last executing test programs: 5.14232679s ago: executing program 0 (id=318): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r5, 0x3, {0x0, 0xf0}}, 0x18) connect$can_j1939(r4, &(0x7f0000000280)={0x1d, r5}, 0x18) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000300)='8tQ', 0x3}], 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_add_vcpu$x86(r8, &(0x7f0000000180)={0x0, &(0x7f0000000f40)=[@rdmsr={0x66, 0x18, {0x400000b7}}], 0x18}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f00000006c0)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r9, &(0x7f0000000700)={0x1f, 0x0, @none, 0x4, 0x2}, 0x3e) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x1000002, 0x80}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sec/tomoyo/profile\x00', 0x1, 0x0) r11 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x2c77, 0x80, 0x2, 0x1e2}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r12, r13, r14, &(0x7f0000000480)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000500), 0x1, 0x8}) syz_ublk_add_dev(r11, r12, r13, r14, &(0x7f0000000540)={0x2e, 0x65, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000005c0)=@new_dev={0xffff, 0xc57, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x12}}}, 0x0) write(r10, &(0x7f00000001c0)="302d434f4e4649473d646973e1626c65640a", 0x12) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) r17 = ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r16, 0x4020ae46, &(0x7f0000000640)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r17, 0x4008ae89, &(0x7f0000000680)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000fdc000/0x2000)=nil) 4.791450585s ago: executing program 0 (id=319): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x26, 0x29, 0x70bd2d, 0xfffffff9, {0x11}, [@typed={0x4, 0x15e, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c811}, 0x48054) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="8704040000000000fc02000000619cc0694d00000000000000ed"], 0x28) syz_fuse_handle_req(r0, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000000440)={0x50, 0xffffffffffffffda, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x1, 0x41, 0xd, 0x0, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000400)={0x30, 0x5, 0x0, {0x0, 0x1, 0x7, 0x80000001}}, 0x30) 4.693339449s ago: executing program 0 (id=320): r0 = socket(0x1d, 0x3, 0xb) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f00000005c0)={0x2, {{0x2, 0x3, @multicast2}}, {{0x2, 0xfffe, @rand_addr=0x64010102}}}, 0x108) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, 0x8) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="d46579deafc7b0cb39c9d127abd5b4a6f5d5b84e364be28f4600f110ce3493bc70c83baa273478da438ec05f3b2cd1ad4dc9b5840cd634cc0a23793dfe6d1e6fccd3bcf7b73b0ba18413d7e2fa54ad450f6f1b22efdef2d57ae4c1fe87", @ANYRES64=r2, @ANYBLOB="5d03492bd8cadb36c8019c9bc7ebe20820b8146a1a99d39833f206812b2a8f19dc53f5e9ac310d444bee6e4cc9e05b97d86a91026b876199deb8f02bcfd7510f212bb203d6418e7688bfb88aba3819a9d4b6ab33355929ef0a172838b02c1e47ef390e79bef0af72a90688e0ad5b029e915ef132ee41f6ee8bf81c04165b06b41cad04b42300c2f96485eede5f1f96b0ae48a499034d28c63507e0886b69444ea09f552904170dfb37185948529b6e311e431ba54814f4033417c1a3d5e45c11f025a8c48a6fb7ef363aa61ae5c08b71a4fa2299d502e446bc49008f2abf64fed359929b6dc67c9284f98fdb8bdf", @ANYRESDEC, @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRESOCT=r2, @ANYRES32=r0], 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000b40)='net/udplite\x00') pread64(0xffffffffffffffff, &(0x7f0000000480)=""/145, 0x91, 0x1000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r0, 0x84, 0x7d, &(0x7f0000000380)={0x0}, &(0x7f00000007c0)=0xffffff52) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={r6, 0x3, 0x20}, 0xc) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000840)={&(0x7f0000000880)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}, 0x9}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) recvmsg$kcm(r7, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x10040) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100100000040c50f80b0000000000001090224000100009009090400fe01030001000921c100fe0122280009058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) r12 = syz_open_dev$sg(&(0x7f00000003c0), 0x7f, 0xc4603) ioctl$SG_IO(r12, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x6, 0x3, @scatter={0x0, 0x24020, 0x0}, &(0x7f0000000580)="0413d60741f6", 0x0, 0x7, 0x0, 0x8000000, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r13, 0x8b04, &(0x7f0000000540)={'wlan1\x00', @random="c200"}) recvmsg(r11, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 3.705015413s ago: executing program 2 (id=326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000a80)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000ac0)=[{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)="a92e81d0991808e33c2330164cf023df", 0x10}, {&(0x7f0000000b80)="e1483f4367ab", 0xfdea}], 0x2, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)=""/4096, 0xfdfa}], 0x1}}], 0x1, 0x40000141, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f0000000000)=@r2t={{0x9, 0x6, 0x18, 0x4, 0x4}, 0x97, 0x7f, 0x13, 0x2}, 0x80, 0x0, 0x0, 0x0) 3.515972414s ago: executing program 2 (id=329): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/245], 0x119) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000d8ca8d40d1052120002900100001090212"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x81) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000040)) 3.379715512s ago: executing program 1 (id=331): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000780)='8', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='./dev/sda1\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x1008c10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000200)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) unlink(0x0) mount$fuse(0x0, 0x0, 0x0, 0x20, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000e40)={0x2, 0x1, 0x1b, 0x16, 0x1a3, &(0x7f0000000a40)="1c425bcf9089e8ff2b609ee4135874c87768180bfa29b1627a6f5c3a92522cf207e131fec9e8a14512f8eb7f32e908009abd51ac839b3c774fbb4c49134bc1d0799463c7ba960b5656c306d9c57771b85c3199d0ddc76c2ec19a6e26d275959c574a2c622ce3a9bc385c0dc15e59ab7f89382ca122b171c0f2dcae1d14842656e63aad54289411ea519aecf3d68b834e0be45ada1010d22ad5f27ae77e818c8679f9ee1a3c0267550090cb706eefed85960cbfd4607b21e775aea9cb87e2e37ddd72f098666dd8062ae781dcf723a0527fd0f49fac80594bbfd1609888adea4a462a96c14c0f43456c5237123deed2c901ad1a813715271421f18ce75514db994cbf5d5f44bb9a9b3c49714767ce7edbe3eb455418a7e327b8afc26a52f74dff4d07c1348109c2d2cdcad480be070ad333f8ac574dbb4bd2a85d4b8854a3c1536dceed904965ad6be82c8b7a46842e97e0b684e2c40fdb86e3c45588c28359f5e7275261a63a3c0d3fd430938f41eda8f7f8cbf27b7bb1abdd33197d3a1dddff0660d784c8ca8e36d89102c66bdd1d53d8b8adeaffae9200bebf94dc02a8bcd0828b17c61898480aee86a729626f016879bdc21176c29ce34800be388aeed582f75f6707fe255424da69ead62b193e148f77b9879983998f5339d5abd77ae53b6a32c532c86ccb182721ffad1256c6eb03297c1e19e06e07b795c5218d369b0caedc7565cb2b07f09ab455d792d56b4c5f031ecc8ea89ff7bc156c70e99372f747a130a8d1aaba3d8cc1f4f8b6ba1fb513a1e91d04eb7da7094fb7b25f0967a8f1df70950a7f07ffee7dc063e9c985de7b1574ca855e19093c978c065c09ee4bda3b86146cad0efee781d83723d14cd05e00334d8b579db77c9c0ec3e6bb34f48a29f794da1cc1c3a4c9b24c67431d78bd580d5b1f0441ddf225db15112cae96e83b7f68810b04e9c3c5985953736118021c5bf48d84c60aa45cac7a9ff70b59b3a61feff4207fd43f55c11d91366d5fba230189b96fe646018987ff5a516f244e3dcbe11caa6deb2a3f2d5ac9f01fc50cd5429b97a00aa1087d2f9edc3fe4f143b82080366f97820533217bbb31186eb0d6e0ec137c9f437fddb9755249be509b853966afc9df3ef1639489e5f2c73b40dc292bf67a0eed5a7ca5a00565e0a963362c4830eafa4061f5a032d368560b61a7aa319329f07a651677c563d19ed975b9851ffa5553aedef4d5dae4d236208f9ebb4fd4c7aeaaec2a2e71d099d81f34b5564e2a6a82501dcdcaf08f67ec3681444f25ef6920f05107f028978b46abe956c1cc70290a7d9f229940c48e4c6c1e43775c92e8dde791f5ddac694940557d022eca9206ded5f03cbb8ca003517e989b6aa6cc5c0859d3fc3b6f3674c092a8c95447a6bed8034ff3dc77a547dcfb27cb90afab2caabe1c3054f32b4b00"}) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000900)='3', 0x4e) futex_waitv(&(0x7f0000000940)=[{0x0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0) 3.298132151s ago: executing program 1 (id=332): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ef) r0 = syz_usb_connect$uac3(0x6, 0x121, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x763, 0x1031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10f, 0x3, 0x1, 0x5, 0x40, 0x88, {0x8, 0xb, 0x0, 0x0, 0x1, 0x24, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x1e}, [@input_terminal={0x14, 0x24, 0x2, 0x6, 0x203, 0x6, 0x6a, 0x2, 0x2173, 0x3, 0x73aa, 0xad02}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xe63, 0xd61, 0x5, 0x5}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x3, 0x40, 0x0, "edbc614277adf6f1"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7fff, 0x2, 0xfd}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xd, 0x4, 0x6, 0xb}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8001, 0xb0, 0x7}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x40, 0x3, 0x7f, 0x81}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0x8, 0x2, {0xa, 0x25, 0x25, 0x0, 0x8, 0xf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x9, 0x6, 0xe08a, 0x2, 0x2, 0x8, 0xfffe, 0x7}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x4, 0x6, 0x40, 'u|o'}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x7f, 0x3, 0x3, 0x8, "b242c5", "4354e9"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}, @as_header={0x17, 0x24, 0x1, 0x1, 0x3, 0x1, 0x2, 0x28, 0x81, 0x3, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x80, 0x5, {0xa, 0x25, 0x25, 0x8b72, 0x0, 0xfffa}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x250, 0x1f, 0x0, 0x1, 0x8, 0x6}, 0xc0, &(0x7f0000000400)={0x5, 0xf, 0xc0, 0x2, [@generic={0xa7, 0x10, 0x2, "00e3e453db136ea7b22568dc43f5b25e08ea0dd51df0db55efc610a4ce39c1897e54afa8352328ca14c0d7fddc0473b8387e2adbf5bfa618429ce0f004095dfcc0c969f99c09b45f33c70d5b7f843564c8f41b4b1720ef8eaecb6ace67cb5aed561abf70271d51b7e845183b5c09cffe7b92e41c555f4f49ad706b2c8f8c3336232b14afcec41b33eda07d1d67285eda6955f0052258f7ec92e18204e1e3a4a606aaf760"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "4715611a922bf9da903b4d63aaf4950e"}]}, 0x4, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3801}}, {0x8e, &(0x7f0000000580)=@string={0x8e, 0x3, "8af35a914083e185efe7c4a0dfb9b5270dc63ef561c1b33946e8e4665a36450d5102d9472b8b109bf386990e178f874e569e71a7b5258c9ed955493df350371ac1f67caa5f2920565c085069ec31b092e87ab19a909fba5b87c7e4833d9da26eb50ee0b291d80cd7c908605cb6cb859e5ed0a3dc2b56a73fa69cbe75c8e800cb2252b719284f5fc8975ef4eb"}}]}) syz_usb_control_io$uac3(r0, &(0x7f00000007c0)={0x14, &(0x7f00000006c0)={0x20, 0x21, 0x9a, {0x9a, 0x6, "ad339708eec8950aec3a7c691c762f1ce78743fbafbe5c79ec7fa13c909a9d6aa884fee7863744d7ae9e166829475f15dada29c8dd45babff8a82f53f6f990286aae1f73d0d0898d9402a4fc70bb8c23bbe1738a9c986bd505b5c160788cef2f0d8dd0026597937f52a59901291741b1c6712a5255335d713f1653e8f739787fa1dc7903ad58b403fd072baa8ea725031544f9959a288094"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}}, &(0x7f0000000a00)={0x44, &(0x7f0000000800)={0x60, 0x16, 0x25, "7351bb6f9b64c558d86aedf7e9eb2668ab1d4f0ce0199859e208d93552db4b3fec9fa3e12f"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xc0}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000008c0)={0x20, 0x81, 0x1, "c0"}, &(0x7f0000000900)={0x20, 0x82, 0x1, "da"}, &(0x7f0000000940)={0x20, 0x83, 0x2, "8c4b"}, &(0x7f0000000980)={0x20, 0x84, 0x3, "c7b8be"}, &(0x7f00000009c0)={0x20, 0x85, 0x3, "a9eec0"}}) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/bond0/bonding/arp_validate\x00', 0x1, 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.055657689s ago: executing program 0 (id=333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00003a1000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f00000000c0)="0f23730fc7710df2166766c7442400080000006766c7442402490000006766c744240600000000670f011c2466b8a70000000f23d00f21f86635100000090f23f8f30f1c0566b9800000c00f326635000800000f309a0ac5004a00002af50f01df0f23c00f21f8663502000f000f23f8", 0x70}], 0x1, 0x4a, 0x0, 0x0) r3 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_KEY(r3, 0x6a, 0x1, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000140)={0x70001, 0x0, {[0xffffffffffffffff, 0x1fb, 0xffffffffffffffff, 0x8001, 0x16, 0x4, 0x1, 0x8]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.78100522s ago: executing program 3 (id=334): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0010}]}) close_range(r2, 0xffffffffffffffff, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x5) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000000300)={0x2020}, 0x2020) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'pim6reg\x00', {0x2, 0x4e21, @remote}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/mtrr\x00', 0x2, 0x2) ioctl$PIO_UNIMAP(r5, 0xc0184d03, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) 2.6953016s ago: executing program 3 (id=335): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000180)='7', 0x1) (async) write(r1, &(0x7f0000000180)='7', 0x1) syz_io_uring_setup(0xf00, &(0x7f00000001c0)={0x0, 0x0, 0xc00, 0x0, 0x60, 0x0, 0x0}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000010000107f6ffffff000000000a0000000600010014"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.635045391s ago: executing program 1 (id=336): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/reboot/type\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='triple\n\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/kernel/reboot/force\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='1\n\x00', 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100022f720a10402065020d450102030109021b000206ff30050904030600a67137050904030700014a10ff90f185"], 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000000e80)={0x0, 0x7, @status={[0x7fffffffffffffff, 0x10, 0x8, 0x90000, 0x0, 0x2]}, [0x7, 0x18000, 0x4, 0xc, 0x8000000000000000, 0x6, 0x0, 0x7fff, 0x80000000, 0x4, 0xffffffffffffffc4, 0x800000000000005, 0xa, 0xfe, 0xffffffffffffffff, 0x3, 0x4, 0xd26, 0x1, 0x2, 0x0, 0x7, 0xffffffffffffffff, 0x1, 0xe669, 0x8, 0x7, 0x5, 0xe, 0x5fd2, 0xece, 0x135a, 0x1, 0x8, 0x100000001, 0xff, 0x20000000c43b, 0x7, 0x2, 0xb58, 0x7, 0x7, 0x4, 0xed4d, 0xb6b, 0xd8c4, 0x587, 0x2, 0x8, 0x3, 0x2, 0x195, 0x8, 0xe, 0x3, 0x1fc, 0x4, 0x1, 0x8, 0x3, 0x1e, 0x1, 0x3, 0x9]}) fstat(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000680)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f00000007c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast1}}, &(0x7f0000000900)=0xe8) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000940), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000018c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000003900)={0x50, 0x0, r9, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000003980)="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", 0x2000, &(0x7f0000005980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005a40)={0x90, 0x0, 0x2, {0x0, 0x1, 0xbd16, 0x5, 0x7, 0x7f, {0x1, 0x5, 0x100000000000, 0x6, 0x0, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415c0913, 0x101, r10, r11, 0x9, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000005b00)={{{@in6=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000005c00)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000005c40)={0x0, 0x0, 0x0}, &(0x7f0000005c80)=0xc) stat(&(0x7f0000005cc0)='./sys/kernel/reboot/type\x00', &(0x7f0000005d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000480)='./sys/kernel/reboot/type\x00', &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f0000005d80)={{}, {0x1, 0x1}, [{0x2, 0x0, 0xee01}, {0x2, 0x1, r4}, {0x2, 0x1, r5}, {0x2, 0x0, r6}, {0x2, 0x2, r7}, {0x2, 0x4, r10}, {0x2, 0x0, r12}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}, {0x8, 0x4, r13}, {0x8, 0xc, r14}], {0x10, 0x7}}, 0x74, 0xf80d64d0c7f47f2b) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f000001e000/0x1000)=nil}) r15 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r15, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="18", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000440)=0x5, 0x4) shutdown(r15, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r15, 0x84, 0x82, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000200)=0x8) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000433000/0x4000)=nil}) 2.628605592s ago: executing program 0 (id=337): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./gadget\x00', &(0x7f00000000c0)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f0000000140)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x63, 0x7, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./gadget/ep1in-bulk\x00', 0x43, 0x0) syz_clone(0x100000, &(0x7f0000000280)="1428dc13cc96adf7e92e5efd256fbef57025acabfa3fde4d9106bd6f392ccf2310976cd288d8ad6576843fbb166e45eca942a8fa8dc9666da306527edc3cc5a4d712f9637ba193c1c5c97b35bd8eb18178ac1f6b02a58b02f2102a75eca49ae1508da027058e257b960050f6df4e385313e09cbb79e5fe9bbaf3cdcd8685dd2693300333dd2c38b2468b23d6aef77306ca7ff1a2f76247f6147cd6075170b818", 0xa0, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000004c0)="e6746ccf3512690087b26674748183b19d9f4756581a0a53c679acab107b4379fd6f988317fc88f69d0b3dd8bd2eb52ed374ca0f07ffae13da07000718e2f48d65091ee635f2c3841a7c848d96d7206a3519f5416596d7238a47304c9e4ede258eece4357a85df00dd436be12cf5c3eb5151b3050f1ff7c1473d92403bdfdcdf12977d6b61d241efbb33f3a8927b97d8dbb3bfd65d84e9ce4ae01879ef2454c1abd12435cf36d92932046ba3de9b6782b1c91c7037591fa56c8f42795d964ccee4c41c6db2f6b7c25fa5d2b042ba137722838225f90ef9633a84e9fd7743596af23eba016a") ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x80000019, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x20, 0x2}, {0x40000001, 0x1, 0x0, 0x31237646, 0x0, 0x6}]}) 2.565848128s ago: executing program 3 (id=338): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000080)=0xfffffffa) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0xb3d) ioctl$TCXONC(r4, 0x540a, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@x86={0x3, 0x2, 0x5, 0x0, 0x3ff, 0x4, 0x5, 0x9, 0xe5, 0x4, 0xff, 0x0, 0x0, 0xc6b, 0x1, 0xd, 0xfb, 0x7, 0x80, '\x00', 0x2, 0x3}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000006, 0x4000010, r0, 0xe5d1e000) 2.311403003s ago: executing program 0 (id=339): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.286806944s ago: executing program 2 (id=340): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000780)='8', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='./dev/sda1\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x1008c10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000200)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) unlink(0x0) mount$fuse(0x0, 0x0, 0x0, 0x20, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000900)='3', 0x4e) futex_waitv(&(0x7f0000000940)=[{0x0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0) 2.255151374s ago: executing program 3 (id=341): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x44, 0x1, 0x7fffc, 0x25dfdbfb, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x17a) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f0000000180)=@filename='./dev/mtdblock0\x00', &(0x7f00000001c0)='./dev/mtdblock0\x00', &(0x7f0000000200)='romfs\x00', 0x23000000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x44, 0x9, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'test\x00'}]}]}, 0x44}}, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000100)={0xf0f000, 0x0, @name="0c3901800000010000000000000000d4ffd14e01a265cb6c8595d9438bf54bb8"}) 1.995284802s ago: executing program 3 (id=342): syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103ffff0a09040100020a00000007050202ffff0007058202"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x214002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x702, 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x12) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.950079616s ago: executing program 2 (id=343): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)='ext4\x00', 0x2008410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x0, 0x21) mknodat(r0, &(0x7f0000000080)='./dev\x00', 0x80, 0x0) 1.591592269s ago: executing program 2 (id=344): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000002580)='./proc\x00', 0xed) mount(0x0, &(0x7f00000025c0)='./proc\x00', &(0x7f0000002600)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002640)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) write(r0, &(0x7f0000002680)='3', 0x4e) syz_clone3(&(0x7f00000026c0)={0x804411, 0x0, 0x0, 0x0, {0x51}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x401) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="141bdf0013cb", @ANYRES64=r1], 0xb2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) kexec_load(0x1, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="e33d6f5c5c4e5cceaeb03886cacede7245e1a5877b99cb758f8355d557a26298c101ff6abb023b32b73e2bf0f6d86e5072ed481e38ba1dfe84593ed401b0e9eaf81a07b1938f5c2400006bfeef5f4b02f637b29e8b73317b9d29a7a0455d345fe630cdad82baa1a2c7e6c3eabf6ee34be98a8c0ada1ba8935497c3a2db58b9541f", 0x81, 0x3}], 0x3e0000) ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f00000002c0)) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r4, 0x29, 0xd1, &(0x7f0000000380)=0xfe, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x7, 0x80, &(0x7f0000000100)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @remote}}}, 0x84) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000400)={[0x6, 0x80000000000000, 0x7, 0x300000000000000, 0x1000, 0x2, 0x1002, 0x9, 0xb, 0xfffffffffffff2e0, 0x2, 0x2371, 0x1ff, 0x7, 0xa3e, 0x208], 0x25000, 0x116156}) setsockopt(r5, 0x400, 0x0, &(0x7f00000014c0)="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", 0x1000) r6 = accept$alg(r5, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000340), 0x7, 0x400) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f00000024c0)={0x5, 0x0, '\x00', {0x0, @reserved}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000340), 0x0, 0x2) recvfrom(r6, &(0x7f00000004c0)=""/4096, 0x1000, 0x40000000, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.095436769s ago: executing program 1 (id=345): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ipvlan1\x00', 0x10) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000000c0)=0xfff7) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000440)={'ah\x00'}, &(0x7f0000000480)=0x1e) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x1, 0x1}, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/vhci\x00', 0x793682, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000031401002dbd700002dcdf250900020073607a310000000008004100736977001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x14f7325ddd07b80}, 0x44000) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000314230c2abd7000"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0003001000000002800000121f", 0x2e}], 0x1}, 0x20008000) 1.094921386s ago: executing program 2 (id=346): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0xa, 0x0, [{0x307, 0x0, 0xfffffffffffffffd}, {0x40000096}, {0x389, 0x0, 0x80}, {0xb1b, 0x0, 0x2}, {0xbec, 0x0, 0x5}, {0x257, 0x0, 0xf64}, {0xc0010ee0, 0x0, 0x7b73}, {0x85c, 0x0, 0x6dbc}, {0xb96}, {0xb92, 0x0, 0x1}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000005c0)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086e92ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 399.828723ms ago: executing program 1 (id=347): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracefs/dynamic_events\x00', 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder1\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', 0x1}) write$tun(r3, &(0x7f0000000340)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x119, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @private0, [{0x3, 0x20, "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"}]}}}}}}}, 0x157) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_OUT_LEVEL={0x0, 0x2a, 0x2}]}, 0xffffffffffffff51}, 0x1, 0x0, 0x0, 0x8041}, 0x80000) write(r0, &(0x7f0000000240)='e:mygroup/myevent sched.sched_switch', 0x24) 349.293882ms ago: executing program 3 (id=348): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/245], 0x119) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000d8ca8d40d1052120002900100001090212"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x81) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000040)) 0s ago: executing program 1 (id=349): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0xf5, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000002401000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) read$hidraw(r2, &(0x7f0000000140)=""/87, 0x57) syz_usb_ep_write(r0, 0x81, 0x58, &(0x7f0000000640)="7eda7fd763f24206dd21f481f483c67bfc3f46bd1c7a0154122686f3d1b58b72e51fe39e7d522d7249b4becb73464a282d0f0879afc868cde4c5c0dfb666980084042cd292e3437f6fb2d068e91b9767b782054faa06ba80") kernel console output (not intermixed with test programs): xc0 [ 460.453099][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.453120][ T6195] RIP: 0033:0x7ff06ab9e2d9 [ 460.453138][ T6195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.453155][ T6195] RSP: 002b:00007ff06ba390e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 460.453176][ T6195] RAX: ffffffffffffffda RBX: 00007ff06ae25fa8 RCX: 00007ff06ab9e2d9 [ 460.453192][ T6195] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff06ae25fac [ 460.453205][ T6195] RBP: 00007ff06ae25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 460.453227][ T6195] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 460.453240][ T6195] R13: 00007ff06ae26038 R14: 00007ffe5069d7d0 R15: 00007ffe5069d8b8 [ 460.453273][ T6195] [ 460.598297][ T27] usb 4-1: USB disconnect, device number 7 [ 460.707578][ T6199] bridge0: entered allmulticast mode [ 460.708782][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 460.708865][ T6199] bridge_slave_1: left allmulticast mode [ 460.708884][ T6199] bridge_slave_1: left promiscuous mode [ 460.710238][ T6199] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.723366][ T6199] bridge_slave_0: left allmulticast mode [ 460.723388][ T6199] bridge_slave_0: left promiscuous mode [ 460.723671][ T6199] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.747553][ T6199] bridge0 (unregistering): left allmulticast mode [ 460.767753][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 460.767773][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 460.767784][ T6200] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 460.768364][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 461.528919][ T6224] tipc: Started in network mode [ 461.528952][ T6224] tipc: Node identity 0010000000000000002, cluster identity 4711 [ 461.547818][ T6224] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 461.614484][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 461.765168][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 461.766774][ T27] usb 4-1: New USB device found: idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 461.770232][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 461.770262][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 461.770283][ T27] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 461.770306][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 461.772744][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.772766][ T27] usb 4-1: Product: syz [ 461.772780][ T27] usb 4-1: Manufacturer: syz [ 461.772794][ T27] usb 4-1: SerialNumber: syz [ 461.779707][ T27] usb 4-1: config 0 descriptor?? [ 461.787148][ T27] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 461.799318][ T4961] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 461.826388][ T4961] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 461.852156][ T4961] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 461.859065][ T4961] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 461.918817][ T5747] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 461.938131][ T5747] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 462.013046][ T6220] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 462.026740][ T6220] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 462.040130][ T27] usb 4-1: USB disconnect, device number 8 [ 462.064411][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 462.224979][ T9] usb 1-1: New USB device found: idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 462.226099][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.226121][ T9] usb 1-1: config 0 has no interfaces? [ 462.227072][ T9] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 462.227095][ T9] usb 1-1: Product: syz [ 462.228852][ T9] usb 1-1: config 0 descriptor?? [ 462.434155][ T9] usb 1-1: USB disconnect, device number 11 [ 462.704223][ T27] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 462.866617][ T27] usb 2-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 462.870628][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 462.870657][ T27] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 462.876375][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.876399][ T27] usb 2-1: Product: syz [ 462.876412][ T27] usb 2-1: Manufacturer: syz [ 462.876425][ T27] usb 2-1: SerialNumber: syz [ 463.029512][ T6255] FAULT_INJECTION: forcing a failure. [ 463.029512][ T6255] name failslab, interval 1, probability 0, space 0, times 0 [ 463.029541][ T6255] CPU: 1 UID: 0 PID: 6255 Comm: syz.0.160 Not tainted syzkaller #0 PREEMPT(full) [ 463.029565][ T6255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 463.029577][ T6255] Call Trace: [ 463.029584][ T6255] [ 463.029593][ T6255] dump_stack_lvl+0xe8/0x150 [ 463.029623][ T6255] should_fail_ex+0x3eb/0x540 [ 463.029658][ T6255] ? __alloc_skb+0x1db/0x7a0 [ 463.029684][ T6255] should_failslab+0xa8/0x100 [ 463.029706][ T6255] ? __alloc_skb+0x1db/0x7a0 [ 463.029729][ T6255] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 463.029755][ T6255] ? __alloc_skb+0x18d/0x7a0 [ 463.029781][ T6255] ? __alloc_skb+0x1db/0x7a0 [ 463.029813][ T6255] __alloc_skb+0x1db/0x7a0 [ 463.029842][ T6255] netlink_ack+0x136/0xb30 [ 463.029863][ T6255] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.029907][ T6255] netlink_rcv_skb+0x2a4/0x4a0 [ 463.029930][ T6255] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.029966][ T6255] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.030003][ T6255] ? down_read+0x2b9/0x320 [ 463.030033][ T6255] genl_rcv+0x28/0x40 [ 463.030058][ T6255] netlink_unicast+0x8ef/0xa80 [ 463.030096][ T6255] netlink_sendmsg+0x7c3/0xae0 [ 463.030125][ T6255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.030157][ T6255] ? apparmor_socket_sendmsg+0x98/0x360 [ 463.030183][ T6255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.030205][ T6255] sock_sendmsg_nosec+0x14e/0x190 [ 463.030230][ T6255] ____sys_sendmsg+0x54e/0x850 [ 463.030265][ T6255] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.030303][ T6255] ? import_iovec+0x73/0xa0 [ 463.030327][ T6255] ___sys_sendmsg+0x2a5/0x360 [ 463.030354][ T6255] ? __lock_acquire+0x747/0x2de0 [ 463.030389][ T6255] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.030451][ T6255] ? __fget_files+0x3a2/0x420 [ 463.030477][ T6255] ? __fget_files+0x2a/0x420 [ 463.030512][ T6255] __x64_sys_sendmsg+0x1b1/0x290 [ 463.030545][ T6255] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 463.030595][ T6255] do_syscall_64+0x166/0x520 [ 463.030617][ T6255] ? trace_irq_disable+0x3b/0x140 [ 463.030638][ T6255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.030658][ T6255] ? clear_bhb_loop+0x70/0xc0 [ 463.030682][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.030701][ T6255] RIP: 0033:0x7f871179e2d9 [ 463.030719][ T6255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.030735][ T6255] RSP: 002b:00007f871266e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.030755][ T6255] RAX: ffffffffffffffda RBX: 00007f8711a25fa0 RCX: 00007f871179e2d9 [ 463.030769][ T6255] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 463.030782][ T6255] RBP: 00007f871266e090 R08: 0000000000000000 R09: 0000000000000000 [ 463.030794][ T6255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.030805][ T6255] R13: 00007f8711a26038 R14: 00007f8711a25fa0 R15: 00007ffd5e3568e8 [ 463.030838][ T6255] [ 463.226141][ T6259] netlink: 312 bytes leftover after parsing attributes in process `syz.0.162'. [ 463.245696][ T6259] netlink: 1 bytes leftover after parsing attributes in process `syz.0.162'. [ 463.348450][ T6259] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 463.348650][ T6259] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 463.391819][ T6259] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 463.400751][ T6259] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 463.400849][ T6259] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 463.418331][ T6259] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 463.422414][ T6259] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 463.422503][ T6259] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 463.457327][ T6259] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 463.458890][ T6259] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 463.458984][ T6259] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 463.466636][ T6259] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 464.034214][ T1567] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 464.184210][ T1567] usb 4-1: Using ep0 maxpacket: 8 [ 464.186370][ T1567] usb 4-1: New USB device found: idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 464.188628][ T1567] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 464.188652][ T1567] usb 4-1: config 0 has no interface number 0 [ 464.188690][ T1567] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 464.188714][ T1567] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 464.188737][ T1567] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 464.188761][ T1567] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 464.188786][ T1567] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 464.192534][ T1567] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.192557][ T1567] usb 4-1: Product: syz [ 464.192571][ T1567] usb 4-1: Manufacturer: syz [ 464.192586][ T1567] usb 4-1: SerialNumber: syz [ 464.205897][ T27] usb 2-1: failed to execute ARPC: -110 [ 464.205920][ T27] usb 2-1: failed to set connected state for cport 0: -110 [ 464.205938][ T27] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 464.295952][ T1567] usb 4-1: config 0 descriptor?? [ 464.518522][ T1567] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 464.524618][ T5739] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 464.675055][ T5739] usb 1-1: New USB device found: idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 464.676632][ T5739] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.676656][ T5739] usb 1-1: config 0 has no interfaces? [ 464.678224][ T5739] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 464.678249][ T5739] usb 1-1: Product: syz [ 464.681723][ T5739] usb 1-1: config 0 descriptor?? [ 464.718475][ T27] usb 2-1: failed to send ARPC request 3: -110 [ 464.718710][ T27] usb 2-1: failed to execute ARPC: -110 [ 464.718727][ T27] usb 2-1: failed to clear cport 0: -110 [ 464.718843][ T27] greybus greybus1: 0/0:0: failed to clear host cport: -110 [ 464.748263][ T27] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 464.889931][ T27] usb 1-1: USB disconnect, device number 12 [ 465.087771][ T27] usb 4-1: USB disconnect, device number 9 [ 465.344217][ T5659] Bluetooth: hci0: command 0x0c1a tx timeout [ 465.424284][ T5659] Bluetooth: hci2: command 0x0c1a tx timeout [ 465.424302][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 465.499227][ T5659] Bluetooth: hci2: Unable to find connection for big 0x00 [ 465.504283][ T5659] Bluetooth: hci3: command 0x0c1a tx timeout [ 465.607012][ T27] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 465.755922][ T27] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 465.758045][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 465.758075][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.758097][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 465.758137][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.768869][ T27] usb 3-1: config 0 descriptor?? [ 465.860097][ T5740] usb 2-1: USB disconnect, device number 13 [ 465.984539][ T5739] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 466.137744][ T5739] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 466.139076][ T5739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.246663][ T27] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 466.324242][ T1567] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 466.364222][ T5739] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 466.433793][ T6286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.441127][ T6286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.463240][ T6286] batadv_slave_1: entered promiscuous mode [ 466.478029][ T1567] usb 2-1: New USB device found: idVendor=0cf2, idProduct=6250, bcdDevice=0.00 [ 466.483383][ T1567] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.483407][ T1567] usb 2-1: Product: syz [ 466.483419][ T1567] usb 2-1: Manufacturer: syz [ 466.483430][ T1567] usb 2-1: SerialNumber: syz [ 466.536269][ T1567] ums_eneub6250 2-1:1.0: USB Mass Storage device detected [ 466.557154][ T1567] scsi host1: usb-storage 2-1:1.0 [ 466.925325][ T5739] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 467.038383][ T6311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.045813][ T6311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.077577][ T5739] usb 4-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 467.085587][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.085611][ T5739] usb 4-1: Product: syz [ 467.085624][ T5739] usb 4-1: Manufacturer: syz [ 467.085638][ T5739] usb 4-1: SerialNumber: syz [ 467.186259][ T992] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 467.435192][ T5659] Bluetooth: hci0: command 0x0c1a tx timeout [ 467.504296][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 467.504439][ T5659] Bluetooth: hci1: command 0x0c1a tx timeout [ 467.585953][ T5659] Bluetooth: hci3: command 0x0c1a tx timeout [ 467.612673][ T6285] batadv_slave_1: left promiscuous mode [ 467.753787][ T27] usb 4-1: USB disconnect, device number 10 [ 468.345461][ T6314] ======================================================= [ 468.345461][ T6314] WARNING: The mand mount option has been deprecated and [ 468.345461][ T6314] and is ignored by this kernel. Remove the mand [ 468.345461][ T6314] option from the mount to silence this warning. [ 468.345461][ T6314] ======================================================= [ 468.464482][ T992] usb 4-1: Service connection timeout for: 256 [ 468.464522][ T992] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 468.465564][ T992] ath9k_htc: Failed to initialize the device [ 468.468603][ T27] usb 4-1: ath9k_htc: USB layer deinitialized [ 468.511515][ T5740] usb 3-1: USB disconnect, device number 10 [ 468.916873][ T6316] FAULT_INJECTION: forcing a failure. [ 468.916873][ T6316] name failslab, interval 1, probability 0, space 0, times 0 [ 468.916904][ T6316] CPU: 0 UID: 0 PID: 6316 Comm: syz.3.179 Not tainted syzkaller #0 PREEMPT(full) [ 468.916929][ T6316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 468.916941][ T6316] Call Trace: [ 468.916948][ T6316] [ 468.916956][ T6316] dump_stack_lvl+0xe8/0x150 [ 468.917087][ T6316] should_fail_ex+0x3eb/0x540 [ 468.917234][ T6316] should_failslab+0xa8/0x100 [ 468.917306][ T6316] __kmalloc_noprof+0xf9/0x710 [ 468.917344][ T6316] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 468.917461][ T6316] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 468.917497][ T6316] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 468.917534][ T6316] genl_family_rcv_msg_doit+0xda/0x340 [ 468.917582][ T6316] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 468.917613][ T6316] ? __pfx_genl_get_cmd+0x10/0x10 [ 468.917641][ T6316] ? __lock_acquire+0x747/0x2de0 [ 468.917704][ T6316] genl_rcv_msg+0x614/0x7a0 [ 468.917738][ T6316] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.917763][ T6316] ? __pfx_devlink_nl_pre_doit_port+0x10/0x10 [ 468.917842][ T6316] ? __pfx_devlink_nl_port_param_get_doit+0x10/0x10 [ 468.917915][ T6316] ? __pfx_devlink_nl_post_doit+0x10/0x10 [ 468.917950][ T6316] netlink_rcv_skb+0x226/0x4a0 [ 468.917974][ T6316] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.918002][ T6316] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 468.918039][ T6316] ? down_read+0x2b9/0x320 [ 468.918143][ T6316] genl_rcv+0x28/0x40 [ 468.918166][ T6316] netlink_unicast+0x8ef/0xa80 [ 468.918202][ T6316] netlink_sendmsg+0x7c3/0xae0 [ 468.918231][ T6316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.918262][ T6316] ? apparmor_socket_sendmsg+0x98/0x360 [ 468.918340][ T6316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.918361][ T6316] sock_sendmsg_nosec+0x14e/0x190 [ 468.918449][ T6316] ____sys_sendmsg+0x54e/0x850 [ 468.918506][ T6316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.918543][ T6316] ? import_iovec+0x73/0xa0 [ 468.918601][ T6316] ___sys_sendmsg+0x2a5/0x360 [ 468.918627][ T6316] ? __lock_acquire+0x747/0x2de0 [ 468.918661][ T6316] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.918726][ T6316] ? __fget_files+0x3a2/0x420 [ 468.918794][ T6316] ? __fget_files+0x2a/0x420 [ 468.918830][ T6316] __x64_sys_sendmsg+0x1b1/0x290 [ 468.918862][ T6316] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 468.918912][ T6316] do_syscall_64+0x166/0x520 [ 468.918959][ T6316] ? trace_irq_disable+0x3b/0x140 [ 468.918997][ T6316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.919033][ T6316] ? clear_bhb_loop+0x70/0xc0 [ 468.919057][ T6316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.919076][ T6316] RIP: 0033:0x7f0697d9e2d9 [ 468.919094][ T6316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.919110][ T6316] RSP: 002b:00007f0698d10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.919130][ T6316] RAX: ffffffffffffffda RBX: 00007f0698025fa0 RCX: 00007f0697d9e2d9 [ 468.919144][ T6316] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 468.919156][ T6316] RBP: 00007f0698d10090 R08: 0000000000000000 R09: 0000000000000000 [ 468.919168][ T6316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.919180][ T6316] R13: 00007f0698026038 R14: 00007f0698025fa0 R15: 00007fff4e5b6a88 [ 468.919212][ T6316] [ 469.032326][ T6320] netlink: 132 bytes leftover after parsing attributes in process `syz.3.181'. [ 469.204189][ T27] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 469.328717][ T1567] ums_eneub6250 2-1:1.0: probe with driver ums_eneub6250 failed with error 3 [ 469.339710][ T1567] usb 2-1: USB disconnect, device number 14 [ 469.378017][ T6329] FAULT_INJECTION: forcing a failure. [ 469.378017][ T6329] name fail_futex, interval 1, probability 0, space 0, times 0 [ 469.378044][ T6329] CPU: 0 UID: 0 PID: 6329 Comm: syz.3.184 Not tainted syzkaller #0 PREEMPT(full) [ 469.378065][ T6329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.378076][ T6329] Call Trace: [ 469.378083][ T6329] [ 469.378091][ T6329] dump_stack_lvl+0xe8/0x150 [ 469.378120][ T6329] should_fail_ex+0x3eb/0x540 [ 469.378155][ T6329] get_futex_key+0x1b4/0x1580 [ 469.378210][ T6329] ? __pfx_futex_wake_mark+0x10/0x10 [ 469.378243][ T6329] ? __pfx_get_futex_key+0x10/0x10 [ 469.378266][ T6329] ? __lock_acquire+0x747/0x2de0 [ 469.378301][ T6329] futex_wake+0x119/0x5f0 [ 469.378331][ T6329] ? __pfx_futex_wait+0x10/0x10 [ 469.378362][ T6329] ? __pfx_futex_wake+0x10/0x10 [ 469.378394][ T6329] ? lock_acquire+0x115/0x350 [ 469.378429][ T6329] do_futex+0x458/0x4e0 [ 469.378458][ T6329] ? __pfx_do_futex+0x10/0x10 [ 469.378480][ T6329] ? __fget_files+0x3a2/0x420 [ 469.378506][ T6329] ? __fget_files+0x2a/0x420 [ 469.378546][ T6329] __se_sys_futex+0x3a8/0x450 [ 469.378575][ T6329] ? ksys_write+0xf8/0x270 [ 469.378692][ T6329] ? __pfx___se_sys_futex+0x10/0x10 [ 469.378717][ T6329] ? __pfx_ksys_write+0x10/0x10 [ 469.378748][ T6329] ? __x64_sys_futex+0x21/0xf0 [ 469.378774][ T6329] do_syscall_64+0x166/0x520 [ 469.378796][ T6329] ? trace_irq_disable+0x3b/0x140 [ 469.378816][ T6329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.378836][ T6329] ? clear_bhb_loop+0x70/0xc0 [ 469.378858][ T6329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.378876][ T6329] RIP: 0033:0x7f0697d9e2d9 [ 469.378894][ T6329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.378908][ T6329] RSP: 002b:00007f0698cad0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 469.378928][ T6329] RAX: ffffffffffffffda RBX: 00007f0698026278 RCX: 00007f0697d9e2d9 [ 469.378942][ T6329] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f069802627c [ 469.378954][ T6329] RBP: 00007f0698026270 R08: 3fffffffffffffff R09: 0000000000000000 [ 469.378966][ T6329] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 469.378977][ T6329] R13: 00007f0698026308 R14: 00007fff4e5b69a0 R15: 00007fff4e5b6a88 [ 469.379007][ T6329] [ 469.409549][ T27] usb 3-1: New USB device found: idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 469.410541][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.410561][ T27] usb 3-1: config 0 has no interfaces? [ 469.411823][ T27] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 469.411845][ T27] usb 3-1: Product: syz [ 469.422042][ T27] usb 3-1: config 0 descriptor?? [ 469.447354][ T6328] netlink: 14 bytes leftover after parsing attributes in process `syz.3.184'. [ 469.503238][ T6329] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 469.503417][ T6330] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 469.596208][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 469.596258][ T5659] Bluetooth: hci1: command 0x0c1a tx timeout [ 469.629120][ T27] usb 3-1: USB disconnect, device number 11 [ 469.675212][ T5659] Bluetooth: hci3: command 0x0c1a tx timeout [ 469.764201][ T1567] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 469.915839][ T1567] usb 2-1: New USB device found: idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 469.916849][ T1567] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.916877][ T1567] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.916912][ T1567] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.919191][ T1567] usb 2-1: config 0 descriptor?? [ 470.141238][ T6326] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 470.151872][ T6327] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 470.291546][ T6332] orangefs: client-core tried to read wrong size [ 470.332753][ T1567] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 470.332787][ T1567] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 470.332804][ T1567] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 470.332819][ T1567] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 470.332835][ T1567] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 470.389933][ T6342] Bluetooth: MGMT ver 1.23 [ 470.391169][ T1567] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 470.412235][ T6341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'. [ 470.524344][ T5740] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 470.654220][ T27] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 470.694969][ T5740] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 470.696165][ T5740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.727814][ T1567] playstation 0003:054C:0DF2.0004: Failed to retrieve feature with reportID 32: -32 [ 470.727902][ T1567] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense firmware info: -32 [ 470.727954][ T1567] playstation 0003:054C:0DF2.0004: Failed to get firmware info from DualSense [ 470.728003][ T1567] playstation 0003:054C:0DF2.0004: Failed to create dualsense. [ 470.730501][ T1567] playstation 0003:054C:0DF2.0004: probe with driver playstation failed with error -32 [ 470.814210][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 470.815381][ T27] usb 3-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 470.816310][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.816336][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.816359][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 470.816400][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.819719][ T27] usb 3-1: config 0 descriptor?? [ 470.903608][ T5740] cdc_acm 4-1:1.0: ttyACM1: USB ACM device [ 471.155518][ T992] usb 4-1: USB disconnect, device number 11 [ 471.226475][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 471.226604][ T27] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 471.239152][ T27] usb 3-1: USB disconnect, device number 12 [ 471.680329][ T27] usb 1-1: USB disconnect, device number 13 [ 471.730070][ T6349] virtio-fs: tag not found [ 471.863800][ T6355] FAULT_INJECTION: forcing a failure. [ 471.863800][ T6355] name failslab, interval 1, probability 0, space 0, times 0 [ 471.863830][ T6355] CPU: 1 UID: 0 PID: 6355 Comm: syz.2.192 Not tainted syzkaller #0 PREEMPT(full) [ 471.863861][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 471.863872][ T6355] Call Trace: [ 471.863879][ T6355] [ 471.863888][ T6355] dump_stack_lvl+0xe8/0x150 [ 471.863918][ T6355] should_fail_ex+0x3eb/0x540 [ 471.863954][ T6355] should_failslab+0xa8/0x100 [ 471.863976][ T6355] __kmalloc_cache_noprof+0x9e/0x600 [ 471.864003][ T6355] ? __kmalloc_cache_noprof+0x148/0x600 [ 471.864029][ T6355] ? erofs_init_fs_context+0x93/0x280 [ 471.864135][ T6355] ? erofs_init_fs_context+0x93/0x280 [ 471.864167][ T6355] erofs_init_fs_context+0x93/0x280 [ 471.864199][ T6355] alloc_fs_context+0x99e/0xd00 [ 471.864274][ T6355] __se_sys_fsopen+0x118/0x370 [ 471.864300][ T6355] do_syscall_64+0x166/0x520 [ 471.864323][ T6355] ? trace_irq_disable+0x3b/0x140 [ 471.864345][ T6355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.864366][ T6355] ? clear_bhb_loop+0x70/0xc0 [ 471.864391][ T6355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.864411][ T6355] RIP: 0033:0x7ff06ab9e2d9 [ 471.864430][ T6355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.864447][ T6355] RSP: 002b:00007ff06ba39028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 471.864468][ T6355] RAX: ffffffffffffffda RBX: 00007ff06ae25fa0 RCX: 00007ff06ab9e2d9 [ 471.864482][ T6355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 471.864495][ T6355] RBP: 00007ff06ac35888 R08: 0000000000000000 R09: 0000000000000000 [ 471.864508][ T6355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.864520][ T6355] R13: 00007ff06ae26038 R14: 00007ff06ae25fa0 R15: 00007ffe5069d8b8 [ 471.864552][ T6355] [ 471.997265][ T6359] netlink: 168 bytes leftover after parsing attributes in process `syz.2.194'. [ 472.001481][ T6359] netlink: 24 bytes leftover after parsing attributes in process `syz.2.194'. [ 472.135221][ T27] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 472.164059][ T6359] overlay: Unknown parameter 'audit' [ 472.256436][ T5806] usb 2-1: USB disconnect, device number 15 [ 472.304891][ T27] usb 1-1: New USB device found: idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 472.308313][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.308336][ T27] usb 1-1: config 0 has no interfaces? [ 472.309446][ T27] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 472.309469][ T27] usb 1-1: Product: syz [ 472.322228][ T27] usb 1-1: config 0 descriptor?? [ 472.527975][ T5806] usb 1-1: USB disconnect, device number 14 [ 472.664255][ T27] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 472.815114][ T27] usb 4-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 472.816486][ T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 472.816515][ T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 472.816539][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 472.816578][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.822104][ T6368] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 472.822234][ T6368] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 472.831375][ T27] pl2303 4-1:1.0: pl2303 converter detected [ 472.854866][ T27] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 473.149196][ T6368] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 473.150557][ T6368] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 473.151907][ T6368] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 473.152499][ T6368] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 473.173705][ T6368] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 473.354748][ T6386] input: syz1 as /devices/virtual/input/input10 [ 473.456255][ T6368] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 473.456954][ T6368] pl2303 ttyUSB0: error sending break = -32 [ 473.463373][ T27] usb 4-1: USB disconnect, device number 12 [ 473.517382][ T27] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 473.518104][ T27] pl2303 4-1:1.0: device disconnected [ 473.689004][ T6390] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 473.897611][ T6402] netlink: Invalid conntrack helper [ 473.897639][ T6402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.899043][ T6402] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.205'. [ 473.965118][ T5806] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 474.116852][ T5806] usb 1-1: New USB device found: idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 474.120572][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.120595][ T5806] usb 1-1: Product: syz [ 474.120608][ T5806] usb 1-1: Manufacturer: syz [ 474.120621][ T5806] usb 1-1: SerialNumber: syz [ 474.134879][ T5806] usb 1-1: config 0 descriptor?? [ 474.141846][ T5806] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 474.141874][ T5806] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 474.141946][ T5806] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 474.324238][ T5739] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 474.352073][ T5740] usb 1-1: USB disconnect, device number 15 [ 474.364747][ T1567] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 474.404292][ T5806] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 474.474874][ T5739] usb 4-1: New USB device found: idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 474.475773][ T5739] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.475794][ T5739] usb 4-1: config 0 has no interfaces? [ 474.476748][ T5739] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 474.476771][ T5739] usb 4-1: Product: syz [ 474.478315][ T5739] usb 4-1: config 0 descriptor?? [ 474.544994][ T1567] usb 3-1: New USB device found: idVendor=06cd, idProduct=010f, bcdDevice=1.00 [ 474.545893][ T1567] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 474.545948][ T1567] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 474.545972][ T1567] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 474.545990][ T1567] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 474.546042][ T1567] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 474.546066][ T1567] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 474.546088][ T1567] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 474.546111][ T1567] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 474.546131][ T1567] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 474.546143][ T1567] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 474.546155][ T1567] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 474.546167][ T1567] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 474.546178][ T1567] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 14385, setting to 1024 [ 474.546191][ T1567] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 474.546202][ T1567] usb 3-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 474.548034][ T1567] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.548055][ T1567] usb 3-1: Product: syz [ 474.548069][ T1567] usb 3-1: Manufacturer: syz [ 474.548083][ T1567] usb 3-1: SerialNumber: syz [ 474.550557][ T6412] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 474.550687][ T6412] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 474.550818][ T6412] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 474.550944][ T6412] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 474.551038][ T6412] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 474.551158][ T6412] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 474.551277][ T6412] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 474.551427][ T6412] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 474.551549][ T6412] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 474.551669][ T6412] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 474.551881][ T6412] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 474.552033][ T6412] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 474.554096][ T1567] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 474.558161][ T5806] usb 2-1: unable to get BOS descriptor or descriptor too short [ 474.558203][ T5806] usb 2-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 474.560296][ T5806] usb 2-1: config 142 has an invalid interface number: 251 but max is 0 [ 474.560318][ T5806] usb 2-1: config 142 has no interface number 0 [ 474.560355][ T5806] usb 2-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 474.560379][ T5806] usb 2-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 474.560402][ T5806] usb 2-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 474.560423][ T5806] usb 2-1: config 142 interface 251 has no altsetting 0 [ 474.565786][ T5806] usb 2-1: string descriptor 0 read error: -22 [ 474.565905][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.573191][ T6414] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 474.573341][ T6414] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 474.577699][ T5806] cypress_m8 2-1:142.251: HID->COM RS232 Adapter converter detected [ 474.584728][ T5806] usb 2-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 474.655547][ T1567] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 7 [ 474.660928][ T1567] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 474.662724][ T1567] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 474.664789][ T1567] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 474.706716][ T1567] usb 4-1: USB disconnect, device number 13 [ 474.781303][ T6412] FAULT_INJECTION: forcing a failure. [ 474.781303][ T6412] name failslab, interval 1, probability 0, space 0, times 0 [ 474.781331][ T6412] CPU: 0 UID: 0 PID: 6412 Comm: syz.2.210 Not tainted syzkaller #0 PREEMPT(full) [ 474.781353][ T6412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 474.781364][ T6412] Call Trace: [ 474.781372][ T6412] [ 474.781380][ T6412] dump_stack_lvl+0xe8/0x150 [ 474.781411][ T6412] should_fail_ex+0x3eb/0x540 [ 474.781448][ T6412] ? __pfx_sock_alloc_inode+0x10/0x10 [ 474.781470][ T6412] should_failslab+0xa8/0x100 [ 474.781492][ T6412] ? __pfx_sock_alloc_inode+0x10/0x10 [ 474.781512][ T6412] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 474.781541][ T6412] ? sock_alloc_inode+0x2c/0x1a0 [ 474.781561][ T6412] ? sock_alloc_inode+0x2c/0x1a0 [ 474.781583][ T6412] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 474.781610][ T6412] ? __pfx_sock_alloc_inode+0x10/0x10 [ 474.781631][ T6412] sock_alloc_inode+0x2c/0x1a0 [ 474.781653][ T6412] ? __pfx_sock_alloc_inode+0x10/0x10 [ 474.781673][ T6412] alloc_inode+0x6a/0x1b0 [ 474.781782][ T6412] __sock_create+0x127/0xac0 [ 474.781813][ T6412] __sys_socket+0xd6/0x1b0 [ 474.781840][ T6412] __x64_sys_socket+0x7a/0x90 [ 474.781866][ T6412] do_syscall_64+0x166/0x520 [ 474.781890][ T6412] ? trace_irq_disable+0x3b/0x140 [ 474.781909][ T6412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.781929][ T6412] ? clear_bhb_loop+0x70/0xc0 [ 474.781953][ T6412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.781973][ T6412] RIP: 0033:0x7ff06ab9e2d9 [ 474.781991][ T6412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.782006][ T6412] RSP: 002b:00007ff06ba39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 474.782027][ T6412] RAX: ffffffffffffffda RBX: 00007ff06ae25fa0 RCX: 00007ff06ab9e2d9 [ 474.782042][ T6412] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 474.782054][ T6412] RBP: 00007ff06ac35888 R08: 0000000000000000 R09: 0000000000000000 [ 474.782067][ T6412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.782078][ T6412] R13: 00007ff06ae26038 R14: 00007ff06ae25fa0 R15: 00007ffe5069d8b8 [ 474.782108][ T6412] [ 474.784489][ T6412] socket: no more sockets [ 475.050638][ T1567] usb 2-1: USB disconnect, device number 16 [ 475.057217][ T6412] cyphidcom ttyUSB0: cypress_serial_control - failed to retrieve serial line settings - -19 [ 475.057242][ T6412] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 475.057290][ T6412] cyphidcom ttyUSB0: cypress_open - failed submitting read urb, error -19 [ 475.069041][ T5740] usb 3-1: USB disconnect, device number 13 [ 475.072815][ T1567] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 475.073368][ T1567] cypress_m8 2-1:142.251: device disconnected [ 475.121329][ T5740] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 475.141719][ T5740] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 475.146469][ T5740] keyspan 3-1:1.0: device disconnected [ 475.204381][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 475.344868][ T9] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 475.346252][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 475.346277][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 475.348269][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.348283][ T9] usb 1-1: Product: syz [ 475.348290][ T9] usb 1-1: Manufacturer: syz [ 475.348297][ T9] usb 1-1: SerialNumber: syz [ 475.558593][ T6416] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 475.641680][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.215'. [ 475.884355][ T1567] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 475.885481][ T5629] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 476.034300][ T5629] usb 2-1: Using ep0 maxpacket: 32 [ 476.035120][ T1567] usb 3-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 476.036443][ T1567] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.036472][ T1567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.039983][ T1567] usb 3-1: config 0 descriptor?? [ 476.041753][ T6425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.042181][ T6425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.099645][ T5629] usb 2-1: unable to get BOS descriptor or descriptor too short [ 476.099689][ T5629] usb 2-1: New USB device found: idVendor=0c45, idProduct=608c, bcdDevice=d.82 [ 476.100437][ T5629] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 476.100456][ T5629] usb 2-1: can't read configurations, error -71 [ 476.101315][ T1567] pwc: Askey VC010 type 2 USB webcam detected. [ 476.160802][ T6416] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 476.361954][ T9] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 476.361994][ T9] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 476.424279][ T5747] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 476.443664][ T1567] pwc: recv_control_msg error -32 req 02 val 2b00 [ 476.449076][ T1567] pwc: recv_control_msg error -32 req 02 val 2700 [ 476.453262][ T6423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.453761][ T6423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.456739][ T1567] pwc: recv_control_msg error -32 req 02 val 2c00 [ 476.563059][ T6416] capability: warning: `syz.0.212' uses 32-bit capabilities (legacy support in use) [ 476.586073][ T5747] usb 4-1: unable to get BOS descriptor or descriptor too short [ 476.586660][ T5747] usb 4-1: not running at top speed; connect to a high speed hub [ 476.586689][ T5747] usb 4-1: New USB device found: idVendor=2013, idProduct=025c, bcdDevice=a4.f9 [ 476.591618][ T5747] usb 4-1: config 12 has an invalid interface number: 126 but max is 0 [ 476.591642][ T5747] usb 4-1: config 12 has no interface number 0 [ 476.591672][ T5747] usb 4-1: config 12 interface 126 has no altsetting 0 [ 476.598207][ T5747] usb 4-1: string descriptor 0 read error: -22 [ 476.598351][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.618100][ T9] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 476.642892][ T9] usb 1-1: USB disconnect, device number 16 [ 476.647015][ T9] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 476.671717][ T1567] pwc: recv_control_msg error -71 req 04 val 1300 [ 476.673634][ T1567] pwc: recv_control_msg error -71 req 04 val 1400 [ 476.675174][ T1567] pwc: recv_control_msg error -71 req 02 val 2000 [ 476.675996][ T1567] pwc: recv_control_msg error -71 req 02 val 2100 [ 476.678006][ T1567] pwc: recv_control_msg error -71 req 04 val 1500 [ 476.679196][ T1567] pwc: recv_control_msg error -71 req 02 val 2500 [ 476.681164][ T1567] pwc: recv_control_msg error -71 req 02 val 2400 [ 476.683316][ T1567] pwc: recv_control_msg error -71 req 02 val 2600 [ 476.684012][ T1567] pwc: recv_control_msg error -71 req 02 val 2900 [ 476.684500][ T1567] pwc: recv_control_msg error -71 req 02 val 2800 [ 476.685399][ T1567] pwc: recv_control_msg error -71 req 04 val 1100 [ 476.686419][ T1567] pwc: recv_control_msg error -71 req 04 val 1200 [ 476.698053][ T1567] pwc: Registered as video103. [ 476.704971][ T1567] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 476.802510][ T1567] usb 3-1: USB disconnect, device number 14 [ 476.812637][ T5747] dvb-usb: found a 'PCTV 2002e' in warm state. [ 476.891950][ T5747] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 476.899718][ T5747] dvbdev: DVB: registering new adapter (PCTV 2002e) [ 476.899863][ T5747] usb 4-1: media controller created [ 476.916575][ T5747] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 477.014247][ T5747] DVB: Unable to find symbol dib7000p_attach() [ 477.014264][ T5747] dvb-usb: no frontend was attached by 'PCTV 2002e' [ 477.014276][ T5747] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 477.014938][ T5747] dvbdev: DVB: registering new adapter (PCTV 2002e) [ 477.014969][ T5747] usb 4-1: media controller created [ 477.017721][ T5747] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 477.122967][ T5747] DVB: Unable to find symbol dib7000p_attach() [ 477.122984][ T5747] dvb-usb: no frontend was attached by 'PCTV 2002e' [ 477.205245][ T5747] rc_core: IR keymap rc-dib0700-rc5 not found [ 477.205265][ T5747] Registered IR keymap rc-empty [ 477.212836][ T5747] dvb-usb: could not initialize remote control. [ 477.212850][ T5747] dvb-usb: PCTV 2002e successfully initialized and connected. [ 477.214082][ T6439] comedi comedi3: pcl726: I/O base address or length out of range [ 477.222741][ T5747] usb 4-1: USB disconnect, device number 14 [ 477.313137][ T5747] dvb-usb: PCTV 2002e successfully deinitialized and disconnected. [ 477.424338][ T5806] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 477.574250][ T5806] usb 1-1: Using ep0 maxpacket: 16 [ 477.574421][ T5739] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 477.575697][ T5806] usb 1-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 477.576918][ T5806] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 477.576946][ T5806] usb 1-1: config 0 interface 0 has no altsetting 0 [ 477.579209][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.579232][ T5806] usb 1-1: Product: syz [ 477.579247][ T5806] usb 1-1: Manufacturer: syz [ 477.579266][ T5806] usb 1-1: SerialNumber: syz [ 477.581977][ T5806] usb 1-1: config 0 descriptor?? [ 477.624912][ T992] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 477.724223][ T5739] usb 3-1: Using ep0 maxpacket: 16 [ 477.724724][ T5739] usb 3-1: New USB device found: idVendor=093a, idProduct=050f, bcdDevice=f1.a0 [ 477.725635][ T5739] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 477.727497][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.727520][ T5739] usb 3-1: Product: syz [ 477.727534][ T5739] usb 3-1: Manufacturer: syz [ 477.727548][ T5739] usb 3-1: SerialNumber: syz [ 477.796251][ T992] usb 2-1: New USB device found: idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 477.799846][ T992] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.799862][ T992] usb 2-1: config 0 has no interfaces? [ 477.803702][ T992] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 477.803717][ T992] usb 2-1: Product: syz [ 477.806169][ T5806] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 477.810588][ T992] usb 2-1: config 0 descriptor?? [ 477.955515][ T6450] openvswitch: netlink: IP tunnel TTL not specified. [ 477.969806][ T6447] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 477.992719][ T6450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.017665][ T5739] gspca_main: mars-2.14.0 probing 093a:050f [ 478.020393][ T9] usb 2-1: USB disconnect, device number 19 [ 478.065922][ T5739] usb 3-1: USB disconnect, device number 15 [ 478.127483][ T5806] rc_core: IR keymap rc-imon-pad not found [ 478.127501][ T5806] Registered IR keymap rc-empty [ 478.127630][ T5806] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 478.127648][ T5806] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 478.220567][ T5806] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 478.231984][ T5806] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input14 [ 478.251920][ T5806] imon 1-1:0.0: iMON device (15c2:0041) on usb<1:17> initialized [ 478.387054][ T6461] FAULT_INJECTION: forcing a failure. [ 478.387054][ T6461] name failslab, interval 1, probability 0, space 0, times 0 [ 478.387075][ T6461] CPU: 0 UID: 0 PID: 6461 Comm: syz.3.225 Not tainted syzkaller #0 PREEMPT(full) [ 478.387088][ T6461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 478.387095][ T6461] Call Trace: [ 478.387099][ T6461] [ 478.387104][ T6461] dump_stack_lvl+0xe8/0x150 [ 478.387132][ T6461] should_fail_ex+0x3eb/0x540 [ 478.387171][ T6461] should_failslab+0xa8/0x100 [ 478.387192][ T6461] ? security_file_alloc+0x34/0x310 [ 478.387281][ T6461] kmem_cache_alloc_noprof+0x9c/0x600 [ 478.387309][ T6461] ? rcu_is_watching+0x16/0xb0 [ 478.387345][ T6461] ? security_file_alloc+0x34/0x310 [ 478.387367][ T6461] security_file_alloc+0x34/0x310 [ 478.387380][ T6461] init_file+0x90/0x2b0 [ 478.387395][ T6461] alloc_empty_file+0x74/0x1d0 [ 478.387408][ T6461] alloc_file_pseudo+0x110/0x1e0 [ 478.387475][ T6461] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 478.387506][ T6461] ? alloc_anon_inode+0x194/0x330 [ 478.387567][ T6461] aio_setup_ring+0x1eb/0xe20 [ 478.387626][ T6461] ? pcpu_alloc_noprof+0x1036/0x1900 [ 478.387657][ T6461] ? __pfx_aio_setup_ring+0x10/0x10 [ 478.387681][ T6461] ioctx_alloc+0x313/0x830 [ 478.387692][ T6461] ? __might_fault+0xaf/0x130 [ 478.387706][ T6461] __se_sys_io_setup+0x7b/0x1d0 [ 478.387754][ T6461] do_syscall_64+0x166/0x520 [ 478.387782][ T6461] ? trace_irq_disable+0x3b/0x140 [ 478.387803][ T6461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.387824][ T6461] ? clear_bhb_loop+0x70/0xc0 [ 478.387837][ T6461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.387848][ T6461] RIP: 0033:0x7f0697d9e2d9 [ 478.387860][ T6461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.387869][ T6461] RSP: 002b:00007f0698d10028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 478.387881][ T6461] RAX: ffffffffffffffda RBX: 00007f0698025fa0 RCX: 00007f0697d9e2d9 [ 478.387896][ T6461] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000008 [ 478.387910][ T6461] RBP: 00007f0697e35888 R08: 0000000000000000 R09: 0000000000000000 [ 478.387923][ T6461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.387936][ T6461] R13: 00007f0698026038 R14: 00007f0698025fa0 R15: 00007fff4e5b6a88 [ 478.387969][ T6461] [ 478.689402][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 478.690210][ T5747] usb 1-1: USB disconnect, device number 17 [ 478.733584][ T6467] syzkaller1: entered promiscuous mode [ 478.733606][ T6467] syzkaller1: entered allmulticast mode [ 478.914842][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 479.074938][ T9] usb 4-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 479.077605][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.077636][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 479.077652][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 479.077664][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.077687][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.152966][ T6475] netlink: 92 bytes leftover after parsing attributes in process `syz.1.231'. [ 479.490903][ T6465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.491246][ T6465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.494586][ T5747] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 479.657262][ T5747] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 479.658367][ T5747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.660461][ T5747] usb 2-1: config 0 descriptor?? [ 479.869830][ T6478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.871271][ T6478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.872477][ T5747] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 480.094955][ T5747] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 480.094985][ T5747] [drm] Initialized udl on minor 2 [ 480.126432][ T9] gud 4-1:1.0: USB-1: Failed to add properties (ret=-5) [ 480.126481][ T9] gud 4-1:1.0: Failed to get connectors (error=-5) [ 480.126507][ T9] gud 4-1:1.0: probe with driver gud failed with error -5 [ 480.337469][ T5739] usb 4-1: USB disconnect, device number 15 [ 480.432526][ T5747] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 480.446774][ T5747] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 480.452022][ T5747] usb 2-1: USB disconnect, device number 20 [ 480.495024][ T5806] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 480.618004][ T6493] FAULT_INJECTION: forcing a failure. [ 480.618004][ T6493] name failslab, interval 1, probability 0, space 0, times 0 [ 480.618023][ T6493] CPU: 0 UID: 0 PID: 6493 Comm: syz.2.237 Not tainted syzkaller #0 PREEMPT(full) [ 480.618036][ T6493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 480.618042][ T6493] Call Trace: [ 480.618047][ T6493] [ 480.618052][ T6493] dump_stack_lvl+0xe8/0x150 [ 480.618071][ T6493] should_fail_ex+0x3eb/0x540 [ 480.618093][ T6493] should_failslab+0xa8/0x100 [ 480.618106][ T6493] __kmalloc_noprof+0xf9/0x710 [ 480.618122][ T6493] ? tomoyo_encode+0x2ad/0x570 [ 480.618203][ T6493] ? tomoyo_encode+0x2ad/0x570 [ 480.618222][ T6493] tomoyo_encode+0x2ad/0x570 [ 480.618240][ T6493] tomoyo_realpath_from_path+0x5fa/0x640 [ 480.618260][ T6493] ? tomoyo_path_number_perm+0x219/0x5f0 [ 480.618273][ T6493] tomoyo_path_number_perm+0x246/0x5f0 [ 480.618287][ T6493] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 480.618299][ T6493] ? __lock_acquire+0x747/0x2de0 [ 480.618335][ T6493] ? __fget_files+0x2a/0x420 [ 480.618355][ T6493] ? __fget_files+0x2a/0x420 [ 480.618373][ T6493] ? __fget_files+0x2a/0x420 [ 480.618389][ T6493] security_file_ioctl+0xc3/0x2a0 [ 480.618402][ T6493] __se_sys_ioctl+0x47/0x170 [ 480.618446][ T6493] do_syscall_64+0x166/0x520 [ 480.618459][ T6493] ? trace_irq_disable+0x3b/0x140 [ 480.618470][ T6493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.618482][ T6493] ? clear_bhb_loop+0x70/0xc0 [ 480.618495][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.618506][ T6493] RIP: 0033:0x7ff06ab9df6b [ 480.618517][ T6493] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 480.618526][ T6493] RSP: 002b:00007ff06ba36f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.618539][ T6493] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007ff06ab9df6b [ 480.618546][ T6493] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 480.618553][ T6493] RBP: 00007ff06ba37fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 480.618559][ T6493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.618565][ T6493] R13: 0000200000000180 R14: 0000000000000003 R15: 0000000000000000 [ 480.618581][ T6493] [ 480.618593][ T6493] ERROR: Out of memory at tomoyo_realpath_from_path. [ 480.654745][ T5806] usb 1-1: Using ep0 maxpacket: 8 [ 480.655459][ T5806] usb 1-1: New USB device found: idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 480.658191][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 480.658213][ T5806] usb 1-1: Product: syz [ 480.658226][ T5806] usb 1-1: Manufacturer: syz [ 480.658239][ T5806] usb 1-1: SerialNumber: syz [ 480.662230][ T5806] usb 1-1: config 0 descriptor?? [ 480.670624][ T5806] gspca_main: sq905-2.14.0 probing 2770:9120 [ 480.934283][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 480.982500][ T6498] loop6: detected capacity change from 0 to 1 [ 481.084679][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 481.087482][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 481.087527][ T9] usb 3-1: New USB device found: idVendor=05a9, idProduct=0518, bcdDevice=52.4d [ 481.090993][ T9] usb 3-1: config 8 has an invalid interface number: 2 but max is 1 [ 481.091017][ T9] usb 3-1: config 8 has an invalid interface number: 214 but max is 1 [ 481.091039][ T9] usb 3-1: config 8 has no interface number 0 [ 481.091055][ T9] usb 3-1: config 8 has no interface number 1 [ 481.091105][ T9] usb 3-1: config 8 interface 2 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 481.091127][ T9] usb 3-1: config 8 interface 2 has no altsetting 0 [ 481.091144][ T9] usb 3-1: config 8 interface 214 has no altsetting 0 [ 481.135371][ T9] usb 3-1: Dual-Role OTG device on HNP port [ 481.141715][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.141741][ T9] usb 3-1: Product: syz [ 481.141754][ T9] usb 3-1: Manufacturer: syz [ 481.141769][ T9] usb 3-1: SerialNumber: syz [ 481.205503][ T6493] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 481.334260][ T5747] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 481.414231][ T992] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 481.484896][ T5747] usb 4-1: New USB device found: idVendor=0644, idProduct=8020, bcdDevice=0.40 [ 481.486182][ T5747] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 481.486209][ T5747] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 64, setting to 8 [ 481.486242][ T5747] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 8 [ 481.564911][ T992] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 481.566134][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.743861][ T5806] gspca_sq905: bulk read fail (-22) len 0/4 [ 481.743939][ T5806] sq905 1-1:0.0: probe with driver sq905 failed with error -5 [ 481.775919][ T992] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 483.259265][ T1567] usb 1-1: USB disconnect, device number 18 [ 483.722671][ T9] usb 3-1: USB disconnect, device number 16 [ 483.893682][ T6614] netlink: 40 bytes leftover after parsing attributes in process `syz.2.244'. [ 484.127462][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.148541][ T5747] usb 4-1: can't set config #1, error -71 [ 484.158018][ T5747] usb 4-1: USB disconnect, device number 16 [ 484.584931][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'. [ 484.658563][ T6624] FAULT_INJECTION: forcing a failure. [ 484.658563][ T6624] name failslab, interval 1, probability 0, space 0, times 0 [ 484.658595][ T6624] CPU: 1 UID: 0 PID: 6624 Comm: syz.0.248 Not tainted syzkaller #0 PREEMPT(full) [ 484.658620][ T6624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 484.658633][ T6624] Call Trace: [ 484.658641][ T6624] [ 484.658650][ T6624] dump_stack_lvl+0xe8/0x150 [ 484.658686][ T6624] should_fail_ex+0x3eb/0x540 [ 484.658725][ T6624] should_failslab+0xa8/0x100 [ 484.658749][ T6624] __kmalloc_cache_noprof+0x9e/0x600 [ 484.658780][ T6624] ? xa_load+0x1db/0x210 [ 484.658879][ T6624] ? __io_uring_add_tctx_node+0x186/0x630 [ 484.658954][ T6624] ? __io_uring_add_tctx_node+0x186/0x630 [ 484.658983][ T6624] __io_uring_add_tctx_node+0x186/0x630 [ 484.659012][ T6624] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 484.659038][ T6624] ? __anon_inode_getfile+0x169/0x200 [ 484.659069][ T6624] io_uring_create+0x591/0x980 [ 484.659105][ T6624] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 484.659158][ T6624] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 484.659186][ T6624] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 484.659225][ T6624] ? rcu_is_watching+0x16/0xb0 [ 484.659260][ T6624] do_syscall_64+0x166/0x520 [ 484.659282][ T6624] ? trace_irq_disable+0x3b/0x140 [ 484.659303][ T6624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.659325][ T6624] ? clear_bhb_loop+0x70/0xc0 [ 484.659351][ T6624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.659372][ T6624] RIP: 0033:0x7f871179e2d9 [ 484.659391][ T6624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.659409][ T6624] RSP: 002b:00007f871266dfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 484.659432][ T6624] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007f871179e2d9 [ 484.659448][ T6624] RDX: 0000200000000280 RSI: 0000200000000180 RDI: 0000000000003269 [ 484.659462][ T6624] RBP: 00007f8711835888 R08: 0000000000000000 R09: 0000000000000000 [ 484.659476][ T6624] R10: 0000200000000380 R11: 0000000000000206 R12: 0000200000000280 [ 484.659491][ T6624] R13: 0000200000000380 R14: 0000200000000200 R15: 00007ffd5e3568e8 [ 484.659524][ T6624] [ 484.922024][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 484.946628][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.252'. [ 484.997680][ T992] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 485.144886][ T992] usb 4-1: New USB device found: idVendor=06cd, idProduct=010f, bcdDevice=1.00 [ 485.145933][ T992] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 485.146005][ T992] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 485.146030][ T992] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 485.146046][ T992] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 485.146059][ T992] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 485.146086][ T992] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 485.146116][ T992] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 485.146128][ T992] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 485.146140][ T992] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 485.146152][ T992] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 485.146165][ T992] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 485.146177][ T992] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 485.146189][ T992] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 14385, setting to 1024 [ 485.146203][ T992] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 485.146215][ T992] usb 4-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 485.148704][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.148727][ T992] usb 4-1: Product: syz [ 485.148741][ T992] usb 4-1: Manufacturer: syz [ 485.148776][ T992] usb 4-1: SerialNumber: syz [ 485.152580][ T6626] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 485.152668][ T6626] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 485.152742][ T6626] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 485.152826][ T6626] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 485.152895][ T6626] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 485.152977][ T6626] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 485.153046][ T6626] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 485.153129][ T6626] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 485.153198][ T6626] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 485.153279][ T6626] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 485.153349][ T6626] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 485.153431][ T6626] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 485.159117][ T992] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 485.163552][ T992] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 485.167823][ T992] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 485.170158][ T992] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 485.172118][ T992] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 485.255378][ T5740] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 485.504375][ T5740] usb 3-1: Using ep0 maxpacket: 32 [ 485.507957][ T992] usb 4-1: USB disconnect, device number 17 [ 485.509804][ T5740] usb 3-1: New USB device found: idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 485.512651][ T5740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.512672][ T5740] usb 3-1: Product: syz [ 485.512686][ T5740] usb 3-1: Manufacturer: syz [ 485.512700][ T5740] usb 3-1: SerialNumber: syz [ 485.539821][ T992] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 485.568424][ T992] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 485.570274][ T5740] usb 3-1: config 0 descriptor?? [ 485.573982][ T992] keyspan 4-1:1.0: device disconnected [ 485.954269][ T5739] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 486.088036][ T6638] FAULT_INJECTION: forcing a failure. [ 486.088036][ T6638] name failslab, interval 1, probability 0, space 0, times 0 [ 486.088058][ T6638] CPU: 0 UID: 0 PID: 6638 Comm: syz.3.254 Not tainted syzkaller #0 PREEMPT(full) [ 486.088070][ T6638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 486.088077][ T6638] Call Trace: [ 486.088082][ T6638] [ 486.088087][ T6638] dump_stack_lvl+0xe8/0x150 [ 486.088123][ T6638] should_fail_ex+0x3eb/0x540 [ 486.088161][ T6638] should_failslab+0xa8/0x100 [ 486.088183][ T6638] __kmalloc_noprof+0xf9/0x710 [ 486.088197][ T6638] ? rcu_is_watching+0x16/0xb0 [ 486.088211][ T6638] ? handler_new_ref+0x244/0x930 [ 486.088315][ T6638] ? handler_new_ref+0x244/0x930 [ 486.088343][ T6638] handler_new_ref+0x244/0x930 [ 486.088362][ T6638] ? __pfx_v4l2_ctrl_type_op_init+0x10/0x10 [ 486.088378][ T6638] v4l2_ctrl_new+0x1395/0x1820 [ 486.088407][ T6638] v4l2_ctrl_new_std+0x24e/0x300 [ 486.088451][ T6638] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 486.088486][ T6638] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 486.088510][ T6638] ? find_ref_lock+0x425/0x480 [ 486.088527][ T6638] handler_new_ref+0x153/0x930 [ 486.088549][ T6638] ? __pfx_v4l2_ctrl_type_op_init+0x10/0x10 [ 486.088580][ T6638] v4l2_ctrl_new+0x1395/0x1820 [ 486.088623][ T6638] v4l2_ctrl_new_std+0x24e/0x300 [ 486.088651][ T6638] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 486.088666][ T6638] ? v4l2_ctrl_handler_init_class+0x1b3/0x2e0 [ 486.088682][ T6638] ? v4l2_ctrl_handler_init_class+0x1b3/0x2e0 [ 486.088703][ T6638] ? __kvmalloc_node_noprof+0x340/0x820 [ 486.088743][ T6638] ? v4l2_ctrl_handler_init_class+0x20d/0x2e0 [ 486.088777][ T6638] vicodec_open+0x30c/0xbf0 [ 486.088866][ T6638] v4l2_open+0x1bc/0x3a0 [ 486.088946][ T6638] chrdev_open+0x4d9/0x600 [ 486.088961][ T6638] ? __pfx_chrdev_open+0x10/0x10 [ 486.088975][ T6638] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 486.089021][ T6638] ? devcgroup_check_permission+0x31/0x8f0 [ 486.089111][ T6638] ? __pfx_chrdev_open+0x10/0x10 [ 486.089122][ T6638] do_dentry_open+0x80e/0x1360 [ 486.089143][ T6638] vfs_open_consume+0x4a/0x350 [ 486.089157][ T6638] ? path_openat+0x16e1/0x20f0 [ 486.089206][ T6638] path_openat+0x16fc/0x20f0 [ 486.089245][ T6638] do_file_open+0x258/0x570 [ 486.089257][ T6638] ? __pfx_do_file_open+0x10/0x10 [ 486.089279][ T6638] ? _raw_spin_unlock+0x28/0x50 [ 486.089289][ T6638] ? alloc_fd+0x6af/0x760 [ 486.089313][ T6638] do_sys_openat2+0x115/0x200 [ 486.089339][ T6638] ? __se_sys_futex+0x3a8/0x450 [ 486.089367][ T6638] ? __pfx_do_sys_openat2+0x10/0x10 [ 486.089395][ T6638] ? __pfx___se_sys_futex+0x10/0x10 [ 486.089415][ T6638] __x64_sys_openat+0x138/0x170 [ 486.089431][ T6638] do_syscall_64+0x166/0x520 [ 486.089444][ T6638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.089456][ T6638] ? clear_bhb_loop+0x70/0xc0 [ 486.089489][ T6638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.089510][ T6638] RIP: 0033:0x7f0697d9e2d9 [ 486.089529][ T6638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.089546][ T6638] RSP: 002b:00007f0698d10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 486.089560][ T6638] RAX: ffffffffffffffda RBX: 00007f0698025fa0 RCX: 00007f0697d9e2d9 [ 486.089568][ T6638] RDX: 0000000000000002 RSI: 0000200000000700 RDI: ffffffffffffff9c [ 486.089575][ T6638] RBP: 00007f0697e35888 R08: 0000000000000000 R09: 0000000000000000 [ 486.089582][ T6638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.089588][ T6638] R13: 00007f0698026038 R14: 00007f0698025fa0 R15: 00007fff4e5b6a88 [ 486.089607][ T6638] [ 486.127805][ T5739] usb 1-1: unable to get BOS descriptor or descriptor too short [ 486.127851][ T5739] usb 1-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 486.130631][ T5739] usb 1-1: config 8 has an invalid interface number: 109 but max is 0 [ 486.130655][ T5739] usb 1-1: config 8 has no interface number 0 [ 486.130692][ T5739] usb 1-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 486.130742][ T5739] usb 1-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 19095, setting to 8 [ 486.130768][ T5739] usb 1-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 486.135738][ T5739] usb 1-1: string descriptor 0 read error: -22 [ 486.135879][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.145408][ T6636] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 486.156542][ T5739] metro_usb 1-1:8.109: Metrologic USB to Serial converter detected [ 486.173885][ T5739] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 486.240024][ T6633] nvme_fabrics: found same hostid b2001a98-a867-4c1b-a4af-e3433983e272 but different hostnqn nq [ 486.244841][ T6641] FAULT_INJECTION: forcing a failure. [ 486.244841][ T6641] name failslab, interval 1, probability 0, space 0, times 0 [ 486.244870][ T6641] CPU: 1 UID: 0 PID: 6641 Comm: syz.3.255 Not tainted syzkaller #0 PREEMPT(full) [ 486.244891][ T6641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 486.244903][ T6641] Call Trace: [ 486.244910][ T6641] [ 486.244917][ T6641] dump_stack_lvl+0xe8/0x150 [ 486.244947][ T6641] should_fail_ex+0x3eb/0x540 [ 486.244989][ T6641] should_failslab+0xa8/0x100 [ 486.245011][ T6641] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 486.245037][ T6641] ? __kasan_kmalloc+0x93/0xb0 [ 486.245103][ T6641] ? nvmf_dev_write+0x460/0x2d90 [ 486.245192][ T6641] ? nvmf_dev_write+0x460/0x2d90 [ 486.245221][ T6641] ? __kmalloc_cache_noprof+0x148/0x600 [ 486.245250][ T6641] kstrdup+0x42/0x100 [ 486.245287][ T6641] nvmf_dev_write+0x460/0x2d90 [ 486.245333][ T6641] ? aa_file_perm+0x18b/0x15f0 [ 486.245363][ T6641] ? aa_file_perm+0x4ed/0x15f0 [ 486.245393][ T6641] ? __pfx_nvmf_dev_write+0x10/0x10 [ 486.245424][ T6641] ? kstrtoull+0x137/0x1d0 [ 486.245509][ T6641] ? __pfx_aa_file_perm+0x10/0x10 [ 486.245538][ T6641] ? lock_acquire+0x115/0x350 [ 486.245566][ T6641] ? get_pid_task+0x20/0x1f0 [ 486.245610][ T6641] ? __lock_acquire+0x747/0x2de0 [ 486.245641][ T6641] ? get_pid_task+0x20/0x1f0 [ 486.245669][ T6641] ? apparmor_file_permission+0x1fb/0x2b0 [ 486.245691][ T6641] ? bpf_lsm_file_permission+0x9/0x20 [ 486.245724][ T6641] ? security_file_permission+0x75/0x260 [ 486.245745][ T6641] ? rw_verify_area+0x203/0x4c0 [ 486.245773][ T6641] ? __pfx_nvmf_dev_write+0x10/0x10 [ 486.245801][ T6641] vfs_write+0x296/0xba0 [ 486.245836][ T6641] ? __pfx_vfs_write+0x10/0x10 [ 486.245865][ T6641] ? __fget_files+0x2a/0x420 [ 486.245889][ T6641] ? __fget_files+0x3a2/0x420 [ 486.245913][ T6641] ? __fget_files+0x2a/0x420 [ 486.245942][ T6641] ? fdget+0x1ac/0x250 [ 486.245979][ T6641] ksys_write+0x150/0x270 [ 486.246009][ T6641] ? __pfx_ksys_write+0x10/0x10 [ 486.246047][ T6641] do_syscall_64+0x166/0x520 [ 486.246068][ T6641] ? trace_irq_disable+0x3b/0x140 [ 486.246087][ T6641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.246106][ T6641] ? clear_bhb_loop+0x70/0xc0 [ 486.246127][ T6641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.246144][ T6641] RIP: 0033:0x7f0697d9e2d9 [ 486.246161][ T6641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.246176][ T6641] RSP: 002b:00007f0698d10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 486.246195][ T6641] RAX: ffffffffffffffda RBX: 00007f0698025fa0 RCX: 00007f0697d9e2d9 [ 486.246207][ T6641] RDX: 0000000000000083 RSI: 0000200000000340 RDI: 0000000000000003 [ 486.246219][ T6641] RBP: 00007f0698d10090 R08: 0000000000000000 R09: 0000000000000000 [ 486.246230][ T6641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.246241][ T6641] R13: 00007f0698026038 R14: 00007f0698025fa0 R15: 00007fff4e5b6a88 [ 486.246271][ T6641] [ 486.262839][ T5740] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 486.562352][ T5747] usb 1-1: USB disconnect, device number 19 [ 486.580507][ T5747] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 486.581031][ T5747] metro_usb 1-1:8.109: device disconnected [ 486.603262][ T5740] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 486.617410][ T5740] usb 3-1: USB disconnect, device number 17 [ 486.842039][ T6651] FAULT_INJECTION: forcing a failure. [ 486.842039][ T6651] name failslab, interval 1, probability 0, space 0, times 0 [ 486.842066][ T6651] CPU: 0 UID: 0 PID: 6651 Comm: syz.3.258 Not tainted syzkaller #0 PREEMPT(full) [ 486.842087][ T6651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 486.842098][ T6651] Call Trace: [ 486.842105][ T6651] [ 486.842113][ T6651] dump_stack_lvl+0xe8/0x150 [ 486.842143][ T6651] should_fail_ex+0x3eb/0x540 [ 486.842177][ T6651] should_failslab+0xa8/0x100 [ 486.842197][ T6651] ? security_file_alloc+0x34/0x310 [ 486.842217][ T6651] kmem_cache_alloc_noprof+0x9c/0x600 [ 486.842242][ T6651] ? rcu_is_watching+0x16/0xb0 [ 486.842264][ T6651] ? security_file_alloc+0x34/0x310 [ 486.842288][ T6651] security_file_alloc+0x34/0x310 [ 486.842309][ T6651] init_file+0x90/0x2b0 [ 486.842334][ T6651] alloc_empty_file+0x74/0x1d0 [ 486.842358][ T6651] path_openat+0x96/0x20f0 [ 486.842392][ T6651] do_file_open+0x258/0x570 [ 486.842412][ T6651] ? __pfx_do_file_open+0x10/0x10 [ 486.842449][ T6651] ? _raw_spin_unlock+0x28/0x50 [ 486.842468][ T6651] ? alloc_fd+0x6af/0x760 [ 486.842501][ T6651] do_sys_openat2+0x115/0x200 [ 486.842530][ T6651] ? __pfx_do_sys_openat2+0x10/0x10 [ 486.842553][ T6651] ? ksys_write+0x242/0x270 [ 486.842582][ T6651] ? __pfx_ksys_write+0x10/0x10 [ 486.842611][ T6651] __x64_sys_openat+0x138/0x170 [ 486.842638][ T6651] do_syscall_64+0x166/0x520 [ 486.842659][ T6651] ? trace_irq_disable+0x3b/0x140 [ 486.842678][ T6651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.842697][ T6651] ? clear_bhb_loop+0x70/0xc0 [ 486.842719][ T6651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.842738][ T6651] RIP: 0033:0x7f0697d9e2d9 [ 486.842755][ T6651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.842770][ T6651] RSP: 002b:00007f0698d10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 486.842790][ T6651] RAX: ffffffffffffffda RBX: 00007f0698025fa0 RCX: 00007f0697d9e2d9 [ 486.842804][ T6651] RDX: 0000000000000001 RSI: 00002000000007c0 RDI: ffffffffffffff9c [ 486.842816][ T6651] RBP: 00007f0698d10090 R08: 0000000000000000 R09: 0000000000000000 [ 486.842828][ T6651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.842840][ T6651] R13: 00007f0698026038 R14: 00007f0698025fa0 R15: 00007fff4e5b6a88 [ 486.842869][ T6651] [ 487.087161][ T6656] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 487.178538][ T5740] usb 2-1: USB disconnect, device number 21 [ 487.350142][ T6672] FAULT_INJECTION: forcing a failure. [ 487.350142][ T6672] name failslab, interval 1, probability 0, space 0, times 0 [ 487.350174][ T6672] CPU: 1 UID: 0 PID: 6672 Comm: syz.1.265 Not tainted syzkaller #0 PREEMPT(full) [ 487.350198][ T6672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 487.350210][ T6672] Call Trace: [ 487.350219][ T6672] [ 487.350227][ T6672] dump_stack_lvl+0xe8/0x150 [ 487.350259][ T6672] should_fail_ex+0x3eb/0x540 [ 487.350298][ T6672] should_failslab+0xa8/0x100 [ 487.350320][ T6672] ? __kernfs_new_node+0xe6/0x980 [ 487.350433][ T6672] kmem_cache_alloc_noprof+0x9c/0x600 [ 487.350464][ T6672] ? __kernfs_new_node+0xe6/0x980 [ 487.350494][ T6672] __kernfs_new_node+0xe6/0x980 [ 487.350526][ T6672] ? __pfx___kernfs_new_node+0x10/0x10 [ 487.350548][ T6672] ? kernfs_root+0x1c/0x230 [ 487.350577][ T6672] ? kernfs_root+0x1c/0x230 [ 487.350597][ T6672] ? kernfs_root+0x1c/0x230 [ 487.350624][ T6672] kernfs_new_node+0xeb/0x140 [ 487.350651][ T6672] kernfs_create_link+0xe3/0x240 [ 487.350682][ T6672] sysfs_do_create_link_sd+0x83/0x110 [ 487.350705][ T6672] device_add_class_symlinks+0xb6/0x240 [ 487.350801][ T6672] device_add+0x467/0xb80 [ 487.350832][ T6672] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 487.350926][ T6672] wakeup_source_register+0x17f/0x380 [ 487.350960][ T6672] ep_insert+0xfaf/0x1af0 [ 487.350997][ T6672] ? __pfx_ep_insert+0x10/0x10 [ 487.351034][ T6672] ? do_epoll_ctl_file+0xacd/0xee0 [ 487.351060][ T6672] do_epoll_ctl_file+0x8c2/0xee0 [ 487.351085][ T6672] ? do_epoll_ctl_file+0xacd/0xee0 [ 487.351111][ T6672] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 487.351135][ T6672] ? __fget_files+0x3a2/0x420 [ 487.351162][ T6672] ? __fget_files+0x2a/0x420 [ 487.351192][ T6672] ? fdget+0x1ac/0x250 [ 487.351222][ T6672] __se_sys_epoll_ctl+0x162/0x230 [ 487.351247][ T6672] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 487.351282][ T6672] do_syscall_64+0x166/0x520 [ 487.351308][ T6672] ? trace_irq_disable+0x3b/0x140 [ 487.351330][ T6672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.351358][ T6672] ? clear_bhb_loop+0x70/0xc0 [ 487.351383][ T6672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.351404][ T6672] RIP: 0033:0x7fba9b99e2d9 [ 487.351423][ T6672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.351441][ T6672] RSP: 002b:00007fba9c853028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 487.351462][ T6672] RAX: ffffffffffffffda RBX: 00007fba9bc25fa0 RCX: 00007fba9b99e2d9 [ 487.351478][ T6672] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 487.351490][ T6672] RBP: 00007fba9ba35888 R08: 0000000000000000 R09: 0000000000000000 [ 487.351503][ T6672] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 487.351517][ T6672] R13: 00007fba9bc26038 R14: 00007fba9bc25fa0 R15: 00007fffd495acc8 [ 487.351550][ T6672] [ 487.400250][ T6671] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 487.597632][ T5739] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 487.664305][ T6675] x_tables: duplicate underflow at hook 4 [ 487.664366][ T6675] x_tables: duplicate underflow at hook 4 [ 487.664407][ T6675] x_tables: duplicate underflow at hook 4 [ 487.664446][ T6675] x_tables: duplicate underflow at hook 4 [ 487.664485][ T6675] x_tables: duplicate underflow at hook 4 [ 487.664523][ T6675] x_tables: duplicate underflow at hook 4 [ 487.664563][ T6675] x_tables: duplicate underflow at hook 4 [ 487.664601][ T6675] x_tables: duplicate underflow at hook 4 [ 487.664664][ T6675] x_tables: duplicate underflow at hook 4 [ 487.664703][ T6675] x_tables: duplicate underflow at hook 4 [ 487.804959][ T5739] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 487.806278][ T5739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 487.806307][ T5739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.806319][ T5739] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 487.806342][ T5739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.809393][ T5739] usb 3-1: config 0 descriptor?? [ 487.848936][ T6682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.267'. [ 487.849011][ T6682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.267'. [ 488.194645][ T5740] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 488.218805][ T5739] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 488.218840][ T5739] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 488.218867][ T5739] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 488.218893][ T5739] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 488.218920][ T5739] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 488.218948][ T5739] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 488.218975][ T5739] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 488.219002][ T5739] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 488.219029][ T5739] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 488.219056][ T5739] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 488.240268][ T5739] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 488.264961][ T5747] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 488.347214][ T5740] usb 2-1: New USB device found: idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 488.348702][ T5740] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.348716][ T5740] usb 2-1: config 0 has no interfaces? [ 488.350050][ T5740] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 488.350072][ T5740] usb 2-1: Product: syz [ 488.351697][ T5740] usb 2-1: config 0 descriptor?? [ 488.394228][ T1567] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 488.418609][ T5747] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 488.423505][ T5747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.424066][ T5739] usb 3-1: USB disconnect, device number 18 [ 488.453002][ T5747] usb 1-1: config 0 descriptor?? [ 488.545066][ T1567] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 488.546900][ T1567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.548706][ T1567] usb 4-1: config 0 descriptor?? [ 488.560121][ T5740] usb 2-1: USB disconnect, device number 22 [ 488.656136][ T5747] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 488.753218][ T1567] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 488.870544][ T5747] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 488.870620][ T5747] [drm] Initialized udl on minor 1 [ 488.969165][ T1567] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 488.969214][ T1567] [drm] Initialized udl on minor 2 [ 489.019188][ T6693] netlink: 751 bytes leftover after parsing attributes in process `syz.2.271'. [ 489.058654][ T6686] FAULT_INJECTION: forcing a failure. [ 489.058654][ T6686] name failslab, interval 1, probability 0, space 0, times 0 [ 489.058683][ T6686] CPU: 0 UID: 0 PID: 6686 Comm: syz.0.269 Not tainted syzkaller #0 PREEMPT(full) [ 489.058707][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 489.058719][ T6686] Call Trace: [ 489.058726][ T6686] [ 489.058735][ T6686] dump_stack_lvl+0xe8/0x150 [ 489.058766][ T6686] should_fail_ex+0x3eb/0x540 [ 489.058801][ T6686] should_failslab+0xa8/0x100 [ 489.058824][ T6686] __kmalloc_noprof+0xf9/0x710 [ 489.058856][ T6686] ? rcu_is_watching+0x16/0xb0 [ 489.058880][ T6686] ? tomoyo_realpath_from_path+0xef/0x640 [ 489.058906][ T6686] ? tomoyo_realpath_from_path+0xef/0x640 [ 489.058940][ T6686] tomoyo_realpath_from_path+0xef/0x640 [ 489.058976][ T6686] ? tomoyo_path_number_perm+0x219/0x5f0 [ 489.059000][ T6686] tomoyo_path_number_perm+0x246/0x5f0 [ 489.059026][ T6686] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 489.059047][ T6686] ? __lock_acquire+0x747/0x2de0 [ 489.059115][ T6686] ? __fget_files+0x2a/0x420 [ 489.059144][ T6686] ? __fget_files+0x2a/0x420 [ 489.059171][ T6686] ? __fget_files+0x2a/0x420 [ 489.059202][ T6686] security_file_ioctl+0xc3/0x2a0 [ 489.059225][ T6686] __se_sys_ioctl+0x47/0x170 [ 489.059249][ T6686] do_syscall_64+0x166/0x520 [ 489.059272][ T6686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.059292][ T6686] ? clear_bhb_loop+0x70/0xc0 [ 489.059316][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.059335][ T6686] RIP: 0033:0x7f871179e2d9 [ 489.059353][ T6686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.059370][ T6686] RSP: 002b:00007f871266e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 489.059390][ T6686] RAX: ffffffffffffffda RBX: 00007f8711a25fa0 RCX: 00007f871179e2d9 [ 489.059405][ T6686] RDX: 0000200000000300 RSI: 00000000c03864bc RDI: 0000000000000004 [ 489.059418][ T6686] RBP: 00007f871266e090 R08: 0000000000000000 R09: 0000000000000000 [ 489.059431][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.059443][ T6686] R13: 00007f8711a26038 R14: 00007f8711a25fa0 R15: 00007ffd5e3568e8 [ 489.059475][ T6686] [ 489.059624][ T6686] ERROR: Out of memory at tomoyo_realpath_from_path. [ 489.474532][ T6703] netlink: 766 bytes leftover after parsing attributes in process `syz.2.274'. [ 489.614842][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 489.615023][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 489.615261][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 489.615438][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 489.615599][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 489.615779][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 489.615940][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 489.616106][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 489.681509][ T6711] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 490.112095][ T6716] FAULT_INJECTION: forcing a failure. [ 490.112095][ T6716] name failslab, interval 1, probability 0, space 0, times 0 [ 490.112129][ T6716] CPU: 0 UID: 0 PID: 6716 Comm: syz.1.278 Not tainted syzkaller #0 PREEMPT(full) [ 490.112154][ T6716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 490.112175][ T6716] Call Trace: [ 490.112183][ T6716] [ 490.112192][ T6716] dump_stack_lvl+0xe8/0x150 [ 490.112228][ T6716] should_fail_ex+0x3eb/0x540 [ 490.112267][ T6716] should_failslab+0xa8/0x100 [ 490.112289][ T6716] ? __kernfs_new_node+0xe6/0x980 [ 490.112313][ T6716] kmem_cache_alloc_noprof+0x9c/0x600 [ 490.112341][ T6716] ? kstrdup+0x81/0x100 [ 490.112367][ T6716] ? __kernfs_new_node+0xe6/0x980 [ 490.112397][ T6716] __kernfs_new_node+0xe6/0x980 [ 490.112429][ T6716] ? __pfx___kernfs_new_node+0x10/0x10 [ 490.112453][ T6716] ? kernfs_root+0x1c/0x230 [ 490.112481][ T6716] ? kernfs_root+0x1c/0x230 [ 490.112502][ T6716] ? kernfs_root+0x1c/0x230 [ 490.112528][ T6716] kernfs_new_node+0xeb/0x140 [ 490.112555][ T6716] __kernfs_create_file+0x4b/0x2e0 [ 490.112586][ T6716] cgroup_addrm_files+0x8f4/0xd50 [ 490.112631][ T6716] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 490.112686][ T6716] ? css_next_descendant_pre+0x17d/0x260 [ 490.112715][ T6716] css_populate_dir+0x2ba/0x3d0 [ 490.112741][ T6716] cgroup_mkdir+0x11fd/0x14b0 [ 490.112776][ T6716] ? __pfx_cgroup_mkdir+0x10/0x10 [ 490.112801][ T6716] kernfs_iop_mkdir+0x213/0x360 [ 490.112831][ T6716] vfs_mkdir+0x40e/0x630 [ 490.112860][ T6716] filename_mkdirat+0x285/0x510 [ 490.112881][ T6716] ? __might_fault+0xaf/0x130 [ 490.112910][ T6716] ? __pfx_filename_mkdirat+0x10/0x10 [ 490.112935][ T6716] ? do_getname+0x151/0x250 [ 490.112965][ T6716] __se_sys_mkdirat+0x35/0x150 [ 490.112990][ T6716] do_syscall_64+0x166/0x520 [ 490.113014][ T6716] ? trace_irq_disable+0x3b/0x140 [ 490.113035][ T6716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.113057][ T6716] ? clear_bhb_loop+0x70/0xc0 [ 490.113084][ T6716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.113104][ T6716] RIP: 0033:0x7fba9b99e2d9 [ 490.113123][ T6716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.113141][ T6716] RSP: 002b:00007fba9c853028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 490.113169][ T6716] RAX: ffffffffffffffda RBX: 00007fba9bc25fa0 RCX: 00007fba9b99e2d9 [ 490.113186][ T6716] RDX: 00000000000001ff RSI: 0000200000000300 RDI: ffffffffffffff9c [ 490.113200][ T6716] RBP: 00007fba9ba35888 R08: 0000000000000000 R09: 0000000000000000 [ 490.113214][ T6716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.113226][ T6716] R13: 00007fba9bc26038 R14: 00007fba9bc25fa0 R15: 00007fffd495acc8 [ 490.113262][ T6716] [ 490.113554][ T6716] cgroup: cgroup_addrm_files: failed to add cgroup.max.descendants, err=-12 [ 491.904457][ T6713] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 491.905075][ T5659] Bluetooth: hci1: command 0x0c1a tx timeout [ 492.763403][ T6713] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 492.763664][ T6713] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 492.862988][ T6723] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 493.004337][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 493.094228][ T5629] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 493.134270][ T9] usb 2-1: device descriptor read/64, error -71 [ 493.145228][ T6725] : renamed from bridge_slave_0 (while UP) [ 493.246268][ T5629] usb 3-1: New USB device found: idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 493.247486][ T5629] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.247521][ T5629] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 255 [ 493.247535][ T5629] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 493.250495][ T5629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.250519][ T5629] usb 3-1: Product: syz [ 493.250533][ T5629] usb 3-1: Manufacturer: syz [ 493.250548][ T5629] usb 3-1: SerialNumber: syz [ 493.253121][ T5629] usb 3-1: config 0 descriptor?? [ 493.264522][ T6723] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 493.335893][ T5629] usb 3-1: ucan: probing device on interface #0 [ 493.335946][ T5629] usb 3-1: ucan: invalid EP count (1) [ 493.335961][ T5629] usb 3-1: ucan: probe failed; try to update the device firmware [ 493.476570][ T5740] usb 3-1: USB disconnect, device number 19 [ 493.874208][ T9] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 493.906320][ T5747] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 493.906638][ T5747] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 493.913146][ T1567] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 493.913685][ T1567] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 493.917238][ T5747] usb 1-1: USB disconnect, device number 20 [ 493.930702][ T1567] usb 4-1: USB disconnect, device number 18 [ 493.958865][ T5629] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 493.980386][ T5629] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 493.989873][ T5659] Bluetooth: hci2: command 0x0c1a tx timeout [ 494.027530][ T9] usb 2-1: New USB device found: idVendor=04d9, idProduct=a072, bcdDevice=0.00 [ 494.030713][ T9] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 494.030733][ T9] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 494.030747][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 494.030766][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.089956][ T9] usb 2-1: config 0 descriptor?? [ 494.389539][ T6750] netlink: Setting conntrack mark requires 'commit' flag. [ 494.389571][ T6750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.498164][ T6733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.501243][ T6733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.510638][ T6733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.512439][ T6733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.529982][ T9] hid_parser_main: 5 callbacks suppressed [ 494.530009][ T9] holtek_mouse 0003:04D9:A072.0006: unknown main item tag 0x0 [ 494.530052][ T9] holtek_mouse 0003:04D9:A072.0006: unknown main item tag 0x0 [ 494.533384][ T9] holtek_mouse 0003:04D9:A072.0006: unknown main item tag 0x0 [ 494.533416][ T9] holtek_mouse 0003:04D9:A072.0006: unknown main item tag 0x0 [ 494.533442][ T9] holtek_mouse 0003:04D9:A072.0006: unknown main item tag 0x0 [ 494.533468][ T9] holtek_mouse 0003:04D9:A072.0006: unknown main item tag 0x0 [ 494.533495][ T9] holtek_mouse 0003:04D9:A072.0006: unknown main item tag 0x0 [ 494.533539][ T9] holtek_mouse 0003:04D9:A072.0006: unknown main item tag 0x0 [ 494.533566][ T9] holtek_mouse 0003:04D9:A072.0006: unknown main item tag 0x0 [ 494.533593][ T9] holtek_mouse 0003:04D9:A072.0006: unknown main item tag 0x0 [ 494.533665][ T9] holtek_mouse 0003:04D9:A072.0006: unbalanced collection at end of report description [ 494.534874][ T9] holtek_mouse 0003:04D9:A072.0006: hid parse failed: -22 [ 494.534942][ T9] holtek_mouse 0003:04D9:A072.0006: probe with driver holtek_mouse failed with error -22 [ 494.727833][ T1567] usb 2-1: USB disconnect, device number 24 [ 494.794571][ T5659] Bluetooth: hci3: command 0x0c1a tx timeout [ 494.884769][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 495.034711][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 495.035230][ T9] usb 3-1: New USB device found: idVendor=05d1, idProduct=2001, bcdDevice=7.00 [ 495.037792][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.037806][ T9] usb 3-1: Product: syz [ 495.037813][ T9] usb 3-1: Manufacturer: syz [ 495.037821][ T9] usb 3-1: SerialNumber: syz [ 495.040234][ T9] usb 3-1: config 0 descriptor?? [ 495.043409][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 495.056808][ T9] usb 3-1: Detected FT2232H [ 495.109688][ T6771] trusted_key: encrypted_key: insufficient parameters specified [ 495.249944][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 495.253687][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 495.270346][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 495.278361][ T9] usb 3-1: USB disconnect, device number 20 [ 495.311375][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 495.311925][ T9] ftdi_sio 3-1:0.0: device disconnected [ 495.440128][ T6777] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 495.511504][ T6778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.512011][ T6778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.512857][ T6778] warning: `syz.0.299' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 495.659599][ T6787] ./bus: Can't lookup blockdev [ 495.737865][ T6790] bond0: option mode: unable to set because the bond device has slaves [ 495.744626][ T992] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 495.847247][ T6792] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 495.905730][ T6800] input: syz1 as /devices/virtual/input/input15 [ 495.916381][ T992] usb 1-1: New USB device found: idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 495.916422][ T992] usb 1-1: too many configurations: 164, using maximum allowed: 8 [ 495.972126][ T992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.983171][ T992] usb 1-1: config 0 descriptor?? [ 496.174784][ T6809] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 496.199777][ T992] usb 1-1: USB disconnect, device number 21 [ 496.429387][ T6821] syzkaller1: entered promiscuous mode [ 496.429408][ T6821] syzkaller1: entered allmulticast mode [ 496.455154][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 496.606096][ T9] usb 4-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 496.607031][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.607076][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 496.607117][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.610007][ T9] usb 4-1: config 0 descriptor?? [ 496.643930][ T6824] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 496.651553][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 496.778262][ T6828] afs: Unknown parameter 'dynÇÀ' [ 496.778763][ T6828] afs: Unknown parameter 'eyn' [ 496.901229][ T6831] kvm [6830]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 496.901291][ T6831] kvm [6830]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 496.903237][ T6831] kvm [6830]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 496.905849][ T6831] kvm [6830]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 496.905918][ T6831] kvm [6830]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 496.954411][ T992] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 497.115784][ T992] usb 3-1: New USB device found: idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 497.116741][ T992] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.116763][ T992] usb 3-1: config 0 has no interfaces? [ 497.117709][ T992] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 497.117731][ T992] usb 3-1: Product: syz [ 497.120323][ T992] usb 3-1: config 0 descriptor?? [ 497.124275][ T5739] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 497.154968][ T6838] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 497.295529][ T5739] usb 2-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01 [ 497.298289][ T5739] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 497.298305][ T5739] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 497.301341][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.301364][ T5739] usb 2-1: Product: syz [ 497.301378][ T5739] usb 2-1: Manufacturer: syz [ 497.301393][ T5739] usb 2-1: SerialNumber: syz [ 497.306763][ T5739] etas_es58x 2-1:1.0: Starting syz syz (Serial Number syz) [ 497.324233][ T992] usb 3-1: USB disconnect, device number 21 [ 497.503778][ T6844] sctp: [Deprecated]: syz.0.320 (pid 6844) Use of struct sctp_assoc_value in delayed_ack socket option. [ 497.503778][ T6844] Use struct sctp_sack_info instead [ 497.509296][ T5739] etas_es58x 2-1:1.0: could not parse product info: 'Б' [ 497.715589][ T9] usb 2-1: USB disconnect, device number 25 [ 497.718565][ T9] etas_es58x 2-1:1.0: Disconnecting syz syz [ 497.814267][ T5739] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 497.952590][ T6862] netlink: zone id is out of range [ 497.952606][ T6862] netlink: zone id is out of range [ 497.952937][ T6862] netlink: del zone limit has 8 unknown bytes [ 497.975801][ T5739] usb 1-1: New USB device found: idVendor=0fc5, idProduct=b080, bcdDevice=0.00 [ 497.976770][ T5739] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 497.976801][ T5739] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.976824][ T5739] usb 1-1: config 0 interface 0 has no altsetting 0 [ 497.976854][ T5739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.982063][ T5739] usb 1-1: config 0 descriptor?? [ 498.459609][ T6883] __nla_validate_parse: 57 callbacks suppressed [ 498.459630][ T6883] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.320'. [ 498.463802][ T6844] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.320'. [ 498.471530][ T5739] usbhid 1-1:0.0: can't add hid device: -71 [ 498.471624][ T5739] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 498.478543][ T5739] usb 1-1: USB disconnect, device number 22 [ 498.735137][ T6895] FAULT_INJECTION: forcing a failure. [ 498.735137][ T6895] name failslab, interval 1, probability 0, space 0, times 0 [ 498.735167][ T6895] CPU: 1 UID: 0 PID: 6895 Comm: syz.1.328 Not tainted syzkaller #0 PREEMPT(full) [ 498.735189][ T6895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 498.735200][ T6895] Call Trace: [ 498.735208][ T6895] [ 498.735217][ T6895] dump_stack_lvl+0xe8/0x150 [ 498.735249][ T6895] should_fail_ex+0x3eb/0x540 [ 498.735285][ T6895] should_failslab+0xa8/0x100 [ 498.735306][ T6895] ? do_getname+0x2e/0x250 [ 498.735330][ T6895] kmem_cache_alloc_noprof+0x9c/0x600 [ 498.735356][ T6895] ? do_getname+0x2e/0x250 [ 498.735385][ T6895] do_getname+0x2e/0x250 [ 498.735405][ T6895] ? getname_flags+0x11/0x20 [ 498.735434][ T6895] do_sys_openat2+0xce/0x200 [ 498.735461][ T6895] ? __pfx_do_sys_openat2+0x10/0x10 [ 498.735486][ T6895] ? ksys_write+0x242/0x270 [ 498.735517][ T6895] ? __pfx_ksys_write+0x10/0x10 [ 498.735548][ T6895] __x64_sys_openat+0x138/0x170 [ 498.735576][ T6895] do_syscall_64+0x166/0x520 [ 498.735601][ T6895] ? trace_irq_disable+0x3b/0x140 [ 498.735628][ T6895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.735649][ T6895] ? clear_bhb_loop+0x70/0xc0 [ 498.735673][ T6895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.735692][ T6895] RIP: 0033:0x7fba9b99e2d9 [ 498.735709][ T6895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.735725][ T6895] RSP: 002b:00007fba9c853028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 498.735746][ T6895] RAX: ffffffffffffffda RBX: 00007fba9bc25fa0 RCX: 00007fba9b99e2d9 [ 498.735760][ T6895] RDX: 0000000000000001 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 498.735774][ T6895] RBP: 00007fba9c853090 R08: 0000000000000000 R09: 0000000000000000 [ 498.735786][ T6895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.735798][ T6895] R13: 00007fba9bc26038 R14: 00007fba9bc25fa0 R15: 00007fffd495acc8 [ 498.735831][ T6895] [ 498.865443][ T6902] FAULT_INJECTION: forcing a failure. [ 498.865443][ T6902] name failslab, interval 1, probability 0, space 0, times 0 [ 498.865471][ T6902] CPU: 1 UID: 0 PID: 6902 Comm: syz.1.331 Not tainted syzkaller #0 PREEMPT(full) [ 498.865494][ T6902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 498.865506][ T6902] Call Trace: [ 498.865513][ T6902] [ 498.865521][ T6902] dump_stack_lvl+0xe8/0x150 [ 498.865554][ T6902] should_fail_ex+0x3eb/0x540 [ 498.865589][ T6902] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 498.865620][ T6902] should_failslab+0xa8/0x100 [ 498.865642][ T6902] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 498.865666][ T6902] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 498.865695][ T6902] ? shmem_alloc_inode+0x28/0x40 [ 498.865714][ T6902] ? shmem_alloc_inode+0x28/0x40 [ 498.865735][ T6902] ? do_raw_spin_lock+0x12b/0x2f0 [ 498.865765][ T6902] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 498.865785][ T6902] shmem_alloc_inode+0x28/0x40 [ 498.865805][ T6902] alloc_inode+0x6a/0x1b0 [ 498.865832][ T6902] new_inode+0x1f/0x170 [ 498.865863][ T6902] shmem_get_inode+0x3a4/0x1030 [ 498.865892][ T6902] ? __pfx_shmem_get_inode+0x10/0x10 [ 498.865911][ T6902] ? from_kgid+0x1c6/0x660 [ 498.865960][ T6902] ? make_vfsuid+0x49/0xa0 [ 498.865984][ T6902] ? generic_permission+0x2ba/0x660 [ 498.866014][ T6902] shmem_mknod+0x17d/0x340 [ 498.866042][ T6902] shmem_mkdir+0x33/0x70 [ 498.866066][ T6902] vfs_mkdir+0x40e/0x630 [ 498.866094][ T6902] filename_mkdirat+0x285/0x510 [ 498.866113][ T6902] ? __might_fault+0xaf/0x130 [ 498.866141][ T6902] ? __pfx_filename_mkdirat+0x10/0x10 [ 498.866166][ T6902] ? do_getname+0x151/0x250 [ 498.866193][ T6902] __se_sys_mkdirat+0x35/0x150 [ 498.866216][ T6902] do_syscall_64+0x166/0x520 [ 498.866241][ T6902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.866262][ T6902] ? clear_bhb_loop+0x70/0xc0 [ 498.866286][ T6902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.866306][ T6902] RIP: 0033:0x7fba9b99e2d9 [ 498.866324][ T6902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.866341][ T6902] RSP: 002b:00007fba9c853028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 498.866362][ T6902] RAX: ffffffffffffffda RBX: 00007fba9bc25fa0 RCX: 00007fba9b99e2d9 [ 498.866377][ T6902] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 498.866390][ T6902] RBP: 00007fba9ba35888 R08: 0000000000000000 R09: 0000000000000000 [ 498.866404][ T6902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.866416][ T6902] R13: 00007fba9bc26038 R14: 00007fba9bc25fa0 R15: 00007fffd495acc8 [ 498.866448][ T6902] [ 498.871460][ T6902] FAULT_INJECTION: forcing a failure. [ 498.871460][ T6902] name failslab, interval 1, probability 0, space 0, times 0 [ 498.871485][ T6902] CPU: 1 UID: 0 PID: 6902 Comm: syz.1.331 Not tainted syzkaller #0 PREEMPT(full) [ 498.871507][ T6902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 498.871519][ T6902] Call Trace: [ 498.871526][ T6902] [ 498.871534][ T6902] dump_stack_lvl+0xe8/0x150 [ 498.871563][ T6902] should_fail_ex+0x3eb/0x540 [ 498.871599][ T6902] should_failslab+0xa8/0x100 [ 498.871630][ T6902] __kmalloc_noprof+0xf9/0x710 [ 498.871658][ T6902] ? __se_sys_futex_waitv+0x19d/0x2c0 [ 498.871684][ T6902] ? __se_sys_futex_waitv+0x19d/0x2c0 [ 498.871716][ T6902] __se_sys_futex_waitv+0x19d/0x2c0 [ 498.871746][ T6902] ? __pfx___se_sys_futex_waitv+0x10/0x10 [ 498.871787][ T6902] ? __x64_sys_futex_waitv+0x20/0xc0 [ 498.871816][ T6902] do_syscall_64+0x166/0x520 [ 498.871839][ T6902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.871859][ T6902] ? clear_bhb_loop+0x70/0xc0 [ 498.871883][ T6902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.871902][ T6902] RIP: 0033:0x7fba9b99e2d9 [ 498.871920][ T6902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.871937][ T6902] RSP: 002b:00007fba9c853028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 498.871957][ T6902] RAX: ffffffffffffffda RBX: 00007fba9bc25fa0 RCX: 00007fba9b99e2d9 [ 498.871972][ T6902] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000940 [ 498.871984][ T6902] RBP: 00007fba9ba35888 R08: 0000000000000000 R09: 0000000000000000 [ 498.871996][ T6902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.872037][ T6902] R13: 00007fba9bc26038 R14: 00007fba9bc25fa0 R15: 00007fffd495acc8 [ 498.872068][ T6902] [ 498.974248][ T992] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 499.147789][ T992] usb 3-1: New USB device found: idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 499.149327][ T992] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.149349][ T992] usb 3-1: config 0 has no interfaces? [ 499.150449][ T992] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 499.150471][ T992] usb 3-1: Product: syz [ 499.156224][ T992] usb 3-1: config 0 descriptor?? [ 499.328603][ T5747] usb 4-1: USB disconnect, device number 19 [ 499.384231][ T9] usb 3-1: USB disconnect, device number 22 [ 499.585180][ T6913] FAULT_INJECTION: forcing a failure. [ 499.585180][ T6913] name failslab, interval 1, probability 0, space 0, times 0 [ 499.585210][ T6913] CPU: 1 UID: 0 PID: 6913 Comm: syz.3.335 Not tainted syzkaller #0 PREEMPT(full) [ 499.585232][ T6913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 499.585243][ T6913] Call Trace: [ 499.585250][ T6913] [ 499.585258][ T6913] dump_stack_lvl+0xe8/0x150 [ 499.585286][ T6913] should_fail_ex+0x3eb/0x540 [ 499.585320][ T6913] should_failslab+0xa8/0x100 [ 499.585342][ T6913] __kvmalloc_node_noprof+0x171/0x820 [ 499.585369][ T6913] ? __kvmalloc_node_noprof+0x340/0x820 [ 499.585391][ T6913] ? io_alloc_cache_init+0x42/0x140 [ 499.585481][ T6913] ? io_alloc_cache_init+0x42/0x140 [ 499.585501][ T6913] io_alloc_cache_init+0x42/0x140 [ 499.585518][ T6913] io_ring_ctx_alloc+0x54b/0xb80 [ 499.585540][ T6913] io_uring_create+0x50/0x980 [ 499.585558][ T6913] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 499.585576][ T6913] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 499.585597][ T6913] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 499.585626][ T6913] ? rcu_is_watching+0x16/0xb0 [ 499.585654][ T6913] do_syscall_64+0x166/0x520 [ 499.585673][ T6913] ? trace_irq_disable+0x3b/0x140 [ 499.585689][ T6913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.585705][ T6913] ? clear_bhb_loop+0x70/0xc0 [ 499.585724][ T6913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.585740][ T6913] RIP: 0033:0x7f0697d9e2d9 [ 499.585754][ T6913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.585768][ T6913] RSP: 002b:00007f0698d0ffb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 499.585785][ T6913] RAX: ffffffffffffffda RBX: 00002000000001c0 RCX: 00007f0697d9e2d9 [ 499.585797][ T6913] RDX: 0000200000000280 RSI: 00002000000001c0 RDI: 0000000000000f00 [ 499.585808][ T6913] RBP: 00007f0697e35888 R08: 0000000000000000 R09: 0000000000000000 [ 499.585818][ T6913] R10: 00002000000002c0 R11: 0000000000000206 R12: 0000200000000280 [ 499.585829][ T6913] R13: 00002000000002c0 R14: 0000200000000240 R15: 00007fff4e5b6a88 [ 499.585853][ T6913] [ 499.733395][ T6917] gadgetfs: bound to dummy_udc driver [ 499.748921][ T33] audit: type=1800 audit(1791968127.410:2): pid=6917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.337" name="ep1in-bulk" dev="gadgetfs" ino=14986 res=0 errno=-16 [ 499.844388][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 499.964920][ T1567] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 499.965141][ C0] gadgetfs: connected [ 499.966215][ T1567] gadgetfs: disconnected [ 499.996132][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 499.999955][ T9] usb 2-1: New USB device found: idVendor=2040, idProduct=0265, bcdDevice=45.0d [ 500.004693][ T9] usb 2-1: config 6 has an invalid interface number: 3 but max is 1 [ 500.004716][ T9] usb 2-1: config 6 has an invalid interface number: 3 but max is 1 [ 500.004734][ T9] usb 2-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 500.004754][ T9] usb 2-1: config 6 has no interface number 0 [ 500.004781][ T9] usb 2-1: config 6 interface 3 has no altsetting 0 [ 500.004799][ T9] usb 2-1: config 6 interface 3 has no altsetting 1 [ 500.008673][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.008695][ T9] usb 2-1: Product: syz [ 500.008709][ T9] usb 2-1: Manufacturer: syz [ 500.008723][ T9] usb 2-1: SerialNumber: syz [ 500.090694][ T6925] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 500.090694][ T6925] [ 500.092221][ T6926] FAULT_INJECTION: forcing a failure. [ 500.092221][ T6926] name failslab, interval 1, probability 0, space 0, times 0 [ 500.092248][ T6926] CPU: 0 UID: 0 PID: 6926 Comm: syz.2.340 Not tainted syzkaller #0 PREEMPT(full) [ 500.092271][ T6926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.092284][ T6926] Call Trace: [ 500.092291][ T6926] [ 500.092300][ T6926] dump_stack_lvl+0xe8/0x150 [ 500.092333][ T6926] should_fail_ex+0x3eb/0x540 [ 500.092373][ T6926] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 500.092396][ T6926] should_failslab+0xa8/0x100 [ 500.092420][ T6926] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 500.092441][ T6926] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 500.092471][ T6926] ? shmem_alloc_inode+0x28/0x40 [ 500.092492][ T6926] ? shmem_alloc_inode+0x28/0x40 [ 500.092515][ T6926] ? do_raw_spin_lock+0x12b/0x2f0 [ 500.092544][ T6926] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 500.092574][ T6926] shmem_alloc_inode+0x28/0x40 [ 500.092595][ T6926] alloc_inode+0x6a/0x1b0 [ 500.092623][ T6926] new_inode+0x1f/0x170 [ 500.092655][ T6926] shmem_get_inode+0x3a4/0x1030 [ 500.092687][ T6926] ? __pfx_shmem_get_inode+0x10/0x10 [ 500.092706][ T6926] ? from_kgid+0x1c6/0x660 [ 500.092726][ T6926] ? make_vfsuid+0x49/0xa0 [ 500.092751][ T6926] ? generic_permission+0x2ba/0x660 [ 500.092782][ T6926] shmem_mknod+0x17d/0x340 [ 500.092811][ T6926] shmem_mkdir+0x33/0x70 [ 500.092837][ T6926] vfs_mkdir+0x40e/0x630 [ 500.092866][ T6926] filename_mkdirat+0x285/0x510 [ 500.092886][ T6926] ? __might_fault+0xaf/0x130 [ 500.092915][ T6926] ? __pfx_filename_mkdirat+0x10/0x10 [ 500.092941][ T6926] ? do_getname+0x151/0x250 [ 500.092969][ T6926] __se_sys_mkdirat+0x35/0x150 [ 500.092993][ T6926] do_syscall_64+0x166/0x520 [ 500.093018][ T6926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.093039][ T6926] ? clear_bhb_loop+0x70/0xc0 [ 500.093064][ T6926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.093084][ T6926] RIP: 0033:0x7ff06ab9e2d9 [ 500.093103][ T6926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.093122][ T6926] RSP: 002b:00007ff06ba39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 500.093144][ T6926] RAX: ffffffffffffffda RBX: 00007ff06ae25fa0 RCX: 00007ff06ab9e2d9 [ 500.093160][ T6926] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 500.093175][ T6926] RBP: 00007ff06ac35888 R08: 0000000000000000 R09: 0000000000000000 [ 500.093189][ T6926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.093201][ T6926] R13: 00007ff06ae26038 R14: 00007ff06ae25fa0 R15: 00007ffe5069d8b8 [ 500.093235][ T6926] [ 500.115954][ C0] gadgetfs: connected [ 500.123376][ T1567] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 500.123935][ T1567] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 500.123994][ T1567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.140371][ C0] gadgetfs: configuration #1 [ 500.164055][ T6926] FAULT_INJECTION: forcing a failure. [ 500.164055][ T6926] name failslab, interval 1, probability 0, space 0, times 0 [ 500.164106][ T6926] CPU: 0 UID: 0 PID: 6926 Comm: syz.2.340 Not tainted syzkaller #0 PREEMPT(full) [ 500.164131][ T6926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.164144][ T6926] Call Trace: [ 500.164151][ T6926] [ 500.164160][ T6926] dump_stack_lvl+0xe8/0x150 [ 500.164193][ T6926] should_fail_ex+0x3eb/0x540 [ 500.164230][ T6926] should_failslab+0xa8/0x100 [ 500.164252][ T6926] __kmalloc_noprof+0xf9/0x710 [ 500.164281][ T6926] ? __se_sys_futex_waitv+0x19d/0x2c0 [ 500.164307][ T6926] ? __se_sys_futex_waitv+0x19d/0x2c0 [ 500.164338][ T6926] __se_sys_futex_waitv+0x19d/0x2c0 [ 500.164368][ T6926] ? __pfx___se_sys_futex_waitv+0x10/0x10 [ 500.164409][ T6926] ? __x64_sys_futex_waitv+0x20/0xc0 [ 500.164437][ T6926] do_syscall_64+0x166/0x520 [ 500.164462][ T6926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.164482][ T6926] ? clear_bhb_loop+0x70/0xc0 [ 500.164506][ T6926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.164525][ T6926] RIP: 0033:0x7ff06ab9e2d9 [ 500.164543][ T6926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.164567][ T6926] RSP: 002b:00007ff06ba39028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 500.164589][ T6926] RAX: ffffffffffffffda RBX: 00007ff06ae25fa0 RCX: 00007ff06ab9e2d9 [ 500.164604][ T6926] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000940 [ 500.164617][ T6926] RBP: 00007ff06ac35888 R08: 0000000000000000 R09: 0000000000000000 [ 500.164630][ T6926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.164642][ T6926] R13: 00007ff06ae26038 R14: 00007ff06ae25fa0 R15: 00007ffe5069d8b8 [ 500.164673][ T6926] [ 500.479249][ T9] usb 2-1: USB disconnect, device number 26 [ 500.636379][ T1567] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 500.718733][ T6933] FAULT_INJECTION: forcing a failure. [ 500.718733][ T6933] name fail_futex, interval 1, probability 0, space 0, times 0 [ 500.718765][ T6933] CPU: 1 UID: 0 PID: 6933 Comm: syz.2.344 Not tainted syzkaller #0 PREEMPT(full) [ 500.718789][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.718802][ T6933] Call Trace: [ 500.718810][ T6933] [ 500.718819][ T6933] dump_stack_lvl+0xe8/0x150 [ 500.718853][ T6933] should_fail_ex+0x3eb/0x540 [ 500.718891][ T6933] get_futex_key+0x1b4/0x1580 [ 500.718922][ T6933] ? __might_fault+0xaf/0x130 [ 500.718949][ T6933] ? __pfx_get_futex_key+0x10/0x10 [ 500.718977][ T6933] ? __asan_memset+0x22/0x50 [ 500.719005][ T6933] ? copy_clone_args_from_user+0x615/0x740 [ 500.719073][ T6933] futex_wake+0x119/0x5f0 [ 500.719111][ T6933] ? __pfx_futex_wake+0x10/0x10 [ 500.719150][ T6933] ? __se_sys_clone3+0x1aa/0x360 [ 500.719178][ T6933] do_futex+0x458/0x4e0 [ 500.719209][ T6933] ? __pfx_do_futex+0x10/0x10 [ 500.719244][ T6933] __se_sys_futex+0x3a8/0x450 [ 500.719277][ T6933] ? __pfx___se_sys_futex+0x10/0x10 [ 500.719312][ T6933] ? __x64_sys_futex+0x21/0xf0 [ 500.719341][ T6933] do_syscall_64+0x166/0x520 [ 500.719365][ T6933] ? trace_irq_disable+0x3b/0x140 [ 500.719387][ T6933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.719408][ T6933] ? clear_bhb_loop+0x70/0xc0 [ 500.719432][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.719453][ T6933] RIP: 0033:0x7ff06ab9e2d9 [ 500.719473][ T6933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.719491][ T6933] RSP: 002b:00007ff06ba390e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 500.719521][ T6933] RAX: ffffffffffffffda RBX: 00007ff06ae25fa8 RCX: 00007ff06ab9e2d9 [ 500.719537][ T6933] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff06ae25fac [ 500.719552][ T6933] RBP: 00007ff06ae25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 500.719566][ T6933] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 500.719579][ T6933] R13: 00007ff06ae26038 R14: 00007ffe5069d7d0 R15: 00007ffe5069d8b8 [ 500.719611][ T6933] [ 500.771172][ T6933] sg_write: data in/out 445167/136 bytes for SCSI command 0x0-- guessing data in; [ 500.771172][ T6933] program syz.2.344 not setting count and/or reply_len properly [ 500.813489][ T1567] usb 4-1: New USB device found: idVendor=04d8, idProduct=0082, bcdDevice=1.00 [ 500.865637][ T1567] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 500.865683][ T1567] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 500.865709][ T1567] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 500.865732][ T1567] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 500.865753][ T1567] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 500.865790][ T1567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.043395][ T6928] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 501.060103][ T1567] ims_pcu 4-1:1.0: Max IN packet size is too small (0) [ 501.060160][ T1567] ims_pcu 4-1:1.0: probe with driver ims_pcu failed with error -22 [ 501.214424][ T6939] netlink: 40 bytes leftover after parsing attributes in process `syz.1.345'. [ 501.281188][ T992] usb 4-1: USB disconnect, device number 20 [ 501.332886][ T6941] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 501.564262][ T5739] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 501.593924][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.593983][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.714902][ T5739] usb 3-1: New USB device found: idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 501.716154][ T5739] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.716202][ T5739] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 255 [ 501.716227][ T5739] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 501.720070][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.720094][ T5739] usb 3-1: Product: syz [ 501.720109][ T5739] usb 3-1: Manufacturer: syz [ 501.720123][ T5739] usb 3-1: SerialNumber: syz [ 501.732036][ T5739] usb 3-1: config 0 descriptor?? [ 501.734061][ T6941] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 501.740771][ T5739] usb 3-1: ucan: probing device on interface #0 [ 501.740792][ T5739] usb 3-1: ucan: invalid EP count (1) [ 501.740807][ T5739] usb 3-1: ucan: probe failed; try to update the device firmware [ 501.958758][ T5739] usb 3-1: USB disconnect, device number 23 [ 502.234382][ T992] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 502.386031][ T992] usb 4-1: New USB device found: idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 502.386987][ T992] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.387008][ T992] usb 4-1: config 0 has no interfaces? [ 502.387970][ T992] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 502.387993][ T992] usb 4-1: Product: syz [ 502.393609][ T992] usb 4-1: config 0 descriptor?? [ 502.400971][ T6921] gadgetfs: suspended from state 3 [ 502.401149][ T6921] gadgetfs: disconnected [ 502.404105][ T992] usb 1-1: USB disconnect, device number 23 [ 502.420922][ T5657] ================================================================== [ 502.420936][ T5657] BUG: KASAN: slab-use-after-free in __mutex_lock+0x14e/0x15a0 [ 502.420971][ T5657] Read of size 8 at addr ffff8880364cf858 by task syz-executor/5657 [ 502.420986][ T5657] [ 502.420994][ T5657] CPU: 0 UID: 0 PID: 5657 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 502.421015][ T5657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 ** replaying previous printk message ** [ 502.421015][ T5657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 502.421026][ T5657] Call Trace: [ 502.421033][ T5657] [ 502.421040][ T5657] dump_stack_lvl+0xe8/0x150 [ 502.421065][ T5657] print_address_description+0x55/0x1e0 [ 502.421091][ T5657] ? __mutex_lock+0x14e/0x15a0 [ 502.421112][ T5657] print_report+0x58/0x70 [ 502.421139][ T5657] kasan_report+0x117/0x150 [ 502.421160][ T5657] ? __mutex_lock+0x14e/0x15a0 [ 502.421184][ T5657] __mutex_lock+0x14e/0x15a0 [ 502.421208][ T5657] ? __follow_mount_rcu+0x472/0x530 [ 502.421234][ T5657] ? ep_open+0x4e/0x270 [ 502.421361][ T5657] ? __pfx___mutex_lock+0x10/0x10 [ 502.421382][ T5657] ? apparmor_file_open+0x523/0x6c0 [ 502.421407][ T5657] ? __pfx_apparmor_file_open+0x10/0x10 [ 502.421435][ T5657] ep_open+0x4e/0x270 [ 502.421453][ T5657] ? do_dentry_open+0x7ff/0x1360 [ 502.421474][ T5657] ? __pfx_ep_open+0x10/0x10 [ 502.421495][ T5657] do_dentry_open+0x80e/0x1360 [ 502.421519][ T5657] vfs_open_consume+0x4a/0x350 [ 502.421539][ T5657] ? path_openat+0x16e1/0x20f0 [ 502.421556][ T5657] path_openat+0x16fc/0x20f0 [ 502.421581][ T5657] do_file_open+0x258/0x570 [ 502.421599][ T5657] ? __pfx_do_file_open+0x10/0x10 [ 502.421621][ T5657] ? _raw_spin_unlock+0x28/0x50 [ 502.421638][ T5657] ? alloc_fd+0x6af/0x760 [ 502.421663][ T5657] do_sys_openat2+0x115/0x200 [ 502.421690][ T5657] ? __pfx_do_sys_openat2+0x10/0x10 [ 502.421713][ T5657] ? __se_sys_unlink+0xc2/0x140 [ 502.421733][ T5657] ? kmem_cache_free+0x182/0x650 [ 502.421760][ T5657] __x64_sys_openat+0x138/0x170 [ 502.421788][ T5657] do_syscall_64+0x166/0x520 [ 502.421809][ T5657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.421829][ T5657] ? clear_bhb_loop+0x70/0xc0 [ 502.421854][ T5657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.421872][ T5657] RIP: 0033:0x7f871175eb0e [ 502.421889][ T5657] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 502.421905][ T5657] RSP: 002b:00007ffd5e3549b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 502.421925][ T5657] RAX: ffffffffffffffda RBX: 000055555f4e1500 RCX: 00007f871175eb0e [ 502.421940][ T5657] RDX: 0000000000000000 RSI: 00007ffd5e354b20 RDI: ffffffffffffff9c [ 502.421953][ T5657] RBP: 00007ffd5e354b20 R08: 0000000000000000 R09: 0000000000000000 [ 502.421966][ T5657] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd5e355c10 [ 502.421978][ T5657] R13: 00007f8711834ccb R14: 000055555f4e14e8 R15: 0000000000000006 [ 502.421999][ T5657] [ 502.422005][ T5657] [ 502.422016][ T5657] Allocated by task 6917: [ 502.422025][ T5657] kasan_save_track+0x3e/0x80 [ 502.422093][ T5657] __kasan_kmalloc+0x93/0xb0 [ 502.422107][ T5657] __kmalloc_cache_noprof+0x31c/0x600 [ 502.422130][ T5657] gadgetfs_bind+0x277/0xad0 [ 502.422149][ T5657] gadget_bind_driver+0x2ca/0x9e0 [ 502.422199][ T5657] really_probe+0x254/0xae0 [ 502.422257][ T5657] __driver_probe_device+0x1e8/0x360 [ 502.422281][ T5657] driver_probe_device+0x4f/0x240 [ 502.422306][ T5657] __driver_attach+0x339/0x600 [ 502.422329][ T5657] bus_for_each_dev+0x23b/0x2c0 [ 502.422347][ T5657] bus_add_driver+0x38f/0x6e0 [ 502.422365][ T5657] driver_register+0x23a/0x320 [ 502.422380][ T5657] usb_gadget_register_driver_owner+0xf9/0x270 [ 502.422442][ T5657] dev_config+0xe3c/0x12a0 [ 502.422459][ T5657] vfs_write+0x296/0xba0 [ 502.422481][ T5657] ksys_write+0x150/0x270 [ 502.422504][ T5657] do_syscall_64+0x166/0x520 [ 502.422521][ T5657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.422537][ T5657] [ 502.422541][ T5657] Freed by task 6921: [ 502.422550][ T5657] kasan_save_track+0x3e/0x80 [ 502.422572][ T5657] kasan_save_free_info+0x40/0x50 [ 502.422592][ T5657] __kasan_slab_free+0x5c/0x80 [ 502.422617][ T5657] kfree+0x1c5/0x650 [ 502.422635][ T5657] destroy_ep_files+0x29f/0x330 [ 502.422654][ T5657] gadgetfs_unbind+0x109/0x2b0 [ 502.422671][ T5657] gadget_unbind_driver+0x1cb/0x410 [ 502.422686][ T5657] device_release_driver_internal+0x48b/0x880 [ 502.422711][ T5657] driver_detach+0x1f3/0x2d0 [ 502.422733][ T5657] bus_remove_driver+0x226/0x320 [ 502.422750][ T5657] usb_gadget_unregister_driver+0x4e/0x70 [ 502.422776][ T5657] dev_release+0x83/0x200 [ 502.422793][ T5657] __fput+0x408/0xa40 [ 502.422812][ T5657] fput_close_sync+0x11f/0x240 [ 502.422832][ T5657] filp_close_sync+0x6e/0xa0 [ 502.422852][ T5657] put_files_struct+0x230/0x3c0 [ 502.422872][ T5657] do_exit+0x6f0/0x2360 [ 502.422892][ T5657] do_group_exit+0x22d/0x2f0 [ 502.422911][ T5657] get_signal+0x1216/0x12c0 [ 502.422926][ T5657] arch_do_signal_or_restart+0xbb/0x860 [ 502.422963][ T5657] irqentry_exit+0x2c0/0x920 [ 502.422982][ T5657] asm_exc_page_fault+0x26/0x30 [ 502.422997][ T5657] [ 502.423002][ T5657] The buggy address belongs to the object at ffff8880364cf800 [ 502.423002][ T5657] which belongs to the cache kmalloc-512 of size 512 [ 502.423018][ T5657] The buggy address is located 88 bytes inside of [ 502.423018][ T5657] freed 512-byte region [ffff8880364cf800, ffff8880364cfa00) [ 502.423037][ T5657] [ 502.423042][ T5657] The buggy address belongs to the physical page: [ 502.423059][ T5657] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880364cdc00 pfn:0x364cc [ 502.423079][ T5657] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 502.423093][ T5657] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 502.423110][ T5657] page_type: f5(slab) [ 502.423127][ T5657] raw: 00fff00000000240 ffff88813ff25c80 ffffea0001eddc10 ffffea0000bf8610 [ 502.423142][ T5657] raw: ffff8880364cdc00 000000000010000e 00000000f5000000 0000000000000000 [ 502.423159][ T5657] head: 00fff00000000240 ffff88813ff25c80 ffffea0001eddc10 ffffea0000bf8610 [ 502.423174][ T5657] head: ffff8880364cdc00 000000000010000e 00000000f5000000 0000000000000000 [ 502.423189][ T5657] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 502.423203][ T5657] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 502.423212][ T5657] page dumped because: kasan: bad access detected [ 502.423226][ T5657] page_owner tracks the page as allocated [ 502.423233][ T5657] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5044, tgid 5044 (v4l_id), ts 32148511454 [ 502.423267][ T5657] post_alloc_hook+0x1f9/0x250 [ 502.423288][ T5657] get_page_from_freelist+0x220f/0x2280 [ 502.423313][ T5657] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 502.423337][ T5657] allocate_slab+0x7d/0x5e0 [ 502.423354][ T5657] refill_objects+0x2d5/0x350 [ 502.423372][ T5657] __pcs_replace_empty_main+0x2c8/0x6c0 [ 502.423388][ T5657] __kmalloc_cache_noprof+0x396/0x600 [ 502.423417][ T5657] v4l2_fh_open+0x62/0x410 [ 502.423441][ T5657] v4l2_open+0x1bc/0x3a0 [ 502.423463][ T5657] chrdev_open+0x4d9/0x600 [ 502.423479][ T5657] do_dentry_open+0x80e/0x1360 [ 502.423497][ T5657] vfs_open_consume+0x4a/0x350 [ 502.423514][ T5657] path_openat+0x16fc/0x20f0 [ 502.423527][ T5657] do_file_open+0x258/0x570 [ 502.423541][ T5657] do_sys_openat2+0x115/0x200 [ 502.423560][ T5657] __x64_sys_openat+0x138/0x170 [ 502.423580][ T5657] page last free pid 5025 tgid 5025 ts 31146964430 stack trace: [ 502.423593][ T5657] __free_frozen_pages+0xc97/0xd90 [ 502.423613][ T5657] __slab_free+0x269/0x2c0 [ 502.423636][ T5657] qlist_free_all+0x99/0x100 [ 502.423658][ T5657] kasan_quarantine_reduce+0x148/0x160 [ 502.423681][ T5657] __kasan_slab_alloc+0x22/0x80 [ 502.423695][ T5657] kmem_cache_alloc_noprof+0x2b4/0x600 [ 502.423716][ T5657] mas_alloc_nodes+0x291/0x350 [ 502.423775][ T5657] mas_preallocate+0x42a/0x840 [ 502.423791][ T5657] commit_merge+0x5f8/0xa90 [ 502.423815][ T5657] vma_expand+0x7cf/0xaa0 [ 502.423838][ T5657] vma_merge_new_range+0x505/0x6f0 [ 502.423861][ T5657] mmap_region+0x1635/0x2d30 [ 502.423877][ T5657] do_mmap+0xe0a/0x1300 [ 502.423893][ T5657] vm_mmap_pgoff+0x272/0x4e0 [ 502.423914][ T5657] ksys_mmap_pgoff+0x4dc/0x760 [ 502.423931][ T5657] do_syscall_64+0x166/0x520 [ 502.423950][ T5657] [ 502.423954][ T5657] Memory state around the buggy address: [ 502.423964][ T5657] ffff8880364cf700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 502.423976][ T5657] ffff8880364cf780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 502.423987][ T5657] >ffff8880364cf800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 502.423996][ T5657] ^ [ 502.424006][ T5657] ffff8880364cf880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 502.424018][ T5657] ffff8880364cf900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 502.424026][ T5657] ================================================================== [ 502.501963][ T5657] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 503.339988][ T5657] CPU: 1 UID: 0 PID: 5657 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 503.349441][ T5657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 503.359489][ T5657] Call Trace: [ 503.362765][ T5657] [ 503.365688][ T5657] vpanic+0x26f/0x710 [ 503.369675][ T5657] panic+0xc5/0xd0 [ 503.373390][ T5657] ? __pfx_panic+0x10/0x10 [ 503.377807][ T5657] ? preempt_schedule_thunk+0x16/0x40 [ 503.383180][ T5657] ? __mutex_lock+0x14e/0x15a0 [ 503.387952][ T5657] ? preempt_schedule_thunk+0x16/0x40 [ 503.393323][ T5657] ? __mutex_lock+0x14e/0x15a0 [ 503.398088][ T5657] check_panic_on_warn+0x89/0xb0 [ 503.403028][ T5657] ? __mutex_lock+0x14e/0x15a0 [ 503.407874][ T5657] end_report+0x73/0x170 [ 503.412117][ T5657] ? __mutex_lock+0x14e/0x15a0 [ 503.416874][ T5657] kasan_report+0x128/0x150 [ 503.421376][ T5657] ? __mutex_lock+0x14e/0x15a0 [ 503.426142][ T5657] __mutex_lock+0x14e/0x15a0 [ 503.430740][ T5657] ? __follow_mount_rcu+0x472/0x530 [ 503.435951][ T5657] ? ep_open+0x4e/0x270 [ 503.440116][ T5657] ? __pfx___mutex_lock+0x10/0x10 [ 503.445150][ T5657] ? apparmor_file_open+0x523/0x6c0 [ 503.450350][ T5657] ? __pfx_apparmor_file_open+0x10/0x10 [ 503.455934][ T5657] ep_open+0x4e/0x270 [ 503.459930][ T5657] ? do_dentry_open+0x7ff/0x1360 [ 503.464877][ T5657] ? __pfx_ep_open+0x10/0x10 [ 503.469475][ T5657] do_dentry_open+0x80e/0x1360 [ 503.474256][ T5657] vfs_open_consume+0x4a/0x350 [ 503.479043][ T5657] ? path_openat+0x16e1/0x20f0 [ 503.483805][ T5657] path_openat+0x16fc/0x20f0 [ 503.488402][ T5657] do_file_open+0x258/0x570 [ 503.492908][ T5657] ? __pfx_do_file_open+0x10/0x10 [ 503.497937][ T5657] ? _raw_spin_unlock+0x28/0x50 [ 503.502787][ T5657] ? alloc_fd+0x6af/0x760 [ 503.507118][ T5657] do_sys_openat2+0x115/0x200 [ 503.511807][ T5657] ? __pfx_do_sys_openat2+0x10/0x10 [ 503.517013][ T5657] ? __se_sys_unlink+0xc2/0x140 [ 503.521865][ T5657] ? kmem_cache_free+0x182/0x650 [ 503.526804][ T5657] __x64_sys_openat+0x138/0x170 [ 503.531664][ T5657] do_syscall_64+0x166/0x520 [ 503.536251][ T5657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.542314][ T5657] ? clear_bhb_loop+0x70/0xc0 [ 503.546988][ T5657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.552875][ T5657] RIP: 0033:0x7f871175eb0e [ 503.557283][ T5657] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 503.576886][ T5657] RSP: 002b:00007ffd5e3549b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 503.585292][ T5657] RAX: ffffffffffffffda RBX: 000055555f4e1500 RCX: 00007f871175eb0e [ 503.593254][ T5657] RDX: 0000000000000000 RSI: 00007ffd5e354b20 RDI: ffffffffffffff9c [ 503.601211][ T5657] RBP: 00007ffd5e354b20 R08: 0000000000000000 R09: 0000000000000000 [ 503.609171][ T5657] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd5e355c10 [ 503.617129][ T5657] R13: 00007f8711834ccb R14: 000055555f4e14e8 R15: 0000000000000006 [ 503.625095][ T5657] [ 503.628122][ T5657] Kernel Offset: disabled [ 503.632446][ T5657] Rebooting in 86400 seconds..