last executing test programs: 7m19.21962681s ago: executing program 3 (id=284): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1a6) 7m19.174419304s ago: executing program 3 (id=286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd01000003e800140000006000000003082f00fe88a43de1a400000000000000047d01ff020000000000000000000000000001"], 0xfdef) 7m19.067136845s ago: executing program 3 (id=287): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000740)={0x20, 0x3, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x32, &(0x7f00000040c0)=0x4009, 0x5d) 7m16.693267773s ago: executing program 3 (id=290): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000003d80)='/proc/stat\x00', 0x0, 0x0) r1 = epoll_create(0x1) add_key(0x0, 0x0, &(0x7f00000000c0)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045634453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f3231323430333230323231363236", 0x8c, 0xfffffffffffffffc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x420240, 0x58) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b 7:'], 0xb8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000003dc0)={0x40000000}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x400000, 0x24, 0x3a}, 0x18) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=ANY=[@ANYBLOB="030200000000050000"], 0x9, 0x2) 7m16.646443719s ago: executing program 3 (id=291): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xa0, 0x100, 0xfffffff6, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000005480)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000480)=@IORING_OP_FILES_UPDATE={0x14, 0x41, 0x0, 0x0, 0x8, 0x0}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x804000, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000546760accf91e85f16c7a558041809a6680ad51b767e9855681c69dc933a20edd7638386efe36bb8c7292c3e37726a6834509bd07e287c1170318d1a8db366e19b", @ANYRES16=r5, @ANYBLOB="01032dbd7000ffdbdf2524000000180001801400020076657468315f766972745f7769666900"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x24044848) r6 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0) syz_usb_control_io$uac1(r6, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x82000, 0xa1) fsync(r8) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x41, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x2d}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_usb_control_io$sierra_net(r6, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="401505000000000000002b89"], 0x0, 0x0}) syz_usb_control_io$uac3(r6, 0x0, 0x0) 7m13.51290995s ago: executing program 3 (id=300): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000054c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xfd, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000040)="e1", 0x1}], 0x1}}, {{&(0x7f0000000800)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000840)="9f", 0x1}], 0x1}}], 0x2, 0x20040804) (async) shutdown(r3, 0x1) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r4, 0x0, 0x0, 0x14, 0x0) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r6 = socket$netlink(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) (async) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000002300)=""/4113, &(0x7f00000000c0)=0x1011) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 6m58.116515895s ago: executing program 32 (id=300): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000054c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xfd, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000040)="e1", 0x1}], 0x1}}, {{&(0x7f0000000800)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000840)="9f", 0x1}], 0x1}}], 0x2, 0x20040804) (async) shutdown(r3, 0x1) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r4, 0x0, 0x0, 0x14, 0x0) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r6 = socket$netlink(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) (async) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000002300)=""/4113, &(0x7f00000000c0)=0x1011) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 2m29.392098162s ago: executing program 2 (id=2562): r0 = socket(0x11, 0x3, 0x0) fadvise64(r0, 0x29f7, 0xf0a, 0x5) 2m28.847511684s ago: executing program 2 (id=2567): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/1/root/var/run\x00', 0x1ff) 2m28.405605408s ago: executing program 2 (id=2569): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) accept(r1, 0x0, &(0x7f0000000380)) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) 2m27.814236321s ago: executing program 2 (id=2572): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0x8) fsopen(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 2m27.308049424s ago: executing program 2 (id=2574): syz_clone3(&(0x7f0000006880)={0xb32a00, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m26.970778815s ago: executing program 2 (id=2575): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0xd, &(0x7f0000000080)={[{@subsystem='devices'}]}) mount$9p_xen(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x146060, 0x0) 2m11.518011949s ago: executing program 33 (id=2575): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0xd, &(0x7f0000000080)={[{@subsystem='devices'}]}) mount$9p_xen(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x146060, 0x0) 1m58.412898976s ago: executing program 5 (id=2691): r0 = memfd_create(&(0x7f0000000d80)='\xd55\xde\x82\xe1\x95\x817\xd0n\xa6\xc2\xd9}:\\\xcc\x10\nU\xca\xa1x\xba\xfd\x83\x96\x88f\x15t\xf3\xe1\x86\x8et0\xea\x81\xed\x1c\x11\xfb\xebJ\x9b\xaf*\x91\xdb\x94>1G\xca\x01<\xc8\xb3\xbd\xe8\x11\x16\xa6\'C\xd0\x8e\xa7J\xb5)\x12\x97>\xcf\xff1>Ne&\x15\xa0\xf1/&2p\xf7v\x01\x00\x00\x00\x00\x00\x00\x00\xf8\xca\xd0g\x9f\x14R\xf3\xfeU\xa8\xb5\xca\xc9\xdec`\x91\x13\x14\xab=Y\xc0\xc8\xc3A\x8d\xc4\x93\r\xa3\xd3\xe1\\\xe4\xfa3\x9b\x0e\x1f\xfc\xc3e>W\xed\x87\x10\'\x02\xad\x19\x9e\x9em\xebw|Dma\xc6\xb7\xcf\r0\x05S\r\x1b\xc1a\xf3\xc4%\"\x9cx\xc9\xf0uq[\x93P~{\xb9\x16\x1e\xbf\x02\xd4\x0e\x0f\xfd=\x11\x93\x89\xc3&\x845\xefF8\xfd(\x03\xda\xc1\x96\xf9\xf1\x11\x99\x85\xf9\xe7\x19\xf5\xd7\xa6w\x84afK\xfbIm\v\xb7\x92\rR\xff6\x86\xd4\xf2\xe5\xcf\x1a\xd6\xfe\x81\x8e\x96\xd6\xdb_\xe9-\xd0\xea\x14\xe6^\xc8\xcat\xa7\x18)\xd8o\xb2l\x9b\xf3\x0fj2\x10\xab_X4R\x00\x00\x00\x00\x00\x00\x00\x00|\xb0\xd7\xcf:\x15)\xf9G\xac)K%\x9b\xc5\xed\x97I\x15\xee8\x96\xf1\xea\xe2\xea\xc8\x80I\x02\x13\x1dw\xea]\xde3\xc9|\xc1CP\x9d\'\xd9\xe9Nx\xe1\x04e\x9fV\xaf\'\xa1T\x9c\xb7o\f`b\r\x88#\xcdR\xb9f\xc9\xfd\x03p\xc7\xfa*\xa0\xceX\xa1o3\r\xffFP;~;\x91\xf8\xa7h\n\xdb\x98\x81\b\x19\xba\bT^\xae\xa9\x9f\xef\x1e0\xdf\xdbwn\x16J\xef\xe3 \xa3\x15\xc8\x93\xc0\x1fl\xd9\\\xab\x96\xc3\xe8\xf2q]\xfcV?r\xf3\xdd\xe4J\x88\x05\xc4\xdc\xb5\xe9\xaf\xe4\xc0Kb\xff{\x15\x9d\xe7\xc0\'p%\xff\x88\xa9d\x7f\x8c\xa8\xac\xa1\xbeT\xb6*\x8b\x8cQM\"\xf5U\x06\fK\xe5z\xed,\a\xaasA\xf1R\x04\x0e\x18\x90\x9bk\xa9\xda}W\xe8\xde*Lt\x8b\x10\xd7\xb0\x069\x0f\xb5\xd8-', 0x2) fdatasync(r0) 1m58.151923306s ago: executing program 5 (id=2694): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x1, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000000c0)=[0xfffa]) 1m57.889288986s ago: executing program 5 (id=2696): setuid(0xee01) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) 1m57.615042505s ago: executing program 5 (id=2698): setpriority(0x2, 0x0, 0xe32) 1m50.065166703s ago: executing program 5 (id=2730): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7ffffff, 0x6, 0x403d031, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28012, r0, 0x23719000) syz_extract_tcp_res(0x0, 0x2, 0x546) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000380)={[0x5]}, 0x0, 0x0, 0x8) 1m47.604687101s ago: executing program 5 (id=2740): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x2]}, 0x8, 0x80000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r0, 0x0, 0x0, 0x0, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x4000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x66) 1m32.260412709s ago: executing program 34 (id=2740): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x2]}, 0x8, 0x80000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r0, 0x0, 0x0, 0x0, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x4000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x66) 6.048866313s ago: executing program 4 (id=3142): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) (fail_nth: 2) 6.024952375s ago: executing program 4 (id=3143): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) getsockname(r1, 0x0, &(0x7f0000000240)) 5.965435037s ago: executing program 4 (id=3144): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003980)={0x1, 0x0, [{0x4, 0xb9, &(0x7f0000000ac0)=""/185}]}) 5.847396748s ago: executing program 4 (id=3145): arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x101) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x6) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x80000000) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8000) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x80000000000000) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x87ad) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xd89) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x5) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x401) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7fff) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x6) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x9) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7fffffff) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x5) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x80) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x33) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xf707) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x4) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7) 5.745662812s ago: executing program 4 (id=3147): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r2, 0xc138fd20, &(0x7f0000000100)="0400000000") r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xa4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000a00)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB="08ff2f000000691b58"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000600)={0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="200b3e0000003e0e9679a68c23ce9c24adfa6ff952b692f56c38f03d58010300e9ec66efb1b098747257bb1276dfb9d992cc453b84cc52703d55edae854c506bfabfbf57"], &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x44, &(0x7f0000000640)={0xa0, 0x7, 0x1f, "40029947890acf51df75478fe9addf5a435b8f207f17700a05f83b8e5cbacb"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x30}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000700)={0x20, 0x80, 0x1c, {0xe, 0x5, 0x9, 0x48b1, 0xfcda, 0x63, 0x50a6, 0x2, 0x1, 0xd, 0xc, 0x200}}, &(0x7f0000000740)={0x20, 0x85, 0x4}, &(0x7f0000000780)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000007c0)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000800)={0x20, 0x89, 0x2}}) 3.537325478s ago: executing program 6 (id=3160): r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.379445076s ago: executing program 6 (id=3161): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f00000003c0)=@ethtool_cmd={0x2b, 0x3, 0x9, 0x81, 0x10, 0x7, 0x8, 0x5, 0x3, 0x2, 0x10000000, 0x2, 0x7, 0x0, 0x9, 0xcd9, [0x4, 0xcdaa]}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) setuid(0xee01) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000000)='proc\x00', 0x408203, &(0x7f0000000100)={@_ha_fsid={[0x1000, 0x2]}, {0x2, 0x8, 0x8, 0x9}}, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x9}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x31, 0x0, &(0x7f0000000040)) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000240)=0xb) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0) 3.22553124s ago: executing program 6 (id=3162): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003980)={0x1, 0x0, [{0x4, 0xb9, &(0x7f0000000ac0)=""/185}]}) 3.055249327s ago: executing program 6 (id=3165): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0xe802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)='N', 0x1) listen(r1, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000400)={0x40, 0x15, 0x6, "34dba0572b89"}, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) 2.672172s ago: executing program 4 (id=3171): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000006800)="10", 0x20) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) close(r1) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0xe) 2.296406457s ago: executing program 1 (id=3173): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003980)={0x1, 0x0, [{0x4, 0xb9, &(0x7f0000000ac0)=""/185}]}) 2.188321442s ago: executing program 1 (id=3175): r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @private}, &(0x7f0000000140)=0xc) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/llc/socket\x00') read$FUSE(r2, &(0x7f0000004080)={0x2020}, 0x2020) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r4, &(0x7f0000000280)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x2, 0x27}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffc66}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x800) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r7, 0x40086e81, &(0x7f0000000240)=0x7fffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) timer_create(0x2, 0x0, &(0x7f0000000480)) ioctl$PIO_CMAP(r6, 0x4b71, 0x0) r9 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000600)=ANY=[@ANYBLOB='+pids '], 0x6) write$cgroup_subtree(r9, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa08000600f9"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r12 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt(r12, 0x1, 0x309b, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0)=0x1000) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.051624551s ago: executing program 0 (id=3176): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)={0x1, 0x0, [{0xb3d6f7a7dc543318, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x2) 2.050795406s ago: executing program 1 (id=3177): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2.020334737s ago: executing program 0 (id=3178): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.950487202s ago: executing program 0 (id=3179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r2, 0xc138fd20, &(0x7f0000000100)="0400000000") r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xa4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200f14"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000a00)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB="08ff2f000000691b58"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000600)={0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="200b3e0000003e0e9679a68c23ce9c24adfa6ff952b692f56c38f03d58010300e9ec66efb1b098747257bb1276dfb9d992cc453b84cc52703d55edae854c506bfabfbf57"], &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x44, &(0x7f0000000640)={0xa0, 0x7, 0x1f, "40029947890acf51df75478fe9addf5a435b8f207f17700a05f83b8e5cbacb"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x30}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000700)={0x20, 0x80, 0x1c, {0xe, 0x5, 0x9, 0x48b1, 0xfcda, 0x63, 0x50a6, 0x2, 0x1, 0xd, 0xc, 0x200}}, &(0x7f0000000740)={0x20, 0x85, 0x4}, &(0x7f0000000780)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000007c0)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000800)={0x20, 0x89, 0x2}}) 1.361258812s ago: executing program 1 (id=3180): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (fail_nth: 2) 1.28776094s ago: executing program 0 (id=3181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) syz_usb_connect(0x2, 0x7b8, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0xb4, 0xc5, 0x4d, 0xff, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a6, 0x1, 0x0, 0x6, 0x20, 0x10, "", [{{0x9, 0x4, 0x64, 0x40, 0x10, 0xef, 0x51, 0xa, 0x4, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0xe40f, 0xf8, 0x5}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xe9b8, 0x57d, 0x6, "3a9c46fe"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x4, 0x7}]}], [{{0x9, 0x5, 0x2, 0x0, 0x8, 0xf2, 0x8, 0x42}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x0, 0x8, 0x5c, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x80, 0x37d5}]}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0xd, 0x2, 0x5, [@generic={0x19, 0x3, "64af685e326e05892eb3e50d467e439250315e2a144674"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x20, 0x71, 0x8, 0x40, [@generic={0x48, 0x21, "9a0e44443a7fe5cf2466ab2b740b2ea8bfb1aa8e67e2d1fa8220dd71ddc1bd120f56fd15a07c513fc5db50b9c4c4de5a56999ddc097cdd1e7059f08e9128e3cbf3eacf9478ae"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x6}]}}, {{0x9, 0x5, 0x109, 0x0, 0x20, 0x67, 0x3, 0x4, [@generic={0x9d, 0xa, "766ec8f9e9f9c843c358a78493f04006f02af679e3a24c877a9051a37e4a1f3c733346cb44208d386d5a8ea8296529fd5f2183ea2d1d629eba0ef62e0aac95a67907fa272dd332ec714be99426c23e381386e56d9a6bcaaa49d5e7eb1b4d2d23164676e6f47125583d5e363302ce3a355b7ab18c4b068cd3004b3514a7d1b71ab06c6dd8938c757386c18b6183fffb4e9e0ce6c3a9215b64495787"}, @generic={0x31, 0x22, "18acfa8cd72b7172886259fd9c7534f8449e6a0055564cb424e3236cb5b6c94eaf28a839f9a62dfceea520a3c908d7"}]}}, {{0x9, 0x5, 0x82, 0x0, 0x10, 0x40, 0xca, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x2}]}}, {{0x9, 0x5, 0xb, 0x1, 0x10, 0x0, 0x8, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x5}]}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x8, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x8}, @generic={0xfe, 0xc, "e4120c825444d0a2f7f4a7e0bb9c808aa3743d4fac0925a6414b36686fe3eeb24e7444f51826e493fc3c9595b67a66c3288ba22cf26f984bafc525b2c62c51bed6500ca7756f87a99a1c5b245843f42c0f254f64bc9e65b6e3ca919167bbb20e4d125df0594d953ed4c0d29422a46a79cec354f5ec369fb0a23c7ac41a1564ad4b0f201e6ced47117c912f551be1cdeed2d11942a39c49913c34dee595ef786845cf5740f795392f92984a6f5ce8ba867a6d76877a36715f04a8e7933925b124c9ddeea881b2acdcae8969e2d4ee37a04ad1de04c4b1a1bf6b1ad8837eb45f52f038466f5924e798d5bd29cce5a74eced14809386f3da9c493b629cb"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x400, 0x10, 0x5, 0x19, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xdd00}, @generic={0x91, 0x23, "7ae758e2c2da90ac3a0e7f14514aadf681e3c7f4edfb87cc6f639c13344870d3dfaec42ddc72f46099e8b8dbda30252641454d908db559bef410bc7e4cbe96ecc623f80968959b97f1e6704e81c36210222b9fd4c2b68b98a590ae8a1fc24394c6a07452c2d098963d81fac27b9d43778d2bdaff885ff84f46505a7f6f8a3f84f7f9122f282c2916f79d5f29064d68"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x8, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8}, @generic={0xf9, 0x22, "2cc0133b0e7abcf50da31f3ab1689feda5e5e0a3077fd966dbb22db26b597eb0be0d0c1d94b08da01e4efbee997e9595770e0023a9b8d63c5a8954e4fa5b8233c2c6b4066c7a12564b82c69b2edfc4dff3048264fc6611588bf6a2c9409288d605b1d729558150cdcb7e6cde7ce5f05704eb68c8868f7fc95dfd97d5d73764e500d6667277adbc747c68a7333906d4a4305192295bb8af84cf59c423931262be190e11d647de6500137562e9b23723faa66bdeb121c5cc96b7fca7bc8ce6b660e05426411fbd41ba3a6d4562a441b3cd04c91445ca8d35d392a5f7da4b924b60a5fe0a0d94d0ca040596a630e8b577045c54f10a767a66"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x7, 0x3, 0x5}}, {{0x9, 0x5, 0xd, 0x0, 0x208, 0x6, 0x2, 0x1}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0xf4, 0xff, 0x60, [@generic={0xcf, 0x3, "530ea4674e0188b797398ec805064288597f2b66a3ca0514a7ab858e49d806ca843b1fa6c9e356e3848ec7da05e0dee4826177e7b9fd6071663ce57054646bf1006342e9c69714eacc7a813e7b89147b93d3a2a764ad6c1090f49d3bcc6188dfe5c585c56b6b6a7a4b8c754ea13f8a17968f7468c0e78607966c8faf4bf614f962561e228d7263f18f373ed4f6cb6f2a97de4a9a140fc2b62036ac689281909d3c37de72d43948f01a917fc93d366d7a5138cb196d98e9b585c95353dbd8bcd8c7fae0d205fa035d534cbdb5a6"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xfa, 0x3}]}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x2, 0x2, 0x7f, [@generic={0xef, 0x22, "5909e0682e96abecec2e6e5ec35404774354f4e7695b9fb8682ee0b9703ac5d8aa1662d712323c5b132f682601b91db9b43b40f156072d479d165f6a33c97cbdfa1b7bc41478d3b7f8c79fe6318c2e4307c9b99b974fc9e193970680b745d4652b7e6a5f4339e676ee0997dff4be61ab751c7057d242d11bf417fe3c21ed6dc7d94dc1bdec7a0e194c24c75fbc2c9c5cf3c7bec3f61aebf0ed58c524334d2bf1ac592e1ed38d68141169a5f7f286ee6f016d7ba526a13b564b60f4331536de1f827a4eec10f7a487950e1646023a6c3c949f09c317a31ddaf28939a9c6a0d84f373ae42e483db2c6037d413901"}, @generic={0x94, 0x22, "e1595b474f6fbf18a9533a1e7dcfa045f501397795c5d099d7fa66751ce23cbbd91c29c492de027d50053c5a19b4f9d2f1e63a726645e0357adbd8b3db73fd93a9b8b3e0900726bece85bafcfb72776b71035a7e28b20be4c0f4e571a136d66187a80c17b26cb9394030969109517132d0dd91e699da8fda36713a09f5837e07eebf75c0c60f62632fdd0775587353db610a"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x2, 0x9b, 0xfc, [@generic={0x96, 0x7, "06f0d25559c53eaec82aa3e173f185dcb80cb3db6dd7f5f1b3178af88bea0ccaa4aa47e0690056827d8754d38c220fa858598ec90602fa534fe1f1d0bdf86441a4eb726447fd9b4f7fea1a59850ddf753846229cc705748d286023987ebde91151746ca8b66785250f49551450529e9794b8cc6b701f408f0797d2d0c860a58e3a3ce07a8b57e417c82a607614c17ea747909400"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x40, 0x64, 0x6}}]}}]}}]}}, &(0x7f0000001400)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x310, 0x2b, 0x9f, 0x3, 0x8, 0x9}, 0x10, &(0x7f0000001300)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x49, 0x0, 0x10, 0xfffb, 0x3}]}, 0x1, [{0xbc, &(0x7f0000001340)=@string={0xbc, 0x3, "c172f724878c6c1c50bfb80978943e19ad7852e6433e6381d04bc4aa38c2cf0ca1f7c70cf9376c8495a127edd19096d3789aebde3b45b44d5687c9f9153e3fcf4996e22cb16c9697cc9265d028b794fc84fe7c006663a8488f186d2c16c87fac838db2d21ff070f7e6f6a3777dc996de632a9654d803d04c6b743437e3ade18a5b097127466689741a5fba9f22c98e2ddeb84dc2e6560f1e518443182b3ad0d282b04b098875410fd91b44e9e4248be8695c9eb1dcad1a3b6ad1"}}]}) 1.082712688s ago: executing program 6 (id=3182): mmap(&(0x7f000085c000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023010000340200001c00000008000400ffffffff0800040000000000080003000100000008000100", @ANYRES32], 0x54}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r15], 0x1c}}, 0xc054) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000002) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x2, 0x5, 0x8, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x70}, 0x1, 0x7}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r16, 0x1, 0x3f, &(0x7f0000000300)=0x3, 0x4) sendmmsg$unix(r17, &(0x7f0000000000), 0x400000000000041, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 650.960496ms ago: executing program 1 (id=3183): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003980)={0x1, 0x0, [{0x4, 0xb9, &(0x7f0000000ac0)=""/185}]}) 460.207722ms ago: executing program 0 (id=3184): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001581c2908570b2a85396d0102030109021b08010001000b0904c8020103010203090504"], 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x3fb, 0x41, 0x0, 0x0, 0x20, 0x80000009, 0x0, 0x4bf, 0x80404, 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002300)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x2, 0x2, 0x4}}, 0x80, 0x0}}], 0x1, 0x4000000) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xfeff, 0x8000000, 0x2, '\x00', 0x657}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 394.993406ms ago: executing program 6 (id=3185): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x2000004, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe140f580000dfff0000080000040031623e1a0000000008", [0x7a, 0xd]}) (fail_nth: 2) 290.818669ms ago: executing program 1 (id=3186): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)={0x1, 0x0, [{0xb3d6f7a7dc543318, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x2) 0s ago: executing program 0 (id=3187): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): inted: [L]=SOFTLOCKUP [ 544.331105][T14348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 544.331115][T14348] Call Trace: [ 544.331121][T14348] [ 544.331130][T14348] dump_stack_lvl+0xe8/0x150 [ 544.331156][T14348] should_fail_ex+0x3eb/0x540 [ 544.331185][T14348] should_failslab+0xa8/0x100 [ 544.331206][T14348] __kmalloc_noprof+0xfe/0x720 [ 544.331229][T14348] ? rcu_is_watching+0x16/0xb0 [ 544.331247][T14348] ? tomoyo_realpath_from_path+0xef/0x640 [ 544.331263][T14348] ? tomoyo_realpath_from_path+0xef/0x640 [ 544.331287][T14348] tomoyo_realpath_from_path+0xef/0x640 [ 544.331313][T14348] ? tomoyo_path_number_perm+0x219/0x5f0 [ 544.331338][T14348] tomoyo_path_number_perm+0x246/0x5f0 [ 544.331364][T14348] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 544.331386][T14348] ? __lock_acquire+0x6df/0x2e50 [ 544.331426][T14348] ? hook_file_ioctl+0x1f2/0x600 [ 544.331469][T14348] ? __fget_files+0x2a/0x420 [ 544.331492][T14348] ? __fget_files+0x2a/0x420 [ 544.331511][T14348] ? __fget_files+0x3a2/0x420 [ 544.331540][T14348] ? __fget_files+0x2a/0x420 [ 544.331564][T14348] security_file_ioctl+0xc3/0x2a0 [ 544.331588][T14348] __se_sys_ioctl+0x47/0x170 [ 544.331616][T14348] do_syscall_64+0x166/0x520 [ 544.331634][T14348] ? trace_irq_disable+0x3b/0x140 [ 544.331659][T14348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.331677][T14348] ? clear_bhb_loop+0x70/0xc0 [ 544.331699][T14348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.331716][T14348] RIP: 0033:0x7f22c019e0d9 [ 544.331733][T14348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.331749][T14348] RSP: 002b:00007f22c1001028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.331769][T14348] RAX: ffffffffffffffda RBX: 00007f22c0425fa0 RCX: 00007f22c019e0d9 [ 544.331782][T14348] RDX: 0000200000000640 RSI: 00000000c0045005 RDI: 0000000000000003 [ 544.331794][T14348] RBP: 00007f22c1001090 R08: 0000000000000000 R09: 0000000000000000 [ 544.331806][T14348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.331818][T14348] R13: 00007f22c0426038 R14: 00007f22c0425fa0 R15: 00007ffda88b4058 [ 544.331847][T14348] [ 544.333439][T14348] ERROR: Out of memory at tomoyo_realpath_from_path. [ 544.457212][ T1993] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 544.620073][ T1993] usb 7-1: Using ep0 maxpacket: 16 [ 544.624890][ T1993] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 544.630312][ T1993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.630342][ T1993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.630362][ T1993] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 544.630401][ T1993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.638125][ T1993] usb 7-1: config 0 descriptor?? [ 544.842949][T14345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.843493][T14345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.856572][T14345] i2c i2c-0: dtv_property_process_set: SET cmd 0x000000ed undefined [ 544.861241][T14345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.861758][T14345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.957221][ T5694] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 545.107005][ T5694] usb 5-1: Using ep0 maxpacket: 32 [ 545.107837][ T5694] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 545.109341][ T5694] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 545.109363][ T5694] usb 5-1: config 0 has no interface number 0 [ 545.109399][ T5694] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 545.109422][ T5694] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 545.109441][ T5694] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 545.109484][ T5694] usb 5-1: config 0 interface 196 has no altsetting 0 [ 545.112837][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.112859][ T5694] usb 5-1: Product: syz [ 545.112872][ T5694] usb 5-1: Manufacturer: syz [ 545.112885][ T5694] usb 5-1: SerialNumber: syz [ 545.118862][ T5694] usb 5-1: config 0 descriptor?? [ 545.122543][T14357] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 545.301292][ T49] usb 2-1: USB disconnect, device number 39 [ 545.351085][ T1993] usbhid 7-1:0.0: can't add hid device: -71 [ 545.351219][ T1993] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 545.360657][ T1993] usb 7-1: USB disconnect, device number 18 [ 545.695802][T14369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.696340][T14369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.788409][ T5694] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 545.798277][ T5694] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 545.992871][ T5694] usb 5-1: USB disconnect, device number 102 [ 546.023383][T14378] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2984'. [ 546.033357][T14378] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2984'. [ 546.059635][ T5694] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 546.187259][ T1993] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 546.192980][T14386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.339385][ T1993] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 546.340491][ T1993] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.340535][ T1993] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 546.340555][ T1993] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 546.340577][ T1993] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 546.340614][ T1993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.539221][T14397] ieee802154 phy0 wpan0: encryption failed: -22 [ 546.589815][T14373] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd20 [ 546.911449][T14419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.911887][T14419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.983754][T14422] FAULT_INJECTION: forcing a failure. [ 546.983754][T14422] name failslab, interval 1, probability 0, space 0, times 0 [ 546.983825][T14422] CPU: 1 UID: 0 PID: 14422 Comm: syz.4.2992 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.983849][T14422] Tainted: [L]=SOFTLOCKUP [ 546.983854][T14422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 546.983864][T14422] Call Trace: [ 546.983871][T14422] [ 546.983879][T14422] dump_stack_lvl+0xe8/0x150 [ 546.983908][T14422] should_fail_ex+0x3eb/0x540 [ 546.983939][T14422] should_failslab+0xa8/0x100 [ 546.983960][T14422] __kmalloc_noprof+0xfe/0x720 [ 546.983982][T14422] ? rcu_is_watching+0x16/0xb0 [ 546.984001][T14422] ? tomoyo_realpath_from_path+0xef/0x640 [ 546.984017][T14422] ? tomoyo_realpath_from_path+0xef/0x640 [ 546.984049][T14422] tomoyo_realpath_from_path+0xef/0x640 [ 546.984076][T14422] ? tomoyo_path_number_perm+0x219/0x5f0 [ 546.984101][T14422] tomoyo_path_number_perm+0x246/0x5f0 [ 546.984126][T14422] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 546.984149][T14422] ? __lock_acquire+0x6df/0x2e50 [ 546.984188][T14422] ? hook_file_ioctl+0x1f2/0x600 [ 546.984231][T14422] ? __fget_files+0x2a/0x420 [ 546.984270][T14422] ? __fget_files+0x2a/0x420 [ 546.984289][T14422] ? __fget_files+0x3a2/0x420 [ 546.984308][T14422] ? __fget_files+0x2a/0x420 [ 546.984331][T14422] security_file_ioctl+0xc3/0x2a0 [ 546.984355][T14422] __se_sys_ioctl+0x47/0x170 [ 546.984383][T14422] do_syscall_64+0x166/0x520 [ 546.984401][T14422] ? trace_irq_disable+0x3b/0x140 [ 546.984426][T14422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.984444][T14422] ? clear_bhb_loop+0x70/0xc0 [ 546.984466][T14422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.984484][T14422] RIP: 0033:0x7f22c019e0d9 [ 546.984501][T14422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.984517][T14422] RSP: 002b:00007f22c1001028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.984536][T14422] RAX: ffffffffffffffda RBX: 00007f22c0425fa0 RCX: 00007f22c019e0d9 [ 546.984549][T14422] RDX: 00002000000001c0 RSI: 000000004008ae9c RDI: 0000000000000005 [ 546.984562][T14422] RBP: 00007f22c1001090 R08: 0000000000000000 R09: 0000000000000000 [ 546.984574][T14422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.984585][T14422] R13: 00007f22c0426038 R14: 00007f22c0425fa0 R15: 00007ffda88b4058 [ 546.984614][T14422] [ 546.984707][T14422] ERROR: Out of memory at tomoyo_realpath_from_path. [ 547.240626][T14425] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2993'. [ 547.428985][ T1993] [drm] Initialized gud 1.0.0 for 2-1:1.0 on minor 1 [ 547.578046][T14435] FAULT_INJECTION: forcing a failure. [ 547.578046][T14435] name failslab, interval 1, probability 0, space 0, times 0 [ 547.591148][T14435] CPU: 0 UID: 0 PID: 14435 Comm: syz.6.2997 Tainted: G L syzkaller #0 PREEMPT(full) [ 547.591189][T14435] Tainted: [L]=SOFTLOCKUP [ 547.591196][T14435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 547.591208][T14435] Call Trace: [ 547.591216][T14435] [ 547.591224][T14435] dump_stack_lvl+0xe8/0x150 [ 547.591256][T14435] should_fail_ex+0x3eb/0x540 [ 547.591285][T14435] should_failslab+0xa8/0x100 [ 547.591303][T14435] ? do_getname+0x2e/0x250 [ 547.591318][T14435] kmem_cache_alloc_noprof+0xa1/0x600 [ 547.591343][T14435] ? do_getname+0x2e/0x250 [ 547.591367][T14435] do_getname+0x2e/0x250 [ 547.591383][T14435] ? getname_flags+0x11/0x20 [ 547.591400][T14435] do_sys_openat2+0xcc/0x200 [ 547.591419][T14435] ? __pfx_do_sys_openat2+0x10/0x10 [ 547.591437][T14435] ? ksys_write+0x242/0x270 [ 547.591460][T14435] ? __pfx_ksys_write+0x10/0x10 [ 547.591483][T14435] __x64_sys_openat+0x138/0x170 [ 547.591506][T14435] do_syscall_64+0x166/0x520 [ 547.591525][T14435] ? trace_irq_disable+0x3b/0x140 [ 547.591559][T14435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.591576][T14435] ? clear_bhb_loop+0x70/0xc0 [ 547.591597][T14435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.591615][T14435] RIP: 0033:0x7fa550f9e0d9 [ 547.591632][T14435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.591647][T14435] RSP: 002b:00007fa54f1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 547.591668][T14435] RAX: ffffffffffffffda RBX: 00007fa551226090 RCX: 00007fa550f9e0d9 [ 547.591682][T14435] RDX: 0000000000004180 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 547.591694][T14435] RBP: 00007fa54f1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 547.591705][T14435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.591715][T14435] R13: 00007fa551226128 R14: 00007fa551226090 R15: 00007ffc46846648 [ 547.591741][T14435] [ 547.629996][ T49] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 547.777890][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 547.779003][ T49] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 547.780453][ T49] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 547.780482][ T49] usb 5-1: config 0 interface 0 has no altsetting 0 [ 547.786094][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.786116][ T49] usb 5-1: Product: syz [ 547.786129][ T49] usb 5-1: Manufacturer: syz [ 547.786143][ T49] usb 5-1: SerialNumber: syz [ 547.801552][ T49] usb 5-1: config 0 descriptor?? [ 547.833564][ T1993] gud 2-1:1.0: [drm] Cannot find any crtc or sizes [ 547.927278][T14442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.936321][T14442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.014887][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 548.018223][ T49] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input146 [ 548.026998][ T5694] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 548.028027][ T49] imon:send_packet: packet tx failed (-71) [ 548.038333][ T5702] usb 2-1: USB disconnect, device number 40 [ 548.047422][ T49] imon 5-1:0.0: panel buttons/knobs setup failed [ 548.113175][ T1993] Console: switching to colour frame buffer device 128x48 [ 548.117077][ T49] rc_core: IR keymap rc-imon-pad not found [ 548.117093][ T49] Registered IR keymap rc-empty [ 548.117163][ T49] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 548.117179][ T49] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 548.119050][ T49] imon:send_packet: packet tx failed (-71) [ 548.121355][ T1993] gud 2-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 548.136503][ T5702] Console: switching to colour VGA+ 80x25 [ 548.136974][ T49] imon 5-1:0.0: remote input dev register failed [ 548.137120][ T49] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 548.176960][ T5694] usb 7-1: Using ep0 maxpacket: 32 [ 548.178980][ T5694] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 548.182743][ T5694] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 548.182766][ T5694] usb 7-1: config 0 has no interface number 0 [ 548.182804][ T5694] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 548.182826][ T5694] usb 7-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 548.182847][ T5694] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 548.182868][ T5694] usb 7-1: config 0 interface 196 has no altsetting 0 [ 548.197181][ T5694] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.197216][ T5694] usb 7-1: Product: syz [ 548.197232][ T5694] usb 7-1: Manufacturer: syz [ 548.197248][ T5694] usb 7-1: SerialNumber: syz [ 548.206291][ T5694] usb 7-1: config 0 descriptor?? [ 548.210239][T14438] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 548.246640][ T49] imon 5-1:0.0: unable to initialize intf0, err 0 [ 548.246660][ T49] imon:imon_probe: failed to initialize context! [ 548.246672][ T49] imon 5-1:0.0: unable to register, err -19 [ 548.269695][ T49] usb 5-1: USB disconnect, device number 103 [ 548.277167][T14118] udevd[14118]: setting owner of /dev/bus/usb/005/103 to uid=0, gid=0 failed: No such file or directory [ 548.555546][T14445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.565666][T14445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.706239][T14450] FAULT_INJECTION: forcing a failure. [ 548.706239][T14450] name failslab, interval 1, probability 0, space 0, times 0 [ 548.706272][T14450] CPU: 1 UID: 0 PID: 14450 Comm: syz.1.3003 Tainted: G L syzkaller #0 PREEMPT(full) [ 548.706297][T14450] Tainted: [L]=SOFTLOCKUP [ 548.706304][T14450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 548.706314][T14450] Call Trace: [ 548.706320][T14450] [ 548.706327][T14450] dump_stack_lvl+0xe8/0x150 [ 548.706361][T14450] should_fail_ex+0x3eb/0x540 [ 548.706394][T14450] should_failslab+0xa8/0x100 [ 548.706415][T14450] __kmalloc_noprof+0xfe/0x720 [ 548.706438][T14450] ? rcu_is_watching+0x16/0xb0 [ 548.706457][T14450] ? tomoyo_realpath_from_path+0xef/0x640 [ 548.706474][T14450] ? tomoyo_realpath_from_path+0xef/0x640 [ 548.706497][T14450] tomoyo_realpath_from_path+0xef/0x640 [ 548.706524][T14450] ? tomoyo_path_number_perm+0x219/0x5f0 [ 548.706548][T14450] tomoyo_path_number_perm+0x246/0x5f0 [ 548.706584][T14450] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 548.706606][T14450] ? __lock_acquire+0x6df/0x2e50 [ 548.706645][T14450] ? hook_file_ioctl+0x1f2/0x600 [ 548.706688][T14450] ? __fget_files+0x2a/0x420 [ 548.706710][T14450] ? __fget_files+0x2a/0x420 [ 548.706729][T14450] ? __fget_files+0x3a2/0x420 [ 548.706748][T14450] ? __fget_files+0x2a/0x420 [ 548.706772][T14450] security_file_ioctl+0xc3/0x2a0 [ 548.706797][T14450] __se_sys_ioctl+0x47/0x170 [ 548.706824][T14450] do_syscall_64+0x166/0x520 [ 548.706842][T14450] ? trace_irq_disable+0x3b/0x140 [ 548.706867][T14450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.706885][T14450] ? clear_bhb_loop+0x70/0xc0 [ 548.706907][T14450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.706925][T14450] RIP: 0033:0x7fa36139e0d9 [ 548.706943][T14450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.706958][T14450] RSP: 002b:00007fa3622e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 548.706978][T14450] RAX: ffffffffffffffda RBX: 00007fa361625fa0 RCX: 00007fa36139e0d9 [ 548.706991][T14450] RDX: 0000200000000000 RSI: 000000004004af61 RDI: 0000000000000003 [ 548.707004][T14450] RBP: 00007fa3622e9090 R08: 0000000000000000 R09: 0000000000000000 [ 548.707016][T14450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.707027][T14450] R13: 00007fa361626038 R14: 00007fa361625fa0 R15: 00007fff4c351408 [ 548.707056][T14450] [ 548.707954][T14450] ERROR: Out of memory at tomoyo_realpath_from_path. [ 548.905268][ T5694] ipheth 7-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 548.923383][ T5694] ipheth 7-1:0.196: Apple iPhone USB Ethernet device attached [ 549.112028][ T49] usb 7-1: USB disconnect, device number 19 [ 549.129167][ T5702] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 549.158035][ T49] ipheth 7-1:0.196: Apple iPhone USB Ethernet now disconnected [ 549.278741][ T5702] usb 2-1: Using ep0 maxpacket: 32 [ 549.280716][ T5702] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 549.281721][ T5702] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 549.281765][ T5702] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 549.281789][ T5702] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 549.281814][ T5702] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 549.295688][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.295714][ T5702] usb 2-1: Product: syz [ 549.295728][ T5702] usb 2-1: Manufacturer: syz [ 549.295741][ T5702] usb 2-1: SerialNumber: syz [ 549.313380][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 549.318599][ T5702] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input148 [ 549.539226][ T5702] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 549.539263][ T5702] (id 0x00) [ 549.749609][ T5702] rc_core: IR keymap rc-imon-pad not found [ 549.749643][ T5702] Registered IR keymap rc-empty [ 549.749733][ T5702] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 549.749753][ T5702] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 549.777196][ T5702] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 549.786029][ T5702] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input149 [ 549.815921][ T5702] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:41> initialized [ 549.944530][T14485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.944950][T14485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.962864][T14485] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd20 [ 550.843682][T14505] FAULT_INJECTION: forcing a failure. [ 550.843682][T14505] name failslab, interval 1, probability 0, space 0, times 0 [ 550.843733][T14505] CPU: 1 UID: 0 PID: 14505 Comm: syz.6.3014 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.843760][T14505] Tainted: [L]=SOFTLOCKUP [ 550.843767][T14505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 550.843779][T14505] Call Trace: [ 550.843786][T14505] [ 550.843795][T14505] dump_stack_lvl+0xe8/0x150 [ 550.843825][T14505] should_fail_ex+0x3eb/0x540 [ 550.843874][T14505] should_failslab+0xa8/0x100 [ 550.843893][T14505] ? vm_area_dup+0x28/0x760 [ 550.843917][T14505] kmem_cache_alloc_noprof+0xa1/0x600 [ 550.843941][T14505] ? __kernel_text_address+0xd/0x30 [ 550.843969][T14505] ? unwind_get_return_address+0x4d/0x90 [ 550.843988][T14505] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 550.844013][T14505] ? vm_area_dup+0x28/0x760 [ 550.844042][T14505] vm_area_dup+0x28/0x760 [ 550.844064][T14505] ? __split_vma+0x1be/0xa60 [ 550.844087][T14505] __split_vma+0x1d7/0xa60 [ 550.844111][T14505] ? mas_next_slot+0xc91/0xd70 [ 550.844134][T14505] ? __pfx___split_vma+0x10/0x10 [ 550.844165][T14505] ? mas_find+0x6d6/0xcb0 [ 550.844189][T14505] vms_gather_munmap_vmas+0x4e3/0x1370 [ 550.844232][T14505] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 550.844259][T14505] ? up_write+0x19d/0x4a0 [ 550.844285][T14505] ? __lock_acquire+0x6df/0x2e50 [ 550.844321][T14505] do_vmi_align_munmap+0x2b4/0x4b0 [ 550.844375][T14505] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 550.844422][T14505] ? mas_walk+0x37e/0x490 [ 550.844451][T14505] ? mas_find+0x642/0xcb0 [ 550.844473][T14505] do_vmi_munmap+0x252/0x2d0 [ 550.844505][T14505] do_munmap+0xf5/0x160 [ 550.844525][T14505] ? __lock_acquire+0x6df/0x2e50 [ 550.844545][T14505] ? __pfx_do_munmap+0x10/0x10 [ 550.844579][T14505] mremap_to+0x33a/0x8d0 [ 550.844614][T14505] ? __pfx_mremap_to+0x10/0x10 [ 550.844641][T14505] ? __pfx_mtree_load+0x10/0x10 [ 550.844660][T14505] ? __pfx_check_prep_vma+0x10/0x10 [ 550.844698][T14505] __se_sys_mremap+0xf59/0x12d0 [ 550.844727][T14505] ? ksys_write+0x1e6/0x270 [ 550.844751][T14505] ? __pfx___se_sys_mremap+0x10/0x10 [ 550.844778][T14505] ? __mutex_unlock_slowpath+0x731/0x900 [ 550.844800][T14505] ? __fget_files+0x2a/0x420 [ 550.844823][T14505] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 550.844841][T14505] ? __fget_files+0x3a2/0x420 [ 550.844876][T14505] ? __pfx_ksys_write+0x10/0x10 [ 550.844904][T14505] ? __x64_sys_mremap+0x20/0xc0 [ 550.844932][T14505] do_syscall_64+0x166/0x520 [ 550.844949][T14505] ? trace_irq_disable+0x3b/0x140 [ 550.844973][T14505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.844992][T14505] ? clear_bhb_loop+0x70/0xc0 [ 550.845014][T14505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.845032][T14505] RIP: 0033:0x7fa550f9e0d9 [ 550.845049][T14505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.845065][T14505] RSP: 002b:00007fa54f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 550.845085][T14505] RAX: ffffffffffffffda RBX: 00007fa551225fa0 RCX: 00007fa550f9e0d9 [ 550.845099][T14505] RDX: 0000000000600000 RSI: 0000000000a00000 RDI: 0000200000000000 [ 550.845111][T14505] RBP: 00007fa54f1f6090 R08: 0000200000a00000 R09: 0000000000000000 [ 550.845124][T14505] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 550.845135][T14505] R13: 00007fa551226038 R14: 00007fa551225fa0 R15: 00007ffc46846648 [ 550.845164][T14505] [ 550.929649][ T5763] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 551.163941][ T5763] usb 5-1: Using ep0 maxpacket: 32 [ 551.181617][ T5763] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 551.215018][ T5763] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 551.215046][ T5763] usb 5-1: config 0 has no interface number 0 [ 551.215086][ T5763] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 551.215110][ T5763] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 551.215139][ T5763] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 551.215162][ T5763] usb 5-1: config 0 interface 196 has no altsetting 0 [ 551.258220][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.258247][ T5763] usb 5-1: Product: syz [ 551.258261][ T5763] usb 5-1: Manufacturer: syz [ 551.258274][ T5763] usb 5-1: SerialNumber: syz [ 551.269878][ T5763] usb 5-1: config 0 descriptor?? [ 551.271884][T14511] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 551.404442][T14525] imon:vfd_write: invalid payload size [ 551.573080][T14530] FAULT_INJECTION: forcing a failure. [ 551.573080][T14530] name failslab, interval 1, probability 0, space 0, times 0 [ 551.573126][T14530] CPU: 1 UID: 0 PID: 14530 Comm: syz.0.3020 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.573150][T14530] Tainted: [L]=SOFTLOCKUP [ 551.573156][T14530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 551.573165][T14530] Call Trace: [ 551.573172][T14530] [ 551.573180][T14530] dump_stack_lvl+0xe8/0x150 [ 551.573208][T14530] should_fail_ex+0x3eb/0x540 [ 551.573238][T14530] should_failslab+0xa8/0x100 [ 551.573258][T14530] __kmalloc_noprof+0xfe/0x720 [ 551.573282][T14530] ? rcu_is_watching+0x16/0xb0 [ 551.573300][T14530] ? tomoyo_realpath_from_path+0xef/0x640 [ 551.573317][T14530] ? tomoyo_realpath_from_path+0xef/0x640 [ 551.573342][T14530] tomoyo_realpath_from_path+0xef/0x640 [ 551.573369][T14530] ? tomoyo_path_number_perm+0x219/0x5f0 [ 551.573394][T14530] tomoyo_path_number_perm+0x246/0x5f0 [ 551.573420][T14530] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 551.573443][T14530] ? __lock_acquire+0x6df/0x2e50 [ 551.573484][T14530] ? hook_file_ioctl+0x1f2/0x600 [ 551.573528][T14530] ? __fget_files+0x2a/0x420 [ 551.573551][T14530] ? __fget_files+0x2a/0x420 [ 551.573570][T14530] ? __fget_files+0x3a2/0x420 [ 551.573588][T14530] ? __fget_files+0x2a/0x420 [ 551.573612][T14530] security_file_ioctl+0xc3/0x2a0 [ 551.573637][T14530] __se_sys_ioctl+0x47/0x170 [ 551.573664][T14530] do_syscall_64+0x166/0x520 [ 551.573683][T14530] ? trace_irq_disable+0x3b/0x140 [ 551.573707][T14530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.573726][T14530] ? clear_bhb_loop+0x70/0xc0 [ 551.573748][T14530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.573780][T14530] RIP: 0033:0x7f789879e0d9 [ 551.573798][T14530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.573813][T14530] RSP: 002b:00007f78996ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 551.573833][T14530] RAX: ffffffffffffffda RBX: 00007f7898a25fa0 RCX: 00007f789879e0d9 [ 551.573846][T14530] RDX: 0000200000000280 RSI: 0000000000004c02 RDI: 0000000000000003 [ 551.573858][T14530] RBP: 00007f78996ca090 R08: 0000000000000000 R09: 0000000000000000 [ 551.573870][T14530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.573881][T14530] R13: 00007f7898a26038 R14: 00007f7898a25fa0 R15: 00007ffefe507188 [ 551.573910][T14530] [ 551.573989][T14530] ERROR: Out of memory at tomoyo_realpath_from_path. [ 551.803321][ T5702] usb 2-1: USB disconnect, device number 41 [ 551.982838][T14538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.984809][T14538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.993817][T14538] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd20 [ 552.041226][ T5763] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 552.054294][ T5763] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 552.217764][ T5687] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 552.244136][ T5751] usb 5-1: USB disconnect, device number 104 [ 552.285017][ T5751] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 552.377701][ T5687] usb 7-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 552.380843][ T5687] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.380887][ T5687] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.386031][ T5687] usb 7-1: config 0 descriptor?? [ 552.500550][T14553] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 552.669775][ T30] audit: type=1326 audit(1787821062.682:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14558 comm="syz.0.3025" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f789879e0d9 code=0x0 [ 552.934241][T14573] FAULT_INJECTION: forcing a failure. [ 552.934241][T14573] name failslab, interval 1, probability 0, space 0, times 0 [ 552.955915][T14573] CPU: 1 UID: 0 PID: 14573 Comm: syz.1.3027 Tainted: G L syzkaller #0 PREEMPT(full) [ 552.955947][T14573] Tainted: [L]=SOFTLOCKUP [ 552.955955][T14573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 552.955967][T14573] Call Trace: [ 552.955975][T14573] [ 552.955984][T14573] dump_stack_lvl+0xe8/0x150 [ 552.956014][T14573] should_fail_ex+0x3eb/0x540 [ 552.956044][T14573] should_failslab+0xa8/0x100 [ 552.956066][T14573] __kvmalloc_node_noprof+0x176/0x820 [ 552.956094][T14573] ? aa_file_perm+0x4ed/0x15f0 [ 552.956113][T14573] ? register_lock_class+0x31/0x2e0 [ 552.956138][T14573] ? seq_read_iter+0x1ea/0xca0 [ 552.956164][T14573] ? seq_read_iter+0x1ea/0xca0 [ 552.956197][T14573] seq_read_iter+0x1ea/0xca0 [ 552.956239][T14573] seq_read+0x367/0x480 [ 552.956274][T14573] ? __pfx_seq_read+0x10/0x10 [ 552.956313][T14573] ? rw_verify_area+0x24a/0x4c0 [ 552.956339][T14573] ? __pfx_seq_read+0x10/0x10 [ 552.956365][T14573] vfs_read+0x213/0xa80 [ 552.956390][T14573] ? __pfx___mutex_lock+0x10/0x10 [ 552.956411][T14573] ? __pfx_vfs_read+0x10/0x10 [ 552.956435][T14573] ? __fget_files+0x2a/0x420 [ 552.956461][T14573] ? __fget_files+0x3a2/0x420 [ 552.956481][T14573] ? __fget_files+0x2a/0x420 [ 552.956511][T14573] ksys_read+0x150/0x270 [ 552.956536][T14573] ? __pfx_ksys_read+0x10/0x10 [ 552.956571][T14573] do_syscall_64+0x166/0x520 [ 552.956590][T14573] ? trace_irq_disable+0x3b/0x140 [ 552.956615][T14573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.956635][T14573] ? clear_bhb_loop+0x70/0xc0 [ 552.956658][T14573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.956677][T14573] RIP: 0033:0x7fa36139e0d9 [ 552.956696][T14573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.956712][T14573] RSP: 002b:00007fa3622e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 552.956732][T14573] RAX: ffffffffffffffda RBX: 00007fa361625fa0 RCX: 00007fa36139e0d9 [ 552.956746][T14573] RDX: 0000000000002020 RSI: 0000200000002140 RDI: 0000000000000003 [ 552.956759][T14573] RBP: 00007fa3622e9090 R08: 0000000000000000 R09: 0000000000000000 [ 552.956771][T14573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.956785][T14573] R13: 00007fa361626038 R14: 00007fa361625fa0 R15: 00007fff4c351408 [ 552.956813][T14573] [ 553.018256][ T5687] usbhid 7-1:0.0: can't add hid device: -71 [ 553.018355][ T5687] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 553.024377][ T5687] usb 7-1: USB disconnect, device number 20 [ 553.510985][ T5615] Bluetooth: hci5: unexpected event for opcode 0x2039 [ 553.806872][ T5687] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 553.976990][ T5687] usb 7-1: Using ep0 maxpacket: 32 [ 553.977854][ T5687] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 553.978996][ T5687] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 553.979038][ T5687] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 553.979062][ T5687] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 553.979086][ T5687] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 553.981437][ T5687] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.981457][ T5687] usb 7-1: Product: syz [ 553.981471][ T5687] usb 7-1: Manufacturer: syz [ 553.981484][ T5687] usb 7-1: SerialNumber: syz [ 553.993057][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 553.997286][ T5687] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input152 [ 554.115199][T14593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.125729][T14593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.130859][T14593] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd20 [ 554.216927][ T5687] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 554.216972][ T5687] (id 0x00) [ 554.253696][T14598] FAULT_INJECTION: forcing a failure. [ 554.253696][T14598] name failslab, interval 1, probability 0, space 0, times 0 [ 554.253729][T14598] CPU: 0 UID: 0 PID: 14598 Comm: syz.4.3035 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.253754][T14598] Tainted: [L]=SOFTLOCKUP [ 554.253761][T14598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.253771][T14598] Call Trace: [ 554.253777][T14598] [ 554.253784][T14598] dump_stack_lvl+0xe8/0x150 [ 554.253812][T14598] should_fail_ex+0x3eb/0x540 [ 554.253841][T14598] should_failslab+0xa8/0x100 [ 554.253860][T14598] ? vm_area_alloc+0x24/0x140 [ 554.253884][T14598] kmem_cache_alloc_noprof+0xa1/0x600 [ 554.253909][T14598] ? vm_area_alloc+0x24/0x140 [ 554.253938][T14598] vm_area_alloc+0x24/0x140 [ 554.253962][T14598] mmap_region+0x12cb/0x2240 [ 554.253993][T14598] ? __pfx_mmap_region+0x10/0x10 [ 554.254010][T14598] ? process_measurement+0x7b2/0x1c10 [ 554.254035][T14598] ? up_write+0x19d/0x4a0 [ 554.254061][T14598] ? __lock_acquire+0x6df/0x2e50 [ 554.254100][T14598] ? __pfx_process_measurement+0x10/0x10 [ 554.254190][T14598] ? __lock_acquire+0x6df/0x2e50 [ 554.254216][T14598] ? cap_mmap_addr+0xaf/0x100 [ 554.254240][T14598] ? bpf_lsm_mmap_addr+0x9/0x50 [ 554.254260][T14598] ? security_mmap_addr+0x71/0x240 [ 554.254284][T14598] ? shmem_mapping+0xd/0x50 [ 554.254310][T14598] ? memfd_check_seals_mmap+0xc5/0x220 [ 554.254332][T14598] do_mmap+0xe0a/0x1300 [ 554.254355][T14598] ? get_pid_task+0x20/0x1f0 [ 554.254397][T14598] ? __pfx_do_mmap+0x10/0x10 [ 554.254427][T14598] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 554.254451][T14598] ? down_write_killable+0x17e/0x240 [ 554.254485][T14598] ? __pfx_down_write_killable+0x10/0x10 [ 554.254517][T14598] vm_mmap_pgoff+0x272/0x4e0 [ 554.254548][T14598] ? lock_acquire+0x115/0x350 [ 554.254577][T14598] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 554.254604][T14598] ? __fget_files+0x2a/0x420 [ 554.254629][T14598] ? __fget_files+0x3a2/0x420 [ 554.254649][T14598] ? __fget_files+0x2a/0x420 [ 554.254673][T14598] ksys_mmap_pgoff+0x4dc/0x760 [ 554.254699][T14598] do_syscall_64+0x166/0x520 [ 554.254716][T14598] ? trace_irq_disable+0x3b/0x140 [ 554.254742][T14598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.254761][T14598] ? clear_bhb_loop+0x70/0xc0 [ 554.254783][T14598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.254801][T14598] RIP: 0033:0x7f22c019e0d9 [ 554.254818][T14598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.254834][T14598] RSP: 002b:00007f22c1001028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 554.254853][T14598] RAX: ffffffffffffffda RBX: 00007f22c0425fa0 RCX: 00007f22c019e0d9 [ 554.254867][T14598] RDX: 000000000300000b RSI: 000000000000103c RDI: 00007fffffffd000 [ 554.254880][T14598] RBP: 00007f22c1001090 R08: 0000000000000004 R09: 0000000000004000 [ 554.254892][T14598] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 554.254904][T14598] R13: 00007f22c0426038 R14: 00007f22c0425fa0 R15: 00007ffda88b4058 [ 554.254932][T14598] [ 554.291412][ T5687] rc_core: IR keymap rc-imon-pad not found [ 554.291429][ T5687] Registered IR keymap rc-empty [ 554.291501][ T5687] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 554.291518][ T5687] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 554.440137][ T5687] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 554.447811][ T5687] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input153 [ 554.464447][ T5687] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:21> initialized [ 554.481812][ T5347] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 554.706942][ T5347] usb 2-1: Using ep0 maxpacket: 32 [ 554.714128][ T5347] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 554.715252][ T5347] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 554.715276][ T5347] usb 2-1: config 0 has no interface number 0 [ 554.715313][ T5347] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 554.715336][ T5347] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 554.715356][ T5347] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 554.715379][ T5347] usb 2-1: config 0 interface 196 has no altsetting 0 [ 554.717341][ T5347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.717363][ T5347] usb 2-1: Product: syz [ 554.717377][ T5347] usb 2-1: Manufacturer: syz [ 554.717394][ T5347] usb 2-1: SerialNumber: syz [ 554.739812][ T5347] usb 2-1: config 0 descriptor?? [ 554.743819][T14595] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 554.836262][T14607] FAULT_INJECTION: forcing a failure. [ 554.836262][T14607] name failslab, interval 1, probability 0, space 0, times 0 [ 554.836294][T14607] CPU: 1 UID: 0 PID: 14607 Comm: syz.0.3038 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.836318][T14607] Tainted: [L]=SOFTLOCKUP [ 554.836325][T14607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.836336][T14607] Call Trace: [ 554.836342][T14607] [ 554.836349][T14607] dump_stack_lvl+0xe8/0x150 [ 554.836381][T14607] should_fail_ex+0x3eb/0x540 [ 554.836411][T14607] should_failslab+0xa8/0x100 [ 554.836440][T14607] __kmalloc_noprof+0xfe/0x720 [ 554.836463][T14607] ? rcu_is_watching+0x16/0xb0 [ 554.836482][T14607] ? tomoyo_realpath_from_path+0xef/0x640 [ 554.836500][T14607] ? tomoyo_realpath_from_path+0xef/0x640 [ 554.836524][T14607] tomoyo_realpath_from_path+0xef/0x640 [ 554.836551][T14607] ? tomoyo_path_number_perm+0x219/0x5f0 [ 554.836574][T14607] tomoyo_path_number_perm+0x246/0x5f0 [ 554.836601][T14607] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 554.836624][T14607] ? __lock_acquire+0x6df/0x2e50 [ 554.836662][T14607] ? hook_file_ioctl+0x1f2/0x600 [ 554.836705][T14607] ? __fget_files+0x2a/0x420 [ 554.836729][T14607] ? __fget_files+0x2a/0x420 [ 554.836748][T14607] ? __fget_files+0x3a2/0x420 [ 554.836766][T14607] ? __fget_files+0x2a/0x420 [ 554.836789][T14607] security_file_ioctl+0xc3/0x2a0 [ 554.836814][T14607] __se_sys_ioctl+0x47/0x170 [ 554.836841][T14607] do_syscall_64+0x166/0x520 [ 554.836860][T14607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.836879][T14607] ? clear_bhb_loop+0x70/0xc0 [ 554.836901][T14607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.836919][T14607] RIP: 0033:0x7f789879e0d9 [ 554.836936][T14607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.836952][T14607] RSP: 002b:00007f78996ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 554.836971][T14607] RAX: ffffffffffffffda RBX: 00007f7898a25fa0 RCX: 00007f789879e0d9 [ 554.836985][T14607] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 554.836997][T14607] RBP: 00007f78996ca090 R08: 0000000000000000 R09: 0000000000000000 [ 554.837008][T14607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.837020][T14607] R13: 00007f7898a26038 R14: 00007f7898a25fa0 R15: 00007ffefe507188 [ 554.837049][T14607] [ 554.839093][T14607] ERROR: Out of memory at tomoyo_realpath_from_path. [ 555.060914][T14614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.061411][T14614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.272230][T14614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.283586][T14614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.419770][ T5347] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 555.428723][ T5347] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 555.623513][ T10] usb 2-1: USB disconnect, device number 42 [ 555.669000][ T10] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 556.051251][T14652] imon:vfd_write: invalid payload size [ 556.199299][T14656] FAULT_INJECTION: forcing a failure. [ 556.199299][T14656] name failslab, interval 1, probability 0, space 0, times 0 [ 556.199347][T14656] CPU: 1 UID: 0 PID: 14656 Comm: syz.4.3044 Tainted: G L syzkaller #0 PREEMPT(full) [ 556.199377][T14656] Tainted: [L]=SOFTLOCKUP [ 556.199385][T14656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 556.199396][T14656] Call Trace: [ 556.199404][T14656] [ 556.199412][T14656] dump_stack_lvl+0xe8/0x150 [ 556.199442][T14656] should_fail_ex+0x3eb/0x540 [ 556.199473][T14656] should_failslab+0xa8/0x100 [ 556.199495][T14656] __kmalloc_noprof+0xfe/0x720 [ 556.199519][T14656] ? rcu_is_watching+0x16/0xb0 [ 556.199539][T14656] ? tomoyo_realpath_from_path+0xef/0x640 [ 556.199557][T14656] ? tomoyo_realpath_from_path+0xef/0x640 [ 556.199583][T14656] tomoyo_realpath_from_path+0xef/0x640 [ 556.199612][T14656] ? tomoyo_path_number_perm+0x219/0x5f0 [ 556.199637][T14656] tomoyo_path_number_perm+0x246/0x5f0 [ 556.199664][T14656] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 556.199688][T14656] ? __lock_acquire+0x6df/0x2e50 [ 556.199729][T14656] ? hook_file_ioctl+0x1f2/0x600 [ 556.199773][T14656] ? __fget_files+0x2a/0x420 [ 556.199798][T14656] ? __fget_files+0x2a/0x420 [ 556.199821][T14656] ? __fget_files+0x3a2/0x420 [ 556.199845][T14656] ? __fget_files+0x2a/0x420 [ 556.199875][T14656] security_file_ioctl+0xc3/0x2a0 [ 556.199901][T14656] __se_sys_ioctl+0x47/0x170 [ 556.199930][T14656] do_syscall_64+0x166/0x520 [ 556.199949][T14656] ? trace_irq_disable+0x3b/0x140 [ 556.199975][T14656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.199995][T14656] ? clear_bhb_loop+0x70/0xc0 [ 556.200018][T14656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.200036][T14656] RIP: 0033:0x7f22c019e0d9 [ 556.200053][T14656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.200069][T14656] RSP: 002b:00007f22c1001028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 556.200093][T14656] RAX: ffffffffffffffda RBX: 00007f22c0425fa0 RCX: 00007f22c019e0d9 [ 556.200108][T14656] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 556.200119][T14656] RBP: 00007f22c1001090 R08: 0000000000000000 R09: 0000000000000000 [ 556.200131][T14656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.200143][T14656] R13: 00007f22c0426038 R14: 00007f22c0425fa0 R15: 00007ffda88b4058 [ 556.200174][T14656] [ 556.292285][T14656] ERROR: Out of memory at tomoyo_realpath_from_path. [ 556.431776][ T5694] usb 7-1: USB disconnect, device number 21 [ 556.797058][ T5751] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 556.957522][T14673] FAULT_INJECTION: forcing a failure. [ 556.957522][T14673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.957565][ T5751] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 556.957588][T14673] CPU: 1 UID: 0 PID: 14673 Comm: syz.1.3050 Tainted: G L syzkaller #0 PREEMPT(full) [ 556.957612][T14673] Tainted: [L]=SOFTLOCKUP [ 556.957620][T14673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 556.957631][T14673] Call Trace: [ 556.957639][T14673] [ 556.957647][T14673] dump_stack_lvl+0xe8/0x150 [ 556.957676][T14673] should_fail_ex+0x3eb/0x540 [ 556.957715][T14673] strncpy_from_user+0x36/0x2c0 [ 556.957737][T14673] path_setxattrat+0x191/0x450 [ 556.957769][T14673] ? __pfx_path_setxattrat+0x10/0x10 [ 556.957817][T14673] ? ksys_write+0x242/0x270 [ 556.957841][T14673] ? __pfx_ksys_write+0x10/0x10 [ 556.957861][T14673] ? __task_pid_nr_ns+0x28/0x470 [ 556.957888][T14673] __x64_sys_fsetxattr+0xbc/0xe0 [ 556.957911][T14673] do_syscall_64+0x166/0x520 [ 556.957931][T14673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.957949][T14673] ? clear_bhb_loop+0x70/0xc0 [ 556.957971][T14673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.957989][T14673] RIP: 0033:0x7fa36139e0d9 [ 556.958006][T14673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.958021][T14673] RSP: 002b:00007fa3622e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 556.958042][T14673] RAX: ffffffffffffffda RBX: 00007fa361625fa0 RCX: 00007fa36139e0d9 [ 556.958055][T14673] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 556.958067][T14673] RBP: 00007fa3622e9090 R08: 0000000000000000 R09: 0000000000000000 [ 556.958078][T14673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.958089][T14673] R13: 00007fa361626038 R14: 00007fa361625fa0 R15: 00007fff4c351408 [ 556.958118][T14673] [ 557.035339][ T5751] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.035389][ T5751] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 557.035410][ T5751] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 557.035433][ T5751] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 557.035472][ T5751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.427520][T14663] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd20 [ 557.526899][ T5687] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 557.678624][ T5687] usb 7-1: Using ep0 maxpacket: 32 [ 557.679367][ T5687] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 557.680558][ T5687] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 557.680580][ T5687] usb 7-1: config 0 has no interface number 0 [ 557.680643][ T5687] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 557.680666][ T5687] usb 7-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 557.680686][ T5687] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 557.680709][ T5687] usb 7-1: config 0 interface 196 has no altsetting 0 [ 557.683858][ T5687] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.683879][ T5687] usb 7-1: Product: syz [ 557.683893][ T5687] usb 7-1: Manufacturer: syz [ 557.683905][ T5687] usb 7-1: SerialNumber: syz [ 557.687263][ T5687] usb 7-1: config 0 descriptor?? [ 557.688954][T14681] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 557.981572][T14693] FAULT_INJECTION: forcing a failure. [ 557.981572][T14693] name failslab, interval 1, probability 0, space 0, times 0 [ 557.981607][T14693] CPU: 0 UID: 0 PID: 14693 Comm: syz.0.3056 Tainted: G L syzkaller #0 PREEMPT(full) [ 557.981631][T14693] Tainted: [L]=SOFTLOCKUP [ 557.981637][T14693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 557.981648][T14693] Call Trace: [ 557.981655][T14693] [ 557.981661][T14693] dump_stack_lvl+0xe8/0x150 [ 557.981687][T14693] should_fail_ex+0x3eb/0x540 [ 557.981717][T14693] should_failslab+0xa8/0x100 [ 557.981738][T14693] __kmalloc_noprof+0xfe/0x720 [ 557.981761][T14693] ? rcu_is_watching+0x16/0xb0 [ 557.981779][T14693] ? tomoyo_realpath_from_path+0xef/0x640 [ 557.981796][T14693] ? tomoyo_realpath_from_path+0xef/0x640 [ 557.981819][T14693] tomoyo_realpath_from_path+0xef/0x640 [ 557.981842][T14693] ? tomoyo_path_number_perm+0x219/0x5f0 [ 557.981866][T14693] tomoyo_path_number_perm+0x246/0x5f0 [ 557.981892][T14693] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 557.981915][T14693] ? __lock_acquire+0x6df/0x2e50 [ 557.981954][T14693] ? hook_file_ioctl+0x1f2/0x600 [ 557.981997][T14693] ? __fget_files+0x2a/0x420 [ 557.982019][T14693] ? __fget_files+0x2a/0x420 [ 557.982038][T14693] ? __fget_files+0x3a2/0x420 [ 557.982057][T14693] ? __fget_files+0x2a/0x420 [ 557.982080][T14693] security_file_ioctl+0xc3/0x2a0 [ 557.982104][T14693] __se_sys_ioctl+0x47/0x170 [ 557.982131][T14693] do_syscall_64+0x166/0x520 [ 557.982150][T14693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.982169][T14693] ? clear_bhb_loop+0x70/0xc0 [ 557.982190][T14693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.982208][T14693] RIP: 0033:0x7f789879e0d9 [ 557.982225][T14693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.982240][T14693] RSP: 002b:00007f78996ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 557.982260][T14693] RAX: ffffffffffffffda RBX: 00007f7898a25fa0 RCX: 00007f789879e0d9 [ 557.982273][T14693] RDX: 00002000000001c0 RSI: 000000004138ae84 RDI: 0000000000000005 [ 557.982285][T14693] RBP: 00007f78996ca090 R08: 0000000000000000 R09: 0000000000000000 [ 557.982297][T14693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.982307][T14693] R13: 00007f7898a26038 R14: 00007f7898a25fa0 R15: 00007ffefe507188 [ 557.982336][T14693] [ 557.989854][T14693] ERROR: Out of memory at tomoyo_realpath_from_path. [ 558.278676][ T5751] [drm] Initialized gud 1.0.0 for 5-1:1.0 on minor 1 [ 558.469580][ T5687] ipheth 7-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 558.481660][ T5687] ipheth 7-1:0.196: Apple iPhone USB Ethernet device attached [ 558.494578][T14703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.495146][T14703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.701788][ T5687] usb 7-1: USB disconnect, device number 22 [ 558.780310][ T5687] ipheth 7-1:0.196: Apple iPhone USB Ethernet now disconnected [ 559.037075][ T5751] Console: switching to colour frame buffer device 128x48 [ 559.072652][ T5751] gud 5-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 559.092321][ T5751] usb 5-1: USB disconnect, device number 105 [ 559.135869][ T5751] Console: switching to colour VGA+ 80x25 [ 559.657188][ T5347] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 559.673079][T14745] FAULT_INJECTION: forcing a failure. [ 559.673079][T14745] name failslab, interval 1, probability 0, space 0, times 0 [ 559.673146][T14745] CPU: 0 UID: 0 PID: 14745 Comm: syz.6.3066 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.673170][T14745] Tainted: [L]=SOFTLOCKUP [ 559.673177][T14745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 559.673186][T14745] Call Trace: [ 559.673192][T14745] [ 559.673199][T14745] dump_stack_lvl+0xe8/0x150 [ 559.673227][T14745] should_fail_ex+0x3eb/0x540 [ 559.673257][T14745] should_failslab+0xa8/0x100 [ 559.673279][T14745] __kmalloc_noprof+0xfe/0x720 [ 559.673302][T14745] ? rcu_is_watching+0x16/0xb0 [ 559.673319][T14745] ? tomoyo_realpath_from_path+0xef/0x640 [ 559.673333][T14745] ? tomoyo_realpath_from_path+0xef/0x640 [ 559.673356][T14745] tomoyo_realpath_from_path+0xef/0x640 [ 559.673382][T14745] ? tomoyo_path_number_perm+0x219/0x5f0 [ 559.673503][T14745] tomoyo_path_number_perm+0x246/0x5f0 [ 559.673544][T14745] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 559.673568][T14745] ? __lock_acquire+0x6df/0x2e50 [ 559.673607][T14745] ? hook_file_ioctl+0x1f2/0x600 [ 559.673651][T14745] ? __fget_files+0x2a/0x420 [ 559.673675][T14745] ? __fget_files+0x2a/0x420 [ 559.673694][T14745] ? __fget_files+0x3a2/0x420 [ 559.673717][T14745] ? __fget_files+0x2a/0x420 [ 559.673741][T14745] security_file_ioctl+0xc3/0x2a0 [ 559.673766][T14745] __se_sys_ioctl+0x47/0x170 [ 559.673795][T14745] do_syscall_64+0x166/0x520 [ 559.673823][T14745] ? trace_irq_disable+0x3b/0x140 [ 559.673848][T14745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.673868][T14745] ? clear_bhb_loop+0x70/0xc0 [ 559.673890][T14745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.673909][T14745] RIP: 0033:0x7fa550f9e0d9 [ 559.673927][T14745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.673942][T14745] RSP: 002b:00007fa54f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 559.673964][T14745] RAX: ffffffffffffffda RBX: 00007fa551225fa0 RCX: 00007fa550f9e0d9 [ 559.673978][T14745] RDX: 0000200000003980 RSI: 000000004008af03 RDI: 0000000000000003 [ 559.673991][T14745] RBP: 00007fa54f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 559.674002][T14745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.674014][T14745] R13: 00007fa551226038 R14: 00007fa551225fa0 R15: 00007ffc46846648 [ 559.674047][T14745] [ 559.674071][T14745] ERROR: Out of memory at tomoyo_realpath_from_path. [ 559.813269][ T5347] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 559.842238][ T5347] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 559.842263][ T5347] usb 2-1: config 1 has no interface number 0 [ 559.845995][T14754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.846391][T14754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.931355][ T5347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.931381][ T5347] usb 2-1: Product: syz [ 559.931395][ T5347] usb 2-1: Manufacturer: syz [ 559.931408][ T5347] usb 2-1: SerialNumber: syz [ 560.016184][ T5347] usb 2-1: 3:1 : does not exist [ 560.016224][ T5347] usb 2-1: 3:2 : does not exist [ 560.327899][T14773] tipc: Started in network mode [ 560.332888][T14773] tipc: Node identity 8e408e88a3e8, cluster identity 4711 [ 560.340276][T14773] tipc: Enabled bearer , priority 10 [ 560.349008][T14772] tipc: Resetting bearer [ 560.373776][T14772] tipc: Disabling bearer [ 560.545598][T14780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.554840][T14780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.618453][T14785] tipc: Started in network mode [ 560.618497][T14785] tipc: Node identity fa1ea298d64e, cluster identity 4711 [ 560.618712][T14785] tipc: Enabled bearer , priority 10 [ 560.619268][T14785] FAULT_INJECTION: forcing a failure. [ 560.619268][T14785] name failslab, interval 1, probability 0, space 0, times 0 [ 560.619294][T14785] CPU: 0 UID: 0 PID: 14785 Comm: syz.4.3074 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.619318][T14785] Tainted: [L]=SOFTLOCKUP [ 560.619325][T14785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 560.619336][T14785] Call Trace: [ 560.619344][T14785] [ 560.619351][T14785] dump_stack_lvl+0xe8/0x150 [ 560.619379][T14785] should_fail_ex+0x3eb/0x540 [ 560.619408][T14785] ? __alloc_skb+0x1db/0x7a0 [ 560.619428][T14785] should_failslab+0xa8/0x100 [ 560.619447][T14785] ? __alloc_skb+0x1db/0x7a0 [ 560.619464][T14785] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 560.619488][T14785] ? __alloc_skb+0x18d/0x7a0 [ 560.619507][T14785] ? __alloc_skb+0x1db/0x7a0 [ 560.619532][T14785] __alloc_skb+0x1db/0x7a0 [ 560.619554][T14785] alloc_skb_with_frags+0xc6/0x760 [ 560.619581][T14785] ? __lock_acquire+0x6df/0x2e50 [ 560.619609][T14785] sock_alloc_send_pskb+0x878/0x990 [ 560.619652][T14785] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 560.619690][T14785] tun_get_user+0x8fb/0x44d0 [ 560.619729][T14785] ? aa_file_perm+0x4ed/0x15f0 [ 560.619747][T14785] ? __pfx_tun_get_user+0x10/0x10 [ 560.619766][T14785] ? __lock_acquire+0x6df/0x2e50 [ 560.619793][T14785] ? kstrtoull+0x137/0x1d0 [ 560.619831][T14785] ? ref_tracker_alloc+0x341/0x4b0 [ 560.619856][T14785] ? lock_acquire+0x115/0x350 [ 560.619881][T14785] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 560.619909][T14785] ? lock_acquire+0x115/0x350 [ 560.619934][T14785] ? tun_get+0x1c/0x2f0 [ 560.619956][T14785] ? tun_get+0x1c/0x2f0 [ 560.619973][T14785] ? tun_get+0x1c/0x2f0 [ 560.619994][T14785] tun_chr_write_iter+0x113/0x200 [ 560.620015][T14785] vfs_write+0x612/0xba0 [ 560.620045][T14785] ? __pfx_vfs_write+0x10/0x10 [ 560.620074][T14785] ? __fget_files+0x2a/0x420 [ 560.620102][T14785] ksys_write+0x150/0x270 [ 560.620127][T14785] ? __pfx_ksys_write+0x10/0x10 [ 560.620158][T14785] do_syscall_64+0x166/0x520 [ 560.620176][T14785] ? trace_irq_disable+0x3b/0x140 [ 560.620201][T14785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.620220][T14785] ? clear_bhb_loop+0x70/0xc0 [ 560.620242][T14785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.620260][T14785] RIP: 0033:0x7f22c019e0d9 [ 560.620276][T14785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.620292][T14785] RSP: 002b:00007f22c1001028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 560.620317][T14785] RAX: ffffffffffffffda RBX: 00007f22c0425fa0 RCX: 00007f22c019e0d9 [ 560.620331][T14785] RDX: 000000000000005a RSI: 0000200000000400 RDI: 0000000000000003 [ 560.620342][T14785] RBP: 00007f22c1001090 R08: 0000000000000000 R09: 0000000000000000 [ 560.620354][T14785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.620364][T14785] R13: 00007f22c0426038 R14: 00007f22c0425fa0 R15: 00007ffda88b4058 [ 560.620392][T14785] [ 560.623705][T14784] tipc: Resetting bearer [ 560.655921][T14784] tipc: Disabling bearer [ 560.804210][ T5763] usb 2-1: USB disconnect, device number 43 [ 560.838911][ T5347] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 560.997705][ T5347] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 561.008628][ T5347] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.018894][ T5347] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 561.018922][ T5347] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 561.018944][ T5347] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 561.018985][ T5347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.269890][T14778] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd20 [ 561.445235][T14806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.456064][T14806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.488576][ T5763] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 561.526619][T14809] FAULT_INJECTION: forcing a failure. [ 561.526619][T14809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.526669][T14809] CPU: 0 UID: 0 PID: 14809 Comm: syz.1.3084 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.526694][T14809] Tainted: [L]=SOFTLOCKUP [ 561.526701][T14809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 561.526720][T14809] Call Trace: [ 561.526728][T14809] [ 561.526737][T14809] dump_stack_lvl+0xe8/0x150 [ 561.526767][T14809] should_fail_ex+0x3eb/0x540 [ 561.526802][T14809] _copy_from_user+0x2d/0xb0 [ 561.526821][T14809] xsk_setsockopt+0x42b/0x960 [ 561.526850][T14809] ? __pfx_xsk_setsockopt+0x10/0x10 [ 561.526881][T14809] ? aa_sock_opt_perm+0x142/0x1e0 [ 561.526911][T14809] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 561.526931][T14809] ? __pfx_xsk_setsockopt+0x10/0x10 [ 561.526958][T14809] do_sock_setsockopt+0x17c/0x1b0 [ 561.526986][T14809] __x64_sys_setsockopt+0x13d/0x1b0 [ 561.527013][T14809] do_syscall_64+0x166/0x520 [ 561.527032][T14809] ? trace_irq_disable+0x3b/0x140 [ 561.527058][T14809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.527077][T14809] ? clear_bhb_loop+0x70/0xc0 [ 561.527100][T14809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.527118][T14809] RIP: 0033:0x7fa36139e0d9 [ 561.527136][T14809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.527152][T14809] RSP: 002b:00007fa3622e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 561.527173][T14809] RAX: ffffffffffffffda RBX: 00007fa361625fa0 RCX: 00007fa36139e0d9 [ 561.527187][T14809] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000008 [ 561.527198][T14809] RBP: 00007fa3622e9090 R08: 0000000000000020 R09: 0000000000000000 [ 561.527211][T14809] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 561.527222][T14809] R13: 00007fa361626038 R14: 00007fa361625fa0 R15: 00007fff4c351408 [ 561.527252][T14809] [ 561.648478][ T5763] usb 5-1: Using ep0 maxpacket: 32 [ 561.659419][ T5763] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 561.758337][ T5763] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 561.769307][ T5763] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 561.781093][ T5763] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 561.792270][ T5763] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 561.811133][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.811170][ T5763] usb 5-1: Product: syz [ 561.811198][ T5763] usb 5-1: Manufacturer: syz [ 561.811216][ T5763] usb 5-1: SerialNumber: syz [ 561.844960][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 561.854772][ T5763] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input154 [ 562.038043][ T5702] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 562.056994][ T5763] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 562.057029][ T5763] (id 0x00) [ 562.096252][ T5347] [drm] Initialized gud 1.0.0 for 7-1:1.0 on minor 1 [ 562.117730][ T5763] rc_core: IR keymap rc-imon-pad not found [ 562.126466][ T5763] Registered IR keymap rc-empty [ 562.126981][ T5763] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 562.127691][ T5763] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 562.188500][ T5702] usb 2-1: Using ep0 maxpacket: 32 [ 562.192015][ T5702] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 562.193514][ T5702] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 562.193562][ T5702] usb 2-1: config 0 has no interface number 0 [ 562.193600][ T5702] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 562.193622][ T5702] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 562.193643][ T5702] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 562.193665][ T5702] usb 2-1: config 0 interface 196 has no altsetting 0 [ 562.196590][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.196612][ T5702] usb 2-1: Product: syz [ 562.196625][ T5702] usb 2-1: Manufacturer: syz [ 562.196638][ T5702] usb 2-1: SerialNumber: syz [ 562.211560][ T5702] usb 2-1: config 0 descriptor?? [ 562.215033][T14814] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 562.318177][ T5763] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 562.332261][ T5763] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input155 [ 562.349608][ T5763] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:106> initialized [ 562.614793][ T5347] Console: switching to colour frame buffer device 128x48 [ 562.658782][ T5347] gud 7-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 562.668450][ T5347] usb 7-1: USB disconnect, device number 23 [ 562.688906][ T5347] Console: switching to colour VGA+ 80x25 [ 562.721314][T14817] infiniband syz0: set active [ 562.721431][T14817] infiniband syz0: added bridge_slave_0 [ 562.767582][T14817] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 562.783597][T14817] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 562.796843][T14817] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 562.845094][T14817] RDS/IB: syz0: added [ 562.845738][T14817] smc: adding ib device syz0 with port count 1 [ 562.845907][T14817] smc: ib device syz0 port 1 has no pnetid [ 562.861179][ T5702] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 562.873609][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.873659][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.879020][ T5702] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 563.073386][ T5347] usb 2-1: USB disconnect, device number 44 [ 563.148990][ T5347] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 563.446753][T14840] profile_transition: unconfined exec no attachment [ 563.515469][T14842] profile_transition: unconfined exec no attachment [ 563.656421][T14845] profile_transition: unconfined exec no attachment [ 563.727977][T14847] FAULT_INJECTION: forcing a failure. [ 563.727977][T14847] name failslab, interval 1, probability 0, space 0, times 0 [ 563.748106][T14847] CPU: 0 UID: 0 PID: 14847 Comm: syz.1.3091 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.748136][T14847] Tainted: [L]=SOFTLOCKUP [ 563.748143][T14847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 563.748154][T14847] Call Trace: [ 563.748162][T14847] [ 563.748169][T14847] dump_stack_lvl+0xe8/0x150 [ 563.748199][T14847] should_fail_ex+0x3eb/0x540 [ 563.748226][T14847] should_failslab+0xa8/0x100 [ 563.748247][T14847] __kmalloc_noprof+0xfe/0x720 [ 563.748272][T14847] ? rcu_is_watching+0x16/0xb0 [ 563.748292][T14847] ? tomoyo_realpath_from_path+0xef/0x640 [ 563.748311][T14847] ? tomoyo_realpath_from_path+0xef/0x640 [ 563.748336][T14847] tomoyo_realpath_from_path+0xef/0x640 [ 563.748365][T14847] ? tomoyo_path_number_perm+0x219/0x5f0 [ 563.748390][T14847] tomoyo_path_number_perm+0x246/0x5f0 [ 563.748418][T14847] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 563.748442][T14847] ? __lock_acquire+0x6df/0x2e50 [ 563.748481][T14847] ? hook_file_ioctl+0x1f2/0x600 [ 563.748526][T14847] ? __fget_files+0x2a/0x420 [ 563.748551][T14847] ? __fget_files+0x2a/0x420 [ 563.748571][T14847] ? __fget_files+0x3a2/0x420 [ 563.748591][T14847] ? __fget_files+0x2a/0x420 [ 563.748615][T14847] security_file_ioctl+0xc3/0x2a0 [ 563.748640][T14847] __se_sys_ioctl+0x47/0x170 [ 563.748670][T14847] do_syscall_64+0x166/0x520 [ 563.748689][T14847] ? trace_irq_disable+0x3b/0x140 [ 563.748715][T14847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.748735][T14847] ? clear_bhb_loop+0x70/0xc0 [ 563.748762][T14847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.748781][T14847] RIP: 0033:0x7fa36139e0d9 [ 563.748797][T14847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.748813][T14847] RSP: 002b:00007fa3622e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.748834][T14847] RAX: ffffffffffffffda RBX: 00007fa361625fa0 RCX: 00007fa36139e0d9 [ 563.748846][T14847] RDX: 0000200000001000 RSI: 000000004048aecb RDI: 0000000000000005 [ 563.748859][T14847] RBP: 00007fa3622e9090 R08: 0000000000000000 R09: 0000000000000000 [ 563.748871][T14847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.748883][T14847] R13: 00007fa361626038 R14: 00007fa361625fa0 R15: 00007fff4c351408 [ 563.748912][T14847] [ 563.882870][T14847] ERROR: Out of memory at tomoyo_realpath_from_path. [ 563.945655][T14852] profile_transition: unconfined exec no attachment [ 563.975771][T14853] imon:vfd_write: invalid payload size [ 564.068979][T14857] profile_transition: unconfined exec no attachment [ 564.247192][T14864] profile_transition: unconfined exec no attachment [ 564.276874][ T5763] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 564.349650][ T5702] usb 5-1: USB disconnect, device number 106 [ 564.395839][T14869] profile_transition: unconfined exec no attachment [ 564.441079][ T5763] usb 7-1: Using ep0 maxpacket: 32 [ 564.455182][ T5763] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 564.465640][ T5763] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 564.466883][ T5763] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 564.490782][ T5763] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 564.492334][ T5763] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 564.524643][ T5763] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.532814][ T5763] usb 7-1: Product: syz [ 564.532834][ T5763] usb 7-1: Manufacturer: syz [ 564.532848][ T5763] usb 7-1: SerialNumber: syz [ 564.564068][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 564.581468][ T5763] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input156 [ 564.600060][T14872] profile_transition: unconfined exec no attachment [ 564.655068][T14873] profile_transition: unconfined exec no attachment [ 564.766916][ T5763] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 564.787675][ T5763] (id 0x00) [ 564.793533][T14874] profile_transition: unconfined exec no attachment [ 564.797272][ T5347] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 564.856888][ T5763] rc_core: IR keymap rc-imon-pad not found [ 564.856926][ T5763] Registered IR keymap rc-empty [ 564.857017][ T5763] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 564.857036][ T5763] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 564.948156][ T5347] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 564.949868][ T5347] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 564.949892][ T5347] usb 2-1: config 1 has no interface number 0 [ 564.952109][ T5347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.952130][ T5347] usb 2-1: Product: syz [ 564.952144][ T5347] usb 2-1: Manufacturer: syz [ 564.952158][ T5347] usb 2-1: SerialNumber: syz [ 564.988512][ T5763] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 564.990182][ T5347] usb 2-1: 3:1 : does not exist [ 564.990201][ T5347] usb 2-1: 3:2 : does not exist [ 565.023674][ T5763] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input157 [ 565.058055][ T5763] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:24> initialized [ 565.189348][ T5702] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 565.347982][ T5702] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 565.350257][ T5702] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.350303][ T5702] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 565.350332][ T5702] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 565.350353][ T5702] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 565.350391][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.557713][T14880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.563631][T14876] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd20 [ 565.577353][T14880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.579300][T14880] FAULT_INJECTION: forcing a failure. [ 565.579300][T14880] name failslab, interval 1, probability 0, space 0, times 0 [ 565.579327][T14880] CPU: 1 UID: 0 PID: 14880 Comm: syz.0.3098 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.579352][T14880] Tainted: [L]=SOFTLOCKUP [ 565.579359][T14880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 565.579370][T14880] Call Trace: [ 565.579378][T14880] [ 565.579388][T14880] dump_stack_lvl+0xe8/0x150 [ 565.579418][T14880] should_fail_ex+0x3eb/0x540 [ 565.579447][T14880] should_failslab+0xa8/0x100 [ 565.579466][T14880] __kmalloc_noprof+0xfe/0x720 [ 565.579490][T14880] ? rcu_is_watching+0x16/0xb0 [ 565.579510][T14880] ? tomoyo_realpath_from_path+0xef/0x640 [ 565.579527][T14880] ? tomoyo_realpath_from_path+0xef/0x640 [ 565.579551][T14880] tomoyo_realpath_from_path+0xef/0x640 [ 565.579577][T14880] ? tomoyo_path_number_perm+0x219/0x5f0 [ 565.579602][T14880] tomoyo_path_number_perm+0x246/0x5f0 [ 565.579628][T14880] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 565.579651][T14880] ? __lock_acquire+0x6df/0x2e50 [ 565.579689][T14880] ? hook_file_ioctl+0x1f2/0x600 [ 565.579732][T14880] ? __fget_files+0x2a/0x420 [ 565.579755][T14880] ? __fget_files+0x2a/0x420 [ 565.579774][T14880] ? __fget_files+0x3a2/0x420 [ 565.579792][T14880] ? __fget_files+0x2a/0x420 [ 565.579816][T14880] security_file_ioctl+0xc3/0x2a0 [ 565.579847][T14880] __se_sys_ioctl+0x47/0x170 [ 565.579874][T14880] do_syscall_64+0x166/0x520 [ 565.579893][T14880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.579912][T14880] ? clear_bhb_loop+0x70/0xc0 [ 565.579934][T14880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.579953][T14880] RIP: 0033:0x7f789879e0d9 [ 565.579969][T14880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.579985][T14880] RSP: 002b:00007f78996ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 565.580011][T14880] RAX: ffffffffffffffda RBX: 00007f7898a25fa0 RCX: 00007f789879e0d9 [ 565.580025][T14880] RDX: 0000200000000200 RSI: 00000000c4c85513 RDI: 0000000000000004 [ 565.580037][T14880] RBP: 00007f78996ca090 R08: 0000000000000000 R09: 0000000000000000 [ 565.580050][T14880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.580061][T14880] R13: 00007f7898a26038 R14: 00007f7898a25fa0 R15: 00007ffefe507188 [ 565.580090][T14880] [ 565.580245][T14880] ERROR: Out of memory at tomoyo_realpath_from_path. [ 566.388067][ T5702] [drm] Initialized gud 1.0.0 for 5-1:1.0 on minor 1 [ 566.856261][ T5702] Console: switching to colour frame buffer device 128x48 [ 566.870452][ T5702] gud 5-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 566.878564][ T5702] usb 5-1: USB disconnect, device number 107 [ 566.906114][ T5702] Console: switching to colour VGA+ 80x25 [ 567.636964][ T5763] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 567.796980][ T5763] usb 5-1: Using ep0 maxpacket: 32 [ 567.797985][ T5763] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 567.799660][ T5763] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 567.799686][ T5763] usb 5-1: config 0 has no interface number 0 [ 567.799722][ T5763] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 567.799746][ T5763] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 567.799790][ T5763] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 567.799812][ T5763] usb 5-1: config 0 interface 196 has no altsetting 0 [ 567.803677][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.803702][ T5763] usb 5-1: Product: syz [ 567.803716][ T5763] usb 5-1: Manufacturer: syz [ 567.803730][ T5763] usb 5-1: SerialNumber: syz [ 567.833546][ T5763] usb 5-1: config 0 descriptor?? [ 567.834335][T14886] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 567.839190][T14883] imon:send_packet: task interrupted [ 567.839206][T14883] imon:send_packet: packet tx failed (-512) [ 567.839264][T14883] imon:vfd_write: send packet #4 failed [ 567.899177][ T5751] usb 7-1: USB disconnect, device number 24 [ 568.416894][ T5751] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 568.461806][ T5763] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 568.475018][ T5763] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 568.522712][T14893] profile_transition: unconfined exec no attachment [ 568.560349][T14894] profile_transition: unconfined exec no attachment [ 568.569167][ T5751] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 568.587768][ T5751] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 568.587805][ T5751] usb 7-1: config 1 has no interface number 0 [ 568.606091][ T5751] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.606130][ T5751] usb 7-1: Product: syz [ 568.606162][ T5751] usb 7-1: Manufacturer: syz [ 568.606181][ T5751] usb 7-1: SerialNumber: syz [ 568.640933][ T5751] usb 7-1: 3:1 : does not exist [ 568.645906][ T5751] usb 7-1: 3:2 : does not exist [ 568.650542][T14897] profile_transition: unconfined exec no attachment [ 568.673691][ T5347] usb 5-1: USB disconnect, device number 108 [ 568.759364][ T5347] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 568.766279][T14899] profile_transition: unconfined exec no attachment [ 568.863581][T14902] profile_transition: unconfined exec no attachment [ 568.920519][T14904] profile_transition: unconfined exec no attachment [ 568.962767][T14905] profile_transition: unconfined exec no attachment [ 569.001845][T14906] profile_transition: unconfined exec no attachment [ 569.043409][T14907] profile_transition: unconfined exec no attachment [ 569.099903][T14910] profile_transition: unconfined exec no attachment [ 569.577103][ T5751] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 569.727434][ T5751] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 569.728585][ T5751] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 569.728607][ T5751] usb 5-1: config 1 has no interface number 0 [ 569.730896][ T5751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.730917][ T5751] usb 5-1: Product: syz [ 569.730931][ T5751] usb 5-1: Manufacturer: syz [ 569.730944][ T5751] usb 5-1: SerialNumber: syz [ 569.743649][ T5751] usb 5-1: 3:1 : does not exist [ 569.743669][ T5751] usb 5-1: 3:2 : does not exist [ 570.629157][ T5702] usb 2-1: USB disconnect, device number 45 [ 570.721657][T14928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.722104][T14928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.870425][T14937] FAULT_INJECTION: forcing a failure. [ 570.870425][T14937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.870468][T14937] CPU: 0 UID: 0 PID: 14937 Comm: syz.1.3109 Tainted: G L syzkaller #0 PREEMPT(full) [ 570.870492][T14937] Tainted: [L]=SOFTLOCKUP [ 570.870499][T14937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 570.870509][T14937] Call Trace: [ 570.870515][T14937] [ 570.870522][T14937] dump_stack_lvl+0xe8/0x150 [ 570.870550][T14937] should_fail_ex+0x3eb/0x540 [ 570.870579][T14937] _copy_from_user+0x2d/0xb0 [ 570.870599][T14937] xsk_setsockopt+0x331/0x960 [ 570.870629][T14937] ? __pfx_xsk_setsockopt+0x10/0x10 [ 570.870653][T14937] ? __pfx_aa_sk_perm+0x10/0x10 [ 570.870685][T14937] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 570.870704][T14937] ? __pfx_xsk_setsockopt+0x10/0x10 [ 570.870733][T14937] do_sock_setsockopt+0x17c/0x1b0 [ 570.870760][T14937] __x64_sys_setsockopt+0x13d/0x1b0 [ 570.870787][T14937] do_syscall_64+0x166/0x520 [ 570.870805][T14937] ? trace_irq_disable+0x3b/0x140 [ 570.870830][T14937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.870849][T14937] ? clear_bhb_loop+0x70/0xc0 [ 570.870872][T14937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.870890][T14937] RIP: 0033:0x7fa36139e0d9 [ 570.870907][T14937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.870925][T14937] RSP: 002b:00007fa3622e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 570.870944][T14937] RAX: ffffffffffffffda RBX: 00007fa361625fa0 RCX: 00007fa36139e0d9 [ 570.870958][T14937] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 570.870969][T14937] RBP: 00007fa3622e9090 R08: 0000000000000004 R09: 0000000000000000 [ 570.870980][T14937] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 570.870993][T14937] R13: 00007fa361626038 R14: 00007fa361625fa0 R15: 00007fff4c351408 [ 570.871021][T14937] [ 571.058486][T14939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.357048][ T1993] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 571.506676][T14961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.507199][T14961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.515376][ T1993] usb 2-1: Using ep0 maxpacket: 32 [ 571.527587][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3118'. [ 571.543658][ T1993] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 571.554472][ T1993] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 571.562983][ T1993] usb 2-1: config 0 has no interface number 0 [ 571.563063][ T1993] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 571.563091][ T1993] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 571.563111][ T1993] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 571.563136][ T1993] usb 2-1: config 0 interface 196 has no altsetting 0 [ 571.609074][ T1993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.617145][ T1993] usb 2-1: Product: syz [ 571.617161][ T1993] usb 2-1: Manufacturer: syz [ 571.617169][ T1993] usb 2-1: SerialNumber: syz [ 571.632316][ T1993] usb 2-1: config 0 descriptor?? [ 571.638928][T14942] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 571.661115][ T5347] usb 7-1: USB disconnect, device number 25 [ 571.741539][T14964] netlink: 'syz.6.3119': attribute type 10 has an invalid length. [ 571.752911][T14964] syz_tun: entered promiscuous mode [ 571.763695][T14964] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 572.126869][ T5347] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 572.255763][ T1993] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 572.266040][ T1993] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 572.276894][ T5347] usb 7-1: Using ep0 maxpacket: 32 [ 572.277717][ T5347] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 572.278868][ T5347] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 572.279000][ T5347] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 572.279033][ T5347] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 572.279062][ T5347] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 572.281473][ T5347] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.281494][ T5347] usb 7-1: Product: syz [ 572.281508][ T5347] usb 7-1: Manufacturer: syz [ 572.281522][ T5347] usb 7-1: SerialNumber: syz [ 572.301808][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 572.304079][ T5347] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input158 [ 572.406246][ T5702] usb 5-1: USB disconnect, device number 109 [ 572.478641][ T1993] usb 2-1: USB disconnect, device number 46 [ 572.538277][ T5347] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 572.538368][ T5347] (id 0x00) [ 572.564293][ T1993] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 572.636995][ T5347] rc_core: IR keymap rc-imon-pad not found [ 572.637039][ T5347] Registered IR keymap rc-empty [ 572.637130][ T5347] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 572.637150][ T5347] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 572.739735][ T5347] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 572.742247][ T5347] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input159 [ 572.766394][ T5347] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:26> initialized [ 572.797744][ T5702] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 572.927822][ T5702] usb 5-1: device descriptor read/64, error -71 [ 573.166893][ T5702] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 573.299865][ T5702] usb 5-1: device descriptor read/64, error -71 [ 573.407243][ T5702] usb usb5-port1: attempt power cycle [ 573.568608][T15003] profile_transition: 18 callbacks suppressed [ 573.568641][T15003] profile_transition: unconfined exec no attachment [ 573.610476][T15004] profile_transition: unconfined exec no attachment [ 573.645978][T15006] profile_transition: unconfined exec no attachment [ 573.657280][ T5347] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 573.747052][ T5702] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 573.767444][ T5702] usb 5-1: device descriptor read/8, error -71 [ 573.806894][ T5347] usb 2-1: Using ep0 maxpacket: 32 [ 573.808280][ T5347] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 573.809542][ T5347] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 573.809564][ T5347] usb 2-1: config 0 has no interface number 0 [ 573.809601][ T5347] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 573.809623][ T5347] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 573.809643][ T5347] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 573.809723][ T5347] usb 2-1: config 0 interface 196 has no altsetting 0 [ 573.811959][ T5347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.811982][ T5347] usb 2-1: Product: syz [ 573.811995][ T5347] usb 2-1: Manufacturer: syz [ 573.812009][ T5347] usb 2-1: SerialNumber: syz [ 573.816503][ T5347] usb 2-1: config 0 descriptor?? [ 573.818719][T14996] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 574.006986][ T5702] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 574.027896][ T5702] usb 5-1: device descriptor read/8, error -71 [ 574.139372][ T5702] usb usb5-port1: unable to enumerate USB device [ 574.424014][ T5347] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 574.434046][ T5347] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 574.484489][T15010] profile_transition: unconfined exec no attachment [ 574.534382][T15012] profile_transition: unconfined exec no attachment [ 574.618938][T15018] profile_transition: unconfined exec no attachment [ 574.633377][ T5347] usb 2-1: USB disconnect, device number 47 [ 574.656240][T15008] imon:send_packet: task interrupted [ 574.656279][T15008] imon:send_packet: packet tx failed (-512) [ 574.656318][T15008] imon:vfd_write: send packet #5 failed [ 574.662327][ T5702] usb 7-1: USB disconnect, device number 26 [ 574.670890][T15015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.671427][T15015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.675614][T15019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.676053][T15019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.702237][ T5347] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 574.775857][T15021] profile_transition: unconfined exec no attachment [ 574.833361][T15024] profile_transition: unconfined exec no attachment [ 574.882677][T15026] profile_transition: unconfined exec no attachment [ 574.924323][T15027] profile_transition: unconfined exec no attachment [ 575.577455][ T5751] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 575.706983][ T5751] usb 7-1: device descriptor read/64, error -71 [ 575.812967][T15066] FAULT_INJECTION: forcing a failure. [ 575.812967][T15066] name failslab, interval 1, probability 0, space 0, times 0 [ 575.812999][T15066] CPU: 0 UID: 0 PID: 15066 Comm: syz.1.3134 Tainted: G L syzkaller #0 PREEMPT(full) [ 575.813024][T15066] Tainted: [L]=SOFTLOCKUP [ 575.813031][T15066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 575.813042][T15066] Call Trace: [ 575.813050][T15066] [ 575.813057][T15066] dump_stack_lvl+0xe8/0x150 [ 575.813082][T15066] should_fail_ex+0x3eb/0x540 [ 575.813112][T15066] should_failslab+0xa8/0x100 [ 575.813133][T15066] __kmalloc_noprof+0xfe/0x720 [ 575.813158][T15066] ? tomoyo_encode+0x2ad/0x570 [ 575.813184][T15066] ? tomoyo_encode+0x2ad/0x570 [ 575.813223][T15066] tomoyo_encode+0x2ad/0x570 [ 575.813254][T15066] tomoyo_realpath_from_path+0x5fa/0x640 [ 575.813281][T15066] ? tomoyo_path_number_perm+0x219/0x5f0 [ 575.813306][T15066] tomoyo_path_number_perm+0x246/0x5f0 [ 575.813332][T15066] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 575.813355][T15066] ? __lock_acquire+0x6df/0x2e50 [ 575.813394][T15066] ? hook_file_ioctl+0x1f2/0x600 [ 575.813438][T15066] ? __fget_files+0x2a/0x420 [ 575.813460][T15066] ? __fget_files+0x2a/0x420 [ 575.813479][T15066] ? __fget_files+0x3a2/0x420 [ 575.813498][T15066] ? __fget_files+0x2a/0x420 [ 575.813522][T15066] security_file_ioctl+0xc3/0x2a0 [ 575.813548][T15066] __se_sys_ioctl+0x47/0x170 [ 575.813574][T15066] do_syscall_64+0x166/0x520 [ 575.813593][T15066] ? trace_irq_disable+0x3b/0x140 [ 575.813617][T15066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.813636][T15066] ? clear_bhb_loop+0x70/0xc0 [ 575.813658][T15066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.813681][T15066] RIP: 0033:0x7fa36139e0d9 [ 575.813701][T15066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.813716][T15066] RSP: 002b:00007fa3622e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.813737][T15066] RAX: ffffffffffffffda RBX: 00007fa361625fa0 RCX: 00007fa36139e0d9 [ 575.813751][T15066] RDX: 00002000000000c0 RSI: 00000000c034564b RDI: 0000000000000003 [ 575.813763][T15066] RBP: 00007fa3622e9090 R08: 0000000000000000 R09: 0000000000000000 [ 575.813775][T15066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.813786][T15066] R13: 00007fa361626038 R14: 00007fa361625fa0 R15: 00007fff4c351408 [ 575.813816][T15066] [ 575.813854][T15066] ERROR: Out of memory at tomoyo_realpath_from_path. [ 575.927880][ T967] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 575.968338][ T5751] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 576.006454][T15070] blkio.reset_stats is deprecated [ 576.078232][ T967] usb 5-1: Using ep0 maxpacket: 32 [ 576.078346][T15070] netlink: 'syz.1.3136': attribute type 4 has an invalid length. [ 576.078918][ T967] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 576.080040][ T967] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 576.080062][ T967] usb 5-1: config 0 has no interface number 0 [ 576.080100][ T967] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 576.080122][ T967] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 576.080143][ T967] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 576.080164][ T967] usb 5-1: config 0 interface 196 has no altsetting 0 [ 576.082555][ T967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.082576][ T967] usb 5-1: Product: syz [ 576.082590][ T967] usb 5-1: Manufacturer: syz [ 576.082661][ T967] usb 5-1: SerialNumber: syz [ 576.094325][ T967] usb 5-1: config 0 descriptor?? [ 576.098280][T15057] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 576.106915][ T5751] usb 7-1: device descriptor read/64, error -71 [ 576.217701][ T5751] usb usb7-port1: attempt power cycle [ 576.326921][ T5763] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 576.477482][ T5763] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 576.479122][ T5763] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 576.479150][ T5763] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 576.482572][ T5763] usb 2-1: string descriptor 0 read error: -71 [ 576.482727][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.520549][ T5763] usb 2-1: can't set config #1, error -71 [ 576.527227][ T5763] usb 2-1: USB disconnect, device number 48 [ 576.558007][ T5751] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 576.579182][ T5751] usb 7-1: device descriptor read/8, error -71 [ 576.712313][ T967] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 576.722589][ T967] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 576.816890][ T5751] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 576.837670][ T5751] usb 7-1: device descriptor read/8, error -71 [ 576.920591][ T967] usb 5-1: USB disconnect, device number 114 [ 576.950648][ T5751] usb usb7-port1: unable to enumerate USB device [ 576.961648][ T967] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 577.396931][ T5347] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 577.491782][T15103] FAULT_INJECTION: forcing a failure. [ 577.491782][T15103] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 577.491834][T15103] CPU: 0 UID: 0 PID: 15103 Comm: syz.4.3138 Tainted: G L syzkaller #0 PREEMPT(full) [ 577.491858][T15103] Tainted: [L]=SOFTLOCKUP [ 577.491864][T15103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 577.491873][T15103] Call Trace: [ 577.491880][T15103] [ 577.491887][T15103] dump_stack_lvl+0xe8/0x150 [ 577.491916][T15103] should_fail_ex+0x3eb/0x540 [ 577.491946][T15103] prepare_alloc_pages+0x223/0x600 [ 577.491978][T15103] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 577.492007][T15103] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 577.492046][T15103] ? __pfx_policy_nodemask+0x10/0x10 [ 577.492074][T15103] alloc_pages_mpol+0x21e/0x390 [ 577.492098][T15103] folio_alloc_mpol_noprof+0x39/0x160 [ 577.492120][T15103] shmem_alloc_and_add_folio+0x43e/0xf60 [ 577.492142][T15103] ? filemap_get_entry+0xcd/0x3f0 [ 577.492167][T15103] ? filemap_map_pages+0x1d1/0x2170 [ 577.492189][T15103] ? __pfx_filemap_get_entry+0x10/0x10 [ 577.492209][T15103] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 577.492234][T15103] ? shmem_allowable_huge_orders+0x628/0x6c0 [ 577.492268][T15103] shmem_get_folio_gfp+0x5da/0x16d0 [ 577.492303][T15103] shmem_fault+0x179/0x390 [ 577.492332][T15103] __do_fault+0x138/0x2a0 [ 577.492356][T15103] ? do_pte_missing+0x140c/0x34b0 [ 577.492378][T15103] do_pte_missing+0x2215/0x34b0 [ 577.492412][T15103] ? handle_mm_fault+0xf1/0x3750 [ 577.492436][T15103] handle_mm_fault+0x1a53/0x3750 [ 577.492468][T15103] ? handle_mm_fault+0xf1/0x3750 [ 577.492498][T15103] ? __pfx_handle_mm_fault+0x10/0x10 [ 577.492519][T15103] ? follow_page_pte+0x748/0xf10 [ 577.492547][T15103] ? __pfx_follow_page_pte+0x10/0x10 [ 577.492577][T15103] __get_user_pages+0x1675/0x2750 [ 577.492626][T15103] populate_vma_page_range+0x2be/0x3c0 [ 577.492648][T15103] ? __pfx_populate_vma_page_range+0x10/0x10 [ 577.492669][T15103] ? down_read+0x2be/0x330 [ 577.492695][T15103] __mm_populate+0x25f/0x390 [ 577.492715][T15103] ? __pfx___mm_populate+0x10/0x10 [ 577.492743][T15103] vm_mmap_pgoff+0x353/0x4e0 [ 577.492775][T15103] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 577.492798][T15103] ? ksys_write+0x242/0x270 [ 577.492824][T15103] ? __pfx_ksys_write+0x10/0x10 [ 577.492848][T15103] ? ksys_mmap_pgoff+0xf3/0x760 [ 577.492868][T15103] ? __x64_sys_mmap+0x7f/0x140 [ 577.492896][T15103] do_syscall_64+0x166/0x520 [ 577.492914][T15103] ? trace_irq_disable+0x3b/0x140 [ 577.492937][T15103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.492956][T15103] ? clear_bhb_loop+0x70/0xc0 [ 577.492978][T15103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.492995][T15103] RIP: 0033:0x7f22c019e0d9 [ 577.493013][T15103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.493028][T15103] RSP: 002b:00007f22c1001028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 577.493054][T15103] RAX: ffffffffffffffda RBX: 00007f22c0425fa0 RCX: 00007f22c019e0d9 [ 577.493068][T15103] RDX: 000000000000000f RSI: 0000000000b36000 RDI: 0000200000000000 [ 577.493080][T15103] RBP: 00007f22c1001090 R08: ffffffffffffffff R09: 0000000000000000 [ 577.493092][T15103] R10: 0000000004008031 R11: 0000000000000246 R12: 0000000000000002 [ 577.493104][T15103] R13: 00007f22c0426038 R14: 00007f22c0425fa0 R15: 00007ffda88b4058 [ 577.493132][T15103] [ 577.616449][ T5347] usb 2-1: Using ep0 maxpacket: 32 [ 577.628079][ T5347] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 577.660442][ T5347] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 577.660489][ T5347] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 577.660514][ T5347] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 577.660546][ T5347] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 577.729814][ T5347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.729841][ T5347] usb 2-1: Product: syz [ 577.729855][ T5347] usb 2-1: Manufacturer: syz [ 577.729870][ T5347] usb 2-1: SerialNumber: syz [ 577.947882][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 577.957551][ T5347] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input160 [ 578.066051][T15111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.074132][T15111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.116456][T15113] FAULT_INJECTION: forcing a failure. [ 578.116456][T15113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.116495][T15113] CPU: 1 UID: 0 PID: 15113 Comm: syz.4.3142 Tainted: G L syzkaller #0 PREEMPT(full) [ 578.116520][T15113] Tainted: [L]=SOFTLOCKUP [ 578.116527][T15113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 578.116540][T15113] Call Trace: [ 578.116547][T15113] [ 578.116554][T15113] dump_stack_lvl+0xe8/0x150 [ 578.116586][T15113] should_fail_ex+0x3eb/0x540 [ 578.116616][T15113] _copy_from_iter+0x1d3/0x1660 [ 578.116651][T15113] ? rcu_is_watching+0x16/0xb0 [ 578.116670][T15113] ? file_tty_write+0x2a0/0x9f0 [ 578.116690][T15113] ? trace_kmalloc+0x2a/0xf0 [ 578.116714][T15113] ? __pfx__copy_from_iter+0x10/0x10 [ 578.116738][T15113] ? file_tty_write+0x2a0/0x9f0 [ 578.116760][T15113] ? rcu_is_watching+0x16/0xb0 [ 578.116779][T15113] ? kfree+0x4d/0x650 [ 578.116806][T15113] file_tty_write+0x48c/0x9f0 [ 578.116837][T15113] vfs_write+0x612/0xba0 [ 578.116868][T15113] ? __pfx_vfs_write+0x10/0x10 [ 578.116900][T15113] ? __fget_files+0x2a/0x420 [ 578.116929][T15113] ksys_write+0x150/0x270 [ 578.116953][T15113] ? __pfx_ksys_write+0x10/0x10 [ 578.116994][T15113] do_syscall_64+0x166/0x520 [ 578.117013][T15113] ? trace_irq_disable+0x3b/0x140 [ 578.117039][T15113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.117057][T15113] ? clear_bhb_loop+0x70/0xc0 [ 578.117080][T15113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.117098][T15113] RIP: 0033:0x7f22c019e0d9 [ 578.117115][T15113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.117130][T15113] RSP: 002b:00007f22c1001028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 578.117150][T15113] RAX: ffffffffffffffda RBX: 00007f22c0425fa0 RCX: 00007f22c019e0d9 [ 578.117163][T15113] RDX: 0000000000001006 RSI: 0000200000001980 RDI: 0000000000000004 [ 578.117175][T15113] RBP: 00007f22c1001090 R08: 0000000000000000 R09: 0000000000000000 [ 578.117188][T15113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.117199][T15113] R13: 00007f22c0426038 R14: 00007f22c0425fa0 R15: 00007ffda88b4058 [ 578.117229][T15113] [ 578.187314][ T5347] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 578.187339][ T5347] (id 0x00) [ 578.319629][ T5347] rc_core: IR keymap rc-imon-pad not found [ 578.319646][ T5347] Registered IR keymap rc-empty [ 578.319732][ T5347] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 578.319749][ T5347] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 578.387907][ T5347] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 578.406432][ T5347] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input161 [ 578.426604][ T5347] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:49> initialized [ 578.736977][ T5347] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 578.777036][ T5702] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 578.887916][ T5347] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 578.889056][ T5347] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.889098][ T5347] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 578.889119][ T5347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 578.889141][ T5347] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 578.889185][ T5347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.937403][ T5702] usb 7-1: Using ep0 maxpacket: 32 [ 578.938284][ T5702] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 578.941029][ T5702] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 578.941051][ T5702] usb 7-1: config 0 has no interface number 0 [ 578.941111][ T5702] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 578.941136][ T5702] usb 7-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 578.941156][ T5702] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 578.941178][ T5702] usb 7-1: config 0 interface 196 has no altsetting 0 [ 578.945968][ T5702] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.945992][ T5702] usb 7-1: Product: syz [ 578.946006][ T5702] usb 7-1: Manufacturer: syz [ 578.946043][ T5702] usb 7-1: SerialNumber: syz [ 578.953952][ T5702] usb 7-1: config 0 descriptor?? [ 578.954724][T15122] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 579.095290][T15124] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd20 [ 579.563975][ T5702] ipheth 7-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 579.580377][T15134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.589556][ T5702] ipheth 7-1:0.196: Apple iPhone USB Ethernet device attached [ 579.603389][T15135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.603473][T15134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.612430][T15135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.613824][T15136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.614261][T15136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.690555][T15139] profile_transition: 24 callbacks suppressed [ 579.699195][T15139] profile_transition: unconfined exec no attachment [ 579.745676][T15142] profile_transition: unconfined exec no attachment [ 579.773252][T14975] usb 7-1: USB disconnect, device number 31 [ 579.853243][T15146] profile_transition: unconfined exec no attachment [ 579.859055][T14975] ipheth 7-1:0.196: Apple iPhone USB Ethernet now disconnected [ 579.912290][ T5347] gud 5-1:1.0: USB-1: Failed to add properties (ret=-5) [ 579.912357][ T5347] gud 5-1:1.0: Failed to get connectors (error=-5) [ 579.912379][ T5347] gud 5-1:1.0: probe with driver gud failed with error -5 [ 579.967485][T15152] profile_transition: unconfined exec no attachment [ 580.041988][T15158] profile_transition: unconfined exec no attachment [ 580.146334][T15163] profile_transition: unconfined exec no attachment [ 580.193923][T15164] profile_transition: unconfined exec no attachment [ 580.263193][T15166] profile_transition: unconfined exec no attachment [ 580.283476][T15167] FAULT_INJECTION: forcing a failure. [ 580.283476][T15167] name failslab, interval 1, probability 0, space 0, times 0 [ 580.283521][T15167] CPU: 0 UID: 0 PID: 15167 Comm: syz.0.3156 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.283547][T15167] Tainted: [L]=SOFTLOCKUP [ 580.283554][T15167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 580.283566][T15167] Call Trace: [ 580.283573][T15167] [ 580.283582][T15167] dump_stack_lvl+0xe8/0x150 [ 580.283611][T15167] should_fail_ex+0x3eb/0x540 [ 580.283643][T15167] should_failslab+0xa8/0x100 [ 580.283663][T15167] __kmalloc_noprof+0xfe/0x720 [ 580.283689][T15167] ? tomoyo_encode+0x2ad/0x570 [ 580.283716][T15167] ? tomoyo_encode+0x2ad/0x570 [ 580.283753][T15167] tomoyo_encode+0x2ad/0x570 [ 580.283783][T15167] tomoyo_realpath_from_path+0x5fa/0x640 [ 580.283810][T15167] ? tomoyo_path_number_perm+0x219/0x5f0 [ 580.283834][T15167] tomoyo_path_number_perm+0x246/0x5f0 [ 580.283861][T15167] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 580.283882][T15167] ? __lock_acquire+0x6df/0x2e50 [ 580.283923][T15167] ? hook_file_ioctl+0x1f2/0x600 [ 580.283969][T15167] ? __fget_files+0x2a/0x420 [ 580.283993][T15167] ? __fget_files+0x2a/0x420 [ 580.284013][T15167] ? __fget_files+0x3a2/0x420 [ 580.284034][T15167] ? __fget_files+0x2a/0x420 [ 580.284059][T15167] security_file_ioctl+0xc3/0x2a0 [ 580.284085][T15167] __se_sys_ioctl+0x47/0x170 [ 580.284113][T15167] do_syscall_64+0x166/0x520 [ 580.284132][T15167] ? trace_irq_disable+0x3b/0x140 [ 580.284160][T15167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.284180][T15167] ? clear_bhb_loop+0x70/0xc0 [ 580.284203][T15167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.284221][T15167] RIP: 0033:0x7f789879e0d9 [ 580.284240][T15167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.284256][T15167] RSP: 002b:00007f78996ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 580.284277][T15167] RAX: ffffffffffffffda RBX: 00007f7898a25fa0 RCX: 00007f789879e0d9 [ 580.284292][T15167] RDX: 00002000000001c0 RSI: 000000004008ae9c RDI: 0000000000000005 [ 580.284306][T15167] RBP: 00007f78996ca090 R08: 0000000000000000 R09: 0000000000000000 [ 580.284319][T15167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.284332][T15167] R13: 00007f7898a26038 R14: 00007f7898a25fa0 R15: 00007ffefe507188 [ 580.284362][T15167] [ 580.285563][T15167] ERROR: Out of memory at tomoyo_realpath_from_path. [ 580.318027][T15153] imon:send_packet: task interrupted [ 580.318043][T15153] imon:send_packet: packet tx failed (-512) [ 580.318080][T15153] imon:vfd_write: send packet #5 failed [ 580.320456][ T5751] usb 2-1: USB disconnect, device number 49 [ 580.573533][T15168] profile_transition: unconfined exec no attachment [ 580.656164][T15179] profile_transition: unconfined exec no attachment [ 580.817563][T15185] FAULT_INJECTION: forcing a failure. [ 580.817563][T15185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.841106][T15185] CPU: 1 UID: 0 PID: 15185 Comm: syz.0.3159 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.841137][T15185] Tainted: [L]=SOFTLOCKUP [ 580.841145][T15185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 580.841157][T15185] Call Trace: [ 580.841165][T15185] [ 580.841174][T15185] dump_stack_lvl+0xe8/0x150 [ 580.841203][T15185] should_fail_ex+0x3eb/0x540 [ 580.841234][T15185] strncpy_from_user+0x36/0x2c0 [ 580.841262][T15185] do_getname+0x77/0x250 [ 580.841285][T15185] do_sys_openat2+0xcc/0x200 [ 580.841307][T15185] ? __pfx_do_sys_openat2+0x10/0x10 [ 580.841328][T15185] ? ksys_write+0x242/0x270 [ 580.841353][T15185] ? __pfx_ksys_write+0x10/0x10 [ 580.841378][T15185] __x64_sys_openat+0x138/0x170 [ 580.841401][T15185] do_syscall_64+0x166/0x520 [ 580.841418][T15185] ? trace_irq_disable+0x3b/0x140 [ 580.841443][T15185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.841461][T15185] ? clear_bhb_loop+0x70/0xc0 [ 580.841482][T15185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.841499][T15185] RIP: 0033:0x7f789879e0d9 [ 580.841516][T15185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.841533][T15185] RSP: 002b:00007f78996ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 580.841554][T15185] RAX: ffffffffffffffda RBX: 00007f7898a25fa0 RCX: 00007f789879e0d9 [ 580.841568][T15185] RDX: 0000000000004180 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 580.841582][T15185] RBP: 00007f78996ca090 R08: 0000000000000000 R09: 0000000000000000 [ 580.841595][T15185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.841607][T15185] R13: 00007f7898a26038 R14: 00007f7898a25fa0 R15: 00007ffefe507188 [ 580.841636][T15185] [ 581.403419][T15214] program syz.1.3168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 581.417175][T14975] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 581.511549][ T1993] usb 5-1: USB disconnect, device number 115 [ 581.568346][T14975] usb 7-1: Using ep0 maxpacket: 32 [ 581.575231][T14975] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 581.589705][T14975] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 581.589750][T14975] usb 7-1: config 0 has no interface number 0 [ 581.589810][T14975] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 581.589840][T14975] usb 7-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 581.589864][T14975] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 581.589890][T14975] usb 7-1: config 0 interface 196 has no altsetting 0 [ 581.647227][T14975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.647269][T14975] usb 7-1: Product: syz [ 581.647311][T14975] usb 7-1: Manufacturer: syz [ 581.647328][T14975] usb 7-1: SerialNumber: syz [ 581.674085][T14975] usb 7-1: config 0 descriptor?? [ 581.681783][T15202] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 581.699620][T15227] FAULT_INJECTION: forcing a failure. [ 581.699620][T15227] name failslab, interval 1, probability 0, space 0, times 0 [ 581.699673][T15227] CPU: 0 UID: 0 PID: 15227 Comm: syz.1.3172 Tainted: G L syzkaller #0 PREEMPT(full) [ 581.699698][T15227] Tainted: [L]=SOFTLOCKUP [ 581.699704][T15227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 581.699715][T15227] Call Trace: [ 581.699723][T15227] [ 581.699731][T15227] dump_stack_lvl+0xe8/0x150 [ 581.699760][T15227] should_fail_ex+0x3eb/0x540 [ 581.699790][T15227] should_failslab+0xa8/0x100 [ 581.699811][T15227] __kmalloc_noprof+0xfe/0x720 [ 581.699836][T15227] ? tomoyo_encode+0x2ad/0x570 [ 581.699863][T15227] ? tomoyo_encode+0x2ad/0x570 [ 581.699895][T15227] tomoyo_encode+0x2ad/0x570 [ 581.699926][T15227] tomoyo_realpath_from_path+0x5fa/0x640 [ 581.699953][T15227] ? tomoyo_path_number_perm+0x219/0x5f0 [ 581.699977][T15227] tomoyo_path_number_perm+0x246/0x5f0 [ 581.700003][T15227] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 581.700027][T15227] ? __lock_acquire+0x6df/0x2e50 [ 581.700066][T15227] ? hook_file_ioctl+0x1f2/0x600 [ 581.700107][T15227] ? __fget_files+0x2a/0x420 [ 581.700130][T15227] ? __fget_files+0x2a/0x420 [ 581.700149][T15227] ? __fget_files+0x3a2/0x420 [ 581.700168][T15227] ? __fget_files+0x2a/0x420 [ 581.700192][T15227] security_file_ioctl+0xc3/0x2a0 [ 581.700219][T15227] __se_sys_ioctl+0x47/0x170 [ 581.700246][T15227] do_syscall_64+0x166/0x520 [ 581.700264][T15227] ? trace_irq_disable+0x3b/0x140 [ 581.700288][T15227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.700311][T15227] ? clear_bhb_loop+0x70/0xc0 [ 581.700333][T15227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.700351][T15227] RIP: 0033:0x7fa36139e0d9 [ 581.700368][T15227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.700384][T15227] RSP: 002b:00007fa3622e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 581.700404][T15227] RAX: ffffffffffffffda RBX: 00007fa361625fa0 RCX: 00007fa36139e0d9 [ 581.700417][T15227] RDX: 0000200000000540 RSI: 000000004008ae90 RDI: 0000000000000005 [ 581.700430][T15227] RBP: 00007fa3622e9090 R08: 0000000000000000 R09: 0000000000000000 [ 581.700442][T15227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.700453][T15227] R13: 00007fa361626038 R14: 00007fa361625fa0 R15: 00007fff4c351408 [ 581.700482][T15227] [ 581.711494][T15227] ERROR: Out of memory at tomoyo_realpath_from_path. [ 582.059032][T15236] ªªªªªª: renamed from vlan0 (while UP) [ 582.066939][ T1993] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 582.226931][ T1993] usb 5-1: Using ep0 maxpacket: 32 [ 582.234020][ T1993] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 582.246949][ T1993] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 582.257564][ T1993] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 582.257597][ T1993] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 582.257623][ T1993] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 582.273536][T15246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.274020][T15246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.280814][T15246] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd20 [ 582.316322][T14975] ipheth 7-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 582.318169][ T1993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.318193][ T1993] usb 5-1: Product: syz [ 582.318206][ T1993] usb 5-1: Manufacturer: syz [ 582.318219][ T1993] usb 5-1: SerialNumber: syz [ 582.329660][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 582.331938][ T1993] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input162 [ 582.358211][T14975] ipheth 7-1:0.196: Apple iPhone USB Ethernet device attached [ 582.529128][T14975] usb 7-1: USB disconnect, device number 32 [ 582.568906][ T1993] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 582.568981][ T1993] (id 0x00) [ 582.628535][T14975] ipheth 7-1:0.196: Apple iPhone USB Ethernet now disconnected [ 582.698912][ T1993] rc_core: IR keymap rc-imon-pad not found [ 582.700831][ T1993] Registered IR keymap rc-empty [ 582.700897][ T1993] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 582.700916][ T1993] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 582.785879][ T1993] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 582.791960][ T1993] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input163 [ 582.810827][ T1993] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:116> initialized [ 582.928611][T15261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.940425][T15261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.165241][T15267] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3182'. [ 583.392606][T15258] FAULT_INJECTION: forcing a failure. [ 583.392606][T15258] name failslab, interval 1, probability 0, space 0, times 0 [ 583.392662][T15258] CPU: 0 UID: 0 PID: 15258 Comm: syz.1.3180 Tainted: G L syzkaller #0 PREEMPT(full) [ 583.392690][T15258] Tainted: [L]=SOFTLOCKUP [ 583.392698][T15258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 583.392710][T15258] Call Trace: [ 583.392718][T15258] [ 583.392727][T15258] dump_stack_lvl+0xe8/0x150 [ 583.392758][T15258] should_fail_ex+0x3eb/0x540 [ 583.392791][T15258] should_failslab+0xa8/0x100 [ 583.392812][T15258] ? mas_alloc_nodes+0x291/0x350 [ 583.392833][T15258] kmem_cache_alloc_noprof+0xa1/0x600 [ 583.392861][T15258] ? mas_alloc_nodes+0x291/0x350 [ 583.392895][T15258] mas_alloc_nodes+0x291/0x350 [ 583.392919][T15258] mas_preallocate+0x42a/0x840 [ 583.392938][T15258] ? rcu_is_watching+0x16/0xb0 [ 583.392960][T15258] ? trace_kmem_cache_alloc+0x29/0xe0 [ 583.392984][T15258] ? __pfx_mas_preallocate+0x10/0x10 [ 583.393018][T15258] ? __mas_set_range+0x11a/0x3a0 [ 583.393042][T15258] __split_vma+0x2fb/0xa60 [ 583.393066][T15258] ? mas_next_slot+0xc91/0xd70 [ 583.393088][T15258] ? __pfx___split_vma+0x10/0x10 [ 583.393122][T15258] ? mas_find+0x6d6/0xcb0 [ 583.393146][T15258] vms_gather_munmap_vmas+0x4e3/0x1370 [ 583.393190][T15258] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 583.393218][T15258] ? up_write+0x19d/0x4a0 [ 583.393246][T15258] ? __lock_acquire+0x6df/0x2e50 [ 583.393282][T15258] do_vmi_align_munmap+0x2b4/0x4b0 [ 583.393329][T15258] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 583.393374][T15258] ? mas_walk+0x37e/0x490 [ 583.393404][T15258] ? mas_find+0x642/0xcb0 [ 583.393427][T15258] do_vmi_munmap+0x252/0x2d0 [ 583.393462][T15258] do_munmap+0xf5/0x160 [ 583.393484][T15258] ? __lock_acquire+0x6df/0x2e50 [ 583.393512][T15258] ? __pfx_do_munmap+0x10/0x10 [ 583.393552][T15258] mremap_to+0x33a/0x8d0 [ 583.393584][T15258] ? __pfx_mremap_to+0x10/0x10 [ 583.393612][T15258] ? __pfx_mtree_load+0x10/0x10 [ 583.393633][T15258] ? __pfx_check_prep_vma+0x10/0x10 [ 583.393680][T15258] __se_sys_mremap+0xf59/0x12d0 [ 583.393717][T15258] ? ksys_write+0x1e6/0x270 [ 583.393742][T15258] ? __pfx___se_sys_mremap+0x10/0x10 [ 583.393772][T15258] ? __mutex_unlock_slowpath+0x731/0x900 [ 583.393797][T15258] ? __fget_files+0x2a/0x420 [ 583.393827][T15258] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 583.393849][T15258] ? __fget_files+0x3a2/0x420 [ 583.393911][T15258] ? __pfx_ksys_write+0x10/0x10 [ 583.393940][T15258] ? __x64_sys_mremap+0x20/0xc0 [ 583.393969][T15258] do_syscall_64+0x166/0x520 [ 583.393988][T15258] ? trace_irq_disable+0x3b/0x140 [ 583.394014][T15258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.394034][T15258] ? clear_bhb_loop+0x70/0xc0 [ 583.394059][T15258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.394079][T15258] RIP: 0033:0x7fa36139e0d9 [ 583.394097][T15258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.394114][T15258] RSP: 002b:00007fa3622e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 583.394135][T15258] RAX: ffffffffffffffda RBX: 00007fa361625fa0 RCX: 00007fa36139e0d9 [ 583.394148][T15258] RDX: 0000000000600000 RSI: 0000000000a00000 RDI: 0000200000000000 [ 583.394162][T15258] RBP: 00007fa3622e9090 R08: 0000200000a00000 R09: 0000000000000000 [ 583.394174][T15258] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 583.394185][T15258] R13: 00007fa361626038 R14: 00007fa361625fa0 R15: 00007fff4c351408 [ 583.394212][T15258] [ 583.460649][T15267] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 583.810552][T15290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.817828][T15290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.955028][T15298] FAULT_INJECTION: forcing a failure. [ 583.955028][T15298] name failslab, interval 1, probability 0, space 0, times 0 [ 583.975988][T15298] CPU: 0 UID: 0 PID: 15298 Comm: syz.6.3185 Tainted: G L syzkaller #0 PREEMPT(full) [ 583.976018][T15298] Tainted: [L]=SOFTLOCKUP [ 583.976026][T15298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 583.976036][T15298] Call Trace: [ 583.976044][T15298] [ 583.976053][T15298] dump_stack_lvl+0xe8/0x150 [ 583.976081][T15298] should_fail_ex+0x3eb/0x540 [ 583.976112][T15298] should_failslab+0xa8/0x100 [ 583.976131][T15298] __kmalloc_noprof+0xfe/0x720 [ 583.976156][T15298] ? tomoyo_encode+0x2ad/0x570 [ 583.976181][T15298] ? tomoyo_encode+0x2ad/0x570 [ 583.976220][T15298] tomoyo_encode+0x2ad/0x570 [ 583.976253][T15298] tomoyo_realpath_from_path+0x5fa/0x640 [ 583.976282][T15298] ? tomoyo_path_number_perm+0x219/0x5f0 [ 583.976306][T15298] tomoyo_path_number_perm+0x246/0x5f0 [ 583.976331][T15298] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 583.976353][T15298] ? __lock_acquire+0x6df/0x2e50 [ 583.976390][T15298] ? hook_file_ioctl+0x1f2/0x600 [ 583.976431][T15298] ? __fget_files+0x2a/0x420 [ 583.976456][T15298] ? __fget_files+0x2a/0x420 [ 583.976476][T15298] ? __fget_files+0x3a2/0x420 [ 583.976495][T15298] ? __fget_files+0x2a/0x420 [ 583.976519][T15298] security_file_ioctl+0xc3/0x2a0 [ 583.976544][T15298] __se_sys_ioctl+0x47/0x170 [ 583.976574][T15298] do_syscall_64+0x166/0x520 [ 583.976593][T15298] ? trace_irq_disable+0x3b/0x140 [ 583.976619][T15298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.976638][T15298] ? clear_bhb_loop+0x70/0xc0 [ 583.976662][T15298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.976681][T15298] RIP: 0033:0x7fa550f9e0d9 [ 583.976700][T15298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.976716][T15298] RSP: 002b:00007fa54f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 583.976737][T15298] RAX: ffffffffffffffda RBX: 00007fa551225fa0 RCX: 00007fa550f9e0d9 [ 583.976750][T15298] RDX: 0000200000000280 RSI: 0000000000004c02 RDI: 0000000000000003 [ 583.976767][T15298] RBP: 00007fa54f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 583.976778][T15298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.976789][T15298] R13: 00007fa551226038 R14: 00007fa551225fa0 R15: 00007ffc46846648 [ 583.976817][T15298] [ 583.992383][ T31] INFO: task syz.2.2575:12838 blocked for more than 143 seconds. [ 583.992407][ T31] Tainted: G L syzkaller #0 [ 583.992418][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 583.992428][ T31] task:syz.2.2575 state:D stack:28512 pid:12838 tgid:12837 ppid:5626 task_flags:0x400140 flags:0x00080002 [ 583.992482][ T31] Call Trace: [ 583.992490][ T31] [ 583.992502][ T31] __schedule+0x17db/0x58f0 [ 583.992535][ T31] ? __lock_acquire+0x6df/0x2e50 [ 583.992586][ T31] ? __pfx___schedule+0x10/0x10 [ 583.992610][ T31] ? lock_acquire+0x115/0x350 [ 583.992643][ T31] ? schedule+0x90/0x2b0 [ 583.992674][ T31] schedule+0x164/0x2b0 [ 583.992703][ T31] cgroup_lock_and_drain_offline+0x51a/0x650 [ 583.992741][ T31] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 583.992767][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 583.992793][ T31] ? bpf_lsm_capable+0x9/0x20 [ 583.992816][ T31] ? security_capable+0x7e/0x2c0 [ 583.992849][ T31] cgroup1_get_tree+0x9d/0x890 [ 583.992870][ T31] ? apparmor_capable+0x126/0x170 [ 583.992893][ T31] ? bpf_lsm_capable+0x9/0x20 [ 583.992917][ T31] vfs_get_tree+0x92/0x2a0 [ 583.992945][ T31] do_new_mount+0x319/0xdc0 [ 583.992971][ T31] ? __pfx_do_new_mount+0x10/0x10 [ 583.992993][ T31] ? ns_capable+0x89/0xe0 [ 583.993016][ T31] ? path_mount+0x647/0x1050 [ 583.993037][ T31] ? user_path_at+0xd4/0x160 [ 583.993062][ T31] __se_sys_mount+0x31d/0x420 [ 583.993089][ T31] ? __pfx___se_sys_mount+0x10/0x10 [ 583.993117][ T31] ? __x64_sys_mount+0x20/0xc0 [ 583.993140][ T31] do_syscall_64+0x166/0x520 [ 583.993158][ T31] ? trace_irq_disable+0x3b/0x140 [ 583.993184][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.993211][ T31] ? clear_bhb_loop+0x70/0xc0 [ 583.993235][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.993253][ T31] RIP: 0033:0x7f5367b9e0d9 [ 583.993269][ T31] RSP: 002b:00007f5368b10028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 583.993286][ T31] RAX: ffffffffffffffda RBX: 00007f5367e25fa0 RCX: 00007f5367b9e0d9 [ 583.993299][ T31] RDX: 00002000000000c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 583.993311][ T31] RBP: 00007f5367c35024 R08: 0000200000000080 R09: 0000000000000000 [ 583.993325][ T31] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000000 [ 583.993336][ T31] R13: 00007f5367e26038 R14: 00007f5367e25fa0 R15: 00007ffce60377a8 [ 583.993367][ T31] [ 583.993421][ T31] [ 583.993421][ T31] Showing all locks held in the system: [ 583.993430][ T31] locks held by pr/ttyS0/16: 1, last CPU#0: [ 583.993444][ T31] #0: ffffffff8ee362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 583.993505][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 583.993518][ T31] #0: ffffffff8ef5c6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 583.993583][ T31] locks held by getty/5369: 2, on CPU#1: [ 583.993596][ T31] #0: ffff8880365c30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 583.993642][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 583.993698][ T31] locks held by syz-executor/10936: 1, last CPU#1: [ 583.993711][ T31] #0: ffffffff8ef5c6a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 583.993756][ T31] locks held by syz-executor/12775: 4, last CPU#1: [ 583.993768][ T31] #0: ffffffff8f035e70 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 583.993814][ T31] #1: ffff88807b3729f8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 583.993862][ T31] #2: ffff8880577529f8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 583.993915][ T31] #3: ffffffff8ef5c6a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 583.993965][ T31] locks held by syz.6.3185/15298: 1, last CPU#0: [ 583.993978][ T31] #0: ffffffff8f6ef838 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0 [ 583.994028][ T31] locks held by dhcpcd-run-hook/15300: 1, last CPU#1: [ 583.994041][ T31] #0: ffff8880291cbfe0 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xbc/0x1590 [ 583.994091][ T31] [ 583.994096][ T31] ============================================= [ 583.994096][ T31] [ 583.994105][ T31] NMI backtrace for cpu 0 [ 583.994119][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 583.994143][ T31] Tainted: [L]=SOFTLOCKUP [ 583.994150][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 583.994161][ T31] Call Trace: [ 583.994168][ T31] [ 583.994175][ T31] dump_stack_lvl+0xe8/0x150 [ 583.994199][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 583.994233][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 583.994261][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 583.994288][ T31] sys_info+0x135/0x170 [ 583.994308][ T31] watchdog+0xfd7/0x1030 [ 583.994341][ T31] ? watchdog+0x1c7/0x1030 [ 583.994371][ T31] kthread+0x38b/0x480 [ 583.994396][ T31] ? __pfx_watchdog+0x10/0x10 [ 583.994418][ T31] ? __pfx_kthread+0x10/0x10 [ 583.994443][ T31] ret_from_fork+0x514/0xb70 [ 583.994471][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 583.994495][ T31] ? __switch_to+0xc89/0x1420 [ 583.994520][ T31] ? __pfx_kthread+0x10/0x10 [ 583.994546][ T31] ret_from_fork_asm+0x1a/0x30 [ 583.994585][ T31] [ 583.994592][ T31] Sending NMI from CPU 0 to CPUs 1: [ 583.994623][ C1] NMI backtrace for cpu 1 [ 583.994639][ C1] CPU: 1 UID: 0 PID: 10936 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 583.994666][ C1] Tainted: [L]=SOFTLOCKUP [ 583.994674][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 583.994686][ C1] RIP: 0010:__lock_acquire+0x54d/0x2e50 [ 583.994724][ C1] Code: c3 28 41 89 c4 49 39 cf 0f 8d cf 00 00 00 49 83 ff 31 0f 83 8c 00 00 00 48 8b 03 25 ff 1f 00 00 48 0f a3 05 b5 f1 1b 13 73 10 <48> 69 c0 c8 00 00 00 48 8d 88 d0 34 60 94 eb 3a 83 3d 7c 81 1f 19 [ 583.994741][ C1] RSP: 0018:ffffc90006c67160 EFLAGS: 00000003 [ 583.994758][ C1] RAX: 00000000000004cb RBX: ffff888058f4ab10 RCX: 00000000ffffffff [ 583.994773][ C1] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff888058f49f40 [ 583.994787][ C1] RBP: 0000000000000001 R08: 3b00000000000000 R09: 0000000000000000 [ 583.994800][ C1] R10: 0000000000000000 R11: ffffffff8ef5c6a0 R12: ffffffffffffff05 [ 583.994815][ C1] R13: 0000000000000000 R14: ffff888058f4ab18 R15: 0000000000000000 [ 583.994828][ C1] FS: 0000555563470500(0000) GS:ffff888124988000(0000) knlGS:0000000000000000 [ 583.994846][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 583.994860][ C1] CR2: 00007f182bbf2286 CR3: 000000002b14a000 CR4: 00000000003526f0 [ 583.994877][ C1] Call Trace: [ 583.994884][ C1] [ 583.994893][ C1] ? __lock_acquire+0x6df/0x2e50 [ 583.994927][ C1] ? lock_acquire+0x115/0x350 [ 583.994956][ C1] lock_acquire+0x115/0x350 [ 583.994983][ C1] ? unwind_next_frame+0x8f/0x2550 [ 583.995005][ C1] ? unwind_next_frame+0x8f/0x2550 [ 583.995023][ C1] ? arch_stack_walk+0xe3/0x150 [ 583.995041][ C1] ? unwind_next_frame+0x8f/0x2550 [ 583.995059][ C1] unwind_next_frame+0xac/0x2550 [ 583.995077][ C1] ? unwind_next_frame+0x8f/0x2550 [ 583.995098][ C1] ? __unwind_start+0xed/0x660 [ 583.995115][ C1] ? unwind_next_frame+0x8f/0x2550 [ 583.995136][ C1] __unwind_start+0x514/0x660 [ 583.995157][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 583.995185][ C1] arch_stack_walk+0xe3/0x150 [ 583.995205][ C1] ? arch_stack_walk+0xe3/0x150 [ 583.995224][ C1] stack_trace_save+0xa9/0x100 [ 583.995250][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 583.995279][ C1] ? __lock_acquire+0x6df/0x2e50 [ 583.995308][ C1] kasan_save_track+0x3e/0x80 [ 583.995358][ C1] kasan_save_free_info+0x40/0x50 [ 583.995381][ C1] __kasan_slab_free+0x5c/0x80 [ 583.995411][ C1] kfree+0x1c5/0x650 [ 583.995433][ C1] ? do_ip6t_get_ctl+0xf3e/0x12f0 [ 583.995452][ C1] ? vfree+0x42b/0x490 [ 583.995475][ C1] do_ip6t_get_ctl+0xf3e/0x12f0 [ 583.995497][ C1] ? __pfx_do_ip6t_get_ctl+0x10/0x10 [ 583.995520][ C1] ? __mutex_trylock_common+0x15f/0x270 [ 583.995543][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 583.995565][ C1] ? rcu_is_watching+0x16/0xb0 [ 583.995585][ C1] ? trace_contention_end+0x3d/0x140 [ 583.995610][ C1] ? nf_getsockopt+0x224/0x290 [ 583.995634][ C1] ? __mutex_unlock_slowpath+0x731/0x900 [ 583.995660][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 583.995687][ C1] nf_getsockopt+0x26e/0x290 [ 583.995717][ C1] ipv6_getsockopt+0x213/0x2c0 [ 583.995744][ C1] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 583.995768][ C1] ? __might_fault+0xaf/0x130 [ 583.995791][ C1] ? sock_common_getsockopt+0x2d/0xb0 [ 583.995824][ C1] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 583.995855][ C1] do_sock_getsockopt+0x51d/0x7e0 [ 583.995880][ C1] ? errseq_sample+0x40/0x70 [ 583.995899][ C1] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 583.995922][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 583.995949][ C1] ? nf_setsockopt+0x288/0x290 [ 583.995975][ C1] __x64_sys_getsockopt+0x1a4/0x240 [ 583.996002][ C1] do_syscall_64+0x166/0x520 [ 583.996021][ C1] ? trace_irq_disable+0x3b/0x140 [ 583.996049][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.996069][ C1] ? clear_bhb_loop+0x70/0xc0 [ 583.996092][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.996111][ C1] RIP: 0033:0x7f789879f8aa [ 583.996127][ C1] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 583.996143][ C1] RSP: 002b:00007ffefe506df8 EFLAGS: 00000216 ORIG_RAX: 0000000000000037 [ 583.996163][ C1] RAX: ffffffffffffffda RBX: 00007ffefe506e80 RCX: 00007f789879f8aa [ 583.996178][ C1] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 583.996190][ C1] RBP: 0000000000000003 R08: 00007ffefe506e1c R09: 0000000000000000 [ 583.996203][ C1] R10: 00007ffefe506e80 R11: 0000000000000216 R12: 00007f78989ee4c0 [ 583.996217][ C1] R13: 00007ffefe506e1c R14: 0000000000000000 R15: 00007f78989effc0 [ 583.996238][ C1] [ 583.996632][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 585.226425][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 585.237201][ T31] Tainted: [L]=SOFTLOCKUP [ 585.242137][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.252471][ T31] Call Trace: [ 585.255753][ T31] [ 585.259379][ T31] vpanic+0x56d/0xa60 [ 585.263373][ T31] ? __pfx_vpanic+0x10/0x10 [ 585.267877][ T31] ? console_srcu_read_unlock+0x3a/0x60 [ 585.273523][ T31] panic+0xc5/0xd0 [ 585.277340][ T31] ? __pfx_panic+0x10/0x10 [ 585.281758][ T31] ? wq_watchdog_touch+0xf9/0x160 [ 585.286776][ T31] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 585.293109][ T31] watchdog+0x1030/0x1030 [ 585.297460][ T31] ? watchdog+0x1c7/0x1030 [ 585.301965][ T31] kthread+0x38b/0x480 [ 585.306029][ T31] ? __pfx_watchdog+0x10/0x10 [ 585.310699][ T31] ? __pfx_kthread+0x10/0x10 [ 585.315281][ T31] ret_from_fork+0x514/0xb70 [ 585.319865][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 585.325055][ T31] ? __switch_to+0xc89/0x1420 [ 585.329739][ T31] ? __pfx_kthread+0x10/0x10 [ 585.334322][ T31] ret_from_fork_asm+0x1a/0x30 [ 585.339089][ T31] [ 585.342358][ T31] Kernel Offset: disabled [ 585.346679][ T31] Rebooting in 86400 seconds..