last executing test programs: 10.592006855s ago: executing program 3 (id=66): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) write$apparmor_current(r0, &(0x7f0000000100)=@hat={'permhat ', 0x500}, 0x1b) 10.39092768s ago: executing program 3 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1234\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x5678\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r2, 0x1) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001640)={&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001540)=0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/f1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='dummy_udc.0\n\x00', 0xc) write(r3, &(0x7f0000000400)='\n\x00', 0x1) 9.706186622s ago: executing program 3 (id=72): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @local}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='wla,022'], 0x8) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x1) syz_usb_control_io(r1, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f0000000380)="ab", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) 4.767223319s ago: executing program 2 (id=92): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1234\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x5678\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r2, 0x1) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001640)={&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001540)=0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/f1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='dummy_udc.0\n\x00', 0xc) nanosleep(&(0x7f00000003c0)={0x0, 0x5f5e100}, 0x0) 4.761202849s ago: executing program 0 (id=93): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140)=0x2, 0xc1000000) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c1dc38b", @ANYRES16=r1, @ANYBLOB="010025bd700004dcdf2501000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00020002000000000000000c0005001700000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24040001}, 0x0) 4.431472202s ago: executing program 2 (id=94): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="9d0200000200000005d7000000040000000400000000070000000000000000008103000000000700000004000000000000001b00046e6f647f4d7e00000000000000c60005"], 0x29d) 4.283751204s ago: executing program 2 (id=95): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r1, &(0x7f0000000680), 0x0) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000180)={'bridge0\x00', @ifru_hwaddr=@local}) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0x2, 0x18, [0x4, 0x9, 0x6, 0xff], &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 4.165746409s ago: executing program 2 (id=96): recvmsg(0xffffffffffffffff, 0x0, 0x40010100) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r0, &(0x7f0000000100)=""/9, 0xfffffd87) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000340)={0x0, 0x7, 0x6, "62e47d56e2db"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x0, 0x9, 0xed, "680d60f55144d285d501cc2a37446cb9bcfed8e37dc144fb7250574593a44189c03be436231b6ade299b7a363fb02e85a12663e329532aae86ace358f7b05b2fad3500e4c14a0ffa25db9a37440cfcf1db2c9d66b47aae99b8bfbdc5baf8bfff0df6d2ca4cc248bbffc14d1f7ec3704c6150e1656f56125df82466426f68c3f885a45aa78a67da9d6e507e85a39e48722020517f9f97c29bf3574ec29c58384aad6103cee8284e47e1397a208501358985785a4194c4c40033cee5d1b40f1b9b83a3f0d6c4821bd0f0e98618fad912db4c5932858f7bdeea66abab8bc8d6929571a270b45f7dbd8259c55b7f6d"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x5}, 0x0, &(0x7f00000006c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000780)={0x40, 0x19, 0x2, "db17"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000800)={0x40, 0x1c, 0x1}, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) bind$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="bd6e1598467518f479a915ba2d7cf89d4e32b59a8461fff2bd4b4567184320ce7de2d7a5ea6ea141952b6c165a9b72d89c09dc8fc71ea05b94f1af2dcccaab73814cc0d1dc96f7ba10d3310c284b4380a382716fc78f8ff91f65af1546b93eb8acd3e069efe159185d121961cba3b3cdefc25f1bf9d15b300ecc4b8d2dcb3f217d8a8a070678a4fd48fa483a1e19fc7dc95f35201bc592d164372a407567eaba370b05530ff998d26eaaca21e6ae34901091bf6f13f88c5bee3b6c572900da4287c712", @ANYBLOB="83ecfdb0c64342cdecc86e84f14ef6d2ba398d316bfb277e9816d0a59bb7b02fc6b8aa89aec477da64125d6b3f5c9ec9b63f389e8b5b54058a8830101972ceba85563ec7271e45783fe06e29f084a9884529cc5d2526744e6ea0d10b140f65dc66c4377507ac17d1cd3e62207e86292d198051d2232509eabd36b949c50d5095", @ANYRESDEC=r0, @ANYRESHEX, @ANYRES16, @ANYRES64=0x0, @ANYRES16, @ANYRES16], 0xffe) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 4.093797213s ago: executing program 0 (id=97): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='T', 0x1, 0x100200) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "0000000000000000000000000000000000000000000000000000000000000000000100"}) 3.762905378s ago: executing program 0 (id=98): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000002940)={'wpan0\x00', 0x0}) r6 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r6, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4041004) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000380)={0x30, r1, 0x1, 0x70bd25, 0x25dfdc04, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040001}, 0x0) syz_usb_connect(0x3, 0x22a, &(0x7f00000006c0)={{0x12, 0x1, 0x11, 0x28, 0x71, 0xfc, 0x10, 0x5ac, 0x821b, 0x85f8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x218, 0x2, 0xa, 0x0, 0x0, 0xf7, "", [{{0x9, 0x4, 0x38, 0x4, 0x8, 0x38, 0x3a, 0xd6, 0x27, [], [{{0x9, 0x5, 0x6, 0x8, 0x8, 0xd, 0x8, 0x2, [@generic={0xd5, 0x10, "e18373e5db53b2b1efc7a8d2c1499d923d6bf11b7e328f783fbd4276eec9397bd82fbae399ed8bb9b436e73a708a11d082a3a4e69b6f0d63b1aae5e6c4e2333568d2dca0fce9acb318cd85bc6ddb7c3a23a1f021c12e81a1829b6707790f1db60eb3fea7d5162d4a768c73dc906e5bd37a064b9c3de42d09f504b1c2d6e1e86a82849f872dfc11bf9cfabe8a583b6868cf073b713b96b165bebe026a9d469465a25d345efda95d4fad6976ecd9b736b5b9bee8f6ea90a8fc6eaa1436c07daf7e4b824ee6b439f86c66377b2c4540a3c89db43b"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xfc, 0x7}]}}, {{0x9, 0x5, 0x4, 0x2, 0x20, 0x10, 0x0, 0x4}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0x3, 0x0, 0x9}}, {{0x9, 0x5, 0x8, 0x1, 0x10, 0x6, 0x4}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x54, 0x72, 0xff, [@generic={0x1e, 0x2, "7b5495279bb31691e5173751191cf7a9d3b53ab43a7696cd397a939e"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x8, 0x2b, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7}]}}, {{0x9, 0x5, 0xe, 0x1c, 0x400, 0xf, 0xb4, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xc5, 0xf}, @generic={0x15, 0x4, "bfdf3f88b8ff20c4554345960712598a24f49e"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x6, 0x9a, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfa, 0x2}]}}]}}, {{0x9, 0x4, 0xc4, 0x80, 0xd, 0xff, 0x1, 0x72, 0x6, [], [{{0x9, 0x5, 0x0, 0x10, 0x20, 0x24, 0x2, 0x6}}, {{0x9, 0x5, 0x20ea044c5bf0487d, 0x10, 0x20, 0x0, 0x52, 0x49}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0xc, 0x2, 0x8}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x9, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x8}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x5, 0xf7, 0x2}}, {{0x9, 0x5, 0xc, 0xd, 0x40, 0x5, 0x7, 0x9}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0x1, 0x7, 0x20}}, {{0x9, 0x5, 0x9, 0x8, 0x906d4d3432ad05b7, 0x3, 0x3, 0xe7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0x96d3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x11, 0x2, 0x5}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x1, 0x5, 0xb7}}, {{0x9, 0x5, 0x9, 0x0, 0x0, 0xb, 0x4, 0x7}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0x98, 0x7f, 0xf7}}, {{0x9, 0x5, 0x1, 0x14, 0x8, 0x9, 0x9, 0x76}}]}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x110, 0x4, 0x5, 0x3, 0x10, 0x4}, 0x121, &(0x7f0000000940)={0x5, 0xf, 0x121, 0x3, [@generic={0xfe, 0x10, 0x2, "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"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x2, 0x4, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x3a, "742691bf02ea95ab763930d596042856"}]}, 0x4, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x41f}}, {0x41, &(0x7f0000000b40)=@string={0x41, 0x3, "ebc7cd8a7f56cbd46db7f899ff63c2782a710601f74dc87d76b30ca2b07aa98c0d4f2bdcec137b17e5b111b6c7348f850455175d52258edf9f0ca3677d2ada"}}]}) 3.619574744s ago: executing program 1 (id=99): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000080)=""/17, 0x11) (async, rerun: 32) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) (rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 3.497350054s ago: executing program 1 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2000008, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x600, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e32, @loopback}}}, 0x108) write(r0, &(0x7f0000000000)='3', 0x4e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3.056937124s ago: executing program 3 (id=101): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1234\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x5678\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r2, 0x1) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001640)={&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001540)=0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/f1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='\n\x00', 0x1) 2.995826574s ago: executing program 0 (id=102): socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 6) 1.693213958s ago: executing program 1 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1234\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x5678\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r2, 0x1) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001640)={&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001540)=0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/f1\x00') write(0xffffffffffffffff, &(0x7f0000000380)='dummy_udc.0\n\x00', 0xc) nanosleep(&(0x7f00000003c0)={0x0, 0x5f5e100}, 0x0) 1.644071008s ago: executing program 0 (id=104): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r1 = socket$inet(0x2, 0x2, 0x0) (async) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) (async, rerun: 64) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (rerun: 64) read$FUSE(r3, &(0x7f0000007680)={0x2020}, 0x2020) (async, rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) (rerun: 64) setns(0xc9, 0x0) (async) r4 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000400)={0x0, 0x47425247}) (async) r5 = socket(0x8, 0x2, 0x0) setsockopt(r5, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) sendfile(r2, r3, 0x0, 0x10ffff) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c) (async, rerun: 32) r7 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000e80)=@filter={'filter\x00', 0xe, 0x3, 0x146, [0x0, 0x200000000700, 0x200000000816, 0x200000000af2], 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff01000000030000006800000000f7776730000000000000000000000000006970766c616e3100000000c50f00000073697430000000000000000000000000697036677265746170300000000000000f2c1917afb000ffffffffffaaaaaaaaaabb00ff0000ff006e0000006e000000b60000004552524f52000000000000000000000000000000000000000000000000000000200000000000000007f6b76abd0e4d4d3d975d5aed2fad0ad761f5641372a17ff89a4f0947aa000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000feffffff00000000"]}, 0x1be) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000000000000001"], 0x4a) 1.297420335s ago: executing program 3 (id=105): socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) ioctl$KVM_RUN(r2, 0xae80, 0xbe91210000000000) 1.155044065s ago: executing program 1 (id=106): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000380)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdc04, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x17}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040001}, 0x0) (fail_nth: 7) 1.078895265s ago: executing program 3 (id=107): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), 0x0, 0xe, 0x3) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r2, &(0x7f0000000080)='./mnt\x00', &(0x7f0000000000)=ANY=[], 0x0, 0x1200) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'wlan1\x00', {}, 0x7}) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231b06e507010000002a9006837402821c0b8b9236590b09007a1593"], 0x0}, 0x0) (async) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, &(0x7f0000000500)) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='7', 0x1) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000040)=0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) 988.071429ms ago: executing program 2 (id=108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4600, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x27, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8050}, 0x8040) recvmmsg(r2, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x400002}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x20000020, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x380e13de523923cf, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x7, 0x1, &(0x7f0000000100)="85", 0xb, 0xb, 0xc45, 0x1010, 0xc336, 0x1, 0x2, 'syz0\x00'}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f00000000c0)='hfsplus\x00', 0x2050802, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) copy_file_range(r0, &(0x7f0000000080)=0x8, r2, &(0x7f0000000180)=0xff, 0x6e63, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r9 = openat(r8, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r9, &(0x7f0000000d00)='nf 127.0.0.1 2000000000 \\xalhost\n', 0x24) connect$inet(r7, 0x0, 0x0) 315.157658ms ago: executing program 0 (id=109): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @local}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='wla,022'], 0x8) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x1) syz_usb_control_io(r1, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f0000000380)="ab", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) 239.08198ms ago: executing program 1 (id=110): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x8000}) r7 = fcntl$dupfd(r6, 0x0, r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000380)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdc04, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040001}, 0x0) 150.514206ms ago: executing program 1 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2000008, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x700, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e32, @loopback}}}, 0x108) write(r0, &(0x7f0000000000)='3', 0x4e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 0s ago: executing program 2 (id=112): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='-group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x7000000, 0x10, 0xffffffffffffffff, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x4, 0x0, 0x0, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r2 = gettid() timer_create(0x1, &(0x7f0000000100)={0x0, 0x12, 0x4, @tid=r2}, &(0x7f0000000380)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_delete(r3) r4 = gettid() tkill(r4, 0x16) ioctl(r1, 0xbc000, &(0x7f0000002280)="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") sendmmsg$inet(r1, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x8c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) migrate_pages(r5, 0x1, &(0x7f0000000000)=0x200000007f, &(0x7f0000000040)=0x65b5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000040)={r8, 0x8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000080)={r8, @in6={{0xa, 0x4e22, 0xfffffff6, @private2, 0xfffffffe}}, [0xffffffffffffffff, 0x4, 0x6, 0x6, 0x8, 0x2, 0x9, 0x9, 0x3, 0xe87c, 0x7, 0x3, 0x4, 0x2, 0xfffffffffffffff7]}, &(0x7f0000000180)=0x100) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.147' (ED25519) to the list of known hosts. [ 81.877634][ T5602] cgroup: Unknown subsys name 'net' [ 81.947326][ T5602] cgroup: Unknown subsys name 'cpuset' [ 81.951145][ T5602] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.673462][ T5602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.163048][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.177028][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.178057][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.179471][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.181234][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.183134][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.185497][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.193868][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.195010][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.198195][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.200411][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.208553][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.212465][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.214145][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.218286][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.229613][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.242548][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.243746][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.274517][ T4932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.286695][ T4932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.007023][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.007209][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.007360][ T5612] bridge_slave_0: entered allmulticast mode [ 88.009440][ T5612] bridge_slave_0: entered promiscuous mode [ 88.018658][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.018822][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.019228][ T5612] bridge_slave_1: entered allmulticast mode [ 88.026603][ T5612] bridge_slave_1: entered promiscuous mode [ 88.148163][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.169836][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.169929][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.170058][ T5614] bridge_slave_0: entered allmulticast mode [ 88.171746][ T5614] bridge_slave_0: entered promiscuous mode [ 88.177265][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.177641][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.180647][ T5614] bridge_slave_1: entered allmulticast mode [ 88.187649][ T5614] bridge_slave_1: entered promiscuous mode [ 88.233812][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.307708][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.324039][ T5617] Bluetooth: hci2: command tx timeout [ 88.326580][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.326758][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.326897][ T5615] bridge_slave_0: entered allmulticast mode [ 88.328604][ T5615] bridge_slave_0: entered promiscuous mode [ 88.334252][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.334526][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.335965][ T5615] bridge_slave_1: entered allmulticast mode [ 88.341842][ T5615] bridge_slave_1: entered promiscuous mode [ 88.403157][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.413337][ T5622] Bluetooth: hci1: command tx timeout [ 88.413356][ T5627] Bluetooth: hci0: command tx timeout [ 88.413749][ T5617] Bluetooth: hci3: command tx timeout [ 88.448630][ T5612] team0: Port device team_slave_0 added [ 88.478183][ T5614] team0: Port device team_slave_0 added [ 88.480536][ T5612] team0: Port device team_slave_1 added [ 88.483135][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.483498][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.483607][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.483740][ T5613] bridge_slave_0: entered allmulticast mode [ 88.489395][ T5613] bridge_slave_0: entered promiscuous mode [ 88.502460][ T5614] team0: Port device team_slave_1 added [ 88.542993][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.545180][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.545678][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.546874][ T5613] bridge_slave_1: entered allmulticast mode [ 88.552264][ T5613] bridge_slave_1: entered promiscuous mode [ 88.647428][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.647455][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.647478][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.650866][ T5615] team0: Port device team_slave_0 added [ 88.697292][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.697310][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.697337][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.709670][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.709724][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.709797][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.736617][ T5615] team0: Port device team_slave_1 added [ 88.803733][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.804838][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.804855][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.804883][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.807558][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.908596][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.908617][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.908644][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.911856][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.911872][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.911894][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.979128][ T5613] team0: Port device team_slave_0 added [ 89.041675][ T5613] team0: Port device team_slave_1 added [ 89.083609][ T5612] hsr_slave_0: entered promiscuous mode [ 89.084516][ T5612] hsr_slave_1: entered promiscuous mode [ 89.122868][ T5614] hsr_slave_0: entered promiscuous mode [ 89.130471][ T5614] hsr_slave_1: entered promiscuous mode [ 89.131065][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 89.131150][ T5614] Cannot create hsr debugfs directory [ 89.198699][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.198717][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.198740][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.227834][ T5615] hsr_slave_0: entered promiscuous mode [ 89.231130][ T5615] hsr_slave_1: entered promiscuous mode [ 89.234916][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 89.234990][ T5615] Cannot create hsr debugfs directory [ 89.300415][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.300432][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.300457][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.484350][ T5613] hsr_slave_0: entered promiscuous mode [ 89.485134][ T5613] hsr_slave_1: entered promiscuous mode [ 89.485665][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 89.485693][ T5613] Cannot create hsr debugfs directory [ 89.832498][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.851445][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.862478][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.874562][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.875569][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.880340][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.908185][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.911312][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.988560][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.991865][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.992745][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.017413][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.018502][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.022734][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.047582][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.059249][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.135668][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.140807][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.141756][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.165289][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.189189][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.192963][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.196850][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.215599][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.332076][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.342413][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.360635][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.369757][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.381148][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.390940][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.403427][ T5617] Bluetooth: hci2: command tx timeout [ 90.404115][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.408352][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.463050][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.484196][ T5622] Bluetooth: hci0: command tx timeout [ 90.484233][ T5622] Bluetooth: hci1: command tx timeout [ 90.484311][ T5617] Bluetooth: hci3: command tx timeout [ 90.568865][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.584599][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.621255][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.621388][ T3304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.657447][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.657523][ T3304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.662207][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.707230][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.732636][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.732711][ T3304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.763386][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.763536][ T3304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.766803][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.816437][ T1364] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.816513][ T1364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.851513][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.851604][ T3304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.889126][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.996349][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.052102][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.052212][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.101419][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.101524][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.929692][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.112521][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.113324][ T30] cfg80211: failed to load regulatory.db [ 92.153513][ T5612] veth0_vlan: entered promiscuous mode [ 92.211169][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.216814][ T5612] veth1_vlan: entered promiscuous mode [ 92.358590][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.361508][ T5612] veth0_macvtap: entered promiscuous mode [ 92.376925][ T5615] veth0_vlan: entered promiscuous mode [ 92.394335][ T5612] veth1_macvtap: entered promiscuous mode [ 92.410985][ T5613] veth0_vlan: entered promiscuous mode [ 92.428408][ T5615] veth1_vlan: entered promiscuous mode [ 92.444589][ T5613] veth1_vlan: entered promiscuous mode [ 92.484014][ T5617] Bluetooth: hci2: command tx timeout [ 92.487027][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.517962][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.563443][ T5617] Bluetooth: hci1: command tx timeout [ 92.564917][ T3304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.565745][ T5613] veth0_macvtap: entered promiscuous mode [ 92.576415][ T5617] Bluetooth: hci3: command tx timeout [ 92.576506][ T5617] Bluetooth: hci0: command tx timeout [ 92.612830][ T5614] veth0_vlan: entered promiscuous mode [ 92.621236][ T5613] veth1_macvtap: entered promiscuous mode [ 92.635958][ T5615] veth0_macvtap: entered promiscuous mode [ 92.658706][ T5615] veth1_macvtap: entered promiscuous mode [ 92.688526][ T5614] veth1_vlan: entered promiscuous mode [ 92.700890][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.700991][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.724146][ T3304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.777818][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.780590][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.834778][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.838660][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.840473][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.840495][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.919289][ T5614] veth0_macvtap: entered promiscuous mode [ 92.951254][ T5614] veth1_macvtap: entered promiscuous mode [ 92.967137][ T1123] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.967191][ T1123] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.967230][ T1123] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.967268][ T1123] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.018621][ T1364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.018649][ T1364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.044417][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.044864][ T3304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.044908][ T3304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.044946][ T3304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.168852][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.206141][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.212861][ T5612] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.289003][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.289028][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.358913][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.358934][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.467894][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.467918][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.473815][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.484589][ T45] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.485287][ T45] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.519025][ T45] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.557971][ T1364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.557992][ T1364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.617438][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.617462][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.775710][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.775734][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.883894][ T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 93.909477][ T5772] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.045756][ T10] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 94.047476][ T10] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 94.047505][ T10] usb 2-1: config 0 has no interface number 0 [ 94.047558][ T10] usb 2-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 94.047574][ T10] usb 2-1: config 0 interface 41 has no altsetting 0 [ 94.049973][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.049999][ T10] usb 2-1: Product: syz [ 94.050014][ T10] usb 2-1: Manufacturer: syz [ 94.050029][ T10] usb 2-1: SerialNumber: syz [ 94.067914][ T10] usb 2-1: config 0 descriptor?? [ 94.149648][ T10] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 94.194590][ T1650] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.263301][ T5724] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 94.355892][ T1650] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 94.357443][ T1650] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.416065][ T5724] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 94.421420][ T5724] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 94.421475][ T5724] usb 4-1: config 0 has no interface number 0 [ 94.421520][ T5724] usb 4-1: config 0 interface 41 has no altsetting 0 [ 94.460987][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.461018][ T5724] usb 4-1: Product: syz [ 94.461050][ T5724] usb 4-1: Manufacturer: syz [ 94.461067][ T5724] usb 4-1: SerialNumber: syz [ 94.490445][ T5724] usb 4-1: config 0 descriptor?? [ 94.563627][ T5627] Bluetooth: hci2: command tx timeout [ 94.608657][ T1650] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 94.644004][ T5627] Bluetooth: hci0: command tx timeout [ 94.644036][ T5622] Bluetooth: hci1: command tx timeout [ 94.644074][ T5617] Bluetooth: hci3: command tx timeout [ 94.846391][ T5782] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.118791][ T5787] FAULT_INJECTION: forcing a failure. [ 95.118791][ T5787] name failslab, interval 1, probability 0, space 0, times 1 [ 95.118842][ T5787] CPU: 1 UID: 0 PID: 5787 Comm: syz.0.7 Not tainted syzkaller #0 PREEMPT(full) [ 95.118871][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.118894][ T5787] Call Trace: [ 95.118906][ T5787] [ 95.118917][ T5787] dump_stack_lvl+0xe8/0x150 [ 95.118961][ T5787] should_fail_ex+0x3eb/0x540 [ 95.118992][ T5787] should_failslab+0xa8/0x100 [ 95.119020][ T5787] __kmalloc_noprof+0xf9/0x710 [ 95.119050][ T5787] ? rcu_is_watching+0x16/0xb0 [ 95.119081][ T5787] ? tomoyo_realpath_from_path+0xef/0x640 [ 95.119110][ T5787] ? tomoyo_realpath_from_path+0xef/0x640 [ 95.119147][ T5787] tomoyo_realpath_from_path+0xef/0x640 [ 95.119187][ T5787] ? tomoyo_path_number_perm+0x219/0x5f0 [ 95.119217][ T5787] tomoyo_path_number_perm+0x246/0x5f0 [ 95.119244][ T5787] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 95.119267][ T5787] ? __lock_acquire+0x747/0x2de0 [ 95.119316][ T5787] ? hook_file_ioctl+0x1f2/0x600 [ 95.119361][ T5787] ? __fget_files+0x2a/0x420 [ 95.119392][ T5787] ? __fget_files+0x2a/0x420 [ 95.119419][ T5787] ? __fget_files+0x3a2/0x420 [ 95.119445][ T5787] ? __fget_files+0x2a/0x420 [ 95.119477][ T5787] security_file_ioctl+0xc3/0x2a0 [ 95.119515][ T5787] __se_sys_ioctl+0x47/0x170 [ 95.119552][ T5787] do_syscall_64+0x166/0x520 [ 95.119574][ T5787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.119597][ T5787] ? clear_bhb_loop+0x70/0xc0 [ 95.119624][ T5787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.119646][ T5787] RIP: 0033:0x7f3ddcb9e159 [ 95.119673][ T5787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.119691][ T5787] RSP: 002b:00007f3ddd9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.119720][ T5787] RAX: ffffffffffffffda RBX: 00007f3ddce25fa0 RCX: 00007f3ddcb9e159 [ 95.119737][ T5787] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 95.119751][ T5787] RBP: 00007f3ddd9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.119765][ T5787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.119778][ T5787] R13: 00007f3ddce26038 R14: 00007f3ddce25fa0 R15: 00007fffb11eb258 [ 95.119811][ T5787] [ 95.121731][ T5787] ERROR: Out of memory at tomoyo_realpath_from_path. [ 95.548000][ T5790] FAULT_INJECTION: forcing a failure. [ 95.548000][ T5790] name failslab, interval 1, probability 0, space 0, times 0 [ 95.548037][ T5790] CPU: 0 UID: 0 PID: 5790 Comm: syz.0.8 Not tainted syzkaller #0 PREEMPT(full) [ 95.548058][ T5790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.548084][ T5790] Call Trace: [ 95.548094][ T5790] [ 95.548106][ T5790] dump_stack_lvl+0xe8/0x150 [ 95.548145][ T5790] should_fail_ex+0x3eb/0x540 [ 95.548184][ T5790] should_failslab+0xa8/0x100 [ 95.548203][ T5790] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 95.548250][ T5790] kmem_cache_alloc_noprof+0x9c/0x600 [ 95.548288][ T5790] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 95.548319][ T5790] ? kmem_cache_alloc_noprof+0x151/0x600 [ 95.548371][ T5790] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 95.548414][ T5790] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 95.548462][ T5790] mmu_topup_memory_caches+0x21/0x170 [ 95.548511][ T5790] kvm_mmu_load+0x9d/0x21e0 [ 95.548565][ T5790] ? kvm_msr_allowed+0x9a/0x490 [ 95.548601][ T5790] ? kvm_msr_allowed+0x3f4/0x490 [ 95.548635][ T5790] ? kvm_msr_allowed+0x9a/0x490 [ 95.548667][ T5790] ? kvm_msr_allowed+0x9a/0x490 [ 95.548710][ T5790] ? kvm_apic_has_interrupt+0x740/0x770 [ 95.548757][ T5790] vcpu_run+0x4f68/0x79b0 [ 95.548852][ T5790] ? __pfx_vcpu_run+0x10/0x10 [ 95.548902][ T5790] ? lock_acquire+0x115/0x350 [ 95.548956][ T5790] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 95.548992][ T5790] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 95.549036][ T5790] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 95.549081][ T5790] kvm_vcpu_ioctl+0xa61/0xfd0 [ 95.549127][ T5790] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 95.549153][ T5790] ? hook_file_ioctl+0x1f2/0x600 [ 95.549211][ T5790] ? __fget_files+0x2a/0x420 [ 95.549247][ T5790] ? __fget_files+0x2a/0x420 [ 95.549281][ T5790] ? __fget_files+0x3a2/0x420 [ 95.549303][ T5790] ? __fget_files+0x2a/0x420 [ 95.549327][ T5790] ? bpf_lsm_file_ioctl+0x9/0x20 [ 95.549373][ T5790] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 95.549410][ T5790] __se_sys_ioctl+0xfc/0x170 [ 95.549479][ T5790] do_syscall_64+0x166/0x520 [ 95.549513][ T5790] ? trace_irq_disable+0x3b/0x140 [ 95.549548][ T5790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.549575][ T5790] ? clear_bhb_loop+0x70/0xc0 [ 95.549604][ T5790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.549648][ T5790] RIP: 0033:0x7f3ddcb9e159 [ 95.549672][ T5790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.549692][ T5790] RSP: 002b:00007f3ddd9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.549718][ T5790] RAX: ffffffffffffffda RBX: 00007f3ddce25fa0 RCX: 00007f3ddcb9e159 [ 95.549741][ T5790] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 95.549752][ T5790] RBP: 00007f3ddcc3506b R08: 0000000000000000 R09: 0000000000000000 [ 95.549762][ T5790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.549772][ T5790] R13: 00007f3ddce26038 R14: 00007f3ddce25fa0 R15: 00007fffb11eb258 [ 95.549817][ T5790] [ 95.884434][ T5724] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 95.884495][ T5724] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 95.884669][ T5724] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 95.892831][ T5724] usb 4-1: USB disconnect, device number 2 [ 96.223021][ T5796] FAULT_INJECTION: forcing a failure. [ 96.223021][ T5796] name failslab, interval 1, probability 0, space 0, times 0 [ 96.223046][ T5796] CPU: 1 UID: 0 PID: 5796 Comm: syz.0.9 Not tainted syzkaller #0 PREEMPT(full) [ 96.223067][ T5796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.223076][ T5796] Call Trace: [ 96.223082][ T5796] [ 96.223089][ T5796] dump_stack_lvl+0xe8/0x150 [ 96.223114][ T5796] should_fail_ex+0x3eb/0x540 [ 96.223135][ T5796] ? __alloc_skb+0x1db/0x7a0 [ 96.223149][ T5796] should_failslab+0xa8/0x100 [ 96.223167][ T5796] ? __alloc_skb+0x1db/0x7a0 [ 96.223180][ T5796] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 96.223229][ T5796] ? __alloc_skb+0x18d/0x7a0 [ 96.223249][ T5796] ? __alloc_skb+0x1db/0x7a0 [ 96.223275][ T5796] __alloc_skb+0x1db/0x7a0 [ 96.223301][ T5796] netlink_sendmsg+0x577/0xae0 [ 96.223336][ T5796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.223373][ T5796] ? apparmor_socket_sendmsg+0x98/0x360 [ 96.223400][ T5796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.223427][ T5796] sock_sendmsg_nosec+0x13a/0x180 [ 96.223460][ T5796] ____sys_sendmsg+0x54e/0x850 [ 96.223491][ T5796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.223538][ T5796] ? import_iovec+0x73/0xa0 [ 96.223571][ T5796] ___sys_sendmsg+0x2a5/0x360 [ 96.223600][ T5796] ? __lock_acquire+0x747/0x2de0 [ 96.223638][ T5796] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.223699][ T5796] ? __fget_files+0x2a/0x420 [ 96.223726][ T5796] ? __fget_files+0x3a2/0x420 [ 96.223765][ T5796] __x64_sys_sendmsg+0x1b1/0x290 [ 96.223794][ T5796] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 96.223840][ T5796] do_syscall_64+0x166/0x520 [ 96.223861][ T5796] ? trace_irq_disable+0x3b/0x140 [ 96.223893][ T5796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.223917][ T5796] ? clear_bhb_loop+0x70/0xc0 [ 96.223945][ T5796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.223968][ T5796] RIP: 0033:0x7f3ddcb9e159 [ 96.223988][ T5796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.224006][ T5796] RSP: 002b:00007f3ddd9d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.224030][ T5796] RAX: ffffffffffffffda RBX: 00007f3ddce26090 RCX: 00007f3ddcb9e159 [ 96.224047][ T5796] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 96.224062][ T5796] RBP: 00007f3ddd9d6090 R08: 0000000000000000 R09: 0000000000000000 [ 96.224076][ T5796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.224089][ T5796] R13: 00007f3ddce26128 R14: 00007f3ddce26090 R15: 00007fffb11eb258 [ 96.224132][ T5796] [ 96.546375][ T5701] usb 2-1: USB disconnect, device number 2 [ 96.896140][ T5714] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.043907][ T5714] usb 4-1: Using ep0 maxpacket: 32 [ 97.044765][ T5714] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 97.045938][ T5714] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.050347][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.050375][ T5714] usb 4-1: Product: syz [ 97.050392][ T5714] usb 4-1: Manufacturer: syz [ 97.050408][ T5714] usb 4-1: SerialNumber: syz [ 97.102948][ T5714] usb 4-1: config 0 descriptor?? [ 97.112896][ T5714] cdc_ether 4-1:0.0: missing cdc header descriptor [ 97.133479][ T5714] usb 4-1: unsupported MDLM descriptors [ 97.345088][ T10] usb 4-1: USB disconnect, device number 3 [ 98.169991][ T5824] loop0: detected capacity change from 0 to 2049 [ 98.229385][ T5824] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 98.229417][ T5824] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 98.229435][ T5824] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 98.229546][ T5824] loop0: [ 98.453451][ T987] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 98.623992][ T987] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 98.625047][ T987] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 98.625066][ T987] usb 4-1: config 0 has no interface number 0 [ 98.625095][ T987] usb 4-1: config 0 interface 41 has no altsetting 0 [ 98.627334][ T987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.627361][ T987] usb 4-1: Product: syz [ 98.627410][ T987] usb 4-1: Manufacturer: syz [ 98.627421][ T987] usb 4-1: SerialNumber: syz [ 98.630359][ T987] usb 4-1: config 0 descriptor?? [ 98.676615][ T5724] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.813700][ T5722] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 98.833775][ T5724] usb 2-1: Using ep0 maxpacket: 32 [ 98.836560][ T5724] usb 2-1: unable to get BOS descriptor or descriptor too short [ 98.836608][ T5724] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=27.24 [ 98.838799][ T5724] usb 2-1: config 165 has an invalid interface number: 162 but max is 0 [ 98.838839][ T5724] usb 2-1: config 165 has no interface number 0 [ 98.838868][ T5724] usb 2-1: config 165 interface 162 has no altsetting 0 [ 98.841224][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.841248][ T5724] usb 2-1: Product: syz [ 98.841283][ T5724] usb 2-1: Manufacturer: syz [ 98.841294][ T5724] usb 2-1: SerialNumber: syz [ 98.965147][ T5722] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 98.967331][ T5722] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 98.967360][ T5722] usb 1-1: config 0 has no interface number 0 [ 98.967436][ T5722] usb 1-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 98.967452][ T5722] usb 1-1: config 0 interface 41 has no altsetting 0 [ 98.969950][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.969969][ T5722] usb 1-1: Product: syz [ 98.970009][ T5722] usb 1-1: Manufacturer: syz [ 98.970020][ T5722] usb 1-1: SerialNumber: syz [ 99.037240][ T5722] usb 1-1: config 0 descriptor?? [ 99.055561][ T5722] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22 [ 99.125457][ T5828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.126081][ T5828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.169034][ T5724] usb 2-1: USB disconnect, device number 3 [ 99.804759][ T5838] netlink: 48 bytes leftover after parsing attributes in process `syz.1.23'. [ 99.878762][ T987] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 99.878862][ T987] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 99.879108][ T987] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 99.924901][ T987] usb 4-1: USB disconnect, device number 4 [ 99.946380][ T5841] FAULT_INJECTION: forcing a failure. [ 99.946380][ T5841] name failslab, interval 1, probability 0, space 0, times 0 [ 99.946416][ T5841] CPU: 0 UID: 0 PID: 5841 Comm: syz.1.24 Not tainted syzkaller #0 PREEMPT(full) [ 99.946441][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.946457][ T5841] Call Trace: [ 99.946466][ T5841] [ 99.946476][ T5841] dump_stack_lvl+0xe8/0x150 [ 99.946513][ T5841] should_fail_ex+0x3eb/0x540 [ 99.946545][ T5841] should_failslab+0xa8/0x100 [ 99.946570][ T5841] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 99.946604][ T5841] kmem_cache_alloc_noprof+0x9c/0x600 [ 99.946637][ T5841] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 99.946665][ T5841] ? kmem_cache_alloc_noprof+0x151/0x600 [ 99.946696][ T5841] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 99.946735][ T5841] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 99.946781][ T5841] mmu_topup_memory_caches+0x21/0x170 [ 99.946818][ T5841] kvm_mmu_load+0x9d/0x21e0 [ 99.946854][ T5841] ? kvm_msr_allowed+0x9a/0x490 [ 99.946887][ T5841] ? kvm_msr_allowed+0x3f4/0x490 [ 99.946919][ T5841] ? kvm_msr_allowed+0x9a/0x490 [ 99.946956][ T5841] ? kvm_msr_allowed+0x9a/0x490 [ 99.946995][ T5841] ? kvm_apic_has_interrupt+0x740/0x770 [ 99.947038][ T5841] vcpu_run+0x4f68/0x79b0 [ 99.947104][ T5841] ? update_se+0x90/0x1020 [ 99.947177][ T5841] ? __pfx_vcpu_run+0x10/0x10 [ 99.947211][ T5841] ? lock_acquire+0x115/0x350 [ 99.947277][ T5841] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 99.947325][ T5841] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 99.947360][ T5841] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 99.947401][ T5841] kvm_vcpu_ioctl+0xa61/0xfd0 [ 99.947443][ T5841] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 99.947477][ T5841] ? hook_file_ioctl+0x1f2/0x600 [ 99.947525][ T5841] ? __fget_files+0x2a/0x420 [ 99.947559][ T5841] ? __fget_files+0x2a/0x420 [ 99.947591][ T5841] ? __fget_files+0x3a2/0x420 [ 99.947619][ T5841] ? __fget_files+0x2a/0x420 [ 99.947652][ T5841] ? bpf_lsm_file_ioctl+0x9/0x20 [ 99.947685][ T5841] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 99.947720][ T5841] __se_sys_ioctl+0xfc/0x170 [ 99.947759][ T5841] do_syscall_64+0x166/0x520 [ 99.947786][ T5841] ? trace_irq_disable+0x3b/0x140 [ 99.947819][ T5841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.947842][ T5841] ? clear_bhb_loop+0x70/0xc0 [ 99.947867][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.947885][ T5841] RIP: 0033:0x7f7cc8d9e159 [ 99.947905][ T5841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.947920][ T5841] RSP: 002b:00007f7cc9d42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.947942][ T5841] RAX: ffffffffffffffda RBX: 00007f7cc9025fa0 RCX: 00007f7cc8d9e159 [ 99.947957][ T5841] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 99.947970][ T5841] RBP: 00007f7cc8e3506b R08: 0000000000000000 R09: 0000000000000000 [ 99.947983][ T5841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.947996][ T5841] R13: 00007f7cc9026038 R14: 00007f7cc9025fa0 R15: 00007ffe9b0da738 [ 99.948027][ T5841] [ 100.289149][ T5724] usb 3-1: USB disconnect, device number 2 [ 100.399606][ T5846] FAULT_INJECTION: forcing a failure. [ 100.399606][ T5846] name failslab, interval 1, probability 0, space 0, times 0 [ 100.399643][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz.2.25 Not tainted syzkaller #0 PREEMPT(full) [ 100.399668][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.399681][ T5846] Call Trace: [ 100.399689][ T5846] [ 100.399698][ T5846] dump_stack_lvl+0xe8/0x150 [ 100.399732][ T5846] should_fail_ex+0x3eb/0x540 [ 100.399761][ T5846] should_failslab+0xa8/0x100 [ 100.399796][ T5846] __kmalloc_noprof+0xf9/0x710 [ 100.399830][ T5846] ? tomoyo_encode+0x2ad/0x570 [ 100.399856][ T5846] ? tomoyo_encode+0x2ad/0x570 [ 100.399891][ T5846] tomoyo_encode+0x2ad/0x570 [ 100.399933][ T5846] tomoyo_realpath_from_path+0x5fa/0x640 [ 100.399982][ T5846] ? tomoyo_path_number_perm+0x219/0x5f0 [ 100.400007][ T5846] tomoyo_path_number_perm+0x246/0x5f0 [ 100.400033][ T5846] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 100.400055][ T5846] ? __lock_acquire+0x747/0x2de0 [ 100.400104][ T5846] ? hook_file_ioctl+0x1f2/0x600 [ 100.400148][ T5846] ? __fget_files+0x2a/0x420 [ 100.400187][ T5846] ? __fget_files+0x2a/0x420 [ 100.400218][ T5846] ? __fget_files+0x3a2/0x420 [ 100.400245][ T5846] ? __fget_files+0x2a/0x420 [ 100.400277][ T5846] security_file_ioctl+0xc3/0x2a0 [ 100.400315][ T5846] __se_sys_ioctl+0x47/0x170 [ 100.400368][ T5846] do_syscall_64+0x166/0x520 [ 100.400399][ T5846] ? trace_irq_disable+0x3b/0x140 [ 100.400435][ T5846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.400459][ T5846] ? clear_bhb_loop+0x70/0xc0 [ 100.400492][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.400515][ T5846] RIP: 0033:0x7f001e79e159 [ 100.400535][ T5846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.400553][ T5846] RSP: 002b:00007f001f64f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.400577][ T5846] RAX: ffffffffffffffda RBX: 00007f001ea25fa0 RCX: 00007f001e79e159 [ 100.400594][ T5846] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 100.400607][ T5846] RBP: 00007f001f64f090 R08: 0000000000000000 R09: 0000000000000000 [ 100.400621][ T5846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.400634][ T5846] R13: 00007f001ea26038 R14: 00007f001ea25fa0 R15: 00007ffef5e3b018 [ 100.400677][ T5846] [ 100.402537][ T5846] ERROR: Out of memory at tomoyo_realpath_from_path. [ 100.863741][ T5853] syzkaller1: entered promiscuous mode [ 100.863767][ T5853] syzkaller1: entered allmulticast mode [ 100.913508][ T5851] UDC core: g1: couldn't find an available UDC or it's busy [ 100.946558][ T5855] FAULT_INJECTION: forcing a failure. [ 100.946558][ T5855] name failslab, interval 1, probability 0, space 0, times 0 [ 100.946598][ T5855] CPU: 1 UID: 0 PID: 5855 Comm: syz.1.29 Not tainted syzkaller #0 PREEMPT(full) [ 100.946629][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.946644][ T5855] Call Trace: [ 100.946654][ T5855] [ 100.946665][ T5855] dump_stack_lvl+0xe8/0x150 [ 100.946705][ T5855] should_fail_ex+0x3eb/0x540 [ 100.946750][ T5855] should_failslab+0xa8/0x100 [ 100.946780][ T5855] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 100.946818][ T5855] kmem_cache_alloc_noprof+0x9c/0x600 [ 100.946854][ T5855] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 100.946887][ T5855] ? kmem_cache_alloc_noprof+0x151/0x600 [ 100.946921][ T5855] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 100.946962][ T5855] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 100.947009][ T5855] mmu_topup_memory_caches+0x21/0x170 [ 100.947049][ T5855] kvm_mmu_load+0x9d/0x21e0 [ 100.947089][ T5855] ? kvm_msr_allowed+0x9a/0x490 [ 100.947126][ T5855] ? kvm_msr_allowed+0x3f4/0x490 [ 100.947173][ T5855] ? kvm_msr_allowed+0x9a/0x490 [ 100.947214][ T5855] ? kvm_msr_allowed+0x9a/0x490 [ 100.947258][ T5855] ? kvm_apic_has_interrupt+0x740/0x770 [ 100.947304][ T5855] vcpu_run+0x4f68/0x79b0 [ 100.947383][ T5855] ? update_se+0x90/0x1020 [ 100.947455][ T5855] ? __pfx_vcpu_run+0x10/0x10 [ 100.947490][ T5855] ? lock_acquire+0x115/0x350 [ 100.947546][ T5855] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 100.947588][ T5855] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 100.947627][ T5855] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 100.947671][ T5855] kvm_vcpu_ioctl+0xa61/0xfd0 [ 100.947723][ T5855] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 100.947760][ T5855] ? hook_file_ioctl+0x1f2/0x600 [ 100.947810][ T5855] ? __fget_files+0x2a/0x420 [ 100.947847][ T5855] ? __fget_files+0x2a/0x420 [ 100.947878][ T5855] ? __fget_files+0x3a2/0x420 [ 100.947924][ T5855] ? __fget_files+0x2a/0x420 [ 100.947960][ T5855] ? bpf_lsm_file_ioctl+0x9/0x20 [ 100.947993][ T5855] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 100.948028][ T5855] __se_sys_ioctl+0xfc/0x170 [ 100.948061][ T5855] do_syscall_64+0x166/0x520 [ 100.948080][ T5855] ? trace_irq_disable+0x3b/0x140 [ 100.948108][ T5855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.948130][ T5855] ? clear_bhb_loop+0x70/0xc0 [ 100.948163][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.948185][ T5855] RIP: 0033:0x7f7cc8d9e159 [ 100.948205][ T5855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.948221][ T5855] RSP: 002b:00007f7cc9d42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.948243][ T5855] RAX: ffffffffffffffda RBX: 00007f7cc9025fa0 RCX: 00007f7cc8d9e159 [ 100.948259][ T5855] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 100.948272][ T5855] RBP: 00007f7cc8e3506b R08: 0000000000000000 R09: 0000000000000000 [ 100.948286][ T5855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.948297][ T5855] R13: 00007f7cc9026038 R14: 00007f7cc9025fa0 R15: 00007ffe9b0da738 [ 100.948326][ T5855] [ 101.397290][ T5861] netlink: 'syz.2.31': attribute type 22 has an invalid length. [ 101.397316][ T5861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31'. [ 101.530982][ T5722] usb 1-1: USB disconnect, device number 2 [ 101.994663][ T5722] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.147505][ T5722] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 102.149112][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.354848][ T5701] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 102.394402][ T5722] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 102.505412][ T5701] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 102.506518][ T5701] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 102.506544][ T5701] usb 4-1: config 0 has no interface number 0 [ 102.506587][ T5701] usb 4-1: config 0 interface 41 has no altsetting 0 [ 102.511197][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.511226][ T5701] usb 4-1: Product: syz [ 102.511241][ T5701] usb 4-1: Manufacturer: syz [ 102.511257][ T5701] usb 4-1: SerialNumber: syz [ 102.577940][ T5701] usb 4-1: config 0 descriptor?? [ 102.642566][ T5884] loop0: detected capacity change from 0 to 2049 [ 102.676143][ T5879] UDC core: g1: couldn't find an available UDC or it's busy [ 102.698583][ T5884] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 102.698652][ T5884] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 102.698666][ T5884] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 102.698724][ T5884] loop0: [ 102.932548][ T5887] UDC core: g1: couldn't find an available UDC or it's busy [ 103.233357][ T5722] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 103.313364][ T5714] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.394081][ T5722] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 103.395347][ T5722] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 103.395372][ T5722] usb 3-1: config 0 has no interface number 0 [ 103.395410][ T5722] usb 3-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 103.395426][ T5722] usb 3-1: config 0 interface 41 has no altsetting 0 [ 103.398281][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.398308][ T5722] usb 3-1: Product: syz [ 103.398349][ T5722] usb 3-1: Manufacturer: syz [ 103.398370][ T5722] usb 3-1: SerialNumber: syz [ 103.402157][ T5722] usb 3-1: config 0 descriptor?? [ 103.464257][ T5714] usb 2-1: Using ep0 maxpacket: 32 [ 103.470840][ T5714] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 103.486726][ T5714] usb 2-1: config index 0 descriptor too short (expected 3659, got 75) [ 103.486811][ T5714] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.509419][ T5722] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 103.512949][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.512978][ T5714] usb 2-1: Product: syz [ 103.512994][ T5714] usb 2-1: Manufacturer: syz [ 103.513015][ T5714] usb 2-1: SerialNumber: syz [ 103.544983][ T5714] usb 2-1: config 0 descriptor?? [ 103.563059][ T5714] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 103.805211][ T5701] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 103.805250][ T5701] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 103.806200][ T5701] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 103.822485][ T5701] usb 4-1: USB disconnect, device number 5 [ 104.452540][ T5897] FAULT_INJECTION: forcing a failure. [ 104.452540][ T5897] name failslab, interval 1, probability 0, space 0, times 0 [ 104.452573][ T5897] CPU: 1 UID: 0 PID: 5897 Comm: syz.3.43 Not tainted syzkaller #0 PREEMPT(full) [ 104.452604][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.452615][ T5897] Call Trace: [ 104.452621][ T5897] [ 104.452628][ T5897] dump_stack_lvl+0xe8/0x150 [ 104.452674][ T5897] should_fail_ex+0x3eb/0x540 [ 104.452705][ T5897] should_failslab+0xa8/0x100 [ 104.452732][ T5897] __kmalloc_noprof+0xf9/0x710 [ 104.452766][ T5897] ? io_cache_alloc_new+0x40/0x100 [ 104.452790][ T5897] ? io_cache_alloc_new+0x40/0x100 [ 104.452839][ T5897] io_cache_alloc_new+0x40/0x100 [ 104.452875][ T5897] __io_prep_rw+0x281/0xe70 [ 104.452901][ T5897] ? kasan_quarantine_put+0xbb/0x1f0 [ 104.452939][ T5897] ? __pfx___io_prep_rw+0x10/0x10 [ 104.452997][ T5897] ? __mutex_trylock_common+0x15f/0x270 [ 104.453029][ T5897] io_prep_rwv+0x81/0x390 [ 104.453057][ T5897] ? __pfx_io_prep_rwv+0x10/0x10 [ 104.453077][ T5897] ? trace_contention_end+0x3d/0x140 [ 104.453109][ T5897] io_submit_sqes+0xbde/0x2310 [ 104.453164][ T5897] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 104.453201][ T5897] ? irqentry_exit+0x218/0x910 [ 104.453236][ T5897] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 104.453258][ T5897] ? irqentry_exit+0x218/0x910 [ 104.453291][ T5897] ? trace_irq_disable+0x3b/0x140 [ 104.453332][ T5897] ? rcu_is_watching+0x16/0xb0 [ 104.453360][ T5897] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 104.453390][ T5897] do_syscall_64+0x166/0x520 [ 104.453406][ T5897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.453422][ T5897] ? clear_bhb_loop+0x70/0xc0 [ 104.453458][ T5897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.453491][ T5897] RIP: 0033:0x7f5c33d9e159 [ 104.453513][ T5897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.453532][ T5897] RSP: 002b:00007f5c34cfaf38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 104.453556][ T5897] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007f5c33d9e159 [ 104.453572][ T5897] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 104.453596][ T5897] RBP: 000000000000005f R08: 0000000000000000 R09: 0000000000000008 [ 104.453605][ T5897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000780 [ 104.453633][ T5897] R13: 0000200000000788 R14: 0000000000000e26 R15: 0000000000000000 [ 104.453667][ T5897] [ 105.257066][ T5714] gspca_sunplus: reg_r err -71 [ 105.257169][ T5714] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 105.280432][ T5714] usb 2-1: USB disconnect, device number 4 [ 105.335389][ T5902] Zero length message leads to an empty skb [ 105.430916][ T5903] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 105.686998][ T5914] FAULT_INJECTION: forcing a failure. [ 105.686998][ T5914] name failslab, interval 1, probability 0, space 0, times 0 [ 105.687045][ T5914] CPU: 0 UID: 0 PID: 5914 Comm: syz.3.48 Not tainted syzkaller #0 PREEMPT(full) [ 105.687068][ T5914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.687081][ T5914] Call Trace: [ 105.687090][ T5914] [ 105.687101][ T5914] dump_stack_lvl+0xe8/0x150 [ 105.687132][ T5914] should_fail_ex+0x3eb/0x540 [ 105.687154][ T5914] should_failslab+0xa8/0x100 [ 105.687194][ T5914] __kmalloc_cache_noprof+0x9e/0x600 [ 105.687227][ T5914] ? rcu_is_watching+0x16/0xb0 [ 105.687247][ T5914] ? vhost_task_create+0x123/0x380 [ 105.687279][ T5914] ? vhost_task_create+0x123/0x380 [ 105.687330][ T5914] vhost_task_create+0x123/0x380 [ 105.687364][ T5914] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 105.687388][ T5914] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 105.687413][ T5914] ? __pfx_vhost_task_create+0x10/0x10 [ 105.687444][ T5914] ? register_lock_class+0x31/0x2e0 [ 105.687484][ T5914] ? __pfx_vhost_task_fn+0x10/0x10 [ 105.687527][ T5914] ? kasan_quarantine_put+0xbb/0x1f0 [ 105.687567][ T5914] kvm_mmu_post_init_vm+0x147/0x2b0 [ 105.687604][ T5914] kvm_arch_vcpu_ioctl_run+0x7c/0x19c0 [ 105.687634][ T5914] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 105.687690][ T5914] kvm_vcpu_ioctl+0xa61/0xfd0 [ 105.687729][ T5914] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 105.687760][ T5914] ? hook_file_ioctl+0x1f2/0x600 [ 105.687794][ T5914] ? __fget_files+0x2a/0x420 [ 105.687840][ T5914] ? __fget_files+0x2a/0x420 [ 105.687870][ T5914] ? __fget_files+0x3a2/0x420 [ 105.687897][ T5914] ? __fget_files+0x2a/0x420 [ 105.687925][ T5914] ? bpf_lsm_file_ioctl+0x9/0x20 [ 105.687946][ T5914] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 105.687990][ T5914] __se_sys_ioctl+0xfc/0x170 [ 105.688027][ T5914] do_syscall_64+0x166/0x520 [ 105.688047][ T5914] ? trace_irq_disable+0x3b/0x140 [ 105.688079][ T5914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.688095][ T5914] ? clear_bhb_loop+0x70/0xc0 [ 105.688130][ T5914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.688154][ T5914] RIP: 0033:0x7f5c33d9e159 [ 105.688174][ T5914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.688191][ T5914] RSP: 002b:00007f5c34cfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.688220][ T5914] RAX: ffffffffffffffda RBX: 00007f5c34025fa0 RCX: 00007f5c33d9e159 [ 105.688232][ T5914] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 105.688241][ T5914] RBP: 00007f5c34cfb090 R08: 0000000000000000 R09: 0000000000000000 [ 105.688251][ T5914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.688260][ T5914] R13: 00007f5c34026038 R14: 00007f5c34025fa0 R15: 00007ffcf97f8178 [ 105.688324][ T5914] [ 106.018687][ T30] usb 3-1: USB disconnect, device number 3 [ 106.293684][ T5923] FAULT_INJECTION: forcing a failure. [ 106.293684][ T5923] name failslab, interval 1, probability 0, space 0, times 0 [ 106.293722][ T5923] CPU: 0 UID: 0 PID: 5923 Comm: syz.3.53 Not tainted syzkaller #0 PREEMPT(full) [ 106.293759][ T5923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.293774][ T5923] Call Trace: [ 106.293783][ T5923] [ 106.293793][ T5923] dump_stack_lvl+0xe8/0x150 [ 106.293834][ T5923] should_fail_ex+0x3eb/0x540 [ 106.293868][ T5923] should_failslab+0xa8/0x100 [ 106.293895][ T5923] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 106.293933][ T5923] kmem_cache_alloc_noprof+0x9c/0x600 [ 106.293970][ T5923] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 106.294003][ T5923] ? kmem_cache_alloc_noprof+0x151/0x600 [ 106.294038][ T5923] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 106.294081][ T5923] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 106.294129][ T5923] mmu_topup_memory_caches+0x21/0x170 [ 106.294170][ T5923] kvm_mmu_load+0x9d/0x21e0 [ 106.294210][ T5923] ? kvm_msr_allowed+0x9a/0x490 [ 106.294243][ T5923] ? kvm_msr_allowed+0x3f4/0x490 [ 106.294278][ T5923] ? kvm_msr_allowed+0x9a/0x490 [ 106.294314][ T5923] ? kvm_msr_allowed+0x9a/0x490 [ 106.294356][ T5923] ? kvm_apic_has_interrupt+0x740/0x770 [ 106.294399][ T5923] vcpu_run+0x4f68/0x79b0 [ 106.294433][ T5923] ? __pfx_usage_match+0x10/0x10 [ 106.294492][ T5923] ? update_se+0x90/0x1020 [ 106.294563][ T5923] ? __pfx_vcpu_run+0x10/0x10 [ 106.294597][ T5923] ? lock_acquire+0x115/0x350 [ 106.294650][ T5923] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 106.294693][ T5923] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 106.294742][ T5923] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 106.294791][ T5923] kvm_vcpu_ioctl+0xa61/0xfd0 [ 106.294838][ T5923] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 106.294876][ T5923] ? hook_file_ioctl+0x1f2/0x600 [ 106.294928][ T5923] ? __fget_files+0x2a/0x420 [ 106.294964][ T5923] ? __fget_files+0x2a/0x420 [ 106.294996][ T5923] ? __fget_files+0x3a2/0x420 [ 106.295027][ T5923] ? __fget_files+0x2a/0x420 [ 106.295063][ T5923] ? bpf_lsm_file_ioctl+0x9/0x20 [ 106.295097][ T5923] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 106.295136][ T5923] __se_sys_ioctl+0xfc/0x170 [ 106.295179][ T5923] do_syscall_64+0x166/0x520 [ 106.295204][ T5923] ? trace_irq_disable+0x3b/0x140 [ 106.295242][ T5923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.295270][ T5923] ? clear_bhb_loop+0x70/0xc0 [ 106.295302][ T5923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.295328][ T5923] RIP: 0033:0x7f5c33d9e159 [ 106.295353][ T5923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.295375][ T5923] RSP: 002b:00007f5c34cfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.295404][ T5923] RAX: ffffffffffffffda RBX: 00007f5c34025fa0 RCX: 00007f5c33d9e159 [ 106.295424][ T5923] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 106.295440][ T5923] RBP: 00007f5c33e3506b R08: 0000000000000000 R09: 0000000000000000 [ 106.295455][ T5923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.295470][ T5923] R13: 00007f5c34026038 R14: 00007f5c34025fa0 R15: 00007ffcf97f8178 [ 106.295508][ T5923] [ 106.643376][ T30] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 106.737625][ T5928] kvm [5927]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0xcd [ 106.741476][ T5928] netlink: 'syz.3.55': attribute type 5 has an invalid length. [ 106.742369][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 106.795184][ T30] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 106.797622][ T30] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 106.797652][ T30] usb 3-1: config 0 has no interface number 0 [ 106.797748][ T30] usb 3-1: config 0 interface 41 has no altsetting 0 [ 106.838984][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.839043][ T30] usb 3-1: Product: syz [ 106.839061][ T30] usb 3-1: Manufacturer: syz [ 106.839077][ T30] usb 3-1: SerialNumber: syz [ 106.871846][ T30] usb 3-1: config 0 descriptor?? [ 106.953814][ T5932] FAULT_INJECTION: forcing a failure. [ 106.953814][ T5932] name failslab, interval 1, probability 0, space 0, times 0 [ 106.953848][ T5932] CPU: 1 UID: 0 PID: 5932 Comm: syz.1.54 Not tainted syzkaller #0 PREEMPT(full) [ 106.953876][ T5932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.953889][ T5932] Call Trace: [ 106.953898][ T5932] [ 106.953908][ T5932] dump_stack_lvl+0xe8/0x150 [ 106.953943][ T5932] should_fail_ex+0x3eb/0x540 [ 106.953975][ T5932] should_failslab+0xa8/0x100 [ 106.954002][ T5932] __kmalloc_noprof+0xf9/0x710 [ 106.954036][ T5932] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 106.954059][ T5932] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 106.954091][ T5932] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 106.954123][ T5932] genl_family_rcv_msg_doit+0xda/0x340 [ 106.954168][ T5932] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 106.954208][ T5932] ? __pfx_genl_get_cmd+0x10/0x10 [ 106.954240][ T5932] ? stack_trace_save+0xa9/0x100 [ 106.954270][ T5932] ? __pfx_nbd_genl_connect+0x10/0x10 [ 106.954298][ T5932] ? __lock_acquire+0x747/0x2de0 [ 106.954342][ T5932] genl_rcv_msg+0x614/0x7a0 [ 106.954383][ T5932] ? __pfx_genl_rcv_msg+0x10/0x10 [ 106.954417][ T5932] ? __pfx_nbd_genl_connect+0x10/0x10 [ 106.954458][ T5932] netlink_rcv_skb+0x226/0x4a0 [ 106.954489][ T5932] ? __pfx_genl_rcv_msg+0x10/0x10 [ 106.954524][ T5932] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 106.954570][ T5932] ? down_read+0x2b9/0x320 [ 106.954600][ T5932] genl_rcv+0x28/0x40 [ 106.954631][ T5932] netlink_unicast+0x7bd/0x940 [ 106.954668][ T5932] netlink_sendmsg+0x7c3/0xae0 [ 106.954703][ T5932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.954751][ T5932] ? apparmor_socket_sendmsg+0x98/0x360 [ 106.954778][ T5932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.954805][ T5932] sock_sendmsg_nosec+0x13a/0x180 [ 106.954838][ T5932] ____sys_sendmsg+0x54e/0x850 [ 106.954868][ T5932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.954903][ T5932] ? import_iovec+0x73/0xa0 [ 106.954936][ T5932] ___sys_sendmsg+0x2a5/0x360 [ 106.954960][ T5932] ? __lock_acquire+0x747/0x2de0 [ 106.954997][ T5932] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.955059][ T5932] ? __fget_files+0x2a/0x420 [ 106.955087][ T5932] ? __fget_files+0x3a2/0x420 [ 106.955126][ T5932] __x64_sys_sendmsg+0x1b1/0x290 [ 106.955154][ T5932] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 106.955202][ T5932] do_syscall_64+0x166/0x520 [ 106.955223][ T5932] ? trace_irq_disable+0x3b/0x140 [ 106.955255][ T5932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.955279][ T5932] ? clear_bhb_loop+0x70/0xc0 [ 106.955308][ T5932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.955330][ T5932] RIP: 0033:0x7f7cc8d9e159 [ 106.955350][ T5932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.955368][ T5932] RSP: 002b:00007f7cc9d21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.955392][ T5932] RAX: ffffffffffffffda RBX: 00007f7cc9026090 RCX: 00007f7cc8d9e159 [ 106.955409][ T5932] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 106.955423][ T5932] RBP: 00007f7cc9d21090 R08: 0000000000000000 R09: 0000000000000000 [ 106.955437][ T5932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.955450][ T5932] R13: 00007f7cc9026128 R14: 00007f7cc9026090 R15: 00007ffe9b0da738 [ 106.955486][ T5932] [ 107.556963][ T5936] UDC core: g1: couldn't find an available UDC or it's busy [ 107.734353][ T4982] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 107.734386][ T4982] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 107.734399][ T4982] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 107.734466][ T4982] loop0: [ 107.795417][ T5945] FAULT_INJECTION: forcing a failure. [ 107.795417][ T5945] name failslab, interval 1, probability 0, space 0, times 0 [ 107.795455][ T5945] CPU: 0 UID: 0 PID: 5945 Comm: syz.3.61 Not tainted syzkaller #0 PREEMPT(full) [ 107.795481][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.795495][ T5945] Call Trace: [ 107.795504][ T5945] [ 107.795519][ T5945] dump_stack_lvl+0xe8/0x150 [ 107.795557][ T5945] should_fail_ex+0x3eb/0x540 [ 107.795590][ T5945] should_failslab+0xa8/0x100 [ 107.795618][ T5945] __kmalloc_noprof+0xf9/0x710 [ 107.795659][ T5945] ? io_cache_alloc_new+0x40/0x100 [ 107.795693][ T5945] ? io_cache_alloc_new+0x40/0x100 [ 107.795737][ T5945] io_cache_alloc_new+0x40/0x100 [ 107.795773][ T5945] __io_prep_rw+0x281/0xe70 [ 107.795801][ T5945] ? kasan_quarantine_put+0xbb/0x1f0 [ 107.795840][ T5945] ? __pfx___io_prep_rw+0x10/0x10 [ 107.795871][ T5945] ? __mutex_trylock_common+0x15f/0x270 [ 107.795908][ T5945] io_prep_rwv+0x81/0x390 [ 107.795938][ T5945] ? __pfx_io_prep_rwv+0x10/0x10 [ 107.795960][ T5945] ? trace_contention_end+0x3d/0x140 [ 107.795996][ T5945] io_submit_sqes+0xbde/0x2310 [ 107.796051][ T5945] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 107.796074][ T5945] ? sched_clock+0x41/0x60 [ 107.796113][ T5945] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 107.796143][ T5945] ? irqentry_exit+0x218/0x910 [ 107.796186][ T5945] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 107.796220][ T5945] ? rcu_is_watching+0x16/0xb0 [ 107.796251][ T5945] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 107.796278][ T5945] do_syscall_64+0x166/0x520 [ 107.796300][ T5945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.796324][ T5945] ? clear_bhb_loop+0x70/0xc0 [ 107.796352][ T5945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.796375][ T5945] RIP: 0033:0x7f5c33d9e159 [ 107.796397][ T5945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.796416][ T5945] RSP: 002b:00007f5c34cfaf38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 107.796442][ T5945] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007f5c33d9e159 [ 107.796459][ T5945] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 107.796472][ T5945] RBP: 0000000000000039 R08: 0000000000000000 R09: 0000000000000008 [ 107.796486][ T5945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000780 [ 107.796500][ T5945] R13: 0000200000000788 R14: 0000000000000e26 R15: 0000000000000000 [ 107.796534][ T5945] [ 108.068234][ T10] usb 1-1: USB disconnect, device number 3 [ 108.303457][ T30] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 108.303490][ T30] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 108.303730][ T30] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 108.310817][ T30] usb 3-1: USB disconnect, device number 4 [ 108.513470][ T1650] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 108.660384][ T31] audit: type=1400 audit(1789842002.188:2): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5959 comm="syz.3.66" [ 108.665205][ T1650] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 108.665319][ T1650] usb 2-1: too many configurations: 121, using maximum allowed: 8 [ 108.669467][ T1650] usb 2-1: config index 0 descriptor too short (expected 42049, got 36) [ 108.669543][ T1650] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 109 [ 108.669630][ T1650] usb 2-1: can't read configurations, error -22 [ 108.794274][ T1650] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 108.811037][ T5962] FAULT_INJECTION: forcing a failure. [ 108.811037][ T5962] name failslab, interval 1, probability 0, space 0, times 0 [ 108.811141][ T5962] CPU: 0 UID: 0 PID: 5962 Comm: syz.0.67 Not tainted syzkaller #0 PREEMPT(full) [ 108.811196][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.811230][ T5962] Call Trace: [ 108.811252][ T5962] [ 108.811275][ T5962] dump_stack_lvl+0xe8/0x150 [ 108.811381][ T5962] should_fail_ex+0x3eb/0x540 [ 108.811462][ T5962] should_failslab+0xa8/0x100 [ 108.811513][ T5962] __kmalloc_cache_noprof+0x9e/0x600 [ 108.811545][ T5962] ? rcu_is_watching+0x16/0xb0 [ 108.811566][ T5962] ? vhost_task_create+0x123/0x380 [ 108.811596][ T5962] ? vhost_task_create+0x123/0x380 [ 108.811635][ T5962] vhost_task_create+0x123/0x380 [ 108.811746][ T5962] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 108.811803][ T5962] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 108.811873][ T5962] ? __pfx_vhost_task_create+0x10/0x10 [ 108.811948][ T5962] ? register_lock_class+0x31/0x2e0 [ 108.812062][ T5962] ? __pfx_vhost_task_fn+0x10/0x10 [ 108.812174][ T5962] ? kasan_quarantine_put+0xbb/0x1f0 [ 108.812283][ T5962] kvm_mmu_post_init_vm+0x147/0x2b0 [ 108.812352][ T5962] kvm_arch_vcpu_ioctl_run+0x7c/0x19c0 [ 108.812458][ T5962] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 108.812566][ T5962] kvm_vcpu_ioctl+0xa61/0xfd0 [ 108.812687][ T5962] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 108.812772][ T5962] ? hook_file_ioctl+0x1f2/0x600 [ 108.812892][ T5962] ? __fget_files+0x2a/0x420 [ 108.812977][ T5962] ? __fget_files+0x2a/0x420 [ 108.813042][ T5962] ? __fget_files+0x3a2/0x420 [ 108.813123][ T5962] ? __fget_files+0x2a/0x420 [ 108.813258][ T5962] ? bpf_lsm_file_ioctl+0x9/0x20 [ 108.813345][ T5962] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 108.813430][ T5962] __se_sys_ioctl+0xfc/0x170 [ 108.813534][ T5962] do_syscall_64+0x166/0x520 [ 108.813590][ T5962] ? trace_irq_disable+0x3b/0x140 [ 108.813685][ T5962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.813749][ T5962] ? clear_bhb_loop+0x70/0xc0 [ 108.813823][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.813879][ T5962] RIP: 0033:0x7f3ddcb9e159 [ 108.813940][ T5962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.813985][ T5962] RSP: 002b:00007f3ddd9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.814050][ T5962] RAX: ffffffffffffffda RBX: 00007f3ddce25fa0 RCX: 00007f3ddcb9e159 [ 108.814093][ T5962] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 108.814133][ T5962] RBP: 00007f3ddd9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 108.814161][ T5962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.814194][ T5962] R13: 00007f3ddce26038 R14: 00007f3ddce25fa0 R15: 00007fffb11eb258 [ 108.814283][ T5962] [ 108.955086][ T1650] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 108.955239][ T1650] usb 2-1: too many configurations: 121, using maximum allowed: 8 [ 109.036901][ T1650] usb 2-1: config index 0 descriptor too short (expected 42049, got 36) [ 109.037000][ T1650] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 109 [ 109.037092][ T1650] usb 2-1: can't read configurations, error -22 [ 109.085544][ T1650] usb usb2-port1: attempt power cycle [ 109.478788][ T1650] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 109.499533][ T1650] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 109.499585][ T1650] usb 2-1: too many configurations: 121, using maximum allowed: 8 [ 109.500628][ T1650] usb 2-1: config index 0 descriptor too short (expected 42049, got 36) [ 109.500656][ T1650] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 109 [ 109.500689][ T1650] usb 2-1: can't read configurations, error -22 [ 109.625573][ T1650] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 109.645334][ T1650] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 109.645380][ T1650] usb 2-1: too many configurations: 121, using maximum allowed: 8 [ 109.647495][ T1650] usb 2-1: config index 0 descriptor too short (expected 42049, got 36) [ 109.647523][ T1650] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 109 [ 109.647555][ T1650] usb 2-1: can't read configurations, error -22 [ 109.648067][ T1650] usb usb2-port1: unable to enumerate USB device [ 109.784506][ T31] audit: type=1326 audit(1789842003.308:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.0.74" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ddcb9e159 code=0x0 [ 109.888751][ T5983] FAULT_INJECTION: forcing a failure. [ 109.888751][ T5983] name failslab, interval 1, probability 0, space 0, times 0 [ 109.888781][ T5983] CPU: 1 UID: 0 PID: 5983 Comm: syz.2.73 Not tainted syzkaller #0 PREEMPT(full) [ 109.888802][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.888815][ T5983] Call Trace: [ 109.888823][ T5983] [ 109.888832][ T5983] dump_stack_lvl+0xe8/0x150 [ 109.888867][ T5983] should_fail_ex+0x3eb/0x540 [ 109.888896][ T5983] should_failslab+0xa8/0x100 [ 109.888921][ T5983] __kmalloc_noprof+0xf9/0x710 [ 109.888953][ T5983] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 109.888976][ T5983] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 109.889006][ T5983] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 109.889034][ T5983] genl_family_rcv_msg_doit+0xda/0x340 [ 109.889076][ T5983] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 109.889116][ T5983] ? __pfx_genl_get_cmd+0x10/0x10 [ 109.889153][ T5983] ? stack_trace_save+0xa9/0x100 [ 109.889184][ T5983] ? __pfx_nbd_genl_connect+0x10/0x10 [ 109.889215][ T5983] ? __lock_acquire+0x747/0x2de0 [ 109.889255][ T5983] genl_rcv_msg+0x614/0x7a0 [ 109.889300][ T5983] ? __pfx_genl_rcv_msg+0x10/0x10 [ 109.889333][ T5983] ? __pfx_nbd_genl_connect+0x10/0x10 [ 109.889370][ T5983] netlink_rcv_skb+0x226/0x4a0 [ 109.889399][ T5983] ? __pfx_genl_rcv_msg+0x10/0x10 [ 109.889436][ T5983] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 109.889479][ T5983] ? down_read+0x2b9/0x320 [ 109.889504][ T5983] genl_rcv+0x28/0x40 [ 109.889533][ T5983] netlink_unicast+0x7bd/0x940 [ 109.889570][ T5983] netlink_sendmsg+0x7c3/0xae0 [ 109.889605][ T5983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.889641][ T5983] ? apparmor_socket_sendmsg+0x98/0x360 [ 109.889668][ T5983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.889707][ T5983] sock_sendmsg_nosec+0x13a/0x180 [ 109.889743][ T5983] ____sys_sendmsg+0x54e/0x850 [ 109.889775][ T5983] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.889811][ T5983] ? import_iovec+0x73/0xa0 [ 109.889844][ T5983] ___sys_sendmsg+0x2a5/0x360 [ 109.889868][ T5983] ? __lock_acquire+0x747/0x2de0 [ 109.889913][ T5983] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.889982][ T5983] ? __fget_files+0x2a/0x420 [ 109.890010][ T5983] ? __fget_files+0x3a2/0x420 [ 109.890050][ T5983] __x64_sys_sendmsg+0x1b1/0x290 [ 109.890079][ T5983] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 109.890128][ T5983] do_syscall_64+0x166/0x520 [ 109.890149][ T5983] ? trace_irq_disable+0x3b/0x140 [ 109.890193][ T5983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.890223][ T5983] ? clear_bhb_loop+0x70/0xc0 [ 109.890256][ T5983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.890279][ T5983] RIP: 0033:0x7f001e79e159 [ 109.890300][ T5983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.890318][ T5983] RSP: 002b:00007f001f62e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.890343][ T5983] RAX: ffffffffffffffda RBX: 00007f001ea26090 RCX: 00007f001e79e159 [ 109.890359][ T5983] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 109.890373][ T5983] RBP: 00007f001f62e090 R08: 0000000000000000 R09: 0000000000000000 [ 109.890387][ T5983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.890400][ T5983] R13: 00007f001ea26128 R14: 00007f001ea26090 R15: 00007ffef5e3b018 [ 109.890435][ T5983] [ 109.961300][ T1650] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.155453][ T5984] block nbd0: Unsupported socket: should be TCP or UNIX. [ 110.220656][ T1650] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 110.232531][ T1650] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.485022][ T1650] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 110.993350][ T30] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 111.144122][ T30] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 111.145176][ T30] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 111.145203][ T30] usb 1-1: config 0 has no interface number 0 [ 111.145272][ T30] usb 1-1: config 0 interface 41 has no altsetting 0 [ 111.147497][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.147522][ T30] usb 1-1: Product: syz [ 111.147537][ T30] usb 1-1: Manufacturer: syz [ 111.147576][ T30] usb 1-1: SerialNumber: syz [ 111.150467][ T30] usb 1-1: config 0 descriptor?? [ 111.328861][ T5997] loop0: detected capacity change from 0 to 2049 [ 111.359046][ T5999] openvswitch: netlink: Key type 116 is out of range max 32 [ 111.361846][ T5997] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 111.361873][ T5997] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 111.361887][ T5997] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 111.361945][ T5997] loop0: [ 111.709556][ T6006] UDC core: g1: couldn't find an available UDC or it's busy [ 111.756172][ T6009] FAULT_INJECTION: forcing a failure. [ 111.756172][ T6009] name failslab, interval 1, probability 0, space 0, times 0 [ 111.756238][ T6009] CPU: 1 UID: 0 PID: 6009 Comm: syz.1.83 Not tainted syzkaller #0 PREEMPT(full) [ 111.756264][ T6009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.756279][ T6009] Call Trace: [ 111.756287][ T6009] [ 111.756297][ T6009] dump_stack_lvl+0xe8/0x150 [ 111.756333][ T6009] should_fail_ex+0x3eb/0x540 [ 111.756368][ T6009] should_failslab+0xa8/0x100 [ 111.756396][ T6009] __kmalloc_noprof+0xf9/0x710 [ 111.756437][ T6009] ? io_cache_alloc_new+0x40/0x100 [ 111.756471][ T6009] ? io_cache_alloc_new+0x40/0x100 [ 111.756512][ T6009] io_cache_alloc_new+0x40/0x100 [ 111.756548][ T6009] __io_prep_rw+0x281/0xe70 [ 111.756576][ T6009] ? kasan_quarantine_put+0xbb/0x1f0 [ 111.756613][ T6009] ? __pfx___io_prep_rw+0x10/0x10 [ 111.756644][ T6009] ? __mutex_trylock_common+0x15f/0x270 [ 111.756674][ T6009] io_prep_rwv+0x81/0x390 [ 111.756699][ T6009] ? __pfx_io_prep_rwv+0x10/0x10 [ 111.756721][ T6009] ? trace_contention_end+0x3d/0x140 [ 111.756756][ T6009] io_submit_sqes+0xbde/0x2310 [ 111.756812][ T6009] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 111.756849][ T6009] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 111.756889][ T6009] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 111.756923][ T6009] ? rcu_is_watching+0x16/0xb0 [ 111.756954][ T6009] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 111.756981][ T6009] do_syscall_64+0x166/0x520 [ 111.757004][ T6009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.757028][ T6009] ? clear_bhb_loop+0x70/0xc0 [ 111.757057][ T6009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.757080][ T6009] RIP: 0033:0x7f7cc8d9e159 [ 111.757101][ T6009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.757120][ T6009] RSP: 002b:00007f7cc9d41f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 111.757145][ T6009] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007f7cc8d9e159 [ 111.757162][ T6009] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 111.757176][ T6009] RBP: 0000000000000082 R08: 0000000000000000 R09: 0000000000000008 [ 111.757189][ T6009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000780 [ 111.757204][ T6009] R13: 0000200000000788 R14: 0000000000000e26 R15: 0000000000000000 [ 111.757238][ T6009] [ 112.162703][ T6014] evm: overlay not supported [ 112.422823][ T6016] netlink: 'syz.2.85': attribute type 1 has an invalid length. [ 112.458148][ T30] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 112.458210][ T30] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 112.458489][ T30] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 112.501622][ T30] usb 1-1: USB disconnect, device number 4 [ 112.619795][ T6019] FAULT_INJECTION: forcing a failure. [ 112.619795][ T6019] name failslab, interval 1, probability 0, space 0, times 0 [ 112.619826][ T6019] CPU: 0 UID: 0 PID: 6019 Comm: syz.1.86 Not tainted syzkaller #0 PREEMPT(full) [ 112.619851][ T6019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.619864][ T6019] Call Trace: [ 112.619872][ T6019] [ 112.619883][ T6019] dump_stack_lvl+0xe8/0x150 [ 112.619918][ T6019] should_fail_ex+0x3eb/0x540 [ 112.619946][ T6019] ? alloc_slab_obj_exts+0x5c/0x180 [ 112.619976][ T6019] should_failslab+0xa8/0x100 [ 112.620000][ T6019] ? alloc_slab_obj_exts+0x5c/0x180 [ 112.620028][ T6019] __kmalloc_flags_noprof+0x123/0x790 [ 112.620065][ T6019] ? alloc_slab_obj_exts+0x5c/0x180 [ 112.620102][ T6019] alloc_slab_obj_exts+0x5c/0x180 [ 112.620133][ T6019] __memcg_slab_post_alloc_hook+0x60b/0xd90 [ 112.620189][ T6019] ? dup_task_struct+0x52/0xa00 [ 112.620219][ T6019] kmem_cache_alloc_node_noprof+0x401/0x600 [ 112.620252][ T6019] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 112.620283][ T6019] ? dup_task_struct+0x52/0xa00 [ 112.620306][ T6019] ? dup_task_struct+0x52/0xa00 [ 112.620339][ T6019] dup_task_struct+0x52/0xa00 [ 112.620365][ T6019] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.620402][ T6019] copy_process+0x81b/0x43e0 [ 112.620465][ T6019] ? rcu_is_watching+0x16/0xb0 [ 112.620493][ T6019] ? __pfx_copy_process+0x10/0x10 [ 112.620526][ T6019] ? mutex_init_lockdep+0xdf/0x110 [ 112.620555][ T6019] vhost_task_create+0x1f9/0x380 [ 112.620589][ T6019] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 112.620614][ T6019] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 112.620640][ T6019] ? __pfx_vhost_task_create+0x10/0x10 [ 112.620671][ T6019] ? register_lock_class+0x31/0x2e0 [ 112.620711][ T6019] ? __pfx_vhost_task_fn+0x10/0x10 [ 112.620754][ T6019] ? kasan_quarantine_put+0xbb/0x1f0 [ 112.620796][ T6019] kvm_mmu_post_init_vm+0x147/0x2b0 [ 112.620825][ T6019] kvm_arch_vcpu_ioctl_run+0x7c/0x19c0 [ 112.620874][ T6019] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 112.620916][ T6019] kvm_vcpu_ioctl+0xa61/0xfd0 [ 112.620957][ T6019] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 112.620988][ T6019] ? hook_file_ioctl+0x1f2/0x600 [ 112.621033][ T6019] ? __fget_files+0x2a/0x420 [ 112.621079][ T6019] ? __fget_files+0x2a/0x420 [ 112.621107][ T6019] ? __fget_files+0x3a2/0x420 [ 112.621137][ T6019] ? __fget_files+0x2a/0x420 [ 112.621168][ T6019] ? bpf_lsm_file_ioctl+0x9/0x20 [ 112.621202][ T6019] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 112.621242][ T6019] __se_sys_ioctl+0xfc/0x170 [ 112.621285][ T6019] do_syscall_64+0x166/0x520 [ 112.621313][ T6019] ? trace_irq_disable+0x3b/0x140 [ 112.621356][ T6019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.621380][ T6019] ? clear_bhb_loop+0x70/0xc0 [ 112.621408][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.621439][ T6019] RIP: 0033:0x7f7cc8d9e159 [ 112.621460][ T6019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.621479][ T6019] RSP: 002b:00007f7cc9d42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.621504][ T6019] RAX: ffffffffffffffda RBX: 00007f7cc9025fa0 RCX: 00007f7cc8d9e159 [ 112.621525][ T6019] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 112.621538][ T6019] RBP: 00007f7cc9d42090 R08: 0000000000000000 R09: 0000000000000000 [ 112.621552][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.621565][ T6019] R13: 00007f7cc9026038 R14: 00007f7cc9025fa0 R15: 00007ffe9b0da738 [ 112.621600][ T6019] [ 112.705005][ T1650] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.943842][ T1650] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 112.948647][ T1650] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1 [ 112.948702][ T1650] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.031255][ T6016] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.046872][ T1650] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 113.098923][ T1650] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 113.413416][ T1650] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 113.425494][ T6016] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 113.428137][ T6016] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 113.442048][ T6016] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 113.564242][ T1650] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 113.566629][ T1650] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 113.566659][ T1650] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 113.569456][ T1650] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.569486][ T1650] usb 2-1: Product: syz [ 113.569533][ T1650] usb 2-1: Manufacturer: syz [ 113.569550][ T1650] usb 2-1: SerialNumber: syz [ 113.585861][ T1650] usb 2-1: config 0 descriptor?? [ 113.632750][ T6015] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 113.646973][ T10] usb 3-1: USB disconnect, device number 5 [ 113.652468][ T1650] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 113.687656][ T6028] FAULT_INJECTION: forcing a failure. [ 113.687656][ T6028] name failslab, interval 1, probability 0, space 0, times 0 [ 113.687717][ T6028] CPU: 1 UID: 0 PID: 6028 Comm: syz.0.89 Not tainted syzkaller #0 PREEMPT(full) [ 113.687743][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.687757][ T6028] Call Trace: [ 113.687766][ T6028] [ 113.687776][ T6028] dump_stack_lvl+0xe8/0x150 [ 113.687811][ T6028] should_fail_ex+0x3eb/0x540 [ 113.687846][ T6028] should_failslab+0xa8/0x100 [ 113.687875][ T6028] __kmalloc_cache_noprof+0x9e/0x600 [ 113.687917][ T6028] ? nbd_alloc_and_init_config+0x87/0x250 [ 113.687943][ T6028] ? nbd_alloc_and_init_config+0x87/0x250 [ 113.687978][ T6028] nbd_alloc_and_init_config+0x87/0x250 [ 113.688008][ T6028] nbd_genl_connect+0xa17/0x1cd0 [ 113.688045][ T6028] ? __pfx_nbd_genl_connect+0x10/0x10 [ 113.688074][ T6028] ? rcu_is_watching+0x16/0xb0 [ 113.688098][ T6028] ? trace_kmalloc+0x2a/0xf0 [ 113.688133][ T6028] ? __kmalloc_noprof+0x387/0x710 [ 113.688169][ T6028] ? __nla_parse+0x40/0x60 [ 113.688203][ T6028] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 113.688236][ T6028] genl_family_rcv_msg_doit+0x233/0x340 [ 113.688280][ T6028] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 113.688328][ T6028] ? __lock_acquire+0x747/0x2de0 [ 113.688379][ T6028] genl_rcv_msg+0x614/0x7a0 [ 113.688421][ T6028] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.688456][ T6028] ? __pfx_nbd_genl_connect+0x10/0x10 [ 113.688498][ T6028] netlink_rcv_skb+0x226/0x4a0 [ 113.688528][ T6028] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.688566][ T6028] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 113.688612][ T6028] ? down_read+0x2b9/0x320 [ 113.688642][ T6028] genl_rcv+0x28/0x40 [ 113.688674][ T6028] netlink_unicast+0x7bd/0x940 [ 113.688711][ T6028] netlink_sendmsg+0x7c3/0xae0 [ 113.688747][ T6028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.688786][ T6028] ? apparmor_socket_sendmsg+0x98/0x360 [ 113.688811][ T6028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.688838][ T6028] sock_sendmsg_nosec+0x13a/0x180 [ 113.688873][ T6028] ____sys_sendmsg+0x54e/0x850 [ 113.688899][ T6028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.688937][ T6028] ? import_iovec+0x73/0xa0 [ 113.688964][ T6028] ___sys_sendmsg+0x2a5/0x360 [ 113.688983][ T6028] ? __lock_acquire+0x747/0x2de0 [ 113.689019][ T6028] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.689069][ T6028] ? __fget_files+0x2a/0x420 [ 113.689092][ T6028] ? __fget_files+0x3a2/0x420 [ 113.689123][ T6028] __x64_sys_sendmsg+0x1b1/0x290 [ 113.689152][ T6028] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 113.689196][ T6028] do_syscall_64+0x166/0x520 [ 113.689214][ T6028] ? trace_irq_disable+0x3b/0x140 [ 113.689240][ T6028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.689260][ T6028] ? clear_bhb_loop+0x70/0xc0 [ 113.689284][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.689303][ T6028] RIP: 0033:0x7f3ddcb9e159 [ 113.689321][ T6028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.689337][ T6028] RSP: 002b:00007f3ddd9d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.689358][ T6028] RAX: ffffffffffffffda RBX: 00007f3ddce26090 RCX: 00007f3ddcb9e159 [ 113.689382][ T6028] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 113.689394][ T6028] RBP: 00007f3ddd9d6090 R08: 0000000000000000 R09: 0000000000000000 [ 113.689406][ T6028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.689417][ T6028] R13: 00007f3ddce26128 R14: 00007f3ddce26090 R15: 00007fffb11eb258 [ 113.689454][ T6028] [ 113.689516][ T6028] nbd: couldn't allocate config [ 113.828477][ T10] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 113.945548][ T10] spcp8x5 3-1:1.0: device disconnected [ 114.911453][ T1650] gspca_sunplus: reg_r err -71 [ 114.911542][ T1650] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 114.929060][ T1650] usb 2-1: USB disconnect, device number 9 [ 114.933306][ T987] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 115.094539][ T987] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 7.03 [ 115.095441][ T987] usb 1-1: Dual-Role OTG device on HNP port [ 115.095770][ T987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.200146][ T6050] loop0: detected capacity change from 0 to 2049 [ 115.267953][ T6050] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 115.267982][ T6050] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 115.267996][ T6050] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 115.268051][ T6050] loop0: [ 115.404238][ T1650] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 115.554313][ T1650] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 115.555472][ T1650] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 115.555498][ T1650] usb 3-1: config 0 has no interface number 0 [ 115.555543][ T1650] usb 3-1: config 0 interface 41 has no altsetting 0 [ 115.558309][ T1650] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.558336][ T1650] usb 3-1: Product: syz [ 115.558353][ T1650] usb 3-1: Manufacturer: syz [ 115.558369][ T1650] usb 3-1: SerialNumber: syz [ 115.594075][ T1650] usb 3-1: config 0 descriptor?? [ 115.795788][ T6059] FAULT_INJECTION: forcing a failure. [ 115.795788][ T6059] name failslab, interval 1, probability 0, space 0, times 0 [ 115.795825][ T6059] CPU: 1 UID: 0 PID: 6059 Comm: syz.1.100 Not tainted syzkaller #0 PREEMPT(full) [ 115.795849][ T6059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.795863][ T6059] Call Trace: [ 115.795873][ T6059] [ 115.795882][ T6059] dump_stack_lvl+0xe8/0x150 [ 115.795919][ T6059] should_fail_ex+0x3eb/0x540 [ 115.795950][ T6059] should_failslab+0xa8/0x100 [ 115.795977][ T6059] __kmalloc_noprof+0xf9/0x710 [ 115.796016][ T6059] ? io_cache_alloc_new+0x40/0x100 [ 115.796051][ T6059] ? io_cache_alloc_new+0x40/0x100 [ 115.796093][ T6059] io_cache_alloc_new+0x40/0x100 [ 115.796128][ T6059] __io_prep_rw+0x281/0xe70 [ 115.796155][ T6059] ? kasan_quarantine_put+0xbb/0x1f0 [ 115.796194][ T6059] ? __pfx___io_prep_rw+0x10/0x10 [ 115.796224][ T6059] ? __mutex_trylock_common+0x15f/0x270 [ 115.796254][ T6059] io_prep_rwv+0x81/0x390 [ 115.796278][ T6059] ? __pfx_io_prep_rwv+0x10/0x10 [ 115.796301][ T6059] ? trace_contention_end+0x3d/0x140 [ 115.796335][ T6059] io_submit_sqes+0xbde/0x2310 [ 115.796388][ T6059] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 115.796424][ T6059] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 115.796452][ T6059] ? irqentry_exit+0x218/0x910 [ 115.796490][ T6059] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 115.796521][ T6059] ? rcu_is_watching+0x16/0xb0 [ 115.796552][ T6059] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 115.796579][ T6059] do_syscall_64+0x166/0x520 [ 115.796600][ T6059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.796626][ T6059] ? clear_bhb_loop+0x70/0xc0 [ 115.796663][ T6059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.796686][ T6059] RIP: 0033:0x7f7cc8d9e159 [ 115.796707][ T6059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.796726][ T6059] RSP: 002b:00007f7cc9d41f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 115.796751][ T6059] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007f7cc8d9e159 [ 115.796768][ T6059] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 115.796783][ T6059] RBP: 000000000000005f R08: 0000000000000000 R09: 0000000000000008 [ 115.796797][ T6059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000780 [ 115.796810][ T6059] R13: 0000200000000788 R14: 0000000000000e26 R15: 0000000000000000 [ 115.796840][ T6059] [ 116.069537][ T5722] usb 4-1: USB disconnect, device number 6 [ 116.344746][ T6065] FAULT_INJECTION: forcing a failure. [ 116.344746][ T6065] name failslab, interval 1, probability 0, space 0, times 0 [ 116.344791][ T6065] CPU: 0 UID: 0 PID: 6065 Comm: syz.0.102 Not tainted syzkaller #0 PREEMPT(full) [ 116.344821][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.344836][ T6065] Call Trace: [ 116.344845][ T6065] [ 116.344855][ T6065] dump_stack_lvl+0xe8/0x150 [ 116.344894][ T6065] should_fail_ex+0x3eb/0x540 [ 116.344924][ T6065] ? alloc_vmap_area+0x217/0x1410 [ 116.344954][ T6065] should_failslab+0xa8/0x100 [ 116.344981][ T6065] ? alloc_vmap_area+0x217/0x1410 [ 116.345017][ T6065] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 116.345054][ T6065] ? alloc_vmap_area+0x217/0x1410 [ 116.345090][ T6065] alloc_vmap_area+0x217/0x1410 [ 116.345136][ T6065] ? __pfx_alloc_vmap_area+0x10/0x10 [ 116.345163][ T6065] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 116.345199][ T6065] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 116.345232][ T6065] ? __get_vm_area_node+0x155/0x2f0 [ 116.345267][ T6065] __get_vm_area_node+0x200/0x2f0 [ 116.345305][ T6065] __vmalloc_node_range_noprof+0x340/0x1690 [ 116.345338][ T6065] ? copy_process+0x81b/0x43e0 [ 116.345400][ T6065] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 116.345432][ T6065] ? dup_task_struct+0x52/0xa00 [ 116.345456][ T6065] ? trace_kmem_cache_alloc+0x29/0xe0 [ 116.345488][ T6065] ? memcpy_and_pad+0x48/0x80 [ 116.345527][ T6065] __vmalloc_node_noprof+0xc2/0x100 [ 116.345558][ T6065] ? copy_process+0x81b/0x43e0 [ 116.345582][ T6065] ? copy_process+0x81b/0x43e0 [ 116.345610][ T6065] dup_task_struct+0x2c6/0xa00 [ 116.345650][ T6065] copy_process+0x81b/0x43e0 [ 116.345704][ T6065] ? rcu_is_watching+0x16/0xb0 [ 116.345732][ T6065] ? __pfx_copy_process+0x10/0x10 [ 116.345767][ T6065] ? mutex_init_lockdep+0xdf/0x110 [ 116.345796][ T6065] vhost_task_create+0x1f9/0x380 [ 116.345830][ T6065] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 116.345855][ T6065] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 116.345882][ T6065] ? __pfx_vhost_task_create+0x10/0x10 [ 116.345925][ T6065] ? __pfx_vhost_task_fn+0x10/0x10 [ 116.345966][ T6065] ? irqentry_exit+0x218/0x910 [ 116.346010][ T6065] ? lockdep_hardirqs_on+0x7b/0x110 [ 116.346045][ T6065] ? irqentry_exit+0x218/0x910 [ 116.346079][ T6065] ? trace_irq_disable+0x3b/0x140 [ 116.346118][ T6065] kvm_mmu_post_init_vm+0x147/0x2b0 [ 116.346149][ T6065] kvm_arch_vcpu_ioctl_run+0x7c/0x19c0 [ 116.346192][ T6065] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 116.346233][ T6065] kvm_vcpu_ioctl+0xa61/0xfd0 [ 116.346276][ T6065] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 116.346309][ T6065] ? hook_file_ioctl+0x1f2/0x600 [ 116.346357][ T6065] ? __fget_files+0x2a/0x420 [ 116.346397][ T6065] ? __fget_files+0x2a/0x420 [ 116.346430][ T6065] ? __fget_files+0x3a2/0x420 [ 116.346458][ T6065] ? __fget_files+0x2a/0x420 [ 116.346490][ T6065] ? bpf_lsm_file_ioctl+0x9/0x20 [ 116.346519][ T6065] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 116.346555][ T6065] __se_sys_ioctl+0xfc/0x170 [ 116.346600][ T6065] do_syscall_64+0x166/0x520 [ 116.346621][ T6065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.346646][ T6065] ? clear_bhb_loop+0x70/0xc0 [ 116.346674][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.346698][ T6065] RIP: 0033:0x7f3ddcb9e159 [ 116.346720][ T6065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.346738][ T6065] RSP: 002b:00007f3ddd9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.346764][ T6065] RAX: ffffffffffffffda RBX: 00007f3ddce25fa0 RCX: 00007f3ddcb9e159 [ 116.346780][ T6065] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 116.346794][ T6065] RBP: 00007f3ddd9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 116.346814][ T6065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.346828][ T6065] R13: 00007f3ddce26038 R14: 00007f3ddce25fa0 R15: 00007fffb11eb258 [ 116.346870][ T6065] [ 116.347224][ T6065] syz.0.102: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 116.347442][ T6065] CPU: 0 UID: 0 PID: 6065 Comm: syz.0.102 Not tainted syzkaller #0 PREEMPT(full) [ 116.347467][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.347480][ T6065] Call Trace: [ 116.347489][ T6065] [ 116.347498][ T6065] dump_stack_lvl+0xe8/0x150 [ 116.347531][ T6065] warn_alloc+0x24d/0x270 [ 116.347570][ T6065] ? lockdep_hardirqs_on+0x7b/0x110 [ 116.347609][ T6065] ? __pfx_warn_alloc+0x10/0x10 [ 116.347641][ T6065] ? kfree+0x1c5/0x650 [ 116.347683][ T6065] ? __get_vm_area_node+0x219/0x2f0 [ 116.347729][ T6065] __vmalloc_node_range_noprof+0x368/0x1690 [ 116.347805][ T6065] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 116.347838][ T6065] ? dup_task_struct+0x52/0xa00 [ 116.347863][ T6065] ? trace_kmem_cache_alloc+0x29/0xe0 [ 116.347895][ T6065] ? memcpy_and_pad+0x48/0x80 [ 116.347935][ T6065] __vmalloc_node_noprof+0xc2/0x100 [ 116.347967][ T6065] ? copy_process+0x81b/0x43e0 [ 116.347990][ T6065] ? copy_process+0x81b/0x43e0 [ 116.348030][ T6065] dup_task_struct+0x2c6/0xa00 [ 116.348065][ T6065] copy_process+0x81b/0x43e0 [ 116.348118][ T6065] ? rcu_is_watching+0x16/0xb0 [ 116.348147][ T6065] ? __pfx_copy_process+0x10/0x10 [ 116.348181][ T6065] ? mutex_init_lockdep+0xdf/0x110 [ 116.348209][ T6065] vhost_task_create+0x1f9/0x380 [ 116.348244][ T6065] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 116.348268][ T6065] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 116.348293][ T6065] ? __pfx_vhost_task_create+0x10/0x10 [ 116.348337][ T6065] ? __pfx_vhost_task_fn+0x10/0x10 [ 116.348378][ T6065] ? irqentry_exit+0x218/0x910 [ 116.348413][ T6065] ? lockdep_hardirqs_on+0x7b/0x110 [ 116.348448][ T6065] ? irqentry_exit+0x218/0x910 [ 116.348481][ T6065] ? trace_irq_disable+0x3b/0x140 [ 116.348521][ T6065] kvm_mmu_post_init_vm+0x147/0x2b0 [ 116.348550][ T6065] kvm_arch_vcpu_ioctl_run+0x7c/0x19c0 [ 116.348592][ T6065] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 116.348634][ T6065] kvm_vcpu_ioctl+0xa61/0xfd0 [ 116.348676][ T6065] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 116.348709][ T6065] ? hook_file_ioctl+0x1f2/0x600 [ 116.348757][ T6065] ? __fget_files+0x2a/0x420 [ 116.348791][ T6065] ? __fget_files+0x2a/0x420 [ 116.348819][ T6065] ? __fget_files+0x3a2/0x420 [ 116.348846][ T6065] ? __fget_files+0x2a/0x420 [ 116.348879][ T6065] ? bpf_lsm_file_ioctl+0x9/0x20 [ 116.348908][ T6065] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 116.348944][ T6065] __se_sys_ioctl+0xfc/0x170 [ 116.348983][ T6065] do_syscall_64+0x166/0x520 [ 116.349027][ T6065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.349059][ T6065] ? clear_bhb_loop+0x70/0xc0 [ 116.349088][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.349111][ T6065] RIP: 0033:0x7f3ddcb9e159 [ 116.349132][ T6065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.349151][ T6065] RSP: 002b:00007f3ddd9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.349174][ T6065] RAX: ffffffffffffffda RBX: 00007f3ddce25fa0 RCX: 00007f3ddcb9e159 [ 116.349190][ T6065] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 116.349205][ T6065] RBP: 00007f3ddd9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 116.349224][ T6065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.349237][ T6065] R13: 00007f3ddce26038 R14: 00007f3ddce25fa0 R15: 00007fffb11eb258 [ 116.349278][ T6065] [ 116.349409][ T6065] Mem-Info: [ 116.349421][ T6065] active_anon:5607 inactive_anon:0 isolated_anon:0 [ 116.349421][ T6065] active_file:0 inactive_file:43175 isolated_file:0 [ 116.349421][ T6065] unevictable:0 dirty:320 writeback:0 [ 116.349421][ T6065] slab_reclaimable:10009 slab_unreclaimable:90324 [ 116.349421][ T6065] mapped:25364 shmem:531 pagetables:1091 [ 116.349421][ T6065] sec_pagetables:0 bounce:0 [ 116.349421][ T6065] kernel_misc_reclaimable:0 [ 116.349421][ T6065] free:1351458 free_pcp:8447 free_cma:0 [ 116.349514][ T6065] Node 0 active_anon:22428kB inactive_anon:0kB active_file:0kB inactive_file:172496kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:101456kB dirty:1276kB writeback:0kB shmem:2124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11512kB pagetables:4256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 116.349580][ T6065] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 116.349667][ T6065] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 116.349737][ T6065] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 116.349809][ T6065] Node 0 DMA32 free:1451324kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22428kB inactive_anon:0kB active_file:0kB inactive_file:172496kB unevictable:0kB writepending:1276kB zspages:0kB present:3129332kB managed:2541832kB mlocked:0kB bounce:0kB free_pcp:33772kB local_pcp:12516kB free_cma:0kB [ 116.349884][ T6065] lowmem_reserve[]: 0 0 1 1 1 [ 116.349952][ T6065] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1692kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 116.350042][ T6065] lowmem_reserve[]: 0 0 0 0 0 [ 116.350121][ T6065] Node 1 Normal free:3939148kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 116.350187][ T6065] lowmem_reserve[]: 0 0 0 0 0 [ 116.350262][ T6065] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 116.350652][ T6065] Node 0 DMA32: 1997*4kB (UM) 88*8kB (UME) 59*16kB (M) 47*32kB (UME) 50*64kB (UM) 52*128kB (UM) 31*256kB (UM) 6*512kB (M) 6*1024kB (ME) 8*2048kB (UME) 341*4096kB (M) = 1451268kB [ 116.350897][ T6065] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 116.351051][ T6065] Node 1 Normal: 3*4kB (UM) 10*8kB (UM) 5*16kB (UM) 11*32kB (UM) 9*64kB (UM) 4*128kB (UM) 3*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3939148kB [ 116.351306][ T6065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.351325][ T6065] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 116.351344][ T6065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.351362][ T6065] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 116.351380][ T6065] 43702 total pagecache pages [ 116.351396][ T6065] 0 pages in swap cache [ 116.351408][ T6065] Free swap = 124996kB [ 116.351437][ T6065] Total swap = 124996kB [ 116.351447][ T6065] 2097051 pages RAM [ 116.351455][ T6065] 0 pages HighMem/MovableOnly [ 116.351463][ T6065] 429554 pages reserved [ 116.351471][ T6065] 0 pages cma reserved [ 117.079512][ T5701] usb 1-1: USB disconnect, device number 5 [ 117.567012][ T1650] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 117.567046][ T1650] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 117.567277][ T1650] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 117.623057][ T1650] usb 3-1: USB disconnect, device number 6 [ 118.327163][ T6093] FAULT_INJECTION: forcing a failure. [ 118.327163][ T6093] name failslab, interval 1, probability 0, space 0, times 0 [ 118.327231][ T6093] CPU: 1 UID: 0 PID: 6093 Comm: syz.1.106 Not tainted syzkaller #0 PREEMPT(full) [ 118.327256][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.327270][ T6093] Call Trace: [ 118.327278][ T6093] [ 118.327288][ T6093] dump_stack_lvl+0xe8/0x150 [ 118.327322][ T6093] should_fail_ex+0x3eb/0x540 [ 118.327351][ T6093] ? __pfx_dev_uevent_name+0x10/0x10 [ 118.327386][ T6093] should_failslab+0xa8/0x100 [ 118.327413][ T6093] __kmalloc_cache_noprof+0x9e/0x600 [ 118.327449][ T6093] ? kobject_uevent_env+0x289/0x9e0 [ 118.327476][ T6093] ? kobject_uevent_env+0x289/0x9e0 [ 118.327508][ T6093] ? __pfx_dev_uevent_name+0x10/0x10 [ 118.327542][ T6093] kobject_uevent_env+0x289/0x9e0 [ 118.327581][ T6093] nbd_config_put+0x2c8/0x7e0 [ 118.327620][ T6093] ? __pfx_nbd_config_put+0x10/0x10 [ 118.327667][ T6093] ? __pfx_nbd_add_socket+0x10/0x10 [ 118.327703][ T6093] ? __nla_parse+0x40/0x60 [ 118.327738][ T6093] nbd_genl_connect+0x19b8/0x1cd0 [ 118.327774][ T6093] ? __pfx_nbd_genl_connect+0x10/0x10 [ 118.327803][ T6093] ? rcu_is_watching+0x16/0xb0 [ 118.327840][ T6093] ? __nla_parse+0x40/0x60 [ 118.327874][ T6093] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 118.327906][ T6093] genl_family_rcv_msg_doit+0x233/0x340 [ 118.327949][ T6093] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 118.328004][ T6093] ? __lock_acquire+0x747/0x2de0 [ 118.328048][ T6093] genl_rcv_msg+0x614/0x7a0 [ 118.328088][ T6093] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.328121][ T6093] ? __pfx_nbd_genl_connect+0x10/0x10 [ 118.328161][ T6093] netlink_rcv_skb+0x226/0x4a0 [ 118.328195][ T6093] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.328231][ T6093] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.328276][ T6093] ? down_read+0x2b9/0x320 [ 118.328306][ T6093] genl_rcv+0x28/0x40 [ 118.328338][ T6093] netlink_unicast+0x7bd/0x940 [ 118.328377][ T6093] netlink_sendmsg+0x7c3/0xae0 [ 118.328414][ T6093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.328452][ T6093] ? apparmor_socket_sendmsg+0x98/0x360 [ 118.328480][ T6093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.328508][ T6093] sock_sendmsg_nosec+0x13a/0x180 [ 118.328544][ T6093] ____sys_sendmsg+0x54e/0x850 [ 118.328575][ T6093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.328611][ T6093] ? import_iovec+0x73/0xa0 [ 118.328644][ T6093] ___sys_sendmsg+0x2a5/0x360 [ 118.328668][ T6093] ? __lock_acquire+0x747/0x2de0 [ 118.328706][ T6093] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.328771][ T6093] ? __fget_files+0x2a/0x420 [ 118.328800][ T6093] ? __fget_files+0x3a2/0x420 [ 118.328839][ T6093] __x64_sys_sendmsg+0x1b1/0x290 [ 118.328868][ T6093] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 118.328917][ T6093] do_syscall_64+0x166/0x520 [ 118.328938][ T6093] ? trace_irq_disable+0x3b/0x140 [ 118.328969][ T6093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.329001][ T6093] ? clear_bhb_loop+0x70/0xc0 [ 118.329030][ T6093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.329059][ T6093] RIP: 0033:0x7f7cc8d9e159 [ 118.329079][ T6093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.329097][ T6093] RSP: 002b:00007f7cc9d21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.329122][ T6093] RAX: ffffffffffffffda RBX: 00007f7cc9026090 RCX: 00007f7cc8d9e159 [ 118.329138][ T6093] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 118.329152][ T6093] RBP: 00007f7cc9d21090 R08: 0000000000000000 R09: 0000000000000000 [ 118.329166][ T6093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.329179][ T6093] R13: 00007f7cc9026128 R14: 00007f7cc9026090 R15: 00007ffe9b0da738 [ 118.329215][ T6093] [ 118.396513][ T5701] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 118.560279][ T5701] usb 4-1: Using ep0 maxpacket: 16 [ 118.585568][ T5701] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 118.606563][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.606667][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.606731][ T5701] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.606846][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.701933][ T5701] usb 4-1: config 0 descriptor?? [ 119.142929][ T5701] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 119.142973][ T5701] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 119.143001][ T5701] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 119.143738][ T1650] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.168727][ T5701] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 119.201849][ T6101] FAULT_INJECTION: forcing a failure. [ 119.201849][ T6101] name failslab, interval 1, probability 0, space 0, times 0 [ 119.201885][ T6101] CPU: 1 UID: 0 PID: 6101 Comm: syz.1.111 Not tainted syzkaller #0 PREEMPT(full) [ 119.201910][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.201924][ T6101] Call Trace: [ 119.201933][ T6101] [ 119.201943][ T6101] dump_stack_lvl+0xe8/0x150 [ 119.201989][ T6101] should_fail_ex+0x3eb/0x540 [ 119.202019][ T6101] should_failslab+0xa8/0x100 [ 119.202045][ T6101] __kmalloc_noprof+0xf9/0x710 [ 119.202079][ T6101] ? io_cache_alloc_new+0x40/0x100 [ 119.202113][ T6101] ? io_cache_alloc_new+0x40/0x100 [ 119.202154][ T6101] io_cache_alloc_new+0x40/0x100 [ 119.202189][ T6101] __io_prep_rw+0x281/0xe70 [ 119.202215][ T6101] ? kasan_quarantine_put+0xbb/0x1f0 [ 119.202253][ T6101] ? __pfx___io_prep_rw+0x10/0x10 [ 119.202282][ T6101] ? __mutex_trylock_common+0x15f/0x270 [ 119.202312][ T6101] io_prep_rwv+0x81/0x390 [ 119.202337][ T6101] ? __pfx_io_prep_rwv+0x10/0x10 [ 119.202357][ T6101] ? trace_contention_end+0x3d/0x140 [ 119.202391][ T6101] io_submit_sqes+0xbde/0x2310 [ 119.202446][ T6101] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 119.202482][ T6101] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 119.202513][ T6101] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 119.202546][ T6101] ? rcu_is_watching+0x16/0xb0 [ 119.202575][ T6101] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 119.202601][ T6101] do_syscall_64+0x166/0x520 [ 119.202623][ T6101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.202647][ T6101] ? clear_bhb_loop+0x70/0xc0 [ 119.202675][ T6101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.202698][ T6101] RIP: 0033:0x7f7cc8d9e159 [ 119.202718][ T6101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.202736][ T6101] RSP: 002b:00007f7cc9d41f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 119.202758][ T6101] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007f7cc8d9e159 [ 119.202775][ T6101] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 119.202788][ T6101] RBP: 0000000000000096 R08: 0000000000000000 R09: 0000000000000008 [ 119.202802][ T6101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000780 [ 119.202816][ T6101] R13: 0000200000000788 R14: 0000000000000e26 R15: 0000000000000000 [ 119.202848][ T6101] [ 119.320566][ T1650] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 119.382413][ T1650] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.506769][ T5701] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0001/input/input6 [ 119.676296][ T5701] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 119.711988][ T5701] usb 4-1: USB disconnect, device number 7 [ 119.715770][ T1650] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 119.838513][ T6108] fido_id[6108]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 119.888566][ C1] ================================================================== [ 119.888586][ C1] BUG: KASAN: slab-use-after-free in dummy_timer+0xcdb/0x4cf0 [ 119.888623][ C1] Read of size 1 at addr ffff8880596b54e8 by task syz.0.109/6097 [ 119.888644][ C1] [ 119.888657][ C1] CPU: 1 UID: 0 PID: 6097 Comm: syz.0.109 Not tainted syzkaller #0 PREEMPT(full) [ 119.888684][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.888699][ C1] Call Trace: [ 119.888708][ C1] [ 119.888718][ C1] dump_stack_lvl+0xe8/0x150 [ 119.888751][ C1] print_address_description+0x55/0x1e0 [ 119.888786][ C1] ? dummy_timer+0xcdb/0x4cf0 [ 119.888813][ C1] print_report+0x58/0x70 [ 119.888843][ C1] kasan_report+0x117/0x150 [ 119.888870][ C1] ? dummy_timer+0xcdb/0x4cf0 [ 119.888903][ C1] dummy_timer+0xcdb/0x4cf0 [ 119.888931][ C1] ? update_se+0x90/0x1020 [ 119.888966][ C1] ? __lock_acquire+0x747/0x2de0 [ 119.889018][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 119.889052][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 119.889083][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 119.889119][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 119.889147][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 119.889186][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 119.889219][ C1] handle_softirqs+0x226/0x860 [ 119.889249][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 119.889280][ C1] __irq_exit_rcu+0xcb/0x220 [ 119.889307][ C1] irq_exit_rcu+0x9/0x30 [ 119.889343][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 119.889381][ C1] [ 119.889389][ C1] [ 119.889399][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 119.889425][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 119.889460][ C1] Code: f7 e8 bd eb aa f5 f7 c3 00 02 00 00 74 05 e8 10 35 d7 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 54 00 9c f5 65 48 8b 05 dc 38 c3 07 48 85 c0 74 18 5b 41 5e c3 [ 119.889480][ C1] RSP: 0018:ffffc90005617648 EFLAGS: 00000206 [ 119.889503][ C1] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 8000000000000001 [ 119.889520][ C1] RDX: 0000000000000006 RSI: ffffffff8e59e74c RDI: 0000000000000001 [ 119.889536][ C1] RBP: 0000000000000007 R08: ffffffff909bb37f R09: 1ffffffff213766f [ 119.889554][ C1] R10: dffffc0000000000 R11: fffffbfff2137670 R12: 0000000000000000 [ 119.889571][ C1] R13: dffffc0000000000 R14: ffff888020ac4000 R15: 1ffff11005424a94 [ 119.889601][ C1] dummy_urb_enqueue+0x587/0x780 [ 119.889634][ C1] usb_hcd_submit_urb+0x328/0x1b60 [ 119.889669][ C1] acm_submit_read_urb+0xb6/0x180 [ 119.889701][ C1] acm_port_activate+0x2c3/0x570 [ 119.889732][ C1] tty_port_open+0x1d7/0x2b0 [ 119.889785][ C1] tty_open+0x48a/0xd80 [ 119.889820][ C1] ? __pfx_tty_open+0x10/0x10 [ 119.889849][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 119.889878][ C1] chrdev_open+0x4d9/0x600 [ 119.889903][ C1] ? __pfx_chrdev_open+0x10/0x10 [ 119.889921][ C1] ? devcgroup_check_permission+0x31/0x8f0 [ 119.889949][ C1] ? __pfx_chrdev_open+0x10/0x10 [ 119.889965][ C1] do_dentry_open+0x80e/0x1360 [ 119.889988][ C1] vfs_open_consume+0x4a/0x350 [ 119.890007][ C1] ? path_openat+0x14bb/0x1e40 [ 119.890036][ C1] path_openat+0x14d7/0x1e40 [ 119.890073][ C1] do_file_open+0x23e/0x4a0 [ 119.890103][ C1] ? __pfx_do_file_open+0x10/0x10 [ 119.890144][ C1] ? _raw_spin_unlock+0x28/0x50 [ 119.890172][ C1] ? alloc_fd+0x651/0x6c0 [ 119.890202][ C1] do_sys_openat2+0x115/0x200 [ 119.890224][ C1] ? __se_sys_futex+0x3a8/0x450 [ 119.890247][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 119.890274][ C1] ? rcu_is_watching+0x16/0xb0 [ 119.890300][ C1] __x64_sys_openat+0x138/0x170 [ 119.890338][ C1] do_syscall_64+0x166/0x520 [ 119.890359][ C1] ? trace_irq_disable+0x3b/0x140 [ 119.890392][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.890416][ C1] ? clear_bhb_loop+0x70/0xc0 [ 119.890443][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.890466][ C1] RIP: 0033:0x7f3ddcb9e159 [ 119.890487][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.890512][ C1] RSP: 002b:00007f3ddd9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 119.890540][ C1] RAX: ffffffffffffffda RBX: 00007f3ddce25fa0 RCX: 00007f3ddcb9e159 [ 119.890561][ C1] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 119.890583][ C1] RBP: 00007f3ddcc3506b R08: 0000000000000000 R09: 0000000000000000 [ 119.890597][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 119.890616][ C1] R13: 00007f3ddce26038 R14: 00007f3ddce25fa0 R15: 00007fffb11eb258 [ 119.890650][ C1] [ 119.890658][ C1] [ 119.890676][ C1] Allocated by task 6035: [ 119.890687][ C1] kasan_save_track+0x3e/0x80 [ 119.890723][ C1] __kasan_kmalloc+0x93/0xb0 [ 119.890744][ C1] __kmalloc_noprof+0x366/0x710 [ 119.890776][ C1] usb_copy_descriptors+0xf7/0x320 [ 119.890810][ C1] f_midi2_bind+0x2736/0x2c40 [ 119.890838][ C1] usb_add_function+0x2e1/0x9f0 [ 119.890857][ C1] configfs_composite_bind+0xde0/0x1410 [ 119.890878][ C1] gadget_bind_driver+0x2ca/0x9e0 [ 119.890908][ C1] really_probe+0x254/0xae0 [ 119.890936][ C1] __driver_probe_device+0x1e8/0x360 [ 119.890964][ C1] driver_probe_device+0x4f/0x240 [ 119.890993][ C1] __driver_attach+0x339/0x600 [ 119.891020][ C1] bus_for_each_dev+0x23b/0x2c0 [ 119.891039][ C1] bus_add_driver+0x345/0x670 [ 119.891058][ C1] driver_register+0x23a/0x320 [ 119.891088][ C1] usb_gadget_register_driver_owner+0xf9/0x270 [ 119.891117][ C1] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 119.891147][ C1] configfs_write_iter+0x337/0x430 [ 119.891180][ C1] vfs_write+0x612/0xba0 [ 119.891208][ C1] ksys_write+0x150/0x270 [ 119.891236][ C1] do_syscall_64+0x166/0x520 [ 119.891256][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.891278][ C1] [ 119.891283][ C1] Freed by task 6067: [ 119.891294][ C1] kasan_save_track+0x3e/0x80 [ 119.891335][ C1] kasan_save_free_info+0x40/0x50 [ 119.891363][ C1] __kasan_slab_free+0x5c/0x80 [ 119.891383][ C1] kfree+0x1c5/0x650 [ 119.891409][ C1] usb_free_all_descriptors+0x78/0x110 [ 119.891443][ C1] purge_configs_funcs+0x248/0x3d0 [ 119.891464][ C1] configfs_composite_unbind+0xa4/0x1c0 [ 119.891485][ C1] gadget_unbind_driver+0x1cb/0x410 [ 119.891521][ C1] device_release_driver_internal+0x48b/0x880 [ 119.891551][ C1] driver_detach+0x1f3/0x2d0 [ 119.891578][ C1] bus_remove_driver+0x226/0x320 [ 119.891598][ C1] usb_gadget_unregister_driver+0x4e/0x70 [ 119.891627][ C1] gadget_dev_desc_UDC_store+0x17a/0x2f0 [ 119.891657][ C1] configfs_write_iter+0x337/0x430 [ 119.891695][ C1] vfs_write+0x612/0xba0 [ 119.891723][ C1] ksys_write+0x150/0x270 [ 119.891752][ C1] do_syscall_64+0x166/0x520 [ 119.891771][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.891793][ C1] [ 119.891799][ C1] The buggy address belongs to the object at ffff8880596b5400 [ 119.891799][ C1] which belongs to the cache kmalloc-512 of size 512 [ 119.891818][ C1] The buggy address is located 232 bytes inside of [ 119.891818][ C1] freed 512-byte region [ffff8880596b5400, ffff8880596b5600) [ 119.891846][ C1] [ 119.891852][ C1] The buggy address belongs to the physical page: [ 119.891864][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x596b4 [ 119.891884][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 119.891903][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 119.891924][ C1] page_type: f5(slab) [ 119.891946][ C1] raw: 00fff00000000040 ffff88813ff1ac80 dead000000000100 dead000000000122 [ 119.891967][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 119.891989][ C1] head: 00fff00000000040 ffff88813ff1ac80 dead000000000100 dead000000000122 [ 119.892010][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 119.892031][ C1] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 119.892052][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 119.892065][ C1] page dumped because: kasan: bad access detected [ 119.892084][ C1] page_owner tracks the page as allocated [ 119.892093][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6035, tgid 6034 (syz.2.92), ts 114697729537 [ 119.892131][ C1] post_alloc_hook+0x1f9/0x250 [ 119.892160][ C1] get_page_from_freelist+0x2209/0x2280 [ 119.892195][ C1] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 119.892230][ C1] allocate_slab+0x7d/0x620 [ 119.892254][ C1] refill_objects+0x2d5/0x350 [ 119.892278][ C1] __pcs_replace_empty_main+0x2c8/0x6c0 [ 119.892302][ C1] __kmalloc_cache_noprof+0x396/0x600 [ 119.892342][ C1] snd_mixer_oss_build_test+0x7a/0x380 [ 119.892367][ C1] snd_mixer_oss_build_input+0x4a6/0x1370 [ 119.892390][ C1] snd_mixer_oss_notify_handler+0x93f/0x1050 [ 119.892417][ C1] snd_card_register+0x589/0x720 [ 119.892446][ C1] f_midi2_bind+0x1562/0x2c40 [ 119.892473][ C1] usb_add_function+0x2e1/0x9f0 [ 119.892492][ C1] configfs_composite_bind+0xde0/0x1410 [ 119.892513][ C1] gadget_bind_driver+0x2ca/0x9e0 [ 119.892541][ C1] really_probe+0x254/0xae0 [ 119.892570][ C1] page last free pid 6026 tgid 6026 ts 113313685965 stack trace: [ 119.892587][ C1] __free_frozen_pages+0xc93/0xd90 [ 119.892616][ C1] __slab_free+0x274/0x2c0 [ 119.892648][ C1] qlist_free_all+0x99/0x100 [ 119.892679][ C1] kasan_quarantine_reduce+0x148/0x160 [ 119.892712][ C1] __kasan_slab_alloc+0x22/0x80 [ 119.892732][ C1] __kmalloc_noprof+0x302/0x710 [ 119.892762][ C1] tomoyo_encode+0x2ad/0x570 [ 119.892789][ C1] tomoyo_path_perm+0x318/0x560 [ 119.892809][ C1] tomoyo_path_symlink+0xab/0xf0 [ 119.892839][ C1] security_path_symlink+0x16f/0x360 [ 119.892868][ C1] filename_symlinkat+0x134/0x410 [ 119.892890][ C1] __se_sys_symlinkat+0x4e/0x2b0 [ 119.892912][ C1] do_syscall_64+0x166/0x520 [ 119.892931][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.892953][ C1] [ 119.892959][ C1] Memory state around the buggy address: [ 119.892971][ C1] ffff8880596b5380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 119.892987][ C1] ffff8880596b5400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 119.893002][ C1] >ffff8880596b5480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 119.893014][ C1] ^ [ 119.893027][ C1] ffff8880596b5500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 119.893043][ C1] ffff8880596b5580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 119.893059][ C1] ================================================================== [ 119.893080][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 120.949178][ C1] CPU: 1 UID: 0 PID: 6097 Comm: syz.0.109 Not tainted syzkaller #0 PREEMPT(full) [ 120.958407][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.968483][ C1] Call Trace: [ 120.971791][ C1] [ 120.974660][ C1] vpanic+0x56d/0xa70 [ 120.978686][ C1] ? __pfx_vpanic+0x10/0x10 [ 120.983233][ C1] panic+0xc5/0xd0 [ 120.986997][ C1] ? __pfx_panic+0x10/0x10 [ 120.991448][ C1] ? dummy_timer+0xcdb/0x4cf0 [ 120.996181][ C1] ? dummy_timer+0xcdb/0x4cf0 [ 121.000897][ C1] ? dummy_timer+0xcdb/0x4cf0 [ 121.005600][ C1] check_panic_on_warn+0x89/0xb0 [ 121.010574][ C1] ? dummy_timer+0xcdb/0x4cf0 [ 121.015281][ C1] end_report+0x73/0x170 [ 121.019556][ C1] ? dummy_timer+0xcdb/0x4cf0 [ 121.024354][ C1] kasan_report+0x128/0x150 [ 121.028971][ C1] ? dummy_timer+0xcdb/0x4cf0 [ 121.033686][ C1] dummy_timer+0xcdb/0x4cf0 [ 121.038216][ C1] ? update_se+0x90/0x1020 [ 121.042698][ C1] ? __lock_acquire+0x747/0x2de0 [ 121.047687][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 121.053098][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 121.058072][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 121.064001][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 121.069051][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 121.074399][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 121.080061][ C1] handle_softirqs+0x226/0x860 [ 121.084855][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 121.089647][ C1] __irq_exit_rcu+0xcb/0x220 [ 121.094281][ C1] irq_exit_rcu+0x9/0x30 [ 121.098598][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 121.104271][ C1] [ 121.107223][ C1] [ 121.110175][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 121.116284][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 121.122752][ C1] Code: f7 e8 bd eb aa f5 f7 c3 00 02 00 00 74 05 e8 10 35 d7 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 54 00 9c f5 65 48 8b 05 dc 38 c3 07 48 85 c0 74 18 5b 41 5e c3 [ 121.142388][ C1] RSP: 0018:ffffc90005617648 EFLAGS: 00000206 [ 121.148481][ C1] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 8000000000000001 [ 121.156645][ C1] RDX: 0000000000000006 RSI: ffffffff8e59e74c RDI: 0000000000000001 [ 121.164649][ C1] RBP: 0000000000000007 R08: ffffffff909bb37f R09: 1ffffffff213766f [ 121.172645][ C1] R10: dffffc0000000000 R11: fffffbfff2137670 R12: 0000000000000000 [ 121.180646][ C1] R13: dffffc0000000000 R14: ffff888020ac4000 R15: 1ffff11005424a94 [ 121.188679][ C1] dummy_urb_enqueue+0x587/0x780 [ 121.193667][ C1] usb_hcd_submit_urb+0x328/0x1b60 [ 121.198824][ C1] acm_submit_read_urb+0xb6/0x180 [ 121.203974][ C1] acm_port_activate+0x2c3/0x570 [ 121.208961][ C1] tty_port_open+0x1d7/0x2b0 [ 121.213615][ C1] tty_open+0x48a/0xd80 [ 121.217807][ C1] ? __pfx_tty_open+0x10/0x10 [ 121.222507][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 121.227645][ C1] chrdev_open+0x4d9/0x600 [ 121.232100][ C1] ? __pfx_chrdev_open+0x10/0x10 [ 121.237084][ C1] ? devcgroup_check_permission+0x31/0x8f0 [ 121.242947][ C1] ? __pfx_chrdev_open+0x10/0x10 [ 121.247922][ C1] do_dentry_open+0x80e/0x1360 [ 121.252767][ C1] vfs_open_consume+0x4a/0x350 [ 121.257570][ C1] ? path_openat+0x14bb/0x1e40 [ 121.262391][ C1] path_openat+0x14d7/0x1e40 [ 121.267166][ C1] do_file_open+0x23e/0x4a0 [ 121.271728][ C1] ? __pfx_do_file_open+0x10/0x10 [ 121.276815][ C1] ? _raw_spin_unlock+0x28/0x50 [ 121.281711][ C1] ? alloc_fd+0x651/0x6c0 [ 121.286135][ C1] do_sys_openat2+0x115/0x200 [ 121.290864][ C1] ? __se_sys_futex+0x3a8/0x450 [ 121.295757][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 121.300994][ C1] ? rcu_is_watching+0x16/0xb0 [ 121.305783][ C1] __x64_sys_openat+0x138/0x170 [ 121.310670][ C1] do_syscall_64+0x166/0x520 [ 121.315286][ C1] ? trace_irq_disable+0x3b/0x140 [ 121.320340][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.326429][ C1] ? clear_bhb_loop+0x70/0xc0 [ 121.331129][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.337093][ C1] RIP: 0033:0x7f3ddcb9e159 [ 121.341552][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.361273][ C1] RSP: 002b:00007f3ddd9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 121.369830][ C1] RAX: ffffffffffffffda RBX: 00007f3ddce25fa0 RCX: 00007f3ddcb9e159 [ 121.377842][ C1] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 121.385849][ C1] RBP: 00007f3ddcc3506b R08: 0000000000000000 R09: 0000000000000000 [ 121.393862][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 121.401973][ C1] R13: 00007f3ddce26038 R14: 00007f3ddce25fa0 R15: 00007fffb11eb258 [ 121.409991][ C1] [ 121.413210][ C1] Kernel Offset: disabled [ 121.417606][ C1] Rebooting in 86400 seconds..