last executing test programs: 7.14218036s ago: executing program 2 (id=1012): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="1400000001"], 0x48}}, 0x4800) (fail_nth: 1) 7.099089319s ago: executing program 1 (id=1014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x0) 7.037948514s ago: executing program 1 (id=1015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x0) (fail_nth: 1) 6.802480369s ago: executing program 2 (id=1016): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1, 0x0, 0x9}) syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x4, 0xff, 0x2}, {0x8, 0x9, 0x5, 0x8001}, {0x40, 0x3, 0x6, 0x4a7c}]}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00', @ANYBLOB="0100"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.645791259s ago: executing program 1 (id=1017): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0x21, 0x85, {0x85, 0x30, "284a9ed21194b87450be6675e1284a224ec29b417736339981f27282ae8d8f6789b6107b7afc9efa8cfcfeac16ff2a64e482528c4b86d50d055a6f75fd826c6de38d909c2acf9cb965d83c1f7fb6a2bcb3d6119d198d56cee830e92f5df7ec4bb493e2ccf1adfb4d7f237278b11badfbc2f4fa7c1fe1fac95b71829c2c05159aba478e"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x40, 0xe, 0xaf, "94a6874959337e246737db05aa84b7c8788794b692533a955574a3275bab8af6f30988fb8c81887ef7804855964e55c978b29f1af4253e470b5b6e0af1b6caed9d756fac56e62bba4fe8d2c53340d7be673a18946b3df9ca55b482fc6ea7f8df42ea5282afe3cf8923fa1f5b57107674d1e13ad513ae11affa788f5ffd9843a71ba8b47fcc7c86bf82ee0a3b4db5b7e1db385cb36f6d2c5dad61403dcaab587029d1e27ad10ee3996394cc1d39c9ac"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}}) 6.267821607s ago: executing program 3 (id=1019): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000016c0)={0x1c, &(0x7f0000001140)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 5.686150568s ago: executing program 2 (id=1021): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r1, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001080)="0fae238e70ec7b8e0f9d90f50445d43458ca21405e7875347e33a2520f42da8a7002a356fa1a495476bcafb640dcfe7d10dc3576a7da79596c0c575ae8f6db65e1aea36db2aabb84bbbe34689fc3b683c408f5f913", 0x55}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000001040)="99d3c9f30f09b993080000b800000000ba000000800f30660f38dfb1e4000000f4cfc4e1fe12230f01c3b9800000c00f3235010000000f30", 0x38}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.851932242s ago: executing program 0 (id=1025): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0x8007fffd, 0x6, 0xe, "dce4f0020100000000001b347d5c00010200"}) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb}, 0xc) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000013c0)={0x48, 0x16, 0xffffffffffffffff, 0x0, 0x80000001, 0x0, 0x0, 0x1}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r4, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000340)=0xc291) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="10000000b0000001e335ca1f504f751a2c10e92333000000000400d57c"], 0x10}], 0x1}, 0x10) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 4.649153494s ago: executing program 0 (id=1026): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001080)="0fae238e70ec7b8e0f9d90f50445d43458ca21405e7875347e33a2520f42da8a7002a356fa1a495476bcafb640dcfe7d10dc3576a7da79596c0c575ae8f6db65e1aea36db2aabb84bbbe34689fc3b683c408f5f913", 0x55}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000001040)="99d3c9f30f09b993080000b800000000ba000000800f30660f38dfb1e4000000f4cfc4e1fe12230f01c3b9800000c00f3235010000000f30", 0x38}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 3.929535049s ago: executing program 1 (id=1027): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 3.610976971s ago: executing program 3 (id=1028): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000a80)="6204270059022f000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c", 0x28}], 0x1}, 0x8045) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0x80d613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x2000000, 0x0, 0x0, 0x100}) 3.015154434s ago: executing program 0 (id=1029): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1, 0x0, 0x9}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x4, 0xff, 0x2}, {0x8, 0x9, 0x5, 0x8001}, {0x40, 0x3, 0x6, 0x4a7c}]}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00', @ANYBLOB="0100"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.526356454s ago: executing program 1 (id=1030): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) close(r3) 2.337359977s ago: executing program 3 (id=1031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x10) 2.223907852s ago: executing program 2 (id=1032): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) close(r3) (fail_nth: 1) 2.156181282s ago: executing program 3 (id=1033): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1000000018) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2e) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48081}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000040)=0x8, 0x4) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff4082057d0000000000000109028c00040100c0000904000000ffffff000904000101ffffff000b2402010203180144ac0007050101"], 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000008}, 0x20000010) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r9, &(0x7f0000005c00)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000005680)=[{&(0x7f0000000240)="c8", 0x1}], 0x1, &(0x7f0000005740)=ANY=[@ANYBLOB="18000000000000008400000007000000000000f0ffffff00"], 0x18, 0x4040040}], 0x1, 0x80d0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r11, @ANYBLOB="04005b00"], 0x20}}, 0x48000) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r13, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x0, 0x0, 0x3, 0x500, 0x1010000000, 0x4400046, r14}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x1c, r14, 0x1, 0xa4, 0x6, @random="97f3ba98c2ed"}, 0x14) 1.888771007s ago: executing program 2 (id=1034): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x1) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x8000) socket$inet_tcp(0x2, 0x1, 0x0) mount(&(0x7f0000000580)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000002280)='f2fs\x00', 0x10000, &(0x7f0000000180)='\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000080)={r4}, &(0x7f0000000100)=0x8) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0xfd, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xcdaa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0xa, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.589454898s ago: executing program 1 (id=1035): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x15, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) 1.275129124s ago: executing program 0 (id=1036): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@private1, 0x4e21, 0x5, 0x4e23, 0x3, 0xa, 0x20, 0x10}, {0x0, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x400009, 0xfffffffffffffffe, 0x1, 0xd}, 0x10000, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x4d3, 0x2b}, 0x0, @in=@empty, 0x80000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002"], 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x191, 0x240, 0x300, 0xf0, 0x32, 0x1, 0x0, 0x0, {0x0, 0x4}, {}, {0xfffffffb}, {0x0, 0x0, 0x20000000}, 0x0, 0x40, 0x3ff, 0x2000, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in=@broadcast}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x800455cc, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r3, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES32=r0], 0xe) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0x1000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x11, 0x0, 0x1000}]}) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000080)=0x494, 0x4) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x3b}, './file0\x00'}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x200001, 0x0) socket$inet6(0xa, 0x3, 0x1) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@private1, 0x4e21, 0x5, 0x4e23, 0x3, 0xa, 0x20, 0x10}, {0x0, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x400009, 0xfffffffffffffffe, 0x1, 0xd}, 0x10000, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x4d3, 0x2b}, 0x0, @in=@empty, 0x80000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002"], 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x191, 0x240, 0x300, 0xf0, 0x32, 0x1, 0x0, 0x0, {0x0, 0x4}, {}, {0xfffffffb}, {0x0, 0x0, 0x20000000}, 0x0, 0x40, 0x3ff, 0x2000, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in=@broadcast}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r3, 0x800455cc, 0x2) (async) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r3, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES32=r0], 0xe) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0x1000, 0x1000, &(0x7f0000001000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x11, 0x0, 0x1000}]}) (async) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000080)=0x494, 0x4) (async) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x3b}, './file0\x00'}) (async) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x200001, 0x0) (async) 779.90279ms ago: executing program 2 (id=1037): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001080)="0fae238e70ec7b8e0f9d90f50445d43458ca21405e7875347e33a2520f42da8a7002a356fa1a495476bcafb640dcfe7d10dc3576a7da79596c0c575ae8f6db65e1aea36db2aabb84bbbe34689fc3b683c408f5f913", 0x55}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000001040)="99d3c9f30f09b993080000b800000000ba000000800f30660f38dfb1e4000000f4cfc4e1fe12230f01c3b9800000c00f3235010000000f30", 0x38}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 563.715552ms ago: executing program 0 (id=1038): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c00020000000000000000001c0007"], 0x48}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x24, r3, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2fd9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 291.332414ms ago: executing program 3 (id=1039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x80, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r3 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0xc06c4124, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x18, r4, 0x401, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x40810) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0xb81, r2, 'id0\x00'}) socket(0x840000000002, 0x3, 0xff) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r6, &(0x7f0000005fc0)={0x2020}, 0x2020) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8010000", @ANYRES16=r7, @ANYBLOB="020007000000ffdbdf25140000000c009900030000005000000006001000a50000000f001300b621163012c19624600248000500190001000000a500ac0074fd0ce2c0047b014d3945826bf028eb229863d6b972687e936ac659875fb88fe538484b409e905cf88f5f2fe365a6eba470c4df7b9a7363b5c30730266cb41abe20d87a43be19662ca1acbc95fd76d905e8dc86c00da90c35ee13c04f3068c5c0a7877a49a0e76ff71ed00b8d791303def4bbd1279e16051e4fb54c1f33cf4c93300853c9c07c82d9fe55a4b91e072641850000008f87bfe10f66c8c8dce703db00000005001301010000000c004300020000000000000006001000b40000000500190002070000aa00ac00ffa2e5bc9441ea6dca1029200734b21f0f3d3d8141c051b9b9d9be6e22713a29ab1cf7838c8d716935bf2a37ab4dc83a14912045913884ab67f1a52f4d6ebef4c2203f0334795714f9e107eb286bb437f6d6c06d5ac1c1ea5e8ab2e1ac36722766f264de5e6d8c8b1f911e2bca1d4d4af2f95181b88a9769cacf77f4fce078ae2b69eaa098eb87f0659bb9546b980575309b1df69c224ec6dde50000729d9a7944d30af04ef24c31a690546b45fb93513cf7a534268995a31c58d15cb15e5b7020a1ac7f1f5735a6f8c6802170b314e3d1ed58a7aa6fb00e31d4037347830f59f75e1d34bade0a6097ade990205860caabe4b8c0c58bd438c04ad5fdc0f257b3aaf8d28ef25806c915163950b4ed7b0d4e1d831fcd83293c01c191cd14aa17ea0c627dc371dc90dd8cb55b6c914a56d5ba56fcbad7d1af4d3a671ce702101202225c08177ef2b6be23180dfb7d3dbd7bdbbc87f81bde260dc8f5a8090f9be650e7656f850486e14cc11177fe69f57cb7de880f09e877cced6ec9d7d2f000"/659], 0x1b8}}, 0x20000000) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000080)) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x0, 0xe}) 252.285115ms ago: executing program 0 (id=1040): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r1, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001080)="0fae238e70ec7b8e0f9d90f50445d43458ca21405e7875347e33a2520f42da8a7002a356fa1a495476bcafb640dcfe7d10dc3576a7da79596c0c575ae8f6db65e1aea36db2aabb84bbbe34689fc3b683c408f5f913", 0x55}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000001040)="99d3c9f30f09b993080000b800000000ba000000800f30660f38dfb1e4000000f4cfc4e1fe12230f01c3b9800000c00f3235010000000f30", 0x38}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=1041): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c00020000000000000000001c0007"], 0x48}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x24, r3, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2fd9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (fail_nth: 1) kernel console output (not intermixed with test programs): 4.641907][ T8537] security_file_ioctl+0xb9/0x260 [ 304.641935][ T8537] __se_sys_ioctl+0x47/0x170 [ 304.641966][ T8537] do_syscall_64+0x17b/0x530 [ 304.641982][ T8537] ? irqentry_exit+0x10f/0x8f0 [ 304.641993][ T8537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.642014][ T8537] ? clear_bhb_loop+0x40/0x90 [ 304.642029][ T8537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.642042][ T8537] RIP: 0033:0x7f66a9a2e0d9 [ 304.642055][ T8537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.642066][ T8537] RSP: 002b:00007f66a7c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.642080][ T8537] RAX: ffffffffffffffda RBX: 00007f66a9cb5fa0 RCX: 00007f66a9a2e0d9 [ 304.642090][ T8537] RDX: 0000200000000080 RSI: 000000004008af30 RDI: 0000000000000007 [ 304.642098][ T8537] RBP: 00007f66a7c86090 R08: 0000000000000000 R09: 0000000000000000 [ 304.642106][ T8537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.642113][ T8537] R13: 00007f66a9cb6038 R14: 00007f66a9cb5fa0 R15: 00007fff8e1c8988 [ 304.642132][ T8537] [ 304.642148][ T8537] ERROR: Out of memory at tomoyo_realpath_from_path. [ 304.674007][ T5323] usb 1-1: device descriptor read/64, error -71 [ 304.930140][ T8525] syz.2.822 (8525): drop_caches: 2 [ 304.964020][ T5323] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 305.094110][ T5323] usb 1-1: device descriptor read/64, error -71 [ 305.174007][ T8545] openvswitch: netlink: Message has 8 unknown bytes. [ 305.174030][ T8545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.215398][ T5323] usb usb1-port1: attempt power cycle [ 305.427463][ T8547] futex_wake_op: syz.3.829 tries to shift op by 144; fix this program [ 305.479864][ T8547] futex_wake_op: syz.3.829 tries to shift op by 144; fix this program [ 305.574267][ T5323] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 305.595026][ T5323] usb 1-1: device descriptor read/8, error -71 [ 305.854049][ T5323] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 305.874979][ T5323] usb 1-1: device descriptor read/8, error -71 [ 305.984611][ T5323] usb usb1-port1: unable to enumerate USB device [ 306.583961][ T10] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 306.624116][ T5323] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 306.738557][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 306.738580][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.738607][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 306.738622][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.806493][ T5323] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.806594][ T5323] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.806623][ T5323] usb 4-1: config 0 interface 0 has no altsetting 0 [ 306.806660][ T5323] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 306.806685][ T5323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.865782][ T5323] usb 4-1: config 0 descriptor?? [ 306.958129][ T10] usb 3-1: usb_control_msg returned -32 [ 306.958259][ T10] usbtmc 3-1:16.0: can't read capabilities [ 307.361998][ T8577] FAULT_INJECTION: forcing a failure. [ 307.361998][ T8577] name failslab, interval 1, probability 0, space 0, times 0 [ 307.362038][ T8577] CPU: 1 UID: 0 PID: 8577 Comm: syz.2.833 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 307.362067][ T8577] Tainted: [L]=SOFTLOCKUP [ 307.362083][ T8577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 307.362096][ T8577] Call Trace: [ 307.362104][ T8577] [ 307.362113][ T8577] dump_stack_lvl+0xe8/0x150 [ 307.362147][ T8577] should_fail_ex+0x467/0x600 [ 307.362182][ T8577] should_failslab+0xa8/0x100 [ 307.362206][ T8577] __kmalloc_noprof+0xfb/0x790 [ 307.362236][ T8577] ? tomoyo_realpath_from_path+0xef/0x640 [ 307.362268][ T8577] ? tomoyo_realpath_from_path+0xef/0x640 [ 307.362306][ T8577] tomoyo_realpath_from_path+0xef/0x640 [ 307.362346][ T8577] ? tomoyo_path_number_perm+0x219/0x5f0 [ 307.362373][ T8577] tomoyo_path_number_perm+0x246/0x5f0 [ 307.362402][ T8577] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 307.362437][ T8577] ? rb_commit+0x784/0x7e0 [ 307.362492][ T8577] ? __fget_files+0x2a/0x420 [ 307.362520][ T8577] ? __fget_files+0x3a8/0x420 [ 307.362540][ T8577] ? __fget_files+0x2a/0x420 [ 307.362566][ T8577] security_file_ioctl+0xb9/0x260 [ 307.362593][ T8577] __se_sys_ioctl+0x47/0x170 [ 307.362626][ T8577] do_syscall_64+0x17b/0x530 [ 307.362649][ T8577] ? irqentry_exit+0x10f/0x8f0 [ 307.362674][ T8577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.362696][ T8577] ? clear_bhb_loop+0x40/0x90 [ 307.362723][ T8577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.362744][ T8577] RIP: 0033:0x7ff98896e0d9 [ 307.362765][ T8577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.362784][ T8577] RSP: 002b:00007ff986ba5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.362808][ T8577] RAX: ffffffffffffffda RBX: 00007ff988bf6090 RCX: 00007ff98896e0d9 [ 307.362824][ T8577] RDX: 0000200000000040 RSI: 00000000c0105b08 RDI: 0000000000000004 [ 307.362838][ T8577] RBP: 00007ff986ba5090 R08: 0000000000000000 R09: 0000000000000000 [ 307.362850][ T8577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.362863][ T8577] R13: 00007ff988bf6128 R14: 00007ff988bf6090 R15: 00007ffdd4d1c478 [ 307.362895][ T8577] [ 307.363032][ T8577] ERROR: Out of memory at tomoyo_realpath_from_path. [ 307.507654][ T5323] usbhid 4-1:0.0: can't add hid device: -71 [ 307.507814][ T5323] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 307.599933][ T5668] usb 3-1: USB disconnect, device number 39 [ 307.682908][ T8580] FAULT_INJECTION: forcing a failure. [ 307.682908][ T8580] name failslab, interval 1, probability 0, space 0, times 0 [ 307.682947][ T8580] CPU: 1 UID: 0 PID: 8580 Comm: syz.0.837 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 307.682976][ T8580] Tainted: [L]=SOFTLOCKUP [ 307.682988][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 307.683001][ T8580] Call Trace: [ 307.683010][ T8580] [ 307.683018][ T8580] dump_stack_lvl+0xe8/0x150 [ 307.683051][ T8580] should_fail_ex+0x467/0x600 [ 307.683085][ T8580] should_failslab+0xa8/0x100 [ 307.683108][ T8580] __kmalloc_noprof+0xfb/0x790 [ 307.683138][ T8580] ? tomoyo_realpath_from_path+0xef/0x640 [ 307.683168][ T8580] ? tomoyo_realpath_from_path+0xef/0x640 [ 307.683206][ T8580] tomoyo_realpath_from_path+0xef/0x640 [ 307.683247][ T8580] ? tomoyo_path_number_perm+0x219/0x5f0 [ 307.683274][ T8580] tomoyo_path_number_perm+0x246/0x5f0 [ 307.683303][ T8580] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 307.683338][ T8580] ? rb_commit+0x784/0x7e0 [ 307.683392][ T8580] ? __fget_files+0x2a/0x420 [ 307.683419][ T8580] ? __fget_files+0x3a8/0x420 [ 307.683439][ T8580] ? __fget_files+0x2a/0x420 [ 307.683472][ T8580] security_file_ioctl+0xb9/0x260 [ 307.683500][ T8580] __se_sys_ioctl+0x47/0x170 [ 307.683530][ T8580] do_syscall_64+0x17b/0x530 [ 307.683552][ T8580] ? irqentry_exit+0x10f/0x8f0 [ 307.683572][ T8580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.683593][ T8580] ? clear_bhb_loop+0x40/0x90 [ 307.683619][ T8580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.683639][ T8580] RIP: 0033:0x7f1bf9c2e0d9 [ 307.683659][ T8580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.683678][ T8580] RSP: 002b:00007f1bf7e65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.683700][ T8580] RAX: ffffffffffffffda RBX: 00007f1bf9eb6090 RCX: 00007f1bf9c2e0d9 [ 307.683716][ T8580] RDX: 0000000000000000 RSI: 00000000400448c9 RDI: 0000000000000005 [ 307.683729][ T8580] RBP: 00007f1bf7e65090 R08: 0000000000000000 R09: 0000000000000000 [ 307.683745][ T8580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.683758][ T8580] R13: 00007f1bf9eb6128 R14: 00007f1bf9eb6090 R15: 00007ffca2a55098 [ 307.683792][ T8580] [ 307.691908][ T8580] ERROR: Out of memory at tomoyo_realpath_from_path. [ 307.926098][ T5323] usb 4-1: USB disconnect, device number 45 [ 308.406048][ T5668] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 308.578200][ T5668] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.578231][ T5668] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.579784][ T5668] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 308.579813][ T5668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 308.579835][ T5668] usb 4-1: SerialNumber: syz [ 308.689086][ T8589] FAULT_INJECTION: forcing a failure. [ 308.689086][ T8589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.689125][ T8589] CPU: 0 UID: 0 PID: 8589 Comm: syz.2.842 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 308.689156][ T8589] Tainted: [L]=SOFTLOCKUP [ 308.689163][ T8589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 308.689175][ T8589] Call Trace: [ 308.689183][ T8589] [ 308.689192][ T8589] dump_stack_lvl+0xe8/0x150 [ 308.689227][ T8589] should_fail_ex+0x467/0x600 [ 308.689261][ T8589] _copy_from_user+0x2d/0xb0 [ 308.689282][ T8589] ___sys_sendmsg+0x1c6/0x360 [ 308.689314][ T8589] ? __lock_acquire+0x6df/0x2e40 [ 308.689340][ T8589] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.689374][ T8589] ? __rb_reserve_next+0x795/0xdc0 [ 308.689432][ T8589] ? __fget_files+0x2a/0x420 [ 308.689453][ T8589] ? __fget_files+0x3a8/0x420 [ 308.689486][ T8589] __x64_sys_sendmsg+0x1b7/0x290 [ 308.689522][ T8589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.689564][ T8589] ? trace_syscall_enter+0x5b/0x100 [ 308.689588][ T8589] ? trace_syscall_enter+0x5b/0x100 [ 308.689611][ T8589] ? rcu_is_watching+0x15/0xb0 [ 308.689634][ T8589] ? trace_syscall_enter+0x5b/0x100 [ 308.689660][ T8589] do_syscall_64+0x17b/0x530 [ 308.689683][ T8589] ? irqentry_exit+0x10f/0x8f0 [ 308.689702][ T8589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.689723][ T8589] ? clear_bhb_loop+0x40/0x90 [ 308.689749][ T8589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.689770][ T8589] RIP: 0033:0x7ff98896e0d9 [ 308.689790][ T8589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.689808][ T8589] RSP: 002b:00007ff986bc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.689831][ T8589] RAX: ffffffffffffffda RBX: 00007ff988bf5fa0 RCX: 00007ff98896e0d9 [ 308.689857][ T8589] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 308.689871][ T8589] RBP: 00007ff986bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 308.689885][ T8589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.689897][ T8589] R13: 00007ff988bf6038 R14: 00007ff988bf5fa0 R15: 00007ffdd4d1c478 [ 308.689930][ T8589] [ 308.866574][ T5668] usb 4-1: 0:2 : does not exist [ 309.051694][ T5668] usb 4-1: USB disconnect, device number 46 [ 309.190397][ T6156] udevd[6156]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 309.384290][ T5323] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 309.537571][ T5323] usb 3-1: config 0 has no interfaces? [ 309.537615][ T5323] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 309.537640][ T5323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.561160][ T5323] usb 3-1: config 0 descriptor?? [ 309.573976][ T5668] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 309.723906][ T5668] usb 1-1: Using ep0 maxpacket: 8 [ 309.726681][ T5668] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 309.726716][ T5668] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 309.726742][ T5668] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 309.726758][ T5668] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.726785][ T5668] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 309.726799][ T5668] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.799408][ T5759] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 309.941882][ T5668] usb 1-1: GET_CAPABILITIES returned 0 [ 309.941915][ T5668] usbtmc 1-1:16.0: can't read capabilities [ 309.956387][ T5759] usb 4-1: Using ep0 maxpacket: 8 [ 309.958531][ T5759] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 309.958561][ T5759] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 309.958587][ T5759] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 309.958609][ T5759] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.958636][ T5759] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 309.958650][ T5759] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.179615][ T5668] usb 1-1: USB disconnect, device number 66 [ 310.241604][ T5759] usb 4-1: GET_CAPABILITIES returned 61 [ 310.241636][ T5759] usbtmc 4-1:16.0: can't read capabilities [ 310.574272][ T8615] netlink: 'syz.1.851': attribute type 2 has an invalid length. [ 310.574288][ T8615] netlink: 'syz.1.851': attribute type 1 has an invalid length. [ 310.574295][ T8615] netlink: 'syz.1.851': attribute type 8 has an invalid length. [ 310.574304][ T8615] netlink: 44 bytes leftover after parsing attributes in process `syz.1.851'. [ 311.148906][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 311.896038][ T5759] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 312.006792][ T8635] FAULT_INJECTION: forcing a failure. [ 312.006792][ T8635] name failslab, interval 1, probability 0, space 0, times 0 [ 312.006820][ T8635] CPU: 0 UID: 0 PID: 8635 Comm: syz.1.859 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 312.006838][ T8635] Tainted: [L]=SOFTLOCKUP [ 312.006843][ T8635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 312.006850][ T8635] Call Trace: [ 312.006855][ T8635] [ 312.006861][ T8635] dump_stack_lvl+0xe8/0x150 [ 312.006883][ T8635] should_fail_ex+0x467/0x600 [ 312.006903][ T8635] should_failslab+0xa8/0x100 [ 312.006917][ T8635] __kvmalloc_node_noprof+0x176/0x880 [ 312.006938][ T8635] ? traverse+0xf1/0x620 [ 312.006954][ T8635] ? traverse+0xf1/0x620 [ 312.006982][ T8635] traverse+0xf1/0x620 [ 312.007000][ T8635] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 312.007015][ T8635] ? seq_read_iter+0xa5/0xcb0 [ 312.007034][ T8635] seq_read_iter+0xb6b/0xcb0 [ 312.007055][ T8635] ? kernfs_fop_read_iter+0x145/0x6a0 [ 312.007076][ T8635] do_iter_readv_writev+0x624/0x8d0 [ 312.007093][ T8635] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 312.007115][ T8635] ? rw_verify_area+0x250/0x4d0 [ 312.007131][ T8635] vfs_readv+0x293/0x850 [ 312.007155][ T8635] ? __pfx_vfs_readv+0x10/0x10 [ 312.007180][ T8635] ? __fget_files+0x2a/0x420 [ 312.007196][ T8635] ? __fget_files+0x3a8/0x420 [ 312.007207][ T8635] ? __fget_files+0x2a/0x420 [ 312.007224][ T8635] __x64_sys_preadv+0x19f/0x2c0 [ 312.007242][ T8635] ? __pfx___x64_sys_preadv+0x10/0x10 [ 312.007257][ T8635] ? trace_syscall_enter+0x5b/0x100 [ 312.007271][ T8635] ? trace_syscall_enter+0x5b/0x100 [ 312.007283][ T8635] ? rcu_is_watching+0x15/0xb0 [ 312.007296][ T8635] ? trace_syscall_enter+0x5b/0x100 [ 312.007311][ T8635] do_syscall_64+0x17b/0x530 [ 312.007323][ T8635] ? irqentry_exit+0x10f/0x8f0 [ 312.007335][ T8635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.007348][ T8635] ? clear_bhb_loop+0x40/0x90 [ 312.007363][ T8635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.007375][ T8635] RIP: 0033:0x7f66a9a2e0d9 [ 312.007389][ T8635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.007399][ T8635] RSP: 002b:00007f66a7c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 312.007413][ T8635] RAX: ffffffffffffffda RBX: 00007f66a9cb5fa0 RCX: 00007f66a9a2e0d9 [ 312.007422][ T8635] RDX: 0000000000000001 RSI: 0000200000002880 RDI: 0000000000000004 [ 312.007430][ T8635] RBP: 00007f66a7c86090 R08: 00000000fdffffff R09: 0000000000000000 [ 312.007439][ T8635] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 312.007446][ T8635] R13: 00007f66a9cb6038 R14: 00007f66a9cb5fa0 R15: 00007fff8e1c8988 [ 312.007469][ T8635] [ 312.123890][ T5759] usb 1-1: Using ep0 maxpacket: 32 [ 312.172460][ T5668] usb 3-1: USB disconnect, device number 40 [ 312.264023][ T5759] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 312.264062][ T5759] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 312.325736][ T5759] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.325769][ T5759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.325789][ T5759] usb 1-1: Product: ꭃ羊ᘽ굅⵶㵜鱪惫￿ɰ꠷꨼᧑በ㋮ṽ奾륪ᶠ䗹碲䂵ꤍோ餚೏숖蟇ﲜⓞ떣핬뒷ྒྷ蒖涐蔷 [ 312.325812][ T5759] usb 1-1: Manufacturer: ᠉ [ 312.325826][ T5759] usb 1-1: SerialNumber: 鋺ꈷ䟈퍐ﴔᩖ噳鐎ᗀݒꗷ牥寤궙殠播꾖 [ 312.532360][ T37] usb 4-1: USB disconnect, device number 47 [ 312.647870][ T5668] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 312.666498][ T5323] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 312.666743][ T5323] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 312.666780][ T5323] lpc_ich 0000:00:00.0: I/O space for GPIO uninitialized [ 312.666794][ T5323] lpc_ich 0000:00:00.0: No MFD cells added [ 312.744037][ T10] lpc_ich 0000:00:01.0: I/O space for ACPI uninitialized [ 312.744080][ T10] lpc_ich 0000:00:01.0: I/O space for ACPI uninitialized [ 312.744113][ T10] lpc_ich 0000:00:01.0: I/O space for GPIO uninitialized [ 312.744127][ T10] lpc_ich 0000:00:01.0: No MFD cells added [ 312.747893][ T10] lpc_ich 0000:00:01.3: RCBA is disabled by hardware/BIOS, device disabled [ 312.749015][ T10] lpc_ich 0000:00:01.3: I/O space for GPIO uninitialized [ 312.749034][ T10] lpc_ich 0000:00:01.3: No MFD cells added [ 312.750510][ T10] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized [ 312.750547][ T10] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized [ 312.750578][ T10] lpc_ich 0000:00:05.0: I/O space for GPIO uninitialized [ 312.750592][ T10] lpc_ich 0000:00:05.0: No MFD cells added [ 312.795290][ T5668] usb 3-1: Using ep0 maxpacket: 32 [ 312.797959][ T5668] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 312.797988][ T5668] usb 3-1: config 0 has no interface number 0 [ 312.798036][ T5668] usb 3-1: config 0 interface 12 has no altsetting 0 [ 312.808217][ T5668] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 312.808249][ T5668] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.808268][ T5668] usb 3-1: Product: syz [ 312.808281][ T5668] usb 3-1: Manufacturer: syz [ 312.808295][ T5668] usb 3-1: SerialNumber: syz [ 312.831324][ T5668] usb 3-1: config 0 descriptor?? [ 312.984029][ T8645] FAULT_INJECTION: forcing a failure. [ 312.984029][ T8645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.984064][ T8645] CPU: 0 UID: 0 PID: 8645 Comm: syz.3.863 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 312.984093][ T8645] Tainted: [L]=SOFTLOCKUP [ 312.984100][ T8645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 312.984110][ T8645] Call Trace: [ 312.984118][ T8645] [ 312.984126][ T8645] dump_stack_lvl+0xe8/0x150 [ 312.984155][ T8645] should_fail_ex+0x467/0x600 [ 312.984182][ T8645] _copy_to_user+0x31/0xb0 [ 312.984200][ T8645] simple_read_from_buffer+0xe1/0x170 [ 312.984226][ T8645] proc_fail_nth_read+0x1be/0x230 [ 312.984252][ T8645] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.984279][ T8645] ? rw_verify_area+0x250/0x4d0 [ 312.984305][ T8645] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.984327][ T8645] vfs_read+0x219/0xa90 [ 312.984359][ T8645] ? __pfx_vfs_read+0x10/0x10 [ 312.984386][ T8645] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 312.984409][ T8645] ? lockdep_hardirqs_on+0x7a/0x110 [ 312.984431][ T8645] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 312.984452][ T8645] ? mutex_lock_nested+0x152/0x1d0 [ 312.984478][ T8645] ? fdget_pos+0x252/0x320 [ 312.984511][ T8645] ksys_read+0x156/0x270 [ 312.984539][ T8645] ? __pfx_ksys_read+0x10/0x10 [ 312.984564][ T8645] ? trace_syscall_enter+0x5b/0x100 [ 312.984588][ T8645] ? trace_syscall_enter+0x5b/0x100 [ 312.984610][ T8645] ? rcu_is_watching+0x15/0xb0 [ 312.984633][ T8645] ? trace_syscall_enter+0x5b/0x100 [ 312.984658][ T8645] do_syscall_64+0x17b/0x530 [ 312.984679][ T8645] ? irqentry_exit+0x10f/0x8f0 [ 312.984698][ T8645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.984719][ T8645] ? clear_bhb_loop+0x40/0x90 [ 312.984745][ T8645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.984766][ T8645] RIP: 0033:0x7fa5189ee90e [ 312.984787][ T8645] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 312.984804][ T8645] RSP: 002b:00007fa516c64fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.984827][ T8645] RAX: ffffffffffffffda RBX: 00007fa516c656c0 RCX: 00007fa5189ee90e [ 312.984843][ T8645] RDX: 000000000000000f RSI: 00007fa516c650a0 RDI: 0000000000000003 [ 312.984866][ T8645] RBP: 00007fa516c65090 R08: 0000000000000000 R09: 0000000000000000 [ 312.984881][ T8645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.984894][ T8645] R13: 00007fa518cb6128 R14: 00007fa518cb6090 R15: 00007ffda0501aa8 [ 312.984928][ T8645] [ 313.555595][ T5668] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 313.555660][ T5668] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 313.555678][ T5668] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 313.555782][ T5668] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 313.582391][ T5668] usb 3-1: USB disconnect, device number 41 [ 313.716727][ T821] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 313.843904][ T821] usb 2-1: device descriptor read/64, error -71 [ 314.103911][ T821] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 314.234030][ T821] usb 2-1: device descriptor read/64, error -71 [ 314.347644][ T821] usb usb2-port1: attempt power cycle [ 314.686034][ T5323] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 314.686089][ T5668] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 314.704102][ T821] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 314.725478][ T821] usb 2-1: device descriptor read/8, error -71 [ 314.837579][ T5668] usb 3-1: config 0 has no interfaces? [ 314.837621][ T5668] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 314.837648][ T5668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.842757][ T5668] usb 3-1: config 0 descriptor?? [ 314.870731][ T5323] usb 4-1: Using ep0 maxpacket: 16 [ 314.882602][ T5323] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 314.899299][ T5323] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 314.899399][ T5323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.899422][ T5323] usb 4-1: Product: syz [ 314.899438][ T5323] usb 4-1: Manufacturer: syz [ 314.899461][ T5323] usb 4-1: SerialNumber: syz [ 314.940293][ T5323] usb 4-1: config 0 descriptor?? [ 314.964009][ T821] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 314.984860][ T821] usb 2-1: device descriptor read/8, error -71 [ 315.095774][ T821] usb usb2-port1: unable to enumerate USB device [ 316.598898][ T8669] netlink: 'syz.1.870': attribute type 10 has an invalid length. [ 316.618260][ T8670] netlink: 'syz.1.870': attribute type 10 has an invalid length. [ 317.414584][ T5668] usb 4-1: USB disconnect, device number 48 [ 317.469948][ T5759] cdc_ncm 1-1:1.0: bind() failure [ 317.490824][ T821] usb 3-1: USB disconnect, device number 42 [ 317.543317][ T5759] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 317.543371][ T5759] cdc_ncm 1-1:1.1: bind() failure [ 317.588987][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.589084][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.673153][ T5323] usb 1-1: USB disconnect, device number 67 [ 318.246327][ T8699] binder: BINDER_SET_CONTEXT_MGR already set [ 318.246344][ T8699] binder: 8698:8699 ioctl 4018620d 200000000480 returned -16 [ 318.274073][ T5759] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 318.274459][ T8699] FAULT_INJECTION: forcing a failure. [ 318.274459][ T8699] name failslab, interval 1, probability 0, space 0, times 0 [ 318.274497][ T8699] CPU: 1 UID: 0 PID: 8699 Comm: syz.0.878 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 318.274532][ T8699] Tainted: [L]=SOFTLOCKUP [ 318.274540][ T8699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 318.274551][ T8699] Call Trace: [ 318.274560][ T8699] [ 318.274569][ T8699] dump_stack_lvl+0xe8/0x150 [ 318.274605][ T8699] should_fail_ex+0x467/0x600 [ 318.274642][ T8699] should_failslab+0xa8/0x100 [ 318.274666][ T8699] __kmalloc_noprof+0xfb/0x790 [ 318.274699][ T8699] ? tomoyo_realpath_from_path+0xef/0x640 [ 318.274729][ T8699] ? tomoyo_realpath_from_path+0xef/0x640 [ 318.274769][ T8699] tomoyo_realpath_from_path+0xef/0x640 [ 318.274810][ T8699] ? tomoyo_path_number_perm+0x219/0x5f0 [ 318.274837][ T8699] tomoyo_path_number_perm+0x246/0x5f0 [ 318.274868][ T8699] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 318.274936][ T8699] ? __fget_files+0x2a/0x420 [ 318.274965][ T8699] ? __fget_files+0x3a8/0x420 [ 318.274987][ T8699] ? __fget_files+0x2a/0x420 [ 318.275014][ T8699] security_file_ioctl+0xb9/0x260 [ 318.275041][ T8699] __se_sys_ioctl+0x47/0x170 [ 318.275073][ T8699] do_syscall_64+0x17b/0x530 [ 318.275096][ T8699] ? irqentry_exit+0x10f/0x8f0 [ 318.275116][ T8699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.275139][ T8699] ? clear_bhb_loop+0x40/0x90 [ 318.275167][ T8699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.275189][ T8699] RIP: 0033:0x7f1bf9c2e0d9 [ 318.275210][ T8699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.275228][ T8699] RSP: 002b:00007f1bf7e86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.275252][ T8699] RAX: ffffffffffffffda RBX: 00007f1bf9eb5fa0 RCX: 00007f1bf9c2e0d9 [ 318.275267][ T8699] RDX: 0000200000000640 RSI: 00000000c0306201 RDI: 0000000000000003 [ 318.275281][ T8699] RBP: 00007f1bf7e86090 R08: 0000000000000000 R09: 0000000000000000 [ 318.275295][ T8699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.275308][ T8699] R13: 00007f1bf9eb6038 R14: 00007f1bf9eb5fa0 R15: 00007ffca2a55098 [ 318.275345][ T8699] [ 318.275754][ T8699] ERROR: Out of memory at tomoyo_realpath_from_path. [ 318.573954][ T5759] usb 4-1: Using ep0 maxpacket: 32 [ 318.577409][ T5759] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 318.577438][ T5759] usb 4-1: config 0 has no interface number 0 [ 318.577490][ T5759] usb 4-1: config 0 interface 12 has no altsetting 0 [ 318.610913][ T5759] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 318.610947][ T5759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.610969][ T5759] usb 4-1: Product: syz [ 318.610984][ T5759] usb 4-1: Manufacturer: syz [ 318.610998][ T5759] usb 4-1: SerialNumber: syz [ 318.659829][ T5759] usb 4-1: config 0 descriptor?? [ 318.984712][ T10] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 319.144024][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 319.149241][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 319.172771][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 319.172868][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.172891][ T10] usb 1-1: Product: syz [ 319.172904][ T10] usb 1-1: Manufacturer: syz [ 319.172913][ T10] usb 1-1: SerialNumber: syz [ 319.213952][ T10] usb 1-1: config 0 descriptor?? [ 319.385635][ T5759] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 319.385702][ T5759] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 319.385721][ T5759] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 319.385827][ T5759] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 319.443703][ T5759] usb 4-1: USB disconnect, device number 49 [ 319.798669][ T8720] FAULT_INJECTION: forcing a failure. [ 319.798669][ T8720] name failslab, interval 1, probability 0, space 0, times 0 [ 319.798696][ T8720] CPU: 0 UID: 0 PID: 8720 Comm: syz.1.884 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 319.798715][ T8720] Tainted: [L]=SOFTLOCKUP [ 319.798719][ T8720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 319.798727][ T8720] Call Trace: [ 319.798733][ T8720] [ 319.798738][ T8720] dump_stack_lvl+0xe8/0x150 [ 319.798760][ T8720] should_fail_ex+0x467/0x600 [ 319.798792][ T8720] should_failslab+0xa8/0x100 [ 319.798815][ T8720] __kmalloc_noprof+0xfb/0x790 [ 319.798856][ T8720] ? tomoyo_realpath_from_path+0xef/0x640 [ 319.798888][ T8720] ? tomoyo_realpath_from_path+0xef/0x640 [ 319.798926][ T8720] tomoyo_realpath_from_path+0xef/0x640 [ 319.798953][ T8720] ? tomoyo_path_number_perm+0x219/0x5f0 [ 319.798969][ T8720] tomoyo_path_number_perm+0x246/0x5f0 [ 319.798987][ T8720] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 319.799006][ T8720] ? rb_commit+0x784/0x7e0 [ 319.799038][ T8720] ? __fget_files+0x2a/0x420 [ 319.799054][ T8720] ? __fget_files+0x3a8/0x420 [ 319.799069][ T8720] ? __fget_files+0x2a/0x420 [ 319.799084][ T8720] security_file_ioctl+0xb9/0x260 [ 319.799100][ T8720] __se_sys_ioctl+0x47/0x170 [ 319.799118][ T8720] do_syscall_64+0x17b/0x530 [ 319.799132][ T8720] ? irqentry_exit+0x10f/0x8f0 [ 319.799144][ T8720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.799157][ T8720] ? clear_bhb_loop+0x40/0x90 [ 319.799172][ T8720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.799185][ T8720] RIP: 0033:0x7f66a9a2e0d9 [ 319.799198][ T8720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.799210][ T8720] RSP: 002b:00007f66a7c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.799224][ T8720] RAX: ffffffffffffffda RBX: 00007f66a9cb5fa0 RCX: 00007f66a9a2e0d9 [ 319.799234][ T8720] RDX: 0000200000000100 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 319.799242][ T8720] RBP: 00007f66a7c86090 R08: 0000000000000000 R09: 0000000000000000 [ 319.799250][ T8720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.799258][ T8720] R13: 00007f66a9cb6038 R14: 00007f66a9cb5fa0 R15: 00007fff8e1c8988 [ 319.799277][ T8720] [ 319.799283][ T8720] ERROR: Out of memory at tomoyo_realpath_from_path. [ 320.212755][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.886'. [ 320.291028][ T8729] netlink: 1232 bytes leftover after parsing attributes in process `syz.2.887'. [ 320.489773][ T8733] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 320.905503][ T8736] FAULT_INJECTION: forcing a failure. [ 320.905503][ T8736] name failslab, interval 1, probability 0, space 0, times 0 [ 320.905538][ T8736] CPU: 0 UID: 0 PID: 8736 Comm: syz.2.889 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 320.905568][ T8736] Tainted: [L]=SOFTLOCKUP [ 320.905576][ T8736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 320.905589][ T8736] Call Trace: [ 320.905598][ T8736] [ 320.905608][ T8736] dump_stack_lvl+0xe8/0x150 [ 320.905641][ T8736] should_fail_ex+0x467/0x600 [ 320.905678][ T8736] should_failslab+0xa8/0x100 [ 320.905701][ T8736] __kmalloc_noprof+0xfb/0x790 [ 320.905732][ T8736] ? tomoyo_realpath_from_path+0xef/0x640 [ 320.905756][ T8736] ? tomoyo_realpath_from_path+0xef/0x640 [ 320.905779][ T8736] tomoyo_realpath_from_path+0xef/0x640 [ 320.905802][ T8736] ? tomoyo_path_number_perm+0x219/0x5f0 [ 320.905818][ T8736] tomoyo_path_number_perm+0x246/0x5f0 [ 320.905835][ T8736] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 320.905859][ T8736] ? rb_commit+0x784/0x7e0 [ 320.905889][ T8736] ? __fget_files+0x2a/0x420 [ 320.905904][ T8736] ? __fget_files+0x3a8/0x420 [ 320.905917][ T8736] ? __fget_files+0x2a/0x420 [ 320.905931][ T8736] security_file_ioctl+0xb9/0x260 [ 320.905947][ T8736] __se_sys_ioctl+0x47/0x170 [ 320.905966][ T8736] do_syscall_64+0x17b/0x530 [ 320.905980][ T8736] ? irqentry_exit+0x10f/0x8f0 [ 320.905991][ T8736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.906004][ T8736] ? clear_bhb_loop+0x40/0x90 [ 320.906020][ T8736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.906032][ T8736] RIP: 0033:0x7ff98896e0d9 [ 320.906045][ T8736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.906056][ T8736] RSP: 002b:00007ff986bc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.906071][ T8736] RAX: ffffffffffffffda RBX: 00007ff988bf5fa0 RCX: 00007ff98896e0d9 [ 320.906080][ T8736] RDX: 00002000000001c0 RSI: 000000004400ae8f RDI: 0000000000000005 [ 320.906088][ T8736] RBP: 00007ff986bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 320.906096][ T8736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.906104][ T8736] R13: 00007ff988bf6038 R14: 00007ff988bf5fa0 R15: 00007ffdd4d1c478 [ 320.906122][ T8736] [ 320.906128][ T8736] ERROR: Out of memory at tomoyo_realpath_from_path. [ 320.906216][ T8736] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 321.802747][ T5668] usb 1-1: USB disconnect, device number 68 [ 321.974802][ T8751] FAULT_INJECTION: forcing a failure. [ 321.974802][ T8751] name failslab, interval 1, probability 0, space 0, times 0 [ 321.974841][ T8751] CPU: 1 UID: 0 PID: 8751 Comm: syz.0.893 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 321.974866][ T8751] Tainted: [L]=SOFTLOCKUP [ 321.974873][ T8751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 321.974884][ T8751] Call Trace: [ 321.974892][ T8751] [ 321.974901][ T8751] dump_stack_lvl+0xe8/0x150 [ 321.974935][ T8751] should_fail_ex+0x467/0x600 [ 321.974964][ T8751] should_failslab+0xa8/0x100 [ 321.974984][ T8751] __kmalloc_noprof+0xfb/0x790 [ 321.975009][ T8751] ? tomoyo_realpath_from_path+0xef/0x640 [ 321.975035][ T8751] ? tomoyo_realpath_from_path+0xef/0x640 [ 321.975068][ T8751] tomoyo_realpath_from_path+0xef/0x640 [ 321.975104][ T8751] ? tomoyo_path_number_perm+0x219/0x5f0 [ 321.975126][ T8751] tomoyo_path_number_perm+0x246/0x5f0 [ 321.975152][ T8751] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 321.975182][ T8751] ? rb_commit+0x784/0x7e0 [ 321.975231][ T8751] ? __fget_files+0x2a/0x420 [ 321.975254][ T8751] ? __fget_files+0x3a8/0x420 [ 321.975271][ T8751] ? __fget_files+0x2a/0x420 [ 321.975293][ T8751] security_file_ioctl+0xb9/0x260 [ 321.975316][ T8751] __se_sys_ioctl+0x47/0x170 [ 321.975343][ T8751] do_syscall_64+0x17b/0x530 [ 321.975362][ T8751] ? irqentry_exit+0x10f/0x8f0 [ 321.975378][ T8751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.975396][ T8751] ? clear_bhb_loop+0x40/0x90 [ 321.975429][ T8751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.975446][ T8751] RIP: 0033:0x7f1bf9c2e0d9 [ 321.975465][ T8751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.975481][ T8751] RSP: 002b:00007f1bf7e86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.975501][ T8751] RAX: ffffffffffffffda RBX: 00007f1bf9eb5fa0 RCX: 00007f1bf9c2e0d9 [ 321.975514][ T8751] RDX: 0000200000000080 RSI: 000000004048aecb RDI: 000000000000000c [ 321.975526][ T8751] RBP: 00007f1bf7e86090 R08: 0000000000000000 R09: 0000000000000000 [ 321.975538][ T8751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.975548][ T8751] R13: 00007f1bf9eb6038 R14: 00007f1bf9eb5fa0 R15: 00007ffca2a55098 [ 321.975579][ T8751] [ 321.976241][ T8751] ERROR: Out of memory at tomoyo_realpath_from_path. [ 322.440300][ T8757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.725197][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 322.755399][ T5759] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 322.792345][ T8766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.809895][ T8771] FAULT_INJECTION: forcing a failure. [ 322.809895][ T8771] name failslab, interval 1, probability 0, space 0, times 0 [ 322.809935][ T8771] CPU: 1 UID: 0 PID: 8771 Comm: syz.2.897 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 322.809967][ T8771] Tainted: [L]=SOFTLOCKUP [ 322.809976][ T8771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 322.809990][ T8771] Call Trace: [ 322.810000][ T8771] [ 322.810010][ T8771] dump_stack_lvl+0xe8/0x150 [ 322.810045][ T8771] should_fail_ex+0x467/0x600 [ 322.810081][ T8771] should_failslab+0xa8/0x100 [ 322.810106][ T8771] __kmalloc_noprof+0xfb/0x790 [ 322.810139][ T8771] ? tomoyo_realpath_from_path+0xef/0x640 [ 322.810172][ T8771] ? tomoyo_realpath_from_path+0xef/0x640 [ 322.810213][ T8771] tomoyo_realpath_from_path+0xef/0x640 [ 322.810258][ T8771] ? tomoyo_path_number_perm+0x219/0x5f0 [ 322.810286][ T8771] tomoyo_path_number_perm+0x246/0x5f0 [ 322.810318][ T8771] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 322.810354][ T8771] ? rb_commit+0x784/0x7e0 [ 322.810420][ T8771] ? __fget_files+0x2a/0x420 [ 322.810453][ T8771] ? __fget_files+0x3a8/0x420 [ 322.810474][ T8771] ? __fget_files+0x2a/0x420 [ 322.810501][ T8771] security_file_ioctl+0xb9/0x260 [ 322.810531][ T8771] __se_sys_ioctl+0x47/0x170 [ 322.810563][ T8771] do_syscall_64+0x17b/0x530 [ 322.810587][ T8771] ? irqentry_exit+0x10f/0x8f0 [ 322.810608][ T8771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.810631][ T8771] ? clear_bhb_loop+0x40/0x90 [ 322.810659][ T8771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.810682][ T8771] RIP: 0033:0x7ff98896e0d9 [ 322.810703][ T8771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.810723][ T8771] RSP: 002b:00007ff986b84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.810748][ T8771] RAX: ffffffffffffffda RBX: 00007ff988bf6180 RCX: 00007ff98896e0d9 [ 322.810765][ T8771] RDX: 0000200000000580 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 322.810779][ T8771] RBP: 00007ff986b84090 R08: 0000000000000000 R09: 0000000000000000 [ 322.810793][ T8771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.810807][ T8771] R13: 00007ff988bf6218 R14: 00007ff988bf6180 R15: 00007ffdd4d1c478 [ 322.810844][ T8771] [ 322.825691][ T8771] ERROR: Out of memory at tomoyo_realpath_from_path. [ 322.893650][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.898'. [ 322.931633][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 322.993532][ T5759] usb 1-1: Using ep0 maxpacket: 32 [ 322.994520][ T9] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 322.994549][ T9] usb 4-1: config 0 has no interface number 0 [ 322.999475][ T9] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 322.999512][ T9] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 323.142587][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 323.142691][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.142712][ T9] usb 4-1: Product: syz [ 323.142728][ T9] usb 4-1: Manufacturer: syz [ 323.142743][ T9] usb 4-1: SerialNumber: syz [ 323.176996][ T5759] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 323.177047][ T5759] usb 1-1: config 0 has no interface number 0 [ 323.177099][ T5759] usb 1-1: config 0 interface 12 has no altsetting 0 [ 323.180102][ T5759] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 323.180133][ T5759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.180155][ T5759] usb 1-1: Product: syz [ 323.180170][ T5759] usb 1-1: Manufacturer: syz [ 323.180185][ T5759] usb 1-1: SerialNumber: syz [ 323.257625][ T5759] usb 1-1: config 0 descriptor?? [ 323.269201][ T9] usb 4-1: config 0 descriptor?? [ 323.333975][ T821] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 323.502644][ T821] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.502713][ T821] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 323.502744][ T821] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 323.502772][ T821] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 323.502821][ T821] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 323.502849][ T821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.548105][ T8777] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 323.579192][ T8777] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 323.592780][ T821] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 323.640534][ T821] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 323.640643][ T821] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 323.650651][ T821] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 323.723368][ T821] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 323.723475][ T821] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 323.755505][ T821] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 323.803284][ T8777] FAULT_INJECTION: forcing a failure. [ 323.803284][ T8777] name failslab, interval 1, probability 0, space 0, times 0 [ 323.803420][ T8777] CPU: 0 UID: 0 PID: 8777 Comm: syz.2.899 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 323.803458][ T8777] Tainted: [L]=SOFTLOCKUP [ 323.803467][ T8777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.803482][ T8777] Call Trace: [ 323.803491][ T8777] [ 323.803501][ T8777] dump_stack_lvl+0xe8/0x150 [ 323.803537][ T8777] should_fail_ex+0x467/0x600 [ 323.803573][ T8777] should_failslab+0xa8/0x100 [ 323.803596][ T8777] ? do_getname+0x2e/0x250 [ 323.803630][ T8777] kmem_cache_alloc_noprof+0x9e/0x680 [ 323.803664][ T8777] ? do_getname+0x2e/0x250 [ 323.803705][ T8777] do_getname+0x2e/0x250 [ 323.803736][ T8777] ? getname_flags+0x11/0x20 [ 323.803770][ T8777] do_sys_openat2+0xcc/0x200 [ 323.803803][ T8777] ? ring_buffer_event_data+0x94/0x100 [ 323.803829][ T8777] ? __pfx_do_sys_openat2+0x10/0x10 [ 323.803861][ T8777] ? trace_event_buffer_commit+0x258/0x7a0 [ 323.803913][ T8777] __x64_sys_openat+0x138/0x170 [ 323.803954][ T8777] do_syscall_64+0x17b/0x530 [ 323.803979][ T8777] ? irqentry_exit+0x10f/0x8f0 [ 323.804002][ T8777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.804026][ T8777] ? clear_bhb_loop+0x40/0x90 [ 323.804054][ T8777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.804077][ T8777] RIP: 0033:0x7ff98896e0d9 [ 323.804098][ T8777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.804118][ T8777] RSP: 002b:00007ff986bc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 323.804143][ T8777] RAX: ffffffffffffffda RBX: 00007ff988bf5fa0 RCX: 00007ff98896e0d9 [ 323.804161][ T8777] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 323.804177][ T8777] RBP: 00007ff986bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 323.804191][ T8777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.804206][ T8777] R13: 00007ff988bf6038 R14: 00007ff988bf5fa0 R15: 00007ffdd4d1c478 [ 323.804242][ T8777] [ 323.839121][ T9] radio-si470x 4-1:0.35: this is not a si470x device. [ 323.977509][ T821] usb 3-1: USB disconnect, device number 43 [ 324.064648][ T9] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 324.087227][ T821] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 324.146232][ T5759] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 324.146297][ T5759] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 324.146315][ T5759] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 324.146415][ T5759] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 324.231122][ T821] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 324.241270][ T821] keyspan 3-1:1.0: device disconnected [ 324.244318][ T5759] usb 1-1: USB disconnect, device number 69 [ 324.804095][ T821] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 324.967210][ T821] usb 2-1: Using ep0 maxpacket: 16 [ 324.970112][ T821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 324.976624][ T821] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 324.976659][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.976681][ T821] usb 2-1: Product: syz [ 324.976697][ T821] usb 2-1: Manufacturer: syz [ 324.976713][ T821] usb 2-1: SerialNumber: syz [ 324.990318][ T821] usb 2-1: config 0 descriptor?? [ 325.004714][ T821] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 325.004749][ T821] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 325.451784][ T5668] usb 4-1: USB disconnect, device number 50 [ 325.618019][ T821] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 325.944131][ T5668] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 326.147765][ T5668] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.147910][ T5668] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 326.147940][ T5668] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 326.147974][ T5668] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 326.148601][ T5668] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 326.148628][ T5668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.220964][ T8813] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 326.221128][ T8813] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 326.258651][ T821] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 326.258770][ T821] em28xx 2-1:0.0: board has no eeprom [ 326.284474][ T5668] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 326.303485][ T5668] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 326.303582][ T5668] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 326.325511][ T5668] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 326.341895][ T5668] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 326.341989][ T5668] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 326.361106][ T5668] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 326.364158][ T821] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 326.364185][ T821] em28xx 2-1:0.0: dvb set to bulk mode. [ 326.368183][ T37] em28xx 2-1:0.0: Binding DVB extension [ 326.449513][ T821] usb 2-1: USB disconnect, device number 48 [ 326.471955][ T821] em28xx 2-1:0.0: Disconnecting em28xx [ 326.587727][ T37] em28xx 2-1:0.0: Registering input extension [ 326.587959][ T821] em28xx 2-1:0.0: Closing input extension [ 326.656842][ T821] em28xx: Freeing device [ 326.845492][ T5759] usb 4-1: USB disconnect, device number 51 [ 326.921231][ T8824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.908'. [ 326.924206][ T5759] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 326.955042][ T5759] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 326.981279][ T5759] keyspan 4-1:1.0: device disconnected [ 327.349402][ T10] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 327.458867][ T8835] ipvlan0: entered allmulticast mode [ 327.458891][ T8835] veth0_vlan: entered allmulticast mode [ 327.504027][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 327.508611][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 327.508633][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.508645][ T10] usb 1-1: Product: syz [ 327.508654][ T10] usb 1-1: Manufacturer: syz [ 327.508663][ T10] usb 1-1: SerialNumber: syz [ 327.714033][ T821] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 327.777920][ T10] snd-ua101 1-1:1.1: invalid format type [ 327.777936][ T10] snd-ua101 1-1:1.0: invalid num_altsetting [ 327.824173][ T10] usb 1-1: USB disconnect, device number 70 [ 327.863970][ T821] usb 3-1: Using ep0 maxpacket: 32 [ 327.870598][ T821] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 327.870629][ T821] usb 3-1: config 0 has no interface number 0 [ 327.870681][ T821] usb 3-1: config 0 interface 12 has no altsetting 0 [ 327.882188][ T821] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 327.882219][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.882239][ T821] usb 3-1: Product: syz [ 327.882253][ T821] usb 3-1: Manufacturer: syz [ 327.882268][ T821] usb 3-1: SerialNumber: syz [ 327.964771][ T821] usb 3-1: config 0 descriptor?? [ 328.541666][ T821] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 328.541730][ T821] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 328.541749][ T821] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 328.541850][ T821] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 328.569819][ T821] usb 3-1: USB disconnect, device number 44 [ 328.787095][ T8855] ./file0: Can't lookup blockdev [ 328.916234][ T8860] FAULT_INJECTION: forcing a failure. [ 328.916234][ T8860] name failslab, interval 1, probability 0, space 0, times 0 [ 328.916261][ T8860] CPU: 1 UID: 0 PID: 8860 Comm: syz.0.917 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 328.916279][ T8860] Tainted: [L]=SOFTLOCKUP [ 328.916284][ T8860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 328.916292][ T8860] Call Trace: [ 328.916306][ T8860] [ 328.916312][ T8860] dump_stack_lvl+0xe8/0x150 [ 328.916334][ T8860] should_fail_ex+0x467/0x600 [ 328.916355][ T8860] should_failslab+0xa8/0x100 [ 328.916369][ T8860] __kmalloc_noprof+0xfb/0x790 [ 328.916387][ T8860] ? tomoyo_realpath_from_path+0xef/0x640 [ 328.916405][ T8860] ? tomoyo_realpath_from_path+0xef/0x640 [ 328.916428][ T8860] tomoyo_realpath_from_path+0xef/0x640 [ 328.916451][ T8860] ? tomoyo_path_number_perm+0x219/0x5f0 [ 328.916468][ T8860] tomoyo_path_number_perm+0x246/0x5f0 [ 328.916485][ T8860] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 328.916505][ T8860] ? rb_commit+0x784/0x7e0 [ 328.916536][ T8860] ? __fget_files+0x2a/0x420 [ 328.916552][ T8860] ? __fget_files+0x3a8/0x420 [ 328.916563][ T8860] ? __fget_files+0x2a/0x420 [ 328.916578][ T8860] security_file_ioctl+0xb9/0x260 [ 328.916594][ T8860] __se_sys_ioctl+0x47/0x170 [ 328.916613][ T8860] do_syscall_64+0x17b/0x530 [ 328.916626][ T8860] ? irqentry_exit+0x10f/0x8f0 [ 328.916638][ T8860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.916651][ T8860] ? clear_bhb_loop+0x40/0x90 [ 328.916667][ T8860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.916679][ T8860] RIP: 0033:0x7f1bf9c2e0d9 [ 328.916692][ T8860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.916703][ T8860] RSP: 002b:00007f1bf7e86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 328.916718][ T8860] RAX: ffffffffffffffda RBX: 00007f1bf9eb5fa0 RCX: 00007f1bf9c2e0d9 [ 328.916727][ T8860] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 328.916736][ T8860] RBP: 00007f1bf7e86090 R08: 0000000000000000 R09: 0000000000000000 [ 328.916744][ T8860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.916751][ T8860] R13: 00007f1bf9eb6038 R14: 00007f1bf9eb5fa0 R15: 00007ffca2a55098 [ 328.916770][ T8860] [ 328.916775][ T8860] ERROR: Out of memory at tomoyo_realpath_from_path. [ 328.918987][ T8857] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 329.095736][ T8855] kvm: pic: level sensitive irq not supported [ 329.096308][ T8855] kvm: pic: non byte read [ 329.096711][ T8855] kvm: pic: level sensitive irq not supported [ 329.097106][ T8855] kvm: pic: non byte read [ 329.097751][ T8855] kvm: pic: level sensitive irq not supported [ 329.098140][ T8855] kvm: pic: non byte read [ 329.100769][ T8855] kvm: pic: level sensitive irq not supported [ 329.101188][ T8855] kvm: pic: non byte read [ 329.101759][ T8855] kvm: pic: level sensitive irq not supported [ 329.102302][ T8855] kvm: pic: non byte read [ 329.103164][ T8855] kvm: pic: level sensitive irq not supported [ 329.103704][ T8855] kvm: pic: non byte read [ 329.112891][ T8855] kvm: pic: level sensitive irq not supported [ 329.113001][ T8855] kvm: pic: non byte read [ 329.116199][ T8855] kvm: pic: level sensitive irq not supported [ 329.116966][ T8855] kvm: pic: non byte read [ 329.570802][ T8879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.921'. [ 329.694493][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 329.762019][ T8886] Invalid argument reading file caps for ./file0 [ 329.854151][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 329.856765][ T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 329.856794][ T9] usb 3-1: config 0 has no interface number 0 [ 329.856846][ T9] usb 3-1: config 0 interface 12 has no altsetting 0 [ 329.859893][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 329.859923][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.859945][ T9] usb 3-1: Product: syz [ 329.859961][ T9] usb 3-1: Manufacturer: syz [ 329.859977][ T9] usb 3-1: SerialNumber: syz [ 329.954004][ T9] usb 3-1: config 0 descriptor?? [ 330.054079][ T5759] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 330.167085][ T9] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 330.167148][ T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 330.167167][ T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 330.168135][ T9] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 330.216153][ T9] usb 3-1: USB disconnect, device number 45 [ 330.237286][ T5759] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.237324][ T5759] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 330.237352][ T5759] usb 2-1: config 0 interface 0 has no altsetting 0 [ 330.237462][ T5759] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 330.237488][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.312256][ T5759] usb 2-1: config 0 descriptor?? [ 330.646278][ T8892] random: crng reseeded on system resumption [ 330.935052][ T5759] usbhid 2-1:0.0: can't add hid device: -71 [ 330.935201][ T5759] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 330.967456][ T5759] usb 2-1: USB disconnect, device number 49 [ 331.241735][ T8900] FAULT_INJECTION: forcing a failure. [ 331.241735][ T8900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.241777][ T8900] CPU: 1 UID: 0 PID: 8900 Comm: syz.0.929 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 331.241807][ T8900] Tainted: [L]=SOFTLOCKUP [ 331.241815][ T8900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.241828][ T8900] Call Trace: [ 331.241836][ T8900] [ 331.241846][ T8900] dump_stack_lvl+0xe8/0x150 [ 331.241877][ T8900] should_fail_ex+0x467/0x600 [ 331.241908][ T8900] _copy_to_user+0x31/0xb0 [ 331.241931][ T8900] simple_read_from_buffer+0xe1/0x170 [ 331.241958][ T8900] proc_fail_nth_read+0x1be/0x230 [ 331.241986][ T8900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.242013][ T8900] ? rw_verify_area+0x250/0x4d0 [ 331.242041][ T8900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.242065][ T8900] vfs_read+0x219/0xa90 [ 331.242106][ T8900] ? __pfx_vfs_read+0x10/0x10 [ 331.242135][ T8900] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 331.242158][ T8900] ? lockdep_hardirqs_on+0x7a/0x110 [ 331.242181][ T8900] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 331.242204][ T8900] ? mutex_lock_nested+0x152/0x1d0 [ 331.242244][ T8900] ? fdget_pos+0x252/0x320 [ 331.242276][ T8900] ksys_read+0x156/0x270 [ 331.242306][ T8900] ? __pfx_ksys_read+0x10/0x10 [ 331.242331][ T8900] ? trace_syscall_enter+0x5b/0x100 [ 331.242356][ T8900] ? trace_syscall_enter+0x5b/0x100 [ 331.242379][ T8900] ? rcu_is_watching+0x15/0xb0 [ 331.242401][ T8900] ? trace_syscall_enter+0x5b/0x100 [ 331.242422][ T8900] do_syscall_64+0x17b/0x530 [ 331.242441][ T8900] ? irqentry_exit+0x10f/0x8f0 [ 331.242457][ T8900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.242474][ T8900] ? clear_bhb_loop+0x40/0x90 [ 331.242495][ T8900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.242512][ T8900] RIP: 0033:0x7f1bf9bee90e [ 331.242529][ T8900] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 331.242544][ T8900] RSP: 002b:00007f1bf7e85fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 331.242564][ T8900] RAX: ffffffffffffffda RBX: 00007f1bf7e866c0 RCX: 00007f1bf9bee90e [ 331.242577][ T8900] RDX: 000000000000000f RSI: 00007f1bf7e860a0 RDI: 0000000000000004 [ 331.242588][ T8900] RBP: 00007f1bf7e86090 R08: 0000000000000000 R09: 0000000000000000 [ 331.242599][ T8900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.242609][ T8900] R13: 00007f1bf9eb6038 R14: 00007f1bf9eb5fa0 R15: 00007ffca2a55098 [ 331.242639][ T8900] [ 331.618994][ T8910] FAULT_INJECTION: forcing a failure. [ 331.618994][ T8910] name failslab, interval 1, probability 0, space 0, times 0 [ 331.619036][ T8910] CPU: 1 UID: 0 PID: 8910 Comm: syz.1.932 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 331.619067][ T8910] Tainted: [L]=SOFTLOCKUP [ 331.619076][ T8910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.619093][ T8910] Call Trace: [ 331.619102][ T8910] [ 331.619113][ T8910] dump_stack_lvl+0xe8/0x150 [ 331.619149][ T8910] should_fail_ex+0x467/0x600 [ 331.619186][ T8910] should_failslab+0xa8/0x100 [ 331.619210][ T8910] __kmalloc_noprof+0xfb/0x790 [ 331.619252][ T8910] ? tomoyo_realpath_from_path+0xef/0x640 [ 331.619286][ T8910] ? tomoyo_realpath_from_path+0xef/0x640 [ 331.619328][ T8910] tomoyo_realpath_from_path+0xef/0x640 [ 331.619372][ T8910] ? tomoyo_path_number_perm+0x219/0x5f0 [ 331.619400][ T8910] tomoyo_path_number_perm+0x246/0x5f0 [ 331.619431][ T8910] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 331.619485][ T8910] ? rb_commit+0x784/0x7e0 [ 331.619541][ T8910] ? __fget_files+0x2a/0x420 [ 331.619570][ T8910] ? __fget_files+0x3a8/0x420 [ 331.619592][ T8910] ? __fget_files+0x2a/0x420 [ 331.619620][ T8910] security_file_ioctl+0xb9/0x260 [ 331.619649][ T8910] __se_sys_ioctl+0x47/0x170 [ 331.619682][ T8910] do_syscall_64+0x17b/0x530 [ 331.619705][ T8910] ? irqentry_exit+0x10f/0x8f0 [ 331.619726][ T8910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.619748][ T8910] ? clear_bhb_loop+0x40/0x90 [ 331.619777][ T8910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.619799][ T8910] RIP: 0033:0x7f66a9a2e0d9 [ 331.619820][ T8910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.619840][ T8910] RSP: 002b:00007f66a7c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 331.619865][ T8910] RAX: ffffffffffffffda RBX: 00007f66a9cb5fa0 RCX: 00007f66a9a2e0d9 [ 331.619881][ T8910] RDX: 0000200000000000 RSI: 00000000c138fd06 RDI: 0000000000000003 [ 331.619897][ T8910] RBP: 00007f66a7c86090 R08: 0000000000000000 R09: 0000000000000000 [ 331.619911][ T8910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.619925][ T8910] R13: 00007f66a9cb6038 R14: 00007f66a9cb5fa0 R15: 00007fff8e1c8988 [ 331.619961][ T8910] [ 331.622367][ T8910] ERROR: Out of memory at tomoyo_realpath_from_path. [ 331.622482][ T8910] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 332.218107][ T8919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.934'. [ 332.524020][ T5695] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 332.673979][ T5695] usb 4-1: Using ep0 maxpacket: 32 [ 332.676225][ T5695] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 332.676245][ T5695] usb 4-1: config 0 has no interface number 0 [ 332.676274][ T5695] usb 4-1: config 0 interface 12 has no altsetting 0 [ 332.678657][ T5695] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 332.678675][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.678687][ T5695] usb 4-1: Product: syz [ 332.678696][ T5695] usb 4-1: Manufacturer: syz [ 332.678705][ T5695] usb 4-1: SerialNumber: syz [ 332.686222][ T5695] usb 4-1: config 0 descriptor?? [ 332.743921][ T5759] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 332.923691][ T5759] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.923721][ T5759] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 332.959003][ T5759] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 332.959038][ T5759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 332.959059][ T5759] usb 3-1: SerialNumber: syz [ 332.989453][ T5695] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 332.989517][ T5695] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 332.989536][ T5695] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 332.989654][ T5695] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 333.061969][ T5695] usb 4-1: USB disconnect, device number 52 [ 333.173947][ T37] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 333.288458][ T5759] usb 3-1: 0:2 : does not exist [ 333.374603][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 333.379675][ T37] usb 2-1: config 0 has no interfaces? [ 333.390981][ T37] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 333.391015][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.391038][ T37] usb 2-1: Product: syz [ 333.391053][ T37] usb 2-1: Manufacturer: syz [ 333.391070][ T37] usb 2-1: SerialNumber: syz [ 333.412147][ T37] usb 2-1: config 0 descriptor?? [ 333.457817][ T5759] usb 3-1: USB disconnect, device number 46 [ 333.590572][ T6156] udevd[6156]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 333.723907][ T37] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 333.899627][ T37] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.899669][ T37] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.899699][ T37] usb 1-1: config 0 interface 0 has no altsetting 0 [ 333.899738][ T37] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 333.899763][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.914710][ T37] usb 1-1: config 0 descriptor?? [ 334.286440][ T5759] usb 2-1: USB disconnect, device number 50 [ 334.540872][ T37] usbhid 1-1:0.0: can't add hid device: -71 [ 334.541007][ T37] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 334.581143][ T37] usb 1-1: USB disconnect, device number 71 [ 334.857027][ T8953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.949'. [ 334.953941][ T5695] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 335.106456][ T5695] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 335.106490][ T5695] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.106511][ T5695] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 335.106564][ T5695] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.106591][ T5695] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.108687][ T5695] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 335.108718][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 335.108740][ T5695] usb 4-1: Product: syz [ 335.108756][ T5695] usb 4-1: Manufacturer: syz [ 335.201176][ T5695] cdc_wdm 4-1:1.0: skipping garbage [ 335.201200][ T5695] cdc_wdm 4-1:1.0: skipping garbage [ 335.218681][ T5695] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 335.218818][ T5695] cdc_wdm 4-1:1.0: Unknown control protocol [ 335.373939][ T5759] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 335.555896][ T5759] usb 1-1: Using ep0 maxpacket: 32 [ 335.561313][ T5759] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 335.561343][ T5759] usb 1-1: config 0 has no interface number 0 [ 335.561373][ T5759] usb 1-1: config 0 interface 12 has no altsetting 0 [ 335.563996][ T5759] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 335.564028][ T5759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.564049][ T5759] usb 1-1: Product: syz [ 335.564065][ T5759] usb 1-1: Manufacturer: syz [ 335.564081][ T5759] usb 1-1: SerialNumber: syz [ 335.631869][ T5759] usb 1-1: config 0 descriptor?? [ 335.671120][ T8949] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 335.722838][ T37] usb 4-1: USB disconnect, device number 53 [ 335.869738][ T5759] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 335.869869][ T5759] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 335.869891][ T5759] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 335.869995][ T5759] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 335.925313][ T5759] usb 1-1: USB disconnect, device number 72 [ 336.558271][ T8972] FAULT_INJECTION: forcing a failure. [ 336.558271][ T8972] name failslab, interval 1, probability 0, space 0, times 0 [ 336.558312][ T8972] CPU: 0 UID: 0 PID: 8972 Comm: syz.0.955 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 336.558344][ T8972] Tainted: [L]=SOFTLOCKUP [ 336.558352][ T8972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 336.558365][ T8972] Call Trace: [ 336.558374][ T8972] [ 336.558384][ T8972] dump_stack_lvl+0xe8/0x150 [ 336.558421][ T8972] should_fail_ex+0x467/0x600 [ 336.558457][ T8972] should_failslab+0xa8/0x100 [ 336.558482][ T8972] __kmalloc_noprof+0xfb/0x790 [ 336.558509][ T8972] ? kernfs_fop_write_iter+0x158/0x540 [ 336.558535][ T8972] ? kernfs_fop_write_iter+0x158/0x540 [ 336.558572][ T8972] kernfs_fop_write_iter+0x158/0x540 [ 336.558604][ T8972] vfs_write+0x61e/0xbb0 [ 336.558636][ T8972] ? __pfx_vfs_write+0x10/0x10 [ 336.558661][ T8972] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 336.558683][ T8972] ? lockdep_hardirqs_on+0x7a/0x110 [ 336.558705][ T8972] ? mutex_lock_nested+0x152/0x1d0 [ 336.558728][ T8972] ? fdget_pos+0x252/0x320 [ 336.558758][ T8972] ksys_write+0x156/0x270 [ 336.558793][ T8972] ? __pfx_ksys_write+0x10/0x10 [ 336.558814][ T8972] ? trace_syscall_enter+0x5b/0x100 [ 336.558834][ T8972] ? trace_syscall_enter+0x5b/0x100 [ 336.558855][ T8972] ? rcu_is_watching+0x15/0xb0 [ 336.558877][ T8972] ? trace_syscall_enter+0x5b/0x100 [ 336.558901][ T8972] do_syscall_64+0x17b/0x530 [ 336.558921][ T8972] ? irqentry_exit+0x10f/0x8f0 [ 336.558939][ T8972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.558960][ T8972] ? clear_bhb_loop+0x40/0x90 [ 336.558984][ T8972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.559004][ T8972] RIP: 0033:0x7f1bf9c2e0d9 [ 336.559022][ T8972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.559040][ T8972] RSP: 002b:00007f1bf7e86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 336.559062][ T8972] RAX: ffffffffffffffda RBX: 00007f1bf9eb5fa0 RCX: 00007f1bf9c2e0d9 [ 336.559076][ T8972] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000004 [ 336.559088][ T8972] RBP: 00007f1bf7e86090 R08: 0000000000000000 R09: 0000000000000000 [ 336.559101][ T8972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.559112][ T8972] R13: 00007f1bf9eb6038 R14: 00007f1bf9eb5fa0 R15: 00007ffca2a55098 [ 336.559144][ T8972] [ 337.134722][ T37] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 337.223894][ T5759] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 337.312934][ T37] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.312965][ T37] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.339204][ T37] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 337.339237][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 337.339251][ T37] usb 4-1: SerialNumber: syz [ 337.386584][ T5759] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.386622][ T5759] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.386651][ T5759] usb 3-1: config 0 interface 0 has no altsetting 0 [ 337.386689][ T5759] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 337.386713][ T5759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.458607][ T5759] usb 3-1: config 0 descriptor?? [ 337.626915][ T37] usb 4-1: 0:2 : does not exist [ 337.743311][ T37] usb 4-1: USB disconnect, device number 54 [ 337.835716][ T6156] udevd[6156]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 337.975518][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.960'. [ 338.095609][ T5759] usbhid 3-1:0.0: can't add hid device: -71 [ 338.095694][ T5759] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 338.115487][ T5759] usb 3-1: USB disconnect, device number 47 [ 338.319037][ T8994] netlink: zone id is out of range [ 338.319530][ T8994] netlink: zone id is out of range [ 338.336995][ T8994] netlink: zone id is out of range [ 338.337778][ T8994] netlink: zone id is out of range [ 338.338126][ T8994] netlink: zone id is out of range [ 338.338786][ T8994] netlink: zone id is out of range [ 338.339335][ T8994] netlink: zone id is out of range [ 338.339454][ T8994] netlink: zone id is out of range [ 338.340390][ T8994] netlink: zone id is out of range [ 338.340667][ T8994] netlink: zone id is out of range [ 338.594026][ T37] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 338.745321][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 338.751541][ T37] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 338.751574][ T37] usb 4-1: config 0 has no interface number 0 [ 338.751623][ T37] usb 4-1: config 0 interface 12 has no altsetting 0 [ 338.769393][ T37] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 338.769425][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.769445][ T37] usb 4-1: Product: syz [ 338.769460][ T37] usb 4-1: Manufacturer: syz [ 338.769474][ T37] usb 4-1: SerialNumber: syz [ 338.788582][ T37] usb 4-1: config 0 descriptor?? [ 339.029227][ T37] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 339.029276][ T37] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 339.029293][ T37] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 339.029401][ T37] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 339.059863][ T37] usb 4-1: USB disconnect, device number 55 [ 341.897039][ T5759] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 341.917656][ T9021] FAULT_INJECTION: forcing a failure. [ 341.917656][ T9021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.917683][ T9021] CPU: 1 UID: 0 PID: 9021 Comm: syz.0.972 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 341.917701][ T9021] Tainted: [L]=SOFTLOCKUP [ 341.917706][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.917713][ T9021] Call Trace: [ 341.917718][ T9021] [ 341.917724][ T9021] dump_stack_lvl+0xe8/0x150 [ 341.917748][ T9021] should_fail_ex+0x467/0x600 [ 341.917767][ T9021] _copy_from_user+0x2d/0xb0 [ 341.917780][ T9021] ___sys_sendmsg+0x1c6/0x360 [ 341.917798][ T9021] ? __lock_acquire+0x6df/0x2e40 [ 341.917814][ T9021] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.917835][ T9021] ? __rb_reserve_next+0x795/0xdc0 [ 341.917869][ T9021] ? __fget_files+0x2a/0x420 [ 341.917883][ T9021] ? __fget_files+0x3a8/0x420 [ 341.917901][ T9021] __x64_sys_sendmsg+0x1b7/0x290 [ 341.917921][ T9021] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 341.917944][ T9021] ? trace_syscall_enter+0x5b/0x100 [ 341.917958][ T9021] ? trace_syscall_enter+0x5b/0x100 [ 341.917971][ T9021] ? rcu_is_watching+0x15/0xb0 [ 341.917984][ T9021] ? trace_syscall_enter+0x5b/0x100 [ 341.917999][ T9021] do_syscall_64+0x17b/0x530 [ 341.918012][ T9021] ? irqentry_exit+0x10f/0x8f0 [ 341.918024][ T9021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.918037][ T9021] ? clear_bhb_loop+0x40/0x90 [ 341.918052][ T9021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.918065][ T9021] RIP: 0033:0x7f1bf9c2e0d9 [ 341.918077][ T9021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.918088][ T9021] RSP: 002b:00007f1bf7e86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.918103][ T9021] RAX: ffffffffffffffda RBX: 00007f1bf9eb5fa0 RCX: 00007f1bf9c2e0d9 [ 341.918113][ T9021] RDX: 000000000004c040 RSI: 0000200000000040 RDI: 0000000000000003 [ 341.918121][ T9021] RBP: 00007f1bf7e86090 R08: 0000000000000000 R09: 0000000000000000 [ 341.918129][ T9021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.918137][ T9021] R13: 00007f1bf9eb6038 R14: 00007f1bf9eb5fa0 R15: 00007ffca2a55098 [ 341.918155][ T9021] [ 342.063415][ T5759] usb 3-1: device descriptor read/64, error -71 [ 342.124006][ T37] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 342.283877][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 342.286948][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 342.314489][ T5759] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 342.320997][ T37] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 342.321029][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.321052][ T37] usb 2-1: Product: syz [ 342.321067][ T37] usb 2-1: Manufacturer: syz [ 342.321083][ T37] usb 2-1: SerialNumber: syz [ 342.332053][ T37] usb 2-1: config 0 descriptor?? [ 342.362342][ T37] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 342.362379][ T37] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 342.456105][ T5759] usb 3-1: device descriptor read/64, error -71 [ 342.564342][ T5759] usb usb3-port1: attempt power cycle [ 342.612704][ T9031] FAULT_INJECTION: forcing a failure. [ 342.612704][ T9031] name failslab, interval 1, probability 0, space 0, times 0 [ 342.612746][ T9031] CPU: 0 UID: 0 PID: 9031 Comm: syz.3.976 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 342.612777][ T9031] Tainted: [L]=SOFTLOCKUP [ 342.612795][ T9031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 342.612808][ T9031] Call Trace: [ 342.612817][ T9031] [ 342.612827][ T9031] dump_stack_lvl+0xe8/0x150 [ 342.612863][ T9031] should_fail_ex+0x467/0x600 [ 342.612897][ T9031] should_failslab+0xa8/0x100 [ 342.612922][ T9031] kmem_cache_alloc_node_noprof+0xac/0x660 [ 342.612953][ T9031] ? __alloc_skb+0x1d7/0x7a0 [ 342.612980][ T9031] ? __alloc_skb+0x1d7/0x7a0 [ 342.613013][ T9031] __alloc_skb+0x1d7/0x7a0 [ 342.613048][ T9031] tcp_stream_alloc_skb+0x3f/0x5c0 [ 342.613084][ T9031] tcp_sendmsg_locked+0x143d/0x55c0 [ 342.613176][ T9031] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 342.613214][ T9031] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 342.613238][ T9031] ? lockdep_hardirqs_on+0x7a/0x110 [ 342.613267][ T9031] tcp_sendmsg+0x2f/0x50 [ 342.613297][ T9031] ? __pfx_inet_sendmsg+0x10/0x10 [ 342.613324][ T9031] sock_sendmsg_nosec+0x10e/0x180 [ 342.613357][ T9031] __sys_sendto+0x41e/0x5d0 [ 342.613392][ T9031] ? __pfx___sys_sendto+0x10/0x10 [ 342.613434][ T9031] ? ring_buffer_event_data+0x94/0x100 [ 342.613479][ T9031] __x64_sys_sendto+0xde/0x100 [ 342.613511][ T9031] do_syscall_64+0x17b/0x530 [ 342.613533][ T9031] ? irqentry_exit+0x10f/0x8f0 [ 342.613553][ T9031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.613575][ T9031] ? clear_bhb_loop+0x40/0x90 [ 342.613604][ T9031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.613625][ T9031] RIP: 0033:0x7fa518a2e0d9 [ 342.613648][ T9031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.613667][ T9031] RSP: 002b:00007fa516c86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 342.613691][ T9031] RAX: ffffffffffffffda RBX: 00007fa518cb5fa0 RCX: 00007fa518a2e0d9 [ 342.613707][ T9031] RDX: ffffffffffffffef RSI: 00002000000000c0 RDI: 0000000000000003 [ 342.613723][ T9031] RBP: 00007fa516c86090 R08: 0000000000000000 R09: 0000000000000000 [ 342.613737][ T9031] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000001 [ 342.613750][ T9031] R13: 00007fa518cb6038 R14: 00007fa518cb5fa0 R15: 00007ffda0501aa8 [ 342.613790][ T9031] [ 342.923941][ T5759] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 342.944664][ T5759] usb 3-1: device descriptor read/8, error -71 [ 342.960691][ T37] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 343.208394][ T5759] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 343.246202][ T5759] usb 3-1: device descriptor read/8, error -71 [ 343.336956][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'. [ 343.364291][ T5759] usb usb3-port1: unable to enumerate USB device [ 343.409590][ T37] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 343.409625][ T37] em28xx 2-1:0.0: board has no eeprom [ 343.444760][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'. [ 343.553888][ T37] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 343.553922][ T37] em28xx 2-1:0.0: dvb set to bulk mode. [ 343.553988][ T821] em28xx 2-1:0.0: Binding DVB extension [ 343.602166][ T37] usb 2-1: USB disconnect, device number 51 [ 343.619198][ T37] em28xx 2-1:0.0: Disconnecting em28xx [ 343.659903][ T821] em28xx 2-1:0.0: Registering input extension [ 343.660170][ T37] em28xx 2-1:0.0: Closing input extension [ 343.705677][ T37] em28xx: Freeing device [ 344.004132][ T5759] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 344.112891][ T9045] syz.1.980 (9045) used greatest stack depth: 17312 bytes left [ 344.144264][ T5759] usb 4-1: device descriptor read/64, error -71 [ 344.383935][ T5759] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 344.433963][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 344.440771][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 344.525041][ T5759] usb 4-1: device descriptor read/64, error -71 [ 344.647725][ T5759] usb usb4-port1: attempt power cycle [ 344.811168][ T9067] ntfs3(nullb0): Primary boot signature is not NTFS. [ 344.811571][ T9067] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 345.043987][ T5759] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 345.075023][ T5759] usb 4-1: device descriptor read/8, error -71 [ 345.154243][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 345.186075][ T37] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 345.313898][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 345.321667][ T5759] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 345.335176][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 345.343271][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 345.344868][ T5759] usb 4-1: device descriptor read/8, error -71 [ 345.362512][ T37] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 345.362543][ T37] usb 3-1: config 0 has no interface number 0 [ 345.362597][ T37] usb 3-1: config 0 interface 12 has no altsetting 0 [ 345.363615][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 345.363646][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.363677][ T9] usb 2-1: Product: syz [ 345.363693][ T9] usb 2-1: Manufacturer: syz [ 345.363710][ T9] usb 2-1: SerialNumber: syz [ 345.370174][ T37] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 345.370220][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.370241][ T37] usb 3-1: Product: syz [ 345.370256][ T37] usb 3-1: Manufacturer: syz [ 345.370271][ T37] usb 3-1: SerialNumber: syz [ 345.411632][ T9] usb 2-1: config 0 descriptor?? [ 345.449399][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 345.449435][ T9] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 345.454431][ T5759] usb usb4-port1: unable to enumerate USB device [ 345.482142][ T37] usb 3-1: config 0 descriptor?? [ 345.679600][ T9072] i2c i2c-0: new_device: Missing parameters [ 346.063248][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 346.262493][ T9075] 9p: Bad value for 'rfdno' [ 346.283207][ T9075] netlink: 92 bytes leftover after parsing attributes in process `syz.0.989'. [ 346.476162][ T9] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 346.491535][ T9] em28xx 2-1:0.0: board has no eeprom [ 346.573870][ T9] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 346.573903][ T9] em28xx 2-1:0.0: dvb set to bulk mode. [ 346.574357][ T5759] em28xx 2-1:0.0: Binding DVB extension [ 346.607653][ T9] usb 2-1: USB disconnect, device number 52 [ 346.611873][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 346.742827][ T5759] em28xx 2-1:0.0: Registering input extension [ 346.743072][ T9] em28xx 2-1:0.0: Closing input extension [ 346.924463][ T9] em28xx: Freeing device [ 347.454197][ T5695] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 347.474035][ T821] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 347.512164][ T37] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 347.512227][ T37] f81534 3-1:0.12: f81534_find_config_idx: read failed: -32 [ 347.512246][ T37] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 347.512346][ T9088] FAULT_INJECTION: forcing a failure. [ 347.512346][ T9088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.512354][ T37] f81534 3-1:0.12: probe with driver f81534 failed with error -32 [ 347.512385][ T9088] CPU: 0 UID: 0 PID: 9088 Comm: syz.0.994 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 347.512414][ T9088] Tainted: [L]=SOFTLOCKUP [ 347.512422][ T9088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.512435][ T9088] Call Trace: [ 347.512443][ T9088] [ 347.512454][ T9088] dump_stack_lvl+0xe8/0x150 [ 347.512489][ T9088] should_fail_ex+0x467/0x600 [ 347.512525][ T9088] _copy_from_user+0x2d/0xb0 [ 347.512547][ T9088] ___sys_sendmsg+0x1c6/0x360 [ 347.512579][ T9088] ? __lock_acquire+0x6df/0x2e40 [ 347.512605][ T9088] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.512640][ T9088] ? __rb_reserve_next+0x795/0xdc0 [ 347.512701][ T9088] ? __fget_files+0x2a/0x420 [ 347.512722][ T9088] ? __fget_files+0x3a8/0x420 [ 347.512754][ T9088] __x64_sys_sendmsg+0x1b7/0x290 [ 347.512790][ T9088] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.512842][ T9088] ? trace_syscall_enter+0x5b/0x100 [ 347.512867][ T9088] ? trace_syscall_enter+0x5b/0x100 [ 347.512889][ T9088] ? rcu_is_watching+0x15/0xb0 [ 347.512911][ T9088] ? trace_syscall_enter+0x5b/0x100 [ 347.512937][ T9088] do_syscall_64+0x17b/0x530 [ 347.512958][ T9088] ? irqentry_exit+0x10f/0x8f0 [ 347.512978][ T9088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.513000][ T9088] ? clear_bhb_loop+0x40/0x90 [ 347.513027][ T9088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.513049][ T9088] RIP: 0033:0x7f1bf9c2e0d9 [ 347.513070][ T9088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.513090][ T9088] RSP: 002b:00007f1bf7e86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.513115][ T9088] RAX: ffffffffffffffda RBX: 00007f1bf9eb5fa0 RCX: 00007f1bf9c2e0d9 [ 347.513132][ T9088] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: 0000000000000004 [ 347.513147][ T9088] RBP: 00007f1bf7e86090 R08: 0000000000000000 R09: 0000000000000000 [ 347.513161][ T9088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.513175][ T9088] R13: 00007f1bf9eb6038 R14: 00007f1bf9eb5fa0 R15: 00007ffca2a55098 [ 347.513210][ T9088] [ 347.596069][ T5695] usb 2-1: device descriptor read/64, error -71 [ 347.672895][ T821] usb 4-1: config 0 interface 0 has no altsetting 0 [ 347.680584][ T821] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 347.680615][ T821] usb 4-1: New USB device strings: Mfr=226, Product=255, SerialNumber=0 [ 347.680635][ T821] usb 4-1: Product: syz [ 347.680649][ T821] usb 4-1: Manufacturer: syz [ 347.699408][ T821] usb 4-1: config 0 descriptor?? [ 347.721519][ T821] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 347.806230][ T5696] usb 3-1: USB disconnect, device number 52 [ 347.837312][ T5695] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 347.966026][ T5695] usb 2-1: device descriptor read/64, error -71 [ 348.076077][ T5695] usb usb2-port1: attempt power cycle [ 348.193895][ T821] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 348.309531][ T5323] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 348.344018][ T821] usb 1-1: Using ep0 maxpacket: 32 [ 348.347042][ T821] usb 1-1: unable to get BOS descriptor or descriptor too short [ 348.348247][ T821] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 348.348277][ T821] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 348.348299][ T821] usb 1-1: config 14 has no interface number 0 [ 348.348316][ T821] usb 1-1: config 14 has no interface number 1 [ 348.348373][ T821] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 348.348388][ T821] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 348.348411][ T821] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 348.348427][ T821] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 348.348444][ T821] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 348.348460][ T821] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.348476][ T821] usb 1-1: config 14 interface 57 has no altsetting 0 [ 348.348487][ T821] usb 1-1: config 14 interface 228 has no altsetting 0 [ 348.350887][ T821] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 348.350916][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.350936][ T821] usb 1-1: Product: syz [ 348.350951][ T821] usb 1-1: Manufacturer: syz [ 348.350960][ T821] usb 1-1: SerialNumber: syz [ 348.434330][ T5695] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 348.455168][ T5695] usb 2-1: device descriptor read/8, error -71 [ 348.524063][ T5323] usb 3-1: Using ep0 maxpacket: 32 [ 348.527040][ T5323] usb 3-1: unable to get BOS descriptor or descriptor too short [ 348.528992][ T5323] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 348.529019][ T5323] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 348.529041][ T5323] usb 3-1: config 14 has no interface number 0 [ 348.529060][ T5323] usb 3-1: config 14 has no interface number 1 [ 348.529149][ T5323] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 348.529170][ T5323] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 348.529197][ T5323] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 348.529225][ T5323] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 348.529254][ T5323] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 348.529281][ T5323] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.529305][ T5323] usb 3-1: config 14 interface 57 has no altsetting 0 [ 348.529316][ T5323] usb 3-1: config 14 interface 228 has no altsetting 0 [ 348.532607][ T5323] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 348.532655][ T5323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.532677][ T5323] usb 3-1: Product: syz [ 348.532694][ T5323] usb 3-1: Manufacturer: syz [ 348.532709][ T5323] usb 3-1: SerialNumber: syz [ 348.693984][ T5695] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 348.714873][ T5695] usb 2-1: device descriptor read/8, error -71 [ 348.815692][ T821] legousbtower 1-1:14.57: interrupt endpoints not found [ 348.824398][ T5695] usb usb2-port1: unable to enumerate USB device [ 349.129945][ T5323] legousbtower 3-1:14.57: interrupt endpoints not found [ 349.209142][ T821] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 349.215006][ T821] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 349.650884][ T5323] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 349.652771][ T5323] legousbtower 3-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 349.973846][ T9100] FAULT_INJECTION: forcing a failure. [ 349.973846][ T9100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.974051][ T9100] CPU: 0 UID: 0 PID: 9100 Comm: syz.0.996 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 349.974085][ T9100] Tainted: [L]=SOFTLOCKUP [ 349.974094][ T9100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.974107][ T9100] Call Trace: [ 349.974116][ T9100] [ 349.974126][ T9100] dump_stack_lvl+0xe8/0x150 [ 349.974157][ T9100] should_fail_ex+0x467/0x600 [ 349.974189][ T9100] _copy_to_user+0x31/0xb0 [ 349.974213][ T9100] simple_read_from_buffer+0xe1/0x170 [ 349.974244][ T9100] proc_fail_nth_read+0x1be/0x230 [ 349.974273][ T9100] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 349.974302][ T9100] ? rw_verify_area+0x250/0x4d0 [ 349.974331][ T9100] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 349.974353][ T9100] vfs_read+0x219/0xa90 [ 349.974386][ T9100] ? __pfx_vfs_read+0x10/0x10 [ 349.974408][ T9100] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 349.974426][ T9100] ? lockdep_hardirqs_on+0x7a/0x110 [ 349.974446][ T9100] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 349.974468][ T9100] ? mutex_lock_nested+0x152/0x1d0 [ 349.974495][ T9100] ? fdget_pos+0x252/0x320 [ 349.974528][ T9100] ksys_read+0x156/0x270 [ 349.974557][ T9100] ? __pfx_ksys_read+0x10/0x10 [ 349.974581][ T9100] ? trace_syscall_enter+0x5b/0x100 [ 349.974604][ T9100] ? trace_syscall_enter+0x5b/0x100 [ 349.974636][ T9100] ? rcu_is_watching+0x15/0xb0 [ 349.974651][ T9100] ? trace_syscall_enter+0x5b/0x100 [ 349.974672][ T9100] do_syscall_64+0x17b/0x530 [ 349.974694][ T9100] ? irqentry_exit+0x10f/0x8f0 [ 349.974714][ T9100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.974737][ T9100] ? clear_bhb_loop+0x40/0x90 [ 349.974765][ T9100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.974788][ T9100] RIP: 0033:0x7f1bf9bee90e [ 349.974809][ T9100] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 349.974827][ T9100] RSP: 002b:00007f1bf7e64fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 349.974851][ T9100] RAX: ffffffffffffffda RBX: 00007f1bf7e656c0 RCX: 00007f1bf9bee90e [ 349.974866][ T9100] RDX: 000000000000000f RSI: 00007f1bf7e650a0 RDI: 0000000000000005 [ 349.974875][ T9100] RBP: 00007f1bf7e65090 R08: 0000000000000000 R09: 0000000000000000 [ 349.974883][ T9100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.974892][ T9100] R13: 00007f1bf9eb6128 R14: 00007f1bf9eb6090 R15: 00007ffca2a55098 [ 349.974926][ T9100] [ 350.227420][ T5695] usb 4-1: USB disconnect, device number 60 [ 350.280505][ C1] usb 1-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 350.311381][ T5323] usb 1-1: USB disconnect, device number 73 [ 350.390992][ T5323] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 350.420705][ T9104] No source specified [ 350.502913][ T9108] input: syz0 as /devices/virtual/input/input44 [ 350.598251][ T9108] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1000'. [ 350.660493][ T9111] FAULT_INJECTION: forcing a failure. [ 350.660493][ T9111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.660534][ T9111] CPU: 0 UID: 0 PID: 9111 Comm: syz.0.1001 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 350.660564][ T9111] Tainted: [L]=SOFTLOCKUP [ 350.660571][ T9111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.660584][ T9111] Call Trace: [ 350.660593][ T9111] [ 350.660602][ T9111] dump_stack_lvl+0xe8/0x150 [ 350.660637][ T9111] should_fail_ex+0x467/0x600 [ 350.660671][ T9111] _copy_from_user+0x2d/0xb0 [ 350.660694][ T9111] ___sys_sendmsg+0x1c6/0x360 [ 350.660726][ T9111] ? __lock_acquire+0x6df/0x2e40 [ 350.660751][ T9111] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.660788][ T9111] ? __rb_reserve_next+0x795/0xdc0 [ 350.660854][ T9111] ? __fget_files+0x2a/0x420 [ 350.660876][ T9111] ? __fget_files+0x3a8/0x420 [ 350.660907][ T9111] __x64_sys_sendmsg+0x1b7/0x290 [ 350.660944][ T9111] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 350.660985][ T9111] ? trace_syscall_enter+0x5b/0x100 [ 350.661009][ T9111] ? trace_syscall_enter+0x5b/0x100 [ 350.661032][ T9111] ? rcu_is_watching+0x15/0xb0 [ 350.661056][ T9111] ? trace_syscall_enter+0x5b/0x100 [ 350.661083][ T9111] do_syscall_64+0x17b/0x530 [ 350.661105][ T9111] ? irqentry_exit+0x10f/0x8f0 [ 350.661126][ T9111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.661149][ T9111] ? clear_bhb_loop+0x40/0x90 [ 350.661176][ T9111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.661198][ T9111] RIP: 0033:0x7f1bf9c2e0d9 [ 350.661220][ T9111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.661248][ T9111] RSP: 002b:00007f1bf7e86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.661272][ T9111] RAX: ffffffffffffffda RBX: 00007f1bf9eb5fa0 RCX: 00007f1bf9c2e0d9 [ 350.661288][ T9111] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000004 [ 350.661302][ T9111] RBP: 00007f1bf7e86090 R08: 0000000000000000 R09: 0000000000000000 [ 350.661316][ T9111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.661330][ T9111] R13: 00007f1bf9eb6038 R14: 00007f1bf9eb5fa0 R15: 00007ffca2a55098 [ 350.661365][ T9111] [ 351.008038][ T9115] trusted_key: encrypted_key: keyword 'update#' not recognized [ 351.118097][ T9120] FAULT_INJECTION: forcing a failure. [ 351.118097][ T9120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.118139][ T9120] CPU: 0 UID: 0 PID: 9120 Comm: syz.3.1004 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 351.118169][ T9120] Tainted: [L]=SOFTLOCKUP [ 351.118177][ T9120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 351.118191][ T9120] Call Trace: [ 351.118201][ T9120] [ 351.118211][ T9120] dump_stack_lvl+0xe8/0x150 [ 351.118248][ T9120] should_fail_ex+0x467/0x600 [ 351.118282][ T9120] _copy_from_user+0x2d/0xb0 [ 351.118304][ T9120] ___sys_sendmsg+0x1c6/0x360 [ 351.118337][ T9120] ? __lock_acquire+0x6df/0x2e40 [ 351.118361][ T9120] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.118397][ T9120] ? __rb_reserve_next+0x795/0xdc0 [ 351.118459][ T9120] ? __fget_files+0x2a/0x420 [ 351.118481][ T9120] ? __fget_files+0x3a8/0x420 [ 351.118513][ T9120] __x64_sys_sendmsg+0x1b7/0x290 [ 351.118548][ T9120] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.118586][ T9120] ? trace_syscall_enter+0x5b/0x100 [ 351.118609][ T9120] ? trace_syscall_enter+0x5b/0x100 [ 351.118632][ T9120] ? rcu_is_watching+0x15/0xb0 [ 351.118656][ T9120] ? trace_syscall_enter+0x5b/0x100 [ 351.118683][ T9120] do_syscall_64+0x17b/0x530 [ 351.118705][ T9120] ? irqentry_exit+0x10f/0x8f0 [ 351.118725][ T9120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.118756][ T9120] ? clear_bhb_loop+0x40/0x90 [ 351.118783][ T9120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.118806][ T9120] RIP: 0033:0x7fa518a2e0d9 [ 351.118827][ T9120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.118846][ T9120] RSP: 002b:00007fa516c86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.118870][ T9120] RAX: ffffffffffffffda RBX: 00007fa518cb5fa0 RCX: 00007fa518a2e0d9 [ 351.118886][ T9120] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 351.118900][ T9120] RBP: 00007fa516c86090 R08: 0000000000000000 R09: 0000000000000000 [ 351.118914][ T9120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.118927][ T9120] R13: 00007fa518cb6038 R14: 00007fa518cb5fa0 R15: 00007ffda0501aa8 [ 351.118961][ T9120] [ 351.344479][ T821] usb 3-1: USB disconnect, device number 53 [ 351.466034][ T821] legousbtower 3-1:14.228: LEGO USB Tower #-159 now disconnected [ 351.794129][ T5695] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 351.864311][ T32] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 351.964014][ T5695] usb 1-1: Using ep0 maxpacket: 32 [ 351.966771][ T5695] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 351.966802][ T5695] usb 1-1: config 0 has no interface number 0 [ 351.966850][ T5695] usb 1-1: config 0 interface 12 has no altsetting 0 [ 351.970087][ T5695] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 351.970119][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.970140][ T5695] usb 1-1: Product: syz [ 351.970149][ T5695] usb 1-1: Manufacturer: syz [ 351.970157][ T5695] usb 1-1: SerialNumber: syz [ 351.977102][ T5695] usb 1-1: config 0 descriptor?? [ 352.013924][ T32] usb 2-1: device descriptor read/64, error -71 [ 352.037924][ T5759] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 352.103972][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 352.194017][ T5759] usb 3-1: Using ep0 maxpacket: 16 [ 352.219970][ T5759] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 352.229413][ T5759] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 352.229446][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.229465][ T5759] usb 3-1: Product: syz [ 352.229480][ T5759] usb 3-1: Manufacturer: syz [ 352.229494][ T5759] usb 3-1: SerialNumber: syz [ 352.254038][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 352.268103][ T9] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 352.268140][ T9] usb 4-1: config 0 has no interface number 0 [ 352.268194][ T9] usb 4-1: config 0 interface 12 has no altsetting 0 [ 352.271657][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 352.271685][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.271707][ T9] usb 4-1: Product: syz [ 352.271723][ T9] usb 4-1: Manufacturer: syz [ 352.271738][ T9] usb 4-1: SerialNumber: syz [ 352.283136][ T5759] usb 3-1: config 0 descriptor?? [ 352.293045][ T9] usb 4-1: config 0 descriptor?? [ 352.332958][ T5759] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 352.332998][ T5759] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 352.350383][ T32] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 352.473926][ T32] usb 2-1: device descriptor read/64, error -71 [ 352.524832][ T9132] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer. [ 352.584461][ T32] usb usb2-port1: attempt power cycle [ 352.928033][ T5759] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 352.943982][ T32] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 352.964902][ T32] usb 2-1: device descriptor read/8, error -71 [ 353.203960][ T32] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 353.225281][ T32] usb 2-1: device descriptor read/8, error -71 [ 353.335362][ T32] usb usb2-port1: unable to enumerate USB device [ 353.808336][ T5759] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 353.808424][ T5759] em28xx 3-1:0.0: board has no eeprom [ 353.914818][ T5759] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 353.914852][ T5759] em28xx 3-1:0.0: dvb set to bulk mode. [ 353.915982][ T10] em28xx 3-1:0.0: Binding DVB extension [ 353.980475][ T5759] usb 3-1: USB disconnect, device number 54 [ 353.992960][ T5759] em28xx 3-1:0.0: Disconnecting em28xx [ 354.055037][ T10] em28xx 3-1:0.0: Registering input extension [ 354.057392][ T5759] em28xx 3-1:0.0: Closing input extension [ 354.068364][ T5695] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 354.068422][ T5695] f81534 1-1:0.12: f81534_find_config_idx: read failed: -32 [ 354.068440][ T5695] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 354.068530][ T5695] f81534 1-1:0.12: probe with driver f81534 failed with error -32 [ 354.186529][ T5759] em28xx: Freeing device [ 354.274022][ T10] usb 1-1: USB disconnect, device number 74 [ 354.398951][ T9] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 354.399015][ T9] f81534 4-1:0.12: f81534_find_config_idx: read failed: -32 [ 354.399033][ T9] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 354.399135][ T9] f81534 4-1:0.12: probe with driver f81534 failed with error -32 [ 354.540302][ T9142] FAULT_INJECTION: forcing a failure. [ 354.540302][ T9142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.540342][ T9142] CPU: 0 UID: 0 PID: 9142 Comm: syz.2.1012 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 354.540373][ T9142] Tainted: [L]=SOFTLOCKUP [ 354.540381][ T9142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 354.540393][ T9142] Call Trace: [ 354.540401][ T9142] [ 354.540410][ T9142] dump_stack_lvl+0xe8/0x150 [ 354.540443][ T9142] should_fail_ex+0x467/0x600 [ 354.540479][ T9142] _copy_from_user+0x2d/0xb0 [ 354.540501][ T9142] ___sys_sendmsg+0x1c6/0x360 [ 354.540532][ T9142] ? __lock_acquire+0x6df/0x2e40 [ 354.540557][ T9142] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.540593][ T9142] ? __rb_reserve_next+0x795/0xdc0 [ 354.540659][ T9142] ? __fget_files+0x2a/0x420 [ 354.540679][ T9142] ? __fget_files+0x3a8/0x420 [ 354.540711][ T9142] __x64_sys_sendmsg+0x1b7/0x290 [ 354.540755][ T9142] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.540797][ T9142] ? trace_syscall_enter+0x5b/0x100 [ 354.540821][ T9142] ? trace_syscall_enter+0x5b/0x100 [ 354.540844][ T9142] ? rcu_is_watching+0x15/0xb0 [ 354.540868][ T9142] ? trace_syscall_enter+0x5b/0x100 [ 354.540894][ T9142] do_syscall_64+0x17b/0x530 [ 354.540915][ T9142] ? irqentry_exit+0x10f/0x8f0 [ 354.540936][ T9142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.540958][ T9142] ? clear_bhb_loop+0x40/0x90 [ 354.540985][ T9142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.541006][ T9142] RIP: 0033:0x7ff98896e0d9 [ 354.541027][ T9142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.541046][ T9142] RSP: 002b:00007ff986bc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.541070][ T9142] RAX: ffffffffffffffda RBX: 00007ff988bf5fa0 RCX: 00007ff98896e0d9 [ 354.541087][ T9142] RDX: 0000000000004800 RSI: 0000200000000240 RDI: 0000000000000003 [ 354.541100][ T9142] RBP: 00007ff986bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 354.541114][ T9142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.541129][ T9142] R13: 00007ff988bf6038 R14: 00007ff988bf5fa0 R15: 00007ffdd4d1c478 [ 354.541164][ T9142] [ 354.684173][ T9] usb 4-1: USB disconnect, device number 61 [ 354.858179][ T9147] FAULT_INJECTION: forcing a failure. [ 354.858179][ T9147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.858221][ T9147] CPU: 0 UID: 0 PID: 9147 Comm: syz.1.1015 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 354.858250][ T9147] Tainted: [L]=SOFTLOCKUP [ 354.858258][ T9147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 354.858272][ T9147] Call Trace: [ 354.858281][ T9147] [ 354.858290][ T9147] dump_stack_lvl+0xe8/0x150 [ 354.858324][ T9147] should_fail_ex+0x467/0x600 [ 354.858356][ T9147] _copy_from_user+0x2d/0xb0 [ 354.858378][ T9147] ___sys_sendmsg+0x1c6/0x360 [ 354.858407][ T9147] ? __lock_acquire+0x6df/0x2e40 [ 354.858433][ T9147] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.858469][ T9147] ? __rb_reserve_next+0x795/0xdc0 [ 354.858531][ T9147] ? __fget_files+0x2a/0x420 [ 354.858553][ T9147] ? __fget_files+0x3a8/0x420 [ 354.858585][ T9147] __x64_sys_sendmsg+0x1b7/0x290 [ 354.858618][ T9147] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.858659][ T9147] ? trace_syscall_enter+0x5b/0x100 [ 354.858682][ T9147] ? trace_syscall_enter+0x5b/0x100 [ 354.858705][ T9147] ? rcu_is_watching+0x15/0xb0 [ 354.858737][ T9147] ? trace_syscall_enter+0x5b/0x100 [ 354.858763][ T9147] do_syscall_64+0x17b/0x530 [ 354.858785][ T9147] ? irqentry_exit+0x10f/0x8f0 [ 354.858806][ T9147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.858832][ T9147] ? clear_bhb_loop+0x40/0x90 [ 354.858858][ T9147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.858879][ T9147] RIP: 0033:0x7f66a9a2e0d9 [ 354.858900][ T9147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.858919][ T9147] RSP: 002b:00007f66a7c86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.858944][ T9147] RAX: ffffffffffffffda RBX: 00007f66a9cb5fa0 RCX: 00007f66a9a2e0d9 [ 354.858961][ T9147] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 354.858975][ T9147] RBP: 00007f66a7c86090 R08: 0000000000000000 R09: 0000000000000000 [ 354.858988][ T9147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.859002][ T9147] R13: 00007f66a9cb6038 R14: 00007f66a9cb5fa0 R15: 00007fff8e1c8988 [ 354.859036][ T9147] [ 355.394428][ T32] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 355.543997][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 355.547033][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 355.550365][ T32] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 355.550397][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.550418][ T32] usb 2-1: Product: syz [ 355.550435][ T32] usb 2-1: Manufacturer: syz [ 355.550450][ T32] usb 2-1: SerialNumber: syz [ 355.603441][ T32] usb 2-1: config 0 descriptor?? [ 355.617452][ T32] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 355.617491][ T32] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 355.675509][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 355.756945][ T9163] FAULT_INJECTION: forcing a failure. [ 355.756945][ T9163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.757053][ T9163] CPU: 1 UID: 0 PID: 9163 Comm: syz.0.1020 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 355.757097][ T9163] Tainted: [L]=SOFTLOCKUP [ 355.757106][ T9163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.757120][ T9163] Call Trace: [ 355.757129][ T9163] [ 355.757139][ T9163] dump_stack_lvl+0xe8/0x150 [ 355.757180][ T9163] should_fail_ex+0x467/0x600 [ 355.757216][ T9163] _copy_from_user+0x2d/0xb0 [ 355.757239][ T9163] do_sock_getsockopt+0x200/0x7e0 [ 355.757278][ T9163] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 355.757328][ T9163] ? __fget_files+0x2a/0x420 [ 355.757351][ T9163] ? __fget_files+0x3a8/0x420 [ 355.757373][ T9163] ? __fget_files+0x2a/0x420 [ 355.757404][ T9163] __x64_sys_getsockopt+0x1aa/0x250 [ 355.757446][ T9163] do_syscall_64+0x17b/0x530 [ 355.757470][ T9163] ? irqentry_exit+0x10f/0x8f0 [ 355.757491][ T9163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.757514][ T9163] ? clear_bhb_loop+0x40/0x90 [ 355.757542][ T9163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.757564][ T9163] RIP: 0033:0x7f1bf9c2e0d9 [ 355.757585][ T9163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.757604][ T9163] RSP: 002b:00007f1bf7e86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 355.757629][ T9163] RAX: ffffffffffffffda RBX: 00007f1bf9eb5fa0 RCX: 00007f1bf9c2e0d9 [ 355.757646][ T9163] RDX: 0000000000002721 RSI: 0000200000000114 RDI: 0000000000000003 [ 355.757660][ T9163] RBP: 00007f1bf7e86090 R08: 0000200000000040 R09: 0000000000000000 [ 355.757676][ T9163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.757689][ T9163] R13: 00007f1bf9eb6038 R14: 00007f1bf9eb5fa0 R15: 00007ffca2a55098 [ 355.757732][ T9163] [ 355.848922][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 355.852778][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 355.857155][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 355.857184][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.857211][ T9] usb 4-1: Product: syz [ 355.857225][ T9] usb 4-1: Manufacturer: syz [ 355.857239][ T9] usb 4-1: SerialNumber: syz [ 355.870818][ T9] usb 4-1: config 0 descriptor?? [ 355.884456][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 355.884493][ T9] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 356.435984][ T32] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 356.525629][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 356.633948][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 356.727091][ T9178] FAULT_INJECTION: forcing a failure. [ 356.727091][ T9178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.727142][ T9178] CPU: 0 UID: 0 PID: 9178 Comm: syz.0.1024 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 356.727166][ T9178] Tainted: [L]=SOFTLOCKUP [ 356.727171][ T9178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.727179][ T9178] Call Trace: [ 356.727184][ T9178] [ 356.727194][ T9178] dump_stack_lvl+0xe8/0x150 [ 356.727229][ T9178] should_fail_ex+0x467/0x600 [ 356.727274][ T9178] _copy_from_user+0x2d/0xb0 [ 356.727296][ T9178] ___sys_sendmsg+0x1c6/0x360 [ 356.727327][ T9178] ? __lock_acquire+0x6df/0x2e40 [ 356.727345][ T9178] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.727367][ T9178] ? __rb_reserve_next+0x795/0xdc0 [ 356.727425][ T9178] ? __fget_files+0x2a/0x420 [ 356.727448][ T9178] ? __fget_files+0x3a8/0x420 [ 356.727480][ T9178] __x64_sys_sendmsg+0x1b7/0x290 [ 356.727511][ T9178] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 356.727535][ T9178] ? trace_syscall_enter+0x5b/0x100 [ 356.727549][ T9178] ? trace_syscall_enter+0x5b/0x100 [ 356.727571][ T9178] ? rcu_is_watching+0x15/0xb0 [ 356.727594][ T9178] ? trace_syscall_enter+0x5b/0x100 [ 356.727621][ T9178] do_syscall_64+0x17b/0x530 [ 356.727643][ T9178] ? irqentry_exit+0x10f/0x8f0 [ 356.727662][ T9178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.727684][ T9178] ? clear_bhb_loop+0x40/0x90 [ 356.727703][ T9178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.727720][ T9178] RIP: 0033:0x7f1bf9c2e0d9 [ 356.727737][ T9178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.727755][ T9178] RSP: 002b:00007f1bf7e86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.727779][ T9178] RAX: ffffffffffffffda RBX: 00007f1bf9eb5fa0 RCX: 00007f1bf9c2e0d9 [ 356.727796][ T9178] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000005 [ 356.727810][ T9178] RBP: 00007f1bf7e86090 R08: 0000000000000000 R09: 0000000000000000 [ 356.727823][ T9178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.727836][ T9178] R13: 00007f1bf9eb6038 R14: 00007f1bf9eb5fa0 R15: 00007ffca2a55098 [ 356.727867][ T9178] [ 356.794619][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 356.800270][ T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 356.800300][ T10] usb 3-1: config 0 has no interface number 0 [ 356.800349][ T10] usb 3-1: config 0 interface 12 has no altsetting 0 [ 356.804967][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 356.804997][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.805019][ T10] usb 3-1: Product: syz [ 356.805035][ T10] usb 3-1: Manufacturer: syz [ 356.805051][ T10] usb 3-1: SerialNumber: syz [ 356.828184][ T10] usb 3-1: config 0 descriptor?? [ 356.930320][ T9180] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 357.064429][ T32] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 357.064465][ T32] em28xx 2-1:0.0: board has no eeprom [ 357.123917][ T32] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 357.123951][ T32] em28xx 2-1:0.0: dvb set to bulk mode. [ 357.124395][ T5696] em28xx 2-1:0.0: Binding DVB extension [ 357.152708][ T32] usb 2-1: USB disconnect, device number 61 [ 357.162162][ T32] em28xx 2-1:0.0: Disconnecting em28xx [ 357.330331][ T5696] em28xx 2-1:0.0: Registering input extension [ 357.330578][ T32] em28xx 2-1:0.0: Closing input extension [ 357.414043][ T5695] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 357.430662][ T9] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 357.430755][ T9] em28xx 4-1:0.0: board has no eeprom [ 357.469289][ T32] em28xx: Freeing device [ 357.536246][ T9] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 357.536274][ T9] em28xx 4-1:0.0: dvb set to bulk mode. [ 357.536514][ T5759] em28xx 4-1:0.0: Binding DVB extension [ 357.580335][ T9] usb 4-1: USB disconnect, device number 62 [ 357.593833][ T5695] usb 1-1: Using ep0 maxpacket: 32 [ 357.596417][ T5695] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 357.596444][ T5695] usb 1-1: config 0 has no interface number 0 [ 357.596490][ T5695] usb 1-1: config 0 interface 12 has no altsetting 0 [ 357.603001][ T5695] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 357.603040][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.603061][ T5695] usb 1-1: Product: syz [ 357.603077][ T5695] usb 1-1: Manufacturer: syz [ 357.603093][ T5695] usb 1-1: SerialNumber: syz [ 357.636542][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 357.696297][ T5695] usb 1-1: config 0 descriptor?? [ 357.811602][ T5759] em28xx 4-1:0.0: Registering input extension [ 357.812142][ T9] em28xx 4-1:0.0: Closing input extension [ 357.927595][ T5695] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 357.927799][ T5695] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 357.927822][ T5695] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 357.927926][ T5695] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 358.021489][ T5695] usb 1-1: USB disconnect, device number 75 [ 358.359656][ T9] em28xx: Freeing device [ 358.991258][ T10] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 358.991324][ T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -32 [ 358.991344][ T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 358.991445][ T10] f81534 3-1:0.12: probe with driver f81534 failed with error -32 [ 359.138300][ T32] usb 3-1: USB disconnect, device number 55 [ 359.541965][ T9208] FAULT_INJECTION: forcing a failure. [ 359.541965][ T9208] name failslab, interval 1, probability 0, space 0, times 0 [ 359.542002][ T9208] CPU: 0 UID: 0 PID: 9208 Comm: syz.2.1032 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 359.542027][ T9208] Tainted: [L]=SOFTLOCKUP [ 359.542034][ T9208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 359.542045][ T9208] Call Trace: [ 359.542052][ T9208] [ 359.542060][ T9208] dump_stack_lvl+0xe8/0x150 [ 359.542088][ T9208] should_fail_ex+0x467/0x600 [ 359.542118][ T9208] should_failslab+0xa8/0x100 [ 359.542137][ T9208] __kmalloc_cache_noprof+0xa1/0x670 [ 359.542164][ T9208] ? nfc_genl_rcv_nl_event+0xa8/0x2d0 [ 359.542278][ T9208] ? nfc_genl_rcv_nl_event+0xa8/0x2d0 [ 359.542307][ T9208] nfc_genl_rcv_nl_event+0xa8/0x2d0 [ 359.542334][ T9208] notifier_call_chain+0x1a5/0x3d0 [ 359.542367][ T9208] blocking_notifier_call_chain+0x6a/0x90 [ 359.542393][ T9208] netlink_release+0x1216/0x1a90 [ 359.542428][ T9208] ? netlink_release+0x106/0x1a90 [ 359.542458][ T9208] ? __pfx_netlink_release+0x10/0x10 [ 359.542500][ T9208] __sock_release+0xa0/0x1f0 [ 359.542521][ T9208] ? __pfx_sock_close+0x10/0x10 [ 359.542539][ T9208] sock_close+0x1c/0x30 [ 359.542556][ T9208] __fput+0x42a/0xa80 [ 359.542583][ T9208] fput_close_sync+0x11f/0x240 [ 359.542605][ T9208] ? __pfx_fput_close_sync+0x10/0x10 [ 359.542634][ T9208] __x64_sys_close+0x7e/0x110 [ 359.542653][ T9208] do_syscall_64+0x17b/0x530 [ 359.542671][ T9208] ? irqentry_exit+0x10f/0x8f0 [ 359.542697][ T9208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.542716][ T9208] ? clear_bhb_loop+0x40/0x90 [ 359.542739][ T9208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.542757][ T9208] RIP: 0033:0x7ff98896e0d9 [ 359.542775][ T9208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.542791][ T9208] RSP: 002b:00007ff986bc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 359.542810][ T9208] RAX: ffffffffffffffda RBX: 00007ff988bf5fa0 RCX: 00007ff98896e0d9 [ 359.542824][ T9208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 359.542835][ T9208] RBP: 00007ff986bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 359.542846][ T9208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.542857][ T9208] R13: 00007ff988bf6038 R14: 00007ff988bf5fa0 R15: 00007ffdd4d1c478 [ 359.542887][ T9208] [ 359.920389][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1033'. [ 360.042169][ T9217] ./file0: Can't lookup blockdev [ 360.163972][ T9217] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 360.273912][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 360.373940][ T32] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 360.437012][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.437073][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 4 [ 360.437130][ T9] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 360.437159][ T9] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 360.437200][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 360.437226][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.522883][ T9] usb 4-1: interface 1 not found [ 360.586940][ T32] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.586971][ T32] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.586988][ T32] usb 2-1: config 0 interface 0 has no altsetting 0 [ 360.587009][ T32] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 360.587024][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.593684][ T32] usb 2-1: config 0 descriptor?? [ 360.785723][ T9224] omfs: Invalid superblock (0) [ 360.791051][ T5696] usb 4-1: USB disconnect, device number 63 [ 361.224005][ T5696] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 361.278269][ T32] usbhid 2-1:0.0: can't add hid device: -71 [ 361.278395][ T32] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 361.362275][ T32] usb 2-1: USB disconnect, device number 62 [ 361.424195][ T5696] usb 3-1: Using ep0 maxpacket: 32 [ 361.426749][ T5696] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 361.426777][ T5696] usb 3-1: config 0 has no interface number 0 [ 361.426823][ T5696] usb 3-1: config 0 interface 12 has no altsetting 0 [ 361.431046][ T5696] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 361.431088][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.431110][ T5696] usb 3-1: Product: syz [ 361.431126][ T5696] usb 3-1: Manufacturer: syz [ 361.431142][ T5696] usb 3-1: SerialNumber: syz [ 361.546570][ T5696] usb 3-1: config 0 descriptor?? [ 361.667484][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3830 [ 361.667510][ C1] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 30, name: ktimers/1 [ 361.667528][ C1] preempt_count: 0, expected: 0 [ 361.667537][ C1] RCU nest depth: 2, expected: 0 [ 361.667547][ C1] locks held by ktimers/1/30: 4, last CPU#1: [ 361.667563][ C1] #0: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 361.667629][ C1] #1: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 361.667669][ C1] #2: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 361.667709][ C1] #3: ffff888033ec2358 (sk_lock-AF_X25){+.+.}-{0:0}, at: x25_kill_by_neigh+0xab/0x160 [ 361.667762][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 361.667787][ C1] Tainted: [L]=SOFTLOCKUP [ 361.667793][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 361.667804][ C1] Call Trace: [ 361.667812][ C1] [ 361.667820][ C1] dump_stack_lvl+0xe8/0x150 [ 361.667845][ C1] __might_resched+0x329/0x480 [ 361.667869][ C1] ? x25_kill_by_neigh+0x26/0x160 [ 361.667889][ C1] lock_sock_nested+0x56/0x130 [ 361.667911][ C1] ? x25_kill_by_neigh+0x26/0x160 [ 361.667931][ C1] x25_kill_by_neigh+0xab/0x160 [ 361.667955][ C1] x25_lapb_receive_frame+0x1b0/0xf90 [ 361.667982][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 361.668000][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 361.668017][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 361.668040][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 361.668066][ C1] lapbeth_napi_poll+0x45/0x90 [ 361.668158][ C1] __napi_poll+0xae/0x550 [ 361.668182][ C1] net_rx_action+0x621/0xd70 [ 361.668214][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 361.668252][ C1] ? rt_spin_unlock+0x157/0x200 [ 361.668286][ C1] handle_softirqs+0x1d9/0x6c0 [ 361.668315][ C1] run_ktimerd+0x69/0x100 [ 361.668335][ C1] smpboot_thread_fn+0x57c/0xa80 [ 361.668358][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 361.668388][ C1] kthread+0x388/0x470 [ 361.668412][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 361.668431][ C1] ? __pfx_kthread+0x10/0x10 [ 361.668455][ C1] ret_from_fork+0x514/0xb70 [ 361.668483][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 361.668509][ C1] ? __switch_to+0xc89/0x1420 [ 361.668537][ C1] ? __pfx_kthread+0x10/0x10 [ 361.668562][ C1] ret_from_fork_asm+0x1a/0x30 [ 361.668615][ C1] [ 361.935814][ T5696] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 361.935893][ T5696] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 361.935912][ T5696] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 361.936008][ T5696] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 361.954678][ T5697] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 362.052089][ T9239] FAULT_INJECTION: forcing a failure. [ 362.052089][ T9239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.052116][ T9239] CPU: 0 UID: 0 PID: 9239 Comm: syz.3.1041 Tainted: G W L syzkaller #0 PREEMPT_{RT,(full)} [ 362.052136][ T9239] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 362.052141][ T9239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.052149][ T9239] Call Trace: [ 362.052158][ T9239] [ 362.052164][ T9239] dump_stack_lvl+0xe8/0x150 [ 362.052190][ T9239] should_fail_ex+0x467/0x600 [ 362.052211][ T9239] _copy_from_user+0x2d/0xb0 [ 362.052224][ T9239] ___sys_sendmsg+0x1c6/0x360 [ 362.052243][ T9239] ? __lock_acquire+0x6df/0x2e40 [ 362.052258][ T9239] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.052279][ T9239] ? __rb_reserve_next+0x795/0xdc0 [ 362.052314][ T9239] ? __fget_files+0x2a/0x420 [ 362.052328][ T9239] ? __fget_files+0x3a8/0x420 [ 362.052346][ T9239] __x64_sys_sendmsg+0x1b7/0x290 [ 362.052366][ T9239] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 362.052390][ T9239] ? trace_syscall_enter+0x5b/0x100 [ 362.052403][ T9239] ? trace_syscall_enter+0x5b/0x100 [ 362.052416][ T9239] ? rcu_is_watching+0x15/0xb0 [ 362.052429][ T9239] ? trace_syscall_enter+0x5b/0x100 [ 362.052444][ T9239] do_syscall_64+0x17b/0x530 [ 362.052457][ T9239] ? irqentry_exit+0x10f/0x8f0 [ 362.052469][ T9239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.052482][ T9239] ? clear_bhb_loop+0x40/0x90 [ 362.052498][ T9239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.052510][ T9239] RIP: 0033:0x7fa518a2e0d9 [ 362.052522][ T9239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.052535][ T9239] RSP: 002b:00007fa516c44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.052549][ T9239] RAX: ffffffffffffffda RBX: 00007fa518cb6180 RCX: 00007fa518a2e0d9 [ 362.052559][ T9239] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 362.052567][ T9239] RBP: 00007fa516c44090 R08: 0000000000000000 R09: 0000000000000000 [ 362.052575][ T9239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.052583][ T9239] R13: 00007fa518cb6218 R14: 00007fa518cb6180 R15: 00007ffda0501aa8 [ 362.052602][ T9239] [ 362.058070][ T5696] usb 3-1: USB disconnect, device number 56 [ 362.129538][ T5697] usb 1-1: Using ep0 maxpacket: 32 [ 362.142731][ T5697] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 362.142761][ T5697] usb 1-1: config 0 has no interface number 0 [ 362.143093][ T5697] usb 1-1: config 0 interface 12 has no altsetting 0 [ 362.158185][ T5697] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 362.158216][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.158236][ T5697] usb 1-1: Product: syz [ 362.158250][ T5697] usb 1-1: Manufacturer: syz [ 362.158265][ T5697] usb 1-1: SerialNumber: syz [ 362.394344][ T5744] udevd[5744]: setting mode of /dev/bus/usb/003/056 to 020664 failed: No such file or directory [ 362.407152][ T5697] usb 1-1: config 0 descriptor?? [ 362.469808][ T5744] udevd[5744]: setting owner of /dev/bus/usb/003/056 to uid=0, gid=0 failed: No such file or directory [ 364.547992][ T5697] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 364.548070][ T5697] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 364.548089][ T5697] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 364.548194][ T5697] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 364.563954][ T5697] usb 1-1: USB disconnect, device number 76