last executing test programs: 7.571078016s ago: executing program 0 (id=373): add_key(0x0, 0x0, &(0x7f0000000200), 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) 7.214608694s ago: executing program 3 (id=376): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 7.141966975s ago: executing program 1 (id=377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x1b, 0x4) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r4, r5, r6, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r2, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r7, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r4, r5) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2) syz_ublk_setup_queues(r9, r8, 0x0, &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)) r10 = getpid() syz_io_uring_submit$UBLK(r4, r5, r6, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r2, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r7, 0xffff, 0x0, 0x0, r10}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) nanosleep(&(0x7f0000001a80)={0x5}, &(0x7f0000001ac0)) syz_open_dev$ublk_bdev(&(0x7f0000003000), r7, 0x0) 7.011621903s ago: executing program 3 (id=378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x60, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x2000, r3, {}, {0xfff1, 0xffff}, {0x300, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xe5, 0x3, 0x8}, {0x7, 0x1, 0x4e1, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 6.668489286s ago: executing program 4 (id=380): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES32=r1], 0x0) 6.497109342s ago: executing program 3 (id=382): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x3, &(0x7f0000000080)={0x2, "1a9c66bf2f615e4200000000e200"}}) 6.265544102s ago: executing program 0 (id=383): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8047) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 6.228252145s ago: executing program 1 (id=384): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0xb, 0x7}}}, 0x24}}, 0x4008000) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet6_sctp(0xa, 0x1, 0x84) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) 5.43033941s ago: executing program 1 (id=386): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="455b7ecd2d7c", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "f12283", 0x0, 0x8, 0x1, @mcast1, @local}}}}, 0x0) 5.343727896s ago: executing program 0 (id=387): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x6, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0x1, 0x10, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff], 0xeeef0000, 0x2011c0}) r0 = syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x14f600) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a30"], 0x30}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="a788b9a48d1de6603c475fe3cfa8a27d7c8425073f756d1cefddc08a6dd4c4c0a5323f8f93d65682bc4974397001a396624e1bd23560952dee5736311e3d06e60f168e59f8a3125595ff42643b55d9addf2ea3fa011611a8c539558baf2581e9a8b722f2108f58cb3d552779ea51ba9462992a9156243c50c162d06280d116e26d280aacfb494b66c66bb4df665381440690afc4854f4a", 0x97) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00040000170000000400", "f4bd00000080190000002c88f16b00", [0x100000000, 0x7ffffffffffffffe]}}) 4.939887562s ago: executing program 1 (id=388): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)="196a348fbba6e75ce3e37fd3d3fc", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r2, r4, 0x0, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000080)={0x10000010}) syz_emit_ethernet(0x80, &(0x7f0000000380)=ANY=[], 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) lstat(&(0x7f0000000200)='./dev\x00', &(0x7f00000009c0)) sendmsg$nl_route(r7, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24014004}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000300)={0x4, 0x3, 0x2, 0x1a01, 0x0, "6c5c43f56b16428cf80400"}) syz_clone3(&(0x7f0000000880)={0x1200080, &(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700), {0x6}, &(0x7f0000000740)=""/70, 0x46, &(0x7f00000007c0)=""/100, &(0x7f0000000840)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r8}}, 0x58) getpgrp(r9) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r10, 0x0, 0xa20, 0x8000c65) 4.937694485s ago: executing program 0 (id=389): socket$kcm(0x29, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x81) mkdir(0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x22) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount$nfs4(&(0x7f0000000300)=':2\a>pt', &(0x7f0000000180)='./file0\x00', 0x0, 0x313041c, &(0x7f0000000540)=ANY=[]) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(0xffffffffffffffff, 0x8004af79, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pivot_root(&(0x7f0000000500)='./file0\x00', 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x37, 0x0, &(0x7f0000000200)="e64692fcc44eb88391e66a22fe8388d51ddc5b7e44a1303c32e5a05281531cfa21461674228b2e102ae8ac0381ca43ef1dc0fea2eb5c7a"}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000340)={{0x7}, 0x1, 0x803, 0x101, {0x81, 0x13}, 0xfc}) socket$kcm(0x2, 0x7, 0x0) 4.851927588s ago: executing program 4 (id=391): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000220)='./config/usb_gadget/g1/bDeviceClass\x00', 0x1, 0x0) write(r0, &(0x7f0000000230)='0', 0x1) 4.165607599s ago: executing program 4 (id=392): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$igmp6(0xa, 0x3, 0x2) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4c, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$KVM_CREATE_VM(r1, 0x2201, 0x32) 3.740626819s ago: executing program 0 (id=393): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x6, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0xdc, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x10, 0xf, 0xc559, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x1, 0x1, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xf, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8c, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x7fd, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x80000001, 0x0, 0x5]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000001340)={'syz0\x00', {0x0, 0x9, 0x7, 0x6}, 0x17, [0x9, 0xaa48, 0xffff0000, 0x80, 0x8000, 0x10001, 0x5, 0x1ff, 0xa, 0x7, 0x81, 0xd, 0x400, 0xd, 0x3, 0xfabc, 0x2, 0x9, 0xa, 0x5, 0x0, 0xcf21, 0x5, 0x1ff, 0x7, 0x9, 0x3, 0x51, 0x1, 0x2, 0x6, 0x7e76, 0x2e, 0x4, 0x2, 0xa8, 0x8, 0xa, 0xfb4c, 0x5, 0x3ff, 0x9, 0x8, 0xd, 0x100, 0xfffffffd, 0x6, 0x7, 0x4, 0x1f0c, 0x8, 0x571000, 0x9, 0x88c9, 0x6, 0x0, 0x7, 0xe, 0x4, 0x5, 0xb396, 0x0, 0x1, 0x1], [0x1, 0x2, 0x9, 0x0, 0x8, 0x0, 0x4, 0x7, 0xd93b5b3c, 0x1, 0x0, 0x4, 0xc, 0x9, 0x58, 0x1ff, 0x2, 0x9, 0x4, 0x66, 0x80, 0x40ecea14, 0x0, 0x2, 0x263, 0x2, 0x100, 0x4, 0x5, 0x7ff, 0xf4, 0x6, 0x3, 0x6cd, 0x780ef5c1, 0x7, 0x0, 0x7f, 0x5, 0x7, 0x9, 0x7, 0x1, 0x10001, 0x2, 0x8001, 0x2, 0xff, 0x9, 0x9, 0x5, 0x7de2, 0xfff, 0x9, 0xfffffffb, 0x2, 0x80, 0x0, 0xfffffff7, 0x8, 0x3, 0x6, 0x1, 0x40], [0xfffff07f, 0x0, 0x4, 0xffffffff, 0x2, 0xffff, 0x8, 0x80000000, 0x291, 0x6, 0x1, 0x9, 0x40, 0xb, 0x3, 0x80, 0x8001, 0x400, 0x0, 0x0, 0x4, 0x10000, 0xe47, 0xfffffffa, 0x80000001, 0xf3, 0x8, 0x80000001, 0xeb, 0x28, 0x2, 0x1ff, 0xb, 0x1ff, 0xb9, 0x9, 0xfffffffb, 0xf9f8, 0xb4, 0xac5, 0x2, 0x0, 0x8, 0x0, 0xfffffffb, 0xff, 0x1, 0x1, 0x4, 0x9, 0x11760, 0x5, 0x2, 0x10, 0x3, 0x7, 0x1, 0xd15, 0x401, 0x8, 0xfffffffc, 0x80, 0x5a5, 0x8], [0x8000, 0x1, 0x5, 0x9, 0xd90, 0xd, 0x3, 0x400, 0x9, 0x80000000, 0x1, 0x0, 0x7ff, 0x7, 0x0, 0x2, 0x7, 0x6f07, 0x2, 0x5, 0x80000001, 0xf, 0x40, 0x5, 0x0, 0x6, 0xe2a, 0xb, 0x4, 0x3, 0x8, 0xffff, 0x4, 0x1, 0x200, 0xc16, 0x9, 0x7fffffff, 0x5, 0x800, 0x0, 0x0, 0x101, 0x2, 0x64a0, 0x23f5ee22, 0xfffffffe, 0x8, 0x7, 0x2, 0xfffffbbf, 0x9, 0x5, 0x15, 0x40, 0x8, 0x6a, 0x1, 0x7, 0xe06, 0xc, 0x8, 0x7ff, 0x9e4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0xf}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xa9, 0x0, 0x1, 0x0, 0x7ff, 0x80, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x4, 0xfffffffd, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401f, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff6, 0x0, 0x20000004, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x6, 0x82, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x5], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0xffffffff, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x3, 0x0, 0xffffffdc, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) 3.337600652s ago: executing program 4 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x1b, 0x4) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r4, r5, r6, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r2, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r7, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r4, r5) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2) syz_ublk_setup_queues(r9, r8, 0x0, &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)) r10 = getpid() syz_io_uring_submit$UBLK(r4, r5, r6, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r2, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r7, 0xffff, 0x0, 0x0, r10}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) nanosleep(&(0x7f0000001a80)={0x5}, &(0x7f0000001ac0)) syz_open_dev$ublk_bdev(&(0x7f0000003000), r7, 0x0) 2.298854701s ago: executing program 1 (id=397): mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7840, 0x0) 2.200923265s ago: executing program 3 (id=398): mkdirat(0xffffffffffffff9c, 0x0, 0x777) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSETELEM={0x5c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x28, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x23, 0x1, "118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef8cd8d80"}]}]}]}]}], {0x14, 0x10}}, 0x84}}, 0x0) 2.193678103s ago: executing program 2 (id=399): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x26, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getpid() shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 2.081735569s ago: executing program 2 (id=400): sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x5, 0x0, 0x8, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x20037}, 0x60) listen(r0, 0x9) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) 1.977551349s ago: executing program 1 (id=401): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xf, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x4d, 0x5, 0x5d, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x7, 0x0, 0x7, 0x23c5b, 0x1, 0xf, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0xdb63, 0x4000008c, 0x6, 0x5, 0x0, 0x4, 0x0, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x3, 0x1, 0xf], [0x1, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0xfffffffe, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0xfffffffe, 0x4, 0x7, 0x6, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x5, 0x1000005, 0x5f2b, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x6, 0x47, 0x8000, 0xc25, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x2, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x4cc93690, 0x42, 0x3], [0x82, 0x2, 0x7, 0x5, 0xfffffffe, 0x6, 0x2, 0x9, 0x5, 0x8002, 0x4, 0x5, 0xb, 0x2, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x3ff, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x7, 0x3, 0x3, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x2, 0x3, 0x0, 0x10000, 0xb8, 0x3, 0x28, 0x3, 0x2, 0x5, 0x1, 0x7ff, 0x800, 0x20a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x6, 0x8, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.846542133s ago: executing program 3 (id=402): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) io_setup(0x389, &(0x7f0000000140)=0x0) io_getevents(r2, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0) landlock_restrict_self(r1, 0x9) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 1.825638547s ago: executing program 2 (id=403): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xffff}, {0xffff}, {0x1, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 1.428445742s ago: executing program 3 (id=404): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000740)={0x0, 0x1, &(0x7f0000000380)=[r2], &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x800000000000c}) 1.397861533s ago: executing program 4 (id=405): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x34, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4009c}, 0x40000) 1.124996318s ago: executing program 2 (id=406): socket$tipc(0x1e, 0x2, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0', 0x1) 794.526031ms ago: executing program 2 (id=407): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0) tee(r0, r4, 0xf3a, 0x4) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0x18c6) 589.002081ms ago: executing program 4 (id=408): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 160.455714ms ago: executing program 2 (id=409): r0 = inotify_init() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=410): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) kernel console output (not intermixed with test programs): iptor for endpoint 4 [ 118.707536][ T10] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 86 [ 118.707619][ T10] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 118.890078][ T10] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 119.058822][ T5837] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.087389][ T10] usb 4-1: USB disconnect, device number 2 [ 119.365150][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 119.455745][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 119.470132][ T10] keyspan 4-1:1.0: device disconnected [ 120.376615][ T987] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 120.476365][ T5723] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.571264][ T987] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 120.585372][ T987] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.585400][ T987] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 120.585452][ T987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.638399][ T5723] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 120.674965][ T987] usb 1-1: config 0 descriptor?? [ 120.687990][ T5723] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.688067][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.739879][ T987] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 120.740276][ T987] dvb-usb: bulk message failed: -22 (3/0) [ 120.824507][ T5723] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 120.824792][ T5723] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 120.824867][ T5723] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 120.908420][ T987] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 120.940759][ T5723] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 120.940855][ T5723] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 120.965721][ T987] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 120.965780][ T987] usb 1-1: media controller created [ 120.980442][ T5723] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 121.011054][ T5723] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 121.011160][ T5723] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 121.013904][ T5723] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 121.098419][ T987] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.162819][ T987] dvb-usb: bulk message failed: -22 (6/0) [ 121.162916][ T987] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 121.233847][ T987] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 121.235178][ T5855] ======================================================= [ 121.235178][ T5855] WARNING: The mand mount option has been deprecated and [ 121.235178][ T5855] and is ignored by this kernel. Remove the mand [ 121.235178][ T5855] option from the mount to silence this warning. [ 121.235178][ T5855] ======================================================= [ 121.407031][ T987] dvb-usb: schedule remote query interval to 150 msecs. [ 121.407058][ T987] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 121.461207][ T987] usb 1-1: USB disconnect, device number 3 [ 121.614324][ T5864] futex_wake_op: syz.3.25 tries to shift op by 144; fix this program [ 121.614751][ T5723] usb 3-1: USB disconnect, device number 2 [ 121.871154][ T5723] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 122.045700][ T5723] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 122.093195][ T5723] keyspan 3-1:1.0: device disconnected [ 122.161606][ T5872] syz.4.27 (5872): drop_caches: 0 [ 122.243302][ T987] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 122.682452][ T5879] capability: warning: `syz.2.29' uses deprecated v2 capabilities in a way that may be insecure [ 123.630884][ T5891] FAULT_INJECTION: forcing a failure. [ 123.630884][ T5891] name failslab, interval 1, probability 0, space 0, times 1 [ 123.630943][ T5891] CPU: 0 UID: 0 PID: 5891 Comm: syz.1.35 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 123.630971][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.630993][ T5891] Call Trace: [ 123.631003][ T5891] [ 123.631013][ T5891] dump_stack_lvl+0xe8/0x150 [ 123.631062][ T5891] should_fail_ex+0x46b/0x600 [ 123.631102][ T5891] should_failslab+0xa8/0x100 [ 123.631125][ T5891] ? key_alloc+0x30e/0xfe0 [ 123.631147][ T5891] kmem_cache_alloc_noprof+0x9e/0x690 [ 123.631181][ T5891] ? key_alloc+0x30e/0xfe0 [ 123.631209][ T5891] key_alloc+0x30e/0xfe0 [ 123.631245][ T5891] keyring_alloc+0x45/0xb0 [ 123.631274][ T5891] join_session_keyring+0x13b/0x440 [ 123.631315][ T5891] lookup_user_key+0x4e6/0x1150 [ 123.631356][ T5891] ? __pfx_lookup_user_key+0x10/0x10 [ 123.631395][ T5891] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 123.631458][ T5891] __se_sys_add_key+0x315/0x420 [ 123.631491][ T5891] ? __pfx___se_sys_add_key+0x10/0x10 [ 123.631530][ T5891] ? __x64_sys_add_key+0x20/0xc0 [ 123.631561][ T5891] do_syscall_64+0x166/0x520 [ 123.631587][ T5891] ? trace_irq_disable+0x3b/0x140 [ 123.631623][ T5891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.631646][ T5891] ? clear_bhb_loop+0x70/0xc0 [ 123.631674][ T5891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.631698][ T5891] RIP: 0033:0x7f6fb81ae159 [ 123.631730][ T5891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.631750][ T5891] RSP: 002b:00007f6fb6406028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 123.631778][ T5891] RAX: ffffffffffffffda RBX: 00007f6fb8435fa0 RCX: 00007f6fb81ae159 [ 123.631795][ T5891] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 123.631809][ T5891] RBP: 00007f6fb824506b R08: fffffffffffffffd R09: 0000000000000000 [ 123.631824][ T5891] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 123.631838][ T5891] R13: 00007f6fb8436038 R14: 00007f6fb8435fa0 R15: 00007ffea385f8c8 [ 123.631871][ T5891] [ 124.776556][ T5695] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.970874][ T5695] usb 1-1: unable to get BOS descriptor or descriptor too short [ 124.970938][ T5695] usb 1-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 125.015389][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.015420][ T5695] usb 1-1: Product: syz [ 125.015436][ T5695] usb 1-1: Manufacturer: syz [ 125.015452][ T5695] usb 1-1: SerialNumber: syz [ 125.634143][ T5695] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 126.316947][ T5695] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 126.349600][ T5695] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 126.406192][ T5695] usb 1-1: USB disconnect, device number 4 [ 126.459326][ T5871] syz.4.27 (5871): drop_caches: 2 [ 127.066145][ T5828] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 127.216806][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 127.235512][ T5828] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=84.76 [ 127.242248][ T5828] usb 3-1: config 9 has an invalid interface number: 225 but max is 0 [ 127.242277][ T5828] usb 3-1: config 9 has no interface number 0 [ 127.242311][ T5828] usb 3-1: config 9 interface 225 has no altsetting 0 [ 127.299713][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.299745][ T5828] usb 3-1: Product: syz [ 127.299761][ T5828] usb 3-1: Manufacturer: syz [ 127.299777][ T5828] usb 3-1: SerialNumber: syz [ 127.356303][ T97] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 127.476801][ T5695] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 127.526238][ T97] usb 4-1: Using ep0 maxpacket: 16 [ 127.529039][ T97] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 127.531853][ T97] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.531879][ T97] usb 4-1: config 0 has no interface number 0 [ 127.534857][ T97] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.534882][ T97] usb 4-1: Product: syz [ 127.534947][ T97] usb 4-1: Manufacturer: syz [ 127.534960][ T97] usb 4-1: SerialNumber: syz [ 127.556784][ T5708] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.683027][ T5695] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 127.698494][ T5695] usb 2-1: config index 0 descriptor too short (expected 1572, got 36) [ 127.698525][ T5695] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.725047][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.725086][ T5695] usb 2-1: Product: syz [ 127.725102][ T5695] usb 2-1: Manufacturer: syz [ 127.725118][ T5695] usb 2-1: SerialNumber: syz [ 127.747213][ T5708] usb 1-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 127.788329][ T5708] usb 1-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 127.788359][ T5708] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 127.788379][ T5708] usb 1-1: config 220 has 0 interfaces, different from the descriptor's value: 184 [ 127.788416][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.864186][ T97] usb 4-1: config 0 descriptor?? [ 128.041208][ T5695] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input6 [ 128.058954][ T5828] catc 3-1:9.225: Missing or invalid endpoints [ 128.128918][ T97] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 128.179648][ T5828] usb 1-1: USB disconnect, device number 5 [ 128.303712][ T4939] bcm5974 2-1:1.0: could not read from device [ 128.437049][ T5695] bcm5974 2-1:1.0: could not read from device [ 128.439063][ T5577] usb 3-1: USB disconnect, device number 3 [ 128.486927][ T4939] bcm5974 2-1:1.0: could not read from device [ 128.580089][ T5695] input: failed to attach handler mousedev to device input6, error: -5 [ 128.663001][ T5695] usb 2-1: USB disconnect, device number 2 [ 128.682043][ T4939] bcm5974 2-1:1.0: could not read from device [ 128.984727][ T97] gspca_spca1528: reg_w err -71 [ 128.984845][ T97] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 129.043801][ T97] usb 4-1: USB disconnect, device number 3 [ 129.246153][ T5828] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.366131][ T5722] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 129.404916][ T5828] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 129.408534][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.408570][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.408612][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.477352][ T5828] usb 1-1: config 0 descriptor?? [ 129.546114][ T5722] usb 3-1: Using ep0 maxpacket: 8 [ 129.547206][ T5722] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.550306][ T5722] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.550327][ T5722] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 129.550384][ T5722] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.550456][ T5722] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.550487][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.013537][ T5722] usb 3-1: GET_CAPABILITIES returned 0 [ 130.013709][ T5722] usbtmc 3-1:16.0: can't read capabilities [ 130.186950][ T5828] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 130.186992][ T5828] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 130.187020][ T5828] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 130.187048][ T5828] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 130.187075][ T5828] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 131.217902][ T5828] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 131.267837][ T5695] usb 3-1: USB disconnect, device number 4 [ 131.382810][ T5828] playstation 0003:054C:0DF2.0001: Invalid reportID received, expected 9 got 148 [ 131.382852][ T5828] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -22 [ 131.382906][ T5828] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 131.382929][ T5828] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 131.534797][ T5828] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -22 [ 131.594745][ T97] usb 1-1: USB disconnect, device number 6 [ 131.673254][ T5971] fido_id[5971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 131.735807][ T5979] gadgetfs: bound to dummy_udc driver [ 132.087853][ T97] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 132.094262][ C0] gadgetfs: connected [ 132.113841][ T97] gadgetfs: disconnected [ 132.316022][ T5994] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 132.530702][ T6001] db_root: cannot open: GPL [ 132.850650][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.850756][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.108380][ T6019] warning: `syz.0.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 133.186092][ T5828] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 133.336936][ T5828] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 133.338473][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.345013][ T5828] usb 3-1: config 0 descriptor?? [ 133.440384][ T97] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 133.550175][ T6031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.594092][ T97] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 133.638340][ T6037] process 'syz.1.81' launched './tracing/events/kvm/kvm_hv_stimer_cleanup/trigger' with NULL argv: empty string added [ 133.638539][ T6037] kernel read not supported for file events/kvm/kvm_hv_stimer_cleanup/trigger (pid: 6037 comm: syz.1.81) [ 133.644078][ T5828] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 133.707746][ T97] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 133.707849][ T97] usb 4-1: config 0 interface 0 has no altsetting 0 [ 133.707888][ T97] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.784337][ T97] usb 4-1: config 0 descriptor?? [ 133.793483][ T6026] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 134.028219][ T5828] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 134.028249][ T5828] [drm] Initialized udl on minor 1 [ 134.250393][ T97] lenovo 0003:17EF:6062.0002: unknown main item tag 0x2 [ 134.250434][ T97] lenovo 0003:17EF:6062.0002: unknown main item tag 0x3 [ 134.250526][ T97] lenovo 0003:17EF:6062.0002: unknown main item tag 0x1 [ 134.250557][ T97] lenovo 0003:17EF:6062.0002: unknown main item tag 0x2 [ 134.252118][ T6044] FAULT_INJECTION: forcing a failure. [ 134.252118][ T6044] name failslab, interval 1, probability 0, space 0, times 0 [ 134.252154][ T6044] CPU: 1 UID: 0 PID: 6044 Comm: syz.1.84 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 134.252179][ T6044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.252192][ T6044] Call Trace: [ 134.252202][ T6044] [ 134.252212][ T6044] dump_stack_lvl+0xe8/0x150 [ 134.252252][ T6044] should_fail_ex+0x46b/0x600 [ 134.252294][ T6044] should_failslab+0xa8/0x100 [ 134.252321][ T6044] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 134.252359][ T6044] ? alloc_vfsmnt+0xe6/0x410 [ 134.252390][ T6044] ? alloc_vfsmnt+0xe6/0x410 [ 134.252432][ T6044] kstrdup+0x42/0x100 [ 134.252459][ T6044] alloc_vfsmnt+0xe6/0x410 [ 134.252495][ T6044] clone_mnt+0x4b/0x9b0 [ 134.252528][ T6044] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 134.252570][ T6044] copy_tree+0xde/0x940 [ 134.252591][ T6044] ? rwbase_write_lock+0x550/0x720 [ 134.252633][ T6044] copy_mnt_ns+0x3de/0xcc0 [ 134.252664][ T6044] ? rcu_is_watching+0x16/0xb0 [ 134.252702][ T6044] ? __pfx_copy_mnt_ns+0x10/0x10 [ 134.252726][ T6044] ? create_new_namespaces+0x33/0x6b0 [ 134.252761][ T6044] ? create_new_namespaces+0x33/0x6b0 [ 134.252802][ T6044] create_new_namespaces+0xcf/0x6b0 [ 134.252835][ T6044] ? bpf_lsm_capable+0x9/0x20 [ 134.252864][ T6044] ? security_capable+0x7e/0x2c0 [ 134.252893][ T6044] unshare_nsproxy_namespaces+0x149/0x190 [ 134.252930][ T6044] ksys_unshare+0x5a7/0x950 [ 134.252973][ T6044] ? __pfx_ksys_unshare+0x10/0x10 [ 134.253007][ T6044] ? rcu_is_watching+0x16/0xb0 [ 134.253054][ T6044] __x64_sys_unshare+0x38/0x50 [ 134.253093][ T6044] do_syscall_64+0x166/0x520 [ 134.253121][ T6044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.253145][ T6044] ? clear_bhb_loop+0x70/0xc0 [ 134.253172][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.253194][ T6044] RIP: 0033:0x7f6fb81ae159 [ 134.253214][ T6044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.253234][ T6044] RSP: 002b:00007f6fb6406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 134.253256][ T6044] RAX: ffffffffffffffda RBX: 00007f6fb8435fa0 RCX: 00007f6fb81ae159 [ 134.253270][ T6044] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008020480 [ 134.253284][ T6044] RBP: 00007f6fb824506b R08: 0000000000000000 R09: 0000000000000000 [ 134.253300][ T6044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.253311][ T6044] R13: 00007f6fb8436038 R14: 00007f6fb8435fa0 R15: 00007ffea385f8c8 [ 134.253344][ T6044] [ 134.603207][ T97] lenovo 0003:17EF:6062.0002: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.3-1/input0 [ 134.651213][ T97] usb 4-1: USB disconnect, device number 4 [ 134.945602][ T6048] fido_id[6048]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 135.129990][ T5695] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 135.332037][ T5695] usb 5-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 135.334237][ T5695] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.334264][ T5695] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.342741][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 135.342818][ T5695] usb 5-1: SerialNumber: syz [ 135.837302][ T5695] usb 5-1: 0:2 : does not exist [ 136.216173][ T5577] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.386076][ T5577] usb 4-1: Using ep0 maxpacket: 8 [ 136.389469][ T5577] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 136.416865][ T5577] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 136.416929][ T5577] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.417012][ T5577] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.417040][ T5577] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 136.417065][ T5577] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.417108][ T5577] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.612943][ T6070] kernel read not supported for file events/kvm/kvm_hv_stimer_cleanup/trigger (pid: 6070 comm: syz.0.94) [ 136.739330][ T5577] usb 4-1: usb_control_msg returned -32 [ 136.739579][ T5577] usbtmc 4-1:16.0: can't read capabilities [ 136.871261][ T6068] loop9: detected capacity change from 0 to 16384 [ 137.044929][ T6071] loop9: detected capacity change from 16384 to 16382 [ 137.086139][ T5695] usb 5-1: USB disconnect, device number 2 [ 137.383531][ T6071] Dev loop9: unable to read RDB block 8 [ 137.394143][ T6071] loop9: unable to read partition table [ 137.428112][ T6071] loop_reread_partitions: partition scan of loop9 (׬X? ) failed (rc=-5) [ 137.523721][ T5723] usb 4-1: USB disconnect, device number 5 [ 138.020621][ T6078] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.076502][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.482601][ T6086] FAULT_INJECTION: forcing a failure. [ 138.482601][ T6086] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 138.482642][ T6086] CPU: 1 UID: 0 PID: 6086 Comm: syz.1.101 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 138.482669][ T6086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.482683][ T6086] Call Trace: [ 138.482693][ T6086] [ 138.482703][ T6086] dump_stack_lvl+0xe8/0x150 [ 138.482745][ T6086] should_fail_ex+0x46b/0x600 [ 138.482784][ T6086] _copy_to_user+0x31/0xb0 [ 138.482810][ T6086] bpf_verifier_vlog+0x3a2/0x900 [ 138.482854][ T6086] btf_verifier_log+0x11d/0x1a0 [ 138.482888][ T6086] ? __pfx_btf_verifier_log+0x10/0x10 [ 138.482913][ T6086] ? __btf_verifier_log+0xe2/0x140 [ 138.482944][ T6086] ? __pfx___btf_verifier_log+0x10/0x10 [ 138.482979][ T6086] btf_func_proto_log+0x274/0x840 [ 138.483021][ T6086] __btf_verifier_log_type+0x45d/0x6a0 [ 138.483055][ T6086] ? btf_parse_type_sec+0x990/0x2360 [ 138.483087][ T6086] ? trace_kmalloc+0x2a/0xf0 [ 138.483122][ T6086] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 138.483147][ T6086] ? __kvmalloc_node_noprof+0x5d4/0x890 [ 138.483196][ T6086] ? btf_parse_type_sec+0x990/0x2360 [ 138.483235][ T6086] ? btf_parse_type_sec+0x990/0x2360 [ 138.483277][ T6086] btf_parse_type_sec+0x21c9/0x2360 [ 138.483320][ T6086] ? __pfx_btf_check_sec_info+0x10/0x10 [ 138.483371][ T6086] btf_new_fd+0x4ad/0xc70 [ 138.483413][ T6086] __sys_bpf+0xd2e/0xd90 [ 138.483456][ T6086] ? __pfx___sys_bpf+0x10/0x10 [ 138.483494][ T6086] ? do_futex+0x3e7/0x4e0 [ 138.483549][ T6086] ? rcu_is_watching+0x16/0xb0 [ 138.483591][ T6086] __x64_sys_bpf+0xba/0xd0 [ 138.483625][ T6086] do_syscall_64+0x166/0x520 [ 138.483649][ T6086] ? trace_irq_disable+0x3b/0x140 [ 138.483679][ T6086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.483702][ T6086] ? clear_bhb_loop+0x70/0xc0 [ 138.483730][ T6086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.483753][ T6086] RIP: 0033:0x7f6fb81ae159 [ 138.483774][ T6086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.483794][ T6086] RSP: 002b:00007f6fb6406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 138.483819][ T6086] RAX: ffffffffffffffda RBX: 00007f6fb8435fa0 RCX: 00007f6fb81ae159 [ 138.483836][ T6086] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 138.483851][ T6086] RBP: 00007f6fb824506b R08: 0000000000000000 R09: 0000000000000000 [ 138.483866][ T6086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.483880][ T6086] R13: 00007f6fb8436038 R14: 00007f6fb8435fa0 R15: 00007ffea385f8c8 [ 138.483916][ T6086] [ 139.362378][ T6097] ubi0: attaching mtd0 [ 139.423340][ T6097] ubi0: scanning is finished [ 139.423415][ T6097] ubi0: empty MTD device detected [ 139.887564][ T5828] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 139.939923][ T5828] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 139.958820][ T5828] usb 3-1: USB disconnect, device number 5 [ 140.147689][ T6101] FAULT_INJECTION: forcing a failure. [ 140.147689][ T6101] name failslab, interval 1, probability 0, space 0, times 0 [ 140.147722][ T6101] CPU: 0 UID: 0 PID: 6101 Comm: syz.3.105 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 140.147744][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.147756][ T6101] Call Trace: [ 140.147763][ T6101] [ 140.147771][ T6101] dump_stack_lvl+0xe8/0x150 [ 140.147807][ T6101] should_fail_ex+0x46b/0x600 [ 140.147842][ T6101] ? __d_alloc+0x37/0x6f0 [ 140.147872][ T6101] should_failslab+0xa8/0x100 [ 140.147897][ T6101] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 140.147930][ T6101] ? __d_alloc+0x37/0x6f0 [ 140.147963][ T6101] __d_alloc+0x37/0x6f0 [ 140.147995][ T6101] d_alloc_pseudo+0x21/0xc0 [ 140.148024][ T6101] alloc_path_pseudo+0x107/0x220 [ 140.148050][ T6101] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 140.148084][ T6101] alloc_file_pseudo+0xa8/0x1e0 [ 140.148105][ T6101] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 140.148136][ T6101] anon_inode_getfd+0xc8/0x200 [ 140.148160][ T6101] map_create+0x7f8/0x1e20 [ 140.148198][ T6101] ? __pfx_map_create+0x10/0x10 [ 140.148237][ T6101] ? bpf_lsm_bpf+0x9/0x20 [ 140.148264][ T6101] ? security_bpf+0x7e/0x2d0 [ 140.148301][ T6101] __sys_bpf+0xaea/0xd90 [ 140.148337][ T6101] ? __pfx___sys_bpf+0x10/0x10 [ 140.148369][ T6101] ? do_futex+0x458/0x4e0 [ 140.148418][ T6101] ? rcu_is_watching+0x16/0xb0 [ 140.148458][ T6101] __x64_sys_bpf+0xba/0xd0 [ 140.148501][ T6101] do_syscall_64+0x166/0x520 [ 140.148526][ T6101] ? trace_irq_disable+0x3b/0x140 [ 140.148557][ T6101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.148580][ T6101] ? clear_bhb_loop+0x70/0xc0 [ 140.148606][ T6101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.148628][ T6101] RIP: 0033:0x7fa4238ce159 [ 140.148648][ T6101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.148667][ T6101] RSP: 002b:00007fa421b26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.148692][ T6101] RAX: ffffffffffffffda RBX: 00007fa423b55fa0 RCX: 00007fa4238ce159 [ 140.148706][ T6101] RDX: 0000000000000048 RSI: 0000200000000740 RDI: 0000000000000000 [ 140.148719][ T6101] RBP: 00007fa42396506b R08: 0000000000000000 R09: 0000000000000000 [ 140.148732][ T6101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.148744][ T6101] R13: 00007fa423b56038 R14: 00007fa423b55fa0 R15: 00007fffc4f194c8 [ 140.148774][ T6101] [ 140.441090][ T6106] FAULT_INJECTION: forcing a failure. [ 140.441090][ T6106] name failslab, interval 1, probability 0, space 0, times 0 [ 140.441129][ T6106] CPU: 0 UID: 0 PID: 6106 Comm: syz.2.106 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 140.441155][ T6106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.441169][ T6106] Call Trace: [ 140.441177][ T6106] [ 140.441187][ T6106] dump_stack_lvl+0xe8/0x150 [ 140.441240][ T6106] should_fail_ex+0x46b/0x600 [ 140.441278][ T6106] should_failslab+0xa8/0x100 [ 140.441303][ T6106] __kvmalloc_node_noprof+0x176/0x890 [ 140.441337][ T6106] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 140.441371][ T6106] ? io_alloc_cache_init+0x42/0x140 [ 140.441404][ T6106] ? io_alloc_cache_init+0x42/0x140 [ 140.441454][ T6106] io_alloc_cache_init+0x42/0x140 [ 140.441492][ T6106] io_ring_ctx_alloc+0x518/0xba0 [ 140.441523][ T6106] io_uring_create+0x50/0x990 [ 140.441551][ T6106] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 140.441574][ T6106] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 140.441609][ T6106] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 140.441648][ T6106] ? rcu_is_watching+0x16/0xb0 [ 140.441696][ T6106] do_syscall_64+0x166/0x520 [ 140.441720][ T6106] ? trace_irq_disable+0x3b/0x140 [ 140.441749][ T6106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.441771][ T6106] ? clear_bhb_loop+0x70/0xc0 [ 140.441798][ T6106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.441820][ T6106] RIP: 0033:0x7f70693ce159 [ 140.441841][ T6106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.441859][ T6106] RSP: 002b:00007f7067625fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 140.441883][ T6106] RAX: ffffffffffffffda RBX: 0000200000001840 RCX: 00007f70693ce159 [ 140.441899][ T6106] RDX: 0000200000001900 RSI: 0000200000001840 RDI: 0000000000005e86 [ 140.441914][ T6106] RBP: 00007f706946506b R08: 0000000000000000 R09: 0000000000000000 [ 140.441928][ T6106] R10: 0000200000001940 R11: 0000000000000206 R12: 0000200000001900 [ 140.441944][ T6106] R13: 0000200000001940 R14: 0000200000000000 R15: 00007ffec0a33888 [ 140.441981][ T6106] [ 140.880050][ T6097] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 141.232760][ T6128] binder: 6124:6128 ioctl c0306201 0 returned -14 [ 141.244270][ T6128] binder: 6124:6128 ioctl c0306201 2000000001c0 returned -14 [ 141.626505][ T6141] Invalid argument reading file caps for ./file0 [ 141.788198][ T6148] Bluetooth: MGMT ver 1.23 [ 142.147605][ T6160] FAULT_INJECTION: forcing a failure. [ 142.147605][ T6160] name failslab, interval 1, probability 0, space 0, times 0 [ 142.147645][ T6160] CPU: 1 UID: 0 PID: 6160 Comm: syz.3.124 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 142.147669][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.147682][ T6160] Call Trace: [ 142.147690][ T6160] [ 142.147699][ T6160] dump_stack_lvl+0xe8/0x150 [ 142.147736][ T6160] should_fail_ex+0x46b/0x600 [ 142.147773][ T6160] should_failslab+0xa8/0x100 [ 142.147793][ T6160] ? new_userfaultfd+0x88/0x3d0 [ 142.147817][ T6160] kmem_cache_alloc_noprof+0x9e/0x690 [ 142.147848][ T6160] ? new_userfaultfd+0x88/0x3d0 [ 142.147880][ T6160] new_userfaultfd+0x88/0x3d0 [ 142.147910][ T6160] __x64_sys_userfaultfd+0x81/0xa0 [ 142.147935][ T6160] do_syscall_64+0x166/0x520 [ 142.147960][ T6160] ? trace_irq_disable+0x3b/0x140 [ 142.147990][ T6160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.148013][ T6160] ? clear_bhb_loop+0x70/0xc0 [ 142.148040][ T6160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.148063][ T6160] RIP: 0033:0x7fa4238ce159 [ 142.148084][ T6160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.148102][ T6160] RSP: 002b:00007fa421b26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 142.148127][ T6160] RAX: ffffffffffffffda RBX: 00007fa423b55fa0 RCX: 00007fa4238ce159 [ 142.148144][ T6160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000801 [ 142.148158][ T6160] RBP: 00007fa42396506b R08: 0000000000000000 R09: 0000000000000000 [ 142.148173][ T6160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.148187][ T6160] R13: 00007fa423b56038 R14: 00007fa423b55fa0 R15: 00007fffc4f194c8 [ 142.148219][ T6160] [ 142.578866][ T5708] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 142.758578][ T5708] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 142.760167][ T5708] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 142.760196][ T5708] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 142.760240][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.928147][ T5708] usb 3-1: probing VID:PID(0424:012C) [ 142.959766][ T5708] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 142.959804][ T5708] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 142.959825][ T5708] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 142.959846][ T5708] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 142.959866][ T5708] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 143.227758][ T6175] synth uevent: /bus/virtio/drivers/virtio_net: unknown uevent action string [ 143.395273][ T5708] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 143.556122][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 143.662308][ T5708] vub300 3-1:1.0: probe with driver vub300 failed with error -22 [ 143.709006][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 143.713839][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 143.715737][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.715776][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.773313][ T10] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 143.773346][ T10] usb 1-1: Product: syz [ 143.773364][ T10] usb 1-1: Manufacturer: syz [ 143.773380][ T10] usb 1-1: SerialNumber: syz [ 143.858087][ T5828] usb 3-1: USB disconnect, device number 6 [ 143.919151][ T10] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input7 [ 144.081220][ T6191] input: syz0 as /devices/virtual/input/input8 [ 144.210755][ T10] usb 1-1: USB disconnect, device number 8 [ 144.210873][ C1] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 144.513879][ T6195] kvm: MWAIT instruction emulated as NOP! [ 144.584962][ T10] appletouch 1-1:1.0: input: appletouch disconnected [ 144.761989][ T6203] input: syz1 as /devices/virtual/input/input9 [ 145.416149][ T5708] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 145.587340][ T5708] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 145.593730][ T5708] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 145.593758][ T5708] usb 2-1: config 0 has no interface number 0 [ 145.593807][ T5708] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 145.593836][ T5708] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 145.593880][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.787968][ T6223] ubi0: attaching mtd0 [ 145.816477][ T6223] ubi0: scanning is finished [ 146.254698][ T5708] usb 2-1: config 0 descriptor?? [ 146.265481][ T6212] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 146.479648][ T5708] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 146.744029][ T5828] usb 2-1: USB disconnect, device number 3 [ 146.744133][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 147.076009][ T6223] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 147.414553][ T38] audit: type=1326 audit(1791079582.785:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6236 comm="syz.4.152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f237819e159 code=0x0 [ 148.357019][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 148.507653][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 148.510083][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.552020][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.552048][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.578824][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.578855][ T10] usb 2-1: Product: syz [ 148.578871][ T10] usb 2-1: Manufacturer: syz [ 148.578887][ T10] usb 2-1: SerialNumber: syz [ 148.652651][ T10] usb 2-1: 0:2 : does not exist [ 148.848700][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 148.973608][ T6270] FAULT_INJECTION: forcing a failure. [ 148.973608][ T6270] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 148.973649][ T6270] CPU: 1 UID: 0 PID: 6270 Comm: syz.0.167 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 148.973676][ T6270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.973691][ T6270] Call Trace: [ 148.973700][ T6270] [ 148.973710][ T6270] dump_stack_lvl+0xe8/0x150 [ 148.973749][ T6270] should_fail_ex+0x46b/0x600 [ 148.973793][ T6270] prepare_alloc_pages+0x223/0x650 [ 148.973835][ T6270] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 148.973878][ T6270] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 148.973919][ T6270] ? __pfx_policy_nodemask+0x10/0x10 [ 148.973957][ T6270] alloc_pages_mpol+0xd4/0x280 [ 148.973986][ T6270] alloc_pages_noprof+0xd2/0x2f0 [ 148.974014][ T6270] kimage_alloc_pages+0xbe/0x3c0 [ 148.974051][ T6270] kimage_alloc_control_pages+0x4a0/0xbd0 [ 148.974095][ T6270] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 148.974137][ T6270] do_kexec_load+0x492/0x7c0 [ 148.974177][ T6270] ? __pfx_do_kexec_load+0x10/0x10 [ 148.974213][ T6270] ? _copy_from_user+0x94/0xb0 [ 148.974255][ T6270] __se_sys_kexec_load+0x134/0x160 [ 148.974291][ T6270] do_syscall_64+0x166/0x520 [ 148.974317][ T6270] ? trace_irq_disable+0x3b/0x140 [ 148.974348][ T6270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.974370][ T6270] ? clear_bhb_loop+0x70/0xc0 [ 148.974398][ T6270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.974421][ T6270] RIP: 0033:0x7f6289b5e159 [ 148.974442][ T6270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.974460][ T6270] RSP: 002b:00007f6287db6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 148.974485][ T6270] RAX: ffffffffffffffda RBX: 00007f6289de5fa0 RCX: 00007f6289b5e159 [ 148.974500][ T6270] RDX: 00002000000002c0 RSI: 0000000000000004 RDI: 0000000000000003 [ 148.974513][ T6270] RBP: 00007f6289bf506b R08: 0000000000000000 R09: 0000000000000000 [ 148.974527][ T6270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.974540][ T6270] R13: 00007f6289de6038 R14: 00007f6289de5fa0 R15: 00007fff67adb778 [ 148.974572][ T6270] [ 148.975042][ T6270] kexec: Could not allocate control_code_buffer [ 149.351573][ T5708] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 149.432234][ T10] usb 2-1: USB disconnect, device number 4 [ 149.509206][ T5708] usb 3-1: Using ep0 maxpacket: 32 [ 149.510013][ T5708] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.512707][ T5708] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.512785][ T5708] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.512830][ T5708] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.672632][ T5708] usb 3-1: New USB device strings: Mfr=224, Product=2, SerialNumber=3 [ 149.672664][ T5708] usb 3-1: Product: syz [ 149.672681][ T5708] usb 3-1: Manufacturer: syz [ 149.672697][ T5708] usb 3-1: SerialNumber: syz [ 149.912731][ T6282] FAULT_INJECTION: forcing a failure. [ 149.912731][ T6282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.913329][ T6282] CPU: 1 UID: 0 PID: 6282 Comm: syz.4.170 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 149.913356][ T6282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.913367][ T6282] Call Trace: [ 149.913374][ T6282] [ 149.913383][ T6282] dump_stack_lvl+0xe8/0x150 [ 149.913444][ T6282] should_fail_ex+0x46b/0x600 [ 149.913479][ T6282] _copy_from_user+0x2d/0xb0 [ 149.913513][ T6282] do_mq_notify+0x1c3/0xf00 [ 149.913561][ T6282] ? __pfx_do_mq_notify+0x10/0x10 [ 149.913607][ T6282] __x64_sys_mq_notify+0x134/0x190 [ 149.913637][ T6282] ? __pfx___x64_sys_mq_notify+0x10/0x10 [ 149.913700][ T6282] do_syscall_64+0x166/0x520 [ 149.913725][ T6282] ? trace_irq_disable+0x3b/0x140 [ 149.913756][ T6282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.913778][ T6282] ? clear_bhb_loop+0x70/0xc0 [ 149.913805][ T6282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.913827][ T6282] RIP: 0033:0x7f237819e159 [ 149.913847][ T6282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.913867][ T6282] RSP: 002b:00007f23763f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f4 [ 149.913890][ T6282] RAX: ffffffffffffffda RBX: 00007f2378425fa0 RCX: 00007f237819e159 [ 149.913905][ T6282] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffffff [ 149.913919][ T6282] RBP: 00007f237823506b R08: 0000000000000000 R09: 0000000000000000 [ 149.913932][ T6282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.913944][ T6282] R13: 00007f2378426038 R14: 00007f2378425fa0 R15: 00007ffebad2d5d8 [ 149.913975][ T6282] [ 149.917492][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.582260][ T6290] Invalid option length (1047276) for dns_resolver key [ 150.928116][ T5708] cdc_ncm 3-1:1.0: bind() failure [ 150.964294][ T5708] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 150.965048][ T5708] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 150.984296][ T5708] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 151.003574][ T5708] usb 3-1: USB disconnect, device number 7 [ 152.286139][ T37] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 152.296165][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 152.441033][ T37] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 152.455248][ T37] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.455269][ T37] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.466061][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 152.471612][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 152.471654][ T37] usb 4-1: SerialNumber: syz [ 152.486076][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 152.492613][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 152.492762][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.492825][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 152.492891][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 152.492955][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.493072][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.656308][ T5708] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 152.849350][ T5708] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 152.853669][ T5708] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.853727][ T5708] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.869794][ T10] usb 1-1: usb_control_msg returned -32 [ 152.869949][ T10] usbtmc 1-1:16.0: can't read capabilities [ 152.907140][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.907171][ T5708] usb 5-1: Product: syz [ 152.907188][ T5708] usb 5-1: Manufacturer: syz [ 152.907217][ T5708] usb 5-1: SerialNumber: syz [ 152.957484][ T37] usb 4-1: 0:2 : does not exist [ 153.126227][ T6328] FAULT_INJECTION: forcing a failure. [ 153.126227][ T6328] name failslab, interval 1, probability 0, space 0, times 0 [ 153.126265][ T6328] CPU: 0 UID: 0 PID: 6328 Comm: syz.2.189 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 153.126291][ T6328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.126305][ T6328] Call Trace: [ 153.126313][ T6328] [ 153.126333][ T6328] dump_stack_lvl+0xe8/0x150 [ 153.126372][ T6328] should_fail_ex+0x46b/0x600 [ 153.126411][ T6328] should_failslab+0xa8/0x100 [ 153.126437][ T6328] __kmalloc_noprof+0xfb/0x790 [ 153.126470][ T6328] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 153.126494][ T6328] ? x509_get_sig_params+0x36b/0x630 [ 153.126520][ T6328] ? x509_get_sig_params+0x36b/0x630 [ 153.126553][ T6328] x509_get_sig_params+0x36b/0x630 [ 153.126589][ T6328] x509_cert_parse+0x514/0x7a0 [ 153.126618][ T6328] x509_key_preparse+0x64/0x6d0 [ 153.126646][ T6328] ? __pfx_smack_key_permission+0x10/0x10 [ 153.126672][ T6328] asymmetric_key_preparse+0xb9/0x1b0 [ 153.126709][ T6328] __key_create_or_update+0x3a9/0xa80 [ 153.126749][ T6328] ? __pfx___key_create_or_update+0x10/0x10 [ 153.126779][ T6328] ? lookup_user_key+0xb68/0x1150 [ 153.126827][ T6328] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 153.126873][ T6328] key_create_or_update+0x42/0x60 [ 153.126902][ T6328] __se_sys_add_key+0x349/0x420 [ 153.126935][ T6328] ? __pfx___se_sys_add_key+0x10/0x10 [ 153.126975][ T6328] ? __x64_sys_add_key+0x20/0xc0 [ 153.127007][ T6328] do_syscall_64+0x166/0x520 [ 153.127032][ T6328] ? trace_irq_disable+0x3b/0x140 [ 153.127063][ T6328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.127087][ T6328] ? clear_bhb_loop+0x70/0xc0 [ 153.127116][ T6328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.127138][ T6328] RIP: 0033:0x7f70693ce159 [ 153.127160][ T6328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.127179][ T6328] RSP: 002b:00007f7067626028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 153.127204][ T6328] RAX: ffffffffffffffda RBX: 00007f7069655fa0 RCX: 00007f70693ce159 [ 153.127221][ T6328] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000000 [ 153.127238][ T6328] RBP: 00007f706946506b R08: ffffffffffffffff R09: 0000000000000000 [ 153.127254][ T6328] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 153.127268][ T6328] R13: 00007f7069656038 R14: 00007f7069655fa0 R15: 00007ffec0a33888 [ 153.127305][ T6328] [ 153.446579][ T37] usb 4-1: USB disconnect, device number 6 [ 153.508938][ T5828] usb 5-1: USB disconnect, device number 3 [ 153.721894][ T6334] usbtmc 1-1:16.0: INITIATE_CLEAR returned 0 [ 153.963162][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.073852][ T6342] FAULT_INJECTION: forcing a failure. [ 154.073852][ T6342] name failslab, interval 1, probability 0, space 0, times 0 [ 154.073893][ T6342] CPU: 1 UID: 0 PID: 6342 Comm: syz.2.193 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 154.073920][ T6342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.073933][ T6342] Call Trace: [ 154.073943][ T6342] [ 154.073953][ T6342] dump_stack_lvl+0xe8/0x150 [ 154.073991][ T6342] should_fail_ex+0x46b/0x600 [ 154.074030][ T6342] should_failslab+0xa8/0x100 [ 154.074057][ T6342] __kmalloc_noprof+0xfb/0x790 [ 154.074092][ T6342] ? bm_register_write+0xc6/0x1830 [ 154.074113][ T6342] ? bm_register_write+0xc6/0x1830 [ 154.074143][ T6342] bm_register_write+0xc6/0x1830 [ 154.074174][ T6342] ? __pfx_bm_register_write+0x10/0x10 [ 154.074198][ T6342] vfs_write+0x29f/0xbb0 [ 154.074235][ T6342] ? __pfx_vfs_write+0x10/0x10 [ 154.074266][ T6342] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 154.074296][ T6342] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 154.074322][ T6342] ? mutex_lock_nested+0x152/0x1d0 [ 154.074353][ T6342] ? fdget_pos+0x252/0x320 [ 154.074388][ T6342] ksys_write+0x156/0x270 [ 154.074419][ T6342] ? __pfx_ksys_write+0x10/0x10 [ 154.074460][ T6342] do_syscall_64+0x166/0x520 [ 154.074484][ T6342] ? trace_irq_disable+0x3b/0x140 [ 154.074515][ T6342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.074539][ T6342] ? clear_bhb_loop+0x70/0xc0 [ 154.074566][ T6342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.074589][ T6342] RIP: 0033:0x7f70693ce159 [ 154.074610][ T6342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.074629][ T6342] RSP: 002b:00007f7067626028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.074654][ T6342] RAX: ffffffffffffffda RBX: 00007f7069655fa0 RCX: 00007f70693ce159 [ 154.074671][ T6342] RDX: 0000000000000112 RSI: 0000200000000880 RDI: 0000000000000003 [ 154.074697][ T6342] RBP: 00007f706946506b R08: 0000000000000000 R09: 0000000000000000 [ 154.074712][ T6342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.074728][ T6342] R13: 00007f7069656038 R14: 00007f7069655fa0 R15: 00007ffec0a33888 [ 154.074764][ T6342] [ 154.415803][ T6344] ima: rule for LSM 'u' is undefined [ 154.476943][ T38] audit: type=1807 audit(1791079589.785:3): action=measure func=FILE_CHECK obj_type=u res=0 [ 154.484566][ T38] audit: type=1802 audit(1791079589.855:4): pid=6344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.3.194" res=0 errno=0 [ 154.485178][ T6343] ima: policy update failed [ 154.485315][ T38] audit: type=1802 audit(1791079589.855:5): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.3.194" res=0 errno=0 [ 154.786201][ T6353] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 155.028570][ T6358] block device autoloading is deprecated and will be removed. [ 155.113807][ T37] usb 1-1: USB disconnect, device number 9 [ 157.040062][ T6407] input: syz1 as /devices/virtual/input/input10 [ 157.547928][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 157.630254][ T6426] FAULT_INJECTION: forcing a failure. [ 157.630254][ T6426] name fail_futex, interval 1, probability 0, space 0, times 1 [ 157.630295][ T6426] CPU: 0 UID: 0 PID: 6426 Comm: syz.4.221 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 157.630321][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.630335][ T6426] Call Trace: [ 157.630345][ T6426] [ 157.630354][ T6426] dump_stack_lvl+0xe8/0x150 [ 157.630395][ T6426] should_fail_ex+0x46b/0x600 [ 157.630435][ T6426] get_futex_key+0x1b4/0x1580 [ 157.630483][ T6426] ? __pfx_get_futex_key+0x10/0x10 [ 157.630514][ T6426] ? kasan_save_free_info+0x40/0x50 [ 157.630542][ T6426] ? __kasan_slab_free+0x5c/0x80 [ 157.630574][ T6426] ? kfree+0x1c5/0x6d0 [ 157.630602][ T6426] ? __se_sys_mount+0x33b/0x420 [ 157.630627][ T6426] ? do_syscall_64+0x166/0x520 [ 157.630653][ T6426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.630687][ T6426] futex_wake+0x119/0x600 [ 157.630722][ T6426] ? __pfx_futex_wake+0x10/0x10 [ 157.630767][ T6426] do_futex+0x458/0x4e0 [ 157.630797][ T6426] ? __pfx_do_futex+0x10/0x10 [ 157.630821][ T6426] ? rcu_is_watching+0x16/0xb0 [ 157.630863][ T6426] __se_sys_futex+0x3a8/0x450 [ 157.630904][ T6426] ? __pfx___se_sys_futex+0x10/0x10 [ 157.630928][ T6426] ? __pfx___se_sys_mount+0x10/0x10 [ 157.630961][ T6426] ? __x64_sys_futex+0x21/0xf0 [ 157.630989][ T6426] do_syscall_64+0x166/0x520 [ 157.631013][ T6426] ? trace_irq_disable+0x3b/0x140 [ 157.631044][ T6426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.631067][ T6426] ? clear_bhb_loop+0x70/0xc0 [ 157.631100][ T6426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.631123][ T6426] RIP: 0033:0x7f237819e159 [ 157.631145][ T6426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.631164][ T6426] RSP: 002b:00007f23763f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 157.631189][ T6426] RAX: ffffffffffffffda RBX: 00007f2378425fa8 RCX: 00007f237819e159 [ 157.631206][ T6426] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2378425fac [ 157.631221][ T6426] RBP: 00007f2378425fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 157.631238][ T6426] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 157.631254][ T6426] R13: 00007f2378426038 R14: 00007ffebad2d4f0 R15: 00007ffebad2d5d8 [ 157.631289][ T6426] [ 157.783346][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 157.894541][ T10] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.894578][ T10] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.894606][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 157.894642][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.949108][ T10] usb 1-1: config 0 descriptor?? [ 158.419414][ T10] lg-g15 0003:046D:0A07.0003: unknown main item tag 0x5 [ 158.419454][ T10] lg-g15 0003:046D:0A07.0003: unknown main item tag 0x7 [ 158.419701][ T10] lg-g15 0003:046D:0A07.0003: reserved main item tag 0xd [ 158.419735][ T10] lg-g15 0003:046D:0A07.0003: unknown main item tag 0x0 [ 158.419764][ T10] lg-g15 0003:046D:0A07.0003: unknown main item tag 0x3 [ 158.419816][ T10] lg-g15 0003:046D:0A07.0003: item fetching failed at offset 22/24 [ 158.420596][ T10] lg-g15 0003:046D:0A07.0003: probe with driver lg-g15 failed with error -22 [ 158.422987][ T6428] capability: warning: `syz.3.222' uses 32-bit capabilities (legacy support in use) [ 158.429866][ T37] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 158.620750][ T10] usb 1-1: USB disconnect, device number 10 [ 158.652307][ T37] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 158.669240][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.669275][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.751506][ T37] usb 2-1: config 0 descriptor?? [ 159.275786][ T6447] FAULT_INJECTION: forcing a failure. [ 159.275786][ T6447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.275824][ T6447] CPU: 0 UID: 0 PID: 6447 Comm: syz.0.227 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 159.275851][ T6447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.275865][ T6447] Call Trace: [ 159.275875][ T6447] [ 159.275884][ T6447] dump_stack_lvl+0xe8/0x150 [ 159.275930][ T6447] should_fail_ex+0x46b/0x600 [ 159.275972][ T6447] _copy_from_user+0x2d/0xb0 [ 159.276011][ T6447] bpf_vlog_reverse_ubuf+0xb1/0x3e0 [ 159.276051][ T6447] bpf_vlog_finalize+0x1c9/0x3f0 [ 159.276087][ T6447] bpf_log_attr_finalize+0x80/0x1e0 [ 159.276120][ T6447] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 159.276165][ T6447] btf_new_fd+0x36c/0xc70 [ 159.276213][ T6447] __sys_bpf+0xd2e/0xd90 [ 159.276252][ T6447] ? __pfx___sys_bpf+0x10/0x10 [ 159.276290][ T6447] ? do_futex+0x3e7/0x4e0 [ 159.276342][ T6447] ? rcu_is_watching+0x16/0xb0 [ 159.276389][ T6447] __x64_sys_bpf+0xba/0xd0 [ 159.276425][ T6447] do_syscall_64+0x166/0x520 [ 159.276453][ T6447] ? trace_irq_disable+0x3b/0x140 [ 159.276487][ T6447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.276515][ T6447] ? clear_bhb_loop+0x70/0xc0 [ 159.276545][ T6447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.276570][ T6447] RIP: 0033:0x7f6289b5e159 [ 159.276591][ T6447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.276609][ T6447] RSP: 002b:00007f6287db6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 159.276633][ T6447] RAX: ffffffffffffffda RBX: 00007f6289de5fa0 RCX: 00007f6289b5e159 [ 159.276650][ T6447] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 159.276664][ T6447] RBP: 00007f6289bf506b R08: 0000000000000000 R09: 0000000000000000 [ 159.276679][ T6447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.276693][ T6447] R13: 00007f6289de6038 R14: 00007f6289de5fa0 R15: 00007fff67adb778 [ 159.276729][ T6447] [ 159.609618][ T37] hid-corsair-void 0003:1B1C:1B27.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:1b27] on usb-dummy_hcd.1-1/input0 [ 159.700166][ T37] usb 2-1: USB disconnect, device number 5 [ 159.719038][ C1] Illegal XDP return value 16128 on prog (id 6) dev lo, expect packet loss! [ 159.719644][ T5708] hid-corsair-void 0003:1B1C:1B27.0004: failed to request battery (reason: -19) [ 159.908570][ T31] hid-corsair-void 0003:1B1C:1B27.0004: failed to request firmware (reason: -19) [ 160.333447][ T6449] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 160.381275][ T6452] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 162.026123][ T6278] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 162.186990][ T6278] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.188249][ T6278] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 162.188284][ T6278] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 162.188306][ T6278] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 162.188324][ T6278] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 162.269369][ T6278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.269401][ T6278] usb 5-1: Product: syz [ 162.269418][ T6278] usb 5-1: Manufacturer: syz [ 162.269438][ T6278] usb 5-1: SerialNumber: syz [ 162.333317][ T6487] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 162.540324][ T6487] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 162.540574][ T6487] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 162.769231][ T6513] ptp ptp0: new virtual clock ptp1 [ 162.769260][ T6513] ptp ptp0: guarantee physical clock free running [ 163.169676][ T6487] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 163.170225][ T6487] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 163.414330][ T6278] cdc_ncm 5-1:1.0: bind() failure [ 163.497590][ T6278] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 163.498352][ T6278] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 163.514914][ T6278] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 163.605395][ T6278] usb 5-1: USB disconnect, device number 4 [ 163.822548][ T6533] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 164.147954][ T6541] device-mapper: table: 248:0: mirror: Too few mirror arguments (-EINVAL) [ 164.147975][ T6541] device-mapper: ioctl: error adding target to table [ 164.292393][ T6543] FAULT_INJECTION: forcing a failure. [ 164.292393][ T6543] name failslab, interval 1, probability 0, space 0, times 0 [ 164.292421][ T6543] CPU: 1 UID: 0 PID: 6543 Comm: syz.2.257 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 164.292439][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.292449][ T6543] Call Trace: [ 164.292459][ T6543] [ 164.292466][ T6543] dump_stack_lvl+0xe8/0x150 [ 164.292496][ T6543] should_fail_ex+0x46b/0x600 [ 164.292552][ T6543] should_failslab+0xa8/0x100 [ 164.292577][ T6543] ? __send_signal_locked+0x314/0x1020 [ 164.292604][ T6543] kmem_cache_alloc_noprof+0x9e/0x690 [ 164.292640][ T6543] ? __send_signal_locked+0x314/0x1020 [ 164.292667][ T6543] ? sig_get_ucounts+0x3e4/0x450 [ 164.292702][ T6543] __send_signal_locked+0x314/0x1020 [ 164.292739][ T6543] send_signal_locked+0x138/0x9e0 [ 164.292772][ T6543] ? __pfx_send_signal_locked+0x10/0x10 [ 164.292794][ T6543] ? rt_spin_lock+0x2d0/0x400 [ 164.292829][ T6543] ? __pfx_rt_spin_lock+0x10/0x10 [ 164.292862][ T6543] force_sig_info_to_task+0x31d/0x4b0 [ 164.292888][ T6543] force_sig_fault+0xf0/0x150 [ 164.292911][ T6543] ? __pfx_force_sig_fault+0x10/0x10 [ 164.292937][ T6543] ? __bad_area_nosemaphore+0x31e/0x6a0 [ 164.292961][ T6543] exc_page_fault+0x6a/0xc0 [ 164.292979][ T6543] asm_exc_page_fault+0x26/0x30 [ 164.292996][ T6543] RIP: 0033:0x7f70693b72df [ 164.293010][ T6543] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c 22 04 00 00 c5 c1 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 21 04 00 00 fe 6f 06 c5 c5 74 f0 c5 fd d7 ce 48 89 f8 48 83 fa 1f 0f 86 79 [ 164.293024][ T6543] RSP: 002b:00007f7067625bd8 EFLAGS: 00010283 [ 164.293039][ T6543] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 164.293049][ T6543] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007f7067625c00 [ 164.293059][ T6543] RBP: 00007f7067625c00 R08: 0000000000000000 R09: 0000000000000000 [ 164.293069][ T6543] R10: 0000000000000000 R11: 000000000012bb41 R12: cccccccccccccccd [ 164.293080][ T6543] R13: 00007f7069656038 R14: 00007f7069655fa0 R15: 00007ffec0a33888 [ 164.293106][ T6543] [ 164.486445][ T10] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 164.564801][ T6545] random: crng reseeded on system resumption [ 164.668599][ T10] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 164.671294][ T10] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 164.671320][ T10] usb 5-1: config 0 has no interface number 0 [ 164.671366][ T10] usb 5-1: config 0 interface 41 has no altsetting 0 [ 164.714512][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.714541][ T10] usb 5-1: Product: syz [ 164.714558][ T10] usb 5-1: Manufacturer: syz [ 164.714573][ T10] usb 5-1: SerialNumber: syz [ 164.743622][ T10] usb 5-1: config 0 descriptor?? [ 165.288291][ T6555] FAULT_INJECTION: forcing a failure. [ 165.288291][ T6555] name failslab, interval 1, probability 0, space 0, times 0 [ 165.288341][ T6555] CPU: 1 UID: 0 PID: 6555 Comm: syz.1.263 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 165.288368][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.288382][ T6555] Call Trace: [ 165.288392][ T6555] [ 165.288402][ T6555] dump_stack_lvl+0xe8/0x150 [ 165.288444][ T6555] should_fail_ex+0x46b/0x600 [ 165.288484][ T6555] should_failslab+0xa8/0x100 [ 165.288508][ T6555] ? __kernfs_new_node+0xe7/0xa70 [ 165.288541][ T6555] kmem_cache_alloc_noprof+0x9e/0x690 [ 165.288575][ T6555] ? __kernfs_new_node+0xe7/0xa70 [ 165.288614][ T6555] __kernfs_new_node+0xe7/0xa70 [ 165.288649][ T6555] ? vsnprintf+0xe42/0xef0 [ 165.288689][ T6555] ? __pfx___kernfs_new_node+0x10/0x10 [ 165.288721][ T6555] ? kernfs_root+0x1c/0x230 [ 165.288758][ T6555] ? kernfs_root+0x1c/0x230 [ 165.288798][ T6555] ? kernfs_root+0x1c/0x230 [ 165.288834][ T6555] kernfs_new_node+0xea/0x140 [ 165.288872][ T6555] __kernfs_create_file+0x4b/0x2e0 [ 165.288897][ T6555] cgroup_addrm_files+0x837/0xd70 [ 165.288942][ T6555] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 165.288976][ T6555] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 165.289005][ T6555] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 165.289043][ T6555] ? __local_bh_enable+0x1e3/0x2f0 [ 165.289090][ T6555] css_populate_dir+0x123/0x3d0 [ 165.289119][ T6555] ? cgroup_apply_control_enable+0x95b/0xd40 [ 165.289160][ T6555] cgroup_apply_control_enable+0x764/0xd40 [ 165.289209][ T6555] cgroup_mkdir+0xd22/0xf70 [ 165.289246][ T6555] ? __pfx_cgroup_mkdir+0x10/0x10 [ 165.289278][ T6555] kernfs_iop_mkdir+0x213/0x360 [ 165.289315][ T6555] vfs_mkdir+0x408/0x620 [ 165.289353][ T6555] filename_mkdirat+0x289/0x520 [ 165.289390][ T6555] ? __pfx_filename_mkdirat+0x10/0x10 [ 165.289425][ T6555] ? do_getname+0x151/0x250 [ 165.289450][ T6555] __se_sys_mkdirat+0x35/0x150 [ 165.289484][ T6555] do_syscall_64+0x166/0x520 [ 165.289509][ T6555] ? trace_irq_disable+0x3b/0x140 [ 165.289545][ T6555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.289569][ T6555] ? clear_bhb_loop+0x70/0xc0 [ 165.289595][ T6555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.289615][ T6555] RIP: 0033:0x7f6fb81ae159 [ 165.289636][ T6555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.289654][ T6555] RSP: 002b:00007f6fb6406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 165.289677][ T6555] RAX: ffffffffffffffda RBX: 00007f6fb8435fa0 RCX: 00007f6fb81ae159 [ 165.289694][ T6555] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 165.289710][ T6555] RBP: 00007f6fb824506b R08: 0000000000000000 R09: 0000000000000000 [ 165.289724][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.289738][ T6555] R13: 00007f6fb8436038 R14: 00007f6fb8435fa0 R15: 00007ffea385f8c8 [ 165.289774][ T6555] [ 165.290622][ T6555] cgroup: cgroup_addrm_files: failed to add throttle.read_bps_device, err=-12 [ 165.627307][ T10] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 165.831740][ T10] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 165.831773][ T10] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 165.832050][ T10] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 165.881308][ T10] usb 5-1: USB disconnect, device number 5 [ 165.997420][ T6571] syz.1.266 uses obsolete (PF_INET,SOCK_PACKET) [ 166.754004][ T6591] FAULT_INJECTION: forcing a failure. [ 166.754004][ T6591] name failslab, interval 1, probability 0, space 0, times 0 [ 166.754046][ T6591] CPU: 1 UID: 0 PID: 6591 Comm: syz.2.275 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 166.754073][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.754086][ T6591] Call Trace: [ 166.754096][ T6591] [ 166.754105][ T6591] dump_stack_lvl+0xe8/0x150 [ 166.754143][ T6591] should_fail_ex+0x46b/0x600 [ 166.754181][ T6591] should_failslab+0xa8/0x100 [ 166.754217][ T6591] __kmalloc_node_noprof+0xfd/0x7b0 [ 166.754252][ T6591] ? crypto_create_tfm_node+0x81/0x3c0 [ 166.754275][ T6591] ? crypto_create_tfm_node+0x81/0x3c0 [ 166.754308][ T6591] crypto_create_tfm_node+0x81/0x3c0 [ 166.754337][ T6591] crypto_alloc_tfm_node+0x169/0x3e0 [ 166.754372][ T6591] __keyctl_dh_compute+0x536/0xd10 [ 166.754414][ T6591] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 166.754484][ T6591] keyctl_dh_compute+0x124/0x180 [ 166.754516][ T6591] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 166.754571][ T6591] __se_sys_keyctl+0x44c/0x9d0 [ 166.754610][ T6591] ? __pfx___se_sys_keyctl+0x10/0x10 [ 166.754644][ T6591] ? __pfx_do_futex+0x10/0x10 [ 166.754674][ T6591] ? irqentry_exit+0x218/0x910 [ 166.754699][ T6591] ? lockdep_hardirqs_on+0x7b/0x110 [ 166.754724][ T6591] ? irqentry_exit+0x218/0x910 [ 166.754746][ T6591] ? trace_irq_disable+0x3b/0x140 [ 166.754796][ T6591] ? __x64_sys_keyctl+0x20/0xc0 [ 166.754840][ T6591] do_syscall_64+0x166/0x520 [ 166.754867][ T6591] ? trace_irq_disable+0x3b/0x140 [ 166.754897][ T6591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.754921][ T6591] ? clear_bhb_loop+0x70/0xc0 [ 166.754956][ T6591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.754979][ T6591] RIP: 0033:0x7f70693ce159 [ 166.755008][ T6591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.755033][ T6591] RSP: 002b:00007f7067626028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 166.755060][ T6591] RAX: ffffffffffffffda RBX: 00007f7069655fa0 RCX: 00007f70693ce159 [ 166.755077][ T6591] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000017 [ 166.755092][ T6591] RBP: 00007f706946506b R08: 0000200000000200 R09: 0000000000000000 [ 166.755108][ T6591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.755122][ T6591] R13: 00007f7069656038 R14: 00007f7069655fa0 R15: 00007ffec0a33888 [ 166.755159][ T6591] [ 167.549939][ T6615] device-mapper: table: 248:0: mirror: Invalid number of mirrors (-EINVAL) [ 167.549963][ T6615] device-mapper: ioctl: error adding target to table [ 167.757121][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 167.908300][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 167.909235][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 167.910972][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 167.911030][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.911054][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.911081][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.911106][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.911149][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.241011][ T10] usb 2-1: usb_control_msg returned -32 [ 168.241057][ T10] usbtmc 2-1:16.0: can't read capabilities [ 168.300234][ T6634] kAFS: No cell specified [ 168.467303][ T6637] FAULT_INJECTION: forcing a failure. [ 168.467303][ T6637] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 168.467344][ T6637] CPU: 1 UID: 0 PID: 6637 Comm: syz.2.293 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 168.467375][ T6637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.467389][ T6637] Call Trace: [ 168.467398][ T6637] [ 168.467408][ T6637] dump_stack_lvl+0xe8/0x150 [ 168.467458][ T6637] should_fail_ex+0x46b/0x600 [ 168.467499][ T6637] prepare_alloc_pages+0x223/0x650 [ 168.467554][ T6637] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 168.467597][ T6637] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 168.467639][ T6637] ? __pfx_policy_nodemask+0x10/0x10 [ 168.467668][ T6637] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 168.467718][ T6637] alloc_pages_mpol+0xd4/0x280 [ 168.467748][ T6637] alloc_pages_noprof+0xd2/0x2f0 [ 168.467778][ T6637] get_free_pages_noprof+0xf/0x80 [ 168.467800][ T6637] __kasan_populate_vmalloc+0x38/0x1c0 [ 168.467857][ T6637] ? rt_spin_unlock+0x165/0x200 [ 168.467895][ T6637] alloc_vmap_area+0xd1a/0x1420 [ 168.467942][ T6637] ? __pfx_alloc_vmap_area+0x10/0x10 [ 168.467974][ T6637] ? __get_vm_area_node+0x155/0x2f0 [ 168.468009][ T6637] __get_vm_area_node+0x200/0x2f0 [ 168.468048][ T6637] __vmalloc_node_range_noprof+0x343/0x1540 [ 168.468081][ T6637] ? write_ldt+0x4f7/0x930 [ 168.468142][ T6637] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 168.468178][ T6637] ? __kasan_kmalloc+0x93/0xb0 [ 168.468205][ T6637] ? write_ldt+0x4f7/0x930 [ 168.468232][ T6637] __vmalloc_noprof+0xd2/0x120 [ 168.468264][ T6637] ? write_ldt+0x4f7/0x930 [ 168.468296][ T6637] write_ldt+0x4f7/0x930 [ 168.468326][ T6637] ? __se_sys_futex+0x3a8/0x450 [ 168.468354][ T6637] ? __pfx_write_ldt+0x10/0x10 [ 168.468388][ T6637] ? rcu_is_watching+0x16/0xb0 [ 168.468439][ T6637] __se_sys_modify_ldt+0x6c/0x310 [ 168.468474][ T6637] do_syscall_64+0x166/0x520 [ 168.468510][ T6637] ? trace_irq_disable+0x3b/0x140 [ 168.468541][ T6637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.468566][ T6637] ? clear_bhb_loop+0x70/0xc0 [ 168.468596][ T6637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.468619][ T6637] RIP: 0033:0x7f70693ce159 [ 168.468641][ T6637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.468661][ T6637] RSP: 002b:00007f7067626028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 168.468686][ T6637] RAX: ffffffffffffffda RBX: 00007f7069655fa0 RCX: 00007f70693ce159 [ 168.468704][ T6637] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 168.468719][ T6637] RBP: 00007f706946506b R08: 0000000000000000 R09: 0000000000000000 [ 168.468734][ T6637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.468748][ T6637] R13: 00007f7069656038 R14: 00007f7069655fa0 R15: 00007ffec0a33888 [ 168.468786][ T6637] [ 168.501995][ T6637] syz.2.293: vmalloc error: size 65536, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 168.523854][ T6637] CPU: 1 UID: 0 PID: 6637 Comm: syz.2.293 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 168.523927][ T6637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.523954][ T6637] Call Trace: [ 168.523977][ T6637] [ 168.524005][ T6637] dump_stack_lvl+0xe8/0x150 [ 168.524109][ T6637] warn_alloc+0x24d/0x270 [ 168.524211][ T6637] ? lockdep_hardirqs_on+0x7b/0x110 [ 168.524292][ T6637] ? __pfx_warn_alloc+0x10/0x10 [ 168.524375][ T6637] ? kfree+0x1c5/0x6d0 [ 168.524480][ T6637] ? __get_vm_area_node+0x219/0x2f0 [ 168.524601][ T6637] __vmalloc_node_range_noprof+0x36b/0x1540 [ 168.524754][ T6637] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 168.524852][ T6637] ? __kasan_kmalloc+0x93/0xb0 [ 168.524922][ T6637] ? write_ldt+0x4f7/0x930 [ 168.524978][ T6637] __vmalloc_noprof+0xd2/0x120 [ 168.525055][ T6637] ? write_ldt+0x4f7/0x930 [ 168.525096][ T6637] write_ldt+0x4f7/0x930 [ 168.525187][ T6637] ? __se_sys_futex+0x3a8/0x450 [ 168.525215][ T6637] ? __pfx_write_ldt+0x10/0x10 [ 168.525274][ T6637] ? rcu_is_watching+0x16/0xb0 [ 168.525395][ T6637] __se_sys_modify_ldt+0x6c/0x310 [ 168.525488][ T6637] do_syscall_64+0x166/0x520 [ 168.525593][ T6637] ? trace_irq_disable+0x3b/0x140 [ 168.525677][ T6637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.525740][ T6637] ? clear_bhb_loop+0x70/0xc0 [ 168.525814][ T6637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.525877][ T6637] RIP: 0033:0x7f70693ce159 [ 168.525933][ T6637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.525978][ T6637] RSP: 002b:00007f7067626028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 168.526057][ T6637] RAX: ffffffffffffffda RBX: 00007f7069655fa0 RCX: 00007f70693ce159 [ 168.526100][ T6637] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 168.526139][ T6637] RBP: 00007f706946506b R08: 0000000000000000 R09: 0000000000000000 [ 168.526183][ T6637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.526209][ T6637] R13: 00007f7069656038 R14: 00007f7069655fa0 R15: 00007ffec0a33888 [ 168.526302][ T6637] [ 168.526734][ T6637] Mem-Info: [ 168.526746][ T6637] active_anon:183 inactive_anon:5847 isolated_anon:0 [ 168.526746][ T6637] active_file:5836 inactive_file:37494 isolated_file:0 [ 168.526746][ T6637] unevictable:0 dirty:274 writeback:0 [ 168.526746][ T6637] slab_reclaimable:11524 slab_unreclaimable:99670 [ 168.526746][ T6637] mapped:30990 shmem:519 pagetables:1204 [ 168.526746][ T6637] sec_pagetables:0 bounce:0 [ 168.526746][ T6637] kernel_misc_reclaimable:0 [ 168.526746][ T6637] free:1324010 free_pcp:3113 free_cma:0 [ 168.526893][ T6637] Node 0 active_anon:732kB inactive_anon:23388kB active_file:23132kB inactive_file:149976kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123960kB dirty:1096kB writeback:0kB shmem:2076kB kernel_stack:13448kB pagetables:4628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 168.527029][ T6637] Node 1 active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 168.527156][ T6637] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.527308][ T6637] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 168.527432][ T6637] Node 0 DMA32 free:1348748kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:732kB inactive_anon:23388kB active_file:23132kB inactive_file:149976kB unevictable:0kB writepending:1096kB zspages:0kB present:3129332kB managed:2558984kB mlocked:0kB bounce:0kB free_pcp:12444kB local_pcp:8280kB free_cma:0kB [ 168.527983][ T6637] lowmem_reserve[]: 0 0 1 1 1 [ 168.528118][ T6637] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1808kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 168.528306][ T6637] lowmem_reserve[]: 0 0 0 0 0 [ 168.528421][ T6637] Node 1 Normal free:3931932kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.528591][ T6637] lowmem_reserve[]: 0 0 0 0 0 [ 168.528698][ T6637] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 168.532122][ T6637] Node 0 DMA32: 1573*4kB (UM) 835*8kB (UME) 710*16kB (UM) 144*32kB (UME) 95*64kB (UME) 43*128kB (UME) 14*256kB (UM) 6*512kB (M) 3*1024kB (ME) 10*2048kB (UM) 312*4096kB (UM) = 1348684kB [ 168.558838][ T6637] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 168.559171][ T6637] Node 1 Normal: 3*4kB (UM) 6*8kB (UM) 8*16kB (UM) 7*32kB (UM) 6*64kB (UM) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 3*1024kB (UM) 1*2048kB (U) 958*4096kB (M) = 3931932kB [ 168.559662][ T6637] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 168.559714][ T6637] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 168.559764][ T6637] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 168.559790][ T6637] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 168.559918][ T6637] 43870 total pagecache pages [ 168.559957][ T6637] 0 pages in swap cache [ 168.559978][ T6637] Free swap = 124996kB [ 168.559999][ T6637] Total swap = 124996kB [ 168.560028][ T6637] 2097051 pages RAM [ 168.560051][ T6637] 0 pages HighMem/MovableOnly [ 168.560081][ T6637] 425237 pages reserved [ 168.560102][ T6637] 0 pages cma reserved [ 169.462691][ T6646] device-mapper: ioctl: Invalid ioctl structure: name c, dev f801 [ 169.646535][ T6654] FAULT_INJECTION: forcing a failure. [ 169.646535][ T6654] name failslab, interval 1, probability 0, space 0, times 0 [ 169.646576][ T6654] CPU: 1 UID: 0 PID: 6654 Comm: syz.2.299 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 169.646603][ T6654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.646618][ T6654] Call Trace: [ 169.646627][ T6654] [ 169.646637][ T6654] dump_stack_lvl+0xe8/0x150 [ 169.646679][ T6654] should_fail_ex+0x46b/0x600 [ 169.646719][ T6654] should_failslab+0xa8/0x100 [ 169.646746][ T6654] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 169.646786][ T6654] ? key_alloc+0x352/0xfe0 [ 169.646807][ T6654] ? key_alloc+0x352/0xfe0 [ 169.646837][ T6654] kmemdup_noprof+0x2b/0x70 [ 169.646864][ T6654] key_alloc+0x352/0xfe0 [ 169.646901][ T6654] keyring_alloc+0x45/0xb0 [ 169.646932][ T6654] call_sbin_request_key+0x336/0xbf0 [ 169.646958][ T6654] ? request_key_auth_free_preparse+0x9/0x10 [ 169.646991][ T6654] ? __pfx_call_sbin_request_key+0x10/0x10 [ 169.647055][ T6654] ? __pfx_request_key_auth_new+0x10/0x10 [ 169.647096][ T6654] request_key_and_link+0xf13/0x15a0 [ 169.647126][ T6654] ? lock_acquire+0x115/0x350 [ 169.647157][ T6654] ? __pfx_request_key_and_link+0x10/0x10 [ 169.647190][ T6654] ? __pfx_key_default_cmp+0x10/0x10 [ 169.647217][ T6654] ? __pfx_keyring_search_iterator+0x10/0x10 [ 169.647257][ T6654] ? _copy_from_user+0x94/0xb0 [ 169.647308][ T6654] __se_sys_request_key+0x29a/0x350 [ 169.647346][ T6654] ? __pfx___se_sys_request_key+0x10/0x10 [ 169.647395][ T6654] do_syscall_64+0x166/0x520 [ 169.647421][ T6654] ? trace_irq_disable+0x3b/0x140 [ 169.647451][ T6654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.647475][ T6654] ? clear_bhb_loop+0x70/0xc0 [ 169.647502][ T6654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.647525][ T6654] RIP: 0033:0x7f70693ce159 [ 169.647546][ T6654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.647565][ T6654] RSP: 002b:00007f7067626028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 169.647590][ T6654] RAX: ffffffffffffffda RBX: 00007f7069655fa0 RCX: 00007f70693ce159 [ 169.647607][ T6654] RDX: 00002000000000c0 RSI: 0000200000001ffb RDI: 0000200000000040 [ 169.647623][ T6654] RBP: 00007f706946506b R08: 0000000000000000 R09: 0000000000000000 [ 169.647637][ T6654] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 169.647652][ T6654] R13: 00007f7069656038 R14: 00007f7069655fa0 R15: 00007ffec0a33888 [ 169.647689][ T6654] [ 169.936834][ T6657] loop2: detected capacity change from 0 to 7 [ 169.954540][ T6657] loop2: p1 [ 169.954597][ T6657] loop2: partition table partially beyond EOD, truncated [ 169.962854][ T6657] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 170.054848][ T5828] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 170.099651][ T5822] udevd[5822]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 170.205964][ T5828] usb 1-1: Using ep0 maxpacket: 32 [ 170.211173][ T5828] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 170.213868][ T5828] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 170.213902][ T5828] usb 1-1: config 0 interface 0 has no altsetting 0 [ 170.213938][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.263912][ T5828] usb 1-1: config 0 descriptor?? [ 170.447890][ T5695] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 170.567573][ T5708] usb 2-1: USB disconnect, device number 6 [ 170.708847][ T5695] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 170.717247][ T5695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.717283][ T5695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.717397][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.771890][ T5695] usb 4-1: config 0 descriptor?? [ 171.097209][ T5828] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 171.097248][ T5828] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 171.097274][ T5828] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 171.097339][ T5828] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 171.097367][ T5828] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 171.101683][ T5828] corsair-cpro 0003:1B1C:0C10.0005: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 171.415112][ T5695] hid-led 0003:27B8:01ED.0006: probe with driver hid-led failed with error -71 [ 171.450130][ T5695] usb 4-1: USB disconnect, device number 7 [ 171.632335][ T5828] corsair-cpro 0003:1B1C:0C10.0005: probe with driver corsair-cpro failed with error -110 [ 171.708495][ T5828] usb 1-1: USB disconnect, device number 11 [ 171.771403][ T6683] FAULT_INJECTION: forcing a failure. [ 171.771403][ T6683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.771442][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.4.308 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.771470][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.771485][ T6683] Call Trace: [ 171.771494][ T6683] [ 171.771504][ T6683] dump_stack_lvl+0xe8/0x150 [ 171.771544][ T6683] should_fail_ex+0x46b/0x600 [ 171.771584][ T6683] _copy_to_user+0x31/0xb0 [ 171.771609][ T6683] bpf_verifier_vlog+0x52a/0x900 [ 171.771654][ T6683] btf_verifier_log+0x11d/0x1a0 [ 171.771688][ T6683] ? __pfx_btf_verifier_log+0x10/0x10 [ 171.771713][ T6683] ? __btf_verifier_log+0xe2/0x140 [ 171.771745][ T6683] ? __pfx___btf_verifier_log+0x10/0x10 [ 171.771776][ T6683] btf_func_proto_log+0x76/0x840 [ 171.771816][ T6683] __btf_verifier_log_type+0x45d/0x6a0 [ 171.771857][ T6683] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 171.771892][ T6683] ? __pfx_sort+0x10/0x10 [ 171.771924][ T6683] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 171.771962][ T6683] btf_func_proto_check_meta+0xc7/0x160 [ 171.771997][ T6683] btf_parse_type_sec+0x3cf/0x2360 [ 171.772039][ T6683] ? __pfx_btf_check_sec_info+0x10/0x10 [ 171.772097][ T6683] ? btf_parse_str_sec+0x244/0x2f0 [ 171.772136][ T6683] btf_new_fd+0x4ad/0xc70 [ 171.772181][ T6683] __sys_bpf+0xd2e/0xd90 [ 171.772232][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 171.772270][ T6683] ? do_futex+0x3e7/0x4e0 [ 171.772335][ T6683] ? rcu_is_watching+0x16/0xb0 [ 171.772378][ T6683] __x64_sys_bpf+0xba/0xd0 [ 171.772414][ T6683] do_syscall_64+0x166/0x520 [ 171.772440][ T6683] ? trace_irq_disable+0x3b/0x140 [ 171.772470][ T6683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.772494][ T6683] ? clear_bhb_loop+0x70/0xc0 [ 171.772524][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.772547][ T6683] RIP: 0033:0x7f237819e159 [ 171.772569][ T6683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.772588][ T6683] RSP: 002b:00007f23763f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.772613][ T6683] RAX: ffffffffffffffda RBX: 00007f2378425fa0 RCX: 00007f237819e159 [ 171.772630][ T6683] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 171.772645][ T6683] RBP: 00007f237823506b R08: 0000000000000000 R09: 0000000000000000 [ 171.772659][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.772676][ T6683] R13: 00007f2378426038 R14: 00007f2378425fa0 R15: 00007ffebad2d5d8 [ 171.772712][ T6683] [ 172.372156][ T97] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 172.526081][ T97] usb 3-1: Using ep0 maxpacket: 32 [ 172.526996][ T97] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 172.529809][ T97] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 172.529837][ T97] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 172.529858][ T97] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 172.529914][ T97] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 172.529936][ T97] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 172.529961][ T97] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 172.530003][ T97] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.648251][ T97] usb 3-1: config 0 descriptor?? [ 172.762204][ T6701] FAULT_INJECTION: forcing a failure. [ 172.762204][ T6701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.762240][ T6701] CPU: 0 UID: 0 PID: 6701 Comm: syz.4.314 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.762265][ T6701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.762282][ T6701] Call Trace: [ 172.762302][ T6701] [ 172.762312][ T6701] dump_stack_lvl+0xe8/0x150 [ 172.762349][ T6701] should_fail_ex+0x46b/0x600 [ 172.762417][ T6701] _copy_to_user+0x31/0xb0 [ 172.762440][ T6701] copy_to_sockptr_offset+0x66/0xa0 [ 172.762466][ T6701] sk_getsockopt+0x1c01/0x2760 [ 172.762502][ T6701] ? __pfx_sk_getsockopt+0x10/0x10 [ 172.762548][ T6701] ? try_to_wake_up+0x887/0x1430 [ 172.762585][ T6701] ? lock_acquire+0x115/0x350 [ 172.762643][ T6701] do_sock_getsockopt+0x2bd/0x7e0 [ 172.762681][ T6701] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 172.762729][ T6701] ? __fget_files+0x3a8/0x420 [ 172.762756][ T6701] ? __fget_files+0x2a/0x420 [ 172.762791][ T6701] __x64_sys_getsockopt+0x1aa/0x250 [ 172.762830][ T6701] do_syscall_64+0x166/0x520 [ 172.762856][ T6701] ? trace_irq_disable+0x3b/0x140 [ 172.762887][ T6701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.762912][ T6701] ? clear_bhb_loop+0x70/0xc0 [ 172.762941][ T6701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.762965][ T6701] RIP: 0033:0x7f237819e159 [ 172.762986][ T6701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.763005][ T6701] RSP: 002b:00007f23763f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 172.763031][ T6701] RAX: ffffffffffffffda RBX: 00007f2378425fa0 RCX: 00007f237819e159 [ 172.763049][ T6701] RDX: 0000000000000011 RSI: 0000000000000001 RDI: 0000000000000004 [ 172.763063][ T6701] RBP: 00007f237823506b R08: 0000200000000100 R09: 0000000000000000 [ 172.763078][ T6701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.763093][ T6701] R13: 00007f2378426038 R14: 00007f2378425fa0 R15: 00007ffebad2d5d8 [ 172.763130][ T6701] [ 173.083548][ T97] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 173.251563][ T6699] gadgetfs: bound to dummy_udc driver [ 173.555326][ T31] usb 3-1: USB disconnect, device number 8 [ 173.607019][ T31] usblp0: removed [ 173.964253][ T5708] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 174.229657][ T5708] usb 4-1: unable to get BOS descriptor or descriptor too short [ 174.229711][ T5708] usb 4-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 174.230757][ T5708] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 174.230795][ T5708] usb 4-1: can't read configurations, error -71 [ 174.286924][ T6715] FAULT_INJECTION: forcing a failure. [ 174.286924][ T6715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.286963][ T6715] CPU: 0 UID: 0 PID: 6715 Comm: syz.0.320 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 174.286989][ T6715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.287001][ T6715] Call Trace: [ 174.287010][ T6715] [ 174.287020][ T6715] dump_stack_lvl+0xe8/0x150 [ 174.287058][ T6715] should_fail_ex+0x46b/0x600 [ 174.287095][ T6715] _copy_to_user+0x31/0xb0 [ 174.287119][ T6715] btf_get_info_by_fd+0x1db/0x650 [ 174.287159][ T6715] ? __fget_files+0x2a/0x420 [ 174.287190][ T6715] ? __pfx_btf_get_info_by_fd+0x10/0x10 [ 174.287229][ T6715] ? __fget_files+0x2a/0x420 [ 174.287264][ T6715] bpf_obj_get_info_by_fd+0xa91/0x3560 [ 174.287292][ T6715] ? lock_acquire+0x115/0x350 [ 174.287323][ T6715] ? futex_unqueue+0x22/0x240 [ 174.287363][ T6715] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 174.287384][ T6715] ? futex_unqueue+0x22/0x240 [ 174.287420][ T6715] ? __lock_acquire+0x747/0x2de0 [ 174.287461][ T6715] ? __pfx___futex_wait+0x10/0x10 [ 174.287493][ T6715] ? __pfx_futex_wake_mark+0x10/0x10 [ 174.287525][ T6715] ? lock_acquire+0x115/0x350 [ 174.287574][ T6715] ? bpf_lsm_bpf+0x9/0x20 [ 174.287599][ T6715] ? security_bpf+0x7e/0x2d0 [ 174.287636][ T6715] __sys_bpf+0xa50/0xd90 [ 174.287678][ T6715] ? __pfx___sys_bpf+0x10/0x10 [ 174.287708][ T6715] ? __sys_sendto+0x240/0x5d0 [ 174.287737][ T6715] ? do_futex+0x3e7/0x4e0 [ 174.287790][ T6715] ? rcu_is_watching+0x16/0xb0 [ 174.287832][ T6715] __x64_sys_bpf+0xba/0xd0 [ 174.287873][ T6715] do_syscall_64+0x166/0x520 [ 174.287899][ T6715] ? trace_irq_disable+0x3b/0x140 [ 174.287929][ T6715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.287952][ T6715] ? clear_bhb_loop+0x70/0xc0 [ 174.287980][ T6715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.288002][ T6715] RIP: 0033:0x7f6289b5e159 [ 174.288023][ T6715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.288041][ T6715] RSP: 002b:00007f6287db6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 174.288065][ T6715] RAX: ffffffffffffffda RBX: 00007f6289de5fa0 RCX: 00007f6289b5e159 [ 174.288082][ T6715] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 000000000000000f [ 174.288096][ T6715] RBP: 00007f6289bf506b R08: 0000000000000000 R09: 0000000000000000 [ 174.288110][ T6715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.288124][ T6715] R13: 00007f6289de6038 R14: 00007f6289de5fa0 R15: 00007fff67adb778 [ 174.288159][ T6715] [ 174.727244][ C1] sd 0:0:1:0: [sda] tag#7960 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 174.727305][ C1] sd 0:0:1:0: [sda] tag#7960 CDB: Write(6) 0a 00 4e 21 00 00 [ 174.868439][ T6727] FAULT_INJECTION: forcing a failure. [ 174.868439][ T6727] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 174.868480][ T6727] CPU: 0 UID: 0 PID: 6727 Comm: syz.1.324 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 174.868506][ T6727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.868521][ T6727] Call Trace: [ 174.868530][ T6727] [ 174.868540][ T6727] dump_stack_lvl+0xe8/0x150 [ 174.868580][ T6727] should_fail_ex+0x46b/0x600 [ 174.868620][ T6727] prepare_alloc_pages+0x223/0x650 [ 174.868661][ T6727] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 174.868708][ T6727] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 174.868749][ T6727] ? __pfx_policy_nodemask+0x10/0x10 [ 174.868771][ T6727] ? __lock_acquire+0x747/0x2de0 [ 174.868808][ T6727] ? mas_wr_walk_descend+0x574/0x8b0 [ 174.868838][ T6727] alloc_pages_mpol+0xd4/0x280 [ 174.868868][ T6727] alloc_pages_noprof+0xd2/0x2f0 [ 174.868897][ T6727] __pud_alloc+0x3a/0x460 [ 174.868934][ T6727] copy_page_range+0xc74/0x11d0 [ 174.868969][ T6727] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 174.869008][ T6727] ? __pfx_copy_page_range+0x10/0x10 [ 174.869050][ T6727] dup_mmap+0xf83/0x1d80 [ 174.869102][ T6727] ? __pfx_dup_mmap+0x10/0x10 [ 174.869132][ T6727] ? reacquire_held_locks+0x117/0x1a0 [ 174.869166][ T6727] ? rt_spin_lock+0x1e2/0x400 [ 174.869213][ T6727] ? lock_acquire+0x115/0x350 [ 174.869262][ T6727] copy_mm+0x115/0x480 [ 174.869295][ T6727] copy_process+0x1e7e/0x4410 [ 174.869339][ T6727] ? copy_process+0xd16/0x4410 [ 174.869398][ T6727] ? __pfx_copy_process+0x10/0x10 [ 174.869432][ T6727] ? futex_wait+0x2a2/0x390 [ 174.869468][ T6727] kernel_clone+0x2d2/0x8d0 [ 174.869503][ T6727] ? __pfx_kernel_clone+0x10/0x10 [ 174.869547][ T6727] ? do_futex+0x3e7/0x4e0 [ 174.869577][ T6727] __x64_sys_clone+0x1b6/0x230 [ 174.869615][ T6727] ? __pfx___x64_sys_clone+0x10/0x10 [ 174.869667][ T6727] ? rcu_is_watching+0x16/0xb0 [ 174.869736][ T6727] do_syscall_64+0x166/0x520 [ 174.869762][ T6727] ? trace_irq_disable+0x3b/0x140 [ 174.869792][ T6727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.869817][ T6727] ? clear_bhb_loop+0x70/0xc0 [ 174.869846][ T6727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.869869][ T6727] RIP: 0033:0x7f6fb81ae159 [ 174.869890][ T6727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.869909][ T6727] RSP: 002b:00007f6fb6405fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 174.869935][ T6727] RAX: ffffffffffffffda RBX: 00007f6fb8435fa0 RCX: 00007f6fb81ae159 [ 174.869952][ T6727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000600 [ 174.869965][ T6727] RBP: 00007f6fb824506b R08: 0000000000000000 R09: 0000000000000000 [ 174.869979][ T6727] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 174.869992][ T6727] R13: 00007f6fb8436038 R14: 00007f6fb8435fa0 R15: 00007ffea385f8c8 [ 174.870031][ T6727] [ 174.944720][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 175.125538][ T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 175.256734][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.256799][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.341375][ T10] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 175.349050][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 175.349263][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 175.375552][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 175.375645][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 175.412458][ T10] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 175.424556][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 175.424650][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 175.468623][ T10] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 175.551501][ T6735] FAULT_INJECTION: forcing a failure. [ 175.551501][ T6735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.551555][ T6735] CPU: 0 UID: 0 PID: 6735 Comm: syz.1.327 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 175.551582][ T6735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.551596][ T6735] Call Trace: [ 175.551606][ T6735] [ 175.551616][ T6735] dump_stack_lvl+0xe8/0x150 [ 175.551657][ T6735] should_fail_ex+0x46b/0x600 [ 175.551698][ T6735] _copy_from_user+0x2d/0xb0 [ 175.551736][ T6735] __x64_sys_timer_create+0x118/0x1c0 [ 175.551765][ T6735] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 175.551810][ T6735] do_syscall_64+0x166/0x520 [ 175.551836][ T6735] ? trace_irq_disable+0x3b/0x140 [ 175.551867][ T6735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.551900][ T6735] ? clear_bhb_loop+0x70/0xc0 [ 175.551929][ T6735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.551953][ T6735] RIP: 0033:0x7f6fb81ae159 [ 175.551973][ T6735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.551993][ T6735] RSP: 002b:00007f6fb6406028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 175.552018][ T6735] RAX: ffffffffffffffda RBX: 00007f6fb8435fa0 RCX: 00007f6fb81ae159 [ 175.552036][ T6735] RDX: 0000000000000000 RSI: 0000200000533fa0 RDI: 0000000000000000 [ 175.552051][ T6735] RBP: 00007f6fb824506b R08: 0000000000000000 R09: 0000000000000000 [ 175.552066][ T6735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.552080][ T6735] R13: 00007f6fb8436038 R14: 00007f6fb8435fa0 R15: 00007ffea385f8c8 [ 175.552117][ T6735] [ 175.827401][ T5695] usb 5-1: USB disconnect, device number 6 [ 175.844301][ T6738] FAULT_INJECTION: forcing a failure. [ 175.844301][ T6738] name failslab, interval 1, probability 0, space 0, times 0 [ 175.844338][ T6738] CPU: 0 UID: 0 PID: 6738 Comm: syz.3.328 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 175.844364][ T6738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.844379][ T6738] Call Trace: [ 175.844388][ T6738] [ 175.844398][ T6738] dump_stack_lvl+0xe8/0x150 [ 175.844437][ T6738] should_fail_ex+0x46b/0x600 [ 175.844478][ T6738] should_failslab+0xa8/0x100 [ 175.844505][ T6738] __kmalloc_noprof+0xfb/0x790 [ 175.844540][ T6738] ? x509_key_preparse+0x21c/0x6d0 [ 175.844567][ T6738] ? x509_key_preparse+0x21c/0x6d0 [ 175.844602][ T6738] x509_key_preparse+0x21c/0x6d0 [ 175.844636][ T6738] asymmetric_key_preparse+0xb9/0x1b0 [ 175.844675][ T6738] __key_create_or_update+0x3a9/0xa80 [ 175.844712][ T6738] ? __pfx___key_create_or_update+0x10/0x10 [ 175.844743][ T6738] ? lookup_user_key+0xb68/0x1150 [ 175.844794][ T6738] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 175.844841][ T6738] key_create_or_update+0x42/0x60 [ 175.844871][ T6738] __se_sys_add_key+0x349/0x420 [ 175.844906][ T6738] ? __pfx___se_sys_add_key+0x10/0x10 [ 175.844947][ T6738] ? __x64_sys_add_key+0x20/0xc0 [ 175.844979][ T6738] do_syscall_64+0x166/0x520 [ 175.845005][ T6738] ? trace_irq_disable+0x3b/0x140 [ 175.845036][ T6738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.845059][ T6738] ? clear_bhb_loop+0x70/0xc0 [ 175.845089][ T6738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.845113][ T6738] RIP: 0033:0x7fa4238ce159 [ 175.845136][ T6738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.845156][ T6738] RSP: 002b:00007fa421b26028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 175.845182][ T6738] RAX: ffffffffffffffda RBX: 00007fa423b55fa0 RCX: 00007fa4238ce159 [ 175.845200][ T6738] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 175.845217][ T6738] RBP: 00007fa42396506b R08: ffffffffffffffff R09: 0000000000000000 [ 175.845243][ T6738] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 175.845255][ T6738] R13: 00007fa423b56038 R14: 00007fa423b55fa0 R15: 00007fffc4f194c8 [ 175.845286][ T6738] [ 176.095151][ T5695] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 176.219788][ T5695] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 176.220640][ T5695] keyspan 5-1:1.0: device disconnected [ 176.347149][ T6740] FAULT_INJECTION: forcing a failure. [ 176.347149][ T6740] name failslab, interval 1, probability 0, space 0, times 0 [ 176.347203][ T6740] CPU: 1 UID: 0 PID: 6740 Comm: syz.1.329 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 176.347232][ T6740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.347247][ T6740] Call Trace: [ 176.347256][ T6740] [ 176.347267][ T6740] dump_stack_lvl+0xe8/0x150 [ 176.347307][ T6740] should_fail_ex+0x46b/0x600 [ 176.347345][ T6740] ? __d_alloc+0x37/0x6f0 [ 176.347380][ T6740] should_failslab+0xa8/0x100 [ 176.347406][ T6740] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 176.347443][ T6740] ? __d_alloc+0x37/0x6f0 [ 176.347481][ T6740] __d_alloc+0x37/0x6f0 [ 176.347518][ T6740] d_alloc_pseudo+0x21/0xc0 [ 176.347550][ T6740] alloc_path_pseudo+0x107/0x220 [ 176.347579][ T6740] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 176.347601][ T6740] ? rt_spin_lock+0x1e2/0x400 [ 176.347645][ T6740] alloc_file_pseudo+0xa8/0x1e0 [ 176.347673][ T6740] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 176.347701][ T6740] ? alloc_fd+0x654/0x6d0 [ 176.347732][ T6740] sock_alloc_file+0xb8/0x2f0 [ 176.347763][ T6740] ? __sys_socket+0x12b/0x1b0 [ 176.347800][ T6740] __sys_socket+0x13f/0x1b0 [ 176.347840][ T6740] __x64_sys_socket+0x7a/0x90 [ 176.347878][ T6740] do_syscall_64+0x166/0x520 [ 176.347904][ T6740] ? trace_irq_disable+0x3b/0x140 [ 176.347934][ T6740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.347958][ T6740] ? clear_bhb_loop+0x70/0xc0 [ 176.347987][ T6740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.348010][ T6740] RIP: 0033:0x7f6fb81ae159 [ 176.348034][ T6740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.348055][ T6740] RSP: 002b:00007f6fb6405fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 176.348080][ T6740] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f6fb81ae159 [ 176.348098][ T6740] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 000000000000001f [ 176.348112][ T6740] RBP: 00007f6fb824506b R08: 0000000000000000 R09: 0000000000000000 [ 176.348128][ T6740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.348142][ T6740] R13: 00007f6fb8436038 R14: 00007f6fb8435fa0 R15: 00007ffea385f8c8 [ 176.348189][ T6740] [ 176.898016][ T6756] FAULT_INJECTION: forcing a failure. [ 176.898016][ T6756] name failslab, interval 1, probability 0, space 0, times 0 [ 176.898055][ T6756] CPU: 0 UID: 0 PID: 6756 Comm: syz.3.338 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 176.898081][ T6756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.898095][ T6756] Call Trace: [ 176.898104][ T6756] [ 176.898114][ T6756] dump_stack_lvl+0xe8/0x150 [ 176.898153][ T6756] should_fail_ex+0x46b/0x600 [ 176.898201][ T6756] should_failslab+0xa8/0x100 [ 176.898229][ T6756] __kmalloc_cache_noprof+0xa1/0x680 [ 176.898264][ T6756] ? resv_map_alloc+0x88/0x2e0 [ 176.898293][ T6756] ? resv_map_alloc+0x88/0x2e0 [ 176.898330][ T6756] resv_map_alloc+0x88/0x2e0 [ 176.898364][ T6756] hugetlbfs_get_inode+0x5f/0x660 [ 176.898397][ T6756] hugetlb_file_setup+0x21d/0x630 [ 176.898426][ T6756] ksys_mmap_pgoff+0x1ec/0x720 [ 176.898457][ T6756] ? __x64_sys_mmap+0x7f/0x140 [ 176.898487][ T6756] do_syscall_64+0x166/0x520 [ 176.898512][ T6756] ? trace_irq_disable+0x3b/0x140 [ 176.898544][ T6756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.898569][ T6756] ? clear_bhb_loop+0x70/0xc0 [ 176.898622][ T6756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.898647][ T6756] RIP: 0033:0x7fa4238ce159 [ 176.898669][ T6756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.898690][ T6756] RSP: 002b:00007fa421b26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 176.898717][ T6756] RAX: ffffffffffffffda RBX: 00007fa423b55fa0 RCX: 00007fa4238ce159 [ 176.898735][ T6756] RDX: 0000000002000001 RSI: 0000000000c00000 RDI: 0000000000000000 [ 176.898748][ T6756] RBP: 00007fa42396506b R08: ffffffffffffffff R09: 0000000000000000 [ 176.898763][ T6756] R10: 000000000005d031 R11: 0000000000000246 R12: 0000000000000000 [ 176.898776][ T6756] R13: 00007fa423b56038 R14: 00007fa423b55fa0 R15: 00007fffc4f194c8 [ 176.898810][ T6756] [ 176.902156][ T6759] FAULT_INJECTION: forcing a failure. [ 176.902156][ T6759] name failslab, interval 1, probability 0, space 0, times 0 [ 176.902193][ T6759] CPU: 1 UID: 0 PID: 6759 Comm: syz.2.337 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 176.902219][ T6759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.902233][ T6759] Call Trace: [ 176.902241][ T6759] [ 176.902251][ T6759] dump_stack_lvl+0xe8/0x150 [ 176.902288][ T6759] should_fail_ex+0x46b/0x600 [ 176.902324][ T6759] should_failslab+0xa8/0x100 [ 176.902348][ T6759] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 176.902380][ T6759] ? __lock_acquire+0x747/0x2de0 [ 176.902408][ T6759] ? __kernfs_new_node+0xac/0xa70 [ 176.902435][ T6759] ? __kernfs_new_node+0xac/0xa70 [ 176.902470][ T6759] kstrdup+0x42/0x100 [ 176.902493][ T6759] __kernfs_new_node+0xac/0xa70 [ 176.902531][ T6759] ? __pfx___kernfs_new_node+0x10/0x10 [ 176.902563][ T6759] ? kernfs_root+0x1c/0x230 [ 176.902600][ T6759] ? kernfs_root+0x1c/0x230 [ 176.902634][ T6759] ? kernfs_root+0x1c/0x230 [ 176.902659][ T6759] ? kernfs_root+0x1c/0x230 [ 176.902698][ T6759] kernfs_create_dir_ns+0xfe/0x230 [ 176.902740][ T6759] sysfs_create_dir_ns+0x12f/0x2a0 [ 176.902774][ T6759] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 176.902809][ T6759] ? rt_spin_unlock+0x165/0x200 [ 176.902846][ T6759] kobject_add_internal+0x62c/0xce0 [ 176.902888][ T6759] kobject_add+0x163/0x240 [ 176.902926][ T6759] ? __pfx_kobject_add+0x10/0x10 [ 176.902952][ T6759] ? kobject_put+0x50f/0x550 [ 176.902989][ T6759] ? get_device_parent+0x370/0x3a0 [ 176.903025][ T6759] ? __pfx_klist_children_get+0x10/0x10 [ 176.903060][ T6759] device_add+0x3fa/0xb80 [ 176.903101][ T6759] netdev_register_kobject+0x197/0x350 [ 176.903141][ T6759] register_netdevice+0x1455/0x1ed0 [ 176.903192][ T6759] ? __pfx_register_netdevice+0x10/0x10 [ 176.903223][ T6759] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 176.903265][ T6759] ? ppp_dev_configure+0x7ee/0xa90 [ 176.903302][ T6759] ppp_dev_configure+0x7f6/0xa90 [ 176.903341][ T6759] ppp_ioctl+0xb85/0x1db0 [ 176.903377][ T6759] ? __pfx_ppp_ioctl+0x10/0x10 [ 176.903410][ T6759] ? __fget_files+0x2a/0x420 [ 176.903435][ T6759] ? __fget_files+0x3a8/0x420 [ 176.903460][ T6759] ? __fget_files+0x2a/0x420 [ 176.903490][ T6759] ? bpf_lsm_file_ioctl+0x9/0x20 [ 176.903518][ T6759] ? __pfx_ppp_ioctl+0x10/0x10 [ 176.903545][ T6759] __se_sys_ioctl+0xff/0x170 [ 176.903582][ T6759] do_syscall_64+0x166/0x520 [ 176.903622][ T6759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.903652][ T6759] ? clear_bhb_loop+0x70/0xc0 [ 176.903688][ T6759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.903713][ T6759] RIP: 0033:0x7f70693ce159 [ 176.903735][ T6759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.903755][ T6759] RSP: 002b:00007f7067626028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.903780][ T6759] RAX: ffffffffffffffda RBX: 00007f7069655fa0 RCX: 00007f70693ce159 [ 176.903797][ T6759] RDX: 0000200000000000 RSI: 00000000c004743e RDI: 0000000000000004 [ 176.903813][ T6759] RBP: 00007f706946506b R08: 0000000000000000 R09: 0000000000000000 [ 176.903829][ T6759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.903843][ T6759] R13: 00007f7069656038 R14: 00007f7069655fa0 R15: 00007ffec0a33888 [ 176.903882][ T6759] [ 177.032459][ T6759] kobject: kobject_add_internal failed for ppp0 (error: -12 parent: net) [ 177.408339][ T5598] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.415547][ T5599] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 177.677806][ T6767] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 177.677838][ T6767] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 177.763324][ T6767] vhci_hcd vhci_hcd.0: Device attached [ 177.786987][ T6773] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 177.787020][ T6773] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 177.787094][ T6773] vhci_hcd vhci_hcd.0: Device attached [ 177.789632][ T6767] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(5) [ 177.789660][ T6767] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 177.789744][ T6767] vhci_hcd vhci_hcd.0: Device attached [ 177.844691][ T6774] vhci_hcd: connection closed [ 177.854903][ T6768] vhci_hcd: connection closed [ 177.858225][ T6777] vhci_hcd: connection closed [ 177.858443][ T6772] FAULT_INJECTION: forcing a failure. [ 177.858443][ T6772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.858616][ T6772] CPU: 1 UID: 0 PID: 6772 Comm: syz.2.341 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 177.858689][ T6772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.858732][ T6772] Call Trace: [ 177.858754][ T6772] [ 177.858785][ T6772] dump_stack_lvl+0xe8/0x150 [ 177.858914][ T6772] should_fail_ex+0x46b/0x600 [ 177.859021][ T6772] _copy_from_user+0x2d/0xb0 [ 177.859129][ T6772] vhost_dev_ioctl+0xd31/0x11f0 [ 177.859242][ T6772] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 177.859326][ T6772] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 177.859405][ T6772] ? mutex_lock_nested+0x152/0x1d0 [ 177.859489][ T6772] ? vhost_vsock_dev_ioctl+0x223/0xee0 [ 177.859589][ T6772] vhost_vsock_dev_ioctl+0x231/0xee0 [ 177.859690][ T6772] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 177.859777][ T6772] ? __fget_files+0x2a/0x420 [ 177.859822][ T6772] ? __fget_files+0x3a8/0x420 [ 177.859848][ T6772] ? __fget_files+0x2a/0x420 [ 177.859914][ T6772] ? bpf_lsm_file_ioctl+0x9/0x20 [ 177.860009][ T6772] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 177.860101][ T6772] __se_sys_ioctl+0xff/0x170 [ 177.860194][ T6772] do_syscall_64+0x166/0x520 [ 177.860265][ T6772] ? trace_irq_disable+0x3b/0x140 [ 177.860343][ T6772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.860380][ T6772] ? clear_bhb_loop+0x70/0xc0 [ 177.860409][ T6772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.860431][ T6772] RIP: 0033:0x7f70693ce159 [ 177.860469][ T6772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.860521][ T6772] RSP: 002b:00007f7067626028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.860579][ T6772] RAX: ffffffffffffffda RBX: 00007f7069655fa0 RCX: 00007f70693ce159 [ 177.860630][ T6772] RDX: 0000200000000ac0 RSI: 000000004008af03 RDI: 0000000000000003 [ 177.860672][ T6772] RBP: 00007f706946506b R08: 0000000000000000 R09: 0000000000000000 [ 177.860706][ T6772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.860745][ T6772] R13: 00007f7069656038 R14: 00007f7069655fa0 R15: 00007ffec0a33888 [ 177.860840][ T6772] [ 178.066264][ T10] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 178.130112][ T1470] vhci_hcd vhci_hcd.3: stop threads [ 178.143233][ T6769] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 178.143565][ T1470] vhci_hcd vhci_hcd.3: release socket [ 178.177825][ T1470] vhci_hcd vhci_hcd.3: disconnect device [ 178.177894][ T1470] vhci_hcd vhci_hcd.3: stop threads [ 178.177913][ T1470] vhci_hcd vhci_hcd.3: release socket [ 178.204071][ T1470] vhci_hcd vhci_hcd.3: disconnect device [ 178.209108][ T1470] vhci_hcd vhci_hcd.3: stop threads [ 178.209128][ T1470] vhci_hcd vhci_hcd.3: release socket [ 178.234575][ T1470] vhci_hcd vhci_hcd.3: disconnect device [ 178.494359][ T6790] loop2: detected capacity change from 0 to 7 [ 178.538571][ T6790] Dev loop2: unable to read RDB block 7 [ 178.538602][ T6790] loop2: AHDI p1 p2 p3 [ 178.538617][ T6790] loop2: partition table partially beyond EOD, truncated [ 178.539505][ T6790] loop2: p1 start 1601398130 is beyond EOD, truncated [ 178.539526][ T6790] loop2: p2 start 1702059890 is beyond EOD, truncated [ 179.233120][ T6813] netlink: 5 bytes leftover after parsing attributes in process `syz.2.353'. [ 182.681692][ T5708] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 182.865054][ T5708] usb 5-1: Using ep0 maxpacket: 16 [ 182.867044][ T97] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 182.868945][ T5708] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.870932][ T5708] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.870959][ T5708] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.917207][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.917237][ T5708] usb 5-1: Product: syz [ 182.917254][ T5708] usb 5-1: Manufacturer: syz [ 182.917270][ T5708] usb 5-1: SerialNumber: syz [ 183.000994][ T5708] usb 5-1: 0:2 : does not exist [ 183.040838][ T6890] FAULT_INJECTION: forcing a failure. [ 183.040838][ T6890] name failslab, interval 1, probability 0, space 0, times 0 [ 183.040915][ T6890] CPU: 1 UID: 0 PID: 6890 Comm: syz.1.384 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 183.040936][ T6890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.040946][ T6890] Call Trace: [ 183.040953][ T6890] [ 183.040960][ T6890] dump_stack_lvl+0xe8/0x150 [ 183.040996][ T6890] should_fail_ex+0x46b/0x600 [ 183.041026][ T6890] ? __d_alloc+0x37/0x6f0 [ 183.041048][ T6890] should_failslab+0xa8/0x100 [ 183.041066][ T6890] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 183.041095][ T6890] ? __d_alloc+0x37/0x6f0 [ 183.041120][ T6890] __d_alloc+0x37/0x6f0 [ 183.041140][ T6890] ? hashlen_string+0x54/0x110 [ 183.041160][ T6890] d_alloc_name+0xba/0x270 [ 183.041184][ T6890] ? __pfx_d_alloc_name+0x10/0x10 [ 183.041205][ T6890] ? rt_spin_unlock+0x159/0x200 [ 183.041265][ T6890] proc_setup_self+0x48/0x1c0 [ 183.041306][ T6890] proc_fill_super+0x57d/0x760 [ 183.041341][ T6890] ? __pfx_proc_fill_super+0x10/0x10 [ 183.041389][ T6890] get_tree_nodev+0xbb/0x150 [ 183.041432][ T6890] vfs_get_tree+0x92/0x2a0 [ 183.041456][ T6890] do_new_mount+0x319/0xdc0 [ 183.041473][ T6890] ? cap_capable+0x123/0x460 [ 183.041499][ T6890] ? __pfx_do_new_mount+0x10/0x10 [ 183.041519][ T6890] ? ns_capable+0x89/0xe0 [ 183.041543][ T6890] ? path_mount+0x647/0x1050 [ 183.041563][ T6890] ? user_path_at+0xd4/0x160 [ 183.041591][ T6890] __se_sys_mount+0x31d/0x420 [ 183.041615][ T6890] ? __pfx___se_sys_mount+0x10/0x10 [ 183.041639][ T6890] ? __x64_sys_mount+0x20/0xc0 [ 183.041665][ T6890] do_syscall_64+0x166/0x520 [ 183.041707][ T6890] ? trace_irq_disable+0x3b/0x140 [ 183.041739][ T6890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.041768][ T6890] ? clear_bhb_loop+0x70/0xc0 [ 183.041798][ T6890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.041825][ T6890] RIP: 0033:0x7f6fb81ae159 [ 183.041840][ T6890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.041854][ T6890] RSP: 002b:00007f6fb6406028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 183.041872][ T6890] RAX: ffffffffffffffda RBX: 00007f6fb8435fa0 RCX: 00007f6fb81ae159 [ 183.041889][ T6890] RDX: 0000200000000100 RSI: 0000200000000200 RDI: 0000000000000000 [ 183.041901][ T6890] RBP: 00007f6fb824506b R08: 0000000000000000 R09: 0000000000000000 [ 183.041911][ T6890] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 183.041922][ T6890] R13: 00007f6fb8436038 R14: 00007f6fb8435fa0 R15: 00007ffea385f8c8 [ 183.041947][ T6890] [ 183.051313][ T6890] proc_fill_super: can't allocate /proc/self [ 183.365892][ T97] usb 4-1: Using ep0 maxpacket: 16 [ 183.381227][ T97] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 183.395308][ T10] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 183.407847][ T97] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.407876][ T97] usb 4-1: Product: syz [ 183.407892][ T97] usb 4-1: Manufacturer: syz [ 183.407907][ T97] usb 4-1: SerialNumber: syz [ 183.432063][ T5708] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 183.675802][ T97] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 183.722865][ T97] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 183.724953][ T97] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 183.725013][ T97] usb 4-1: media controller created [ 183.785110][ T97] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.864164][ T5708] usb 5-1: USB disconnect, device number 7 [ 183.866775][ T97] zl10353_read_register: readreg error (reg=127, ret==-32) [ 184.002964][ T6898] loop5: detected capacity change from 0 to 7 [ 184.023127][ T6898] Dev loop5: unable to read RDB block 7 [ 184.023160][ T6898] loop5: unable to read partition table [ 184.023312][ T6898] loop5: partition table beyond EOD, truncated [ 184.023359][ T6898] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 184.146013][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.329830][ T97] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 185.351148][ T97] usb 4-1: USB disconnect, device number 10 [ 185.966062][ T6921] fuse: Bad value for 'fd' [ 186.308575][ T6923] FAULT_INJECTION: forcing a failure. [ 186.308575][ T6923] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 186.308617][ T6923] CPU: 1 UID: 0 PID: 6923 Comm: syz.2.396 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 186.308644][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.308660][ T6923] Call Trace: [ 186.308669][ T6923] [ 186.308680][ T6923] dump_stack_lvl+0xe8/0x150 [ 186.308722][ T6923] should_fail_ex+0x46b/0x600 [ 186.308765][ T6923] prepare_alloc_pages+0x223/0x650 [ 186.308808][ T6923] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 186.308857][ T6923] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 186.308900][ T6923] ? __pfx_policy_nodemask+0x10/0x10 [ 186.308928][ T6923] ? __lock_acquire+0x747/0x2de0 [ 186.308968][ T6923] alloc_pages_mpol+0xd4/0x280 [ 186.308999][ T6923] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 186.309029][ T6923] vma_alloc_folio_noprof+0xe1/0x1e0 [ 186.309059][ T6923] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 186.309084][ T6923] ? lock_acquire+0x115/0x350 [ 186.309126][ T6923] do_pte_missing+0x835/0x28f0 [ 186.309172][ T6923] ? handle_mm_fault+0xeb/0x28c0 [ 186.309210][ T6923] handle_mm_fault+0xf64/0x28c0 [ 186.309247][ T6923] ? handle_mm_fault+0xeb/0x28c0 [ 186.309288][ T6923] ? follow_page_pte+0x663/0xf20 [ 186.309330][ T6923] ? __pfx_handle_mm_fault+0x10/0x10 [ 186.309363][ T6923] ? follow_page_pte+0x74b/0xf20 [ 186.309405][ T6923] ? __pfx_follow_page_pte+0x10/0x10 [ 186.309449][ T6923] __get_user_pages+0x1676/0x2650 [ 186.309515][ T6923] __gup_longterm_locked+0x3bc/0x15c0 [ 186.309558][ T6923] ? gup_fast_fallback+0x20d/0x2090 [ 186.309603][ T6923] gup_fast_fallback+0x1d4d/0x2090 [ 186.309670][ T6923] ? __pfx_gup_fast_fallback+0x10/0x10 [ 186.309699][ T6923] ? __kvmalloc_node_noprof+0x5d4/0x890 [ 186.309740][ T6923] ? is_valid_gup_args+0x11f/0x200 [ 186.309772][ T6923] ? pin_user_pages_fast+0x4d/0xb0 [ 186.309805][ T6923] io_pin_pages+0xc7/0x1a0 [ 186.309844][ T6923] io_region_pin_pages+0x7d/0x190 [ 186.309884][ T6923] io_create_region+0x3a4/0x4b0 [ 186.309929][ T6923] io_allocate_scq_urings+0x1f4/0x7f0 [ 186.309961][ T6923] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 186.309993][ T6923] ? bpf_lsm_capable+0x9/0x20 [ 186.310023][ T6923] ? security_capable+0x7e/0x2c0 [ 186.310055][ T6923] io_uring_create+0x46c/0x990 [ 186.310083][ T6923] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 186.310113][ T6923] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 186.310157][ T6923] ? rcu_is_watching+0x16/0xb0 [ 186.310208][ T6923] do_syscall_64+0x166/0x520 [ 186.310234][ T6923] ? trace_irq_disable+0x3b/0x140 [ 186.310265][ T6923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.310289][ T6923] ? clear_bhb_loop+0x70/0xc0 [ 186.310326][ T6923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.310351][ T6923] RIP: 0033:0x7f70693ce159 [ 186.310373][ T6923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.310394][ T6923] RSP: 002b:00007f7067626028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 186.310421][ T6923] RAX: ffffffffffffffda RBX: 00007f7069655fa0 RCX: 00007f70693ce159 [ 186.310439][ T6923] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000004fee [ 186.310455][ T6923] RBP: 00007f706946506b R08: 0000000000000000 R09: 0000000000000000 [ 186.310471][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.310486][ T6923] R13: 00007f7069656038 R14: 00007f7069655fa0 R15: 00007ffec0a33888 [ 186.310525][ T6923] [ 187.344650][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.403'. [ 188.046479][ T97] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 188.063215][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 188.215382][ T97] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 188.216970][ T97] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.267580][ T97] usb 4-1: config 0 descriptor?? [ 188.383485][ T6956] input: syz0 as /devices/virtual/input/input11 [ 188.534463][ T97] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 188.782419][ T10] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 188.838871][ T5695] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 188.897372][ T97] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 188.897403][ T97] [drm] Initialized udl on minor 1 [ 188.926174][ T6964] fido_id[6964]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 188.998964][ T5695] usb 5-1: Using ep0 maxpacket: 32 [ 188.999983][ T5695] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 189.032674][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.032702][ T5695] usb 5-1: Product: syz [ 189.032715][ T5695] usb 5-1: Manufacturer: syz [ 189.032728][ T5695] usb 5-1: SerialNumber: syz [ 189.037799][ T5695] usb 5-1: config 0 descriptor?? [ 189.074603][ T5695] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 189.158618][ T6966] gadgetfs: bound to dummy_udc driver [ 189.266761][ T6967] ================================================================== [ 189.266781][ T6967] BUG: KASAN: slab-use-after-free in mutex_lock_interruptible_nested+0xc9/0x1d0 [ 189.266826][ T6967] Read of size 8 at addr ffff88803c7ab850 by task syz.2.409/6967 [ 189.266850][ T6967] [ 189.266864][ T6967] CPU: 0 UID: 0 PID: 6967 Comm: syz.2.409 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 189.266892][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.266907][ T6967] Call Trace: [ 189.266916][ T6967] [ 189.266926][ T6967] dump_stack_lvl+0xe8/0x150 [ 189.266961][ T6967] print_address_description+0x55/0x1e0 [ 189.267004][ T6967] ? mutex_lock_interruptible_nested+0xc9/0 ** replaying previous printk message ** [ 189.267004][ T6967] ? mutex_lock_interruptible_nested+0xc9/0x1d0 [ 189.267038][ T6967] print_report+0x58/0x70 [ 189.267068][ T6967] kasan_report+0x117/0x150 [ 189.267093][ T6967] ? mutex_lock_interruptible_nested+0xc9/0x1d0 [ 189.267131][ T6967] ? ep_open+0x4e/0x270 [ 189.267152][ T6967] mutex_lock_interruptible_nested+0xc9/0x1d0 [ 189.267188][ T6967] ep_open+0x4e/0x270 [ 189.267207][ T6967] ? do_dentry_open+0x83a/0x1420 [ 189.267230][ T6967] ? __pfx_ep_open+0x10/0x10 [ 189.267250][ T6967] do_dentry_open+0x849/0x1420 [ 189.267277][ T6967] vfs_open+0x3b/0x350 [ 189.267296][ T6967] ? path_openat+0x142d/0x1d60 [ 189.267323][ T6967] path_openat+0x1448/0x1d60 [ 189.267359][ T6967] do_file_open+0x23e/0x4a0 [ 189.267387][ T6967] ? __pfx_do_file_open+0x10/0x10 [ 189.267425][ T6967] ? alloc_fd+0x654/0x6d0 [ 189.267452][ T6967] do_sys_openat2+0x115/0x200 [ 189.267474][ T6967] ? __pfx_do_sys_openat2+0x10/0x10 [ 189.267505][ T6967] __x64_sys_openat+0x138/0x170 [ 189.267530][ T6967] do_syscall_64+0x166/0x520 [ 189.267553][ T6967] ? trace_irq_disable+0x3b/0x140 [ 189.267583][ T6967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.267605][ T6967] ? clear_bhb_loop+0x70/0xc0 [ 189.267631][ T6967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.267652][ T6967] RIP: 0033:0x7f70693ce159 [ 189.267672][ T6967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.267692][ T6967] RSP: 002b:00007f7067605028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 189.267718][ T6967] RAX: ffffffffffffffda RBX: 00007f7069656090 RCX: 00007f70693ce159 [ 189.267734][ T6967] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 189.267751][ T6967] RBP: 00007f706946506b R08: 0000000000000000 R09: 0000000000000000 [ 189.267765][ T6967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.267779][ T6967] R13: 00007f7069656128 R14: 00007f7069656090 R15: 00007ffec0a33888 [ 189.267807][ T6967] [ 189.267815][ T6967] [ 189.267821][ T6967] Allocated by task 6966: [ 189.267832][ T6967] kasan_save_track+0x3e/0x80 [ 189.267865][ T6967] __kasan_kmalloc+0x93/0xb0 [ 189.267882][ T6967] __kmalloc_cache_noprof+0x3d5/0x680 [ 189.267913][ T6967] gadgetfs_bind+0x27a/0xae0 [ 189.267932][ T6967] gadget_bind_driver+0x2ca/0x9e0 [ 189.267962][ T6967] really_probe+0x254/0xae0 [ 189.267986][ T6967] __driver_probe_device+0x1e8/0x360 [ 189.268016][ T6967] driver_probe_device+0x4f/0x240 [ 189.268038][ T6967] __driver_attach+0x339/0x600 [ 189.268059][ T6967] bus_for_each_dev+0x23e/0x2c0 [ 189.268084][ T6967] bus_add_driver+0x348/0x670 [ 189.268105][ T6967] driver_register+0x23a/0x320 [ 189.268124][ T6967] usb_gadget_register_driver_owner+0xf9/0x270 [ 189.268150][ T6967] dev_config+0xe4e/0x12c0 [ 189.268177][ T6967] vfs_write+0x29f/0xbb0 [ 189.268199][ T6967] ksys_write+0x156/0x270 [ 189.268221][ T6967] do_syscall_64+0x166/0x520 [ 189.268242][ T6967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.268262][ T6967] [ 189.268267][ T6967] Freed by task 6966: [ 189.268277][ T6967] kasan_save_track+0x3e/0x80 [ 189.268306][ T6967] kasan_save_free_info+0x40/0x50 [ 189.268330][ T6967] __kasan_slab_free+0x5c/0x80 [ 189.268357][ T6967] kfree+0x1c5/0x6d0 [ 189.268377][ T6967] destroy_ep_files+0x29f/0x330 [ 189.268393][ T6967] gadgetfs_unbind+0x112/0x2c0 [ 189.268410][ T6967] gadget_unbind_driver+0x1cb/0x410 [ 189.268440][ T6967] device_release_driver_internal+0x48b/0x880 [ 189.268460][ T6967] driver_detach+0x1f3/0x2d0 [ 189.268479][ T6967] bus_remove_driver+0x229/0x320 [ 189.268508][ T6967] usb_gadget_unregister_driver+0x4e/0x70 [ 189.268535][ T6967] dev_release+0x86/0x210 [ 189.268550][ T6967] __fput+0x42a/0xa80 [ 189.268568][ T6967] task_work_run+0x1d9/0x270 [ 189.268589][ T6967] exit_to_user_mode_loop+0x204/0x770 [ 189.268616][ T6967] do_syscall_64+0x328/0x520 [ 189.268638][ T6967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.268657][ T6967] [ 189.268663][ T6967] The buggy address belongs to the object at ffff88803c7ab800 [ 189.268663][ T6967] which belongs to the cache kmalloc-512 of size 512 [ 189.268683][ T6967] The buggy address is located 80 bytes inside of [ 189.268683][ T6967] freed 512-byte region [ffff88803c7ab800, ffff88803c7aba00) [ 189.268709][ T6967] [ 189.268715][ T6967] The buggy address belongs to the physical page: [ 189.268735][ T6967] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3c7a8 [ 189.268757][ T6967] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 189.268775][ T6967] flags: 0x80000000000040(head|node=0|zone=1) [ 189.268792][ T6967] page_type: f5(slab) [ 189.268811][ T6967] raw: 0080000000000040 ffff88813ffbdc80 dead000000000100 dead000000000122 [ 189.268831][ T6967] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 189.268852][ T6967] head: 0080000000000040 ffff88813ffbdc80 dead000000000100 dead000000000122 [ 189.268872][ T6967] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 189.268893][ T6967] head: 0080000000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 189.268912][ T6967] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004 [ 189.268924][ T6967] page dumped because: kasan: bad access detected [ 189.268942][ T6967] page_owner tracks the page as allocated [ 189.268950][ T6967] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13, tgid 13 (kworker/u8:1), ts 107877850022 [ 189.268987][ T6967] post_alloc_hook+0x1f9/0x250 [ 189.269025][ T6967] get_page_from_freelist+0x2591/0x2600 [ 189.269059][ T6967] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 189.269093][ T6967] allocate_slab+0x7d/0x620 [ 189.269115][ T6967] refill_objects+0x2d8/0x350 [ 189.269138][ T6967] __pcs_replace_empty_main+0x339/0x690 [ 189.269161][ T6967] __kmalloc_cache_noprof+0x46f/0x680 [ 189.269190][ T6967] batadv_forw_packet_alloc+0x178/0x370 [ 189.269214][ T6967] batadv_iv_ogm_queue_add+0x8a6/0xd80 [ 189.269247][ T6967] batadv_iv_ogm_schedule+0x835/0xf90 [ 189.269282][ T6967] batadv_iv_send_outstanding_bat_ogm_packet+0x622/0x740 [ 189.269318][ T6967] process_scheduled_works+0xc3d/0x1630 [ 189.269345][ T6967] worker_thread+0xa47/0xfb0 [ 189.269373][ T6967] kthread+0x38b/0x470 [ 189.269392][ T6967] ret_from_fork+0x514/0xb70 [ 189.269412][ T6967] ret_from_fork_asm+0x1a/0x30 [ 189.269430][ T6967] page last free pid 5775 tgid 5775 ts 107849709851 stack trace: [ 189.269447][ T6967] __free_frozen_pages+0xf8e/0x1070 [ 189.269475][ T6967] __slab_free+0x250/0x2a0 [ 189.269504][ T6967] qlist_free_all+0x99/0x100 [ 189.269532][ T6967] kasan_quarantine_reduce+0x148/0x160 [ 189.269561][ T6967] __kasan_slab_alloc+0x22/0x80 [ 189.269593][ T6967] __kmalloc_noprof+0x3b9/0x790 [ 189.269622][ T6967] tomoyo_realpath_from_path+0xef/0x640 [ 189.269643][ T6967] tomoyo_path_perm+0x283/0x560 [ 189.269670][ T6967] security_inode_getattr+0x12b/0x310 [ 189.269696][ T6967] __x64_sys_newfstat+0x133/0x270 [ 189.269717][ T6967] do_syscall_64+0x166/0x520 [ 189.269740][ T6967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.269762][ T6967] [ 189.269768][ T6967] Memory state around the buggy address: [ 189.269781][ T6967] ffff88803c7ab700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 189.269796][ T6967] ffff88803c7ab780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 189.269812][ T6967] >ffff88803c7ab800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.269824][ T6967] ^ [ 189.269836][ T6967] ffff88803c7ab880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.269852][ T6967] ffff88803c7ab900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.269864][ T6967] ================================================================== [ 189.349634][ T6967] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 190.103278][ T6967] CPU: 0 UID: 0 PID: 6967 Comm: syz.2.409 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 190.113117][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.123216][ T6967] Call Trace: [ 190.126537][ T6967] [ 190.129503][ T6967] vpanic+0x56d/0xa60 [ 190.133517][ T6967] ? rcu_is_watching+0x16/0xb0 [ 190.138329][ T6967] ? __pfx_vpanic+0x10/0x10 [ 190.142877][ T6967] panic+0xc5/0xd0 [ 190.146636][ T6967] ? __pfx_panic+0x10/0x10 [ 190.151098][ T6967] ? preempt_schedule_thunk+0x16/0x40 [ 190.156504][ T6967] ? preempt_schedule_thunk+0x16/0x40 [ 190.161921][ T6967] ? mutex_lock_interruptible_nested+0xc9/0x1d0 [ 190.168194][ T6967] check_panic_on_warn+0x89/0xb0 [ 190.173161][ T6967] ? mutex_lock_interruptible_nested+0xc9/0x1d0 [ 190.179450][ T6967] end_report+0x73/0x170 [ 190.183728][ T6967] ? mutex_lock_interruptible_nested+0xc9/0x1d0 [ 190.190007][ T6967] kasan_report+0x128/0x150 [ 190.194558][ T6967] ? mutex_lock_interruptible_nested+0xc9/0x1d0 [ 190.200850][ T6967] ? ep_open+0x4e/0x270 [ 190.205040][ T6967] mutex_lock_interruptible_nested+0xc9/0x1d0 [ 190.211152][ T6967] ep_open+0x4e/0x270 [ 190.215172][ T6967] ? do_dentry_open+0x83a/0x1420 [ 190.220150][ T6967] ? __pfx_ep_open+0x10/0x10 [ 190.224772][ T6967] do_dentry_open+0x849/0x1420 [ 190.229571][ T6967] vfs_open+0x3b/0x350 [ 190.233663][ T6967] ? path_openat+0x142d/0x1d60 [ 190.238462][ T6967] path_openat+0x1448/0x1d60 [ 190.243112][ T6967] do_file_open+0x23e/0x4a0 [ 190.247666][ T6967] ? __pfx_do_file_open+0x10/0x10 [ 190.252750][ T6967] ? alloc_fd+0x654/0x6d0 [ 190.257161][ T6967] do_sys_openat2+0x115/0x200 [ 190.261873][ T6967] ? __pfx_do_sys_openat2+0x10/0x10 [ 190.267118][ T6967] __x64_sys_openat+0x138/0x170 [ 190.272006][ T6967] do_syscall_64+0x166/0x520 [ 190.276638][ T6967] ? trace_irq_disable+0x3b/0x140 [ 190.281703][ T6967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.287811][ T6967] ? clear_bhb_loop+0x70/0xc0 [ 190.292513][ T6967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.298461][ T6967] RIP: 0033:0x7f70693ce159 [ 190.302914][ T6967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.322551][ T6967] RSP: 002b:00007f7067605028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 190.331018][ T6967] RAX: ffffffffffffffda RBX: 00007f7069656090 RCX: 00007f70693ce159 [ 190.339029][ T6967] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 190.347067][ T6967] RBP: 00007f706946506b R08: 0000000000000000 R09: 0000000000000000 [ 190.355099][ T6967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.363100][ T6967] R13: 00007f7069656128 R14: 00007f7069656090 R15: 00007ffec0a33888 [ 190.371121][ T6967] [ 190.376488][ T6967] Kernel Offset: disabled [ 190.380842][ T6967] Rebooting in 86400 seconds..