last executing test programs: 2m27.117617925s ago: executing program 1 (id=68): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0xa2f01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0, 0x21) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002000010025bd700100000000020000002000098008001300090000000800ea00", @ANYRES32=r4, @ANYBLOB='\f\x00', @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x40940}, 0x4) 2m26.895764083s ago: executing program 1 (id=72): timer_create(0x0, 0x0, &(0x7f00000001c0)) r0 = syz_open_procfs(0x0, &(0x7f0000001440)='timers\x00') r1 = openat(0xffffffffffffff9c, &(0x7f000000ff00)='./file0\x00', 0x22801, 0x0) write$FUSE_ENTRY(r1, 0x0, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) read(r2, &(0x7f0000000040)=""/155, 0x9b) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r3 = openat(r1, &(0x7f0000000140)='./file1\x00', 0xa001, 0x15c) write(r3, &(0x7f0000000180)='250:1', 0x5) syz_usb_connect$midi(0x5, 0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100300000020b4041b9340000102030109023c00010118100409040000e001030006072401f9ff07000724030305000f09058e0b"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) preadv(r0, &(0x7f0000001480)=[{&(0x7f00000014c0)=""/107, 0x6b}], 0x1, 0x1, 0xa0d2) socket$inet6(0xa, 0x3, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) 2m23.866070171s ago: executing program 1 (id=103): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002800)="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", 0x2000, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) 2m23.528470433s ago: executing program 1 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x1, 0x5, "d8ce0c88aa"}, 0x0}) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') (async) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) (async) pivot_root(&(0x7f0000000140)='./file0/../file0/../file0\x00', &(0x7f0000000000)='./file0\x00') 2m21.424039934s ago: executing program 1 (id=119): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000340)="aefdda9d24100100", 0x8}, {&(0x7f0000000380)}], 0x2) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r8, 0x0, 0x0) splice(r7, 0x0, r8, &(0x7f0000000140)=0x8008, 0x9, 0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m21.03822833s ago: executing program 1 (id=125): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x40102, 0x0) ioctl$DM_DEV_SET_GEOMETRY(r0, 0xc138fd0f, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x190, 0x138, 0x3200, 0x0, 0x8000, 0x0, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '1\x00'}}, {0x3d, 0x20, 0x8000084, 0x20, 0x400000000005, 0x20, 0x400000000e48}}) 2m20.620272296s ago: executing program 32 (id=125): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x40102, 0x0) ioctl$DM_DEV_SET_GEOMETRY(r0, 0xc138fd0f, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x190, 0x138, 0x3200, 0x0, 0x8000, 0x0, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '1\x00'}}, {0x3d, 0x20, 0x8000084, 0x20, 0x400000000005, 0x20, 0x400000000e48}}) 3.3289647s ago: executing program 0 (id=1048): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000840)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f4929}], 0x1c) listen(r0, 0xb81f) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000880)={&(0x7f00000008c0)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000940)="d9", 0x1}], 0x1, &(0x7f0000000980)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback=0xac14140a}], 0x18, 0x48d5}, 0x8050) 3.261313331s ago: executing program 0 (id=1050): r0 = syz_open_procfs(0x0, &(0x7f0000001840)='net/fib_trie\x00') preadv(r0, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/49, 0x31}], 0x1, 0x4003, 0x1f00) 3.172620014s ago: executing program 3 (id=1051): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x129240, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000008fc0)={0x28, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000009000)}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000009040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000009080)={0x48, 0xa, r5, 0x0, r6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0xa, r5, 0x0, r4}) (fail_nth: 6) 3.172220985s ago: executing program 0 (id=1052): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) (async) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x26e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x0, 0x0, 0x9, 0x0, "5472c36bad083abff48a0eedb747e088c5c11f5a5d44c5e047004a2f7c5739902bdfc460e1610cbf56b38c88f371e735b45d5163828b94176467a05dd7b9efa340f941c6d223c9b9a5e979e3738aa85f"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x26e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x0, 0x0, 0x9, 0x0, "5472c36bad083abff48a0eedb747e088c5c11f5a5d44c5e047004a2f7c5739902bdfc460e1610cbf56b38c88f371e735b45d5163828b94176467a05dd7b9efa340f941c6d223c9b9a5e979e3738aa85f"}, 0xd8) listen(r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) (async) listen(r6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000200)=[{&(0x7f0000000240)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040004) (async) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040004) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000002000000eb010200"/23], 0x200}, 0x1, 0x0, 0x0, 0x20000000}, 0x40408d0) inotify_init1(0x80000) 3.164708794s ago: executing program 3 (id=1053): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46e, 0x5577, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000180)={0x1c, 0x5, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r2, 0x6, 0x3, 0x0, &(0x7f0000000040)) syz_ublk_setup_io_uring(0x22, &(0x7f00000001c0)={0x0, 0x0, 0x100, 0x2, 0x1db}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x48, 0x0, @fd_index=0x6, 0x0, 0x0, 0x1}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000700)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), 0xffffffffffffffff) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x40, 0x5, 0xe2, {0xe2, 0xd, "56097d3e8512ca4fad15512e7201fd3f86e4e36b029ff66ddea3c18aeb85d7bc125ee12616797a5fbc084d74d24309b9f0ab45d4811c1df97c4f3324c6cec0d3b99517e43ae776d7b153f66262cfce3e09321e7aab15dfb52b67e44b7b1c83a36f12f2f8dbd6720c5111346042f617e5f6a124f65aae880e53b7290bf834f77fea2720f5d22e2fa8a074c55c8e2ae98f579a91d155916e5fba2ecd5c94443f4879d298a38c5e925203d72af7a853e163f149ce082b95163ad3145aeb70c56af1058bd5b885fb6fe84bf5585670a816ba3451df4af74e5e370d74c9caf0633459"}}, &(0x7f0000000540)={0x0, 0x3, 0x16, @string={0x16, 0x3, "3b1c76f6bbf5bb4c47d01e8eafb00e5d44d96b0b"}}, &(0x7f0000000580)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "319a7d0bffdf33aaeffd3d83c53e6b35"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x2, 0x3, 0x9, 0x1e}, @ext_cap={0x7, 0x10, 0x2, 0x1ad6eeb29829008e, 0xe, 0xb, 0x1000}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x8, 0x1, 0xc8, "a1a4a696", "5274e910"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x60, 0x81, 0x0, 0x7, 0x8, 0xfff}}}, &(0x7f0000000cc0)={0x84, &(0x7f0000000740)={0x20, 0x14, 0xad, "1ebbb6c25c1fecece3cdbb738497940b27672822c90a6e06f53497cb948fe203d8bc0615da59d962fc69c435e44ffca65a45335e8f9e4df366eb40515d875334002395355afad5a1709ed69aa72718ef45f50f91ffe31bf9cfa2e4a0a4ab73f1f2f3c7681ed6c1e32fdeb254b082d7dbb42f444e65fdb5936853fb5f248d20eedba53e49c8a77dae4a586136386563337d506574f4ff0018b69f928193122b2b3af5022b553e2d54144cec9c79"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000009c0)={0x20, 0x0, 0x8, {0xe0, 0x20, [0x8800]}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x250e}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "cb32"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @random="0f34a0bfffb3"}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000b80)={0x40, 0x19, 0x2, 'FF'}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x10}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x3e}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x5}}) 3.110513437s ago: executing program 0 (id=1054): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000004c0)={0x500, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000500)={0x1f, 0x2, 0xffff, 0x3, 0x40004, 0x220, 0x6a9, 0xfffffffffffffffc}, &(0x7f0000000540)={0x0, 0x3938700}, 0x0) 3.024405424s ago: executing program 0 (id=1056): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8f0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x242, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000140)={0x63, 0x6, 0x7, 0x9, 0x7, 0x9, 0x651, 0x8, 0x9657, 0x800000000003, 0x7fffffff, 0x1, 0x1, 0x7fffffff, 0x80000000000000, 0x8, 0x48, 0x3, 0x94d6, 0xd, 0x0, 0x100000000100008, 0xfffffffffffffffa, 0xfffffffffffffffa, 0x8, 0x2000000000000}) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 2.876979637s ago: executing program 0 (id=1059): mkdirat(0xffffffffffffff9c, &(0x7f0000001980)='./proc\x00', 0x1ff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x6c, {0x37, 0x7, "070716ac242ab68435e2a29bf3e927cf65450b53111fd7e5947d391bd1408d439379e4ba863ed8f2efad928bbdb23f5f255ceddc5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)={0x40, 0x5, 0x3, "5ab4ed"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f00000019c0)='./proc\x00', &(0x7f0000000080)='coda\x00', 0x8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001a40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000001a80)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8001002, 0x1000002, 0x100010, r1, 0x0) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff6000/0x1000)=nil) 2.411962595s ago: executing program 3 (id=1065): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000340), 0x0) write(r0, &(0x7f00000006c0)='27', 0x2) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) mmap$IORING_OFF_SQ_RING(0x6000000, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) 2.264176782s ago: executing program 3 (id=1066): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x103) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000100), 0xe0, 0x8000) mount$fuse(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7e643d44f47cd0c41edb1a000000000000000000008635bc3330fd98362ebee991081c34073af3620900a2f188b06c7444f058720a", @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRES32=r1, @ANYBLOB='\x00'/10, @ANYRESDEC=0x0, @ANYBLOB="0f038c545de478541a3b3a3fb4d570ebc1fca504822c43fe29c52f776afecda735b92a5c517464073eb3b2ea0ccd0238d532136918bb58843da3326bd88d095438188c533f3feb492429b49bbee421a7dd38e400ec53387c17131da3d5fd23e25bd3bfa9741845"]) (async) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x891a) (async) recvmsg$can_j1939(r1, &(0x7f00000006c0)={&(0x7f0000000040)=@tipc, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/1, 0x1}, {&(0x7f00000002c0)=""/189, 0xbd}], 0x8, &(0x7f0000000640)=""/72, 0x48}, 0x42) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='.\x00', 0x0, 0x0) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000008c0)={'vcan0\x00', 0x0}) (async) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000900)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000bc0)='./proc\x00', &(0x7f0000000c00)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc/mtrr\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), 0xffffffffffffffff) (async) ioctl(r8, 0x400c4d04, &(0x7f0000000cc0)) (async) bind$can_j1939(r6, &(0x7f0000000940)={0x1d, r7, 0x102030405060708, {0x0, 0x1, 0x4}, 0x2}, 0x54) (async) connect$can_j1939(r6, &(0x7f0000000980)={0x1d, r7, 0x0, {0x0, 0xee}, 0xff}, 0x18) (async) sendmsg$can_j1939(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)="0807060504030201", 0x8}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000ac0)=[{r10, 0x2}], 0x1, 0xfa) (async) dup2(r9, r10) (async) pselect6(0x40, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000b40)={0x1f, 0x0, 0x0, 0x2, 0x0, 0x1, 0x40, 0x4}, 0x0, 0x0) (async) close(0x3) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./cifs\x00', 0x1ff) mount(&(0x7f0000000800)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000000)='./cifs\x00', &(0x7f0000000880)='cifs\x00', 0x8010, 0x0) (async) syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x243f, {0x2, 0x3, 0x0, '\x00', {0x47d, 0x0, 0xae3, 0x10, r2, r3, 0x4000, '\x00', 0x2, 0x200007e, 0x3, 0x9, {0x1, 0xffffffff}, {0x240000000000, 0x42}, {0x7, 0x2}, {0x4, 0xe}, 0x4, 0x6, 0x7e, 0x1}}}}) 2.145733412s ago: executing program 2 (id=1067): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@verity_off}], [{@obj_role={'obj_role', 0x3d, '(\x00'}}, {@obj_role={'obj_role', 0x3d, 'verity=off'}}]}) 2.090259353s ago: executing program 2 (id=1068): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/133, 0x85}], 0x1}, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f00000003c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000400)=@gcm_128={{0x304}, "b7a41f2300", "d20f0e8a0a00000000b0b85347000700", '\x00', "ecba06893bcdc493"}, 0x28) sendto(r1, &(0x7f0000000440)='<', 0x1, 0x4000, 0x0, 0x0) recvfrom(r1, &(0x7f0000000480)=""/230, 0xe6, 0x10000, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000580)=0xffff1884, 0x4) io_setup(0x8f0, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000100)="0200ffff00", 0x5, 0x0, 0x0, 0x2}]) 1.468300348s ago: executing program 4 (id=1071): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)='tracefs\x00', 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x104) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x1) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x84, 0x74, 0x0, 0x0, @time={0xe, 0x425}, {0xfd}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick=0x8, {0xfd, 0x40}, {0x3}, @connect={{0x3, 0x2}, {0x3, 0x9}}}, {0xf7, 0x81, 0x1, 0xaf, @tick=0x20000000, {0x70, 0x3c}, {0x1}, @quote={{0x5, 0x6}, 0x6}}, {0x2, 0xff, 0x81, 0xc0, @time={0x10d1a, 0xc88}, {0xc, 0x9}, {0x48, 0x5}, @raw32={[0x8, 0x100, 0x10000]}}], 0x70) mount$overlay(0x0, &(0x7f0000000900)='./bus\x00', &(0x7f0000000940), 0xa30400, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@redirect_dir_nofollow}]}) chdir(&(0x7f00000009c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./file7\x00', 0x1c0) 1.368260767s ago: executing program 4 (id=1072): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r0 = fsopen(&(0x7f00000002c0)='bpf\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000006240)='./proc/thread-self/fail-nth\x00', 0x282, 0x6) write(r1, &(0x7f0000007500)='27', 0x2) sendto$unix(r1, 0x0, 0x0, 0x4000010, 0x0, 0x0) listen(0xffffffffffffffff, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 6) 1.268711586s ago: executing program 3 (id=1073): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46e, 0x5577, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000180)={0x1c, 0x5, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r2, 0x6, 0x3, 0x0, &(0x7f0000000040)) syz_ublk_setup_io_uring(0x22, &(0x7f00000001c0)={0x0, 0x0, 0x100, 0x2, 0x1db}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x48, 0x0, @fd_index=0x6, 0x0, 0x0, 0x1}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000700)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), 0xffffffffffffffff) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x40, 0x5, 0xe2, {0xe2, 0xd, "56097d3e8512ca4fad15512e7201fd3f86e4e36b029ff66ddea3c18aeb85d7bc125ee12616797a5fbc084d74d24309b9f0ab45d4811c1df97c4f3324c6cec0d3b99517e43ae776d7b153f66262cfce3e09321e7aab15dfb52b67e44b7b1c83a36f12f2f8dbd6720c5111346042f617e5f6a124f65aae880e53b7290bf834f77fea2720f5d22e2fa8a074c55c8e2ae98f579a91d155916e5fba2ecd5c94443f4879d298a38c5e925203d72af7a853e163f149ce082b95163ad3145aeb70c56af1058bd5b885fb6fe84bf5585670a816ba3451df4af74e5e370d74c9caf0633459"}}, &(0x7f0000000540)={0x0, 0x3, 0x16, @string={0x16, 0x3, "3b1c76f6bbf5bb4c47d01e8eafb00e5d44d96b0b"}}, &(0x7f0000000580)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "319a7d0bffdf33aaeffd3d83c53e6b35"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x2, 0x3, 0x9, 0x1e}, @ext_cap={0x7, 0x10, 0x2, 0x1ad6eeb29829008e, 0xe, 0xb, 0x1000}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x8, 0x1, 0xc8, "a1a4a696", "5274e910"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x60, 0x81, 0x0, 0x7, 0x8, 0xfff}}}, &(0x7f0000000cc0)={0x84, &(0x7f0000000740)={0x20, 0x14, 0xad, "1ebbb6c25c1fecece3cdbb738497940b27672822c90a6e06f53497cb948fe203d8bc0615da59d962fc69c435e44ffca65a45335e8f9e4df366eb40515d875334002395355afad5a1709ed69aa72718ef45f50f91ffe31bf9cfa2e4a0a4ab73f1f2f3c7681ed6c1e32fdeb254b082d7dbb42f444e65fdb5936853fb5f248d20eedba53e49c8a77dae4a586136386563337d506574f4ff0018b69f928193122b2b3af5022b553e2d54144cec9c79"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000009c0)={0x20, 0x0, 0x8, {0xe0, 0x20, [0x8800]}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x250e}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "cb32"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @random="0f34a0bfffb3"}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000b80)={0x40, 0x19, 0x2, 'FF'}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x10}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x3e}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x5}}) 1.090666248s ago: executing program 4 (id=1074): r0 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40840) write(r0, &(0x7f00000001c0)="29000000150005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x6f) 1.036970481s ago: executing program 2 (id=1075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1a7) (async) mount(&(0x7f0000000240)=@filename='./dev/sda1\x00', &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='ext4\x00', 0x40, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='my_configfs\x00', &(0x7f0000000440)='configfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000480)='my_configfs/nullb\x00', 0x10000, 0x0) r1 = open$dir(&(0x7f0000000300)='./mnt\x00', 0x0, 0x2) (async) mkdir(&(0x7f0000000500)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='my_sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='my_sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) write$binfmt_format(r2, &(0x7f0000000600)='1\x00', 0x2) (async, rerun: 64) renameat2(r1, &(0x7f0000000340)='./mnt\x00', r1, &(0x7f0000000380)='./mnt/file0\x00', 0x4) (rerun: 64) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) (async) r3 = socket$inet(0x2, 0x2, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xfffffffffffff801) socket(0x9, 0x80000, 0xfffffffa) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r3, 0xc0805841, &(0x7f00000000c0)={0xa, 0xaa4, 0x1, 0x0, 0x7f}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) 992.804754ms ago: executing program 4 (id=1076): r0 = socket$kcm(0x10, 0x2, 0x0) timer_create(0x7, &(0x7f00000005c0)={0x0, 0xf, 0x1}, &(0x7f0000000600)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000940)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c0000000706050000000000000088356b8f000205000100d1"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e80)=""/4099, 0x1003}], 0x1}, 0x2020) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000980)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r1, &(0x7f00000009c0)=[{&(0x7f0000000a00)="2e1221b23bb601c493d3df163e75963d86dd606712e90009118db0049d90491c3248040000dbb8a1", 0x28}, {&(0x7f0000000a40)="8bcceb216f624d06f5ff8408759ec30e3264d7522d7ebb0900", 0x19}, {&(0x7f0000000a80)="40050e", 0x3}], 0x3) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f00000004c0)={&(0x7f00000003c0)=[{0x5000, 0x3, 0xd87d, 0xffffffffffffffff, 0x3}, {0x5, 0xb89, 0x8, 0x4, 0x5}, {0x10001, 0x9, 0x0, 0x25, 0x7fff}, {0x10000, 0x9, 0xfb1, 0xb1, 0x6}, {0x4, 0x9, 0x8, 0x3, 0x6}], 0x5, 0x28, 0x7, 0x72e}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000b00)="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", 0x113}, {&(0x7f0000000380)="1cc4488d5e4ef24d4c6afe6d614da92c05fc9b73d35c5a528052", 0x1a}], 0x2, 0x0, 0x0, 0x7400}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) munmap(&(0x7f0000002000/0x3000)=nil, 0x3000) r6 = syz_open_dev$usbfs(&(0x7f0000000500), 0x205, 0x204c01) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000ac0), 0x802, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000b00)=ANY=[], 0x119) r8 = syz_open_dev$hidraw(&(0x7f0000000c40), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r8, 0xc0404807, &(0x7f0000000c80)={0x5, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"}) write$UHID_GET_REPORT_REPLY(r7, &(0x7f0000000d00)={0xa, {0x1, 0x3, 0xff}}, 0xa) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1000000017142d"], 0x10}}, 0x80) r10 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000540)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000580)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) accept4(r5, 0x0, 0x0, 0x800) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x30, r12, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) 969.412261ms ago: executing program 2 (id=1077): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./tracing\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe64e431205f2e760c69", 0x22) (fail_nth: 6) 770.051538ms ago: executing program 2 (id=1078): accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x80800) (async) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x80800) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000008200)={'\x00', 0x81, 0x8001, 0x6160d650, 0x6, 0xa, 0x0}) prlimit64(r1, 0x9, 0x0, &(0x7f0000008280)) (async) prlimit64(r1, 0x9, 0x0, &(0x7f0000008280)) recvmmsg(r0, &(0x7f0000007fc0)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/126, 0x7e}, {&(0x7f0000000340)=""/12, 0xc}], 0x4, &(0x7f00000003c0)=""/254, 0xfe}, 0x1}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000540)=""/136, 0x88}, {&(0x7f0000000600)=""/149, 0x95}, {&(0x7f00000006c0)=""/158, 0x9e}, {&(0x7f0000000780)=""/198, 0xc6}, {&(0x7f0000000880)=""/35, 0x23}, {&(0x7f00000008c0)=""/70, 0x46}], 0x6, &(0x7f00000009c0)=""/2, 0x2}, 0x4}, {{&(0x7f0000000a00)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/200, 0xc8}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/43, 0x2b}, {&(0x7f0000003bc0)=""/114, 0x72}], 0x6, &(0x7f0000003cc0)=""/228, 0xe4}, 0x7}, {{&(0x7f0000003dc0)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000004e40)=[{&(0x7f0000003e40)=""/4096, 0x1000}], 0x1, &(0x7f0000004e80)=""/121, 0x79}, 0x7fffffff}, {{&(0x7f0000004f00)=@generic, 0x80, &(0x7f0000005280)=[{&(0x7f0000004f80)=""/173, 0xad}, {&(0x7f0000005040)=""/139, 0x8b}, {&(0x7f0000005100)=""/138, 0x8a}, {&(0x7f00000051c0)=""/90, 0x5a}, {&(0x7f0000005240)=""/36, 0x24}], 0x5, &(0x7f0000005300)=""/213, 0xd5}, 0x3}, {{&(0x7f0000005400)=@nl, 0x80, &(0x7f00000055c0)=[{&(0x7f0000005480)=""/29, 0x1d}, {&(0x7f00000054c0)=""/6, 0x6}, {&(0x7f0000005500)=""/137, 0x89}], 0x3, &(0x7f0000005600)=""/13, 0xd}, 0x8}, {{0x0, 0x0, &(0x7f0000006880)=[{&(0x7f0000005640)=""/4096, 0x1000}, {&(0x7f0000006640)=""/150, 0x96}, {&(0x7f0000006700)=""/167, 0xa7}, {&(0x7f00000067c0)=""/60, 0x3c}, {&(0x7f0000006800)=""/56, 0x38}, {&(0x7f0000006840)=""/38, 0x26}], 0x6, &(0x7f0000006900)=""/62, 0x3e}, 0x1000}, {{&(0x7f0000006940)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000007e40)=[{&(0x7f00000069c0)=""/49, 0x31}, {&(0x7f0000006a00)=""/217, 0xd9}, {&(0x7f0000006b00)=""/220, 0xdc}, {&(0x7f0000006c00)=""/47, 0x2f}, {&(0x7f0000006c40)=""/68, 0x44}, {&(0x7f0000006cc0)=""/4096, 0x1000}, {&(0x7f0000007cc0)=""/116, 0x74}, {&(0x7f0000007d40)=""/5, 0x5}, {&(0x7f0000007d80)=""/151, 0x97}], 0x9, &(0x7f0000007f00)=""/147, 0x93}, 0x1}], 0x8, 0x20, &(0x7f00000081c0)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBLED(r2, 0x4b65, 0xec6) 716.789604ms ago: executing program 4 (id=1079): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x802, 0x165) write(r0, &(0x7f0000000100)='100', 0x3) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101301) openat$ppp(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, 0x31, 0x9, 0x70bd25, 0x4000, {0x4, 0x0, 0xe00}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4080040) 543.418048ms ago: executing program 2 (id=1080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x5) dup(r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000001}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect(0x5, 0x4c, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904ffffffffffffffc024001001052406000107058103"], 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e94e0b0125930000387bdba94b67b2ad4aa3c2b1a810bf7ebb9c3c1fb97dadc0756057f55bce75324b724047d46632a2b501f4b20afb53eac6ce4469693c2df00d3f25eade43339f6651759a4f27ea57b13a4195c92fdd51fc132ce655296def288abfd4f2271198bcb12e04d3a381f244193d4a5b63a2e2e3068e32d76b62c43db8850fb4a4aa1e5fe909803b90d8dbdce1fcd78aead0e1a76c962eaf15b4fba4d93a29000000000000000000", @ANYRES16=r1, @ANYBLOB="210128bd7000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="08006b00f68900000a0034000202020202020000050018013c0000000a007e000101010101010000"], 0x44}, 0x1, 0x0, 0x0, 0xf040}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000001480)={0x5c0, r1, 0x200, 0x6, 0x1, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x25d, 0x2a, [@preq={0x82, 0x41, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0xff, 0x6, 0x4, @broadcast, 0x4, @value, 0x202000, 0x6, 0x3, [{{0x1, 0x0, 0x1}, @device_b, 0x74c1}, {{}, @device_b, 0x1}, {{0x1}, @broadcast, 0xfffffff8}]}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x3, 0x1, @broadcast, 0x7fffffff, @value, 0x80, 0x0, @device_a, 0xcc1}}, @peer_mgmt={0x75, 0x16, {0x1, 0x1, @val=0x4, @void, @val="5c89d1c2f7e8ba524a5d724d81519620"}}, @perr={0x84, 0xb0, {0xff, 0xc, [{{}, @device_a, 0x4, @void, 0x15}, {{}, @device_a, 0x9, @void, 0x2a}, {{}, @device_a, 0x7fff, @void, 0x2f}, {{}, @device_a, 0x348cbf67, @void, 0x30}, {{}, @device_a, 0x89, @void, 0x3b}, {{0x0, 0x1}, @broadcast, 0x6, @value=@broadcast, 0x40}, {{0x0, 0x1}, @broadcast, 0x200, @value=@device_b, 0x1c}, {{}, @device_b, 0x5, @void, 0x34}, {{}, @device_b, 0x0, @void, 0x36}, {{}, @device_a, 0x2, @void, 0x28}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x2f}, {{}, @device_a, 0xbb7, @void, 0x1b}]}}, @measure_req={0x26, 0x8f, {0x9, 0x2, 0x2, "2e29e5cd0b0425f8fbb60961af653ea54d958322069a16986c16cf824f94b5aba760e760b8c03919abd304ba9ac4a1ecf9c8b2f0267559220c76b009e617371582c16df74e01fc6be2982164a3cdaa7b308e52f1f84907dc63f7f60c39460a8e01a8b62567d478c206fe261efea68cd361cccc44f05ae84eb67015b6a63b7690b48ba5e334b26e97049980c8"}}, @random={0x1, 0x6e, "786953069e3c4caa8517001b7e1dd1b9d531e4459f6c49de6c2a4a587c0b118676b4da671926ccd18b29766b84944d898dfc2f4ff5f955fd387ae8f6d16c1b4c1f7c79587018647ecadc5328b2f87bec60592961f450ad35791e3b79d3b66676ef867d2bca2e120c81e4cc1518d6"}, @peer_mgmt={0x75, 0x16, {0x0, 0x4, @val=0x7f, @void, @val="17916508dfb8044672d4dd40d9dc9592"}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0xf, 0x28}}]}, @NL80211_ATTR_IE={0x23, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0xd, 0x28}}, @ssid={0x0, 0x11, @random="fe468d856c586a54f3d631f5fb2f6b034d"}, @dsss={0x3, 0x1, 0x34}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_RRK={0x3b, 0xfc, "60a306b79ccc1753019cc26a8ef4ef2e2eb3d42e5d49739bef0a8d4876dde07c2f613dcef208e30fd9d00a525c1cc17660a427689c75df"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xd2, 0xfc, "daedef88e227814b2e73e38ccda2794986f9d86c82a4f27d9a5ac545f4d4a40e5e0686af37a28a002e4460b0b86f21b4178582d11379895351b346507bb5f480e735afffe8ceca028e6ec709aeddcd12d2a4a39146ac2557da40735061a65eddd73141be8421a191c4cf20f7d9503fce612c00a7f819e8f747dfc1fa7a66cd026d50d9357b1e4ba70550b627edde4df241778229cb98493b77a471b322b0b9ebbff3edda968bc4a0f6d3aa66aa9867e6f42b99fc92e1562c3e383cf4f7c9b5439af31109c2340e05194fc2b721c1"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_RRK={0xd4, 0xfc, "c49b86e7c50f9174f7fdce8f1e2300c3f2c0213a49cc95d03eeefbef29a88111a7e827ea1af8b693628a2a38ead4d9f460f0507b0552eb79a6f2e1d9803c3c7866cd4384322f3e0ec0d122e5e73a60be90f1378fa14fe0a5efc9f560911f11f24cf977b7ab5cdfb26ae5cc73a35b89333f543b2c31421acf6a37614d2f15a3a12e3bea029751dab763fa36bb3df579338dc04f6947ed37008a73d4a3d5c5bd2156a027da05cf2ccba14609038f5966512d8937c4ae4f3a0c4b94570a756f09b44d5a9840d15549378bb262bd1dbda007"}], @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x11e, 0x2a, [@tim={0x5, 0x8e, {0xc, 0x59, 0x4a, "9e9741948f3085c8f230d77e3e8ed2be98839c208f6ea062b29f61d9b93d88277447b2e45878038f35f1fac0037646e851d84909da81d903c7d627fa4123422294f90dac79c8e6976c55b1314f5871dbdb6a9ee6a8544177468f6616daa47f627b3731e5450f3a49afa92fe952ffaa480f3e40654ea44986d268f0a8203763652e13d57aef7dc89cebe872"}}, @measure_req={0x26, 0x88, {0x20, 0x3, 0x5, "71fb6fbd5c5c5578d015033b6e0732ceae6fcd9c6ea2147303e83575769178553f6087a140442a9a5ab7d6aae207220a1ef95d4e23db1596e6793c79b7921a6d6ae475e790e4b0093dfe900d02ad8d9c51f73dad1a049feb0202d0d36ac9517d72c6c7e497571947b8bbdaf2e5d3d1a9ddf949d31360df3636d57e1a1eb6cb30cf4940c24f"}}]}]}, 0x5c0}}, 0x40080) 442.253912ms ago: executing program 3 (id=1081): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4810}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300), 0x3) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4, 0x0, 0x6}, 0x10) write(r2, &(0x7f0000000040)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303, 0x3a}, "56db77c931091000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "13be5ddf", "4008000000008700"}, 0x38) sendto$inet6(r0, 0x0, 0x0, 0x8000000, 0x0, 0x0) 0s ago: executing program 4 (id=1082): r0 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40840) write(r0, &(0x7f00000001c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x6f) (fail_nth: 6) kernel console output (not intermixed with test programs): 40 [ 204.481003][ T8263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.481027][ T8263] ? clear_bhb_loop+0x70/0xc0 [ 204.481055][ T8263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.481078][ T8263] RIP: 0033:0x7f13e339f559 [ 204.481100][ T8263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.481119][ T8263] RSP: 002b:00007f13e42bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.481143][ T8263] RAX: ffffffffffffffda RBX: 00007f13e3625fa0 RCX: 00007f13e339f559 [ 204.481160][ T8263] RDX: 0000000000000840 RSI: 0000200000000a80 RDI: 0000000000000003 [ 204.481174][ T8263] RBP: 00007f13e42bb090 R08: 0000000000000000 R09: 0000000000000000 [ 204.481189][ T8263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.481203][ T8263] R13: 00007f13e3626038 R14: 00007f13e3625fa0 R15: 00007fffde3e6388 [ 204.481240][ T8263] [ 204.564382][ T8263] socket: no more sockets [ 204.564422][ T8263] rdma_rxe: Failed to create IPv4 UDP tunnel [ 205.078194][ T8271] FAULT_INJECTION: forcing a failure. [ 205.078194][ T8271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.078218][ T8271] CPU: 1 UID: 0 PID: 8271 Comm: syz.0.747 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.078237][ T8271] Tainted: [L]=SOFTLOCKUP [ 205.078243][ T8271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 205.078252][ T8271] Call Trace: [ 205.078257][ T8271] [ 205.078263][ T8271] dump_stack_lvl+0xe8/0x150 [ 205.078288][ T8271] should_fail_ex+0x3eb/0x540 [ 205.078313][ T8271] _copy_to_user+0x31/0xb0 [ 205.078337][ T8271] simple_read_from_buffer+0xe1/0x170 [ 205.078358][ T8271] proc_fail_nth_read+0x1bb/0x230 [ 205.078383][ T8271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.078406][ T8271] ? rw_verify_area+0x24a/0x4c0 [ 205.078425][ T8271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.078445][ T8271] vfs_read+0x213/0xa80 [ 205.078465][ T8271] ? __pfx___mutex_lock+0x10/0x10 [ 205.078486][ T8271] ? __pfx_vfs_read+0x10/0x10 [ 205.078526][ T8271] ? __fget_files+0x2a/0x420 [ 205.078543][ T8271] ? __fget_files+0x3a2/0x420 [ 205.078560][ T8271] ? __fget_files+0x2a/0x420 [ 205.078580][ T8271] ? fdget+0x1ac/0x250 [ 205.078602][ T8271] ksys_read+0x150/0x270 [ 205.078623][ T8271] ? __pfx_ksys_read+0x10/0x10 [ 205.078641][ T8271] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 205.078669][ T8271] do_syscall_64+0x166/0x520 [ 205.078690][ T8271] ? trace_irq_disable+0x3b/0x140 [ 205.078709][ T8271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.078724][ T8271] ? clear_bhb_loop+0x70/0xc0 [ 205.078743][ T8271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.078758][ T8271] RIP: 0033:0x7f13e335fd8e [ 205.078772][ T8271] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 205.078785][ T8271] RSP: 002b:00007f13e42bafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.078802][ T8271] RAX: ffffffffffffffda RBX: 00007f13e42bb6c0 RCX: 00007f13e335fd8e [ 205.078813][ T8271] RDX: 000000000000000f RSI: 00007f13e42bb0a0 RDI: 0000000000000005 [ 205.078823][ T8271] RBP: 00007f13e42bb090 R08: 0000000000000000 R09: 0000000000000000 [ 205.078832][ T8271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.078841][ T8271] R13: 00007f13e3626038 R14: 00007f13e3625fa0 R15: 00007fffde3e6388 [ 205.078865][ T8271] [ 205.201622][ T5741] usb 5-1: USB disconnect, device number 34 [ 205.271488][ T33] audit: type=1800 audit(1793274752.303:91): pid=8270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.748" name="nullb0" dev="tmpfs" ino=429 res=0 errno=-22 [ 205.391350][ T5741] usblp0: removed [ 205.527811][ T8276] overlay: ./file1 is not a directory [ 205.720540][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'. [ 205.806332][ T5741] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 205.926796][ T8286] CIFS: enabling forcegid mount option implicitly because gid= option is specified [ 205.926811][ T8286] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 205.926826][ T8286] CIFS mount error: No usable UNC path provided in device string! [ 205.926826][ T8286] [ 205.926957][ T8286] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 205.964063][ T5741] usb 5-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 205.988984][ T5741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.989064][ T5741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.989147][ T5741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.023829][ T5741] usb 5-1: config 0 descriptor?? [ 206.316344][ T8287] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 206.482136][ T8291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.482489][ T8291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.503966][ T5741] usbhid 5-1:0.0: can't add hid device: -71 [ 206.504053][ T5741] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 206.522896][ T5741] usb 5-1: USB disconnect, device number 35 [ 206.586121][ T8296] FAULT_INJECTION: forcing a failure. [ 206.586121][ T8296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.586146][ T8296] CPU: 1 UID: 0 PID: 8296 Comm: syz.2.756 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.586166][ T8296] Tainted: [L]=SOFTLOCKUP [ 206.586172][ T8296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 206.586181][ T8296] Call Trace: [ 206.586187][ T8296] [ 206.586193][ T8296] dump_stack_lvl+0xe8/0x150 [ 206.586220][ T8296] should_fail_ex+0x3eb/0x540 [ 206.586248][ T8296] _copy_from_user+0x2d/0xb0 [ 206.586273][ T8296] kstrtouint_from_user+0xd6/0x180 [ 206.586295][ T8296] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 206.586328][ T8296] ? lock_acquire+0x115/0x350 [ 206.586349][ T8296] proc_fail_nth_write+0x8e/0x210 [ 206.586374][ T8296] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 206.586404][ T8296] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 206.586428][ T8296] vfs_write+0x296/0xba0 [ 206.586453][ T8296] ? __pfx_vfs_write+0x10/0x10 [ 206.586473][ T8296] ? __fget_files+0x2a/0x420 [ 206.586490][ T8296] ? __fget_files+0x3a2/0x420 [ 206.586506][ T8296] ? __fget_files+0x2a/0x420 [ 206.586525][ T8296] ? fdget+0x1ac/0x250 [ 206.586547][ T8296] ksys_write+0x150/0x270 [ 206.586568][ T8296] ? __pfx_ksys_write+0x10/0x10 [ 206.586586][ T8296] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 206.586612][ T8296] do_syscall_64+0x166/0x520 [ 206.586635][ T8296] ? trace_irq_disable+0x3b/0x140 [ 206.586654][ T8296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.586669][ T8296] ? clear_bhb_loop+0x70/0xc0 [ 206.586688][ T8296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.586704][ T8296] RIP: 0033:0x7fc8f595fd8e [ 206.586718][ T8296] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 206.586731][ T8296] RSP: 002b:00007fc8f681bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 206.586747][ T8296] RAX: ffffffffffffffda RBX: 00007fc8f681c6c0 RCX: 00007fc8f595fd8e [ 206.586758][ T8296] RDX: 0000000000000001 RSI: 00007fc8f681c0a0 RDI: 0000000000000004 [ 206.586768][ T8296] RBP: 00007fc8f681c090 R08: 0000000000000000 R09: 0000000000000000 [ 206.586777][ T8296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.586786][ T8296] R13: 00007fc8f5c26038 R14: 00007fc8f5c25fa0 R15: 00007ffe5479cf78 [ 206.586817][ T8296] [ 206.725553][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 206.725801][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 207.186865][ T8306] FAULT_INJECTION: forcing a failure. [ 207.186865][ T8306] name failslab, interval 1, probability 0, space 0, times 0 [ 207.186900][ T8306] CPU: 0 UID: 60928 PID: 8306 Comm: syz.4.761 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.186930][ T8306] Tainted: [L]=SOFTLOCKUP [ 207.186938][ T8306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 207.186950][ T8306] Call Trace: [ 207.186958][ T8306] [ 207.186966][ T8306] dump_stack_lvl+0xe8/0x150 [ 207.187002][ T8306] should_fail_ex+0x3eb/0x540 [ 207.187038][ T8306] should_failslab+0xa8/0x100 [ 207.187070][ T8306] __kmalloc_cache_noprof+0x9e/0x600 [ 207.187092][ T8306] ? find_ucounts+0x23/0x2c0 [ 207.187124][ T8306] ? alloc_ucounts+0xaa/0x4b0 [ 207.187152][ T8306] ? alloc_ucounts+0xaa/0x4b0 [ 207.187189][ T8306] alloc_ucounts+0xaa/0x4b0 [ 207.187221][ T8306] ? lock_acquire+0x115/0x350 [ 207.187255][ T8306] inc_ucount+0x84/0x3b0 [ 207.187291][ T8306] ? percpu_ref_get_many+0x19/0x140 [ 207.187324][ T8306] ? __pfx_inc_ucount+0x10/0x10 [ 207.187364][ T8306] copy_pid_ns+0x21f/0x900 [ 207.187398][ T8306] ? __pfx_copy_pid_ns+0x10/0x10 [ 207.187422][ T8306] ? rcu_is_watching+0x16/0xb0 [ 207.187454][ T8306] ? __pfx_copy_mnt_ns+0x10/0x10 [ 207.187476][ T8306] ? kmem_cache_alloc_noprof+0x31a/0x600 [ 207.187502][ T8306] ? copy_ipcs+0x2ad/0x6c0 [ 207.187525][ T8306] ? copy_utsname+0x184/0x620 [ 207.187550][ T8306] create_new_namespaces+0x2ad/0x6b0 [ 207.187583][ T8306] ? security_capable+0x7e/0x2c0 [ 207.187617][ T8306] unshare_nsproxy_namespaces+0x144/0x190 [ 207.187650][ T8306] ksys_unshare+0x532/0x890 [ 207.187682][ T8306] ? __pfx_ksys_unshare+0x10/0x10 [ 207.187713][ T8306] ? rcu_is_watching+0x16/0xb0 [ 207.187752][ T8306] __x64_sys_unshare+0x38/0x50 [ 207.187781][ T8306] do_syscall_64+0x166/0x520 [ 207.187808][ T8306] ? trace_irq_disable+0x3b/0x140 [ 207.187839][ T8306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.187861][ T8306] ? clear_bhb_loop+0x70/0xc0 [ 207.187886][ T8306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.187907][ T8306] RIP: 0033:0x7f0919b9f559 [ 207.187926][ T8306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.187944][ T8306] RSP: 002b:00007f091a9cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 207.187966][ T8306] RAX: ffffffffffffffda RBX: 00007f0919e25fa0 RCX: 00007f0919b9f559 [ 207.187982][ T8306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 207.187995][ T8306] RBP: 00007f0919c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 207.188008][ T8306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.188020][ T8306] R13: 00007f0919e26038 R14: 00007f0919e25fa0 R15: 00007ffcf17b9598 [ 207.188072][ T8306] [ 207.504468][ T8300] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 207.632829][ T8309] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 207.861798][ T33] audit: type=1326 audit(1793274754.893:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8313 comm="syz.0.765" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13e339f559 code=0x0 [ 207.861850][ T33] audit: type=1326 audit(1793274754.893:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8313 comm="syz.0.765" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13e339f559 code=0x0 [ 208.255544][ T5742] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 208.406168][ T5742] usb 5-1: New USB device found: idVendor=0489, idProduct=e057, bcdDevice=0.00 [ 208.407199][ T5742] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.407217][ T5742] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 208.407249][ T5742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.424047][ T5742] usb 5-1: config 0 descriptor?? [ 208.666132][ T5742] Bluetooth: Can't get state to change to load ram patch err [ 208.666163][ T5742] Bluetooth: Loading patch file failed [ 208.666189][ T5742] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 208.690581][ T5742] usb 5-1: USB disconnect, device number 36 [ 209.382275][ T8335] device-mapper: table: 248:1: cache: Invalid data block size (-EINVAL) [ 209.382966][ T8335] device-mapper: ioctl: error adding target to table [ 209.694966][ T5742] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 209.859980][ T5742] usb 5-1: New USB device found: idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 209.868090][ T5742] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.868162][ T5742] usb 5-1: Product: syz [ 209.868196][ T5742] usb 5-1: Manufacturer: syz [ 209.868224][ T5742] usb 5-1: SerialNumber: syz [ 209.898045][ T5742] usb 5-1: config 0 descriptor?? [ 209.918940][ T5742] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 210.087180][ T8342] FAULT_INJECTION: forcing a failure. [ 210.087180][ T8342] name failslab, interval 1, probability 0, space 0, times 0 [ 210.087216][ T8342] CPU: 1 UID: 0 PID: 8342 Comm: syz.0.772 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.087250][ T8342] Tainted: [L]=SOFTLOCKUP [ 210.087258][ T8342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 210.087272][ T8342] Call Trace: [ 210.087281][ T8342] [ 210.087290][ T8342] dump_stack_lvl+0xe8/0x150 [ 210.087330][ T8342] should_fail_ex+0x3eb/0x540 [ 210.087380][ T8342] should_failslab+0xa8/0x100 [ 210.087413][ T8342] __kmalloc_cache_noprof+0x9e/0x600 [ 210.087437][ T8342] ? xa_find+0x282/0x2b0 [ 210.087458][ T8342] ? bdev_disk_changed+0x4ca/0x1680 [ 210.087486][ T8342] ? bdev_disk_changed+0x4ca/0x1680 [ 210.087529][ T8342] bdev_disk_changed+0x4ca/0x1680 [ 210.087565][ T8342] ? __mutex_lock+0x305/0x15a0 [ 210.087598][ T8342] ? trace_kmem_cache_alloc+0x29/0xe0 [ 210.087631][ T8342] ? __pfx_bdev_disk_changed+0x10/0x10 [ 210.087673][ T8342] blkdev_get_whole+0x372/0x510 [ 210.087709][ T8342] bdev_open+0x324/0xd70 [ 210.087749][ T8342] bdev_file_open_by_dev+0x1be/0x240 [ 210.087783][ T8342] disk_scan_partitions+0x1bb/0x2c0 [ 210.087810][ T8342] blkdev_common_ioctl+0x1d01/0x3260 [ 210.087851][ T8342] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 210.087886][ T8342] ? kasan_quarantine_put+0xbb/0x1f0 [ 210.087921][ T8342] ? tomoyo_path_number_perm+0x219/0x5f0 [ 210.087950][ T8342] ? tomoyo_path_number_perm+0x219/0x5f0 [ 210.087981][ T8342] ? do_vfs_ioctl+0x116f/0x1530 [ 210.088014][ T8342] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 210.088087][ T8342] blkdev_ioctl+0x528/0x740 [ 210.088123][ T8342] ? __pfx_blkdev_ioctl+0x10/0x10 [ 210.088160][ T8342] ? bpf_lsm_file_ioctl+0x9/0x20 [ 210.088188][ T8342] ? __pfx_blkdev_ioctl+0x10/0x10 [ 210.088222][ T8342] __se_sys_ioctl+0xfc/0x170 [ 210.088254][ T8342] do_syscall_64+0x166/0x520 [ 210.088283][ T8342] ? trace_irq_disable+0x3b/0x140 [ 210.088309][ T8342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.088331][ T8342] ? clear_bhb_loop+0x70/0xc0 [ 210.088358][ T8342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.088380][ T8342] RIP: 0033:0x7f13e339f559 [ 210.088399][ T8342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.088418][ T8342] RSP: 002b:00007f13e42bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.088441][ T8342] RAX: ffffffffffffffda RBX: 00007f13e3625fa0 RCX: 00007f13e339f559 [ 210.088458][ T8342] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000004 [ 210.088472][ T8342] RBP: 00007f13e42bb090 R08: 0000000000000000 R09: 0000000000000000 [ 210.088485][ T8342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.088498][ T8342] R13: 00007f13e3626038 R14: 00007f13e3625fa0 R15: 00007fffde3e6388 [ 210.088540][ T8342] [ 210.532945][ T8345] netlink: 224 bytes leftover after parsing attributes in process `syz.0.775'. [ 210.622848][ T8353] fuse: Bad value for 'group_id' [ 210.622873][ T8353] fuse: Bad value for 'group_id' [ 210.860706][ T8337] overlayfs: fs on 'sys_mnt' does not support file handles, falling back to index=off,nfs_export=off. [ 210.865333][ T5742] usb 5-1: USB disconnect, device number 37 [ 210.919749][ T8362] FAULT_INJECTION: forcing a failure. [ 210.919749][ T8362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.919791][ T8362] CPU: 1 UID: 0 PID: 8362 Comm: syz.2.781 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.919813][ T8362] Tainted: [L]=SOFTLOCKUP [ 210.919819][ T8362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 210.919828][ T8362] Call Trace: [ 210.919835][ T8362] [ 210.919842][ T8362] dump_stack_lvl+0xe8/0x150 [ 210.919870][ T8362] should_fail_ex+0x3eb/0x540 [ 210.919898][ T8362] __kvm_read_guest_page+0x18d/0x240 [ 210.919920][ T8362] kvm_fetch_guest_virt+0x10c/0x160 [ 210.919940][ T8362] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 210.919958][ T8362] __do_insn_fetch_bytes+0x53a/0x6c0 [ 210.919986][ T8362] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 210.920014][ T8362] ? x86_decode_insn+0x495f/0x5af0 [ 210.920047][ T8362] x86_decode_insn+0x374/0x5af0 [ 210.920081][ T8362] ? __pfx_x86_decode_insn+0x10/0x10 [ 210.920113][ T8362] ? __pfx_x86_decode_insn+0x10/0x10 [ 210.920138][ T8362] ? init_decode_cache+0x11f/0x160 [ 210.920169][ T8362] ? __asan_memset+0x22/0x50 [ 210.920187][ T8362] ? init_decode_cache+0xf3/0x160 [ 210.920211][ T8362] ? init_emulate_ctxt+0x4c6/0x630 [ 210.920235][ T8362] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 210.920265][ T8362] x86_emulate_instruction+0x348/0x1e90 [ 210.920294][ T8362] ? handle_mmio_page_fault+0x1db/0xf80 [ 210.920319][ T8362] ? bsearch+0x8a/0xc0 [ 210.920334][ T8362] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 210.920358][ T8362] ? __pfx_handle_mmio_page_fault+0x10/0x10 [ 210.920375][ T8362] ? kvm_io_bus_write+0x25a/0x580 [ 210.920396][ T8362] ? vmx_vcpu_run+0x1c1a/0x2db0 [ 210.920423][ T8362] ? __pfx_kvm_io_bus_write+0x10/0x10 [ 210.920449][ T8362] kvm_mmu_page_fault+0x8f5/0xc00 [ 210.920472][ T8362] vt_handle_exit+0x28/0x160 [ 210.920494][ T8362] vcpu_run+0x4e8a/0x7a90 [ 210.920535][ T8362] ? vcpu_run+0x35f3/0x7a90 [ 210.920578][ T8362] ? __pfx_vcpu_run+0x10/0x10 [ 210.920592][ T8362] ? complete_emulated_mmio+0x1f2/0x910 [ 210.920617][ T8362] ? __asan_memcpy+0x40/0x70 [ 210.920635][ T8362] ? complete_emulated_mmio+0x535/0x910 [ 210.920660][ T8362] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 210.920692][ T8362] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 210.920721][ T8362] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 210.920749][ T8362] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 210.920776][ T8362] kvm_vcpu_ioctl+0xa61/0xfd0 [ 210.920820][ T8362] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 210.920868][ T8362] ? __fget_files+0x2a/0x420 [ 210.920903][ T8362] ? __fget_files+0x2a/0x420 [ 210.920921][ T8362] ? __fget_files+0x2a/0x420 [ 210.920942][ T8362] ? bpf_lsm_file_ioctl+0x9/0x20 [ 210.920962][ T8362] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 210.920979][ T8362] __se_sys_ioctl+0xfc/0x170 [ 210.921008][ T8362] do_syscall_64+0x166/0x520 [ 210.921031][ T8362] ? trace_irq_disable+0x3b/0x140 [ 210.921051][ T8362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.921068][ T8362] ? clear_bhb_loop+0x70/0xc0 [ 210.921088][ T8362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.921104][ T8362] RIP: 0033:0x7fc8f599f559 [ 210.921119][ T8362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.921132][ T8362] RSP: 002b:00007fc8f681c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.921149][ T8362] RAX: ffffffffffffffda RBX: 00007fc8f5c25fa0 RCX: 00007fc8f599f559 [ 210.921161][ T8362] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 210.921184][ T8362] RBP: 00007fc8f681c090 R08: 0000000000000000 R09: 0000000000000000 [ 210.921193][ T8362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.921203][ T8362] R13: 00007fc8f5c26038 R14: 00007fc8f5c25fa0 R15: 00007ffe5479cf78 [ 210.921228][ T8362] [ 211.505897][ T8369] overlayfs: failed to resolve './file2': -2 [ 211.694880][ T195] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 211.845636][ T195] usb 5-1: New USB device found: idVendor=05ac, idProduct=0238, bcdDevice=0.40 [ 211.846939][ T195] usb 5-1: config index 0 descriptor too short (expected 1572, got 36) [ 211.846966][ T195] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.850180][ T195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.850206][ T195] usb 5-1: Product: syz [ 211.850223][ T195] usb 5-1: Manufacturer: syz [ 211.850239][ T195] usb 5-1: SerialNumber: syz [ 211.919324][ T195] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input19 [ 212.139704][ T8367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.152271][ T8367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.247471][ T4990] bcm5974 5-1:1.0: could not read from device [ 212.268700][ T4990] bcm5974 5-1:1.0: could not read from device [ 212.273585][ T195] usb 5-1: USB disconnect, device number 38 [ 213.034333][ T8415] syz.3.804 (8415) used greatest stack depth: 17600 bytes left [ 213.196460][ T8418] dvmrp1: entered allmulticast mode [ 214.124417][ T8466] ceph: No source [ 214.265029][ T8474] fuse: fd is not a fuse device [ 214.409194][ T8480] FAULT_INJECTION: forcing a failure. [ 214.409194][ T8480] name failslab, interval 1, probability 0, space 0, times 0 [ 214.409231][ T8480] CPU: 0 UID: 0 PID: 8480 Comm: syz.0.829 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.409261][ T8480] Tainted: [L]=SOFTLOCKUP [ 214.409270][ T8480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 214.409283][ T8480] Call Trace: [ 214.409292][ T8480] [ 214.409301][ T8480] dump_stack_lvl+0xe8/0x150 [ 214.409339][ T8480] should_fail_ex+0x3eb/0x540 [ 214.409378][ T8480] should_failslab+0xa8/0x100 [ 214.409408][ T8480] ? skb_clone+0x212/0x3a0 [ 214.409438][ T8480] kmem_cache_alloc_noprof+0x9c/0x600 [ 214.409464][ T8480] ? skb_clone+0x212/0x3a0 [ 214.409501][ T8480] skb_clone+0x212/0x3a0 [ 214.409533][ T8480] __netlink_deliver_tap+0x355/0x6e0 [ 214.409568][ T8480] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.409592][ T8480] netlink_deliver_tap+0x19c/0x1b0 [ 214.409617][ T8480] netlink_unicast+0x8c1/0xa80 [ 214.409668][ T8480] netlink_sendmsg+0x7f0/0xb20 [ 214.409698][ T8480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.409725][ T8480] ? aa_sock_msg_perm+0x144/0x210 [ 214.409771][ T8480] ? apparmor_socket_sendmsg+0x98/0x360 [ 214.409802][ T8480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.409824][ T8480] sock_sendmsg_nosec+0x14e/0x190 [ 214.409861][ T8480] ____sys_sendmsg+0x54e/0x850 [ 214.409895][ T8480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.409935][ T8480] ? import_iovec+0x73/0xa0 [ 214.409972][ T8480] ___sys_sendmsg+0x2a6/0x360 [ 214.409998][ T8480] ? __lock_acquire+0x747/0x2de0 [ 214.410030][ T8480] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.410100][ T8480] ? __fget_files+0x3a2/0x420 [ 214.410125][ T8480] ? __fget_files+0x2a/0x420 [ 214.410160][ T8480] __x64_sys_sendmsg+0x1b1/0x290 [ 214.410192][ T8480] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.410243][ T8480] do_syscall_64+0x166/0x520 [ 214.410276][ T8480] ? trace_irq_disable+0x3b/0x140 [ 214.410305][ T8480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.410327][ T8480] ? clear_bhb_loop+0x70/0xc0 [ 214.410356][ T8480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.410379][ T8480] RIP: 0033:0x7f13e339f559 [ 214.410400][ T8480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.410420][ T8480] RSP: 002b:00007f13e42bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.410444][ T8480] RAX: ffffffffffffffda RBX: 00007f13e3625fa0 RCX: 00007f13e339f559 [ 214.410461][ T8480] RDX: 0000000000000000 RSI: 0000200000000c40 RDI: 0000000000000003 [ 214.410475][ T8480] RBP: 00007f13e42bb090 R08: 0000000000000000 R09: 0000000000000000 [ 214.410490][ T8480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.410503][ T8480] R13: 00007f13e3626038 R14: 00007f13e3625fa0 R15: 00007fffde3e6388 [ 214.410541][ T8480] [ 214.900132][ T8490] FAULT_INJECTION: forcing a failure. [ 214.900132][ T8490] name failslab, interval 1, probability 0, space 0, times 0 [ 214.900168][ T8490] CPU: 0 UID: 0 PID: 8490 Comm: syz.2.834 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.900199][ T8490] Tainted: [L]=SOFTLOCKUP [ 214.900207][ T8490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 214.900230][ T8490] Call Trace: [ 214.900239][ T8490] [ 214.900248][ T8490] dump_stack_lvl+0xe8/0x150 [ 214.900287][ T8490] should_fail_ex+0x3eb/0x540 [ 214.900324][ T8490] should_failslab+0xa8/0x100 [ 214.900355][ T8490] ? skb_clone+0x212/0x3a0 [ 214.900384][ T8490] kmem_cache_alloc_noprof+0x9c/0x600 [ 214.900411][ T8490] ? skb_clone+0x212/0x3a0 [ 214.900448][ T8490] skb_clone+0x212/0x3a0 [ 214.900474][ T8490] ? nfnetlink_rcv+0x4b0/0x28c0 [ 214.900511][ T8490] nfnetlink_rcv+0x4de/0x28c0 [ 214.900557][ T8490] ? __local_bh_enable_ip+0xd6/0x140 [ 214.900587][ T8490] ? lockdep_hardirqs_on+0x7b/0x110 [ 214.900616][ T8490] ? __dev_queue_xmit+0x29b/0x3920 [ 214.900646][ T8490] ? __local_bh_enable_ip+0xd6/0x140 [ 214.900673][ T8490] ? __dev_queue_xmit+0x29b/0x3920 [ 214.900702][ T8490] ? __dev_queue_xmit+0x1efb/0x3920 [ 214.900738][ T8490] ? __dev_queue_xmit+0x29b/0x3920 [ 214.900776][ T8490] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 214.900833][ T8490] ? __copy_skb_header+0xa3/0x4a0 [ 214.900862][ T8490] ? __asan_memcpy+0x40/0x70 [ 214.900885][ T8490] ? __skb_clone+0x5c/0x760 [ 214.900918][ T8490] ? __skb_clone+0x4a2/0x760 [ 214.900953][ T8490] ? skb_clone+0x246/0x3a0 [ 214.900986][ T8490] ? __netlink_deliver_tap+0x681/0x6e0 [ 214.901006][ T8490] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.901036][ T8490] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.901057][ T8490] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.901086][ T8490] netlink_unicast+0x8ef/0xa80 [ 214.901137][ T8490] netlink_sendmsg+0x7f0/0xb20 [ 214.901167][ T8490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.901194][ T8490] ? aa_sock_msg_perm+0x144/0x210 [ 214.901239][ T8490] ? apparmor_socket_sendmsg+0x98/0x360 [ 214.901270][ T8490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.901292][ T8490] sock_sendmsg_nosec+0x14e/0x190 [ 214.901330][ T8490] ____sys_sendmsg+0x54e/0x850 [ 214.901368][ T8490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.901407][ T8490] ? import_iovec+0x73/0xa0 [ 214.901445][ T8490] ___sys_sendmsg+0x2a6/0x360 [ 214.901471][ T8490] ? __lock_acquire+0x747/0x2de0 [ 214.901502][ T8490] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.901571][ T8490] ? __fget_files+0x3a2/0x420 [ 214.901596][ T8490] ? __fget_files+0x2a/0x420 [ 214.901632][ T8490] __x64_sys_sendmsg+0x1b1/0x290 [ 214.901663][ T8490] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.901715][ T8490] do_syscall_64+0x166/0x520 [ 214.901745][ T8490] ? trace_irq_disable+0x3b/0x140 [ 214.901774][ T8490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.901796][ T8490] ? clear_bhb_loop+0x70/0xc0 [ 214.901824][ T8490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.901846][ T8490] RIP: 0033:0x7fc8f599f559 [ 214.901867][ T8490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.901885][ T8490] RSP: 002b:00007fc8f681c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.901909][ T8490] RAX: ffffffffffffffda RBX: 00007fc8f5c25fa0 RCX: 00007fc8f599f559 [ 214.901925][ T8490] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 214.901940][ T8490] RBP: 00007fc8f681c090 R08: 0000000000000000 R09: 0000000000000000 [ 214.901954][ T8490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.901967][ T8490] R13: 00007fc8f5c26038 R14: 00007fc8f5c25fa0 R15: 00007ffe5479cf78 [ 214.902003][ T8490] [ 215.277633][ T8492] FAULT_INJECTION: forcing a failure. [ 215.277633][ T8492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.277670][ T8492] CPU: 0 UID: 0 PID: 8492 Comm: syz.0.835 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.277740][ T8492] Tainted: [L]=SOFTLOCKUP [ 215.277749][ T8492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 215.277764][ T8492] Call Trace: [ 215.277773][ T8492] [ 215.277784][ T8492] dump_stack_lvl+0xe8/0x150 [ 215.277824][ T8492] should_fail_ex+0x3eb/0x540 [ 215.277866][ T8492] _copy_to_user+0x31/0xb0 [ 215.277906][ T8492] simple_read_from_buffer+0xe1/0x170 [ 215.277941][ T8492] proc_fail_nth_read+0x1bb/0x230 [ 215.277982][ T8492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.278023][ T8492] ? rw_verify_area+0x24a/0x4c0 [ 215.278054][ T8492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.278097][ T8492] vfs_read+0x213/0xa80 [ 215.278133][ T8492] ? __pfx___mutex_lock+0x10/0x10 [ 215.278168][ T8492] ? __pfx_vfs_read+0x10/0x10 [ 215.278199][ T8492] ? __fget_files+0x2a/0x420 [ 215.278225][ T8492] ? __fget_files+0x3a2/0x420 [ 215.278250][ T8492] ? __fget_files+0x2a/0x420 [ 215.278283][ T8492] ? fdget+0x1ac/0x250 [ 215.278318][ T8492] ksys_read+0x150/0x270 [ 215.278351][ T8492] ? __pfx_ksys_read+0x10/0x10 [ 215.278382][ T8492] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 215.278422][ T8492] do_syscall_64+0x166/0x520 [ 215.278453][ T8492] ? trace_irq_disable+0x3b/0x140 [ 215.278484][ T8492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.278509][ T8492] ? clear_bhb_loop+0x70/0xc0 [ 215.278548][ T8492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.278573][ T8492] RIP: 0033:0x7f13e335fd8e [ 215.278595][ T8492] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 215.278616][ T8492] RSP: 002b:00007f13e42bafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.278641][ T8492] RAX: ffffffffffffffda RBX: 00007f13e42bb6c0 RCX: 00007f13e335fd8e [ 215.278659][ T8492] RDX: 000000000000000f RSI: 00007f13e42bb0a0 RDI: 0000000000000004 [ 215.278675][ T8492] RBP: 00007f13e42bb090 R08: 0000000000000000 R09: 0000000000000000 [ 215.278690][ T8492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.278714][ T8492] R13: 00007f13e3626038 R14: 00007f13e3625fa0 R15: 00007fffde3e6388 [ 215.278752][ T8492] [ 215.582056][ T8500] openvswitch: netlink: IP tunnel TTL not specified. [ 215.702070][ T8507] FAULT_INJECTION: forcing a failure. [ 215.702070][ T8507] name failslab, interval 1, probability 0, space 0, times 0 [ 215.702108][ T8507] CPU: 1 UID: 0 PID: 8507 Comm: syz.2.842 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.702137][ T8507] Tainted: [L]=SOFTLOCKUP [ 215.702145][ T8507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 215.702158][ T8507] Call Trace: [ 215.702167][ T8507] [ 215.702177][ T8507] dump_stack_lvl+0xe8/0x150 [ 215.702215][ T8507] should_fail_ex+0x3eb/0x540 [ 215.702254][ T8507] should_failslab+0xa8/0x100 [ 215.702288][ T8507] __kmalloc_noprof+0xf9/0x710 [ 215.702311][ T8507] ? lock_acquire+0x232/0x350 [ 215.702336][ T8507] ? hash_netnet4_add+0xc76/0x2d10 [ 215.702365][ T8507] ? hash_netnet4_add+0xc76/0x2d10 [ 215.702402][ T8507] hash_netnet4_add+0xc76/0x2d10 [ 215.702446][ T8507] ? ip_set_get_ipaddr4+0x107/0x2c0 [ 215.702466][ T8507] ? ip_set_get_ipaddr4+0x177/0x2c0 [ 215.702506][ T8507] hash_netnet4_uadt+0xbd4/0xf00 [ 215.702535][ T8507] ? crng_make_state+0x2c5/0x600 [ 215.702574][ T8507] ? __pfx_hash_netnet4_add+0x10/0x10 [ 215.702604][ T8507] ? __pfx_hash_netnet4_uadt+0x10/0x10 [ 215.702640][ T8507] ? __nla_validate_parse+0x2429/0x2d50 [ 215.702700][ T8507] call_ad+0x18d/0xb50 [ 215.702726][ T8507] ? __lock_acquire+0x747/0x2de0 [ 215.702759][ T8507] ? __pfx_call_ad+0x10/0x10 [ 215.702805][ T8507] ? __nla_parse+0x40/0x60 [ 215.702833][ T8507] ip_set_ad+0x82a/0x9d0 [ 215.702870][ T8507] ? __pfx_ip_set_ad+0x10/0x10 [ 215.702894][ T8507] ? __mutex_lock+0x305/0x15a0 [ 215.702970][ T8507] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 215.703007][ T8507] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 215.703064][ T8507] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 215.703140][ T8507] ? hook_capable+0x1c3/0x5e0 [ 215.703205][ T8507] netlink_rcv_skb+0x226/0x4a0 [ 215.703245][ T8507] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 215.703286][ T8507] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 215.703339][ T8507] ? bpf_lsm_capable+0x9/0x20 [ 215.703373][ T8507] ? security_capable+0x7e/0x2c0 [ 215.703414][ T8507] nfnetlink_rcv+0x2b9/0x28c0 [ 215.703459][ T8507] ? __dev_queue_xmit+0x29b/0x3920 [ 215.703498][ T8507] ? __local_bh_enable_ip+0xd6/0x140 [ 215.703531][ T8507] ? lockdep_hardirqs_on+0x7b/0x110 [ 215.703565][ T8507] ? __dev_queue_xmit+0x29b/0x3920 [ 215.703598][ T8507] ? __local_bh_enable_ip+0xd6/0x140 [ 215.703629][ T8507] ? __dev_queue_xmit+0x29b/0x3920 [ 215.703670][ T8507] ? __dev_queue_xmit+0x1efb/0x3920 [ 215.703709][ T8507] ? __dev_queue_xmit+0x29b/0x3920 [ 215.703751][ T8507] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 215.703800][ T8507] ? __pfx___dev_queue_xmit+0x10/0x10 [ 215.703846][ T8507] ? __copy_skb_header+0xa3/0x4a0 [ 215.703879][ T8507] ? __asan_memcpy+0x40/0x70 [ 215.703904][ T8507] ? __skb_clone+0x5c/0x760 [ 215.703941][ T8507] ? __skb_clone+0x4a2/0x760 [ 215.703991][ T8507] ? skb_clone+0x246/0x3a0 [ 215.704024][ T8507] ? __netlink_deliver_tap+0x681/0x6e0 [ 215.704045][ T8507] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.704075][ T8507] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.704097][ T8507] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.704126][ T8507] netlink_unicast+0x8ef/0xa80 [ 215.704178][ T8507] netlink_sendmsg+0x7f0/0xb20 [ 215.704209][ T8507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.704236][ T8507] ? aa_sock_msg_perm+0x144/0x210 [ 215.704273][ T8507] ? apparmor_socket_sendmsg+0x98/0x360 [ 215.704305][ T8507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.704327][ T8507] sock_sendmsg_nosec+0x14e/0x190 [ 215.704365][ T8507] ____sys_sendmsg+0x54e/0x850 [ 215.704399][ T8507] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.704439][ T8507] ? import_iovec+0x73/0xa0 [ 215.704477][ T8507] ___sys_sendmsg+0x2a6/0x360 [ 215.704502][ T8507] ? __lock_acquire+0x747/0x2de0 [ 215.704534][ T8507] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.704605][ T8507] ? __fget_files+0x3a2/0x420 [ 215.704630][ T8507] ? __fget_files+0x2a/0x420 [ 215.704674][ T8507] __x64_sys_sendmsg+0x1b1/0x290 [ 215.704707][ T8507] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 215.704779][ T8507] do_syscall_64+0x166/0x520 [ 215.704811][ T8507] ? trace_irq_disable+0x3b/0x140 [ 215.704842][ T8507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.704867][ T8507] ? clear_bhb_loop+0x70/0xc0 [ 215.704898][ T8507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.704922][ T8507] RIP: 0033:0x7fc8f599f559 [ 215.704945][ T8507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.704965][ T8507] RSP: 002b:00007fc8f681c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.704991][ T8507] RAX: ffffffffffffffda RBX: 00007fc8f5c25fa0 RCX: 00007fc8f599f559 [ 215.705008][ T8507] RDX: 0000000000000004 RSI: 00002000000010c0 RDI: 0000000000000003 [ 215.705024][ T8507] RBP: 00007fc8f681c090 R08: 0000000000000000 R09: 0000000000000000 [ 215.705039][ T8507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.705054][ T8507] R13: 00007fc8f5c26038 R14: 00007fc8f5c25fa0 R15: 00007ffe5479cf78 [ 215.705094][ T8507] [ 215.795198][ T32] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 215.956719][ T32] usb 5-1: New USB device found: idVendor=133e, idProduct=0815, bcdDevice=0.40 [ 215.977866][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.978110][ T32] usb 5-1: Product: syz [ 215.978162][ T32] usb 5-1: Manufacturer: syz [ 215.978201][ T32] usb 5-1: SerialNumber: syz [ 216.301351][ T32] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 216.314456][ T32] usb 5-1: USB disconnect, device number 39 [ 216.987206][ T8559] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 217.333039][ T33] audit: type=1400 audit(1793274764.363:94): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=8571 comm="syz.2.866" [ 217.359248][ T8574] FAULT_INJECTION: forcing a failure. [ 217.359248][ T8574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.359295][ T8574] CPU: 1 UID: 0 PID: 8574 Comm: syz.4.867 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.359324][ T8574] Tainted: [L]=SOFTLOCKUP [ 217.359332][ T8574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 217.359349][ T8574] Call Trace: [ 217.359358][ T8574] [ 217.359367][ T8574] dump_stack_lvl+0xe8/0x150 [ 217.359405][ T8574] should_fail_ex+0x3eb/0x540 [ 217.359444][ T8574] _copy_from_user+0x2d/0xb0 [ 217.359478][ T8574] video_usercopy+0xab1/0x1430 [ 217.359515][ T8574] ? __pfx___video_do_ioctl+0x10/0x10 [ 217.359548][ T8574] ? __pfx_video_usercopy+0x10/0x10 [ 217.359586][ T8574] ? __fget_files+0x2a/0x420 [ 217.359604][ T8574] ? __fget_files+0x2a/0x420 [ 217.359624][ T8574] v4l2_ioctl+0x18d/0x1e0 [ 217.359644][ T8574] ? __pfx_v4l2_ioctl+0x10/0x10 [ 217.359688][ T8574] __se_sys_ioctl+0xfc/0x170 [ 217.359722][ T8574] do_syscall_64+0x166/0x520 [ 217.359753][ T8574] ? trace_irq_disable+0x3b/0x140 [ 217.359781][ T8574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.359805][ T8574] ? clear_bhb_loop+0x70/0xc0 [ 217.359837][ T8574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.359854][ T8574] RIP: 0033:0x7f0919b9f559 [ 217.359869][ T8574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.359882][ T8574] RSP: 002b:00007f091a9cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.359899][ T8574] RAX: ffffffffffffffda RBX: 00007f0919e25fa0 RCX: 00007f0919b9f559 [ 217.359910][ T8574] RDX: 0000200000001980 RSI: 00000000c0205649 RDI: 0000000000000003 [ 217.359921][ T8574] RBP: 00007f091a9cd090 R08: 0000000000000000 R09: 0000000000000000 [ 217.359930][ T8574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.359940][ T8574] R13: 00007f0919e26038 R14: 00007f0919e25fa0 R15: 00007ffcf17b9598 [ 217.359964][ T8574] [ 217.623954][ T8578] netlink: 60 bytes leftover after parsing attributes in process `syz.3.869'. [ 217.635282][ T8578] netlink: 60 bytes leftover after parsing attributes in process `syz.3.869'. [ 217.779873][ T8583] Failed to get privilege flags for destination (handle=0x0:0x1000000) [ 217.892812][ T8585] FAULT_INJECTION: forcing a failure. [ 217.892812][ T8585] name failslab, interval 1, probability 0, space 0, times 0 [ 217.892849][ T8585] CPU: 0 UID: 0 PID: 8585 Comm: syz.2.872 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.892880][ T8585] Tainted: [L]=SOFTLOCKUP [ 217.892888][ T8585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 217.892902][ T8585] Call Trace: [ 217.892911][ T8585] [ 217.892920][ T8585] dump_stack_lvl+0xe8/0x150 [ 217.892964][ T8585] should_fail_ex+0x3eb/0x540 [ 217.893011][ T8585] should_failslab+0xa8/0x100 [ 217.893044][ T8585] __kmalloc_cache_noprof+0x9e/0x600 [ 217.893071][ T8585] ? sctp_add_bind_addr+0x8c/0x370 [ 217.893100][ T8585] ? sctp_add_bind_addr+0x8c/0x370 [ 217.893132][ T8585] ? __pfx_sctp_get_port_local+0x10/0x10 [ 217.893160][ T8585] sctp_add_bind_addr+0x8c/0x370 [ 217.893191][ T8585] ? sctp_auto_asconf_init+0x14d/0x1d0 [ 217.893218][ T8585] sctp_do_bind+0x597/0x9a0 [ 217.893252][ T8585] sctp_connect_new_asoc+0x270/0x6b0 [ 217.893280][ T8585] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 217.893311][ T8585] ? sctp_get_af_specific+0x29/0x80 [ 217.893341][ T8585] ? sctp_inet6_send_verify+0x80/0x300 [ 217.893371][ T8585] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 217.893398][ T8585] __sctp_connect+0x5cb/0xdc0 [ 217.893435][ T8585] ? __pfx___sctp_connect+0x10/0x10 [ 217.893457][ T8585] ? security_sctp_bind_connect+0x7e/0x2c0 [ 217.893488][ T8585] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 217.893521][ T8585] sctp_getsockopt_connectx3+0x227/0x360 [ 217.893557][ T8585] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 217.893594][ T8585] ? sctp_getsockopt+0x12f/0xb90 [ 217.893632][ T8585] ? __local_bh_enable_ip+0xd6/0x140 [ 217.893666][ T8585] sctp_getsockopt+0x984/0xb90 [ 217.893703][ T8585] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 217.893741][ T8585] do_sock_getsockopt+0x4aa/0x640 [ 217.893774][ T8585] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 217.893820][ T8585] ? __fget_files+0x3a2/0x420 [ 217.893845][ T8585] ? __fget_files+0x2a/0x420 [ 217.893880][ T8585] __x64_sys_getsockopt+0x1a4/0x240 [ 217.893917][ T8585] do_syscall_64+0x166/0x520 [ 217.893948][ T8585] ? trace_irq_disable+0x3b/0x140 [ 217.893975][ T8585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.894006][ T8585] ? clear_bhb_loop+0x70/0xc0 [ 217.894047][ T8585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.894069][ T8585] RIP: 0033:0x7fc8f599f559 [ 217.894089][ T8585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.894108][ T8585] RSP: 002b:00007fc8f681c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 217.894131][ T8585] RAX: ffffffffffffffda RBX: 00007fc8f5c25fa0 RCX: 00007fc8f599f559 [ 217.894147][ T8585] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 217.894160][ T8585] RBP: 00007fc8f681c090 R08: 00002000000001c0 R09: 0000000000000000 [ 217.894175][ T8585] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 217.894208][ T8585] R13: 00007fc8f5c26038 R14: 00007fc8f5c25fa0 R15: 00007ffe5479cf78 [ 217.894246][ T8585] [ 218.351368][ T8596] Failed to get privilege flags for destination (handle=0x0:0x0) [ 218.744833][ T195] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 218.906577][ T195] usb 5-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 218.909402][ T195] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 218.909440][ T195] usb 5-1: can't read configurations, error -71 [ 219.809497][ T8630] FAULT_INJECTION: forcing a failure. [ 219.809497][ T8630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.809531][ T8630] CPU: 0 UID: 0 PID: 8630 Comm: syz.4.887 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.809560][ T8630] Tainted: [L]=SOFTLOCKUP [ 219.809568][ T8630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 219.809581][ T8630] Call Trace: [ 219.809589][ T8630] [ 219.809598][ T8630] dump_stack_lvl+0xe8/0x150 [ 219.809635][ T8630] should_fail_ex+0x3eb/0x540 [ 219.809673][ T8630] strncpy_from_user+0x36/0x2c0 [ 219.809707][ T8630] do_getname+0x77/0x250 [ 219.809733][ T8630] user_path_at+0x2a/0x160 [ 219.809763][ T8630] __se_sys_mount+0x2dc/0x420 [ 219.809793][ T8630] ? __pfx___se_sys_mount+0x10/0x10 [ 219.809825][ T8630] ? __x64_sys_mount+0x20/0xc0 [ 219.809851][ T8630] do_syscall_64+0x166/0x520 [ 219.809888][ T8630] ? trace_irq_disable+0x3b/0x140 [ 219.809914][ T8630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.809936][ T8630] ? clear_bhb_loop+0x70/0xc0 [ 219.809963][ T8630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.809985][ T8630] RIP: 0033:0x7f0919b9f559 [ 219.810005][ T8630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.810023][ T8630] RSP: 002b:00007f091a9cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 219.810046][ T8630] RAX: ffffffffffffffda RBX: 00007f0919e25fa0 RCX: 00007f0919b9f559 [ 219.810063][ T8630] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 219.810078][ T8630] RBP: 00007f091a9cd090 R08: 0000200000000100 R09: 0000000000000000 [ 219.810092][ T8630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.810105][ T8630] R13: 00007f0919e26038 R14: 00007f0919e25fa0 R15: 00007ffcf17b9598 [ 219.810141][ T8630] [ 220.080381][ T8635] PKCS7: Unknown OID: [4] 1.31.15331.16263(bad) [ 220.080401][ T8635] PKCS7: Only support pkcs7_signedData type [ 220.141994][ T8635] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 220.252047][ T8640] random: crng reseeded on system resumption [ 220.545023][ T195] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 220.695208][ T195] usb 5-1: Using ep0 maxpacket: 16 [ 220.696216][ T195] usb 5-1: New USB device found: idVendor=0b48, idProduct=1009, bcdDevice=2d.22 [ 220.698973][ T195] usb 5-1: config 1 has an invalid interface number: 116 but max is 0 [ 220.698999][ T195] usb 5-1: config 1 has no interface number 0 [ 220.699030][ T195] usb 5-1: config 1 interface 116 has no altsetting 0 [ 220.703343][ T195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.703408][ T195] usb 5-1: Product: syz [ 220.703458][ T195] usb 5-1: Manufacturer: syz [ 220.703494][ T195] usb 5-1: SerialNumber: syz [ 220.990442][ T195] ttusb_dec_send_command: command bulk message failed: error -22 [ 220.990685][ T195] ttusb-dec 5-1:1.116: probe with driver ttusb-dec failed with error -22 [ 220.994463][ T195] usb 5-1: USB disconnect, device number 42 [ 221.824943][ T5741] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 221.974838][ T5741] usb 5-1: Using ep0 maxpacket: 16 [ 221.975436][ T5741] usb 5-1: New USB device found: idVendor=046e, idProduct=5577, bcdDevice=0.00 [ 221.976557][ T5741] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.976588][ T5741] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.976613][ T5741] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.976632][ T5741] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.976656][ T5741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.978789][ T5741] usb 5-1: config 0 descriptor?? [ 222.397015][ T5741] input: HID 046e:5577 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:046E:5577.000C/input/input20 [ 222.461728][ T5741] topseed 0003:046E:5577.000C: input,hidraw0: USB HID v0.00 Joystick [HID 046e:5577] on usb-dummy_hcd.4-1/input0 [ 223.212481][ T8682] netlink: 56 bytes leftover after parsing attributes in process `syz.3.906'. [ 223.453808][ T8697] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 223.453835][ T8697] overlayfs: failed to set xattr on upper [ 223.453843][ T8697] overlayfs: ...falling back to redirect_dir=nofollow. [ 223.453852][ T8697] overlayfs: ...falling back to index=off. [ 223.453860][ T8697] overlayfs: ...falling back to uuid=null. [ 223.453869][ T8697] overlayfs: ...falling back to xino=off. [ 223.906827][ T33] audit: type=1400 audit(1793274770.943:95): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=8719 comm="syz.0.922" name="//o" offset=61 [ 224.612521][ T32] usb 5-1: USB disconnect, device number 43 [ 225.028521][ T8755] FAULT_INJECTION: forcing a failure. [ 225.028521][ T8755] name failslab, interval 1, probability 0, space 0, times 0 [ 225.028547][ T8755] CPU: 1 UID: 0 PID: 8755 Comm: syz.4.934 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.028568][ T8755] Tainted: [L]=SOFTLOCKUP [ 225.028574][ T8755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 225.028583][ T8755] Call Trace: [ 225.028589][ T8755] [ 225.028597][ T8755] dump_stack_lvl+0xe8/0x150 [ 225.028624][ T8755] should_fail_ex+0x3eb/0x540 [ 225.028651][ T8755] should_failslab+0xa8/0x100 [ 225.028693][ T8755] __kmalloc_noprof+0xf9/0x710 [ 225.028711][ T8755] ? tomoyo_encode+0x2ad/0x570 [ 225.028733][ T8755] ? tomoyo_encode+0x2ad/0x570 [ 225.028760][ T8755] tomoyo_encode+0x2ad/0x570 [ 225.028787][ T8755] tomoyo_realpath_from_path+0x5fa/0x640 [ 225.028821][ T8755] tomoyo_check_open_permission+0x229/0x470 [ 225.028842][ T8755] ? tomoyo_check_open_permission+0x1d3/0x470 [ 225.028862][ T8755] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 225.028882][ T8755] ? __asan_memset+0x22/0x50 [ 225.028903][ T8755] ? seqcount_lockdep_reader_access+0xea/0x100 [ 225.028941][ T8755] ? devcgroup_check_permission+0x31/0x8f0 [ 225.028960][ T8755] security_file_open+0xa9/0x240 [ 225.028980][ T8755] do_dentry_open+0x495/0x1360 [ 225.029012][ T8755] vfs_open_consume+0x4a/0x350 [ 225.029035][ T8755] ? path_openat+0x16e1/0x20f0 [ 225.029058][ T8755] path_openat+0x16fc/0x20f0 [ 225.029099][ T8755] do_file_open+0x23e/0x4a0 [ 225.029125][ T8755] ? __pfx_do_file_open+0x10/0x10 [ 225.029162][ T8755] ? _raw_spin_unlock+0x28/0x50 [ 225.029181][ T8755] ? alloc_fd+0x6af/0x760 [ 225.029206][ T8755] do_sys_openat2+0x115/0x200 [ 225.029223][ T8755] ? __pfx_do_sys_openat2+0x10/0x10 [ 225.029239][ T8755] ? ksys_write+0x242/0x270 [ 225.029260][ T8755] ? __pfx_ksys_write+0x10/0x10 [ 225.029283][ T8755] __x64_sys_openat+0x138/0x170 [ 225.029302][ T8755] do_syscall_64+0x166/0x520 [ 225.029323][ T8755] ? trace_irq_disable+0x3b/0x140 [ 225.029343][ T8755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.029360][ T8755] ? clear_bhb_loop+0x70/0xc0 [ 225.029380][ T8755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.029395][ T8755] RIP: 0033:0x7f0919b9f559 [ 225.029410][ T8755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.029424][ T8755] RSP: 002b:00007f091a9cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 225.029440][ T8755] RAX: ffffffffffffffda RBX: 00007f0919e25fa0 RCX: 00007f0919b9f559 [ 225.029452][ T8755] RDX: 0000000000000400 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 225.029462][ T8755] RBP: 00007f091a9cd090 R08: 0000000000000000 R09: 0000000000000000 [ 225.029472][ T8755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.029481][ T8755] R13: 00007f0919e26038 R14: 00007f0919e25fa0 R15: 00007ffcf17b9598 [ 225.029506][ T8755] [ 225.029521][ T8755] ERROR: Out of memory at tomoyo_realpath_from_path. [ 225.111630][ T8755] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 225.111750][ T8755] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 225.351104][ T8755] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.351253][ T8755] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 225.684889][ T5742] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 225.814847][ T5742] usb 5-1: device descriptor read/64, error -71 [ 226.056119][ T5742] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 226.180121][ T8773] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 226.180177][ T8773] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 226.185292][ T5742] usb 5-1: device descriptor read/64, error -71 [ 226.297236][ T5742] usb usb5-port1: attempt power cycle [ 226.634834][ T5742] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 226.656577][ T5742] usb 5-1: device descriptor read/8, error -71 [ 226.894933][ T5742] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 226.915239][ T5742] usb 5-1: device descriptor read/8, error -71 [ 227.025950][ T5742] usb usb5-port1: unable to enumerate USB device [ 227.125199][ T5654] Bluetooth: hci0: command 0x0406 tx timeout [ 227.364832][ T5654] Bluetooth: hci1: command 0x0406 tx timeout [ 228.656909][ T5654] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 228.657417][ T5654] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 228.864949][ T5741] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 229.016063][ T5741] usb 5-1: New USB device found: idVendor=0b95, idProduct=1790, bcdDevice=1.00 [ 229.017589][ T5741] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 229.017613][ T5741] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 229.017648][ T5741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.205368][ T5654] Bluetooth: hci0: command 0x0406 tx timeout [ 229.446379][ T5654] Bluetooth: hci1: command 0x0406 tx timeout [ 230.774441][ T8818] netlink: 'syz.2.956': attribute type 1 has an invalid length. [ 230.774459][ T8818] netlink: 'syz.2.956': attribute type 268 has an invalid length. [ 230.774470][ T8818] netlink: 224 bytes leftover after parsing attributes in process `syz.2.956'. [ 230.839192][ T8820] netlink: 'syz.2.957': attribute type 2 has an invalid length. [ 230.839517][ T8820] netlink: 14 bytes leftover after parsing attributes in process `syz.2.957'. [ 230.999710][ T8825] mac80211_hwsim hwsim7 ..ãc¤±: renamed from wlan1 (while UP) [ 231.001904][ T8825] FAULT_INJECTION: forcing a failure. [ 231.001904][ T8825] name failslab, interval 1, probability 0, space 0, times 0 [ 231.001927][ T8825] CPU: 0 UID: 0 PID: 8825 Comm: syz.2.959 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.001947][ T8825] Tainted: [L]=SOFTLOCKUP [ 231.001953][ T8825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 231.001962][ T8825] Call Trace: [ 231.001967][ T8825] [ 231.001973][ T8825] dump_stack_lvl+0xe8/0x150 [ 231.001999][ T8825] should_fail_ex+0x3eb/0x540 [ 231.002025][ T8825] should_failslab+0xa8/0x100 [ 231.002047][ T8825] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 231.002067][ T8825] ? neigh_sysctl_register+0xae/0xa90 [ 231.002086][ T8825] ? neigh_sysctl_register+0xae/0xa90 [ 231.002110][ T8825] kmemdup_noprof+0x2b/0x70 [ 231.002127][ T8825] neigh_sysctl_register+0xae/0xa90 [ 231.002189][ T8825] ? __pfx_ndisc_ifinfo_sysctl_change+0x10/0x10 [ 231.002222][ T8825] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 231.002256][ T8825] ? kasan_quarantine_put+0xbb/0x1f0 [ 231.002283][ T8825] ? lockdep_hardirqs_on+0x7b/0x110 [ 231.002311][ T8825] addrconf_sysctl_register+0xb3/0x1c0 [ 231.002330][ T8825] addrconf_notify+0x808/0x1050 [ 231.002361][ T8825] notifier_call_chain+0x1a5/0x3d0 [ 231.002382][ T8825] netif_change_name+0x5ee/0x970 [ 231.002409][ T8825] ? dev_change_name+0x101/0x220 [ 231.002429][ T8825] ? __pfx_netif_change_name+0x10/0x10 [ 231.002451][ T8825] ? full_name_hash+0x92/0xe0 [ 231.002470][ T8825] ? __dev_get_by_name+0xe5/0x130 [ 231.002501][ T8825] dev_change_name+0x101/0x220 [ 231.002521][ T8825] dev_ioctl+0x5ec/0x1150 [ 231.002543][ T8825] sock_do_ioctl+0x23e/0x320 [ 231.002567][ T8825] ? __pfx_sock_do_ioctl+0x10/0x10 [ 231.002608][ T8825] ? do_futex+0x3e7/0x4e0 [ 231.002641][ T8825] sock_ioctl+0x57a/0x7e0 [ 231.002679][ T8825] ? __fget_files+0x2a/0x420 [ 231.002696][ T8825] ? __pfx_sock_ioctl+0x10/0x10 [ 231.002718][ T8825] ? __fget_files+0x2a/0x420 [ 231.002735][ T8825] ? __fget_files+0x2a/0x420 [ 231.002755][ T8825] ? bpf_lsm_file_ioctl+0x9/0x20 [ 231.002775][ T8825] ? __pfx_sock_ioctl+0x10/0x10 [ 231.002799][ T8825] __se_sys_ioctl+0xfc/0x170 [ 231.002823][ T8825] do_syscall_64+0x166/0x520 [ 231.002844][ T8825] ? trace_irq_disable+0x3b/0x140 [ 231.002863][ T8825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.002879][ T8825] ? clear_bhb_loop+0x70/0xc0 [ 231.002899][ T8825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.002915][ T8825] RIP: 0033:0x7fc8f599f559 [ 231.002929][ T8825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.002943][ T8825] RSP: 002b:00007fc8f681c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.002960][ T8825] RAX: ffffffffffffffda RBX: 00007fc8f5c25fa0 RCX: 00007fc8f599f559 [ 231.002972][ T8825] RDX: 0000200000000300 RSI: 0000000000008923 RDI: 0000000000000007 [ 231.002982][ T8825] RBP: 00007fc8f5a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 231.002991][ T8825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.003001][ T8825] R13: 00007fc8f5c26038 R14: 00007fc8f5c25fa0 R15: 00007ffe5479cf78 [ 231.003043][ T8825] [ 231.250151][ T8826] serio: Serial port ptm0 [ 231.290017][ T5654] Bluetooth: hci0: command 0x0406 tx timeout [ 232.456585][ T5742] usb 5-1: USB disconnect, device number 48 [ 232.590436][ T8839] FAULT_INJECTION: forcing a failure. [ 232.590436][ T8839] name failslab, interval 1, probability 0, space 0, times 0 [ 232.590463][ T8839] CPU: 1 UID: 0 PID: 8839 Comm: syz.4.964 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.590484][ T8839] Tainted: [L]=SOFTLOCKUP [ 232.590490][ T8839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 232.590499][ T8839] Call Trace: [ 232.590507][ T8839] [ 232.590513][ T8839] dump_stack_lvl+0xe8/0x150 [ 232.590540][ T8839] should_fail_ex+0x3eb/0x540 [ 232.590566][ T8839] should_failslab+0xa8/0x100 [ 232.590589][ T8839] __kvmalloc_node_noprof+0x171/0x820 [ 232.590611][ T8839] ? dm_ctl_ioctl+0x49d/0xe10 [ 232.590632][ T8839] ? dm_ctl_ioctl+0x49d/0xe10 [ 232.590659][ T8839] dm_ctl_ioctl+0x49d/0xe10 [ 232.590682][ T8839] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 232.590709][ T8839] ? __pfx_table_load+0x10/0x10 [ 232.590732][ T8839] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 232.590776][ T8839] ? __fget_files+0x2a/0x420 [ 232.590797][ T8839] ? bpf_lsm_file_ioctl+0x9/0x20 [ 232.590817][ T8839] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 232.590840][ T8839] __se_sys_ioctl+0xfc/0x170 [ 232.590863][ T8839] do_syscall_64+0x166/0x520 [ 232.590883][ T8839] ? trace_irq_disable+0x3b/0x140 [ 232.590902][ T8839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.590918][ T8839] ? clear_bhb_loop+0x70/0xc0 [ 232.590936][ T8839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.590951][ T8839] RIP: 0033:0x7f0919b9f559 [ 232.590965][ T8839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.590978][ T8839] RSP: 002b:00007f091a9cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.590994][ T8839] RAX: ffffffffffffffda RBX: 00007f0919e25fa0 RCX: 00007f0919b9f559 [ 232.591013][ T8839] RDX: 0000200000000040 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 232.591023][ T8839] RBP: 00007f091a9cd090 R08: 0000000000000000 R09: 0000000000000000 [ 232.591032][ T8839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.591041][ T8839] R13: 00007f0919e26038 R14: 00007f0919e25fa0 R15: 00007ffcf17b9598 [ 232.591064][ T8839] [ 232.760190][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.965'. [ 233.384314][ T8867] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 234.091559][ T8870] FAULT_INJECTION: forcing a failure. [ 234.091559][ T8870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.091604][ T8870] CPU: 1 UID: 0 PID: 8870 Comm: syz.0.976 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.091632][ T8870] Tainted: [L]=SOFTLOCKUP [ 234.091638][ T8870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 234.091662][ T8870] Call Trace: [ 234.091669][ T8870] [ 234.091677][ T8870] dump_stack_lvl+0xe8/0x150 [ 234.091709][ T8870] should_fail_ex+0x3eb/0x540 [ 234.091739][ T8870] _copy_to_user+0x31/0xb0 [ 234.091769][ T8870] simple_read_from_buffer+0xe1/0x170 [ 234.091795][ T8870] proc_fail_nth_read+0x1bb/0x230 [ 234.091825][ T8870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.091854][ T8870] ? rw_verify_area+0x24a/0x4c0 [ 234.091881][ T8870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.091913][ T8870] vfs_read+0x213/0xa80 [ 234.091945][ T8870] ? __pfx___mutex_lock+0x10/0x10 [ 234.091976][ T8870] ? __pfx_vfs_read+0x10/0x10 [ 234.092004][ T8870] ? __fget_files+0x2a/0x420 [ 234.092027][ T8870] ? __fget_files+0x3a2/0x420 [ 234.092053][ T8870] ? __fget_files+0x2a/0x420 [ 234.092089][ T8870] ? fdget+0x1ac/0x250 [ 234.092120][ T8870] ksys_read+0x150/0x270 [ 234.092146][ T8870] ? __pfx_ksys_read+0x10/0x10 [ 234.092180][ T8870] do_syscall_64+0x166/0x520 [ 234.092210][ T8870] ? trace_irq_disable+0x3b/0x140 [ 234.092237][ T8870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.092261][ T8870] ? clear_bhb_loop+0x70/0xc0 [ 234.092287][ T8870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.092309][ T8870] RIP: 0033:0x7f13e335fd8e [ 234.092330][ T8870] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 234.092347][ T8870] RSP: 002b:00007f13e42bafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 234.092369][ T8870] RAX: ffffffffffffffda RBX: 00007f13e42bb6c0 RCX: 00007f13e335fd8e [ 234.092382][ T8870] RDX: 000000000000000f RSI: 00007f13e42bb0a0 RDI: 0000000000000003 [ 234.092394][ T8870] RBP: 00007f13e42bb090 R08: 0000000000000000 R09: 0000000000000000 [ 234.092406][ T8870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.092417][ T8870] R13: 00007f13e3626038 R14: 00007f13e3625fa0 R15: 00007fffde3e6388 [ 234.092445][ T8870] [ 234.745520][ T8898] FAULT_INJECTION: forcing a failure. [ 234.745520][ T8898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.745555][ T8898] CPU: 0 UID: 0 PID: 8898 Comm: syz.2.985 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.745582][ T8898] Tainted: [L]=SOFTLOCKUP [ 234.745589][ T8898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 234.745602][ T8898] Call Trace: [ 234.745610][ T8898] [ 234.745619][ T8898] dump_stack_lvl+0xe8/0x150 [ 234.745654][ T8898] should_fail_ex+0x3eb/0x540 [ 234.745690][ T8898] __kvm_read_guest_page+0x18d/0x240 [ 234.745718][ T8898] kvm_fetch_guest_virt+0x10c/0x160 [ 234.745745][ T8898] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 234.745768][ T8898] __do_insn_fetch_bytes+0x53a/0x6c0 [ 234.745816][ T8898] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 234.745843][ T8898] ? x86_decode_insn+0x495f/0x5af0 [ 234.745885][ T8898] x86_decode_insn+0x374/0x5af0 [ 234.745930][ T8898] ? __pfx_x86_decode_insn+0x10/0x10 [ 234.745972][ T8898] ? __pfx_x86_decode_insn+0x10/0x10 [ 234.746005][ T8898] ? init_decode_cache+0x11f/0x160 [ 234.746044][ T8898] ? __asan_memset+0x22/0x50 [ 234.746066][ T8898] ? init_decode_cache+0xf3/0x160 [ 234.746097][ T8898] ? init_emulate_ctxt+0x4c6/0x630 [ 234.746128][ T8898] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 234.746166][ T8898] x86_emulate_instruction+0x348/0x1e90 [ 234.746204][ T8898] ? handle_mmio_page_fault+0x1db/0xf80 [ 234.746236][ T8898] ? bsearch+0x8a/0xc0 [ 234.746255][ T8898] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 234.746285][ T8898] ? __pfx_handle_mmio_page_fault+0x10/0x10 [ 234.746307][ T8898] ? kvm_io_bus_write+0x25a/0x580 [ 234.746333][ T8898] ? vmx_vcpu_run+0x1c1a/0x2db0 [ 234.746368][ T8898] ? __pfx_kvm_io_bus_write+0x10/0x10 [ 234.746403][ T8898] kvm_mmu_page_fault+0x8f5/0xc00 [ 234.746434][ T8898] vt_handle_exit+0x28/0x160 [ 234.746462][ T8898] vcpu_run+0x4e8a/0x7a90 [ 234.746513][ T8898] ? vcpu_run+0x35f3/0x7a90 [ 234.746594][ T8898] ? __pfx_vcpu_run+0x10/0x10 [ 234.746614][ T8898] ? complete_emulated_mmio+0x1f2/0x910 [ 234.746647][ T8898] ? __asan_memcpy+0x40/0x70 [ 234.746672][ T8898] ? complete_emulated_mmio+0x535/0x910 [ 234.746706][ T8898] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 234.746747][ T8898] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 234.746787][ T8898] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 234.746833][ T8898] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 234.746871][ T8898] kvm_vcpu_ioctl+0xa61/0xfd0 [ 234.746902][ T8898] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 234.746948][ T8898] ? __fget_files+0x2a/0x420 [ 234.746977][ T8898] ? __fget_files+0x2a/0x420 [ 234.747002][ T8898] ? __fget_files+0x2a/0x420 [ 234.747031][ T8898] ? bpf_lsm_file_ioctl+0x9/0x20 [ 234.747060][ T8898] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 234.747084][ T8898] __se_sys_ioctl+0xfc/0x170 [ 234.747127][ T8898] do_syscall_64+0x166/0x520 [ 234.747156][ T8898] ? trace_irq_disable+0x3b/0x140 [ 234.747182][ T8898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.747203][ T8898] ? clear_bhb_loop+0x70/0xc0 [ 234.747230][ T8898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.747250][ T8898] RIP: 0033:0x7fc8f599f559 [ 234.747270][ T8898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.747287][ T8898] RSP: 002b:00007fc8f681c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.747310][ T8898] RAX: ffffffffffffffda RBX: 00007fc8f5c25fa0 RCX: 00007fc8f599f559 [ 234.747325][ T8898] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 234.747337][ T8898] RBP: 00007fc8f681c090 R08: 0000000000000000 R09: 0000000000000000 [ 234.747350][ T8898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.747362][ T8898] R13: 00007fc8f5c26038 R14: 00007fc8f5c25fa0 R15: 00007ffe5479cf78 [ 234.747395][ T8898] [ 234.878709][ T5741] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 235.077875][ T5741] usb 5-1: Using ep0 maxpacket: 16 [ 235.090037][ T5741] usb 5-1: New USB device found: idVendor=046e, idProduct=5577, bcdDevice=0.00 [ 235.103573][ T5741] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.103666][ T5741] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.103728][ T5741] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.103817][ T5741] usb 5-1: config 0 interface 0 has no altsetting 0 [ 235.103902][ T5741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.169704][ T5741] usb 5-1: config 0 descriptor?? [ 235.393583][ T994] dvb-usb: did not find the firmware file 'dvb-usb-dw3101.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 235.424531][ T994] usb 3-1: USB disconnect, device number 32 [ 235.530014][ T8907] netlink: 'syz.0.989': attribute type 63 has an invalid length. [ 235.530039][ T8907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.989'. [ 235.641495][ T5741] input: HID 046e:5577 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:046E:5577.000D/input/input21 [ 235.693130][ T5741] topseed 0003:046E:5577.000D: input,hidraw0: USB HID v0.00 Joystick [HID 046e:5577] on usb-dummy_hcd.4-1/input0 [ 235.720694][ T8915] FAULT_INJECTION: forcing a failure. [ 235.720694][ T8915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.720732][ T8915] CPU: 0 UID: 0 PID: 8915 Comm: syz.0.990 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.720764][ T8915] Tainted: [L]=SOFTLOCKUP [ 235.720773][ T8915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 235.720798][ T8915] Call Trace: [ 235.720807][ T8915] [ 235.720817][ T8915] dump_stack_lvl+0xe8/0x150 [ 235.720856][ T8915] should_fail_ex+0x3eb/0x540 [ 235.720894][ T8915] _copy_from_iter+0x1d3/0x1680 [ 235.720924][ T8915] ? __lock_acquire+0x747/0x2de0 [ 235.720962][ T8915] ? __pfx__copy_from_iter+0x10/0x10 [ 235.720990][ T8915] ? begin_current_label_crit_section+0x299/0x830 [ 235.721029][ T8915] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 235.721075][ T8915] ping_v4_sendmsg+0x289/0x1870 [ 235.721116][ T8915] ? __pfx_aa_inet_msg_perm+0x10/0x10 [ 235.721149][ T8915] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 235.721195][ T8915] ? finish_task_switch+0x40e/0xc60 [ 235.721225][ T8915] ? lockdep_hardirqs_on+0x7b/0x110 [ 235.721277][ T8915] ? __lock_acquire+0x747/0x2de0 [ 235.721310][ T8915] ? sock_rps_record_flow+0x19/0x350 [ 235.721341][ T8915] ? inet_sendmsg+0x298/0x320 [ 235.721365][ T8915] ? apparmor_socket_sendmsg+0x98/0x360 [ 235.721395][ T8915] ? __pfx_inet_sendmsg+0x10/0x10 [ 235.721422][ T8915] sock_sendmsg_nosec+0x10f/0x190 [ 235.721460][ T8915] ____sys_sendmsg+0x54e/0x850 [ 235.721495][ T8915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.721532][ T8915] ? import_iovec+0x73/0xa0 [ 235.721570][ T8915] ___sys_sendmsg+0x2a6/0x360 [ 235.721596][ T8915] ? __lock_acquire+0x747/0x2de0 [ 235.721639][ T8915] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.721674][ T8915] ? __pfx_futex_wake_mark+0x10/0x10 [ 235.721726][ T8915] ? __fget_files+0x3a2/0x420 [ 235.721750][ T8915] ? __fget_files+0x2a/0x420 [ 235.721785][ T8915] __sys_sendmmsg+0x273/0x4e0 [ 235.721818][ T8915] ? __pfx___sys_sendmmsg+0x10/0x10 [ 235.721844][ T8915] ? do_futex+0x3e7/0x4e0 [ 235.721908][ T8915] ? rcu_is_watching+0x16/0xb0 [ 235.721947][ T8915] __x64_sys_sendmmsg+0xa0/0xc0 [ 235.721977][ T8915] do_syscall_64+0x166/0x520 [ 235.722006][ T8915] ? trace_irq_disable+0x3b/0x140 [ 235.722033][ T8915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.722057][ T8915] ? clear_bhb_loop+0x70/0xc0 [ 235.722084][ T8915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.722107][ T8915] RIP: 0033:0x7f13e339f559 [ 235.722128][ T8915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.722148][ T8915] RSP: 002b:00007f13e42bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 235.722171][ T8915] RAX: ffffffffffffffda RBX: 00007f13e3625fa0 RCX: 00007f13e339f559 [ 235.722188][ T8915] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000004 [ 235.722203][ T8915] RBP: 00007f13e3436b20 R08: 0000000000000000 R09: 0000000000000000 [ 235.722217][ T8915] R10: 00000000000050c4 R11: 0000000000000246 R12: 0000000000000000 [ 235.722231][ T8915] R13: 00007f13e3626038 R14: 00007f13e3625fa0 R15: 00007fffde3e6388 [ 235.722275][ T8915] [ 235.790034][ T994] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 235.986163][ T994] usb 3-1: New USB device found: idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 236.072886][ T994] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 236.072910][ T994] usb 3-1: Product: syz [ 236.072922][ T994] usb 3-1: Manufacturer: syz [ 236.072934][ T994] usb 3-1: SerialNumber: syz [ 236.125873][ T994] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 236.401893][ T8927] FAULT_INJECTION: forcing a failure. [ 236.401893][ T8927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.401919][ T8927] CPU: 1 UID: 0 PID: 8927 Comm: syz.0.994 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.401940][ T8927] Tainted: [L]=SOFTLOCKUP [ 236.401946][ T8927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 236.401971][ T8927] Call Trace: [ 236.401976][ T8927] [ 236.401983][ T8927] dump_stack_lvl+0xe8/0x150 [ 236.402010][ T8927] should_fail_ex+0x3eb/0x540 [ 236.402036][ T8927] _copy_from_user+0x2d/0xb0 [ 236.402060][ T8927] kstrtouint_from_user+0xd6/0x180 [ 236.402083][ T8927] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 236.402109][ T8927] ? lock_acquire+0x115/0x350 [ 236.402130][ T8927] proc_fail_nth_write+0x8e/0x210 [ 236.402154][ T8927] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 236.402183][ T8927] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 236.402206][ T8927] vfs_write+0x296/0xba0 [ 236.402234][ T8927] ? __pfx_vfs_write+0x10/0x10 [ 236.402254][ T8927] ? __fget_files+0x2a/0x420 [ 236.402270][ T8927] ? __fget_files+0x3a2/0x420 [ 236.402286][ T8927] ? __fget_files+0x2a/0x420 [ 236.402305][ T8927] ? fdget+0x1ac/0x250 [ 236.402327][ T8927] ksys_write+0x150/0x270 [ 236.402348][ T8927] ? __pfx_ksys_write+0x10/0x10 [ 236.402366][ T8927] ? __pfx_sock_ioctl+0x10/0x10 [ 236.402395][ T8927] do_syscall_64+0x166/0x520 [ 236.402417][ T8927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.402433][ T8927] ? clear_bhb_loop+0x70/0xc0 [ 236.402452][ T8927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.402467][ T8927] RIP: 0033:0x7f13e335fd8e [ 236.402481][ T8927] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 236.402494][ T8927] RSP: 002b:00007f13e42bafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 236.402511][ T8927] RAX: ffffffffffffffda RBX: 00007f13e42bb6c0 RCX: 00007f13e335fd8e [ 236.402522][ T8927] RDX: 0000000000000001 RSI: 00007f13e42bb0a0 RDI: 0000000000000006 [ 236.402531][ T8927] RBP: 00007f13e42bb090 R08: 0000000000000000 R09: 0000000000000000 [ 236.402541][ T8927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.402549][ T8927] R13: 00007f13e3626038 R14: 00007f13e3625fa0 R15: 00007fffde3e6388 [ 236.402574][ T8927] [ 236.517704][ T994] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 236.517814][ T994] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 236.747498][ T994] usb 3-1: USB disconnect, device number 33 [ 236.782293][ T8934] netlink: 60 bytes leftover after parsing attributes in process `syz.3.995'. [ 236.784484][ T8934] netlink: 60 bytes leftover after parsing attributes in process `syz.3.995'. [ 236.821650][ T8934] netlink: 32 bytes leftover after parsing attributes in process `syz.3.995'. [ 237.002625][ T8942] netlink: 72 bytes leftover after parsing attributes in process `syz.3.998'. [ 237.284957][ T5654] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 237.285022][ T5654] Bluetooth: hci0: Injecting HCI hardware error event [ 237.287420][ T5642] Bluetooth: hci0: hardware error 0x00 [ 237.628531][ T994] usb 5-1: USB disconnect, device number 49 [ 237.733479][ T8950] FAULT_INJECTION: forcing a failure. [ 237.733479][ T8950] name failslab, interval 1, probability 0, space 0, times 0 [ 237.733516][ T8950] CPU: 0 UID: 0 PID: 8950 Comm: syz.4.1000 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.733547][ T8950] Tainted: [L]=SOFTLOCKUP [ 237.733555][ T8950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 237.733568][ T8950] Call Trace: [ 237.733577][ T8950] [ 237.733586][ T8950] dump_stack_lvl+0xe8/0x150 [ 237.733622][ T8950] should_fail_ex+0x3eb/0x540 [ 237.733653][ T8950] should_failslab+0xa8/0x100 [ 237.733680][ T8950] __kmalloc_cache_noprof+0x9e/0x600 [ 237.733702][ T8950] ? nfc_genl_se_io+0x222/0x6c0 [ 237.733719][ T8950] ? nfc_genl_se_io+0x222/0x6c0 [ 237.733742][ T8950] nfc_genl_se_io+0x222/0x6c0 [ 237.733764][ T8950] genl_family_rcv_msg_doit+0x233/0x340 [ 237.733794][ T8950] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 237.733828][ T8950] ? bpf_lsm_capable+0x9/0x20 [ 237.733853][ T8950] ? security_capable+0x7e/0x2c0 [ 237.733882][ T8950] genl_rcv_msg+0x614/0x7a0 [ 237.733911][ T8950] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.733932][ T8950] ? __pfx_nfc_genl_se_io+0x10/0x10 [ 237.733963][ T8950] netlink_rcv_skb+0x226/0x4a0 [ 237.733992][ T8950] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.734016][ T8950] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.734057][ T8950] ? down_read+0x2b9/0x320 [ 237.734087][ T8950] genl_rcv+0x28/0x40 [ 237.734111][ T8950] netlink_unicast+0x8ef/0xa80 [ 237.734152][ T8950] netlink_sendmsg+0x7f0/0xb20 [ 237.734181][ T8950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.734202][ T8950] ? aa_sock_msg_perm+0x144/0x210 [ 237.734232][ T8950] ? apparmor_socket_sendmsg+0x98/0x360 [ 237.734259][ T8950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.734279][ T8950] sock_sendmsg_nosec+0x14e/0x190 [ 237.734311][ T8950] ____sys_sendmsg+0x54e/0x850 [ 237.734337][ T8950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.734368][ T8950] ? import_iovec+0x73/0xa0 [ 237.734397][ T8950] ___sys_sendmsg+0x2a6/0x360 [ 237.734417][ T8950] ? __lock_acquire+0x747/0x2de0 [ 237.734442][ T8950] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.734495][ T8950] ? __fget_files+0x3a2/0x420 [ 237.734515][ T8950] ? __fget_files+0x2a/0x420 [ 237.734543][ T8950] __x64_sys_sendmsg+0x1b1/0x290 [ 237.734567][ T8950] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.734608][ T8950] do_syscall_64+0x166/0x520 [ 237.734631][ T8950] ? trace_irq_disable+0x3b/0x140 [ 237.734653][ T8950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.734673][ T8950] ? clear_bhb_loop+0x70/0xc0 [ 237.734696][ T8950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.734721][ T8950] RIP: 0033:0x7f0919b9f559 [ 237.734742][ T8950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.734760][ T8950] RSP: 002b:00007f091a9cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.734783][ T8950] RAX: ffffffffffffffda RBX: 00007f0919e25fa0 RCX: 00007f0919b9f559 [ 237.734798][ T8950] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 237.734808][ T8950] RBP: 00007f091a9cd090 R08: 0000000000000000 R09: 0000000000000000 [ 237.734819][ T8950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.734829][ T8950] R13: 00007f0919e26038 R14: 00007f0919e25fa0 R15: 00007ffcf17b9598 [ 237.734857][ T8950] [ 238.165788][ T8964] FAULT_INJECTION: forcing a failure. [ 238.165788][ T8964] name failslab, interval 1, probability 0, space 0, times 0 [ 238.165821][ T8964] CPU: 1 UID: 0 PID: 8964 Comm: syz.4.1003 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.165849][ T8964] Tainted: [L]=SOFTLOCKUP [ 238.165856][ T8964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 238.165868][ T8964] Call Trace: [ 238.165876][ T8964] [ 238.165884][ T8964] dump_stack_lvl+0xe8/0x150 [ 238.165919][ T8964] should_fail_ex+0x3eb/0x540 [ 238.165954][ T8964] should_failslab+0xa8/0x100 [ 238.165983][ T8964] __kmalloc_cache_noprof+0x9e/0x600 [ 238.166008][ T8964] ? nfnetlink_rcv+0x1021/0x28c0 [ 238.166037][ T8964] ? nfnetlink_rcv+0x1021/0x28c0 [ 238.166073][ T8964] nfnetlink_rcv+0x1021/0x28c0 [ 238.166142][ T8964] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 238.166218][ T8964] ? skb_clone+0x246/0x3a0 [ 238.166278][ T8964] ? netlink_deliver_tap+0x2e/0x1b0 [ 238.166299][ T8964] ? netlink_deliver_tap+0x2e/0x1b0 [ 238.166326][ T8964] netlink_unicast+0x8ef/0xa80 [ 238.166376][ T8964] netlink_sendmsg+0x7f0/0xb20 [ 238.166405][ T8964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.166431][ T8964] ? aa_sock_msg_perm+0x144/0x210 [ 238.166467][ T8964] ? apparmor_socket_sendmsg+0x98/0x360 [ 238.166497][ T8964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.166518][ T8964] sock_sendmsg_nosec+0x14e/0x190 [ 238.166554][ T8964] ____sys_sendmsg+0x54e/0x850 [ 238.166587][ T8964] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.166624][ T8964] ? import_iovec+0x73/0xa0 [ 238.166668][ T8964] ___sys_sendmsg+0x2a6/0x360 [ 238.166693][ T8964] ? __lock_acquire+0x747/0x2de0 [ 238.166723][ T8964] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.166790][ T8964] ? __fget_files+0x3a2/0x420 [ 238.166814][ T8964] ? __fget_files+0x2a/0x420 [ 238.166849][ T8964] __x64_sys_sendmsg+0x1b1/0x290 [ 238.166879][ T8964] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 238.166931][ T8964] do_syscall_64+0x166/0x520 [ 238.166960][ T8964] ? trace_irq_disable+0x3b/0x140 [ 238.166987][ T8964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.167009][ T8964] ? clear_bhb_loop+0x70/0xc0 [ 238.167037][ T8964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.167059][ T8964] RIP: 0033:0x7f0919b9f559 [ 238.167079][ T8964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.167098][ T8964] RSP: 002b:00007f091a9cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.167123][ T8964] RAX: ffffffffffffffda RBX: 00007f0919e25fa0 RCX: 00007f0919b9f559 [ 238.167139][ T8964] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000003 [ 238.167154][ T8964] RBP: 00007f091a9cd090 R08: 0000000000000000 R09: 0000000000000000 [ 238.167167][ T8964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.167181][ T8964] R13: 00007f0919e26038 R14: 00007f0919e25fa0 R15: 00007ffcf17b9598 [ 238.167217][ T8964] [ 238.482117][ T8966] FAULT_INJECTION: forcing a failure. [ 238.482117][ T8966] name failslab, interval 1, probability 0, space 0, times 0 [ 238.482150][ T8966] CPU: 1 UID: 0 PID: 8966 Comm: syz.2.1004 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.482179][ T8966] Tainted: [L]=SOFTLOCKUP [ 238.482187][ T8966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 238.482200][ T8966] Call Trace: [ 238.482208][ T8966] [ 238.482218][ T8966] dump_stack_lvl+0xe8/0x150 [ 238.482255][ T8966] should_fail_ex+0x3eb/0x540 [ 238.482292][ T8966] should_failslab+0xa8/0x100 [ 238.482324][ T8966] __kvmalloc_node_noprof+0x171/0x820 [ 238.482354][ T8966] ? dm_ctl_ioctl+0x49d/0xe10 [ 238.482385][ T8966] ? dm_ctl_ioctl+0x49d/0xe10 [ 238.482424][ T8966] dm_ctl_ioctl+0x49d/0xe10 [ 238.482455][ T8966] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 238.482493][ T8966] ? __pfx_table_load+0x10/0x10 [ 238.482526][ T8966] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 238.482598][ T8966] ? __fget_files+0x2a/0x420 [ 238.482628][ T8966] ? bpf_lsm_file_ioctl+0x9/0x20 [ 238.482656][ T8966] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 238.482688][ T8966] __se_sys_ioctl+0xfc/0x170 [ 238.482720][ T8966] do_syscall_64+0x166/0x520 [ 238.482749][ T8966] ? trace_irq_disable+0x3b/0x140 [ 238.482776][ T8966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.482804][ T8966] ? clear_bhb_loop+0x70/0xc0 [ 238.482850][ T8966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.482873][ T8966] RIP: 0033:0x7fc8f599f559 [ 238.482893][ T8966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.482912][ T8966] RSP: 002b:00007fc8f681c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.482937][ T8966] RAX: ffffffffffffffda RBX: 00007fc8f5c25fa0 RCX: 00007fc8f599f559 [ 238.482955][ T8966] RDX: 0000200000000340 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 238.482970][ T8966] RBP: 00007fc8f681c090 R08: 0000000000000000 R09: 0000000000000000 [ 238.482987][ T8966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.483001][ T8966] R13: 00007fc8f5c26038 R14: 00007fc8f5c25fa0 R15: 00007ffe5479cf78 [ 238.483037][ T8966] [ 238.708202][ T8968] fuse: fd is not a fuse device [ 238.743143][ T8973] netlink: 'syz.2.1007': attribute type 11 has an invalid length. [ 238.743380][ T8973] FAULT_INJECTION: forcing a failure. [ 238.743380][ T8973] name failslab, interval 1, probability 0, space 0, times 0 [ 238.743409][ T8973] CPU: 1 UID: 0 PID: 8973 Comm: syz.2.1007 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.743439][ T8973] Tainted: [L]=SOFTLOCKUP [ 238.743447][ T8973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 238.743460][ T8973] Call Trace: [ 238.743469][ T8973] [ 238.743478][ T8973] dump_stack_lvl+0xe8/0x150 [ 238.743515][ T8973] should_fail_ex+0x3eb/0x540 [ 238.743551][ T8973] ? __alloc_skb+0x1db/0x7a0 [ 238.743583][ T8973] should_failslab+0xa8/0x100 [ 238.743614][ T8973] ? __alloc_skb+0x1db/0x7a0 [ 238.743653][ T8973] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 238.743677][ T8973] ? __alloc_skb+0x18d/0x7a0 [ 238.743700][ T8973] ? preempt_schedule_thunk+0x16/0x40 [ 238.743725][ T8973] ? __alloc_skb+0x1db/0x7a0 [ 238.743756][ T8973] __alloc_skb+0x1db/0x7a0 [ 238.743786][ T8973] rtmsg_ifa+0xf8/0x1f0 [ 238.743815][ T8973] __inet_insert_ifa+0x9db/0xbc0 [ 238.743855][ T8973] ? __pfx___inet_insert_ifa+0x10/0x10 [ 238.743895][ T8973] inet_rtm_newaddr+0x1039/0x19f0 [ 238.743920][ T8973] ? __pfx_hook_capable+0x10/0x10 [ 238.743968][ T8973] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 238.744017][ T8973] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 238.744041][ T8973] rtnetlink_rcv_msg+0x802/0xc00 [ 238.744072][ T8973] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 238.744099][ T8973] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 238.744128][ T8973] ? __copy_skb_header+0xa3/0x4a0 [ 238.744159][ T8973] ? __asan_memcpy+0x40/0x70 [ 238.744191][ T8973] netlink_rcv_skb+0x226/0x4a0 [ 238.744228][ T8973] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 238.744257][ T8973] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 238.744307][ T8973] ? netlink_deliver_tap+0x2e/0x1b0 [ 238.744330][ T8973] ? netlink_deliver_tap+0x2e/0x1b0 [ 238.744358][ T8973] netlink_unicast+0x8ef/0xa80 [ 238.744411][ T8973] netlink_sendmsg+0x7f0/0xb20 [ 238.744441][ T8973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.744468][ T8973] ? aa_sock_msg_perm+0x144/0x210 [ 238.744506][ T8973] ? apparmor_socket_sendmsg+0x98/0x360 [ 238.744537][ T8973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.744559][ T8973] sock_sendmsg_nosec+0x14e/0x190 [ 238.744605][ T8973] ____sys_sendmsg+0x54e/0x850 [ 238.744640][ T8973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.744680][ T8973] ? import_iovec+0x73/0xa0 [ 238.744716][ T8973] ___sys_sendmsg+0x2a6/0x360 [ 238.744742][ T8973] ? __lock_acquire+0x747/0x2de0 [ 238.744773][ T8973] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.744854][ T8973] ? __fget_files+0x3a2/0x420 [ 238.744878][ T8973] ? __fget_files+0x2a/0x420 [ 238.744913][ T8973] __x64_sys_sendmsg+0x1b1/0x290 [ 238.744944][ T8973] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 238.745015][ T8973] do_syscall_64+0x166/0x520 [ 238.745044][ T8973] ? trace_irq_disable+0x3b/0x140 [ 238.745072][ T8973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.745096][ T8973] ? clear_bhb_loop+0x70/0xc0 [ 238.745125][ T8973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.745148][ T8973] RIP: 0033:0x7fc8f599f559 [ 238.745169][ T8973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.745188][ T8973] RSP: 002b:00007fc8f681c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.745212][ T8973] RAX: ffffffffffffffda RBX: 00007fc8f5c25fa0 RCX: 00007fc8f599f559 [ 238.745230][ T8973] RDX: 0000000000004800 RSI: 00002000000025c0 RDI: 0000000000000003 [ 238.745245][ T8973] RBP: 00007fc8f681c090 R08: 0000000000000000 R09: 0000000000000000 [ 238.745260][ T8973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.745274][ T8973] R13: 00007fc8f5c26038 R14: 00007fc8f5c25fa0 R15: 00007ffe5479cf78 [ 238.745323][ T8973] [ 239.153720][ T8979] FAULT_INJECTION: forcing a failure. [ 239.153720][ T8979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.153745][ T8979] CPU: 1 UID: 0 PID: 8979 Comm: syz.2.1010 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.153766][ T8979] Tainted: [L]=SOFTLOCKUP [ 239.153771][ T8979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 239.153781][ T8979] Call Trace: [ 239.153787][ T8979] [ 239.153793][ T8979] dump_stack_lvl+0xe8/0x150 [ 239.153820][ T8979] should_fail_ex+0x3eb/0x540 [ 239.153846][ T8979] _copy_to_user+0x31/0xb0 [ 239.153871][ T8979] simple_read_from_buffer+0xe1/0x170 [ 239.153893][ T8979] proc_fail_nth_read+0x1bb/0x230 [ 239.153919][ T8979] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.153944][ T8979] ? rw_verify_area+0x24a/0x4c0 [ 239.153977][ T8979] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.153998][ T8979] vfs_read+0x213/0xa80 [ 239.154018][ T8979] ? __pfx___mutex_lock+0x10/0x10 [ 239.154040][ T8979] ? __pfx_vfs_read+0x10/0x10 [ 239.154061][ T8979] ? __fget_files+0x2a/0x420 [ 239.154077][ T8979] ? __fget_files+0x3a2/0x420 [ 239.154092][ T8979] ? __fget_files+0x2a/0x420 [ 239.154111][ T8979] ? fdget+0x1ac/0x250 [ 239.154150][ T8979] ksys_read+0x150/0x270 [ 239.154171][ T8979] ? __pfx_ksys_read+0x10/0x10 [ 239.154197][ T8979] do_syscall_64+0x166/0x520 [ 239.154219][ T8979] ? trace_irq_disable+0x3b/0x140 [ 239.154238][ T8979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.154254][ T8979] ? clear_bhb_loop+0x70/0xc0 [ 239.154273][ T8979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.154288][ T8979] RIP: 0033:0x7fc8f595fd8e [ 239.154302][ T8979] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 239.154315][ T8979] RSP: 002b:00007fc8f681bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.154331][ T8979] RAX: ffffffffffffffda RBX: 00007fc8f681c6c0 RCX: 00007fc8f595fd8e [ 239.154341][ T8979] RDX: 000000000000000f RSI: 00007fc8f681c0a0 RDI: 0000000000000003 [ 239.154351][ T8979] RBP: 00007fc8f681c090 R08: 0000000000000000 R09: 0000000000000000 [ 239.154360][ T8979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.154369][ T8979] R13: 00007fc8f5c26038 R14: 00007fc8f5c25fa0 R15: 00007ffe5479cf78 [ 239.154393][ T8979] [ 239.368933][ T5642] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 239.394830][ T994] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 239.523574][ T8986] FAULT_INJECTION: forcing a failure. [ 239.523574][ T8986] name failslab, interval 1, probability 0, space 0, times 0 [ 239.523601][ T8986] CPU: 0 UID: 0 PID: 8986 Comm: syz.2.1013 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.523622][ T8986] Tainted: [L]=SOFTLOCKUP [ 239.523638][ T8986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 239.523648][ T8986] Call Trace: [ 239.523654][ T8986] [ 239.523660][ T8986] dump_stack_lvl+0xe8/0x150 [ 239.523687][ T8986] should_fail_ex+0x3eb/0x540 [ 239.523713][ T8986] should_failslab+0xa8/0x100 [ 239.523735][ T8986] __kmalloc_cache_noprof+0x9e/0x600 [ 239.523754][ T8986] ? ctnetlink_alloc_filter+0xb1/0xb90 [ 239.523778][ T8986] ? ctnetlink_alloc_filter+0xb1/0xb90 [ 239.523802][ T8986] ? __mutex_trylock_common+0x15f/0x270 [ 239.523826][ T8986] ctnetlink_alloc_filter+0xb1/0xb90 [ 239.523852][ T8986] ? __pfx_ctnetlink_alloc_filter+0x10/0x10 [ 239.523876][ T8986] ? trace_contention_end+0x3d/0x140 [ 239.523898][ T8986] ? __mutex_lock+0x305/0x15a0 [ 239.523924][ T8986] ctnetlink_del_conntrack+0x6a1/0x8d0 [ 239.523949][ T8986] ? __pfx_ctnetlink_del_conntrack+0x10/0x10 [ 239.523989][ T8986] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 239.524014][ T8986] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 239.524050][ T8986] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 239.524098][ T8986] ? hook_capable+0x1c3/0x5e0 [ 239.524128][ T8986] netlink_rcv_skb+0x226/0x4a0 [ 239.524158][ T8986] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 239.524194][ T8986] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 239.524225][ T8986] ? bpf_lsm_capable+0x9/0x20 [ 239.524245][ T8986] ? security_capable+0x7e/0x2c0 [ 239.524268][ T8986] nfnetlink_rcv+0x2b9/0x28c0 [ 239.524294][ T8986] ? __dev_queue_xmit+0x29b/0x3920 [ 239.524317][ T8986] ? __local_bh_enable_ip+0xd6/0x140 [ 239.524335][ T8986] ? lockdep_hardirqs_on+0x7b/0x110 [ 239.524354][ T8986] ? __dev_queue_xmit+0x29b/0x3920 [ 239.524372][ T8986] ? __local_bh_enable_ip+0xd6/0x140 [ 239.524389][ T8986] ? __dev_queue_xmit+0x29b/0x3920 [ 239.524407][ T8986] ? __dev_queue_xmit+0x1efb/0x3920 [ 239.524430][ T8986] ? __dev_queue_xmit+0x29b/0x3920 [ 239.524454][ T8986] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 239.524481][ T8986] ? __pfx___dev_queue_xmit+0x10/0x10 [ 239.524507][ T8986] ? __copy_skb_header+0xa3/0x4a0 [ 239.524526][ T8986] ? __asan_memcpy+0x40/0x70 [ 239.524540][ T8986] ? __skb_clone+0x5c/0x760 [ 239.524561][ T8986] ? __skb_clone+0x4a2/0x760 [ 239.524583][ T8986] ? skb_clone+0x246/0x3a0 [ 239.524603][ T8986] ? __netlink_deliver_tap+0x681/0x6e0 [ 239.524616][ T8986] ? netlink_deliver_tap+0x2e/0x1b0 [ 239.524639][ T8986] ? netlink_deliver_tap+0x2e/0x1b0 [ 239.524653][ T8986] ? netlink_deliver_tap+0x2e/0x1b0 [ 239.524670][ T8986] netlink_unicast+0x8ef/0xa80 [ 239.524725][ T8986] netlink_sendmsg+0x7f0/0xb20 [ 239.524753][ T8986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.524781][ T8986] ? aa_sock_msg_perm+0x144/0x210 [ 239.524807][ T8986] ? apparmor_socket_sendmsg+0x98/0x360 [ 239.524826][ T8986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.524839][ T8986] sock_sendmsg_nosec+0x14e/0x190 [ 239.524862][ T8986] ____sys_sendmsg+0x54e/0x850 [ 239.524883][ T8986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.524907][ T8986] ? import_iovec+0x73/0xa0 [ 239.524931][ T8986] ___sys_sendmsg+0x2a6/0x360 [ 239.524948][ T8986] ? __lock_acquire+0x747/0x2de0 [ 239.524967][ T8986] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.525009][ T8986] ? __fget_files+0x3a2/0x420 [ 239.525025][ T8986] ? __fget_files+0x2a/0x420 [ 239.525047][ T8986] __x64_sys_sendmsg+0x1b1/0x290 [ 239.525067][ T8986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 239.525099][ T8986] do_syscall_64+0x166/0x520 [ 239.525118][ T8986] ? trace_irq_disable+0x3b/0x140 [ 239.525158][ T8986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.525175][ T8986] ? clear_bhb_loop+0x70/0xc0 [ 239.525194][ T8986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.525210][ T8986] RIP: 0033:0x7fc8f599f559 [ 239.525224][ T8986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.525237][ T8986] RSP: 002b:00007fc8f681c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.525253][ T8986] RAX: ffffffffffffffda RBX: 00007fc8f5c25fa0 RCX: 00007fc8f599f559 [ 239.525265][ T8986] RDX: 0000000000004050 RSI: 0000200000000180 RDI: 0000000000000003 [ 239.525275][ T8986] RBP: 00007fc8f681c090 R08: 0000000000000000 R09: 0000000000000000 [ 239.525285][ T8986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.525294][ T8986] R13: 00007fc8f5c26038 R14: 00007fc8f5c25fa0 R15: 00007ffe5479cf78 [ 239.525331][ T8986] [ 239.585279][ T994] usb 5-1: Using ep0 maxpacket: 16 [ 239.658063][ T994] usb 5-1: New USB device found: idVendor=046e, idProduct=5577, bcdDevice=0.00 [ 239.684428][ T994] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.684466][ T994] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.684491][ T994] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.684520][ T994] usb 5-1: config 0 interface 0 has no altsetting 0 [ 239.684557][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.932407][ T8988] x_tables: unsorted entry at hook 1 [ 240.060557][ T994] usb 5-1: config 0 descriptor?? [ 240.100032][ T8988] fuse: Unknown parameter 'ÿÿ' [ 240.206563][ T8993] FAULT_INJECTION: forcing a failure. [ 240.206563][ T8993] name failslab, interval 1, probability 0, space 0, times 0 [ 240.206603][ T8993] CPU: 0 UID: 0 PID: 8993 Comm: syz.0.1016 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.206635][ T8993] Tainted: [L]=SOFTLOCKUP [ 240.206644][ T8993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 240.206658][ T8993] Call Trace: [ 240.206667][ T8993] [ 240.206678][ T8993] dump_stack_lvl+0xe8/0x150 [ 240.206718][ T8993] should_fail_ex+0x3eb/0x540 [ 240.206760][ T8993] should_failslab+0xa8/0x100 [ 240.206795][ T8993] __kmalloc_cache_noprof+0x9e/0x600 [ 240.206824][ T8993] ? __kmalloc_cache_noprof+0x148/0x600 [ 240.206850][ T8993] ? ioc_cpd_alloc+0x73/0x120 [ 240.206881][ T8993] ? ioc_cpd_alloc+0x73/0x120 [ 240.206933][ T8993] ioc_cpd_alloc+0x73/0x120 [ 240.206967][ T8993] blkcg_css_alloc+0x45a/0xa80 [ 240.207006][ T8993] cgroup_apply_control_enable+0x5bb/0xda0 [ 240.207057][ T8993] cgroup_mkdir+0x1220/0x14b0 [ 240.207099][ T8993] ? __pfx_cgroup_mkdir+0x10/0x10 [ 240.207131][ T8993] kernfs_iop_mkdir+0x213/0x360 [ 240.207161][ T8993] vfs_mkdir+0x40e/0x630 [ 240.207201][ T8993] filename_mkdirat+0x285/0x510 [ 240.207231][ T8993] ? __might_fault+0xaf/0x130 [ 240.207270][ T8993] ? __pfx_filename_mkdirat+0x10/0x10 [ 240.207308][ T8993] ? do_getname+0x151/0x250 [ 240.207333][ T8993] __se_sys_mkdirat+0x35/0x150 [ 240.207369][ T8993] do_syscall_64+0x166/0x520 [ 240.207400][ T8993] ? trace_irq_disable+0x3b/0x140 [ 240.207438][ T8993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.207462][ T8993] ? clear_bhb_loop+0x70/0xc0 [ 240.207491][ T8993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.207514][ T8993] RIP: 0033:0x7f13e339f559 [ 240.207537][ T8993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.207557][ T8993] RSP: 002b:00007f13e42bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 240.207582][ T8993] RAX: ffffffffffffffda RBX: 00007f13e3625fa0 RCX: 00007f13e339f559 [ 240.207599][ T8993] RDX: 00000000000001ff RSI: 0000200000000480 RDI: ffffffffffffff9c [ 240.207615][ T8993] RBP: 00007f13e3436b20 R08: 0000000000000000 R09: 0000000000000000 [ 240.207630][ T8993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.207643][ T8993] R13: 00007f13e3626038 R14: 00007f13e3625fa0 R15: 00007fffde3e6388 [ 240.207682][ T8993] [ 240.410859][ T8997] netlink: 'syz.3.1017': attribute type 29 has an invalid length. [ 240.421515][ T8996] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1016'. [ 240.428782][ T8996] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1016'. [ 240.546731][ T994] input: HID 046e:5577 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:046E:5577.000E/input/input22 [ 240.627655][ T994] topseed 0003:046E:5577.000E: input,hidraw0: USB HID v0.00 Joystick [HID 046e:5577] on usb-dummy_hcd.4-1/input0 [ 240.718266][ T9005] netlink: 'syz.3.1017': attribute type 29 has an invalid length. [ 240.720522][ T9005] netlink: 'syz.3.1017': attribute type 29 has an invalid length. [ 240.774912][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 240.924985][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 240.926967][ T10] usb 3-1: New USB device found: idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 240.930264][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.930289][ T10] usb 3-1: Product: syz [ 240.930304][ T10] usb 3-1: Manufacturer: syz [ 240.930319][ T10] usb 3-1: SerialNumber: syz [ 240.933086][ T10] usb 3-1: config 0 descriptor?? [ 241.150171][ T195] kernel read not supported for file /trace_pipe (pid: 195 comm: kworker/0:2) [ 241.166123][ T10] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 241.168564][ T10] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 241.174415][ T10] usb 3-1: USB disconnect, device number 34 [ 241.246750][ T9010] netlink: 'syz.0.1020': attribute type 11 has an invalid length. [ 241.398963][ T9015] netlink: 'syz.3.1022': attribute type 29 has an invalid length. [ 241.399735][ T9015] netlink: 'syz.3.1022': attribute type 29 has an invalid length. [ 241.400165][ T9015] netlink: 'syz.3.1022': attribute type 29 has an invalid length. [ 241.984849][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 242.086805][ T195] usb 5-1: USB disconnect, device number 50 [ 242.138888][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 242.138940][ T10] usb 3-1: New USB device found: idVendor=0c12, idProduct=f40a, bcdDevice=19.0d [ 242.138975][ T10] usb 3-1: too many configurations: 145, using maximum allowed: 8 [ 242.140928][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 242.140966][ T10] usb 3-1: can't read configurations, error -61 [ 242.264894][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 242.334033][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1035'. [ 242.350171][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1035'. [ 242.429135][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 242.429189][ T10] usb 3-1: New USB device found: idVendor=0c12, idProduct=f40a, bcdDevice=19.0d [ 242.429227][ T10] usb 3-1: too many configurations: 145, using maximum allowed: 8 [ 242.434424][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 242.434463][ T10] usb 3-1: can't read configurations, error -61 [ 242.473292][ T10] usb usb3-port1: attempt power cycle [ 242.502622][ T9054] IPVS: ip_vs_add_dest(): tunnel port is zero [ 242.575097][ T9057] Unsupported ieee802154 address type: 0 [ 242.824823][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 242.849282][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 242.849333][ T10] usb 3-1: New USB device found: idVendor=0c12, idProduct=f40a, bcdDevice=19.0d [ 242.849360][ T10] usb 3-1: too many configurations: 145, using maximum allowed: 8 [ 242.850863][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 242.850887][ T10] usb 3-1: can't read configurations, error -61 [ 242.974824][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 242.997343][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 242.997381][ T10] usb 3-1: New USB device found: idVendor=0c12, idProduct=f40a, bcdDevice=19.0d [ 242.997406][ T10] usb 3-1: too many configurations: 145, using maximum allowed: 8 [ 242.998848][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 242.998871][ T10] usb 3-1: can't read configurations, error -61 [ 242.999576][ T10] usb usb3-port1: unable to enumerate USB device [ 243.244914][ T9052] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 243.290083][ T9061] FAULT_INJECTION: forcing a failure. [ 243.290083][ T9061] name failslab, interval 1, probability 0, space 0, times 0 [ 243.290111][ T9061] CPU: 0 UID: 0 PID: 9061 Comm: syz.0.1041 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.290133][ T9061] Tainted: [L]=SOFTLOCKUP [ 243.290139][ T9061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 243.290148][ T9061] Call Trace: [ 243.290159][ T9061] [ 243.290165][ T9061] dump_stack_lvl+0xe8/0x150 [ 243.290193][ T9061] should_fail_ex+0x3eb/0x540 [ 243.290220][ T9061] should_failslab+0xa8/0x100 [ 243.290243][ T9061] __kmalloc_noprof+0xf9/0x710 [ 243.290261][ T9061] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 243.290277][ T9061] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 243.290298][ T9061] __memcg_list_lru_alloc+0x1d9/0x760 [ 243.290319][ T9061] ? xa_load+0x60/0x210 [ 243.290342][ T9061] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 243.290371][ T9061] __memcg_slab_post_alloc_hook+0x3b2/0xdb0 [ 243.290394][ T9061] ? __memcg_slab_post_alloc_hook+0x1f1/0xdb0 [ 243.290434][ T9061] kmem_cache_alloc_lru_noprof+0x34c/0x5f0 [ 243.290451][ T9061] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 243.290467][ T9061] ? __d_alloc+0x37/0x820 [ 243.290485][ T9061] ? __d_alloc+0x37/0x820 [ 243.290508][ T9061] __d_alloc+0x37/0x820 [ 243.290530][ T9061] d_make_root+0x41/0x80 [ 243.290550][ T9061] bpf_fill_super+0x2fd/0xce0 [ 243.290580][ T9061] ? __pfx_bpf_fill_super+0x10/0x10 [ 243.290603][ T9061] ? lock_acquire+0x115/0x350 [ 243.290627][ T9061] ? __pfx_bpf_fill_super+0x10/0x10 [ 243.290652][ T9061] get_tree_nodev+0xbb/0x150 [ 243.290673][ T9061] vfs_get_tree+0x92/0x2a0 [ 243.290695][ T9061] vfs_cmd_create+0xa2/0x200 [ 243.290721][ T9061] __se_sys_fsconfig+0x6b9/0x810 [ 243.290750][ T9061] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 243.290775][ T9061] ? rcu_is_watching+0x16/0xb0 [ 243.290802][ T9061] ? __x64_sys_fsconfig+0x20/0xc0 [ 243.290827][ T9061] do_syscall_64+0x166/0x520 [ 243.290848][ T9061] ? trace_irq_disable+0x3b/0x140 [ 243.290867][ T9061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.290883][ T9061] ? clear_bhb_loop+0x70/0xc0 [ 243.290902][ T9061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.290918][ T9061] RIP: 0033:0x7f13e339f559 [ 243.290933][ T9061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.290946][ T9061] RSP: 002b:00007f13e42bb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 243.290962][ T9061] RAX: ffffffffffffffda RBX: 00007f13e3625fa0 RCX: 00007f13e339f559 [ 243.290974][ T9061] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 243.290994][ T9061] RBP: 00007f13e3436b20 R08: 0000000000000000 R09: 0000000000000000 [ 243.291003][ T9061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.291011][ T9061] R13: 00007f13e3626038 R14: 00007f13e3625fa0 R15: 00007fffde3e6388 [ 243.291034][ T9061] [ 243.611738][ T9063] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1042'. [ 243.731080][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'. [ 243.732057][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'. [ 243.732080][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'. [ 243.834183][ T9074] FAULT_INJECTION: forcing a failure. [ 243.834183][ T9074] name failslab, interval 1, probability 0, space 0, times 0 [ 243.834230][ T9074] CPU: 1 UID: 0 PID: 9074 Comm: syz.0.1047 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.834262][ T9074] Tainted: [L]=SOFTLOCKUP [ 243.834271][ T9074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 243.834285][ T9074] Call Trace: [ 243.834294][ T9074] [ 243.834305][ T9074] dump_stack_lvl+0xe8/0x150 [ 243.834344][ T9074] should_fail_ex+0x3eb/0x540 [ 243.834384][ T9074] should_failslab+0xa8/0x100 [ 243.834418][ T9074] __kmalloc_cache_noprof+0x9e/0x600 [ 243.834445][ T9074] ? ieee80211_init_rate_ctrl_alg+0xf7/0x540 [ 243.834471][ T9074] ? ieee80211_init_rate_ctrl_alg+0xf7/0x540 [ 243.834507][ T9074] ieee80211_init_rate_ctrl_alg+0xf7/0x540 [ 243.834539][ T9074] ieee80211_register_hw+0x38db/0x4b30 [ 243.834574][ T9074] ? ieee80211_register_hw+0x1b71/0x4b30 [ 243.834609][ T9074] ? ieee80211_register_hw+0x1971/0x4b30 [ 243.834664][ T9074] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 243.834696][ T9074] ? __asan_memset+0x22/0x50 [ 243.834721][ T9074] ? __hrtimer_setup+0x1b7/0x260 [ 243.834757][ T9074] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 243.834795][ T9074] mac80211_hwsim_new_radio+0x32f1/0x5990 [ 243.834863][ T9074] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 243.834896][ T9074] ? trace_kmalloc+0x2a/0xf0 [ 243.834930][ T9074] hwsim_new_radio_nl+0xd8b/0xf90 [ 243.834978][ T9074] genl_family_rcv_msg_doit+0x233/0x340 [ 243.835016][ T9074] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 243.835061][ T9074] ? bpf_lsm_capable+0x9/0x20 [ 243.835091][ T9074] ? security_capable+0x7e/0x2c0 [ 243.835129][ T9074] genl_rcv_msg+0x614/0x7a0 [ 243.835165][ T9074] ? __pfx_genl_rcv_msg+0x10/0x10 [ 243.835193][ T9074] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 243.835236][ T9074] ? __asan_memcpy+0x40/0x70 [ 243.835269][ T9074] netlink_rcv_skb+0x226/0x4a0 [ 243.835309][ T9074] ? __pfx_genl_rcv_msg+0x10/0x10 [ 243.835340][ T9074] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 243.835408][ T9074] ? down_read+0x2b9/0x320 [ 243.835448][ T9074] genl_rcv+0x28/0x40 [ 243.835475][ T9074] netlink_unicast+0x8ef/0xa80 [ 243.835546][ T9074] netlink_sendmsg+0x7f0/0xb20 [ 243.835580][ T9074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.835609][ T9074] ? aa_sock_msg_perm+0x144/0x210 [ 243.835647][ T9074] ? apparmor_socket_sendmsg+0x98/0x360 [ 243.835679][ T9074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.835701][ T9074] sock_sendmsg_nosec+0x14e/0x190 [ 243.835739][ T9074] ____sys_sendmsg+0x54e/0x850 [ 243.835774][ T9074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.835813][ T9074] ? import_iovec+0x73/0xa0 [ 243.835851][ T9074] ___sys_sendmsg+0x2a6/0x360 [ 243.835879][ T9074] ? __lock_acquire+0x747/0x2de0 [ 243.835912][ T9074] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.835946][ T9074] ? futex_wait+0x2a2/0x390 [ 243.836006][ T9074] ? __fget_files+0x3a2/0x420 [ 243.836032][ T9074] ? __fget_files+0x2a/0x420 [ 243.836071][ T9074] __x64_sys_sendmsg+0x1b1/0x290 [ 243.836103][ T9074] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 243.836157][ T9074] do_syscall_64+0x166/0x520 [ 243.836187][ T9074] ? trace_irq_disable+0x3b/0x140 [ 243.836237][ T9074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.836262][ T9074] ? clear_bhb_loop+0x70/0xc0 [ 243.836292][ T9074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.836315][ T9074] RIP: 0033:0x7f13e339f559 [ 243.836337][ T9074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.836357][ T9074] RSP: 002b:00007f13e42bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.836382][ T9074] RAX: ffffffffffffffda RBX: 00007f13e3625fa0 RCX: 00007f13e339f559 [ 243.836400][ T9074] RDX: 0000000004080040 RSI: 0000200000000500 RDI: 0000000000000008 [ 243.836415][ T9074] RBP: 00007f13e3436b20 R08: 0000000000000000 R09: 0000000000000000 [ 243.836430][ T9074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.836444][ T9074] R13: 00007f13e3626038 R14: 00007f13e3625fa0 R15: 00007fffde3e6388 [ 243.836483][ T9074] [ 243.855488][ T9074] ieee80211 phy16: Failed to select rate control algorithm [ 244.847162][ T9110] netlink: 'syz.4.1060': attribute type 11 has an invalid length. [ 244.917599][ T9112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.923507][ T9112] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 244.990569][ T9114] FAULT_INJECTION: forcing a failure. [ 244.990569][ T9114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.990595][ T9114] CPU: 0 UID: 0 PID: 9114 Comm: syz.2.1063 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.990616][ T9114] Tainted: [L]=SOFTLOCKUP [ 244.990622][ T9114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 244.990631][ T9114] Call Trace: [ 244.990637][ T9114] [ 244.990644][ T9114] dump_stack_lvl+0xe8/0x150 [ 244.990674][ T9114] should_fail_ex+0x3eb/0x540 [ 244.990701][ T9114] _copy_from_user+0x2d/0xb0 [ 244.990727][ T9114] comedi_unlocked_ioctl+0xaec/0x1af0 [ 244.990758][ T9114] ? kasan_quarantine_put+0xbb/0x1f0 [ 244.990778][ T9114] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 244.990801][ T9114] ? tomoyo_path_number_perm+0x219/0x5f0 [ 244.990822][ T9114] ? tomoyo_path_number_perm+0x219/0x5f0 [ 244.990845][ T9114] ? do_vfs_ioctl+0x116f/0x1530 [ 244.990870][ T9114] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 244.990920][ T9114] ? __fget_files+0x2a/0x420 [ 244.990942][ T9114] ? __fget_files+0x2a/0x420 [ 244.990964][ T9114] ? bpf_lsm_file_ioctl+0x9/0x20 [ 244.990985][ T9114] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 244.991003][ T9114] __se_sys_ioctl+0xfc/0x170 [ 244.991027][ T9114] do_syscall_64+0x166/0x520 [ 244.991049][ T9114] ? trace_irq_disable+0x3b/0x140 [ 244.991068][ T9114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.991085][ T9114] ? clear_bhb_loop+0x70/0xc0 [ 244.991104][ T9114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.991119][ T9114] RIP: 0033:0x7fc8f599f559 [ 244.991133][ T9114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.991146][ T9114] RSP: 002b:00007fc8f681c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.991191][ T9114] RAX: ffffffffffffffda RBX: 00007fc8f5c25fa0 RCX: 00007fc8f599f559 [ 244.991208][ T9114] RDX: 0000200000000440 RSI: 000000008028640c RDI: 0000000000000004 [ 244.991222][ T9114] RBP: 00007fc8f681c090 R08: 0000000000000000 R09: 0000000000000000 [ 244.991236][ T9114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.991250][ T9114] R13: 00007fc8f5c26038 R14: 00007fc8f5c25fa0 R15: 00007ffe5479cf78 [ 244.991285][ T9114] [ 245.273371][ T9116] XFS (nbd2): SB validate failed with error -5. [ 245.308234][ T9116] XFS (nbd2): io_pages changed from 0 to 1024, not restoring. [ 245.308260][ T9116] XFS (nbd2): ra_pages changed from 0 to 64, not restoring. [ 245.349695][ T9125] XFS (nbd2): SB validate failed with error -5. [ 245.370406][ T9125] XFS (nbd2): io_pages changed from 0 to 1024, not restoring. [ 245.370434][ T9125] XFS (nbd2): ra_pages changed from 0 to 64, not restoring. [ 245.395073][ T9135] fuse: Unknown parameter '~d' [ 245.413766][ T9136] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 245.430879][ T9139] CIFS: Attempting to mount //127.0.0.1/share [ 245.499040][ T9142] overlay: Unknown parameter 'obj_role' [ 246.211454][ T9155] FAULT_INJECTION: forcing a failure. [ 246.211454][ T9155] name failslab, interval 1, probability 0, space 0, times 0 [ 246.211480][ T9155] CPU: 1 UID: 0 PID: 9155 Comm: syz.4.1072 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.211501][ T9155] Tainted: [L]=SOFTLOCKUP [ 246.211507][ T9155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 246.211516][ T9155] Call Trace: [ 246.211522][ T9155] [ 246.211528][ T9155] dump_stack_lvl+0xe8/0x150 [ 246.211555][ T9155] should_fail_ex+0x3eb/0x540 [ 246.211584][ T9155] should_failslab+0xa8/0x100 [ 246.211608][ T9155] __kmalloc_cache_noprof+0x9e/0x600 [ 246.211626][ T9155] ? super_dev_alloc+0x4e/0x100 [ 246.211646][ T9155] ? super_dev_alloc+0x4e/0x100 [ 246.211666][ T9155] ? __list_lru_init+0x542/0x680 [ 246.211685][ T9155] super_dev_alloc+0x4e/0x100 [ 246.211706][ T9155] sget_fc+0xfa8/0x1a60 [ 246.211730][ T9155] ? __pfx_set_anon_super_fc+0x10/0x10 [ 246.211751][ T9155] ? __pfx_sget_fc+0x10/0x10 [ 246.211766][ T9155] ? lock_acquire+0x115/0x350 [ 246.211790][ T9155] ? __pfx_bpf_fill_super+0x10/0x10 [ 246.211816][ T9155] get_tree_nodev+0x2a/0x150 [ 246.211837][ T9155] vfs_get_tree+0x92/0x2a0 [ 246.211859][ T9155] vfs_cmd_create+0xa2/0x200 [ 246.211886][ T9155] __se_sys_fsconfig+0x6b9/0x810 [ 246.211914][ T9155] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 246.211936][ T9155] ? ksys_write+0x242/0x270 [ 246.211957][ T9155] ? __pfx_ksys_write+0x10/0x10 [ 246.211981][ T9155] ? __x64_sys_fsconfig+0x20/0xc0 [ 246.212007][ T9155] do_syscall_64+0x166/0x520 [ 246.212028][ T9155] ? trace_irq_disable+0x3b/0x140 [ 246.212048][ T9155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.212063][ T9155] ? clear_bhb_loop+0x70/0xc0 [ 246.212088][ T9155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.212104][ T9155] RIP: 0033:0x7f0919b9f559 [ 246.212117][ T9155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.212130][ T9155] RSP: 002b:00007f091a9cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 246.212146][ T9155] RAX: ffffffffffffffda RBX: 00007f0919e25fa0 RCX: 00007f0919b9f559 [ 246.212157][ T9155] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 246.212166][ T9155] RBP: 00007f091a9cd090 R08: 0000000000000000 R09: 0000000000000000 [ 246.212175][ T9155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.212184][ T9155] R13: 00007f0919e26038 R14: 00007f0919e25fa0 R15: 00007ffcf17b9598 [ 246.212208][ T9155] [ 246.243830][ T9139] CIFS: VFS: Error connecting to socket. Aborting operation. [ 246.697198][ T9169] FAULT_INJECTION: forcing a failure. [ 246.697198][ T9169] name failslab, interval 1, probability 0, space 0, times 0 [ 246.697240][ T9169] CPU: 0 UID: 0 PID: 9169 Comm: syz.2.1077 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.697262][ T9169] Tainted: [L]=SOFTLOCKUP [ 246.697267][ T9169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 246.697277][ T9169] Call Trace: [ 246.697283][ T9169] [ 246.697289][ T9169] dump_stack_lvl+0xe8/0x150 [ 246.697317][ T9169] should_fail_ex+0x3eb/0x540 [ 246.697344][ T9169] should_failslab+0xa8/0x100 [ 246.697368][ T9169] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 246.697386][ T9169] ? __kasan_kmalloc+0x93/0xb0 [ 246.697406][ T9169] ? __trace_eprobe_create+0x691/0xe70 [ 246.697429][ T9169] ? __trace_eprobe_create+0x691/0xe70 [ 246.697455][ T9169] ? traceprobe_parse_event_name+0x53a/0x620 [ 246.697482][ T9169] kstrdup+0x42/0x100 [ 246.697498][ T9169] __trace_eprobe_create+0x691/0xe70 [ 246.697522][ T9169] ? rcu_is_watching+0x16/0xb0 [ 246.697549][ T9169] ? __pfx___trace_eprobe_create+0x10/0x10 [ 246.697572][ T9169] ? __kmalloc_noprof+0x1a6/0x710 [ 246.697588][ T9169] ? argv_split+0x18d/0x400 [ 246.697608][ T9169] ? argv_split+0x18d/0x400 [ 246.697635][ T9169] ? argv_split+0x378/0x400 [ 246.697662][ T9169] trace_probe_create+0xce/0x130 [ 246.697681][ T9169] ? __pfx___trace_eprobe_create+0x10/0x10 [ 246.697704][ T9169] ? __pfx_trace_probe_create+0x10/0x10 [ 246.697727][ T9169] ? __might_fault+0xaf/0x130 [ 246.697751][ T9169] create_dyn_event+0xb3/0x160 [ 246.697777][ T9169] trace_parse_run_command+0x1f3/0x380 [ 246.697799][ T9169] ? __pfx_create_dyn_event+0x10/0x10 [ 246.697823][ T9169] ? __pfx_dyn_event_write+0x10/0x10 [ 246.697847][ T9169] vfs_write+0x296/0xba0 [ 246.697873][ T9169] ? __pfx_vfs_write+0x10/0x10 [ 246.697894][ T9169] ? __fget_files+0x2a/0x420 [ 246.697910][ T9169] ? __fget_files+0x3a2/0x420 [ 246.697927][ T9169] ? __fget_files+0x2a/0x420 [ 246.697947][ T9169] ? fdget+0x1ac/0x250 [ 246.697969][ T9169] ksys_write+0x150/0x270 [ 246.697993][ T9169] ? __pfx_ksys_write+0x10/0x10 [ 246.698021][ T9169] do_syscall_64+0x166/0x520 [ 246.698042][ T9169] ? trace_irq_disable+0x3b/0x140 [ 246.698061][ T9169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.698077][ T9169] ? clear_bhb_loop+0x70/0xc0 [ 246.698095][ T9169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.698111][ T9169] RIP: 0033:0x7fc8f599f559 [ 246.698125][ T9169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.698137][ T9169] RSP: 002b:00007fc8f681c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 246.698153][ T9169] RAX: ffffffffffffffda RBX: 00007fc8f5c25fa0 RCX: 00007fc8f599f559 [ 246.698196][ T9169] RDX: 0000000000000022 RSI: 0000200000000340 RDI: 0000000000000003 [ 246.698210][ T9169] RBP: 00007fc8f681c090 R08: 0000000000000000 R09: 0000000000000000 [ 246.698228][ T9169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.698238][ T9169] R13: 00007fc8f5c26038 R14: 00007fc8f5c25fa0 R15: 00007ffe5479cf78 [ 246.698262][ T9169] [ 247.083669][ T9175] FAULT_INJECTION: forcing a failure. [ 247.083669][ T9175] name failslab, interval 1, probability 0, space 0, times 0 [ 247.083702][ T9175] CPU: 1 UID: 0 PID: 9175 Comm: syz.4.1079 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.083735][ T9175] Tainted: [L]=SOFTLOCKUP [ 247.083744][ T9175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 247.083757][ T9175] Call Trace: [ 247.083766][ T9175] [ 247.083776][ T9175] dump_stack_lvl+0xe8/0x150 [ 247.083816][ T9175] should_fail_ex+0x3eb/0x540 [ 247.083857][ T9175] should_failslab+0xa8/0x100 [ 247.083890][ T9175] ? __kernfs_new_node+0xe6/0x980 [ 247.083928][ T9175] kmem_cache_alloc_noprof+0x9c/0x600 [ 247.083954][ T9175] ? kstrdup+0x81/0x100 [ 247.083976][ T9175] ? __kernfs_new_node+0xe6/0x980 [ 247.084020][ T9175] __kernfs_new_node+0xe6/0x980 [ 247.084068][ T9175] ? __pfx___kernfs_new_node+0x10/0x10 [ 247.084105][ T9175] ? kernfs_root+0x1c/0x230 [ 247.084146][ T9175] ? kernfs_root+0x1c/0x230 [ 247.084192][ T9175] ? kernfs_root+0x1c/0x230 [ 247.084222][ T9175] ? kernfs_root+0x1c/0x230 [ 247.084261][ T9175] kernfs_create_dir_ns+0xf7/0x220 [ 247.084291][ T9175] sysfs_create_dir_ns+0x12f/0x2a0 [ 247.084328][ T9175] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 247.084365][ T9175] ? do_raw_spin_unlock+0xf5/0x200 [ 247.084404][ T9175] kobject_add_internal+0x622/0xcd0 [ 247.084437][ T9175] kobject_add+0x163/0x240 [ 247.084461][ T9175] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 247.084528][ T9175] ? __pfx_kobject_add+0x10/0x10 [ 247.084553][ T9175] ? kobject_init+0x7f/0x1e0 [ 247.084580][ T9175] ? get_device_parent+0x366/0x3a0 [ 247.084615][ T9175] device_add+0x3fa/0xb80 [ 247.084646][ T9175] wiphy_register+0x2178/0x3290 [ 247.084700][ T9175] ? __pfx_wiphy_register+0x10/0x10 [ 247.084742][ T9175] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 247.084788][ T9175] ? ieee80211_init_rate_ctrl_alg+0x501/0x540 [ 247.084821][ T9175] ieee80211_register_hw+0x3d72/0x4b30 [ 247.084868][ T9175] ? ieee80211_register_hw+0x1971/0x4b30 [ 247.084926][ T9175] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 247.084960][ T9175] ? __asan_memset+0x22/0x50 [ 247.084985][ T9175] ? __hrtimer_setup+0x1b7/0x260 [ 247.085020][ T9175] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 247.085057][ T9175] mac80211_hwsim_new_radio+0x32f1/0x5990 [ 247.085128][ T9175] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 247.085162][ T9175] ? trace_kmalloc+0x2a/0xf0 [ 247.085196][ T9175] hwsim_new_radio_nl+0xd8b/0xf90 [ 247.085245][ T9175] genl_family_rcv_msg_doit+0x233/0x340 [ 247.085285][ T9175] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 247.085330][ T9175] ? bpf_lsm_capable+0x9/0x20 [ 247.085361][ T9175] ? security_capable+0x7e/0x2c0 [ 247.085398][ T9175] genl_rcv_msg+0x614/0x7a0 [ 247.085437][ T9175] ? __pfx_genl_rcv_msg+0x10/0x10 [ 247.085465][ T9175] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 247.085508][ T9175] ? __asan_memcpy+0x40/0x70 [ 247.085543][ T9175] netlink_rcv_skb+0x226/0x4a0 [ 247.085581][ T9175] ? __pfx_genl_rcv_msg+0x10/0x10 [ 247.085613][ T9175] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 247.085668][ T9175] ? down_read+0x2b9/0x320 [ 247.085707][ T9175] genl_rcv+0x28/0x40 [ 247.085734][ T9175] netlink_unicast+0x8ef/0xa80 [ 247.085790][ T9175] netlink_sendmsg+0x7f0/0xb20 [ 247.085821][ T9175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.085850][ T9175] ? aa_sock_msg_perm+0x144/0x210 [ 247.085889][ T9175] ? apparmor_socket_sendmsg+0x98/0x360 [ 247.085922][ T9175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.085944][ T9175] sock_sendmsg_nosec+0x14e/0x190 [ 247.085985][ T9175] ____sys_sendmsg+0x54e/0x850 [ 247.086021][ T9175] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.086061][ T9175] ? import_iovec+0x73/0xa0 [ 247.086101][ T9175] ___sys_sendmsg+0x2a6/0x360 [ 247.086128][ T9175] ? __lock_acquire+0x747/0x2de0 [ 247.086160][ T9175] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.086195][ T9175] ? futex_wait+0x2a2/0x390 [ 247.086257][ T9175] ? __fget_files+0x3a2/0x420 [ 247.086283][ T9175] ? __fget_files+0x2a/0x420 [ 247.086322][ T9175] __x64_sys_sendmsg+0x1b1/0x290 [ 247.086355][ T9175] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 247.086411][ T9175] do_syscall_64+0x166/0x520 [ 247.086443][ T9175] ? trace_irq_disable+0x3b/0x140 [ 247.086482][ T9175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.086507][ T9175] ? clear_bhb_loop+0x70/0xc0 [ 247.086537][ T9175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.086561][ T9175] RIP: 0033:0x7f0919b9f559 [ 247.086584][ T9175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.086604][ T9175] RSP: 002b:00007f091a9cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.086630][ T9175] RAX: ffffffffffffffda RBX: 00007f0919e25fa0 RCX: 00007f0919b9f559 [ 247.086648][ T9175] RDX: 0000000004080040 RSI: 0000200000000500 RDI: 0000000000000006 [ 247.086663][ T9175] RBP: 00007f0919c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 247.086678][ T9175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.086692][ T9175] R13: 00007f0919e26038 R14: 00007f0919e25fa0 R15: 00007ffcf17b9598 [ 247.086732][ T9175] [ 247.225159][ T9175] kobject: kobject_add_internal failed for phy18 (error: -12 parent: ieee80211) [ 247.904857][ T195] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 248.055406][ T195] usb 3-1: New USB device found: idVendor=04d8, idProduct=0082, bcdDevice=1.00 [ 248.056489][ T195] usb 3-1: config 1 has an invalid interface number: 255 but max is 1 [ 248.056507][ T195] usb 3-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 248.056521][ T195] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 248.056536][ T195] usb 3-1: config 1 has no interface number 0 [ 248.056555][ T195] usb 3-1: too many endpoints for config 1 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 248.056583][ T195] usb 3-1: config 1 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 248.056603][ T195] usb 3-1: config 1 interface 255 has no altsetting 0 [ 248.056625][ T195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.264440][ T195] usb 3-1: string descriptor 0 read error: -71 [ 248.283331][ T195] usb 3-1: USB disconnect, device number 39 [ 255.847005][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.847064][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.296150][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.296209][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.728459][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.728559][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 405.605086][ ** replaying previous printk message ** [ 405.605086][ T36] INFO: task jbd2/sda1-8:4968 blocked in I/O wait for more than 143 seconds. [ 405.605125][ T36] Tainted: G L syzkaller #0 [ 405.605137][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 405.605146][ T36] task:jbd2/sda1-8 state:D stack:25088 pid:4968 tgid:4968 ppid:2 task_flags:0x240040 flags:0x00080000 [ 405.605215][ T36] Call Trace: [ 405.605223][ T36] [ 405.605235][ T36] __schedule+0x17dd/0x5830 [ 405.605278][ T36] ? percpu_ref_put_many+0x18e/0x240 [ 405.605302][ T36] ? blk_mq_dispatch_list+0xd2c/0xe10 [ 405.605355][ T36] ? __pfx___schedule+0x10/0x10 [ 405.605394][ T36] ? schedule+0x90/0x2b0 [ 405.605422][ T36] schedule+0x164/0x2b0 [ 405.605451][ T36] io_schedule+0x7f/0xd0 [ 405.605481][ T36] bit_wait_io+0x13/0x110 [ 405.605513][ T36] __wait_on_bit+0xac/0x300 [ 405.605542][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 405.605576][ T36] out_of_line_wait_on_bit+0x13b/0x190 [ 405.605607][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 405.605637][ T36] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 405.605671][ T36] ? __pfx_wake_bit_function+0x10/0x10 [ 405.605705][ T36] ? __wait_on_buffer+0xe/0x80 [ 405.605744][ T36] jbd2_journal_commit_transaction+0x2f6e/0x5c80 [ 405.605775][ T36] ? trace_hrtimer_start+0x82/0x200 [ 405.605836][ T36] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 405.605878][ T36] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 405.605950][ T36] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 405.605981][ T36] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 405.606009][ T36] ? __timer_delete_sync+0x4a7/0x520 [ 405.606041][ T36] kjournald2+0x3bc/0x740 [ 405.606082][ T36] ? __pfx_kjournald2+0x10/0x10 [ 405.606105][ T36] ? __pfx_autoremove_wake_function+0x10/0x10 [ 405.606138][ T36] ? __kthread_parkme+0x71/0x1f0 [ 405.606189][ T36] ? __kthread_parkme+0x199/0x1f0 [ 405.606228][ T36] kthread+0x38b/0x480 [ 405.606252][ T36] ? __pfx_kjournald2+0x10/0x10 [ 405.606271][ T36] ? __pfx_kthread+0x10/0x10 [ 405.606298][ T36] ret_from_fork+0x514/0xb70 [ 405.606324][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 405.606345][ T36] ? __switch_to+0xc78/0x1410 [ 405.608153][ T36] ? __pfx_kthread+0x10/0x10 [ 405.608187][ T36] ret_from_fork_asm+0x1a/0x30 [ 405.608268][ T36] [ 405.608290][ T36] INFO: task syz-executor:5627 blocked in I/O wait for more than 143 seconds. [ 405.608311][ T36] Tainted: G L syzkaller #0 [ 405.608323][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 405.608334][ T36] task:syz-executor state:D stack:21832 pid:5627 tgid:5627 ppid:5626 task_flags:0x440100 flags:0x00080000 [ 405.608395][ T36] Call Trace: [ 405.608403][ T36] [ 405.608417][ T36] __schedule+0x17dd/0x5830 [ 405.608463][ T36] ? lock_acquire+0x115/0x350 [ 405.608499][ T36] ? __pfx___schedule+0x10/0x10 [ 405.608538][ T36] ? schedule+0x90/0x2b0 [ 405.608570][ T36] schedule+0x164/0x2b0 [ 405.608600][ T36] io_schedule+0x7f/0xd0 [ 405.608629][ T36] bit_wait_io+0x13/0x110 [ 405.608661][ T36] __wait_on_bit+0xac/0x300 [ 405.608690][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 405.608734][ T36] out_of_line_wait_on_bit+0x13b/0x190 [ 405.608782][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 405.608825][ T36] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 405.608856][ T36] ? __pfx_wake_bit_function+0x10/0x10 [ 405.608902][ T36] do_get_write_access+0x658/0x10c0 [ 405.608946][ T36] jbd2_journal_get_write_access+0x1d7/0x230 [ 405.608976][ T36] __ext4_journal_get_write_access+0xec/0x620 [ 405.609015][ T36] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 405.609045][ T36] ? trace_kmem_cache_alloc+0x29/0xe0 [ 405.609065][ T36] ? jbd2__journal_start+0x145/0x5d0 [ 405.609098][ T36] ext4_reserve_inode_write+0x294/0x360 [ 405.609138][ T36] __ext4_mark_inode_dirty+0x141/0x7e0 [ 405.609173][ T36] ext4_dirty_inode+0xd0/0x110 [ 405.609205][ T36] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 405.609235][ T36] __mark_inode_dirty+0x3a8/0x13b0 [ 405.609273][ T36] file_update_time_flags+0x399/0x440 [ 405.609307][ T36] ext4_page_mkwrite+0x21f/0x1470 [ 405.609339][ T36] ? __lock_acquire+0x747/0x2de0 [ 405.609376][ T36] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 405.609406][ T36] ? __lock_acquire+0x747/0x2de0 [ 405.609439][ T36] do_page_mkwrite+0x147/0x310 [ 405.609465][ T36] do_wp_page+0x1a85/0x4b80 [ 405.609513][ T36] ? __pfx_do_wp_page+0x10/0x10 [ 405.609557][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 405.609593][ T36] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 405.609637][ T36] handle_mm_fault+0x19c9/0x2f80 [ 405.610372][ T36] ? handle_mm_fault+0xee/0x2f80 [ 405.610417][ T36] ? __pfx_handle_mm_fault+0x10/0x10 [ 405.610446][ T36] ? lock_vma_under_rcu+0x45a/0x500 [ 405.610523][ T36] do_user_addr_fault+0xb35/0x1480 [ 405.610562][ T36] ? trace_page_fault_user+0x84/0x1e0 [ 405.610589][ T36] exc_page_fault+0x6a/0xc0 [ 405.610622][ T36] asm_exc_page_fault+0x26/0x30 [ 405.610657][ T36] RIP: 0033:0x7f38b4d6e496 [ 405.610679][ T36] RSP: 002b:00007ffd6c8fac08 EFLAGS: 00010202 [ 405.610700][ T36] RAX: 00007f38b1600000 RBX: 00005555672b6d40 RCX: fffffffffffffbf0 [ 405.610718][ T36] RDX: 00000000000000fa RSI: 000055556731db20 RDI: 00007f38b1600000 [ 405.610734][ T36] RBP: 00007ffd6c8fac20 R08: 00007f38b4ff9e20 R09: 0000000000000000 [ 405.610751][ T36] R10: 0000000000000000 R11: 0000000000000202 R12: 00005555672abeb0 [ 405.610766][ T36] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 405.610801][ T36] [ 405.610861][ T36] INFO: task syz.3.1081:9178 blocked in I/O wait for more than 143 seconds. [ 405.610914][ T36] Tainted: G L syzkaller #0 [ 405.610927][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 405.610938][ T36] task:syz.3.1081 state:D stack:26696 pid:9178 tgid:9178 ppid:5638 task_flags:0x440040 flags:0x00080002 [ 405.611045][ T36] Call Trace: [ 405.611054][ T36] [ 405.611068][ T36] __schedule+0x17dd/0x5830 [ 405.611112][ T36] ? __lock_acquire+0x747/0x2de0 [ 405.611152][ T36] ? __pfx___schedule+0x10/0x10 [ 405.611192][ T36] ? schedule+0x90/0x2b0 [ 405.611224][ T36] schedule+0x164/0x2b0 [ 405.611254][ T36] io_schedule+0x7f/0xd0 [ 405.611285][ T36] bit_wait_io+0x13/0x110 [ 405.611318][ T36] __wait_on_bit+0xac/0x300 [ 405.611348][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 405.611381][ T36] out_of_line_wait_on_bit+0x13b/0x190 [ 405.611414][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 405.611444][ T36] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 405.611479][ T36] ? __pfx_wake_bit_function+0x10/0x10 [ 405.611522][ T36] do_get_write_access+0x658/0x10c0 [ 405.611569][ T36] jbd2_journal_get_write_access+0x1d7/0x230 [ 405.611603][ T36] __ext4_journal_get_write_access+0xec/0x620 [ 405.611644][ T36] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 405.611700][ T36] ext4_reserve_inode_write+0x294/0x360 [ 405.611744][ T36] __ext4_mark_inode_dirty+0x141/0x7e0 [ 405.611782][ T36] ext4_dirty_inode+0xd0/0x110 [ 405.611816][ T36] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 405.611848][ T36] __mark_inode_dirty+0x3a8/0x13b0 [ 405.611879][ T36] ? mnt_get_write_access+0x216/0x280 [ 405.611919][ T36] ? ext4_file_mmap_prepare+0x277/0x450 [ 405.611947][ T36] touch_atime+0x568/0x670 [ 405.611975][ T36] ? ext4_file_mmap_prepare+0x277/0x450 [ 405.612007][ T36] ext4_file_mmap_prepare+0x277/0x450 [ 405.612041][ T36] mmap_region+0xef9/0x2840 [ 405.612092][ T36] ? __lock_acquire+0x747/0x2de0 [ 405.612119][ T36] ? __pfx_mmap_region+0x10/0x10 [ 405.612153][ T36] ? __lock_acquire+0x747/0x2de0 [ 405.612202][ T36] ? rcu_is_watching+0x16/0xb0 [ 405.612249][ T36] ? trace_hrtimer_start+0x82/0x200 [ 405.612325][ T36] ? irqentry_exit+0x2a0/0x9b0 [ 405.612347][ T36] ? lockdep_hardirqs_on+0x7b/0x110 [ 405.612369][ T36] ? irqentry_exit+0x2a0/0x9b0 [ 405.612389][ T36] ? trace_irq_disable+0x3b/0x140 [ 405.612425][ T36] ? shmem_mapping+0xd/0x50 [ 405.612439][ T36] ? memfd_check_seals_mmap+0xc5/0x220 [ 405.612458][ T36] do_mmap+0xe0a/0x1300 [ 405.612487][ T36] ? __pfx_do_mmap+0x10/0x10 [ 405.612516][ T36] ? vm_mmap_pgoff+0x1ed/0x520 [ 405.612533][ T36] ? down_write_killable+0x179/0x230 [ 405.612557][ T36] ? lock_acquire+0x115/0x350 [ 405.612575][ T36] ? __pfx_down_write_killable+0x10/0x10 [ 405.612600][ T36] ? apparmor_mmap_file+0x2e7/0x390 [ 405.612623][ T36] vm_mmap_pgoff+0x27a/0x520 [ 405.612646][ T36] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 405.612665][ T36] ? __fget_files+0x2a/0x420 [ 405.612686][ T36] ? __fget_files+0x3a2/0x420 [ 405.612703][ T36] ? __fget_files+0x2a/0x420 [ 405.612724][ T36] ksys_mmap_pgoff+0x4dc/0x760 [ 405.612752][ T36] do_syscall_64+0x166/0x520 [ 405.612774][ T36] ? trace_irq_disable+0x3b/0x140 [ 405.612793][ T36] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.612809][ T36] ? clear_bhb_loop+0x70/0xc0 [ 405.612830][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.612846][ T36] RIP: 0033:0x7f5f8139f2c2 [ 405.612860][ T36] RSP: 002b:00007ffef984a128 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 405.612876][ T36] RAX: ffffffffffffffda RBX: 0000001b2d064000 RCX: 00007f5f8139f2c2 [ 405.612888][ T36] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b2d064000 [ 405.612905][ T36] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 405.612934][ T36] R10: 0000000000100001 R11: 0000000000000206 R12: 00000000000001bd [ 405.612945][ T36] R13: 00000000000927c0 R14: 000000000003c2e1 R15: 00007ffef984a400 [ 405.612970][ T36] [ 405.612987][ T36] [ 405.612987][ T36] Showing all locks held in the system: [ 405.613002][ T36] locks held by khungtaskd/36: 1, last CPU#0: [ 405.613015][ T36] #0: ffffffff9015a460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 405.613082][ T36] locks held by getty/5394: 2, on CPU#0: [ 405.613094][ T36] #0: ffff8880351e30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 405.613141][ T36] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 405.613183][ T36] locks held by syz-executor/5627: 3, on CPU#0: [ 405.613195][ T36] #0: ffff888022bebe48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 405.613240][ T36] #1: ffff888035276558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 405.613288][ T36] #2: ffff888035274950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 405.613338][ T36] locks held by syz.3.1081/9178: 3, on CPU#0: [ 405.613349][ T36] #0: ffff888037380f80 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 405.613401][ T36] #1: ffff888035276460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 405.613447][ T36] #2: ffff888035274950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 405.613484][ T36] [ 405.613489][ T36] ============================================= [ 405.613489][ T36] [ 405.613502][ T36] NMI backtrace for cpu 0 [ 405.613519][ T36] CPU: 0 UID: 0 PID: 36 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 405.613545][ T36] Tainted: [L]=SOFTLOCKUP [ 405.613552][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 405.613565][ T36] Call Trace: [ 405.613573][ T36] [ 405.613582][ T36] dump_stack_lvl+0xe8/0x150 [ 405.613629][ T36] nmi_cpu_backtrace+0x274/0x2d0 [ 405.613649][ T36] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 405.613682][ T36] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 405.613705][ T36] sys_info+0x135/0x170 [ 405.613720][ T36] watchdog+0x1073/0x10f0 [ 405.613747][ T36] ? watchdog+0x209/0x10f0 [ 405.613771][ T36] kthread+0x38b/0x480 [ 405.613788][ T36] ? __pfx_watchdog+0x10/0x10 [ 405.613806][ T36] ? __pfx_kthread+0x10/0x10 [ 405.613837][ T36] ret_from_fork+0x514/0xb70 [ 405.613855][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 405.613870][ T36] ? __switch_to+0xc78/0x1410 [ 405.613900][ T36] ? __pfx_kthread+0x10/0x10 [ 405.613918][ T36] ret_from_fork_asm+0x1a/0x30 [ 405.613954][ T36] [ 405.613960][ T36] Sending NMI from CPU 0 to CPUs 1: [ 405.614010][ C1] NMI backtrace for cpu 1 [ 405.614027][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.614053][ C1] Tainted: [L]=SOFTLOCKUP [ 405.614060][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 405.614072][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 405.614100][ C1] Code: 6b 93 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 ab 10 00 fb f4 3c 17 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 405.614118][ C1] RSP: 0018:ffffc900001c7e40 EFLAGS: 00000246 [ 405.614134][ C1] RAX: 00000000002316c3 RBX: ffffffff819cd180 RCX: 8000000000000001 [ 405.614149][ C1] RDX: 0000000000000001 RSI: ffffffff8e7e97dc RDI: ffffffff8c8ffd80 [ 405.614164][ C1] RBP: ffffc900001c7f10 R08: ffff8880b8333d9b R09: 1ffff110170667b3 [ 405.614179][ C1] R10: dffffc0000000000 R11: ffffed10170667b4 R12: 0000000000000000 [ 405.614192][ C1] R13: 1ffff11003eda3e8 R14: 1ffff92000038fd0 R15: dffffc0000000000 [ 405.614208][ C1] FS: 0000000000000000(0000) GS:ffff888123476000(0000) knlGS:0000000000000000 [ 405.614224][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.614237][ C1] CR2: 0000555f694bb168 CR3: 000000000ff48000 CR4: 00000000003526f0 [ 405.614255][ C1] Call Trace: [ 405.614263][ C1] [ 405.614270][ C1] default_idle+0x9/0x20 [ 405.614297][ C1] default_idle_call+0x72/0xb0 [ 405.614326][ C1] do_idle+0x2e0/0x540 [ 405.614347][ C1] ? __pfx_do_idle+0x10/0x10 [ 405.614370][ C1] cpu_startup_entry+0x43/0x60 [ 405.614390][ C1] start_secondary+0x101/0x110 [ 405.614425][ C1] common_startup_64+0x13e/0x157 [ 405.614458][ C1] [ 405.615031][ T36] Kernel panic - not syncing: hung_task: blocked tasks [ 406.951079][ T36] CPU: 0 UID: 0 PID: 36 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 406.961850][ T36] Tainted: [L]=SOFTLOCKUP [ 406.966173][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 406.976249][ T36] Call Trace: [ 406.979529][ T36] [ 406.982461][ T36] vpanic+0x26f/0x710 [ 406.986476][ T36] panic+0xc5/0xd0 [ 406.990219][ T36] ? __pfx_panic+0x10/0x10 [ 406.994659][ T36] ? wq_watchdog_touch+0xf9/0x160 [ 406.999711][ T36] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 407.005904][ T36] watchdog+0x10e7/0x10f0 [ 407.010321][ T36] ? watchdog+0x209/0x10f0 [ 407.014767][ T36] kthread+0x38b/0x480 [ 407.018849][ T36] ? __pfx_watchdog+0x10/0x10 [ 407.023547][ T36] ? __pfx_kthread+0x10/0x10 [ 407.028140][ T36] ret_from_fork+0x514/0xb70 [ 407.032739][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 407.037855][ T36] ? __switch_to+0xc78/0x1410 [ 407.042544][ T36] ? __pfx_kthread+0x10/0x10 [ 407.047149][ T36] ret_from_fork_asm+0x1a/0x30 [ 407.051974][ T36] [ 407.055204][ T36] Kernel Offset: disabled [ 407.059567][ T36] Rebooting in 86400 seconds..