last executing test programs: 2m38.665164188s ago: executing program 1 (id=522): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/core/rps_default_mask\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m38.574843205s ago: executing program 3 (id=523): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f00000005c0)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x3c, r3, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}}, 0x0) (fail_nth: 1) 2m37.946363172s ago: executing program 3 (id=525): get_mempolicy(0x0, 0x0, 0x100, &(0x7f00001a4000/0x2000)=nil, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$key(0xf, 0x3, 0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) r3 = fsopen(&(0x7f00000003c0)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000500)='gid', &(0x7f00000005c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) setsockopt(r2, 0x84, 0x81, &(0x7f0000000580)="1a00000002000000", 0x8) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f00000004c0)={0xd600000000000000, 0x200000, 0x0, 0xd}) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f0000000700)={0x8000000000000000, 0xffff1000, 0x8, 0x4, 0x9c}) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r7 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f0000000440)={'nat\x00', 0x0, 0x600, 0x4, [0x2, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x600, 0x0, 0x0}, &(0x7f0000000540)=0x108) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r8 = socket(0x10, 0x80002, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188e6b64f8acb31fbe467bff8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x2, 0xc3f, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x18}}}, &(0x7f0000000300)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000002c0)={0x7, &(0x7f0000000280)=[{}, {}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r9, 0x2}) 2m37.943680661s ago: executing program 1 (id=526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setgroups(0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000001) bind$inet6(r1, &(0x7f0000000580)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000400)={0x0, 0x1, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca0330ace0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b38905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, 0x0) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000ff1608001540000000000800048004000280140005"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000ef89ae1ab9bff07c9f159ef51f8da64448dc11325e665b4b30f74ecf0004967b6fcdc66eacea5f957997d51b9d13364ead2514125b2206ba4ba4a83039b4fdf3092c52", @ANYRES16=r7, @ANYBLOB="01002cad7000000000000100000028000180060001000a0000001400040000000000000000000000ffffac1414260800060003000000"], 0x3c}}, 0x0) 2m37.814224319s ago: executing program 1 (id=527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c815}, 0x40080d5) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="a5", 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000fba000010324d770b40102fd"], 0x14}, 0x1, 0x0, 0x0, 0x4040814}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000009c0)={0x0, &(0x7f0000000440)=[@nested_set_state_pages={0x140, 0x28, {0x2, 0x1e, @unmapped=0xdddd0000}}, @nested_amd_clgi={0x17f, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control64=0x200d, 0x3, 0x1, 0x2}}, @set_irq_handler={0xc8, 0x20, {0xeb, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x38, 0x3, 0xfffffffffffffffc}}, @nested_amd_stgi={0x17e, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro32=0x440e, 0x0, 0x1, 0x80}}, @cpuid={0x64, 0x18, {0x2, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0x2, 0x97d3}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xfa, 0x0, 0x94, 0x1}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x1b, 0x3, 0x3}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xab, 0x7, 0x4, 0x3}}, @wr_crn={0x67, 0x20, {0x0, 0x4}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_create_vm={0x12d, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x93, 0x260, 0xf, 0x4}}, @nested_vmlaunch={0x12f, 0x18}, @nested_load_code={0x12e, 0x73, {0x2, "65420f01c2c74424000b000000c7442402143a8b3dc7442406000000000f011c24440f20c03502000000440f22c066b893008ec866b851000f00d86767652e66460f38814100f3acc481696bed0f21850f20c035100000000f22c0"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control64=0x201f, 0x3, 0x9, 0xfffffffffffffffc}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x98, 0x3, 0x6, 0x1}}, @code={0xa, 0x79, {"c423d55e742e4e00440f0f85ec0000000c48b80e110000000000000f23d00f21f835200000060f23f866ba4200ed0f01345d280000000f20d835080000000f22d8b99f0800000f3266baf80cb8667ff98fef66bafc0cb075ee64430f1c4035f2400f11b10c000000"}}, @nested_load_code={0x12e, 0x71, {0x3, "b9800000c00f3235008000000f30b8010000000f01d9450f005d65400fc75b4eb98d040000b800000000ba000001000f30b9800000c00f3235004000000f3066baa10066ed6442a3b941ffffffffffff42dbd426450fc75a0c"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x461, 0xfffffffffffffffa, 0x10001, 0x3}}, @nested_amd_invlpga={0x17d, 0x20, {0x26000, 0x4e5f}}, @nested_set_state_pages={0x140, 0x28, {0x1, 0x32, @arbitrary=0x5}}], 0x54d}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000a00)={[0x7, 0x8, 0x4, 0x7a9f, 0x2, 0x8000000000000001, 0x1ff, 0x3, 0x800, 0x7, 0x4, 0xfffffffffffffff9, 0x4, 0x4, 0x40, 0x7fffffff000], 0x60000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000200)=[{0x24, 0xfc, 0x0, 0xfffff028}, {0x6, 0xfe}]}, 0x10) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@x86={0x77, 0x5, 0x7f, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x88, 0x1, 0x1, 0x0, 0x8, 0x1, 0x8, 0x0, 0x7, 0xba, '\x00', 0x3, 0x2}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m37.724239611s ago: executing program 1 (id=528): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x100) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x100) mkdir(&(0x7f0000000540)='./file0\x00', 0x4) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) sched_setattr(0x0, &(0x7f00000005c0)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000006c0)='./bus\x00') (async) chdir(&(0x7f00000006c0)='./bus\x00') r1 = open(&(0x7f0000000700)='./file1\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000740)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0x80000001, 0x20ff, 0x8, 0xe, 0x8, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x7}}, {0x0, 0x3}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000800), 0x7f03) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_submit(0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) (async) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x6f) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x10000, 0x0) write(r5, &(0x7f0000000380)="60000000410009010200000000000000010100002a0000002c000100100004000000000000000000000000000600060008000000100007000101010102020202000040001c000200180003001400100008000200010101010500040040000000", 0x60) syz_clone3(&(0x7f0000000180)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000180)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f0000000200)={0x0, &(0x7f0000000040)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x20, {0x0, "488b042500304041"}}, @nested_amd_invlpga={0x17d, 0x20, {0xc000, 0x597e}}], 0x70}) (async) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000200)={0x0, &(0x7f0000000040)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x20, {0x0, "488b042500304041"}}, @nested_amd_invlpga={0x17d, 0x20, {0xc000, 0x597e}}], 0x70}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_open_dev$evdev(&(0x7f00000002c0), 0xfffffffffffffffc, 0x822b01) (async) r8 = syz_open_dev$evdev(&(0x7f00000002c0), 0xfffffffffffffffc, 0x822b01) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000400), 0x4) (async) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000400), 0x4) ioctl$EVIOCSKEYCODE_V2(r8, 0x40284504, &(0x7f0000000300)={0x0, 0xf, 0x0, 0x3, "f91a66ffffffff000000000000000000001000"}) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000440), &(0x7f0000000480)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000004c0)={0x10002, 0x1, 0x26000, 0x100000, &(0x7f0000c68000/0x100000)=nil}) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000340)=0x4000) (async) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000340)=0x4000) 2m37.562488845s ago: executing program 3 (id=529): socket$inet6(0xa, 0x1, 0x100) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r1, 0x400, 0x1) open(&(0x7f0000000140)='./file1\x00', 0x0, 0xb1) close(0x3) 2m37.407003955s ago: executing program 1 (id=530): setuid(0xee01) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_generic(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="b013000011009d"], 0x13b0}, 0x1, 0x0, 0x0, 0x40010}, 0x20044010) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0xe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x8001, 0x0, 0x30314752, 0x0, 0x0, 0x0, 0x0, 0x2}}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000280)=@ethtool_cmd={0x0, 0x80000000, 0x3, 0x9, 0xf, 0x3, 0x5, 0xfc, 0x0, 0xff, 0x0, 0xfffffffc, 0x6, 0xff, 0x0, 0x2}}) connect$pppl2tp(r2, &(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 0x2}}, 0x2e) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000480)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000580)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000005c0)={0x60, 0x2, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000f18000/0x3000)=nil, 0x0, 0x0, 0x0, 0xc2fb, 0x0, 0x5, 0x68, 0x76}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x0, 0x0, 0x7, 0x0, 0xbc, 0x40002}) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8410, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x0, 0x21) ioctl$EXT4_IOC_GETSTATE(r8, 0x40046629, &(0x7f0000000200)) sendmsg$nl_xfrm(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000ac0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000bc0), 0xffffffffffffffff) connect$inet6(r3, &(0x7f0000000c00)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x34, r9, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0xf582f2b530579bd4) 2m36.673679209s ago: executing program 3 (id=531): mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1/file0\x00', 0x0) open$dir(&(0x7f0000000000)='./file1\x00', 0x180, 0x80) mount$bind(&(0x7f0000000800)='.\x00', &(0x7f0000000840)='./file1/file0\x00', 0x0, 0x1085408, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0) mount$overlay(0x0, &(0x7f0000000880)='./bus\x00', &(0x7f00000008c0), 0x40, &(0x7f0000000900)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000940)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000280)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000380)=[@acquire]}) mount(0x0, &(0x7f00000006c0)='.\x00', &(0x7f0000000700)='tmpfs\x00', 0xa145cf, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000b80)='.\x00', 0x8100, &(0x7f0000000bc0)={0x0, 0x8, 0x40000}, 0x20) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@decrefs={0x40046307, 0x1}]}) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xc040ff0b, &(0x7f0000000440)) openat$dm_dev(0xffffffffffffff9c, &(0x7f00000004c0)='./dm1\x00', 0x0, 0x0) 2m36.45924477s ago: executing program 1 (id=533): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) r2 = fsopen(&(0x7f0000001c80)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001cc0)='source', &(0x7f0000001d00)='c:::\x00', 0x0) pipe2$watch_queue(&(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000001d80)='id_resolver\x00', &(0x7f0000001dc0)={'syz', 0x3}, &(0x7f0000001e00)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r3, 0x0) pipe2$watch_queue(&(0x7f0000001e40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x100000000000a3) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f00000001c0)=0x8) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xfdffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {0x0, 0xf0}, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYRES8=0x0], 0x19c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x60042, 0x1) close(r7) socket$rxrpc(0x21, 0x2, 0x2) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001c40)='veth1_to_hsr\x00', 0x10) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000001b80)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000001bc0)=ANY=[@ANYRESOCT=0x0], 0x1c) setsockopt$inet_mreqn(r8, 0x0, 0x24, &(0x7f0000000200)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) r9 = fsopen(&(0x7f0000001a80)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), 0x14c98, &(0x7f0000001b40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB='=\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r9, @ANYBLOB=',\x00']) r10 = socket(0x21, 0x5, 0x20000) sendto(r10, &(0x7f0000000300)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r10, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4) 2m36.188625494s ago: executing program 32 (id=533): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) r2 = fsopen(&(0x7f0000001c80)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001cc0)='source', &(0x7f0000001d00)='c:::\x00', 0x0) pipe2$watch_queue(&(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000001d80)='id_resolver\x00', &(0x7f0000001dc0)={'syz', 0x3}, &(0x7f0000001e00)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r3, 0x0) pipe2$watch_queue(&(0x7f0000001e40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x100000000000a3) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f00000001c0)=0x8) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xfdffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {0x0, 0xf0}, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYRES8=0x0], 0x19c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x60042, 0x1) close(r7) socket$rxrpc(0x21, 0x2, 0x2) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001c40)='veth1_to_hsr\x00', 0x10) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000001b80)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000001bc0)=ANY=[@ANYRESOCT=0x0], 0x1c) setsockopt$inet_mreqn(r8, 0x0, 0x24, &(0x7f0000000200)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) r9 = fsopen(&(0x7f0000001a80)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), 0x14c98, &(0x7f0000001b40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB='=\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r9, @ANYBLOB=',\x00']) r10 = socket(0x21, 0x5, 0x20000) sendto(r10, &(0x7f0000000300)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r10, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4) 2m34.694817708s ago: executing program 3 (id=538): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)='2\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', 0xd) 2m33.855953296s ago: executing program 3 (id=540): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x7, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x409, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4c, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000500)=0x3, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (fail_nth: 1) 2m33.55094829s ago: executing program 33 (id=540): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x7, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x409, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4c, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000500)=0x3, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (fail_nth: 1) 2m33.098636358s ago: executing program 0 (id=543): r0 = syz_usb_connect(0x5, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007058203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="00000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r1 = fanotify_init(0x10, 0x1000) r2 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x641, 0x8001018, r2, 0x0) fanotify_mark(r1, 0x221, 0x103b, r2, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x0, 0x8}, 0x20) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 2m29.744267464s ago: executing program 0 (id=545): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000280)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) write$nci(r0, &(0x7f0000000680)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f0000000800)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001ac0)={0x24, r3, 0x1, 0x70bd28, 0x25dfdb7d, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c004}, 0x4000000) write$nci(r0, &(0x7f00000009c0)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) 2m26.492022869s ago: executing program 0 (id=548): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000000c0)={{0x76e09c72, 0x80000001}, 0x40}, 0x10) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002605000908abf7cb9de9dddac0fef49725ef17f374e8cfdf70023a3ee413da370b4a59a94edd8761e306121a432b2d0a929e0600fe90098403b1e24849"], 0x0}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101b01) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000180)=0x4) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_connect={0x5}) syz_usb_control_io$uac2(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="1200050000004b71c7c300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m24.430548954s ago: executing program 0 (id=553): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000003100090027bd700000000000040000000800180002ac0f"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) 2m24.28965107s ago: executing program 0 (id=554): prlimit64(0x0, 0x1, &(0x7f0000000040)={0x6, 0x83}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r0, 0x100000000000011, 0x300, 0x2f93) 2m24.185730988s ago: executing program 0 (id=555): io_setup(0x4fe, &(0x7f00000009c0)=0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0xc1943) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) (async) ioctl$NBD_DO_IT(r1, 0xab03) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8000, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044004}, 0x8050) io_destroy(r0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000040)={0x40000000000000c1}) (async) io_setup(0x5, &(0x7f0000000140)) io_destroy(r0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='1', 0x1) (async) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20002000}, 0x44000) 2m8.65703161s ago: executing program 34 (id=555): io_setup(0x4fe, &(0x7f00000009c0)=0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0xc1943) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) (async) ioctl$NBD_DO_IT(r1, 0xab03) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8000, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044004}, 0x8050) io_destroy(r0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000040)={0x40000000000000c1}) (async) io_setup(0x5, &(0x7f0000000140)) io_destroy(r0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='1', 0x1) (async) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20002000}, 0x44000) 13.009571154s ago: executing program 2 (id=1188): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12.932214575s ago: executing program 2 (id=1189): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x243, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xbe, 0x43, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x0, 0x5}}}}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000540)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'sit0\x00', 0x0}) sendto$packet(r0, &(0x7f00000006c0)="05031c00d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000700)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 11.638238078s ago: executing program 2 (id=1197): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000002079000318000000001801090200000000000004b083d5cd09040002120300010009210700400122180009058103200000140f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00221800"], 0x0}, 0x0) 8.453118983s ago: executing program 2 (id=1223): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x243, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xbe, 0x43, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x0, 0x5}}}}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000540)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'sit0\x00', 0x0}) sendto$packet(r0, &(0x7f00000006c0)="05031c00d3fc140000004788031c0910", 0x10, 0x4, &(0x7f0000000700)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 7.132559807s ago: executing program 2 (id=1227): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000c40)=0x1, 0x4) bind$inet(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000a80)={0x1, &(0x7f0000000ac0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7.081782032s ago: executing program 2 (id=1228): keyctl$read(0x2, 0x0, &(0x7f0000000200)=""/4090, 0xffffff2d) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x2a020480) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000004440)='./proc\x00', &(0x7f0000004480)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000044c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000004500)='27', 0x2) unshare(0x28000600) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000042c0)={0x3, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff}, {0x7, 0x0, 0x1, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}, {0xd, 0x0, 0x1, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000004340)={0x6, 0x0, [{0x6a0}, {0x6a2}, {0x6a4}, {0x6a5}, {0x6a6}, {0x6a7}]}) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000004540)={'mangle\x00', 0x5d, "27867e08bd86651ab3c5f0ac907c3507353ac74ab8686834bee5c74772536a070f923ce8849e44dc467d5b30060a7ef866ae7648575948e204b30c0ad6e643a83ac1e55497ba1f24df136a29a6df4676430c1665a0855502cd4fa498bd"}, &(0x7f0000004600)=0x81) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000043c0)={0x6, 0x0, [{0x6a0}, {0x6a2}, {0x6a4}, {0x6a5}, {0x6a6}, {0x6a7}]}) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001200)=""/4070, 0xfe6}, {&(0x7f0000002200)=""/4076, 0xfec}, {&(0x7f0000003200)=""/4135, 0x1027}, {&(0x7f0000004240)=""/108, 0x6c}], 0x4}, 0x40000122) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r6, 0x29, 0x49, 0x0, &(0x7f0000004640)) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f00000000c0)=0x8) 4.383609699s ago: executing program 6 (id=1240): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) listen(0xffffffffffffffff, 0x10040) r1 = fsopen(&(0x7f00000001c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3902, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) sendfile(r2, r2, 0x0, 0x2000fb) 4.235190927s ago: executing program 6 (id=1242): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvfrom(r1, &(0x7f0000000300)=""/179, 0xb3, 0x1, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x12, 0x0, 0x0) (fail_nth: 1) landlock_restrict_self(r0, 0xe) 3.658534922s ago: executing program 4 (id=1245): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000008880), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000088c0)=0xd) r1 = open(&(0x7f0000008900)='./bus\x00', 0x143142, 0x80) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201002) 3.438893875s ago: executing program 5 (id=1246): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000200)={0x9, @pix={0xffffffff, 0x3, 0x3132564e, 0x5, 0x3, 0x0, 0xe, 0x4, 0x1, 0x8, 0x0, 0x6}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000568000/0x2000)=nil, 0x2000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 3.397263358s ago: executing program 4 (id=1247): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x243, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xbe, 0x43, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x0, 0x5}}}}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000540)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'sit0\x00', 0x0}) sendto$packet(r0, &(0x7f00000006c0)="05031c00d3fc140000004788031c09102c", 0x11, 0x4, &(0x7f0000000700)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 3.303406394s ago: executing program 6 (id=1248): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000840)=0x1, 0x4) connect$inet(r1, &(0x7f0000000880)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 3.302237389s ago: executing program 6 (id=1249): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x38, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000580)=ANY=[@ANYRESDEC=r0, @ANYBLOB="8fcf"], 0x0) 2.838654265s ago: executing program 5 (id=1250): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) listen(0xffffffffffffffff, 0x10040) r1 = fsopen(&(0x7f00000001c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3902, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) sendfile(r2, r2, 0x0, 0x2000fb) 2.686916794s ago: executing program 5 (id=1251): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) listen(0xffffffffffffffff, 0x10040) r2 = fsopen(&(0x7f00000001c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x8, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3902, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) sendfile(r3, r3, 0x0, 0x2000fb) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(r5, 0x89e0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$mtd(r5, &(0x7f00000000c0)="32ab8d3c9e240bd3f1a305c15be17a7fb91b5716fd3f0684b71ec4d6ea22c959244147abd0fce02ad55f77e94da6763ccd5a3adedf11d49f5b731f22c41c1baf3affa3b208dcc97db0391b32764b9c10fc3876e0a1f79f83f1f7b81d316d92680300db115d00916513dcd569", 0x6c) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x80) 2.291413024s ago: executing program 5 (id=1252): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/core/rps_default_mask\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.202684619s ago: executing program 4 (id=1253): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) 1.633646775s ago: executing program 4 (id=1254): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000040)="04000000320000000000000038010000") ioctl(r0, 0xc138fd01, &(0x7f0000000080)="0400000032000000000000006c01") write$sndseq(r0, &(0x7f0000000100)=[{0xff, 0x4, 0x2, 0x4, @time={0x7f, 0x7fffffff}, {0x0, 0x7f}, {0x7}, @note={0x6, 0xd, 0x8, 0x10, 0x4010}}, {0x6a, 0x8, 0x4, 0x4, @time={0x7fffffff, 0x1}, {0x7, 0x3}, {0xf7, 0x5}, @quote={{0xbe, 0x6}, 0x43, &(0x7f00000000c0)={0x5, 0x7, 0x0, 0xff, @time={0x2, 0xccf}, {0x0, 0x1}, {0x9, 0x3}, @time=@tick=0x18}}}], 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) 970.335522ms ago: executing program 4 (id=1255): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000000b1411012cbd7000fddbdf25080001"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000001080)='2', 0x1}], 0x1}}], 0x1, 0x8000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) shutdown(r1, 0x1) 806.797646ms ago: executing program 5 (id=1256): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) listen(0xffffffffffffffff, 0x10040) r2 = fsopen(&(0x7f00000001c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x8, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3902, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) sendfile(r3, r3, 0x0, 0x2000fb) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(r5, 0x89e0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$mtd(r5, &(0x7f00000000c0)="32ab8d3c9e240bd3f1a305c15be17a7fb91b5716fd3f0684b71ec4d6ea22c959244147abd0fce02ad55f77e94da6763ccd5a3adedf11d49f5b731f22c41c1baf3affa3b208dcc97db0391b32764b9c10fc3876e0a1f79f83f1f7b81d316d92680300db115d00916513dcd569", 0x6c) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x80) 599.771943ms ago: executing program 4 (id=1257): r0 = syz_open_dev$midi(&(0x7f0000000180), 0xfffffffffffffffc, 0xaa9c2) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_connect(0x0, 0x40, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 249.537545ms ago: executing program 5 (id=1258): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000200)={0x9, @pix={0xffffffff, 0x3, 0x3132564e, 0x5, 0x3, 0x0, 0xe, 0x4, 0x1, 0x8, 0x0, 0x6}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000568000/0x2000)=nil, 0x2000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 248.805991ms ago: executing program 6 (id=1259): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) listen(0xffffffffffffffff, 0x10040) r1 = fsopen(&(0x7f00000001c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3902, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) sendfile(r2, r2, 0x0, 0x2000fb) 0s ago: executing program 6 (id=1260): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) listen(0xffffffffffffffff, 0x10040) r2 = fsopen(&(0x7f00000001c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x8, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3902, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) sendfile(r3, r3, 0x0, 0x2000fb) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(r5, 0x89e0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$mtd(r5, &(0x7f00000000c0)="32ab8d3c9e240bd3f1a305c15be17a7fb91b5716fd3f0684b71ec4d6ea22c959244147abd0fce02ad55f77e94da6763ccd5a3adedf11d49f5b731f22c41c1baf3affa3b208dcc97db0391b32764b9c10fc3876e0a1f79f83f1f7b81d316d92680300db115d00916513dcd569", 0x6c) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x80) kernel console output (not intermixed with test programs): 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.022188][ T8935] RSP: 002b:00007f7ca15d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 272.022213][ T8935] RAX: ffffffffffffffda RBX: 00007f7ca0a25fa0 RCX: 00007f7ca079f559 [ 272.022231][ T8935] RDX: 0000000000000012 RSI: 0000200000001680 RDI: 0000000000000006 [ 272.022247][ T8935] RBP: 00007f7ca15d1090 R08: 0000000000000000 R09: 0000000000000000 [ 272.022262][ T8935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.022276][ T8935] R13: 00007f7ca0a26038 R14: 00007f7ca0a25fa0 R15: 00007ffc3f6ff8f8 [ 272.022314][ T8935] [ 272.782673][ T5678] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 272.803427][ T5611] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 272.935794][ T5678] usb 5-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 272.938304][ T5678] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.938355][ T5678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.976901][ T5678] usb 5-1: config 0 descriptor?? [ 272.989173][ T5611] usb 7-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 273.005675][ T5611] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 273.005706][ T5611] usb 7-1: Product: syz [ 273.005723][ T5611] usb 7-1: SerialNumber: syz [ 273.010925][ T5611] usb 7-1: config 0 descriptor?? [ 273.011421][ T5678] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input65 [ 273.045838][ T5611] hso 7-1:0.0: Not our interface [ 273.204736][ T5756] usb 5-1: USB disconnect, device number 36 [ 273.848943][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'. [ 273.848973][ T8978] netlink: 24 bytes leftover after parsing attributes in process `syz.4.993'. [ 273.848994][ T8978] netlink: 24 bytes leftover after parsing attributes in process `syz.4.993'. [ 274.079859][ T8988] FAULT_INJECTION: forcing a failure. [ 274.079859][ T8988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.079895][ T8988] CPU: 1 UID: 0 PID: 8988 Comm: syz.5.997 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 274.079928][ T8988] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 274.079939][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 274.079953][ T8988] Call Trace: [ 274.079970][ T8988] [ 274.079981][ T8988] dump_stack_lvl+0xe8/0x150 [ 274.080018][ T8988] should_fail_ex+0x3eb/0x540 [ 274.080059][ T8988] _copy_from_user+0x2d/0xb0 [ 274.080083][ T8988] ___sys_recvmsg+0x173/0x5a0 [ 274.080119][ T8988] ? __pfx____sys_recvmsg+0x10/0x10 [ 274.080153][ T8988] ? lock_acquire+0x115/0x350 [ 274.080193][ T8988] ? __fget_files+0x2a/0x420 [ 274.080227][ T8988] ? __fget_files+0x3a2/0x420 [ 274.080262][ T8988] ? __fget_files+0x2a/0x420 [ 274.080301][ T8988] ? fdget+0x1ac/0x250 [ 274.080324][ T8988] do_recvmmsg+0x31a/0x7f0 [ 274.080363][ T8988] ? __pfx_do_recvmmsg+0x10/0x10 [ 274.080406][ T8988] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 274.080441][ T8988] ? fdget+0x1ac/0x250 [ 274.080470][ T8988] __x64_sys_recvmmsg+0x198/0x250 [ 274.080504][ T8988] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 274.080547][ T8988] do_syscall_64+0x166/0x520 [ 274.080575][ T8988] ? trace_irq_disable+0x3b/0x140 [ 274.080601][ T8988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.080625][ T8988] ? clear_bhb_loop+0x70/0xc0 [ 274.080653][ T8988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.080676][ T8988] RIP: 0033:0x7f7ca079f559 [ 274.080698][ T8988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.080717][ T8988] RSP: 002b:00007f7ca15d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 274.080743][ T8988] RAX: ffffffffffffffda RBX: 00007f7ca0a25fa0 RCX: 00007f7ca079f559 [ 274.080760][ T8988] RDX: 0000000000000005 RSI: 0000200000000180 RDI: 0000000000000003 [ 274.080775][ T8988] RBP: 00007f7ca15d1090 R08: 0000000000000000 R09: 0000000000000000 [ 274.080789][ T8988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.080803][ T8988] R13: 00007f7ca0a26038 R14: 00007f7ca0a25fa0 R15: 00007ffc3f6ff8f8 [ 274.080845][ T8988] [ 274.279625][ T5678] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 274.414294][ T8996] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 conventional PCI endpoint [ 274.445176][ T8996] pci 0000:00:05.0: BAR 0 [mem 0xfe000000-0xfe7fffff] [ 274.446038][ T8996] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 274.471116][ T5678] usb 3-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 274.484426][ T5678] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.484489][ T5678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.570944][ T5678] usb 3-1: config 0 descriptor?? [ 274.586411][ T5678] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input66 [ 274.649161][ T8996] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 274.649191][ T8996] pci 0000:00:05.0: vgaarb: bridge control possible [ 274.649208][ T8996] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 274.766507][ T8996] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 274.869510][ T5756] usb 3-1: USB disconnect, device number 74 [ 275.624580][ T9] usb 7-1: USB disconnect, device number 38 [ 275.694767][ T9021] FAULT_INJECTION: forcing a failure. [ 275.694767][ T9021] name failslab, interval 1, probability 0, space 0, times 0 [ 275.694830][ T9021] CPU: 0 UID: 0 PID: 9021 Comm: syz.2.1002 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 275.694874][ T9021] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 275.694887][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 275.694916][ T9021] Call Trace: [ 275.694932][ T9021] [ 275.694945][ T9021] dump_stack_lvl+0xe8/0x150 [ 275.695003][ T9021] should_fail_ex+0x3eb/0x540 [ 275.695055][ T9021] should_failslab+0xa8/0x100 [ 275.695088][ T9021] ? alloc_empty_file+0x5b/0x1d0 [ 275.695124][ T9021] kmem_cache_alloc_noprof+0x9c/0x600 [ 275.695165][ T9021] ? alloc_file_pseudo+0x151/0x1e0 [ 275.695203][ T9021] ? alloc_empty_file+0x5b/0x1d0 [ 275.695259][ T9021] alloc_empty_file+0x5b/0x1d0 [ 275.695310][ T9021] alloc_file_clone+0x52/0xe0 [ 275.695350][ T9021] create_pipe_files+0x39f/0x7a0 [ 275.695407][ T9021] __do_pipe_flags+0x46/0x1f0 [ 275.695443][ T9021] do_pipe2+0xaa/0x190 [ 275.695480][ T9021] ? __pfx_do_pipe2+0x10/0x10 [ 275.695517][ T9021] ? rcu_is_watching+0x16/0xb0 [ 275.695562][ T9021] __x64_sys_pipe2+0x5a/0x70 [ 275.695595][ T9021] do_syscall_64+0x166/0x520 [ 275.695636][ T9021] ? trace_irq_disable+0x3b/0x140 [ 275.695666][ T9021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.695695][ T9021] ? clear_bhb_loop+0x70/0xc0 [ 275.695728][ T9021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.695756][ T9021] RIP: 0033:0x7fa21c99f559 [ 275.695788][ T9021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.695812][ T9021] RSP: 002b:00007fa21d8dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 275.695841][ T9021] RAX: ffffffffffffffda RBX: 00007fa21cc25fa0 RCX: 00007fa21c99f559 [ 275.695863][ T9021] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 275.695879][ T9021] RBP: 00007fa21ca36b20 R08: 0000000000000000 R09: 0000000000000000 [ 275.695897][ T9021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.695913][ T9021] R13: 00007fa21cc26038 R14: 00007fa21cc25fa0 R15: 00007ffe97a80b98 [ 275.695955][ T9021] [ 275.732885][ T5756] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 275.911834][ T5756] usb 6-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 275.938477][ T5756] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.938621][ T5756] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.984596][ T5756] usb 6-1: config 0 descriptor?? [ 276.014583][ T5756] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input67 [ 276.253130][ T9029] FAULT_INJECTION: forcing a failure. [ 276.253130][ T9029] name failslab, interval 1, probability 0, space 0, times 0 [ 276.253170][ T9029] CPU: 1 UID: 0 PID: 9029 Comm: syz.2.1004 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 276.253207][ T9029] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 276.253219][ T9029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 276.253234][ T9029] Call Trace: [ 276.253243][ T9029] [ 276.253254][ T9029] dump_stack_lvl+0xe8/0x150 [ 276.253293][ T9029] should_fail_ex+0x3eb/0x540 [ 276.253336][ T9029] should_failslab+0xa8/0x100 [ 276.253364][ T9029] ? alloc_empty_file+0x5b/0x1d0 [ 276.253398][ T9029] kmem_cache_alloc_noprof+0x9c/0x600 [ 276.253435][ T9029] ? alloc_file_pseudo+0x151/0x1e0 [ 276.253466][ T9029] ? alloc_empty_file+0x5b/0x1d0 [ 276.253506][ T9029] alloc_empty_file+0x5b/0x1d0 [ 276.253540][ T9029] alloc_file_clone+0x52/0xe0 [ 276.253577][ T9029] create_pipe_files+0x39f/0x7a0 [ 276.253612][ T9029] __do_pipe_flags+0x46/0x1f0 [ 276.253644][ T9029] do_pipe2+0xaa/0x190 [ 276.253678][ T9029] ? __pfx_do_pipe2+0x10/0x10 [ 276.253716][ T9029] ? rcu_is_watching+0x16/0xb0 [ 276.253764][ T9029] __x64_sys_pipe2+0x5a/0x70 [ 276.253795][ T9029] do_syscall_64+0x166/0x520 [ 276.253824][ T9029] ? trace_irq_disable+0x3b/0x140 [ 276.253851][ T9029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.253876][ T9029] ? clear_bhb_loop+0x70/0xc0 [ 276.253907][ T9029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.253931][ T9029] RIP: 0033:0x7fa21c99f559 [ 276.253953][ T9029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.253974][ T9029] RSP: 002b:00007fa21d8dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 276.253999][ T9029] RAX: ffffffffffffffda RBX: 00007fa21cc25fa0 RCX: 00007fa21c99f559 [ 276.254017][ T9029] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 276.254032][ T9029] RBP: 00007fa21ca36b20 R08: 0000000000000000 R09: 0000000000000000 [ 276.254047][ T9029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.254063][ T9029] R13: 00007fa21cc26038 R14: 00007fa21cc25fa0 R15: 00007ffe97a80b98 [ 276.254102][ T9029] [ 276.630683][ T5689] usb 6-1: USB disconnect, device number 40 [ 277.044639][ T9041] FAULT_INJECTION: forcing a failure. [ 277.044639][ T9041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.044676][ T9041] CPU: 0 UID: 0 PID: 9041 Comm: syz.6.1008 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 277.044708][ T9041] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 277.044718][ T9041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 277.044733][ T9041] Call Trace: [ 277.044742][ T9041] [ 277.044751][ T9041] dump_stack_lvl+0xe8/0x150 [ 277.044788][ T9041] should_fail_ex+0x3eb/0x540 [ 277.044829][ T9041] _copy_from_user+0x2d/0xb0 [ 277.044853][ T9041] ___sys_recvmsg+0x173/0x5a0 [ 277.044907][ T9041] ? __pfx____sys_recvmsg+0x10/0x10 [ 277.044942][ T9041] ? lock_acquire+0x115/0x350 [ 277.044981][ T9041] ? __fget_files+0x2a/0x420 [ 277.045016][ T9041] ? __fget_files+0x3a2/0x420 [ 277.045049][ T9041] ? __fget_files+0x2a/0x420 [ 277.045094][ T9041] __x64_sys_recvmsg+0x1ae/0x290 [ 277.045137][ T9041] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 277.045190][ T9041] do_syscall_64+0x166/0x520 [ 277.045218][ T9041] ? trace_irq_disable+0x3b/0x140 [ 277.045249][ T9041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.045273][ T9041] ? clear_bhb_loop+0x70/0xc0 [ 277.045302][ T9041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.045325][ T9041] RIP: 0033:0x7f7813d9f559 [ 277.045346][ T9041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.045366][ T9041] RSP: 002b:00007f7814bd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 277.045391][ T9041] RAX: ffffffffffffffda RBX: 00007f7814025fa0 RCX: 00007f7813d9f559 [ 277.045409][ T9041] RDX: 0000000040000180 RSI: 0000200000000d40 RDI: 0000000000000003 [ 277.045425][ T9041] RBP: 00007f7814bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 277.045440][ T9041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.045454][ T9041] R13: 00007f7814026038 R14: 00007f7814025fa0 R15: 00007ffff78ac1c8 [ 277.045490][ T9041] [ 277.229220][ T5689] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 277.394154][ T5689] usb 3-1: New USB device found: idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 277.395248][ T5689] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 277.395291][ T5689] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 277.395324][ T5689] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 277.397438][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.397464][ T5689] usb 3-1: Product: syz [ 277.397479][ T5689] usb 3-1: Manufacturer: syz [ 277.397495][ T5689] usb 3-1: SerialNumber: syz [ 277.400119][ T5689] usb 3-1: config 0 descriptor?? [ 277.400981][ T9039] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 277.401113][ T9039] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 277.478114][ T5689] usb 3-1: ucan: probing device on interface #0 [ 277.592313][ T5711] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 277.612287][ T5678] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 277.612302][ T9] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 277.742962][ T5711] usb 6-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 277.746165][ T5711] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 277.746194][ T5711] usb 6-1: Product: syz [ 277.746210][ T5711] usb 6-1: SerialNumber: syz [ 277.748952][ T5711] usb 6-1: config 0 descriptor?? [ 277.751991][ T5711] hso 6-1:0.0: Not our interface [ 277.770976][ T5678] usb 5-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 277.800285][ T5678] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 277.800342][ T5678] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 277.800372][ T5678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 277.800400][ T5678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 277.800430][ T5678] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.800475][ T5678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.801841][ T9] usb 7-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 277.819350][ T5678] usb 5-1: config 0 descriptor?? [ 277.823217][ T9049] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 277.859225][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 277.859276][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.917278][ T9] usb 7-1: config 0 descriptor?? [ 277.937329][ T9] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input68 [ 278.148687][ T5689] ucan 3-1:0.0: probe with driver ucan failed with error -22 [ 278.171762][ T5689] usb 7-1: USB disconnect, device number 39 [ 278.441887][ T5678] usbhid 5-1:0.0: can't add hid device: -71 [ 278.442027][ T5678] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 278.460101][ T5678] usb 5-1: USB disconnect, device number 37 [ 278.863762][ T9057] FAULT_INJECTION: forcing a failure. [ 278.863762][ T9057] name failslab, interval 1, probability 0, space 0, times 0 [ 278.863789][ T9057] CPU: 0 UID: 0 PID: 9057 Comm: syz.6.1014 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 278.863812][ T9057] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 278.863820][ T9057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 278.863841][ T9057] Call Trace: [ 278.863847][ T9057] [ 278.863854][ T9057] dump_stack_lvl+0xe8/0x150 [ 278.863881][ T9057] should_fail_ex+0x3eb/0x540 [ 278.863908][ T9057] should_failslab+0xa8/0x100 [ 278.863930][ T9057] __kmalloc_noprof+0xf9/0x710 [ 278.863979][ T9057] ? rcu_is_watching+0x16/0xb0 [ 278.864007][ T9057] ? tomoyo_realpath_from_path+0xef/0x640 [ 278.864031][ T9057] ? tomoyo_realpath_from_path+0xef/0x640 [ 278.864061][ T9057] tomoyo_realpath_from_path+0xef/0x640 [ 278.864085][ T9057] ? tomoyo_path_number_perm+0x219/0x5f0 [ 278.864109][ T9057] tomoyo_path_number_perm+0x246/0x5f0 [ 278.864135][ T9057] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 278.864157][ T9057] ? __lock_acquire+0x747/0x2de0 [ 278.864200][ T9057] ? __fget_files+0x2a/0x420 [ 278.864227][ T9057] ? __fget_files+0x2a/0x420 [ 278.864251][ T9057] ? __fget_files+0x2a/0x420 [ 278.864279][ T9057] security_file_ioctl+0xc3/0x2a0 [ 278.864302][ T9057] __se_sys_ioctl+0x47/0x170 [ 278.864323][ T9057] do_syscall_64+0x166/0x520 [ 278.864342][ T9057] ? trace_irq_disable+0x3b/0x140 [ 278.864359][ T9057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.864376][ T9057] ? clear_bhb_loop+0x70/0xc0 [ 278.864395][ T9057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.864411][ T9057] RIP: 0033:0x7f7813d9f559 [ 278.864425][ T9057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.864438][ T9057] RSP: 002b:00007f7814bd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.864455][ T9057] RAX: ffffffffffffffda RBX: 00007f7814025fa0 RCX: 00007f7813d9f559 [ 278.864467][ T9057] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 278.864477][ T9057] RBP: 00007f7814bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 278.864487][ T9057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.864497][ T9057] R13: 00007f7814026038 R14: 00007f7814025fa0 R15: 00007ffff78ac1c8 [ 278.864540][ T9057] [ 278.864564][ T9057] ERROR: Out of memory at tomoyo_realpath_from_path. [ 279.266363][ T9064] FAULT_INJECTION: forcing a failure. [ 279.266363][ T9064] name failslab, interval 1, probability 0, space 0, times 0 [ 279.266390][ T9064] CPU: 0 UID: 0 PID: 9064 Comm: syz.6.1017 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 279.266414][ T9064] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 279.266421][ T9064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 279.266431][ T9064] Call Trace: [ 279.266438][ T9064] [ 279.266447][ T9064] dump_stack_lvl+0xe8/0x150 [ 279.266488][ T9064] should_fail_ex+0x3eb/0x540 [ 279.266523][ T9064] should_failslab+0xa8/0x100 [ 279.266545][ T9064] __kmalloc_noprof+0xf9/0x710 [ 279.266568][ T9064] ? rcu_is_watching+0x16/0xb0 [ 279.266590][ T9064] ? tomoyo_realpath_from_path+0xef/0x640 [ 279.266607][ T9064] ? tomoyo_realpath_from_path+0xef/0x640 [ 279.266630][ T9064] tomoyo_realpath_from_path+0xef/0x640 [ 279.266675][ T9064] ? tomoyo_path_number_perm+0x219/0x5f0 [ 279.266714][ T9064] tomoyo_path_number_perm+0x246/0x5f0 [ 279.266741][ T9064] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 279.266764][ T9064] ? __lock_acquire+0x747/0x2de0 [ 279.266829][ T9064] ? __fget_files+0x2a/0x420 [ 279.266869][ T9064] ? __fget_files+0x2a/0x420 [ 279.266909][ T9064] ? __fget_files+0x2a/0x420 [ 279.266938][ T9064] security_file_ioctl+0xc3/0x2a0 [ 279.266963][ T9064] __se_sys_ioctl+0x47/0x170 [ 279.266985][ T9064] do_syscall_64+0x166/0x520 [ 279.267006][ T9064] ? trace_irq_disable+0x3b/0x140 [ 279.267025][ T9064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.267042][ T9064] ? clear_bhb_loop+0x70/0xc0 [ 279.267062][ T9064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.267078][ T9064] RIP: 0033:0x7f7813d9f559 [ 279.267093][ T9064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.267107][ T9064] RSP: 002b:00007f7814bd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.267125][ T9064] RAX: ffffffffffffffda RBX: 00007f7814025fa0 RCX: 00007f7813d9f559 [ 279.267137][ T9064] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 279.267147][ T9064] RBP: 00007f7814bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 279.267158][ T9064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.267168][ T9064] R13: 00007f7814026038 R14: 00007f7814025fa0 R15: 00007ffff78ac1c8 [ 279.267193][ T9064] [ 279.267235][ T9064] ERROR: Out of memory at tomoyo_realpath_from_path. [ 279.842111][ T5689] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 279.926513][ T10] usb 3-1: USB disconnect, device number 75 [ 279.952122][ T9] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 280.003152][ T5689] usb 7-1: New USB device found: idVendor=2040, idProduct=1605, bcdDevice=a.94 [ 280.004213][ T5689] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.004264][ T5689] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 280.004294][ T5689] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.004339][ T5689] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.009095][ T5689] usb 7-1: config 0 descriptor?? [ 280.162975][ T9] usb 5-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 280.164137][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.164170][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.166329][ T9] usb 5-1: config 0 descriptor?? [ 280.210929][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input69 [ 280.230893][ T5678] usb 7-1: USB disconnect, device number 40 [ 280.378395][ T5711] usb 6-1: USB disconnect, device number 41 [ 280.442132][ T10] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 280.446800][ T5678] usb 5-1: USB disconnect, device number 38 [ 280.593402][ T10] usb 3-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 280.595018][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.595081][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.598910][ T10] usb 3-1: config 0 descriptor?? [ 280.643579][ T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input70 [ 280.798506][ T9086] FAULT_INJECTION: forcing a failure. [ 280.798506][ T9086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.798532][ T9086] CPU: 0 UID: 0 PID: 9086 Comm: syz.5.1024 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 280.798556][ T9086] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 280.798563][ T9086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 280.798573][ T9086] Call Trace: [ 280.798579][ T9086] [ 280.798587][ T9086] dump_stack_lvl+0xe8/0x150 [ 280.798612][ T9086] should_fail_ex+0x3eb/0x540 [ 280.798640][ T9086] _copy_from_user+0x2d/0xb0 [ 280.798656][ T9086] ___sys_sendmsg+0x1c6/0x360 [ 280.798674][ T9086] ? __lock_acquire+0x747/0x2de0 [ 280.798694][ T9086] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.798717][ T9086] ? kstrtouint+0x6e/0xe0 [ 280.798756][ T9086] ? __fget_files+0x3a2/0x420 [ 280.798780][ T9086] ? __fget_files+0x2a/0x420 [ 280.798811][ T9086] __sys_sendmmsg+0x273/0x4d0 [ 280.798834][ T9086] ? __pfx___sys_sendmmsg+0x10/0x10 [ 280.798860][ T9086] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 280.798893][ T9086] ? ksys_write+0x242/0x270 [ 280.798911][ T9086] ? __pfx_ksys_write+0x10/0x10 [ 280.798932][ T9086] __x64_sys_sendmmsg+0xa0/0xc0 [ 280.798953][ T9086] do_syscall_64+0x166/0x520 [ 280.798972][ T9086] ? trace_irq_disable+0x3b/0x140 [ 280.798989][ T9086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.799005][ T9086] ? clear_bhb_loop+0x70/0xc0 [ 280.799024][ T9086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.799040][ T9086] RIP: 0033:0x7f7ca079f559 [ 280.799054][ T9086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.799067][ T9086] RSP: 002b:00007f7ca15d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 280.799084][ T9086] RAX: ffffffffffffffda RBX: 00007f7ca0a25fa0 RCX: 00007f7ca079f559 [ 280.799095][ T9086] RDX: 040000000000024e RSI: 0000200000000040 RDI: 0000000000000003 [ 280.799107][ T9086] RBP: 00007f7ca15d1090 R08: 0000000000000000 R09: 0000000000000000 [ 280.799117][ T9086] R10: 0000000020002040 R11: 0000000000000246 R12: 0000000000000001 [ 280.799126][ T9086] R13: 00007f7ca0a26038 R14: 00007f7ca0a25fa0 R15: 00007ffc3f6ff8f8 [ 280.799150][ T9086] [ 281.043804][ T5711] usb 3-1: USB disconnect, device number 76 [ 281.181747][ T9096] FAULT_INJECTION: forcing a failure. [ 281.181747][ T9096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.181774][ T9096] CPU: 0 UID: 0 PID: 9096 Comm: syz.4.1027 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 281.181813][ T9096] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 281.181820][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 281.181837][ T9096] Call Trace: [ 281.181843][ T9096] [ 281.181851][ T9096] dump_stack_lvl+0xe8/0x150 [ 281.181877][ T9096] should_fail_ex+0x3eb/0x540 [ 281.181936][ T9096] _copy_from_user+0x2d/0xb0 [ 281.181959][ T9096] ___sys_recvmsg+0x173/0x5a0 [ 281.181994][ T9096] ? __pfx____sys_recvmsg+0x10/0x10 [ 281.182027][ T9096] ? lock_acquire+0x115/0x350 [ 281.182063][ T9096] ? __fget_files+0x2a/0x420 [ 281.182097][ T9096] ? __fget_files+0x3a2/0x420 [ 281.182130][ T9096] ? __fget_files+0x2a/0x420 [ 281.182168][ T9096] ? fdget+0x1ac/0x250 [ 281.182192][ T9096] do_recvmmsg+0x31a/0x7f0 [ 281.182229][ T9096] ? __pfx_do_recvmmsg+0x10/0x10 [ 281.182272][ T9096] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 281.182305][ T9096] ? fdget+0x1ac/0x250 [ 281.182333][ T9096] __x64_sys_recvmmsg+0x198/0x250 [ 281.182365][ T9096] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 281.182407][ T9096] do_syscall_64+0x166/0x520 [ 281.182434][ T9096] ? trace_irq_disable+0x3b/0x140 [ 281.182459][ T9096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.182482][ T9096] ? clear_bhb_loop+0x70/0xc0 [ 281.182510][ T9096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.182533][ T9096] RIP: 0033:0x7f44e139f559 [ 281.182554][ T9096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.182573][ T9096] RSP: 002b:00007f44e21db028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 281.182598][ T9096] RAX: ffffffffffffffda RBX: 00007f44e1625fa0 RCX: 00007f44e139f559 [ 281.182615][ T9096] RDX: 0000000000000001 RSI: 0000200000000900 RDI: 0000000000000003 [ 281.182630][ T9096] RBP: 00007f44e21db090 R08: 0000000000000000 R09: 0000000000000000 [ 281.182645][ T9096] R10: 0000000000002202 R11: 0000000000000246 R12: 0000000000000001 [ 281.182658][ T9096] R13: 00007f44e1626038 R14: 00007f44e1625fa0 R15: 00007ffe4541ede8 [ 281.182694][ T9096] [ 281.743884][ T5611] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 281.752192][ T5689] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 281.805225][ T9114] FAULT_INJECTION: forcing a failure. [ 281.805225][ T9114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.805260][ T9114] CPU: 1 UID: 0 PID: 9114 Comm: syz.5.1034 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 281.805284][ T9114] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 281.805291][ T9114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 281.805301][ T9114] Call Trace: [ 281.805308][ T9114] [ 281.805315][ T9114] dump_stack_lvl+0xe8/0x150 [ 281.805341][ T9114] should_fail_ex+0x3eb/0x540 [ 281.805402][ T9114] _copy_from_user+0x2d/0xb0 [ 281.805424][ T9114] kstrtouint_from_user+0xd6/0x180 [ 281.805445][ T9114] ? __kasan_slab_free+0x5c/0x80 [ 281.805461][ T9114] ? kmem_cache_free+0x182/0x650 [ 281.805478][ T9114] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 281.805506][ T9114] ? lock_acquire+0x115/0x350 [ 281.805525][ T9114] proc_fail_nth_write+0x8e/0x210 [ 281.805545][ T9114] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 281.805570][ T9114] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 281.805589][ T9114] vfs_write+0x296/0xba0 [ 281.805611][ T9114] ? __pfx_vfs_write+0x10/0x10 [ 281.805628][ T9114] ? __fget_files+0x2a/0x420 [ 281.805652][ T9114] ? __fget_files+0x3a2/0x420 [ 281.805676][ T9114] ? __fget_files+0x2a/0x420 [ 281.805703][ T9114] ? fdget+0x1ac/0x250 [ 281.805722][ T9114] ksys_write+0x150/0x270 [ 281.805741][ T9114] ? __pfx_ksys_write+0x10/0x10 [ 281.805767][ T9114] do_syscall_64+0x166/0x520 [ 281.805785][ T9114] ? trace_irq_disable+0x3b/0x140 [ 281.805802][ T9114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.805817][ T9114] ? clear_bhb_loop+0x70/0xc0 [ 281.805836][ T9114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.805851][ T9114] RIP: 0033:0x7f7ca075fd8e [ 281.805865][ T9114] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 281.805878][ T9114] RSP: 002b:00007f7ca15d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 281.805894][ T9114] RAX: ffffffffffffffda RBX: 00007f7ca15d16c0 RCX: 00007f7ca075fd8e [ 281.805906][ T9114] RDX: 0000000000000001 RSI: 00007f7ca15d1090 RDI: 0000000000000004 [ 281.805916][ T9114] RBP: 00007f7ca15d1090 R08: 0000000000000000 R09: 0000000000000000 [ 281.805925][ T9114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.805934][ T9114] R13: 00007f7ca0a26038 R14: 00007f7ca0a25fa0 R15: 00007ffc3f6ff8f8 [ 281.805959][ T9114] [ 281.905209][ T5611] usb 5-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 281.920750][ T5611] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 281.921177][ T5611] usb 5-1: Product: syz [ 281.921229][ T5611] usb 5-1: SerialNumber: syz [ 281.941111][ T5611] usb 5-1: config 0 descriptor?? [ 281.976485][ T5611] hso 5-1:0.0: Not our interface [ 282.014745][ T5689] usb 7-1: New USB device found: idVendor=12ba, idProduct=0100, bcdDevice=0.00 [ 282.059099][ T5689] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.059135][ T5689] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.059162][ T5689] usb 7-1: config 0 interface 0 has no altsetting 0 [ 282.059196][ T5689] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.149071][ T5689] usb 7-1: config 0 descriptor?? [ 282.359035][ T5689] usbhid 7-1:0.0: can't add hid device: -32 [ 282.359169][ T5689] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 282.421956][ T5678] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 282.572717][ T5678] usb 6-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 282.573812][ T5678] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.573861][ T5678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.577329][ T5678] usb 6-1: config 0 descriptor?? [ 282.596747][ T5678] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input71 [ 282.795788][ T5678] usb 6-1: USB disconnect, device number 42 [ 283.131929][ T5756] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 283.282649][ T5756] usb 3-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 283.283785][ T5756] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.283832][ T5756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.286038][ T5756] usb 3-1: config 0 descriptor?? [ 283.331170][ T5756] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input72 [ 283.412404][ T9130] FAULT_INJECTION: forcing a failure. [ 283.412404][ T9130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.412442][ T9130] CPU: 0 UID: 0 PID: 9130 Comm: syz.5.1041 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 283.412475][ T9130] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 283.412484][ T9130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 283.412500][ T9130] Call Trace: [ 283.412509][ T9130] [ 283.412519][ T9130] dump_stack_lvl+0xe8/0x150 [ 283.412554][ T9130] should_fail_ex+0x3eb/0x540 [ 283.412609][ T9130] _copy_from_user+0x2d/0xb0 [ 283.412633][ T9130] ___sys_sendmsg+0x1c6/0x360 [ 283.412661][ T9130] ? __lock_acquire+0x747/0x2de0 [ 283.412697][ T9130] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.412732][ T9130] ? kstrtouint+0x6e/0xe0 [ 283.412791][ T9130] ? __fget_files+0x3a2/0x420 [ 283.412826][ T9130] ? __fget_files+0x2a/0x420 [ 283.412872][ T9130] __sys_sendmmsg+0x273/0x4d0 [ 283.412906][ T9130] ? __pfx___sys_sendmmsg+0x10/0x10 [ 283.412946][ T9130] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 283.412994][ T9130] ? ksys_write+0x242/0x270 [ 283.413021][ T9130] ? __pfx_ksys_write+0x10/0x10 [ 283.413052][ T9130] __x64_sys_sendmmsg+0xa0/0xc0 [ 283.413083][ T9130] do_syscall_64+0x166/0x520 [ 283.413110][ T9130] ? trace_irq_disable+0x3b/0x140 [ 283.413136][ T9130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.413159][ T9130] ? clear_bhb_loop+0x70/0xc0 [ 283.413188][ T9130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.413211][ T9130] RIP: 0033:0x7f7ca079f559 [ 283.413232][ T9130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.413251][ T9130] RSP: 002b:00007f7ca15d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 283.413275][ T9130] RAX: ffffffffffffffda RBX: 00007f7ca0a25fa0 RCX: 00007f7ca079f559 [ 283.413293][ T9130] RDX: 040000000000024e RSI: 0000200000000040 RDI: 0000000000000003 [ 283.413309][ T9130] RBP: 00007f7ca15d1090 R08: 0000000000000000 R09: 0000000000000000 [ 283.413323][ T9130] R10: 0000000020002040 R11: 0000000000000246 R12: 0000000000000001 [ 283.413338][ T9130] R13: 00007f7ca0a26038 R14: 00007f7ca0a25fa0 R15: 00007ffc3f6ff8f8 [ 283.413374][ T9130] [ 283.680548][ T5756] usb 3-1: USB disconnect, device number 77 [ 283.963305][ T5689] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 284.112577][ T5689] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 284.113918][ T5689] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 284.113977][ T5689] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 284.114058][ T5689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 284.114092][ T5689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 284.114133][ T5689] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 284.114183][ T5689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.116561][ T5689] usb 6-1: config 0 descriptor?? [ 284.121132][ T9133] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 284.280543][ T9135] syzkaller1: entered promiscuous mode [ 284.280570][ T9135] syzkaller1: entered allmulticast mode [ 284.525954][ T5611] usb 5-1: USB disconnect, device number 39 [ 284.553271][ T10] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 284.625636][ T9144] FAULT_INJECTION: forcing a failure. [ 284.625636][ T9144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.625674][ T9144] CPU: 1 UID: 0 PID: 9144 Comm: syz.4.1044 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 284.625707][ T9144] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 284.625716][ T9144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 284.625730][ T9144] Call Trace: [ 284.625739][ T9144] [ 284.625749][ T9144] dump_stack_lvl+0xe8/0x150 [ 284.625794][ T9144] should_fail_ex+0x3eb/0x540 [ 284.625836][ T9144] _copy_from_user+0x2d/0xb0 [ 284.625860][ T9144] ___sys_sendmsg+0x1c6/0x360 [ 284.625887][ T9144] ? __lock_acquire+0x747/0x2de0 [ 284.625918][ T9144] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.625986][ T9144] ? __fget_files+0x3a2/0x420 [ 284.626029][ T9144] ? __fget_files+0x2a/0x420 [ 284.626075][ T9144] __x64_sys_sendmsg+0x1b1/0x290 [ 284.626112][ T9144] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 284.626169][ T9144] do_syscall_64+0x166/0x520 [ 284.626197][ T9144] ? trace_irq_disable+0x3b/0x140 [ 284.626224][ T9144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.626247][ T9144] ? clear_bhb_loop+0x70/0xc0 [ 284.626277][ T9144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.626300][ T9144] RIP: 0033:0x7f44e139f559 [ 284.626322][ T9144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.626342][ T9144] RSP: 002b:00007f44e21db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.626367][ T9144] RAX: ffffffffffffffda RBX: 00007f44e1625fa0 RCX: 00007f44e139f559 [ 284.626391][ T9144] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000003 [ 284.626407][ T9144] RBP: 00007f44e21db090 R08: 0000000000000000 R09: 0000000000000000 [ 284.626422][ T9144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.626436][ T9144] R13: 00007f44e1626038 R14: 00007f44e1625fa0 R15: 00007ffe4541ede8 [ 284.626473][ T9144] [ 284.700895][ T9] usb 7-1: USB disconnect, device number 41 [ 284.712749][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 284.717374][ T10] usb 3-1: New USB device found: idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 284.747390][ T10] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 284.747552][ T10] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 284.747608][ T10] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 284.747752][ T10] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 284.747815][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 284.747938][ T10] usb 3-1: config 0 has no interface number 0 [ 284.748134][ T10] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 284.748314][ T10] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 284.748385][ T10] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 284.748539][ T10] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 284.748667][ T10] usb 3-1: config 0 interface 125 has no altsetting 2 [ 284.848862][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.849004][ T10] usb 3-1: Product: syz [ 284.849049][ T10] usb 3-1: Manufacturer: syz [ 284.849100][ T10] usb 3-1: SerialNumber: syz [ 284.915948][ T5689] usbhid 6-1:0.0: can't add hid device: -71 [ 284.928581][ T5689] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 284.998620][ T10] usb 3-1: config 0 descriptor?? [ 285.026772][ T5689] usb 6-1: USB disconnect, device number 43 [ 285.054504][ T10] usb 3-1: selecting invalid altsetting 2 [ 285.076016][ T10] uss720 3-1:0.125: probe with driver uss720 failed with error -22 [ 285.223503][ T10] usb 3-1: USB disconnect, device number 78 [ 285.472023][ T9] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 285.625270][ T9] usb 7-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 285.626598][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 285.626646][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.795388][ T9173] overlayfs: failed to resolve './file0:/': -2 [ 285.842189][ T10] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 285.891082][ T9] qmi_wwan 7-1:1.0: cdc-wdm0: USB WDM device [ 285.980459][ T9] wwan wwan0: port wwan0qmi0 attached [ 285.993735][ T10] usb 6-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 285.995125][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.995174][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.034171][ T10] usb 6-1: config 0 descriptor?? [ 286.067723][ T10] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input73 [ 286.192002][ T5697] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 286.235658][ T9] qmi_wwan 7-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.6-1, WWAN/QMI device, 3e:fa:3c:d0:38:d2 [ 286.253859][ T9] usb 7-1: USB disconnect, device number 42 [ 286.279986][ T9] qmi_wwan 7-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.6-1, WWAN/QMI device [ 286.354738][ T5697] usb 3-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 286.355812][ T5697] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 286.355862][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.398269][ T5697] usb 3-1: config 0 descriptor?? [ 286.416410][ T5697] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input74 [ 286.420193][ T5611] usb 6-1: USB disconnect, device number 44 [ 286.471525][ T9] wwan wwan0: port wwan0qmi0 disconnected [ 286.613962][ T5697] usb 3-1: USB disconnect, device number 79 [ 287.024438][ T9] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 287.177758][ T9] usb 7-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 287.178981][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.179029][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.215954][ T9] usb 7-1: config 0 descriptor?? [ 287.228163][ T10] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 287.246821][ T9] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input75 [ 287.382528][ T10] usb 6-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 287.383666][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.383709][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.385682][ T10] usb 6-1: config 0 descriptor?? [ 287.429894][ T10] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input76 [ 287.499134][ T5711] usb 7-1: USB disconnect, device number 43 [ 287.508086][ T5756] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 287.561674][ T9] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 287.614671][ T5697] usb 6-1: USB disconnect, device number 45 [ 287.664866][ T5756] usb 5-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 287.666822][ T5756] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 287.666863][ T5756] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 287.666883][ T5756] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 287.666901][ T5756] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 287.666923][ T5756] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 287.666953][ T5756] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.668979][ T5756] usb 5-1: config 0 descriptor?? [ 287.669760][ T9197] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 287.763629][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 287.763667][ T9] usb 3-1: New USB device found: idVendor=0711, idProduct=0210, bcdDevice=22.c2 [ 287.765277][ T9] usb 3-1: config 74 has an invalid interface number: 142 but max is 2 [ 287.765297][ T9] usb 3-1: config 74 has an invalid interface number: 72 but max is 2 [ 287.765313][ T9] usb 3-1: config 74 has an invalid interface number: 97 but max is 2 [ 287.765328][ T9] usb 3-1: config 74 has no interface number 0 [ 287.765341][ T9] usb 3-1: config 74 has no interface number 1 [ 287.765353][ T9] usb 3-1: config 74 has no interface number 2 [ 287.765413][ T9] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 287.765440][ T9] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0x9 has an invalid bInterval 128, changing to 4 [ 287.765459][ T9] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0x9 has invalid maxpacket 1024, setting to 0 [ 287.765480][ T9] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0xD has invalid maxpacket 64, setting to 8 [ 287.765509][ T9] usb 3-1: config 74 interface 72 altsetting 255 endpoint 0x8 has invalid maxpacket 48, setting to 8 [ 287.765556][ T9] usb 3-1: config 74 interface 97 altsetting 148 has a duplicate endpoint with address 0xD, skipping [ 287.765574][ T9] usb 3-1: config 74 interface 142 has no altsetting 0 [ 287.765589][ T9] usb 3-1: config 74 interface 72 has no altsetting 0 [ 287.765603][ T9] usb 3-1: config 74 interface 97 has no altsetting 0 [ 287.768836][ T9] usb 3-1: string descriptor 0 read error: -22 [ 287.768953][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.806223][ T9199] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 287.806500][ T9199] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 287.895408][ T9] mct_u232 3-1:74.142: MCT U232 converter detected [ 287.901048][ T9] mct_u232 ttyUSB0: expected endpoint missing [ 287.913260][ T9] mct_u232 3-1:74.72: MCT U232 converter detected [ 287.916301][ T9] mct_u232 ttyUSB1: expected endpoint missing [ 287.928142][ T9] mct_u232 3-1:74.97: MCT U232 converter detected [ 287.933525][ T9] mct_u232 ttyUSB2: expected endpoint missing [ 288.012472][ T5697] usb 3-1: USB disconnect, device number 80 [ 288.028977][ T5697] mct_u232 3-1:74.142: device disconnected [ 288.040685][ T5697] mct_u232 3-1:74.72: device disconnected [ 288.053521][ T5697] mct_u232 3-1:74.97: device disconnected [ 288.198153][ T9203] synth uevent: /bus/acpi: unknown uevent action string [ 288.347646][ T5756] usbhid 5-1:0.0: can't add hid device: -71 [ 288.347756][ T5756] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 288.354280][ T5756] usb 5-1: USB disconnect, device number 40 [ 288.561739][ T5697] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 288.581892][ T9] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 288.617274][ T9215] FAULT_INJECTION: forcing a failure. [ 288.617274][ T9215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.617301][ T9215] CPU: 0 UID: 0 PID: 9215 Comm: syz.2.1066 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 288.617325][ T9215] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 288.617332][ T9215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 288.617342][ T9215] Call Trace: [ 288.617349][ T9215] [ 288.617356][ T9215] dump_stack_lvl+0xe8/0x150 [ 288.617383][ T9215] should_fail_ex+0x3eb/0x540 [ 288.617412][ T9215] _copy_from_user+0x2d/0xb0 [ 288.617428][ T9215] ___sys_sendmsg+0x1c6/0x360 [ 288.617451][ T9215] ? __lock_acquire+0x747/0x2de0 [ 288.617471][ T9215] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.617518][ T9215] ? __fget_files+0x3a2/0x420 [ 288.617543][ T9215] ? __fget_files+0x2a/0x420 [ 288.617575][ T9215] __x64_sys_sendmsg+0x1b1/0x290 [ 288.617598][ T9215] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 288.617634][ T9215] do_syscall_64+0x166/0x520 [ 288.617654][ T9215] ? trace_irq_disable+0x3b/0x140 [ 288.617672][ T9215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.617689][ T9215] ? clear_bhb_loop+0x70/0xc0 [ 288.617709][ T9215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.617726][ T9215] RIP: 0033:0x7fa21c99f559 [ 288.617741][ T9215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.617755][ T9215] RSP: 002b:00007fa21d8dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.617772][ T9215] RAX: ffffffffffffffda RBX: 00007fa21cc25fa0 RCX: 00007fa21c99f559 [ 288.617785][ T9215] RDX: 00000000040008d2 RSI: 00002000000004c0 RDI: 0000000000000003 [ 288.617796][ T9215] RBP: 00007fa21d8dd090 R08: 0000000000000000 R09: 0000000000000000 [ 288.617806][ T9215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.617816][ T9215] R13: 00007fa21cc26038 R14: 00007fa21cc25fa0 R15: 00007ffe97a80b98 [ 288.617841][ T9215] [ 288.743661][ T9] usb 6-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 288.748396][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.748531][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.768624][ T9] usb 6-1: config 0 descriptor?? [ 288.877451][ T9] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input77 [ 288.894907][ T5697] usb 7-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 288.896839][ T5697] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.896889][ T5697] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.900961][ T5697] usb 7-1: config 0 descriptor?? [ 288.944198][ T5697] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input78 [ 289.082814][ T1704] block nbd0: Possible stuck request ffff888028814280: control (read@0,1024B). Runtime 180 seconds [ 289.082862][ T1704] block nbd0: Possible stuck request ffff888028814440: control (read@1024,1024B). Runtime 180 seconds [ 289.082893][ T1704] block nbd0: Possible stuck request ffff888028814600: control (read@2048,1024B). Runtime 180 seconds [ 289.082932][ T1704] block nbd0: Possible stuck request ffff8880288147c0: control (read@3072,1024B). Runtime 180 seconds [ 289.136063][ T5756] usb 6-1: USB disconnect, device number 46 [ 289.228227][ T5697] usb 7-1: USB disconnect, device number 44 [ 289.260676][ T9221] FAULT_INJECTION: forcing a failure. [ 289.260676][ T9221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.260709][ T9221] CPU: 0 UID: 0 PID: 9221 Comm: syz.4.1068 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 289.260742][ T9221] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 289.260752][ T9221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 289.260766][ T9221] Call Trace: [ 289.260775][ T9221] [ 289.260785][ T9221] dump_stack_lvl+0xe8/0x150 [ 289.260821][ T9221] should_fail_ex+0x3eb/0x540 [ 289.260861][ T9221] _copy_to_user+0x31/0xb0 [ 289.260886][ T9221] simple_read_from_buffer+0xe1/0x170 [ 289.260939][ T9221] proc_fail_nth_read+0x1bb/0x230 [ 289.260971][ T9221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.261003][ T9221] ? rw_verify_area+0x24a/0x4c0 [ 289.261029][ T9221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.261056][ T9221] vfs_read+0x213/0xa80 [ 289.261084][ T9221] ? __pfx___mutex_lock+0x10/0x10 [ 289.261114][ T9221] ? __pfx_vfs_read+0x10/0x10 [ 289.261139][ T9221] ? __fget_files+0x2a/0x420 [ 289.261173][ T9221] ? __fget_files+0x3a2/0x420 [ 289.261206][ T9221] ? __fget_files+0x2a/0x420 [ 289.261261][ T9221] ? fdget+0x1ac/0x250 [ 289.261291][ T9221] ksys_read+0x150/0x270 [ 289.261312][ T9221] ? __fget_files+0x3a2/0x420 [ 289.261349][ T9221] ? __pfx_ksys_read+0x10/0x10 [ 289.261388][ T9221] do_syscall_64+0x166/0x520 [ 289.261416][ T9221] ? trace_irq_disable+0x3b/0x140 [ 289.261441][ T9221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.261465][ T9221] ? clear_bhb_loop+0x70/0xc0 [ 289.261494][ T9221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.261518][ T9221] RIP: 0033:0x7f44e135fd8e [ 289.261539][ T9221] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 289.261559][ T9221] RSP: 002b:00007f44e21dafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 289.261584][ T9221] RAX: ffffffffffffffda RBX: 00007f44e21db6c0 RCX: 00007f44e135fd8e [ 289.261601][ T9221] RDX: 000000000000000f RSI: 00007f44e21db0a0 RDI: 0000000000000007 [ 289.261615][ T9221] RBP: 00007f44e21db090 R08: 0000000000000000 R09: 0000000000000000 [ 289.261629][ T9221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.261643][ T9221] R13: 00007f44e1626038 R14: 00007f44e1625fa0 R15: 00007ffe4541ede8 [ 289.261680][ T9221] [ 289.677373][ T9232] FAULT_INJECTION: forcing a failure. [ 289.677373][ T9232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.677400][ T9232] CPU: 0 UID: 0 PID: 9232 Comm: syz.4.1072 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 289.677425][ T9232] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 289.677432][ T9232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 289.677443][ T9232] Call Trace: [ 289.677449][ T9232] [ 289.677456][ T9232] dump_stack_lvl+0xe8/0x150 [ 289.677483][ T9232] should_fail_ex+0x3eb/0x540 [ 289.677512][ T9232] _copy_from_user+0x2d/0xb0 [ 289.677528][ T9232] do_ipv6_setsockopt+0x245/0x2960 [ 289.677558][ T9232] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 289.677581][ T9232] ? begin_current_label_crit_section+0x299/0x830 [ 289.677601][ T9232] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 289.677618][ T9232] ? get_pid_task+0x20/0x1f0 [ 289.677648][ T9232] ? aa_inet_opt_perm+0x94d/0xcd0 [ 289.677663][ T9232] ? get_pid_task+0x20/0x1f0 [ 289.677685][ T9232] ? get_pid_task+0x20/0x1f0 [ 289.677713][ T9232] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 289.677741][ T9232] ? ksys_write+0x1e6/0x270 [ 289.677765][ T9232] ipv6_setsockopt+0x59/0x170 [ 289.677792][ T9232] rawv6_setsockopt+0x276/0x5e0 [ 289.677819][ T9232] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 289.677845][ T9232] ? sock_common_setsockopt+0x36/0xc0 [ 289.677877][ T9232] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 289.677905][ T9232] do_sock_setsockopt+0x17c/0x1b0 [ 289.677928][ T9232] __x64_sys_setsockopt+0x13d/0x1b0 [ 289.677951][ T9232] do_syscall_64+0x166/0x520 [ 289.677970][ T9232] ? trace_irq_disable+0x3b/0x140 [ 289.677989][ T9232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.678005][ T9232] ? clear_bhb_loop+0x70/0xc0 [ 289.678026][ T9232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.678042][ T9232] RIP: 0033:0x7f44e139f559 [ 289.678057][ T9232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.678072][ T9232] RSP: 002b:00007f44e21db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 289.678089][ T9232] RAX: ffffffffffffffda RBX: 00007f44e1625fa0 RCX: 00007f44e139f559 [ 289.678101][ T9232] RDX: 00000000000000d2 RSI: 0000000000000029 RDI: 0000000000000003 [ 289.678111][ T9232] RBP: 00007f44e21db090 R08: 000000000000005c R09: 0000000000000000 [ 289.678122][ T9232] R10: 0000200000003c80 R11: 0000000000000246 R12: 0000000000000001 [ 289.678133][ T9232] R13: 00007f44e1626038 R14: 00007f44e1625fa0 R15: 00007ffe4541ede8 [ 289.678157][ T9232] [ 289.781755][ T5756] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 289.945878][ T5756] usb 3-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 289.959607][ T5756] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 289.959662][ T5756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.985213][ T5756] usb 3-1: config 0 descriptor?? [ 290.015405][ T5756] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input79 [ 290.216437][ T5689] usb 3-1: USB disconnect, device number 81 [ 290.341761][ T5756] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 290.421540][ T5697] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 290.485730][ T9248] FAULT_INJECTION: forcing a failure. [ 290.485730][ T9248] name failslab, interval 1, probability 0, space 0, times 0 [ 290.485755][ T9248] CPU: 1 UID: 0 PID: 9248 Comm: syz.6.1078 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 290.485779][ T9248] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 290.485786][ T9248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 290.485796][ T9248] Call Trace: [ 290.485803][ T9248] [ 290.485811][ T9248] dump_stack_lvl+0xe8/0x150 [ 290.485839][ T9248] should_fail_ex+0x3eb/0x540 [ 290.485868][ T9248] should_failslab+0xa8/0x100 [ 290.485889][ T9248] __kmalloc_noprof+0xf9/0x710 [ 290.485913][ T9248] ? rcu_is_watching+0x16/0xb0 [ 290.485934][ T9248] ? tomoyo_realpath_from_path+0xef/0x640 [ 290.485951][ T9248] ? tomoyo_realpath_from_path+0xef/0x640 [ 290.485974][ T9248] tomoyo_realpath_from_path+0xef/0x640 [ 290.485999][ T9248] ? tomoyo_path_number_perm+0x219/0x5f0 [ 290.486024][ T9248] tomoyo_path_number_perm+0x246/0x5f0 [ 290.486050][ T9248] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 290.486073][ T9248] ? __lock_acquire+0x747/0x2de0 [ 290.486118][ T9248] ? __fget_files+0x2a/0x420 [ 290.486146][ T9248] ? __fget_files+0x2a/0x420 [ 290.486172][ T9248] ? __fget_files+0x2a/0x420 [ 290.486201][ T9248] security_file_ioctl+0xc3/0x2a0 [ 290.486225][ T9248] __se_sys_ioctl+0x47/0x170 [ 290.486246][ T9248] do_syscall_64+0x166/0x520 [ 290.486266][ T9248] ? trace_irq_disable+0x3b/0x140 [ 290.486285][ T9248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.486301][ T9248] ? clear_bhb_loop+0x70/0xc0 [ 290.486328][ T9248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.486344][ T9248] RIP: 0033:0x7f7813d9f559 [ 290.486360][ T9248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.486374][ T9248] RSP: 002b:00007f7814bd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.486390][ T9248] RAX: ffffffffffffffda RBX: 00007f7814025fa0 RCX: 00007f7813d9f559 [ 290.486403][ T9248] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 290.486413][ T9248] RBP: 00007f7814bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 290.486424][ T9248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.486433][ T9248] R13: 00007f7814026038 R14: 00007f7814025fa0 R15: 00007ffff78ac1c8 [ 290.486459][ T9248] [ 290.486466][ T9248] ERROR: Out of memory at tomoyo_realpath_from_path. [ 290.497675][ T5756] usb 5-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 290.520576][ T5756] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 290.520653][ T5756] usb 5-1: Product: syz [ 290.520702][ T5756] usb 5-1: SerialNumber: syz [ 290.545626][ T5756] usb 5-1: config 0 descriptor?? [ 290.635939][ T5697] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 290.684025][ T5697] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 290.684081][ T5697] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 290.684110][ T5697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 290.684138][ T5697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 290.684167][ T5697] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 290.684219][ T5697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.698034][ T5697] usb 6-1: config 0 descriptor?? [ 290.702050][ T9241] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 290.871715][ T5756] usb 5-1: USB disconnect, device number 41 [ 291.038821][ T9254] syzkaller1: entered promiscuous mode [ 291.038845][ T9254] syzkaller1: entered allmulticast mode [ 291.133826][ T5697] hid_parser_main: 12 callbacks suppressed [ 291.133852][ T5697] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 291.133885][ T5697] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 291.133916][ T5697] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 291.134036][ T5697] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 291.134067][ T5697] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 291.134095][ T5697] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 291.134123][ T5697] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 291.134158][ T5697] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 291.134188][ T5697] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 291.134216][ T5697] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 291.246631][ T5697] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 291.335787][ T5697] usb 6-1: USB disconnect, device number 47 [ 291.393426][ T5711] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 291.541559][ T5711] usb 7-1: Using ep0 maxpacket: 16 [ 291.542415][ T5711] usb 7-1: New USB device found: idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 291.543800][ T5711] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 291.543829][ T5711] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 291.543853][ T5711] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 291.543875][ T5711] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 291.543897][ T5711] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 291.543920][ T5711] usb 7-1: config 0 has no interface number 0 [ 291.543964][ T5711] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 291.543995][ T5711] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 291.544019][ T5711] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 291.544054][ T5711] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 291.544084][ T5711] usb 7-1: config 0 interface 125 has no altsetting 2 [ 291.547906][ T5711] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.547934][ T5711] usb 7-1: Product: syz [ 291.547951][ T5711] usb 7-1: Manufacturer: syz [ 291.547969][ T5711] usb 7-1: SerialNumber: syz [ 291.579395][ T5711] usb 7-1: config 0 descriptor?? [ 291.609328][ T5711] usb 7-1: selecting invalid altsetting 2 [ 291.609418][ T5711] uss720 7-1:0.125: probe with driver uss720 failed with error -22 [ 291.814282][ T5689] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 291.838571][ T5711] usb 7-1: USB disconnect, device number 45 [ 291.972203][ T5689] usb 5-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 291.973665][ T5689] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.973714][ T5689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.976599][ T5689] usb 5-1: config 0 descriptor?? [ 292.025074][ T5689] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input80 [ 292.209587][ T9280] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1086'. [ 292.228957][ T5711] usb 5-1: USB disconnect, device number 42 [ 292.281947][ T5678] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 292.324667][ T9283] FAULT_INJECTION: forcing a failure. [ 292.324667][ T9283] name failslab, interval 1, probability 0, space 0, times 0 [ 292.324703][ T9283] CPU: 1 UID: 0 PID: 9283 Comm: syz.5.1087 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 292.324736][ T9283] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 292.324746][ T9283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 292.324760][ T9283] Call Trace: [ 292.324770][ T9283] [ 292.324780][ T9283] dump_stack_lvl+0xe8/0x150 [ 292.324818][ T9283] should_fail_ex+0x3eb/0x540 [ 292.324859][ T9283] should_failslab+0xa8/0x100 [ 292.324886][ T9283] ? __kernfs_new_node+0xe6/0x980 [ 292.324911][ T9283] kmem_cache_alloc_noprof+0x9c/0x600 [ 292.324944][ T9283] ? __kernfs_new_node+0xe6/0x980 [ 292.324977][ T9283] __kernfs_new_node+0xe6/0x980 [ 292.325016][ T9283] ? __pfx___kernfs_new_node+0x10/0x10 [ 292.325043][ T9283] ? lock_acquire+0x115/0x350 [ 292.325076][ T9283] ? kernfs_root+0x1c/0x230 [ 292.325115][ T9283] ? kernfs_root+0x1c/0x230 [ 292.325142][ T9283] ? kernfs_root+0x1c/0x230 [ 292.325166][ T9283] ? kernfs_root+0x1c/0x230 [ 292.325196][ T9283] kernfs_new_node+0xeb/0x140 [ 292.325230][ T9283] kernfs_create_link+0xe3/0x240 [ 292.325269][ T9283] sysfs_do_create_link_sd+0x83/0x110 [ 292.325299][ T9283] driver_sysfs_add+0xec/0x210 [ 292.325335][ T9283] really_probe+0x142/0xae0 [ 292.325373][ T9283] __driver_probe_device+0x1e8/0x360 [ 292.325410][ T9283] driver_probe_device+0x4f/0x240 [ 292.325448][ T9283] __driver_attach+0x34e/0x630 [ 292.325485][ T9283] bus_for_each_dev+0x23b/0x2c0 [ 292.325515][ T9283] ? __pfx___driver_attach+0x10/0x10 [ 292.325548][ T9283] ? __pfx_bus_for_each_dev+0x10/0x10 [ 292.325578][ T9283] ? do_raw_spin_unlock+0xf5/0x200 [ 292.325613][ T9283] bus_add_driver+0x38f/0x6e0 [ 292.325650][ T9283] driver_register+0x23a/0x320 [ 292.325689][ T9283] usb_gadget_register_driver_owner+0xf9/0x270 [ 292.325720][ T9283] raw_ioctl+0x1541/0x41c0 [ 292.325759][ T9283] ? tomoyo_path_number_perm+0x219/0x5f0 [ 292.325799][ T9283] ? do_vfs_ioctl+0x116f/0x1530 [ 292.325830][ T9283] ? __pfx_raw_ioctl+0x10/0x10 [ 292.325865][ T9283] ? handle_mm_fault+0xee/0x3540 [ 292.325926][ T9283] ? __fget_files+0x2a/0x420 [ 292.325965][ T9283] ? __fget_files+0x2a/0x420 [ 292.326001][ T9283] ? __fget_files+0x2a/0x420 [ 292.326041][ T9283] ? bpf_lsm_file_ioctl+0x9/0x20 [ 292.326085][ T9283] ? __pfx_raw_ioctl+0x10/0x10 [ 292.326117][ T9283] __se_sys_ioctl+0xfc/0x170 [ 292.326147][ T9283] do_syscall_64+0x166/0x520 [ 292.326174][ T9283] ? trace_irq_disable+0x3b/0x140 [ 292.326199][ T9283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.326234][ T9283] ? clear_bhb_loop+0x70/0xc0 [ 292.326267][ T9283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.326290][ T9283] RIP: 0033:0x7f7ca079f1eb [ 292.326311][ T9283] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 292.326329][ T9283] RSP: 002b:00007f7ca15cef00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.326352][ T9283] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f7ca079f1eb [ 292.326367][ T9283] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 292.326380][ T9283] RBP: 00007f7ca15cffd0 R08: 0000000000000001 R09: 00000000ffffffff [ 292.326394][ T9283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.326407][ T9283] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 292.326439][ T9283] [ 292.326543][ T9283] raw-gadget.1 gadget.5: really_probe: driver_sysfs_add failed [ 292.327134][ T9283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.327624][ T9283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.484390][ T5678] usb 3-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 292.513191][ T5678] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 292.513248][ T5678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.744463][ T5678] usb 3-1: config 0 descriptor?? [ 292.775001][ T5678] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input81 [ 292.909294][ T9292] FAULT_INJECTION: forcing a failure. [ 292.909294][ T9292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.909329][ T9292] CPU: 1 UID: 0 PID: 9292 Comm: syz.4.1089 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 292.909362][ T9292] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 292.909372][ T9292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 292.909386][ T9292] Call Trace: [ 292.909396][ T9292] [ 292.909406][ T9292] dump_stack_lvl+0xe8/0x150 [ 292.909441][ T9292] should_fail_ex+0x3eb/0x540 [ 292.909481][ T9292] _copy_from_user+0x2d/0xb0 [ 292.909504][ T9292] ___sys_sendmsg+0x1c6/0x360 [ 292.909539][ T9292] ? __lock_acquire+0x747/0x2de0 [ 292.909567][ T9292] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.909652][ T9292] ? __fget_files+0x3a2/0x420 [ 292.909687][ T9292] ? __fget_files+0x2a/0x420 [ 292.909733][ T9292] __x64_sys_sendmsg+0x1b1/0x290 [ 292.909765][ T9292] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.909821][ T9292] do_syscall_64+0x166/0x520 [ 292.909848][ T9292] ? trace_irq_disable+0x3b/0x140 [ 292.909873][ T9292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.909897][ T9292] ? clear_bhb_loop+0x70/0xc0 [ 292.909926][ T9292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.909950][ T9292] RIP: 0033:0x7f44e139f559 [ 292.909971][ T9292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.909991][ T9292] RSP: 002b:00007f44e21db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.910015][ T9292] RAX: ffffffffffffffda RBX: 00007f44e1625fa0 RCX: 00007f44e139f559 [ 292.910033][ T9292] RDX: 00000000000000c0 RSI: 0000200000004d40 RDI: 0000000000000003 [ 292.910048][ T9292] RBP: 00007f44e21db090 R08: 0000000000000000 R09: 0000000000000000 [ 292.910063][ T9292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.910077][ T9292] R13: 00007f44e1626038 R14: 00007f44e1625fa0 R15: 00007ffe4541ede8 [ 292.910114][ T9292] [ 293.189553][ T5689] usb 3-1: USB disconnect, device number 82 [ 293.582870][ T5756] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 293.732192][ T5756] usb 5-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 293.735342][ T5756] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 293.735396][ T5756] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 293.735424][ T5756] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 293.735453][ T5756] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 293.735488][ T5756] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.735532][ T5756] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.746588][ T5756] usb 5-1: config 0 descriptor?? [ 293.749194][ T9312] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 294.238826][ T5756] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 294.258520][ T5697] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 294.412259][ T5697] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 294.413817][ T5697] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 294.414990][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 294.415017][ T5697] usb 3-1: SerialNumber: syz [ 294.415370][ T5756] usb 5-1: USB disconnect, device number 43 [ 294.576533][ T9334] syzkaller1: entered promiscuous mode [ 294.576560][ T9334] syzkaller1: entered allmulticast mode [ 294.581338][ T5611] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 294.762543][ T5611] usb 7-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 294.763947][ T5611] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.764022][ T5611] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.767503][ T5611] usb 7-1: config 0 descriptor?? [ 294.828079][ T5611] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input82 [ 294.883980][ T10] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 294.905165][ T5697] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 294.927511][ T5697] usb 3-1: USB disconnect, device number 83 [ 294.987852][ T5611] usb 7-1: USB disconnect, device number 46 [ 295.034901][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 295.035922][ T10] usb 6-1: New USB device found: idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 295.042307][ T10] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 295.042410][ T10] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 295.042466][ T10] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 295.042525][ T10] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 295.042578][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 295.042651][ T10] usb 6-1: config 0 has no interface number 0 [ 295.042767][ T10] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 295.042854][ T10] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 295.042910][ T10] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 295.042998][ T10] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.043070][ T10] usb 6-1: config 0 interface 125 has no altsetting 2 [ 295.070323][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.070406][ T10] usb 6-1: Product: syz [ 295.070449][ T10] usb 6-1: Manufacturer: syz [ 295.070491][ T10] usb 6-1: SerialNumber: syz [ 295.152847][ T10] usb 6-1: config 0 descriptor?? [ 295.207172][ T10] usb 6-1: selecting invalid altsetting 2 [ 295.207203][ T10] uss720 6-1:0.125: probe with driver uss720 failed with error -22 [ 295.409840][ T5611] usb 6-1: USB disconnect, device number 48 [ 295.532842][ T5678] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 295.661841][ T9359] binder: Failure when writing BR_NOOP at beginning of buffer. [ 295.661989][ T9359] binder: Read failure Err(EFAULT) in pid:314 [ 295.695736][ T9352] kvm: pic: non byte write [ 295.706363][ T5678] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 295.707805][ T5678] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 295.709393][ T5678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 295.709420][ T5678] usb 5-1: SerialNumber: syz [ 296.063254][ T9372] kvm: pic: non byte write [ 296.074991][ T9372] FAULT_INJECTION: forcing a failure. [ 296.074991][ T9372] name failslab, interval 1, probability 0, space 0, times 0 [ 296.075025][ T9372] CPU: 0 UID: 0 PID: 9372 Comm: syz.6.1103 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 296.075058][ T9372] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 296.075085][ T9372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 296.075100][ T9372] Call Trace: [ 296.075109][ T9372] [ 296.075119][ T9372] dump_stack_lvl+0xe8/0x150 [ 296.075156][ T9372] should_fail_ex+0x3eb/0x540 [ 296.075198][ T9372] should_failslab+0xa8/0x100 [ 296.075229][ T9372] __kmalloc_noprof+0xf9/0x710 [ 296.075262][ T9372] ? rcu_is_watching+0x16/0xb0 [ 296.075292][ T9372] ? tomoyo_realpath_from_path+0xef/0x640 [ 296.075317][ T9372] ? tomoyo_realpath_from_path+0xef/0x640 [ 296.075352][ T9372] tomoyo_realpath_from_path+0xef/0x640 [ 296.075387][ T9372] ? tomoyo_path_number_perm+0x219/0x5f0 [ 296.075434][ T9372] tomoyo_path_number_perm+0x246/0x5f0 [ 296.075501][ T9372] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 296.075551][ T9372] ? __lock_acquire+0x747/0x2de0 [ 296.075615][ T9372] ? __fget_files+0x2a/0x420 [ 296.075654][ T9372] ? __fget_files+0x2a/0x420 [ 296.075690][ T9372] ? __fget_files+0x2a/0x420 [ 296.075729][ T9372] security_file_ioctl+0xc3/0x2a0 [ 296.075762][ T9372] __se_sys_ioctl+0x47/0x170 [ 296.075791][ T9372] do_syscall_64+0x166/0x520 [ 296.075826][ T9372] ? trace_irq_disable+0x3b/0x140 [ 296.075851][ T9372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.075875][ T9372] ? clear_bhb_loop+0x70/0xc0 [ 296.075922][ T9372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.075946][ T9372] RIP: 0033:0x7f7813d9f559 [ 296.075968][ T9372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.075989][ T9372] RSP: 002b:00007f7814bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.076014][ T9372] RAX: ffffffffffffffda RBX: 00007f7814026090 RCX: 00007f7813d9f559 [ 296.076031][ T9372] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 296.076045][ T9372] RBP: 00007f7814bb5090 R08: 0000000000000000 R09: 0000000000000000 [ 296.076059][ T9372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.076074][ T9372] R13: 00007f7814026128 R14: 00007f7814026090 R15: 00007ffff78ac1c8 [ 296.076111][ T9372] [ 296.086718][ T9372] ERROR: Out of memory at tomoyo_realpath_from_path. [ 296.618226][ T9384] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 296.831160][ T5611] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 296.911198][ T5756] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 296.919786][ T9397] FAULT_INJECTION: forcing a failure. [ 296.919786][ T9397] name failslab, interval 1, probability 0, space 0, times 0 [ 296.919822][ T9397] CPU: 0 UID: 0 PID: 9397 Comm: syz.5.1112 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 296.919855][ T9397] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 296.919865][ T9397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 296.919878][ T9397] Call Trace: [ 296.919886][ T9397] [ 296.919896][ T9397] dump_stack_lvl+0xe8/0x150 [ 296.919944][ T9397] should_fail_ex+0x3eb/0x540 [ 296.919985][ T9397] should_failslab+0xa8/0x100 [ 296.920013][ T9397] __kmalloc_noprof+0xf9/0x710 [ 296.920047][ T9397] ? kernfs_fop_write_iter+0x157/0x540 [ 296.920071][ T9397] ? kernfs_fop_write_iter+0x157/0x540 [ 296.920118][ T9397] kernfs_fop_write_iter+0x157/0x540 [ 296.920157][ T9397] vfs_write+0x612/0xba0 [ 296.920190][ T9397] ? __pfx_vfs_write+0x10/0x10 [ 296.920210][ T9397] ? __fget_files+0x3a2/0x420 [ 296.920234][ T9397] ? __fget_files+0x2a/0x420 [ 296.920290][ T9397] ? fdget+0x1ac/0x250 [ 296.920319][ T9397] ksys_write+0x150/0x270 [ 296.920347][ T9397] ? __pfx_ksys_write+0x10/0x10 [ 296.920386][ T9397] do_syscall_64+0x166/0x520 [ 296.920407][ T9397] ? trace_irq_disable+0x3b/0x140 [ 296.920446][ T9397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.920468][ T9397] ? clear_bhb_loop+0x70/0xc0 [ 296.920495][ T9397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.920518][ T9397] RIP: 0033:0x7f7ca079f559 [ 296.920533][ T9397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.920548][ T9397] RSP: 002b:00007f7ca15d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 296.920577][ T9397] RAX: ffffffffffffffda RBX: 00007f7ca0a25fa0 RCX: 00007f7ca079f559 [ 296.920595][ T9397] RDX: 0000000000000012 RSI: 0000200000000380 RDI: 0000000000000003 [ 296.920610][ T9397] RBP: 00007f7ca15d1090 R08: 0000000000000000 R09: 0000000000000000 [ 296.920624][ T9397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.920637][ T9397] R13: 00007f7ca0a26038 R14: 00007f7ca0a25fa0 R15: 00007ffc3f6ff8f8 [ 296.920674][ T9397] [ 297.037881][ T5611] usb 7-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 297.074430][ T5756] usb 3-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 297.074538][ T5611] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 297.074591][ T5611] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 297.074621][ T5611] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 297.074678][ T5611] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 297.074708][ T5611] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 297.074753][ T5611] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.079601][ T5756] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.079738][ T5756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.194293][ T5756] usb 3-1: config 0 descriptor?? [ 297.269560][ T5611] usb 7-1: config 0 descriptor?? [ 297.275423][ T9387] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 297.279319][ T5756] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input83 [ 297.427663][ T9401] kAFS: No cell specified [ 297.440128][ T5756] usb 3-1: USB disconnect, device number 84 [ 297.704390][ T5611] hid_parser_main: 20 callbacks suppressed [ 297.704410][ T5611] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 297.704452][ T5611] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 297.704473][ T5611] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 297.704493][ T5611] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 297.704512][ T5611] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 297.704531][ T5611] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 297.704551][ T5611] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 297.704585][ T5611] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 297.704605][ T5611] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 297.704624][ T5611] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 297.788449][ T5711] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 297.803198][ T5611] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 297.907194][ T5611] usb 7-1: USB disconnect, device number 47 [ 297.953246][ T5711] usb 6-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 297.956597][ T5711] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 297.956617][ T5711] usb 6-1: Product: syz [ 297.956629][ T5711] usb 6-1: SerialNumber: syz [ 297.960842][ T5711] usb 6-1: config 0 descriptor?? [ 298.204593][ T5711] usb 6-1: USB disconnect, device number 49 [ 298.311126][ T5756] usb 3-1: new low-speed USB device number 85 using dummy_hcd [ 298.323464][ T5678] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 298.340766][ T5678] usb 5-1: USB disconnect, device number 44 [ 298.446172][ T9410] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 298.464022][ T5756] usb 3-1: New USB device found: idVendor=1b3d, idProduct=0197, bcdDevice=ad.42 [ 298.468620][ T5756] usb 3-1: config 6 has an invalid interface number: 113 but max is 0 [ 298.468656][ T5756] usb 3-1: config 6 has no interface number 0 [ 298.497222][ T5756] usb 3-1: string descriptor 0 read error: -22 [ 298.497367][ T5756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.523075][ T5756] ftdi_sio 3-1:6.113: FTDI USB Serial Device converter detected [ 298.526353][ T5756] ftdi_sio ttyUSB0: unknown device type: 0xad42 [ 298.576127][ T9412] kAFS: No cell specified [ 298.713986][ T9422] tmpfs: Bad value for 'mpol' [ 298.749344][ T5678] usb 3-1: USB disconnect, device number 85 [ 298.762920][ T5678] ftdi_sio 3-1:6.113: device disconnected [ 299.051067][ T5711] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 299.202454][ T5711] usb 6-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 299.203507][ T5711] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.203552][ T5711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.206381][ T5711] usb 6-1: config 0 descriptor?? [ 299.251762][ T5711] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input84 [ 299.476620][ T9432] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 299.497211][ T9434] FAULT_INJECTION: forcing a failure. [ 299.497211][ T9434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.497246][ T9434] CPU: 1 UID: 0 PID: 9434 Comm: syz.4.1129 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 299.497278][ T9434] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 299.497288][ T9434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 299.497302][ T9434] Call Trace: [ 299.497311][ T9434] [ 299.497320][ T9434] dump_stack_lvl+0xe8/0x150 [ 299.497355][ T9434] should_fail_ex+0x3eb/0x540 [ 299.497394][ T9434] _copy_from_user+0x2d/0xb0 [ 299.497417][ T9434] ___sys_sendmsg+0x1c6/0x360 [ 299.497444][ T9434] ? __lock_acquire+0x747/0x2de0 [ 299.497471][ T9434] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.497537][ T9434] ? __fget_files+0x3a2/0x420 [ 299.497575][ T9434] ? __fget_files+0x2a/0x420 [ 299.497620][ T9434] __x64_sys_sendmsg+0x1b1/0x290 [ 299.497657][ T9434] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 299.497708][ T9434] do_syscall_64+0x166/0x520 [ 299.497733][ T9434] ? trace_irq_disable+0x3b/0x140 [ 299.497758][ T9434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.497782][ T9434] ? clear_bhb_loop+0x70/0xc0 [ 299.497809][ T9434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.497832][ T9434] RIP: 0033:0x7f44e139f559 [ 299.497852][ T9434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.497871][ T9434] RSP: 002b:00007f44e21db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.497895][ T9434] RAX: ffffffffffffffda RBX: 00007f44e1625fa0 RCX: 00007f44e139f559 [ 299.497912][ T9434] RDX: 000000000c008880 RSI: 0000200000000340 RDI: 0000000000000003 [ 299.497928][ T9434] RBP: 00007f44e21db090 R08: 0000000000000000 R09: 0000000000000000 [ 299.497942][ T9434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.497956][ T9434] R13: 00007f44e1626038 R14: 00007f44e1625fa0 R15: 00007ffe4541ede8 [ 299.497992][ T9434] [ 299.502431][ T5756] usb 6-1: USB disconnect, device number 50 [ 300.061083][ T5689] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 300.082605][ T5711] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 300.101606][ T9450] FAULT_INJECTION: forcing a failure. [ 300.101606][ T9450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.101646][ T9450] CPU: 1 UID: 0 PID: 9450 Comm: syz.6.1136 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 300.101690][ T9450] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 300.101700][ T9450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 300.101714][ T9450] Call Trace: [ 300.101723][ T9450] [ 300.101751][ T9450] dump_stack_lvl+0xe8/0x150 [ 300.101787][ T9450] should_fail_ex+0x3eb/0x540 [ 300.101828][ T9450] _copy_to_user+0x31/0xb0 [ 300.101865][ T9450] simple_read_from_buffer+0xe1/0x170 [ 300.101905][ T9450] proc_fail_nth_read+0x1bb/0x230 [ 300.101942][ T9450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.101973][ T9450] ? rw_verify_area+0x24a/0x4c0 [ 300.101998][ T9450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.102024][ T9450] vfs_read+0x213/0xa80 [ 300.102052][ T9450] ? __pfx___mutex_lock+0x10/0x10 [ 300.102081][ T9450] ? __pfx_vfs_read+0x10/0x10 [ 300.102117][ T9450] ? __fget_files+0x2a/0x420 [ 300.102169][ T9450] ? __fget_files+0x3a2/0x420 [ 300.102203][ T9450] ? __fget_files+0x2a/0x420 [ 300.102243][ T9450] ? fdget+0x1ac/0x250 [ 300.102271][ T9450] ksys_read+0x150/0x270 [ 300.102297][ T9450] ? __pfx_ksys_read+0x10/0x10 [ 300.102336][ T9450] do_syscall_64+0x166/0x520 [ 300.102364][ T9450] ? trace_irq_disable+0x3b/0x140 [ 300.102389][ T9450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.102413][ T9450] ? clear_bhb_loop+0x70/0xc0 [ 300.102441][ T9450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.102465][ T9450] RIP: 0033:0x7f7813d5fd8e [ 300.102486][ T9450] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 300.102506][ T9450] RSP: 002b:00007f7814bd6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 300.102530][ T9450] RAX: ffffffffffffffda RBX: 00007f7814bd76c0 RCX: 00007f7813d5fd8e [ 300.102547][ T9450] RDX: 000000000000000f RSI: 00007f7814bd70a0 RDI: 0000000000000004 [ 300.102562][ T9450] RBP: 00007f7814bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 300.102577][ T9450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.102591][ T9450] R13: 00007f7814026038 R14: 00007f7814025fa0 R15: 00007ffff78ac1c8 [ 300.102630][ T9450] [ 300.251214][ T5689] usb 5-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 300.275190][ T5689] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.275275][ T5689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.307093][ T5689] usb 5-1: config 0 descriptor?? [ 300.341230][ T5711] usb 3-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 300.406997][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 300.407028][ T5711] usb 3-1: Product: syz [ 300.407045][ T5711] usb 3-1: SerialNumber: syz [ 300.421705][ T5689] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input85 [ 300.439179][ T5711] usb 3-1: config 0 descriptor?? [ 300.584255][ T9456] FAULT_INJECTION: forcing a failure. [ 300.584255][ T9456] name failslab, interval 1, probability 0, space 0, times 0 [ 300.584291][ T9456] CPU: 0 UID: 0 PID: 9456 Comm: syz.5.1139 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 300.584323][ T9456] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 300.584332][ T9456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 300.584347][ T9456] Call Trace: [ 300.584357][ T9456] [ 300.584367][ T9456] dump_stack_lvl+0xe8/0x150 [ 300.584405][ T9456] should_fail_ex+0x3eb/0x540 [ 300.584443][ T9456] ? __alloc_skb+0x1db/0x7a0 [ 300.584467][ T9456] should_failslab+0xa8/0x100 [ 300.584496][ T9456] ? __alloc_skb+0x1db/0x7a0 [ 300.584519][ T9456] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 300.584552][ T9456] ? __alloc_skb+0x18d/0x7a0 [ 300.584577][ T9456] ? __alloc_skb+0x1db/0x7a0 [ 300.584607][ T9456] __alloc_skb+0x1db/0x7a0 [ 300.584637][ T9456] netlink_sendmsg+0x5cd/0xb20 [ 300.584681][ T9456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.584721][ T9456] ? aa_sock_msg_perm+0x144/0x210 [ 300.584749][ T9456] ? apparmor_socket_sendmsg+0x98/0x360 [ 300.584780][ T9456] ? lock_acquire+0x115/0x350 [ 300.584805][ T9456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.584840][ T9456] sock_sendmsg_nosec+0x14e/0x190 [ 300.584877][ T9456] sock_write_iter+0x2de/0x3e0 [ 300.584917][ T9456] ? __pfx_sock_write_iter+0x10/0x10 [ 300.584959][ T9456] ? bpf_lsm_file_permission+0x9/0x20 [ 300.584984][ T9456] ? security_file_permission+0x75/0x260 [ 300.585024][ T9456] vfs_write+0x612/0xba0 [ 300.585065][ T9456] ? __pfx_vfs_write+0x10/0x10 [ 300.585093][ T9456] ? __fget_files+0x3a2/0x420 [ 300.585129][ T9456] ? __fget_files+0x2a/0x420 [ 300.585169][ T9456] ? fdget+0x1ac/0x250 [ 300.585198][ T9456] ksys_write+0x150/0x270 [ 300.585226][ T9456] ? __pfx_ksys_write+0x10/0x10 [ 300.585265][ T9456] do_syscall_64+0x166/0x520 [ 300.585294][ T9456] ? trace_irq_disable+0x3b/0x140 [ 300.585319][ T9456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.585344][ T9456] ? clear_bhb_loop+0x70/0xc0 [ 300.585373][ T9456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.585397][ T9456] RIP: 0033:0x7f7ca079f559 [ 300.585419][ T9456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.585440][ T9456] RSP: 002b:00007f7ca15d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 300.585464][ T9456] RAX: ffffffffffffffda RBX: 00007f7ca0a25fa0 RCX: 00007f7ca079f559 [ 300.585480][ T9456] RDX: 0000000000000030 RSI: 0000200000000140 RDI: 0000000000000003 [ 300.585495][ T9456] RBP: 00007f7ca15d1090 R08: 0000000000000000 R09: 0000000000000000 [ 300.585510][ T9456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.585524][ T9456] R13: 00007f7ca0a26038 R14: 00007f7ca0a25fa0 R15: 00007ffc3f6ff8f8 [ 300.585561][ T9456] [ 300.878211][ T5711] usb 3-1: USB disconnect, device number 86 [ 300.944813][ T9458] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 301.019164][ T9462] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1141'. [ 301.621014][ T1125] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 301.771609][ T1125] usb 7-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 301.772908][ T1125] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 301.772957][ T1125] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.775742][ T1125] usb 7-1: config 0 descriptor?? [ 301.846131][ T1125] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input86 [ 302.109759][ T1125] usb 5-1: USB disconnect, device number 45 [ 302.139398][ T5689] usb 7-1: USB disconnect, device number 48 [ 303.141810][ T9504] kvm: pic: non byte write [ 303.158384][ T1125] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 303.260408][ T9508] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 303.300979][ T1125] usb 5-1: Using ep0 maxpacket: 16 [ 303.301697][ T1125] usb 5-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 303.305334][ T1125] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 303.305368][ T1125] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 303.305394][ T1125] usb 5-1: config 0 interface 0 has no altsetting 0 [ 303.308438][ T1125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.308482][ T1125] usb 5-1: Product: syz [ 303.308500][ T1125] usb 5-1: Manufacturer: syz [ 303.308518][ T1125] usb 5-1: SerialNumber: syz [ 303.378830][ T1125] usb 5-1: config 0 descriptor?? [ 303.612750][ T1125] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 303.612864][ T1125] imon 5-1:0.0: unable to initialize intf0, err -90 [ 303.641903][ T1125] usb 5-1: USB disconnect, device number 46 [ 303.722956][ T9518] kvm: pic: non byte write [ 303.832738][ T5689] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 303.961194][ T5689] usb 6-1: device descriptor read/64, error -71 [ 304.204236][ T5689] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 304.352379][ T5689] usb 6-1: device descriptor read/64, error -71 [ 304.410757][ T9] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 304.430750][ T5756] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 304.461139][ T5689] usb usb6-port1: attempt power cycle [ 304.561565][ T9] usb 7-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 304.564692][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.564744][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.570380][ T9] usb 7-1: config 0 descriptor?? [ 304.607613][ T5756] usb 5-1: New USB device found: idVendor=04b8, idProduct=0202, bcdDevice=0.40 [ 304.613761][ T5756] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 39968, setting to 64 [ 304.634374][ T9] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input87 [ 304.634855][ T5756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.634881][ T5756] usb 5-1: Product: syz [ 304.634897][ T5756] usb 5-1: Manufacturer: syz [ 304.634914][ T5756] usb 5-1: SerialNumber: syz [ 304.681838][ T9497] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 304.820789][ T5689] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 304.847268][ T5689] usb 6-1: device descriptor read/8, error -71 [ 304.862821][ T9] usb 7-1: USB disconnect, device number 49 [ 304.927620][ T5756] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 304.949758][ T5756] usb 5-1: USB disconnect, device number 47 [ 304.985450][ T5756] usblp0: removed [ 305.090664][ T5689] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 305.111323][ T5689] usb 6-1: device descriptor read/8, error -71 [ 305.130462][ T9556] FAULT_INJECTION: forcing a failure. [ 305.130462][ T9556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.130499][ T9556] CPU: 0 UID: 0 PID: 9556 Comm: syz.2.1156 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 305.130532][ T9556] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 305.130542][ T9556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 305.130561][ T9556] Call Trace: [ 305.130570][ T9556] [ 305.130579][ T9556] dump_stack_lvl+0xe8/0x150 [ 305.130615][ T9556] should_fail_ex+0x3eb/0x540 [ 305.130655][ T9556] _copy_from_user+0x2d/0xb0 [ 305.130678][ T9556] vga_arb_write+0x11d/0x2230 [ 305.130707][ T9556] ? __pfx_vga_arb_write+0x10/0x10 [ 305.130742][ T9556] ? bpf_lsm_file_permission+0x9/0x20 [ 305.130765][ T9556] ? security_file_permission+0x75/0x260 [ 305.130798][ T9556] ? rw_verify_area+0x203/0x4c0 [ 305.130822][ T9556] ? __pfx_vga_arb_write+0x10/0x10 [ 305.130848][ T9556] vfs_write+0x296/0xba0 [ 305.130881][ T9556] ? __pfx_vfs_write+0x10/0x10 [ 305.130907][ T9556] ? __fget_files+0x2a/0x420 [ 305.130940][ T9556] ? __fget_files+0x3a2/0x420 [ 305.130992][ T9556] ? __fget_files+0x2a/0x420 [ 305.131030][ T9556] ? fdget+0x1ac/0x250 [ 305.131058][ T9556] ksys_write+0x150/0x270 [ 305.131083][ T9556] ? __pfx_ksys_write+0x10/0x10 [ 305.131119][ T9556] do_syscall_64+0x166/0x520 [ 305.131146][ T9556] ? trace_irq_disable+0x3b/0x140 [ 305.131170][ T9556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.131193][ T9556] ? clear_bhb_loop+0x70/0xc0 [ 305.131221][ T9556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.131245][ T9556] RIP: 0033:0x7fa21c99f559 [ 305.131266][ T9556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.131299][ T9556] RSP: 002b:00007fa21d8dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 305.131322][ T9556] RAX: ffffffffffffffda RBX: 00007fa21cc25fa0 RCX: 00007fa21c99f559 [ 305.131339][ T9556] RDX: 000000000000000e RSI: 0000200000000040 RDI: 0000000000000003 [ 305.131353][ T9556] RBP: 00007fa21d8dd090 R08: 0000000000000000 R09: 0000000000000000 [ 305.131368][ T9556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.131381][ T9556] R13: 00007fa21cc26038 R14: 00007fa21cc25fa0 R15: 00007ffe97a80b98 [ 305.131416][ T9556] [ 305.231928][ T5689] usb usb6-port1: unable to enumerate USB device [ 305.642236][ T5689] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 305.791360][ T5689] usb 3-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 305.792547][ T5689] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.792596][ T5689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.800092][ T5689] usb 3-1: config 0 descriptor?? [ 305.866626][ T5689] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input88 [ 306.156819][ T5689] usb 3-1: USB disconnect, device number 87 [ 306.276215][ T9581] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 306.791262][ T9599] FAULT_INJECTION: forcing a failure. [ 306.791262][ T9599] name failslab, interval 1, probability 0, space 0, times 0 [ 306.791299][ T9599] CPU: 0 UID: 0 PID: 9599 Comm: syz.5.1165 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 306.791334][ T9599] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 306.791344][ T9599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 306.791358][ T9599] Call Trace: [ 306.791368][ T9599] [ 306.791378][ T9599] dump_stack_lvl+0xe8/0x150 [ 306.791414][ T9599] should_fail_ex+0x3eb/0x540 [ 306.791454][ T9599] should_failslab+0xa8/0x100 [ 306.791483][ T9599] __kmalloc_noprof+0xf9/0x710 [ 306.791515][ T9599] ? rcu_is_watching+0x16/0xb0 [ 306.791544][ T9599] ? tomoyo_realpath_from_path+0xef/0x640 [ 306.791568][ T9599] ? tomoyo_realpath_from_path+0xef/0x640 [ 306.791602][ T9599] tomoyo_realpath_from_path+0xef/0x640 [ 306.791639][ T9599] ? tomoyo_path_number_perm+0x219/0x5f0 [ 306.791672][ T9599] tomoyo_path_number_perm+0x246/0x5f0 [ 306.791710][ T9599] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 306.791741][ T9599] ? __lock_acquire+0x747/0x2de0 [ 306.791811][ T9599] ? __fget_files+0x2a/0x420 [ 306.791851][ T9599] ? __fget_files+0x2a/0x420 [ 306.791887][ T9599] ? __fget_files+0x2a/0x420 [ 306.791927][ T9599] security_file_ioctl+0xc3/0x2a0 [ 306.791962][ T9599] __se_sys_ioctl+0x47/0x170 [ 306.791992][ T9599] do_syscall_64+0x166/0x520 [ 306.792020][ T9599] ? trace_irq_disable+0x3b/0x140 [ 306.792045][ T9599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.792077][ T9599] ? clear_bhb_loop+0x70/0xc0 [ 306.792107][ T9599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.792131][ T9599] RIP: 0033:0x7f7ca079f559 [ 306.792152][ T9599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.792172][ T9599] RSP: 002b:00007f7ca15d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.792196][ T9599] RAX: ffffffffffffffda RBX: 00007f7ca0a25fa0 RCX: 00007f7ca079f559 [ 306.792214][ T9599] RDX: 0000000000000000 RSI: 0000000000001274 RDI: 0000000000000003 [ 306.792228][ T9599] RBP: 00007f7ca15d1090 R08: 0000000000000000 R09: 0000000000000000 [ 306.792243][ T9599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.792258][ T9599] R13: 00007f7ca0a26038 R14: 00007f7ca0a25fa0 R15: 00007ffc3f6ff8f8 [ 306.792294][ T9599] [ 306.794135][ T9599] ERROR: Out of memory at tomoyo_realpath_from_path. [ 307.360649][ T5689] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 307.435017][ T9607] IPVS: set_ctl: invalid protocol: 50 172.30.1.5:20004 [ 307.514671][ T5689] usb 6-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 307.516422][ T5689] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.516471][ T5689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.536438][ T5689] usb 6-1: config 0 descriptor?? [ 307.574648][ T5689] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input89 [ 307.738355][ T9611] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 307.771616][ T9616] overlay: Bad value for 'redirect_dir' [ 307.799100][ T10] usb 6-1: USB disconnect, device number 55 [ 307.879472][ T9620] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input90 [ 308.230542][ T5711] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 308.357900][ T9628] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.381351][ T5711] usb 5-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 308.382834][ T5711] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.382883][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.385628][ T5711] usb 5-1: config 0 descriptor?? [ 308.438842][ T5711] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input91 [ 308.603287][ T9632] qrtr: Invalid version 0 [ 308.630703][ T5711] usb 5-1: USB disconnect, device number 48 [ 308.873692][ T9639] netlink: 120 bytes leftover after parsing attributes in process `syz.6.1178'. [ 309.020485][ T5697] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 309.120074][ T9643] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 309.175374][ T5697] usb 3-1: Using ep0 maxpacket: 8 [ 309.176097][ T5697] usb 3-1: New USB device found: idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 309.178810][ T5697] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 309.178835][ T5697] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 309.178856][ T5697] usb 3-1: config 6 has no interface number 0 [ 309.178905][ T5697] usb 3-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 309.191196][ T5697] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 309.191262][ T5697] usb 3-1: Product: syz [ 309.191306][ T5697] usb 3-1: Manufacturer: syz [ 309.191355][ T5697] usb 3-1: SerialNumber: syz [ 309.238284][ T5697] hso 3-1:6.2: Failed to find INT IN ep [ 309.428098][ T5697] usb 3-1: USB disconnect, device number 88 [ 309.630777][ T5711] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 309.783797][ T5711] usb 7-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 309.784969][ T5711] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.785015][ T5711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.788278][ T5711] usb 7-1: config 0 descriptor?? [ 309.829809][ T5711] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input92 [ 309.970624][ T1125] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 310.013446][ T5689] usb 7-1: USB disconnect, device number 50 [ 310.089079][ T9656] exfat: Deprecated parameter 'debug' [ 310.101148][ T9656] exFAT-fs (nullb0): invalid boot record signature [ 310.101164][ T9656] exFAT-fs (nullb0): failed to read boot sector [ 310.101174][ T9656] exFAT-fs (nullb0): failed to recognize exfat type [ 310.132567][ T1125] usb 6-1: unable to get BOS descriptor or descriptor too short [ 310.132604][ T1125] usb 6-1: New USB device found: idVendor=0c12, idProduct=f40a, bcdDevice=19.0d [ 310.137575][ T1125] usb 6-1: config 3 has an invalid interface number: 73 but max is 0 [ 310.137602][ T1125] usb 6-1: config 3 has no interface number 0 [ 310.137641][ T1125] usb 6-1: config 3 interface 73 altsetting 224 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 310.137663][ T1125] usb 6-1: config 3 interface 73 has no altsetting 0 [ 310.152673][ T1125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.152752][ T1125] usb 6-1: Product: syz [ 310.182493][ T1125] usb 6-1: Manufacturer: syz [ 310.182782][ T1125] usb 6-1: SerialNumber: syz [ 310.583005][ T9661] sctp: [Deprecated]: syz.5.1184 (pid 9661) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.583005][ T9661] Use struct sctp_sack_info instead [ 311.310316][ T5689] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 311.435084][ T9673] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 311.473600][ T5689] usb 3-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 311.474970][ T5689] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.475020][ T5689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.478833][ T5689] usb 3-1: config 0 descriptor?? [ 311.528058][ T5689] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input93 [ 311.665163][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1193'. [ 311.688133][ T9683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1193'. [ 311.743743][ T5711] usb 3-1: USB disconnect, device number 89 [ 311.813233][ T9687] FAULT_INJECTION: forcing a failure. [ 311.813233][ T9687] name failslab, interval 1, probability 0, space 0, times 0 [ 311.813269][ T9687] CPU: 0 UID: 0 PID: 9687 Comm: syz.4.1196 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 311.813301][ T9687] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 311.813311][ T9687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 311.813327][ T9687] Call Trace: [ 311.813337][ T9687] [ 311.813346][ T9687] dump_stack_lvl+0xe8/0x150 [ 311.813383][ T9687] should_fail_ex+0x3eb/0x540 [ 311.813422][ T9687] should_failslab+0xa8/0x100 [ 311.813451][ T9687] __kmalloc_noprof+0xf9/0x710 [ 311.813487][ T9687] ? rcu_is_watching+0x16/0xb0 [ 311.813515][ T9687] ? tomoyo_realpath_from_path+0xef/0x640 [ 311.813538][ T9687] ? tomoyo_realpath_from_path+0xef/0x640 [ 311.813571][ T9687] tomoyo_realpath_from_path+0xef/0x640 [ 311.813606][ T9687] ? tomoyo_path_number_perm+0x219/0x5f0 [ 311.813640][ T9687] tomoyo_path_number_perm+0x246/0x5f0 [ 311.813675][ T9687] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 311.813706][ T9687] ? __lock_acquire+0x747/0x2de0 [ 311.813768][ T9687] ? __fget_files+0x2a/0x420 [ 311.813813][ T9687] ? __fget_files+0x2a/0x420 [ 311.813847][ T9687] ? __fget_files+0x2a/0x420 [ 311.813886][ T9687] security_file_ioctl+0xc3/0x2a0 [ 311.813920][ T9687] __se_sys_ioctl+0x47/0x170 [ 311.813948][ T9687] do_syscall_64+0x166/0x520 [ 311.813975][ T9687] ? trace_irq_disable+0x3b/0x140 [ 311.814000][ T9687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.814022][ T9687] ? clear_bhb_loop+0x70/0xc0 [ 311.814051][ T9687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.814073][ T9687] RIP: 0033:0x7f44e139f559 [ 311.814093][ T9687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.814111][ T9687] RSP: 002b:00007f44e21db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.814135][ T9687] RAX: ffffffffffffffda RBX: 00007f44e1625fa0 RCX: 00007f44e139f559 [ 311.814151][ T9687] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 311.814165][ T9687] RBP: 00007f44e21db090 R08: 0000000000000000 R09: 0000000000000000 [ 311.814180][ T9687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.814192][ T9687] R13: 00007f44e1626038 R14: 00007f44e1625fa0 R15: 00007ffe4541ede8 [ 311.814228][ T9687] [ 311.814315][ T9687] ERROR: Out of memory at tomoyo_realpath_from_path. [ 312.654021][ T5697] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 312.798925][ T1125] usb 6-1: USB disconnect, device number 56 [ 312.804967][ T5697] usb 3-1: Using ep0 maxpacket: 32 [ 312.813180][ T5697] usb 3-1: New USB device found: idVendor=0079, idProduct=1803, bcdDevice=0.00 [ 312.813765][ T5697] usb 3-1: config 0 has no interfaces? [ 312.815071][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=24 [ 312.815098][ T5697] usb 3-1: SerialNumber: syz [ 312.848688][ T5697] usb 3-1: config 0 descriptor?? [ 313.080852][ T9704] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 313.380238][ T1125] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 313.531172][ T1125] usb 5-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 313.532741][ T1125] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.532790][ T1125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.536984][ T1125] usb 5-1: config 0 descriptor?? [ 313.598738][ T1125] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input94 [ 313.766558][ T9] usb 5-1: USB disconnect, device number 49 [ 313.841282][ T9719] FAULT_INJECTION: forcing a failure. [ 313.841282][ T9719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.841321][ T9719] CPU: 1 UID: 0 PID: 9719 Comm: syz.6.1208 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 313.841344][ T9719] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 313.841352][ T9719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 313.841362][ T9719] Call Trace: [ 313.841381][ T9719] [ 313.841388][ T9719] dump_stack_lvl+0xe8/0x150 [ 313.841414][ T9719] should_fail_ex+0x3eb/0x540 [ 313.841443][ T9719] _copy_from_user+0x2d/0xb0 [ 313.841459][ T9719] ___sys_sendmsg+0x1c6/0x360 [ 313.841478][ T9719] ? __lock_acquire+0x747/0x2de0 [ 313.841497][ T9719] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.841562][ T9719] ? __fget_files+0x3a2/0x420 [ 313.841623][ T9719] ? __fget_files+0x2a/0x420 [ 313.841669][ T9719] __x64_sys_sendmsg+0x1b1/0x290 [ 313.841702][ T9719] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 313.841751][ T9719] do_syscall_64+0x166/0x520 [ 313.841773][ T9719] ? trace_irq_disable+0x3b/0x140 [ 313.841806][ T9719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.841823][ T9719] ? clear_bhb_loop+0x70/0xc0 [ 313.841843][ T9719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.841859][ T9719] RIP: 0033:0x7f7813d9f559 [ 313.841874][ T9719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.841888][ T9719] RSP: 002b:00007f7814bd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.841905][ T9719] RAX: ffffffffffffffda RBX: 00007f7814025fa0 RCX: 00007f7813d9f559 [ 313.841918][ T9719] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 313.841928][ T9719] RBP: 00007f7814bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 313.841939][ T9719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.841949][ T9719] R13: 00007f7814026038 R14: 00007f7814025fa0 R15: 00007ffff78ac1c8 [ 313.841974][ T9719] [ 314.359099][ T9734] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1213'. [ 314.406467][ T9731] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 315.091943][ T9751] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1220'. [ 315.320202][ T5689] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 315.447329][ T5697] usb 3-1: USB disconnect, device number 90 [ 315.480484][ T5689] usb 6-1: Using ep0 maxpacket: 32 [ 315.481895][ T5689] usb 6-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 315.483406][ T5689] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.483454][ T5689] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 315.489249][ T5689] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 315.489276][ T5689] usb 6-1: Product: syz [ 315.489293][ T5689] usb 6-1: Manufacturer: syz [ 315.489309][ T5689] usb 6-1: SerialNumber: syz [ 315.558818][ T5689] usb 6-1: config 0 descriptor?? [ 315.725588][ T9764] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 315.920086][ T5697] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 316.072231][ T5697] usb 3-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 316.073657][ T5697] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 316.073708][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.079412][ T5697] usb 3-1: config 0 descriptor?? [ 316.136635][ T5697] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input95 [ 316.305470][ T5689] usb 3-1: USB disconnect, device number 91 [ 316.913789][ T9774] FAULT_INJECTION: forcing a failure. [ 316.913789][ T9774] name failslab, interval 1, probability 0, space 0, times 0 [ 316.913816][ T9774] CPU: 1 UID: 0 PID: 9774 Comm: syz.2.1228 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 316.913840][ T9774] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 316.913848][ T9774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 316.913859][ T9774] Call Trace: [ 316.913866][ T9774] [ 316.913873][ T9774] dump_stack_lvl+0xe8/0x150 [ 316.913899][ T9774] should_fail_ex+0x3eb/0x540 [ 316.913929][ T9774] should_failslab+0xa8/0x100 [ 316.913951][ T9774] __kmalloc_noprof+0xf9/0x710 [ 316.913978][ T9774] ? __register_sysctl_table+0x6f/0x1370 [ 316.913999][ T9774] ? __register_sysctl_table+0x6f/0x1370 [ 316.914028][ T9774] __register_sysctl_table+0x6f/0x1370 [ 316.914052][ T9774] ? __asan_memcpy+0x40/0x70 [ 316.914081][ T9774] setup_ipc_sysctls+0x247/0x2e0 [ 316.914104][ T9774] copy_ipcs+0x48f/0x6c0 [ 316.914131][ T9774] create_new_namespaces+0x210/0x6b0 [ 316.914155][ T9774] ? security_capable+0x7e/0x2c0 [ 316.914185][ T9774] unshare_nsproxy_namespaces+0x144/0x190 [ 316.914209][ T9774] ksys_unshare+0x532/0x890 [ 316.914232][ T9774] ? __pfx_ksys_unshare+0x10/0x10 [ 316.914255][ T9774] ? rcu_is_watching+0x16/0xb0 [ 316.914284][ T9774] __x64_sys_unshare+0x38/0x50 [ 316.914304][ T9774] do_syscall_64+0x166/0x520 [ 316.914324][ T9774] ? trace_irq_disable+0x3b/0x140 [ 316.914343][ T9774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.914360][ T9774] ? clear_bhb_loop+0x70/0xc0 [ 316.914380][ T9774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.914396][ T9774] RIP: 0033:0x7fa21c99f559 [ 316.914412][ T9774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.914426][ T9774] RSP: 002b:00007fa21d8dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 316.914443][ T9774] RAX: ffffffffffffffda RBX: 00007fa21cc25fa0 RCX: 00007fa21c99f559 [ 316.914456][ T9774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600 [ 316.914466][ T9774] RBP: 00007fa21ca36b20 R08: 0000000000000000 R09: 0000000000000000 [ 316.914476][ T9774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.914486][ T9774] R13: 00007fa21cc26038 R14: 00007fa21cc25fa0 R15: 00007ffe97a80b98 [ 316.914550][ T9774] [ 317.247070][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.247134][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.630221][ T5697] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 317.780155][ T5697] usb 5-1: Using ep0 maxpacket: 8 [ 317.781009][ T5697] usb 5-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 317.785154][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.785179][ T5697] usb 5-1: Product: syz [ 317.785195][ T5697] usb 5-1: Manufacturer: syz [ 317.785211][ T5697] usb 5-1: SerialNumber: syz [ 317.790105][ T5697] usb 5-1: config 0 descriptor?? [ 318.043364][ T5697] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 318.056750][ T5697] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 318.072462][ T5697] usb 5-1: USB disconnect, device number 50 [ 318.108378][ T9789] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 318.135084][ T10] usb 6-1: USB disconnect, device number 57 [ 318.589923][ T1125] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 318.741201][ T1125] usb 7-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 318.743291][ T1125] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.743341][ T1125] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.749937][ T1125] usb 7-1: config 0 descriptor?? [ 318.796057][ T1125] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input96 [ 318.975360][ T1125] usb 7-1: USB disconnect, device number 51 [ 319.160093][ T1704] block nbd0: Possible stuck request ffff888028814280: control (read@0,1024B). Runtime 210 seconds [ 319.160139][ T1704] block nbd0: Possible stuck request ffff888028814440: control (read@1024,1024B). Runtime 210 seconds [ 319.160169][ T1704] block nbd0: Possible stuck request ffff888028814600: control (read@2048,1024B). Runtime 210 seconds [ 319.160199][ T1704] block nbd0: Possible stuck request ffff8880288147c0: control (read@3072,1024B). Runtime 210 seconds [ 320.098505][ T9818] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 320.850603][ T10] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 320.929828][ T5697] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 321.002253][ T10] usb 5-1: New USB device found: idVendor=05ac, idProduct=0243, bcdDevice=0.00 [ 321.003204][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.003238][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.005882][ T10] usb 5-1: config 0 descriptor?? [ 321.048544][ T10] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input97 [ 321.059771][ T5697] usb 7-1: device descriptor read/64, error -71 [ 321.227163][ T5611] usb 5-1: USB disconnect, device number 51 [ 321.300106][ T5697] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 321.430749][ T5697] usb 7-1: device descriptor read/64, error -71 [ 321.540982][ T5697] usb usb7-port1: attempt power cycle [ 321.810592][ T9842] rxe_eth0 speed is unknown, defaulting to 1000 [ 321.879954][ T5697] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 321.901807][ T5697] usb 7-1: device descriptor read/8, error -71 [ 321.959905][ T5689] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 322.110659][ T5689] usb 6-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 322.130797][ T5689] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 322.130839][ T5689] usb 6-1: Product: syz [ 322.130856][ T5689] usb 6-1: SerialNumber: syz [ 322.140980][ T5697] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 322.158884][ T5689] usb 6-1: config 0 descriptor?? [ 322.161379][ T5697] usb 7-1: device descriptor read/8, error -71 [ 322.271377][ T5697] usb usb7-port1: unable to enumerate USB device [ 322.471455][ T9847] rxe_eth0 speed is unknown, defaulting to 1000 [ 322.587502][ T5611] usb 6-1: USB disconnect, device number 58 [ 323.639723][ T5611] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 323.790810][ T5611] usb 5-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 323.792181][ T5611] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 323.792209][ T5611] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.792230][ T5611] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 323.792279][ T5611] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.795054][ T5611] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 323.795080][ T5611] usb 5-1: Product: syz [ 323.795097][ T5611] usb 5-1: Manufacturer: syz [ 323.828278][ T5611] cdc_wdm 5-1:1.0: skipping garbage [ 323.828385][ T5611] cdc_wdm 5-1:1.0: skipping garbage [ 323.880339][ T5611] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 323.880356][ T5611] cdc_wdm 5-1:1.0: Unknown control protocol [ 324.018124][ T5697] usb 5-1: USB disconnect, device number 52 [ 324.279784][ T35] INFO: task syz.0.555:7504 blocked for more than 143 seconds. [ 324.279816][ T35] Tainted: G L Y syzkaller #0 [ 324.279830][ T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 324.279842][ T35] task:syz.0.555 state:D stack:28584 pid:7504 tgid:7502 ppid:5604 task_flags:0x400040 flags:0x00080002 [ 324.279940][ T35] Call Trace: [ 324.279949][ T35] [ 324.279963][ T35] __schedule+0x17dd/0x5820 [ 324.280025][ T35] ? __pfx___schedule+0x10/0x10 [ 324.280060][ T35] ? schedule+0x90/0x2b0 [ 324.280088][ T35] schedule+0x164/0x2b0 [ 324.280116][ T35] schedule_preempt_disabled+0x13/0x30 [ 324.280142][ T35] __mutex_lock+0x7c4/0x15a0 [ 324.280176][ T35] ? __mutex_lock+0x5cd/0x15a0 [ 324.280210][ T35] ? bdev_open+0xde/0xd70 [ 324.280247][ T35] ? __pfx___mutex_lock+0x10/0x10 [ 324.280289][ T35] ? disk_block_events+0xab ** replaying previous printk message ** [ 324.280289][ T35] ? disk_block_events+0xab/0x120 [ 324.280317][ T35] ? bdev_open+0xb0/0xd70 [ 324.280354][ T35] bdev_open+0xde/0xd70 [ 324.280399][ T35] blkdev_open+0x461/0x600 [ 324.280471][ T35] ? __pfx_blkdev_open+0x10/0x10 [ 324.280496][ T35] do_dentry_open+0x80e/0x1360 [ 324.280540][ T35] vfs_open_consume+0x4a/0x350 [ 324.280569][ T35] ? path_openat+0x16e1/0x20f0 [ 324.280598][ T35] path_openat+0x16fc/0x20f0 [ 324.280646][ T35] do_file_open+0x23e/0x4a0 [ 324.280679][ T35] ? __pfx_do_file_open+0x10/0x10 [ 324.280730][ T35] ? _raw_spin_unlock+0x28/0x50 [ 324.280753][ T35] ? alloc_fd+0x6af/0x760 [ 324.280800][ T35] do_sys_openat2+0x115/0x200 [ 324.280836][ T35] ? __pfx_do_sys_openat2+0x10/0x10 [ 324.280884][ T35] ? do_user_addr_fault+0xd3f/0x1480 [ 324.280927][ T35] __x64_sys_openat+0x138/0x170 [ 324.280966][ T35] do_syscall_64+0x166/0x520 [ 324.280995][ T35] ? trace_irq_disable+0x3b/0x140 [ 324.281029][ T35] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.281263][ T35] ? clear_bhb_loop+0x70/0xc0 [ 324.281322][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.281407][ T35] RIP: 0033:0x7f37b5d5fd8e [ 324.281431][ T35] RSP: 002b:00007f37b6c3cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 324.281456][ T35] RAX: ffffffffffffffda RBX: 00007f37b6c3d6c0 RCX: 00007f37b5d5fd8e [ 324.281474][ T35] RDX: 00000000000c1903 RSI: 00007f37b6c3cc00 RDI: ffffffffffffff9c [ 324.281491][ T35] RBP: 00007f37b6c3cc00 R08: 0000000000000000 R09: 0000000000000000 [ 324.281506][ T35] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 324.281521][ T35] R13: 00007f37b6026128 R14: 00007f37b6026090 R15: 00007ffc504f11a8 [ 324.281558][ T35] [ 324.281599][ T35] [ 324.281599][ T35] Showing all locks held in the system: [ 324.281613][ T35] locks held by khungtaskd/35: 1, last CPU#0: [ 324.281631][ T35] #0: ffffffff9015a4a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 324.281713][ T35] locks held by getty/5363: 2, on CPU#1: [ 324.281729][ T35] #0: ffff888036e750a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 324.281798][ T35] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 324.281861][ T35] locks held by udevd/5607: 1, on CPU#0: [ 324.281887][ T35] #0: ffff888027467350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 324.281961][ T35] locks held by kworker/u8:26/7075: 3, last CPU#1: [ 324.281978][ T35] #0: ffff8880339a4948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 324.282040][ T35] #1: ffffc9000e5cfc40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 324.282102][ T35] #2: ffff88802bf0b1c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xd4/0xfc0 [ 324.282164][ T35] locks held by syz.0.555/7504: 1, on CPU#0: [ 324.282181][ T35] #0: ffff888027467350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 324.282247][ T35] locks held by syz.5.1258/9860: 2, last CPU#0: [ 324.282264][ T35] #0: ffff88807d646540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 324.282325][ T35] #1: ffffffff9015a4a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 324.282385][ T35] locks held by syz.6.1260/9865: 1, on CPU#1: [ 324.282402][ T35] #0: ffff88807d647180 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 324.282468][ T35] locks held by syz.6.1260/9866: 2, last CPU#1: [ 324.282485][ T35] #0: ffff88807d647180 (&mm->mmap_lock){++++}-{4:4}, at: madvise_lock+0x152/0x2e0 [ 324.282540][ T35] #1: ffff888028054598 (&anon_vma->rwsem){++++}-{4:4}, at: folio_lock_anon_vma_read+0x322/0xa50 [ 324.282604][ T35] [ 324.282611][ T35] ============================================= [ 324.282611][ T35] [ 324.282630][ T35] NMI backtrace for cpu 0 [ 324.282648][ T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Tainted: G L Y syzkaller #0 PREEMPT(full) [ 324.282680][ T35] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 324.282690][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 324.282704][ T35] Call Trace: [ 324.282713][ T35] [ 324.282723][ T35] dump_stack_lvl+0xe8/0x150 [ 324.282757][ T35] nmi_cpu_backtrace+0x274/0x2d0 [ 324.282779][ T35] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 324.282816][ T35] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 324.282843][ T35] sys_info+0x135/0x170 [ 324.282884][ T35] watchdog+0x1073/0x10f0 [ 324.282918][ T35] ? watchdog+0x209/0x10f0 [ 324.282949][ T35] kthread+0x38b/0x480 [ 324.282985][ T35] ? __pfx_watchdog+0x10/0x10 [ 324.283007][ T35] ? __pfx_kthread+0x10/0x10 [ 324.283042][ T35] ret_from_fork+0x514/0xb70 [ 324.283081][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 324.283115][ T35] ? __switch_to+0xc78/0x1410 [ 324.283148][ T35] ? __pfx_kthread+0x10/0x10 [ 324.283184][ T35] ret_from_fork_asm+0x1a/0x30 [ 324.283234][ T35] [ 324.283261][ T35] Sending NMI from CPU 0 to CPUs 1: [ 324.283303][ C1] NMI backtrace for cpu 1 [ 324.283320][ C1] CPU: 1 UID: 0 PID: 9866 Comm: syz.6.1260 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 324.283349][ C1] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 324.283357][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 324.283376][ C1] RIP: 0010:check_preemption_disabled+0x27/0xd0 [ 324.283406][ C1] Code: 90 90 90 55 41 57 41 56 53 65 8b 05 fb 2b d7 08 65 48 8b 0d cb 2b d7 08 85 c9 74 0c 5b 41 5e 41 5f 5d e9 0c f5 02 00 cc 9c 59 c1 00 02 00 00 74 ea 65 4c 8b 3d a1 2b d7 08 41 f6 47 2f 04 74 [ 324.283423][ C1] RSP: 0018:ffffc900047966c0 EFLAGS: 00000046 [ 324.283441][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000046 [ 324.283453][ C1] RDX: 00000000d982211c RSI: ffffffff8ea4850d RDI: ffffffff8c8fe280 [ 324.283468][ C1] RBP: ffff88802bf40000 R08: ffffffff8235f868 R09: 0000000000000000 [ 324.283482][ C1] R10: dffffc0000000000 R11: ffffed100ed06215 R12: ffffffff9015a4a0 [ 324.283497][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 324.283510][ C1] FS: 00007f7814bd76c0(0000) GS:ffff8881234da000(0000) knlGS:0000000000000000 [ 324.283527][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 324.283541][ C1] CR2: 00002000000000c0 CR3: 0000000079426000 CR4: 00000000003526f0 [ 324.283559][ C1] Call Trace: [ 324.283566][ C1] [ 324.283575][ C1] lock_acquire+0x125/0x350 [ 324.283598][ C1] ? count_objcg_events+0x28/0x260 [ 324.283624][ C1] count_objcg_events+0x44/0x260 [ 324.283647][ C1] ? count_objcg_events+0x28/0x260 [ 324.283672][ C1] swap_writeout+0x13b3/0x15d0 [ 324.283701][ C1] shrink_folio_list+0x3039/0x4d90 [ 324.283743][ C1] ? __pfx_shrink_folio_list+0x10/0x10 [ 324.283770][ C1] ? update_se+0x90/0x1080 [ 324.283798][ C1] ? __lock_acquire+0x747/0x2de0 [ 324.283817][ C1] ? __lock_acquire+0x747/0x2de0 [ 324.283849][ C1] ? smp_call_function_many_cond+0x11b2/0x1500 [ 324.283879][ C1] ? __pfx___css_rstat_updated+0x10/0x10 [ 324.283906][ C1] reclaim_folio_list+0x100/0x430 [ 324.283939][ C1] ? __pfx_reclaim_folio_list+0x10/0x10 [ 324.283974][ C1] reclaim_pages+0x452/0x530 [ 324.284004][ C1] ? __pfx_reclaim_pages+0x10/0x10 [ 324.284031][ C1] ? madvise_cold_or_pageout_pte_range+0x1b60/0x2390 [ 324.284057][ C1] madvise_cold_or_pageout_pte_range+0x1b85/0x2390 [ 324.284089][ C1] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 324.284119][ C1] walk_pgd_range+0x102d/0x1dc0 [ 324.284158][ C1] ? __pfx_walk_pgd_range+0x10/0x10 [ 324.284179][ C1] ? __css_rstat_updated+0x237/0x540 [ 324.284201][ C1] ? __lock_acquire+0x747/0x2de0 [ 324.284222][ C1] __walk_page_range+0x16d/0x720 [ 324.284252][ C1] walk_page_range_vma_unsafe+0x309/0x410 [ 324.284279][ C1] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 324.284304][ C1] ? mlock_drain_local+0x79/0x490 [ 324.284336][ C1] ? walk_page_range_vma+0x6b/0x90 [ 324.284358][ C1] madvise_vma_behavior+0x2ba2/0x4a00 [ 324.284390][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 324.284416][ C1] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 324.284442][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 324.284473][ C1] ? timerqueue_linked_add+0x287/0x2e0 [ 324.284504][ C1] ? hrtimer_start_range_ns_common+0x7f6/0xb60 [ 324.284539][ C1] ? finish_task_switch+0x40e/0xc60 [ 324.284561][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 324.284584][ C1] ? rcu_is_watching+0x16/0xb0 [ 324.284608][ C1] ? trace_sched_exit_tp+0x3a/0x130 [ 324.284633][ C1] ? __lock_acquire+0x747/0x2de0 [ 324.284658][ C1] ? mas_prev_slot+0xb76/0xbf0 [ 324.284689][ C1] ? find_vma_prev+0x123/0x1b0 [ 324.284713][ C1] ? __pfx_find_vma_prev+0x10/0x10 [ 324.284735][ C1] ? futex_unqueue+0x22/0x240 [ 324.284763][ C1] ? __futex_wait+0x3c7/0x470 [ 324.284780][ C1] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 324.284804][ C1] madvise_walk_vmas+0x57d/0xb70 [ 324.284830][ C1] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 324.284852][ C1] ? blk_start_plug+0x6e/0x1b0 [ 324.284873][ C1] madvise_do_behavior+0x385/0x540 [ 324.284895][ C1] ? __pfx_madvise_do_behavior+0x10/0x10 [ 324.284919][ C1] ? down_read+0x2b9/0x320 [ 324.284948][ C1] do_madvise+0x327/0x3a0 [ 324.284968][ C1] ? __pfx_do_madvise+0x10/0x10 [ 324.284992][ C1] ? __se_sys_futex+0x3a8/0x450 [ 324.285022][ C1] ? rcu_is_watching+0x16/0xb0 [ 324.285048][ C1] __x64_sys_madvise+0xa6/0xc0 [ 324.285069][ C1] do_syscall_64+0x166/0x520 [ 324.285092][ C1] ? trace_irq_disable+0x3b/0x140 [ 324.285113][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.285133][ C1] ? clear_bhb_loop+0x70/0xc0 [ 324.285154][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.285174][ C1] RIP: 0033:0x7f7813d9f559 [ 324.285190][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.285207][ C1] RSP: 002b:00007f7814bd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 324.285226][ C1] RAX: ffffffffffffffda RBX: 00007f7814025fa0 RCX: 00007f7813d9f559 [ 324.285241][ C1] RDX: 0000000000000015 RSI: 0000000000600003 RDI: 0000200000000000 [ 324.285254][ C1] RBP: 00007f7813e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 324.285267][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.285279][ C1] R13: 00007f7814026038 R14: 00007f7814025fa0 R15: 00007ffff78ac1c8 [ 324.285302][ C1] [ 324.379766][ T35] Kernel panic - not syncing: hung_task: blocked tasks [ 325.395359][ T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Tainted: G L Y syzkaller #0 PREEMPT(full) [ 325.406145][ T35] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 325.411987][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 325.422080][ T35] Call Trace: [ 325.425375][ T35] [ 325.428318][ T35] vpanic+0x26f/0x710 [ 325.432332][ T35] panic+0xc5/0xd0 [ 325.436081][ T35] ? __pfx_panic+0x10/0x10 [ 325.440708][ T35] ? preempt_schedule_common+0x7f/0xd0 [ 325.446195][ T35] ? preempt_schedule_thunk+0x16/0x40 [ 325.451591][ T35] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 325.457786][ T35] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 325.463979][ T35] watchdog+0x10e7/0x10f0 [ 325.468353][ T35] ? watchdog+0x209/0x10f0 [ 325.472797][ T35] kthread+0x38b/0x480 [ 325.476909][ T35] ? __pfx_watchdog+0x10/0x10 [ 325.481607][ T35] ? __pfx_kthread+0x10/0x10 [ 325.486228][ T35] ret_from_fork+0x514/0xb70 [ 325.490860][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 325.495998][ T35] ? __switch_to+0xc78/0x1410 [ 325.500706][ T35] ? __pfx_kthread+0x10/0x10 [ 325.505329][ T35] ret_from_fork_asm+0x1a/0x30 [ 325.510136][ T35] [ 325.513788][ T35] Kernel Offset: disabled [ 325.518133][ T35] Rebooting in 86400 seconds..