last executing test programs: 8.109766787s ago: executing program 3 (id=362): syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109026800030100c0000904000000010100000904000101010200000b24020102031801442a82070501010002010904010000010100000904010101010200000b2402010203180144ac0007058201000201090402"], 0x0) 7.244247689s ago: executing program 2 (id=369): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40015b19, 0x0) 6.817620305s ago: executing program 3 (id=370): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40015b19, 0x0) (fail_nth: 1) 6.623036542s ago: executing program 1 (id=371): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="19000000e06b4e62b9f522151a83a3106a6279b9479184ae1eb0437a1add", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf2515000000080043006b078d66ef83aff9dfb624295ac46478492b81ee7e88b6fa71a0988818f60f54874920e7cc000800000000000074ec49e5033b516549f61b", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4044804}, 0x4004) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) 6.524159461s ago: executing program 1 (id=372): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002c80)=""/4154, 0x103a}, {&(0x7f0000000900)=""/253, 0xfd}, {&(0x7f0000000200)=""/151, 0x97}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000600)=""/175, 0xaf}, {&(0x7f0000000700)=""/167, 0xa7}, {&(0x7f0000000040)=""/29, 0x1d}], 0x7}, 0x40002102) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f0000000b00)={0x14, &(0x7f00000007c0)={0x40, 0x6, 0x8e, {0x8e, 0x22, "c949b9377fbe214e51856104613cbf20ebfc1f16c0ca21a8c66b884d529359fda3bff32e82c6b6a2b5652cb4a99c05c4b5f6688c642ca714b50e1ce4567dbc60f6d14590aa46dc59e6cee055617fec67ac1f3e77f13c65e2d93c3d8e71c3cad64938551501b60aeaac4dd2b87f697e6e4b3ee9d6f2f18679cc40e4f679343a1c16233c6bbab346330e50bea8"}}, &(0x7f0000000a00)={0x0, 0x3, 0xee, @string={0xee, 0x3, "d36dfba912811d01929c734dd508ddf70c76ea714b0a677924c82e70683428d173cde7cd20e1ea0c1caf911685102206fafdf30730a9c4746445a36d0c37ff1280c170afc6eb5ab2264ad0d0d07e894887b485d2c4c1ac1d02483d0a549c35cdf16e26c3c899ff5d4d9cd357510e157954ff80ee175a11d00ca31902b59662d9e01a03460fc5ee7d4e672a4999288196a0aa98bd2f2061263812b873fe9449b3ee102c8afe981384ec3bea6d01b2b66bf82cf0d0fe1daf6ece575b93e10951e3ade2b5e8733c53a70d19bc619fdc18c4d5d17a7697cec2000dd3a09a6db273a10367c7da0f757faf20585453"}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000b40)={0x40, 0x69, 0x45, "95e03b0b68a4fd7f4ddce07a0cf431a606a16ee3a67a0831455bd80928a63c0c7d3865f6ad77192f1357b01abd17630b380ccf48eda3217b852c786897fa759a5a76e32ff1"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0xaf}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x7c}, &(0x7f0000000c40)={0x20, 0x81, 0x1, 'I'}, &(0x7f0000000c80)={0x20, 0x82, 0x3, "9e2878"}, &(0x7f0000000cc0)={0x20, 0x83, 0x3, "5241f2"}, &(0x7f0000000d00)={0x20, 0x84, 0x3, "ef01e3"}, &(0x7f0000000d40)={0x20, 0x85, 0x3, "02bbcf"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x40, 0xf, 0x6, "f82d714db0c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.07014607s ago: executing program 0 (id=373): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010102}], 0x18, 0x4048820}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r3, 0x40015b19, 0x0) 4.526308276s ago: executing program 1 (id=374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {}, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000300)=""/217) 4.218697101s ago: executing program 1 (id=375): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x0, &(0x7f0000000340)}) 4.07533373s ago: executing program 2 (id=376): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) 4.001712758s ago: executing program 1 (id=377): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) lseek(r0, 0x80ffff, 0x0) (fail_nth: 2) 3.923147541s ago: executing program 2 (id=378): timer_create(0x8, &(0x7f00000004c0)={0x0, 0x41, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000500)=0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_gettime(r0, &(0x7f0000000200)) (async) syz_usb_connect(0x5, 0x71, &(0x7f0000002040)={{0x12, 0x1, 0x250, 0xd4, 0x8b, 0x86, 0x10, 0x45e, 0x468, 0xb29c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x3, 0x40, 0x20, 0x7f, "", [{{0x9, 0x4, 0x4a, 0x1, 0x7, 0xb5, 0xef, 0xe4, 0x9, [], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0x1, 0x5b, 0xd}}, {{0x9, 0x5, 0x35027ad7510f81c3, 0x2, 0x200, 0x1, 0x1, 0x8}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xd1, 0x80, 0xfb}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0xfc, 0x40, 0x9}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x81, 0x9, 0x0, [@generic={0x7, 0x5, "b1a62325cc"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x3, 0x9, 0x0, [@generic={0x7, 0x5, "49de57454d"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x3, 0x96, 0x7}}]}}]}}]}}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0}) 3.841336514s ago: executing program 1 (id=379): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x3, 0x8210, 0x0, 0x0}, {0x3f43, 0x0, 0x0, 0x0}], 0x2}) 3.77602812s ago: executing program 3 (id=380): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './tracing/dynamic_events'}}, {@uuid_auto}, {@uuid_auto}, {@verity_on}, {@metacopy_on}], [{@seclabel}, {@context={'context', 0x3d, 'system_u'}}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x200, 0xe2, 0x4, 0x7}, {0x0, 0x10, 0x3, 0x2}, {0x8, 0x1, 0x2, 0xbd}, {0x200, 0x4, 0xdb, 0x5}, {0x2, 0xe, 0x81, 0xf170}, {0xeb, 0x3, 0x10}, {0x162, 0x8, 0x4, 0x3}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) lseek(r0, 0x80ffff, 0x0) 3.683428016s ago: executing program 3 (id=381): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) lseek(r0, 0x80ffff, 0x0) 3.626242047s ago: executing program 3 (id=382): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.361572365s ago: executing program 2 (id=383): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002c80)=""/4154, 0x103a}, {&(0x7f0000000900)=""/253, 0xfd}, {&(0x7f0000000200)=""/151, 0x97}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000600)=""/175, 0xaf}, {&(0x7f0000000700)=""/167, 0xa7}, {&(0x7f0000000040)=""/29, 0x1d}], 0x7}, 0x40002102) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f0000000b00)={0x14, &(0x7f00000007c0)={0x40, 0x6, 0x8e, {0x8e, 0x22, "c949b9377fbe214e51856104613cbf20ebfc1f16c0ca21a8c66b884d529359fda3bff32e82c6b6a2b5652cb4a99c05c4b5f6688c642ca714b50e1ce4567dbc60f6d14590aa46dc59e6cee055617fec67ac1f3e77f13c65e2d93c3d8e71c3cad64938551501b60aeaac4dd2b87f697e6e4b3ee9d6f2f18679cc40e4f679343a1c16233c6bbab346330e50bea8"}}, &(0x7f0000000a00)={0x0, 0x3, 0xee, @string={0xee, 0x3, "d36dfba912811d01929c734dd508ddf70c76ea714b0a677924c82e70683428d173cde7cd20e1ea0c1caf911685102206fafdf30730a9c4746445a36d0c37ff1280c170afc6eb5ab2264ad0d0d07e894887b485d2c4c1ac1d02483d0a549c35cdf16e26c3c899ff5d4d9cd357510e157954ff80ee175a11d00ca31902b59662d9e01a03460fc5ee7d4e672a4999288196a0aa98bd2f2061263812b873fe9449b3ee102c8afe981384ec3bea6d01b2b66bf82cf0d0fe1daf6ece575b93e10951e3ade2b5e8733c53a70d19bc619fdc18c4d5d17a7697cec2000dd3a09a6db273a10367c7da0f757faf20585453"}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000b40)={0x40, 0x69, 0x45, "95e03b0b68a4fd7f4ddce07a0cf431a606a16ee3a67a0831455bd80928a63c0c7d3865f6ad77192f1357b01abd17630b380ccf48eda3217b852c786897fa759a5a76e32ff1"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0xaf}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x7c}, &(0x7f0000000c40)={0x20, 0x81, 0x1, 'I'}, &(0x7f0000000c80)={0x20, 0x82, 0x3, "9e2878"}, &(0x7f0000000cc0)={0x20, 0x83, 0x3, "5241f2"}, &(0x7f0000000d00)={0x20, 0x84, 0x3, "ef01e3"}, &(0x7f0000000d40)={0x20, 0x85, 0x3, "02bbcf"}}) 1.874385927s ago: executing program 0 (id=384): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {}, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000300)=""/217) 1.617912759s ago: executing program 0 (id=385): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x0, &(0x7f0000000340)}) 1.525874731s ago: executing program 0 (id=386): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) 1.45121178s ago: executing program 0 (id=387): syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x7e, 0x60, 0x62, 0x40, 0x5d1, 0x1019, 0x9360, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x4, 0xb, 0x10, 0xb4}}]}}, &(0x7f0000000040)={0x61, 0x0, 0x0, 0x0}) syz_usb_connect$uac3(0x6, 0x125, &(0x7f0000000bc0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x113, 0x3, 0x1, 0x80, 0x80, 0x5, {0x8, 0xb, 0x0, 0x0, 0x1, 0x24, 0x30, 0x75}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x52, 0x7fffffff}, [@mixer_unit={0xb, 0x24, 0x5, 0x3, 0xa, "353acf562795"}, @multiply_unit={0xb, 0x24, 0xd, 0x3, 0x46, 0x8, 0x888d}, @input_terminal={0x14, 0x24, 0x2, 0x3, 0x100, 0x6, 0xfa, 0xfffffeff, 0x4, 0x2, 0x2, 0x9}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0x402, 0x4, 0x4, 0x40, 0x0, 0x3910, 0xc, 0x401}, @multiply_unit={0xb, 0x24, 0xd, 0xff, 0xd3, 0xb, 0x67da}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xf9, 0x0, 0x25f4, 0x5, 0x40, 0x9, 0x4, 0x8}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xa1, 0x81, 0x1b, {0xa, 0x25, 0x25, 0x5, 0x6, 0x4ee8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x3, 0x1, 0x2, 0x1, "51e9"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7d69, 0x530f, 0x18, 0xf7}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xd, 0x1, 0x7, 0xd7, "", "58e0"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x5, 0x7f, "a0f727e1176d0d"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x0, 0x7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x8, 0x0, 0x1, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x10, 0x7, {0xa, 0x25, 0x25, 0x8, 0x7, 0x7}}}}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x250, 0x8, 0xe, 0x4, 0xff, 0x81}, 0x17, &(0x7f0000000d40)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x78, 0x8, 0x2, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0xe, 0x2}]}, 0x2, [{0xe9, &(0x7f0000000d80)=@string={0xe9, 0x3, "30e5a58ca45eb1cad18b16aa72b9d24e700e19dcd18db38a8bfeb4047f467b02a24a15a76a681b27dcc04704685276a09c00f374cba4409d707e4c7e5662fa9acc2f37f3e52652d475c2f72da96dbd7c80893156217478a69ac300cd4ff5e77ac128085035b32929f57b4c2e6b23f01b95cb2058112b5bbc78486da505373c12423cfdc2b22ce1b118ac51a94bc77f980704375dafcee2e97520c37f3678a0a6af3bfd404d1bd8b7cd401301f17c7869c1c038a4278673833ba51b1b94f10f00153edecc2bec94bd235de9a27e0e73cf007b683fdc30aa9548da107e72198e04fd9d2d099e549d"}}, {0x26, &(0x7f0000000e80)=@string={0x26, 0x3, "f57bbd158d05a10163b902a2b8ab25fcbc9dc2e96c2b1e79b0274d20221d40df69ccb39c"}}]}) syz_usb_connect(0x3, 0x7fe, &(0x7f0000000f00)={{0x12, 0x1, 0x250, 0x1, 0x17, 0x96, 0x10, 0x413c, 0x81a2, 0x5745, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7ec, 0x3, 0x7f, 0x5, 0x80, 0x4, "", [{{0x9, 0x4, 0x8, 0x7, 0x9, 0xa0, 0x4f, 0x40, 0x2, [], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0xec, 0x74, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0xf}]}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0x2, 0x9, 0x6, [@generic={0x5d, 0x6, "e7ee55ab42a357cd66c9caec848064327f9fc4aebd82289a10e0fef2562785eb792007dffe32c8d732e8377377d16bc3b808fbdeea274cc34fc5316ab7b0cf9182d690a69f2a934fa6175f0c047ef720f4665b9ba947dfa110d074"}, @generic={0x99, 0x21, "e857ceb74ee4820a7d94cfb5ffbbca62b5ed7c685a8b2504b8af4c56979c7bfc895963dc4cb05b63a10d652a55ba5d835060114c082a799070c6646e3b3f92440be01dc01e9ecc46035f5ed51a2218c332101c2c25878527953d40ccf29f50eadde0d17eb5bdc4f7dc338e4f42781290e950dd88c1d6221d86c38267509797b3601f7aac594f584f39b102c7e3a29f621f5573afefe3d3"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0x0, 0x5, 0xb, [@generic={0x1d, 0x3, "b0762976a25399cd8f42a3b3d245b2a87b58c44741c18ece745e01"}, @generic={0xf5, 0x13, "ad3915139ab474608fc5ab63c9521eb6864559c59eae63e29442ffe5352b5eda29a1589e2b5156d60f520d39fe910bf2b3c6b61ec8f1eb44a9b5ea462684af41cac7e7120e2fdcf95debba1658e4c168ea987daec3569c1b017ec7ab28d5783da4af39ec8f5adb53e222b62ddae39b11e63ee66506288dd3a38650c607dd2316263830f1b73e926ca3d04351f436aa874e656d83fe891c12cb3ea74dea6a9129a34883dfca50b9a3a49fcf58a7070f733b69e5df30ba1c71cff8cfdf553b73e0d5c695762a1960f68278ed5e863056e4efe81635ac7a77d5a078c79af47ac177276976b5ae6158fe120a68f3fb06712a26d86f"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x3ff, 0xf9, 0xc, 0x4, [@generic={0xc6, 0x8, "34fa880a20a3321c78ca921d0b3a06a98b453d7212a0166b9a8c16295131502744184c5836d5411be46be7c87e6a85327ad7d0ecc92fd102ad96ecd619f87a977894e5bf8398877f093dd5b21c398b1a26a22ab138c4495d68bcf84972d1eb2103f74316c4abb0da04115dee18a5b6f3e620d18a43c120eeaa512ce1dbc5728fc78e323b1bc507ac9002509a4b95b38f833d5c0d6c73dd8baf7864fb02f007b7bf1e5d94c483c260edf6734e12d29a3eff01497d4f81ec0dfb4d1b9ebf57a1c275183e48"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x1, 0x3e, 0x6, [@generic={0x91, 0xa, "d67f28c8b483566e93e8953f970c1c89da666649f4e822a6f881d14bfc796e07d51a80d58d138228ae48b316dc092d2706c8d98afa4986ebe85a026eb314653ae3fadd2fcafc97e3f9a29ddc9399f7640f8f436c251dea1b139a21e8127c77413af17c9bb984530e8d312d09454f4844ea485b5c8b38619251b8d4060d467ac4c593941ad373142a894c544e192617"}, @generic={0x64, 0x10, "5bd5bcd70c1634f8ab661550006eaca3ac859df66b2c99077f9d6ae21285a76f9a6153d9da770eeb3a88b485f1a2a0b129f44619fab076e739ef3ad192843451b8ff45288f1c21d6d2b214d97131c4f8879379b3aaaaec34557958db50627beedb88"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x9, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x8}, @generic={0x12, 0x23, "a51fe5df587b535e5eefeb502c5004e8"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x8, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xfffd}, @generic={0xbc, 0xf, "ae4f91a138657d841d525c89ef476a7c97d84287b93729e88164bdb5db7968c53e0b1e96f64618ad5de65f51a9be6c04c33b6ea298ad84ef67329d55c05e9bb92611d6ac8dc4d54505fa58fc02261a67263a251983b5eec5208689db3f942fbe338ac0047d8b123c5848a344accf63738bd22dec8930bf5c27c13e0197c0ab29eb459f2016b3d2dd41c57c0341bb4df736874e21abefc570f3e1e57ca9769cf72e7e5ec67f7a7a60d4a922654f4fd3b27e3567d88e4620260d5c"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x5, 0x7, 0xb}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x6, 0x2, 0x2}}]}}, {{0x9, 0x4, 0x4d, 0x4, 0x5, 0xff, 0xff, 0xff, 0xb, [], [{{0x9, 0x5, 0xc, 0xc, 0x40, 0xfb, 0x3, 0xb3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xb2, 0x8}]}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0x50, 0xd7, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x2, 0x8, 0x1}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0xfe, 0x82, 0x9, [@generic={0x8b, 0x21, "bb25448cd888ccf0914bc88f2e1e0b9290d138a0f689659b5c5da756f1f085dc727c81d33ebd0860fd96b5cd750a9bc7897064df2a42d704060ec70fbd3f49418a1acee2ce13f1e2f51adee528f8a3da923073a13d06a4cc2a6c93a2d9c73cb8e7dfadf4f541568f5593927258059668f120271d89d883b4830fb2e032199ba40d8cb0bc69883d497b"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x9, 0x5}}]}}, {{0x9, 0x4, 0x9c, 0x19, 0x5, 0x36, 0xcf, 0x89, 0x6, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "e635cb"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0xb6, 0x4, 0x5, 0x5c}, {0x6, 0x24, 0x1a, 0x8}, [@country_functional={0x8, 0x24, 0x7, 0x5, 0x4, [0x9]}, @mdlm_detail={0xed, 0x24, 0x13, 0x3, "69b0f664731c16d60325b6e2ddd6b4ff7d912b784e0e00e94e5a32f6d4379e46742e981f9000f2738db3b7f371f9a676813936aa96e5aed4fb69b8eea193acb21d7c4d48285dfa73582e19320a20588af7bf328c6831586d7b2e9a568d277feb6bd8f9192bf6cc3462891e818b7b4a1bc9569bb08014f6c31af53d993133bfeccea33342a8a8095ca2eb3eff4d48b8ffaf988db97269ff6e0c40285d578631a27a482a2dcbc9d9dbba0126456e4d08f08f526315757f2ca82d17e8abb8ae98b1d0ab1b0497ff47a233702b1a49ad59bc812420335c48c86cd916dd9d2bb21551d8eeddf78ed340d3e0"}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "aa4523854d6e"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xee9, 0x3, 0xf313, 0x45}, [@obex={0x5, 0x24, 0x15, 0x5}, @mdlm_detail={0x9, 0x24, 0x13, 0xc0, "d055422d17"}, @dmm={0x7, 0x24, 0x14, 0x7f, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x85, 0x7f, 0xe8}]}], [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x2, 0x3}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0xfd, 0x53}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0xd, 0x34, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x7f, 0x3, 0x6c, [@generic={0x4a, 0xe, "aaffb1b96588abbea86545f0130028fc9d20e84b31b2693bf3587677eae59416ce764cdfd62967f13d0ff5f96433330a2f5e0a1c9d7c8279257d16319222fc3ef688ff56172e20e5"}, @generic={0x31, 0xa, "2a0eefe0b9a3b90e420010ce64e2a4e907ab00170f1e9bfdefeb1dc9ee0c56b9eed93ec5d315e0ccffb19e5b8ff88d"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0xff, 0x3, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0xe59}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x5}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x3, 0x5, 0x3, 0x40, 0x2}, 0x39, &(0x7f0000000a00)={0x5, 0xf, 0x39, 0x5, [@wireless={0xb, 0x10, 0x1, 0xa, 0xa0, 0x35, 0xf3, 0xe, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "a9eca8a6ca0f4e38a22ea5ac500ea89d"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x2, 0x59, 0x2, 0x6}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0xf, 0x2}]}, 0x1, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1401}}]}) 679.878428ms ago: executing program 2 (id=388): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) 522.550612ms ago: executing program 2 (id=389): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2) 513.169447ms ago: executing program 3 (id=390): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64) syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 0s ago: executing program 0 (id=391): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0) read(r1, &(0x7f0000000700), 0xfffffffffffffc2a) r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9) keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}}) ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d) keyctl$invalidate(0x15, r4) write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) kernel console output (not intermixed with test programs): 119.372782][ T6219] Call Trace: [ 119.372791][ T6219] [ 119.372800][ T6219] dump_stack_lvl+0xe8/0x150 [ 119.372836][ T6219] should_fail_ex+0x3eb/0x540 [ 119.372878][ T6219] should_failslab+0xa8/0x100 [ 119.372901][ T6219] ? create_new_namespaces+0x33/0x6b0 [ 119.372927][ T6219] kmem_cache_alloc_noprof+0xa1/0x600 [ 119.372956][ T6219] ? do_raw_spin_lock+0x12b/0x2f0 [ 119.372986][ T6219] ? create_new_namespaces+0x33/0x6b0 [ 119.373018][ T6219] create_new_namespaces+0x33/0x6b0 [ 119.373046][ T6219] ? bpf_lsm_capable+0x9/0x20 [ 119.373075][ T6219] ? security_capable+0x7e/0x2c0 [ 119.373115][ T6219] unshare_nsproxy_namespaces+0x149/0x190 [ 119.373145][ T6219] ksys_unshare+0x5a7/0x950 [ 119.373181][ T6219] ? __pfx_ksys_unshare+0x10/0x10 [ 119.373209][ T6219] ? rcu_is_watching+0x16/0xb0 [ 119.373244][ T6219] __x64_sys_unshare+0x38/0x50 [ 119.373273][ T6219] do_syscall_64+0x166/0x520 [ 119.373298][ T6219] ? trace_irq_disable+0x3b/0x140 [ 119.373329][ T6219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.373352][ T6219] ? clear_bhb_loop+0x70/0xc0 [ 119.373379][ T6219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.373410][ T6219] RIP: 0033:0x7feae099e159 [ 119.373431][ T6219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.373450][ T6219] RSP: 002b:00007feae18d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 119.373474][ T6219] RAX: ffffffffffffffda RBX: 00007feae0c25fa0 RCX: 00007feae099e159 [ 119.373491][ T6219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002040400 [ 119.373505][ T6219] RBP: 00007feae0a35024 R08: 0000000000000000 R09: 0000000000000000 [ 119.373520][ T6219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.373533][ T6219] R13: 00007feae0c26038 R14: 00007feae0c25fa0 R15: 00007ffc63ebee78 [ 119.373566][ T6219] [ 119.544810][ T5794] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 119.658305][ T30] usb 3-1: USB disconnect, device number 14 [ 119.695418][ T5794] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 119.698902][ T5794] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 119.698963][ T5794] usb 1-1: config 0 has no interface number 0 [ 119.699057][ T5794] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.699129][ T5794] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.699192][ T5794] usb 1-1: config 0 interface 1 has no altsetting 0 [ 119.699283][ T5794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.728838][ T5794] usb 1-1: config 0 descriptor?? [ 119.951646][ T5794] usbhid 1-1:0.1: can't add hid device: -71 [ 119.951906][ T5794] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 119.967103][ T5794] usb 1-1: USB disconnect, device number 9 [ 120.255256][ T6245] misc userio: Begin command sent, but we're already running [ 120.296194][ T6245] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.898821][ T6210] Process accounting resumed [ 120.927012][ T5704] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 121.074680][ T5704] usb 1-1: Using ep0 maxpacket: 32 [ 121.078043][ T5704] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 121.084085][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.084172][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.084262][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.093085][ T5704] usb 1-1: config 0 descriptor?? [ 121.467116][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 121.474366][ T25] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 121.483537][ T30] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 121.518091][ T25] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 121.536467][ T5704] hid_parser_main: 28 callbacks suppressed [ 121.538457][ T5704] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 121.538564][ T5704] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 121.575144][ T25] usb 2-1: USB disconnect, device number 13 [ 121.592734][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 121.606722][ T25] ftdi_sio 2-1:1.0: device disconnected [ 121.642235][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 121.648271][ T30] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 121.661301][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.672839][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.683087][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.706330][ T6266] FAULT_INJECTION: forcing a failure. [ 121.706330][ T6266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.720562][ T6266] CPU: 1 UID: 0 PID: 6266 Comm: syz.1.167 Not tainted syzkaller #0 PREEMPT(full) [ 121.720591][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.720604][ T6266] Call Trace: [ 121.720613][ T6266] [ 121.720622][ T6266] dump_stack_lvl+0xe8/0x150 [ 121.720656][ T6266] should_fail_ex+0x3eb/0x540 [ 121.720694][ T6266] _copy_from_user+0x2d/0xb0 [ 121.720720][ T6266] wext_handle_ioctl+0xc7/0x1d0 [ 121.720758][ T6266] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 121.720790][ T6266] ? hook_file_ioctl+0x1f2/0x600 [ 121.720838][ T6266] sock_ioctl+0x159/0x7e0 [ 121.720875][ T6266] ? __pfx_sock_ioctl+0x10/0x10 [ 121.720908][ T6266] ? __fget_files+0x2a/0x420 [ 121.720932][ T6266] ? __fget_files+0x3a2/0x420 [ 121.720957][ T6266] ? __fget_files+0x2a/0x420 [ 121.720991][ T6266] ? bpf_lsm_file_ioctl+0x9/0x20 [ 121.721018][ T6266] ? __pfx_sock_ioctl+0x10/0x10 [ 121.721051][ T6266] __se_sys_ioctl+0xfc/0x170 [ 121.721084][ T6266] do_syscall_64+0x166/0x520 [ 121.721109][ T6266] ? trace_irq_disable+0x3b/0x140 [ 121.721141][ T6266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.721163][ T6266] ? clear_bhb_loop+0x70/0xc0 [ 121.721190][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.721211][ T6266] RIP: 0033:0x7fca4079e159 [ 121.721231][ T6266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.721249][ T6266] RSP: 002b:00007fca3e9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.721274][ T6266] RAX: ffffffffffffffda RBX: 00007fca40a25fa0 RCX: 00007fca4079e159 [ 121.721289][ T6266] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000003 [ 121.721310][ T6266] RBP: 00007fca3e9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 121.721323][ T6266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.721336][ T6266] R13: 00007fca40a26038 R14: 00007fca40a25fa0 R15: 00007ffd3718bfd8 [ 121.721370][ T6266] [ 121.769550][ T5704] ft260 0003:0403:6030.0007: chip code: 0000 0000 [ 121.807467][ T30] usb 4-1: config 0 descriptor?? [ 121.972965][ T5704] ft260 0003:0403:6030.0007: failed to retrieve system status [ 121.973947][ T5704] ft260 0003:0403:6030.0007: probe with driver ft260 failed with error -5 [ 122.176816][ T25] usb 1-1: USB disconnect, device number 10 [ 122.253844][ T30] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 122.260997][ T30] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 122.324677][ T5704] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 122.334742][ T189] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 122.449915][ T30] ft260 0003:0403:6030.0008: chip code: 0000 0000 [ 122.476302][ T5704] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 122.479541][ T5704] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 122.479607][ T5704] usb 3-1: config 0 has no interface number 0 [ 122.479712][ T5704] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.479784][ T5704] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.479845][ T5704] usb 3-1: config 0 interface 1 has no altsetting 0 [ 122.479929][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.500259][ T189] usb 2-1: Using ep0 maxpacket: 16 [ 122.504843][ T5704] usb 3-1: config 0 descriptor?? [ 122.513599][ T189] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 122.524408][ T189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.524530][ T189] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.527411][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.593351][ T189] usb 2-1: config 0 descriptor?? [ 122.650643][ T30] ft260 0003:0403:6030.0008: failed to retrieve system status [ 122.651616][ T30] ft260 0003:0403:6030.0008: probe with driver ft260 failed with error -32 [ 122.749912][ T5704] usbhid 3-1:0.1: can't add hid device: -71 [ 122.756355][ T5704] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 122.769909][ T5704] usb 3-1: USB disconnect, device number 15 [ 123.003586][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'. [ 123.003651][ T6270] openvswitch: netlink: Flow key attribute not present in set flow. [ 123.024666][ T30] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 123.175445][ T30] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 123.185824][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.185869][ T30] usb 1-1: Product: syz [ 123.186466][ T30] usb 1-1: Manufacturer: syz [ 123.186516][ T30] usb 1-1: SerialNumber: syz [ 123.200329][ T30] usb 1-1: config 0 descriptor?? [ 123.396653][ T6274] FAULT_INJECTION: forcing a failure. [ 123.396653][ T6274] name failslab, interval 1, probability 0, space 0, times 0 [ 123.396721][ T6274] CPU: 1 UID: 0 PID: 6274 Comm: syz.2.171 Not tainted syzkaller #0 PREEMPT(full) [ 123.396746][ T6274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.396758][ T6274] Call Trace: [ 123.396807][ T6274] [ 123.396849][ T6274] dump_stack_lvl+0xe8/0x150 [ 123.396955][ T6274] should_fail_ex+0x3eb/0x540 [ 123.397069][ T6274] ? dup_task_struct+0x52/0xa00 [ 123.397139][ T6274] should_failslab+0xa8/0x100 [ 123.397203][ T6274] ? dup_task_struct+0x52/0xa00 [ 123.397263][ T6274] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 123.397348][ T6274] ? dup_task_struct+0x52/0xa00 [ 123.397432][ T6274] dup_task_struct+0x52/0xa00 [ 123.397497][ T6274] ? _raw_spin_unlock_irq+0x23/0x50 [ 123.397555][ T6274] copy_process+0x820/0x43e0 [ 123.397690][ T6274] ? rcu_is_watching+0x16/0xb0 [ 123.397761][ T6274] ? __pfx_copy_process+0x10/0x10 [ 123.397856][ T6274] ? mutex_init_lockdep+0xdf/0x110 [ 123.397920][ T6274] vhost_task_create+0x1f9/0x380 [ 123.398012][ T6274] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 123.398077][ T6274] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 123.398137][ T6274] ? __pfx_vhost_task_create+0x10/0x10 [ 123.398236][ T6274] ? register_lock_class+0x31/0x2e0 [ 123.398364][ T6274] ? __pfx_vhost_task_fn+0x10/0x10 [ 123.398481][ T6274] ? kasan_quarantine_put+0xbb/0x1f0 [ 123.398573][ T6274] kvm_mmu_post_init_vm+0x147/0x2b0 [ 123.398645][ T6274] kvm_arch_vcpu_ioctl_run+0x7c/0x19c0 [ 123.398754][ T6274] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 123.398853][ T6274] kvm_vcpu_ioctl+0xa61/0xfd0 [ 123.398967][ T6274] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 123.399053][ T6274] ? hook_file_ioctl+0x1f2/0x600 [ 123.399189][ T6274] ? __fget_files+0x2a/0x420 [ 123.399262][ T6274] ? __fget_files+0x2a/0x420 [ 123.399326][ T6274] ? __fget_files+0x3a2/0x420 [ 123.399391][ T6274] ? __fget_files+0x2a/0x420 [ 123.399467][ T6274] ? bpf_lsm_file_ioctl+0x9/0x20 [ 123.399562][ T6274] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 123.399654][ T6274] __se_sys_ioctl+0xfc/0x170 [ 123.399768][ T6274] do_syscall_64+0x166/0x520 [ 123.399835][ T6274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.399900][ T6274] ? clear_bhb_loop+0x70/0xc0 [ 123.399976][ T6274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.400039][ T6274] RIP: 0033:0x7feae099e159 [ 123.400093][ T6274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.400143][ T6274] RSP: 002b:00007feae18d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.400198][ T6274] RAX: ffffffffffffffda RBX: 00007feae0c25fa0 RCX: 00007feae099e159 [ 123.400239][ T6274] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 123.400279][ T6274] RBP: 00007feae18d4090 R08: 0000000000000000 R09: 0000000000000000 [ 123.400299][ T6274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.400331][ T6274] R13: 00007feae0c26038 R14: 00007feae0c25fa0 R15: 00007ffc63ebee78 [ 123.400431][ T6274] [ 123.421040][ T30] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 123.909331][ T30] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 123.928255][ T30] usb 1-1: USB disconnect, device number 11 [ 124.244688][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 124.269752][ T10] usb 4-1: USB disconnect, device number 15 [ 124.336645][ T6286] capability: warning: `syz.3.174' uses deprecated v2 capabilities in a way that may be insecure [ 124.395208][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 124.402403][ T25] usb 3-1: New USB device found, idVendor=9a01, idProduct=cc31, bcdDevice=54.f6 [ 124.402487][ T25] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 124.428295][ T25] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 124.428360][ T25] usb 3-1: can't read configurations, error -61 [ 124.555808][ T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 124.704664][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 124.707125][ T25] usb 3-1: New USB device found, idVendor=9a01, idProduct=cc31, bcdDevice=54.f6 [ 124.707238][ T25] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 124.715579][ T25] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 124.717737][ T25] usb 3-1: can't read configurations, error -61 [ 124.725184][ T25] usb usb3-port1: attempt power cycle [ 125.005837][ T30] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 125.064667][ T25] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 125.085436][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 125.091491][ T25] usb 3-1: New USB device found, idVendor=9a01, idProduct=cc31, bcdDevice=54.f6 [ 125.100790][ T25] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 125.112255][ T189] usbhid 2-1:0.0: can't add hid device: -71 [ 125.112529][ T189] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 125.121041][ T189] usb 2-1: USB disconnect, device number 14 [ 125.137438][ T25] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 125.137490][ T25] usb 3-1: can't read configurations, error -61 [ 125.165330][ T30] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 125.177824][ T30] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.177864][ T30] usb 1-1: config 0 has no interface number 0 [ 125.177936][ T30] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.177968][ T30] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.177995][ T30] usb 1-1: config 0 interface 1 has no altsetting 0 [ 125.178031][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.232056][ T30] usb 1-1: config 0 descriptor?? [ 125.259137][ T6303] FAULT_INJECTION: forcing a failure. [ 125.259137][ T6303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.276304][ T6303] CPU: 0 UID: 0 PID: 6303 Comm: syz.1.181 Not tainted syzkaller #0 PREEMPT(full) [ 125.276335][ T6303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.276351][ T6303] Call Trace: [ 125.276368][ T6303] [ 125.276378][ T6303] dump_stack_lvl+0xe8/0x150 [ 125.276413][ T6303] should_fail_ex+0x3eb/0x540 [ 125.276452][ T6303] strncpy_from_user+0x36/0x2c0 [ 125.276492][ T6303] do_getname+0x77/0x250 [ 125.276522][ T6303] user_path_at+0x2a/0x160 [ 125.276554][ T6303] __se_sys_mount+0x2dc/0x420 [ 125.276585][ T6303] ? __pfx___se_sys_mount+0x10/0x10 [ 125.276620][ T6303] ? __x64_sys_mount+0x20/0xc0 [ 125.276648][ T6303] do_syscall_64+0x166/0x520 [ 125.276673][ T6303] ? trace_irq_disable+0x3b/0x140 [ 125.276704][ T6303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.276728][ T6303] ? clear_bhb_loop+0x70/0xc0 [ 125.276754][ T6303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.276778][ T6303] RIP: 0033:0x7fca4079e159 [ 125.276798][ T6303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.276817][ T6303] RSP: 002b:00007fca3e9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.276841][ T6303] RAX: ffffffffffffffda RBX: 00007fca40a25fa0 RCX: 00007fca4079e159 [ 125.276858][ T6303] RDX: 00002000000000c0 RSI: 0000200000003c40 RDI: 0000000000000000 [ 125.276873][ T6303] RBP: 00007fca3e9f6090 R08: 0000200000000000 R09: 0000000000000000 [ 125.276888][ T6303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.276902][ T6303] R13: 00007fca40a26038 R14: 00007fca40a25fa0 R15: 00007ffd3718bfd8 [ 125.276937][ T6303] [ 125.313398][ T25] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 125.359314][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 125.370429][ T25] usb 3-1: New USB device found, idVendor=9a01, idProduct=cc31, bcdDevice=54.f6 [ 125.370470][ T25] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 125.446831][ T25] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 125.446911][ T25] usb 3-1: can't read configurations, error -61 [ 125.458033][ T25] usb usb3-port1: unable to enumerate USB device [ 125.522380][ T30] usbhid 1-1:0.1: can't add hid device: -71 [ 125.528657][ T30] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 125.542529][ T30] usb 1-1: USB disconnect, device number 12 [ 125.814750][ T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 125.964246][ T6309] fuse: Bad value for 'user_id' [ 125.964293][ T6309] fuse: Bad value for 'user_id' [ 125.969597][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 125.971481][ T25] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 125.983583][ T6309] overlay: ./file0 is not a directory [ 125.999644][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.999692][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.999747][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.034062][ T25] usb 2-1: config 0 descriptor?? [ 126.196917][ T6315] FAULT_INJECTION: forcing a failure. [ 126.196917][ T6315] name failslab, interval 1, probability 0, space 0, times 0 [ 126.196977][ T6315] CPU: 0 UID: 0 PID: 6315 Comm: syz.0.185 Not tainted syzkaller #0 PREEMPT(full) [ 126.197002][ T6315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.197016][ T6315] Call Trace: [ 126.197025][ T6315] [ 126.197033][ T6315] dump_stack_lvl+0xe8/0x150 [ 126.197164][ T6315] should_fail_ex+0x3eb/0x540 [ 126.197258][ T6315] should_failslab+0xa8/0x100 [ 126.197321][ T6315] __kmalloc_cache_noprof+0xa3/0x600 [ 126.197396][ T6315] ? rcu_is_watching+0x16/0xb0 [ 126.197441][ T6315] ? vhost_task_create+0x123/0x380 [ 126.197523][ T6315] ? vhost_task_create+0x123/0x380 [ 126.197625][ T6315] vhost_task_create+0x123/0x380 [ 126.197698][ T6315] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 126.197759][ T6315] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 126.197833][ T6315] ? __pfx_vhost_task_create+0x10/0x10 [ 126.197925][ T6315] ? register_lock_class+0x31/0x2e0 [ 126.198015][ T6315] ? __pfx_vhost_task_fn+0x10/0x10 [ 126.198124][ T6315] ? kasan_quarantine_put+0xbb/0x1f0 [ 126.198226][ T6315] kvm_mmu_post_init_vm+0x147/0x2b0 [ 126.198306][ T6315] kvm_arch_vcpu_ioctl_run+0x7c/0x19c0 [ 126.198423][ T6315] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 126.198526][ T6315] kvm_vcpu_ioctl+0xa61/0xfd0 [ 126.198636][ T6315] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 126.198728][ T6315] ? hook_file_ioctl+0x1f2/0x600 [ 126.198888][ T6315] ? __fget_files+0x2a/0x420 [ 126.198969][ T6315] ? __fget_files+0x2a/0x420 [ 126.199042][ T6315] ? __fget_files+0x3a2/0x420 [ 126.199113][ T6315] ? __fget_files+0x2a/0x420 [ 126.199188][ T6315] ? bpf_lsm_file_ioctl+0x9/0x20 [ 126.199269][ T6315] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 126.199355][ T6315] __se_sys_ioctl+0xfc/0x170 [ 126.199433][ T6315] do_syscall_64+0x166/0x520 [ 126.199502][ T6315] ? trace_irq_disable+0x3b/0x140 [ 126.199586][ T6315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.199642][ T6315] ? clear_bhb_loop+0x70/0xc0 [ 126.199715][ T6315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.199770][ T6315] RIP: 0033:0x7f199059e159 [ 126.199830][ T6315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.199874][ T6315] RSP: 002b:00007f19913e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.199936][ T6315] RAX: ffffffffffffffda RBX: 00007f1990825fa0 RCX: 00007f199059e159 [ 126.199978][ T6315] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 126.200019][ T6315] RBP: 00007f19913e2090 R08: 0000000000000000 R09: 0000000000000000 [ 126.200066][ T6315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.200108][ T6315] R13: 00007f1990826038 R14: 00007f1990825fa0 R15: 00007fff896b6ff8 [ 126.200202][ T6315] [ 126.621779][ T25] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 126.630124][ T25] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 126.819731][ T25] ft260 0003:0403:6030.0009: chip code: 0000 0000 [ 126.834730][ T189] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 126.985609][ T189] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 126.996088][ T189] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.996168][ T189] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 126.996193][ T189] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 126.996254][ T189] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.996402][ T189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.050109][ T25] ft260 0003:0403:6030.0009: failed to retrieve system status [ 127.050522][ T25] ft260 0003:0403:6030.0009: probe with driver ft260 failed with error -32 [ 127.221055][ T6322] netlink: 'syz.0.188': attribute type 29 has an invalid length. [ 127.223694][ T6322] netlink: 'syz.0.188': attribute type 29 has an invalid length. [ 127.634038][ T189] gud 1-1:1.0: Failed to add properties (error=-5) [ 127.642731][ T189] gud 1-1:1.0: probe with driver gud failed with error -5 [ 127.804766][ T5777] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 127.843873][ T6322] FAULT_INJECTION: forcing a failure. [ 127.843873][ T6322] name failslab, interval 1, probability 0, space 0, times 0 [ 127.843930][ T6322] CPU: 0 UID: 0 PID: 6322 Comm: syz.0.188 Not tainted syzkaller #0 PREEMPT(full) [ 127.843956][ T6322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.843999][ T6322] Call Trace: [ 127.844032][ T6322] [ 127.844062][ T6322] dump_stack_lvl+0xe8/0x150 [ 127.844188][ T6322] should_fail_ex+0x3eb/0x540 [ 127.844289][ T6322] should_failslab+0xa8/0x100 [ 127.844359][ T6322] ? create_new_namespaces+0x33/0x6b0 [ 127.844424][ T6322] kmem_cache_alloc_noprof+0xa1/0x600 [ 127.844506][ T6322] ? do_raw_spin_lock+0x12b/0x2f0 [ 127.844581][ T6322] ? create_new_namespaces+0x33/0x6b0 [ 127.844681][ T6322] create_new_namespaces+0x33/0x6b0 [ 127.844755][ T6322] ? bpf_lsm_capable+0x9/0x20 [ 127.844823][ T6322] ? security_capable+0x7e/0x2c0 [ 127.844936][ T6322] unshare_nsproxy_namespaces+0x149/0x190 [ 127.845012][ T6322] ksys_unshare+0x5a7/0x950 [ 127.845111][ T6322] ? __pfx_ksys_unshare+0x10/0x10 [ 127.845198][ T6322] ? __pfx_ksys_write+0x10/0x10 [ 127.845296][ T6322] __x64_sys_unshare+0x38/0x50 [ 127.845379][ T6322] do_syscall_64+0x166/0x520 [ 127.845443][ T6322] ? trace_irq_disable+0x3b/0x140 [ 127.845530][ T6322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.845608][ T6322] ? clear_bhb_loop+0x70/0xc0 [ 127.845697][ T6322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.845752][ T6322] RIP: 0033:0x7f199059e159 [ 127.845810][ T6322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.845856][ T6322] RSP: 002b:00007f19913e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 127.845929][ T6322] RAX: ffffffffffffffda RBX: 00007f1990825fa0 RCX: 00007f199059e159 [ 127.845973][ T6322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002040400 [ 127.846014][ T6322] RBP: 00007f1990635024 R08: 0000000000000000 R09: 0000000000000000 [ 127.846055][ T6322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.846088][ T6322] R13: 00007f1990826038 R14: 00007f1990825fa0 R15: 00007fff896b6ff8 [ 127.846179][ T6322] [ 128.041477][ T189] usb 1-1: USB disconnect, device number 13 [ 128.075445][ T5777] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 128.075662][ T30] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 128.095146][ T5777] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 128.103489][ T5777] usb 3-1: config 0 has no interface number 0 [ 128.109752][ T5777] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 128.109786][ T5777] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.109811][ T5777] usb 3-1: config 0 interface 1 has no altsetting 0 [ 128.109847][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.149562][ T5777] usb 3-1: config 0 descriptor?? [ 128.234743][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 128.240891][ T30] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 128.247577][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.247673][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.247783][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.280870][ T30] usb 4-1: config 0 descriptor?? [ 128.369366][ T5777] usbhid 3-1:0.1: can't add hid device: -71 [ 128.369743][ T5777] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 128.387215][ T5777] usb 3-1: USB disconnect, device number 20 [ 128.588463][ T189] usb 2-1: USB disconnect, device number 15 [ 128.701231][ T30] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 128.701301][ T30] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 128.900938][ T30] ft260 0003:0403:6030.000A: chip code: 0000 0000 [ 129.102189][ T30] ft260 0003:0403:6030.000A: failed to retrieve system status [ 129.102546][ T30] ft260 0003:0403:6030.000A: probe with driver ft260 failed with error -5 [ 129.308958][ T30] usb 4-1: USB disconnect, device number 16 [ 129.494670][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 129.545330][ T6375] FAULT_INJECTION: forcing a failure. [ 129.545330][ T6375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.545395][ T6375] CPU: 1 UID: 0 PID: 6375 Comm: syz.0.209 Not tainted syzkaller #0 PREEMPT(full) [ 129.545420][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.545434][ T6375] Call Trace: [ 129.545470][ T6375] [ 129.545493][ T6375] dump_stack_lvl+0xe8/0x150 [ 129.545596][ T6375] should_fail_ex+0x3eb/0x540 [ 129.545713][ T6375] _copy_from_user+0x2d/0xb0 [ 129.545778][ T6375] __sys_sendto+0x2a9/0x5a0 [ 129.545871][ T6375] ? __pfx___sys_sendto+0x10/0x10 [ 129.546023][ T6375] ? do_user_addr_fault+0xc4c/0x1340 [ 129.546119][ T6375] __x64_sys_sendto+0xde/0x100 [ 129.546202][ T6375] do_syscall_64+0x166/0x520 [ 129.546267][ T6375] ? trace_irq_disable+0x3b/0x140 [ 129.546351][ T6375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.546414][ T6375] ? clear_bhb_loop+0x70/0xc0 [ 129.546486][ T6375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.546543][ T6375] RIP: 0033:0x7f199055e98e [ 129.546595][ T6375] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 129.546645][ T6375] RSP: 002b:00007f19913e0e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 129.546726][ T6375] RAX: ffffffffffffffda RBX: 00007f19913e26c0 RCX: 00007f199055e98e [ 129.546768][ T6375] RDX: 0000000000000024 RSI: 00007f19913e1000 RDI: 0000000000000004 [ 129.546807][ T6375] RBP: 0000000000000000 R08: 00007f19913e0f04 R09: 000000000000000c [ 129.546847][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 129.546879][ T6375] R13: 00007f19913e0f58 R14: 00007f19913e1000 R15: 0000000000000000 [ 129.546967][ T6375] [ 129.744629][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 129.750462][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 129.761494][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.772588][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.782520][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.798878][ T10] usb 3-1: config 0 descriptor?? [ 130.233169][ T10] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 130.241982][ T10] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 130.250312][ T6394] FAULT_INJECTION: forcing a failure. [ 130.250312][ T6394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.252519][ T6394] CPU: 1 UID: 0 PID: 6394 Comm: syz.3.217 Not tainted syzkaller #0 PREEMPT(full) [ 130.252608][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.252649][ T6394] Call Trace: [ 130.252685][ T6394] [ 130.252716][ T6394] dump_stack_lvl+0xe8/0x150 [ 130.252811][ T6394] should_fail_ex+0x3eb/0x540 [ 130.252896][ T6394] _copy_from_iter+0x1d3/0x1660 [ 130.253031][ T6394] ? __pfx__copy_from_iter+0x10/0x10 [ 130.253114][ T6394] ? trace_kmalloc+0x2a/0xf0 [ 130.253198][ T6394] ? __kmalloc_noprof+0x38c/0x720 [ 130.253281][ T6394] ? __kmalloc_noprof+0x1ab/0x720 [ 130.253354][ T6394] ? kernfs_fop_write_iter+0x157/0x540 [ 130.253438][ T6394] kernfs_fop_write_iter+0x19a/0x540 [ 130.253500][ T6394] vfs_write+0x612/0xba0 [ 130.253597][ T6394] ? __pfx_vfs_write+0x10/0x10 [ 130.253688][ T6394] ? __fget_files+0x2a/0x420 [ 130.253777][ T6394] ksys_write+0x150/0x270 [ 130.253857][ T6394] ? __pfx_ksys_write+0x10/0x10 [ 130.253963][ T6394] do_syscall_64+0x166/0x520 [ 130.254042][ T6394] ? trace_irq_disable+0x3b/0x140 [ 130.254128][ T6394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.254189][ T6394] ? clear_bhb_loop+0x70/0xc0 [ 130.254264][ T6394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.254331][ T6394] RIP: 0033:0x7f62ce39e159 [ 130.254393][ T6394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.254439][ T6394] RSP: 002b:00007f62cf1c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.254506][ T6394] RAX: ffffffffffffffda RBX: 00007f62ce625fa0 RCX: 00007f62ce39e159 [ 130.254557][ T6394] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 130.254597][ T6394] RBP: 00007f62cf1c0090 R08: 0000000000000000 R09: 0000000000000000 [ 130.254630][ T6394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.254669][ T6394] R13: 00007f62ce626038 R14: 00007f62ce625fa0 R15: 00007fffd0644768 [ 130.254753][ T6394] [ 130.265377][ T30] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 130.429948][ T30] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 130.437255][ T30] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.437331][ T30] usb 2-1: config 0 has no interface number 0 [ 130.437439][ T30] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 130.437521][ T30] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.437578][ T30] usb 2-1: config 0 interface 1 has no altsetting 0 [ 130.437665][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.449560][ T10] ft260 0003:0403:6030.000B: chip code: 0000 0000 [ 130.513373][ T30] usb 2-1: config 0 descriptor?? [ 130.587248][ T6396] netlink: 44 bytes leftover after parsing attributes in process `syz.3.219'. [ 130.597102][ T6396] ksmbd: Unknown IPC event: 0, ignore. [ 130.606552][ T6396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.219'. [ 130.667074][ T10] ft260 0003:0403:6030.000B: failed to retrieve system status [ 130.668015][ T10] ft260 0003:0403:6030.000B: probe with driver ft260 failed with error -32 [ 130.746966][ T30] usbhid 2-1:0.1: can't add hid device: -71 [ 130.747082][ T30] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 130.771156][ T30] usb 2-1: USB disconnect, device number 16 [ 131.094708][ T5777] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 131.254808][ T5777] usb 1-1: Using ep0 maxpacket: 32 [ 131.257363][ T5777] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 131.261483][ T5777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.261583][ T5777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.261696][ T5777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.293638][ T5777] usb 1-1: config 0 descriptor?? [ 131.597781][ T6416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.227'. [ 131.738518][ T5777] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 131.738580][ T5777] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 131.794707][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 131.938106][ T5777] ft260 0003:0403:6030.000C: chip code: 0000 0000 [ 131.955490][ T10] usb 2-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 131.958332][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.962511][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 131.962567][ T10] usb 2-1: Product: syz [ 131.962605][ T10] usb 2-1: Manufacturer: syz [ 131.998018][ T10] navman 2-1:1.0: navman converter detected [ 132.006548][ T10] usb 2-1: navman converter now attached to ttyUSB0 [ 132.129318][ T6427] ======================================================= [ 132.129318][ T6427] WARNING: The mand mount option has been deprecated and [ 132.129318][ T6427] and is ignored by this kernel. Remove the mand [ 132.129318][ T6427] option from the mount to silence this warning. [ 132.129318][ T6427] ======================================================= [ 132.151590][ T6427] overlay: ./file0 is not a directory [ 132.171974][ T5777] ft260 0003:0403:6030.000C: failed to retrieve system status [ 132.180128][ T5777] ft260 0003:0403:6030.000C: probe with driver ft260 failed with error -5 [ 132.201469][ T10] usb 2-1: USB disconnect, device number 17 [ 132.220021][ T10] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 132.221361][ T10] navman 2-1:1.0: device disconnected [ 132.270936][ T30] usb 3-1: USB disconnect, device number 21 [ 132.379059][ T5721] usb 1-1: USB disconnect, device number 14 [ 132.574719][ T5777] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 132.587881][ T6431] FAULT_INJECTION: forcing a failure. [ 132.587881][ T6431] name failslab, interval 1, probability 0, space 0, times 0 [ 132.587952][ T6431] CPU: 1 UID: 0 PID: 6431 Comm: syz.2.232 Not tainted syzkaller #0 PREEMPT(full) [ 132.587977][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.587991][ T6431] Call Trace: [ 132.588032][ T6431] [ 132.588064][ T6431] dump_stack_lvl+0xe8/0x150 [ 132.588174][ T6431] should_fail_ex+0x3eb/0x540 [ 132.588317][ T6431] should_failslab+0xa8/0x100 [ 132.588382][ T6431] __kmalloc_noprof+0xfe/0x720 [ 132.588473][ T6431] ? trace_kmalloc+0x2a/0xf0 [ 132.588566][ T6431] ? tomoyo_encode+0x2ad/0x570 [ 132.588620][ T6431] ? tomoyo_encode+0x2ad/0x570 [ 132.588693][ T6431] tomoyo_encode+0x2ad/0x570 [ 132.588760][ T6431] tomoyo_realpath_from_path+0x5fa/0x640 [ 132.588852][ T6431] ? tomoyo_path_number_perm+0x219/0x5f0 [ 132.588937][ T6431] tomoyo_path_number_perm+0x246/0x5f0 [ 132.589020][ T6431] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 132.589102][ T6431] ? __lock_acquire+0x6df/0x2e50 [ 132.589235][ T6431] ? hook_file_ioctl+0x1f2/0x600 [ 132.589367][ T6431] ? __fget_files+0x2a/0x420 [ 132.589435][ T6431] ? __fget_files+0x2a/0x420 [ 132.589511][ T6431] ? __fget_files+0x3a2/0x420 [ 132.589588][ T6431] ? __fget_files+0x2a/0x420 [ 132.589669][ T6431] security_file_ioctl+0xc3/0x2a0 [ 132.589755][ T6431] __se_sys_ioctl+0x47/0x170 [ 132.589848][ T6431] do_syscall_64+0x166/0x520 [ 132.589909][ T6431] ? trace_irq_disable+0x3b/0x140 [ 132.589991][ T6431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.590052][ T6431] ? clear_bhb_loop+0x70/0xc0 [ 132.590116][ T6431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.590178][ T6431] RIP: 0033:0x7feae099e159 [ 132.590241][ T6431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.590291][ T6431] RSP: 002b:00007feae18d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.590353][ T6431] RAX: ffffffffffffffda RBX: 00007feae0c25fa0 RCX: 00007feae099e159 [ 132.590394][ T6431] RDX: 00002000000001c0 RSI: 00000000c0606610 RDI: 0000000000000003 [ 132.590436][ T6431] RBP: 00007feae18d4090 R08: 0000000000000000 R09: 0000000000000000 [ 132.590468][ T6431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.590500][ T6431] R13: 00007feae0c26038 R14: 00007feae0c25fa0 R15: 00007ffc63ebee78 [ 132.590590][ T6431] [ 132.592686][ T6431] ERROR: Out of memory at tomoyo_realpath_from_path. [ 132.736254][ T5777] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 132.784972][ T5777] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 132.785055][ T5777] usb 4-1: config 0 has no interface number 0 [ 132.785174][ T5777] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.785257][ T5777] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.785319][ T5777] usb 4-1: config 0 interface 1 has no altsetting 0 [ 132.785409][ T5777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.809647][ T5777] usb 4-1: config 0 descriptor?? [ 132.895156][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.895220][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.074368][ T5777] usbhid 4-1:0.1: can't add hid device: -71 [ 133.074864][ T5777] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 133.099340][ T5777] usb 4-1: USB disconnect, device number 17 [ 133.292701][ T6446] FAULT_INJECTION: forcing a failure. [ 133.292701][ T6446] name failslab, interval 1, probability 0, space 0, times 0 [ 133.308948][ T6446] CPU: 0 UID: 0 PID: 6446 Comm: syz.0.238 Not tainted syzkaller #0 PREEMPT(full) [ 133.308977][ T6446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.308990][ T6446] Call Trace: [ 133.308998][ T6446] [ 133.309007][ T6446] dump_stack_lvl+0xe8/0x150 [ 133.309059][ T6446] should_fail_ex+0x3eb/0x540 [ 133.309096][ T6446] should_failslab+0xa8/0x100 [ 133.309120][ T6446] __kmalloc_noprof+0xfe/0x720 [ 133.309152][ T6446] ? tomoyo_encode+0x2ad/0x570 [ 133.309173][ T6446] ? tomoyo_encode+0x2ad/0x570 [ 133.309201][ T6446] tomoyo_encode+0x2ad/0x570 [ 133.309230][ T6446] tomoyo_realpath_from_path+0x5fa/0x640 [ 133.309264][ T6446] ? tomoyo_path_number_perm+0x219/0x5f0 [ 133.309292][ T6446] tomoyo_path_number_perm+0x246/0x5f0 [ 133.309322][ T6446] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 133.309349][ T6446] ? __lock_acquire+0x6df/0x2e50 [ 133.309392][ T6446] ? hook_file_ioctl+0x1f2/0x600 [ 133.309440][ T6446] ? __fget_files+0x2a/0x420 [ 133.309470][ T6446] ? __fget_files+0x2a/0x420 [ 133.309493][ T6446] ? __fget_files+0x3a2/0x420 [ 133.309517][ T6446] ? __fget_files+0x2a/0x420 [ 133.309546][ T6446] security_file_ioctl+0xc3/0x2a0 [ 133.309577][ T6446] __se_sys_ioctl+0x47/0x170 [ 133.309619][ T6446] do_syscall_64+0x166/0x520 [ 133.309641][ T6446] ? trace_irq_disable+0x3b/0x140 [ 133.309670][ T6446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.309690][ T6446] ? clear_bhb_loop+0x70/0xc0 [ 133.309714][ T6446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.309733][ T6446] RIP: 0033:0x7f199059e159 [ 133.309752][ T6446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.309770][ T6446] RSP: 002b:00007f19913e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.309792][ T6446] RAX: ffffffffffffffda RBX: 00007f1990825fa0 RCX: 00007f199059e159 [ 133.309807][ T6446] RDX: 0000200000000240 RSI: 000000000000890b RDI: 0000000000000007 [ 133.309820][ T6446] RBP: 00007f19913e2090 R08: 0000000000000000 R09: 0000000000000000 [ 133.309833][ T6446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.309845][ T6446] R13: 00007f1990826038 R14: 00007f1990825fa0 R15: 00007fff896b6ff8 [ 133.309876][ T6446] [ 133.450501][ T6446] ERROR: Out of memory at tomoyo_realpath_from_path. [ 133.501623][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 133.665469][ T10] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 133.681075][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.681150][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 133.681189][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 133.681218][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.681266][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.754370][ T6453] FAULT_INJECTION: forcing a failure. [ 133.754370][ T6453] name failslab, interval 1, probability 0, space 0, times 0 [ 133.754424][ T6453] CPU: 1 UID: 0 PID: 6453 Comm: syz.3.242 Not tainted syzkaller #0 PREEMPT(full) [ 133.754449][ T6453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.754464][ T6453] Call Trace: [ 133.754472][ T6453] [ 133.754480][ T6453] dump_stack_lvl+0xe8/0x150 [ 133.754515][ T6453] should_fail_ex+0x3eb/0x540 [ 133.754677][ T6453] should_failslab+0xa8/0x100 [ 133.754756][ T6453] __kmalloc_noprof+0xfe/0x720 [ 133.754841][ T6453] ? tomoyo_encode+0x2ad/0x570 [ 133.754901][ T6453] ? tomoyo_encode+0x2ad/0x570 [ 133.754976][ T6453] tomoyo_encode+0x2ad/0x570 [ 133.755051][ T6453] tomoyo_realpath_from_path+0x5fa/0x640 [ 133.755130][ T6453] ? tomoyo_path_number_perm+0x219/0x5f0 [ 133.755212][ T6453] tomoyo_path_number_perm+0x246/0x5f0 [ 133.755303][ T6453] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 133.755386][ T6453] ? __lock_acquire+0x6df/0x2e50 [ 133.755513][ T6453] ? hook_file_ioctl+0x1f2/0x600 [ 133.755669][ T6453] ? __fget_files+0x2a/0x420 [ 133.755727][ T6453] ? __fget_files+0x2a/0x420 [ 133.755780][ T6453] ? __fget_files+0x3a2/0x420 [ 133.755848][ T6453] ? __fget_files+0x2a/0x420 [ 133.755920][ T6453] security_file_ioctl+0xc3/0x2a0 [ 133.756000][ T6453] __se_sys_ioctl+0x47/0x170 [ 133.756109][ T6453] do_syscall_64+0x166/0x520 [ 133.756171][ T6453] ? trace_irq_disable+0x3b/0x140 [ 133.756243][ T6453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.756300][ T6453] ? clear_bhb_loop+0x70/0xc0 [ 133.756369][ T6453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.756422][ T6453] RIP: 0033:0x7f62ce39e159 [ 133.756473][ T6453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.756524][ T6453] RSP: 002b:00007f62cf1c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.756585][ T6453] RAX: ffffffffffffffda RBX: 00007f62ce625fa0 RCX: 00007f62ce39e159 [ 133.756632][ T6453] RDX: 0000000000000000 RSI: 0000000040086610 RDI: 0000000000000003 [ 133.756664][ T6453] RBP: 00007f62cf1c0090 R08: 0000000000000000 R09: 0000000000000000 [ 133.756702][ T6453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.756732][ T6453] R13: 00007f62ce626038 R14: 00007f62ce625fa0 R15: 00007fffd0644768 [ 133.756811][ T6453] [ 133.797652][ T6453] ERROR: Out of memory at tomoyo_realpath_from_path. [ 133.883893][ T189] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 134.023629][ T6445] netlink: 'syz.1.237': attribute type 29 has an invalid length. [ 134.033250][ T6445] netlink: 'syz.1.237': attribute type 29 has an invalid length. [ 134.174675][ T189] usb 1-1: Using ep0 maxpacket: 32 [ 134.180633][ T189] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 134.192740][ T189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.192810][ T189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.192942][ T189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.231306][ T189] usb 1-1: config 0 descriptor?? [ 134.246356][ T6460] netlink: 20 bytes leftover after parsing attributes in process `syz.3.245'. [ 134.285115][ T25] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 134.434713][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 134.437053][ T25] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 134.440051][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.440082][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.440119][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.469073][ T25] usb 3-1: config 0 descriptor?? [ 134.470940][ T10] gud 2-1:1.0: Failed to add properties (error=-5) [ 134.470969][ T10] gud 2-1:1.0: probe with driver gud failed with error -5 [ 134.677605][ T6445] FAULT_INJECTION: forcing a failure. [ 134.677605][ T6445] name failslab, interval 1, probability 0, space 0, times 0 [ 134.690447][ T6445] CPU: 0 UID: 0 PID: 6445 Comm: syz.1.237 Not tainted syzkaller #0 PREEMPT(full) [ 134.690478][ T6445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.690506][ T6445] Call Trace: [ 134.690515][ T6445] [ 134.690522][ T6445] dump_stack_lvl+0xe8/0x150 [ 134.690550][ T6445] should_fail_ex+0x3eb/0x540 [ 134.690609][ T6445] should_failslab+0xa8/0x100 [ 134.690633][ T6445] ? create_new_namespaces+0x33/0x6b0 [ 134.690658][ T6445] kmem_cache_alloc_noprof+0xa1/0x600 [ 134.690689][ T6445] ? do_raw_spin_lock+0x12b/0x2f0 [ 134.690710][ T6445] ? create_new_namespaces+0x33/0x6b0 [ 134.690754][ T6445] create_new_namespaces+0x33/0x6b0 [ 134.690784][ T6445] ? bpf_lsm_capable+0x9/0x20 [ 134.690814][ T6445] ? security_capable+0x7e/0x2c0 [ 134.690866][ T6445] unshare_nsproxy_namespaces+0x149/0x190 [ 134.690913][ T6445] ksys_unshare+0x5a7/0x950 [ 134.690949][ T6445] ? __pfx_ksys_unshare+0x10/0x10 [ 134.690976][ T6445] ? rcu_is_watching+0x16/0xb0 [ 134.691011][ T6445] __x64_sys_unshare+0x38/0x50 [ 134.691032][ T6445] do_syscall_64+0x166/0x520 [ 134.691050][ T6445] ? trace_irq_disable+0x3b/0x140 [ 134.691098][ T6445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.691120][ T6445] ? clear_bhb_loop+0x70/0xc0 [ 134.691146][ T6445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.691169][ T6445] RIP: 0033:0x7fca4079e159 [ 134.691184][ T6445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.691197][ T6445] RSP: 002b:00007fca3e9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 134.691230][ T6445] RAX: ffffffffffffffda RBX: 00007fca40a25fa0 RCX: 00007fca4079e159 [ 134.691248][ T6445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002040400 [ 134.691263][ T6445] RBP: 00007fca40835024 R08: 0000000000000000 R09: 0000000000000000 [ 134.691277][ T6445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.691290][ T6445] R13: 00007fca40a26038 R14: 00007fca40a25fa0 R15: 00007ffd3718bfd8 [ 134.691325][ T6445] [ 134.797097][ T30] usb 2-1: USB disconnect, device number 18 [ 134.917534][ T189] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 134.924687][ T189] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 134.933185][ T25] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 134.933246][ T25] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 134.985640][ T189] ft260 0003:0403:6030.000D: chip code: 0000 0000 [ 135.113257][ T25] ft260 0003:0403:6030.000E: chip code: 0000 0000 [ 135.188896][ T189] ft260 0003:0403:6030.000D: failed to retrieve system status [ 135.198065][ T189] ft260 0003:0403:6030.000D: probe with driver ft260 failed with error -32 [ 135.314036][ T25] ft260 0003:0403:6030.000E: failed to retrieve system status [ 135.317401][ T25] ft260 0003:0403:6030.000E: probe with driver ft260 failed with error -5 [ 135.524532][ T30] usb 3-1: USB disconnect, device number 22 [ 136.066275][ T5704] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 136.225389][ T5704] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 136.238071][ T5704] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.246394][ T5704] usb 4-1: config 0 has no interface number 0 [ 136.246446][ T5704] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.246476][ T5704] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.246502][ T5704] usb 4-1: config 0 interface 1 has no altsetting 0 [ 136.246539][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.295543][ T5704] usb 4-1: config 0 descriptor?? [ 136.305214][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.254'. [ 136.393504][ T6496] netlink: 'syz.1.254': attribute type 10 has an invalid length. [ 136.520641][ T5704] usbhid 4-1:0.1: can't add hid device: -71 [ 136.520772][ T5704] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 136.547298][ T5704] usb 4-1: USB disconnect, device number 18 [ 136.675717][ T25] usb 1-1: USB disconnect, device number 15 [ 136.707394][ T6505] FAULT_INJECTION: forcing a failure. [ 136.707394][ T6505] name failslab, interval 1, probability 0, space 0, times 0 [ 136.720391][ T6505] CPU: 0 UID: 0 PID: 6505 Comm: syz.1.256 Not tainted syzkaller #0 PREEMPT(full) [ 136.720420][ T6505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.720435][ T6505] Call Trace: [ 136.720443][ T6505] [ 136.720477][ T6505] dump_stack_lvl+0xe8/0x150 [ 136.720511][ T6505] should_fail_ex+0x3eb/0x540 [ 136.720547][ T6505] ? __alloc_skb+0x1db/0x7a0 [ 136.720573][ T6505] should_failslab+0xa8/0x100 [ 136.720596][ T6505] ? __alloc_skb+0x1db/0x7a0 [ 136.720619][ T6505] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 136.720648][ T6505] ? __alloc_skb+0x18d/0x7a0 [ 136.720673][ T6505] ? __alloc_skb+0x1db/0x7a0 [ 136.720705][ T6505] __alloc_skb+0x1db/0x7a0 [ 136.720752][ T6505] netlink_sendmsg+0x5d4/0xb40 [ 136.720796][ T6505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.720840][ T6505] ? apparmor_socket_sendmsg+0x98/0x360 [ 136.720881][ T6505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.720914][ T6505] sock_sendmsg_nosec+0x13a/0x180 [ 136.720940][ T6505] ____sys_sendmsg+0x54e/0x850 [ 136.720976][ T6505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.721014][ T6505] ? import_iovec+0x73/0xa0 [ 136.721041][ T6505] ___sys_sendmsg+0x2a5/0x360 [ 136.721068][ T6505] ? __lock_acquire+0x6df/0x2e50 [ 136.721107][ T6505] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.721182][ T6505] ? __fget_files+0x2a/0x420 [ 136.721206][ T6505] ? __fget_files+0x3a2/0x420 [ 136.721240][ T6505] __x64_sys_sendmsg+0x1b1/0x290 [ 136.721271][ T6505] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 136.721317][ T6505] do_syscall_64+0x166/0x520 [ 136.721341][ T6505] ? trace_irq_disable+0x3b/0x140 [ 136.721372][ T6505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.721394][ T6505] ? clear_bhb_loop+0x70/0xc0 [ 136.721420][ T6505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.721442][ T6505] RIP: 0033:0x7fca4079e159 [ 136.721462][ T6505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.721480][ T6505] RSP: 002b:00007fca3e9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.721504][ T6505] RAX: ffffffffffffffda RBX: 00007fca40a25fa0 RCX: 00007fca4079e159 [ 136.721520][ T6505] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 136.721534][ T6505] RBP: 00007fca3e9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 136.721548][ T6505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.721561][ T6505] R13: 00007fca40a26038 R14: 00007fca40a25fa0 R15: 00007ffd3718bfd8 [ 136.721594][ T6505] [ 137.235014][ T5704] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 137.354854][ T5721] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 137.395889][ T5704] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 137.406857][ T5704] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.419395][ T5704] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.419463][ T5704] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 137.419494][ T5704] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.419541][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.509252][ T5721] usb 2-1: unable to get BOS descriptor or descriptor too short [ 137.509330][ T5721] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 137.512398][ T5721] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.512525][ T5721] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.518533][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.518561][ T5721] usb 2-1: Product: syz [ 137.518578][ T5721] usb 2-1: Manufacturer: syz [ 137.518593][ T5721] usb 2-1: SerialNumber: syz [ 137.569647][ T5721] usb 2-1: selecting invalid altsetting 1 [ 137.580724][ T5721] usb 2-1: unit 6 not found! [ 137.614675][ T189] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 137.678325][ T6507] netlink: 'syz.0.257': attribute type 29 has an invalid length. [ 137.688125][ T6507] netlink: 'syz.0.257': attribute type 29 has an invalid length. [ 137.722295][ T5721] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 137.764648][ T189] usb 3-1: Using ep0 maxpacket: 32 [ 137.773752][ T189] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 137.784365][ T189] usb 3-1: config 0 interface 0 has no altsetting 0 [ 137.784425][ T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.806009][ T189] usb 3-1: config 0 descriptor?? [ 137.827866][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.100444][ T5704] gud 1-1:1.0: Failed to add properties (error=-5) [ 138.100504][ T5704] gud 1-1:1.0: probe with driver gud failed with error -5 [ 138.144818][ T5794] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 138.223368][ T189] logitech 0003:046D:C295.000F: unknown main item tag 0x6 [ 138.223583][ T189] logitech 0003:046D:C295.000F: ignoring exceeding usage max [ 138.241088][ T189] logitech 0003:046D:C295.000F: hidraw0: USB HID v0.81 Device [HID 046d:c295] on usb-dummy_hcd.2-1/input0 [ 138.241164][ T189] logitech 0003:046D:C295.000F: no inputs found [ 138.294724][ T5794] usb 4-1: Using ep0 maxpacket: 32 [ 138.295534][ T5794] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 138.298996][ T5794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.299089][ T5794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.299201][ T5794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.336881][ T5794] usb 4-1: config 0 descriptor?? [ 138.353684][ T6507] FAULT_INJECTION: forcing a failure. [ 138.353684][ T6507] name failslab, interval 1, probability 0, space 0, times 0 [ 138.353747][ T6507] CPU: 0 UID: 0 PID: 6507 Comm: syz.0.257 Not tainted syzkaller #0 PREEMPT(full) [ 138.353774][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.353834][ T6507] Call Trace: [ 138.353865][ T6507] [ 138.353894][ T6507] dump_stack_lvl+0xe8/0x150 [ 138.354010][ T6507] should_fail_ex+0x3eb/0x540 [ 138.354126][ T6507] should_failslab+0xa8/0x100 [ 138.354194][ T6507] ? create_new_namespaces+0x33/0x6b0 [ 138.354283][ T6507] kmem_cache_alloc_noprof+0xa1/0x600 [ 138.354352][ T6507] ? do_raw_spin_lock+0x12b/0x2f0 [ 138.354428][ T6507] ? create_new_namespaces+0x33/0x6b0 [ 138.354512][ T6507] create_new_namespaces+0x33/0x6b0 [ 138.354587][ T6507] ? bpf_lsm_capable+0x9/0x20 [ 138.354655][ T6507] ? security_capable+0x7e/0x2c0 [ 138.354767][ T6507] unshare_nsproxy_namespaces+0x149/0x190 [ 138.354858][ T6507] ksys_unshare+0x5a7/0x950 [ 138.354953][ T6507] ? __pfx_ksys_unshare+0x10/0x10 [ 138.355029][ T6507] ? rcu_is_watching+0x16/0xb0 [ 138.355130][ T6507] __x64_sys_unshare+0x38/0x50 [ 138.355204][ T6507] do_syscall_64+0x166/0x520 [ 138.355283][ T6507] ? trace_irq_disable+0x3b/0x140 [ 138.355385][ T6507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.355459][ T6507] ? clear_bhb_loop+0x70/0xc0 [ 138.355535][ T6507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.355597][ T6507] RIP: 0033:0x7f199059e159 [ 138.355651][ T6507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.355696][ T6507] RSP: 002b:00007f19913e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 138.355767][ T6507] RAX: ffffffffffffffda RBX: 00007f1990825fa0 RCX: 00007f199059e159 [ 138.355809][ T6507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002040400 [ 138.355852][ T6507] RBP: 00007f1990635024 R08: 0000000000000000 R09: 0000000000000000 [ 138.355892][ T6507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.355932][ T6507] R13: 00007f1990826038 R14: 00007f1990825fa0 R15: 00007fff896b6ff8 [ 138.356019][ T6507] [ 138.440203][ T189] usb 1-1: USB disconnect, device number 16 [ 138.598188][ T25] usb 3-1: USB disconnect, device number 23 [ 138.813547][ T5794] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 138.813610][ T5794] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 139.012628][ T5794] ft260 0003:0403:6030.0010: chip code: 0000 0000 [ 139.106868][ T6540] sd 0:0:1:0: device reset [ 139.215615][ T5794] ft260 0003:0403:6030.0010: failed to retrieve system status [ 139.216682][ T5794] ft260 0003:0403:6030.0010: probe with driver ft260 failed with error -32 [ 139.292859][ T6548] Bluetooth: MGMT ver 1.23 [ 139.604682][ T189] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 139.755393][ T189] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 139.758911][ T189] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 139.759080][ T189] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 139.765834][ T189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.765862][ T189] usb 1-1: Product: syz [ 139.765879][ T189] usb 1-1: Manufacturer: syz [ 139.765895][ T189] usb 1-1: SerialNumber: syz [ 139.809202][ T189] usb 1-1: config 0 descriptor?? [ 139.812840][ T6550] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 139.813849][ T6550] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.017676][ T6550] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.018212][ T6550] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.056410][ T5721] usb 2-1: USB disconnect, device number 19 [ 140.230933][ T189] Error reading MAC address [ 140.250152][ T189] usb 1-1: USB disconnect, device number 17 [ 140.324202][ T6553] FAULT_INJECTION: forcing a failure. [ 140.324202][ T6553] name failslab, interval 1, probability 0, space 0, times 0 [ 140.324258][ T6553] CPU: 1 UID: 0 PID: 6553 Comm: syz.2.271 Not tainted syzkaller #0 PREEMPT(full) [ 140.324283][ T6553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.324322][ T6553] Call Trace: [ 140.324362][ T6553] [ 140.324393][ T6553] dump_stack_lvl+0xe8/0x150 [ 140.324505][ T6553] should_fail_ex+0x3eb/0x540 [ 140.324606][ T6553] should_failslab+0xa8/0x100 [ 140.324669][ T6553] __kmalloc_noprof+0xfe/0x720 [ 140.324748][ T6553] ? rcu_is_watching+0x16/0xb0 [ 140.324802][ T6553] ? tomoyo_realpath_from_path+0xef/0x640 [ 140.324869][ T6553] ? tomoyo_realpath_from_path+0xef/0x640 [ 140.324943][ T6553] tomoyo_realpath_from_path+0xef/0x640 [ 140.325027][ T6553] ? tomoyo_path_number_perm+0x219/0x5f0 [ 140.325117][ T6553] tomoyo_path_number_perm+0x246/0x5f0 [ 140.325208][ T6553] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 140.325282][ T6553] ? __lock_acquire+0x6df/0x2e50 [ 140.325406][ T6553] ? hook_file_ioctl+0x1f2/0x600 [ 140.325547][ T6553] ? __fget_files+0x2a/0x420 [ 140.325622][ T6553] ? __fget_files+0x2a/0x420 [ 140.325685][ T6553] ? __fget_files+0x3a2/0x420 [ 140.325769][ T6553] ? __fget_files+0x2a/0x420 [ 140.325858][ T6553] security_file_ioctl+0xc3/0x2a0 [ 140.325940][ T6553] __se_sys_ioctl+0x47/0x170 [ 140.326032][ T6553] do_syscall_64+0x166/0x520 [ 140.326114][ T6553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.326169][ T6553] ? clear_bhb_loop+0x70/0xc0 [ 140.326242][ T6553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.326295][ T6553] RIP: 0033:0x7feae099e159 [ 140.326355][ T6553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.326407][ T6553] RSP: 002b:00007feae18d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.326464][ T6553] RAX: ffffffffffffffda RBX: 00007feae0c25fa0 RCX: 00007feae099e159 [ 140.326506][ T6553] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 140.326538][ T6553] RBP: 00007feae18d4090 R08: 0000000000000000 R09: 0000000000000000 [ 140.326558][ T6553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.326598][ T6553] R13: 00007feae0c26038 R14: 00007feae0c25fa0 R15: 00007ffc63ebee78 [ 140.326683][ T6553] [ 140.328768][ T6553] ERROR: Out of memory at tomoyo_realpath_from_path. [ 140.633073][ T6560] ucma_write: process 172 (syz.1.273) changed security contexts after opening file descriptor, this is not allowed. [ 140.833691][ T6566] rust_binder: 6565:6566 got transaction to invalid handle 1 [ 140.833745][ T6566] rust_binder: 6565:6566 transaction async to 0:0 failed ENOENT, code 0 size 96-24 [ 140.835217][ T30] rust_binder: 6565: undelivered TRANSACTION_ERROR: 29201 [ 140.868590][ T6568] FAULT_INJECTION: forcing a failure. [ 140.868590][ T6568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.868645][ T6568] CPU: 1 UID: 0 PID: 6568 Comm: syz.0.277 Not tainted syzkaller #0 PREEMPT(full) [ 140.868670][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.868720][ T6568] Call Trace: [ 140.868746][ T6568] [ 140.868784][ T6568] dump_stack_lvl+0xe8/0x150 [ 140.868881][ T6568] should_fail_ex+0x3eb/0x540 [ 140.868986][ T6568] _copy_from_iter+0x1d3/0x1660 [ 140.869121][ T6568] ? __pfx__copy_from_iter+0x10/0x10 [ 140.869220][ T6568] ? trace_kmalloc+0x2a/0xf0 [ 140.869307][ T6568] ? __kmalloc_noprof+0x38c/0x720 [ 140.869390][ T6568] ? __kmalloc_noprof+0x1ab/0x720 [ 140.869465][ T6568] ? kernfs_fop_write_iter+0x157/0x540 [ 140.869548][ T6568] kernfs_fop_write_iter+0x19a/0x540 [ 140.869622][ T6568] vfs_write+0x612/0xba0 [ 140.869717][ T6568] ? __pfx_vfs_write+0x10/0x10 [ 140.869822][ T6568] ? __fget_files+0x2a/0x420 [ 140.869910][ T6568] ksys_write+0x150/0x270 [ 140.869992][ T6568] ? __pfx_ksys_write+0x10/0x10 [ 140.870103][ T6568] do_syscall_64+0x166/0x520 [ 140.870172][ T6568] ? trace_irq_disable+0x3b/0x140 [ 140.870266][ T6568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.870334][ T6568] ? clear_bhb_loop+0x70/0xc0 [ 140.870405][ T6568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.870458][ T6568] RIP: 0033:0x7f199059e159 [ 140.870516][ T6568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.870560][ T6568] RSP: 002b:00007f19913e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.870615][ T6568] RAX: ffffffffffffffda RBX: 00007f1990825fa0 RCX: 00007f199059e159 [ 140.870656][ T6568] RDX: 0000000000000020 RSI: 0000200000000540 RDI: 0000000000000003 [ 140.870695][ T6568] RBP: 00007f19913e2090 R08: 0000000000000000 R09: 0000000000000000 [ 140.870734][ T6568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.870766][ T6568] R13: 00007f1990826038 R14: 00007f1990825fa0 R15: 00007fff896b6ff8 [ 140.870858][ T6568] [ 141.032838][ T189] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 141.122029][ T30] usb 4-1: USB disconnect, device number 19 [ 141.174119][ T6573] FAULT_INJECTION: forcing a failure. [ 141.174119][ T6573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.188275][ T6573] CPU: 0 UID: 0 PID: 6573 Comm: syz.3.280 Not tainted syzkaller #0 PREEMPT(full) [ 141.188304][ T6573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.188318][ T6573] Call Trace: [ 141.188327][ T6573] [ 141.188336][ T6573] dump_stack_lvl+0xe8/0x150 [ 141.188369][ T6573] should_fail_ex+0x3eb/0x540 [ 141.188416][ T6573] _copy_from_user+0x2d/0xb0 [ 141.188443][ T6573] __se_sys_sendfile64+0xac/0x1a0 [ 141.188479][ T6573] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 141.188523][ T6573] do_syscall_64+0x166/0x520 [ 141.188548][ T6573] ? trace_irq_disable+0x3b/0x140 [ 141.188579][ T6573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.188601][ T6573] ? clear_bhb_loop+0x70/0xc0 [ 141.188627][ T6573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.188649][ T6573] RIP: 0033:0x7f62ce39e159 [ 141.188668][ T6573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.188686][ T6573] RSP: 002b:00007f62cf1c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 141.188710][ T6573] RAX: ffffffffffffffda RBX: 00007f62ce625fa0 RCX: 00007f62ce39e159 [ 141.188727][ T6573] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000004 [ 141.188741][ T6573] RBP: 00007f62cf1c0090 R08: 0000000000000000 R09: 0000000000000000 [ 141.188755][ T6573] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 141.188768][ T6573] R13: 00007f62ce626038 R14: 00007f62ce625fa0 R15: 00007fffd0644768 [ 141.188802][ T6573] [ 141.210620][ T189] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 141.227670][ T189] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.227734][ T189] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 141.227758][ T189] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 141.227782][ T189] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.227825][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.457488][ T5721] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 141.614695][ T5721] usb 1-1: Using ep0 maxpacket: 32 [ 141.616253][ T5721] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 141.634117][ T5721] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 141.634195][ T5721] usb 1-1: config 0 has no interface number 0 [ 141.634262][ T5721] usb 1-1: config 0 interface 12 has no altsetting 0 [ 141.657032][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.657079][ T5721] usb 1-1: Product: syz [ 141.657105][ T5721] usb 1-1: Manufacturer: syz [ 141.657121][ T5721] usb 1-1: SerialNumber: syz [ 141.685776][ T5721] usb 1-1: config 0 descriptor?? [ 141.711469][ T6562] netlink: 'syz.1.275': attribute type 29 has an invalid length. [ 141.720871][ T6562] netlink: 'syz.1.275': attribute type 29 has an invalid length. [ 142.133509][ T189] gud 2-1:1.0: Failed to add properties (error=-5) [ 142.143881][ T189] gud 2-1:1.0: probe with driver gud failed with error -5 [ 142.348361][ T6562] FAULT_INJECTION: forcing a failure. [ 142.348361][ T6562] name failslab, interval 1, probability 0, space 0, times 0 [ 142.348463][ T6562] CPU: 1 UID: 0 PID: 6562 Comm: syz.1.275 Not tainted syzkaller #0 PREEMPT(full) [ 142.348549][ T6562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.348618][ T6562] Call Trace: [ 142.348648][ T6562] [ 142.348671][ T6562] dump_stack_lvl+0xe8/0x150 [ 142.348779][ T6562] should_fail_ex+0x3eb/0x540 [ 142.348901][ T6562] should_failslab+0xa8/0x100 [ 142.348963][ T6562] ? create_new_namespaces+0x33/0x6b0 [ 142.349054][ T6562] kmem_cache_alloc_noprof+0xa1/0x600 [ 142.349126][ T6562] ? do_raw_spin_lock+0x12b/0x2f0 [ 142.349196][ T6562] ? create_new_namespaces+0x33/0x6b0 [ 142.349277][ T6562] create_new_namespaces+0x33/0x6b0 [ 142.349353][ T6562] ? bpf_lsm_capable+0x9/0x20 [ 142.349441][ T6562] ? security_capable+0x7e/0x2c0 [ 142.349543][ T6562] unshare_nsproxy_namespaces+0x149/0x190 [ 142.349636][ T6562] ksys_unshare+0x5a7/0x950 [ 142.349732][ T6562] ? __pfx_ksys_unshare+0x10/0x10 [ 142.349811][ T6562] ? rcu_is_watching+0x16/0xb0 [ 142.349897][ T6562] __x64_sys_unshare+0x38/0x50 [ 142.349970][ T6562] do_syscall_64+0x166/0x520 [ 142.350063][ T6562] ? trace_irq_disable+0x3b/0x140 [ 142.350162][ T6562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.350216][ T6562] ? clear_bhb_loop+0x70/0xc0 [ 142.350288][ T6562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.350348][ T6562] RIP: 0033:0x7fca4079e159 [ 142.350407][ T6562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.350458][ T6562] RSP: 002b:00007fca3e9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 142.350519][ T6562] RAX: ffffffffffffffda RBX: 00007fca40a25fa0 RCX: 00007fca4079e159 [ 142.350556][ T6562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002040400 [ 142.350596][ T6562] RBP: 00007fca40835024 R08: 0000000000000000 R09: 0000000000000000 [ 142.350630][ T6562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.350668][ T6562] R13: 00007fca40a26038 R14: 00007fca40a25fa0 R15: 00007ffd3718bfd8 [ 142.350752][ T6562] [ 142.396238][ T25] usb 2-1: USB disconnect, device number 20 [ 142.739448][ T6587] fuse: Unknown parameter '' [ 143.528298][ T5794] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 143.684641][ T5794] usb 2-1: Using ep0 maxpacket: 32 [ 143.690940][ T5794] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 143.703612][ T5794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.716372][ T5794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.716427][ T5794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.739009][ T5794] usb 2-1: config 0 descriptor?? [ 144.043577][ T6612] syzkaller1: entered promiscuous mode [ 144.043659][ T6612] syzkaller1: entered allmulticast mode [ 144.057988][ T6612] FAULT_INJECTION: forcing a failure. [ 144.057988][ T6612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.058050][ T6612] CPU: 1 UID: 0 PID: 6612 Comm: syz.2.292 Not tainted syzkaller #0 PREEMPT(full) [ 144.058078][ T6612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.058129][ T6612] Call Trace: [ 144.058164][ T6612] [ 144.058193][ T6612] dump_stack_lvl+0xe8/0x150 [ 144.058311][ T6612] should_fail_ex+0x3eb/0x540 [ 144.058406][ T6612] _copy_from_iter+0x1d3/0x1660 [ 144.058514][ T6612] ? __lock_acquire+0x6df/0x2e50 [ 144.058598][ T6612] ? __pfx__copy_from_iter+0x10/0x10 [ 144.058718][ T6612] tun_get_user+0x26b/0x44d0 [ 144.058820][ T6612] ? aa_file_perm+0x18b/0x15f0 [ 144.058892][ T6612] ? aa_file_perm+0x4ed/0x15f0 [ 144.058954][ T6612] ? __pfx_tun_get_user+0x10/0x10 [ 144.059020][ T6612] ? __lock_acquire+0x6df/0x2e50 [ 144.059107][ T6612] ? kstrtoull+0x137/0x1d0 [ 144.059211][ T6612] ? ref_tracker_alloc+0x341/0x4b0 [ 144.059264][ T6612] ? lock_acquire+0x115/0x350 [ 144.059348][ T6612] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 144.059418][ T6612] ? lock_acquire+0x115/0x350 [ 144.059502][ T6612] ? tun_get+0x1c/0x2f0 [ 144.059577][ T6612] ? tun_get+0x1c/0x2f0 [ 144.059640][ T6612] ? tun_get+0x1c/0x2f0 [ 144.059721][ T6612] tun_chr_write_iter+0x113/0x200 [ 144.059806][ T6612] vfs_write+0x612/0xba0 [ 144.059901][ T6612] ? __pfx_vfs_write+0x10/0x10 [ 144.060001][ T6612] ? __fget_files+0x2a/0x420 [ 144.060084][ T6612] ksys_write+0x150/0x270 [ 144.060174][ T6612] ? __pfx_ksys_write+0x10/0x10 [ 144.060275][ T6612] do_syscall_64+0x166/0x520 [ 144.060338][ T6612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.060399][ T6612] ? clear_bhb_loop+0x70/0xc0 [ 144.060469][ T6612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.060522][ T6612] RIP: 0033:0x7feae099e159 [ 144.060574][ T6612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.060624][ T6612] RSP: 002b:00007feae18d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.060680][ T6612] RAX: ffffffffffffffda RBX: 00007feae0c25fa0 RCX: 00007feae099e159 [ 144.060730][ T6612] RDX: 000000000000340a RSI: 0000200000000300 RDI: 0000000000000004 [ 144.060763][ T6612] RBP: 00007feae18d4090 R08: 0000000000000000 R09: 0000000000000000 [ 144.060789][ T6612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.060820][ T6612] R13: 00007feae0c26038 R14: 00007feae0c25fa0 R15: 00007ffc63ebee78 [ 144.060911][ T6612] [ 144.322817][ T5794] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 144.330665][ T5794] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 144.398642][ T5794] ft260 0003:0403:6030.0011: chip code: 0000 0000 [ 144.438278][ T5721] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 144.438366][ T5721] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 144.439476][ T5721] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 144.439709][ T5721] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 144.474453][ T5721] usb 1-1: USB disconnect, device number 18 [ 144.546031][ T6617] rust_binder: 6616:6617 got transaction to invalid handle 1 [ 144.553657][ T6617] rust_binder: 6616:6617 transaction async to 0:0 failed ENOENT, code 0 size 96-24 [ 144.563843][ T189] rust_binder: 6616: undelivered TRANSACTION_ERROR: 29201 [ 144.604325][ T5794] ft260 0003:0403:6030.0011: failed to retrieve system status [ 144.614053][ T5794] ft260 0003:0403:6030.0011: probe with driver ft260 failed with error -5 [ 144.778377][ T6624] smpboot: CPU 1 is now offline [ 144.944379][ T6622] could not allocate digest TFM handle ghash-clmulni [ 145.113529][ T6629] netlink: 116 bytes leftover after parsing attributes in process `syz.3.298'. [ 145.308335][ T6640] nfs: Bad value for 'source' [ 145.323111][ T6643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.335081][ T6643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.557853][ T189] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 145.715413][ T189] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 145.727299][ T189] usb 3-1: config index 0 descriptor too short (expected 25, got 18) [ 145.736125][ T189] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 145.749359][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.759372][ T189] usb 3-1: Product: syz [ 145.765197][ T189] usb 3-1: Manufacturer: syz [ 145.765227][ T189] usb 3-1: SerialNumber: syz [ 145.835042][ T5794] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 145.988724][ T189] usb 3-1: USB disconnect, device number 24 [ 145.997041][ T5794] usb 1-1: Using ep0 maxpacket: 32 [ 146.003013][ T5794] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 146.022949][ T5794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.023006][ T5794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.023045][ T5794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.063954][ T5794] usb 1-1: config 0 descriptor?? [ 146.076423][ T6629] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 146.319950][ T189] usb 2-1: USB disconnect, device number 21 [ 146.521354][ T5794] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 146.530573][ T5794] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 146.692797][ T5794] ft260 0003:0403:6030.0012: failed to retrieve chip version [ 146.693071][ T5794] ft260 0003:0403:6030.0012: probe with driver ft260 failed with error -5 [ 146.814763][ T189] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 146.843062][ T6666] FAULT_INJECTION: forcing a failure. [ 146.843062][ T6666] name failslab, interval 1, probability 0, space 0, times 0 [ 146.859082][ T6666] CPU: 0 UID: 0 PID: 6666 Comm: syz.2.311 Not tainted syzkaller #0 PREEMPT(full) [ 146.859104][ T6666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.859115][ T6666] Call Trace: [ 146.859122][ T6666] [ 146.859128][ T6666] dump_stack_lvl+0xe8/0x150 [ 146.859154][ T6666] should_fail_ex+0x3eb/0x540 [ 146.859182][ T6666] should_failslab+0xa8/0x100 [ 146.859219][ T6666] __kvmalloc_node_noprof+0x176/0x820 [ 146.859245][ T6666] ? seq_read_iter+0xa4/0xca0 [ 146.859260][ T6666] ? traverse+0xf1/0x620 [ 146.859272][ T6666] ? traverse+0xf1/0x620 [ 146.859291][ T6666] traverse+0xf1/0x620 [ 146.859303][ T6666] ? aa_file_perm+0x18b/0x15f0 [ 146.859323][ T6666] ? aa_file_perm+0x4ed/0x15f0 [ 146.859342][ T6666] seq_read_iter+0xb6a/0xca0 [ 146.859367][ T6666] seq_read+0x367/0x480 [ 146.859391][ T6666] ? lock_acquire+0x115/0x350 [ 146.859428][ T6666] ? __pfx_seq_read+0x10/0x10 [ 146.859469][ T6666] ? common_file_perm+0x20e/0x2b0 [ 146.859499][ T6666] ? __pfx_seq_read+0x10/0x10 [ 146.859521][ T6666] proc_reg_read+0x1e9/0x2e0 [ 146.859549][ T6666] ? __pfx_proc_reg_read+0x10/0x10 [ 146.859573][ T6666] vfs_read+0x213/0xa80 [ 146.859599][ T6666] ? __pfx_vfs_read+0x10/0x10 [ 146.859620][ T6666] ? __fget_files+0x2a/0x420 [ 146.859641][ T6666] ? __fget_files+0x2a/0x420 [ 146.859660][ T6666] ? __fget_files+0x3a2/0x420 [ 146.859677][ T6666] ? __fget_files+0x2a/0x420 [ 146.859701][ T6666] __x64_sys_pread64+0x196/0x220 [ 146.859725][ T6666] ? __pfx___x64_sys_pread64+0x10/0x10 [ 146.859754][ T6666] do_syscall_64+0x166/0x520 [ 146.859772][ T6666] ? trace_irq_disable+0x3b/0x140 [ 146.859795][ T6666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.859811][ T6666] ? clear_bhb_loop+0x70/0xc0 [ 146.859830][ T6666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.859845][ T6666] RIP: 0033:0x7feae099e159 [ 146.859861][ T6666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.859875][ T6666] RSP: 002b:00007feae18d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 146.859891][ T6666] RAX: ffffffffffffffda RBX: 00007feae0c25fa0 RCX: 00007feae099e159 [ 146.859903][ T6666] RDX: 0000000000000057 RSI: 00002000000000c0 RDI: 0000000000000003 [ 146.859913][ T6666] RBP: 00007feae18d4090 R08: 0000000000000000 R09: 0000000000000000 [ 146.859923][ T6666] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 146.859932][ T6666] R13: 00007feae0c26038 R14: 00007feae0c25fa0 R15: 00007ffc63ebee78 [ 146.859955][ T6666] [ 147.146786][ T189] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 147.159824][ T189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.159860][ T189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 147.159901][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.202819][ T189] usb 2-1: config 0 descriptor?? [ 147.212307][ T6660] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 147.348497][ T6668] gadgetfs: bound to dummy_udc driver [ 147.442177][ T189] usbhid 2-1:0.0: can't add hid device: -71 [ 147.442271][ T189] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 147.464128][ T189] usb 2-1: USB disconnect, device number 22 [ 147.945859][ T5704] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 148.107460][ T5704] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 148.136512][ T5704] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 148.138400][ T5704] usb 2-1: config 4 has no interface number 0 [ 148.140262][ T5704] usb 2-1: config 4 interface 44 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 148.142834][ T5704] usb 2-1: config 4 interface 44 altsetting 0 endpoint 0x8D has invalid maxpacket 256, setting to 64 [ 148.143137][ T5704] usb 2-1: config 4 interface 44 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 148.144510][ T5704] usb 2-1: config 4 interface 44 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 148.220694][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.220729][ T5704] usb 2-1: Product: syz [ 148.220763][ T5704] usb 2-1: Manufacturer: syz [ 148.220776][ T5704] usb 2-1: SerialNumber: syz [ 148.255799][ T6660] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 148.255915][ T6660] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 148.456813][ T6684] FAULT_INJECTION: forcing a failure. [ 148.456813][ T6684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.473556][ T6684] CPU: 0 UID: 0 PID: 6684 Comm: syz.2.317 Not tainted syzkaller #0 PREEMPT(full) [ 148.473579][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.473590][ T6684] Call Trace: [ 148.473597][ T6684] [ 148.473604][ T6684] dump_stack_lvl+0xe8/0x150 [ 148.473629][ T6684] should_fail_ex+0x3eb/0x540 [ 148.473660][ T6684] _copy_from_user+0x2d/0xb0 [ 148.473679][ T6684] __se_sys_io_uring_setup+0x1b4/0x2c0 [ 148.473703][ T6684] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 148.473724][ T6684] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 148.473758][ T6684] ? __pfx_ksys_write+0x10/0x10 [ 148.473787][ T6684] do_syscall_64+0x166/0x520 [ 148.473806][ T6684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.473823][ T6684] ? clear_bhb_loop+0x70/0xc0 [ 148.473842][ T6684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.473858][ T6684] RIP: 0033:0x7feae099e159 [ 148.473874][ T6684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.473888][ T6684] RSP: 002b:00007feae18d3ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 148.473905][ T6684] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007feae099e159 [ 148.473917][ T6684] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 148.473928][ T6684] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 148.473938][ T6684] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 148.473949][ T6684] R13: 0000200000000b10 R14: 00007feae18d3fd8 R15: 0000000000000000 [ 148.473972][ T6684] [ 148.654735][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 148.674371][ T6660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.687044][ T6660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.713180][ T5704] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 148.804863][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 148.811793][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 148.822281][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.822314][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.822351][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.859248][ T10] usb 4-1: config 0 descriptor?? [ 148.873851][ T5704] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 148.885534][ T5704] dib0700: firmware download failed at 7 with -22 [ 148.914512][ T5704] usb 2-1: USB disconnect, device number 23 [ 149.289771][ T10] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 149.298193][ T10] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 149.347675][ T6696] FAULT_INJECTION: forcing a failure. [ 149.347675][ T6696] name failslab, interval 1, probability 0, space 0, times 0 [ 149.364693][ T6696] CPU: 0 UID: 0 PID: 6696 Comm: syz.1.322 Not tainted syzkaller #0 PREEMPT(full) [ 149.364716][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.364727][ T6696] Call Trace: [ 149.364733][ T6696] [ 149.364740][ T6696] dump_stack_lvl+0xe8/0x150 [ 149.364767][ T6696] should_fail_ex+0x3eb/0x540 [ 149.364795][ T6696] should_failslab+0xa8/0x100 [ 149.364813][ T6696] __kmalloc_noprof+0xfe/0x720 [ 149.364834][ T6696] ? rcu_is_watching+0x16/0xb0 [ 149.364851][ T6696] ? tomoyo_realpath_from_path+0xef/0x640 [ 149.364868][ T6696] ? tomoyo_realpath_from_path+0xef/0x640 [ 149.364889][ T6696] tomoyo_realpath_from_path+0xef/0x640 [ 149.364912][ T6696] ? tomoyo_path_number_perm+0x219/0x5f0 [ 149.364950][ T6696] tomoyo_path_number_perm+0x246/0x5f0 [ 149.364975][ T6696] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 149.364998][ T6696] ? __lock_acquire+0x6df/0x2e50 [ 149.365033][ T6696] ? hook_file_ioctl+0x1f2/0x600 [ 149.365071][ T6696] ? __fget_files+0x2a/0x420 [ 149.365093][ T6696] ? __fget_files+0x2a/0x420 [ 149.365110][ T6696] ? __fget_files+0x3a2/0x420 [ 149.365128][ T6696] ? __fget_files+0x2a/0x420 [ 149.365149][ T6696] security_file_ioctl+0xc3/0x2a0 [ 149.365173][ T6696] __se_sys_ioctl+0x47/0x170 [ 149.365199][ T6696] do_syscall_64+0x166/0x520 [ 149.365216][ T6696] ? trace_irq_disable+0x3b/0x140 [ 149.365239][ T6696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.365255][ T6696] ? clear_bhb_loop+0x70/0xc0 [ 149.365274][ T6696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.365295][ T6696] RIP: 0033:0x7fca4079e159 [ 149.365311][ T6696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.365325][ T6696] RSP: 002b:00007fca3e9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.365342][ T6696] RAX: ffffffffffffffda RBX: 00007fca40a25fa0 RCX: 00007fca4079e159 [ 149.365354][ T6696] RDX: 0000200000000080 RSI: 00000000c0306201 RDI: 0000000000000003 [ 149.365364][ T6696] RBP: 00007fca3e9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 149.365374][ T6696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.365383][ T6696] R13: 00007fca40a26038 R14: 00007fca40a25fa0 R15: 00007ffd3718bfd8 [ 149.365407][ T6696] [ 149.403757][ T6696] ERROR: Out of memory at tomoyo_realpath_from_path. [ 149.403801][ T6696] rust_binder: Write failure EINVAL in pid:184 [ 149.475671][ T5704] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 149.618755][ T10] ft260 0003:0403:6030.0013: chip code: 0000 0000 [ 149.657100][ T5794] usb 1-1: USB disconnect, device number 19 [ 149.749028][ T5704] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 149.769889][ T5704] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.769958][ T5704] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 149.769986][ T5704] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 149.770006][ T5704] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.770039][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.859755][ T10] ft260 0003:0403:6030.0013: failed to retrieve system status [ 149.860082][ T10] ft260 0003:0403:6030.0013: probe with driver ft260 failed with error -5 [ 149.949095][ T6700] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 149.961198][ T6700] netlink: 'syz.1.324': attribute type 5 has an invalid length. [ 150.045225][ T80] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.046583][ T80] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.046626][ T80] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.046672][ T80] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.100676][ T6694] netlink: 'syz.2.321': attribute type 29 has an invalid length. [ 150.112276][ T6694] netlink: 'syz.2.321': attribute type 29 has an invalid length. [ 150.132872][ T6702] rust_binder: 6701:6702 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 150.141584][ T6702] rust_binder: 6701:6702 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 150.149638][ T6702] rust_binder: 6701:6702 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 150.159021][ T6702] rust_binder: 6701:6702 got reply transaction with no transaction stack [ 150.159040][ T6702] rust_binder: 6701:6702 transaction reply to 0:0 failed EINVAL, code 0 size 96-24 [ 150.185185][ T10] rust_binder: 6701: undelivered TRANSACTION_ERROR: 29201 [ 150.528260][ T5704] gud 3-1:1.0: Failed to add properties (error=-5) [ 150.528298][ T5704] gud 3-1:1.0: probe with driver gud failed with error -5 [ 150.737014][ T189] usb 3-1: USB disconnect, device number 25 [ 151.369587][ T6722] FAULT_INJECTION: forcing a failure. [ 151.369587][ T6722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.386588][ T6722] CPU: 0 UID: 0 PID: 6722 Comm: syz.2.332 Not tainted syzkaller #0 PREEMPT(full) [ 151.386611][ T6722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.386621][ T6722] Call Trace: [ 151.386628][ T6722] [ 151.386635][ T6722] dump_stack_lvl+0xe8/0x150 [ 151.386661][ T6722] should_fail_ex+0x3eb/0x540 [ 151.386690][ T6722] _copy_from_user+0x2d/0xb0 [ 151.386708][ T6722] ___sys_sendmsg+0x1c6/0x360 [ 151.386731][ T6722] ? __lock_acquire+0x6df/0x2e50 [ 151.386758][ T6722] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.386805][ T6722] ? __fget_files+0x2a/0x420 [ 151.386824][ T6722] ? __fget_files+0x3a2/0x420 [ 151.386854][ T6722] __x64_sys_sendmsg+0x1b1/0x290 [ 151.386877][ T6722] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.386915][ T6722] do_syscall_64+0x166/0x520 [ 151.386933][ T6722] ? trace_irq_disable+0x3b/0x140 [ 151.386957][ T6722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.386974][ T6722] ? clear_bhb_loop+0x70/0xc0 [ 151.386993][ T6722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.387009][ T6722] RIP: 0033:0x7feae099e159 [ 151.387024][ T6722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.387038][ T6722] RSP: 002b:00007feae18d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.387055][ T6722] RAX: ffffffffffffffda RBX: 00007feae0c25fa0 RCX: 00007feae099e159 [ 151.387072][ T6722] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 151.387083][ T6722] RBP: 00007feae18d4090 R08: 0000000000000000 R09: 0000000000000000 [ 151.387093][ T6722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.387103][ T6722] R13: 00007feae0c26038 R14: 00007feae0c25fa0 R15: 00007ffc63ebee78 [ 151.387127][ T6722] [ 151.455717][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 151.618811][ T189] usb 4-1: USB disconnect, device number 20 [ 151.635276][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 151.650087][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 151.665213][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.665248][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.665279][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.720590][ T10] usb 2-1: config 0 descriptor?? [ 152.157929][ T10] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 152.171000][ T10] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 152.274722][ T5704] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 152.355115][ T10] ft260 0003:0403:6030.0014: failed to retrieve chip version [ 152.355402][ T10] ft260 0003:0403:6030.0014: probe with driver ft260 failed with error -5 [ 152.456172][ T5704] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 152.467432][ T5704] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 152.467477][ T5704] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.467506][ T5704] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 152.467527][ T5704] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 152.467549][ T5704] usb 1-1: config 0 interface 0 has no altsetting 0 [ 152.467576][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.539607][ T5704] usb 1-1: config 0 descriptor?? [ 152.553374][ T6730] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 152.914619][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 152.924855][ T189] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 153.189597][ T6751] serio: Serial port ptm0 [ 153.199636][ T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 153.209366][ T189] usb 4-1: Using ep0 maxpacket: 32 [ 153.216562][ T189] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 153.229744][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.240547][ T189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.240571][ T189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.240598][ T189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.254154][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 153.254193][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 153.254209][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.254242][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.321562][ T189] usb 4-1: config 0 descriptor?? [ 153.376594][ T5704] waltop 0003:172F:0500.0015: item fetching failed at offset 6/7 [ 153.377239][ T5704] waltop 0003:172F:0500.0015: probe with driver waltop failed with error -22 [ 153.545078][ T6748] netlink: 'syz.2.342': attribute type 29 has an invalid length. [ 153.560351][ T6748] netlink: 'syz.2.342': attribute type 29 has an invalid length. [ 153.779161][ T189] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 153.779201][ T189] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 153.971007][ T189] ft260 0003:0403:6030.0016: chip code: 0000 0000 [ 153.979699][ T10] gud 3-1:1.0: Failed to add properties (error=-5) [ 153.986433][ T10] gud 3-1:1.0: probe with driver gud failed with error -5 [ 154.180477][ T189] ft260 0003:0403:6030.0016: failed to retrieve system status [ 154.180766][ T189] ft260 0003:0403:6030.0016: probe with driver ft260 failed with error -5 [ 154.211916][ T189] usb 3-1: USB disconnect, device number 26 [ 154.711784][ T189] usb 2-1: USB disconnect, device number 24 [ 155.143419][ T6765] FAULT_INJECTION: forcing a failure. [ 155.143419][ T6765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.156876][ T6765] CPU: 0 UID: 0 PID: 6765 Comm: syz.2.347 Not tainted syzkaller #0 PREEMPT(full) [ 155.156899][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.156909][ T6765] Call Trace: [ 155.156915][ T6765] [ 155.156922][ T6765] dump_stack_lvl+0xe8/0x150 [ 155.156947][ T6765] should_fail_ex+0x3eb/0x540 [ 155.156974][ T6765] _copy_from_user+0x2d/0xb0 [ 155.156991][ T6765] ___sys_sendmsg+0x1c6/0x360 [ 155.157013][ T6765] ? __lock_acquire+0x6df/0x2e50 [ 155.157039][ T6765] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.157083][ T6765] ? __fget_files+0x2a/0x420 [ 155.157101][ T6765] ? __fget_files+0x3a2/0x420 [ 155.157125][ T6765] __x64_sys_sendmsg+0x1b1/0x290 [ 155.157148][ T6765] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.157183][ T6765] do_syscall_64+0x166/0x520 [ 155.157200][ T6765] ? trace_irq_disable+0x3b/0x140 [ 155.157222][ T6765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.157238][ T6765] ? clear_bhb_loop+0x70/0xc0 [ 155.157257][ T6765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.157272][ T6765] RIP: 0033:0x7feae099e159 [ 155.157287][ T6765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.157300][ T6765] RSP: 002b:00007feae18d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.157317][ T6765] RAX: ffffffffffffffda RBX: 00007feae0c25fa0 RCX: 00007feae099e159 [ 155.157328][ T6765] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 155.157339][ T6765] RBP: 00007feae18d4090 R08: 0000000000000000 R09: 0000000000000000 [ 155.157349][ T6765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.157358][ T6765] R13: 00007feae0c26038 R14: 00007feae0c25fa0 R15: 00007ffc63ebee78 [ 155.157381][ T6765] [ 155.367652][ T10] usb 1-1: USB disconnect, device number 20 [ 155.754441][ T10] usb 4-1: USB disconnect, device number 21 [ 155.941869][ T6778] netlink: 36 bytes leftover after parsing attributes in process `syz.3.352'. [ 155.968083][ T6778] netlink: 36 bytes leftover after parsing attributes in process `syz.3.352'. [ 156.108500][ T6783] FAULT_INJECTION: forcing a failure. [ 156.108500][ T6783] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 156.108538][ T6783] CPU: 0 UID: 0 PID: 6783 Comm: syz.3.354 Not tainted syzkaller #0 PREEMPT(full) [ 156.108556][ T6783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.108567][ T6783] Call Trace: [ 156.108573][ T6783] [ 156.108580][ T6783] dump_stack_lvl+0xe8/0x150 [ 156.108614][ T6783] should_fail_ex+0x3eb/0x540 [ 156.108643][ T6783] prepare_alloc_pages+0x223/0x600 [ 156.108678][ T6783] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 156.108705][ T6783] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 156.108733][ T6783] ? __pfx_policy_nodemask+0x10/0x10 [ 156.108750][ T6783] ? __mutex_lock+0x30b/0x1550 [ 156.108769][ T6783] ? filemap_map_pages+0x1d14/0x2170 [ 156.108794][ T6783] alloc_pages_mpol+0x21e/0x390 [ 156.108815][ T6783] alloc_pages_noprof+0xb1/0x2b0 [ 156.108833][ T6783] __pmd_alloc+0x3a/0x5c0 [ 156.108854][ T6783] huge_pte_alloc+0x531/0x630 [ 156.108870][ T6783] ? down_read+0x2be/0x330 [ 156.108889][ T6783] ? hugetlb_vma_lock_read+0x1d5/0x2d0 [ 156.108916][ T6783] hugetlb_fault+0x412/0x1440 [ 156.108936][ T6783] ? __pfx___css_rstat_updated+0x10/0x10 [ 156.108964][ T6783] ? __pfx_hugetlb_fault+0x10/0x10 [ 156.108988][ T6783] ? lock_acquire+0x115/0x350 [ 156.109018][ T6783] handle_mm_fault+0x24fc/0x3750 [ 156.109041][ T6783] ? reacquire_held_locks+0x117/0x1a0 [ 156.109057][ T6783] ? lock_vma_under_rcu+0x1d1/0x500 [ 156.109078][ T6783] ? handle_mm_fault+0xf1/0x3750 [ 156.109099][ T6783] ? lock_vma_under_rcu+0x116/0x500 [ 156.109121][ T6783] ? __pfx_handle_mm_fault+0x10/0x10 [ 156.109138][ T6783] ? lock_vma_under_rcu+0x45a/0x500 [ 156.109156][ T6783] ? __fget_files+0x2a/0x420 [ 156.109176][ T6783] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 156.109211][ T6783] do_user_addr_fault+0xa4f/0x1340 [ 156.109242][ T6783] ? trace_page_fault_user+0x84/0x1e0 [ 156.109267][ T6783] exc_page_fault+0x6a/0xc0 [ 156.109309][ T6783] asm_exc_page_fault+0x26/0x30 [ 156.109325][ T6783] RIP: 0033:0x7f62ce388fe1 [ 156.109340][ T6783] Code: 00 0f 1f 84 00 00 00 00 00 48 85 f6 74 37 49 89 f0 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 5f 02 00 00 fd 74 0f c5 fd d7 c1 48 83 fe 20 76 11 85 c0 74 6d f3 0f bc c0 [ 156.109354][ T6783] RSP: 002b:00007f62cf1bef48 EFLAGS: 00010283 [ 156.109369][ T6783] RAX: 0000000000000000 RBX: 00007f62cf1bf014 RCX: 0000000000000000 [ 156.109380][ T6783] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 156.109389][ T6783] RBP: 0000000000000003 R08: 000000000000000f R09: 0000000000000000 [ 156.109399][ T6783] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 156.109408][ T6783] R13: 00007f62cf1befb0 R14: 00007f62ce625fa0 R15: 0000000000000000 [ 156.109433][ T6783] [ 156.109590][ T6783] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 156.162249][ T5794] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 156.185018][ T5704] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 156.416744][ T5794] usb 2-1: Using ep0 maxpacket: 32 [ 156.422290][ T5794] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 156.465363][ T5794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.465397][ T5794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.465429][ T5794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.503447][ T5794] usb 2-1: config 0 descriptor?? [ 156.575187][ T5704] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 156.587933][ T5704] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.587997][ T5704] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 156.588042][ T5704] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 156.588062][ T5704] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.588096][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.785731][ T189] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 156.871644][ T6779] netlink: 'syz.2.353': attribute type 29 has an invalid length. [ 156.881852][ T6779] netlink: 'syz.2.353': attribute type 29 has an invalid length. [ 156.927141][ T5794] ft260 0003:0403:6030.0017: unknown main item tag 0x0 [ 156.936974][ T189] usb 1-1: Using ep0 maxpacket: 16 [ 156.944206][ T189] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 156.955465][ T5794] ft260 0003:0403:6030.0017: unknown main item tag 0x0 [ 156.970648][ T189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.970680][ T189] usb 1-1: Product: syz [ 156.970702][ T189] usb 1-1: Manufacturer: syz [ 156.970734][ T189] usb 1-1: SerialNumber: syz [ 156.998675][ T189] usb 1-1: config 0 descriptor?? [ 157.009989][ T189] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 157.127022][ T5794] ft260 0003:0403:6030.0017: failed to retrieve chip version [ 157.127356][ T5794] ft260 0003:0403:6030.0017: probe with driver ft260 failed with error -5 [ 157.208791][ T6786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.222768][ T6786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.235222][ T189] usb 1-1: clie_3_5_startup: get config number failed: -71 [ 157.245657][ T189] visor 1-1:0.0: probe with driver visor failed with error -71 [ 157.262297][ T189] usb 1-1: USB disconnect, device number 21 [ 157.297043][ T5704] gud 3-1:1.0: Failed to add properties (error=-5) [ 157.303824][ T5704] gud 3-1:1.0: probe with driver gud failed with error -5 [ 157.501465][ T5704] usb 3-1: USB disconnect, device number 27 [ 158.236233][ T189] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 158.247644][ T5704] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 158.404735][ T189] usb 1-1: Using ep0 maxpacket: 32 [ 158.410489][ T189] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 158.420920][ T5704] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 158.432810][ T5704] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.432886][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.454230][ T189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.454272][ T189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.454312][ T189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.500168][ T189] usb 1-1: config 0 descriptor?? [ 158.547208][ T5704] usb 4-1: playback/capture rates do not match: 8530500/44100 [ 158.700520][ T5704] usb 4-1: USB disconnect, device number 22 [ 158.810101][ T6819] kvm: user requested TSC rate below hardware speed [ 158.932065][ T189] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 158.940423][ T189] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 159.128674][ T189] ft260 0003:0403:6030.0018: chip code: 0000 0000 [ 159.135478][ T5704] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 159.287564][ T5704] usb 3-1: Using ep0 maxpacket: 8 [ 159.293345][ T5704] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.307836][ T5704] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 159.307892][ T5704] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 159.307940][ T5704] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 159.307960][ T5704] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 159.307981][ T5704] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 159.308000][ T5704] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.308033][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.394123][ T189] ft260 0003:0403:6030.0018: failed to retrieve system status [ 159.407568][ T189] ft260 0003:0403:6030.0018: probe with driver ft260 failed with error -5 [ 159.462698][ T189] usb 2-1: USB disconnect, device number 25 [ 159.516709][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 159.612368][ T5704] usb 3-1: usb_control_msg returned -32 [ 159.619898][ T5704] usbtmc 3-1:16.0: can't read capabilities [ 159.684971][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 159.692022][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.702585][ T9] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 159.710965][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 159.710988][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 159.711006][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 159.711024][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 159.711042][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.711073][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.905381][ T189] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 159.993225][ T9] usb 4-1: usb_control_msg returned -32 [ 160.000248][ T9] usbtmc 4-1:16.0: can't read capabilities [ 160.055185][ T189] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 160.065791][ T189] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.076094][ T189] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 160.076114][ T189] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 160.076130][ T189] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.076161][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.334309][ T6829] netlink: 'syz.1.372': attribute type 29 has an invalid length. [ 160.345013][ T6829] netlink: 'syz.1.372': attribute type 29 has an invalid length. [ 160.355840][ T6831] FAULT_INJECTION: forcing a failure. [ 160.355840][ T6831] name failslab, interval 1, probability 0, space 0, times 0 [ 160.355873][ T6831] CPU: 0 UID: 0 PID: 6831 Comm: syz.3.370 Not tainted syzkaller #0 PREEMPT(full) [ 160.355892][ T6831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.355903][ T6831] Call Trace: [ 160.355909][ T6831] [ 160.355915][ T6831] dump_stack_lvl+0xe8/0x150 [ 160.355945][ T6831] should_fail_ex+0x3eb/0x540 [ 160.355973][ T6831] should_failslab+0xa8/0x100 [ 160.355992][ T6831] __kmalloc_noprof+0xfe/0x720 [ 160.356014][ T6831] ? rcu_is_watching+0x16/0xb0 [ 160.356030][ T6831] ? tomoyo_realpath_from_path+0xef/0x640 [ 160.356047][ T6831] ? tomoyo_realpath_from_path+0xef/0x640 [ 160.356069][ T6831] tomoyo_realpath_from_path+0xef/0x640 [ 160.356093][ T6831] ? tomoyo_path_number_perm+0x219/0x5f0 [ 160.356117][ T6831] tomoyo_path_number_perm+0x246/0x5f0 [ 160.356142][ T6831] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 160.356164][ T6831] ? __lock_acquire+0x6df/0x2e50 [ 160.356199][ T6831] ? hook_file_ioctl+0x1f2/0x600 [ 160.356237][ T6831] ? __fget_files+0x2a/0x420 [ 160.356259][ T6831] ? __fget_files+0x2a/0x420 [ 160.356276][ T6831] ? __fget_files+0x3a2/0x420 [ 160.356294][ T6831] ? __fget_files+0x2a/0x420 [ 160.356315][ T6831] security_file_ioctl+0xc3/0x2a0 [ 160.356339][ T6831] __se_sys_ioctl+0x47/0x170 [ 160.356381][ T6831] do_syscall_64+0x166/0x520 [ 160.356400][ T6831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.356416][ T6831] ? clear_bhb_loop+0x70/0xc0 [ 160.356436][ T6831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.356452][ T6831] RIP: 0033:0x7f62ce39e159 [ 160.356467][ T6831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.356480][ T6831] RSP: 002b:00007f62cf19f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.356497][ T6831] RAX: ffffffffffffffda RBX: 00007f62ce626090 RCX: 00007f62ce39e159 [ 160.356509][ T6831] RDX: 0000000000000000 RSI: 0000000040015b19 RDI: 0000000000000004 [ 160.356520][ T6831] RBP: 00007f62cf19f090 R08: 0000000000000000 R09: 0000000000000000 [ 160.356530][ T6831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.356540][ T6831] R13: 00007f62ce626128 R14: 00007f62ce626090 R15: 00007fffd0644768 [ 160.356564][ T6831] [ 160.356604][ T6831] ERROR: Out of memory at tomoyo_realpath_from_path. [ 160.822277][ T189] gud 2-1:1.0: Failed to add properties (error=-5) [ 160.829030][ T189] gud 2-1:1.0: probe with driver gud failed with error -5 [ 160.997784][ T189] usb 1-1: USB disconnect, device number 22 [ 161.047607][ T9] usb 2-1: USB disconnect, device number 26 [ 161.445406][ T189] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 161.594954][ T189] usb 1-1: Using ep0 maxpacket: 8 [ 161.601035][ T189] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 161.615451][ T189] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 161.615511][ T189] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 161.615539][ T189] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 161.615559][ T189] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 161.615598][ T189] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 161.615626][ T189] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.615659][ T189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.907075][ T189] usb 1-1: usb_control_msg returned -32 [ 161.913851][ T189] usbtmc 1-1:16.0: can't read capabilities [ 162.002998][ T189] usb 3-1: USB disconnect, device number 28 [ 162.307586][ T9] usb 4-1: USB disconnect, device number 23 [ 162.389311][ T6851] overlay: ./tracing/dynamic_events is not a directory [ 162.486311][ T189] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 162.524868][ T5704] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 162.644613][ T189] usb 3-1: Using ep0 maxpacket: 16 [ 162.652399][ T189] usb 3-1: unable to get BOS descriptor or descriptor too short [ 162.661970][ T189] usb 3-1: New USB device found, idVendor=045e, idProduct=0468, bcdDevice=b2.9c [ 162.672489][ T189] usb 3-1: config 3 has an invalid interface number: 74 but max is 0 [ 162.680861][ T189] usb 3-1: config 3 has no interface number 0 [ 162.680895][ T189] usb 3-1: config 3 interface 74 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 162.680914][ T189] usb 3-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 162.680932][ T189] usb 3-1: config 3 interface 74 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 162.680948][ T189] usb 3-1: config 3 interface 74 altsetting 1 bulk endpoint 0xD has invalid maxpacket 8 [ 162.680984][ T189] usb 3-1: config 3 interface 74 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 162.681000][ T189] usb 3-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0xB1, changing to 0x81 [ 162.681018][ T189] usb 3-1: config 3 interface 74 altsetting 1 endpoint 0x81 has invalid maxpacket 9507, setting to 1024 [ 162.681037][ T189] usb 3-1: config 3 interface 74 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 162.681054][ T189] usb 3-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0x49, changing to 0x9 [ 162.681072][ T189] usb 3-1: config 3 interface 74 altsetting 1 endpoint 0x9 has invalid maxpacket 17751, setting to 1024 [ 162.681125][ T189] usb 3-1: config 3 interface 74 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 1024 [ 162.681143][ T189] usb 3-1: config 3 interface 74 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 7 [ 162.681161][ T189] usb 3-1: config 3 interface 74 has no altsetting 0 [ 162.699407][ T5704] usb 2-1: Using ep0 maxpacket: 32 [ 162.736740][ T5704] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 162.796980][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.797004][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.797031][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.822177][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 162.898700][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.898720][ T189] usb 3-1: Product: syz [ 162.898732][ T189] usb 3-1: Manufacturer: syz [ 162.898743][ T189] usb 3-1: SerialNumber: syz [ 162.925314][ T5704] usb 2-1: config 0 descriptor?? [ 162.945573][ T6846] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 162.945733][ T6846] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 162.953184][ T6846] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 162.994901][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 163.000668][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 163.011428][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.022514][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.022550][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.048110][ T9] usb 4-1: config 0 descriptor?? [ 163.180220][ T189] ipaq 3-1:3.74: PocketPC PDA converter detected [ 163.189084][ T189] usb 3-1: active config #3 != 1 ?? [ 163.207177][ T189] usb 3-1: USB disconnect, device number 29 [ 163.352664][ T5704] ft260 0003:0403:6030.0019: unknown main item tag 0x0 [ 163.352704][ T5704] ft260 0003:0403:6030.0019: unknown main item tag 0x0 [ 163.466885][ T9] ft260 0003:0403:6030.001A: unknown main item tag 0x0 [ 163.477924][ T9] ft260 0003:0403:6030.001A: unknown main item tag 0x0 [ 163.549087][ T5704] ft260 0003:0403:6030.0019: failed to retrieve chip version [ 163.556922][ T5704] ft260 0003:0403:6030.0019: probe with driver ft260 failed with error -5 [ 163.662235][ T9] ft260 0003:0403:6030.001A: chip code: 0000 0000 [ 163.862735][ T9] ft260 0003:0403:6030.001A: failed to retrieve system status [ 163.870799][ T9] ft260 0003:0403:6030.001A: probe with driver ft260 failed with error -5 [ 163.974645][ T189] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 164.125376][ T189] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 164.136311][ T189] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.136365][ T189] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 164.136384][ T189] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 164.136404][ T189] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.136437][ T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.207868][ T5794] usb 1-1: USB disconnect, device number 23 [ 164.409230][ T6857] netlink: 'syz.2.383': attribute type 29 has an invalid length. [ 164.423842][ T6857] netlink: 'syz.2.383': attribute type 29 has an invalid length. [ 164.835095][ T189] gud 3-1:1.0: Failed to add properties (error=-71) [ 164.841964][ T189] gud 3-1:1.0: probe with driver gud failed with error -71 [ 164.872021][ T189] usb 3-1: USB disconnect, device number 30 [ 164.924639][ T5794] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 165.077375][ T5794] usb 1-1: unable to get BOS descriptor or descriptor too short [ 165.085256][ T5794] usb 1-1: New USB device found, idVendor=05d1, idProduct=1019, bcdDevice=93.60 [ 165.095343][ T5794] usb 1-1: config 4 has no interfaces? [ 165.103422][ T5794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.111795][ T5794] usb 1-1: Product: syz [ 165.111809][ T5794] usb 1-1: Manufacturer: syz [ 165.111848][ T5794] usb 1-1: SerialNumber: syz [ 165.339140][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.349193][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.372458][ T5794] usb 1-1: USB disconnect, device number 24 [ 165.518515][ T6872] event trace: Could not enable event p [ 165.563302][ T5794] usb 4-1: USB disconnect, device number 24 [ 165.686458][ T6875] FAULT_INJECTION: forcing a failure. [ 165.686458][ T6875] name failslab, interval 1, probability 0, space 0, times 0 [ 165.706389][ T6875] CPU: 0 UID: 0 PID: 6875 Comm: syz.2.389 Not tainted syzkaller #0 PREEMPT(full) [ 165.706413][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.706424][ T6875] Call Trace: [ 165.706430][ T6875] [ 165.706437][ T6875] dump_stack_lvl+0xe8/0x150 [ 165.706466][ T6875] should_fail_ex+0x3eb/0x540 [ 165.706495][ T6875] should_failslab+0xa8/0x100 [ 165.706514][ T6875] __kmalloc_noprof+0xfe/0x720 [ 165.706538][ T6875] ? tracepoint_add_func+0x351/0xa90 [ 165.706560][ T6875] ? tracepoint_add_func+0x351/0xa90 [ 165.706588][ T6875] tracepoint_add_func+0x351/0xa90 [ 165.706611][ T6875] ? __mutex_unlock_slowpath+0x731/0x900 [ 165.706636][ T6875] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 165.706660][ T6875] tracepoint_probe_register+0x5d/0x90 [ 165.706683][ T6875] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 165.706708][ T6875] tracing_start_sched_switch+0x102/0x200 [ 165.706731][ T6875] __ftrace_event_enable_disable+0x2dc/0x720 [ 165.706757][ T6875] event_enable_write+0x242/0x330 [ 165.706790][ T6875] ? __pfx_event_enable_write+0x10/0x10 [ 165.706821][ T6875] ? __pfx_event_enable_write+0x10/0x10 [ 165.706846][ T6875] vfs_write+0x296/0xba0 [ 165.706874][ T6875] ? __pfx_vfs_write+0x10/0x10 [ 165.706897][ T6875] ? __fget_files+0x2a/0x420 [ 165.706920][ T6875] ? __fget_files+0x3a2/0x420 [ 165.706938][ T6875] ? __fget_files+0x2a/0x420 [ 165.706963][ T6875] ksys_write+0x150/0x270 [ 165.706987][ T6875] ? __pfx_ksys_write+0x10/0x10 [ 165.707017][ T6875] do_syscall_64+0x166/0x520 [ 165.707035][ T6875] ? trace_irq_disable+0x3b/0x140 [ 165.707058][ T6875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.707074][ T6875] ? clear_bhb_loop+0x70/0xc0 [ 165.707094][ T6875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.707110][ T6875] RIP: 0033:0x7feae099e159 [ 165.707125][ T6875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.707139][ T6875] RSP: 002b:00007feae18d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.707156][ T6875] RAX: ffffffffffffffda RBX: 00007feae0c25fa0 RCX: 00007feae099e159 [ 165.707168][ T6875] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 165.707178][ T6875] RBP: 00007feae18d4090 R08: 0000000000000000 R09: 0000000000000000 [ 165.707188][ T6875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.707198][ T6875] R13: 00007feae0c26038 R14: 00007feae0c25fa0 R15: 00007ffc63ebee78 [ 165.707223][ T6875] [ 165.829847][ T6875] wakeup trace: Couldn't activate tracepoint probe to kernel_sched_wakeup [ 166.076951][ T6875] ------------[ cut here ]------------ [ 166.076978][ T6875] IS_ERR(old) [ 166.077004][ T6875] WARNING: kernel/tracepoint.c:369 at tracepoint_probe_unregister+0x1e6/0xa70, CPU#0: syz.2.389/6875 [ 166.097906][ T6875] Modules linked in: [ 166.103077][ T6875] CPU: 0 UID: 0 PID: 6875 Comm: syz.2.389 Not tainted syzkaller #0 PREEMPT(full) [ 166.112366][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.122522][ T6875] RIP: 0010:tracepoint_probe_unregister+0x1e6/0xa70 [ 166.129277][ T6875] Code: e5 4c 8b 24 24 4c 8b 74 24 18 4c 8b 7c 24 08 48 81 fd 01 f0 ff ff 72 64 e9 bb 05 00 00 e8 42 2d fe ff 48 c7 c5 fe ff ff ff 90 <0f> 0b 90 e9 26 08 00 00 e8 8d 16 2a 0a 89 c3 31 ff 89 c6 e8 22 32 [ 166.150414][ T6875] RSP: 0018:ffffc9000358fb28 EFLAGS: 00010293 [ 166.157238][ T6875] RAX: ffffffff81c9c38e RBX: 0000000000000001 RCX: ffff88802d2ebe80 [ 166.165291][ T6875] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 166.173265][ T6875] RBP: fffffffffffffffe R08: ffffffff909ba17f R09: 1ffffffff213742f [ 166.181342][ T6875] R10: dffffc0000000000 R11: fffffbfff2137430 R12: ffffffff90854f30 [ 166.189347][ T6875] R13: ffffffff81d02120 R14: ffffffff90854f68 R15: 1ffffffff210a9ed [ 166.197464][ T6875] FS: 00007feae18d46c0(0000) GS:ffff88812486d000(0000) knlGS:0000000000000000 [ 166.206509][ T6875] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.213111][ T6875] CR2: 00007f19913556c8 CR3: 0000000034aba000 CR4: 00000000003526f0 [ 166.221183][ T6875] Call Trace: [ 166.224478][ T6875] [ 166.227489][ T6875] ? probe_event_enable+0x970/0xae0 [ 166.232716][ T6875] tracing_stop_cmdline_record+0x6d/0xb0 [ 166.238450][ T6875] __ftrace_event_enable_disable+0x5bb/0x720 [ 166.245166][ T6875] event_enable_write+0x242/0x330 [ 166.250227][ T6875] ? __pfx_event_enable_write+0x10/0x10 [ 166.256247][ T6875] ? __pfx_event_enable_write+0x10/0x10 [ 166.261808][ T6875] vfs_write+0x296/0xba0 [ 166.266103][ T6875] ? __pfx_vfs_write+0x10/0x10 [ 166.270877][ T6875] ? __fget_files+0x2a/0x420 [ 166.275544][ T6875] ? __fget_files+0x3a2/0x420 [ 166.280225][ T6875] ? __fget_files+0x2a/0x420 [ 166.284889][ T6875] ksys_write+0x150/0x270 [ 166.289251][ T6875] ? __pfx_ksys_write+0x10/0x10 [ 166.294118][ T6875] do_syscall_64+0x166/0x520 [ 166.298797][ T6875] ? trace_irq_disable+0x3b/0x140 [ 166.303845][ T6875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.309997][ T6875] ? clear_bhb_loop+0x70/0xc0 [ 166.314988][ T6875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.320915][ T6875] RIP: 0033:0x7feae099e159 [ 166.325393][ T6875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.345846][ T6875] RSP: 002b:00007feae18d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 166.354278][ T6875] RAX: ffffffffffffffda RBX: 00007feae0c25fa0 RCX: 00007feae099e159 [ 166.362670][ T6875] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 166.370692][ T6875] RBP: 00007feae18d4090 R08: 0000000000000000 R09: 0000000000000000 [ 166.378753][ T6875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.386778][ T6875] R13: 00007feae0c26038 R14: 00007feae0c25fa0 R15: 00007ffc63ebee78 [ 166.394858][ T6875] [ 166.397880][ T6875] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 166.405164][ T6875] CPU: 0 UID: 0 PID: 6875 Comm: syz.2.389 Not tainted syzkaller #0 PREEMPT(full) [ 166.414357][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.424412][ T6875] Call Trace: [ 166.427691][ T6875] [ 166.430640][ T6875] vpanic+0x56d/0xa60 [ 166.434657][ T6875] ? __pfx__printk+0x10/0x10 [ 166.439267][ T6875] ? __pfx_vpanic+0x10/0x10 [ 166.443793][ T6875] ? is_bpf_text_address+0x292/0x2b0 [ 166.449095][ T6875] ? is_bpf_text_address+0x26/0x2b0 [ 166.454299][ T6875] panic+0xc5/0xd0 [ 166.458024][ T6875] ? __pfx_panic+0x10/0x10 [ 166.462459][ T6875] __warn+0x315/0x4c0 [ 166.466464][ T6875] ? tracepoint_probe_unregister+0x1e6/0xa70 [ 166.472451][ T6875] ? tracepoint_probe_unregister+0x1e6/0xa70 [ 166.478436][ T6875] __report_bug+0x276/0x570 [ 166.482942][ T6875] ? tracepoint_probe_unregister+0x1e6/0xa70 [ 166.488927][ T6875] ? __pfx___report_bug+0x10/0x10 [ 166.493948][ T6875] ? rcu_is_watching+0x16/0xb0 [ 166.498714][ T6875] ? trace_contention_end+0x3d/0x140 [ 166.504000][ T6875] ? __mutex_lock+0x30b/0x1550 [ 166.508766][ T6875] ? trace_contention_end+0x3d/0x140 [ 166.514057][ T6875] ? tracepoint_probe_unregister+0x1e6/0xa70 [ 166.520061][ T6875] report_bug+0x16b/0x220 [ 166.524395][ T6875] ? tracepoint_probe_unregister+0x1e6/0xa70 [ 166.530377][ T6875] ? tracepoint_probe_unregister+0x1e8/0xa70 [ 166.536364][ T6875] handle_bug+0x9c/0x200 [ 166.540630][ T6875] exc_invalid_op+0x1a/0x50 [ 166.545136][ T6875] asm_exc_invalid_op+0x1a/0x20 [ 166.549986][ T6875] RIP: 0010:tracepoint_probe_unregister+0x1e6/0xa70 [ 166.556606][ T6875] Code: e5 4c 8b 24 24 4c 8b 74 24 18 4c 8b 7c 24 08 48 81 fd 01 f0 ff ff 72 64 e9 bb 05 00 00 e8 42 2d fe ff 48 c7 c5 fe ff ff ff 90 <0f> 0b 90 e9 26 08 00 00 e8 8d 16 2a 0a 89 c3 31 ff 89 c6 e8 22 32 [ 166.576222][ T6875] RSP: 0018:ffffc9000358fb28 EFLAGS: 00010293 [ 166.582290][ T6875] RAX: ffffffff81c9c38e RBX: 0000000000000001 RCX: ffff88802d2ebe80 [ 166.590292][ T6875] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 166.598259][ T6875] RBP: fffffffffffffffe R08: ffffffff909ba17f R09: 1ffffffff213742f [ 166.606230][ T6875] R10: dffffc0000000000 R11: fffffbfff2137430 R12: ffffffff90854f30 [ 166.616618][ T6875] R13: ffffffff81d02120 R14: ffffffff90854f68 R15: 1ffffffff210a9ed [ 166.625055][ T6875] ? __pfx_probe_sched_switch+0x10/0x10 [ 166.630624][ T6875] ? tracepoint_probe_unregister+0x1de/0xa70 [ 166.636729][ T6875] ? tracepoint_probe_unregister+0x1de/0xa70 [ 166.643585][ T6875] ? probe_event_enable+0x970/0xae0 [ 166.648802][ T6875] tracing_stop_cmdline_record+0x6d/0xb0 [ 166.654469][ T6875] __ftrace_event_enable_disable+0x5bb/0x720 [ 166.660640][ T6875] event_enable_write+0x242/0x330 [ 166.665679][ T6875] ? __pfx_event_enable_write+0x10/0x10 [ 166.671268][ T6875] ? __pfx_event_enable_write+0x10/0x10 [ 166.676863][ T6875] vfs_write+0x296/0xba0 [ 166.681826][ T6875] ? __pfx_vfs_write+0x10/0x10 [ 166.686603][ T6875] ? __fget_files+0x2a/0x420 [ 166.691224][ T6875] ? __fget_files+0x3a2/0x420 [ 166.696442][ T6875] ? __fget_files+0x2a/0x420 [ 166.701059][ T6875] ksys_write+0x150/0x270 [ 166.705406][ T6875] ? __pfx_ksys_write+0x10/0x10 [ 166.710288][ T6875] do_syscall_64+0x166/0x520 [ 166.715868][ T6875] ? trace_irq_disable+0x3b/0x140 [ 166.720918][ T6875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.727196][ T6875] ? clear_bhb_loop+0x70/0xc0 [ 166.732944][ T6875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.738856][ T6875] RIP: 0033:0x7feae099e159 [ 166.743470][ T6875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.763099][ T6875] RSP: 002b:00007feae18d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 166.772661][ T6875] RAX: ffffffffffffffda RBX: 00007feae0c25fa0 RCX: 00007feae099e159 [ 166.780645][ T6875] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 166.788633][ T6875] RBP: 00007feae18d4090 R08: 0000000000000000 R09: 0000000000000000 [ 166.797052][ T6875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.805145][ T6875] R13: 00007feae0c26038 R14: 00007feae0c25fa0 R15: 00007ffc63ebee78 [ 166.813147][ T6875] [ 166.816239][ T6875] Kernel Offset: disabled [ 166.820574][ T6875] Rebooting in 86400 seconds..