last executing test programs: 9.905083768s ago: executing program 1 (id=970): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (fail_nth: 2) 9.741729309s ago: executing program 3 (id=972): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44e, 0x120b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xba4e7a40265e5c6b, 0x2c, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @local}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001540)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r3 = syz_usb_connect(0x0, 0x81d, &(0x7f0000000a80)={{0x12, 0x1, 0x300, 0xc2, 0x82, 0xb2, 0x8, 0x1bc7, 0x10c0, 0x8c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80b, 0x3, 0x0, 0x0, 0x80, 0x8, "", [{{0x9, 0x4, 0x0, 0x5, 0x4, 0x24, 0x17, 0x15, 0x0, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "ecd72ce09154"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x2, 0x8, 0x81}, {0x6, 0x24, 0x1a, 0xe, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x2, 0x6}, @obex={0x5, 0x24, 0x15, 0xffff}, @mdlm_detail={0x24, 0x24, 0x13, 0x7, "82a11d980334d2b40f686c39291e182a61f3d48ba31ebbf98ecd45f718046c8d"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x29}, @obex={0x5, 0x24, 0x15, 0xc54e}]}], [{{0x9, 0x5, 0xe, 0x4, 0x20, 0x4, 0xb4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x1ff}, @generic={0xe, 0x6, "cf5110def5b2d1dff618b900"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0xe, 0x3, 0xfb, [@generic={0x6e, 0x2, "715738097e38302646a2a723539f6e26edb7ab4f29bbbb57d29bf72ae95160faedcddd6cf57e005e0a33fedcb4fab5ca7419a78fabaaed0e267924c7d0b6e0d978530454f4b6e124f5482b808f781281decce86d70b89c0e9a81498ca25b62713cdadddadedb9a51235780eb"}, @generic={0xa3, 0x22, "229fbc4a76e84179c62ea4cdb2ac6b9ea6212a5381f9446713d8eb2cbe116eb885fe722515848881829b773e029c29b21481d08e0b25009cc143a0aea69934d189710bdb4959f34541c1c768ea0faeafa050266b90437206c6102ff3d2b387338d780eb33dc7b2b8b9cef3068f1a41c339016b13ed6cbd24566e5593c2a8dd92088789f09b222bbe532acb507f7ed9925e7b704c86549c44ac966bbc851d7679c8"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x5, 0x6, 0x9a, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfe, 0x80}, @generic={0xa2, 0xa, "47efc20f31ebb5b2c044042d937306ab98294597aa9aca3b15adf55ce960b239375cefb971cc7d7026c0946324cbb2c732b5abf56ef3f01943d10b42b4f4231b7fd882c2219f9679b58b1a32c5c95df310bb907fac03e3340d3c30bd55fa8f49360ab0622d34478ef4cb130d09e4d0794bf6bae0303bd83cf8bd1bd5ee21743fadfd685bb27beae5811471a1842bf344268ad23f4cbd28335f5fb2e190800a2d"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x88, 0x3, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x8}]}}]}}, {{0x9, 0x4, 0x7, 0xfa, 0x8, 0x46, 0x86, 0xaf, 0x7, [@uac_as={[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xc, 0x9, 0x5, "1ee95d7f45"}]}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "e770bdfe"}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x9, 0x0, 0x3}, [@country_functional={0x12, 0x24, 0x7, 0x4, 0x6, [0x3, 0x80, 0x4, 0x0, 0x8001, 0x100]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xcb}, @mbim_extended={0x8, 0x24, 0x1c, 0x81, 0x9, 0x8001}]}], [{{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x0, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x8001}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x7, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x1ff}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x0, 0x7, 0x8, [@generic={0x9a, 0xe, "cd73ff374989661781fe60b7254e01804061ac8ef8fde2dda0db0db3ed9bb19c179f797945875a3238c87a9c3b4ee2e20707138b68d60a99b0bc72f4baa306ee44807217aa7da46eba53139ffb8de8992ef4a0fa2e55aae8e1bd1ddbfbafebe65af9340796c1fde1a7117fb5f57024eacab945b0d24010493957b3d23e2eb53953d1e77382ef52867d81d3e6bac2fb9970f6539202292b40"}, @generic={0x6, 0x24, "f0401256"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0x2d, 0x9, 0x5, [@generic={0xdc, 0x31, "6d326f4bdc2b61419b3ed615a80db78c614cd9f2109b3b57e62b5a87192cd8e137b8edcc4f5ffbfc879af04a3b6021c4d53d3e9f0bbe1e2fbd18e7268f5c80558fb753b6bc0408f26f2d6456572593e854c4925858f7ce18b825b6be881425a7fb405cc007c2150d17ed9cef5783790248040ddf8703456c3531e4bdf3bbee51edca8437f116b8a96e9aedb3088384ec32c81d88c8d13e3c63fad51eaccecbb733702dd79a9cf022024859f9516bf8a6ab6fe59c3177817bec1ca755bf32a1544e371c3c9fc6ca1a0aff7a7bed5a6d156b37b9ad006f0e9244da"}, @generic={0x49, 0x5, "b708ba0820cf74dfcc6deee35e6cbd6dedcd17025f3a99165dc2b4ff2ce35a7e7ab3a8750582cec3dc7c38a7e03d72290c821655e224d8f43dd62b86dee28ddc2813398784bcb3"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0x5, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x1}]}}, {{0x9, 0x5, 0x4, 0x3, 0x0, 0x8, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x1}]}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x5a, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x8}]}}, {{0x9, 0x5, 0xd, 0xc, 0x20, 0x1, 0x9, 0x79, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0xd84c}]}}]}}, {{0x9, 0x4, 0xf0, 0x9, 0x9, 0xff, 0xff, 0xff, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x1c}, [@selector_unit={0x8, 0x24, 0x5, 0x2, 0xff, "7b3cf8"}, @mixer_unit={0xa, 0x24, 0x4, 0x6, 0x7, "20d096cbd3"}]}], [{{0x9, 0x5, 0x82, 0x0, 0x258, 0x5, 0x7b, 0x2e, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x9}, @generic={0xf8, 0x22, "301d4ea420cf04c7e347c23fa9c88c43f6004aa631b9134ef13d0abc4addee2eed9fc1e3e69c3214f393865284d7778802f3f7bd9817e0bc34855cf34384597bd322256f2f7bfa4082bf7a5bc7881c600181925a1fa81a4c1651889292828204cda1af9d4803034bf1972dce2d2f6249a974cdfbefe46312729bcdef38e84bb18664f29a1a3a2c1cea0368a4336a1dfeeef69d2d2f52e3ad0fb422c1eeb35934121dbb7baa53222146609b7aac97d3d98be92e63daa5b9e26d800f02c86c4c6ad983b51e5140d68e37d5a63c64387ed0049f009c180942d54a97be4351adea1d0619519a45ac5900cee7bff8ec42253ef497617ddc3b"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x20, 0x8, 0xc, 0x3, [@generic={0xa2, 0x22, "0b5bfbc72e843f206db14eee25bce2b94fb2c2f1dd3a62968912d465db7ed80fca0f82435160ae62d2a1b6579c5c0637c8e31913ca6617ce7cba5a83ac23e1e0fd9405a86b725e8c79f53385470afbd77e0cae2d0ab21ebebe181f6c06a0713e5bc640b35dd95d724d53bf25ed8fd548bee311ecf3b4abc0e97c7ff86b64681e4382ecb4b4e49c4bdce01463be757a474f59dbbfba8fe42c05f72592433b36cb"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xcc5}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x2, 0x6, 0x8, [@generic={0x90, 0xd, "80491f410f67baa542ec065f2e33281f1218cda05fc42d2c501769e45104b5e4c0ea55b611c4151c77b767bcc28cac60b4b921aa83e75d6274d1ad91482c54e8167055d224cccfff3b3086b6d49a3895ad96bb74015f662024bee7088cc12eedcb0e11f98079f936a14b28bb588b3e778e211f97351c20db2988730629a23d3ecd34ae685fd62027ed9895fb39e2"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x81, 0xa6, 0x6f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xfffc}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xe}]}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0xe, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8000}]}}, {{0x9, 0x5, 0x5, 0x3, 0x40, 0xdf, 0x81, 0x87, [@generic={0x33, 0x11, "d209f9d76561077e510d542f3ac7e3665d4e459e9269c81198328a254a8484756bb7a7f829076fa595018d5ceb766615ac"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x1, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x401}]}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0x95, 0x35, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x63, 0x1}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x3, 0xa2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x23, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5e, 0x100}]}}]}}]}}]}}, &(0x7f00000014c0)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x201, 0x0, 0x81, 0x20, 0xff, 0x7}, 0x19, &(0x7f0000001300)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "ebe82721aa22c081d66ed5db36be44d3"}]}, 0x2, [{0x49, &(0x7f0000001340)=@string={0x49, 0x3, "3077dd2ebb5ce6c47cfeb06042f0efb4439cc4a51ba801b3f36088c7b3a53da4723474398f2c5ac53cc375c3d7ddf2274db95985ec3f8012867469d38ca9c210d38b4f628b0a1d"}}, {0xfc, &(0x7f00000013c0)=@string={0xfc, 0x3, "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"}}]}) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000100)={0x0, 0x22, 0x56, {0x56, 0x6, "b1f0a1dfe787ece5baf1e6fe7d51b4e9fdcec7fb766f9b52f8e6adb4dc6bb8f7c463acfd451e2eb91fcb5379edcd91d48f26df98cbaf1ee04a9d806089c1c19310e28232fe5505603b1f1400d58ae18e9d298b66"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, &(0x7f0000000940)={0x0, 0xf, 0x106, {0x5, 0xf, 0x106, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x7, 0x1e01e, 0xfffe, [0x30, 0xf, 0xff00c0, 0x3f0f]}, @generic={0x9a, 0x10, 0xa, "fc262dfc04e5ca99e5bb320cc3f9600e71797bfde211145b02fba66d8c9d909c90bac2364db39f57f4f3f55e3884dfe95ebda5b08203ef1a0ee8db979a3086bf83eee611e320a19b554fe073b1dd0e72f45abab1d86a00a4acd7114e70eeedc1dd72c7f3daee51f53336ee09bbf314bc2a775f422478d083b6cbb6b00274bc17b5fa65311db38135ac75266a46de749a6a92e38b22711b"}, @ss_container_id={0x14, 0x10, 0x4, 0x51, "fb7091f1a8f314ee5631a18c37201e4b"}, @generic={0x37, 0x10, 0x3, "f524360bf55ae4ceb02308073d43707e74648413325455f428213c5e6c8b3de13cc12b0ac4bc2468eb5b7a7e17f15d55aa7d23f9"}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x77, 0x10, 0xcc, 0xf, "58ae875f", "183cad61"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x4, 0x7, 0x6, 0x3, 0x3}}}, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x20, 0xf, 0x74, "60863219f3c93bfc0562d23ca21bee6535353801107f1c7b86efbb02b9806e46f93dcd91d38206ef5169009808aa39977682b6bf90c3271168f84381d4aec400ad90355daac9b081a0fd9fb273b46fc5b7c53893898e5374452d56c8dedb896d840ba534a60d012b86a415328365e5d2c3592182"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xd7}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x2, 0xd4}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x40}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000640)={0x40, 0xb, 0x2, "c90a"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x68c2}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @random="8e4cea5d5335"}, &(0x7f0000000740)={0x40, 0x19, 0x2, "1e40"}, &(0x7f0000000080)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000800)={0x40, 0x1e, 0x1}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x7}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r5, 0x1, 0x270bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x21}, 0x44010) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 8.326124694s ago: executing program 1 (id=978): socket(0x2, 0x3, 0x67) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da20"], 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 6.700040864s ago: executing program 1 (id=980): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="200a02000000"], 0x0, 0x0}) 6.1286082s ago: executing program 3 (id=981): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x4da000) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000100)={0x2000000, 0x2}) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES16], 0x0) 4.719182089s ago: executing program 1 (id=986): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000000000000000000000000000000900000008000000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000000700000000000000fcffffffffffffff00000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000200000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000440)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, &(0x7f00000005c0)="0e04", 0x2) (fail_nth: 2) 4.610205007s ago: executing program 3 (id=987): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)="3c6b65726e656c3e202f6e5c2a5f646f013df0acaa2ca2074c9341f853bc1d6d61696e0a", 0x24) r1 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x7f, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, &(0x7f0000000580)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="2021085b912efca04f7b265756675bc14206662b1034f7d8e584484debb1fd0483e11d15d1b2e8d6037034ab0213d749e4ea9696a23ed4e9a2775289cee1cba8ab4df6f5da403c"], 0x0}, 0x0) 4.373330395s ago: executing program 1 (id=989): socket(0x2, 0x3, 0x67) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da20"], 0x0) 4.209955099s ago: executing program 0 (id=990): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0xfffffffd, 0x0, @loopback, @rand_addr=' \x01\x00', 0x8, 0x1, 0x9, 0x20000000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x1000002}}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x362c, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1"], 0x0}, 0x0) 3.255232151s ago: executing program 2 (id=991): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)) syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x83c1) 2.855579287s ago: executing program 2 (id=992): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) read$alg(r5, &(0x7f0000000ac0)=""/128, 0x80) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x24, r6, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x2}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000880)={0x0, 0xffffffffffffff8c, &(0x7f00000008c0)={&(0x7f0000000900)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r1, 0xf04, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x33}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x2c, r1, 0x5, 0x70bd2d, 0x0, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3b}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0000b02f789df3689ee67f7de1590b018b70d6045c4c81538974f71ab6d4bb990c000000", @ANYRES16=r10, @ANYBLOB="01032abd7000fddbdf25080000004c0005801c00028008000200840e000008000100090000000800020008000000080001007564700024000280080004000200000008000100200000000800020004000000080001001d000000300004800400010062726f6164636173742d6c696e6b00000900010073797a30000000000c00078008000300ff7f0000"], 0x90}, 0x1, 0x0, 0x0, 0xc040}, 0x40008d0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x4c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040805}, 0x2080) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x11c, r10, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x74d}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc79d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4044}, 0x10) 2.689207072s ago: executing program 1 (id=993): syz_usb_connect(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x0) 2.359106141s ago: executing program 3 (id=994): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x83c1) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x31384142, 0x500, 0x4, 0x2, @discrete={0x8, 0x2}}) 2.358889637s ago: executing program 2 (id=995): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="200a02000000"], 0x0, 0x0}) 2.269561087s ago: executing program 3 (id=996): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='jffs2\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc/sys/net/ipv4/ping_group_range/file0\x00', 0x122) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0xc) chdir(&(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) clock_nanosleep(0x2, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xfffffee2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file5\x00', 0x86c0, 0x101) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, r2, 0x0) symlinkat(&(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00') setuid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file7/file0\x00', 0x0) symlinkat(&(0x7f0000000400)='.\x00', 0xffffffffffffff9c, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x77359400}, {0x77359400}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb-serial/devices/ttyUSB0/vcc_mode\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='3', 0x1) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000580)) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000b00)={{0xa, 0x4e21, 0x8, @local, 0x6}, {0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}, 0x3, {[0x4, 0x56, 0x10000, 0x1, 0x2, 0x2, 0x3, 0x4]}}, 0x5c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xffffff, 0x100000}, 0x10) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a005f0214f9f407000904ff80000000fe000000000a0000", 0x1c) 2.243209557s ago: executing program 0 (id=997): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x83c1) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x31384142, 0x500, 0x4, 0x2, @discrete={0x8, 0x2}}) (fail_nth: 2) 1.817892119s ago: executing program 0 (id=998): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./mnt\x00', &(0x7f0000000380)='overlay\x00', 0x0, &(0x7f00000003c0)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') mount(0x0, &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480)='overlay\x00', 0x0, &(0x7f0000000840)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8200002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone3(&(0x7f00000000c0)={0x100081100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000540)={0x2, 0x0, @ioapic={0xfec00000, 0x9, 0x10004, 0xfffffffe, 0x0, [{0x2, 0xf4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x42, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x9, 0xf5, '\x00', 0xf}, {0xc, 0x5, 0x6, '\x00', 0xf9}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7a}, {0x3, 0x6, 0xc, '\x00', 0x1}, {0x7f, 0x5, 0xb, '\x00', 0x8b}, {0xbc, 0xd, 0xa, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe}, {0xfe, 0x7, 0x26}, {0xcf, 0x4, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0x7}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0xeb, 0xc, 0x5, '\x00', 0xfd}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x2, 0x6, '\x00', 0x10}, {0xd, 0x23, 0xf1, '\x00', 0x4}, {0x0, 0x6, 0x1, '\x00', 0x1}]}}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000780)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) syz_kvm_add_vcpu$x86(r2, &(0x7f00000007c0)={0x0, &(0x7f0000000800)=[@nested_amd_stgi={0x17e, 0x10}], 0x10}) 1.451254833s ago: executing program 3 (id=999): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000880)=ANY=[@ANYBLOB='stack :://'], 0xf4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6e65772064656661756c7420747275737465643a73797a060056d2f02b5c5fee30303030303030300600000015d2acd4220a778fe06dc0ea46ebe83f44ee615cbba2068a9b9714a0f068c7c51c34252b78fa87b2460764a9220853b58d6bd426d8509e68d0dcbd53854be0742403ca90831483ec5b4bf5d0e9467c0bd33b37b874af5ccf57"], 0x2d, 0x0) r3 = add_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240), &(0x7f0000000280), 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f00000008c0)=""/99, 0xfffffffffffffe87) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/4, 0x4}], 0x3bc, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r5, 0xf, &(0x7f0000000740)={0x2}) sendmmsg$unix(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="11", 0x1}], 0x1}}], 0x1, 0x40015) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @link_local}) r6 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a41535900002000000010902270001010080fa0904000003ff000000070502020002"], 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x121280, 0x0) ioctl$TUNSETNOCSUM(r7, 0x400454c8, 0x1) r8 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14, 0x80800) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="030101005eb703002f0b00000f0000000000000000000000000000bcb1770635d1cc24d2a91760caa9e2af24a8c272f29ea72ecd441cdadcfd2a3656e1029ebe04b46c707808aea1c889148dee21c0eaacd8892c4811d6b1ef35388a4b08e8476443bf6c74342f29b3bc274b772f490d6a3ab483ee917d43b6c1cdf39692e07cef6e7aeeff938cff9bdc1f1048dc69e14e4ea30b7a552fb64f09bfba1b402a3342953089dd353c4b1b3cee27ce662fead1e1f2674cdf999ae3b8bfd0baf7d7ed9e3be5afa400"], 0xc6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'erspan0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x8000, 0x700, 0x5e, 0x10000, {{0x22, 0x4, 0x3, 0x0, 0x88, 0x67, 0x0, 0x6e, 0x2b, 0x0, @multicast1, @empty, {[@end, @ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x94, 0x1, 0x9, [{@remote, 0x1d}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4}, {@multicast1, 0xb3a}]}, @generic={0x88, 0x5, "4b9a83"}, @timestamp={0x44, 0x28, 0x9c, 0x0, 0xe, [0xb45, 0x56bd, 0xf5, 0x2, 0x9, 0x6, 0x7, 0x81, 0x200]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0xf0, 0x0, 0x2, [0xfffffffa, 0x5552, 0x0, 0x371e, 0xfffffeff]}]}}}}}) connect$packet(r8, &(0x7f00000005c0)={0x11, 0x1a, r9, 0x1, 0xf, 0x6, @random="db1001fc6e1c"}, 0x14) syz_usb_ep_read(r6, 0x2, 0x40, &(0x7f0000000040)) r10 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname(r10, &(0x7f0000000400)=@x25, &(0x7f0000000480)=0x80) 1.249828919s ago: executing program 0 (id=1000): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/rpc\x00') r1 = openat(r0, &(0x7f0000000480)='nfsd.fh/channel\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000d00)='l', 0x1) 1.010658197s ago: executing program 0 (id=1001): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000080)="3e0fc75b06c4c241cffdf30f2c58d5f332310f01c40f01c466b98008000066b8785f000066ba000000000f300f3066b9800000c00f326635001000000f30ba200066b8c000000066ef", 0x49}], 0x1, 0x3, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f00000003c0)={0x77359400}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000400)=0x7) fcntl$lock(r2, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x7ffffffffffffffc, 0x101, r3}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x4001}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000640)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000680)={'syzkaller0\x00', 0x1}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x6, 0x5}, &(0x7f0000000500)=0x90) getsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r2, 0x84, 0x80, &(0x7f0000000540)={r6, 0xc}, &(0x7f0000000580)=0x8) connect$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @host}, 0x10) r7 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/features/oneway_spam_detection\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000100)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000108bd7000fbdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000700000080000000050019010700000008009f00070000000800220141010000080026006c090000080027000300000008009f0001000000"], 0x58}, 0x1, 0x0, 0x0, 0x44801}, 0x20040830) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="8025000041000701fefffffffeffffff017c0000040042800c00018006000600800a00005a250280bc131480b6130d"], 0x2580}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) 558.103626ms ago: executing program 2 (id=1002): socket(0x2, 0x3, 0x67) 354.181957ms ago: executing program 2 (id=1003): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/rpc\x00') r1 = openat(r0, &(0x7f0000000480)='nfsd.fh/channel\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000d00)='l', 0x1) (fail_nth: 2) 353.934312ms ago: executing program 0 (id=1004): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000100)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) listen(0xffffffffffffffff, 0x10040) r2 = fsopen(&(0x7f00000001c0)='cgroup2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0xa00800, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0xf6) setresuid(0x0, 0xee01, 0x0) openat$cgroup_ro(r3, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x8, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) madvise(&(0x7f00009d0000/0x2000)=nil, 0x2000, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 0s ago: executing program 2 (id=1005): r0 = creat(&(0x7f0000000380)='./file0/file0\x00', 0x188) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc}) (async) r1 = socket$inet(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) (async) listen(r1, 0x5) (async, rerun: 64) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', r4, 0x29, 0x4, 0x4, 0xcbf, 0x21, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x20, 0x8, 0x101, 0x7}}) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000400)={0x2, 0xc, "d72fafbeb3913a5826c2539b"}, &(0x7f0000000440)=0x14) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000480)={r6, 0x1}, 0x8) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000300)={'syztnl2\x00', r5, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) (async) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f00000004c0)={0x1, 0x0, {0xffff, 0x7, 0x3002, 0x8, 0x0, 0x8, 0x2, 0x7}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) (async) mount$nfs(&(0x7f0000000080)='127.:.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) kernel console output (not intermixed with test programs): 86.187835][ T8094] FAULT_INJECTION: forcing a failure. [ 286.187835][ T8094] name failslab, interval 1, probability 0, space 0, times 0 [ 286.187886][ T8094] CPU: 0 UID: 0 PID: 8094 Comm: syz.2.800 Not tainted syzkaller #0 PREEMPT(full) [ 286.187909][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 286.187922][ T8094] Call Trace: [ 286.187930][ T8094] [ 286.187938][ T8094] dump_stack_lvl+0xe8/0x150 [ 286.187967][ T8094] should_fail_ex+0x3eb/0x540 [ 286.188007][ T8094] should_failslab+0xa8/0x100 [ 286.188031][ T8094] __kmalloc_noprof+0xf9/0x710 [ 286.188062][ T8094] ? tomoyo_encode+0x2ad/0x570 [ 286.188082][ T8094] ? tomoyo_encode+0x2ad/0x570 [ 286.188122][ T8094] tomoyo_encode+0x2ad/0x570 [ 286.188149][ T8094] tomoyo_realpath_from_path+0x5fa/0x640 [ 286.188179][ T8094] ? tomoyo_path_number_perm+0x219/0x5f0 [ 286.188210][ T8094] tomoyo_path_number_perm+0x246/0x5f0 [ 286.188240][ T8094] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 286.188266][ T8094] ? __lock_acquire+0x747/0x2de0 [ 286.188320][ T8094] ? __fget_files+0x2a/0x420 [ 286.188355][ T8094] ? __fget_files+0x2a/0x420 [ 286.188388][ T8094] ? __fget_files+0x2a/0x420 [ 286.188423][ T8094] security_file_ioctl+0xc3/0x2a0 [ 286.188454][ T8094] __se_sys_ioctl+0x47/0x170 [ 286.188486][ T8094] do_syscall_64+0x166/0x520 [ 286.188520][ T8094] ? trace_irq_disable+0x3b/0x140 [ 286.188544][ T8094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.188568][ T8094] ? clear_bhb_loop+0x70/0xc0 [ 286.188596][ T8094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.188620][ T8094] RIP: 0033:0x7fed00d9f559 [ 286.188643][ T8094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.188662][ T8094] RSP: 002b:00007fed01c17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.188685][ T8094] RAX: ffffffffffffffda RBX: 00007fed01026090 RCX: 00007fed00d9f559 [ 286.188703][ T8094] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 286.188717][ T8094] RBP: 00007fed01c17090 R08: 0000000000000000 R09: 0000000000000000 [ 286.188731][ T8094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.188743][ T8094] R13: 00007fed01026128 R14: 00007fed01026090 R15: 00007fff3d2e9528 [ 286.188779][ T8094] [ 286.188913][ T8094] ERROR: Out of memory at tomoyo_realpath_from_path. [ 286.263078][ T127] usb 1-1: Using ep0 maxpacket: 32 [ 286.274256][ T127] usb 1-1: New USB device found: idVendor=12d6, idProduct=0444, bcdDevice=c6.e0 [ 286.285872][ C0] net_ratelimit: 58 callbacks suppressed [ 286.484826][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.484849][ T127] usb 1-1: Product: syz [ 286.484865][ T127] usb 1-1: Manufacturer: syz [ 286.484883][ T127] usb 1-1: SerialNumber: syz [ 286.499319][ T5733] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 286.698056][ T5733] usb 4-1: unable to get BOS descriptor or descriptor too short [ 286.698105][ T5733] usb 4-1: New USB device found: idVendor=09c4, idProduct=0011, bcdDevice=6.38 [ 286.700561][ T5733] usb 4-1: config 114 has an invalid interface number: 240 but max is 0 [ 286.700587][ T5733] usb 4-1: config 114 has no interface number 0 [ 286.700704][ T5733] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 286.700732][ T5733] usb 4-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 286.700760][ T5733] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 286.700785][ T5733] usb 4-1: config 114 interface 240 has no altsetting 0 [ 286.746151][ T5746] ems_usb 3-1:91.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 286.746567][ T5746] ems_usb 3-1:91.0: probe with driver ems_usb failed with error -22 [ 286.826606][ T5746] usb 3-1: USB disconnect, device number 66 [ 286.856012][ T5733] usb 4-1: string descriptor 0 read error: -22 [ 286.856208][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.895633][ T8093] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 286.896237][ T8093] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 286.922442][ T5733] ir_usb 4-1:114.240: IR Dongle converter detected [ 287.150371][ T5733] usb 4-1: IRDA class descriptor not found, device not bound [ 287.233498][ T127] ems_usb 1-1:91.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 287.234065][ T127] ems_usb 1-1:91.0: probe with driver ems_usb failed with error -22 [ 287.267156][ T127] usb 1-1: USB disconnect, device number 64 [ 287.355579][ T5733] usb 4-1: USB disconnect, device number 83 [ 287.567017][ T5733] usb 2-1: USB disconnect, device number 76 [ 287.567269][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 287.935613][ T8101] binder: Write failure EINVAL in pid:500 [ 288.031723][ T8109] jffs2: notice: (8109) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 288.180870][ T5782] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 288.334233][ T5782] usb 1-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 288.335949][ T5782] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 288.335989][ T5782] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 288.373272][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.373295][ T5782] usb 1-1: Product: syz [ 288.373312][ T5782] usb 1-1: Manufacturer: syz [ 288.373329][ T5782] usb 1-1: SerialNumber: syz [ 288.501761][ T1226] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 288.631367][ T5782] usb 1-1: Cannot retrieve CPort count: -32 [ 288.631414][ T5782] usb 1-1: Cannot retrieve CPort count: -32 [ 288.631442][ T5782] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -32 [ 288.653316][ T1226] usb 2-1: Using ep0 maxpacket: 16 [ 288.668980][ T5782] usb 1-1: USB disconnect, device number 65 [ 288.669416][ T1226] usb 2-1: New USB device found: idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 288.671084][ T5746] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 288.698562][ T1226] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 288.698598][ T1226] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 288.698618][ T1226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 288.698637][ T1226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 288.723748][ T1226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.723771][ T1226] usb 2-1: Product: syz [ 288.723789][ T1226] usb 2-1: Manufacturer: syz [ 288.723805][ T1226] usb 2-1: SerialNumber: syz [ 288.779321][ T1226] usb 2-1: config 0 descriptor?? [ 288.821673][ T5746] usb 4-1: Using ep0 maxpacket: 32 [ 288.826125][ T5746] usb 4-1: New USB device found: idVendor=12d6, idProduct=0444, bcdDevice=c6.e0 [ 288.848548][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.848572][ T5746] usb 4-1: Product: syz [ 288.848589][ T5746] usb 4-1: Manufacturer: syz [ 288.848606][ T5746] usb 4-1: SerialNumber: syz [ 288.870926][ T5733] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 289.021429][ T1226] appledisplay 2-1:0.0: Error while getting initial brightness: -71 [ 289.032957][ T1226] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -71 [ 289.052201][ T1226] usb 2-1: USB disconnect, device number 77 [ 289.075029][ T5733] usb 3-1: unable to get BOS descriptor or descriptor too short [ 289.075104][ T5733] usb 3-1: New USB device found: idVendor=09c4, idProduct=0011, bcdDevice=6.38 [ 289.077324][ T5733] usb 3-1: config 114 has an invalid interface number: 240 but max is 0 [ 289.077349][ T5733] usb 3-1: config 114 has no interface number 0 [ 289.077392][ T5733] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 289.077420][ T5733] usb 3-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 289.077448][ T5733] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 289.077474][ T5733] usb 3-1: config 114 interface 240 has no altsetting 0 [ 289.161089][ T5733] usb 3-1: string descriptor 0 read error: -22 [ 289.161275][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.169458][ T8129] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 289.169638][ T8129] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 289.203084][ T5733] ir_usb 3-1:114.240: IR Dongle converter detected [ 289.348149][ T5746] ems_usb 4-1:91.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 289.348497][ T5746] ems_usb 4-1:91.0: probe with driver ems_usb failed with error -22 [ 289.376573][ T5746] usb 4-1: USB disconnect, device number 84 [ 289.419030][ T5733] usb 3-1: IRDA class descriptor not found, device not bound [ 289.627880][ T5733] usb 3-1: USB disconnect, device number 67 [ 289.738119][ T8136] binder: Write failure EINVAL in pid:506 [ 289.863848][ T5746] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 289.913784][ T8142] FAULT_INJECTION: forcing a failure. [ 289.913784][ T8142] name failslab, interval 1, probability 0, space 0, times 0 [ 289.913809][ T8142] CPU: 0 UID: 0 PID: 8142 Comm: syz.3.818 Not tainted syzkaller #0 PREEMPT(full) [ 289.913827][ T8142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 289.913837][ T8142] Call Trace: [ 289.913844][ T8142] [ 289.913851][ T8142] dump_stack_lvl+0xe8/0x150 [ 289.913885][ T8142] should_fail_ex+0x3eb/0x540 [ 289.913915][ T8142] should_failslab+0xa8/0x100 [ 289.913936][ T8142] __kmalloc_noprof+0xf9/0x710 [ 289.913962][ T8142] ? tomoyo_encode+0x2ad/0x570 [ 289.913978][ T8142] ? tomoyo_encode+0x2ad/0x570 [ 289.914000][ T8142] tomoyo_encode+0x2ad/0x570 [ 289.914021][ T8142] tomoyo_realpath_from_path+0x5fa/0x640 [ 289.914047][ T8142] ? tomoyo_path_number_perm+0x219/0x5f0 [ 289.914071][ T8142] tomoyo_path_number_perm+0x246/0x5f0 [ 289.914098][ T8142] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 289.914121][ T8142] ? __lock_acquire+0x747/0x2de0 [ 289.914165][ T8142] ? __fget_files+0x2a/0x420 [ 289.914193][ T8142] ? __fget_files+0x2a/0x420 [ 289.914219][ T8142] ? __fget_files+0x2a/0x420 [ 289.914247][ T8142] security_file_ioctl+0xc3/0x2a0 [ 289.914271][ T8142] __se_sys_ioctl+0x47/0x170 [ 289.914291][ T8142] do_syscall_64+0x166/0x520 [ 289.914310][ T8142] ? trace_irq_disable+0x3b/0x140 [ 289.914327][ T8142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.914344][ T8142] ? clear_bhb_loop+0x70/0xc0 [ 289.914363][ T8142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.914380][ T8142] RIP: 0033:0x7fb51679f559 [ 289.914397][ T8142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.914410][ T8142] RSP: 002b:00007fb51758d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.914427][ T8142] RAX: ffffffffffffffda RBX: 00007fb516a25fa0 RCX: 00007fb51679f559 [ 289.914439][ T8142] RDX: 00002000000001c0 RSI: 00000000c034564b RDI: 0000000000000003 [ 289.914449][ T8142] RBP: 00007fb51758d090 R08: 0000000000000000 R09: 0000000000000000 [ 289.914459][ T8142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.914469][ T8142] R13: 00007fb516a26038 R14: 00007fb516a25fa0 R15: 00007ffc47381448 [ 289.914493][ T8142] [ 289.914508][ T8142] ERROR: Out of memory at tomoyo_realpath_from_path. [ 290.052380][ T5746] usb 1-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 290.079284][ T5746] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 290.079356][ T5746] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 290.103220][ T5746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.103276][ T5746] usb 1-1: Product: syz [ 290.103321][ T5746] usb 1-1: Manufacturer: syz [ 290.103365][ T5746] usb 1-1: SerialNumber: syz [ 290.140890][ T5733] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 290.284275][ T8146] jffs2: notice: (8146) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 290.310933][ T5733] usb 2-1: Using ep0 maxpacket: 32 [ 290.311882][ T5733] usb 2-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c [ 290.313424][ T5733] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 290.318648][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.318698][ T5733] usb 2-1: Product: syz [ 290.318715][ T5733] usb 2-1: Manufacturer: syz [ 290.318732][ T5733] usb 2-1: SerialNumber: syz [ 290.337372][ T5733] usb 2-1: config 0 descriptor?? [ 290.341270][ T8140] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 290.365808][ T5733] hub 2-1:0.0: bad descriptor, ignoring hub [ 290.371963][ T5733] hub 2-1:0.0: probe with driver hub failed with error -5 [ 290.413718][ T5733] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input29 [ 290.439503][ T5746] usb 1-1: Cannot retrieve CPort count: -32 [ 290.439548][ T5746] usb 1-1: Cannot retrieve CPort count: -32 [ 290.439574][ T5746] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -32 [ 290.503707][ T5746] usb 1-1: USB disconnect, device number 66 [ 291.362047][ T1226] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 291.400981][ C0] net_ratelimit: 60 callbacks suppressed [ 291.514502][ T1226] usb 3-1: Using ep0 maxpacket: 16 [ 291.516755][ T1226] usb 3-1: New USB device found: idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 291.520773][ T1226] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 291.520822][ T1226] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 291.521734][ T1226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 291.521772][ T1226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 291.528688][ T1226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.528757][ T1226] usb 3-1: Product: syz [ 291.528820][ T1226] usb 3-1: Manufacturer: syz [ 291.528863][ T1226] usb 3-1: SerialNumber: syz [ 291.562931][ T1226] usb 3-1: config 0 descriptor?? [ 291.779663][ T8167] new mount options do not match the existing superblock, will be ignored [ 291.840246][ T1226] appledisplay 3-1:0.0: Error while getting initial brightness: -71 [ 291.877608][ T1226] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -71 [ 291.927584][ T1226] usb 3-1: USB disconnect, device number 68 [ 291.944946][ T8169] new mount options do not match the existing superblock, will be ignored [ 292.100760][ T5346] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 292.149500][ T8173] jffs2: notice: (8173) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 292.256069][ T5346] usb 4-1: unable to get BOS descriptor or descriptor too short [ 292.256118][ T5346] usb 4-1: New USB device found: idVendor=09c4, idProduct=0011, bcdDevice=6.38 [ 292.258490][ T5346] usb 4-1: config 114 has an invalid interface number: 240 but max is 0 [ 292.258517][ T5346] usb 4-1: config 114 has no interface number 0 [ 292.258560][ T5346] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 292.258589][ T5346] usb 4-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 292.258617][ T5346] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 292.258645][ T5346] usb 4-1: config 114 interface 240 has no altsetting 0 [ 292.343684][ T5346] usb 4-1: string descriptor 0 read error: -22 [ 292.343845][ T5346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.351047][ T8168] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 292.351168][ T8168] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 292.387014][ T5346] ir_usb 4-1:114.240: IR Dongle converter detected [ 292.599883][ T5346] usb 4-1: IRDA class descriptor not found, device not bound [ 292.799982][ T5346] usb 2-1: USB disconnect, device number 78 [ 292.800136][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 292.839871][ T5746] usb 4-1: USB disconnect, device number 85 [ 293.205926][ T8190] FAULT_INJECTION: forcing a failure. [ 293.205926][ T8190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.205960][ T8190] CPU: 1 UID: 0 PID: 8190 Comm: syz.2.835 Not tainted syzkaller #0 PREEMPT(full) [ 293.205986][ T8190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 293.206001][ T8190] Call Trace: [ 293.206010][ T8190] [ 293.206021][ T8190] dump_stack_lvl+0xe8/0x150 [ 293.206069][ T8190] should_fail_ex+0x3eb/0x540 [ 293.206112][ T8190] _copy_from_user+0x2d/0xb0 [ 293.206136][ T8190] do_ipv6_mcast_group_source+0x24a/0x4c0 [ 293.206180][ T8190] ? __pfx_do_ipv6_mcast_group_source+0x10/0x10 [ 293.206227][ T8190] ? look_up_lock_class+0x57/0x110 [ 293.206257][ T8190] ? register_lock_class+0x31/0x2e0 [ 293.206285][ T8190] ? __lock_acquire+0x747/0x2de0 [ 293.206352][ T8190] ? do_ipv6_setsockopt+0x956/0x2960 [ 293.206392][ T8190] ? __local_bh_enable_ip+0xd6/0x140 [ 293.206423][ T8190] do_ipv6_setsockopt+0x17a7/0x2960 [ 293.206466][ T8190] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 293.206499][ T8190] ? aa_inet_opt_perm+0x94d/0xcd0 [ 293.206522][ T8190] ? get_pid_task+0x20/0x1f0 [ 293.206565][ T8190] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 293.206606][ T8190] ? ksys_write+0x1e6/0x270 [ 293.206640][ T8190] ? lock_acquire+0x115/0x350 [ 293.206675][ T8190] ? aa_sock_opt_perm+0xe1/0x1e0 [ 293.206712][ T8190] ipv6_setsockopt+0x59/0x170 [ 293.206747][ T8190] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 293.206792][ T8190] do_sock_setsockopt+0x17c/0x1b0 [ 293.206825][ T8190] __x64_sys_setsockopt+0x13d/0x1b0 [ 293.206877][ T8190] do_syscall_64+0x166/0x520 [ 293.206906][ T8190] ? trace_irq_disable+0x3b/0x140 [ 293.206931][ T8190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.206959][ T8190] ? clear_bhb_loop+0x70/0xc0 [ 293.206989][ T8190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.207020][ T8190] RIP: 0033:0x7fed00d9f559 [ 293.207043][ T8190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.207064][ T8190] RSP: 002b:00007fed01c38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 293.207088][ T8190] RAX: ffffffffffffffda RBX: 00007fed01025fa0 RCX: 00007fed00d9f559 [ 293.207105][ T8190] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000004 [ 293.207119][ T8190] RBP: 00007fed01c38090 R08: 0000000000000108 R09: 0000000000000000 [ 293.207134][ T8190] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 293.207148][ T8190] R13: 00007fed01026038 R14: 00007fed01025fa0 R15: 00007fff3d2e9528 [ 293.207186][ T8190] [ 293.433267][ T5346] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 293.604336][ T5346] usb 1-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 293.606422][ T5346] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 293.606449][ T5346] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 293.643729][ T5346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.643752][ T5346] usb 1-1: Product: syz [ 293.643769][ T5346] usb 1-1: Manufacturer: syz [ 293.643784][ T5346] usb 1-1: SerialNumber: syz [ 293.732525][ T8198] syz.2.839 (8198): attempted to duplicate a private mapping with mremap. This is not supported. [ 293.810966][ T1226] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 293.855356][ T5346] usb 1-1: Cannot retrieve CPort count: 0 [ 293.855388][ T5346] usb 1-1: Cannot retrieve CPort count: -5 [ 293.855408][ T5346] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -5 [ 293.941059][ T1226] usb 4-1: device descriptor read/64, error -71 [ 294.058636][ T5782] usb 1-1: USB disconnect, device number 67 [ 294.071570][ T31] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 294.180821][ T1226] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 294.220771][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 294.221626][ T31] usb 3-1: New USB device found: idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 294.222841][ T31] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 294.223659][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 294.223682][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 294.223703][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 294.226175][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.226190][ T31] usb 3-1: Product: syz [ 294.226201][ T31] usb 3-1: Manufacturer: syz [ 294.226212][ T31] usb 3-1: SerialNumber: syz [ 294.228674][ T31] usb 3-1: config 0 descriptor?? [ 294.365279][ T1226] usb 4-1: device descriptor read/64, error -71 [ 294.461515][ T31] appledisplay 3-1:0.0: Error while getting initial brightness: -71 [ 294.473271][ T1226] usb usb4-port1: attempt power cycle [ 294.477151][ T31] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -71 [ 294.505772][ T31] usb 3-1: USB disconnect, device number 69 [ 294.588202][ T8202] jffs2: notice: (8202) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 294.811014][ T1226] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 294.831522][ T1226] usb 4-1: device descriptor read/8, error -71 [ 295.052715][ T8215] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 295.070738][ T1226] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 295.096579][ T1226] usb 4-1: device descriptor read/8, error -71 [ 295.201976][ T1226] usb usb4-port1: unable to enumerate USB device [ 295.242001][ T8224] netlink: 72 bytes leftover after parsing attributes in process `syz.1.848'. [ 295.390824][ T31] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 295.420913][ T5782] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 295.545010][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 295.545066][ T31] usb 3-1: New USB device found: idVendor=09c4, idProduct=0011, bcdDevice=6.38 [ 295.546654][ T31] usb 3-1: config 114 has an invalid interface number: 240 but max is 0 [ 295.546684][ T31] usb 3-1: config 114 has no interface number 0 [ 295.546733][ T31] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 295.546766][ T31] usb 3-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 295.546799][ T31] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 295.546831][ T31] usb 3-1: config 114 interface 240 has no altsetting 0 [ 295.610794][ T31] usb 3-1: string descriptor 0 read error: -22 [ 295.610973][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.646049][ T5782] usb 1-1: Using ep0 maxpacket: 32 [ 295.649149][ T5782] usb 1-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c [ 295.666886][ T5782] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 295.684792][ T8218] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 295.684860][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.684917][ T5782] usb 1-1: Product: syz [ 295.684926][ T8218] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 295.684937][ T5782] usb 1-1: Manufacturer: syz [ 295.684956][ T5782] usb 1-1: SerialNumber: syz [ 295.730552][ T31] ir_usb 3-1:114.240: IR Dongle converter detected [ 295.737816][ T5782] usb 1-1: config 0 descriptor?? [ 295.739055][ T8222] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 295.758377][ T5782] hub 1-1:0.0: bad descriptor, ignoring hub [ 295.758409][ T5782] hub 1-1:0.0: probe with driver hub failed with error -5 [ 295.779345][ T5782] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input30 [ 295.899262][ T31] usb 3-1: IRDA class descriptor not found, device not bound [ 296.105826][ T5746] usb 3-1: USB disconnect, device number 70 [ 296.630742][ T5746] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 296.717481][ T8236] jffs2: notice: (8236) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 296.761707][ T12] net_ratelimit: 59 callbacks suppressed [ 296.813304][ T5746] usb 2-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 296.814958][ T5746] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 296.814985][ T5746] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 296.818022][ T5746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.818045][ T5746] usb 2-1: Product: syz [ 296.818062][ T5746] usb 2-1: Manufacturer: syz [ 296.818079][ T5746] usb 2-1: SerialNumber: syz [ 297.103625][ T5746] usb 2-1: Cannot retrieve CPort count: 0 [ 297.103672][ T5746] usb 2-1: Cannot retrieve CPort count: -5 [ 297.103698][ T5746] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -5 [ 297.211754][ T127] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 297.313378][ T5746] usb 2-1: USB disconnect, device number 79 [ 297.370742][ T127] usb 4-1: Using ep0 maxpacket: 16 [ 297.377977][ T127] usb 4-1: New USB device found: idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 297.379891][ T127] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 297.379939][ T127] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 297.379969][ T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 297.379999][ T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 297.467626][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.467650][ T127] usb 4-1: Product: syz [ 297.467667][ T127] usb 4-1: Manufacturer: syz [ 297.467683][ T127] usb 4-1: SerialNumber: syz [ 297.481242][ T127] usb 4-1: config 0 descriptor?? [ 297.697175][ T32] audit: type=1800 audit(1792592259.323:5): pid=8236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.852" name="file0" dev="jffs2" ino=8 res=0 errno=-4 [ 297.813075][ T127] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 297.815515][ T127] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 297.852089][ T127] usb 4-1: USB disconnect, device number 90 [ 298.238650][ T1226] usb 1-1: USB disconnect, device number 68 [ 298.238842][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 298.330785][ T5746] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 298.481931][ T5746] usb 2-1: Using ep0 maxpacket: 32 [ 298.482777][ T5746] usb 2-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 298.485591][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.485619][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.485684][ T5746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.488958][ T5746] usb 2-1: config 0 descriptor?? [ 298.546398][ T5746] hub 2-1:0.0: USB hub found [ 298.742843][ T5746] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 298.940851][ T1226] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 298.947658][ T8257] comedi comedi1: 8255: I/O base address not correctly aligned [ 299.090748][ T1226] usb 4-1: Using ep0 maxpacket: 32 [ 299.091614][ T1226] usb 4-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 299.092890][ T1226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.092919][ T1226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.092985][ T1226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.095874][ T1226] usb 4-1: config 0 descriptor?? [ 299.114428][ T1226] hub 4-1:0.0: USB hub found [ 299.170376][ T5746] hid-generic 0003:046D:C31C.0004: unknown main item tag 0x0 [ 299.196629][ T5746] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 299.273012][ T5346] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 299.302864][ T1226] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 299.427220][ T5346] usb 1-1: unable to get BOS descriptor or descriptor too short [ 299.427269][ T5346] usb 1-1: New USB device found: idVendor=09c4, idProduct=0011, bcdDevice=6.38 [ 299.428823][ T5346] usb 1-1: config 114 has an invalid interface number: 240 but max is 0 [ 299.428849][ T5346] usb 1-1: config 114 has no interface number 0 [ 299.428923][ T5346] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 299.428953][ T5346] usb 1-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 299.428982][ T5346] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 299.429009][ T5346] usb 1-1: config 114 interface 240 has no altsetting 0 [ 299.458007][ T5346] usb 1-1: string descriptor 0 read error: -22 [ 299.458198][ T5346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.478926][ T8259] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 299.479431][ T8259] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 299.536394][ T5346] ir_usb 1-1:114.240: IR Dongle converter detected [ 299.668061][ T8263] jffs2: notice: (8263) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 299.696722][ T5346] usb 1-1: IRDA class descriptor not found, device not bound [ 299.755969][ T1226] hid-generic 0003:046D:C31C.0005: unknown main item tag 0x0 [ 299.807143][ T8242] usb 2-1: reset high-speed USB device number 80 using dummy_hcd [ 299.904870][ T5346] usb 1-1: USB disconnect, device number 69 [ 300.170792][ T5746] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 300.330868][ T5746] usb 3-1: Using ep0 maxpacket: 32 [ 300.331809][ T5746] usb 3-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 300.333293][ T5746] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 300.333323][ T5746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 300.333356][ T5746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 300.333373][ T5746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 300.333392][ T5746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 300.336131][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.336152][ T5746] usb 3-1: Product: syz [ 300.336173][ T5746] usb 3-1: Manufacturer: syz [ 300.336185][ T5746] usb 3-1: SerialNumber: syz [ 300.339371][ T5746] usb 3-1: config 0 descriptor?? [ 300.456776][ T1226] hid-generic 0003:046D:C31C.0005: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 300.638591][ T8268] tipc: Started in network mode [ 300.638636][ T8268] tipc: Node identity 01000001, cluster identity 4711 [ 300.653581][ T5346] usb 2-1: USB disconnect, device number 80 [ 300.661158][ T8268] tipc: New replicast peer: 127.0.0.1 [ 300.663901][ T8268] tipc: Enabled bearer , priority 10 [ 300.710369][ T1226] usb 4-1: reset high-speed USB device number 91 using dummy_hcd [ 300.810756][ T5782] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 300.891306][ T5746] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 300.891378][ T5746] input input31: Device does not respond to id packet M [ 300.891830][ T5746] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 300.891874][ T5746] input input31: Device does not respond to id packet P [ 300.898416][ T5746] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 300.898470][ T5746] input input31: Device does not respond to id packet B [ 300.914806][ T5746] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 300.914856][ T5746] input input31: Device does not respond to id packet N [ 300.951380][ T5746] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 300.951916][ T5746] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 300.952442][ T5746] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 300.954011][ T5746] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 300.963769][ T5782] usb 1-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 300.970435][ T5782] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 300.970514][ T5782] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 301.012715][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.012778][ T5782] usb 1-1: Product: syz [ 301.012883][ T5782] usb 1-1: Manufacturer: syz [ 301.012926][ T5782] usb 1-1: SerialNumber: syz [ 301.039691][ T5746] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input31 [ 301.067653][ T5746] usb 3-1: USB disconnect, device number 71 [ 301.275984][ T5782] usb 1-1: Cannot retrieve CPort count: 0 [ 301.276030][ T5782] usb 1-1: Cannot retrieve CPort count: -5 [ 301.276057][ T5782] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -5 [ 301.482761][ T10] usb 1-1: USB disconnect, device number 70 [ 301.570898][ T5746] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 301.621315][ T127] usb 4-1: USB disconnect, device number 91 [ 301.722800][ T5746] usb 2-1: Using ep0 maxpacket: 16 [ 301.723563][ T5746] usb 2-1: New USB device found: idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 301.724536][ T5746] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 301.724569][ T5746] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 301.724588][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 301.724608][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 301.726540][ T5746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.726555][ T5746] usb 2-1: Product: syz [ 301.726566][ T5746] usb 2-1: Manufacturer: syz [ 301.726577][ T5746] usb 2-1: SerialNumber: syz [ 301.729046][ T5746] usb 2-1: config 0 descriptor?? [ 301.834823][ T10] tipc: Node number set to 16777217 [ 301.891817][ T12] net_ratelimit: 65 callbacks suppressed [ 301.892557][ T1226] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 301.952305][ T5746] appledisplay 2-1:0.0: Error while getting initial brightness: -71 [ 301.956066][ T5746] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -71 [ 301.986944][ T5746] usb 2-1: USB disconnect, device number 81 [ 302.061112][ T1226] usb 3-1: Using ep0 maxpacket: 32 [ 302.061954][ T1226] usb 3-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c [ 302.064026][ T1226] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 302.095819][ T1226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.095841][ T1226] usb 3-1: Product: syz [ 302.095858][ T1226] usb 3-1: Manufacturer: syz [ 302.095873][ T1226] usb 3-1: SerialNumber: syz [ 302.099050][ T1226] usb 3-1: config 0 descriptor?? [ 302.099907][ T8278] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 302.137034][ T1226] hub 3-1:0.0: bad descriptor, ignoring hub [ 302.137065][ T1226] hub 3-1:0.0: probe with driver hub failed with error -5 [ 302.162642][ T1226] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input32 [ 302.431042][ T5746] usb 3-1: USB disconnect, device number 72 [ 302.437181][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 302.739132][ T8291] jffs2: notice: (8291) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 302.760848][ T10] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 302.912247][ T10] usb 1-1: New USB device found: idVendor=08b7, idProduct=ec00, bcdDevice=0.00 [ 302.914547][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.914570][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.916130][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 302.916153][ T10] usb 1-1: SerialNumber: syz [ 303.190296][ T10] usb 1-1: 0:2 : does not exist [ 303.287632][ T8304] FAULT_INJECTION: forcing a failure. [ 303.287632][ T8304] name failslab, interval 1, probability 0, space 0, times 0 [ 303.287661][ T8304] CPU: 1 UID: 0 PID: 8304 Comm: syz.1.876 Not tainted syzkaller #0 PREEMPT(full) [ 303.287687][ T8304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 303.287701][ T8304] Call Trace: [ 303.287710][ T8304] [ 303.287720][ T8304] dump_stack_lvl+0xe8/0x150 [ 303.287756][ T8304] should_fail_ex+0x3eb/0x540 [ 303.287795][ T8304] ? __alloc_skb+0x1db/0x7a0 [ 303.287818][ T8304] should_failslab+0xa8/0x100 [ 303.287846][ T8304] ? __alloc_skb+0x1db/0x7a0 [ 303.287867][ T8304] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 303.287907][ T8304] ? __alloc_skb+0x18d/0x7a0 [ 303.287931][ T8304] ? __alloc_skb+0x1db/0x7a0 [ 303.287961][ T8304] __alloc_skb+0x1db/0x7a0 [ 303.287990][ T8304] netlink_sendmsg+0x5cd/0xb20 [ 303.288032][ T8304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.288071][ T8304] ? aa_sock_msg_perm+0x144/0x210 [ 303.288099][ T8304] ? apparmor_socket_sendmsg+0x98/0x360 [ 303.288135][ T8304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.288168][ T8304] sock_sendmsg_nosec+0x14e/0x190 [ 303.288204][ T8304] ____sys_sendmsg+0x54e/0x850 [ 303.288238][ T8304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.288275][ T8304] ? import_iovec+0x73/0xa0 [ 303.288313][ T8304] ___sys_sendmsg+0x2a5/0x360 [ 303.288339][ T8304] ? __lock_acquire+0x747/0x2de0 [ 303.288367][ T8304] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.288444][ T8304] ? __fget_files+0x3a2/0x420 [ 303.288479][ T8304] ? __fget_files+0x2a/0x420 [ 303.288523][ T8304] __x64_sys_sendmsg+0x1b1/0x290 [ 303.288554][ T8304] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 303.288615][ T8304] do_syscall_64+0x166/0x520 [ 303.288645][ T8304] ? trace_irq_disable+0x3b/0x140 [ 303.288670][ T8304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.288694][ T8304] ? clear_bhb_loop+0x70/0xc0 [ 303.288722][ T8304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.288744][ T8304] RIP: 0033:0x7f986139f559 [ 303.288764][ T8304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.288784][ T8304] RSP: 002b:00007f98622fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.288806][ T8304] RAX: ffffffffffffffda RBX: 00007f9861625fa0 RCX: 00007f986139f559 [ 303.288823][ T8304] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 303.288838][ T8304] RBP: 00007f98622fe090 R08: 0000000000000000 R09: 0000000000000000 [ 303.288852][ T8304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.288865][ T8304] R13: 00007f9861626038 R14: 00007f9861625fa0 R15: 00007ffd85604a08 [ 303.288908][ T8304] [ 303.296769][ T10] usb 1-1: USB disconnect, device number 71 [ 303.374249][ T5782] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 303.623810][ T5782] usb 3-1: unable to get BOS descriptor or descriptor too short [ 303.623859][ T5782] usb 3-1: New USB device found: idVendor=09c4, idProduct=0011, bcdDevice=6.38 [ 303.629157][ T5782] usb 3-1: config 114 has an invalid interface number: 240 but max is 0 [ 303.629182][ T5782] usb 3-1: config 114 has no interface number 0 [ 303.629227][ T5782] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 303.629256][ T5782] usb 3-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 303.629285][ T5782] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 303.629313][ T5782] usb 3-1: config 114 interface 240 has no altsetting 0 [ 303.636631][ T5782] usb 3-1: string descriptor 0 read error: -22 [ 303.637070][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.750394][ T8298] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 303.750538][ T8298] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 303.771898][ T5782] ir_usb 3-1:114.240: IR Dongle converter detected [ 303.798017][ T5921] udevd[5921]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.971248][ T1226] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 303.971583][ T5346] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 303.998006][ T5782] usb 3-1: IRDA class descriptor not found, device not bound [ 304.120905][ T5346] usb 2-1: Using ep0 maxpacket: 16 [ 304.121629][ T1226] usb 4-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 304.122002][ T5346] usb 2-1: New USB device found: idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 304.123508][ T1226] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 304.123526][ T1226] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 304.123725][ T5346] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 304.123842][ T5346] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 304.123872][ T5346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 304.123899][ T5346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 304.125978][ T1226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.125993][ T1226] usb 4-1: Product: syz [ 304.126005][ T1226] usb 4-1: Manufacturer: syz [ 304.126017][ T1226] usb 4-1: SerialNumber: syz [ 304.129041][ T5346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.129056][ T5346] usb 2-1: Product: syz [ 304.129067][ T5346] usb 2-1: Manufacturer: syz [ 304.129078][ T5346] usb 2-1: SerialNumber: syz [ 304.151516][ T5346] usb 2-1: config 0 descriptor?? [ 304.322055][ T5782] usb 3-1: USB disconnect, device number 73 [ 304.406570][ T1226] usb 4-1: Cannot retrieve CPort count: 0 [ 304.406873][ T1226] usb 4-1: Cannot retrieve CPort count: -5 [ 304.406902][ T1226] es2_ap_driver 4-1:1.0: probe with driver es2_ap_driver failed with error -5 [ 304.447827][ T5346] appledisplay 2-1:0.0: Error while getting initial brightness: -71 [ 304.452824][ T5346] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -71 [ 304.485615][ T5346] usb 2-1: USB disconnect, device number 82 [ 304.620570][ T5782] usb 4-1: USB disconnect, device number 92 [ 304.711670][ T8312] jffs2: notice: (8312) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 305.200919][ T5782] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 305.286714][ T8320] FAULT_INJECTION: forcing a failure. [ 305.286714][ T8320] name failslab, interval 1, probability 0, space 0, times 0 [ 305.286737][ T8320] CPU: 1 UID: 0 PID: 8320 Comm: syz.0.883 Not tainted syzkaller #0 PREEMPT(full) [ 305.286755][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 305.286766][ T8320] Call Trace: [ 305.286772][ T8320] [ 305.286779][ T8320] dump_stack_lvl+0xe8/0x150 [ 305.286807][ T8320] should_fail_ex+0x3eb/0x540 [ 305.286836][ T8320] should_failslab+0xa8/0x100 [ 305.286857][ T8320] __kmalloc_noprof+0xf9/0x710 [ 305.286883][ T8320] ? tomoyo_encode+0x2ad/0x570 [ 305.286900][ T8320] ? tomoyo_encode+0x2ad/0x570 [ 305.286921][ T8320] tomoyo_encode+0x2ad/0x570 [ 305.286943][ T8320] tomoyo_realpath_from_path+0x5fa/0x640 [ 305.286968][ T8320] ? tomoyo_path_number_perm+0x219/0x5f0 [ 305.286996][ T8320] tomoyo_path_number_perm+0x246/0x5f0 [ 305.287023][ T8320] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 305.287046][ T8320] ? __lock_acquire+0x747/0x2de0 [ 305.287091][ T8320] ? __fget_files+0x2a/0x420 [ 305.287119][ T8320] ? __fget_files+0x2a/0x420 [ 305.287145][ T8320] ? __fget_files+0x2a/0x420 [ 305.287176][ T8320] security_file_ioctl+0xc3/0x2a0 [ 305.287199][ T8320] __se_sys_ioctl+0x47/0x170 [ 305.287219][ T8320] do_syscall_64+0x166/0x520 [ 305.287238][ T8320] ? trace_irq_disable+0x3b/0x140 [ 305.287256][ T8320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.287272][ T8320] ? clear_bhb_loop+0x70/0xc0 [ 305.287292][ T8320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.287307][ T8320] RIP: 0033:0x7f8df1b9f559 [ 305.287322][ T8320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.287335][ T8320] RSP: 002b:00007f8df2ace028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.287352][ T8320] RAX: ffffffffffffffda RBX: 00007f8df1e25fa0 RCX: 00007f8df1b9f559 [ 305.287364][ T8320] RDX: 0000000000000000 RSI: 000000000000550c RDI: 0000000000000003 [ 305.287373][ T8320] RBP: 00007f8df2ace090 R08: 0000000000000000 R09: 0000000000000000 [ 305.287383][ T8320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.287393][ T8320] R13: 00007f8df1e26038 R14: 00007f8df1e25fa0 R15: 00007ffc6bea5df8 [ 305.287418][ T8320] [ 305.287553][ T8320] ERROR: Out of memory at tomoyo_realpath_from_path. [ 305.369453][ T5782] usb 3-1: Using ep0 maxpacket: 32 [ 305.382428][ T5782] usb 3-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c [ 305.404678][ T5782] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 305.454724][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.454746][ T5782] usb 3-1: Product: syz [ 305.454762][ T5782] usb 3-1: Manufacturer: syz [ 305.454778][ T5782] usb 3-1: SerialNumber: syz [ 305.469547][ T5782] usb 3-1: config 0 descriptor?? [ 305.472364][ T8316] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 305.480031][ T5782] hub 3-1:0.0: bad descriptor, ignoring hub [ 305.480128][ T5782] hub 3-1:0.0: probe with driver hub failed with error -5 [ 305.498947][ T5782] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input33 [ 305.877292][ T10] usb 3-1: USB disconnect, device number 74 [ 305.877504][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 306.102046][ T8337] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd [ 306.301891][ T5733] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 306.350773][ T5746] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 306.360586][ T8339] jffs2: notice: (8339) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 306.463448][ T5733] usb 2-1: Using ep0 maxpacket: 16 [ 306.465456][ T5733] usb 2-1: New USB device found: idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 306.466671][ T5733] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 306.466720][ T5733] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 306.466750][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 306.466779][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 306.479194][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.479256][ T5733] usb 2-1: Product: syz [ 306.479299][ T5733] usb 2-1: Manufacturer: syz [ 306.479342][ T5733] usb 2-1: SerialNumber: syz [ 306.511576][ T5746] usb 1-1: Using ep0 maxpacket: 8 [ 306.515105][ T5746] usb 1-1: New USB device found: idVendor=055f, idProduct=a800, bcdDevice=1.00 [ 306.528395][ T5746] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.528530][ T5746] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 306.528729][ T5746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.580003][ T5733] usb 2-1: config 0 descriptor?? [ 306.618504][ T8343] FAULT_INJECTION: forcing a failure. [ 306.618504][ T8343] name failslab, interval 1, probability 0, space 0, times 0 [ 306.618533][ T8343] CPU: 1 UID: 0 PID: 8343 Comm: syz.2.892 Not tainted syzkaller #0 PREEMPT(full) [ 306.618557][ T8343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 306.618570][ T8343] Call Trace: [ 306.618579][ T8343] [ 306.618588][ T8343] dump_stack_lvl+0xe8/0x150 [ 306.618627][ T8343] should_fail_ex+0x3eb/0x540 [ 306.618678][ T8343] should_failslab+0xa8/0x100 [ 306.618706][ T8343] __kmalloc_noprof+0xf9/0x710 [ 306.618742][ T8343] ? tomoyo_encode+0x2ad/0x570 [ 306.618765][ T8343] ? tomoyo_encode+0x2ad/0x570 [ 306.618797][ T8343] tomoyo_encode+0x2ad/0x570 [ 306.618828][ T8343] tomoyo_realpath_from_path+0x5fa/0x640 [ 306.618865][ T8343] ? tomoyo_path_number_perm+0x219/0x5f0 [ 306.618898][ T8343] tomoyo_path_number_perm+0x246/0x5f0 [ 306.618937][ T8343] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 306.618972][ T8343] ? __lock_acquire+0x747/0x2de0 [ 306.619038][ T8343] ? __fget_files+0x2a/0x420 [ 306.619079][ T8343] ? __fget_files+0x2a/0x420 [ 306.619113][ T8343] ? __fget_files+0x2a/0x420 [ 306.619155][ T8343] security_file_ioctl+0xc3/0x2a0 [ 306.619190][ T8343] __se_sys_ioctl+0x47/0x170 [ 306.619221][ T8343] do_syscall_64+0x166/0x520 [ 306.619248][ T8343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.619272][ T8343] ? clear_bhb_loop+0x70/0xc0 [ 306.619300][ T8343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.619324][ T8343] RIP: 0033:0x7fed00d9f559 [ 306.619346][ T8343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.619365][ T8343] RSP: 002b:00007fed01c38028 EFLAGS: 00000246 [ 306.619380][ T8343] ORIG_RAX: 0000000000000010 [ 306.619391][ T8343] RAX: ffffffffffffffda RBX: 00007fed01025fa0 RCX: 00007fed00d9f559 [ 306.619408][ T8343] RDX: 0000200000000740 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 306.619423][ T8343] RBP: 00007fed01c38090 R08: 0000000000000000 R09: 0000000000000000 [ 306.619437][ T8343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.619451][ T8343] R13: 00007fed01026038 R14: 00007fed01025fa0 R15: 00007fff3d2e9528 [ 306.619487][ T8343] [ 306.619539][ T8343] ERROR: Out of memory at tomoyo_realpath_from_path. [ 306.655850][ T5746] mdc800 1-1:1.0: probe fails -> wrong Interface [ 306.911946][ T5733] appledisplay 2-1:0.0: Error while getting initial brightness: -71 [ 306.914496][ T5733] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -71 [ 306.917308][ T5723] net_ratelimit: 59 callbacks suppressed [ 306.951908][ T5746] usb 1-1: USB disconnect, device number 72 [ 307.014590][ T5733] usb 2-1: USB disconnect, device number 83 [ 307.298428][ T8352] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 307.301645][ T5346] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 307.461588][ T5346] usb 3-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 307.462761][ T5346] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 307.462790][ T5346] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 307.463974][ T8357] FAULT_INJECTION: forcing a failure. [ 307.463974][ T8357] name failslab, interval 1, probability 0, space 0, times 0 [ 307.463996][ T8357] CPU: 1 UID: 0 PID: 8357 Comm: syz.3.898 Not tainted syzkaller #0 PREEMPT(full) [ 307.464014][ T8357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 307.464025][ T8357] Call Trace: [ 307.464032][ T8357] [ 307.464039][ T8357] dump_stack_lvl+0xe8/0x150 [ 307.464066][ T8357] should_fail_ex+0x3eb/0x540 [ 307.464094][ T8357] should_failslab+0xa8/0x100 [ 307.464112][ T8357] ? security_inode_alloc+0x39/0x310 [ 307.464130][ T8357] kmem_cache_alloc_noprof+0x9c/0x600 [ 307.464159][ T8357] ? __pfx_make_kgid+0x10/0x10 [ 307.464174][ T8357] ? security_inode_alloc+0x39/0x310 [ 307.464202][ T8357] security_inode_alloc+0x39/0x310 [ 307.464221][ T8357] inode_init_always_gfp+0x97e/0xd30 [ 307.464251][ T8357] alloc_inode+0x82/0x1b0 [ 307.464275][ T8357] create_pipe_files+0x51/0x7a0 [ 307.464295][ T8357] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 307.464320][ T8357] __do_pipe_flags+0x46/0x1f0 [ 307.464341][ T8357] do_pipe2+0xaa/0x190 [ 307.464361][ T8357] ? fput+0xa0/0xd0 [ 307.464383][ T8357] ? __pfx_do_pipe2+0x10/0x10 [ 307.464402][ T8357] ? ksys_write+0x242/0x270 [ 307.464429][ T8357] __x64_sys_pipe2+0x5a/0x70 [ 307.464449][ T8357] do_syscall_64+0x166/0x520 [ 307.464469][ T8357] ? trace_irq_disable+0x3b/0x140 [ 307.464486][ T8357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.464503][ T8357] ? clear_bhb_loop+0x70/0xc0 [ 307.464523][ T8357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.464540][ T8357] RIP: 0033:0x7fb51679f559 [ 307.464555][ T8357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.464569][ T8357] RSP: 002b:00007fb51758d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 307.464586][ T8357] RAX: ffffffffffffffda RBX: 00007fb516a25fa0 RCX: 00007fb51679f559 [ 307.464598][ T8357] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00002000000001c0 [ 307.464609][ T8357] RBP: 00007fb51758d090 R08: 0000000000000000 R09: 0000000000000000 [ 307.464620][ T8357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.464630][ T8357] R13: 00007fb516a26038 R14: 00007fb516a25fa0 R15: 00007ffc47381448 [ 307.464655][ T8357] [ 307.466909][ T5346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.466932][ T5346] usb 3-1: Product: syz [ 307.466949][ T5346] usb 3-1: Manufacturer: syz [ 307.466965][ T5346] usb 3-1: SerialNumber: syz [ 307.766457][ T5346] usb 3-1: Cannot retrieve CPort count: 0 [ 307.766503][ T5346] usb 3-1: Cannot retrieve CPort count: -5 [ 307.766531][ T5346] es2_ap_driver 3-1:1.0: probe with driver es2_ap_driver failed with error -5 [ 307.958560][ T8366] jffs2: notice: (8366) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 307.993888][ T5346] usb 3-1: USB disconnect, device number 75 [ 308.121286][ T5746] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 308.281334][ T5746] usb 4-1: Using ep0 maxpacket: 32 [ 308.283726][ T5746] usb 4-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c [ 308.287867][ T5746] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 308.318478][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.318502][ T5746] usb 4-1: Product: syz [ 308.318523][ T5746] usb 4-1: Manufacturer: syz [ 308.318540][ T5746] usb 4-1: SerialNumber: syz [ 308.344402][ T5746] usb 4-1: config 0 descriptor?? [ 308.345156][ T8359] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 308.366089][ T5746] hub 4-1:0.0: bad descriptor, ignoring hub [ 308.366112][ T5746] hub 4-1:0.0: probe with driver hub failed with error -5 [ 308.388383][ T5746] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input34 [ 308.724067][ T5346] usb 4-1: USB disconnect, device number 93 [ 308.724130][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 308.909292][ T8385] FAULT_INJECTION: forcing a failure. [ 308.909292][ T8385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.909324][ T8385] CPU: 0 UID: 0 PID: 8385 Comm: syz.0.906 Not tainted syzkaller #0 PREEMPT(full) [ 308.909349][ T8385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 308.909364][ T8385] Call Trace: [ 308.909373][ T8385] [ 308.909383][ T8385] dump_stack_lvl+0xe8/0x150 [ 308.909422][ T8385] should_fail_ex+0x3eb/0x540 [ 308.909464][ T8385] _copy_to_user+0x31/0xb0 [ 308.909491][ T8385] simple_read_from_buffer+0xe1/0x170 [ 308.909533][ T8385] proc_fail_nth_read+0x1bb/0x230 [ 308.909566][ T8385] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 308.909598][ T8385] ? rw_verify_area+0x24a/0x4c0 [ 308.909624][ T8385] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 308.909651][ T8385] vfs_read+0x213/0xa80 [ 308.909680][ T8385] ? __pfx___mutex_lock+0x10/0x10 [ 308.909711][ T8385] ? __pfx_vfs_read+0x10/0x10 [ 308.909736][ T8385] ? __fget_files+0x2a/0x420 [ 308.909771][ T8385] ? __fget_files+0x3a2/0x420 [ 308.909805][ T8385] ? __fget_files+0x2a/0x420 [ 308.909845][ T8385] ? fdget+0x1ac/0x250 [ 308.909874][ T8385] ksys_read+0x150/0x270 [ 308.909910][ T8385] ? __pfx_ksys_read+0x10/0x10 [ 308.909947][ T8385] do_syscall_64+0x166/0x520 [ 308.909974][ T8385] ? trace_irq_disable+0x3b/0x140 [ 308.910014][ T8385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.910038][ T8385] ? clear_bhb_loop+0x70/0xc0 [ 308.910066][ T8385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.910090][ T8385] RIP: 0033:0x7f8df1b5fd8e [ 308.910111][ T8385] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 308.910130][ T8385] RSP: 002b:00007f8df2acdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 308.910158][ T8385] RAX: ffffffffffffffda RBX: 00007f8df2ace6c0 RCX: 00007f8df1b5fd8e [ 308.910176][ T8385] RDX: 000000000000000f RSI: 00007f8df2ace0a0 RDI: 0000000000000005 [ 308.910190][ T8385] RBP: 00007f8df2ace090 R08: 0000000000000000 R09: 0000000000000000 [ 308.910204][ T8385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.910218][ T8385] R13: 00007f8df1e26038 R14: 00007f8df1e25fa0 R15: 00007ffc6bea5df8 [ 308.910254][ T8385] [ 309.170778][ T5746] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 309.330993][ T5746] usb 3-1: Using ep0 maxpacket: 32 [ 309.332957][ T5746] usb 3-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 309.335287][ T5746] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 309.335314][ T5746] usb 3-1: config 0 has no interface number 0 [ 309.335360][ T5746] usb 3-1: config 0 interface 12 has no altsetting 0 [ 309.339533][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.339556][ T5746] usb 3-1: Product: syz [ 309.339573][ T5746] usb 3-1: Manufacturer: syz [ 309.339590][ T5746] usb 3-1: SerialNumber: syz [ 309.374736][ T5746] usb 3-1: config 0 descriptor?? [ 309.408442][ T127] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 309.573707][ T127] usb 2-1: unable to get BOS descriptor or descriptor too short [ 309.573741][ T127] usb 2-1: New USB device found: idVendor=077d, idProduct=627a, bcdDevice=0.10 [ 309.575201][ T127] usb 2-1: config 23 has an invalid interface number: 37 but max is 0 [ 309.575218][ T127] usb 2-1: config 23 has no interface number 0 [ 309.575244][ T127] usb 2-1: config 23 interface 37 has no altsetting 0 [ 309.578944][ T127] usb 2-1: string descriptor 0 read error: -22 [ 309.579096][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.654191][ T127] radioshark2 2-1:23.37: Invalid radioSHARK2 device [ 309.654209][ T127] radioshark2 2-1:23.37: probe with driver radioshark2 failed with error -22 [ 309.654648][ T127] usbhid 2-1:23.37: couldn't find an input interrupt endpoint [ 309.858757][ T8387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.859767][ T8387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.877604][ T8387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.907'. [ 309.897259][ T31] usb 2-1: USB disconnect, device number 84 [ 309.980862][ T127] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 310.130782][ T127] usb 4-1: Using ep0 maxpacket: 16 [ 310.137913][ T127] usb 4-1: New USB device found: idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 310.140092][ T127] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 310.140141][ T127] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 310.140172][ T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 310.140201][ T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 310.198699][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.198751][ T127] usb 4-1: Product: syz [ 310.198768][ T127] usb 4-1: Manufacturer: syz [ 310.198785][ T127] usb 4-1: SerialNumber: syz [ 310.227935][ T127] usb 4-1: config 0 descriptor?? [ 310.479809][ T127] appledisplay 4-1:0.0: Error while getting initial brightness: -71 [ 310.494812][ T127] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -71 [ 310.526626][ T127] usb 4-1: USB disconnect, device number 94 [ 310.613823][ T8402] jffs2: notice: (8402) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 310.905369][ T8406] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input36 [ 311.087477][ T8410] FAULT_INJECTION: forcing a failure. [ 311.087477][ T8410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.087506][ T8410] CPU: 0 UID: 0 PID: 8410 Comm: syz.3.915 Not tainted syzkaller #0 PREEMPT(full) [ 311.087535][ T8410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 311.087551][ T8410] Call Trace: [ 311.087561][ T8410] [ 311.087571][ T8410] dump_stack_lvl+0xe8/0x150 [ 311.087608][ T8410] should_fail_ex+0x3eb/0x540 [ 311.087650][ T8410] _copy_to_user+0x31/0xb0 [ 311.087675][ T8410] simple_read_from_buffer+0xe1/0x170 [ 311.087717][ T8410] proc_fail_nth_read+0x1bb/0x230 [ 311.087750][ T8410] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 311.087792][ T8410] ? rw_verify_area+0x24a/0x4c0 [ 311.087817][ T8410] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 311.087844][ T8410] vfs_read+0x213/0xa80 [ 311.087873][ T8410] ? __pfx___mutex_lock+0x10/0x10 [ 311.087903][ T8410] ? __pfx_vfs_read+0x10/0x10 [ 311.087929][ T8410] ? __fget_files+0x2a/0x420 [ 311.087963][ T8410] ? __fget_files+0x3a2/0x420 [ 311.087997][ T8410] ? __fget_files+0x2a/0x420 [ 311.088037][ T8410] ? fdget+0x1ac/0x250 [ 311.088066][ T8410] ksys_read+0x150/0x270 [ 311.088093][ T8410] ? __pfx_ksys_read+0x10/0x10 [ 311.088129][ T8410] do_syscall_64+0x166/0x520 [ 311.088157][ T8410] ? trace_irq_disable+0x3b/0x140 [ 311.088181][ T8410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.088205][ T8410] ? clear_bhb_loop+0x70/0xc0 [ 311.088234][ T8410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.088258][ T8410] RIP: 0033:0x7fb51675fd8e [ 311.088281][ T8410] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 311.088300][ T8410] RSP: 002b:00007fb51758cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 311.088325][ T8410] RAX: ffffffffffffffda RBX: 00007fb51758d6c0 RCX: 00007fb51675fd8e [ 311.088342][ T8410] RDX: 000000000000000f RSI: 00007fb51758d0a0 RDI: 0000000000000003 [ 311.088358][ T8410] RBP: 00007fb51758d090 R08: 0000000000000000 R09: 0000000000000000 [ 311.088372][ T8410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.088387][ T8410] R13: 00007fb516a26038 R14: 00007fb516a25fa0 R15: 00007ffc47381448 [ 311.088424][ T8410] [ 311.140953][ T31] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 311.321039][ T31] usb 1-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 311.342971][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 311.342998][ T31] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 311.348458][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.348496][ T31] usb 1-1: Product: syz [ 311.348524][ T31] usb 1-1: Manufacturer: syz [ 311.348552][ T31] usb 1-1: SerialNumber: syz [ 311.465870][ T8413] loop7: detected capacity change from 0 to 16384 [ 311.604223][ T31] usb 1-1: Cannot retrieve CPort count: 0 [ 311.604270][ T31] usb 1-1: Cannot retrieve CPort count: -5 [ 311.604306][ T31] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -5 [ 311.702045][ T127] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 311.809045][ T5733] usb 1-1: USB disconnect, device number 73 [ 311.870776][ T127] usb 2-1: Using ep0 maxpacket: 32 [ 311.877273][ T127] usb 2-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c [ 311.902098][ T127] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 311.921398][ T8415] netlink: 28 bytes leftover after parsing attributes in process `syz.3.916'. [ 311.921420][ T8415] net_ratelimit: 54 callbacks suppressed [ 311.921434][ T8415] openvswitch: netlink: Flow key attr not present in new flow. [ 311.929197][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.929219][ T127] usb 2-1: Product: syz [ 311.929235][ T127] usb 2-1: Manufacturer: syz [ 311.929252][ T127] usb 2-1: SerialNumber: syz [ 311.978654][ T127] usb 2-1: config 0 descriptor?? [ 311.979424][ T8414] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 311.999912][ T127] hub 2-1:0.0: bad descriptor, ignoring hub [ 311.999927][ T127] hub 2-1:0.0: probe with driver hub failed with error -5 [ 312.018846][ T5746] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 50 failed: -71 [ 312.018885][ T5746] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 312.018898][ T5746] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 312.018988][ T5746] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 312.077819][ T127] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input37 [ 312.108514][ T5746] usb 3-1: USB disconnect, device number 76 [ 312.637965][ T127] usb 2-1: USB disconnect, device number 85 [ 312.638169][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 312.855672][ T8413] loop7: detected capacity change from 16384 to 0 [ 313.060794][ T31] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 313.210974][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 313.216925][ T31] usb 3-1: New USB device found: idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 313.219757][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.219773][ T31] usb 3-1: Product: syz [ 313.219784][ T31] usb 3-1: Manufacturer: syz [ 313.219796][ T31] usb 3-1: SerialNumber: syz [ 313.255140][ T31] usb 3-1: config 0 descriptor?? [ 313.661366][ T31] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 313.665046][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 313.665733][ T31] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 313.665782][ T31] usb 3-1: media controller created [ 313.718399][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 314.282104][ T31] zl10353_read_register: readreg error (reg=127, ret==0) [ 314.282176][ T31] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 314.282211][ T31] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 314.282359][ T8425] dtv5100: wlen = 0, aborting. [ 314.323170][ T31] usb 3-1: USB disconnect, device number 77 [ 314.417379][ T31] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 317.241258][ C0] net_ratelimit: 63 callbacks suppressed [ 317.242347][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.242401][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.361425][ T1012] net_ratelimit: 56 callbacks suppressed [ 327.400987][ T51] net_ratelimit: 60 callbacks suppressed [ 327.671648][ T8442] FAULT_INJECTION: forcing a failure. [ 327.671648][ T8442] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 327.671680][ T8442] CPU: 0 UID: 0 PID: 8442 Comm: syz.2.922 Not tainted syzkaller #0 PREEMPT(full) [ 327.671705][ T8442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 327.671720][ T8442] Call Trace: [ 327.671729][ T8442] [ 327.671740][ T8442] dump_stack_lvl+0xe8/0x150 [ 327.671777][ T8442] should_fail_ex+0x3eb/0x540 [ 327.671818][ T8442] prepare_alloc_pages+0x21e/0x5f0 [ 327.671864][ T8442] __alloc_frozen_pages_noprof+0x17c/0x410 [ 327.671894][ T8442] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 327.671924][ T8442] ? lock_acquire+0x115/0x350 [ 327.671952][ T8442] ? policy_nodemask+0x31b/0x980 [ 327.671987][ T8442] alloc_pages_mpol+0x21e/0x390 [ 327.672023][ T8442] alloc_pages_noprof+0xb1/0x2b0 [ 327.672055][ T8442] pte_alloc_one+0x22/0x3d0 [ 327.672095][ T8442] do_pte_missing+0x1358/0x3570 [ 327.672151][ T8442] handle_mm_fault+0x1a2a/0x3540 [ 327.672190][ T8442] ? handle_mm_fault+0xee/0x3540 [ 327.672232][ T8442] ? mtree_load+0x6c0/0x780 [ 327.672263][ T8442] ? __pfx_handle_mm_fault+0x10/0x10 [ 327.672289][ T8442] ? mtree_load+0x12a/0x780 [ 327.672347][ T8442] __get_user_pages+0x1670/0x2750 [ 327.672412][ T8442] faultin_page_range+0x26a/0x8f0 [ 327.672440][ T8442] ? blk_start_plug+0x6e/0x1b0 [ 327.672466][ T8442] madvise_do_behavior+0x2e4/0x540 [ 327.672498][ T8442] ? __pfx_madvise_do_behavior+0x10/0x10 [ 327.672531][ T8442] ? down_read+0x2b9/0x320 [ 327.672571][ T8442] do_madvise+0x327/0x3a0 [ 327.672599][ T8442] ? __pfx_do_madvise+0x10/0x10 [ 327.672649][ T8442] ? __pfx_ksys_write+0x10/0x10 [ 327.672682][ T8442] __x64_sys_madvise+0xa6/0xc0 [ 327.672708][ T8442] do_syscall_64+0x166/0x520 [ 327.672735][ T8442] ? trace_irq_disable+0x3b/0x140 [ 327.672760][ T8442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.672785][ T8442] ? clear_bhb_loop+0x70/0xc0 [ 327.672813][ T8442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.672837][ T8442] RIP: 0033:0x7fed00d9f559 [ 327.672858][ T8442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.672878][ T8442] RSP: 002b:00007fed01c38028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 327.672903][ T8442] RAX: ffffffffffffffda RBX: 00007fed01025fa0 RCX: 00007fed00d9f559 [ 327.672920][ T8442] RDX: 0000000000000016 RSI: 0000000000c00000 RDI: 0000200000000000 [ 327.672936][ T8442] RBP: 00007fed01c38090 R08: 0000000000000000 R09: 0000000000000000 [ 327.672950][ T8442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.672964][ T8442] R13: 00007fed01026038 R14: 00007fed01025fa0 R15: 00007fff3d2e9528 [ 327.673002][ T8442] [ 327.673255][ T8441] F2FS-fs: wrong format, e.g. : [ 327.674301][ T8440] jffs2: notice: (8440) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 328.352501][ T8458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.353226][ T8458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.380871][ T8458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.390058][ T8457] tmpfs: Unknown parameter 'default_permissions' [ 328.390150][ T8458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.580848][ T5733] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 328.732694][ T5733] usb 4-1: not running at top speed; connect to a high speed hub [ 328.732725][ T5733] usb 4-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=1.00 [ 328.732762][ T5733] usb 4-1: no configurations [ 328.732776][ T5733] usb 4-1: can't read configurations, error -22 [ 328.860734][ T5733] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 328.941370][ T31] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 328.970774][ T127] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 329.012080][ T5733] usb 4-1: not running at top speed; connect to a high speed hub [ 329.012103][ T5733] usb 4-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=1.00 [ 329.012129][ T5733] usb 4-1: no configurations [ 329.012139][ T5733] usb 4-1: can't read configurations, error -22 [ 329.012633][ T5733] usb usb4-port1: attempt power cycle [ 329.121714][ T127] usb 1-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 329.124155][ T127] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 329.124184][ T127] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 329.126774][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.126789][ T127] usb 1-1: Product: syz [ 329.126801][ T127] usb 1-1: Manufacturer: syz [ 329.126812][ T127] usb 1-1: SerialNumber: syz [ 329.133219][ T5782] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 329.145184][ T31] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 329.152324][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.214107][ T31] usb 2-1: config 0 descriptor?? [ 329.301370][ T5782] usb 3-1: Using ep0 maxpacket: 32 [ 329.302317][ T5782] usb 3-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c [ 329.303604][ T5782] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 329.306876][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.306937][ T5782] usb 3-1: Product: syz [ 329.306955][ T5782] usb 3-1: Manufacturer: syz [ 329.306972][ T5782] usb 3-1: SerialNumber: syz [ 329.314067][ T5782] usb 3-1: config 0 descriptor?? [ 329.315985][ T8474] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 329.326576][ T5782] hub 3-1:0.0: bad descriptor, ignoring hub [ 329.326600][ T5782] hub 3-1:0.0: probe with driver hub failed with error -5 [ 329.367488][ T5782] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input38 [ 329.397991][ T5733] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 329.413011][ T5733] usb 4-1: not running at top speed; connect to a high speed hub [ 329.413046][ T5733] usb 4-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=1.00 [ 329.413109][ T5733] usb 4-1: no configurations [ 329.413124][ T5733] usb 4-1: can't read configurations, error -22 [ 329.461249][ T31] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 329.490212][ T127] usb 1-1: Invalid number of CPorts: 0 [ 329.490273][ T127] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -22 [ 329.541724][ T5733] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 329.564232][ T5733] usb 4-1: not running at top speed; connect to a high speed hub [ 329.564266][ T5733] usb 4-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=1.00 [ 329.564304][ T5733] usb 4-1: no configurations [ 329.564319][ T5733] usb 4-1: can't read configurations, error -22 [ 329.565911][ T5733] usb usb4-port1: unable to enumerate USB device [ 329.840435][ T5783] usb 1-1: USB disconnect, device number 74 [ 329.848634][ T5782] usb 3-1: USB disconnect, device number 78 [ 329.848820][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 330.007245][ T31] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 330.007272][ T31] [drm] Initialized udl on minor 1 [ 330.047316][ T31] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 330.062449][ T31] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 330.090116][ T31] usb 2-1: USB disconnect, device number 86 [ 330.415610][ T8479] loop0: detected capacity change from 0 to 4096 [ 330.607347][ T8486] jffs2: notice: (8486) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 330.640775][ T127] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 330.796143][ T127] usb 1-1: Using ep0 maxpacket: 32 [ 330.798905][ T127] usb 1-1: New USB device found: idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 330.800220][ T127] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 330.800237][ T127] usb 1-1: config 2 has no interface number 0 [ 330.800265][ T127] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 330.800285][ T127] usb 1-1: config 2 interface 88 has no altsetting 0 [ 330.853900][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 330.853915][ T127] usb 1-1: Product: syz [ 330.853926][ T127] usb 1-1: Manufacturer: syz [ 330.853937][ T127] usb 1-1: SerialNumber: syz [ 330.856253][ T8490] smpboot: CPU 1 is now offline [ 330.919569][ T8481] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 331.098782][ T8496] overlayfs: failed to decode file handle (len=0, type=0, flags=0, err=-22) [ 331.135595][ T8481] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 331.470174][ T8500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.937'. [ 331.901504][ T10] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 332.054197][ T10] usb 3-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 332.055943][ T10] usb 3-1: config index 0 descriptor too short (expected 2596, got 36) [ 332.055961][ T10] usb 3-1: config 165 descriptor has 1 excess byte, ignoring [ 332.055976][ T10] usb 3-1: config 165 has 1 interface, different from the descriptor's value: 25 [ 332.056014][ T10] usb 3-1: config 165 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 332.056053][ T10] usb 3-1: config 165 interface 0 altsetting 0 has an endpoint descriptor with address 0x68, changing to 0x8 [ 332.056073][ T10] usb 3-1: config 165 interface 0 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 332.058133][ T10] usb 3-1: config index 1 descriptor too short (expected 2596, got 36) [ 332.058152][ T10] usb 3-1: config 165 descriptor has 1 excess byte, ignoring [ 332.058166][ T10] usb 3-1: config 165 has 1 interface, different from the descriptor's value: 25 [ 332.058198][ T10] usb 3-1: config 165 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 332.058218][ T10] usb 3-1: config 165 interface 0 altsetting 0 has an endpoint descriptor with address 0x68, changing to 0x8 [ 332.058260][ T10] usb 3-1: config 165 interface 0 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 332.099562][ T10] usb 3-1: config index 2 descriptor too short (expected 2596, got 36) [ 332.099586][ T10] usb 3-1: config 165 descriptor has 1 excess byte, ignoring [ 332.099620][ T10] usb 3-1: config 165 has 1 interface, different from the descriptor's value: 25 [ 332.111922][ T5746] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 332.124734][ T10] usb 3-1: config 165 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 332.124760][ T10] usb 3-1: config 165 interface 0 altsetting 0 has an endpoint descriptor with address 0x68, changing to 0x8 [ 332.124801][ T10] usb 3-1: config 165 interface 0 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 332.284753][ T127] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 332.284980][ T127] asix 1-1:2.88: probe with driver asix failed with error -71 [ 332.319017][ T127] usb 1-1: USB disconnect, device number 75 [ 332.333157][ T5746] usb 2-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 332.333764][ T5733] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 332.335617][ T5746] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 332.335641][ T5746] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 332.385399][ T5746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.385414][ T5746] usb 2-1: Product: syz [ 332.385426][ T5746] usb 2-1: Manufacturer: syz [ 332.385436][ T5746] usb 2-1: SerialNumber: syz [ 332.418502][ T5737] net_ratelimit: 57 callbacks suppressed [ 332.492160][ T5733] usb 4-1: Using ep0 maxpacket: 32 [ 332.492966][ T5733] usb 4-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c [ 332.494199][ T5733] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 332.496683][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.496699][ T5733] usb 4-1: Product: syz [ 332.496710][ T5733] usb 4-1: Manufacturer: syz [ 332.496721][ T5733] usb 4-1: SerialNumber: syz [ 332.499763][ T5733] usb 4-1: config 0 descriptor?? [ 332.558834][ T8506] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 332.560570][ T5733] hub 4-1:0.0: bad descriptor, ignoring hub [ 332.560585][ T5733] hub 4-1:0.0: probe with driver hub failed with error -5 [ 332.597688][ T5733] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input39 [ 332.706396][ T5746] usb 2-1: Invalid number of CPorts: 0 [ 332.706417][ T5746] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -22 [ 332.974643][ T5746] usb 2-1: USB disconnect, device number 87 [ 333.305530][ T127] usb 4-1: USB disconnect, device number 99 [ 333.305627][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 333.631792][ T8511] jffs2: notice: (8511) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 333.720849][ T5733] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 333.872492][ T5733] usb 1-1: New USB device found: idVendor=0458, idProduct=5005, bcdDevice=0.00 [ 333.878630][ T5733] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.878676][ T5733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.921119][ T5733] usb 1-1: config 0 descriptor?? [ 334.142287][ T63] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.388781][ T5733] input: HID 0458:5005 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5005.0006/input/input40 [ 334.421831][ T8527] FAULT_INJECTION: forcing a failure. [ 334.421831][ T8527] name failslab, interval 1, probability 0, space 0, times 0 [ 334.421854][ T8527] CPU: 0 UID: 0 PID: 8527 Comm: syz.3.946 Not tainted syzkaller #0 PREEMPT(full) [ 334.421873][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 334.421884][ T8527] Call Trace: [ 334.421892][ T8527] [ 334.421899][ T8527] dump_stack_lvl+0xe8/0x150 [ 334.421926][ T8527] should_fail_ex+0x3eb/0x540 [ 334.421956][ T8527] should_failslab+0xa8/0x100 [ 334.421977][ T8527] __kmalloc_noprof+0xf9/0x710 [ 334.422003][ T8527] ? tomoyo_encode+0x2ad/0x570 [ 334.422027][ T8527] ? tomoyo_encode+0x2ad/0x570 [ 334.422049][ T8527] tomoyo_encode+0x2ad/0x570 [ 334.422070][ T8527] tomoyo_realpath_from_path+0x5fa/0x640 [ 334.422096][ T8527] ? tomoyo_path_number_perm+0x219/0x5f0 [ 334.422120][ T8527] tomoyo_path_number_perm+0x246/0x5f0 [ 334.422146][ T8527] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 334.422169][ T8527] ? __lock_acquire+0x747/0x2de0 [ 334.422214][ T8527] ? __fget_files+0x2a/0x420 [ 334.422242][ T8527] ? __fget_files+0x2a/0x420 [ 334.422268][ T8527] ? __fget_files+0x2a/0x420 [ 334.422296][ T8527] security_file_ioctl+0xc3/0x2a0 [ 334.422320][ T8527] __se_sys_ioctl+0x47/0x170 [ 334.422342][ T8527] do_syscall_64+0x166/0x520 [ 334.422362][ T8527] ? trace_irq_disable+0x3b/0x140 [ 334.422380][ T8527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.422396][ T8527] ? clear_bhb_loop+0x70/0xc0 [ 334.422417][ T8527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.422433][ T8527] RIP: 0033:0x7fb51679f559 [ 334.422448][ T8527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.422462][ T8527] RSP: 002b:00007fb51758d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 334.422479][ T8527] RAX: ffffffffffffffda RBX: 00007fb516a25fa0 RCX: 00007fb51679f559 [ 334.422492][ T8527] RDX: 0000200000001e00 RSI: 0000000000008946 RDI: 0000000000000003 [ 334.422503][ T8527] RBP: 00007fb51758d090 R08: 0000000000000000 R09: 0000000000000000 [ 334.422513][ T8527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.422523][ T8527] R13: 00007fb516a26038 R14: 00007fb516a25fa0 R15: 00007ffc47381448 [ 334.422549][ T8527] [ 334.518609][ T8527] ERROR: Out of memory at tomoyo_realpath_from_path. [ 334.708014][ T5733] input: HID 0458:5005 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5005.0006/input/input41 [ 334.928806][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.964826][ T10] usb 3-1: can't set config #165, error -71 [ 335.008401][ T10] usb 3-1: USB disconnect, device number 79 [ 335.095853][ T5733] kye 0003:0458:5005.0006: input,hiddev0,hidraw0: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.0-1/input0 [ 335.157737][ T5733] usb 1-1: USB disconnect, device number 76 [ 335.453204][ T8533] fido_id[8533]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 335.842551][ T8544] jffs2: notice: (8544) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 335.961873][ T5746] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 336.111540][ T5746] usb 3-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 336.112705][ T5746] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 336.112724][ T5746] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 336.115710][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.115725][ T5746] usb 3-1: Product: syz [ 336.115736][ T5746] usb 3-1: Manufacturer: syz [ 336.115747][ T5746] usb 3-1: SerialNumber: syz [ 336.120953][ T5733] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 336.292475][ T5733] usb 2-1: Using ep0 maxpacket: 32 [ 336.299336][ T5733] usb 2-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c [ 336.311753][ T5733] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 336.319662][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.319678][ T5733] usb 2-1: Product: syz [ 336.319689][ T5733] usb 2-1: Manufacturer: syz [ 336.319700][ T5733] usb 2-1: SerialNumber: syz [ 336.363833][ T5733] usb 2-1: config 0 descriptor?? [ 336.364918][ T8547] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 336.388585][ T5733] hub 2-1:0.0: bad descriptor, ignoring hub [ 336.388600][ T5733] hub 2-1:0.0: probe with driver hub failed with error -5 [ 336.417054][ T5733] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input42 [ 336.470433][ T5746] usb 3-1: Invalid number of CPorts: 0 [ 336.470453][ T5746] es2_ap_driver 3-1:1.0: probe with driver es2_ap_driver failed with error -22 [ 336.748151][ T5746] usb 3-1: USB disconnect, device number 80 [ 336.933117][ T5733] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 336.990733][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 336.990976][ T10] usb 2-1: USB disconnect, device number 88 [ 337.081673][ T5733] usb 1-1: device descriptor read/64, error -71 [ 337.163684][ T8559] FAULT_INJECTION: forcing a failure. [ 337.163684][ T8559] name failslab, interval 1, probability 0, space 0, times 0 [ 337.163705][ T8559] CPU: 0 UID: 0 PID: 8559 Comm: syz.3.956 Not tainted syzkaller #0 PREEMPT(full) [ 337.163723][ T8559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 337.163733][ T8559] Call Trace: [ 337.163740][ T8559] [ 337.163747][ T8559] dump_stack_lvl+0xe8/0x150 [ 337.163774][ T8559] should_fail_ex+0x3eb/0x540 [ 337.163803][ T8559] should_failslab+0xa8/0x100 [ 337.163825][ T8559] __kmalloc_noprof+0xf9/0x710 [ 337.163851][ T8559] ? tomoyo_encode+0x2ad/0x570 [ 337.163867][ T8559] ? tomoyo_encode+0x2ad/0x570 [ 337.163889][ T8559] tomoyo_encode+0x2ad/0x570 [ 337.163910][ T8559] tomoyo_realpath_from_path+0x5fa/0x640 [ 337.163935][ T8559] ? tomoyo_path_number_perm+0x219/0x5f0 [ 337.163968][ T8559] tomoyo_path_number_perm+0x246/0x5f0 [ 337.163995][ T8559] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 337.164018][ T8559] ? __lock_acquire+0x747/0x2de0 [ 337.164063][ T8559] ? __fget_files+0x2a/0x420 [ 337.164091][ T8559] ? __fget_files+0x2a/0x420 [ 337.164116][ T8559] ? __fget_files+0x2a/0x420 [ 337.164146][ T8559] security_file_ioctl+0xc3/0x2a0 [ 337.164170][ T8559] __se_sys_ioctl+0x47/0x170 [ 337.164191][ T8559] do_syscall_64+0x166/0x520 [ 337.164213][ T8559] ? trace_irq_disable+0x3b/0x140 [ 337.164231][ T8559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.164248][ T8559] ? clear_bhb_loop+0x70/0xc0 [ 337.164269][ T8559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.164285][ T8559] RIP: 0033:0x7fb51679f559 [ 337.164300][ T8559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.164314][ T8559] RSP: 002b:00007fb51758d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 337.164331][ T8559] RAX: ffffffffffffffda RBX: 00007fb516a25fa0 RCX: 00007fb51679f559 [ 337.164344][ T8559] RDX: 00002000000000c0 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 337.164355][ T8559] RBP: 00007fb51758d090 R08: 0000000000000000 R09: 0000000000000000 [ 337.164365][ T8559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.164375][ T8559] R13: 00007fb516a26038 R14: 00007fb516a25fa0 R15: 00007ffc47381448 [ 337.164400][ T8559] [ 337.166897][ T8559] ERROR: Out of memory at tomoyo_realpath_from_path. [ 337.367712][ T5733] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 337.457982][ T5714] net_ratelimit: 55 callbacks suppressed [ 337.513652][ T5733] usb 1-1: device descriptor read/64, error -71 [ 337.621990][ T5733] usb usb1-port1: attempt power cycle [ 337.860766][ T5746] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 337.881508][ T10] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 337.961383][ T5733] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 337.982240][ T5733] usb 1-1: device descriptor read/8, error -71 [ 338.011549][ T5746] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 338.012948][ T5746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.017603][ T5746] usb 3-1: config 0 descriptor?? [ 338.049463][ T10] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 338.061495][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.069100][ T10] usb 4-1: config 0 descriptor?? [ 338.220805][ T5733] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 338.220908][ T127] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 338.227368][ T5746] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 338.256520][ T5733] usb 1-1: device descriptor read/8, error -71 [ 338.285686][ T10] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 338.364143][ T5733] usb usb1-port1: unable to enumerate USB device [ 338.377172][ T127] usb 2-1: Using ep0 maxpacket: 16 [ 338.386637][ T127] usb 2-1: New USB device found: idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 338.388636][ T127] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.388668][ T127] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 338.388688][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.388707][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.447496][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.447519][ T127] usb 2-1: Product: syz [ 338.447531][ T127] usb 2-1: Manufacturer: syz [ 338.447542][ T127] usb 2-1: SerialNumber: syz [ 338.478750][ T127] usb 2-1: config 0 descriptor?? [ 338.499459][ T127] appledisplay 2-1:0.0: Submitting URB failed [ 338.499567][ T127] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -5 [ 338.542844][ T5746] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 338.542861][ T5746] [drm] Initialized udl on minor 1 [ 338.594400][ T10] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 338.594439][ T10] [drm] Initialized udl on minor 2 [ 338.717527][ T127] usb 2-1: USB disconnect, device number 89 [ 338.741976][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 338.742317][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 338.743757][ T8476] udevd[8476]: setting owner of /dev/bus/usb/002/089 to uid=0, gid=0 failed: No such file or directory [ 338.810564][ T5733] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 338.822187][ T10] usb 4-1: USB disconnect, device number 100 [ 338.866272][ T5733] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 338.898470][ T8561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.899275][ T8561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.391910][ T8573] FAULT_INJECTION: forcing a failure. [ 339.391910][ T8573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.391949][ T8573] CPU: 0 UID: 0 PID: 8573 Comm: syz.1.962 Not tainted syzkaller #0 PREEMPT(full) [ 339.391967][ T8573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 339.391977][ T8573] Call Trace: [ 339.391984][ T8573] [ 339.391991][ T8573] dump_stack_lvl+0xe8/0x150 [ 339.392017][ T8573] should_fail_ex+0x3eb/0x540 [ 339.392047][ T8573] _copy_from_iter+0x1d3/0x1680 [ 339.392076][ T8573] ? lock_acquire+0x115/0x350 [ 339.392094][ T8573] ? __lock_acquire+0x747/0x2de0 [ 339.392110][ T8573] ? __pfx__copy_from_iter+0x10/0x10 [ 339.392145][ T8573] tun_get_user+0x51a/0x4470 [ 339.392174][ T8573] ? aa_file_perm+0x18b/0x15f0 [ 339.392196][ T8573] ? aa_file_perm+0x4ed/0x15f0 [ 339.392212][ T8573] ? __pfx_tun_get_user+0x10/0x10 [ 339.392232][ T8573] ? __lock_acquire+0x747/0x2de0 [ 339.392249][ T8573] ? kstrtoull+0x137/0x1d0 [ 339.392275][ T8573] ? ref_tracker_alloc+0x172/0x530 [ 339.392291][ T8573] ? lock_acquire+0x115/0x350 [ 339.392307][ T8573] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 339.392326][ T8573] ? lock_acquire+0x115/0x350 [ 339.392341][ T8573] ? tun_get+0x1c/0x2f0 [ 339.392362][ T8573] ? tun_get+0x1c/0x2f0 [ 339.392379][ T8573] ? tun_get+0x1c/0x2f0 [ 339.392399][ T8573] tun_chr_write_iter+0x113/0x200 [ 339.392419][ T8573] vfs_write+0x612/0xba0 [ 339.392442][ T8573] ? __pfx_vfs_write+0x10/0x10 [ 339.392460][ T8573] ? __fget_files+0x3a2/0x420 [ 339.392485][ T8573] ? __fget_files+0x2a/0x420 [ 339.392513][ T8573] ? fdget+0x1ac/0x250 [ 339.392532][ T8573] ksys_write+0x150/0x270 [ 339.392551][ T8573] ? __pfx_ksys_write+0x10/0x10 [ 339.392575][ T8573] do_syscall_64+0x166/0x520 [ 339.392595][ T8573] ? trace_irq_disable+0x3b/0x140 [ 339.392613][ T8573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.392630][ T8573] ? clear_bhb_loop+0x70/0xc0 [ 339.392649][ T8573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.392666][ T8573] RIP: 0033:0x7f986139f559 [ 339.392681][ T8573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.392695][ T8573] RSP: 002b:00007f98622fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 339.392712][ T8573] RAX: ffffffffffffffda RBX: 00007f9861625fa0 RCX: 00007f986139f559 [ 339.392724][ T8573] RDX: 000000000000fdef RSI: 0000200000000f80 RDI: 0000000000000004 [ 339.392742][ T8573] RBP: 00007f98622fe090 R08: 0000000000000000 R09: 0000000000000000 [ 339.392752][ T8573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.392762][ T8573] R13: 00007f9861626038 R14: 00007f9861625fa0 R15: 00007ffd85604a08 [ 339.392787][ T8573] [ 339.913021][ T8578] jffs2: notice: (8578) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 340.210978][ T5733] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 340.361784][ T5733] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41 [ 340.362991][ T5733] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 340.363010][ T5733] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 340.363028][ T5733] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 340.365464][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 340.365481][ T5733] usb 2-1: Product: syz [ 340.365492][ T5733] usb 2-1: Manufacturer: syz [ 340.365503][ T5733] usb 2-1: SerialNumber: syz [ 340.510719][ T5618] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 340.657177][ T5733] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 90 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 340.673578][ T5618] usb 1-1: Using ep0 maxpacket: 32 [ 340.684102][ T5618] usb 1-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c [ 340.687109][ T5618] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 340.690389][ T5618] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.690404][ T5618] usb 1-1: Product: syz [ 340.690415][ T5618] usb 1-1: Manufacturer: syz [ 340.690447][ T5618] usb 1-1: SerialNumber: syz [ 340.745941][ T5618] usb 1-1: config 0 descriptor?? [ 340.748430][ T8587] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 340.767292][ T5618] hub 1-1:0.0: bad descriptor, ignoring hub [ 340.767308][ T5618] hub 1-1:0.0: probe with driver hub failed with error -5 [ 340.798542][ T5618] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input43 [ 340.998874][ T5618] usb 2-1: USB disconnect, device number 90 [ 341.116265][ T5618] usblp0: removed [ 341.203515][ T2243] usb 1-1: USB disconnect, device number 81 [ 341.203652][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 342.070731][ T2243] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 342.220834][ T2243] usb 1-1: Using ep0 maxpacket: 16 [ 342.221680][ T2243] usb 1-1: New USB device found: idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 342.222878][ T2243] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.222931][ T2243] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 342.222953][ T2243] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.222973][ T2243] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.226302][ T2243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.226318][ T2243] usb 1-1: Product: syz [ 342.226329][ T2243] usb 1-1: Manufacturer: syz [ 342.226341][ T2243] usb 1-1: SerialNumber: syz [ 342.229638][ T2243] usb 1-1: config 0 descriptor?? [ 342.330091][ T2243] appledisplay 1-1:0.0: Submitting URB failed [ 342.330246][ T2243] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -5 [ 342.542781][ T2243] usb 1-1: USB disconnect, device number 82 [ 342.842215][ C0] net_ratelimit: 79 callbacks suppressed [ 343.722181][ T5746] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffff92 [ 343.722489][ T5746] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 343.727394][ T5618] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 343.766120][ T5746] usb 3-1: USB disconnect, device number 81 [ 343.782738][ T5618] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 343.782942][ T5618] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 344.031749][ T8610] jffs2: notice: (8610) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 344.210822][ T10] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 344.361359][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 344.362504][ T10] usb 4-1: New USB device found: idVendor=044e, idProduct=120b, bcdDevice=0.00 [ 344.365308][ T10] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 344.365351][ T10] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.365392][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 344.365461][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.388070][ T10] usb 4-1: config 0 descriptor?? [ 344.490691][ T5618] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 344.560889][ T5746] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 344.640807][ T5618] usb 1-1: Using ep0 maxpacket: 16 [ 344.641615][ T5618] usb 1-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 344.646279][ T5618] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 344.649562][ T5618] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.649578][ T5618] usb 1-1: Product: syz [ 344.649589][ T5618] usb 1-1: Manufacturer: syz [ 344.649600][ T5618] usb 1-1: SerialNumber: syz [ 344.708101][ T5618] r8152-cfgselector 1-1: Unknown version 0x0000 [ 344.708133][ T5618] r8152-cfgselector 1-1: config 0 descriptor?? [ 344.710890][ T5746] usb 3-1: Using ep0 maxpacket: 16 [ 344.732748][ T5746] usb 3-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 344.739151][ T5746] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.739205][ T5746] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.739225][ T5746] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.739241][ T5746] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 344.739261][ T5746] usb 3-1: config 0 interface 0 has no altsetting 0 [ 344.739301][ T5746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.819008][ T5746] usb 3-1: config 0 descriptor?? [ 344.871922][ T127] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 345.031516][ T127] usb 2-1: Using ep0 maxpacket: 32 [ 345.032364][ T127] usb 2-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c [ 345.033615][ T127] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 345.039823][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.039838][ T127] usb 2-1: Product: syz [ 345.039849][ T127] usb 2-1: Manufacturer: syz [ 345.039861][ T127] usb 2-1: SerialNumber: syz [ 345.100176][ T127] usb 2-1: config 0 descriptor?? [ 345.108263][ T8619] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 345.109732][ T127] hub 2-1:0.0: bad descriptor, ignoring hub [ 345.109748][ T127] hub 2-1:0.0: probe with driver hub failed with error -5 [ 345.147943][ T127] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input45 [ 345.165654][ T5618] r8152-cfgselector 1-1: USB disconnect, device number 83 [ 345.398721][ T8601] validate_nla: 56 callbacks suppressed [ 345.398731][ T8601] netlink: 'syz.3.972': attribute type 10 has an invalid length. [ 345.426712][ T8601] syz_tun: entered promiscuous mode [ 345.529930][ T8620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.547536][ T127] usb 2-1: USB disconnect, device number 91 [ 345.547646][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 345.593148][ T8620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.626778][ T5746] logitech-djreceiver 0003:046D:C53A.0008: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0 [ 345.657804][ T8601] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 346.077495][ T8624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.078056][ T8624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.120554][ T10] hid-alps 0003:044E:120B.0007: failed to read command (-71) [ 346.120595][ T10] hid-alps 0003:044E:120B.0007: failed U1_NUM_SENS_X (-71) [ 346.154873][ T10] hid-alps 0003:044E:120B.0007: hidraw1: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.3-1/input0 [ 346.187212][ T10] usb 4-1: USB disconnect, device number 101 [ 346.201507][ T127] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 346.351021][ T127] usb 1-1: Using ep0 maxpacket: 16 [ 346.364255][ T5746] usb 3-1: USB disconnect, device number 82 [ 346.373530][ T127] usb 1-1: New USB device found: idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 346.391916][ T127] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.391950][ T127] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 346.391970][ T127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.391990][ T127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.446911][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.446927][ T127] usb 1-1: Product: syz [ 346.446938][ T127] usb 1-1: Manufacturer: syz [ 346.446949][ T127] usb 1-1: SerialNumber: syz [ 346.484000][ T127] usb 1-1: config 0 descriptor?? [ 346.514754][ T127] appledisplay 1-1:0.0: Submitting URB failed [ 346.514843][ T127] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -5 [ 346.547770][ T8625] fido_id[8625]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 346.721143][ T127] usb 1-1: USB disconnect, device number 84 [ 346.811397][ T10] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 346.958310][ T8633] sctp: [Deprecated]: syz.2.982 (pid 8633) Use of struct sctp_assoc_value in delayed_ack socket option. [ 346.958310][ T8633] Use struct sctp_sack_info instead [ 346.978981][ T10] usb 2-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 346.994563][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 346.994588][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 346.999674][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.999690][ T10] usb 2-1: Product: syz [ 346.999701][ T10] usb 2-1: Manufacturer: syz [ 346.999712][ T10] usb 2-1: SerialNumber: syz [ 347.104515][ T5746] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 347.251947][ T5746] usb 4-1: Using ep0 maxpacket: 16 [ 347.253261][ T5746] usb 4-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=f.89 [ 347.254457][ T5746] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.254473][ T5746] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.266269][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 347.266304][ T5746] usb 4-1: SerialNumber: syz [ 347.345358][ T5746] usb 4-1: 0:2 : does not exist [ 347.348477][ T10] usb 2-1: Invalid number of CPorts: 0 [ 347.348497][ T10] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -22 [ 347.467826][ T8640] jffs2: notice: (8640) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 347.534309][ T5746] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 347.567047][ T5618] usb 2-1: USB disconnect, device number 92 [ 347.581595][ T5746] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 347.623022][ T5746] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 347.623040][ T5746] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 347.623054][ T5746] usb 4-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = 0/1/1 [ 347.649060][ T10] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 347.667160][ T5746] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 347.667177][ T5746] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 347.667191][ T5746] usb 4-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = 0/1/1 [ 347.715405][ T5746] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 347.733982][ T5746] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 347.752268][ T5746] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 347.768930][ T5746] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 347.788207][ T5746] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 347.806817][ T5746] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 347.822999][ T5746] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 347.845060][ T10] usb 3-1: New USB device found: idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 347.846979][ T10] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 347.846996][ T10] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 347.847012][ T10] usb 3-1: config 150 has no interface number 0 [ 347.847062][ T10] usb 3-1: config 150 interface 204 has no altsetting 0 [ 347.893962][ T5746] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 347.914989][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.915005][ T10] usb 3-1: Product: syz [ 347.915016][ T10] usb 3-1: Manufacturer: syz [ 347.915034][ T10] usb 3-1: SerialNumber: syz [ 347.962576][ T33] net_ratelimit: 111 callbacks suppressed [ 347.985142][ T5746] usb 4-1: 5:0: cannot get min/max values for control 8 (id 5) [ 348.002529][ T5746] usb 4-1: 5:0: cannot get min/max values for control 8 (id 5) [ 348.089376][ T5746] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 348.113682][ T5746] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 348.187631][ T10] xr_serial 3-1:150.204: skipping garbage [ 348.187662][ T10] xr_serial 3-1:150.204: xr_serial converter detected [ 348.258165][ T5746] usb 4-1: USB disconnect, device number 102 [ 348.368318][ T8463] udevd[8463]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.396114][ T32] audit: type=1800 audit(1792592310.023:6): pid=8640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.985" name="file0" dev="jffs2" ino=8 res=0 errno=-4 [ 348.807564][ T10] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 348.807603][ T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 348.831588][ T5746] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 348.848337][ T10] usb 3-1: USB disconnect, device number 83 [ 348.865348][ T10] xr_serial 3-1:150.204: device disconnected [ 348.892291][ T5618] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 348.992630][ T5746] usb 4-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00 [ 348.993670][ T5746] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 348.993687][ T5746] usb 4-1: config 1 has no interface number 0 [ 348.993715][ T5746] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 348.993735][ T5746] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 348.993755][ T5746] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.996021][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.996036][ T5746] usb 4-1: Product: syz [ 348.996047][ T5746] usb 4-1: Manufacturer: syz [ 348.996058][ T5746] usb 4-1: SerialNumber: syz [ 349.018232][ T8648] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 349.018606][ T127] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 349.063014][ T5618] usb 2-1: Using ep0 maxpacket: 32 [ 349.063755][ T5618] usb 2-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c [ 349.128648][ T5618] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 349.146575][ T5618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.146590][ T5618] usb 2-1: Product: syz [ 349.146602][ T5618] usb 2-1: Manufacturer: syz [ 349.146613][ T5618] usb 2-1: SerialNumber: syz [ 349.176398][ T5618] usb 2-1: config 0 descriptor?? [ 349.180926][ T8650] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 349.194724][ T5618] hub 2-1:0.0: bad descriptor, ignoring hub [ 349.194738][ T5618] hub 2-1:0.0: probe with driver hub failed with error -5 [ 349.222093][ T5618] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input46 [ 349.248743][ T127] usb 1-1: New USB device found: idVendor=1e71, idProduct=170e, bcdDevice=0.00 [ 349.272982][ T127] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.273003][ T127] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.273022][ T127] usb 1-1: config 0 interface 0 has no altsetting 0 [ 349.273061][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.370880][ T8648] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 349.460105][ T127] usb 1-1: config 0 descriptor?? [ 349.596502][ T5618] usb 2-1: USB disconnect, device number 93 [ 349.596614][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 349.642623][ T5746] usb 4-1: Incompatible driver and firmware versions [ 349.823514][ T8656] capability: warning: `syz.2.991' uses 32-bit capabilities (legacy support in use) [ 349.847174][ T5746] usb 4-1: USB disconnect, device number 103 [ 349.954620][ T127] nzxt-kraken2 0003:1E71:170E.0009: unknown main item tag 0x0 [ 349.954643][ T127] nzxt-kraken2 0003:1E71:170E.0009: unknown main item tag 0x0 [ 349.954662][ T127] nzxt-kraken2 0003:1E71:170E.0009: unknown main item tag 0x0 [ 349.954682][ T127] nzxt-kraken2 0003:1E71:170E.0009: unknown main item tag 0x0 [ 349.954701][ T127] nzxt-kraken2 0003:1E71:170E.0009: unknown main item tag 0x0 [ 349.954746][ T127] nzxt-kraken2 0003:1E71:170E.0009: unknown main item tag 0x0 [ 349.954766][ T127] nzxt-kraken2 0003:1E71:170E.0009: unknown main item tag 0x0 [ 349.954785][ T127] nzxt-kraken2 0003:1E71:170E.0009: unknown main item tag 0x0 [ 349.954805][ T127] nzxt-kraken2 0003:1E71:170E.0009: unknown main item tag 0x0 [ 349.954824][ T127] nzxt-kraken2 0003:1E71:170E.0009: unknown main item tag 0x0 [ 349.954887][ T127] nzxt-kraken2 0003:1E71:170E.0009: unbalanced collection at end of report description [ 349.955392][ T127] nzxt-kraken2 0003:1E71:170E.0009: hid parse failed with -22 [ 349.985551][ T127] nzxt-kraken2 0003:1E71:170E.0009: probe with driver nzxt-kraken2 failed with error -22 [ 350.154099][ T5746] usb 1-1: USB disconnect, device number 85 [ 350.231751][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.992'. [ 350.581409][ T5618] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 350.723736][ T5618] usb 2-1: device descriptor read/64, error -71 [ 350.750135][ T8668] jffs2: notice: (8668) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 350.782111][ T8671] FAULT_INJECTION: forcing a failure. [ 350.782111][ T8671] name failslab, interval 1, probability 0, space 0, times 0 [ 350.782135][ T8671] CPU: 0 UID: 0 PID: 8671 Comm: syz.0.997 Not tainted syzkaller #0 PREEMPT(full) [ 350.782154][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 350.782164][ T8671] Call Trace: [ 350.782170][ T8671] [ 350.782178][ T8671] dump_stack_lvl+0xe8/0x150 [ 350.782205][ T8671] should_fail_ex+0x3eb/0x540 [ 350.782234][ T8671] should_failslab+0xa8/0x100 [ 350.782255][ T8671] __kmalloc_noprof+0xf9/0x710 [ 350.782281][ T8671] ? tomoyo_encode+0x2ad/0x570 [ 350.782297][ T8671] ? tomoyo_encode+0x2ad/0x570 [ 350.782318][ T8671] tomoyo_encode+0x2ad/0x570 [ 350.782339][ T8671] tomoyo_realpath_from_path+0x5fa/0x640 [ 350.782365][ T8671] ? tomoyo_path_number_perm+0x219/0x5f0 [ 350.782389][ T8671] tomoyo_path_number_perm+0x246/0x5f0 [ 350.782415][ T8671] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 350.782438][ T8671] ? __lock_acquire+0x747/0x2de0 [ 350.782483][ T8671] ? __fget_files+0x2a/0x420 [ 350.782510][ T8671] ? __fget_files+0x2a/0x420 [ 350.782535][ T8671] ? __fget_files+0x2a/0x420 [ 350.782564][ T8671] security_file_ioctl+0xc3/0x2a0 [ 350.782588][ T8671] __se_sys_ioctl+0x47/0x170 [ 350.782613][ T8671] do_syscall_64+0x166/0x520 [ 350.782633][ T8671] ? trace_irq_disable+0x3b/0x140 [ 350.782651][ T8671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.782669][ T8671] ? clear_bhb_loop+0x70/0xc0 [ 350.782690][ T8671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.782706][ T8671] RIP: 0033:0x7f8df1b9f559 [ 350.782721][ T8671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.782735][ T8671] RSP: 002b:00007f8df2ace028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.782752][ T8671] RAX: ffffffffffffffda RBX: 00007f8df1e25fa0 RCX: 00007f8df1b9f559 [ 350.782764][ T8671] RDX: 0000200000000100 RSI: 00000000c034564b RDI: 0000000000000003 [ 350.782775][ T8671] RBP: 00007f8df2ace090 R08: 0000000000000000 R09: 0000000000000000 [ 350.782786][ T8671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.782795][ T8671] R13: 00007f8df1e26038 R14: 00007f8df1e25fa0 R15: 00007ffc6bea5df8 [ 350.782821][ T8671] [ 350.782858][ T8671] ERROR: Out of memory at tomoyo_realpath_from_path. [ 350.945466][ T5746] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 351.041382][ T5618] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 351.155770][ T8675] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 351.176223][ T5618] usb 2-1: device descriptor read/64, error -71 [ 351.264950][ T5746] usb 3-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 351.280587][ T5746] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 351.280764][ T5746] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 351.288149][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.288165][ T5746] usb 3-1: Product: syz [ 351.288176][ T5746] usb 3-1: Manufacturer: syz [ 351.288187][ T5746] usb 3-1: SerialNumber: syz [ 351.348091][ T5618] usb usb2-port1: attempt power cycle [ 351.560542][ T5746] usb 3-1: Invalid number of CPorts: 0 [ 351.560575][ T5746] es2_ap_driver 3-1:1.0: probe with driver es2_ap_driver failed with error -22 [ 351.680728][ T5618] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 351.703829][ T5618] usb 2-1: device descriptor read/8, error -71 [ 351.766802][ T5746] usb 3-1: USB disconnect, device number 84 [ 351.942023][ T5618] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 351.973019][ T5618] usb 2-1: device descriptor read/8, error -71 [ 352.081712][ T5618] usb usb2-port1: unable to enumerate USB device [ 352.101088][ T2243] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 352.253240][ T2243] usb 4-1: New USB device found: idVendor=15a4, idProduct=9035, bcdDevice=2.00 [ 352.254205][ T2243] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.254239][ T2243] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 352.254284][ T2243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.464921][ T2243] usb 4-1: dvb_usb_v2: 2nd usb_bulk_msg() failed=-22 [ 352.465075][ T2243] dvb_usb_af9035 4-1:1.0: probe with driver dvb_usb_af9035 failed with error -22 [ 352.623961][ T8698] FAULT_INJECTION: forcing a failure. [ 352.623961][ T8698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.623982][ T8698] CPU: 0 UID: 0 PID: 8698 Comm: syz.2.1003 Not tainted syzkaller #0 PREEMPT(full) [ 352.624001][ T8698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 352.624011][ T8698] Call Trace: [ 352.624018][ T8698] [ 352.624025][ T8698] dump_stack_lvl+0xe8/0x150 [ 352.624052][ T8698] should_fail_ex+0x3eb/0x540 [ 352.624082][ T8698] _copy_from_user+0x2d/0xb0 [ 352.624099][ T8698] cache_write+0xf8/0x210 [ 352.624122][ T8698] ? cache_write_procfs+0x26/0x80 [ 352.624147][ T8698] ? __pfx_cache_write_procfs+0x10/0x10 [ 352.624169][ T8698] proc_reg_write+0x1e9/0x2e0 [ 352.624193][ T8698] ? __pfx_proc_reg_write+0x10/0x10 [ 352.624223][ T8698] vfs_write+0x296/0xba0 [ 352.624247][ T8698] ? __pfx_vfs_write+0x10/0x10 [ 352.624265][ T8698] ? __fget_files+0x2a/0x420 [ 352.624290][ T8698] ? __fget_files+0x3a2/0x420 [ 352.624315][ T8698] ? __fget_files+0x2a/0x420 [ 352.624343][ T8698] ? fdget+0x1ac/0x250 [ 352.624363][ T8698] ksys_write+0x150/0x270 [ 352.624382][ T8698] ? __pfx_ksys_write+0x10/0x10 [ 352.624408][ T8698] do_syscall_64+0x166/0x520 [ 352.624428][ T8698] ? trace_irq_disable+0x3b/0x140 [ 352.624446][ T8698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.624463][ T8698] ? clear_bhb_loop+0x70/0xc0 [ 352.624483][ T8698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.624500][ T8698] RIP: 0033:0x7fed00d9f559 [ 352.624515][ T8698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.624529][ T8698] RSP: 002b:00007fed01c38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 352.624546][ T8698] RAX: ffffffffffffffda RBX: 00007fed01025fa0 RCX: 00007fed00d9f559 [ 352.624559][ T8698] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000004 [ 352.624570][ T8698] RBP: 00007fed01c38090 R08: 0000000000000000 R09: 0000000000000000 [ 352.624580][ T8698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.624590][ T8698] R13: 00007fed01026038 R14: 00007fed01025fa0 R15: 00007fff3d2e9528 [ 352.624622][ T8698] [ 352.865916][ T8699] warning: `syz.0.1004' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 352.884070][ T2243] usb 4-1: USB disconnect, device number 104 [ 353.323856][ C0] net_ratelimit: 58 callbacks suppressed [ 358.843521][ C0] net_ratelimit: 7 callbacks suppressed [ 394.042085][ C0] net_ratelimit: 18 callbacks suppressed [ 401.140628][ C0] sched: DL replenish lagged too much [ 408.802393][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.812588][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.112139][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 458.122279][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.170589][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 458.190025][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8706/1:b..l.. [ 458.199011][ C0] rcu: (detected by 0, t=10502 jiffies, g=59045, q=223 ncpus=1) [ 458.206753][ C0] task:syz.0.1004 state:R running task stack:23664 pid:8706 tgid:8697 ppid:5613 task_flags:0x400840 flags:0x00080000 [ 458.220252][ C0] Call Trace: [ 458.223535][ C0] [ 458.226473][ C0] __schedule+0x17dd/0x5820 [ 458.230999][ C0] ? __lock_acquire+0x747/0x2de0 [ 458.235945][ C0] ? __pfx___schedule+0x10/0x10 [ 458.240812][ C0] preempt_schedule_irq+0x4b/0x90 [ 458.245857][ C0] irqentry_exit+0x14f/0x9b0 [ 458.250473][ C0] ? trace_irq_disable+0x3b/0x140 [ 458.255529][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 458.261541][ C0] RIP: 0010:__kasan_check_byte+0x2d/0x40 [ 458.267192][ C0] Code: d6 41 56 53 48 89 f3 49 89 fe e8 ce 15 00 00 84 c0 75 16 be 01 00 00 00 4c 89 f7 31 d2 48 89 d9 89 c3 e8 f6 04 00 00 89 d8 5b <41> 5e c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 [ 458.286816][ C0] RSP: 0018:ffffc90003946788 EFLAGS: 00000202 [ 458.292904][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 8000000000000001 [ 458.300888][ C0] RDX: 0000000000000000 RSI: ffffffff8217a148 RDI: 1ffffffff202b494 [ 458.308878][ C0] RBP: ffffc90003946c90 R08: 0000000000000000 R09: 0000000000000000 [ 458.316878][ C0] R10: dffffc0000000000 R11: fffff94000221691 R12: ffffffff9015a4a0 [ 458.324871][ C0] R13: 0000000000000002 R14: ffffffff9015a4a0 R15: 0000000000000000 [ 458.332861][ C0] ? folio_evictable+0x38/0x250 [ 458.337741][ C0] lock_acquire+0x7d/0x350 [ 458.342174][ C0] ? folio_evictable+0x1c/0x250 [ 458.347052][ C0] folio_evictable+0x38/0x250 [ 458.351747][ C0] ? folio_evictable+0x1c/0x250 [ 458.356611][ C0] shrink_folio_list+0x8c2/0x4d90 [ 458.361666][ C0] ? __pfx_shrink_folio_list+0x10/0x10 [ 458.367248][ C0] ? __lock_acquire+0x747/0x2de0 [ 458.372240][ C0] ? lock_acquire+0x115/0x350 [ 458.376964][ C0] ? __pfx___css_rstat_updated+0x10/0x10 [ 458.382622][ C0] reclaim_folio_list+0x100/0x430 [ 458.387672][ C0] ? __pfx_reclaim_folio_list+0x10/0x10 [ 458.393236][ C0] reclaim_pages+0x452/0x530 [ 458.397841][ C0] ? __pfx_reclaim_pages+0x10/0x10 [ 458.402959][ C0] ? madvise_cold_or_pageout_pte_range+0x1b60/0x2390 [ 458.409643][ C0] madvise_cold_or_pageout_pte_range+0x1b85/0x2390 [ 458.416177][ C0] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 458.423042][ C0] ? lru_gen_update_size+0x719/0xd00 [ 458.428345][ C0] walk_pgd_range+0x102d/0x1dc0 [ 458.433230][ C0] ? __pfx_walk_pgd_range+0x10/0x10 [ 458.438432][ C0] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 458.444163][ C0] __walk_page_range+0x16d/0x720 [ 458.449121][ C0] walk_page_range_vma_unsafe+0x309/0x410 [ 458.454849][ C0] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 458.461113][ C0] ? mlock_drain_local+0x79/0x490 [ 458.466160][ C0] ? walk_page_range_vma+0x6b/0x90 [ 458.471279][ C0] madvise_vma_behavior+0x2ba2/0x4a00 [ 458.476671][ C0] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 458.482410][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 458.487450][ C0] ? rcu_is_watching+0x16/0xb0 [ 458.492231][ C0] ? trace_hrtimer_start+0x82/0x200 [ 458.497453][ C0] ? hrtimer_start_range_ns_common+0x7f6/0xb60 [ 458.503629][ C0] ? rcu_is_watching+0x16/0xb0 [ 458.508399][ C0] ? trace_sched_exit_tp+0x3a/0x130 [ 458.513608][ C0] ? __lock_acquire+0x747/0x2de0 [ 458.518571][ C0] ? mas_prev_slot+0xb76/0xbf0 [ 458.523381][ C0] ? find_vma_prev+0x123/0x1b0 [ 458.528166][ C0] ? __pfx_find_vma_prev+0x10/0x10 [ 458.533300][ C0] ? futex_unqueue+0x22/0x240 [ 458.538001][ C0] ? __futex_wait+0x3c7/0x470 [ 458.542714][ C0] madvise_walk_vmas+0x57d/0xb70 [ 458.547685][ C0] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 458.553165][ C0] ? blk_start_plug+0x6e/0x1b0 [ 458.558023][ C0] madvise_do_behavior+0x385/0x540 [ 458.563155][ C0] ? __pfx_madvise_do_behavior+0x10/0x10 [ 458.568801][ C0] ? down_read+0x2b9/0x320 [ 458.573225][ C0] ? trace_sched_exit_tp+0x3a/0x130 [ 458.578434][ C0] do_madvise+0x327/0x3a0 [ 458.582769][ C0] ? __pfx_do_madvise+0x10/0x10 [ 458.587639][ C0] ? __se_sys_futex+0x3a8/0x450 [ 458.592511][ C0] ? rcu_is_watching+0x16/0xb0 [ 458.597285][ C0] __x64_sys_madvise+0xa6/0xc0 [ 458.602061][ C0] do_syscall_64+0x166/0x520 [ 458.606656][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.612724][ C0] ? clear_bhb_loop+0x70/0xc0 [ 458.617408][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.623301][ C0] RIP: 0033:0x7f8df1b9f559 [ 458.627714][ C0] RSP: 002b:00007f8df2aad028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 458.636136][ C0] RAX: ffffffffffffffda RBX: 00007f8df1e26090 RCX: 00007f8df1b9f559 [ 458.644111][ C0] RDX: 0000000000000015 RSI: 0000000000600003 RDI: 0000200000000000 [ 458.652090][ C0] RBP: 00007f8df1c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 458.660064][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.668038][ C0] R13: 00007f8df1e26128 R14: 00007f8df1e26090 R15: 00007ffc6bea5df8 [ 458.676022][ C0] [ 458.679040][ C0] rcu: rcu_preempt kthread starved for 10375 jiffies! g59045 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 458.690054][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 458.700021][ C0] rcu: RCU grace-period kthread stack dump: [ 458.705908][ C0] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 458.719401][ C0] Call Trace: [ 458.722685][ C0] [ 458.725620][ C0] __schedule+0x17dd/0x5820 [ 458.730128][ C0] ? __lock_acquire+0x747/0x2de0 [ 458.735075][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 458.740198][ C0] ? __pfx___schedule+0x10/0x10 [ 458.745050][ C0] ? lock_acquire+0x115/0x350 [ 458.749741][ C0] ? schedule+0x90/0x2b0 [ 458.753990][ C0] schedule+0x164/0x2b0 [ 458.758158][ C0] schedule_timeout+0x152/0x2c0 [ 458.763046][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 458.768454][ C0] ? __pfx_process_timeout+0x10/0x10 [ 458.773790][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 458.779604][ C0] ? prepare_to_swait_event+0x220/0x3e0 [ 458.785173][ C0] ? prepare_to_swait_event+0x35e/0x3e0 [ 458.790754][ C0] rcu_gp_fqs_loop+0x30c/0x1230 [ 458.795641][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 458.801816][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 458.807119][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 458.812951][ C0] rcu_gp_kthread+0x9c/0x340 [ 458.817573][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 458.822793][ C0] ? __kthread_parkme+0x71/0x1f0 [ 458.827755][ C0] ? __kthread_parkme+0x199/0x1f0 [ 458.832794][ C0] kthread+0x38b/0x480 [ 458.836876][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 458.842073][ C0] ? __pfx_kthread+0x10/0x10 [ 458.846671][ C0] ret_from_fork+0x514/0xb70 [ 458.851282][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 458.856424][ C0] ? __switch_to+0xc78/0x1410 [ 458.861114][ C0] ? __pfx_kthread+0x10/0x10 [ 458.865726][ C0] ret_from_fork_asm+0x1a/0x30 [ 458.870532][ C0] [ 458.873557][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 458.879898][ C0] CPU: 0 UID: 0 PID: 1317 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 458.888930][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 458.899000][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 458.904293][ C0] Code: ff ff ff e8 80 f5 68 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 92 3f 40 13 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d f7 27 1d [ 458.923902][ C0] RSP: 0018:ffffc900000073f0 EFLAGS: 00000296 [ 458.929975][ C0] RAX: f20d8a210cdb1b00 RBX: 0000000000000000 RCX: 8000000000000101 [ 458.937950][ C0] RDX: 00000000071bee9f RSI: ffffffff8ea4850d RDI: ffffffff8c8fe280 [ 458.945931][ C0] RBP: ffff88802ab49f40 R08: ffffffff8a4034c5 R09: 0000000000000000 [ 458.953904][ C0] R10: dffffc0000000000 R11: fffff52000000e98 R12: ffffffff9015a4a0 [ 458.961879][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 458.969854][ C0] FS: 0000000000000000(0000) GS:ffff8881233da000(0000) knlGS:0000000000000000 [ 458.978789][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 458.985375][ C0] CR2: 00007fac1f4c4000 CR3: 000000007503e000 CR4: 00000000003526f0 [ 458.993349][ C0] Call Trace: [ 458.996633][ C0] [ 458.999475][ C0] ? synproxy_pernet+0x45/0x270 [ 459.004343][ C0] synproxy_pernet+0x61/0x270 [ 459.009031][ C0] ? synproxy_pernet+0x45/0x270 [ 459.013903][ C0] nft_synproxy_eval_v4+0xef/0x4e0 [ 459.019030][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 459.024774][ C0] ? nf_ip_checksum+0x13c/0x510 [ 459.029642][ C0] nft_synproxy_do_eval+0x389/0x5d0 [ 459.034845][ C0] ? __lock_acquire+0x747/0x2de0 [ 459.039806][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 459.045544][ C0] ? __lock_acquire+0x747/0x2de0 [ 459.050514][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 459.055669][ C0] nft_do_chain+0x48d/0x1b10 [ 459.060282][ C0] ? lock_acquire+0x115/0x350 [ 459.064984][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 459.070031][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 459.075324][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 459.080555][ C0] nft_do_chain_ipv4+0x195/0x290 [ 459.085514][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 459.090292][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 459.095759][ C0] ? iptable_mangle_hook+0x18a/0x4c0 [ 459.101064][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 459.106531][ C0] nf_hook_slow+0xc5/0x220 [ 459.110958][ C0] NF_HOOK+0x21f/0x3c0 [ 459.115037][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 459.121027][ C0] ? NF_HOOK+0x9e/0x3c0 [ 459.125200][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 459.129796][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 459.135798][ C0] ? ip_local_deliver+0x113/0x190 [ 459.140834][ C0] NF_HOOK+0x336/0x3c0 [ 459.144917][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 459.150041][ C0] ? NF_HOOK+0x9e/0x3c0 [ 459.154212][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 459.158819][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 459.163938][ C0] ? ip_rcv_core+0x88d/0xd50 [ 459.168549][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 459.173078][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 459.177595][ C0] process_backlog+0xa6b/0x18b0 [ 459.182460][ C0] ? process_backlog+0x3de/0x18b0 [ 459.187502][ C0] __napi_poll+0xaa/0x330 [ 459.191858][ C0] net_rx_action+0x61d/0xf50 [ 459.196466][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 459.201612][ C0] handle_softirqs+0x265/0x8d0 [ 459.206399][ C0] ? __dev_queue_xmit+0x29b/0x3920 [ 459.211531][ C0] do_softirq+0x77/0xd0 [ 459.215698][ C0] [ 459.218637][ C0] [ 459.221571][ C0] __local_bh_enable_ip+0x100/0x140 [ 459.226798][ C0] ? __dev_queue_xmit+0x29b/0x3920 [ 459.231919][ C0] __dev_queue_xmit+0x1efb/0x3920 [ 459.236964][ C0] ? __dev_queue_xmit+0x29b/0x3920 [ 459.242095][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 459.247495][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 459.252557][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 459.257775][ C0] tx+0x6b/0x190 [ 459.261352][ C0] ? __pfx_tx+0x10/0x10 [ 459.265517][ C0] kthread+0x1ed/0x420 [ 459.269619][ C0] ? __pfx_kthread+0x10/0x10 [ 459.274216][ C0] ? __pfx_default_wake_function+0x10/0x10 [ 459.280031][ C0] ? __kthread_parkme+0x71/0x1f0 [ 459.284989][ C0] ? __kthread_parkme+0x199/0x1f0 [ 459.290056][ C0] kthread+0x38b/0x480 [ 459.294143][ C0] ? __pfx_kthread+0x10/0x10 [ 459.298740][ C0] ? __pfx_kthread+0x10/0x10 [ 459.303347][ C0] ret_from_fork+0x514/0xb70 [ 459.307954][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 459.313088][ C0] ? __switch_to+0xc78/0x1410 [ 459.317782][ C0] ? __pfx_kthread+0x10/0x10 [ 459.322386][ C0] ret_from_fork_asm+0x1a/0x30 [ 459.327179][ C0]