last executing test programs: 7.401360101s ago: executing program 1 (id=213): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000600)=[{0xcf, 0xc000, 0x11, &(0x7f0000000200)="6625c8e8dfaedc1286c5e6d9ca4a960741"}], 0x1}) (fail_nth: 2) 7.006497089s ago: executing program 3 (id=216): timer_create(0x8, 0x0, &(0x7f0000000500)=0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_gettime(r0, &(0x7f0000000200)) 6.95620679s ago: executing program 3 (id=217): socket$igmp(0x2, 0x3, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x2, 0xa5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0xa, 0x0, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xfb, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0xd4, 0x8000000000000, 0x61, 0x1000003ff, 0x0, 0x2004c8, 0xb229, 0x2, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000, 0x0, 0x40], 0x60000}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="800017bb0e9ba1", 0x7, 0x404d811, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="48000000150081fb7059ae08060c040002ff0f03f1cd823010a7ce9000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a0200000046", 0x48}], 0x1}, 0x4000000) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000540)={0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="22a5bca668d7a667be67746cabffdb2e51c9cf0dc829fbdca61d31b470dda1aa05035df604f4eef891ad90259d912301bafee307cb478e847a583c665c4d549eee64da89ce7afbfc819dd2ee3f93769fb34470aff0d3325e919663513cbea0b323fd529aabca699cb915b447626f9ac30eddc84891825eb5badc29dd4d7c3cb08819b67ce68f2788ca3fef699cd030ed2a1685c849af34cd9d"], 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x48, 0x0, 0x41000000}], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000640)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x20, 0x20, 0x41, {0x41, 0x8, "7cb2a967fbd475ec775b502e7eaa5ac57f499d811302d65eefd608610a6e69e810d6d63eb0b4bd7ec1abc1cba724918dbba43b31b6e803ef49dd63081927a1"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f05000000050f05f600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x3, 0x7, "cce5e064", "3449548b"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x60, 0x4, 0x3, 0x8, 0x2fa2, 0x3}}}, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x20, 0x16, 0xc4, "c744c68ea04936c5a6d5a5c438a5c41c25a82e144dc56008a8b934de35ca882318d459179a0b9d7a3547dd1432d73af4ee6635f7177fafe0bfb6331ce8c6bba09f715e9081442b306337fe4344cefc7f274c90172baf3837b3dd273f56e1b2121b85c2f3a6cfe96aeed998af7dee412c05243dc7481c417a74e2025255fa8deeedf1d0e42dab1a2a369dcf04e59211c2eda5b5a214fbe38acebd8c31cdae0c39ffa2b678b209a364b64cde963a64073d31b8a8ebe7bca973f10296ccb0a37d403eda34b7"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000500)={0x0, 0x8, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdff03000000a0000100"], &(0x7f0000000600)={0x40, 0x7, 0x2, 0x81}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000006c0)={0x40, 0xb, 0x2, '\ba'}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x4e}, &(0x7f0000000740)={0x40, 0x13, 0x6, @local}, &(0x7f0000000780)={0x40, 0x17, 0x6, @local}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "8b82"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0xff}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000300)={0x40, 0x1e, 0x1, 0xd7}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0xa}}) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000340)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000880)=0x2c) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.908262753s ago: executing program 0 (id=218): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc"], 0xfc}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x4000000000042) writev(r2, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf300000014"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000840)={{0xfec00000, 0x111e5001, 0x9, 0x6, 0xd, 0x2, 0x10, 0xc, 0x9, 0x7f, 0x2c, 0x8}, {0x8080000, 0x25000, 0xd, 0x4, 0x7f, 0x3, 0x6, 0x3, 0x40, 0x5, 0x0, 0x4}, {0x1, 0x41000, 0x4, 0x4, 0x0, 0x2, 0xc8, 0x5, 0x3, 0xd, 0x80, 0x8c}, {0x58000, 0x2, 0x8, 0x40, 0x8a, 0x1, 0x6, 0x2, 0xb, 0x5, 0x5, 0x1}, {0x5000, 0x6000, 0xa, 0x10, 0xff, 0xed, 0x6, 0xb, 0x5, 0x1, 0x6, 0x4}, {0x60000, 0x8080000, 0x10, 0xd7, 0x2, 0x4, 0x84, 0x8, 0x3, 0xfa, 0x5f, 0xd}, {0x50000, 0x26000, 0xf, 0x6, 0x4, 0x5, 0x9, 0xff, 0x0, 0x7, 0x40, 0x6}, {0x40000, 0x9000, 0x0, 0x3e, 0x4, 0x2, 0xf, 0x7, 0x95, 0x0, 0x2, 0x6}, {0xf000, 0x3}, {0x1, 0x9}, 0x20000000, 0x0, 0xa000, 0x20001, 0x5, 0x2101, 0x0, [0x6, 0x2, 0x2040000001000, 0xffffffffffff5adc]}) 5.690541273s ago: executing program 1 (id=219): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000180)={'bridge0\x00', @ifru_hwaddr=@local}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) sendmmsg$inet6(r2, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e1e, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x3, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) read(r1, &(0x7f0000000200), 0xffffffdb) read(r1, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x40, 0x0, 0x1, 0x70bd65, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0xfd}, @NL802154_SECLEVEL_ATTR_FRAME={0x5, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24880}, 0x800) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000000}, 0xc000) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000240), 0x2004, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000000)={0x2, 0x1, 0x4, 0xe91a, 0x2, "e2464c86b6f77ffd56b42474085be32bd1b2fb", 0xfffffffb, 0x205d}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)=0x8) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000200)=0xa4c6) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000280)={[0xe000, 0x6000, 0x40000, 0x2000], 0x1, 0x0, 0x800}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x4c, r4, 0x1, 0x70bd3a, 0x8000, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x4c}}, 0x0) 5.173497381s ago: executing program 1 (id=221): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x7, 0x7fffffffffffe, 0x5, 0x4, 0x9, 0x7f, 0x800000000f4a, 0x100000000, 0xbdb], 0xc000, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x308) 5.082333094s ago: executing program 0 (id=222): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x3, 0xd1, &(0x7f0000000ac0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x194f, 0x10c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x3, 0x1, 0x34, 0x80, 0xff, {0x8, 0xb, 0x2, 0x1, 0x1, 0xa, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xf79, 0x8, 0x34}, [@input_terminal={0x10, 0x24, 0x2, 0x3, 0x402, 0x1, 0xf, 0x9, 0x0, 0x3, 0x5, 0x5}, @sample_rate={0xf, 0x24, 0xd, 0x2, 0x2, 0x2, [0x0, 0x2, 0x1, 0x2]}, @output_terminal={0xc, 0x24, 0x3, 0x6, 0x401, 0x9, 0x2, 0xe0, 0xe04, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x2, 0x0, 0x8, "8a817b", '^Y'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x40, 0xfff, 0x4, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x3, 0x74, 0x23}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x55, 0x8, 0x0, {0x8, 0x25, 0x1, 0x80, 0x30, 0xe, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x7, 0x6, 0x33}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x7, 0x0, {0x8, 0x25, 0x1, 0x0, 0x3f, 0x9, 0x7ac7}}}}}}}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x250, 0x0, 0x73, 0x4, 0x40, 0x9c}, 0x5, &(0x7f0000000c00)={0x5, 0xf, 0x5}, 0x1, [{0xf6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x84) close(r1) r2 = socket(0x1, 0x803, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1c0) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/../../functions/ncm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, 0x0, 0x0) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r6, &(0x7f0000000580)='MSFT10', 0x6) close(r6) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/os_desc/c.1\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x1, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x0) write(r7, &(0x7f00000006c0)='WINN', 0x4) 4.520482585s ago: executing program 1 (id=223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x28, r1, 0xacf5e67dd0b583a1, 0x70bd27, 0x10000000, {{0x5}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8810}, 0x100) 4.199973345s ago: executing program 1 (id=224): r0 = syz_usb_connect$hid(0x1, 0x36, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x30, 0xf7, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x3, 0x40, 0x1d}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x6, 0x4}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x81, 0xce, 0xf4, 0xff, 0x3}, 0xe6, &(0x7f0000000100)={0x5, 0xf, 0xe6, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0xe, 0x6, 0x6, 0x3c638a6d911c4181, 0x100, [0x3f, 0x3f00, 0xffc0cf, 0x7e00, 0x3fc0, 0x0]}, @generic={0xa8, 0x10, 0x8, "292bee4e0ea3d96b41da04f386b8effbae90d7869d765152066b09383d4aade90d3cbaf5b44cbd740b71e5a019c95b6da6ec5aa78807b78e9493f1fe143beebfc8beb301bd28e8cb7c71f9b77ba6103d99556b5d94f0279dce0a8d439b4bfad676a965409be2f56d3c41ad5495cd4612f06ac3a0f42a91087823f81d386c89ffa8fc4ceaba6dc0bc9264f7c4f0c66f6f68ccb2d5b5c0cc674314ca356d38937fb5912c267f"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x86, 0x6, 0x6e, 0x4, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x2, 0x9, 0xa66}]}}) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000700)) r3 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)={0x0, r3}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, 0x0, 0x0, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x400c4d06, &(0x7f0000000a00)) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4002) 2.806347309s ago: executing program 2 (id=225): timer_create(0x8, 0x0, &(0x7f0000000500)=0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_gettime(r0, &(0x7f0000000200)) 2.750338589s ago: executing program 0 (id=226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xffffffff}]}) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) close(0x3) (fail_nth: 9) 2.695944048s ago: executing program 2 (id=227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778625d52}, 0x4) (fail_nth: 9) 2.088614472s ago: executing program 2 (id=228): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x0, 0x0, 0x34325852, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla', 0x5) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) r3 = getuid() setresuid(r3, r3, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x5, {0x3, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xe5, 0xc, {0x1, 0x9, 0x1, 0x1, 0x5, 0x4, 0x8, 0x123, 0x3, 0xa000, 0x0, 0x0, r6, 0x5, 0x2000fffb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f00000001c0)={0xa0, 0x19, 0x2, {0x21, {0x0, 0x2, 0x3}, 0x0, r3, r6, 0x971, 0x6, 0x51df, 0x10001, 0x0, 0x2, 0xb2, 0x8000000000000001, 0x6c, 0x81, 0x8, 0x80000000, 0x1, 0xfffffffffffffff8, 0xbac3}}, 0xa0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.088128572s ago: executing program 1 (id=229): syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090248000101006015090400001a0202"], 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x80802, 0x1cc) write$FUSE_ENTRY(r1, &(0x7f00000037c0)={0x90, 0x0, 0x0, {0x6, 0x6, 0x14, 0x5, 0x0, 0x6, {0x2, 0x8000000000000001, 0x8000000000000001, 0xfff, 0x4, 0x3, 0x6, 0x6, 0x7fffffff, 0xc000, 0xfffff0a8, 0x0, 0x0, 0xff, 0x5}}}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r2) getrandom(0x0, 0x0, 0x26091e217c55a828) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x20, r3, 0x703, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x26040000}, 0x4) ioctl$TIOCMIWAIT(r0, 0x545c, 0x300) 1.94458505s ago: executing program 3 (id=230): mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 1.770204786s ago: executing program 0 (id=231): mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 928.88382ms ago: executing program 2 (id=232): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="d800070018009903e00312ba0d8105040a3f0300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab1bab4023b09aab56e3fab1f9950a1ca4007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5d", 0xd8}], 0x1}, 0x20048812) 582.763226ms ago: executing program 3 (id=233): setns(0xc9, 0x0) r0 = socket(0x2, 0x3, 0xff) sendmmsg$unix(r0, &(0x7f0000007780)=[{{&(0x7f0000002440)=@file={0xf5, './file0\x00'}, 0x6e, &(0x7f0000004900)=[{&(0x7f0000004500)="d9ff3c4ae71cd8e0c2f9dae2ee2a68355807299daa97bc2784dbfc8692de61162eea3957", 0x24}], 0x1, 0x0, 0x0, 0x20008000}}], 0x1, 0x8020) 542.741672ms ago: executing program 2 (id=234): setns(0xc9, 0x0) r0 = socket(0x2, 0x3, 0xff) sendmmsg$unix(r0, &(0x7f0000007780)=[{{&(0x7f0000002440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004900)=[{&(0x7f0000004500)="d9ff3c4ae71cd8e0c2f9dae2ee2a68355807299daa97bc2784dbfc8692de61162eea3957", 0x24}], 0x1, 0x0, 0x0, 0x20008000}}], 0x1, 0x8020) (fail_nth: 6) 366.646003ms ago: executing program 3 (id=235): timer_create(0x8, &(0x7f00000004c0)={0x0, 0x41, 0x1, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000200)) 346.291484ms ago: executing program 2 (id=236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) (async) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0xfffd, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x4008804) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f0000002140)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000c40)='2', 0x1}], 0x1}, 0x8400) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0x8, 0xd, 0x3, 0xe4, 0x40, 0xe, 0x0, 0x38, 0x1b}, {0xdddd1000, 0xe000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0x2000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x22, 0xab, 0x5, 0x46}, {0x30000, 0x7000, 0x3, 0x1, 0x6, 0x42, 0x2, 0xfb, 0x80, 0x7, 0xd}, {0xa000, 0x9000, 0x10, 0x2, 0x3, 0xf5, 0xab, 0x7f, 0x4a, 0x83, 0xfe, 0xe}, {0xdddd1000, 0x80a0000, 0x8, 0xfa, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xfb, 0x1, 0xfd}, {0x100000, 0x2, 0x5, 0x5, 0x7, 0xfe, 0xb, 0x0, 0x9, 0x81, 0x1}, {0x5000, 0xa000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x5, 0x3, 0x7, 0x19}, {0xb000, 0x2d}, {0xf000, 0x7fff}, 0xc0040065, 0x0, 0xe6c8b002, 0x42224, 0xb, 0x1, 0x3000, [0x483ffffffffffffe, 0x3, 0x1000000007, 0x5b3]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0x3e, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0x3e, 0x0, 0x0) 334.441ms ago: executing program 0 (id=237): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f00000002c0)="703a2d5f73742f6576656e7431202e2f66696c65303a3078302040cf", 0x1c) 175.277554ms ago: executing program 3 (id=238): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f00000002c0)="703a2d6573742f6576656e7431202e2f66696c65303a3078302040cf", 0x1c) (fail_nth: 8) 0s ago: executing program 0 (id=239): setns(0xc9, 0x0) r0 = socket(0x2, 0x3, 0xff) sendmmsg$unix(r0, &(0x7f0000007780)=[{{&(0x7f0000002440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004900)=[{&(0x7f0000004500)="d9ff3c4ae71cd8e0c2f9dae2ee2a68355807299daa97bc2784dbfc8692de61162eea3957", 0x24}], 0x1, 0x0, 0x0, 0x20008000}}], 0x1, 0x8020) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003580)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000001fc0)=""/4088, 0xff8}, {&(0x7f0000002fc0)=""/241, 0xf1}, {&(0x7f00000030c0)=""/27, 0x21}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000003140)=""/221, 0xdd}, {&(0x7f0000019200)=""/209, 0xd1}, {&(0x7f0000019300)=""/221, 0xdd}], 0x7}, 0xfff}], 0x400000000000211, 0x40012040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000280)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000"], 0x80}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x20, 0x17, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000001080)={0x2, 0x4624, @remote}, 0x10) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0xf, @name="211ac0912fb1a36f4826fb7943a679c23dc6871e0875cc8f7b171f10622e1233"}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fc", 0x21}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r6, 0x0, 0x0) kernel console output (not intermixed with test programs): TION: forcing a failure. [ 131.574975][ T5895] name failslab, interval 1, probability 0, space 0, times 0 [ 131.575008][ T5895] CPU: 1 UID: 0 PID: 5895 Comm: syz.2.37 Not tainted syzkaller #0 PREEMPT(full) [ 131.575039][ T5895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.575052][ T5895] Call Trace: [ 131.575061][ T5895] [ 131.575071][ T5895] dump_stack_lvl+0xe8/0x150 [ 131.575107][ T5895] should_fail_ex+0x3eb/0x540 [ 131.575138][ T5895] should_failslab+0xa8/0x100 [ 131.575165][ T5895] __kmalloc_cache_noprof+0x9e/0x600 [ 131.575200][ T5895] ? percpu_ref_init+0xc5/0x350 [ 131.575220][ T5895] ? percpu_ref_init+0xc5/0x350 [ 131.575256][ T5895] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 131.575277][ T5895] percpu_ref_init+0xc5/0x350 [ 131.575303][ T5895] io_ring_ctx_alloc+0x318/0xb80 [ 131.575326][ T5895] ? io_prepare_config+0x8c8/0xc70 [ 131.575354][ T5895] io_uring_create+0x50/0x980 [ 131.575379][ T5895] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 131.575402][ T5895] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 131.575426][ T5895] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 131.575466][ T5895] ? __pfx_ksys_write+0x10/0x10 [ 131.575509][ T5895] do_syscall_64+0x166/0x520 [ 131.575530][ T5895] ? trace_irq_disable+0x3b/0x140 [ 131.575562][ T5895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.575584][ T5895] ? clear_bhb_loop+0x70/0xc0 [ 131.575612][ T5895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.575634][ T5895] RIP: 0033:0x7fa7df19e159 [ 131.575655][ T5895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.575673][ T5895] RSP: 002b:00007fa7dffbfee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 131.575697][ T5895] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007fa7df19e159 [ 131.575713][ T5895] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 0000000000000e26 [ 131.575728][ T5895] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000 [ 131.575742][ T5895] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 131.575757][ T5895] R13: 0000200000000890 R14: 00007fa7dffbffd8 R15: 0000000000000000 [ 131.575789][ T5895] [ 133.271909][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.272005][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.746847][ T5938] cgroup: No subsys list or none specified [ 133.790338][ T5704] usb 1-1: USB disconnect, device number 3 [ 133.818274][ T5933] CIFS: VFS: UNC: path must begin with // or \\ [ 133.818298][ T5933] Malformed UNC in devname [ 133.818298][ T5933] [ 133.818371][ T5933] CIFS: VFS: Malformed UNC in devname [ 133.904541][ T5704] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 134.499670][ T5958] FAULT_INJECTION: forcing a failure. [ 134.499670][ T5958] name failslab, interval 1, probability 0, space 0, times 0 [ 134.499696][ T5958] CPU: 1 UID: 0 PID: 5958 Comm: syz.2.48 Not tainted syzkaller #0 PREEMPT(full) [ 134.499714][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.499724][ T5958] Call Trace: [ 134.499951][ T5958] [ 134.499960][ T5958] dump_stack_lvl+0xe8/0x150 [ 134.499990][ T5958] should_fail_ex+0x3eb/0x540 [ 134.500017][ T5958] should_failslab+0xa8/0x100 [ 134.500039][ T5958] __kmalloc_noprof+0xf9/0x710 [ 134.500065][ T5958] ? iovec_from_user+0x87/0x250 [ 134.500095][ T5958] ? iovec_from_user+0x87/0x250 [ 134.500123][ T5958] iovec_from_user+0x87/0x250 [ 134.500149][ T5958] __import_iovec+0x15e/0x7e0 [ 134.500180][ T5958] import_iovec+0x73/0xa0 [ 134.500206][ T5958] ___sys_recvmsg+0x4c9/0x5a0 [ 134.500228][ T5958] ? lock_acquire+0x115/0x350 [ 134.500257][ T5958] ? __pfx____sys_recvmsg+0x10/0x10 [ 134.500282][ T5958] ? lock_acquire+0x115/0x350 [ 134.500320][ T5958] ? __fget_files+0x3a2/0x420 [ 134.500373][ T5958] do_recvmmsg+0x31a/0x7f0 [ 134.500401][ T5958] ? __pfx_do_recvmmsg+0x10/0x10 [ 134.500432][ T5958] ? get_timespec64+0x119/0x1b0 [ 134.500461][ T5958] ? __pfx_get_timespec64+0x10/0x10 [ 134.500485][ T5958] __x64_sys_recvmmsg+0x1b7/0x250 [ 134.500506][ T5958] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 134.500535][ T5958] do_syscall_64+0x166/0x520 [ 134.500550][ T5958] ? trace_irq_disable+0x3b/0x140 [ 134.500575][ T5958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.500595][ T5958] ? clear_bhb_loop+0x70/0xc0 [ 134.500619][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.500636][ T5958] RIP: 0033:0x7fa7df19e159 [ 134.500652][ T5958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.500666][ T5958] RSP: 002b:00007fa7dffc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 134.500683][ T5958] RAX: ffffffffffffffda RBX: 00007fa7df425fa0 RCX: 00007fa7df19e159 [ 134.500695][ T5958] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 134.500706][ T5958] RBP: 00007fa7dffc0090 R08: 0000200000003700 R09: 0000000000000000 [ 134.500716][ T5958] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 134.500726][ T5958] R13: 00007fa7df426038 R14: 00007fa7df425fa0 R15: 00007fff9fd1ba08 [ 134.500750][ T5958] [ 134.872330][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 134.927053][ T5962] netlink: 'syz.3.49': attribute type 1 has an invalid length. [ 135.041475][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 135.041523][ T10] usb 2-1: too many configurations: 180, using maximum allowed: 8 [ 135.160538][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.160570][ T10] usb 2-1: Product: syz [ 135.160588][ T10] usb 2-1: Manufacturer: syz [ 135.160608][ T10] usb 2-1: SerialNumber: syz [ 135.247591][ T5972] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 135.328947][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 135.721085][ T5981] syz.3.52 uses obsolete (PF_INET,SOCK_PACKET) [ 135.781618][ T5984] syzkaller1: entered promiscuous mode [ 135.781646][ T5984] syzkaller1: entered allmulticast mode [ 136.462457][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 136.462700][ T9] ath9k_htc: Failed to initialize the device [ 136.602954][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 136.948604][ T883] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 137.112420][ T883] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 137.153148][ T883] usb 1-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 137.153184][ T883] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.194850][ T883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 137.194888][ T883] usb 1-1: SerialNumber: syz [ 137.293514][ T6009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.314465][ T6009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.546686][ T6003] syzkaller1: entered promiscuous mode [ 137.546714][ T6003] syzkaller1: entered allmulticast mode [ 137.611982][ T6015] syzkaller1: entered promiscuous mode [ 137.612012][ T6015] syzkaller1: entered allmulticast mode [ 138.062128][ T883] usb 1-1: 0:2 : does not exist [ 138.190663][ T883] usb 1-1: USB disconnect, device number 4 [ 138.760008][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.762554][ T49] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 138.910200][ T49] usb 4-1: Using ep0 maxpacket: 8 [ 138.912942][ T49] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 138.959253][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.959299][ T49] usb 4-1: Product: syz [ 138.959310][ T49] usb 4-1: Manufacturer: syz [ 138.959321][ T49] usb 4-1: SerialNumber: syz [ 138.968354][ T49] usb 4-1: config 0 descriptor?? [ 139.037315][ T49] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 139.582132][ T5704] usb 3-1: USB disconnect, device number 2 [ 139.732784][ T6040] Bluetooth: MGMT ver 1.23 [ 140.493214][ T6059] serio: Serial port ptm0 [ 141.233960][ T6073] FAULT_INJECTION: forcing a failure. [ 141.233960][ T6073] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 141.233999][ T6073] CPU: 1 UID: 0 PID: 6073 Comm: syz.0.64 Not tainted syzkaller #0 PREEMPT(full) [ 141.234023][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.234036][ T6073] Call Trace: [ 141.234044][ T6073] [ 141.234054][ T6073] dump_stack_lvl+0xe8/0x150 [ 141.234089][ T6073] should_fail_ex+0x3eb/0x540 [ 141.234119][ T6073] prepare_alloc_pages+0x21e/0x5f0 [ 141.234162][ T6073] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 141.234198][ T6073] ? __lock_acquire+0x747/0x2de0 [ 141.234235][ T6073] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 141.234281][ T6073] ? policy_nodemask+0x2cc/0x8e0 [ 141.234313][ T6073] alloc_pages_mpol+0x21e/0x390 [ 141.234343][ T6073] alloc_pages_noprof+0xb1/0x2b0 [ 141.234371][ T6073] get_free_pages_noprof+0xf/0x80 [ 141.234406][ T6073] __kasan_populate_vmalloc+0x38/0x1c0 [ 141.234439][ T6073] ? do_raw_spin_unlock+0xf5/0x200 [ 141.234469][ T6073] alloc_vmap_area+0xd10/0x1410 [ 141.234511][ T6073] ? __pfx_alloc_vmap_area+0x10/0x10 [ 141.234537][ T6073] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 141.234573][ T6073] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 141.234603][ T6073] ? __get_vm_area_node+0x155/0x2f0 [ 141.234641][ T6073] __get_vm_area_node+0x200/0x2f0 [ 141.234675][ T6073] __vmalloc_node_range_noprof+0x340/0x1690 [ 141.234708][ T6073] ? fpu_alloc_guest_fpstate+0x24/0x410 [ 141.234734][ T6073] ? lock_acquire+0x115/0x350 [ 141.234776][ T6073] ? percpu_ref_get_many+0x19/0x140 [ 141.234811][ T6073] ? __memcg_slab_post_alloc_hook+0x487/0xd90 [ 141.234854][ T6073] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 141.234886][ T6073] ? rcu_is_watching+0x16/0xb0 [ 141.234909][ T6073] ? trace_kmem_cache_alloc+0x29/0xe0 [ 141.234946][ T6073] ? kvm_arch_vcpu_create+0x3b4/0x8a0 [ 141.234981][ T6073] ? fpu_alloc_guest_fpstate+0x24/0x410 [ 141.235006][ T6073] vzalloc_noprof+0xb2/0xe0 [ 141.235035][ T6073] ? fpu_alloc_guest_fpstate+0x24/0x410 [ 141.235060][ T6073] fpu_alloc_guest_fpstate+0x24/0x410 [ 141.235087][ T6073] kvm_arch_vcpu_create+0x44a/0x8a0 [ 141.235126][ T6073] kvm_vm_ioctl_create_vcpu+0x29a/0x720 [ 141.235165][ T6073] kvm_vm_ioctl+0x886/0xd30 [ 141.235198][ T6073] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 141.235246][ T6073] ? kasan_quarantine_put+0xbb/0x1f0 [ 141.235288][ T6073] ? tomoyo_path_number_perm+0x219/0x5f0 [ 141.235313][ T6073] ? tomoyo_path_number_perm+0x219/0x5f0 [ 141.235339][ T6073] ? do_vfs_ioctl+0x116f/0x1530 [ 141.235364][ T6073] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 141.235399][ T6073] ? hook_file_ioctl+0x1f2/0x600 [ 141.235445][ T6073] ? __fget_files+0x2a/0x420 [ 141.235478][ T6073] ? __fget_files+0x2a/0x420 [ 141.235505][ T6073] ? __fget_files+0x3a2/0x420 [ 141.235532][ T6073] ? __fget_files+0x2a/0x420 [ 141.235565][ T6073] ? bpf_lsm_file_ioctl+0x9/0x20 [ 141.235593][ T6073] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 141.235623][ T6073] __se_sys_ioctl+0xfc/0x170 [ 141.235661][ T6073] do_syscall_64+0x166/0x520 [ 141.235682][ T6073] ? trace_irq_disable+0x3b/0x140 [ 141.235715][ T6073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.235738][ T6073] ? clear_bhb_loop+0x70/0xc0 [ 141.235790][ T6073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.235813][ T6073] RIP: 0033:0x7f50f579e159 [ 141.235836][ T6073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.235855][ T6073] RSP: 002b:00007f50f6682028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.235880][ T6073] RAX: ffffffffffffffda RBX: 00007f50f5a25fa0 RCX: 00007f50f579e159 [ 141.235895][ T6073] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 141.235908][ T6073] RBP: 00007f50f6682090 R08: 0000000000000000 R09: 0000000000000000 [ 141.235928][ T6073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.235941][ T6073] R13: 00007f50f5a26038 R14: 00007f50f5a25fa0 R15: 00007ffed9ced398 [ 141.235974][ T6073] [ 141.396822][ T6073] syz.0.64: vmalloc error: size 896, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 141.416262][ T6073] CPU: 0 UID: 0 PID: 6073 Comm: syz.0.64 Not tainted syzkaller #0 PREEMPT(full) [ 141.416358][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.416392][ T6073] Call Trace: [ 141.416409][ T6073] [ 141.416440][ T6073] dump_stack_lvl+0xe8/0x150 [ 141.416529][ T6073] warn_alloc+0x24d/0x270 [ 141.416625][ T6073] ? lockdep_hardirqs_on+0x7b/0x110 [ 141.416737][ T6073] ? __pfx_warn_alloc+0x10/0x10 [ 141.416815][ T6073] ? kfree+0x1c5/0x650 [ 141.417602][ T6073] ? __get_vm_area_node+0x219/0x2f0 [ 141.418126][ T6073] __vmalloc_node_range_noprof+0x368/0x1690 [ 141.418223][ T6073] ? lock_acquire+0x115/0x350 [ 141.418386][ T6073] ? percpu_ref_get_many+0x19/0x140 [ 141.418470][ T6073] ? __memcg_slab_post_alloc_hook+0x487/0xd90 [ 141.418578][ T6073] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 141.418670][ T6073] ? rcu_is_watching+0x16/0xb0 [ 141.419593][ T6073] ? trace_kmem_cache_alloc+0x29/0xe0 [ 141.419736][ T6073] ? kvm_arch_vcpu_create+0x3b4/0x8a0 [ 141.419845][ T6073] ? fpu_alloc_guest_fpstate+0x24/0x410 [ 141.421240][ T6073] vzalloc_noprof+0xb2/0xe0 [ 141.421327][ T6073] ? fpu_alloc_guest_fpstate+0x24/0x410 [ 141.421685][ T6073] fpu_alloc_guest_fpstate+0x24/0x410 [ 141.421716][ T6073] kvm_arch_vcpu_create+0x44a/0x8a0 [ 141.421753][ T6073] kvm_vm_ioctl_create_vcpu+0x29a/0x720 [ 141.421792][ T6073] kvm_vm_ioctl+0x886/0xd30 [ 141.421868][ T6073] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 141.422098][ T6073] ? kasan_quarantine_put+0xbb/0x1f0 [ 141.422203][ T6073] ? tomoyo_path_number_perm+0x219/0x5f0 [ 141.422269][ T6073] ? tomoyo_path_number_perm+0x219/0x5f0 [ 141.422347][ T6073] ? do_vfs_ioctl+0x116f/0x1530 [ 141.422410][ T6073] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 141.422439][ T6073] ? hook_file_ioctl+0x1f2/0x600 [ 141.422956][ T6073] ? __fget_files+0x2a/0x420 [ 141.423073][ T6073] ? __fget_files+0x2a/0x420 [ 141.423141][ T6073] ? __fget_files+0x3a2/0x420 [ 141.423214][ T6073] ? __fget_files+0x2a/0x420 [ 141.423299][ T6073] ? bpf_lsm_file_ioctl+0x9/0x20 [ 141.423379][ T6073] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 141.424524][ T6073] __se_sys_ioctl+0xfc/0x170 [ 141.424655][ T6073] do_syscall_64+0x166/0x520 [ 141.424691][ T6073] ? trace_irq_disable+0x3b/0x140 [ 141.424758][ T6073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.424822][ T6073] ? clear_bhb_loop+0x70/0xc0 [ 141.425111][ T6073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.425195][ T6073] RIP: 0033:0x7f50f579e159 [ 141.425255][ T6073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.425308][ T6073] RSP: 002b:00007f50f6682028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.425376][ T6073] RAX: ffffffffffffffda RBX: 00007f50f5a25fa0 RCX: 00007f50f579e159 [ 141.425418][ T6073] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 141.425457][ T6073] RBP: 00007f50f6682090 R08: 0000000000000000 R09: 0000000000000000 [ 141.425468][ T6073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.425480][ T6073] R13: 00007f50f5a26038 R14: 00007f50f5a25fa0 R15: 00007ffed9ced398 [ 141.425577][ T6073] [ 141.640643][ T6073] Mem-Info: [ 141.640759][ T6073] active_anon:25401 inactive_anon:0 isolated_anon:0 [ 141.640759][ T6073] active_file:0 inactive_file:53592 isolated_file:0 [ 141.640759][ T6073] unevictable:0 dirty:501 writeback:0 [ 141.640759][ T6073] slab_reclaimable:10021 slab_unreclaimable:89460 [ 141.640759][ T6073] mapped:34170 shmem:20176 pagetables:1171 [ 141.640759][ T6073] sec_pagetables:0 bounce:0 [ 141.640759][ T6073] kernel_misc_reclaimable:0 [ 141.640759][ T6073] free:1318326 free_pcp:12541 free_cma:0 [ 141.640987][ T6073] Node 0 active_anon:101604kB inactive_anon:0kB active_file:0kB inactive_file:214172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136680kB dirty:2000kB writeback:0kB shmem:80704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11932kB pagetables:4536kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 141.641200][ T6073] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 141.641399][ T6073] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 141.641623][ T6073] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 141.641808][ T6073] Node 0 DMA32 free:1316376kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:101604kB inactive_anon:0kB active_file:0kB inactive_file:214172kB unevictable:0kB writepending:2000kB zspages:0kB present:3129332kB managed:2541832kB mlocked:0kB bounce:0kB free_pcp:49660kB local_pcp:31052kB free_cma:0kB [ 141.642053][ T6073] lowmem_reserve[]: 0 0 1 1 1 [ 141.642205][ T6073] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1692kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 141.699698][ T6073] lowmem_reserve[]: 0 0 0 0 0 [ 141.699850][ T6073] Node 1 Normal free:3941568kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:0kB free_cma:0kB [ 141.700011][ T6073] lowmem_reserve[]: 0 0 0 0 0 [ 141.700121][ T6073] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 141.700584][ T6073] Node 0 DMA32: 1052*4kB (UME) 371*8kB (UE) 59*16kB (UME) 17*32kB (UE) 4*64kB (UE) 3*128kB (U) 4*256kB (UM) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (ME) 317*4096kB (M) = 1316440kB [ 141.701095][ T6073] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 141.701442][ T6073] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 961*4096kB (UM) = 3941568kB [ 141.750793][ T6073] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 141.750958][ T6073] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 141.751009][ T6073] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 141.751066][ T6073] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 141.751112][ T6073] 73783 total pagecache pages [ 141.751136][ T6073] 0 pages in swap cache [ 141.751157][ T6073] Free swap = 124996kB [ 141.751187][ T6073] Total swap = 124996kB [ 141.751210][ T6073] 2097051 pages RAM [ 141.751236][ T6073] 0 pages HighMem/MovableOnly [ 141.800681][ T6073] 429554 pages reserved [ 141.800736][ T6073] 0 pages cma reserved [ 141.800770][ T6073] kvm: failed to allocate vcpu's fpu [ 143.014614][ T10] usb 4-1: USB disconnect, device number 4 [ 144.126427][ T6082] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 144.157060][ T6092] FAULT_INJECTION: forcing a failure. [ 144.157060][ T6092] name failslab, interval 1, probability 0, space 0, times 0 [ 144.157093][ T6092] CPU: 1 UID: 0 PID: 6092 Comm: syz.3.69 Not tainted syzkaller #0 PREEMPT(full) [ 144.157113][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.157124][ T6092] Call Trace: [ 144.157131][ T6092] [ 144.157139][ T6092] dump_stack_lvl+0xe8/0x150 [ 144.157179][ T6092] should_fail_ex+0x3eb/0x540 [ 144.157204][ T6092] should_failslab+0xa8/0x100 [ 144.157225][ T6092] ? anon_vma_clone+0x3f3/0x9f0 [ 144.157254][ T6092] kmem_cache_alloc_noprof+0x9c/0x600 [ 144.157281][ T6092] ? anon_vma_clone+0x3f3/0x9f0 [ 144.157310][ T6092] anon_vma_clone+0x3f3/0x9f0 [ 144.157349][ T6092] __split_vma+0x3e0/0xa60 [ 144.157374][ T6092] ? mas_next_slot+0xc91/0xd70 [ 144.157405][ T6092] ? __pfx___split_vma+0x10/0x10 [ 144.157436][ T6092] ? mas_find+0x6d6/0xcb0 [ 144.157456][ T6092] vms_gather_munmap_vmas+0x4e3/0x1370 [ 144.157488][ T6092] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 144.157506][ T6092] ? up_write+0x19d/0x4a0 [ 144.157531][ T6092] ? __lock_acquire+0x747/0x2de0 [ 144.157566][ T6092] do_vmi_align_munmap+0x2b4/0x4b0 [ 144.157600][ T6092] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 144.157642][ T6092] ? mas_walk+0x37e/0x490 [ 144.157672][ T6092] ? mas_find+0x642/0xcb0 [ 144.157693][ T6092] do_vmi_munmap+0x252/0x2d0 [ 144.157717][ T6092] do_munmap+0xf5/0x160 [ 144.157747][ T6092] ? __lock_acquire+0x747/0x2de0 [ 144.157776][ T6092] ? __pfx_do_munmap+0x10/0x10 [ 144.157818][ T6092] mremap_to+0x33a/0x8d0 [ 144.157844][ T6092] ? __pfx_mremap_to+0x10/0x10 [ 144.157862][ T6092] ? __pfx_mtree_load+0x10/0x10 [ 144.157879][ T6092] ? __pfx_check_prep_vma+0x10/0x10 [ 144.157911][ T6092] __se_sys_mremap+0xf59/0x12d0 [ 144.157937][ T6092] ? ksys_write+0x1e6/0x270 [ 144.157966][ T6092] ? __pfx___se_sys_mremap+0x10/0x10 [ 144.157986][ T6092] ? __mutex_unlock_slowpath+0x731/0x900 [ 144.158010][ T6092] ? __fget_files+0x2a/0x420 [ 144.158038][ T6092] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 144.158064][ T6092] ? __fget_files+0x3a2/0x420 [ 144.158106][ T6092] ? __pfx_ksys_write+0x10/0x10 [ 144.158138][ T6092] ? __x64_sys_mremap+0x20/0xc0 [ 144.158158][ T6092] do_syscall_64+0x166/0x520 [ 144.158185][ T6092] ? trace_irq_disable+0x3b/0x140 [ 144.158215][ T6092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.158236][ T6092] ? clear_bhb_loop+0x70/0xc0 [ 144.158261][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.158292][ T6092] RIP: 0033:0x7f5ea439e159 [ 144.158312][ T6092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.158331][ T6092] RSP: 002b:00007f5ea52c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 144.158355][ T6092] RAX: ffffffffffffffda RBX: 00007f5ea4625fa0 RCX: 00007f5ea439e159 [ 144.158370][ T6092] RDX: 0000000000200000 RSI: 0000000000600600 RDI: 0000200000000000 [ 144.158384][ T6092] RBP: 00007f5ea52c4090 R08: 0000200000a00000 R09: 0000000000000000 [ 144.158399][ T6092] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 144.158412][ T6092] R13: 00007f5ea4626038 R14: 00007f5ea4625fa0 R15: 00007ffc24d14488 [ 144.158447][ T6092] [ 145.109263][ T5467] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 145.288623][ T5467] usb 4-1: Using ep0 maxpacket: 8 [ 145.289465][ T5467] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 145.296321][ T5467] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.296350][ T5467] usb 4-1: Product: syz [ 145.296365][ T5467] usb 4-1: Manufacturer: syz [ 145.296381][ T5467] usb 4-1: SerialNumber: syz [ 145.354089][ T5467] usb 4-1: config 0 descriptor?? [ 145.412409][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.73'. [ 145.498152][ T6105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.612758][ T5467] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 145.775806][ T6110] process 'syz.2.74' launched './file0' with NULL argv: empty string added [ 145.816986][ T6110] Invalid argument reading file caps for ./file0 [ 146.078904][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 146.213266][ T10] usb 3-1: device descriptor read/64, error -71 [ 146.459944][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 146.608787][ T10] usb 3-1: device descriptor read/64, error -71 [ 146.718976][ T10] usb usb3-port1: attempt power cycle [ 146.969132][ T5704] usb 2-1: USB disconnect, device number 2 [ 147.068853][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 147.104461][ T10] usb 3-1: device descriptor read/8, error -71 [ 147.105626][ T5467] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 147.132422][ T5467] usb 4-1: USB disconnect, device number 5 [ 147.353001][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 147.382562][ T10] usb 3-1: device descriptor read/8, error -71 [ 147.428385][ T6119] FAULT_INJECTION: forcing a failure. [ 147.428385][ T6119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.428417][ T6119] CPU: 0 UID: 0 PID: 6119 Comm: syz.0.76 Not tainted syzkaller #0 PREEMPT(full) [ 147.428439][ T6119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.428457][ T6119] Call Trace: [ 147.428465][ T6119] [ 147.428474][ T6119] dump_stack_lvl+0xe8/0x150 [ 147.428508][ T6119] should_fail_ex+0x3eb/0x540 [ 147.428536][ T6119] _copy_to_user+0x31/0xb0 [ 147.428571][ T6119] simple_read_from_buffer+0xe1/0x170 [ 147.428602][ T6119] proc_fail_nth_read+0x1bb/0x230 [ 147.428637][ T6119] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 147.428672][ T6119] ? rw_verify_area+0x24a/0x4c0 [ 147.428704][ T6119] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 147.428737][ T6119] vfs_read+0x213/0xa80 [ 147.428768][ T6119] ? __pfx___mutex_lock+0x10/0x10 [ 147.428789][ T6119] ? __pfx_vfs_read+0x10/0x10 [ 147.428828][ T6119] ? __fget_files+0x2a/0x420 [ 147.428861][ T6119] ? __fget_files+0x3a2/0x420 [ 147.428888][ T6119] ? __fget_files+0x2a/0x420 [ 147.428925][ T6119] ksys_read+0x150/0x270 [ 147.428968][ T6119] ? __pfx_ksys_read+0x10/0x10 [ 147.429012][ T6119] do_syscall_64+0x166/0x520 [ 147.429033][ T6119] ? trace_irq_disable+0x3b/0x140 [ 147.429065][ T6119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.429089][ T6119] ? clear_bhb_loop+0x70/0xc0 [ 147.429117][ T6119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.429140][ T6119] RIP: 0033:0x7f50f575e98e [ 147.429162][ T6119] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 147.429180][ T6119] RSP: 002b:00007f50f6660fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 147.429205][ T6119] RAX: ffffffffffffffda RBX: 00007f50f66616c0 RCX: 00007f50f575e98e [ 147.429228][ T6119] RDX: 000000000000000f RSI: 00007f50f66610a0 RDI: 0000000000000005 [ 147.429242][ T6119] RBP: 00007f50f6661090 R08: 0000000000000000 R09: 0000000000000000 [ 147.429256][ T6119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.429270][ T6119] R13: 00007f50f5a26128 R14: 00007f50f5a26090 R15: 00007ffed9ced398 [ 147.429305][ T6119] [ 147.549770][ T10] usb usb3-port1: unable to enumerate USB device [ 148.209144][ T5719] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 148.362132][ T5719] usb 1-1: unable to get BOS descriptor or descriptor too short [ 148.364090][ T5719] usb 1-1: not running at top speed; connect to a high speed hub [ 148.364131][ T5719] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=59.3e [ 148.365628][ T5719] usb 1-1: config 9 has an invalid interface number: 202 but max is 0 [ 148.365656][ T5719] usb 1-1: config 9 has no interface number 0 [ 148.365687][ T5719] usb 1-1: config 9 interface 202 has no altsetting 0 [ 148.368806][ T5467] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 148.425604][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.425697][ T5719] usb 1-1: Product: syz [ 148.425740][ T5719] usb 1-1: Manufacturer: syz [ 148.425794][ T5719] usb 1-1: SerialNumber: syz [ 148.521151][ T5467] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 1.00 [ 148.526000][ T5467] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.526022][ T5467] usb 4-1: Product: syz [ 148.526033][ T5467] usb 4-1: Manufacturer: syz [ 148.526043][ T5467] usb 4-1: SerialNumber: syz [ 148.773701][ T6135] netlink: NAT attribute has 8 unknown bytes [ 148.773759][ T6135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.931622][ T5467] ldusb 4-1:1.0: LD USB Device #0 now attached to major 180 minor 0 [ 148.982555][ T5467] usb 4-1: USB disconnect, device number 6 [ 149.031825][ T5467] ldusb 4-1:1.0: LD USB Device #0 now disconnected [ 149.116836][ T5719] usb 1-1: USB disconnect, device number 5 [ 149.486072][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:9.202/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.601305][ T6149] FAULT_INJECTION: forcing a failure. [ 149.601305][ T6149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.601342][ T6149] CPU: 0 UID: 0 PID: 6149 Comm: syz.3.84 Not tainted syzkaller #0 PREEMPT(full) [ 149.601366][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.601379][ T6149] Call Trace: [ 149.601389][ T6149] [ 149.601398][ T6149] dump_stack_lvl+0xe8/0x150 [ 149.601434][ T6149] should_fail_ex+0x3eb/0x540 [ 149.601464][ T6149] _copy_from_iter+0x1d3/0x1660 [ 149.601490][ T6149] ? __alloc_skb+0x27a/0x7a0 [ 149.601514][ T6149] ? __alloc_skb+0x27a/0x7a0 [ 149.601537][ T6149] ? __alloc_skb+0x27a/0x7a0 [ 149.601558][ T6149] ? __pfx__copy_from_iter+0x10/0x10 [ 149.601583][ T6149] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 149.601615][ T6149] ? __alloc_skb+0x27a/0x7a0 [ 149.601634][ T6149] ? __alloc_skb+0x27a/0x7a0 [ 149.601660][ T6149] ? netlink_sendmsg+0x5fa/0xae0 [ 149.601690][ T6149] ? skb_put+0x112/0x210 [ 149.601715][ T6149] netlink_sendmsg+0x667/0xae0 [ 149.601752][ T6149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.601797][ T6149] ? apparmor_socket_sendmsg+0x98/0x360 [ 149.601824][ T6149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.601852][ T6149] sock_sendmsg_nosec+0x13a/0x180 [ 149.601886][ T6149] ____sys_sendmsg+0x54e/0x850 [ 149.601915][ T6149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.601947][ T6149] ? import_iovec+0x73/0xa0 [ 149.601977][ T6149] ___sys_sendmsg+0x2a5/0x360 [ 149.602017][ T6149] ? __lock_acquire+0x747/0x2de0 [ 149.602053][ T6149] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.602122][ T6149] ? __fget_files+0x2a/0x420 [ 149.602164][ T6149] ? __fget_files+0x3a2/0x420 [ 149.602200][ T6149] __x64_sys_sendmsg+0x1b1/0x290 [ 149.602227][ T6149] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.602272][ T6149] do_syscall_64+0x166/0x520 [ 149.602293][ T6149] ? trace_irq_disable+0x3b/0x140 [ 149.602324][ T6149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.602348][ T6149] ? clear_bhb_loop+0x70/0xc0 [ 149.602376][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.602405][ T6149] RIP: 0033:0x7f5ea439e159 [ 149.602429][ T6149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.602447][ T6149] RSP: 002b:00007f5ea52c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.602472][ T6149] RAX: ffffffffffffffda RBX: 00007f5ea4625fa0 RCX: 00007f5ea439e159 [ 149.602489][ T6149] RDX: 0000000000028000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 149.602504][ T6149] RBP: 00007f5ea52c4090 R08: 0000000000000000 R09: 0000000000000000 [ 149.602518][ T6149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.602531][ T6149] R13: 00007f5ea4626038 R14: 00007f5ea4625fa0 R15: 00007ffc24d14488 [ 149.602566][ T6149] [ 150.255449][ T6156] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.274962][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.87'. [ 151.389124][ T5467] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 151.527355][ T6187] tmpfs: Bad value for 'nr_inodes' [ 151.538829][ T5467] usb 3-1: Using ep0 maxpacket: 32 [ 151.539684][ T5467] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 151.541056][ T5467] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.543451][ T5467] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.543477][ T5467] usb 3-1: Product: syz [ 151.543500][ T5467] usb 3-1: Manufacturer: syz [ 151.543511][ T5467] usb 3-1: SerialNumber: syz [ 151.574667][ T5467] usb 3-1: config 0 descriptor?? [ 151.618027][ T5467] usb 3-1: No union descriptors [ 151.626202][ T5467] usb 3-1: unsupported MDLM descriptors [ 151.768690][ T5719] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 151.804666][ T5704] usb 3-1: USB disconnect, device number 7 [ 151.918652][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 151.919703][ T5719] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 151.923790][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.923820][ T5719] usb 2-1: Product: syz [ 151.923837][ T5719] usb 2-1: Manufacturer: syz [ 151.923858][ T5719] usb 2-1: SerialNumber: syz [ 151.976700][ T5719] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.185174][ T5719] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 152.249140][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.318021][ T6194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.328119][ T6194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.99'. [ 152.353683][ T5719] usb 2-1: USB disconnect, device number 3 [ 152.685449][ T6202] af_packet: packet size is too long (35212 > 1484) [ 153.301103][ T6218] netlink: 'syz.1.109': attribute type 1 has an invalid length. [ 153.427812][ T6221] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.575586][ T6233] FAULT_INJECTION: forcing a failure. [ 154.575586][ T6233] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 154.575620][ T6233] CPU: 1 UID: 0 PID: 6233 Comm: syz.2.113 Not tainted syzkaller #0 PREEMPT(full) [ 154.575645][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.575658][ T6233] Call Trace: [ 154.575667][ T6233] [ 154.575698][ T6233] dump_stack_lvl+0xe8/0x150 [ 154.575734][ T6233] should_fail_ex+0x3eb/0x540 [ 154.575766][ T6233] prepare_alloc_pages+0x21e/0x5f0 [ 154.576032][ T6233] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 154.576072][ T6233] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 154.576105][ T6233] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 154.576140][ T6233] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 154.576183][ T6233] ? free_vmap_area_rb_augment_cb_rotate+0x119/0x170 [ 154.576223][ T6233] __alloc_pages_noprof+0x10/0x100 [ 154.576258][ T6233] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 154.576301][ T6233] ? alloc_pages_noprof+0x140/0x2b0 [ 154.576332][ T6233] __kasan_populate_vmalloc+0xb7/0x1c0 [ 154.576370][ T6233] alloc_vmap_area+0xd10/0x1410 [ 154.576412][ T6233] ? __pfx_alloc_vmap_area+0x10/0x10 [ 154.576437][ T6233] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 154.576477][ T6233] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 154.576508][ T6233] ? __get_vm_area_node+0x155/0x2f0 [ 154.576540][ T6233] __get_vm_area_node+0x200/0x2f0 [ 154.576626][ T6233] __vmalloc_node_range_noprof+0x340/0x1690 [ 154.576657][ T6233] ? copy_process+0x81b/0x43e0 [ 154.576718][ T6233] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 154.576750][ T6233] ? dup_task_struct+0x52/0xa00 [ 154.576772][ T6233] ? trace_kmem_cache_alloc+0x29/0xe0 [ 154.576847][ T6233] ? memcpy_and_pad+0x48/0x80 [ 154.576901][ T6233] __vmalloc_node_noprof+0xc2/0x100 [ 154.576930][ T6233] ? copy_process+0x81b/0x43e0 [ 154.576951][ T6233] ? copy_process+0x81b/0x43e0 [ 154.576979][ T6233] dup_task_struct+0x2c6/0xa00 [ 154.577013][ T6233] copy_process+0x81b/0x43e0 [ 154.577071][ T6233] ? rcu_is_watching+0x16/0xb0 [ 154.577098][ T6233] ? __pfx_copy_process+0x10/0x10 [ 154.577132][ T6233] ? mutex_init_lockdep+0xdf/0x110 [ 154.577160][ T6233] vhost_task_create+0x1f9/0x380 [ 154.577194][ T6233] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 154.577218][ T6233] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 154.577244][ T6233] ? __pfx_vhost_task_create+0x10/0x10 [ 154.577274][ T6233] ? register_lock_class+0x31/0x2e0 [ 154.577315][ T6233] ? __pfx_vhost_task_fn+0x10/0x10 [ 154.577357][ T6233] ? kasan_quarantine_put+0xbb/0x1f0 [ 154.577400][ T6233] kvm_mmu_post_init_vm+0x147/0x2b0 [ 154.577429][ T6233] kvm_arch_vcpu_ioctl_run+0x7c/0x19c0 [ 154.577471][ T6233] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 154.577511][ T6233] kvm_vcpu_ioctl+0xa61/0xfd0 [ 154.577551][ T6233] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 154.577584][ T6233] ? hook_file_ioctl+0x1f2/0x600 [ 154.577630][ T6233] ? __fget_files+0x2a/0x420 [ 154.577663][ T6233] ? __fget_files+0x2a/0x420 [ 154.577689][ T6233] ? __fget_files+0x3a2/0x420 [ 154.577715][ T6233] ? __fget_files+0x2a/0x420 [ 154.577746][ T6233] ? bpf_lsm_file_ioctl+0x9/0x20 [ 154.577774][ T6233] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 154.577818][ T6233] __se_sys_ioctl+0xfc/0x170 [ 154.577856][ T6233] do_syscall_64+0x166/0x520 [ 154.577876][ T6233] ? trace_irq_disable+0x3b/0x140 [ 154.577907][ T6233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.577930][ T6233] ? clear_bhb_loop+0x70/0xc0 [ 154.577957][ T6233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.577980][ T6233] RIP: 0033:0x7fa7df19e159 [ 154.578002][ T6233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.578020][ T6233] RSP: 002b:00007fa7dffc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.578045][ T6233] RAX: ffffffffffffffda RBX: 00007fa7df425fa0 RCX: 00007fa7df19e159 [ 154.578061][ T6233] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 154.578075][ T6233] RBP: 00007fa7dffc0090 R08: 0000000000000000 R09: 0000000000000000 [ 154.578089][ T6233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.578103][ T6233] R13: 00007fa7df426038 R14: 00007fa7df425fa0 R15: 00007fff9fd1ba08 [ 154.578138][ T6233] [ 155.283980][ T6233] syz.2.113: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 155.284088][ T6233] CPU: 0 UID: 0 PID: 6233 Comm: syz.2.113 Not tainted syzkaller #0 PREEMPT(full) [ 155.284112][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.284125][ T6233] Call Trace: [ 155.284135][ T6233] [ 155.284248][ T6233] dump_stack_lvl+0xe8/0x150 [ 155.284285][ T6233] warn_alloc+0x24d/0x270 [ 155.284331][ T6233] ? lockdep_hardirqs_on+0x7b/0x110 [ 155.284373][ T6233] ? __pfx_warn_alloc+0x10/0x10 [ 155.284402][ T6233] ? kfree+0x1c5/0x650 [ 155.284436][ T6233] ? __get_vm_area_node+0x219/0x2f0 [ 155.284474][ T6233] __vmalloc_node_range_noprof+0x368/0x1690 [ 155.284543][ T6233] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 155.284574][ T6233] ? dup_task_struct+0x52/0xa00 [ 155.284599][ T6233] ? trace_kmem_cache_alloc+0x29/0xe0 [ 155.284630][ T6233] ? memcpy_and_pad+0x48/0x80 [ 155.284666][ T6233] __vmalloc_node_noprof+0xc2/0x100 [ 155.284692][ T6233] ? copy_process+0x81b/0x43e0 [ 155.284713][ T6233] ? copy_process+0x81b/0x43e0 [ 155.284741][ T6233] dup_task_struct+0x2c6/0xa00 [ 155.284774][ T6233] copy_process+0x81b/0x43e0 [ 155.284827][ T6233] ? rcu_is_watching+0x16/0xb0 [ 155.284854][ T6233] ? __pfx_copy_process+0x10/0x10 [ 155.284889][ T6233] ? mutex_init_lockdep+0xdf/0x110 [ 155.284917][ T6233] vhost_task_create+0x1f9/0x380 [ 155.284961][ T6233] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 155.284989][ T6233] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 155.285014][ T6233] ? __pfx_vhost_task_create+0x10/0x10 [ 155.285053][ T6233] ? register_lock_class+0x31/0x2e0 [ 155.285103][ T6233] ? __pfx_vhost_task_fn+0x10/0x10 [ 155.285154][ T6233] ? kasan_quarantine_put+0xbb/0x1f0 [ 155.285197][ T6233] kvm_mmu_post_init_vm+0x147/0x2b0 [ 155.285227][ T6233] kvm_arch_vcpu_ioctl_run+0x7c/0x19c0 [ 155.285274][ T6233] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 155.285319][ T6233] kvm_vcpu_ioctl+0xa61/0xfd0 [ 155.285360][ T6233] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 155.285392][ T6233] ? hook_file_ioctl+0x1f2/0x600 [ 155.285438][ T6233] ? __fget_files+0x2a/0x420 [ 155.285467][ T6233] ? __fget_files+0x2a/0x420 [ 155.285491][ T6233] ? __fget_files+0x3a2/0x420 [ 155.285518][ T6233] ? __fget_files+0x2a/0x420 [ 155.285555][ T6233] ? bpf_lsm_file_ioctl+0x9/0x20 [ 155.285584][ T6233] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 155.285619][ T6233] __se_sys_ioctl+0xfc/0x170 [ 155.286529][ T6233] do_syscall_64+0x166/0x520 [ 155.286574][ T6233] ? trace_irq_disable+0x3b/0x140 [ 155.286607][ T6233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.286631][ T6233] ? clear_bhb_loop+0x70/0xc0 [ 155.286657][ T6233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.286677][ T6233] RIP: 0033:0x7fa7df19e159 [ 155.286696][ T6233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.286714][ T6233] RSP: 002b:00007fa7dffc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.286737][ T6233] RAX: ffffffffffffffda RBX: 00007fa7df425fa0 RCX: 00007fa7df19e159 [ 155.286753][ T6233] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 155.286765][ T6233] RBP: 00007fa7dffc0090 R08: 0000000000000000 R09: 0000000000000000 [ 155.286777][ T6233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.286790][ T6233] R13: 00007fa7df426038 R14: 00007fa7df425fa0 R15: 00007fff9fd1ba08 [ 155.286823][ T6233] [ 155.286832][ T6233] Mem-Info: [ 155.286842][ T6233] active_anon:15732 inactive_anon:0 isolated_anon:0 [ 155.286842][ T6233] active_file:0 inactive_file:56227 isolated_file:0 [ 155.286842][ T6233] unevictable:0 dirty:65 writeback:0 [ 155.286842][ T6233] slab_reclaimable:10153 slab_unreclaimable:89829 [ 155.286842][ T6233] mapped:33979 shmem:10717 pagetables:1078 [ 155.286842][ T6233] sec_pagetables:0 bounce:0 [ 155.286842][ T6233] kernel_misc_reclaimable:0 [ 155.286842][ T6233] free:1326703 free_pcp:10543 free_cma:0 [ 155.286896][ T6233] Node 0 active_anon:62928kB inactive_anon:0kB active_file:0kB inactive_file:224712kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:135916kB dirty:260kB writeback:0kB shmem:42868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11848kB pagetables:4164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 155.286954][ T6233] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 155.287046][ T6233] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.287111][ T6233] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 155.287822][ T6233] Node 0 DMA32 free:1359716kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:62928kB inactive_anon:0kB active_file:0kB inactive_file:224712kB unevictable:0kB writepending:260kB zspages:0kB present:3129332kB managed:2541832kB mlocked:0kB bounce:0kB free_pcp:31836kB local_pcp:20564kB free_cma:0kB [ 155.287877][ T6233] lowmem_reserve[]: 0 0 1 1 1 [ 155.287910][ T6233] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1692kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 155.287961][ T6233] lowmem_reserve[]: 0 0 0 0 0 [ 155.287996][ T6233] Node 1 Normal free:3931736kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:10332kB local_pcp:4644kB free_cma:0kB [ 155.288047][ T6233] lowmem_reserve[]: 0 0 0 0 0 [ 155.288079][ T6233] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 155.536478][ T6233] Node 0 DMA32: 1380*4kB (UE) 553*8kB (UM) 116*16kB (U) 2*32kB (UM) 3*64kB (UME) 70*128kB (UME) 44*256kB (UME) 20*512kB (UM) 12*1024kB (UME) 3*2048kB (UME) 317*4096kB (M) = 1359384kB [ 155.537049][ T6233] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 155.537360][ T6233] Node 1 Normal: 2*4kB (UM) 0*8kB 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 1*128kB (U) 1*256kB (M) 0*512kB 1*1024kB (M) 1*2048kB (M) 959*4096kB (UM) = 3931736kB [ 155.537807][ T6233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 155.537886][ T6233] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 155.537902][ T6233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 155.563321][ T6233] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 155.563383][ T6233] 67008 total pagecache pages [ 155.563431][ T6233] 0 pages in swap cache [ 155.563439][ T6233] Free swap = 124996kB [ 155.563462][ T6233] Total swap = 124996kB [ 155.563500][ T6233] 2097051 pages RAM [ 155.563535][ T6233] 0 pages HighMem/MovableOnly [ 155.563557][ T6233] 429554 pages reserved [ 155.563587][ T6233] 0 pages cma reserved [ 157.088258][ T6250] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 157.113941][ T6250] CIFS: Attempting to mount //127.0.0.1/share [ 157.208427][ T6252] CIFS: VFS: Invalid response size 64 for command 0 [ 157.208719][ T6252] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 0 [ 157.346995][ T6255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.366064][ T6255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.474126][ T6258] netlink: 'syz.3.120': attribute type 1 has an invalid length. [ 157.588925][ T5467] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 157.738764][ T5467] usb 3-1: Using ep0 maxpacket: 16 [ 157.740578][ T5467] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 157.741936][ T5467] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 157.742039][ T5467] usb 3-1: config 0 has no interface number 0 [ 157.745131][ T5467] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.745160][ T5467] usb 3-1: Product: syz [ 157.745177][ T5467] usb 3-1: Manufacturer: syz [ 157.745194][ T5467] usb 3-1: SerialNumber: syz [ 157.842428][ T5467] usb 3-1: config 0 descriptor?? [ 157.877770][ T5467] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 157.918016][ T6250] CIFS: VFS: cifs_mount failed w/return code = -512 [ 158.049307][ T5467] gspca_spca1528: reg_w err -71 [ 158.070253][ T5467] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 158.092527][ T5467] usb 3-1: USB disconnect, device number 8 [ 158.117628][ T5618] Bluetooth: hci3: status 0x68 [ 158.217333][ T6264] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 158.259275][ T6264] rust_binder: 6261:6264 tried to use weak ref as strong ref [ 158.259330][ T6264] rust_binder: 6261:6264 got transaction to invalid handle 1 [ 158.259363][ T6264] rust_binder: 6261:6264 transaction async to 0:0 failed EINVAL, code 0 size 0-0 [ 158.330941][ T6264] sctp: [Deprecated]: syz.0.122 (pid 6264) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.330941][ T6264] Use struct sctp_sack_info instead [ 158.333179][ T25] rust_binder: 6261: undelivered TRANSACTION_ERROR: 29201 [ 158.402873][ T6264] syz.0.122 (6264) used greatest stack depth: 17072 bytes left [ 158.496249][ T6268] FAULT_INJECTION: forcing a failure. [ 158.496249][ T6268] name failslab, interval 1, probability 0, space 0, times 0 [ 158.496300][ T6268] CPU: 1 UID: 0 PID: 6268 Comm: syz.0.124 Not tainted syzkaller #0 PREEMPT(full) [ 158.496319][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.496329][ T6268] Call Trace: [ 158.496336][ T6268] [ 158.496344][ T6268] dump_stack_lvl+0xe8/0x150 [ 158.496373][ T6268] should_fail_ex+0x3eb/0x540 [ 158.496401][ T6268] should_failslab+0xa8/0x100 [ 158.496422][ T6268] __kmalloc_noprof+0xf9/0x710 [ 158.496446][ T6268] ? rcu_is_watching+0x16/0xb0 [ 158.496463][ T6268] ? tomoyo_realpath_from_path+0xef/0x640 [ 158.496484][ T6268] ? tomoyo_realpath_from_path+0xef/0x640 [ 158.496849][ T6268] tomoyo_realpath_from_path+0xef/0x640 [ 158.496890][ T6268] tomoyo_check_open_permission+0x229/0x470 [ 158.496914][ T6268] ? tomoyo_check_open_permission+0x1d3/0x470 [ 158.497346][ T6268] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 158.497384][ T6268] ? __asan_memset+0x22/0x50 [ 158.497446][ T6268] ? do_raw_spin_lock+0x12b/0x2f0 [ 158.497473][ T6268] ? tomoyo_file_open+0x163/0x220 [ 158.497504][ T6268] security_file_open+0xa9/0x240 [ 158.497524][ T6268] do_dentry_open+0x495/0x1360 [ 158.497565][ T6268] vfs_open_consume+0x4a/0x350 [ 158.497582][ T6268] ? path_openat+0x14bb/0x1e40 [ 158.497609][ T6268] path_openat+0x14d7/0x1e40 [ 158.497648][ T6268] do_file_open+0x23e/0x4a0 [ 158.497676][ T6268] ? __pfx_do_file_open+0x10/0x10 [ 158.497716][ T6268] ? _raw_spin_unlock+0x28/0x50 [ 158.497739][ T6268] ? alloc_fd+0x651/0x6c0 [ 158.497766][ T6268] do_sys_openat2+0x115/0x200 [ 158.497787][ T6268] ? __pfx_do_sys_openat2+0x10/0x10 [ 158.497806][ T6268] ? ksys_write+0x242/0x270 [ 158.497831][ T6268] ? __pfx_ksys_write+0x10/0x10 [ 158.497856][ T6268] __x64_sys_openat+0x138/0x170 [ 158.497882][ T6268] do_syscall_64+0x166/0x520 [ 158.497897][ T6268] ? trace_irq_disable+0x3b/0x140 [ 158.497922][ T6268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.497939][ T6268] ? clear_bhb_loop+0x70/0xc0 [ 158.498017][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.498034][ T6268] RIP: 0033:0x7f50f575e98e [ 158.498056][ T6268] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 158.498069][ T6268] RSP: 002b:00007f50f6681f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 158.498087][ T6268] RAX: ffffffffffffffda RBX: 00007f50f66826c0 RCX: 00007f50f575e98e [ 158.498099][ T6268] RDX: 0000000000000000 RSI: 00007f50f583475f RDI: ffffffffffffff9c [ 158.498110][ T6268] RBP: 00007f50f6682090 R08: 0000000000000000 R09: 0000000000000000 [ 158.498121][ T6268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.498130][ T6268] R13: 00007f50f5a26038 R14: 00007f50f5a25fa0 R15: 00007ffed9ced398 [ 158.498155][ T6268] [ 158.498164][ T6268] ERROR: Out of memory at tomoyo_realpath_from_path. [ 159.274112][ T6276] FAULT_INJECTION: forcing a failure. [ 159.274112][ T6276] name failslab, interval 1, probability 0, space 0, times 0 [ 159.274147][ T6276] CPU: 0 UID: 0 PID: 6276 Comm: syz.1.127 Not tainted syzkaller #0 PREEMPT(full) [ 159.274172][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.274186][ T6276] Call Trace: [ 159.274195][ T6276] [ 159.274236][ T6276] dump_stack_lvl+0xe8/0x150 [ 159.274277][ T6276] should_fail_ex+0x3eb/0x540 [ 159.274309][ T6276] should_failslab+0xa8/0x100 [ 159.274337][ T6276] __kmalloc_noprof+0xf9/0x710 [ 159.274370][ T6276] ? rcu_is_watching+0x16/0xb0 [ 159.274751][ T6276] ? tomoyo_realpath_from_path+0xef/0x640 [ 159.274780][ T6276] ? tomoyo_realpath_from_path+0xef/0x640 [ 159.274817][ T6276] tomoyo_realpath_from_path+0xef/0x640 [ 159.274861][ T6276] ? tomoyo_path_number_perm+0x219/0x5f0 [ 159.274885][ T6276] tomoyo_path_number_perm+0x246/0x5f0 [ 159.274907][ T6276] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 159.274930][ T6276] ? __lock_acquire+0x747/0x2de0 [ 159.274979][ T6276] ? hook_file_ioctl+0x1f2/0x600 [ 159.275030][ T6276] ? __fget_files+0x2a/0x420 [ 159.275061][ T6276] ? __fget_files+0x2a/0x420 [ 159.275088][ T6276] ? __fget_files+0x3a2/0x420 [ 159.275122][ T6276] ? __fget_files+0x2a/0x420 [ 159.275155][ T6276] security_file_ioctl+0xc3/0x2a0 [ 159.275197][ T6276] __se_sys_ioctl+0x47/0x170 [ 159.275236][ T6276] do_syscall_64+0x166/0x520 [ 159.275257][ T6276] ? trace_irq_disable+0x3b/0x140 [ 159.275288][ T6276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.275312][ T6276] ? clear_bhb_loop+0x70/0xc0 [ 159.275340][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.275363][ T6276] RIP: 0033:0x7f898839e159 [ 159.275448][ T6276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.275466][ T6276] RSP: 002b:00007f8989220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.275490][ T6276] RAX: ffffffffffffffda RBX: 00007f8988625fa0 RCX: 00007f898839e159 [ 159.275507][ T6276] RDX: 0000000000000000 RSI: 0000000000004140 RDI: 0000000000000003 [ 159.275521][ T6276] RBP: 00007f8989220090 R08: 0000000000000000 R09: 0000000000000000 [ 159.275535][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.275548][ T6276] R13: 00007f8988626038 R14: 00007f8988625fa0 R15: 00007fffd53dceb8 [ 159.275584][ T6276] [ 159.277703][ T6276] ERROR: Out of memory at tomoyo_realpath_from_path. [ 159.892705][ T6286] netlink: 'syz.1.130': attribute type 1 has an invalid length. [ 160.416775][ T6295] FAULT_INJECTION: forcing a failure. [ 160.416775][ T6295] name failslab, interval 1, probability 0, space 0, times 0 [ 160.416808][ T6295] CPU: 0 UID: 0 PID: 6295 Comm: syz.1.133 Not tainted syzkaller #0 PREEMPT(full) [ 160.416837][ T6295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.416851][ T6295] Call Trace: [ 160.416860][ T6295] [ 160.416870][ T6295] dump_stack_lvl+0xe8/0x150 [ 160.416905][ T6295] should_fail_ex+0x3eb/0x540 [ 160.416936][ T6295] should_failslab+0xa8/0x100 [ 160.416963][ T6295] __kmalloc_noprof+0xf9/0x710 [ 160.416994][ T6295] ? prepare_creds+0x30/0x820 [ 160.417030][ T6295] ? security_prepare_creds+0x52/0x360 [ 160.417052][ T6295] ? security_prepare_creds+0x52/0x360 [ 160.417075][ T6295] ? kmem_cache_alloc_noprof+0x151/0x600 [ 160.417115][ T6295] security_prepare_creds+0x52/0x360 [ 160.417142][ T6295] prepare_creds+0x57d/0x820 [ 160.417185][ T6295] copy_creds+0x109/0x9f0 [ 160.417225][ T6295] copy_process+0xd1a/0x43e0 [ 160.417266][ T6295] ? kstrtouint+0x6e/0xe0 [ 160.417319][ T6295] ? lock_acquire+0x115/0x350 [ 160.417352][ T6295] ? get_pid_task+0x20/0x1f0 [ 160.417389][ T6295] ? __pfx_copy_process+0x10/0x10 [ 160.417415][ T6295] ? get_pid_task+0x20/0x1f0 [ 160.417443][ T6295] ? get_pid_task+0x20/0x1f0 [ 160.417482][ T6295] kernel_clone+0x2d7/0x940 [ 160.417515][ T6295] ? __pfx_kernel_clone+0x10/0x10 [ 160.417563][ T6295] __x64_sys_clone+0x1b6/0x230 [ 160.417595][ T6295] ? __pfx___x64_sys_clone+0x10/0x10 [ 160.417640][ T6295] ? __pfx_ksys_write+0x10/0x10 [ 160.417684][ T6295] do_syscall_64+0x166/0x520 [ 160.417705][ T6295] ? trace_irq_disable+0x3b/0x140 [ 160.417743][ T6295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.417766][ T6295] ? clear_bhb_loop+0x70/0xc0 [ 160.417795][ T6295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.417819][ T6295] RIP: 0033:0x7f898839e159 [ 160.417841][ T6295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.417860][ T6295] RSP: 002b:00007f89891fefd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 160.417884][ T6295] RAX: ffffffffffffffda RBX: 00007f8988626090 RCX: 00007f898839e159 [ 160.417901][ T6295] RDX: 0000000000000000 RSI: fffffffffffffea0 RDI: 0000000000000000 [ 160.417916][ T6295] RBP: 00007f89891ff090 R08: 0000000000000000 R09: 0000000000000000 [ 160.417930][ T6295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.417944][ T6295] R13: 00007f8988626128 R14: 00007f8988626090 R15: 00007fffd53dceb8 [ 160.417996][ T6295] [ 161.613257][ T6318] warning: `syz.2.142' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 161.658677][ T5704] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 161.810218][ T5704] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 161.832525][ T5704] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.832587][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.894054][ T5704] usb 2-1: config 0 descriptor?? [ 161.924022][ T5704] pwc: Askey VC010 type 2 USB webcam detected. [ 161.953863][ T6324] FAULT_INJECTION: forcing a failure. [ 161.953863][ T6324] name failslab, interval 1, probability 0, space 0, times 0 [ 161.953898][ T6324] CPU: 1 UID: 0 PID: 6324 Comm: syz.0.144 Not tainted syzkaller #0 PREEMPT(full) [ 161.953924][ T6324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.953939][ T6324] Call Trace: [ 161.953948][ T6324] [ 161.953958][ T6324] dump_stack_lvl+0xe8/0x150 [ 161.954023][ T6324] should_fail_ex+0x3eb/0x540 [ 161.954054][ T6324] should_failslab+0xa8/0x100 [ 161.954082][ T6324] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 161.954119][ T6324] ? __kthread_create_on_node+0x1b3/0x3d0 [ 161.954147][ T6324] ? __kthread_create_on_node+0x1b3/0x3d0 [ 161.954183][ T6324] kvasprintf+0xeb/0x1a0 [ 161.954218][ T6324] ? __pfx_kvasprintf+0x10/0x10 [ 161.954251][ T6324] ? __kmalloc_cache_noprof+0x148/0x600 [ 161.954301][ T6324] ? __kthread_create_on_node+0x115/0x3d0 [ 161.954328][ T6324] ? __kthread_create_on_node+0x115/0x3d0 [ 161.954365][ T6324] __kthread_create_on_node+0x1b3/0x3d0 [ 161.954415][ T6324] ? __pfx___kthread_create_on_node+0x10/0x10 [ 161.954464][ T6324] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 161.954496][ T6324] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 161.954530][ T6324] kthread_create_on_node+0xeb/0x140 [ 161.954565][ T6324] ? __pfx_kthread_create_on_node+0x10/0x10 [ 161.954602][ T6324] ? do_raw_spin_unlock+0xf5/0x200 [ 161.954635][ T6324] rxrpc_lookup_local+0xf56/0x15d0 [ 161.954688][ T6324] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 161.954723][ T6324] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 161.954753][ T6324] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 161.954804][ T6324] ? rxrpc_sendmsg+0x11e/0x6b0 [ 161.954838][ T6324] ? __local_bh_enable_ip+0xd6/0x140 [ 161.954870][ T6324] rxrpc_sendmsg+0x34b/0x6b0 [ 161.954912][ T6324] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 161.954953][ T6324] sock_sendmsg_nosec+0x13a/0x180 [ 161.954985][ T6324] ____sys_sendmsg+0x54e/0x850 [ 161.955014][ T6324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.955047][ T6324] ? import_iovec+0x73/0xa0 [ 161.955081][ T6324] ___sys_sendmsg+0x2a5/0x360 [ 161.955107][ T6324] ? __lock_acquire+0x747/0x2de0 [ 161.955151][ T6324] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.955216][ T6324] ? __fget_files+0x2a/0x420 [ 161.955245][ T6324] ? __fget_files+0x3a2/0x420 [ 161.955290][ T6324] __x64_sys_sendmsg+0x1b1/0x290 [ 161.955325][ T6324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.955387][ T6324] do_syscall_64+0x166/0x520 [ 161.955409][ T6324] ? trace_irq_disable+0x3b/0x140 [ 161.955441][ T6324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.955464][ T6324] ? clear_bhb_loop+0x70/0xc0 [ 161.955497][ T6324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.955520][ T6324] RIP: 0033:0x7f50f579e159 [ 161.955548][ T6324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.955566][ T6324] RSP: 002b:00007f50f6682028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.955590][ T6324] RAX: ffffffffffffffda RBX: 00007f50f5a25fa0 RCX: 00007f50f579e159 [ 161.955606][ T6324] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 161.955620][ T6324] RBP: 00007f50f6682090 R08: 0000000000000000 R09: 0000000000000000 [ 161.955633][ T6324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.955654][ T6324] R13: 00007f50f5a26038 R14: 00007f50f5a25fa0 R15: 00007ffed9ced398 [ 161.955692][ T6324] [ 161.957915][ T6326] netlink: 165 bytes leftover after parsing attributes in process `syz.2.145'. [ 162.389370][ T5704] pwc: recv_control_msg error -32 req 02 val 2b00 [ 162.394386][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 162.467713][ T5704] pwc: recv_control_msg error -32 req 02 val 2700 [ 162.468361][ T5704] pwc: recv_control_msg error -32 req 02 val 2c00 [ 162.502856][ T5704] pwc: recv_control_msg error -32 req 04 val 1000 [ 162.507240][ T5704] pwc: recv_control_msg error -32 req 04 val 1300 [ 162.508300][ T5704] pwc: recv_control_msg error -32 req 04 val 1400 [ 162.556839][ T5704] pwc: recv_control_msg error -32 req 02 val 2000 [ 162.570032][ T5704] pwc: recv_control_msg error -32 req 02 val 2100 [ 162.571065][ T5704] pwc: recv_control_msg error -32 req 04 val 1500 [ 162.575815][ T5704] pwc: recv_control_msg error -32 req 02 val 2500 [ 162.582583][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 162.614824][ T5704] pwc: recv_control_msg error -32 req 02 val 2400 [ 162.616003][ T25] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 162.616060][ T5704] pwc: recv_control_msg error -32 req 02 val 2600 [ 162.617644][ T25] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 162.617680][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 162.617714][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.617980][ T5704] pwc: recv_control_msg error -32 req 02 val 2900 [ 162.697457][ T5704] pwc: recv_control_msg error -32 req 04 val 1100 [ 162.710523][ T5704] pwc: recv_control_msg error -32 req 04 val 1200 [ 162.712468][ T25] usb 3-1: config 0 descriptor?? [ 162.742831][ T5704] pwc: Registered as video103. [ 162.758365][ T5704] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 162.851536][ T5719] usb 2-1: USB disconnect, device number 4 [ 162.858396][ T6338] FAULT_INJECTION: forcing a failure. [ 162.858396][ T6338] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 162.858431][ T6338] CPU: 0 UID: 0 PID: 6338 Comm: syz.0.147 Not tainted syzkaller #0 PREEMPT(full) [ 162.858464][ T6338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.858477][ T6338] Call Trace: [ 162.858486][ T6338] [ 162.858494][ T6338] dump_stack_lvl+0xe8/0x150 [ 162.858530][ T6338] should_fail_ex+0x3eb/0x540 [ 162.858562][ T6338] prepare_alloc_pages+0x21e/0x5f0 [ 162.858602][ T6338] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 162.858637][ T6338] ? kasan_save_track+0x3e/0x80 [ 162.858674][ T6338] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 162.858716][ T6338] ? policy_nodemask+0x2cc/0x8e0 [ 162.858742][ T6338] ? mas_start+0x46b/0x640 [ 162.858776][ T6338] alloc_pages_mpol+0x21e/0x390 [ 162.858808][ T6338] alloc_pages_noprof+0xb1/0x2b0 [ 162.858837][ T6338] __pud_alloc+0x3a/0x460 [ 162.858871][ T6338] handle_mm_fault+0x2519/0x3750 [ 162.858900][ T6338] ? mt_find+0x186/0x630 [ 162.858933][ T6338] ? handle_mm_fault+0xf1/0x3750 [ 162.858960][ T6338] ? mt_find+0x186/0x630 [ 162.858984][ T6338] ? __pfx_mt_find+0x10/0x10 [ 162.859014][ T6338] ? __pfx_handle_mm_fault+0x10/0x10 [ 162.859065][ T6338] __get_user_pages+0x1670/0x2750 [ 162.859132][ T6338] get_user_pages_remote+0x305/0xb90 [ 162.859170][ T6338] ? __pfx_get_user_pages_remote+0x10/0x10 [ 162.859201][ T6338] ? mmap_read_lock_maybe_expand+0xd7/0x3b0 [ 162.859238][ T6338] copy_string_kernel+0x2f9/0x5f0 [ 162.859283][ T6338] ? __pfx_copy_string_kernel+0x10/0x10 [ 162.859320][ T6338] ? alloc_bprm+0x57d/0x640 [ 162.859356][ T6338] do_execveat_common+0x7fb/0xbd0 [ 162.859397][ T6338] ? do_getname+0x151/0x250 [ 162.859425][ T6338] __x64_sys_execveat+0xc7/0xf0 [ 162.859470][ T6338] do_syscall_64+0x166/0x520 [ 162.859491][ T6338] ? trace_irq_disable+0x3b/0x140 [ 162.859523][ T6338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.859546][ T6338] ? clear_bhb_loop+0x70/0xc0 [ 162.859647][ T6338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.859671][ T6338] RIP: 0033:0x7f50f579e159 [ 162.859691][ T6338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.859709][ T6338] RSP: 002b:00007f50f6682028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 162.859739][ T6338] RAX: ffffffffffffffda RBX: 00007f50f5a25fa0 RCX: 00007f50f579e159 [ 162.859755][ T6338] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 162.859769][ T6338] RBP: 00007f50f6682090 R08: 0000000000000000 R09: 0000000000000000 [ 162.859783][ T6338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.859797][ T6338] R13: 00007f50f5a26038 R14: 00007f50f5a25fa0 R15: 00007ffed9ced398 [ 162.859830][ T6338] [ 163.299719][ T25] hid (null): global environment stack underflow [ 163.433822][ T25] corsair-cpro 0003:1B1C:0C10.0002: global environment stack underflow [ 163.442367][ T25] corsair-cpro 0003:1B1C:0C10.0002: item 0 4 1 11 parsing failed [ 163.443688][ T25] corsair-cpro 0003:1B1C:0C10.0002: probe with driver corsair-cpro failed with error -22 [ 163.569754][ T25] usb 3-1: USB disconnect, device number 9 [ 163.652388][ T49] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 163.828719][ T49] usb 1-1: Using ep0 maxpacket: 8 [ 163.829638][ T49] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 163.832837][ T49] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 163.832881][ T49] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 163.832912][ T49] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.832938][ T49] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.832989][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.101624][ T5719] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 164.123833][ T49] usb 1-1: GET_CAPABILITIES returned 0 [ 164.123897][ T49] usbtmc 1-1:16.0: can't read capabilities [ 164.173877][ T6356] Bluetooth: MGMT ver 1.23 [ 164.192264][ T6357] mmap: syz.0.148 (6357) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 164.249691][ T5719] usb 2-1: Using ep0 maxpacket: 32 [ 164.252027][ T5719] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 164.258906][ T5719] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 164.258940][ T5719] usb 2-1: config 0 has no interface number 0 [ 164.293362][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.293397][ T5719] usb 2-1: Product: syz [ 164.293422][ T5719] usb 2-1: Manufacturer: syz [ 164.293433][ T5719] usb 2-1: SerialNumber: syz [ 164.340291][ T5719] usb 2-1: config 0 descriptor?? [ 164.415105][ T6364] x_tables: duplicate entry at hook 2 [ 164.545590][ T5704] usb 1-1: USB disconnect, device number 6 [ 164.644030][ T5618] Bluetooth: hci3: Invalid handle: 0x70bc > 0x0eff [ 164.750268][ T6372] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 164.750354][ T6372] FAULT_INJECTION: forcing a failure. [ 164.750354][ T6372] name failslab, interval 1, probability 0, space 0, times 0 [ 164.750386][ T6372] CPU: 0 UID: 0 PID: 6372 Comm: syz.3.158 Not tainted syzkaller #0 PREEMPT(full) [ 164.750426][ T6372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.750441][ T6372] Call Trace: [ 164.750450][ T6372] [ 164.750464][ T6372] dump_stack_lvl+0xe8/0x150 [ 164.750525][ T6372] should_fail_ex+0x3eb/0x540 [ 164.750557][ T6372] ? __alloc_skb+0x1db/0x7a0 [ 164.750588][ T6372] should_failslab+0xa8/0x100 [ 164.750616][ T6372] ? __alloc_skb+0x1db/0x7a0 [ 164.750634][ T6372] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 164.750672][ T6372] ? __alloc_skb+0x18d/0x7a0 [ 164.750694][ T6372] ? __alloc_skb+0x1db/0x7a0 [ 164.750724][ T6372] __alloc_skb+0x1db/0x7a0 [ 164.750751][ T6372] hci_cmd_sync_alloc+0x3d/0x3a0 [ 164.750789][ T6372] ? __raw_spin_lock_init+0x45/0x100 [ 164.750835][ T6372] __hci_cmd_sync_sk+0x1c7/0xcf0 [ 164.750875][ T6372] ? __pfx___hci_cmd_sync_sk+0x10/0x10 [ 164.750938][ T6372] hci_disconnect_sync+0x170/0x3c0 [ 164.750966][ T6372] ? __lock_acquire+0x747/0x2de0 [ 164.751001][ T6372] ? __pfx_hci_disconnect_sync+0x10/0x10 [ 164.751031][ T6372] ? __pfx__printk+0x10/0x10 [ 164.751060][ T6372] hci_abort_conn_sync+0x14e/0x1170 [ 164.751095][ T6372] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 164.751119][ T6372] ? hci_disconnect_all_sync+0x2e/0x350 [ 164.751154][ T6372] ? hci_disconnect_all_sync+0x2e/0x350 [ 164.751181][ T6372] ? hci_disconnect_all_sync+0x2e/0x350 [ 164.751209][ T6372] hci_disconnect_all_sync+0x1b5/0x350 [ 164.751242][ T6372] hci_suspend_sync+0x408/0xf30 [ 164.751268][ T6372] ? hci_suspend_dev+0x286/0x530 [ 164.751304][ T6372] ? __pfx___mutex_lock+0x10/0x10 [ 164.751328][ T6372] ? __pfx_hci_suspend_sync+0x10/0x10 [ 164.751357][ T6372] ? lockdep_hardirqs_on+0x7b/0x110 [ 164.751391][ T6372] ? enable_work+0x1fd/0x230 [ 164.751438][ T6372] ? hci_cmd_sync_cancel_sync+0xc9/0x1c0 [ 164.751473][ T6372] hci_suspend_dev+0x28e/0x530 [ 164.751503][ T6372] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 164.751537][ T6372] ? __pfx_hci_suspend_dev+0x10/0x10 [ 164.751569][ T6372] ? rcu_barrier+0x424/0x530 [ 164.751610][ T6372] hci_suspend_notifier+0xf2/0x2f0 [ 164.751645][ T6372] notifier_call_chain+0x1a5/0x3d0 [ 164.751690][ T6372] blocking_notifier_call_chain_robust+0x85/0x100 [ 164.751753][ T6372] pm_notifier_call_chain_robust+0x2c/0x60 [ 164.751790][ T6372] snapshot_open+0x19c/0x290 [ 164.751830][ T6372] ? __pfx_snapshot_open+0x10/0x10 [ 164.751853][ T6372] misc_open+0x2d5/0x350 [ 164.751899][ T6372] chrdev_open+0x4d9/0x600 [ 164.751933][ T6372] ? __pfx_chrdev_open+0x10/0x10 [ 164.751957][ T6372] ? devcgroup_check_permission+0x31/0x8f0 [ 164.752002][ T6372] ? __pfx_chrdev_open+0x10/0x10 [ 164.752017][ T6372] do_dentry_open+0x80e/0x1360 [ 164.752044][ T6372] vfs_open_consume+0x4a/0x350 [ 164.752091][ T6372] ? path_openat+0x14bb/0x1e40 [ 164.752126][ T6372] path_openat+0x14d7/0x1e40 [ 164.752180][ T6372] do_file_open+0x23e/0x4a0 [ 164.752210][ T6372] ? __pfx_do_file_open+0x10/0x10 [ 164.752283][ T6372] ? _raw_spin_unlock+0x28/0x50 [ 164.752325][ T6372] ? alloc_fd+0x651/0x6c0 [ 164.752353][ T6372] do_sys_openat2+0x115/0x200 [ 164.752391][ T6372] ? __pfx_do_sys_openat2+0x10/0x10 [ 164.752432][ T6372] ? ksys_write+0x242/0x270 [ 164.752465][ T6372] ? __pfx_ksys_write+0x10/0x10 [ 164.752500][ T6372] __x64_sys_openat+0x138/0x170 [ 164.752523][ T6372] do_syscall_64+0x166/0x520 [ 164.752554][ T6372] ? trace_irq_disable+0x3b/0x140 [ 164.752587][ T6372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.752610][ T6372] ? clear_bhb_loop+0x70/0xc0 [ 164.752646][ T6372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.752663][ T6372] RIP: 0033:0x7f5ea439e159 [ 164.752680][ T6372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.752693][ T6372] RSP: 002b:00007f5ea52c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 164.752736][ T6372] RAX: ffffffffffffffda RBX: 00007f5ea4625fa0 RCX: 00007f5ea439e159 [ 164.752754][ T6372] RDX: 0000000000000400 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 164.752769][ T6372] RBP: 00007f5ea52c4090 R08: 0000000000000000 R09: 0000000000000000 [ 164.752783][ T6372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.752795][ T6372] R13: 00007f5ea4626038 R14: 00007f5ea4625fa0 R15: 00007ffc24d14488 [ 164.752830][ T6372] [ 164.755549][ T6372] Bluetooth: hci1: no memory for command (opcode 0x0406) [ 164.755576][ T6372] Bluetooth: hci1: Opcode 0x0406 failed: -12 [ 165.361712][ T6372] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 165.454332][ T6372] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 165.465497][ T6372] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 165.523120][ T6372] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 165.543844][ T6372] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 165.543999][ T6372] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 165.575213][ T6372] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 165.613972][ T6372] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 165.683332][ T6372] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 165.683568][ T6372] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 165.723660][ T6372] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 165.786078][ T5719] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 165.786115][ T5719] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 165.786657][ T5719] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 165.786947][ T5719] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 165.851232][ T5719] usb 2-1: USB disconnect, device number 5 [ 166.212388][ T5624] Bluetooth: hci3: Invalid handle: 0x70bc > 0x0eff [ 166.281480][ T6390] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 166.281677][ T6390] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 166.303879][ T6390] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 166.317642][ T6390] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 166.847013][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.168'. [ 167.058574][ T5719] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 167.210541][ T5719] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 167.212459][ T5719] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.236496][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 167.236534][ T5719] usb 3-1: Product: syz [ 167.236551][ T5719] usb 3-1: Manufacturer: syz [ 167.722407][ T5719] usb 3-1: selecting invalid altsetting 1 [ 167.722437][ T5719] speedtch 3-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 167.722514][ T5719] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -22! [ 167.722574][ T5719] speedtch 3-1:1.0: probe with driver speedtch failed with error -22 [ 167.798668][ T6413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.854194][ T5719] usb 3-1: selecting invalid altsetting 1 [ 167.854221][ T5719] speedtch 3-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 167.856551][ T5719] speedtch 3-1:1.1: usbatm_usb_probe: bind failed: -22! [ 167.856618][ T5719] speedtch 3-1:1.1: probe with driver speedtch failed with error -22 [ 167.887718][ T5719] usb 3-1: USB disconnect, device number 10 [ 168.061976][ T6426] syzkaller1: entered promiscuous mode [ 168.062001][ T6426] syzkaller1: entered allmulticast mode [ 168.302864][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 168.303150][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout [ 168.378968][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout [ 168.379100][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout [ 168.476664][ T6431] FAULT_INJECTION: forcing a failure. [ 168.476664][ T6431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.476700][ T6431] CPU: 1 UID: 0 PID: 6431 Comm: syz.2.175 Not tainted syzkaller #0 PREEMPT(full) [ 168.476725][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.476740][ T6431] Call Trace: [ 168.476748][ T6431] [ 168.476758][ T6431] dump_stack_lvl+0xe8/0x150 [ 168.476793][ T6431] should_fail_ex+0x3eb/0x540 [ 168.476833][ T6431] _copy_from_user+0x2d/0xb0 [ 168.476864][ T6431] ___sys_sendmsg+0x1c6/0x360 [ 168.476895][ T6431] ? __lock_acquire+0x747/0x2de0 [ 168.476933][ T6431] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.476995][ T6431] ? __fget_files+0x2a/0x420 [ 168.477023][ T6431] ? __fget_files+0x3a2/0x420 [ 168.477062][ T6431] __x64_sys_sendmsg+0x1b1/0x290 [ 168.477099][ T6431] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.477148][ T6431] do_syscall_64+0x166/0x520 [ 168.477169][ T6431] ? trace_irq_disable+0x3b/0x140 [ 168.477201][ T6431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.477226][ T6431] ? clear_bhb_loop+0x70/0xc0 [ 168.477255][ T6431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.477277][ T6431] RIP: 0033:0x7fa7df19e159 [ 168.477298][ T6431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.477319][ T6431] RSP: 002b:00007fa7dffc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.477345][ T6431] RAX: ffffffffffffffda RBX: 00007fa7df425fa0 RCX: 00007fa7df19e159 [ 168.477362][ T6431] RDX: 0000000004008004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 168.477377][ T6431] RBP: 00007fa7dffc0090 R08: 0000000000000000 R09: 0000000000000000 [ 168.477392][ T6431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.477406][ T6431] R13: 00007fa7df426038 R14: 00007fa7df425fa0 R15: 00007fff9fd1ba08 [ 168.477441][ T6431] [ 168.847150][ T6434] FAULT_INJECTION: forcing a failure. [ 168.847150][ T6434] name failslab, interval 1, probability 0, space 0, times 0 [ 168.847225][ T6434] CPU: 1 UID: 0 PID: 6434 Comm: syz.1.177 Not tainted syzkaller #0 PREEMPT(full) [ 168.847250][ T6434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.847265][ T6434] Call Trace: [ 168.847274][ T6434] [ 168.847283][ T6434] dump_stack_lvl+0xe8/0x150 [ 168.847321][ T6434] should_fail_ex+0x3eb/0x540 [ 168.847364][ T6434] should_failslab+0xa8/0x100 [ 168.847391][ T6434] __kmalloc_noprof+0xf9/0x710 [ 168.847425][ T6434] ? tomoyo_encode+0x2ad/0x570 [ 168.847453][ T6434] ? tomoyo_encode+0x2ad/0x570 [ 168.847724][ T6434] tomoyo_encode+0x2ad/0x570 [ 168.847771][ T6434] tomoyo_realpath_from_path+0x5fa/0x640 [ 168.847813][ T6434] ? tomoyo_path_number_perm+0x219/0x5f0 [ 168.847839][ T6434] tomoyo_path_number_perm+0x246/0x5f0 [ 168.847867][ T6434] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 168.847891][ T6434] ? __lock_acquire+0x747/0x2de0 [ 168.847939][ T6434] ? hook_file_ioctl+0x1f2/0x600 [ 168.847983][ T6434] ? __fget_files+0x2a/0x420 [ 168.848017][ T6434] ? __fget_files+0x2a/0x420 [ 168.848045][ T6434] ? __fget_files+0x3a2/0x420 [ 168.848073][ T6434] ? __fget_files+0x2a/0x420 [ 168.848106][ T6434] security_file_ioctl+0xc3/0x2a0 [ 168.848145][ T6434] __se_sys_ioctl+0x47/0x170 [ 168.848186][ T6434] do_syscall_64+0x166/0x520 [ 168.848207][ T6434] ? trace_irq_disable+0x3b/0x140 [ 168.848240][ T6434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.848265][ T6434] ? clear_bhb_loop+0x70/0xc0 [ 168.848294][ T6434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.848318][ T6434] RIP: 0033:0x7f898839e159 [ 168.848341][ T6434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.848360][ T6434] RSP: 002b:00007f8989220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.848387][ T6434] RAX: ffffffffffffffda RBX: 00007f8988625fa0 RCX: 00007f898839e159 [ 168.848406][ T6434] RDX: 0000200000000140 RSI: 0000000000008936 RDI: 0000000000000003 [ 168.848421][ T6434] RBP: 00007f8989220090 R08: 0000000000000000 R09: 0000000000000000 [ 168.848604][ T6434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.848618][ T6434] R13: 00007f8988626038 R14: 00007f8988625fa0 R15: 00007fffd53dceb8 [ 168.848653][ T6434] [ 168.914174][ T6434] ERROR: Out of memory at tomoyo_realpath_from_path. [ 169.465948][ T6447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.466521][ T6447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.495215][ T6448] FAULT_INJECTION: forcing a failure. [ 169.495215][ T6448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.495252][ T6448] CPU: 1 UID: 0 PID: 6448 Comm: syz.0.173 Not tainted syzkaller #0 PREEMPT(full) [ 169.495278][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.495292][ T6448] Call Trace: [ 169.495300][ T6448] [ 169.495310][ T6448] dump_stack_lvl+0xe8/0x150 [ 169.495343][ T6448] should_fail_ex+0x3eb/0x540 [ 169.495374][ T6448] _copy_from_user+0x2d/0xb0 [ 169.495484][ T6448] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 169.495531][ T6448] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 169.495562][ T6448] ? __alloc_skb+0x27a/0x7a0 [ 169.495582][ T6448] ? rcu_is_watching+0x16/0xb0 [ 169.495605][ T6448] ? trace_kmem_cache_alloc+0x29/0xe0 [ 169.495642][ T6448] ip_generic_getfrag+0x149/0x2d0 [ 169.495678][ T6448] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 169.495705][ T6448] ? raw_getfrag+0x21a/0x3a0 [ 169.495743][ T6448] __ip_append_data+0x3760/0x3cf0 [ 169.495771][ T6448] ? __lock_acquire+0x747/0x2de0 [ 169.495823][ T6448] ? __pfx_raw_getfrag+0x10/0x10 [ 169.495868][ T6448] ? ipv4_mtu+0x23/0x670 [ 169.495897][ T6448] ? __pfx___ip_append_data+0x10/0x10 [ 169.495924][ T6448] ? ipv4_mtu+0x561/0x670 [ 169.495945][ T6448] ? ipv4_mtu+0x23/0x670 [ 169.495968][ T6448] ? __pfx_ipv4_mtu+0x10/0x10 [ 169.495994][ T6448] ? ip_setup_cork+0x4ed/0x8f0 [ 169.496026][ T6448] ip_append_data+0x10d/0x190 [ 169.496060][ T6448] ? __pfx_raw_getfrag+0x10/0x10 [ 169.496092][ T6448] raw_sendmsg+0x1406/0x1a20 [ 169.496145][ T6448] ? __pfx_raw_sendmsg+0x10/0x10 [ 169.496173][ T6448] ? __lock_acquire+0x747/0x2de0 [ 169.496239][ T6448] ? aa_sock_msg_perm+0xfc/0x210 [ 169.496273][ T6448] ? sock_rps_record_flow+0x19/0x350 [ 169.496306][ T6448] ? inet_sendmsg+0x298/0x320 [ 169.496333][ T6448] ? apparmor_socket_sendmsg+0x98/0x360 [ 169.496359][ T6448] ? __pfx_inet_sendmsg+0x10/0x10 [ 169.496426][ T6448] sock_sendmsg_nosec+0x10e/0x180 [ 169.496460][ T6448] __sys_sendto+0x408/0x5a0 [ 169.496479][ T6448] ? ksys_write+0x1e6/0x270 [ 169.496514][ T6448] ? __pfx___sys_sendto+0x10/0x10 [ 169.496535][ T6448] ? __mutex_unlock_slowpath+0x731/0x900 [ 169.496588][ T6448] ? __pfx_ksys_write+0x10/0x10 [ 169.496626][ T6448] __x64_sys_sendto+0xde/0x100 [ 169.496653][ T6448] do_syscall_64+0x166/0x520 [ 169.496674][ T6448] ? trace_irq_disable+0x3b/0x140 [ 169.496707][ T6448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.496732][ T6448] ? clear_bhb_loop+0x70/0xc0 [ 169.496760][ T6448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.496782][ T6448] RIP: 0033:0x7f50f579e159 [ 169.496827][ T6448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.496846][ T6448] RSP: 002b:00007f50f6682028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 169.496872][ T6448] RAX: ffffffffffffffda RBX: 00007f50f5a25fa0 RCX: 00007f50f579e159 [ 169.496889][ T6448] RDX: 000000000000001d RSI: 0000200000000300 RDI: 0000000000000003 [ 169.496904][ T6448] RBP: 00007f50f6682090 R08: 0000200000000400 R09: 0000000000000010 [ 169.496928][ T6448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.496943][ T6448] R13: 00007f50f5a26038 R14: 00007f50f5a25fa0 R15: 00007ffed9ced398 [ 169.496978][ T6448] [ 169.753178][ T5719] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 170.024996][ T5719] usb 3-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.00 [ 170.050339][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 80, setting to 64 [ 170.050894][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.117477][ T5719] usb 3-1: config 0 descriptor?? [ 170.141270][ T6445] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 170.292784][ T5719] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 170.310112][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 170.385575][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.385639][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.440242][ T4967] bcm5974 3-1:0.0: could not read from device [ 170.460960][ T25] usb 2-1: device descriptor read/64, error -71 [ 170.479106][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout [ 170.479187][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.525981][ T4967] bcm5974 3-1:0.0: could not read from device [ 170.626524][ T4967] bcm5974 3-1:0.0: could not read from device [ 170.651195][ T5719] usb 3-1: USB disconnect, device number 11 [ 170.672743][ T4967] bcm5974 3-1:0.0: could not read from device [ 170.698806][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 170.759801][ T6467] FAULT_INJECTION: forcing a failure. [ 170.759801][ T6467] name failslab, interval 1, probability 0, space 0, times 0 [ 170.759836][ T6467] CPU: 0 UID: 0 PID: 6467 Comm: syz.3.185 Not tainted syzkaller #0 PREEMPT(full) [ 170.759861][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.759933][ T6467] Call Trace: [ 170.759943][ T6467] [ 170.759953][ T6467] dump_stack_lvl+0xe8/0x150 [ 170.759989][ T6467] should_fail_ex+0x3eb/0x540 [ 170.760020][ T6467] should_failslab+0xa8/0x100 [ 170.760046][ T6467] __kmalloc_noprof+0xf9/0x710 [ 170.760084][ T6467] ? iovec_from_user+0x87/0x250 [ 170.760112][ T6467] ? iovec_from_user+0x87/0x250 [ 170.760151][ T6467] iovec_from_user+0x87/0x250 [ 170.760186][ T6467] __import_iovec+0x15e/0x7e0 [ 170.760223][ T6467] import_iovec+0x73/0xa0 [ 170.760254][ T6467] ___sys_recvmsg+0x4c9/0x5a0 [ 170.760280][ T6467] ? lock_acquire+0x115/0x350 [ 170.760320][ T6467] ? __pfx____sys_recvmsg+0x10/0x10 [ 170.760351][ T6467] ? lock_acquire+0x115/0x350 [ 170.760395][ T6467] ? __fget_files+0x3a2/0x420 [ 170.760430][ T6467] do_recvmmsg+0x31a/0x7f0 [ 170.760990][ T6467] ? __pfx_do_recvmmsg+0x10/0x10 [ 170.761056][ T6467] ? get_timespec64+0x119/0x1b0 [ 170.761085][ T6467] ? __pfx_get_timespec64+0x10/0x10 [ 170.761122][ T6467] __x64_sys_recvmmsg+0x1b7/0x250 [ 170.761153][ T6467] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 170.761192][ T6467] do_syscall_64+0x166/0x520 [ 170.761212][ T6467] ? trace_irq_disable+0x3b/0x140 [ 170.761243][ T6467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.761266][ T6467] ? clear_bhb_loop+0x70/0xc0 [ 170.761294][ T6467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.761315][ T6467] RIP: 0033:0x7f5ea439e159 [ 170.761336][ T6467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.761353][ T6467] RSP: 002b:00007f5ea52c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 170.762038][ T6467] RAX: ffffffffffffffda RBX: 00007f5ea4625fa0 RCX: 00007f5ea439e159 [ 170.762064][ T6467] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 170.762080][ T6467] RBP: 00007f5ea52c4090 R08: 0000200000003700 R09: 0000000000000000 [ 170.762095][ T6467] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 170.762109][ T6467] R13: 00007f5ea4626038 R14: 00007f5ea4625fa0 R15: 00007ffc24d14488 [ 170.762144][ T6467] [ 170.898320][ T25] usb 2-1: device descriptor read/64, error -71 [ 171.006483][ T25] usb usb2-port1: attempt power cycle [ 171.340863][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 171.380547][ T25] usb 2-1: device descriptor read/8, error -71 [ 171.462776][ T6462] 9p: Bad value for 'cachetag' [ 171.618803][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 171.654315][ T25] usb 2-1: device descriptor read/8, error -71 [ 171.776282][ T25] usb usb2-port1: unable to enumerate USB device [ 171.905143][ T6488] program syz.3.190 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.905974][ T6488] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 171.978622][ T49] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 172.062980][ T6491] program syz.3.190 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.069237][ T6491] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 172.159696][ T49] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice= 3.6a [ 172.161278][ T49] usb 3-1: config 240 has an invalid interface number: 170 but max is 0 [ 172.162189][ T49] usb 3-1: config 240 has no interface number 0 [ 172.162226][ T49] usb 3-1: config 240 interface 170 has no altsetting 0 [ 172.203355][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.203394][ T49] usb 3-1: Product: syz [ 172.203410][ T49] usb 3-1: Manufacturer: syz [ 172.203427][ T49] usb 3-1: SerialNumber: syz [ 172.284922][ T6488] 9p: Could not find request transport: t [ 172.392048][ T6491] 9p: Could not find request transport: t [ 172.458685][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout [ 172.538644][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout [ 172.538738][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout [ 172.542767][ T49] usb_ehset_test 3-1:240.170: probe with driver usb_ehset_test failed with error -32 [ 172.557281][ T49] usb 3-1: USB disconnect, device number 12 [ 172.781019][ T6502] FAULT_INJECTION: forcing a failure. [ 172.781019][ T6502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.781046][ T6502] CPU: 1 UID: 0 PID: 6502 Comm: syz.1.193 Not tainted syzkaller #0 PREEMPT(full) [ 172.781064][ T6502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.781074][ T6502] Call Trace: [ 172.781081][ T6502] [ 172.781088][ T6502] dump_stack_lvl+0xe8/0x150 [ 172.781114][ T6502] should_fail_ex+0x3eb/0x540 [ 172.781135][ T6502] _copy_from_user+0x2d/0xb0 [ 172.781157][ T6502] get_timespec64+0x96/0x1b0 [ 172.781178][ T6502] ? __pfx_get_timespec64+0x10/0x10 [ 172.781202][ T6502] __x64_sys_recvmmsg+0x14b/0x250 [ 172.781224][ T6502] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 172.781260][ T6502] do_syscall_64+0x166/0x520 [ 172.781281][ T6502] ? trace_irq_disable+0x3b/0x140 [ 172.781305][ T6502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.781326][ T6502] ? clear_bhb_loop+0x70/0xc0 [ 172.781346][ T6502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.781363][ T6502] RIP: 0033:0x7f898839e159 [ 172.781378][ T6502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.781392][ T6502] RSP: 002b:00007f8989220028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 172.781409][ T6502] RAX: ffffffffffffffda RBX: 00007f8988625fa0 RCX: 00007f898839e159 [ 172.781421][ T6502] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 172.781432][ T6502] RBP: 00007f8989220090 R08: 0000200000003700 R09: 0000000000000000 [ 172.781443][ T6502] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 172.781453][ T6502] R13: 00007f8988626038 R14: 00007f8988625fa0 R15: 00007fffd53dceb8 [ 172.781477][ T6502] [ 173.184590][ T6506] FAULT_INJECTION: forcing a failure. [ 173.184590][ T6506] name failslab, interval 1, probability 0, space 0, times 0 [ 173.184627][ T6506] CPU: 1 UID: 0 PID: 6506 Comm: syz.0.195 Not tainted syzkaller #0 PREEMPT(full) [ 173.184654][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.184668][ T6506] Call Trace: [ 173.184677][ T6506] [ 173.184686][ T6506] dump_stack_lvl+0xe8/0x150 [ 173.184722][ T6506] should_fail_ex+0x3eb/0x540 [ 173.184896][ T6506] should_failslab+0xa8/0x100 [ 173.184926][ T6506] ? skb_clone+0x212/0x3a0 [ 173.184954][ T6506] kmem_cache_alloc_noprof+0x9c/0x600 [ 173.184993][ T6506] ? skb_clone+0x212/0x3a0 [ 173.185025][ T6506] skb_clone+0x212/0x3a0 [ 173.185054][ T6506] __netlink_deliver_tap+0x413/0x860 [ 173.185097][ T6506] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.185127][ T6506] netlink_deliver_tap+0x19c/0x1b0 [ 173.185157][ T6506] netlink_unicast+0x781/0x940 [ 173.185195][ T6506] netlink_sendmsg+0x7c3/0xae0 [ 173.185231][ T6506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.185307][ T6506] ? apparmor_socket_sendmsg+0x98/0x360 [ 173.185334][ T6506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.185362][ T6506] sock_sendmsg_nosec+0x13a/0x180 [ 173.185396][ T6506] ____sys_sendmsg+0x54e/0x850 [ 173.185428][ T6506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.185463][ T6506] ? import_iovec+0x73/0xa0 [ 173.185501][ T6506] ___sys_sendmsg+0x2a5/0x360 [ 173.185530][ T6506] ? __lock_acquire+0x747/0x2de0 [ 173.185572][ T6506] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.185635][ T6506] ? __fget_files+0x2a/0x420 [ 173.185663][ T6506] ? __fget_files+0x3a2/0x420 [ 173.185703][ T6506] __x64_sys_sendmsg+0x1b1/0x290 [ 173.185733][ T6506] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.185777][ T6506] do_syscall_64+0x166/0x520 [ 173.185797][ T6506] ? trace_irq_disable+0x3b/0x140 [ 173.185829][ T6506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.185851][ T6506] ? clear_bhb_loop+0x70/0xc0 [ 173.185878][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.185907][ T6506] RIP: 0033:0x7f50f579e159 [ 173.185927][ T6506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.185945][ T6506] RSP: 002b:00007f50f6682028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.185970][ T6506] RAX: ffffffffffffffda RBX: 00007f50f5a25fa0 RCX: 00007f50f579e159 [ 173.185987][ T6506] RDX: 0000000000040000 RSI: 0000200000000540 RDI: 0000000000000003 [ 173.186002][ T6506] RBP: 00007f50f6682090 R08: 0000000000000000 R09: 0000000000000000 [ 173.186021][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.186035][ T6506] R13: 00007f50f5a26038 R14: 00007f50f5a25fa0 R15: 00007ffed9ced398 [ 173.186070][ T6506] [ 173.663348][ T6508] zero sized request [ 173.809307][ T5719] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 173.892655][ T6512] FAULT_INJECTION: forcing a failure. [ 173.892655][ T6512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.892691][ T6512] CPU: 1 UID: 0 PID: 6512 Comm: syz.2.197 Not tainted syzkaller #0 PREEMPT(full) [ 173.892717][ T6512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.892731][ T6512] Call Trace: [ 173.892740][ T6512] [ 173.892750][ T6512] dump_stack_lvl+0xe8/0x150 [ 173.892785][ T6512] should_fail_ex+0x3eb/0x540 [ 173.892815][ T6512] _copy_from_user+0x2d/0xb0 [ 173.892843][ T6512] dm_ctl_ioctl+0x52a/0xe10 [ 173.892885][ T6512] ? __pfx_table_deps+0x10/0x10 [ 173.892907][ T6512] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 173.892995][ T6512] ? __fget_files+0x2a/0x420 [ 173.893024][ T6512] ? __fget_files+0x3a2/0x420 [ 173.893051][ T6512] ? __fget_files+0x2a/0x420 [ 173.893111][ T6512] ? bpf_lsm_file_ioctl+0x9/0x20 [ 173.893150][ T6512] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 173.893183][ T6512] __se_sys_ioctl+0xfc/0x170 [ 173.893220][ T6512] do_syscall_64+0x166/0x520 [ 173.893241][ T6512] ? trace_irq_disable+0x3b/0x140 [ 173.893273][ T6512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.893304][ T6512] ? clear_bhb_loop+0x70/0xc0 [ 173.893332][ T6512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.893356][ T6512] RIP: 0033:0x7fa7df19e159 [ 173.893377][ T6512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.893397][ T6512] RSP: 002b:00007fa7dffc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.893422][ T6512] RAX: ffffffffffffffda RBX: 00007fa7df425fa0 RCX: 00007fa7df19e159 [ 173.893442][ T6512] RDX: 0000200000000138 RSI: 00000000c178fd0b RDI: 0000000000000004 [ 173.893458][ T6512] RBP: 00007fa7dffc0090 R08: 0000000000000000 R09: 0000000000000000 [ 173.893473][ T6512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.893487][ T6512] R13: 00007fa7df426038 R14: 00007fa7df425fa0 R15: 00007fff9fd1ba08 [ 173.893522][ T6512] [ 174.094537][ T5719] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 174.129064][ T5719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.129174][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.269241][ T5719] usb 4-1: config 0 descriptor?? [ 174.503199][ T6523] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 174.618984][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout [ 174.751738][ T5719] savu 0003:1E7D:2D5A.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 174.770379][ T6530] FAULT_INJECTION: forcing a failure. [ 174.770379][ T6530] name failslab, interval 1, probability 0, space 0, times 0 [ 174.770494][ T6530] CPU: 1 UID: 0 PID: 6530 Comm: syz.2.203 Not tainted syzkaller #0 PREEMPT(full) [ 174.770552][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.770652][ T6530] Call Trace: [ 174.770676][ T6530] [ 174.770699][ T6530] dump_stack_lvl+0xe8/0x150 [ 174.770806][ T6530] should_fail_ex+0x3eb/0x540 [ 174.770888][ T6530] should_failslab+0xa8/0x100 [ 174.770960][ T6530] ? skb_clone+0x212/0x3a0 [ 174.771031][ T6530] kmem_cache_alloc_noprof+0x9c/0x600 [ 174.771166][ T6530] ? skb_clone+0x212/0x3a0 [ 174.771261][ T6530] skb_clone+0x212/0x3a0 [ 174.771339][ T6530] __netlink_deliver_tap+0x413/0x860 [ 174.771481][ T6530] ? netlink_deliver_tap+0x2e/0x1b0 [ 174.771575][ T6530] netlink_deliver_tap+0x19c/0x1b0 [ 174.771662][ T6530] netlink_unicast+0x781/0x940 [ 174.771760][ T6530] netlink_sendmsg+0x7c3/0xae0 [ 174.771864][ T6530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.771963][ T6530] ? apparmor_socket_sendmsg+0x98/0x360 [ 174.772039][ T6530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.772125][ T6530] sock_sendmsg_nosec+0x13a/0x180 [ 174.772221][ T6530] ____sys_sendmsg+0x54e/0x850 [ 174.772307][ T6530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.772403][ T6530] ? import_iovec+0x73/0xa0 [ 174.772491][ T6530] ___sys_sendmsg+0x2a5/0x360 [ 174.772556][ T6530] ? __lock_acquire+0x747/0x2de0 [ 174.772665][ T6530] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.772841][ T6530] ? __fget_files+0x2a/0x420 [ 174.772970][ T6530] ? __fget_files+0x3a2/0x420 [ 174.773122][ T6530] __x64_sys_sendmsg+0x1b1/0x290 [ 174.773207][ T6530] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.773328][ T6530] do_syscall_64+0x166/0x520 [ 174.773392][ T6530] ? trace_irq_disable+0x3b/0x140 [ 174.773475][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.773543][ T6530] ? clear_bhb_loop+0x70/0xc0 [ 174.773605][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.773677][ T6530] RIP: 0033:0x7fa7df19e159 [ 174.773735][ T6530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.773788][ T6530] RSP: 002b:00007fa7dff9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.773858][ T6530] RAX: ffffffffffffffda RBX: 00007fa7df426090 RCX: 00007fa7df19e159 [ 174.773910][ T6530] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 174.773953][ T6530] RBP: 00007fa7dff9f090 R08: 0000000000000000 R09: 0000000000000000 [ 174.773978][ T6530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.773990][ T6530] R13: 00007fa7df426128 R14: 00007fa7df426090 R15: 00007fff9fd1ba08 [ 174.774021][ T6530] [ 174.798823][ T5704] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 174.983386][ T5704] usb 2-1: device descriptor read/64, error -71 [ 175.243232][ T6532] ip6_tunnel: non-ECT from 0000:0000:0080:0000:0000:ffff:ac14:1419 with DS=0x33 [ 175.310502][ T5704] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 175.449085][ T5704] usb 2-1: device descriptor read/64, error -71 [ 175.451156][ T6535] FAULT_INJECTION: forcing a failure. [ 175.451156][ T6535] name failslab, interval 1, probability 0, space 0, times 0 [ 175.451185][ T6535] CPU: 1 UID: 0 PID: 6535 Comm: syz.2.204 Not tainted syzkaller #0 PREEMPT(full) [ 175.451204][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.451214][ T6535] Call Trace: [ 175.451220][ T6535] [ 175.451227][ T6535] dump_stack_lvl+0xe8/0x150 [ 175.451254][ T6535] should_fail_ex+0x3eb/0x540 [ 175.451287][ T6535] should_failslab+0xa8/0x100 [ 175.451307][ T6535] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 175.451331][ T6535] ? __d_alloc+0x37/0x6f0 [ 175.451353][ T6535] ? __d_alloc+0x37/0x6f0 [ 175.451375][ T6535] ? __asan_memset+0x22/0x50 [ 175.451400][ T6535] __d_alloc+0x37/0x6f0 [ 175.451422][ T6535] ? __pfx_get_random_u32+0x10/0x10 [ 175.451442][ T6535] ? dquot_alloc_inode+0x216/0xa50 [ 175.451467][ T6535] d_alloc_pseudo+0x21/0xc0 [ 175.451491][ T6535] alloc_path_pseudo+0x107/0x220 [ 175.451523][ T6535] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 175.451562][ T6535] alloc_file_pseudo+0xa8/0x1e0 [ 175.451584][ T6535] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 175.451610][ T6535] __shmem_file_setup+0x2e9/0x370 [ 175.451631][ T6535] ? __pfx___shmem_file_setup+0x10/0x10 [ 175.451647][ T6535] ? do_raw_spin_lock+0x12b/0x2f0 [ 175.451690][ T6535] memfd_alloc_file+0x99/0x540 [ 175.451712][ T6535] ? __pfx_memfd_alloc_file+0x10/0x10 [ 175.451730][ T6535] ? alloc_fd+0x651/0x6c0 [ 175.451759][ T6535] __se_sys_memfd_create+0x31f/0x410 [ 175.451787][ T6535] do_syscall_64+0x166/0x520 [ 175.451802][ T6535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.451820][ T6535] ? clear_bhb_loop+0x70/0xc0 [ 175.451840][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.451856][ T6535] RIP: 0033:0x7fa7df19e159 [ 175.451872][ T6535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.451886][ T6535] RSP: 002b:00007fa7dffc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 175.451903][ T6535] RAX: ffffffffffffffda RBX: 00007fa7df425fa0 RCX: 00007fa7df19e159 [ 175.451915][ T6535] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 175.451925][ T6535] RBP: 00007fa7df235024 R08: 0000000000000000 R09: 0000000000000000 [ 175.451936][ T6535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.451945][ T6535] R13: 00007fa7df426038 R14: 00007fa7df425fa0 R15: 00007fff9fd1ba08 [ 175.451970][ T6535] [ 175.461356][ T6535] tmpfs: Unknown parameter 'usrquota±Ë’{ìj¾¬½MmÔm៊1¨$ÃK5´î—¦ê³' [ 175.576354][ T5704] usb usb2-port1: attempt power cycle [ 175.577626][ T6535] openvswitch: netlink: IP tunnel TTL not specified. [ 175.869194][ T5719] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 175.869667][ C1] raw-gadget.3 gadget.2: ignoring, device is not running [ 175.969844][ T883] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 175.999640][ T5719] usb 3-1: device descriptor read/64, error -32 [ 176.018147][ T5791] usb 4-1: USB disconnect, device number 7 [ 176.118853][ T883] usb 1-1: Using ep0 maxpacket: 32 [ 176.119870][ T883] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 176.121411][ T883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.124076][ T883] usb 1-1: config 0 descriptor?? [ 176.171696][ T5704] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 176.200158][ T5704] usb 2-1: device descriptor read/8, error -71 [ 176.248599][ T5719] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 176.327947][ T883] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 176.343912][ T883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 176.344974][ T883] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 176.345036][ T883] usb 1-1: media controller created [ 176.398402][ T883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.428598][ T5719] usb 3-1: Using ep0 maxpacket: 32 [ 176.429401][ T5719] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 176.430849][ T5719] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 176.430879][ T5719] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 176.431566][ T5719] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 176.431626][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 176.431650][ T5719] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 176.431732][ T5719] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 176.431776][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.451744][ T5704] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 176.491168][ T5704] usb 2-1: device descriptor read/8, error -71 [ 176.589169][ T5719] usb 3-1: config 0 descriptor?? [ 176.589957][ T5704] usb usb2-port1: unable to enumerate USB device [ 176.637075][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.664017][ T6540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.664488][ T6540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.666353][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.816140][ T5719] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 177.084894][ T5719] usb 3-1: USB disconnect, device number 14 [ 177.129705][ T5719] usblp0: removed [ 177.233596][ T6551] rust_binder: 6550:6551 no such ref 0 [ 177.238171][ T6551] rust_binder: Write failure EINVAL in pid:192 [ 177.968556][ T49] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 178.131242][ T49] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 178.133998][ T49] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 178.134030][ T49] usb 2-1: config 0 has no interface number 0 [ 178.139102][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.139136][ T49] usb 2-1: Product: syz [ 178.139152][ T49] usb 2-1: Manufacturer: syz [ 178.139168][ T49] usb 2-1: SerialNumber: syz [ 178.214118][ T49] usb 2-1: config 0 descriptor?? [ 178.253738][ T49] usb 2-1: selecting invalid altsetting 1 [ 178.254528][ T49] dvb_ttusb_budget: ttusb_init_controller: error [ 178.254767][ T49] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 178.316474][ T6576] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 178.439692][ T6557] FAULT_INJECTION: forcing a failure. [ 178.439692][ T6557] name failslab, interval 1, probability 0, space 0, times 0 [ 178.439732][ T6557] CPU: 0 UID: 0 PID: 6557 Comm: syz.1.213 Not tainted syzkaller #0 PREEMPT(full) [ 178.439778][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.439793][ T6557] Call Trace: [ 178.439809][ T6557] [ 178.439822][ T6557] dump_stack_lvl+0xe8/0x150 [ 178.439862][ T6557] should_fail_ex+0x3eb/0x540 [ 178.439895][ T6557] should_failslab+0xa8/0x100 [ 178.439941][ T6557] __kmalloc_noprof+0xf9/0x710 [ 178.439981][ T6557] ? tomoyo_encode+0x2ad/0x570 [ 178.440018][ T6557] ? tomoyo_encode+0x2ad/0x570 [ 178.440047][ T6557] tomoyo_encode+0x2ad/0x570 [ 178.440091][ T6557] tomoyo_realpath_from_path+0x5fa/0x640 [ 178.440132][ T6557] ? tomoyo_path_number_perm+0x219/0x5f0 [ 178.440155][ T6557] tomoyo_path_number_perm+0x246/0x5f0 [ 178.440187][ T6557] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 178.440203][ T6557] ? __lock_acquire+0x747/0x2de0 [ 178.440261][ T6557] ? hook_file_ioctl+0x1f2/0x600 [ 178.440322][ T6557] ? __fget_files+0x2a/0x420 [ 178.440723][ T6557] ? __fget_files+0x2a/0x420 [ 178.440750][ T6557] ? __fget_files+0x3a2/0x420 [ 178.440774][ T6557] ? __fget_files+0x2a/0x420 [ 178.440827][ T6557] security_file_ioctl+0xc3/0x2a0 [ 178.440873][ T6557] __se_sys_ioctl+0x47/0x170 [ 178.440912][ T6557] do_syscall_64+0x166/0x520 [ 178.440939][ T6557] ? trace_irq_disable+0x3b/0x140 [ 178.440971][ T6557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.440997][ T6557] ? clear_bhb_loop+0x70/0xc0 [ 178.441031][ T6557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.441048][ T6557] RIP: 0033:0x7f898839e159 [ 178.441088][ T6557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.441108][ T6557] RSP: 002b:00007f8989220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.441149][ T6557] RAX: ffffffffffffffda RBX: 00007f8988625fa0 RCX: 00007f898839e159 [ 178.441171][ T6557] RDX: 0000200000000040 RSI: 0000000000000707 RDI: 0000000000000004 [ 178.441182][ T6557] RBP: 00007f8989220090 R08: 0000000000000000 R09: 0000000000000000 [ 178.441192][ T6557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.441428][ T6557] R13: 00007f8988626038 R14: 00007f8988625fa0 R15: 00007fffd53dceb8 [ 178.441465][ T6557] [ 178.441705][ T6557] ERROR: Out of memory at tomoyo_realpath_from_path. [ 178.799446][ T5467] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 178.888360][ T883] az6027: usb out operation failed. (-110) [ 178.901764][ T883] az6027: usb out operation failed. (-32) [ 178.901797][ T883] stb0899_attach: Driver disabled by Kconfig [ 178.901809][ T883] az6027: no front-end attached [ 178.901809][ T883] [ 178.902616][ T883] az6027: usb out operation failed. (-32) [ 178.902637][ T883] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 178.906564][ T883] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 178.988686][ T5467] usb 4-1: Using ep0 maxpacket: 32 [ 178.991872][ T5467] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 178.997014][ T5467] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.037807][ T883] dvb-usb: schedule remote query interval to 400 msecs. [ 179.037835][ T883] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 179.067465][ T883] usb 1-1: USB disconnect, device number 7 [ 179.080743][ T5467] usb 4-1: config 0 descriptor?? [ 179.162689][ T5467] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 179.439073][ T49] DVB: Unable to find symbol stv0299_attach() [ 179.480318][ T883] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 179.780601][ T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 179.841914][ T49] DVB: Unable to find symbol tda8083_attach() [ 179.841933][ T49] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 179.907917][ T49] usb 2-1: USB disconnect, device number 14 [ 179.966266][ T25] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 180.015225][ T25] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 180.015291][ T25] usb 3-1: Product: syz [ 180.065124][ T25] usb 3-1: config 0 descriptor?? [ 180.085370][ T25] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 180.101542][ T25] usb 3-1: Detected FT232H [ 180.274347][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 180.419315][ T5768] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 180.499670][ T6585] overlayfs: failed to resolve '/de=00000000000000000040000': -2 [ 180.537290][ T6585] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 180.569788][ T5768] usb 1-1: Using ep0 maxpacket: 16 [ 180.574696][ T5768] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 180.605298][ T5768] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 180.605361][ T5768] usb 1-1: Product: syz [ 180.605379][ T5768] usb 1-1: Manufacturer: syz [ 180.605394][ T5768] usb 1-1: SerialNumber: syz [ 180.605412][ T6592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.658298][ T6592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.672920][ T5768] usb 1-1: config 0 descriptor?? [ 180.678315][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.220'. [ 180.897415][ T5768] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 180.965777][ T25] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 181.040743][ T5467] gspca_vc032x: reg_r err -32 [ 181.040764][ T5467] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.040806][ T5467] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.040817][ T5467] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.040828][ T5467] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.040839][ T5467] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.040849][ T5467] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.040859][ T5467] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.040868][ T5467] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.040878][ T5467] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.040888][ T5467] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.040898][ T5467] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.040908][ T5467] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.040917][ T5467] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.040955][ T5467] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.040966][ T5467] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.041202][ T5467] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.041221][ T5467] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.041233][ T5467] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.041242][ T5467] gspca_vc032x: Unknown sensor... [ 181.041362][ T5467] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 181.204900][ T49] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 181.244442][ T6590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.264297][ T6590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.309829][ T6585] netlink: 14 bytes leftover after parsing attributes in process `syz.2.220'. [ 181.389916][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 181.416395][ T49] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 181.440646][ T49] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 181.440687][ T49] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.440719][ T49] usb 2-1: config 1 interface 0 has no altsetting 0 [ 181.464499][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.464631][ T49] usb 2-1: Product: syz [ 181.464668][ T49] usb 2-1: Manufacturer: syz [ 181.464705][ T49] usb 2-1: SerialNumber: syz [ 181.557022][ T6596] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 181.557242][ T6596] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 181.598884][ T5791] usb 3-1: USB disconnect, device number 15 [ 181.628323][ T5768] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 181.628360][ T5768] peak_usb 1-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 181.753149][ T5768] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 181.791321][ T5768] usb 1-1: USB disconnect, device number 8 [ 181.837581][ T5791] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 181.873757][ T5791] ftdi_sio 3-1:0.0: device disconnected [ 181.964701][ T49] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 181.994222][ T49] usb 2-1: USB disconnect, device number 15 [ 182.013582][ T49] usblp0: removed [ 182.448827][ T6607] FAULT_INJECTION: forcing a failure. [ 182.448827][ T6607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.448868][ T6607] CPU: 0 UID: 0 PID: 6607 Comm: syz.2.227 Not tainted syzkaller #0 PREEMPT(full) [ 182.448894][ T6607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.448918][ T6607] Call Trace: [ 182.448927][ T6607] [ 182.448941][ T6607] dump_stack_lvl+0xe8/0x150 [ 182.448984][ T6607] should_fail_ex+0x3eb/0x540 [ 182.449016][ T6607] _copy_to_user+0x31/0xb0 [ 182.449055][ T6607] simple_read_from_buffer+0xe1/0x170 [ 182.449092][ T6607] proc_fail_nth_read+0x1bb/0x230 [ 182.449134][ T6607] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.449166][ T6607] ? rw_verify_area+0x24a/0x4c0 [ 182.449195][ T6607] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.449228][ T6607] vfs_read+0x213/0xa80 [ 182.449263][ T6607] ? __pfx___mutex_lock+0x10/0x10 [ 182.449292][ T6607] ? __pfx_vfs_read+0x10/0x10 [ 182.449519][ T6607] ? __fget_files+0x2a/0x420 [ 182.449550][ T6607] ? __fget_files+0x3a2/0x420 [ 182.449574][ T6607] ? __fget_files+0x2a/0x420 [ 182.449605][ T6607] ksys_read+0x150/0x270 [ 182.449633][ T6607] ? __pfx_ksys_read+0x10/0x10 [ 182.449668][ T6607] do_syscall_64+0x166/0x520 [ 182.449685][ T6607] ? trace_irq_disable+0x3b/0x140 [ 182.449713][ T6607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.449733][ T6607] ? clear_bhb_loop+0x70/0xc0 [ 182.449757][ T6607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.449776][ T6607] RIP: 0033:0x7fa7df15e98e [ 182.449795][ T6607] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 182.449812][ T6607] RSP: 002b:00007fa7dffbffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.449833][ T6607] RAX: ffffffffffffffda RBX: 00007fa7dffc06c0 RCX: 00007fa7df15e98e [ 182.449930][ T6607] RDX: 000000000000000f RSI: 00007fa7dffc00a0 RDI: 0000000000000004 [ 182.449943][ T6607] RBP: 00007fa7dffc0090 R08: 0000000000000000 R09: 0000000000000000 [ 182.449954][ T6607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.449966][ T6607] R13: 00007fa7df426038 R14: 00007fa7df425fa0 R15: 00007fff9fd1ba08 [ 182.449995][ T6607] [ 182.932827][ T5791] usb 4-1: USB disconnect, device number 8 [ 183.408563][ T5768] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 183.558682][ T5768] usb 2-1: Using ep0 maxpacket: 32 [ 183.559591][ T5768] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.561816][ T5768] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.561870][ T5768] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 26 [ 183.563553][ T5768] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 183.563587][ T5768] usb 2-1: SerialNumber: syz [ 183.664592][ T5768] cdc_acm 2-1:1.0: Zero length descriptor references [ 183.664631][ T5768] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 184.045174][ T6619] FAULT_INJECTION: forcing a failure. [ 184.045174][ T6619] name failslab, interval 1, probability 0, space 0, times 0 [ 184.045208][ T6619] CPU: 1 UID: 0 PID: 6619 Comm: syz.0.231 Not tainted syzkaller #0 PREEMPT(full) [ 184.045233][ T6619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.045247][ T6619] Call Trace: [ 184.045257][ T6619] [ 184.045267][ T6619] dump_stack_lvl+0xe8/0x150 [ 184.045307][ T6619] should_fail_ex+0x3eb/0x540 [ 184.045344][ T6619] should_failslab+0xa8/0x100 [ 184.045369][ T6619] ? __send_signal_locked+0x220/0xee0 [ 184.045434][ T6619] kmem_cache_alloc_noprof+0x9c/0x600 [ 184.045465][ T6619] ? sig_get_ucounts+0x26/0x450 [ 184.045490][ T6619] ? __send_signal_locked+0x220/0xee0 [ 184.045525][ T6619] ? sig_get_ucounts+0x3e4/0x450 [ 184.045552][ T6619] __send_signal_locked+0x220/0xee0 [ 184.045595][ T6619] send_signal_locked+0x135/0x9e0 [ 184.045636][ T6619] ? __pfx_send_signal_locked+0x10/0x10 [ 184.045689][ T6619] force_sig_info_to_task+0x316/0x4b0 [ 184.045735][ T6619] force_sig_fault+0xf0/0x150 [ 184.045762][ T6619] ? __pfx_force_sig_fault+0x10/0x10 [ 184.045792][ T6619] ? __bad_area_nosemaphore+0x31e/0x6a0 [ 184.045843][ T6619] exc_page_fault+0x6a/0xc0 [ 184.045879][ T6619] asm_exc_page_fault+0x26/0x30 [ 184.045903][ T6619] RIP: 0033:0x7f50f5652c43 [ 184.045938][ T6619] Code: 10 4c 89 44 24 08 4c 89 0c 24 4c 8b 54 24 28 45 31 c9 48 8b 7c 24 20 48 8b 74 24 18 48 8b 54 24 10 48 8b 4c 24 08 48 8b 2c 24 <48> 8b 59 38 48 81 4b 18 80 00 00 00 e8 1c ff ff ff 48 83 ec 08 b9 [ 184.045958][ T6619] RSP: 002b:00007f50f6660fd0 EFLAGS: 00010246 [ 184.045979][ T6619] RAX: 00007f50f5652c00 RBX: 00007f50f5a26090 RCX: 0000000000000000 [ 184.045996][ T6619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.046009][ T6619] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.046021][ T6619] R10: ffffffffffffffff R11: 0000000000000000 R12: 0000000000000001 [ 184.046047][ T6619] R13: 00007f50f5a26128 R14: 00007f50f5a26090 R15: 00007ffed9ced398 [ 184.046082][ T6619] [ 184.552796][ T6623] raw_sendmsg: syz.3.233 forgot to set AF_INET. Fix it! [ 184.866263][ T6634] FAULT_INJECTION: forcing a failure. [ 184.866263][ T6634] name failslab, interval 1, probability 0, space 0, times 0 [ 184.866301][ T6634] CPU: 0 UID: 0 PID: 6634 Comm: syz.3.238 Not tainted syzkaller #0 PREEMPT(full) [ 184.866327][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.866341][ T6634] Call Trace: [ 184.866350][ T6634] [ 184.866360][ T6634] dump_stack_lvl+0xe8/0x150 [ 184.866396][ T6634] should_fail_ex+0x3eb/0x540 [ 184.866428][ T6634] should_failslab+0xa8/0x100 [ 184.866456][ T6634] __kmalloc_noprof+0xf9/0x710 [ 184.866490][ T6634] ? alloc_trace_uprobe+0x32/0x2a0 [ 184.866521][ T6634] ? alloc_trace_uprobe+0x32/0x2a0 [ 184.866560][ T6634] alloc_trace_uprobe+0x32/0x2a0 [ 184.866609][ T6634] __trace_uprobe_create+0x9b8/0xe40 [ 184.866649][ T6634] ? trace_kmalloc+0x2a/0xf0 [ 184.866680][ T6634] ? __pfx___trace_uprobe_create+0x10/0x10 [ 184.866713][ T6634] ? __kmalloc_noprof+0x387/0x710 [ 184.866756][ T6634] ? __kmalloc_noprof+0x1a6/0x710 [ 184.866784][ T6634] ? argv_split+0x18d/0x400 [ 184.866816][ T6634] ? argv_split+0x18d/0x400 [ 184.866854][ T6634] ? argv_split+0x378/0x400 [ 184.866897][ T6634] trace_probe_create+0xce/0x130 [ 184.866929][ T6634] ? __pfx___trace_uprobe_create+0x10/0x10 [ 184.866962][ T6634] ? __pfx_trace_probe_create+0x10/0x10 [ 184.866999][ T6634] ? __might_fault+0xaf/0x130 [ 184.867031][ T6634] dyn_event_create+0x59/0x80 [ 184.867055][ T6634] create_or_delete_trace_uprobe+0x65/0xa0 [ 184.867091][ T6634] trace_parse_run_command+0x1f3/0x380 [ 184.867127][ T6634] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 184.867164][ T6634] ? __pfx_probes_write+0x10/0x10 [ 184.867198][ T6634] vfs_write+0x296/0xba0 [ 184.867240][ T6634] ? __pfx_vfs_write+0x10/0x10 [ 184.867274][ T6634] ? __fget_files+0x2a/0x420 [ 184.867308][ T6634] ? __fget_files+0x3a2/0x420 [ 184.867336][ T6634] ? __fget_files+0x2a/0x420 [ 184.867374][ T6634] ksys_write+0x150/0x270 [ 184.867409][ T6634] ? __pfx_ksys_write+0x10/0x10 [ 184.867456][ T6634] do_syscall_64+0x166/0x520 [ 184.867478][ T6634] ? trace_irq_disable+0x3b/0x140 [ 184.867515][ T6634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.867544][ T6634] ? clear_bhb_loop+0x70/0xc0 [ 184.867578][ T6634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.867609][ T6634] RIP: 0033:0x7f5ea439e159 [ 184.867631][ T6634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.867657][ T6634] RSP: 002b:00007f5ea52c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.867683][ T6634] RAX: ffffffffffffffda RBX: 00007f5ea4625fa0 RCX: 00007f5ea439e159 [ 184.867700][ T6634] RDX: 000000000000001c RSI: 00002000000002c0 RDI: 0000000000000004 [ 184.867715][ T6634] RBP: 00007f5ea52c4090 R08: 0000000000000000 R09: 0000000000000000 [ 184.867729][ T6634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.867743][ T6634] R13: 00007f5ea4626038 R14: 00007f5ea4625fa0 R15: 00007ffc24d14488 [ 184.867788][ T6634] [ 184.867993][ T6634] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI [ 185.294639][ T6634] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 185.304709][ T6634] CPU: 0 UID: 0 PID: 6634 Comm: syz.3.238 Not tainted syzkaller #0 PREEMPT(full) [ 185.317743][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.329922][ T6634] RIP: 0010:path_put+0x24/0x60 [ 185.335010][ T6634] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 37 18 79 ff 48 8d 7b 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 40 41 e9 ff 48 8b 7b 08 e8 17 93 03 00 48 [ 185.364372][ T6634] RSP: 0018:ffffc90003ac79c8 EFLAGS: 00010203 [ 185.372510][ T6634] RAX: 0000000000000008 RBX: 000000000000003c RCX: ffff8880274e5dc0 [ 185.384746][ T6634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000044 [ 185.396527][ T6634] RBP: ffffc90003ac7b50 R08: ffffffff9aca9e37 R09: 0000000000000000 [ 185.410872][ T6634] R10: ffffffff9aca9e20 R11: fffffbfff35953c7 R12: fffffffffffffff4 [ 185.421584][ T6634] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 185.434659][ T6634] FS: 00007f5ea52c46c0(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 185.448861][ T6634] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.457850][ T6634] CR2: 00007f5ea4270050 CR3: 000000005e380000 CR4: 00000000003526f0 [ 185.469111][ T6634] Call Trace: [ 185.474501][ T6634] [ 185.478499][ T6634] __trace_uprobe_create+0x53f/0xe40 [ 185.484600][ T6634] ? trace_kmalloc+0x2a/0xf0 [ 185.489552][ T6634] ? __pfx___trace_uprobe_create+0x10/0x10 [ 185.495978][ T6634] ? __kmalloc_noprof+0x387/0x710 [ 185.501628][ T6634] ? __kmalloc_noprof+0x1a6/0x710 [ 185.508280][ T6634] ? argv_split+0x18d/0x400 [ 185.514696][ T6634] ? argv_split+0x18d/0x400 [ 185.521604][ T6634] ? argv_split+0x378/0x400 [ 185.529748][ T6634] trace_probe_create+0xce/0x130 [ 185.537622][ T6634] ? __pfx___trace_uprobe_create+0x10/0x10 [ 185.545004][ T6634] ? __pfx_trace_probe_create+0x10/0x10 [ 185.554473][ T6634] ? __might_fault+0xaf/0x130 [ 185.560601][ T6634] dyn_event_create+0x59/0x80 [ 185.577413][ T6634] create_or_delete_trace_uprobe+0x65/0xa0 [ 185.584250][ T6634] trace_parse_run_command+0x1f3/0x380 [ 185.591534][ T6634] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 185.601433][ T6634] ? __pfx_probes_write+0x10/0x10 [ 185.611876][ T6634] vfs_write+0x296/0xba0 [ 185.617244][ T6634] ? __pfx_vfs_write+0x10/0x10 [ 185.624717][ T6634] ? __fget_files+0x2a/0x420 [ 185.630768][ T6634] ? __fget_files+0x3a2/0x420 [ 185.637216][ T6634] ? __fget_files+0x2a/0x420 [ 185.645517][ T6634] ksys_write+0x150/0x270 [ 185.653718][ T6634] ? __pfx_ksys_write+0x10/0x10 [ 185.659827][ T6634] do_syscall_64+0x166/0x520 [ 185.667580][ T6634] ? trace_irq_disable+0x3b/0x140 [ 185.675377][ T6634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.686292][ T6634] ? clear_bhb_loop+0x70/0xc0 [ 185.694070][ T6634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.702524][ T6634] RIP: 0033:0x7f5ea439e159 [ 185.709687][ T6634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.748209][ T6634] RSP: 002b:00007f5ea52c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 185.761601][ T6634] RAX: ffffffffffffffda RBX: 00007f5ea4625fa0 RCX: 00007f5ea439e159 [ 185.774622][ T6634] RDX: 000000000000001c RSI: 00002000000002c0 RDI: 0000000000000004 [ 185.785359][ T6634] RBP: 00007f5ea52c4090 R08: 0000000000000000 R09: 0000000000000000 [ 185.797543][ T6634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.809291][ T6634] R13: 00007f5ea4626038 R14: 00007f5ea4625fa0 R15: 00007ffc24d14488 [ 185.821332][ T6634] [ 185.825111][ T6634] Modules linked in: [ 185.835549][ T6634] ---[ end trace 0000000000000000 ]--- [ 185.847245][ T6634] RIP: 0010:path_put+0x24/0x60 [ 185.847291][ T6634] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 37 18 79 ff 48 8d 7b 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 40 41 e9 ff 48 8b 7b 08 e8 17 93 03 00 48 [ 185.847312][ T6634] RSP: 0018:ffffc90003ac79c8 EFLAGS: 00010203 [ 185.847335][ T6634] RAX: 0000000000000008 RBX: 000000000000003c RCX: ffff8880274e5dc0 [ 185.847362][ T6634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000044 [ 185.847376][ T6634] RBP: ffffc90003ac7b50 R08: ffffffff9aca9e37 R09: 0000000000000000 [ 185.847392][ T6634] R10: ffffffff9aca9e20 R11: fffffbfff35953c7 R12: fffffffffffffff4 [ 185.847409][ T6634] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 185.847426][ T6634] FS: 00007f5ea52c46c0(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 185.847446][ T6634] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.847462][ T6634] CR2: 00007f5ea43eb840 CR3: 000000005e380000 CR4: 00000000003526f0 [ 185.847486][ T6634] Kernel panic - not syncing: Fatal exception [ 186.004213][ T6634] Kernel Offset: disabled [ 186.009308][ T6634] Rebooting in 86400 seconds..