last executing test programs: 2m55.558034547s ago: executing program 2 (id=157): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x30, 0x0, &(0x7f0000000100)) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'team_slave_0\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x7, 0x1, 0x80, 0xc, 0x2000, 0xffffffff, 0x4, 0x2]}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x200000005c831, 0xffffffffffffffff, 0x0) 2m55.188963091s ago: executing program 2 (id=160): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x14, 0x44, 0x1, 0x7fffc, 0x25dfdbfb, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x41, 0xb2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]}) 2m54.991885768s ago: executing program 2 (id=162): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000340)={0x3, 0x0, [{0xb65, 0x0, 0x4}, {0x3f6, 0x0, 0x6}, {0x4b564d01, 0x0, 0x200}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x8000001000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x98, 0x10, 0x0, 0x3, 0x6], 0xeeee8000, 0x140640}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000000)=0x800d000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m54.669868568s ago: executing program 2 (id=165): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x89101) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 2m54.5626974s ago: executing program 2 (id=166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="429d450f011e66baf80cb8023f8c88ef66bafc0c66b80d0066efc4224d902cf6b9800000c00f3235001000000f30c4c27d185a7eb931030000b893000000ba000000000f3066f32646de556366baf80cb884513780ef66bafc0cec66410f38816b4e", 0x62}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m53.50784218s ago: executing program 2 (id=170): mremap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000d3c000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0, 0xfffffffffffffe86}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m53.371648636s ago: executing program 32 (id=170): mremap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000d3c000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0, 0xfffffffffffffe86}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m49.356134311s ago: executing program 3 (id=195): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="060000000300010000", 0x9) nanosleep(&(0x7f0000000200)={0x0, 0x1000000}, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e04013a0c00"], 0x7) nanosleep(&(0x7f0000000200)={0x0, 0x1000000}, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040e04011a0c00"], 0x7) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) 2m49.078457276s ago: executing program 3 (id=200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c0701"], 0x340a) 2m48.68424806s ago: executing program 3 (id=204): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d00)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000003000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff00"], 0x18, 0x80}}], 0x2, 0x0) 2m48.521792505s ago: executing program 3 (id=205): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2m48.35689441s ago: executing program 3 (id=207): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m48.168673178s ago: executing program 3 (id=210): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) lsm_set_self_attr(0x66, 0x0, 0x21, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) 2m33.073113581s ago: executing program 33 (id=210): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) lsm_set_self_attr(0x66, 0x0, 0x21, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) 1m24.973202472s ago: executing program 1 (id=859): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='zstd', 0x4) 1m23.861482895s ago: executing program 1 (id=863): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002180)='./file0/file0/file0\x00', 0x2000, 0x7ff, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff91012010, 0xfe, 0x200, 0x81, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x6, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0x9, 0xa000, 0xfffffffe, r2, r3, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$afs(0x0, &(0x7f0000002040)='./file0/file0/file0\x00', 0x0, 0x100004, 0x0) 1m22.920011456s ago: executing program 1 (id=865): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007e80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)="2fb4f9ea3fe1dabbea6fc7e39b962902956c7ec3e1765d8fcbfb5da61be582f63bf2aefd62fe60", 0x27}], 0x1}}], 0x1, 0x4000) recvfrom$unix(r2, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) 1m22.896293368s ago: executing program 1 (id=866): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/self/cwd\x00', &(0x7f0000000400)=""/100, 0x64) 1m22.84182167s ago: executing program 1 (id=867): setns(0xc9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x4008860) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r4, 0x0, 0xacb6, 0x8) splice(r3, 0x0, r2, 0x0, 0x7fffffffffffffff, 0x0) write(r0, &(0x7f0000000040), 0xffffff4a) 1m22.500105788s ago: executing program 1 (id=869): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = fanotify_init(0xf00, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x5, 0x4800003e, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, 0x8) read$FUSE(r0, &(0x7f0000000f40)={0x2020}, 0x2020) 1m22.088934189s ago: executing program 34 (id=869): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = fanotify_init(0xf00, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x5, 0x4800003e, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, 0x8) read$FUSE(r0, &(0x7f0000000f40)={0x2020}, 0x2020) 25.885112014s ago: executing program 0 (id=1227): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e26, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x51) 24.412790307s ago: executing program 0 (id=1229): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) pwritev(r2, &(0x7f0000002780)=[{&(0x7f0000000100)="aa4ca03e55a39ff9", 0x8}], 0x1, 0x0, 0x6) sendfile(r0, r2, 0x0, 0x7ffff004) 24.137861216s ago: executing program 0 (id=1231): openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x4004510d, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x4) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) 23.919417907s ago: executing program 0 (id=1233): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0x5, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0xeeee8000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.645264494s ago: executing program 0 (id=1234): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000180)=0x18000, 0x4) 9.903084445s ago: executing program 0 (id=1271): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet6(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x0) fcntl$setlease(r1, 0x400, 0x1) landlock_restrict_self(0xffffffffffffffff, 0xc) 9.245507488s ago: executing program 35 (id=1271): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet6(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x0) fcntl$setlease(r1, 0x400, 0x1) landlock_restrict_self(0xffffffffffffffff, 0xc) 5.647925671s ago: executing program 4 (id=1289): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./lower/file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000340)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/file1\x00', 0x0) umount2(&(0x7f0000000580)='./mnt\x00', 0x0) mount(0x0, &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='overlay\x00', 0x0, &(0x7f0000000640)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') 5.152457996s ago: executing program 4 (id=1290): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = creat(&(0x7f0000000580)='./bus\x00', 0x80) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, '\x00', [{0xed8c, 0x1ff, 0x7, 0x1, 0x1, 0x6}, {0x8, 0x7fffffff, 0x4c, 0x108f, 0x7, 0x8}]}) 4.706313685s ago: executing program 4 (id=1292): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.598413229s ago: executing program 6 (id=1293): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000080)="0f20c035000001000f22c0660f383deff3a766b80c008ee066b882000f0826670f06788fa4ba00000f00d866bab8010000000f01c166b8340c66ef64360f78190f0119", 0x43}], 0x1, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.177049816s ago: executing program 4 (id=1295): syz_io_uring_setup(0x7877, &(0x7f00000001c0)={0x0, 0xcb05, 0x2, 0x3, 0x1d5}, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) 4.163955084s ago: executing program 6 (id=1296): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x20) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.330546082s ago: executing program 5 (id=1297): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) fsmount(r0, 0x0, 0x2c) 3.10645374s ago: executing program 4 (id=1298): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {0x3}}, 0x14}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x1000, 0x1, 0x97, 0x10, 0x0, 0x3, 0x2, 0x1, 0x8], 0xeeee7ffb, 0x400}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)={0x10001, 0x9, 0x1, 0xaaff}) 2.959891336s ago: executing program 6 (id=1299): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f4c, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x9, 0x40, 0x40000000000, 0x2, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000, 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.770892635s ago: executing program 5 (id=1300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.750464746s ago: executing program 4 (id=1301): ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000100)={{}, "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"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 2.260262073s ago: executing program 6 (id=1302): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = socket$inet_icmp(0x2, 0x2, 0x1) recvfrom$inet(r4, 0x0, 0x0, 0x40000006, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x81901) 2.063877389s ago: executing program 5 (id=1303): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000007000000090001"], 0xc8}}, 0x20050800) 1.468623856s ago: executing program 5 (id=1304): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy 0x22\n\x00', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='maxtcpc\n\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='0-0022\n\x00', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/i2c/devices/0-0022/driver\x00', 0x0, 0x0) 1.200896518s ago: executing program 6 (id=1305): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) lseek(r0, 0x0, 0x4) 1.171293953s ago: executing program 5 (id=1306): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r0, 0x100000000000011, 0x2000, 0x1ff) 902.761271ms ago: executing program 5 (id=1307): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f00000007c0)="0bcde56ca9a62cbf", 0x8) syz_usb_disconnect(r1) 0s ago: executing program 6 (id=1308): sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0100230100003402000002000000080001", @ANYRES32, @ANYBLOB="f1e29b47e35286795244e128cf86706546e3ba4d864b73068a5af9eb0106343306d3d91d97f617"], 0x1c}}, 0x0) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000280)=ANY=[]) kernel console output (not intermixed with test programs): activated: batadv_slave_0 [ 197.094031][ T8458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.111765][ T6452] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.112084][ T6452] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.156673][ T1169] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.185782][ T1169] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.233611][ T5692] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 197.241537][ T5692] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input14 [ 197.431026][ T6452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.431040][ T6452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.474966][ T8705] FAULT_INJECTION: forcing a failure. [ 197.474966][ T8705] name failslab, interval 1, probability 0, space 0, times 0 [ 197.474991][ T8705] CPU: 0 UID: 0 PID: 8705 Comm: syz.0.911 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.475020][ T8705] Tainted: [L]=SOFTLOCKUP [ 197.475028][ T8705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.475041][ T8705] Call Trace: [ 197.475050][ T8705] [ 197.475058][ T8705] dump_stack_lvl+0xe8/0x150 [ 197.475089][ T8705] should_fail_ex+0x3eb/0x540 [ 197.475118][ T8705] should_failslab+0xa8/0x100 [ 197.475143][ T8705] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 197.475171][ T8705] ? __d_lookup+0x66/0x790 [ 197.475199][ T8705] ? __d_alloc+0x37/0x6f0 [ 197.475224][ T8705] ? __d_alloc+0x37/0x6f0 [ 197.475255][ T8705] __d_alloc+0x37/0x6f0 [ 197.475287][ T8705] d_alloc+0x4b/0x190 [ 197.475310][ T8705] ? lookup_one_qstr_excl+0xc4/0x360 [ 197.475339][ T8705] lookup_one_qstr_excl+0xd8/0x360 [ 197.475366][ T8705] ? lookup_noperm_common+0x245/0x430 [ 197.475393][ T8705] start_dirop+0x5c/0x90 [ 197.475418][ T8705] simple_start_creating+0xcc/0x110 [ 197.475445][ T8705] ? __pfx_simple_start_creating+0x10/0x10 [ 197.475474][ T8705] ? do_raw_spin_unlock+0xf5/0x200 [ 197.475498][ T8705] ? mntput+0x65/0xc0 [ 197.475523][ T8705] debugfs_start_creating+0xca/0x1b0 [ 197.475553][ T8705] __debugfs_create_file+0x6f/0x400 [ 197.475585][ T8705] debugfs_create_file_full+0x3f/0x60 [ 197.475616][ T8705] ref_tracker_dir_debugfs+0x197/0x360 [ 197.475642][ T8705] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 197.475694][ T8705] ? __kasan_kmalloc+0x93/0xb0 [ 197.475718][ T8705] ? __raw_spin_lock_init+0x45/0x100 [ 197.475744][ T8705] preinit_net+0x353/0x760 [ 197.475776][ T8705] copy_net_ns+0x2c3/0x770 [ 197.475808][ T8705] create_new_namespaces+0x3f0/0x6b0 [ 197.475841][ T8705] ? security_capable+0x7e/0x2c0 [ 197.475871][ T8705] unshare_nsproxy_namespaces+0x144/0x190 [ 197.475897][ T8705] ksys_unshare+0x5a7/0x950 [ 197.475929][ T8705] ? __pfx_ksys_unshare+0x10/0x10 [ 197.475954][ T8705] ? rcu_is_watching+0x16/0xb0 [ 197.475985][ T8705] __x64_sys_unshare+0x38/0x50 [ 197.476010][ T8705] do_syscall_64+0x166/0x520 [ 197.476028][ T8705] ? trace_irq_disable+0x3b/0x140 [ 197.476056][ T8705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.476077][ T8705] ? clear_bhb_loop+0x70/0xc0 [ 197.476102][ T8705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.476125][ T8705] RIP: 0033:0x7f4e6ff9e159 [ 197.476144][ T8705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.476162][ T8705] RSP: 002b:00007f4e70e08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 197.476183][ T8705] RAX: ffffffffffffffda RBX: 00007f4e70225fa0 RCX: 00007f4e6ff9e159 [ 197.476199][ T8705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 197.476212][ T8705] RBP: 00007f4e7003506b R08: 0000000000000000 R09: 0000000000000000 [ 197.476226][ T8705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.476238][ T8705] R13: 00007f4e70226038 R14: 00007f4e70225fa0 R15: 00007ffeb802c958 [ 197.476270][ T8705] [ 197.699560][ C1] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 197.699624][ T5692] usb 6-1: USB disconnect, device number 15 [ 197.881708][ T6457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.881724][ T6457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.298906][ T8723] e1000 0000:00:01.0: can't ioremap BAR 0: [??? 0x00000000 flags 0x0] [ 199.342692][ T8723] e1000 0000:00:01.0: probe with driver e1000 failed with error -5 [ 199.544964][ T31] audit: type=1800 audit(1789579203.378:13): pid=8728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.919" name="file1" dev="tmpfs" ino=1636 res=0 errno=0 [ 199.958193][ T8743] rust_binder: 8737:8743 BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not pending [ 199.958234][ T8743] rust_binder: Write failure EINVAL in pid:437 [ 199.997466][ T8745] FAULT_INJECTION: forcing a failure. [ 199.997466][ T8745] name failslab, interval 1, probability 0, space 0, times 0 [ 199.997499][ T8745] CPU: 0 UID: 0 PID: 8745 Comm: syz.5.925 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.997525][ T8745] Tainted: [L]=SOFTLOCKUP [ 199.997533][ T8745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.997546][ T8745] Call Trace: [ 199.997555][ T8745] [ 199.997568][ T8745] dump_stack_lvl+0xe8/0x150 [ 199.997600][ T8745] should_fail_ex+0x3eb/0x540 [ 199.997629][ T8745] should_failslab+0xa8/0x100 [ 199.997652][ T8745] ? dup_fd+0x56/0xaf0 [ 199.997676][ T8745] kmem_cache_alloc_noprof+0x9c/0x600 [ 199.997707][ T8745] ? dup_fd+0x56/0xaf0 [ 199.997729][ T8745] ? do_futex+0x3e7/0x4e0 [ 199.997754][ T8745] dup_fd+0x56/0xaf0 [ 199.997776][ T8745] ? __pfx_do_futex+0x10/0x10 [ 199.997807][ T8745] __se_sys_close_range+0x1c1/0x8f0 [ 199.997841][ T8745] ? __pfx___se_sys_close_range+0x10/0x10 [ 199.997878][ T8745] do_syscall_64+0x166/0x520 [ 199.997897][ T8745] ? trace_irq_disable+0x3b/0x140 [ 199.997930][ T8745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.997951][ T8745] ? clear_bhb_loop+0x70/0xc0 [ 199.997975][ T8745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.997995][ T8745] RIP: 0033:0x7fade079e159 [ 199.998013][ T8745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.998039][ T8745] RSP: 002b:00007fade1725028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 199.998062][ T8745] RAX: ffffffffffffffda RBX: 00007fade0a25fa0 RCX: 00007fade079e159 [ 199.998078][ T8745] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 199.998093][ T8745] RBP: 00007fade083506b R08: 0000000000000000 R09: 0000000000000000 [ 199.998107][ T8745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.998120][ T8745] R13: 00007fade0a26038 R14: 00007fade0a25fa0 R15: 00007ffc3a3f7218 [ 199.998151][ T8745] [ 200.120794][ C1] net_ratelimit: 263 callbacks suppressed [ 200.141374][ T8747] FAULT_INJECTION: forcing a failure. [ 200.141374][ T8747] name failslab, interval 1, probability 0, space 0, times 0 [ 200.141404][ T8747] CPU: 1 UID: 0 PID: 8747 Comm: syz.6.926 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.141432][ T8747] Tainted: [L]=SOFTLOCKUP [ 200.141439][ T8747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.141455][ T8747] Call Trace: [ 200.141463][ T8747] [ 200.141472][ T8747] dump_stack_lvl+0xe8/0x150 [ 200.141504][ T8747] should_fail_ex+0x3eb/0x540 [ 200.141530][ T8747] should_failslab+0xa8/0x100 [ 200.141554][ T8747] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 200.141584][ T8747] ? __d_alloc+0x37/0x6f0 [ 200.141608][ T8747] ? __d_alloc+0x37/0x6f0 [ 200.141638][ T8747] __d_alloc+0x37/0x6f0 [ 200.141664][ T8747] ? sprintf+0xe7/0x140 [ 200.141687][ T8747] ? hashlen_string+0x54/0x110 [ 200.141712][ T8747] d_alloc_name+0xba/0x270 [ 200.141739][ T8747] ? __pfx_sprintf+0x10/0x10 [ 200.141764][ T8747] ? __pfx_d_alloc_name+0x10/0x10 [ 200.141799][ T8747] devpts_pty_new+0x2c4/0x5d0 [ 200.141827][ T8747] ? __pfx_devpts_pty_new+0x10/0x10 [ 200.141854][ T8747] ? do_raw_spin_unlock+0xf5/0x200 [ 200.141882][ T8747] ptmx_open+0x1c8/0x2e0 [ 200.141911][ T8747] chrdev_open+0x4d9/0x600 [ 200.141934][ T8747] ? __pfx_chrdev_open+0x10/0x10 [ 200.141955][ T8747] ? devcgroup_check_permission+0x31/0x8f0 [ 200.141986][ T8747] ? __pfx_chrdev_open+0x10/0x10 [ 200.142011][ T8747] do_dentry_open+0x80e/0x1360 [ 200.142044][ T8747] vfs_open_consume+0x4a/0x350 [ 200.142064][ T8747] ? path_openat+0x14bb/0x1e40 [ 200.142094][ T8747] path_openat+0x14d7/0x1e40 [ 200.142139][ T8747] do_file_open+0x23e/0x4a0 [ 200.142173][ T8747] ? __pfx_do_file_open+0x10/0x10 [ 200.142220][ T8747] ? _raw_spin_unlock+0x28/0x50 [ 200.142244][ T8747] ? alloc_fd+0x651/0x6c0 [ 200.142276][ T8747] do_sys_openat2+0x115/0x200 [ 200.142297][ T8747] ? __se_sys_futex+0x3a8/0x450 [ 200.142319][ T8747] ? __pfx_do_sys_openat2+0x10/0x10 [ 200.142346][ T8747] ? rcu_is_watching+0x16/0xb0 [ 200.142370][ T8747] __x64_sys_openat+0x138/0x170 [ 200.142395][ T8747] do_syscall_64+0x166/0x520 [ 200.142414][ T8747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.142434][ T8747] ? clear_bhb_loop+0x70/0xc0 [ 200.142457][ T8747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.142476][ T8747] RIP: 0033:0x7f37afd9e159 [ 200.142495][ T8747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.142511][ T8747] RSP: 002b:00007f37b0b88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 200.142533][ T8747] RAX: ffffffffffffffda RBX: 00007f37b0025fa0 RCX: 00007f37afd9e159 [ 200.142547][ T8747] RDX: 0000000000000100 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 200.142561][ T8747] RBP: 00007f37afe3506b R08: 0000000000000000 R09: 0000000000000000 [ 200.142574][ T8747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.142585][ T8747] R13: 00007f37b0026038 R14: 00007f37b0025fa0 R15: 00007ffedac16c88 [ 200.142615][ T8747] [ 200.580175][ T8754] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-61) [ 200.664711][ T123] rust_binder: 8737: undelivered freeze notification, 0000000000000000 [ 200.773802][ T8767] usb3503 0-0008: unknown mode is requested [ 200.773814][ T8767] usb3503 0-0008: usb3503_probe: probed in standby mode [ 200.778667][ T8767] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 200.868075][ T8769] gve 0000:00:00.0: Failed to map pci bar! [ 200.868138][ T8769] gve 0000:00:00.0: probe with driver gve failed with error -12 [ 201.056165][ T6457] IPVS: starting estimator thread 0... [ 201.130881][ T123] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 201.151367][ T8779] IPVS: using max 29 ests per chain, 69600 per kthread [ 201.269477][ T8788] FAULT_INJECTION: forcing a failure. [ 201.269477][ T8788] name failslab, interval 1, probability 0, space 0, times 0 [ 201.269508][ T8788] CPU: 1 UID: 60928 PID: 8788 Comm: syz.6.942 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.269534][ T8788] Tainted: [L]=SOFTLOCKUP [ 201.269542][ T8788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.269555][ T8788] Call Trace: [ 201.269563][ T8788] [ 201.269576][ T8788] dump_stack_lvl+0xe8/0x150 [ 201.269607][ T8788] should_fail_ex+0x3eb/0x540 [ 201.269636][ T8788] should_failslab+0xa8/0x100 [ 201.269660][ T8788] __kmalloc_cache_noprof+0x9e/0x600 [ 201.269692][ T8788] ? alloc_fs_context+0x66/0xd00 [ 201.269719][ T8788] ? alloc_fs_context+0x66/0xd00 [ 201.269752][ T8788] alloc_fs_context+0x66/0xd00 [ 201.269782][ T8788] ? bpf_lsm_namespace_init+0x9/0x20 [ 201.269813][ T8788] mq_init_ns+0x10d/0x770 [ 201.269844][ T8788] copy_ipcs+0x460/0x6c0 [ 201.269867][ T8788] create_new_namespaces+0x210/0x6b0 [ 201.269892][ T8788] ? security_capable+0x7e/0x2c0 [ 201.269919][ T8788] unshare_nsproxy_namespaces+0x144/0x190 [ 201.269944][ T8788] ksys_unshare+0x5a7/0x950 [ 201.269973][ T8788] ? __pfx_ksys_unshare+0x10/0x10 [ 201.269999][ T8788] ? rcu_is_watching+0x16/0xb0 [ 201.270029][ T8788] __x64_sys_unshare+0x38/0x50 [ 201.270053][ T8788] do_syscall_64+0x166/0x520 [ 201.270071][ T8788] ? trace_irq_disable+0x3b/0x140 [ 201.270099][ T8788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.270119][ T8788] ? clear_bhb_loop+0x70/0xc0 [ 201.270143][ T8788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.270163][ T8788] RIP: 0033:0x7f37afd9e159 [ 201.270181][ T8788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.270197][ T8788] RSP: 002b:00007f37b0b88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 201.270220][ T8788] RAX: ffffffffffffffda RBX: 00007f37b0025fa0 RCX: 00007f37afd9e159 [ 201.270236][ T8788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 201.270249][ T8788] RBP: 00007f37afe3506b R08: 0000000000000000 R09: 0000000000000000 [ 201.270262][ T8788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.270273][ T8788] R13: 00007f37b0026038 R14: 00007f37b0025fa0 R15: 00007ffedac16c88 [ 201.270299][ T8788] [ 201.342684][ T8771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.352533][ T8771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.397611][ T123] usb 5-1: unable to get BOS descriptor or descriptor too short [ 201.397653][ T123] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 201.461347][ T123] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 201.461379][ T123] usb 5-1: can't read configurations, error -71 [ 201.640591][ T5692] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 201.802313][ T5692] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 201.803225][ T5692] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.803245][ T5692] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.803298][ T5692] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.805183][ T5692] usb 7-1: config 0 descriptor?? [ 202.122199][ T8814] FAULT_INJECTION: forcing a failure. [ 202.122199][ T8814] name failslab, interval 1, probability 0, space 0, times 0 [ 202.122220][ T8814] CPU: 0 UID: 0 PID: 8814 Comm: syz.5.952 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.122240][ T8814] Tainted: [L]=SOFTLOCKUP [ 202.122248][ T8814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.122261][ T8814] Call Trace: [ 202.122269][ T8814] [ 202.122279][ T8814] dump_stack_lvl+0xe8/0x150 [ 202.122309][ T8814] should_fail_ex+0x3eb/0x540 [ 202.122333][ T8814] should_failslab+0xa8/0x100 [ 202.122345][ T8814] ? security_file_alloc+0x34/0x310 [ 202.122363][ T8814] kmem_cache_alloc_noprof+0x9c/0x600 [ 202.122378][ T8814] ? rcu_is_watching+0x16/0xb0 [ 202.122392][ T8814] ? security_file_alloc+0x34/0x310 [ 202.122427][ T8814] security_file_alloc+0x34/0x310 [ 202.122458][ T8814] init_file+0x90/0x2b0 [ 202.122480][ T8814] alloc_empty_file+0x74/0x1d0 [ 202.122492][ T8814] alloc_file_pseudo+0x110/0x1e0 [ 202.122513][ T8814] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 202.122525][ T8814] ? __kasan_kmalloc+0x93/0xb0 [ 202.122547][ T8814] anon_inode_getfile+0xc5/0x1a0 [ 202.122574][ T8814] sync_file_create+0x76/0x1c0 [ 202.122603][ T8814] sw_sync_ioctl+0xd19/0x10f0 [ 202.122634][ T8814] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 202.122649][ T8814] ? __fget_files+0x2a/0x420 [ 202.122665][ T8814] ? __fget_files+0x3a2/0x420 [ 202.122677][ T8814] ? __fget_files+0x2a/0x420 [ 202.122695][ T8814] ? bpf_lsm_file_ioctl+0x9/0x20 [ 202.122720][ T8814] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 202.122747][ T8814] __se_sys_ioctl+0xfc/0x170 [ 202.122778][ T8814] do_syscall_64+0x166/0x520 [ 202.122789][ T8814] ? trace_irq_disable+0x3b/0x140 [ 202.122804][ T8814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.122815][ T8814] ? clear_bhb_loop+0x70/0xc0 [ 202.122828][ T8814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.122841][ T8814] RIP: 0033:0x7fade079e159 [ 202.122859][ T8814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.122877][ T8814] RSP: 002b:00007fade1725028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.122899][ T8814] RAX: ffffffffffffffda RBX: 00007fade0a25fa0 RCX: 00007fade079e159 [ 202.122914][ T8814] RDX: 0000200000001d00 RSI: 00000000c0285700 RDI: 0000000000000004 [ 202.122926][ T8814] RBP: 00007fade083506b R08: 0000000000000000 R09: 0000000000000000 [ 202.122937][ T8814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.122949][ T8814] R13: 00007fade0a26038 R14: 00007fade0a25fa0 R15: 00007ffc3a3f7218 [ 202.122977][ T8814] [ 202.268800][ T5692] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 202.268829][ T5692] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 202.268854][ T5692] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 202.268879][ T5692] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 202.268904][ T5692] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 202.268928][ T5692] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 202.268953][ T5692] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 202.307455][ T5692] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 202.403258][ T123] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 202.456915][ T5692] cp2112 0003:10C4:EA90.0009: Part Number: 0x00 Device Version: 0x00 [ 202.560411][ T123] usb 5-1: Using ep0 maxpacket: 32 [ 202.562671][ T123] usb 5-1: unable to get BOS descriptor or descriptor too short [ 202.562713][ T123] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 202.563677][ T123] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 202.563697][ T123] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 202.563708][ T123] usb 5-1: config 14 has no interface number 0 [ 202.563717][ T123] usb 5-1: config 14 has no interface number 1 [ 202.563749][ T123] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 202.563771][ T123] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 202.563796][ T123] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 202.563821][ T123] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 202.563857][ T123] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 202.563871][ T123] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.563884][ T123] usb 5-1: config 14 interface 57 has no altsetting 0 [ 202.563893][ T123] usb 5-1: config 14 interface 228 has no altsetting 0 [ 202.567377][ T123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.567395][ T123] usb 5-1: Product: syz [ 202.567410][ T123] usb 5-1: Manufacturer: syz [ 202.567424][ T123] usb 5-1: SerialNumber: syz [ 203.009791][ T123] legousbtower 5-1:14.57: interrupt endpoints not found [ 203.063942][ T8793] cp2112 0003:10C4:EA90.0009: Error starting transaction: -38 [ 203.065953][ T5692] cp2112 0003:10C4:EA90.0009: error reading lock byte: -71 [ 203.092383][ T5692] usb 7-1: USB disconnect, device number 2 [ 203.413330][ T123] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 203.414917][ T123] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 203.656180][ T8836] FAULT_INJECTION: forcing a failure. [ 203.656180][ T8836] name failslab, interval 1, probability 0, space 0, times 0 [ 203.656198][ T8836] CPU: 0 UID: 0 PID: 8836 Comm: syz.6.960 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.656213][ T8836] Tainted: [L]=SOFTLOCKUP [ 203.656217][ T8836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.656225][ T8836] Call Trace: [ 203.656230][ T8836] [ 203.656235][ T8836] dump_stack_lvl+0xe8/0x150 [ 203.656255][ T8836] should_fail_ex+0x3eb/0x540 [ 203.656270][ T8836] should_failslab+0xa8/0x100 [ 203.656284][ T8836] __kmalloc_noprof+0xf9/0x710 [ 203.656299][ T8836] ? rcu_is_watching+0x16/0xb0 [ 203.656311][ T8836] ? tomoyo_realpath_from_path+0xef/0x640 [ 203.656324][ T8836] ? tomoyo_realpath_from_path+0xef/0x640 [ 203.656342][ T8836] tomoyo_realpath_from_path+0xef/0x640 [ 203.656356][ T8836] ? get_mm_exe_file+0x1c/0x170 [ 203.656373][ T8836] tomoyo_get_exe+0x60/0x90 [ 203.656389][ T8836] tomoyo_write_control+0x802/0x13d0 [ 203.656410][ T8836] ? tomoyo_write_control+0x175/0x13d0 [ 203.656432][ T8836] ? __pfx_tomoyo_write_control+0x10/0x10 [ 203.656451][ T8836] ? __pfx_tomoyo_write+0x10/0x10 [ 203.656464][ T8836] vfs_write+0x296/0xba0 [ 203.656483][ T8836] ? __pfx_vfs_write+0x10/0x10 [ 203.656499][ T8836] ? __fget_files+0x2a/0x420 [ 203.656514][ T8836] ? __fget_files+0x3a2/0x420 [ 203.656526][ T8836] ? __fget_files+0x2a/0x420 [ 203.656544][ T8836] ksys_write+0x150/0x270 [ 203.656559][ T8836] ? __pfx_ksys_write+0x10/0x10 [ 203.656580][ T8836] do_syscall_64+0x166/0x520 [ 203.656590][ T8836] ? trace_irq_disable+0x3b/0x140 [ 203.656605][ T8836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.656617][ T8836] ? clear_bhb_loop+0x70/0xc0 [ 203.656630][ T8836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.656641][ T8836] RIP: 0033:0x7f37afd9e159 [ 203.656652][ T8836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.656665][ T8836] RSP: 002b:00007f37b0b88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 203.656678][ T8836] RAX: ffffffffffffffda RBX: 00007f37b0025fa0 RCX: 00007f37afd9e159 [ 203.656687][ T8836] RDX: 0000000000000042 RSI: 0000200000000300 RDI: 0000000000000003 [ 203.656694][ T8836] RBP: 00007f37afe3506b R08: 0000000000000000 R09: 0000000000000000 [ 203.656701][ T8836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.656708][ T8836] R13: 00007f37b0026038 R14: 00007f37b0025fa0 R15: 00007ffedac16c88 [ 203.656726][ T8836] [ 203.656731][ T8836] ERROR: Out of memory at tomoyo_realpath_from_path. [ 204.268234][ C0] usb 5-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 204.281805][ T30] usb 5-1: USB disconnect, device number 18 [ 204.299864][ T30] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 205.310340][ C1] net_ratelimit: 89 callbacks suppressed [ 206.328759][ T123] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 206.359283][ T123] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 207.799619][ T31] audit: type=1800 audit(1789579211.628:14): pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.980" name="file0" dev="overlay" ino=1742 res=0 errno=0 [ 207.830553][ T31] audit: type=1804 audit(1789579211.658:15): pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.980" name="/newroot/319/bus/file0" dev="overlay" ino=1742 res=1 errno=0 [ 208.624200][ T8968] FAULT_INJECTION: forcing a failure. [ 208.624200][ T8968] name failslab, interval 1, probability 0, space 0, times 0 [ 208.624227][ T8968] CPU: 1 UID: 0 PID: 8968 Comm: syz.5.988 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.624250][ T8968] Tainted: [L]=SOFTLOCKUP [ 208.624257][ T8968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.624267][ T8968] Call Trace: [ 208.624274][ T8968] [ 208.624282][ T8968] dump_stack_lvl+0xe8/0x150 [ 208.624312][ T8968] should_fail_ex+0x3eb/0x540 [ 208.624337][ T8968] should_failslab+0xa8/0x100 [ 208.624360][ T8968] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 208.624386][ T8968] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 208.624410][ T8968] ? xas_split_alloc+0x19c/0x4c0 [ 208.624427][ T8968] ? xas_split_alloc+0x19c/0x4c0 [ 208.624453][ T8968] xas_split_alloc+0x19c/0x4c0 [ 208.624482][ T8968] __folio_split+0x8dd/0x1a40 [ 208.624515][ T8968] ? __pfx___folio_split+0x10/0x10 [ 208.624535][ T8968] ? __up_read+0x29c/0x930 [ 208.624556][ T8968] ? folio_alloc_swap+0x2cc/0x12e0 [ 208.624579][ T8968] shmem_writeout+0x571/0x17a0 [ 208.624602][ T8968] ? lock_acquire+0x115/0x350 [ 208.624625][ T8968] ? __pfx_shmem_writeout+0x10/0x10 [ 208.624643][ T8968] ? folio_mapping+0x16f/0x1f0 [ 208.624661][ T8968] ? folio_clear_dirty_for_io+0x162/0x820 [ 208.624688][ T8968] ? try_to_unmap_flush_dirty+0x96/0x100 [ 208.624714][ T8968] shrink_folio_list+0x33ee/0x5270 [ 208.624764][ T8968] ? __pfx_shrink_folio_list+0x10/0x10 [ 208.624788][ T8968] ? lock_acquire+0x115/0x350 [ 208.624820][ T8968] ? bad_range+0x8e/0x2a0 [ 208.624865][ T8968] ? __css_rstat_updated+0x237/0x540 [ 208.624908][ T8968] reclaim_folio_list+0x100/0x430 [ 208.624948][ T8968] ? __pfx_reclaim_folio_list+0x10/0x10 [ 208.624988][ T8968] reclaim_pages+0x452/0x530 [ 208.625023][ T8968] ? __pfx_reclaim_pages+0x10/0x10 [ 208.625057][ T8968] ? do_raw_spin_unlock+0xf5/0x200 [ 208.625084][ T8968] madvise_cold_or_pageout_pte_range+0x184d/0x2340 [ 208.625125][ T8968] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 208.625148][ T8968] ? __lock_acquire+0x747/0x2de0 [ 208.625192][ T8968] ? __lock_acquire+0x747/0x2de0 [ 208.625220][ T8968] walk_pgd_range+0x102d/0x1dc0 [ 208.625275][ T8968] ? __pfx_walk_pgd_range+0x10/0x10 [ 208.625306][ T8968] __walk_page_range+0x16d/0x720 [ 208.625331][ T8968] ? __lock_acquire+0x747/0x2de0 [ 208.625361][ T8968] ? is_bpf_text_address+0x292/0x2b0 [ 208.625391][ T8968] walk_page_range_vma_unsafe+0x309/0x410 [ 208.625420][ T8968] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 208.625449][ T8968] ? mlock_drain_local+0x79/0x490 [ 208.625483][ T8968] ? walk_page_range_vma+0x6b/0x90 [ 208.625508][ T8968] madvise_vma_behavior+0x2831/0x41c0 [ 208.625538][ T8968] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 208.625560][ T8968] ? __lock_acquire+0x747/0x2de0 [ 208.625601][ T8968] ? do_raw_spin_lock+0x12b/0x2f0 [ 208.625631][ T8968] ? rcu_is_watching+0x16/0xb0 [ 208.625652][ T8968] ? trace_hrtimer_start+0x82/0x200 [ 208.625679][ T8968] ? hrtimer_start_range_ns_common+0x812/0xb90 [ 208.625714][ T8968] ? finish_task_switch+0x40e/0xc60 [ 208.625736][ T8968] ? lockdep_hardirqs_on+0x7b/0x110 [ 208.625766][ T8968] ? rcu_is_watching+0x16/0xb0 [ 208.625787][ T8968] ? trace_sched_exit_tp+0x3a/0x130 [ 208.625828][ T8968] ? mas_prev_slot+0xb76/0xbf0 [ 208.625871][ T8968] ? find_vma_prev+0x123/0x1b0 [ 208.625899][ T8968] ? __pfx_find_vma_prev+0x10/0x10 [ 208.625919][ T8968] ? futex_unqueue+0x22/0x240 [ 208.625944][ T8968] ? __futex_wait+0x3c7/0x470 [ 208.625975][ T8968] madvise_walk_vmas+0x576/0xb00 [ 208.626007][ T8968] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 208.626032][ T8968] ? blk_start_plug+0x6e/0x1b0 [ 208.626055][ T8968] madvise_do_behavior+0x385/0x540 [ 208.626080][ T8968] ? __pfx_madvise_do_behavior+0x10/0x10 [ 208.626105][ T8968] ? down_read+0x2b9/0x320 [ 208.626135][ T8968] do_madvise+0x327/0x3a0 [ 208.626176][ T8968] ? __pfx_do_madvise+0x10/0x10 [ 208.626217][ T8968] ? __se_sys_futex+0x3a8/0x450 [ 208.626247][ T8968] ? rcu_is_watching+0x16/0xb0 [ 208.626276][ T8968] __x64_sys_madvise+0xa6/0xc0 [ 208.626297][ T8968] do_syscall_64+0x166/0x520 [ 208.626315][ T8968] ? trace_irq_disable+0x3b/0x140 [ 208.626342][ T8968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.626363][ T8968] ? clear_bhb_loop+0x70/0xc0 [ 208.626386][ T8968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.626405][ T8968] RIP: 0033:0x7fade079e159 [ 208.626423][ T8968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.626441][ T8968] RSP: 002b:00007fade1725028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 208.626464][ T8968] RAX: ffffffffffffffda RBX: 00007fade0a25fa0 RCX: 00007fade079e159 [ 208.626480][ T8968] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000 [ 208.626493][ T8968] RBP: 00007fade083506b R08: 0000000000000000 R09: 0000000000000000 [ 208.626506][ T8968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.626520][ T8968] R13: 00007fade0a26038 R14: 00007fade0a25fa0 R15: 00007ffc3a3f7218 [ 208.626551][ T8968] [ 208.694870][ T8971] fuse: Bad value for 'fd' [ 209.218683][ T8976] FAULT_INJECTION: forcing a failure. [ 209.218683][ T8976] name failslab, interval 1, probability 0, space 0, times 0 [ 209.218714][ T8976] CPU: 1 UID: 0 PID: 8976 Comm: syz.0.990 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.218741][ T8976] Tainted: [L]=SOFTLOCKUP [ 209.218748][ T8976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.218759][ T8976] Call Trace: [ 209.218767][ T8976] [ 209.218776][ T8976] dump_stack_lvl+0xe8/0x150 [ 209.218803][ T8976] should_fail_ex+0x3eb/0x540 [ 209.218824][ T8976] ? __alloc_skb+0x1db/0x7a0 [ 209.218839][ T8976] should_failslab+0xa8/0x100 [ 209.218860][ T8976] ? __alloc_skb+0x1db/0x7a0 [ 209.218873][ T8976] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 209.218896][ T8976] ? rcu_is_watching+0x16/0xb0 [ 209.218912][ T8976] ? __alloc_skb+0x1db/0x7a0 [ 209.218932][ T8976] __alloc_skb+0x1db/0x7a0 [ 209.218950][ T8976] tipc_msg_create+0x4c/0x4c0 [ 209.218972][ T8976] ? tipc_own_addr+0x45/0x2a0 [ 209.218987][ T8976] ? tipc_own_addr+0x45/0x2a0 [ 209.219004][ T8976] tipc_group_create_event+0x1f3/0x660 [ 209.219027][ T8976] ? __pfx_tipc_group_create_event+0x10/0x10 [ 209.219049][ T8976] ? tipc_group_proto_rcv+0x10e6/0x1e60 [ 209.219079][ T8976] tipc_sk_proto_rcv+0x281/0x1810 [ 209.219107][ T8976] ? tipc_loopback_trace+0x48/0x1b0 [ 209.219132][ T8976] ? __pfx_tipc_sk_proto_rcv+0x10/0x10 [ 209.219150][ T8976] ? __raw_spin_lock_init+0x45/0x100 [ 209.219171][ T8976] ? tipc_node_xmit+0x205/0xf10 [ 209.219192][ T8976] ? tipc_sk_filtering+0x13c/0x510 [ 209.219214][ T8976] tipc_sk_filter_rcv+0x2fd7/0x3210 [ 209.219233][ T8976] ? __pfx_tipc_node_xmit+0x10/0x10 [ 209.219271][ T8976] ? __alloc_skb+0x27a/0x7a0 [ 209.219284][ T8976] ? trace_kmem_cache_alloc+0x29/0xe0 [ 209.219319][ T8976] ? __pfx_tipc_node_distr_xmit+0x10/0x10 [ 209.219342][ T8976] ? __pfx_tipc_sk_filter_rcv+0x10/0x10 [ 209.219379][ T8976] tipc_sk_backlog_rcv+0x13b/0x270 [ 209.219401][ T8976] ? __pfx_tipc_sk_backlog_rcv+0x10/0x10 [ 209.219426][ T8976] ? __release_sock+0xa9/0x390 [ 209.219446][ T8976] ? __local_bh_enable_ip+0xd6/0x140 [ 209.219466][ T8976] ? __pfx_tipc_sk_backlog_rcv+0x10/0x10 [ 209.219484][ T8976] __release_sock+0x286/0x390 [ 209.219508][ T8976] release_sock+0x190/0x260 [ 209.219532][ T8976] tipc_setsockopt+0x7a9/0x9a0 [ 209.219556][ T8976] ? __pfx_tipc_setsockopt+0x10/0x10 [ 209.219578][ T8976] ? aa_sock_opt_perm+0x142/0x1e0 [ 209.219606][ T8976] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 209.219624][ T8976] ? __pfx_tipc_setsockopt+0x10/0x10 [ 209.219646][ T8976] do_sock_setsockopt+0x17c/0x1b0 [ 209.219665][ T8976] __x64_sys_setsockopt+0x13d/0x1b0 [ 209.219686][ T8976] do_syscall_64+0x166/0x520 [ 209.219701][ T8976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.219718][ T8976] ? clear_bhb_loop+0x70/0xc0 [ 209.219737][ T8976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.219752][ T8976] RIP: 0033:0x7f4e6ff9e159 [ 209.219767][ T8976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.219781][ T8976] RSP: 002b:00007f4e70e08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 209.219803][ T8976] RAX: ffffffffffffffda RBX: 00007f4e70225fa0 RCX: 00007f4e6ff9e159 [ 209.219815][ T8976] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 209.219825][ T8976] RBP: 00007f4e7003506b R08: 0000000000000010 R09: 0000000000000000 [ 209.219836][ T8976] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 209.219847][ T8976] R13: 00007f4e70226038 R14: 00007f4e70225fa0 R15: 00007ffeb802c958 [ 209.219871][ T8976] [ 209.632178][ T8982] tipc: Failed to remove unknown binding: 66,1,1/0:2900071097/2900071099 [ 209.671531][ T8985] kvm: MWAIT instruction emulated as NOP! [ 210.079031][ T9005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.087975][ T9005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.510328][ C0] net_ratelimit: 79 callbacks suppressed [ 210.638555][ T9031] block2mtd: error: cannot open device /dev/ram0 [ 210.961124][ T9047] Value of "id" is too big. [ 211.833007][ T9085] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 212.316123][ T9091] syzkaller1: entered promiscuous mode [ 212.316139][ T9091] syzkaller1: entered allmulticast mode [ 212.416728][ T9099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.435582][ T9099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.368202][ T9126] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 214.244192][ T9146] FAULT_INJECTION: forcing a failure. [ 214.244192][ T9146] name failslab, interval 1, probability 0, space 0, times 0 [ 214.244220][ T9146] CPU: 1 UID: 0 PID: 9146 Comm: syz.6.1043 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.244247][ T9146] Tainted: [L]=SOFTLOCKUP [ 214.244256][ T9146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.244268][ T9146] Call Trace: [ 214.244276][ T9146] [ 214.244286][ T9146] dump_stack_lvl+0xe8/0x150 [ 214.244315][ T9146] should_fail_ex+0x3eb/0x540 [ 214.244342][ T9146] should_failslab+0xa8/0x100 [ 214.244366][ T9146] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 214.244394][ T9146] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 214.244419][ T9146] ? xas_split_alloc+0x19c/0x4c0 [ 214.244438][ T9146] ? xas_split_alloc+0x19c/0x4c0 [ 214.244464][ T9146] xas_split_alloc+0x19c/0x4c0 [ 214.244495][ T9146] __folio_split+0x8dd/0x1a40 [ 214.244535][ T9146] ? __pfx___folio_split+0x10/0x10 [ 214.244561][ T9146] ? __up_read+0x29c/0x930 [ 214.244586][ T9146] ? folio_alloc_swap+0x2cc/0x12e0 [ 214.244614][ T9146] shmem_writeout+0x571/0x17a0 [ 214.244638][ T9146] ? lock_acquire+0x115/0x350 [ 214.244667][ T9146] ? __pfx_shmem_writeout+0x10/0x10 [ 214.244689][ T9146] ? folio_mapping+0x16f/0x1f0 [ 214.244711][ T9146] ? folio_clear_dirty_for_io+0x162/0x820 [ 214.244742][ T9146] ? try_to_unmap_flush_dirty+0x96/0x100 [ 214.244771][ T9146] shrink_folio_list+0x33ee/0x5270 [ 214.244821][ T9146] ? __pfx_shrink_folio_list+0x10/0x10 [ 214.244849][ T9146] ? __kernel_text_address+0xd/0x30 [ 214.244882][ T9146] ? __lock_acquire+0x747/0x2de0 [ 214.244940][ T9146] ? __css_rstat_updated+0x237/0x540 [ 214.244987][ T9146] reclaim_folio_list+0x100/0x430 [ 214.245027][ T9146] ? __pfx_reclaim_folio_list+0x10/0x10 [ 214.245077][ T9146] reclaim_pages+0x452/0x530 [ 214.245113][ T9146] ? __pfx_reclaim_pages+0x10/0x10 [ 214.245143][ T9146] ? do_raw_spin_unlock+0xf5/0x200 [ 214.245169][ T9146] madvise_cold_or_pageout_pte_range+0x184d/0x2340 [ 214.245190][ T9146] ? lock_acquire+0x115/0x350 [ 214.245225][ T9146] ? mod_memcg_lruvec_state+0xd5/0x270 [ 214.245252][ T9146] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 214.245269][ T9146] ? mod_memcg_lruvec_state+0xd5/0x270 [ 214.245295][ T9146] ? lru_gen_update_size+0x718/0xcf0 [ 214.245325][ T9146] ? __mod_zone_page_state+0xd5/0x140 [ 214.245351][ T9146] walk_pgd_range+0x102d/0x1dc0 [ 214.245402][ T9146] ? __pfx_walk_pgd_range+0x10/0x10 [ 214.245424][ T9146] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 214.245456][ T9146] __walk_page_range+0x16d/0x720 [ 214.245496][ T9146] walk_page_range_vma_unsafe+0x309/0x410 [ 214.245525][ T9146] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 214.245552][ T9146] ? mlock_drain_local+0x79/0x490 [ 214.245584][ T9146] ? walk_page_range_vma+0x6b/0x90 [ 214.245609][ T9146] madvise_vma_behavior+0x2831/0x41c0 [ 214.245640][ T9146] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 214.245661][ T9146] ? __lock_acquire+0x747/0x2de0 [ 214.245700][ T9146] ? do_raw_spin_lock+0x12b/0x2f0 [ 214.245731][ T9146] ? rcu_is_watching+0x16/0xb0 [ 214.245751][ T9146] ? trace_hrtimer_start+0x82/0x200 [ 214.245779][ T9146] ? hrtimer_start_range_ns_common+0x83b/0xb90 [ 214.245813][ T9146] ? finish_task_switch+0x40e/0xc60 [ 214.245835][ T9146] ? lockdep_hardirqs_on+0x7b/0x110 [ 214.245866][ T9146] ? rcu_is_watching+0x16/0xb0 [ 214.245886][ T9146] ? trace_sched_exit_tp+0x3a/0x130 [ 214.245925][ T9146] ? mas_prev_slot+0xb76/0xbf0 [ 214.245967][ T9146] ? find_vma_prev+0x123/0x1b0 [ 214.245992][ T9146] ? __pfx_find_vma_prev+0x10/0x10 [ 214.246014][ T9146] ? futex_unqueue+0x22/0x240 [ 214.246039][ T9146] ? __futex_wait+0x3c7/0x470 [ 214.246079][ T9146] madvise_walk_vmas+0x576/0xb00 [ 214.246111][ T9146] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 214.246138][ T9146] ? blk_start_plug+0x6e/0x1b0 [ 214.246161][ T9146] madvise_do_behavior+0x385/0x540 [ 214.246186][ T9146] ? __pfx_madvise_do_behavior+0x10/0x10 [ 214.246212][ T9146] ? down_read+0x2b9/0x320 [ 214.246240][ T9146] do_madvise+0x327/0x3a0 [ 214.246272][ T9146] ? __pfx_do_madvise+0x10/0x10 [ 214.246312][ T9146] ? __se_sys_futex+0x3a8/0x450 [ 214.246340][ T9146] ? rcu_is_watching+0x16/0xb0 [ 214.246367][ T9146] __x64_sys_madvise+0xa6/0xc0 [ 214.246388][ T9146] do_syscall_64+0x166/0x520 [ 214.246413][ T9146] ? trace_irq_disable+0x3b/0x140 [ 214.246441][ T9146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.246462][ T9146] ? clear_bhb_loop+0x70/0xc0 [ 214.246485][ T9146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.246504][ T9146] RIP: 0033:0x7f37afd9e159 [ 214.246524][ T9146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.246541][ T9146] RSP: 002b:00007f37b0b88028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 214.246563][ T9146] RAX: ffffffffffffffda RBX: 00007f37b0025fa0 RCX: 00007f37afd9e159 [ 214.246578][ T9146] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000 [ 214.246592][ T9146] RBP: 00007f37afe3506b R08: 0000000000000000 R09: 0000000000000000 [ 214.246605][ T9146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.246618][ T9146] R13: 00007f37b0026038 R14: 00007f37b0025fa0 R15: 00007ffedac16c88 [ 214.246649][ T9146] [ 214.559060][ T123] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 214.805411][ T123] usb 5-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=61.47 [ 214.808659][ T123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.830154][ T123] usb 5-1: config 0 descriptor?? [ 214.863198][ T123] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 215.040374][ T5691] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 215.190415][ T5691] usb 6-1: Using ep0 maxpacket: 32 [ 215.195738][ T5691] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 215.206092][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.206111][ T5691] usb 6-1: Product: syz [ 215.206123][ T5691] usb 6-1: Manufacturer: syz [ 215.206157][ T5691] usb 6-1: SerialNumber: syz [ 215.209582][ T5691] usb 6-1: config 0 descriptor?? [ 215.550357][ C0] net_ratelimit: 82 callbacks suppressed [ 215.624019][ T5691] airspy 6-1:0.0: Board ID: 00 [ 215.624033][ T5691] airspy 6-1:0.0: Firmware version: [ 215.867955][ T123] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 216.041132][ T9175] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 216.327730][ T123] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 216.334799][ T123] usb 5-1: USB disconnect, device number 19 [ 216.649061][ T5691] airspy 6-1:0.0: Registered as swradio24 [ 216.649072][ T5691] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 216.871921][ T5691] usb 6-1: USB disconnect, device number 16 [ 216.998711][ T9193] FAULT_INJECTION: forcing a failure. [ 216.998711][ T9193] name fail_futex, interval 1, probability 0, space 0, times 1 [ 216.998740][ T9193] CPU: 1 UID: 0 PID: 9193 Comm: syz.0.1062 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.998767][ T9193] Tainted: [L]=SOFTLOCKUP [ 216.998774][ T9193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.998786][ T9193] Call Trace: [ 216.998794][ T9193] [ 216.998803][ T9193] dump_stack_lvl+0xe8/0x150 [ 216.998833][ T9193] should_fail_ex+0x3eb/0x540 [ 216.998861][ T9193] get_futex_key+0x1b4/0x1580 [ 216.998903][ T9193] ? __pfx_get_futex_key+0x10/0x10 [ 216.998931][ T9193] ? kasan_save_free_info+0x40/0x50 [ 216.998955][ T9193] ? __kasan_slab_free+0x5c/0x80 [ 216.998974][ T9193] ? kfree+0x1c5/0x650 [ 216.998997][ T9193] ? __se_sys_add_key+0x3a3/0x420 [ 216.999025][ T9193] ? do_syscall_64+0x166/0x520 [ 216.999043][ T9193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.999072][ T9193] futex_wake+0x119/0x5f0 [ 216.999101][ T9193] ? __pfx_futex_wake+0x10/0x10 [ 216.999140][ T9193] do_futex+0x458/0x4e0 [ 216.999166][ T9193] ? __pfx_do_futex+0x10/0x10 [ 216.999187][ T9193] ? rcu_is_watching+0x16/0xb0 [ 216.999212][ T9193] __se_sys_futex+0x3a8/0x450 [ 216.999240][ T9193] ? __pfx___se_sys_futex+0x10/0x10 [ 216.999267][ T9193] ? __x64_sys_futex+0x21/0xf0 [ 216.999292][ T9193] do_syscall_64+0x166/0x520 [ 216.999309][ T9193] ? trace_irq_disable+0x3b/0x140 [ 216.999343][ T9193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.999364][ T9193] ? clear_bhb_loop+0x70/0xc0 [ 216.999390][ T9193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.999409][ T9193] RIP: 0033:0x7f4e6ff9e159 [ 216.999428][ T9193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.999445][ T9193] RSP: 002b:00007f4e70e080e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 216.999467][ T9193] RAX: ffffffffffffffda RBX: 00007f4e70225fa8 RCX: 00007f4e6ff9e159 [ 216.999482][ T9193] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4e70225fac [ 216.999496][ T9193] RBP: 00007f4e70225fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 216.999510][ T9193] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 216.999523][ T9193] R13: 00007f4e70226038 R14: 00007ffeb802c870 R15: 00007ffeb802c958 [ 216.999550][ T9193] [ 219.450901][ T123] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 219.619112][ T123] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 219.620244][ T123] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 219.620311][ T123] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 219.620330][ T123] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 219.620388][ T123] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 219.620411][ T123] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 219.682305][ T123] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 219.682324][ T123] usb 7-1: Product: syz [ 219.682338][ T123] usb 7-1: Manufacturer: syz [ 219.687880][ T123] cdc_wdm 7-1:1.0: skipping garbage [ 219.687894][ T123] cdc_wdm 7-1:1.0: skipping garbage [ 219.690096][ T123] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 219.690112][ T123] cdc_wdm 7-1:1.0: Unknown control protocol [ 219.811300][ T9259] kAFS: unable to lookup cell 'testcell' [ 220.075851][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 220.075974][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 220.076406][ T123] usb 7-1: USB disconnect, device number 3 [ 220.079171][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 220.079193][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 220.079211][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 220.188974][ T6455] IPVS: starting estimator thread 0... [ 220.270569][ T9271] IPVS: using max 34 ests per chain, 81600 per kthread [ 220.725635][ T9287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.728541][ T9287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.750335][ C0] net_ratelimit: 92 callbacks suppressed [ 221.128596][ T9294] FAULT_INJECTION: forcing a failure. [ 221.128596][ T9294] name failslab, interval 1, probability 0, space 0, times 0 [ 221.128626][ T9294] CPU: 0 UID: 0 PID: 9294 Comm: syz.4.1096 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.128655][ T9294] Tainted: [L]=SOFTLOCKUP [ 221.128663][ T9294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.128676][ T9294] Call Trace: [ 221.128685][ T9294] [ 221.128694][ T9294] dump_stack_lvl+0xe8/0x150 [ 221.128726][ T9294] should_fail_ex+0x3eb/0x540 [ 221.128754][ T9294] should_failslab+0xa8/0x100 [ 221.128779][ T9294] __kmalloc_node_noprof+0xfb/0x720 [ 221.128810][ T9294] ? crypto_create_tfm_node+0x81/0x3c0 [ 221.128839][ T9294] ? crypto_create_tfm_node+0x81/0x3c0 [ 221.128885][ T9294] crypto_create_tfm_node+0x81/0x3c0 [ 221.128920][ T9294] crypto_alloc_tfm_node+0x169/0x3e0 [ 221.128950][ T9294] init_skcipher_req+0x23/0x1c0 [ 221.128980][ T9294] encrypted_read+0x2ff/0xe70 [ 221.129019][ T9294] ? __pfx_encrypted_read+0x10/0x10 [ 221.129052][ T9294] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 221.129078][ T9294] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 221.129101][ T9294] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 221.129132][ T9294] ? lock_acquire+0x115/0x350 [ 221.129177][ T9294] ? down_read+0x2b9/0x320 [ 221.129203][ T9294] keyctl_read_key+0x29d/0x490 [ 221.129236][ T9294] __se_sys_keyctl+0x38f/0xbc0 [ 221.129259][ T9294] ? __pfx___se_sys_keyctl+0x10/0x10 [ 221.129282][ T9294] ? __pfx_do_futex+0x10/0x10 [ 221.129302][ T9294] ? vm_mmap_pgoff+0x35a/0x4e0 [ 221.129322][ T9294] ? lock_acquire+0x115/0x350 [ 221.129356][ T9294] ? __se_sys_futex+0x3a8/0x450 [ 221.129386][ T9294] ? rcu_is_watching+0x16/0xb0 [ 221.129415][ T9294] ? __x64_sys_keyctl+0x20/0xc0 [ 221.129437][ T9294] do_syscall_64+0x166/0x520 [ 221.129456][ T9294] ? trace_irq_disable+0x3b/0x140 [ 221.129483][ T9294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.129504][ T9294] ? clear_bhb_loop+0x70/0xc0 [ 221.129529][ T9294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.129549][ T9294] RIP: 0033:0x7fbe23d9e159 [ 221.129566][ T9294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.129584][ T9294] RSP: 002b:00007fbe24cb2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 221.129605][ T9294] RAX: ffffffffffffffda RBX: 00007fbe24025fa0 RCX: 00007fbe23d9e159 [ 221.129620][ T9294] RDX: 0000200000000240 RSI: 000000001bb4c6f3 RDI: 000000000000000b [ 221.129634][ T9294] RBP: 00007fbe23e3506b R08: 0000000000000000 R09: 0000000000000000 [ 221.129648][ T9294] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 221.129661][ T9294] R13: 00007fbe24026038 R14: 00007fbe24025fa0 R15: 00007ffc85febf48 [ 221.129693][ T9294] [ 221.165242][ T9292] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 221.193619][ T9294] trusted_key: encrypted_key: failed to load cbc(aes) transform (-12) [ 221.410541][ T5612] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 221.560690][ T9303] FAULT_INJECTION: forcing a failure. [ 221.560690][ T9303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.560720][ T9303] CPU: 0 UID: 0 PID: 9303 Comm: syz.4.1100 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.560746][ T9303] Tainted: [L]=SOFTLOCKUP [ 221.560754][ T9303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.560766][ T9303] Call Trace: [ 221.560774][ T9303] [ 221.560784][ T9303] dump_stack_lvl+0xe8/0x150 [ 221.560816][ T9303] should_fail_ex+0x3eb/0x540 [ 221.560856][ T9303] _copy_from_user+0x2d/0xb0 [ 221.560885][ T9303] ucma_set_option+0xf9/0xce0 [ 221.560915][ T9303] ? __pfx_ucma_set_option+0x10/0x10 [ 221.560936][ T9303] ? __lock_acquire+0x747/0x2de0 [ 221.560972][ T9303] ? aa_file_perm+0x4ed/0x15f0 [ 221.560998][ T9303] ? aa_file_perm+0x18b/0x15f0 [ 221.561032][ T9303] ? lock_acquire+0x115/0x350 [ 221.561071][ T9303] ? __might_fault+0xaf/0x130 [ 221.561101][ T9303] ucma_write+0x249/0x2f0 [ 221.561124][ T9303] ? __pfx_ucma_write+0x10/0x10 [ 221.561142][ T9303] ? security_file_permission+0x75/0x260 [ 221.561172][ T9303] ? rw_verify_area+0x203/0x4c0 [ 221.561198][ T9303] ? __pfx_ucma_write+0x10/0x10 [ 221.561219][ T9303] vfs_write+0x296/0xba0 [ 221.561254][ T9303] ? __pfx_vfs_write+0x10/0x10 [ 221.561281][ T9303] ? __fget_files+0x2a/0x420 [ 221.561308][ T9303] ? __fget_files+0x2a/0x420 [ 221.561330][ T9303] ? __fget_files+0x3a2/0x420 [ 221.561350][ T9303] ? __fget_files+0x2a/0x420 [ 221.561379][ T9303] ksys_write+0x150/0x270 [ 221.561408][ T9303] ? __pfx_ksys_write+0x10/0x10 [ 221.561443][ T9303] do_syscall_64+0x166/0x520 [ 221.561462][ T9303] ? trace_irq_disable+0x3b/0x140 [ 221.561489][ T9303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.561510][ T9303] ? clear_bhb_loop+0x70/0xc0 [ 221.561534][ T9303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.561553][ T9303] RIP: 0033:0x7fbe23d9e159 [ 221.561572][ T9303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.561590][ T9303] RSP: 002b:00007fbe24cb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 221.561615][ T9303] RAX: ffffffffffffffda RBX: 00007fbe24025fa0 RCX: 00007fbe23d9e159 [ 221.561630][ T9303] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000004 [ 221.561644][ T9303] RBP: 00007fbe23e3506b R08: 0000000000000000 R09: 0000000000000000 [ 221.561657][ T9303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.561669][ T9303] R13: 00007fbe24026038 R14: 00007fbe24025fa0 R15: 00007ffc85febf48 [ 221.561700][ T9303] [ 222.162352][ T9322] FAULT_INJECTION: forcing a failure. [ 222.162352][ T9322] name failslab, interval 1, probability 0, space 0, times 0 [ 222.162382][ T9322] CPU: 0 UID: 0 PID: 9322 Comm: syz.0.1107 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.162409][ T9322] Tainted: [L]=SOFTLOCKUP [ 222.162417][ T9322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.162430][ T9322] Call Trace: [ 222.162438][ T9322] [ 222.162447][ T9322] dump_stack_lvl+0xe8/0x150 [ 222.162479][ T9322] should_fail_ex+0x3eb/0x540 [ 222.162509][ T9322] should_failslab+0xa8/0x100 [ 222.162533][ T9322] __kmalloc_cache_node_noprof+0xa5/0x620 [ 222.162564][ T9322] ? sbitmap_queue_init_node+0x1dc/0x4d0 [ 222.162593][ T9322] ? sbitmap_queue_init_node+0x1dc/0x4d0 [ 222.162628][ T9322] sbitmap_queue_init_node+0x1dc/0x4d0 [ 222.162659][ T9322] blk_mq_init_tags+0x15c/0x2d0 [ 222.162691][ T9322] blk_mq_alloc_map_and_rqs+0xbc/0x980 [ 222.162714][ T9322] ? kfree+0x1c5/0x650 [ 222.162737][ T9322] ? blk_mq_map_queues+0x3ea/0x490 [ 222.162762][ T9322] ? blk_mq_map_queues+0x3ea/0x490 [ 222.162786][ T9322] blk_mq_alloc_set_map_and_rqs+0x1a0/0x810 [ 222.162820][ T9322] blk_mq_alloc_tag_set+0x8e5/0x1000 [ 222.162855][ T9322] loop_add+0x436/0xb40 [ 222.162882][ T9322] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 222.162904][ T9322] ? __pfx_loop_add+0x10/0x10 [ 222.162957][ T9322] loop_control_ioctl+0x12b/0x5a0 [ 222.162986][ T9322] ? __fget_files+0x2a/0x420 [ 222.163010][ T9322] ? __pfx_loop_control_ioctl+0x10/0x10 [ 222.163036][ T9322] ? __fget_files+0x2a/0x420 [ 222.163063][ T9322] ? bpf_lsm_file_ioctl+0x9/0x20 [ 222.163087][ T9322] ? __pfx_loop_control_ioctl+0x10/0x10 [ 222.163115][ T9322] __se_sys_ioctl+0xfc/0x170 [ 222.163147][ T9322] do_syscall_64+0x166/0x520 [ 222.163165][ T9322] ? trace_irq_disable+0x3b/0x140 [ 222.163193][ T9322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.163212][ T9322] ? clear_bhb_loop+0x70/0xc0 [ 222.163236][ T9322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.163256][ T9322] RIP: 0033:0x7f4e6ff9e159 [ 222.163275][ T9322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.163300][ T9322] RSP: 002b:00007f4e70e08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.163321][ T9322] RAX: ffffffffffffffda RBX: 00007f4e70225fa0 RCX: 00007f4e6ff9e159 [ 222.163337][ T9322] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 222.163351][ T9322] RBP: 00007f4e7003506b R08: 0000000000000000 R09: 0000000000000000 [ 222.163363][ T9322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.163376][ T9322] R13: 00007f4e70226038 R14: 00007f4e70225fa0 R15: 00007ffeb802c958 [ 222.163406][ T9322] [ 222.163675][ T9322] blk-mq: reduced tag depth (128 -> 64) [ 223.656630][ T9340] FAULT_INJECTION: forcing a failure. [ 223.656630][ T9340] name failslab, interval 1, probability 0, space 0, times 0 [ 223.656657][ T9340] CPU: 0 UID: 0 PID: 9340 Comm: syz.5.1113 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.656682][ T9340] Tainted: [L]=SOFTLOCKUP [ 223.656689][ T9340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.656710][ T9340] Call Trace: [ 223.656719][ T9340] [ 223.656729][ T9340] dump_stack_lvl+0xe8/0x150 [ 223.656761][ T9340] should_fail_ex+0x3eb/0x540 [ 223.656787][ T9340] ? __pfx_proc_alloc_inode+0x10/0x10 [ 223.656816][ T9340] should_failslab+0xa8/0x100 [ 223.656839][ T9340] ? __pfx_proc_alloc_inode+0x10/0x10 [ 223.656863][ T9340] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 223.656891][ T9340] ? proc_alloc_inode+0x2a/0xc0 [ 223.656917][ T9340] ? proc_alloc_inode+0x2a/0xc0 [ 223.656951][ T9340] ? __pfx_proc_alloc_inode+0x10/0x10 [ 223.656978][ T9340] proc_alloc_inode+0x2a/0xc0 [ 223.657007][ T9340] alloc_inode+0x6a/0x1b0 [ 223.657031][ T9340] new_inode+0x1f/0x170 [ 223.657058][ T9340] proc_sys_make_inode+0x50/0x4e0 [ 223.657076][ T9340] ? do_raw_spin_unlock+0xf5/0x200 [ 223.657105][ T9340] proc_sys_lookup+0x32f/0x720 [ 223.657128][ T9340] __lookup_slow+0x1fb/0x2f0 [ 223.657160][ T9340] lookup_slow+0x53/0x70 [ 223.657186][ T9340] link_path_walk+0xd2a/0x1910 [ 223.657226][ T9340] path_lookupat+0xe4/0x8c0 [ 223.657267][ T9340] filename_lookup+0x265/0x5d0 [ 223.657290][ T9340] ? do_syscall_64+0x166/0x520 [ 223.657315][ T9340] ? __pfx_filename_lookup+0x10/0x10 [ 223.657360][ T9340] ? lock_acquire+0x115/0x350 [ 223.657397][ T9340] filename_setxattr+0xc2/0x630 [ 223.657425][ T9340] ? __might_fault+0xaf/0x130 [ 223.657453][ T9340] ? __pfx_filename_setxattr+0x10/0x10 [ 223.657481][ T9340] ? do_getname+0x151/0x250 [ 223.657506][ T9340] path_setxattrat+0x408/0x450 [ 223.657534][ T9340] ? __pfx_path_setxattrat+0x10/0x10 [ 223.657549][ T9340] ? do_futex+0x3e7/0x4e0 [ 223.657592][ T9340] ? rcu_is_watching+0x16/0xb0 [ 223.657618][ T9340] __x64_sys_setxattr+0xbc/0xe0 [ 223.657645][ T9340] do_syscall_64+0x166/0x520 [ 223.657662][ T9340] ? trace_irq_disable+0x3b/0x140 [ 223.657688][ T9340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.657716][ T9340] ? clear_bhb_loop+0x70/0xc0 [ 223.657741][ T9340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.657760][ T9340] RIP: 0033:0x7fade079e159 [ 223.657779][ T9340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.657796][ T9340] RSP: 002b:00007fade1725028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 223.657819][ T9340] RAX: ffffffffffffffda RBX: 00007fade0a25fa0 RCX: 00007fade079e159 [ 223.657833][ T9340] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000200000000040 [ 223.657848][ T9340] RBP: 00007fade083506b R08: 0000000000000003 R09: 0000000000000000 [ 223.657860][ T9340] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 223.657871][ T9340] R13: 00007fade0a26038 R14: 00007fade0a25fa0 R15: 00007ffc3a3f7218 [ 223.657900][ T9340] [ 224.597915][ T9364] CIFS: Attempting to mount //127.0.0.1/share [ 224.654963][ T9365] CIFS: VFS: smb2_get_data_area_len: invalid data area (off=16973 len=64) [ 224.657978][ T9364] CIFS: VFS: smb2_get_data_area_len: invalid data area (off=16973 len=64) [ 225.429033][ T9364] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -512 [ 225.429095][ T9364] CIFS: VFS: cifs_mount failed w/return code = -512 [ 225.498152][ T9380] FAULT_INJECTION: forcing a failure. [ 225.498152][ T9380] name failslab, interval 1, probability 0, space 0, times 0 [ 225.498178][ T9380] CPU: 0 UID: 0 PID: 9380 Comm: syz.6.1136 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.498203][ T9380] Tainted: [L]=SOFTLOCKUP [ 225.498210][ T9380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.498222][ T9380] Call Trace: [ 225.498230][ T9380] [ 225.498238][ T9380] dump_stack_lvl+0xe8/0x150 [ 225.498269][ T9380] should_fail_ex+0x3eb/0x540 [ 225.498295][ T9380] should_failslab+0xa8/0x100 [ 225.498320][ T9380] __kmalloc_cache_noprof+0x9e/0x600 [ 225.498349][ T9380] ? __kmalloc_cache_noprof+0x148/0x600 [ 225.498375][ T9380] ? x509_cert_parse+0x16a/0x7a0 [ 225.498394][ T9380] ? x509_cert_parse+0x16a/0x7a0 [ 225.498418][ T9380] x509_cert_parse+0x16a/0x7a0 [ 225.498442][ T9380] x509_key_preparse+0x64/0x6d0 [ 225.498462][ T9380] ? down_read+0x2b9/0x320 [ 225.498486][ T9380] asymmetric_key_preparse+0xb9/0x1b0 [ 225.498516][ T9380] __key_create_or_update+0x3a4/0xa70 [ 225.498545][ T9380] ? __pfx___key_create_or_update+0x10/0x10 [ 225.498580][ T9380] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 225.498609][ T9380] key_create_or_update+0x42/0x60 [ 225.498637][ T9380] __se_sys_add_key+0x349/0x420 [ 225.498666][ T9380] ? __pfx___se_sys_add_key+0x10/0x10 [ 225.498702][ T9380] ? __x64_sys_add_key+0x20/0xc0 [ 225.498732][ T9380] do_syscall_64+0x166/0x520 [ 225.498749][ T9380] ? trace_irq_disable+0x3b/0x140 [ 225.498776][ T9380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.498795][ T9380] ? clear_bhb_loop+0x70/0xc0 [ 225.498819][ T9380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.498839][ T9380] RIP: 0033:0x7f37afd9e159 [ 225.498857][ T9380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.498875][ T9380] RSP: 002b:00007f37b0b88028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 225.498896][ T9380] RAX: ffffffffffffffda RBX: 00007f37b0025fa0 RCX: 00007f37afd9e159 [ 225.498910][ T9380] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 225.498923][ T9380] RBP: 00007f37afe3506b R08: ffffffffffffffff R09: 0000000000000000 [ 225.498937][ T9380] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 225.498949][ T9380] R13: 00007f37b0026038 R14: 00007f37b0025fa0 R15: 00007ffedac16c88 [ 225.498977][ T9380] [ 226.010373][ T5706] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 226.110326][ C1] net_ratelimit: 34 callbacks suppressed [ 226.110998][ T30] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 226.160400][ T5706] usb 7-1: Using ep0 maxpacket: 16 [ 226.161002][ T5706] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.162040][ T5706] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.162060][ T5706] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 226.164172][ T5706] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.164183][ T5706] usb 7-1: Product: syz [ 226.164190][ T5706] usb 7-1: Manufacturer: syz [ 226.164198][ T5706] usb 7-1: SerialNumber: syz [ 226.260375][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 226.265381][ T9391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.266143][ T9391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.379930][ T5691] usb 7-1: USB disconnect, device number 4 [ 226.392022][ T30] usb 6-1: unable to get BOS descriptor or descriptor too short [ 226.392062][ T30] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 226.393155][ T30] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 226.393183][ T30] usb 6-1: can't read configurations, error -71 [ 226.713375][ T9396] FAULT_INJECTION: forcing a failure. [ 226.713375][ T9396] name failslab, interval 1, probability 0, space 0, times 0 [ 226.713405][ T9396] CPU: 0 UID: 0 PID: 9396 Comm: syz.4.1134 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.713426][ T9396] Tainted: [L]=SOFTLOCKUP [ 226.713430][ T9396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.713437][ T9396] Call Trace: [ 226.713442][ T9396] [ 226.713447][ T9396] dump_stack_lvl+0xe8/0x150 [ 226.713467][ T9396] should_fail_ex+0x3eb/0x540 [ 226.713482][ T9396] should_failslab+0xa8/0x100 [ 226.713496][ T9396] __kmalloc_cache_noprof+0x9e/0x600 [ 226.713513][ T9396] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 226.713525][ T9396] ? tipc_nametbl_insert_publ+0x64/0x13d0 [ 226.713538][ T9396] ? tipc_nametbl_insert_publ+0x64/0x13d0 [ 226.713554][ T9396] tipc_nametbl_insert_publ+0x64/0x13d0 [ 226.713568][ T9396] ? do_raw_spin_lock+0x12b/0x2f0 [ 226.713583][ T9396] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 226.713596][ T9396] ? tipc_net+0x45/0x270 [ 226.713607][ T9396] ? tipc_net+0x45/0x270 [ 226.713619][ T9396] ? tipc_nametbl_publish+0x9f/0x270 [ 226.713632][ T9396] tipc_nametbl_publish+0x121/0x270 [ 226.713647][ T9396] tipc_sk_publish+0x1cd/0x430 [ 226.713661][ T9396] ? __pfx_tipc_sk_publish+0x10/0x10 [ 226.713676][ T9396] ? __local_bh_enable_ip+0xd6/0x140 [ 226.713690][ T9396] tipc_sk_bind+0x1ee/0x300 [ 226.713704][ T9396] __sys_bind+0x2e3/0x410 [ 226.713721][ T9396] ? __pfx___sys_bind+0x10/0x10 [ 226.713746][ T9396] __x64_sys_bind+0x7a/0x90 [ 226.713761][ T9396] do_syscall_64+0x166/0x520 [ 226.713772][ T9396] ? trace_irq_disable+0x3b/0x140 [ 226.713790][ T9396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.713801][ T9396] ? clear_bhb_loop+0x70/0xc0 [ 226.713815][ T9396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.713827][ T9396] RIP: 0033:0x7fbe23d9e159 [ 226.713837][ T9396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.713847][ T9396] RSP: 002b:00007fbe24cb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 226.713859][ T9396] RAX: ffffffffffffffda RBX: 00007fbe24025fa0 RCX: 00007fbe23d9e159 [ 226.713867][ T9396] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 0000000000000005 [ 226.713874][ T9396] RBP: 00007fbe23e3506b R08: 0000000000000000 R09: 0000000000000000 [ 226.713880][ T9396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.713887][ T9396] R13: 00007fbe24026038 R14: 00007fbe24025fa0 R15: 00007ffc85febf48 [ 226.713902][ T9396] [ 227.171486][ T9404] kvm: pic: non byte write [ 227.203682][ T9406] kvm: pic: non byte read [ 227.203971][ T9406] kvm: pic: level sensitive irq not supported [ 227.204018][ T9406] kvm: pic: non byte read [ 227.204153][ T9406] kvm: pic: level sensitive irq not supported [ 227.204189][ T9406] kvm: pic: non byte read [ 227.204321][ T9406] kvm: pic: level sensitive irq not supported [ 227.204357][ T9406] kvm: pic: non byte read [ 227.204494][ T9406] kvm: pic: level sensitive irq not supported [ 227.204529][ T9406] kvm: pic: non byte read [ 227.204662][ T9406] kvm: pic: level sensitive irq not supported [ 227.204698][ T9406] kvm: pic: non byte read [ 227.204829][ T9406] kvm: pic: level sensitive irq not supported [ 227.204864][ T9406] kvm: pic: non byte read [ 227.205021][ T9406] kvm: pic: level sensitive irq not supported [ 227.205058][ T9406] kvm: pic: non byte read [ 227.357816][ T9410] FAULT_INJECTION: forcing a failure. [ 227.357816][ T9410] name failslab, interval 1, probability 0, space 0, times 0 [ 227.357843][ T9410] CPU: 1 UID: 0 PID: 9410 Comm: syz.6.1140 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.357871][ T9410] Tainted: [L]=SOFTLOCKUP [ 227.357880][ T9410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.357892][ T9410] Call Trace: [ 227.357901][ T9410] [ 227.357910][ T9410] dump_stack_lvl+0xe8/0x150 [ 227.357949][ T9410] should_fail_ex+0x3eb/0x540 [ 227.357977][ T9410] should_failslab+0xa8/0x100 [ 227.358001][ T9410] __kmalloc_cache_noprof+0x9e/0x600 [ 227.358032][ T9410] ? __kasan_kmalloc+0x93/0xb0 [ 227.358051][ T9410] ? nci_allocate_device+0xe7/0x380 [ 227.358074][ T9410] ? nci_allocate_device+0xe7/0x380 [ 227.358101][ T9410] ? __pfx_virtual_nci_send+0x10/0x10 [ 227.358122][ T9410] nci_allocate_device+0xe7/0x380 [ 227.358148][ T9410] virtual_ncidev_open+0x75/0x1a0 [ 227.358170][ T9410] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 227.358189][ T9410] misc_open+0x2d5/0x350 [ 227.358219][ T9410] chrdev_open+0x4d9/0x600 [ 227.358243][ T9410] ? __pfx_chrdev_open+0x10/0x10 [ 227.358268][ T9410] ? devcgroup_check_permission+0x31/0x8f0 [ 227.358299][ T9410] ? __pfx_chrdev_open+0x10/0x10 [ 227.358319][ T9410] do_dentry_open+0x80e/0x1360 [ 227.358348][ T9410] vfs_open_consume+0x4a/0x350 [ 227.358368][ T9410] ? path_openat+0x14bb/0x1e40 [ 227.358398][ T9410] path_openat+0x14d7/0x1e40 [ 227.358443][ T9410] do_file_open+0x23e/0x4a0 [ 227.358476][ T9410] ? __pfx_do_file_open+0x10/0x10 [ 227.358525][ T9410] ? _raw_spin_unlock+0x28/0x50 [ 227.358551][ T9410] ? alloc_fd+0x651/0x6c0 [ 227.358584][ T9410] do_sys_openat2+0x115/0x200 [ 227.358606][ T9410] ? __se_sys_futex+0x3a8/0x450 [ 227.358626][ T9410] ? __pfx_do_sys_openat2+0x10/0x10 [ 227.358652][ T9410] ? rcu_is_watching+0x16/0xb0 [ 227.358676][ T9410] __x64_sys_openat+0x138/0x170 [ 227.358703][ T9410] do_syscall_64+0x166/0x520 [ 227.358719][ T9410] ? trace_irq_disable+0x3b/0x140 [ 227.358743][ T9410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.358762][ T9410] ? clear_bhb_loop+0x70/0xc0 [ 227.358786][ T9410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.358807][ T9410] RIP: 0033:0x7f37afd9e159 [ 227.358825][ T9410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.358842][ T9410] RSP: 002b:00007f37b0b88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 227.358864][ T9410] RAX: ffffffffffffffda RBX: 00007f37b0025fa0 RCX: 00007f37afd9e159 [ 227.358878][ T9410] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 227.358892][ T9410] RBP: 00007f37afe3506b R08: 0000000000000000 R09: 0000000000000000 [ 227.358904][ T9410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.358923][ T9410] R13: 00007f37b0026038 R14: 00007f37b0025fa0 R15: 00007ffedac16c88 [ 227.358953][ T9410] [ 227.411237][ T9412] FAULT_INJECTION: forcing a failure. [ 227.411237][ T9412] name failslab, interval 1, probability 0, space 0, times 0 [ 227.411267][ T9412] CPU: 0 UID: 0 PID: 9412 Comm: syz.5.1141 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.411293][ T9412] Tainted: [L]=SOFTLOCKUP [ 227.411301][ T9412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.411314][ T9412] Call Trace: [ 227.411322][ T9412] [ 227.411330][ T9412] dump_stack_lvl+0xe8/0x150 [ 227.411361][ T9412] should_fail_ex+0x3eb/0x540 [ 227.411389][ T9412] should_failslab+0xa8/0x100 [ 227.411422][ T9412] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 227.411452][ T9412] ? __kasan_kmalloc+0x93/0xb0 [ 227.411471][ T9412] ? snd_timer_instance_new+0x6a/0x260 [ 227.411492][ T9412] ? snd_timer_instance_new+0x6a/0x260 [ 227.411514][ T9412] ? __kmalloc_cache_noprof+0x148/0x600 [ 227.411545][ T9412] kstrdup+0x42/0x100 [ 227.411575][ T9412] snd_timer_instance_new+0x6a/0x260 [ 227.411598][ T9412] snd_seq_timer_open+0x23e/0x620 [ 227.411633][ T9412] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 227.411674][ T9412] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 227.411704][ T9412] snd_seq_queue_alloc+0x3ba/0x740 [ 227.411737][ T9412] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 227.411761][ T9412] snd_seq_oss_open+0x657/0xf40 [ 227.411786][ T9412] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 227.411835][ T9412] ? rcu_is_watching+0x16/0xb0 [ 227.411854][ T9412] ? trace_contention_end+0x3d/0x140 [ 227.411892][ T9412] ? __pfx___mutex_lock+0x10/0x10 [ 227.411916][ T9412] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 227.411938][ T9412] ? __pfx_free_devinfo+0x10/0x10 [ 227.411955][ T9412] ? do_raw_spin_unlock+0xf5/0x200 [ 227.411981][ T9412] ? soundcore_open+0x2da/0x490 [ 227.412009][ T9412] odev_open+0x67/0xa0 [ 227.412033][ T9412] chrdev_open+0x4d9/0x600 [ 227.412056][ T9412] ? __pfx_chrdev_open+0x10/0x10 [ 227.412078][ T9412] ? devcgroup_check_permission+0x31/0x8f0 [ 227.412108][ T9412] ? __pfx_chrdev_open+0x10/0x10 [ 227.412126][ T9412] do_dentry_open+0x80e/0x1360 [ 227.412152][ T9412] vfs_open_consume+0x4a/0x350 [ 227.412171][ T9412] ? path_openat+0x14bb/0x1e40 [ 227.412202][ T9412] path_openat+0x14d7/0x1e40 [ 227.412247][ T9412] do_file_open+0x23e/0x4a0 [ 227.412280][ T9412] ? __pfx_do_file_open+0x10/0x10 [ 227.412327][ T9412] ? _raw_spin_unlock+0x28/0x50 [ 227.412351][ T9412] ? alloc_fd+0x651/0x6c0 [ 227.412383][ T9412] do_sys_openat2+0x115/0x200 [ 227.412403][ T9412] ? __se_sys_futex+0x3a8/0x450 [ 227.412434][ T9412] ? __pfx_do_sys_openat2+0x10/0x10 [ 227.412461][ T9412] ? rcu_is_watching+0x16/0xb0 [ 227.412487][ T9412] __x64_sys_openat+0x138/0x170 [ 227.412513][ T9412] do_syscall_64+0x166/0x520 [ 227.412530][ T9412] ? trace_irq_disable+0x3b/0x140 [ 227.412558][ T9412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.412578][ T9412] ? clear_bhb_loop+0x70/0xc0 [ 227.412603][ T9412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.412622][ T9412] RIP: 0033:0x7fade079e159 [ 227.412642][ T9412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.412659][ T9412] RSP: 002b:00007fade1725028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 227.412681][ T9412] RAX: ffffffffffffffda RBX: 00007fade0a25fa0 RCX: 00007fade079e159 [ 227.412696][ T9412] RDX: 0000000000008002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 227.412710][ T9412] RBP: 00007fade083506b R08: 0000000000000000 R09: 0000000000000000 [ 227.412723][ T9412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.412735][ T9412] R13: 00007fade0a26038 R14: 00007fade0a25fa0 R15: 00007ffc3a3f7218 [ 227.412766][ T9412] [ 227.620508][ T31] audit: type=1800 audit(1789579231.448:16): pid=9414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1142" name="(" dev="sda1" ino=2051 res=0 errno=0 [ 228.116244][ T5612] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 228.131794][ T5691] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 228.198544][ T5612] Bluetooth: hci3: setting up ROME/QCA6390 Hü[ 228.234474][ T9424] Bluetooth: hci3: Frame reassembly failed (-84) [ 228.292433][ T5691] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 228.293926][ T5691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.293985][ T5691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.307343][ T5691] usb 7-1: config 0 descriptor?? [ 228.490406][ T5767] usb 5-1: new full-speed USB device number 20 using dummy_hcd ü[ 228.532609][ T5691] usbhid 7-1:0.0: can't add hid device: -71 [ 228.532808][ T5691] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 228.561594][ T5691] usb 7-1: USB disconnect, device number 5 [ 228.641023][ T5767] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 228.643199][ T5767] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.643211][ T5767] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.643243][ T5767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.827707][ T9434] FAULT_INJECTION: forcing a failure. [ 228.827707][ T9434] name failslab, interval 1, probability 0, space 0, times 0 [ 228.827738][ T9434] CPU: 0 UID: 0 PID: 9434 Comm: syz.0.1150 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.827767][ T9434] Tainted: [L]=SOFTLOCKUP [ 228.827776][ T9434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 228.827790][ T9434] Call Trace: [ 228.827798][ T9434] [ 228.827808][ T9434] dump_stack_lvl+0xe8/0x150 [ 228.827841][ T9434] should_fail_ex+0x3eb/0x540 [ 228.827869][ T9434] should_failslab+0xa8/0x100 [ 228.827893][ T9434] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 228.827924][ T9434] ? __kasan_kmalloc+0x93/0xb0 [ 228.827945][ T9434] ? snd_timer_instance_new+0x6a/0x260 [ 228.827968][ T9434] ? snd_timer_instance_new+0x6a/0x260 [ 228.827991][ T9434] ? __kmalloc_cache_noprof+0x148/0x600 [ 228.828023][ T9434] kstrdup+0x42/0x100 [ 228.828055][ T9434] snd_timer_instance_new+0x6a/0x260 [ 228.828079][ T9434] snd_seq_timer_open+0x23e/0x620 [ 228.828116][ T9434] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 228.828158][ T9434] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 228.828191][ T9434] snd_seq_queue_alloc+0x3ba/0x740 [ 228.828232][ T9434] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 228.828259][ T9434] snd_seq_oss_open+0x657/0xf40 [ 228.828288][ T9434] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 228.828342][ T9434] ? rcu_is_watching+0x16/0xb0 [ 228.828364][ T9434] ? trace_contention_end+0x3d/0x140 [ 228.828405][ T9434] ? __pfx___mutex_lock+0x10/0x10 [ 228.828430][ T9434] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 228.828454][ T9434] ? __pfx_free_devinfo+0x10/0x10 [ 228.828476][ T9434] ? do_raw_spin_unlock+0xf5/0x200 [ 228.828507][ T9434] ? soundcore_open+0x2da/0x490 [ 228.828534][ T9434] odev_open+0x67/0xa0 [ 228.828555][ T9434] chrdev_open+0x4d9/0x600 [ 228.828578][ T9434] ? __pfx_chrdev_open+0x10/0x10 [ 228.828600][ T9434] ? devcgroup_check_permission+0x31/0x8f0 [ 228.828633][ T9434] ? __pfx_chrdev_open+0x10/0x10 [ 228.828652][ T9434] do_dentry_open+0x80e/0x1360 [ 228.828684][ T9434] vfs_open_consume+0x4a/0x350 [ 228.828704][ T9434] ? path_openat+0x14bb/0x1e40 [ 228.828735][ T9434] path_openat+0x14d7/0x1e40 [ 228.828781][ T9434] do_file_open+0x23e/0x4a0 [ 228.828815][ T9434] ? __pfx_do_file_open+0x10/0x10 [ 228.828863][ T9434] ? _raw_spin_unlock+0x28/0x50 [ 228.828889][ T9434] ? alloc_fd+0x651/0x6c0 [ 228.828920][ T9434] do_sys_openat2+0x115/0x200 [ 228.828942][ T9434] ? __se_sys_futex+0x3a8/0x450 [ 228.828964][ T9434] ? __pfx_do_sys_openat2+0x10/0x10 [ 228.828991][ T9434] ? rcu_is_watching+0x16/0xb0 [ 228.829015][ T9434] __x64_sys_openat+0x138/0x170 [ 228.829043][ T9434] do_syscall_64+0x166/0x520 [ 228.829061][ T9434] ? trace_irq_disable+0x3b/0x140 [ 228.829087][ T9434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.829108][ T9434] ? clear_bhb_loop+0x70/0xc0 [ 228.829133][ T9434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.829152][ T9434] RIP: 0033:0x7f4e6ff9e159 [ 228.829171][ T9434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.829188][ T9434] RSP: 002b:00007f4e70e08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 228.829216][ T9434] RAX: ffffffffffffffda RBX: 00007f4e70225fa0 RCX: 00007f4e6ff9e159 [ 228.829232][ T9434] RDX: 0000000000008002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 228.829246][ T9434] RBP: 00007f4e7003506b R08: 0000000000000000 R09: 0000000000000000 [ 228.829258][ T9434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.829270][ T9434] R13: 00007f4e70226038 R14: 00007f4e70225fa0 R15: 00007ffeb802c958 [ 228.829302][ T9434] [ 228.872391][ T5767] usb 5-1: GET_CAPABILITIES returned 0 [ 228.872428][ T5767] usbtmc 5-1:16.0: can't read capabilities [ 229.131153][ T5767] usb 5-1: USB disconnect, device number 20 [ 229.149935][ T5691] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 229.311742][ T5691] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 229.314257][ T5691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.314330][ T5691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.318784][ T5691] usb 7-1: config 0 descriptor?? [ 230.182294][ T5691] aiptek 7-1:0.0: Aiptek using 400 ms programming speed [ 230.185252][ T5691] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input15 [ 230.208027][ T9417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.208752][ T9417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 Hü[ 230.591368][ T5618] Bluetooth: hci3: command 0xfc00 tx timeout [ 230.596622][ T5612] Bluetooth: hci3: Reading QCA version information failed (-110) [ 230.597058][ T5612] Bluetooth: hci3: Retry BT power ON:0 [ 230.661082][ C0] aiptek 7-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 230.661089][ T25] usb 7-1: USB disconnect, device number 6 ü[ 231.310360][ C1] net_ratelimit: 67 callbacks suppressed [ 232.183894][ T9486] rust_binder: Failed to get security ctx for id 0: EINVAL [ 232.183916][ T9486] rust_binder: Failure in copy_transaction_data: EINVAL [ 232.183933][ T9486] rust_binder: 9485:9486 transaction async to 9485:0 failed EINVAL, code 0 size 0-0 [ 232.186130][ T25] rust_binder: 9485: undelivered TRANSACTION_ERROR: 29201 [ 232.356867][ T9491] FAULT_INJECTION: forcing a failure. [ 232.356867][ T9491] name failslab, interval 1, probability 0, space 0, times 0 [ 232.356957][ T9491] CPU: 0 UID: 0 PID: 9491 Comm: syz.4.1170 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.356985][ T9491] Tainted: [L]=SOFTLOCKUP [ 232.356993][ T9491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.357006][ T9491] Call Trace: [ 232.357013][ T9491] [ 232.357022][ T9491] dump_stack_lvl+0xe8/0x150 [ 232.357054][ T9491] should_fail_ex+0x3eb/0x540 [ 232.357081][ T9491] should_failslab+0xa8/0x100 [ 232.357103][ T9491] ? ptlock_alloc+0x20/0x70 [ 232.357128][ T9491] kmem_cache_alloc_noprof+0x9c/0x600 [ 232.357157][ T9491] ? ptlock_alloc+0x20/0x70 [ 232.357186][ T9491] ptlock_alloc+0x20/0x70 [ 232.357208][ T9491] pte_alloc_one+0x7a/0x370 [ 232.357229][ T9491] __pte_alloc+0x25/0x1a0 [ 232.357265][ T9491] ? alloc_new_pud+0x185/0x300 [ 232.357288][ T9491] move_page_tables+0x1af6/0x1ec0 [ 232.357327][ T9491] ? move_page_tables+0x5ca/0x1ec0 [ 232.357360][ T9491] ? __pfx_move_page_tables+0x10/0x10 [ 232.357388][ T9491] ? percpu_counter_add_batch+0xec/0x1d0 [ 232.357418][ T9491] move_vma+0xa24/0x1850 [ 232.357454][ T9491] ? arch_get_unmapped_area_topdown+0x269/0xb50 [ 232.357485][ T9491] ? __pfx_move_vma+0x10/0x10 [ 232.357510][ T9491] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 232.357538][ T9491] ? mtree_load+0x12a/0x780 [ 232.357561][ T9491] ? __futex_wait+0x3c7/0x470 [ 232.357589][ T9491] ? cap_mmap_addr+0xaa/0xf0 [ 232.357609][ T9491] ? bpf_lsm_mmap_addr+0x9/0x50 [ 232.357641][ T9491] mremap_to+0x7f9/0x8d0 [ 232.357666][ T9491] ? __pfx_mremap_to+0x10/0x10 [ 232.357687][ T9491] ? __pfx_check_prep_vma+0x10/0x10 [ 232.357714][ T9491] ? mas_walk+0x37e/0x490 [ 232.357742][ T9491] ? mas_find+0x642/0xcb0 [ 232.357763][ T9491] __se_sys_mremap+0xd30/0x12d0 [ 232.357792][ T9491] ? __pfx___se_sys_mremap+0x10/0x10 [ 232.357810][ T9491] ? do_futex+0x3e7/0x4e0 [ 232.357846][ T9491] ? __se_sys_futex+0x3a8/0x450 [ 232.357884][ T9491] ? __x64_sys_mremap+0x20/0xc0 [ 232.357906][ T9491] do_syscall_64+0x166/0x520 [ 232.357924][ T9491] ? trace_irq_disable+0x3b/0x140 [ 232.357950][ T9491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.357971][ T9491] ? clear_bhb_loop+0x70/0xc0 [ 232.357995][ T9491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.358014][ T9491] RIP: 0033:0x7fbe23d9e159 [ 232.358032][ T9491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.358049][ T9491] RSP: 002b:00007fbe24cb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 232.358070][ T9491] RAX: ffffffffffffffda RBX: 00007fbe24025fa0 RCX: 00007fbe23d9e159 [ 232.358086][ T9491] RDX: 0000000000003021 RSI: 0000000000004000 RDI: 0000200000001000 [ 232.358099][ T9491] RBP: 00007fbe23e3506b R08: 0000200000ffd000 R09: 0000000000000000 [ 232.358113][ T9491] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 232.358126][ T9491] R13: 00007fbe24026038 R14: 00007fbe24025fa0 R15: 00007ffc85febf48 [ 232.358153][ T9491] Hü[ 232.910797][ T5618] Bluetooth: hci3: command 0xfc00 tx timeout [ 232.910865][ T5612] Bluetooth: hci3: Reading QCA version information failed (-110) [ 232.910891][ T5612] Bluetooth: hci3: Retry BT power ON:1 ü[ 233.840618][ T9528] tipc: Started in network mode [ 233.840645][ T9528] tipc: Node identity 1a06adddb89d, cluster identity 4711 [ 233.840792][ T9528] tipc: Enabled bearer , priority 0 [ 234.044957][ T9528] syzkaller0: entered promiscuous mode [ 234.044984][ T9528] syzkaller0: entered allmulticast mode [ 234.045709][ T9528] tipc: Resetting bearer [ 234.078476][ T9527] tipc: Resetting bearer [ 234.917245][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1192'. [ 234.917267][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1192'. Hü[ 235.230435][ T5618] Bluetooth: hci3: command 0xfc00 tx timeout [ 235.230533][ T5612] Bluetooth: hci3: Reading QCA version information failed (-110) [ 235.230560][ T5612] Bluetooth: hci3: Retry BT power ON:2 ü[ 236.506821][ T31] audit: type=1800 audit(1789579240.338:17): pid=9568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1197" name="/" dev="fuse" ino=9 res=0 errno=0 [ 236.510323][ C1] net_ratelimit: 64 callbacks suppressed [ 236.710443][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 236.711997][ T6457] Bluetooth: hci5: Frame reassembly failed (-84) [ 237.565694][ T52] Bluetooth: hci3: command 0xfc00 tx timeout [ 237.565793][ T5612] Bluetooth: hci3: Reading QCA version information failed (-110) [ 238.208953][ T9527] tipc: Disabling bearer [ 238.234214][ T5691] tipc: Node number set to 2728111581 [ 238.448169][ T9587] FAULT_INJECTION: forcing a failure. [ 238.448169][ T9587] name failslab, interval 1, probability 0, space 0, times 0 [ 238.448201][ T9587] CPU: 1 UID: 0 PID: 9587 Comm: syz.4.1204 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.448229][ T9587] Tainted: [L]=SOFTLOCKUP [ 238.448237][ T9587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.448259][ T9587] Call Trace: [ 238.448267][ T9587] [ 238.448276][ T9587] dump_stack_lvl+0xe8/0x150 [ 238.448307][ T9587] should_fail_ex+0x3eb/0x540 [ 238.448335][ T9587] should_failslab+0xa8/0x100 [ 238.448359][ T9587] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 238.448388][ T9587] ? __d_lookup+0x66/0x790 [ 238.448417][ T9587] ? __d_alloc+0x37/0x6f0 [ 238.448439][ T9587] ? __d_alloc+0x37/0x6f0 [ 238.448464][ T9587] __d_alloc+0x37/0x6f0 [ 238.448489][ T9587] d_alloc+0x4b/0x190 [ 238.448507][ T9587] ? lookup_one_qstr_excl+0xc4/0x360 [ 238.448530][ T9587] lookup_one_qstr_excl+0xd8/0x360 [ 238.448550][ T9587] ? lookup_noperm_common+0x245/0x430 [ 238.448572][ T9587] start_dirop+0x5c/0x90 [ 238.448592][ T9587] simple_start_creating+0xcc/0x110 [ 238.448614][ T9587] ? __pfx_simple_start_creating+0x10/0x10 [ 238.448636][ T9587] ? do_raw_spin_unlock+0xf5/0x200 [ 238.448654][ T9587] ? mntput+0x65/0xc0 [ 238.448674][ T9587] debugfs_start_creating+0xca/0x1b0 [ 238.448698][ T9587] debugfs_create_dir+0x24/0x350 [ 238.448725][ T9587] drm_debugfs_clients_add+0x69/0x1a0 [ 238.448752][ T9587] drm_file_alloc+0x564/0x9c0 [ 238.448785][ T9587] drm_open_helper+0x1bf/0x470 [ 238.448819][ T9587] drm_open+0x1c8/0x340 [ 238.448843][ T9587] ? __pfx_drm_open+0x10/0x10 [ 238.448871][ T9587] drm_stub_open+0x207/0x250 [ 238.448894][ T9587] chrdev_open+0x4d9/0x600 [ 238.448915][ T9587] ? __pfx_chrdev_open+0x10/0x10 [ 238.448936][ T9587] ? devcgroup_check_permission+0x31/0x8f0 [ 238.448969][ T9587] ? __pfx_chrdev_open+0x10/0x10 [ 238.448988][ T9587] do_dentry_open+0x80e/0x1360 [ 238.449019][ T9587] vfs_open_consume+0x4a/0x350 [ 238.449037][ T9587] ? path_openat+0x14bb/0x1e40 [ 238.449067][ T9587] path_openat+0x14d7/0x1e40 [ 238.449111][ T9587] do_file_open+0x23e/0x4a0 [ 238.449145][ T9587] ? __pfx_do_file_open+0x10/0x10 [ 238.449203][ T9587] ? _raw_spin_unlock+0x28/0x50 [ 238.449230][ T9587] ? alloc_fd+0x651/0x6c0 [ 238.449261][ T9587] do_sys_openat2+0x115/0x200 [ 238.449286][ T9587] ? __pfx_do_sys_openat2+0x10/0x10 [ 238.449314][ T9587] ? do_user_addr_fault+0xd3f/0x1480 [ 238.449347][ T9587] __x64_sys_openat+0x138/0x170 [ 238.449375][ T9587] do_syscall_64+0x166/0x520 [ 238.449393][ T9587] ? trace_irq_disable+0x3b/0x140 [ 238.449420][ T9587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.449442][ T9587] ? clear_bhb_loop+0x70/0xc0 [ 238.449465][ T9587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.449485][ T9587] RIP: 0033:0x7fbe23d5e98e [ 238.449504][ T9587] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 238.449521][ T9587] RSP: 002b:00007fbe24cb1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 238.449544][ T9587] RAX: ffffffffffffffda RBX: 00007fbe24cb26c0 RCX: 00007fbe23d5e98e [ 238.449559][ T9587] RDX: 0000000000040100 RSI: 00007fbe24cb1c00 RDI: ffffffffffffff9c [ 238.449573][ T9587] RBP: 00007fbe24cb1c00 R08: 0000000000000000 R09: 0000000000000000 [ 238.449586][ T9587] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 238.449600][ T9587] R13: 00007fbe24026038 R14: 00007fbe24025fa0 R15: 00007ffc85febf48 [ 238.449630][ T9587] [ 238.527334][ T9589] CacheFiles: Failed to register: -95 [ 238.663376][ T9591] FAULT_INJECTION: forcing a failure. [ 238.663376][ T9591] name failslab, interval 1, probability 0, space 0, times 0 [ 238.663407][ T9591] CPU: 0 UID: 0 PID: 9591 Comm: syz.6.1206 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.663434][ T9591] Tainted: [L]=SOFTLOCKUP [ 238.663442][ T9591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.663455][ T9591] Call Trace: [ 238.663463][ T9591] [ 238.663472][ T9591] dump_stack_lvl+0xe8/0x150 [ 238.663503][ T9591] should_fail_ex+0x3eb/0x540 [ 238.663530][ T9591] should_failslab+0xa8/0x100 [ 238.663555][ T9591] __kmalloc_cache_noprof+0x9e/0x600 [ 238.663585][ T9591] ? nf_tables_newtable+0x43e/0x1990 [ 238.663604][ T9591] ? nf_tables_newtable+0x43e/0x1990 [ 238.663630][ T9591] nf_tables_newtable+0x43e/0x1990 [ 238.663674][ T9591] nfnetlink_rcv+0x1288/0x28c0 [ 238.663727][ T9591] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 238.663764][ T9591] ? ref_tracker_free+0x689/0x830 [ 238.663810][ T9591] ? skb_clone+0x246/0x3a0 [ 238.663835][ T9591] ? __netlink_deliver_tap+0x811/0x860 [ 238.663870][ T9591] ? netlink_deliver_tap+0x2e/0x1b0 [ 238.663893][ T9591] ? netlink_deliver_tap+0x2e/0x1b0 [ 238.663922][ T9591] netlink_unicast+0x7bd/0x940 [ 238.663953][ T9591] netlink_sendmsg+0x7c3/0xae0 [ 238.663982][ T9591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.664014][ T9591] ? apparmor_socket_sendmsg+0x98/0x360 [ 238.664036][ T9591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.664060][ T9591] sock_sendmsg_nosec+0x13a/0x180 [ 238.664088][ T9591] ____sys_sendmsg+0x54e/0x850 [ 238.664114][ T9591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.664144][ T9591] ? import_iovec+0x73/0xa0 [ 238.664171][ T9591] ___sys_sendmsg+0x2a5/0x360 [ 238.664191][ T9591] ? __lock_acquire+0x747/0x2de0 [ 238.664223][ T9591] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.664248][ T9591] ? futex_wait+0x2a2/0x390 [ 238.664298][ T9591] ? __fget_files+0x2a/0x420 [ 238.664321][ T9591] ? __fget_files+0x3a2/0x420 [ 238.664354][ T9591] __x64_sys_sendmsg+0x1b1/0x290 [ 238.664378][ T9591] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 238.664418][ T9591] do_syscall_64+0x166/0x520 [ 238.664437][ T9591] ? trace_irq_disable+0x3b/0x140 [ 238.664464][ T9591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.664484][ T9591] ? clear_bhb_loop+0x70/0xc0 [ 238.664508][ T9591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.664528][ T9591] RIP: 0033:0x7f37afd9e159 [ 238.664547][ T9591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.664564][ T9591] RSP: 002b:00007f37b0b88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.664585][ T9591] RAX: ffffffffffffffda RBX: 00007f37b0025fa0 RCX: 00007f37afd9e159 [ 238.664600][ T9591] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 238.664612][ T9591] RBP: 00007f37afe3506b R08: 0000000000000000 R09: 0000000000000000 [ 238.664625][ T9591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.664637][ T9591] R13: 00007f37b0026038 R14: 00007f37b0025fa0 R15: 00007ffedac16c88 [ 238.664673][ T9591] [ 238.753301][ T5612] Bluetooth: hci5: command 0x1003 tx timeout [ 238.756553][ T5618] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 239.671244][ T10] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 239.832703][ T10] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 239.834223][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.839512][ T10] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 239.839533][ T10] usb 7-1: Product: syz [ 239.839547][ T10] usb 7-1: Manufacturer: syz [ 239.839562][ T10] usb 7-1: SerialNumber: syz [ 239.897773][ T10] usb 7-1: config 0 descriptor?? [ 239.911935][ T10] keyspan 7-1:0.0: Keyspan 4 port adapter converter detected [ 239.912257][ T10] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 81 [ 239.912338][ T10] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 88 [ 239.919104][ T10] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1 [ 239.957294][ T10] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 239.972672][ T10] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2 [ 239.978529][ T10] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 239.997318][ T10] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 4 [ 240.011939][ T10] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 240.016421][ T10] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 6 [ 240.049106][ T10] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 240.098496][ T9614] loop0: detected capacity change from 0 to 4096 [ 240.177722][ T9614] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 240.177748][ T9614] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 240.177762][ T9614] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 240.177811][ T9614] loop0: [ 240.507816][ T9620] FAULT_INJECTION: forcing a failure. [ 240.507816][ T9620] name failslab, interval 1, probability 0, space 0, times 0 [ 240.507847][ T9620] CPU: 0 UID: 0 PID: 9620 Comm: syz.5.1216 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.507876][ T9620] Tainted: [L]=SOFTLOCKUP [ 240.507884][ T9620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.507898][ T9620] Call Trace: [ 240.507907][ T9620] [ 240.507916][ T9620] dump_stack_lvl+0xe8/0x150 [ 240.507948][ T9620] should_fail_ex+0x3eb/0x540 [ 240.507977][ T9620] should_failslab+0xa8/0x100 [ 240.508000][ T9620] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 240.508040][ T9620] ? kasprintf+0xe2/0x140 [ 240.508067][ T9620] ? kasprintf+0xe2/0x140 [ 240.508098][ T9620] kvasprintf+0xeb/0x1a0 [ 240.508127][ T9620] ? __pfx_kvasprintf+0x10/0x10 [ 240.508168][ T9620] kasprintf+0xe2/0x140 [ 240.508198][ T9620] ? __pfx_kasprintf+0x10/0x10 [ 240.508237][ T9620] drm_debugfs_clients_add+0x4e/0x1a0 [ 240.508266][ T9620] drm_file_alloc+0x564/0x9c0 [ 240.508300][ T9620] drm_open_helper+0x1bf/0x470 [ 240.508332][ T9620] drm_open+0x1c8/0x340 [ 240.508359][ T9620] ? __pfx_drm_open+0x10/0x10 [ 240.508388][ T9620] drm_stub_open+0x207/0x250 [ 240.508412][ T9620] chrdev_open+0x4d9/0x600 [ 240.508435][ T9620] ? __pfx_chrdev_open+0x10/0x10 [ 240.508458][ T9620] ? devcgroup_check_permission+0x31/0x8f0 [ 240.508490][ T9620] ? __pfx_chrdev_open+0x10/0x10 [ 240.508509][ T9620] do_dentry_open+0x80e/0x1360 [ 240.508540][ T9620] vfs_open_consume+0x4a/0x350 [ 240.508561][ T9620] ? path_openat+0x14bb/0x1e40 [ 240.508592][ T9620] path_openat+0x14d7/0x1e40 [ 240.508638][ T9620] do_file_open+0x23e/0x4a0 [ 240.508671][ T9620] ? __pfx_do_file_open+0x10/0x10 [ 240.508720][ T9620] ? _raw_spin_unlock+0x28/0x50 [ 240.508746][ T9620] ? alloc_fd+0x651/0x6c0 [ 240.508779][ T9620] do_sys_openat2+0x115/0x200 [ 240.508806][ T9620] ? __pfx_do_sys_openat2+0x10/0x10 [ 240.508835][ T9620] ? do_user_addr_fault+0xd3f/0x1480 [ 240.508868][ T9620] __x64_sys_openat+0x138/0x170 [ 240.508895][ T9620] do_syscall_64+0x166/0x520 [ 240.508914][ T9620] ? trace_irq_disable+0x3b/0x140 [ 240.508942][ T9620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.508962][ T9620] ? clear_bhb_loop+0x70/0xc0 [ 240.508987][ T9620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.509007][ T9620] RIP: 0033:0x7fade075e98e [ 240.509032][ T9620] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 240.509050][ T9620] RSP: 002b:00007fade1724b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 240.509073][ T9620] RAX: ffffffffffffffda RBX: 00007fade17256c0 RCX: 00007fade075e98e [ 240.509089][ T9620] RDX: 0000000000040100 RSI: 00007fade1724c00 RDI: ffffffffffffff9c [ 240.509105][ T9620] RBP: 00007fade1724c00 R08: 0000000000000000 R09: 0000000000000000 [ 240.509119][ T9620] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 240.509132][ T9620] R13: 00007fade0a26038 R14: 00007fade0a25fa0 R15: 00007ffc3a3f7218 [ 240.509164][ T9620] [ 240.746156][ T25] usb 7-1: USB disconnect, device number 7 [ 240.827501][ T25] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 240.847797][ T25] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 240.865780][ T25] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 240.899283][ T25] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 240.907778][ T25] keyspan 7-1:0.0: device disconnected [ 241.420500][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 241.434784][ T31] audit: type=1800 audit(1789579245.268:18): pid=9634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1222" name="file0" dev="overlay" ino=2074 res=0 errno=0 [ 241.550329][ C1] net_ratelimit: 41 callbacks suppressed [ 241.551065][ T5706] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 241.571397][ T9635] ceph: No mds server is up or the cluster is laggy [ 241.575723][ T5706] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 241.600610][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 241.601517][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 241.603148][ T10] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.603176][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 241.603263][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.618169][ T10] usb 5-1: config 0 descriptor?? [ 241.840366][ T9622] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 242.056418][ T9630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.059512][ T9630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.096906][ T10] mcp2221 0003:04D8:00DD.000B: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 242.514330][ T10] usb 5-1: USB disconnect, device number 21 [ 242.611065][ T9647] syzkaller0: entered promiscuous mode [ 242.611078][ T9647] syzkaller0: entered allmulticast mode [ 242.794964][ T5767] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 242.952590][ T5767] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 242.953813][ T5767] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 242.955759][ T5767] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 242.959279][ T5767] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.959297][ T5767] usb 7-1: Product: syz [ 242.959311][ T5767] usb 7-1: Manufacturer: syz [ 242.959324][ T5767] usb 7-1: SerialNumber: syz [ 243.018482][ T5767] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 243.043116][ T5767] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 243.285397][ T5767] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 244.841570][ T9676] kvm: faulting far call emulation tainted memory [ 244.841633][ T9676] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 245.230974][ T9653] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 245.236223][ T5767] usb 7-1: USB disconnect, device number 8 [ 245.288183][ T5767] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 245.307539][ T5767] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 245.322873][ T5767] ti_usb_3410_5052 7-1:2.0: device disconnected [ 246.024579][ T5691] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 246.064354][ T5691] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 246.910317][ C1] net_ratelimit: 44 callbacks suppressed [ 247.280349][ T5691] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 247.430531][ T5691] usb 7-1: Using ep0 maxpacket: 32 [ 247.438306][ T5691] usb 7-1: unable to get BOS descriptor or descriptor too short [ 247.438349][ T5691] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 247.439977][ T5691] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.439997][ T5691] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 247.491113][ T5691] usb 7-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3 [ 247.491132][ T5691] usb 7-1: Product: syz [ 247.491147][ T5691] usb 7-1: Manufacturer: syz [ 247.491162][ T5691] usb 7-1: SerialNumber: syz [ 247.932318][ T5691] usb 7-1: 3:0: cannot get min/max values for control 2 (id 3) [ 247.932340][ T5691] usb 7-1: applying playback min mute quirk [ 247.932353][ T5691] usb 7-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 247.932371][ T5691] usb 7-1: [3] FU [ÑŠ Playback Volume] ch = 1, val = 0/1/1 [ 247.973786][ T5691] usb 7-1: 3:0: cannot get min/max values for control 8 (id 3) [ 247.975112][ T5691] usb 7-1: 3:0: failed to get current value for ch 1 (-71) [ 248.016424][ T5691] usb 7-1: 3:0: failed to get current value for ch 1 (-71) [ 248.108968][ T5691] usb 7-1: USB disconnect, device number 9 [ 248.456455][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 248.610504][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 248.611394][ T10] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 248.613448][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.613468][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 248.613528][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 248.613552][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 248.613618][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.620006][ T10] hub 5-1:1.0: bad descriptor, ignoring hub [ 248.620025][ T10] hub 5-1:1.0: probe with driver hub failed with error -5 [ 248.698809][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 248.698823][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 248.711923][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 248.711940][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 249.315749][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 249.315769][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 249.316123][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 249.316140][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 249.316387][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 249.316404][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 249.316677][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 249.316695][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 249.316970][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 249.316988][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 249.317301][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 249.317319][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 249.317594][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 249.317612][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 249.317976][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 249.317992][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 249.318245][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 249.318262][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 249.318278][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 249.318344][ T5691] usb 5-1: USB disconnect, device number 22 [ 250.273499][ T9720] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1248'. [ 250.700474][ T5691] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 250.891684][ T5691] usb 5-1: Using ep0 maxpacket: 16 [ 250.894406][ T5691] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 250.896017][ T5691] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 250.896040][ T5691] usb 5-1: config 0 has no interface number 0 [ 250.896079][ T5691] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 250.896103][ T5691] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 250.900133][ T5691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.900153][ T5691] usb 5-1: Product: syz [ 250.900167][ T5691] usb 5-1: Manufacturer: syz [ 250.900181][ T5691] usb 5-1: SerialNumber: syz [ 250.904494][ T5691] usb 5-1: config 0 descriptor?? [ 250.970852][ T9723] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 250.970971][ T9723] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 251.205883][ T9723] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 251.205986][ T9723] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 251.408891][ T5691] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 251.634543][ T50] smc: removing ib device syz1 [ 251.712154][ T123] infiniband syz1: ib_query_port failed (-19) [ 251.867312][ T50] smbdirect: ib_dev[syz1] removed [ 252.110309][ C1] net_ratelimit: 41 callbacks suppressed [ 252.838670][ T5691] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 252.838695][ T5691] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 252.838917][ T5691] asix 5-1:0.34: probe with driver asix failed with error -71 [ 252.926800][ T5691] usb 5-1: USB disconnect, device number 23 [ 254.421628][ T5691] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 254.570457][ T5691] usb 7-1: Using ep0 maxpacket: 8 [ 254.571188][ T5691] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 254.572246][ T5691] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 254.572267][ T5691] usb 7-1: config 0 has no interface number 0 [ 254.572310][ T5691] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 254.572333][ T5691] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 254.572357][ T5691] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 254.572392][ T5691] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 254.572449][ T5691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.743286][ T5691] usb 7-1: config 0 descriptor?? [ 254.786360][ T5691] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 254.835649][ T5618] Bluetooth: hci2: link tx timeout [ 254.835761][ T5618] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 255.243810][ T5618] Bluetooth: hci2: link tx timeout [ 255.243821][ T5618] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 255.284601][ T5618] Bluetooth: hci2: link tx timeout [ 255.284613][ T5618] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 255.635697][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.635903][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.638282][ T5618] Bluetooth: hci2: link tx timeout [ 255.638294][ T5618] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 255.953220][ T5618] Bluetooth: hci2: link tx timeout [ 255.953230][ T5618] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 256.918697][ T5618] Bluetooth: hci2: command 0x0405 tx timeout [ 257.311226][ C1] net_ratelimit: 44 callbacks suppressed [ 257.327219][ T25] usb 7-1: USB disconnect, device number 10 [ 257.399074][ T9794] syzkaller1: entered promiscuous mode [ 257.399095][ T9794] syzkaller1: entered allmulticast mode [ 257.517390][ T25] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 257.621959][ T9803] FAULT_INJECTION: forcing a failure. [ 257.621959][ T9803] name failslab, interval 1, probability 0, space 0, times 0 [ 257.621990][ T9803] CPU: 0 UID: 0 PID: 9803 Comm: syz.6.1267 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.622017][ T9803] Tainted: [L]=SOFTLOCKUP [ 257.622025][ T9803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.622038][ T9803] Call Trace: [ 257.622052][ T9803] [ 257.622061][ T9803] dump_stack_lvl+0xe8/0x150 [ 257.622092][ T9803] should_fail_ex+0x3eb/0x540 [ 257.622120][ T9803] should_failslab+0xa8/0x100 [ 257.622144][ T9803] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 257.622176][ T9803] ? __trace_uprobe_create+0x2c1/0xe40 [ 257.622203][ T9803] ? __trace_uprobe_create+0x2c1/0xe40 [ 257.622237][ T9803] kstrdup+0x42/0x100 [ 257.622268][ T9803] __trace_uprobe_create+0x2c1/0xe40 [ 257.622300][ T9803] ? rcu_is_watching+0x16/0xb0 [ 257.622321][ T9803] ? trace_kmalloc+0x2a/0xf0 [ 257.622347][ T9803] ? __pfx___trace_uprobe_create+0x10/0x10 [ 257.622376][ T9803] ? __kmalloc_noprof+0x387/0x710 [ 257.622402][ T9803] ? __kmalloc_noprof+0x1a6/0x710 [ 257.622426][ T9803] ? argv_split+0x18d/0x400 [ 257.622455][ T9803] ? argv_split+0x18d/0x400 [ 257.622488][ T9803] ? argv_split+0x378/0x400 [ 257.622522][ T9803] trace_probe_create+0xce/0x130 [ 257.622549][ T9803] ? __pfx___trace_uprobe_create+0x10/0x10 [ 257.622576][ T9803] ? __pfx_trace_probe_create+0x10/0x10 [ 257.622607][ T9803] ? __might_fault+0xaf/0x130 [ 257.622634][ T9803] dyn_event_create+0x59/0x80 [ 257.622655][ T9803] create_or_delete_trace_uprobe+0x65/0xa0 [ 257.622685][ T9803] trace_parse_run_command+0x1f3/0x380 [ 257.622715][ T9803] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 257.622746][ T9803] ? __pfx_probes_write+0x10/0x10 [ 257.622773][ T9803] vfs_write+0x296/0xba0 [ 257.622808][ T9803] ? __pfx_vfs_write+0x10/0x10 [ 257.622837][ T9803] ? __fget_files+0x2a/0x420 [ 257.622864][ T9803] ? __fget_files+0x3a2/0x420 [ 257.622886][ T9803] ? __fget_files+0x2a/0x420 [ 257.622919][ T9803] ksys_write+0x150/0x270 [ 257.622948][ T9803] ? __pfx_ksys_write+0x10/0x10 [ 257.622986][ T9803] do_syscall_64+0x166/0x520 [ 257.623003][ T9803] ? trace_irq_disable+0x3b/0x140 [ 257.623030][ T9803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.623056][ T9803] ? clear_bhb_loop+0x70/0xc0 [ 257.623084][ T9803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.623105][ T9803] RIP: 0033:0x7f37afd9e159 [ 257.623123][ T9803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.623140][ T9803] RSP: 002b:00007f37b0b88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 257.623162][ T9803] RAX: ffffffffffffffda RBX: 00007f37b0025fa0 RCX: 00007f37afd9e159 [ 257.623177][ T9803] RDX: 0000000000000014 RSI: 0000200000000300 RDI: 0000000000000003 [ 257.623190][ T9803] RBP: 00007f37afe3506b R08: 0000000000000000 R09: 0000000000000000 [ 257.623203][ T9803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.623216][ T9803] R13: 00007f37b0026038 R14: 00007f37b0025fa0 R15: 00007ffedac16c88 [ 257.623249][ T9803] [ 258.522865][ T5691] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 258.680992][ T5691] usb 7-1: Using ep0 maxpacket: 32 [ 258.682767][ T5691] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 258.684181][ T5691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.684206][ T5691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.684259][ T5691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.735989][ T5691] usb 7-1: config 0 descriptor?? [ 259.165501][ T5691] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 259.165531][ T5691] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 259.355628][ T5691] ft260 0003:0403:6030.000D: chip code: 0000 0000 [ 259.491648][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.499433][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.507886][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.509600][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.525982][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 259.556726][ T5691] ft260 0003:0403:6030.000D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 259.766665][ T5691] ft260 0003:0403:6030.000D: failed to retrieve status: -32, no wakeup [ 260.035698][ T9820] i2c i2c-1: adapter quirk: 2nd comb msg must be read (addr 0xfff8, size 0, write) [ 260.038591][ T5691] usb 7-1: USB disconnect, device number 11 [ 260.884629][ T9850] netlink: 1276 bytes leftover after parsing attributes in process `syz.4.1278'. [ 261.336067][ T9857] kvm: emulating exchange as write [ 261.336153][ T9857] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 261.630432][ T5618] Bluetooth: hci1: command tx timeout [ 262.295150][ T9826] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.297160][ T9826] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.297352][ T9826] bridge_slave_0: entered allmulticast mode [ 262.316515][ T9826] bridge_slave_0: entered promiscuous mode [ 262.329259][ T9826] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.333213][ T9826] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.333384][ T9826] bridge_slave_1: entered allmulticast mode [ 262.342861][ T9826] bridge_slave_1: entered promiscuous mode [ 262.510361][ C1] net_ratelimit: 107 callbacks suppressed [ 262.548345][ T9882] rust_binder: 9880:9882 BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 262.548377][ T9882] rust_binder: Write failure EINVAL in pid:539 [ 262.632641][ T9826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.656802][ T9826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.861734][ T9885] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 262.903803][ T9826] team0: Port device team_slave_0 added [ 262.918676][ T9826] team0: Port device team_slave_1 added [ 263.138290][ T9826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.138301][ T9826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.138325][ T9826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.160087][ T9826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.160098][ T9826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.160122][ T9826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.248242][ T5691] rust_binder: 9880: undelivered freeze notification, 0000000000000000 [ 263.648637][ T9826] hsr_slave_0: entered promiscuous mode [ 263.659320][ T9826] hsr_slave_1: entered promiscuous mode [ 263.660155][ T9826] debugfs: 'hsr0' already exists in 'hsr' [ 263.660170][ T9826] Cannot create hsr debugfs directory [ 263.710900][ T5618] Bluetooth: hci1: command tx timeout [ 265.024530][ T9826] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 265.038712][ T9826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 265.046277][ T9826] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 265.096039][ T9826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 265.102752][ T9826] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 265.140104][ T9826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 265.145524][ T9826] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 265.196766][ T9826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 265.680913][ T9826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.791128][ T5618] Bluetooth: hci1: command tx timeout [ 265.814392][ T9826] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.873492][ T6457] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.873590][ T6457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.900034][ T6457] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.900129][ T6457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.404417][ T9939] FAULT_INJECTION: forcing a failure. [ 266.404417][ T9939] name failslab, interval 1, probability 0, space 0, times 0 [ 266.405204][ T9939] CPU: 0 UID: 0 PID: 9939 Comm: syz.5.1303 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.405234][ T9939] Tainted: [L]=SOFTLOCKUP [ 266.405242][ T9939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.405253][ T9939] Call Trace: [ 266.405262][ T9939] [ 266.405270][ T9939] dump_stack_lvl+0xe8/0x150 [ 266.405302][ T9939] should_fail_ex+0x3eb/0x540 [ 266.405331][ T9939] should_failslab+0xa8/0x100 [ 266.405356][ T9939] __kmalloc_cache_noprof+0x9e/0x600 [ 266.405385][ T9939] ? nf_tables_newtable+0x43e/0x1990 [ 266.405406][ T9939] ? nf_tables_newtable+0x43e/0x1990 [ 266.405433][ T9939] nf_tables_newtable+0x43e/0x1990 [ 266.405471][ T9939] nfnetlink_rcv+0x1288/0x28c0 [ 266.405525][ T9939] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 266.405563][ T9939] ? ref_tracker_free+0x689/0x830 [ 266.405610][ T9939] ? skb_clone+0x246/0x3a0 [ 266.405640][ T9939] ? __netlink_deliver_tap+0x811/0x860 [ 266.405673][ T9939] ? netlink_deliver_tap+0x2e/0x1b0 [ 266.405698][ T9939] ? netlink_deliver_tap+0x2e/0x1b0 [ 266.405728][ T9939] netlink_unicast+0x7bd/0x940 [ 266.405761][ T9939] netlink_sendmsg+0x7c3/0xae0 [ 266.405800][ T9939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.405834][ T9939] ? apparmor_socket_sendmsg+0x18b/0x360 [ 266.405858][ T9939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.405883][ T9939] sock_sendmsg_nosec+0x13a/0x180 [ 266.405913][ T9939] ____sys_sendmsg+0x54e/0x850 [ 266.405941][ T9939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.405971][ T9939] ? import_iovec+0x73/0xa0 [ 266.406000][ T9939] ___sys_sendmsg+0x2a5/0x360 [ 266.406021][ T9939] ? __lock_acquire+0x747/0x2de0 [ 266.406052][ T9939] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.406078][ T9939] ? futex_wait+0x2a2/0x390 [ 266.406130][ T9939] ? __fget_files+0x2a/0x420 [ 266.406155][ T9939] ? __fget_files+0x3a2/0x420 [ 266.406189][ T9939] __x64_sys_sendmsg+0x1b1/0x290 [ 266.406213][ T9939] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.406256][ T9939] do_syscall_64+0x166/0x520 [ 266.406274][ T9939] ? trace_irq_disable+0x3b/0x140 [ 266.406302][ T9939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.406323][ T9939] ? clear_bhb_loop+0x70/0xc0 [ 266.406348][ T9939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.406369][ T9939] RIP: 0033:0x7fade079e159 [ 266.406388][ T9939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.406405][ T9939] RSP: 002b:00007fade1725028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.406428][ T9939] RAX: ffffffffffffffda RBX: 00007fade0a25fa0 RCX: 00007fade079e159 [ 266.406443][ T9939] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000005 [ 266.406457][ T9939] RBP: 00007fade083506b R08: 0000000000000000 R09: 0000000000000000 [ 266.406469][ T9939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.406480][ T9939] R13: 00007fade0a26038 R14: 00007fade0a25fa0 R15: 00007ffc3a3f7218 [ 266.406510][ T9939] [ 267.031014][ T9941] i2c i2c-0: new_device: Instantiated device dummy at 0x22 [ 267.710325][ C1] net_ratelimit: 57 callbacks suppressed [ 267.788354][ T5691] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 267.880438][ T5618] Bluetooth: hci1: command tx timeout [ 267.950335][ T5691] usb 6-1: Using ep0 maxpacket: 16 [ 267.952970][ T5691] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 267.955430][ T5691] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 267.955459][ T5691] usb 6-1: config 0 interface 0 has no altsetting 0 [ 267.997706][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.997727][ T5691] usb 6-1: Product: syz [ 267.997741][ T5691] usb 6-1: Manufacturer: syz [ 267.997755][ T5691] usb 6-1: SerialNumber: syz [ 268.043888][ T5691] usb 6-1: config 0 descriptor?? [ 268.312019][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 268.314403][ T5691] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input16 [ 268.375549][ T5691] imon:send_packet: packet tx failed (-71) [ 268.402194][ T5691] imon 6-1:0.0: panel buttons/knobs setup failed [ 268.530340][ T5691] rc_core: IR keymap rc-imon-pad not found [ 268.530352][ T5691] Registered IR keymap rc-empty [ 268.530460][ T5691] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 268.530484][ T5691] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 268.530998][ T5691] imon:send_packet: packet tx failed (-71) [ 268.552493][ T5691] imon 6-1:0.0: remote input dev register failed [ 268.552747][ T5691] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 268.665211][ T5691] imon 6-1:0.0: unable to initialize intf0, err 0 [ 268.665226][ T5691] imon:imon_probe: failed to initialize context! [ 268.665237][ T5691] imon 6-1:0.0: unable to register, err -19 [ 268.703337][ T5691] usb 6-1: USB disconnect, device number 19 [ 269.078290][ T123] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 269.101596][ T5691] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 269.241375][ T123] usb 7-1: Using ep0 maxpacket: 16 [ 269.245409][ T123] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 269.247113][ T123] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 269.247142][ T123] usb 7-1: config 0 interface 0 has no altsetting 0 [ 269.261349][ T123] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.261368][ T123] usb 7-1: Product: syz [ 269.261382][ T123] usb 7-1: Manufacturer: syz [ 269.261402][ T123] usb 7-1: SerialNumber: syz [ 269.264192][ T123] usb 7-1: config 0 descriptor?? [ 269.276249][ T5691] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 269.279741][ T5691] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 269.279767][ T5691] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 269.279813][ T5691] usb 6-1: config 0 interface 0 has no altsetting 0 [ 269.283575][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.283593][ T5691] usb 6-1: Product: syz [ 269.283607][ T5691] usb 6-1: Manufacturer: syz [ 269.283642][ T5691] usb 6-1: SerialNumber: syz [ 269.299353][ T5691] usb 6-1: config 0 descriptor?? [ 269.300212][ T9950] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 269.508261][ C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 269.567127][ T123] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input18 [ 269.579279][ T123] imon:send_packet: packet tx failed (-71) [ 269.599161][ T123] imon 7-1:0.0: panel buttons/knobs setup failed [ 269.604217][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 269.648411][ T5691] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input20 [ 269.765223][ T123] rc_core: IR keymap rc-imon-pad not found [ 269.765244][ T123] Registered IR keymap rc-empty [ 269.765512][ T123] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 269.765525][ T123] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 269.770273][ T123] imon:send_packet: packet tx failed (-71) [ 269.799240][ T123] imon 7-1:0.0: remote input dev register failed [ 269.801894][ T123] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 269.864840][ T123] imon 7-1:0.0: unable to initialize intf0, err 0 [ 269.864854][ T123] imon:imon_probe: failed to initialize context! [ 269.864866][ T123] imon 7-1:0.0: unable to register, err -19 [ 269.909179][ T123] usb 7-1: USB disconnect, device number 12 [ 269.960389][ T5691] rc_core: IR keymap rc-imon-pad not found [ 269.960404][ T5691] Registered IR keymap rc-empty [ 269.960513][ T5691] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 269.960529][ T5691] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 270.033989][ T5691] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 270.036170][ T5691] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input21 [ 270.067021][ T5691] imon 6-1:0.0: iMON device (15c2:0045, intf0) on usb<6:20> initialized [ 270.240971][ T123] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 270.325143][ T5692] usb 6-1: USB disconnect, device number 20 [ 270.330754][ T9950] imon:send_packet: packet tx failed (-71) [ 270.368624][ T9950] imon:lcd_write: send packet failed! [ 270.396146][ T123] usb 7-1: Using ep0 maxpacket: 16 [ 270.410797][ T123] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 270.412329][ T123] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 270.412356][ T123] usb 7-1: config 0 interface 0 has no altsetting 0 [ 270.415460][ T123] usb 7-1: string descriptor 0 read error: -22 [ 270.415600][ T123] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.473579][ T123] usb 7-1: config 0 descriptor?? [ 270.526484][ T123] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input22 [ 270.547773][ T9949] ================================================================== [ 270.547787][ ** replaying previous printk message ** [ 270.547787][ T9949] BUG: KASAN: slab-use-after-free in dev_driver_string+0x35/0xd0 [ 270.547816][ T9949] Read of size 8 at addr ffff88807f6a70e0 by task syz.5.1307/9949 [ 270.547832][ T9949] [ 270.547845][ T9949] CPU: 1 UID: 0 PID: 9949 Comm: syz.5.1307 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.547871][ T9949] Tainted: [L]=SOFTLOCKUP [ 270.547879][ T9949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.547892][ T9949] Call Trace: [ 270.547899][ T9949] [ 270.547908][ T9949] dump_stack_lvl+0xe8/0x150 [ 270.547933][ T9949] print_address_description+0x55/0x1e0 [ 270.547962][ T9949] ? dev_driver_string+0x35/0xd0 [ 270.547981][ T9949] print_report+0x58/0x70 [ 270.548003][ T9949] kasan_report+0x117/0x150 [ 270.548024][ T9949] ? dev_driver_string+0x35/0xd0 [ 270.548046][ T9949] dev_driver_string+0x35/0xd0 [ 270.548066][ T9949] __dynamic_dev_dbg+0x1ae/0x2e0 [ 270.548089][ T9949] ? __mutex_lock+0x305/0x15a0 [ 270.548109][ T9949] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 270.548131][ T9949] ? __pfx_ima_file_free+0x10/0x10 [ 270.548154][ T9949] ? __asan_memset+0x22/0x50 [ 270.548178][ T9949] ? __fsnotify_parent+0x267/0x620 [ 270.548206][ T9949] ? display_close+0x4b/0x240 [ 270.548234][ T9949] display_close+0x1f9/0x240 [ 270.548253][ T9949] ? __pfx_display_close+0x10/0x10 [ 270.548272][ T9949] __fput+0x413/0xa50 [ 270.548296][ T9949] task_work_run+0x1d9/0x260 [ 270.548325][ T9949] ? __pfx_task_work_run+0x10/0x10 [ 270.548355][ T9949] exit_to_user_mode_loop+0x204/0x770 [ 270.548382][ T9949] ? rcu_is_watching+0x16/0xb0 [ 270.548402][ T9949] do_syscall_64+0x328/0x520 [ 270.548419][ T9949] ? trace_irq_disable+0x3b/0x140 [ 270.548445][ T9949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.548464][ T9949] ? clear_bhb_loop+0x70/0xc0 [ 270.548485][ T9949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.548504][ T9949] RIP: 0033:0x7fade079e159 [ 270.548520][ T9949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.548537][ T9949] RSP: 002b:00007ffc3a3f7378 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 270.548559][ T9949] RAX: 0000000000000000 RBX: 00007ffc3a3f7460 RCX: 00007fade079e159 [ 270.548573][ T9949] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 270.548586][ T9949] RBP: 00000000000414e4 R08: 0000000000000001 R09: 0000000000000000 [ 270.548599][ T9949] R10: 0000001b2f120000 R11: 0000000000000246 R12: 00007ffc3a3f74a0 [ 270.548613][ T9949] R13: 00007fade0a2609c R14: 000000000004211a R15: 00007fade0a26090 [ 270.548634][ T9949] [ 270.548642][ T9949] [ 270.548664][ T9949] Allocated by task 5691: [ 270.548673][ T9949] kasan_save_track+0x3e/0x80 [ 270.548700][ T9949] __kasan_kmalloc+0x93/0xb0 [ 270.548716][ T9949] __kmalloc_cache_noprof+0x31c/0x600 [ 270.548740][ T9949] usb_set_configuration+0x3cc/0x2180 [ 270.548764][ T9949] usb_generic_driver_probe+0x8d/0x150 [ 270.548790][ T9949] usb_probe_device+0x1c3/0x3b0 [ 270.548807][ T9949] really_probe+0x254/0xae0 [ 270.548828][ T9949] __driver_probe_device+0x1e8/0x360 [ 270.548850][ T9949] driver_probe_device+0x4f/0x240 [ 270.548872][ T9949] __device_attach_driver+0x270/0x410 [ 270.548894][ T9949] bus_for_each_drv+0x258/0x2f0 [ 270.548909][ T9949] __device_attach+0x2c4/0x450 [ 270.548929][ T9949] device_initial_probe+0xa1/0xd0 [ 270.548950][ T9949] bus_probe_device+0x12a/0x220 [ 270.548965][ T9949] device_add+0x7d7/0xb80 [ 270.548983][ T9949] usb_new_device+0x9aa/0x1690 [ 270.549006][ T9949] hub_event+0x28e8/0x4d30 [ 270.549021][ T9949] process_scheduled_works+0xc3d/0x1630 [ 270.549040][ T9949] worker_thread+0xa47/0xfb0 [ 270.549058][ T9949] kthread+0x38b/0x480 [ 270.549080][ T9949] ret_from_fork+0x514/0xb70 [ 270.549104][ T9949] ret_from_fork_asm+0x1a/0x30 [ 270.549126][ T9949] [ 270.549131][ T9949] Freed by task 5692: [ 270.549140][ T9949] kasan_save_track+0x3e/0x80 [ 270.549165][ T9949] kasan_save_free_info+0x40/0x50 [ 270.549186][ T9949] __kasan_slab_free+0x5c/0x80 [ 270.549202][ T9949] kfree+0x1c5/0x650 [ 270.549221][ T9949] device_release+0xc4/0x1f0 [ 270.549244][ T9949] kobject_put+0x222/0x550 [ 270.549262][ T9949] usb_disable_device+0x611/0x8d0 [ 270.549287][ T9949] usb_disconnect+0x346/0x9a0 [ 270.549309][ T9949] hub_event+0x1bbb/0x4d30 [ 270.549324][ T9949] process_scheduled_works+0xc3d/0x1630 [ 270.549342][ T9949] worker_thread+0xa47/0xfb0 [ 270.549361][ T9949] kthread+0x38b/0x480 [ 270.549383][ T9949] ret_from_fork+0x514/0xb70 [ 270.549404][ T9949] ret_from_fork_asm+0x1a/0x30 [ 270.549426][ T9949] [ 270.549431][ T9949] The buggy address belongs to the object at ffff88807f6a7000 [ 270.549431][ T9949] which belongs to the cache kmalloc-2k of size 2048 [ 270.549448][ T9949] The buggy address is located 224 bytes inside of [ 270.549448][ T9949] freed 2048-byte region [ffff88807f6a7000, ffff88807f6a7800) [ 270.549468][ T9949] [ 270.549473][ T9949] The buggy address belongs to the physical page: [ 270.549484][ T9949] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f6a0 [ 270.549501][ T9949] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 270.549517][ T9949] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 270.549534][ T9949] page_type: f5(slab) [ 270.549552][ T9949] raw: 00fff00000000040 ffff88813ff1b000 dead000000000100 dead000000000122 [ 270.549569][ T9949] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 270.549587][ T9949] head: 00fff00000000040 ffff88813ff1b000 dead000000000100 dead000000000122 [ 270.549604][ T9949] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 270.549621][ T9949] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 270.549637][ T9949] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 270.549648][ T9949] page dumped because: kasan: bad access detected [ 270.549664][ T9949] page_owner tracks the page as allocated [ 270.549671][ T9949] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4970, tgid 4970 (klogd), ts 189734888829 [ 270.549703][ T9949] post_alloc_hook+0x1f9/0x250 [ 270.549725][ T9949] get_page_from_freelist+0x2209/0x2280 [ 270.549751][ T9949] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 270.549783][ T9949] allocate_slab+0x7d/0x620 [ 270.549802][ T9949] refill_objects+0x2d5/0x350 [ 270.549821][ T9949] __pcs_replace_empty_main+0x2c8/0x6c0 [ 270.549839][ T9949] __kmalloc_cache_noprof+0x396/0x600 [ 270.549862][ T9949] syslog_print+0x103/0x610 [ 270.549879][ T9949] do_syslog+0x583/0x7d0 [ 270.549894][ T9949] __x64_sys_syslog+0x7c/0x90 [ 270.549910][ T9949] do_syscall_64+0x166/0x520 [ 270.549925][ T9949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.549942][ T9949] page last free pid 8458 tgid 8458 ts 189653657355 stack trace: [ 270.549956][ T9949] __free_frozen_pages+0xc93/0xd90 [ 270.549979][ T9949] __slab_free+0x274/0x2c0 [ 270.550002][ T9949] qlist_free_all+0x99/0x100 [ 270.550025][ T9949] kasan_quarantine_reduce+0x148/0x160 [ 270.550049][ T9949] __kasan_slab_alloc+0x22/0x80 [ 270.550065][ T9949] __kmalloc_node_track_caller_noprof+0x446/0x720 [ 270.550090][ T9949] kstrdup+0x42/0x100 [ 270.550114][ T9949] __kernfs_new_node+0xa9/0x980 [ 270.550138][ T9949] kernfs_new_node+0xea/0x140 [ 270.550162][ T9949] __kernfs_create_file+0x4b/0x2e0 [ 270.550181][ T9949] sysfs_add_file_mode_ns+0x237/0x300 [ 270.550201][ T9949] internal_create_group+0x679/0x1180 [ 270.550225][ T9949] sysfs_create_groups+0x59/0x120 [ 270.550246][ T9949] ib_setup_port_attrs+0x1774/0x2420 [ 270.550262][ T9949] add_one_compat_dev+0x441/0x640 [ 270.550282][ T9949] rdma_dev_init_net+0x23e/0x2f0 [ 270.550304][ T9949] [ 270.550309][ T9949] Memory state around the buggy address: [ 270.550320][ T9949] ffff88807f6a6f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 270.550332][ T9949] ffff88807f6a7000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 270.550344][ T9949] >ffff88807f6a7080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 270.550353][ T9949] ^ [ 270.550363][ T9949] ffff88807f6a7100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 270.550375][ T9949] ffff88807f6a7180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 270.550384][ T9949] ================================================================== [ 270.559744][ T9949] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 271.368066][ T9949] CPU: 1 UID: 0 PID: 9949 Comm: syz.5.1307 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.378921][ T9949] Tainted: [L]=SOFTLOCKUP [ 271.383239][ T9949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.393296][ T9949] Call Trace: [ 271.396577][ T9949] [ 271.399504][ T9949] vpanic+0x56d/0xa70 [ 271.403499][ T9949] ? __pfx_vpanic+0x10/0x10 [ 271.408015][ T9949] panic+0xc5/0xd0 [ 271.411742][ T9949] ? __pfx_panic+0x10/0x10 [ 271.416167][ T9949] ? preempt_schedule_thunk+0x16/0x40 [ 271.421544][ T9949] ? dev_driver_string+0x35/0xd0 [ 271.426479][ T9949] ? preempt_schedule_thunk+0x16/0x40 [ 271.431868][ T9949] ? dev_driver_string+0x35/0xd0 [ 271.436804][ T9949] check_panic_on_warn+0x89/0xb0 [ 271.441747][ T9949] ? dev_driver_string+0x35/0xd0 [ 271.446681][ T9949] end_report+0x73/0x170 [ 271.450922][ T9949] ? dev_driver_string+0x35/0xd0 [ 271.455864][ T9949] kasan_report+0x128/0x150 [ 271.460374][ T9949] ? dev_driver_string+0x35/0xd0 [ 271.465315][ T9949] dev_driver_string+0x35/0xd0 [ 271.470075][ T9949] __dynamic_dev_dbg+0x1ae/0x2e0 [ 271.475015][ T9949] ? __mutex_lock+0x305/0x15a0 [ 271.479774][ T9949] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 271.485233][ T9949] ? __pfx_ima_file_free+0x10/0x10 [ 271.490346][ T9949] ? __asan_memset+0x22/0x50 [ 271.494945][ T9949] ? __fsnotify_parent+0x267/0x620 [ 271.500070][ T9949] ? display_close+0x4b/0x240 [ 271.504764][ T9949] display_close+0x1f9/0x240 [ 271.509362][ T9949] ? __pfx_display_close+0x10/0x10 [ 271.514480][ T9949] __fput+0x413/0xa50 [ 271.518476][ T9949] task_work_run+0x1d9/0x260 [ 271.523078][ T9949] ? __pfx_task_work_run+0x10/0x10 [ 271.528218][ T9949] exit_to_user_mode_loop+0x204/0x770 [ 271.533598][ T9949] ? rcu_is_watching+0x16/0xb0 [ 271.538364][ T9949] do_syscall_64+0x328/0x520 [ 271.542951][ T9949] ? trace_irq_disable+0x3b/0x140 [ 271.547986][ T9949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.554056][ T9949] ? clear_bhb_loop+0x70/0xc0 [ 271.558744][ T9949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.564639][ T9949] RIP: 0033:0x7fade079e159 [ 271.569059][ T9949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.588666][ T9949] RSP: 002b:00007ffc3a3f7378 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 271.597088][ T9949] RAX: 0000000000000000 RBX: 00007ffc3a3f7460 RCX: 00007fade079e159 [ 271.605066][ T9949] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 271.613037][ T9949] RBP: 00000000000414e4 R08: 0000000000000001 R09: 0000000000000000 [ 271.621022][ T9949] R10: 0000001b2f120000 R11: 0000000000000246 R12: 00007ffc3a3f74a0 [ 271.628996][ T9949] R13: 00007fade0a2609c R14: 000000000004211a R15: 00007fade0a26090 [ 271.636976][ T9949] [ 271.640133][ T9949] Kernel Offset: disabled [ 271.644446][ T9949] Rebooting in 86400 seconds..