f0cfec26038 R14: 00007f0cfec25fa0 R15: 00007ffdff82c238 [ 677.772808][T11632] [ 677.872547][ T4598] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.883023][ T4598] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 677.885697][T11638] FAULT_INJECTION: forcing a failure. [ 677.885697][T11638] name failslab, interval 1, probability 0, space 0, times 0 [ 677.893263][ T4598] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 677.916360][ T4598] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 677.929269][T11638] CPU: 1 PID: 11638 Comm: syz.1.2161 Not tainted syzkaller #0 [ 677.936763][T11638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 677.937308][ T4598] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 677.946825][T11638] Call Trace: [ 677.946836][T11638] [ 677.946845][T11638] dump_stack_lvl+0x188/0x24e [ 677.946882][T11638] ? show_regs_print_info+0x12/0x12 [ 677.946911][T11638] ? load_image+0x410/0x410 [ 677.946938][T11638] ? __might_sleep+0xd0/0xd0 [ 677.946959][T11638] ? __lock_acquire+0x7ea0/0x7ea0 [ 677.946990][T11638] should_fail_ex+0x390/0x4c0 [ 677.947018][T11638] should_failslab+0x5/0x20 [ 677.947038][T11638] slab_pre_alloc_hook+0x59/0x300 [ 677.947063][T11638] ? memcg_list_lru_alloc+0x331/0xb00 [ 677.947091][T11638] __kmem_cache_alloc_node+0x4f/0x270 [ 677.947118][T11638] ? memcg_list_lru_alloc+0x331/0xb00 [ 677.961301][ T4598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.962389][T11638] __kmalloc+0xa3/0x240 [ 678.028887][T11638] memcg_list_lru_alloc+0x331/0xb00 [ 678.034134][T11638] ? slab_pre_alloc_hook+0xb1/0x300 [ 678.039366][T11638] ? memcg_reparent_list_lrus+0x850/0x850 [ 678.045115][T11638] ? get_obj_cgroup_from_current+0xd0/0x280 [ 678.051038][T11638] ? get_obj_cgroup_from_current+0xd0/0x280 [ 678.056972][T11638] slab_pre_alloc_hook+0x2ad/0x300 [ 678.062118][T11638] ? slab_pre_alloc_hook+0xb1/0x300 [ 678.067365][T11638] kmem_cache_alloc_lru+0x49/0x2e0 [ 678.072492][T11638] ? iget_locked+0x201/0x8c0 [ 678.077126][T11638] iget_locked+0x201/0x8c0 [ 678.081573][T11638] kernfs_get_inode+0x4a/0x680 [ 678.086355][T11638] ? down_read+0x1a8/0x2d0 [ 678.090810][T11638] kernfs_get_tree+0x455/0x710 [ 678.095626][T11638] sysfs_get_tree+0x42/0x110 [ 678.100242][T11638] vfs_get_tree+0x88/0x270 [ 678.104678][T11638] do_new_mount+0x247/0xa50 [ 678.109203][T11638] __se_sys_mount+0x2e3/0x3d0 [ 678.113923][T11638] ? __x64_sys_mount+0xc0/0xc0 [ 678.118723][T11638] ? lockdep_hardirqs_on+0x94/0x140 [ 678.123969][T11638] ? __x64_sys_mount+0x1c/0xc0 [ 678.128752][T11638] do_syscall_64+0x4c/0xa0 [ 678.133184][T11638] ? clear_bhb_loop+0x60/0xb0 [ 678.137890][T11638] ? clear_bhb_loop+0x60/0xb0 [ 678.142611][T11638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 678.148520][T11638] RIP: 0033:0x7f0cfe99f559 [ 678.152949][T11638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.172568][T11638] RSP: 002b:00007f0cff8e8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 678.181015][T11638] RAX: ffffffffffffffda RBX: 00007f0cfec25fa0 RCX: 00007f0cfe99f559 [ 678.189009][T11638] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000000000 [ 678.197001][T11638] RBP: 00007f0cfea36b50 R08: 0000000000000000 R09: 0000000000000000 [ 678.205021][T11638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.213018][T11638] R13: 00007f0cfec26038 R14: 00007f0cfec25fa0 R15: 00007ffdff82c238 [ 678.221062][T11638] [ 678.390931][ T4552] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 678.478696][ T4598] usb 5-1: USB disconnect, device number 37 [ 678.610909][ T4548] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 678.620025][ T4552] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.632941][ T4552] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 678.643221][ T4552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.653585][ T4552] usb 4-1: config 0 descriptor?? [ 678.662454][ T4552] pwc: Askey VC010 type 2 USB webcam detected. [ 678.710851][ T4551] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 678.798708][T11647] FAULT_INJECTION: forcing a failure. [ 678.798708][T11647] name failslab, interval 1, probability 0, space 0, times 0 [ 678.812343][T11647] CPU: 1 PID: 11647 Comm: syz.0.2164 Not tainted syzkaller #0 [ 678.819830][T11647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 678.829886][T11647] Call Trace: [ 678.833196][T11647] [ 678.836165][T11647] dump_stack_lvl+0x188/0x24e [ 678.840874][T11647] ? show_regs_print_info+0x12/0x12 [ 678.846102][T11647] ? load_image+0x410/0x410 [ 678.850629][T11647] ? __might_sleep+0xd0/0xd0 [ 678.855222][T11647] ? __lock_acquire+0x7ea0/0x7ea0 [ 678.860271][T11647] should_fail_ex+0x390/0x4c0 [ 678.864998][T11647] should_failslab+0x5/0x20 [ 678.869557][T11647] slab_pre_alloc_hook+0x59/0x300 [ 678.874615][T11647] ? nf_tables_commit+0x6c9/0x7c90 [ 678.879810][T11647] __kmem_cache_alloc_node+0x4f/0x270 [ 678.885221][T11647] ? nf_tables_commit+0x6c9/0x7c90 [ 678.890372][T11647] kmalloc_trace+0x26/0xe0 [ 678.894848][T11647] nf_tables_commit+0x6c9/0x7c90 [ 678.899823][T11647] ? nft_pernet+0x23/0x230 [ 678.904354][T11647] ? nf_tables_rule_release+0x360/0x360 [ 678.909935][T11647] ? kfree+0x30/0x1a0 [ 678.913948][T11647] ? nf_tables_newrule+0x24f1/0x2810 [ 678.919269][T11647] ? nf_tables_delchain+0xf00/0xf00 [ 678.924472][T11647] ? __lock_acquire+0x7ea0/0x7ea0 [ 678.929514][T11647] ? nf_tables_newtable+0xd19/0x16c0 [ 678.934842][T11647] ? __nla_parse+0x3c/0x50 [ 678.939302][T11647] nfnetlink_rcv+0x1aae/0x2470 [ 678.944102][T11647] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 678.949655][T11647] ? ref_tracker_free+0x682/0x830 [ 678.954745][T11647] ? netlink_deliver_tap+0x2e/0x1b0 [ 678.959979][T11647] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 678.965464][T11647] ? netlink_deliver_tap+0x2e/0x1b0 [ 678.970699][T11647] netlink_unicast+0x7ad/0x920 [ 678.975520][T11647] netlink_sendmsg+0x8ad/0xbd0 [ 678.980314][T11647] ? netlink_getsockopt+0x550/0x550 [ 678.985519][T11647] ? apparmor_socket_sendmsg+0x8a/0x330 [ 678.991078][T11647] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 678.996432][T11647] ? security_socket_sendmsg+0x7c/0xa0 [ 679.001902][T11647] ? netlink_getsockopt+0x550/0x550 [ 679.007131][T11647] ____sys_sendmsg+0x5ed/0x9a0 [ 679.011922][T11647] ? __sys_sendmsg_sock+0x30/0x30 [ 679.016977][T11647] ? __import_iovec+0x306/0x510 [ 679.021840][T11647] ? import_iovec+0x6f/0xa0 [ 679.026355][T11647] ___sys_sendmsg+0x2a2/0x360 [ 679.031074][T11647] ? __sys_sendmsg+0x2a0/0x2a0 [ 679.035876][T11647] __se_sys_sendmsg+0x1c3/0x2b0 [ 679.040754][T11647] ? __x64_sys_sendmsg+0x80/0x80 [ 679.045765][T11647] ? lockdep_hardirqs_on+0x94/0x140 [ 679.050989][T11647] do_syscall_64+0x4c/0xa0 [ 679.055449][T11647] ? clear_bhb_loop+0x60/0xb0 [ 679.060145][T11647] ? clear_bhb_loop+0x60/0xb0 [ 679.064870][T11647] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 679.070798][T11647] RIP: 0033:0x7f755539f559 [ 679.075288][T11647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.094929][T11647] RSP: 002b:00007f755631b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.103370][T11647] RAX: ffffffffffffffda RBX: 00007f7555625fa0 RCX: 00007f755539f559 [ 679.111375][T11647] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000004 [ 679.119365][T11647] RBP: 00007f7555436b50 R08: 0000000000000000 R09: 0000000000000000 [ 679.127335][T11647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.135334][T11647] R13: 00007f7555626038 R14: 00007f7555625fa0 R15: 00007ffe48fe8678 [ 679.143335][T11647] [ 679.150334][ T4552] pwc: send_video_command error -71 [ 679.159744][ T4552] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 679.167647][ T4552] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 679.180592][ T4552] usb 4-1: USB disconnect, device number 45 [ 679.188370][ T4548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.201277][ T4266] udevd[4266]: setting owner of /dev/bus/usb/004/045 to uid=0, gid=0 failed: No such file or directory [ 679.206417][ T4548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.223235][ T4548] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 679.236849][ T4548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.246608][ T4548] usb 2-1: config 0 descriptor?? [ 679.263371][ T4551] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 679.290906][ T4551] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.307503][ T4551] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 679.338875][ T4551] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 679.354218][ T4551] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 679.364797][ T4551] usb 3-1: Manufacturer: syz [ 679.372018][ T4551] usb 3-1: config 0 descriptor?? [ 679.393677][ T4551] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 679.408712][T11650] jffs2: notice: (11650) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 679.509122][T11654] md: could not open device unknown-block(1,9). [ 679.519945][T11654] md: md_import_device returned -16 [ 679.580840][ T4552] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 679.683279][ T4548] savu 0003:1E7D:2D5A.0024: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 679.793328][ T4552] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.804283][ T4552] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 679.813628][ T4552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.823965][ T4552] usb 4-1: config 0 descriptor?? [ 679.831461][ T4552] pwc: Askey VC010 type 2 USB webcam detected. [ 679.850933][ T7137] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 679.893097][ T4548] usb 2-1: USB disconnect, device number 31 [ 680.034448][ T7137] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.049910][ T7137] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.060142][ T7137] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 680.069384][ T7137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.079080][ T7137] usb 5-1: config 0 descriptor?? [ 680.252322][ T4552] pwc: recv_control_msg error -32 req 02 val 2b00 [ 680.259424][ T4552] pwc: recv_control_msg error -32 req 02 val 2700 [ 680.266466][ T4552] pwc: recv_control_msg error -32 req 02 val 2c00 [ 680.273567][ T4552] pwc: recv_control_msg error -32 req 04 val 1000 [ 680.280488][ T4552] pwc: recv_control_msg error -32 req 04 val 1300 [ 680.287585][ T4552] pwc: recv_control_msg error -32 req 04 val 1400 [ 680.295180][ T4552] pwc: recv_control_msg error -32 req 02 val 2000 [ 680.305972][ T4552] pwc: recv_control_msg error -32 req 02 val 2100 [ 680.313187][ T4552] pwc: recv_control_msg error -32 req 04 val 1500 [ 680.320186][ T4552] pwc: recv_control_msg error -32 req 02 val 2500 [ 680.327710][ T4552] pwc: recv_control_msg error -32 req 02 val 2400 [ 680.335633][ T4552] pwc: recv_control_msg error -32 req 02 val 2600 [ 680.343794][ T4552] pwc: recv_control_msg error -32 req 02 val 2900 [ 680.351948][ T4552] pwc: recv_control_msg error -32 req 02 val 2800 [ 680.359265][ T4552] pwc: recv_control_msg error -32 req 04 val 1100 [ 680.371787][ T4552] pwc: recv_control_msg error -32 req 04 val 1200 [ 680.379752][ T4552] pwc: Registered as video103. [ 680.386057][ T4552] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input43 [ 680.410472][ T4552] usb 4-1: USB disconnect, device number 46 [ 680.500182][ T7137] savu 0003:1E7D:2D5A.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 680.707908][ T7137] usb 5-1: USB disconnect, device number 38 [ 680.790880][ T4548] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 680.832800][T11671] FAULT_INJECTION: forcing a failure. [ 680.832800][T11671] name failslab, interval 1, probability 0, space 0, times 0 [ 680.845895][T11671] CPU: 0 PID: 11671 Comm: syz.0.2172 Not tainted syzkaller #0 [ 680.853382][T11671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 680.863457][T11671] Call Trace: [ 680.866763][T11671] [ 680.869756][T11671] dump_stack_lvl+0x188/0x24e [ 680.874483][T11671] ? show_regs_print_info+0x12/0x12 [ 680.879711][T11671] ? load_image+0x410/0x410 [ 680.884239][T11671] ? __might_sleep+0xd0/0xd0 [ 680.888850][T11671] ? __lock_acquire+0x7ea0/0x7ea0 [ 680.893922][T11671] should_fail_ex+0x390/0x4c0 [ 680.898621][T11671] should_failslab+0x5/0x20 [ 680.903142][T11671] slab_pre_alloc_hook+0x59/0x300 [ 680.908185][T11671] ? kvmalloc_node+0x6c/0x180 [ 680.912880][T11671] __kmem_cache_alloc_node+0x4f/0x270 [ 680.918271][T11671] ? lockdep_softirqs_off+0x430/0x430 [ 680.923700][T11671] ? kvmalloc_node+0x6c/0x180 [ 680.928409][T11671] __kmalloc_node+0xa2/0x240 [ 680.933018][T11671] kvmalloc_node+0x6c/0x180 [ 680.937538][T11671] rhashtable_init+0x525/0xa60 [ 680.942352][T11671] ipc_init_ids+0x77/0x1e0 [ 680.946784][T11671] msg_init_ns+0x10e/0x170 [ 680.951237][T11671] copy_ipcs+0x314/0x500 [ 680.955505][T11671] create_new_namespaces+0x212/0x700 [ 680.960822][T11671] unshare_nsproxy_namespaces+0x116/0x160 [ 680.966579][T11671] ksys_unshare+0x4f6/0x8e0 [ 680.971108][T11671] ? sighand_ctor+0x40/0x40 [ 680.975674][T11671] ? lock_chain_count+0x20/0x20 [ 680.980550][T11671] ? syscall_enter_from_user_mode+0x21/0x80 [ 680.986476][T11671] __x64_sys_unshare+0x34/0x40 [ 680.991255][T11671] do_syscall_64+0x4c/0xa0 [ 680.995689][T11671] ? clear_bhb_loop+0x60/0xb0 [ 681.000380][T11671] ? clear_bhb_loop+0x60/0xb0 [ 681.005086][T11671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 681.011013][T11671] RIP: 0033:0x7f755539f559 [ 681.015479][T11671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.035096][T11671] RSP: 002b:00007f755631b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 681.043535][T11671] RAX: ffffffffffffffda RBX: 00007f7555625fa0 RCX: 00007f755539f559 [ 681.051531][T11671] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 681.059517][T11671] RBP: 00007f7555436b50 R08: 0000000000000000 R09: 0000000000000000 [ 681.067503][T11671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.075488][T11671] R13: 00007f7555626038 R14: 00007f7555625fa0 R15: 00007ffe48fe8678 [ 681.083489][T11671] [ 681.121732][T11671] rxe_eth0 speed is unknown, defaulting to 1000 [ 681.202229][ T4548] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 681.220822][ T4548] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 681.232147][ T4548] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 681.250805][ T4548] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.272746][ T4548] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 681.284190][ T4548] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 681.294026][ T4548] usb 2-1: Product: syz [ 681.298225][ T4548] usb 2-1: Manufacturer: syz [ 681.314416][ T4548] cdc_wdm 2-1:1.0: skipping garbage [ 681.319760][ T4548] cdc_wdm 2-1:1.0: skipping garbage [ 681.328167][ T4548] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 681.334211][ T4548] cdc_wdm 2-1:1.0: Unknown control protocol [ 681.430728][T11675] md: could not open device unknown-block(1,0). [ 681.437219][T11675] md: md_import_device returned -16 [ 681.447281][T11675] md: could not open device unknown-block(1,1). [ 681.454706][T11675] md: md_import_device returned -16 [ 681.480404][ T7137] usb 3-1: USB disconnect, device number 40 [ 681.539246][ T4548] usb 2-1: USB disconnect, device number 32 [ 681.581051][T11680] jffs2: notice: (11680) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 681.653303][T11684] FAULT_INJECTION: forcing a failure. [ 681.653303][T11684] name failslab, interval 1, probability 0, space 0, times 0 [ 681.667243][T11684] CPU: 1 PID: 11684 Comm: syz.0.2178 Not tainted syzkaller #0 [ 681.674735][T11684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 681.684791][T11684] Call Trace: [ 681.688069][T11684] [ 681.691057][T11684] dump_stack_lvl+0x188/0x24e [ 681.695743][T11684] ? show_regs_print_info+0x12/0x12 [ 681.700948][T11684] ? load_image+0x410/0x410 [ 681.705478][T11684] ? __lock_acquire+0x7ea0/0x7ea0 [ 681.710552][T11684] should_fail_ex+0x390/0x4c0 [ 681.715275][T11684] should_failslab+0x5/0x20 [ 681.719829][T11684] slab_pre_alloc_hook+0x59/0x300 [ 681.724898][T11684] kmem_cache_alloc_lru+0x49/0x2e0 [ 681.730044][T11684] ? iget_locked+0x201/0x8c0 [ 681.734709][T11684] iget_locked+0x201/0x8c0 [ 681.739169][T11684] kernfs_get_inode+0x4a/0x680 [ 681.743981][T11684] ? down_read+0x1a8/0x2d0 [ 681.748439][T11684] kernfs_get_tree+0x455/0x710 [ 681.753248][T11684] sysfs_get_tree+0x42/0x110 [ 681.757876][T11684] vfs_get_tree+0x88/0x270 [ 681.762308][T11684] do_new_mount+0x247/0xa50 [ 681.766836][T11684] __se_sys_mount+0x2e3/0x3d0 [ 681.771533][T11684] ? __x64_sys_mount+0xc0/0xc0 [ 681.776340][T11684] ? lockdep_hardirqs_on+0x94/0x140 [ 681.781595][T11684] ? __x64_sys_mount+0x1c/0xc0 [ 681.786393][T11684] do_syscall_64+0x4c/0xa0 [ 681.790834][T11684] ? clear_bhb_loop+0x60/0xb0 [ 681.795528][T11684] ? clear_bhb_loop+0x60/0xb0 [ 681.800224][T11684] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 681.806132][T11684] RIP: 0033:0x7f755539f559 [ 681.810560][T11684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.830181][T11684] RSP: 002b:00007f755631b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 681.838619][T11684] RAX: ffffffffffffffda RBX: 00007f7555625fa0 RCX: 00007f755539f559 [ 681.846608][T11684] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000000000 [ 681.854592][T11684] RBP: 00007f7555436b50 R08: 0000000000000000 R09: 0000000000000000 [ 681.862572][T11684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.870552][T11684] R13: 00007f7555626038 R14: 00007f7555625fa0 R15: 00007ffe48fe8678 [ 681.878559][T11684] [ 681.970862][ T4598] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 682.018019][T11690] md: invalid raid superblock magic on ram7 [ 682.024145][T11690] md: ram7 does not have a valid v0.90 superblock, not importing! [ 682.041742][T11690] md: md_import_device returned -22 [ 682.182350][ T4598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.212003][ T4598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.230846][ T4598] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 682.249426][ T4598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.288317][ T4598] usb 5-1: config 0 descriptor?? [ 682.369970][T11698] md: could not open device unknown-block(1,0). [ 682.640810][ T7136] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 682.768444][T11705] md: couldn't update array info. -22 [ 682.780164][T11705] md: could not open device unknown-block(1,4). [ 682.787530][T11705] md: md_import_device returned -16 [ 682.797405][T11705] md: could not open device unknown-block(1,5). [ 682.804872][T11705] md: md_import_device returned -16 [ 682.822417][ T7136] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.843640][ T7136] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.873353][ T7136] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 682.900966][ T7136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.915264][ T4598] usbhid 5-1:0.0: can't add hid device: -71 [ 682.930266][ T4598] usbhid: probe of 5-1:0.0 failed with error -71 [ 682.939564][ T7136] usb 1-1: config 0 descriptor?? [ 682.956522][ T4598] usb 5-1: USB disconnect, device number 39 [ 683.017944][T11711] md: could not open device unknown-block(1,6). [ 683.024583][T11711] md: md_import_device returned -16 [ 683.030403][T11711] md: invalid raid superblock magic on ram7 [ 683.036819][T11711] md: ram7 does not have a valid v0.90 superblock, not importing! [ 683.045265][T11711] md: md_import_device returned -22 [ 683.220882][ T4548] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 683.260825][ T7137] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 683.357300][ T7136] savu 0003:1E7D:2D5A.0026: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 683.412725][ T4548] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 683.428698][ T4548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.442723][ T7137] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.457379][ T4548] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 683.470821][ T7137] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 683.484870][ T4548] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 683.491151][ T7137] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 683.515251][ T4548] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 683.525322][ T7137] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 683.533867][ T4548] usb 3-1: Manufacturer: syz [ 683.554274][ T7137] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 683.563686][ T7137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.594486][ T4548] usb 3-1: config 0 descriptor?? [ 683.625546][ T4548] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 683.639258][T11716] FAULT_INJECTION: forcing a failure. [ 683.639258][T11716] name failslab, interval 1, probability 0, space 0, times 0 [ 683.653673][ T4551] usb 1-1: USB disconnect, device number 40 [ 683.659673][T11716] CPU: 1 PID: 11716 Comm: syz.4.2191 Not tainted syzkaller #0 [ 683.667157][T11716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 683.677232][T11716] Call Trace: [ 683.680548][T11716] [ 683.683497][T11716] dump_stack_lvl+0x188/0x24e [ 683.688224][T11716] ? show_regs_print_info+0x12/0x12 [ 683.693443][T11716] ? load_image+0x410/0x410 [ 683.697979][T11716] ? __lock_acquire+0x7ea0/0x7ea0 [ 683.703067][T11716] should_fail_ex+0x390/0x4c0 [ 683.707761][T11716] should_failslab+0x5/0x20 [ 683.712288][T11716] slab_pre_alloc_hook+0x59/0x300 [ 683.717340][T11716] kmem_cache_alloc_lru+0x49/0x2e0 [ 683.722463][T11716] ? iget_locked+0x201/0x8c0 [ 683.727085][T11716] iget_locked+0x201/0x8c0 [ 683.731576][T11716] kernfs_get_inode+0x4a/0x680 [ 683.736361][T11716] ? down_read+0x1a8/0x2d0 [ 683.740793][T11716] kernfs_get_tree+0x455/0x710 [ 683.745579][T11716] sysfs_get_tree+0x42/0x110 [ 683.750188][T11716] vfs_get_tree+0x88/0x270 [ 683.754679][T11716] do_new_mount+0x247/0xa50 [ 683.759229][T11716] __se_sys_mount+0x2e3/0x3d0 [ 683.763953][T11716] ? __x64_sys_mount+0xc0/0xc0 [ 683.768736][T11716] ? lockdep_hardirqs_on+0x94/0x140 [ 683.773944][T11716] ? __x64_sys_mount+0x1c/0xc0 [ 683.778728][T11716] do_syscall_64+0x4c/0xa0 [ 683.783165][T11716] ? clear_bhb_loop+0x60/0xb0 [ 683.787881][T11716] ? clear_bhb_loop+0x60/0xb0 [ 683.792590][T11716] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 683.798497][T11716] RIP: 0033:0x7fa1dc99f559 [ 683.802935][T11716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.822560][T11716] RSP: 002b:00007fa1dd923028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 683.830995][T11716] RAX: ffffffffffffffda RBX: 00007fa1dcc25fa0 RCX: 00007fa1dc99f559 [ 683.838988][T11716] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000000000 [ 683.846981][T11716] RBP: 00007fa1dca36b50 R08: 0000000000000000 R09: 0000000000000000 [ 683.854962][T11716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.862968][T11716] R13: 00007fa1dcc26038 R14: 00007fa1dcc25fa0 R15: 00007fffb7341808 [ 683.870986][T11716] [ 683.960717][T11719] md: invalid raid superblock magic on ram7 [ 683.966695][T11719] md: ram7 does not have a valid v0.90 superblock, not importing! [ 683.974699][T11719] md: md_import_device returned -22 [ 684.106577][ T7137] gud 2-1:1.0: No supported pixel formats found [ 684.113205][ T7137] gud: probe of 2-1:1.0 failed with error -22 [ 684.282323][T11727] md: could not open device unknown-block(1,0). [ 684.317753][T11729] md: couldn't update array info. -22 [ 684.328605][T11729] md: could not open device unknown-block(1,1). [ 684.336127][T11729] md: md_import_device returned -16 [ 684.405885][T11731] jffs2: notice: (11731) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 684.432423][T11733] md: could not open device unknown-block(1,0). [ 684.451569][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2198'. [ 684.587981][T11740] md: could not open device unknown-block(1,0). [ 684.599740][T11740] md: md_import_device returned -16 [ 684.605965][T11740] md: could not open device unknown-block(1,1). [ 684.618331][T11740] md: md_import_device returned -16 [ 684.839153][T11751] md: could not open device unknown-block(1,1). [ 684.845739][T11751] md: md_import_device returned -16 [ 684.860889][ T7136] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 684.891007][ T7137] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 684.916720][T11753] md: could not open device unknown-block(1,0). [ 685.019383][T11757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.031140][T11757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.065378][ T7136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.076598][ T7136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.090356][ T7136] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 685.099598][ T7136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.109942][ T7137] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.121911][ T7137] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.132737][ T7136] usb 5-1: config 0 descriptor?? [ 685.141344][ T7137] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 685.150535][ T7137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.164988][ T7137] usb 4-1: config 0 descriptor?? [ 685.462045][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.468442][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.578817][ T7137] savu 0003:1E7D:2D5A.0027: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 685.778745][ T4551] usb 4-1: USB disconnect, device number 47 [ 685.812317][ T4551] ================================================================== [ 685.815304][ T7136] usbhid 5-1:0.0: can't add hid device: -71 [ 685.820409][ T4551] BUG: KASAN: use-after-free in roccat_disconnect+0x236/0x240 [ 685.833793][ T4551] Read of size 4 at addr ffff888074ccd008 by task kworker/1:13/4551 [ 685.841792][ T4551] [ 685.844141][ T4551] CPU: 1 PID: 4551 Comm: kworker/1:13 Not tainted syzkaller #0 [ 685.844192][ T7136] usbhid: probe of 5-1:0.0 failed with error -71 [ 685.851697][ T4551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 685.851713][ T4551] Workqueue: usb_hub_wq hub_event [ 685.851762][ T4551] Call Trace: [ 685.851769][ T4551] [ 685.851778][ T4551] dump_stack_lvl+0x188/0x24e [ 685.876005][ T7136] usb 5-1: USB disconnect, device number 40 [ 685.876532][ T4551] ? __lock_acquire+0x7ea0/0x7ea0 [ 685.876565][ T4551] ? show_regs_print_info+0x12/0x12 [ 685.900403][ T4551] ? load_image+0x410/0x410 [ 685.904937][ T4551] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 685.910435][ T4551] ? __virt_addr_valid+0x188/0x540 [ 685.915586][ T4551] ? __virt_addr_valid+0x467/0x540 [ 685.920734][ T4551] ? roccat_disconnect+0x236/0x240 [ 685.925873][ T4551] print_report+0xa8/0x210 [ 685.930311][ T4551] kasan_report+0x10b/0x140 [ 685.934871][ T4551] ? roccat_disconnect+0x236/0x240 [ 685.940028][ T4551] roccat_disconnect+0x236/0x240 [ 685.945065][ T4551] savu_remove+0xe5/0x160 [ 685.949506][ T4551] ? savu_probe+0x350/0x350 [ 685.954031][ T4551] hid_device_remove+0xba/0x1b0 [ 685.958970][ T4551] ? hid_device_probe+0x520/0x520 [ 685.964028][ T4551] device_release_driver_internal+0x47d/0x7c0 [ 685.970148][ T4551] bus_remove_device+0x2dd/0x400 [ 685.975177][ T4551] device_del+0x63f/0xa80 [ 685.979558][ T4551] ? kill_device+0x160/0x160 [ 685.984207][ T4551] ? lock_chain_count+0x20/0x20 [ 685.989095][ T4551] ? _raw_spin_lock_irq+0xb7/0xf0 [ 685.994163][ T4551] ? _raw_spin_lock_irqsave+0x100/0x100 [ 685.999754][ T4551] hid_destroy_device+0x66/0x100 [ 686.004796][ T4551] usbhid_disconnect+0x9b/0xc0 [ 686.009654][ T4551] usb_unbind_interface+0x200/0x870 [ 686.014958][ T4551] ? kernfs_remove_by_name_ns+0x113/0x150 [ 686.020724][ T4551] ? usb_driver_release_interface+0x1c0/0x1c0 [ 686.026827][ T4551] device_release_driver_internal+0x4cf/0x7c0 [ 686.032939][ T4551] bus_remove_device+0x2dd/0x400 [ 686.037951][ T4551] device_del+0x63f/0xa80 [ 686.042332][ T4551] ? device_release+0x92/0x1c0 [ 686.047147][ T4551] ? kill_device+0x160/0x160 [ 686.051780][ T4551] ? kobject_put+0x41d/0x450 [ 686.056420][ T4551] usb_disable_device+0x3e7/0x8a0 [ 686.061485][ T4551] usb_disconnect+0x33c/0x8a0 [ 686.066220][ T4551] hub_event+0x1d27/0x5200 [ 686.070707][ T4551] ? hub_post_resume+0x120/0x120 [ 686.075689][ T4551] ? read_lock_is_recursive+0x10/0x10 [ 686.081111][ T4551] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 686.087048][ T4551] ? _raw_spin_unlock+0x40/0x40 [ 686.092046][ T4551] ? _raw_spin_unlock_irq+0x1f/0x40 [ 686.097290][ T4551] ? process_one_work+0x7b4/0x1160 [ 686.102509][ T4551] process_one_work+0x8ab/0x1160 [ 686.107498][ T4551] ? worker_detach_from_pool+0x240/0x240 [ 686.113180][ T4551] ? _raw_spin_lock_irq+0xb7/0xf0 [ 686.118258][ T4551] ? _raw_spin_lock_irqsave+0x100/0x100 [ 686.123857][ T4551] ? wq_worker_running+0x97/0x190 [ 686.128910][ T4551] worker_thread+0xaf5/0x12a0 [ 686.133632][ T4551] kthread+0x29d/0x330 [ 686.137751][ T4551] ? worker_clr_flags+0x1a0/0x1a0 [ 686.142825][ T4551] ? kthread_blkcg+0xd0/0xd0 [ 686.147447][ T4551] ret_from_fork+0x1f/0x30 [ 686.151924][ T4551] [ 686.154976][ T4551] [ 686.157329][ T4551] Allocated by task 7137: [ 686.161685][ T4551] kasan_set_track+0x4b/0x70 [ 686.166317][ T4551] __kasan_kmalloc+0x8e/0xa0 [ 686.170944][ T4551] roccat_connect+0x59/0x490 [ 686.175565][ T4551] savu_probe+0x1af/0x350 [ 686.179973][ T4551] hid_device_probe+0x2b8/0x520 [ 686.184256][ T7136] usb 3-1: USB disconnect, device number 41 [ 686.184861][ T4551] really_probe+0x24a/0xb40 [ 686.184883][ T4551] __driver_probe_device+0x1f5/0x390 [ 686.200591][ T4551] driver_probe_device+0x4f/0x420 [ 686.205739][ T4551] __device_attach_driver+0x2c6/0x510 [ 686.211188][ T4551] bus_for_each_drv+0x184/0x210 [ 686.216071][ T4551] __device_attach+0x2a7/0x480 [ 686.220861][ T4551] bus_probe_device+0xba/0x1d0 [ 686.225674][ T4551] device_add+0xbcf/0x1050 [ 686.230126][ T4551] hid_add_device+0x361/0x500 [ 686.234852][ T4551] usbhid_probe+0xc3f/0x1010 [ 686.239465][ T4551] usb_probe_interface+0x6e7/0xcf0 [ 686.244620][ T4551] really_probe+0x24a/0xb40 [ 686.249179][ T4551] __driver_probe_device+0x1f5/0x390 [ 686.254501][ T4551] driver_probe_device+0x4f/0x420 [ 686.259554][ T4551] __device_attach_driver+0x2c6/0x510 [ 686.264954][ T4551] bus_for_each_drv+0x184/0x210 [ 686.269844][ T4551] __device_attach+0x2a7/0x480 [ 686.274645][ T4551] bus_probe_device+0xba/0x1d0 [ 686.279451][ T4551] device_add+0xbcf/0x1050 [ 686.283911][ T4551] usb_set_configuration+0x1ad8/0x2140 [ 686.289410][ T4551] usb_generic_driver_probe+0x89/0x150 [ 686.294923][ T4551] usb_probe_device+0x126/0x250 [ 686.299808][ T4551] really_probe+0x24a/0xb40 [ 686.304373][ T4551] __driver_probe_device+0x1f5/0x390 [ 686.309693][ T4551] driver_probe_device+0x4f/0x420 [ 686.314748][ T4551] __device_attach_driver+0x2c6/0x510 [ 686.320193][ T4551] bus_for_each_drv+0x184/0x210 [ 686.325090][ T4551] __device_attach+0x2a7/0x480 [ 686.329876][ T4551] bus_probe_device+0xba/0x1d0 [ 686.334724][ T4551] device_add+0xbcf/0x1050 [ 686.339191][ T4551] usb_new_device+0xa01/0x15e0 [ 686.343969][ T4551] hub_event+0x2b2f/0x5200 [ 686.348413][ T4551] process_one_work+0x8ab/0x1160 [ 686.353379][ T4551] worker_thread+0xaf5/0x12a0 [ 686.358066][ T4551] kthread+0x29d/0x330 [ 686.362281][ T4551] ret_from_fork+0x1f/0x30 [ 686.366716][ T4551] [ 686.369075][ T4551] Freed by task 11741: [ 686.373190][ T4551] kasan_set_track+0x4b/0x70 [ 686.377854][ T4551] kasan_save_free_info+0x27/0x40 [ 686.382902][ T4551] ____kasan_slab_free+0x126/0x1f0 [ 686.388061][ T4551] slab_free_freelist_hook+0x133/0x1b0 [ 686.393552][ T4551] __kmem_cache_free+0xb6/0x200 [ 686.398431][ T4551] roccat_release+0x2a6/0x370 [ 686.403155][ T4551] __fput+0x20a/0x8b0 [ 686.407174][ T4551] task_work_run+0x1d0/0x260 [ 686.411849][ T4551] exit_to_user_mode_loop+0xe6/0x110 [ 686.417188][ T4551] exit_to_user_mode_prepare+0xee/0x180 [ 686.422781][ T4551] syscall_exit_to_user_mode+0x16/0x40 [ 686.428272][ T4551] do_syscall_64+0x58/0xa0 [ 686.432733][ T4551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 686.438698][ T4551] [ 686.441072][ T4551] Last potentially related work creation: [ 686.446853][ T4551] kasan_save_stack+0x3a/0x60 [ 686.451580][ T4551] __kasan_record_aux_stack+0xb2/0xc0 [ 686.456980][ T4551] kvfree_call_rcu+0x103/0x890 [ 686.461789][ T4551] neigh_periodic_work+0x3f2/0xd70 [ 686.466927][ T4551] process_one_work+0x8ab/0x1160 [ 686.471888][ T4551] worker_thread+0xaf5/0x12a0 [ 686.476604][ T4551] kthread+0x29d/0x330 [ 686.480686][ T4551] ret_from_fork+0x1f/0x30 [ 686.485138][ T4551] [ 686.487500][ T4551] The buggy address belongs to the object at ffff888074ccd000 [ 686.487500][ T4551] which belongs to the cache kmalloc-1k of size 1024 [ 686.501564][ T4551] The buggy address is located 8 bytes inside of [ 686.501564][ T4551] 1024-byte region [ffff888074ccd000, ffff888074ccd400) [ 686.514746][ T4551] [ 686.517066][ T4551] The buggy address belongs to the physical page: [ 686.523508][ T4551] page:ffffea0001d33200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x74cc8 [ 686.533688][ T4551] head:ffffea0001d33200 order:3 compound_mapcount:0 compound_pincount:0 [ 686.542051][ T4551] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 686.550088][ T4551] raw: 00fff00000010200 ffffea00012d1000 dead000000000002 ffff888018441dc0 [ 686.558697][ T4551] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 686.567296][ T4551] page dumped because: kasan: bad access detected [ 686.573719][ T4551] page_owner tracks the page as allocated [ 686.579447][ T4551] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4280, tgid 4280 (syz-executor), ts 78971077215, free_ts 78768032533 [ 686.601601][ T4551] post_alloc_hook+0x173/0x1a0 [ 686.606385][ T4551] get_page_from_freelist+0x206b/0x2180 [ 686.611945][ T4551] __alloc_pages+0x1ec/0x4f0 [ 686.616558][ T4551] alloc_slab_page+0x5d/0x180 [ 686.621391][ T4551] new_slab+0x87/0x2d0 [ 686.625498][ T4551] ___slab_alloc+0xbc5/0x1240 [ 686.630214][ T4551] __kmem_cache_alloc_node+0x126/0x270 [ 686.635706][ T4551] __kmalloc_node_track_caller+0xa0/0x240 [ 686.641447][ T4551] __alloc_skb+0x226/0x7d0 [ 686.645883][ T4551] ndisc_alloc_skb+0xa6/0x450 [ 686.650651][ T4551] ndisc_send_rs+0x279/0x690 [ 686.655283][ T4551] addrconf_rs_timer+0x367/0x640 [ 686.660227][ T4551] call_timer_fn+0x1ac/0x670 [ 686.664823][ T4551] __run_timers+0x56c/0x810 [ 686.669336][ T4551] run_timer_softirq+0x63/0xf0 [ 686.674139][ T4551] handle_softirqs+0x291/0x910 [ 686.678929][ T4551] page last free stack trace: [ 686.683623][ T4551] free_unref_page_prepare+0x8e5/0x9e0 [ 686.689149][ T4551] free_unref_page+0x2e/0x3f0 [ 686.693895][ T4551] qlist_free_all+0x76/0xe0 [ 686.698411][ T4551] kasan_quarantine_reduce+0x144/0x160 [ 686.703894][ T4551] __kasan_slab_alloc+0x1e/0x80 [ 686.708773][ T4551] slab_post_alloc_hook+0x4b/0x490 [ 686.713885][ T4551] kmem_cache_alloc+0x18b/0x2f0 [ 686.718757][ T4551] vm_area_alloc+0x20/0xe0 [ 686.723183][ T4551] mmap_region+0xcbc/0x1c50 [ 686.727715][ T4551] do_mmap+0x9ce/0x10d0 [ 686.731894][ T4551] vm_mmap_pgoff+0x1c1/0x2d0 [ 686.736513][ T4551] ksys_mmap_pgoff+0x4bf/0x720 [ 686.741305][ T4551] do_syscall_64+0x4c/0xa0 [ 686.745731][ T4551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 686.751626][ T4551] [ 686.753952][ T4551] Memory state around the buggy address: [ 686.759606][ T4551] ffff888074cccf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 686.767666][ T4551] ffff888074cccf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 686.775736][ T4551] >ffff888074ccd000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 686.783899][ T4551] ^ [ 686.788266][ T4551] ffff888074ccd080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 686.796323][ T4551] ffff888074ccd100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 686.804378][ T4551] ================================================================== [ 686.815775][ T4551] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 686.823049][ T4551] CPU: 1 PID: 4551 Comm: kworker/1:13 Not tainted syzkaller #0 [ 686.830631][ T4551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 686.840710][ T4551] Workqueue: usb_hub_wq hub_event [ 686.845789][ T4551] Call Trace: [ 686.849096][ T4551] [ 686.852083][ T4551] dump_stack_lvl+0x188/0x24e [ 686.856806][ T4551] ? memcpy+0x3c/0x60 [ 686.860811][ T4551] ? show_regs_print_info+0x12/0x12 [ 686.866024][ T4551] ? load_image+0x410/0x410 [ 686.870636][ T4551] panic+0x2d3/0x710 [ 686.874547][ T4551] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 686.880725][ T4551] ? bpf_jit_dump+0xd0/0xd0 [ 686.885245][ T4551] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 686.891235][ T4551] ? _raw_spin_unlock+0x40/0x40 [ 686.896128][ T4551] check_panic_on_warn+0x80/0xa0 [ 686.901084][ T4551] ? roccat_disconnect+0x236/0x240 [ 686.906205][ T4551] end_report+0x66/0x110 [ 686.910473][ T4551] kasan_report+0x118/0x140 [ 686.915015][ T4551] ? roccat_disconnect+0x236/0x240 [ 686.920159][ T4551] roccat_disconnect+0x236/0x240 [ 686.925110][ T4551] savu_remove+0xe5/0x160 [ 686.929468][ T4551] ? savu_probe+0x350/0x350 [ 686.934011][ T4551] hid_device_remove+0xba/0x1b0 [ 686.938893][ T4551] ? hid_device_probe+0x520/0x520 [ 686.943943][ T4551] device_release_driver_internal+0x47d/0x7c0 [ 686.950086][ T4551] bus_remove_device+0x2dd/0x400 [ 686.955048][ T4551] device_del+0x63f/0xa80 [ 686.959411][ T4551] ? kill_device+0x160/0x160 [ 686.964039][ T4551] ? lock_chain_count+0x20/0x20 [ 686.968906][ T4551] ? _raw_spin_lock_irq+0xb7/0xf0 [ 686.973944][ T4551] ? _raw_spin_lock_irqsave+0x100/0x100 [ 686.979505][ T4551] hid_destroy_device+0x66/0x100 [ 686.984456][ T4551] usbhid_disconnect+0x9b/0xc0 [ 686.989235][ T4551] usb_unbind_interface+0x200/0x870 [ 686.994450][ T4551] ? kernfs_remove_by_name_ns+0x113/0x150 [ 687.000209][ T4551] ? usb_driver_release_interface+0x1c0/0x1c0 [ 687.006281][ T4551] device_release_driver_internal+0x4cf/0x7c0 [ 687.012388][ T4551] bus_remove_device+0x2dd/0x400 [ 687.017347][ T4551] device_del+0x63f/0xa80 [ 687.021703][ T4551] ? device_release+0x92/0x1c0 [ 687.026491][ T4551] ? kill_device+0x160/0x160 [ 687.031156][ T4551] ? kobject_put+0x41d/0x450 [ 687.035800][ T4551] usb_disable_device+0x3e7/0x8a0 [ 687.040852][ T4551] usb_disconnect+0x33c/0x8a0 [ 687.045551][ T4551] hub_event+0x1d27/0x5200 [ 687.050001][ T4551] ? hub_post_resume+0x120/0x120 [ 687.054956][ T4551] ? read_lock_is_recursive+0x10/0x10 [ 687.060362][ T4551] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 687.066285][ T4551] ? _raw_spin_unlock+0x40/0x40 [ 687.071163][ T4551] ? _raw_spin_unlock_irq+0x1f/0x40 [ 687.076400][ T4551] ? process_one_work+0x7b4/0x1160 [ 687.081534][ T4551] process_one_work+0x8ab/0x1160 [ 687.086494][ T4551] ? worker_detach_from_pool+0x240/0x240 [ 687.092240][ T4551] ? _raw_spin_lock_irq+0xb7/0xf0 [ 687.097283][ T4551] ? _raw_spin_lock_irqsave+0x100/0x100 [ 687.102857][ T4551] ? wq_worker_running+0x97/0x190 [ 687.107913][ T4551] worker_thread+0xaf5/0x12a0 [ 687.112624][ T4551] kthread+0x29d/0x330 [ 687.116704][ T4551] ? worker_clr_flags+0x1a0/0x1a0 [ 687.121740][ T4551] ? kthread_blkcg+0xd0/0xd0 [ 687.126332][ T4551] ret_from_fork+0x1f/0x30 [ 687.130769][ T4551] [ 687.134366][ T4551] Kernel Offset: disabled [ 687.138694][ T4551] Rebooting in 86400 seconds..