last executing test programs: 5.542128208s ago: executing program 0 (id=1184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c0007800800064000000008"], 0x5c}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000044) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006"], 0x74}, 0x1, 0x0, 0x0, 0x10000042}, 0x20000014) 5.414637713s ago: executing program 0 (id=1187): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x2, {0x0, 0x0, 0x0, 0x7, 0x80002, 0x5, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffff7ffffffffd, 0x0, 0x4, 0x0, 0x2000, 0xd, r2, r3, 0x800000, 0xfffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffff9c, &(0x7f0000000240)='./file0\x00', 0x20000, 0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ea, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) write$sequencer(r4, 0x0, 0x2f20) 5.083073368s ago: executing program 0 (id=1188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65"], 0x5c}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000044) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10000042}, 0x20000014) 4.592403895s ago: executing program 2 (id=1190): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x200, &(0x7f0000000080)={0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0adff010000000000000dd6e4edef3d", 0xc1}], 0x1}, 0x20004804) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.541638871s ago: executing program 0 (id=1191): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00'}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000005c0)={0x20, 0x10, 0x4, "7c103142"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x20, 0x9, 0x5, "292bcb4596"}, 0x0, &(0x7f0000000080)=ANY=[]}) socket$kcm(0x2, 0xa, 0x2) 3.920843872s ago: executing program 1 (id=1192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x4000044) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10000042}, 0x20000014) (fail_nth: 9) 3.911073455s ago: executing program 1 (id=1193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) write$tun(r0, &(0x7f0000000340)={@val={0xa, 0x4f19}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @local, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) 3.711261375s ago: executing program 1 (id=1195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c0007800800064000000008"], 0x5c}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000044) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006"], 0x74}, 0x1, 0x0, 0x0, 0x10000042}, 0x20000014) 3.68679605s ago: executing program 1 (id=1196): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000140)=""/159) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304960) close(r1) socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0xe8) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) 3.681426804s ago: executing program 2 (id=1197): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x2ff, 0x0, 0x7ee69d04}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.562620118s ago: executing program 1 (id=1198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], 0x1}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 3.506682217s ago: executing program 2 (id=1199): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r0, 0x6040000) 3.441847419s ago: executing program 2 (id=1200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) (async) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$uinput_user_dev(r1, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x1, 0x0, 0x1, 0x3, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x105, 0x0, 0x800000], [0x11, 0xffffffff, 0x7, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x4f3, 0x0, 0x4, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x8001, 0xfffffffc, 0x0, 0x100, 0x0, 0x10000, 0xec6a, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x8, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x18c, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x4, 0x4000000, 0x80, 0x8000, 0x40000004, 0x0, 0x7, 0x93, 0x7], [0xe, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0xfff, 0xffff7fff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x520, 0xc, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffc, 0x0, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x6, 0x401, 0x0, 0x0, 0x0, 0x82ce, 0x0, 0x3, 0x1, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0xffffffdb], [0x0, 0x0, 0x4, 0x6, 0x0, 0x401, 0x1000, 0x211, 0x4, 0x7ff, 0x100, 0x3, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x2, 0x7fff, 0x0, 0xd, 0x71, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x1, 0x0, 0x9, 0x3, 0x0, 0x0, 0x6, 0xbfb6, 0x4, 0x4, 0x3, 0x0, 0x0, 0x1, 0xffffffff, 0x100, 0x0, 0x6, 0x3, 0xfffffffd, 0x53591b27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x5]}, 0x45c) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) (async, rerun: 32) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) (rerun: 32) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/185) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000240)=0xc, 0x4) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c000280050001000000000008000840000095030400108008001540"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) (rerun: 64) 2.663173659s ago: executing program 1 (id=1201): sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = userfaultfd(0x80001) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_clone(0x108000, &(0x7f0000000140)="7100bc601723ab567cc7ce7f570da690e20a96f426d7697940fd54f71970bca3e48f13db6ac7ed815be607773bef6f0767e8d96c4b13f0504a26a1098a976a00f598e1913c40e4954ba215f105b6741869be8a136dc5ded3fe041b9b2fce28fad8c958652cd9b792", 0x68, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000380)="641bb3817e742b88ea0b6672c30952818f3c2e65cf5b436549780d4b5a790f234024aee99495b9c2a08f9e7e39ef83c1a0ea68c1b82452b9a551b7c24b39f6588452802ca2f82b8d62de98a3756fd69717a2a2b516c5aa561a0adaa5a0f84e34886f0f9846db16003e9d6f763b24ebb85694a0bf5cf4d0325573245b63b5efdf6bf4eb3175e8eb6020f3c6ffcefa31910d369615474b7c771c") openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @random="83f047e9529c"}, 0x10) socket$netlink(0x10, 0x3, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x76, 0x0, 0x0) 2.55526447s ago: executing program 2 (id=1202): ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) r1 = socket$isdn(0x22, 0x3, 0x22) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) fsetxattr$security_capability(r1, &(0x7f0000000080), &(0x7f00000002c0)=@v3={0x3000000, [{0x96, 0x3}, {0x10001, 0x5}], r3}, 0x18, 0x1) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000280)={0x28, 0x3, r0, r4, 0x8001, 0xfffffffffffffffa, 0x6}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000401080008001d000000", 0x24) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000200)={r9, 0x1, 0x800, 0x7, 0x0, [0x0], [0x0, 0x6], [0xa, 0x8, 0x10000, 0x3], [0x1019cd22, 0x0, 0xe4, 0x21d]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f0000000000)={0x0, 0x40, 0x3f, 0x30315559, 0x0, [r10], [0xebf], [0x0, 0x1], [0x2]}) 2.531118482s ago: executing program 2 (id=1203): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26}}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x37e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x13}], 0x1c) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x64, r7, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty=0x2000000}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x64}, 0x1, 0x620b}, 0x0) setsockopt$inet_int(r4, 0x0, 0xc, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0xfc}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000340), 0x8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x68, r8, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x31}}}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x36}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xa}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xe}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x53}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x200448d0}, 0x4008000) r9 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000003c00)={'wlan1\x00', &(0x7f00000005c0)=@ethtool_ringparam={0x10, 0x8, 0xe2, 0x38000000, 0xb, 0x10000, 0x5, 0x3, 0x2}}) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) ioctl$KVM_SET_IRQCHIP(r10, 0x8208ae63, &(0x7f00000000c0)={0x0, 0x0, @pic={0x5, 0x0, 0xff, 0x8, 0x1, 0x2, 0x5, 0xd, 0x4, 0x1, 0x3, 0x4, 0x3b, 0x81, 0xf, 0x3}}) r11 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000405804010902240001000040b40904000101030002000921f8ff7e0122050009058103ff030c0000"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) 2.340391205s ago: executing program 3 (id=1205): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000100)={0x1, r1, 0x1ff, 0xfffffff4, 0x4, 0x2, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[r2, r1], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000240)=[r2, r1], 0x2, 0x800}) 2.222667423s ago: executing program 3 (id=1206): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCFLSH(r0, 0x80044704, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) truncate(&(0x7f0000000280)='./file0\x00', 0x9471) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r4, 0x10c, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r5 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r5, 0x61f0, &(0x7f0000000000)) 2.222305582s ago: executing program 0 (id=1207): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept(r1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b"], 0x118}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000005c0)={@void, @val={0x1, 0x1, 0x0, 0xe08, 0xf4ef, 0x4}, @eth={@empty, @local, @void, {@mpls_uc={0x8847, {[{0xa6}, {0x4, 0x0, 0x1}, {0x3, 0x0, 0x1}], @generic="447414899d51e92de915f6e49234"}}}}}, 0x32) recvmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000002ac0)=""/4105, 0x1009}], 0x2}, 0x102) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@delchain={0x464, 0x65, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0x9}, {0xf, 0x8}, {0x0, 0xd}}, [@f_rsvp={{0x9}, {0x434, 0x2, [@TCA_RSVP_POLICE={0x410, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xff, 0xb, 0x5, 0xf, 0xdb20, 0xb, 0xfffffff9, 0x854, 0x9, 0x2, 0x6, 0x7f55, 0x1, 0x1, 0x7, 0x6, 0x200, 0x6, 0x9, 0xffffffff, 0x1, 0x0, 0x8, 0x9, 0x7, 0x7ff, 0x9, 0x26b, 0x92, 0x2, 0x5, 0x101, 0x73c, 0x4, 0x4, 0x7ff, 0x1, 0x1ff, 0x80, 0x7, 0x6, 0x4, 0x6, 0x3, 0x4, 0x20000, 0x7, 0xf, 0x10001, 0x5, 0xc, 0xfffff001, 0x96, 0x3, 0x1, 0x4, 0x0, 0x621751b5, 0xbd99, 0x5, 0x81, 0x1, 0x2, 0x5, 0xb, 0xfff, 0x3, 0x9, 0xfffffffe, 0x3, 0x8001, 0x1, 0x2, 0x7, 0x8, 0xfffffff9, 0x5, 0xd, 0x2, 0x1000, 0x10001, 0x503, 0x4, 0x2, 0xfff, 0x30, 0x9, 0x4, 0x200, 0x4, 0x3, 0x2, 0x1, 0x6, 0xc0b8, 0x80000001, 0x8, 0x6, 0x4, 0x6, 0x2, 0x7, 0x3, 0xe2e, 0xd, 0x0, 0x80000000, 0x2ab, 0x16, 0x6, 0x3, 0x2, 0x4, 0x4, 0x3, 0x5, 0x9, 0x0, 0xffff, 0x9, 0x7, 0x5, 0x8001, 0x2, 0x4, 0x8, 0x81, 0x9, 0x0, 0x7fff, 0x2, 0x8, 0x4, 0x6, 0x7, 0x10001, 0x5, 0xb0f, 0x3, 0x7, 0x6, 0xfffffffd, 0x2, 0x7f, 0x9, 0x4, 0x7fff, 0x0, 0x2, 0x3, 0x2, 0x0, 0x5, 0x2, 0x42, 0x7ff, 0x7, 0x4, 0x2, 0x3, 0x5dd, 0xb3, 0x9, 0x182e6149, 0x72e, 0x8, 0x1, 0x0, 0x2, 0x4, 0x2, 0xffff8000, 0x2, 0xffff0001, 0x2, 0xe517, 0x2, 0x40, 0x7, 0x7, 0x200, 0x8, 0x4, 0xffffa81d, 0x81, 0x9b, 0xfffffffa, 0x1000, 0x9, 0xfffffff7, 0x6, 0xd05b, 0xfffffff9, 0x636, 0x14, 0xff, 0x7, 0x1000, 0x80000000, 0x5, 0x8914, 0x8355, 0x6, 0x1, 0x10000, 0x0, 0x1, 0x5, 0x4, 0x10000000, 0xf, 0xfff, 0x3, 0x401, 0x8001, 0x2, 0x7, 0x9, 0x7, 0x3ff, 0x7fff, 0x5, 0x72197875, 0x3, 0x100, 0x9, 0x2, 0x4, 0xf, 0x2, 0xb2b1, 0x3ff, 0x1, 0x10, 0x1ff, 0x2, 0x3, 0x0, 0x139, 0x8, 0x4c2, 0xfe3c, 0xfffffffd, 0x7, 0xc, 0x2, 0x8000, 0x400, 0x4442, 0x8, 0xfffffffe, 0x10001, 0x1, 0xe4c4, 0x137, 0x200]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0xe, 0x2}, {0x3, 0xffffffff, 0x5}, 0x4, 0x4b, 0x5}}]}}]}, 0x464}, 0x1, 0x0, 0x0, 0x4040040}, 0x4) syz_usb_connect(0x4, 0x8e, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xf4, 0x53, 0xd0, 0x20, 0x1110, 0x9041, 0x22e1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x1, 0xc, 0x5, 0x70, 0xad, [{{0x9, 0x4, 0x80, 0x8, 0x1, 0xc0, 0xe2, 0x4d, 0x8, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "702d1455fe3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x124, 0x1, 0x2}}, @uac_control={{0xa, 0x24, 0x1, 0x80}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x200, 0x2, 0x1, 0x37}, @selector_unit={0xa, 0x24, 0x5, 0x3, 0x1, "decc0b7d86"}, @processing_unit={0x9, 0x24, 0x7, 0x5, 0x3, 0x9, "0a80"}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x5, 0x4, [0x1, 0x3, 0x9, 0x4], 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x303, 0x3, 0x1, 0x9}]}], [{{0x9, 0x5, 0x7, 0x10, 0x10, 0x4, 0xfc, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x800}]}}]}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0xc4, 0x15, 0xfa, 0x40, 0x2}, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xe, 0x2, 0x200, 0xf, 0x1, [0xff00, 0xc000]}]}, 0x7, [{0xe2, &(0x7f0000000180)=@string={0xe2, 0x3, "bd15283a0ca9977a089cd996d63f1b83160cfca46dbd46b445be71df478eba0376eee3c54701a1a09ea229047bce744e23eb5597b1b6ec2dbfaded549414eda9f9a644b4d42c459bb262d7ce24deefcadfa9d21009281e8442fb7333f1c343028b73ba76c3357bbdcdec8af1652d0be325f0610fa3d839861bac9613a927ed0823c200db853b58ec9e836222e9cde954689ded19efb6e5682cc627ca695f8910fad8361fa756c21ed43e854bb959f27a191b28552ee39109e39307ae2df4c2c5dde1b031d9301834b91bc36f347a418db5fc7441cc7ec22d5ac059c641ab7105"}}, {0x73, &(0x7f0000000280)=@string={0x73, 0x3, "6f2c42645c839c39ea465633447555144e0b6db619f715758e82c6379e3064def5c23134435dc829c5bf984201a6626c00f4e3cd3c4f614536b5ecb60216bfdbe1a6c915d06b036278cb23e4777b4366f35dbe55712d7c0600d8e22e880700e75f14034eeea569c4749df64a81d9bf5d69"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x418}}, {0x30, &(0x7f0000000340)=@string={0x30, 0x3, "bd75de8e90156b08e02b666b9201320b05e0d6840e0b0c33228bde5b8887a0066e49f91923c0f3dd85b7a0638fc5"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x78, &(0x7f0000000400)=@string={0x78, 0x3, "8e47e100392ae8f83113f4002fd900a6e4fea034837e968a656d8a6ccdd9b5c31eb42c34bc5d9f185eb980d2da95f014f7b6d2ec2c9f11c944b660320bd41f26a5574c794ab1ea5a5a3b03dcaf7b161ee7878fb5e6904606fac4914046a2d3452e917adfed3baa030558a2942fda25c97d15e1356b4a"}}, {0xab, &(0x7f0000000480)=ANY=[@ANYBLOB="ab03d98a5850197cd7a8a0341882a2c5b5d54164c22ab202e2541bc884bf878c4f1e40843000268494f83f472b310742930c787077fe22230fdcd5ff2b012239e86d195a6675015ae225bd8d5b0c73bce568f5e43f1a7fbccdfa8e4337c84462e39cd4455a297ac072f426967820efcb28d825afaaaf5d2606adcfd6aa8b5b05fab005517fa1cada4cb55139be2555d156438d064ee463efb326d1ca18d3bb093b3c138472d573dad6c1e4"]}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x2003) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000001740)={&(0x7f00000016c0)=[{0x2, 0x8000, 0x0, 0x0}, {0x1ff, 0x3000, 0x0, 0x0}, {0x7ff, 0x3a01, 0x0, 0x0}], 0x3}) 1.575642275s ago: executing program 3 (id=1208): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x500}}], 0x40000cf, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000005c0)='h', 0x1) 1.473230304s ago: executing program 3 (id=1209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 413.24189ms ago: executing program 3 (id=1210): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440011800a0001006c696d6974000000340002800c00024000000000000000000c000140000000000000000508000540000000010800054000000001080003400000000c"], 0xc8}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = socket(0x2c, 0x3, 0x0) close(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)=@fd={0x0, 0x6, 0x4, 0x0, 0x5, {0x77359400}, {0x0, 0xc, 0x2, 0x5, 0x3, 0x6, "23aad73d"}, 0x80, 0x4, {}, 0x4, 0x0, r2}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100003}) 263.154047ms ago: executing program 3 (id=1211): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e0fff0004fcff", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'nr0\x00'}) syz_80211_inject_frame(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000005c0)=[@window={0x3, 0xb710, 0x1}, @mss={0x2, 0x7fffffff}, @mss={0x2, 0x5}, @timestamp], 0x4) 0s ago: executing program 0 (id=1212): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d0009"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) kernel console output (not intermixed with test programs): rame+0x77/0x7f [ 197.960805][ T8256] RIP: 0033:0x7fb19bb8e15c [ 197.960824][ T8256] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 197.960844][ T8256] RSP: 002b:00007fb19c9d0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.960866][ T8256] RAX: ffffffffffffffda RBX: 00007fb19bde6090 RCX: 00007fb19bb8e15c [ 197.960878][ T8256] RDX: 000000000000000f RSI: 00007fb19c9d00a0 RDI: 0000000000000005 [ 197.960888][ T8256] RBP: 00007fb19c9d0090 R08: 0000000000000000 R09: 0000000000000000 [ 197.960901][ T8256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.960913][ T8256] R13: 00007fb19bde6128 R14: 00007fb19bde6090 R15: 00007ffe73a6b818 [ 197.960949][ T8256] [ 198.247735][ T7609] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 198.292303][ T7609] usb 1-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 198.333280][ T7609] usb 1-1: config 150 has no interface number 0 [ 198.350203][ T7609] usb 1-1: config 150 interface 204 has no altsetting 0 [ 198.390944][ T7609] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 198.412101][ T7609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.444039][ T7609] usb 1-1: Product: syz [ 198.453636][ T5953] usb 3-1: USB disconnect, device number 17 [ 198.461005][ T7609] usb 1-1: Manufacturer: syz [ 198.466063][ T7609] usb 1-1: SerialNumber: syz [ 198.546686][ T8263] FAULT_INJECTION: forcing a failure. [ 198.546686][ T8263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.564123][ T8263] CPU: 0 UID: 0 PID: 8263 Comm: syz.2.844 Not tainted syzkaller #0 PREEMPT(full) [ 198.564156][ T8263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 198.564170][ T8263] Call Trace: [ 198.564187][ T8263] [ 198.564196][ T8263] dump_stack_lvl+0x189/0x250 [ 198.564224][ T8263] ? __pfx____ratelimit+0x10/0x10 [ 198.564255][ T8263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.564277][ T8263] ? __pfx__printk+0x10/0x10 [ 198.564311][ T8263] ? __might_fault+0xb0/0x130 [ 198.564349][ T8263] should_fail_ex+0x414/0x560 [ 198.564380][ T8263] _copy_from_iter+0x1cd/0x1630 [ 198.564415][ T8263] ? __build_skb_around+0x22d/0x3c0 [ 198.564453][ T8263] ? __pfx__copy_from_iter+0x10/0x10 [ 198.564477][ T8263] ? __alloc_skb+0x2f1/0x430 [ 198.564510][ T8263] ? __pfx___alloc_skb+0x10/0x10 [ 198.564544][ T8263] ? netlink_sendmsg+0x642/0xb30 [ 198.564567][ T8263] ? skb_put+0x11b/0x210 [ 198.564605][ T8263] netlink_sendmsg+0x6b2/0xb30 [ 198.564627][ T8263] ? aa_sk_perm+0x15f/0x920 [ 198.564662][ T8263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.564688][ T8263] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 198.564730][ T8263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.564752][ T8263] sock_sendmsg_nosec+0x18f/0x1d0 [ 198.564783][ T8263] ____sys_sendmsg+0x577/0x880 [ 198.564813][ T8263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.564844][ T8263] ? import_iovec+0x74/0xa0 [ 198.564880][ T8263] ___sys_sendmsg+0x21f/0x2a0 [ 198.564904][ T8263] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.564932][ T8263] ? rcu_read_lock_any_held+0xb3/0x120 [ 198.564984][ T8263] ? __fget_files+0x2a/0x420 [ 198.565008][ T8263] ? __fget_files+0x3a0/0x420 [ 198.565042][ T8263] __x64_sys_sendmsg+0x19b/0x260 [ 198.565068][ T8263] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.565100][ T8263] ? __pfx_ksys_write+0x10/0x10 [ 198.565135][ T8263] ? do_syscall_64+0xbe/0xf80 [ 198.565180][ T8263] do_syscall_64+0xfa/0xf80 [ 198.565214][ T8263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.565237][ T8263] ? clear_bhb_loop+0x60/0xb0 [ 198.565265][ T8263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.565287][ T8263] RIP: 0033:0x7f511518f749 [ 198.565308][ T8263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.565327][ T8263] RSP: 002b:00007f5116077038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.565352][ T8263] RAX: ffffffffffffffda RBX: 00007f51153e5fa0 RCX: 00007f511518f749 [ 198.565368][ T8263] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 198.565382][ T8263] RBP: 00007f5116077090 R08: 0000000000000000 R09: 0000000000000000 [ 198.565403][ T8263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.565417][ T8263] R13: 00007f51153e6038 R14: 00007f51153e5fa0 R15: 00007ffdc12337f8 [ 198.565453][ T8263] [ 198.903384][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 198.942197][ T7609] xr_serial 1-1:150.204: skipping garbage [ 198.948861][ T7609] xr_serial 1-1:150.204: xr_serial converter detected [ 199.259712][ T5148] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.512344][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.520830][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.737101][ T7609] usb 1-1: xr_serial converter now attached to ttyUSB0 [ 199.982125][ T43] usb 1-1: USB disconnect, device number 20 [ 200.011740][ T43] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 200.045845][ T43] xr_serial 1-1:150.204: device disconnected [ 200.356173][ T8280] fuse: Unknown parameter 'use00000000000000000000' [ 200.498896][ T43] usb 4-1: USB disconnect, device number 19 [ 201.128783][ T8302] fuse: Unknown parameter 'use00000000000000000000' [ 201.350514][ T8304] syzkaller1: entered promiscuous mode [ 201.356252][ T8304] syzkaller1: entered allmulticast mode [ 202.040181][ T8314] ======================================================= [ 202.040181][ T8314] WARNING: The mand mount option has been deprecated and [ 202.040181][ T8314] and is ignored by this kernel. Remove the mand [ 202.040181][ T8314] option from the mount to silence this warning. [ 202.040181][ T8314] ======================================================= [ 202.085085][ T8314] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 202.102874][ T8314] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 202.134082][ T8314] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 202.147118][ T8314] netlink: 32 bytes leftover after parsing attributes in process `syz.2.863'. [ 202.250662][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.864'. [ 202.263742][ T5148] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 202.279394][ T43] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 202.419998][ T43] usb 2-1: device descriptor read/64, error -71 [ 202.464762][ T8322] fuse: Unknown parameter 'use00000000000000000000' [ 202.538283][ T8324] efs: cannot read volume header [ 202.612477][ T5953] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 202.659175][ T43] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 202.774116][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.784779][ T5953] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 202.814585][ T5953] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 202.842367][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.899106][ T5953] usb 4-1: config 0 descriptor?? [ 202.949491][ T43] usb 2-1: device descriptor read/64, error -71 [ 203.141501][ T43] usb usb2-port1: attempt power cycle [ 203.370290][ T5953] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 203.492293][ T43] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 203.534328][ T43] usb 2-1: device descriptor read/8, error -71 [ 203.789179][ T43] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 203.809819][ T43] usb 2-1: device descriptor read/8, error -71 [ 203.920401][ T43] usb usb2-port1: unable to enumerate USB device [ 203.978841][ T8342] fuse: Unknown parameter 'group_id00000000000000000000' [ 204.146545][ T5953] kovaplus 0003:1E7D:2D50.0005: couldn't init struct kovaplus_device [ 204.155744][ T5953] kovaplus 0003:1E7D:2D50.0005: couldn't install mouse [ 204.167505][ T5953] kovaplus 0003:1E7D:2D50.0005: probe with driver kovaplus failed with error -71 [ 204.185048][ T5953] usb 4-1: USB disconnect, device number 20 [ 204.510191][ T8351] fuse: Unknown parameter 'user_i00000000000000000000' [ 204.813174][ T8355] netlink: 56 bytes leftover after parsing attributes in process `syz.2.879'. [ 205.150804][ T8362] syzkaller1: entered promiscuous mode [ 205.156716][ T8362] syzkaller1: entered allmulticast mode [ 205.172444][ T8362] FAULT_INJECTION: forcing a failure. [ 205.172444][ T8362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.187546][ T8362] CPU: 0 UID: 0 PID: 8362 Comm: syz.1.882 Not tainted syzkaller #0 PREEMPT(full) [ 205.187576][ T8362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.187589][ T8362] Call Trace: [ 205.187600][ T8362] [ 205.187610][ T8362] dump_stack_lvl+0x189/0x250 [ 205.187635][ T8362] ? __pfx____ratelimit+0x10/0x10 [ 205.187665][ T8362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.187686][ T8362] ? __pfx__printk+0x10/0x10 [ 205.187718][ T8362] ? __might_fault+0xb0/0x130 [ 205.187757][ T8362] should_fail_ex+0x414/0x560 [ 205.187788][ T8362] _copy_from_iter+0x1cd/0x1630 [ 205.187830][ T8362] ? __pfx__copy_from_iter+0x10/0x10 [ 205.187855][ T8362] ? sock_alloc_send_pskb+0x86b/0x980 [ 205.187989][ T8362] ? __pfx__copy_from_iter+0x10/0x10 [ 205.188024][ T8362] ? page_copy_sane+0x16a/0x280 [ 205.188055][ T8362] copy_page_from_iter+0xdd/0x170 [ 205.188092][ T8362] skb_copy_datagram_from_iter+0x306/0x720 [ 205.188131][ T8362] tun_get_user+0x1683/0x3dc0 [ 205.188164][ T8362] ? _raw_spin_unlock+0x30/0x50 [ 205.188197][ T8362] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 205.188227][ T8362] ? aa_file_perm+0x44c/0x1530 [ 205.188258][ T8362] ? __pfx_tun_get_user+0x10/0x10 [ 205.188286][ T8362] ? save_netdev_trace_buffer+0x4a0/0x5a0 [ 205.188313][ T8362] ? kstrtoull+0x12f/0x1d0 [ 205.188424][ T8362] ? ref_tracker_alloc+0x318/0x460 [ 205.188450][ T8362] ? tun_get+0x157/0x2f0 [ 205.188466][ T8362] ? tun_chr_write_iter+0x60/0x210 [ 205.188499][ T8362] ? ksys_write+0x145/0x250 [ 205.188529][ T8362] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 205.188562][ T8362] ? tun_get+0x1c/0x2f0 [ 205.188587][ T8362] ? tun_get+0x1c/0x2f0 [ 205.188715][ T8362] ? tun_get+0x1c/0x2f0 [ 205.188754][ T8362] tun_chr_write_iter+0x113/0x210 [ 205.188793][ T8362] vfs_write+0x5c9/0xb30 [ 205.188827][ T8362] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 205.188860][ T8362] ? __pfx_vfs_write+0x10/0x10 [ 205.188897][ T8362] ? __fget_files+0x2a/0x420 [ 205.188929][ T8362] ksys_write+0x145/0x250 [ 205.188963][ T8362] ? __pfx_ksys_write+0x10/0x10 [ 205.189000][ T8362] ? do_syscall_64+0xbe/0xf80 [ 205.189040][ T8362] do_syscall_64+0xfa/0xf80 [ 205.189072][ T8362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.189099][ T8362] ? clear_bhb_loop+0x60/0xb0 [ 205.189123][ T8362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.189148][ T8362] RIP: 0033:0x7fb19bb8f749 [ 205.189167][ T8362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.189185][ T8362] RSP: 002b:00007fb19c9f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 205.189209][ T8362] RAX: ffffffffffffffda RBX: 00007fb19bde5fa0 RCX: 00007fb19bb8f749 [ 205.189225][ T8362] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000003 [ 205.189239][ T8362] RBP: 00007fb19c9f1090 R08: 0000000000000000 R09: 0000000000000000 [ 205.189253][ T8362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 205.189266][ T8362] R13: 00007fb19bde6038 R14: 00007fb19bde5fa0 R15: 00007ffe73a6b818 [ 205.189354][ T8362] [ 205.630507][ T8364] loop3: detected capacity change from 0 to 7 [ 205.661620][ T8364] Dev loop3: unable to read RDB block 7 [ 205.667974][ T8364] loop3: unable to read partition table [ 205.681077][ T8364] loop3: partition table beyond EOD, truncated [ 205.689166][ T8264] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 205.754913][ T8364] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 205.860909][ T8264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.873635][ T8264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.885876][ T8264] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 205.902523][ T8264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.924004][ T8264] usb 3-1: config 0 descriptor?? [ 205.943487][ T8370] fuse: Unknown parameter 'user_i00000000000000000000' [ 206.209310][ T7609] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 206.343230][ T8360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.881'. [ 206.359139][ T7609] usb 1-1: device descriptor read/64, error -71 [ 206.359204][ T5953] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 206.386137][ T8264] kye 0003:0458:0153.0006: collection stack underflow [ 206.396729][ T8264] kye 0003:0458:0153.0006: item 0 4 0 12 parsing failed [ 206.407975][ T8264] kye 0003:0458:0153.0006: parse failed [ 206.414724][ T8264] kye 0003:0458:0153.0006: probe with driver kye failed with error -22 [ 206.549310][ T5953] usb 2-1: Using ep0 maxpacket: 8 [ 206.556449][ T5953] usb 2-1: too many configurations: 153, using maximum allowed: 8 [ 206.571151][ T5953] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 206.579930][ T5953] usb 2-1: can't read configurations, error -61 [ 206.599305][ T7609] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 206.617409][ T8264] usb 3-1: USB disconnect, device number 18 [ 206.649876][ T43] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 206.729318][ T5953] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 206.739298][ T7609] usb 1-1: device descriptor read/64, error -71 [ 206.789197][ T43] usb 4-1: device descriptor read/64, error -71 [ 206.850232][ T7609] usb usb1-port1: attempt power cycle [ 206.889139][ T5953] usb 2-1: Using ep0 maxpacket: 8 [ 206.899296][ T5953] usb 2-1: too many configurations: 153, using maximum allowed: 8 [ 206.920563][ T5953] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 206.928679][ T5953] usb 2-1: can't read configurations, error -61 [ 206.949449][ T5953] usb usb2-port1: attempt power cycle [ 207.039176][ T43] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 207.189355][ T43] usb 4-1: device descriptor read/64, error -71 [ 207.209237][ T7609] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 207.231749][ T7609] usb 1-1: device descriptor read/8, error -71 [ 207.289184][ T5953] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 207.300302][ T43] usb usb4-port1: attempt power cycle [ 207.329786][ T5953] usb 2-1: Using ep0 maxpacket: 8 [ 207.337577][ T5953] usb 2-1: too many configurations: 153, using maximum allowed: 8 [ 207.349572][ T5953] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 207.369300][ T5953] usb 2-1: can't read configurations, error -61 [ 207.479184][ T7609] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 207.519223][ T5953] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 207.519667][ T7609] usb 1-1: device descriptor read/8, error -71 [ 207.563312][ T5953] usb 2-1: Using ep0 maxpacket: 8 [ 207.570241][ T5953] usb 2-1: too many configurations: 153, using maximum allowed: 8 [ 207.585265][ T5953] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 207.593500][ T5953] usb 2-1: can't read configurations, error -61 [ 207.600791][ T5953] usb usb2-port1: unable to enumerate USB device [ 207.639330][ T43] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 207.650533][ T7609] usb usb1-port1: unable to enumerate USB device [ 207.670314][ T43] usb 4-1: device descriptor read/8, error -71 [ 207.723736][ T8390] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 207.734429][ T8390] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 207.909383][ T43] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 207.923314][ T8397] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 207.941650][ T8397] evm: overlay not supported [ 207.949787][ T43] usb 4-1: device descriptor read/8, error -71 [ 208.060214][ T43] usb usb4-port1: unable to enumerate USB device [ 208.111838][ T8401] fuse: Unknown parameter 'user_i00000000000000000000' [ 208.406484][ T8405] qnx6: unable to read the first superblock [ 209.499789][ T5916] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 209.599187][ T8423] syzkaller1: entered promiscuous mode [ 209.606667][ T8423] syzkaller1: entered allmulticast mode [ 209.700243][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 209.710243][ T5916] usb 2-1: unable to get BOS descriptor or descriptor too short [ 209.714944][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.905'. [ 209.735840][ T5916] usb 2-1: config 9 has an invalid interface number: 129 but max is 0 [ 209.899886][ T5916] usb 2-1: config 9 has no interface number 0 [ 209.912774][ T5916] usb 2-1: config 9 interface 129 has no altsetting 0 [ 209.929276][ T5916] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 209.948489][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.970296][ T5916] usb 2-1: Product: syz [ 209.980939][ T5916] usb 2-1: Manufacturer: syz [ 209.987071][ T5916] usb 2-1: SerialNumber: syz [ 210.277715][ T8430] fuse: Unknown parameter 'user_id00000000000000000000' [ 210.564726][ T5916] usb 2-1: bad CDC descriptors [ 210.579630][ T5916] usb 2-1: USB disconnect, device number 28 [ 210.609218][ T43] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 210.799016][ T43] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 210.812362][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 210.821171][ T43] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 210.832359][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.844540][ T43] usb 3-1: config 0 descriptor?? [ 210.860005][ T8433] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 211.430207][ T5916] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 211.535709][ T5148] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 211.540030][ T8439] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.565490][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 211.581027][ T5916] usb 2-1: device descriptor read/64, error -71 [ 211.590425][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 211.622935][ T43] usb 3-1: USB disconnect, device number 19 [ 211.869162][ T5916] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 211.962151][ T8454] FAULT_INJECTION: forcing a failure. [ 211.962151][ T8454] name failslab, interval 1, probability 0, space 0, times 0 [ 211.990004][ T8454] CPU: 1 UID: 0 PID: 8454 Comm: syz.3.915 Not tainted syzkaller #0 PREEMPT(full) [ 211.990045][ T8454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 211.990066][ T8454] Call Trace: [ 211.990076][ T8454] [ 211.990091][ T8454] dump_stack_lvl+0x189/0x250 [ 211.990125][ T8454] ? __pfx____ratelimit+0x10/0x10 [ 211.990165][ T8454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.990195][ T8454] ? __pfx__printk+0x10/0x10 [ 211.990243][ T8454] ? __pfx___might_resched+0x10/0x10 [ 211.990287][ T8454] ? fs_reclaim_acquire+0x7d/0x100 [ 211.990337][ T8454] should_fail_ex+0x414/0x560 [ 211.990380][ T8454] should_failslab+0xa8/0x100 [ 211.990412][ T8454] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 211.990452][ T8454] ? __alloc_skb+0x255/0x430 [ 211.990492][ T8454] ? napi_skb_cache_get+0x4a5/0x780 [ 211.990531][ T8454] ? napi_skb_cache_get+0x151/0x780 [ 211.990577][ T8454] __alloc_skb+0x255/0x430 [ 211.990623][ T8454] ? __pfx___alloc_skb+0x10/0x10 [ 211.990681][ T8454] ? netlink_ack_tlv_len+0x6c/0x210 [ 211.990717][ T8454] netlink_ack+0x146/0xa50 [ 211.990744][ T8454] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.990783][ T8454] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 211.990820][ T8454] ? __pfx_nl802154_post_doit+0x10/0x10 [ 211.990877][ T8454] netlink_rcv_skb+0x28c/0x470 [ 211.990910][ T8454] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.990950][ T8454] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 211.991004][ T8454] ? down_read+0x274/0x2e0 [ 211.991031][ T8454] ? genl_rcv+0xd/0x40 [ 211.991073][ T8454] genl_rcv+0x28/0x40 [ 211.991108][ T8454] netlink_unicast+0x82f/0x9e0 [ 211.991165][ T8454] ? __pfx_netlink_unicast+0x10/0x10 [ 211.991214][ T8454] ? netlink_sendmsg+0x642/0xb30 [ 211.991243][ T8454] ? skb_put+0x11b/0x210 [ 211.991289][ T8454] netlink_sendmsg+0x805/0xb30 [ 211.991320][ T8454] ? aa_sk_perm+0x15f/0x920 [ 211.991365][ T8454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.991401][ T8454] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 211.991453][ T8454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.991485][ T8454] sock_sendmsg_nosec+0x18f/0x1d0 [ 211.991527][ T8454] ____sys_sendmsg+0x577/0x880 [ 211.991567][ T8454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.991608][ T8454] ? import_iovec+0x74/0xa0 [ 211.991655][ T8454] ___sys_sendmsg+0x21f/0x2a0 [ 211.991694][ T8454] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.991734][ T8454] ? rcu_read_lock_any_held+0xb3/0x120 [ 211.991800][ T8454] ? __fget_files+0x2a/0x420 [ 211.991831][ T8454] ? __fget_files+0x3a0/0x420 [ 211.991876][ T8454] __x64_sys_sendmsg+0x19b/0x260 [ 211.991909][ T8454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.991951][ T8454] ? __pfx_ksys_write+0x10/0x10 [ 211.991997][ T8454] ? do_syscall_64+0xbe/0xf80 [ 211.992042][ T8454] do_syscall_64+0xfa/0xf80 [ 211.992085][ T8454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.992115][ T8454] ? clear_bhb_loop+0x60/0xb0 [ 211.992150][ T8454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.992181][ T8454] RIP: 0033:0x7f8896d8f749 [ 211.992208][ T8454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.992234][ T8454] RSP: 002b:00007f8897caa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.992266][ T8454] RAX: ffffffffffffffda RBX: 00007f8896fe5fa0 RCX: 00007f8896d8f749 [ 211.992289][ T8454] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 211.992309][ T8454] RBP: 00007f8897caa090 R08: 0000000000000000 R09: 0000000000000000 [ 211.992326][ T8454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.992345][ T8454] R13: 00007f8896fe6038 R14: 00007f8896fe5fa0 R15: 00007fff4a5481a8 [ 211.992391][ T8454] [ 212.649331][ T5916] usb 2-1: device descriptor read/64, error -71 [ 212.697941][ T8458] fuse: Unknown parameter 'user_id00000000000000000000' [ 212.759631][ T5916] usb usb2-port1: attempt power cycle [ 213.099528][ T5916] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 213.135627][ T5916] usb 2-1: device descriptor read/8, error -71 [ 213.390717][ T5916] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 213.430112][ T5916] usb 2-1: device descriptor read/8, error -71 [ 213.480193][ T8480] syzkaller1: entered promiscuous mode [ 213.493443][ T8480] syzkaller1: entered allmulticast mode [ 213.541020][ T5916] usb usb2-port1: unable to enumerate USB device [ 214.009128][ T5953] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 214.188826][ T5953] usb 1-1: config index 0 descriptor too short (expected 69, got 36) [ 214.203396][ T5953] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.247848][ T5953] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 214.277947][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.304108][ T5953] usb 1-1: Product: syz [ 214.308609][ T5953] usb 1-1: Manufacturer: syz [ 214.350140][ T5953] usb 1-1: SerialNumber: syz [ 214.370399][ T5953] usb 1-1: config 0 descriptor?? [ 214.391199][ T5953] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 214.405812][ T8489] fuse: Bad value for 'fd' [ 214.692517][ T8497] fuse: Bad value for 'user_id' [ 214.698325][ T8497] fuse: Bad value for 'user_id' [ 214.735165][ T8497] syzkaller1: entered promiscuous mode [ 214.741559][ T8497] syzkaller1: entered allmulticast mode [ 214.992267][ T5953] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 215.009835][ T5953] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 215.010467][ T8504] loop3: detected capacity change from 0 to 7 [ 215.031683][ T5953] usb 1-1: USB disconnect, device number 25 [ 215.043513][ T8504] Dev loop3: unable to read RDB block 7 [ 215.059175][ T8504] loop3: unable to read partition table [ 215.075587][ T8504] loop3: partition table beyond EOD, truncated [ 215.082395][ T8504] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 215.092633][ T5916] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 215.249130][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 215.257103][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.272543][ T5916] usb 2-1: config 0 has no interfaces? [ 215.278118][ T5916] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.297713][ T5921] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 215.327350][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.339149][ T5916] usb 2-1: config 0 descriptor?? [ 215.459146][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 215.467767][ T5921] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 215.486366][ T5921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.506866][ T5921] usb 4-1: config 0 has no interface number 0 [ 215.513139][ T5921] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 215.535513][ T5921] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 215.551508][ T5953] usb 2-1: USB disconnect, device number 33 [ 215.568388][ T5921] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 215.599175][ T5921] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 215.627363][ T5921] usb 4-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 215.647773][ T5921] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 215.669134][ T5921] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 215.695182][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.722592][ T5921] usb 4-1: config 0 descriptor?? [ 215.749474][ T8507] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 215.765606][ T5921] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 215.891679][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.918995][ T5921] snd-usb-audio 4-1:0.126: probe with driver snd-usb-audio failed with error -12 [ 215.959206][ T5953] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 215.996399][ T8507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.112618][ T8507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.142077][ T5953] usb 1-1: config 64 has an invalid interface number: 19 but max is 0 [ 216.166455][ T5953] usb 1-1: config 64 has no interface number 0 [ 216.184429][ T5953] usb 1-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 216.198544][ T8507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.207442][ T5953] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 216.215430][ T8517] netlink: 'syz.2.938': attribute type 1 has an invalid length. [ 216.217412][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.227714][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.938'. [ 216.233751][ T8507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.244284][ T8517] netlink: 'syz.2.938': attribute type 3 has an invalid length. [ 216.265229][ T8516] fuse: Bad value for 'fd' [ 216.271425][ T5953] usb 1-1: probing VID:PID(2201:012C) [ 216.286432][ T8507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.298682][ T5953] usb 1-1: vub300 testing UNKNOWN EndPoint(0) 02 [ 216.314200][ T5953] usb 1-1: vub300 ignoring EndPoint(0) 02 [ 216.320258][ T5953] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 216.328829][ T8507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.331170][ T5953] vub300 1-1:64.19: probe with driver vub300 failed with error -22 [ 216.361611][ T8507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.373730][ T8507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.387143][ T8507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.404412][ T8507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.424731][ T5921] usb 4-1: USB disconnect, device number 25 [ 216.477868][ T5916] usb 1-1: USB disconnect, device number 26 [ 217.370875][ T8529] netlink: 64 bytes leftover after parsing attributes in process `syz.1.944'. [ 217.509578][ T5921] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 217.623192][ T8539] fuse: Bad value for 'fd' [ 217.669244][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 217.681376][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.701008][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 217.723087][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 217.737937][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 217.753605][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 217.769489][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 217.781266][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.800159][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 217.801119][ T5921] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 217.822194][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.830603][ T5921] usb 1-1: Product: syz [ 217.835207][ T5921] usb 1-1: Manufacturer: syz [ 217.840212][ T5921] usb 1-1: SerialNumber: syz [ 217.871743][ T5921] usb 1-1: config 0 descriptor?? [ 217.884728][ T8527] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 217.896670][ T5921] ati_remote 1-1:0.0: Initializing ati_remote hardware failed. [ 217.917468][ T5921] ati_remote 1-1:0.0: probe with driver ati_remote failed with error -5 [ 217.999246][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 218.007269][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.039583][ T9] usb 3-1: config 0 has no interfaces? [ 218.045761][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.065587][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.082488][ T9] usb 3-1: config 0 descriptor?? [ 218.120054][ T8547] syzkaller1: entered promiscuous mode [ 218.141745][ T8547] syzkaller1: entered allmulticast mode [ 218.249550][ T9] usb 1-1: USB disconnect, device number 27 [ 218.295435][ T5921] usb 3-1: USB disconnect, device number 20 [ 218.440515][ T8555] syzkaller1: entered promiscuous mode [ 218.469203][ T8555] syzkaller1: entered allmulticast mode [ 218.555248][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.953'. [ 219.374095][ T8569] fuse: Bad value for 'fd' [ 219.403428][ T8571] fuse: Unknown parameter '0x0000000000000003' [ 219.615166][ T8578] netlink: 528 bytes leftover after parsing attributes in process `syz.3.960'. [ 219.629596][ T8575] sp0: Synchronizing with TNC [ 219.931409][ T8580] [U] è` [ 219.976003][ T8592] fuse: Invalid rootmode [ 220.169224][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 220.188048][ T8595] syzkaller1: entered promiscuous mode [ 220.202130][ T8595] syzkaller1: entered allmulticast mode [ 220.284805][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'. [ 220.316811][ T8598] fuse: Unknown parameter '0x0000000000000003' [ 220.334765][ T9] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 220.344700][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.353816][ T9] usb 1-1: Product: syz [ 220.358566][ T9] usb 1-1: Manufacturer: syz [ 220.368615][ T9] usb 1-1: SerialNumber: syz [ 220.382748][ T9] usb 1-1: config 0 descriptor?? [ 220.605593][ T9] int51x1 1-1:0.0: probe with driver int51x1 failed with error -22 [ 220.668459][ T8606] FAULT_INJECTION: forcing a failure. [ 220.668459][ T8606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.724675][ T8606] CPU: 1 UID: 0 PID: 8606 Comm: syz.2.971 Not tainted syzkaller #0 PREEMPT(full) [ 220.724708][ T8606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.724723][ T8606] Call Trace: [ 220.724732][ T8606] [ 220.724742][ T8606] dump_stack_lvl+0x189/0x250 [ 220.724768][ T8606] ? __pfx____ratelimit+0x10/0x10 [ 220.724798][ T8606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.724820][ T8606] ? __pfx__printk+0x10/0x10 [ 220.724876][ T8606] should_fail_ex+0x414/0x560 [ 220.725036][ T8606] _copy_to_user+0x31/0xb0 [ 220.725080][ T8606] simple_read_from_buffer+0xe1/0x170 [ 220.725106][ T8606] proc_fail_nth_read+0x1b3/0x220 [ 220.725139][ T8606] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.725172][ T8606] ? rw_verify_area+0x2a6/0x4d0 [ 220.725198][ T8606] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.725239][ T8606] vfs_read+0x200/0xa30 [ 220.725265][ T8606] ? fdget_pos+0x247/0x320 [ 220.725291][ T8606] ? __pfx___mutex_lock+0x10/0x10 [ 220.725324][ T8606] ? __pfx_vfs_read+0x10/0x10 [ 220.725352][ T8606] ? __fget_files+0x2a/0x420 [ 220.725379][ T8606] ? __fget_files+0x3a0/0x420 [ 220.725400][ T8606] ? __fget_files+0x2a/0x420 [ 220.725429][ T8606] ksys_read+0x145/0x250 [ 220.725460][ T8606] ? __pfx_ksys_read+0x10/0x10 [ 220.725492][ T8606] ? do_syscall_64+0xbe/0xf80 [ 220.725528][ T8606] do_syscall_64+0xfa/0xf80 [ 220.725560][ T8606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.726326][ T8606] ? clear_bhb_loop+0x60/0xb0 [ 220.726352][ T8606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.726373][ T8606] RIP: 0033:0x7f511518e15c [ 220.726393][ T8606] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 220.726411][ T8606] RSP: 002b:00007f5116056030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 220.726433][ T8606] RAX: ffffffffffffffda RBX: 00007f51153e6090 RCX: 00007f511518e15c [ 220.726450][ T8606] RDX: 000000000000000f RSI: 00007f51160560a0 RDI: 0000000000000007 [ 220.726462][ T8606] RBP: 00007f5116056090 R08: 0000000000000000 R09: 0000000000000000 [ 220.726475][ T8606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.726486][ T8606] R13: 00007f51153e6128 R14: 00007f51153e6090 R15: 00007ffdc12337f8 [ 220.726521][ T8606] [ 221.009998][ T9] usb 1-1: USB disconnect, device number 28 [ 221.254076][ T8615] tmpfs: Unknown parameter 'usrquota_block_haЫ&rdlimit' [ 221.477321][ T8621] fuse: Invalid rootmode [ 221.599188][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 221.671467][ T8629] fuse: Unknown parameter '0x0000000000000003' [ 221.771981][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 221.812886][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 221.836366][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 221.872362][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 221.897196][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.929189][ T9] usb 2-1: Product: syz [ 221.933773][ T9] usb 2-1: Manufacturer: syz [ 221.949977][ T9] usb 2-1: SerialNumber: syz [ 221.968486][ T9] usb 2-1: config 0 descriptor?? [ 221.991683][ T9] usb 2-1: 0:0 : invalid sync pipe. bmAttributes ef, bLength 9, bSynchAddress 00 [ 222.080991][ T8640] syzkaller1: entered promiscuous mode [ 222.091564][ T8640] syzkaller1: entered allmulticast mode [ 222.129347][ T5916] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 222.183812][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.982'. [ 222.320469][ T8636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.343703][ T8636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.412042][ T5916] usb 3-1: unable to get BOS descriptor or descriptor too short [ 222.430222][ T5916] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 222.466541][ T5916] usb 3-1: can't read configurations, error -71 [ 222.973048][ T8658] netlink: 16 bytes leftover after parsing attributes in process `syz.3.983'. [ 223.202355][ T8667] fuse: Invalid rootmode [ 223.383793][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'. [ 223.613025][ T8684] syzkaller1: entered promiscuous mode [ 223.619441][ T5916] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 223.635945][ T8684] syzkaller1: entered allmulticast mode [ 223.759161][ T5916] usb 3-1: device descriptor read/64, error -71 [ 224.020403][ T5916] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 224.169148][ T5916] usb 3-1: device descriptor read/64, error -71 [ 224.308906][ T5916] usb usb3-port1: attempt power cycle [ 224.415326][ T9] usb 2-1: USB disconnect, device number 34 [ 224.450027][ T8699] syzkaller1: entered promiscuous mode [ 224.485589][ T8699] syzkaller1: entered allmulticast mode [ 224.559931][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.583571][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.993'. [ 224.679163][ T5916] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 224.709912][ T5916] usb 3-1: device descriptor read/8, error -71 [ 224.724763][ T8706] tipc: Started in network mode [ 224.730325][ T8706] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 224.743750][ T8706] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 224.754205][ T8706] tipc: Enabled bearer , priority 10 [ 224.755815][ T8708] fuse: Bad value for 'rootmode' [ 224.836284][ T8712] loop3: detected capacity change from 0 to 7 [ 224.848225][ T8712] Dev loop3: unable to read RDB block 7 [ 224.854584][ T8712] loop3: unable to read partition table [ 224.861615][ T8712] loop3: partition table beyond EOD, truncated [ 224.868150][ T8712] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 224.970767][ T5916] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 225.001453][ T5916] usb 3-1: device descriptor read/8, error -71 [ 225.109957][ T5916] usb usb3-port1: unable to enumerate USB device [ 225.129153][ T7609] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 225.261802][ T7609] usb 2-1: device descriptor read/64, error -71 [ 225.338432][ T8721] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1002'. [ 225.509159][ T7609] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 225.659464][ T7609] usb 2-1: device descriptor read/64, error -71 [ 225.769625][ T7609] usb usb2-port1: attempt power cycle [ 225.869166][ T5921] tipc: Node number set to 1 [ 226.135714][ T7609] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 226.180349][ T7609] usb 2-1: device descriptor read/8, error -71 [ 226.281206][ T8731] FAULT_INJECTION: forcing a failure. [ 226.281206][ T8731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.326513][ T8731] CPU: 0 UID: 0 PID: 8731 Comm: syz.0.1005 Not tainted syzkaller #0 PREEMPT(full) [ 226.326545][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 226.326559][ T8731] Call Trace: [ 226.326570][ T8731] [ 226.326580][ T8731] dump_stack_lvl+0x189/0x250 [ 226.326607][ T8731] ? __pfx____ratelimit+0x10/0x10 [ 226.326636][ T8731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.326657][ T8731] ? __pfx__printk+0x10/0x10 [ 226.326688][ T8731] ? __might_fault+0xb0/0x130 [ 226.326726][ T8731] should_fail_ex+0x414/0x560 [ 226.326756][ T8731] _copy_from_iter+0x1cd/0x1630 [ 226.326790][ T8731] ? __build_skb_around+0x22d/0x3c0 [ 226.326828][ T8731] ? __pfx__copy_from_iter+0x10/0x10 [ 226.326853][ T8731] ? __alloc_skb+0x2f1/0x430 [ 226.326882][ T8731] ? tun_get_user+0x535/0x3dc0 [ 226.326907][ T8731] ? __local_bh_enable_ip+0x12d/0x1c0 [ 226.326946][ T8731] ? lockdep_hardirqs_on+0x98/0x140 [ 226.326981][ T8731] skb_copy_datagram_from_iter+0xf5/0x720 [ 226.327012][ T8731] ? iov_iter_single_seg_count+0xc9/0x2f0 [ 226.327047][ T8731] tun_get_user+0x1683/0x3dc0 [ 226.327078][ T8731] ? _raw_spin_unlock+0x31/0x50 [ 226.327111][ T8731] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 226.327141][ T8731] ? aa_file_perm+0x44c/0x1530 [ 226.327172][ T8731] ? __pfx_tun_get_user+0x10/0x10 [ 226.327201][ T8731] ? save_netdev_trace_buffer+0x4a0/0x5a0 [ 226.327228][ T8731] ? kstrtoull+0x12f/0x1d0 [ 226.327262][ T8731] ? ref_tracker_alloc+0x318/0x460 [ 226.327293][ T8731] ? tun_get+0x157/0x2f0 [ 226.327309][ T8731] ? tun_chr_write_iter+0x60/0x210 [ 226.327340][ T8731] ? ksys_write+0x145/0x250 [ 226.327370][ T8731] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 226.327411][ T8731] ? tun_get+0x1c/0x2f0 [ 226.327437][ T8731] ? tun_get+0x1c/0x2f0 [ 226.327455][ T8731] ? tun_get+0x1c/0x2f0 [ 226.327480][ T8731] tun_chr_write_iter+0x113/0x210 [ 226.327526][ T8731] vfs_write+0x5c9/0xb30 [ 226.327560][ T8731] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 226.327595][ T8731] ? __pfx_vfs_write+0x10/0x10 [ 226.327732][ T8731] ? __fget_files+0x2a/0x420 [ 226.327777][ T8731] ksys_write+0x145/0x250 [ 226.327827][ T8731] ? __pfx_ksys_write+0x10/0x10 [ 226.327862][ T8731] ? do_syscall_64+0xbe/0xf80 [ 226.327900][ T8731] do_syscall_64+0xfa/0xf80 [ 226.327932][ T8731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.327965][ T8731] ? clear_bhb_loop+0x60/0xb0 [ 226.327993][ T8731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.328016][ T8731] RIP: 0033:0x7f96d018f749 [ 226.328037][ T8731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.328167][ T8731] RSP: 002b:00007f96d0f77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 226.328193][ T8731] RAX: ffffffffffffffda RBX: 00007f96d03e5fa0 RCX: 00007f96d018f749 [ 226.328210][ T8731] RDX: 000000000000004a RSI: 0000200000000340 RDI: 0000000000000003 [ 226.328224][ T8731] RBP: 00007f96d0f77090 R08: 0000000000000000 R09: 0000000000000000 [ 226.328238][ T8731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.328250][ T8731] R13: 00007f96d03e6038 R14: 00007f96d03e5fa0 R15: 00007ffe2a05ba78 [ 226.328287][ T8731] [ 226.719196][ T7609] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 226.740626][ T7609] usb 2-1: device descriptor read/8, error -71 [ 226.759487][ T5921] IPVS: starting estimator thread 0... [ 226.849544][ T8738] IPVS: using max 36 ests per chain, 86400 per kthread [ 226.857700][ T7609] usb usb2-port1: unable to enumerate USB device [ 227.549151][ T5953] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 227.656374][ T8754] overlayfs: regular lower layers cannot follow data lower layers [ 227.699375][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 227.710236][ T5953] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 227.720482][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.728946][ T5953] usb 3-1: Product: syz [ 227.733544][ T5953] usb 3-1: Manufacturer: syz [ 227.738352][ T5953] usb 3-1: SerialNumber: syz [ 227.759133][ T5953] usb 3-1: config 0 descriptor?? [ 227.773356][ T5953] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 228.112766][ T8770] libceph: resolve '400' (ret=-3): failed [ 228.197738][ T5953] gspca_ov534_9: reg_w failed -71 [ 228.499245][ T5953] gspca_ov534_9: Unknown sensor 0000 [ 228.499351][ T5953] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 228.516100][ T5953] usb 3-1: USB disconnect, device number 27 [ 229.204621][ T8803] FAULT_INJECTION: forcing a failure. [ 229.204621][ T8803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.242398][ T8803] CPU: 0 UID: 0 PID: 8803 Comm: syz.1.1025 Not tainted syzkaller #0 PREEMPT(full) [ 229.242428][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.242441][ T8803] Call Trace: [ 229.242449][ T8803] [ 229.242459][ T8803] dump_stack_lvl+0x189/0x250 [ 229.242484][ T8803] ? __pfx____ratelimit+0x10/0x10 [ 229.242514][ T8803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.242534][ T8803] ? __pfx__printk+0x10/0x10 [ 229.242565][ T8803] ? __might_fault+0xb0/0x130 [ 229.242620][ T8803] should_fail_ex+0x414/0x560 [ 229.242650][ T8803] _copy_from_iter+0x1cd/0x1630 [ 229.242682][ T8803] ? __build_skb_around+0x22d/0x3c0 [ 229.242718][ T8803] ? __pfx__copy_from_iter+0x10/0x10 [ 229.242743][ T8803] ? __alloc_skb+0x2f1/0x430 [ 229.242775][ T8803] ? __pfx___alloc_skb+0x10/0x10 [ 229.242808][ T8803] ? netlink_sendmsg+0x642/0xb30 [ 229.242829][ T8803] ? skb_put+0x11b/0x210 [ 229.242863][ T8803] netlink_sendmsg+0x6b2/0xb30 [ 229.242884][ T8803] ? aa_sk_perm+0x15f/0x920 [ 229.242917][ T8803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.242943][ T8803] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 229.242981][ T8803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.243002][ T8803] sock_sendmsg_nosec+0x18f/0x1d0 [ 229.243031][ T8803] ____sys_sendmsg+0x577/0x880 [ 229.243061][ T8803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.243091][ T8803] ? import_iovec+0x74/0xa0 [ 229.243126][ T8803] ___sys_sendmsg+0x21f/0x2a0 [ 229.243150][ T8803] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.243177][ T8803] ? rcu_read_lock_any_held+0xb3/0x120 [ 229.243225][ T8803] ? __fget_files+0x2a/0x420 [ 229.243245][ T8803] ? __fget_files+0x3a0/0x420 [ 229.243274][ T8803] __x64_sys_sendmsg+0x19b/0x260 [ 229.243302][ T8803] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 229.243328][ T8803] ? __pfx_ksys_write+0x10/0x10 [ 229.243357][ T8803] ? do_syscall_64+0xbe/0xf80 [ 229.243387][ T8803] do_syscall_64+0xfa/0xf80 [ 229.243419][ T8803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.243441][ T8803] ? clear_bhb_loop+0x60/0xb0 [ 229.243466][ T8803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.243487][ T8803] RIP: 0033:0x7fb19bb8f749 [ 229.243507][ T8803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.243526][ T8803] RSP: 002b:00007fb19c9f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.243549][ T8803] RAX: ffffffffffffffda RBX: 00007fb19bde5fa0 RCX: 00007fb19bb8f749 [ 229.243565][ T8803] RDX: 0000000020000014 RSI: 00002000000002c0 RDI: 0000000000000003 [ 229.243579][ T8803] RBP: 00007fb19c9f1090 R08: 0000000000000000 R09: 0000000000000000 [ 229.243592][ T8803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.243604][ T8803] R13: 00007fb19bde6038 R14: 00007fb19bde5fa0 R15: 00007ffe73a6b818 [ 229.243638][ T8803] [ 229.739191][ T5953] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 229.909784][ T5953] usb 3-1: Using ep0 maxpacket: 8 [ 229.918593][ T5953] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.930359][ T5953] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.951669][ T5953] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 229.999186][ T5953] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.022912][ T5953] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 230.037432][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.129418][ T8826] Invalid ELF header magic: != ELF [ 230.261651][ T5953] usb 3-1: GET_CAPABILITIES returned 0 [ 230.267281][ T5953] usbtmc 3-1:16.0: can't read capabilities [ 230.409820][ T7609] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 230.442684][ T8837] mmap: syz.0.1038 (8837) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 230.579258][ T7609] usb 4-1: Using ep0 maxpacket: 32 [ 230.586471][ T7609] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.597702][ T7609] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 230.611349][ T7609] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.621384][ T7609] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.630404][ T7609] usb 4-1: Product: syz [ 230.634703][ T7609] usb 4-1: Manufacturer: syz [ 230.640003][ T7609] usb 4-1: SerialNumber: syz [ 230.644618][ T8841] fuse: Unknown parameter 'use00000000000000000000' [ 230.668418][ T5916] usb 3-1: USB disconnect, device number 28 [ 230.679192][ T5953] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 230.848410][ T5148] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 230.865957][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.877757][ T7609] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 230.910229][ T7609] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 230.913750][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.934688][ T7609] usb 4-1: USB disconnect, device number 26 [ 230.952002][ T5953] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 230.979203][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.002273][ T7141] udevd[7141]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.023891][ T5953] usb 2-1: config 0 descriptor?? [ 231.235451][ T8852] capability: warning: `syz.0.1044' uses 32-bit capabilities (legacy support in use) [ 231.468515][ T5953] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 231.487093][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1047'. [ 231.497526][ T5953] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 231.505756][ T5953] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 231.559265][ T8264] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 231.617693][ T8866] fuse: Unknown parameter 'user_i00000000000000000000' [ 231.719204][ T8264] usb 3-1: Using ep0 maxpacket: 16 [ 231.730625][ T8264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.759156][ T8264] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 231.803967][ T8264] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 231.824254][ T8264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.851859][ T8264] usb 3-1: config 0 descriptor?? [ 231.894925][ T5953] hid-led 0003:0FC5:B080.0007: probe with driver hid-led failed with error -71 [ 231.939755][ T5953] usb 2-1: USB disconnect, device number 39 [ 232.079269][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 232.098892][ T8854] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 232.197272][ T8264] usbhid 3-1:0.0: can't add hid device: -71 [ 232.204951][ T8264] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 232.216256][ T8264] usb 3-1: USB disconnect, device number 29 [ 232.270937][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 232.278380][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.288870][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 232.300762][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 232.310934][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 232.319187][ T5916] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 232.320883][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.343339][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 232.353082][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 232.361363][ T9] usb 4-1: SerialNumber: syz [ 232.369443][ T9] usb 4-1: config 0 descriptor?? [ 232.377594][ T9] hso 4-1:0.0: Can't find BULK OUT endpoint [ 232.469243][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 232.479634][ T5916] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 232.499127][ T5916] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 232.518259][ T5916] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.532033][ T5916] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.545544][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.558742][ T5916] usb 1-1: Product: syz [ 232.564391][ T5916] usb 1-1: Manufacturer: syz [ 232.569499][ T5916] usb 1-1: SerialNumber: syz [ 232.910694][ T8895] fuse: Unknown parameter 'smackfstransmute' [ 233.101978][ T5921] usb 4-1: USB disconnect, device number 27 [ 233.360275][ T8903] fuse: Unknown parameter 'user_i00000000000000000000' [ 233.817475][ T8918] syzkaller1: entered promiscuous mode [ 233.836427][ T8918] syzkaller1: entered allmulticast mode [ 234.546147][ T8933] fuse: Unknown parameter 'user_i00000000000000000000' [ 234.729270][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 234.894008][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.919129][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.929229][ T9] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 234.938363][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.957329][ T9] usb 2-1: config 0 descriptor?? [ 235.115860][ T5916] usb 1-1: 0:2 : does not exist [ 235.152938][ T5916] usb 1-1: USB disconnect, device number 29 [ 235.192809][ T7141] udevd[7141]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.207979][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'. [ 235.241931][ T8941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.381857][ T9] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 235.397684][ T9] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 235.407855][ T9] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 235.704917][ T8956] fuse: Unknown parameter 'user_id00000000000000000000' [ 235.775809][ T9] hid-led 0003:0FC5:B080.0008: probe with driver hid-led failed with error -71 [ 235.795858][ T9] usb 2-1: USB disconnect, device number 40 [ 236.099225][ T5819] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 236.205810][ T5148] Bluetooth: hci1: unexpected event for opcode 0x0c1c [ 236.259120][ T5819] usb 4-1: Using ep0 maxpacket: 8 [ 236.267152][ T5819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.280503][ T5819] usb 4-1: config 0 has no interfaces? [ 236.287292][ T5819] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 236.309198][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.328224][ T5819] usb 4-1: config 0 descriptor?? [ 236.509411][ T5819] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 236.555478][ T9] usb 4-1: USB disconnect, device number 28 [ 236.669507][ T5921] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 236.671739][ T5819] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 236.691693][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 236.698794][ T5819] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 236.709961][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.731257][ T5819] usb 3-1: config 0 descriptor?? [ 236.738037][ T8963] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 236.819261][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 236.826055][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.837093][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 236.850727][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 236.864658][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 236.876530][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 236.888340][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 236.898722][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.915743][ T5921] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 236.925541][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.927888][ T8977] fuse: Unknown parameter 'user_id00000000000000000000' [ 236.934839][ T5921] usb 1-1: Product: syz [ 236.946327][ T5921] usb 1-1: Manufacturer: syz [ 236.952443][ T5921] usb 1-1: SerialNumber: syz [ 236.963652][ T5921] usb 1-1: config 0 descriptor?? [ 236.976448][ T8968] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 236.989480][ T5921] ati_remote 1-1:0.0: Initializing ati_remote hardware failed. [ 236.997817][ T5921] ati_remote 1-1:0.0: probe with driver ati_remote failed with error -5 [ 237.028671][ T8979] FAULT_INJECTION: forcing a failure. [ 237.028671][ T8979] name failslab, interval 1, probability 0, space 0, times 0 [ 237.042623][ T8979] CPU: 0 UID: 0 PID: 8979 Comm: syz.1.1087 Not tainted syzkaller #0 PREEMPT(full) [ 237.042646][ T8979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.042656][ T8979] Call Trace: [ 237.042662][ T8979] [ 237.042669][ T8979] dump_stack_lvl+0x189/0x250 [ 237.042693][ T8979] ? __pfx____ratelimit+0x10/0x10 [ 237.042715][ T8979] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.042729][ T8979] ? __pfx__printk+0x10/0x10 [ 237.042756][ T8979] ? __pfx___might_resched+0x10/0x10 [ 237.042777][ T8979] ? fs_reclaim_acquire+0x7d/0x100 [ 237.042803][ T8979] should_fail_ex+0x414/0x560 [ 237.042823][ T8979] should_failslab+0xa8/0x100 [ 237.042839][ T8979] __kmalloc_noprof+0xdf/0x800 [ 237.042857][ T8979] ? lockdep_hardirqs_on+0x98/0x140 [ 237.042878][ T8979] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 237.042905][ T8979] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 237.042931][ T8979] genl_family_rcv_msg_doit+0xb8/0x300 [ 237.042956][ T8979] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 237.042982][ T8979] ? apparmor_capable+0x137/0x1a0 [ 237.043006][ T8979] ? bpf_lsm_capable+0x9/0x20 [ 237.043021][ T8979] ? security_capable+0x7e/0x2e0 [ 237.043042][ T8979] genl_rcv_msg+0x60e/0x790 [ 237.043067][ T8979] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.043085][ T8979] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 237.043103][ T8979] ? __pfx_nl802154_add_llsec_devkey+0x10/0x10 [ 237.043125][ T8979] ? __pfx_nl802154_post_doit+0x10/0x10 [ 237.043154][ T8979] netlink_rcv_skb+0x208/0x470 [ 237.043171][ T8979] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.043191][ T8979] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.043220][ T8979] ? down_read+0x274/0x2e0 [ 237.043231][ T8979] ? genl_rcv+0xd/0x40 [ 237.043251][ T8979] genl_rcv+0x28/0x40 [ 237.043269][ T8979] netlink_unicast+0x82f/0x9e0 [ 237.043298][ T8979] ? __pfx_netlink_unicast+0x10/0x10 [ 237.043321][ T8979] ? netlink_sendmsg+0x642/0xb30 [ 237.043336][ T8979] ? skb_put+0x11b/0x210 [ 237.043360][ T8979] netlink_sendmsg+0x805/0xb30 [ 237.043375][ T8979] ? aa_sk_perm+0x15f/0x920 [ 237.043398][ T8979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.043415][ T8979] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 237.043450][ T8979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.043465][ T8979] sock_sendmsg_nosec+0x18f/0x1d0 [ 237.043486][ T8979] ____sys_sendmsg+0x577/0x880 [ 237.043507][ T8979] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.043529][ T8979] ? import_iovec+0x74/0xa0 [ 237.043556][ T8979] ___sys_sendmsg+0x21f/0x2a0 [ 237.043573][ T8979] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.043593][ T8979] ? rcu_read_lock_any_held+0xb3/0x120 [ 237.043629][ T8979] ? __fget_files+0x2a/0x420 [ 237.043644][ T8979] ? __fget_files+0x3a0/0x420 [ 237.043667][ T8979] __x64_sys_sendmsg+0x19b/0x260 [ 237.043686][ T8979] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.043707][ T8979] ? __pfx_ksys_write+0x10/0x10 [ 237.043732][ T8979] ? do_syscall_64+0xbe/0xf80 [ 237.043757][ T8979] do_syscall_64+0xfa/0xf80 [ 237.043779][ T8979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.043794][ T8979] ? clear_bhb_loop+0x60/0xb0 [ 237.043813][ T8979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.043828][ T8979] RIP: 0033:0x7fb19bb8f749 [ 237.043842][ T8979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.043855][ T8979] RSP: 002b:00007fb19c9f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.043872][ T8979] RAX: ffffffffffffffda RBX: 00007fb19bde5fa0 RCX: 00007fb19bb8f749 [ 237.043883][ T8979] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 237.043893][ T8979] RBP: 00007fb19c9f1090 R08: 0000000000000000 R09: 0000000000000000 [ 237.043902][ T8979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.043911][ T8979] R13: 00007fb19bde6038 R14: 00007fb19bde5fa0 R15: 00007ffe73a6b818 [ 237.043935][ T8979] [ 237.469670][ T8963] dlm: no locking on control device [ 237.510819][ T5819] kye 0003:0458:0138.0009: item fetching failed at offset 2/5 [ 237.514440][ T8981] FAULT_INJECTION: forcing a failure. [ 237.514440][ T8981] name failslab, interval 1, probability 0, space 0, times 0 [ 237.519458][ T5819] kye 0003:0458:0138.0009: parse failed [ 237.537301][ T5819] kye 0003:0458:0138.0009: probe with driver kye failed with error -22 [ 237.570327][ T8981] CPU: 1 UID: 0 PID: 8981 Comm: syz.3.1088 Not tainted syzkaller #0 PREEMPT(full) [ 237.570367][ T8981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.570380][ T8981] Call Trace: [ 237.570389][ T8981] [ 237.570397][ T8981] dump_stack_lvl+0x189/0x250 [ 237.570422][ T8981] ? __pfx____ratelimit+0x10/0x10 [ 237.570451][ T8981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.570469][ T8981] ? __pfx__printk+0x10/0x10 [ 237.570498][ T8981] ? save_netdev_trace_buffer+0x4b5/0x5a0 [ 237.570541][ T8981] should_fail_ex+0x414/0x560 [ 237.570570][ T8981] should_failslab+0xa8/0x100 [ 237.570593][ T8981] kmem_cache_alloc_noprof+0x88/0x710 [ 237.570620][ T8981] ? __netlink_lookup+0xbd/0x8a0 [ 237.570643][ T8981] ? skb_clone+0x212/0x3a0 [ 237.570670][ T8981] skb_clone+0x212/0x3a0 [ 237.570696][ T8981] __netlink_deliver_tap+0x424/0x8b0 [ 237.570733][ T8981] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.570758][ T8981] netlink_deliver_tap+0x19c/0x1b0 [ 237.570781][ T8981] netlink_unicast+0x7fa/0x9e0 [ 237.570824][ T8981] ? __pfx_netlink_unicast+0x10/0x10 [ 237.570859][ T8981] ? netlink_sendmsg+0x642/0xb30 [ 237.570879][ T8981] ? skb_put+0x11b/0x210 [ 237.570915][ T8981] netlink_sendmsg+0x805/0xb30 [ 237.570936][ T8981] ? aa_sk_perm+0x15f/0x920 [ 237.570970][ T8981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.570996][ T8981] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 237.571036][ T8981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.571059][ T8981] sock_sendmsg_nosec+0x18f/0x1d0 [ 237.571089][ T8981] ____sys_sendmsg+0x577/0x880 [ 237.571119][ T8981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.571151][ T8981] ? import_iovec+0x74/0xa0 [ 237.571187][ T8981] ___sys_sendmsg+0x21f/0x2a0 [ 237.571209][ T8981] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.571238][ T8981] ? rcu_read_lock_any_held+0xb3/0x120 [ 237.571291][ T8981] ? __fget_files+0x2a/0x420 [ 237.571312][ T8981] ? __fget_files+0x3a0/0x420 [ 237.571356][ T8981] __x64_sys_sendmsg+0x19b/0x260 [ 237.571380][ T8981] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.571411][ T8981] ? __pfx_ksys_write+0x10/0x10 [ 237.571445][ T8981] ? do_syscall_64+0xbe/0xf80 [ 237.571480][ T8981] do_syscall_64+0xfa/0xf80 [ 237.571512][ T8981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.571534][ T8981] ? clear_bhb_loop+0x60/0xb0 [ 237.571559][ T8981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.571580][ T8981] RIP: 0033:0x7f8896d8f749 [ 237.571599][ T8981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.571619][ T8981] RSP: 002b:00007f8897caa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.571653][ T8981] RAX: ffffffffffffffda RBX: 00007f8896fe5fa0 RCX: 00007f8896d8f749 [ 237.571670][ T8981] RDX: 0000000020000014 RSI: 00002000000002c0 RDI: 0000000000000003 [ 237.571684][ T8981] RBP: 00007f8897caa090 R08: 0000000000000000 R09: 0000000000000000 [ 237.571698][ T8981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.571711][ T8981] R13: 00007f8896fe6038 R14: 00007f8896fe5fa0 R15: 00007fff4a5481a8 [ 237.571746][ T8981] [ 237.901518][ T5921] usb 3-1: USB disconnect, device number 30 [ 237.974477][ T5819] usb 1-1: USB disconnect, device number 30 [ 237.979332][ T30] audit: type=1800 audit(1764469618.566:4): pid=8968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1082" name="/" dev="fuse" ino=1 res=0 errno=0 [ 238.257985][ T8991] syzkaller1: entered promiscuous mode [ 238.265654][ T8991] syzkaller1: entered allmulticast mode [ 238.422121][ T8993] syzkaller1: entered promiscuous mode [ 238.428459][ T8993] syzkaller1: entered allmulticast mode [ 238.643320][ T9001] fuse: Unknown parameter 'user_id00000000000000000000' [ 239.040630][ T9017] loop3: detected capacity change from 0 to 7 [ 239.050269][ T9017] Dev loop3: unable to read RDB block 7 [ 239.056865][ T9017] loop3: unable to read partition table [ 239.065829][ T9017] loop3: partition table beyond EOD, truncated [ 239.098057][ T9017] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 239.209146][ T5819] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 239.369149][ T5819] usb 3-1: Using ep0 maxpacket: 32 [ 239.378127][ T5819] usb 3-1: config 0 has an invalid interface number: 124 but max is 0 [ 239.387705][ T5819] usb 3-1: config 0 has no interface number 0 [ 239.399132][ T5819] usb 3-1: config 0 interface 124 has no altsetting 0 [ 239.412803][ T5819] usb 3-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=88.47 [ 239.439341][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.448068][ T5819] usb 3-1: Product: syz [ 239.459122][ T5819] usb 3-1: Manufacturer: syz [ 239.464675][ T5819] usb 3-1: SerialNumber: syz [ 239.482820][ T5819] usb 3-1: config 0 descriptor?? [ 239.579664][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 239.591773][ T43] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 239.641574][ T9025] loop8: detected capacity change from 0 to 1 [ 239.656682][ T7141] Dev loop8: unable to read RDB block 1 [ 239.663399][ T7141] loop8: unable to read partition table [ 239.671234][ T7141] loop8: partition table beyond EOD, truncated [ 239.696873][ T9025] Dev loop8: unable to read RDB block 1 [ 239.702736][ T9025] loop8: unable to read partition table [ 239.709532][ T9025] loop8: partition table beyond EOD, truncated [ 239.719642][ T9025] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 239.786774][ T43] usb 4-1: config 0 has no interfaces? [ 239.799237][ T43] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.819119][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.852147][ T43] usb 4-1: config 0 descriptor?? [ 239.896671][ T9032] fuse: Bad value for 'fd' [ 240.006532][ T9035] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 240.076087][ T9014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.096105][ T9014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.317741][ T5819] usb 4-1: USB disconnect, device number 29 [ 240.501507][ T9050] syzkaller1: entered promiscuous mode [ 240.507308][ T9050] syzkaller1: entered allmulticast mode [ 240.609293][ T43] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 240.759139][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 240.766347][ T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 240.780692][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 240.798245][ T43] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 240.808977][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.817590][ T43] usb 2-1: Product: syz [ 240.826718][ T43] usb 2-1: Manufacturer: syz [ 240.832756][ T43] usb 2-1: SerialNumber: syz [ 240.841260][ T43] usb 2-1: config 0 descriptor?? [ 241.076163][ T43] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 241.100274][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.109583][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.118476][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.127448][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.137772][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.146310][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.154807][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.163444][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.172017][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.179583][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.187488][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.195087][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.203364][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.211736][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.219509][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.227767][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.236467][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.243991][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.254355][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.255718][ T5183] usb 2-1: control msg error: -71 [ 241.262288][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.262842][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.283590][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.290830][ C1] usb 2-1: pegasus_irq - usb_submit_urb failed with result -1 [ 241.312086][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.319827][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.327930][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.335597][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.345268][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.352856][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.360603][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.368496][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.377709][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.385229][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.392932][ T5183] usb 2-1: control msg error: -71 [ 241.398079][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.405661][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.413073][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.420417][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.427772][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.435206][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.442493][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.449829][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.457459][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.465108][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.473195][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.480621][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.487897][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.495296][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.503026][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.510531][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.518011][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.525453][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.532764][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.540345][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.547768][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.555102][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.562400][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.569710][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.580099][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.589588][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.597130][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.605648][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.613512][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.621392][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.629540][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.637366][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.644751][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.653417][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.660992][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.668953][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.677372][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.685710][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.693467][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.701716][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.710984][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.719504][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.728761][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.736728][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.744858][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.753609][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.762919][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.771140][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.780094][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.787668][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.795920][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.804536][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.812843][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.821091][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.828620][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.837269][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.845010][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.852773][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.861215][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.869031][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.877772][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.886239][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.895321][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.902850][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.910611][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.918347][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.929113][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.937228][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.945240][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.952660][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.960730][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.968813][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.979444][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.987799][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 241.995249][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.002760][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.011833][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.019388][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.027349][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.036137][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.044782][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.054564][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.063550][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.071976][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.073198][ T9] usb 3-1: USB disconnect, device number 31 [ 242.080796][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.095074][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.102634][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.110627][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.119568][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.128723][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.136502][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.144430][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.156318][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.164190][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.171818][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.179721][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.187571][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.194946][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.202501][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.210154][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.217646][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.225189][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.232607][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.240058][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.247635][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.255138][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.262637][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.270544][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.277970][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.286128][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.293995][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.301515][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.308885][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.316815][ C1] usb 2-1: pegasus_irq - nonzero urb status received: -71 [ 242.324567][ C1] usb 2-1: pegasus_irq - usb_submit_urb failed with result -1 [ 242.338866][ T43] usb 2-1: USB disconnect, device number 41 [ 242.464550][ T9088] fuse: Bad value for 'fd' [ 242.669141][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 242.861345][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.886232][ T9] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 242.906952][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.925948][ T9] usb 3-1: config 0 descriptor?? [ 243.381568][ T9109] could not allocate digest TFM handle hmac(sha1-avx2) [ 243.392841][ T9] hid_mf 0003:0079:1846.000A: unknown main item tag 0x0 [ 243.407578][ T9] hid_mf 0003:0079:1846.000A: unknown main item tag 0x0 [ 243.440858][ T9] hid_mf 0003:0079:1846.000A: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.2-1/input0 [ 243.453425][ T9119] syzkaller1: entered promiscuous mode [ 243.458944][ T9119] syzkaller1: entered allmulticast mode [ 243.464860][ T9] hid_mf 0003:0079:1846.000A: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 243.574548][ T43] usb 3-1: USB disconnect, device number 32 [ 243.702979][ T9124] fuse: Bad value for 'fd' [ 243.805477][ T9126] comedi comedi3: 8255: I/O port conflict (0x4004f27,4) [ 244.422166][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 244.579695][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 244.603605][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 244.622670][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.640679][ T9] usb 3-1: config 0 has no interface number 0 [ 244.647166][ T9] usb 3-1: config 0 interface 1 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 244.661139][ T9] usb 3-1: config 0 interface 1 has no altsetting 0 [ 244.668803][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 244.678883][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.710086][ T9] usb 3-1: config 0 descriptor?? [ 244.722941][ T9] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 244.919950][ T7609] usb 3-1: USB disconnect, device number 33 [ 244.930760][ T43] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 245.069329][ T43] usb 4-1: device descriptor read/64, error -71 [ 245.119156][ T8264] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 245.249157][ T8264] usb 1-1: device descriptor read/64, error -71 [ 245.309192][ T43] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 245.439237][ T43] usb 4-1: device descriptor read/64, error -71 [ 245.473876][ T9147] fuse: Unknown parameter '0x0000000000000003' [ 245.489429][ T8264] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 245.549582][ T43] usb usb4-port1: attempt power cycle [ 245.629182][ T8264] usb 1-1: device descriptor read/64, error -71 [ 245.681110][ T9152] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1135'. [ 245.740760][ T8264] usb usb1-port1: attempt power cycle [ 245.850842][ T9154] syzkaller1: entered promiscuous mode [ 245.856722][ T9154] syzkaller1: entered allmulticast mode [ 245.899337][ T43] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 245.914225][ T9156] FAULT_INJECTION: forcing a failure. [ 245.914225][ T9156] name failslab, interval 1, probability 0, space 0, times 0 [ 245.920176][ T43] usb 4-1: device descriptor read/8, error -71 [ 245.928997][ T9156] CPU: 0 UID: 0 PID: 9156 Comm: syz.2.1137 Not tainted syzkaller #0 PREEMPT(full) [ 245.929038][ T9156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 245.929072][ T9156] Call Trace: [ 245.929082][ T9156] [ 245.929093][ T9156] dump_stack_lvl+0x189/0x250 [ 245.929123][ T9156] ? __pfx____ratelimit+0x10/0x10 [ 245.929183][ T9156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.929214][ T9156] ? __pfx__printk+0x10/0x10 [ 245.929261][ T9156] ? __pfx___might_resched+0x10/0x10 [ 245.929305][ T9156] should_fail_ex+0x414/0x560 [ 245.929340][ T9156] should_failslab+0xa8/0x100 [ 245.929367][ T9156] __kmalloc_noprof+0xdf/0x800 [ 245.929402][ T9156] ? kfree+0x4d/0x660 [ 245.929427][ T9156] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 245.929471][ T9156] tomoyo_realpath_from_path+0xe3/0x5d0 [ 245.929508][ T9156] ? tomoyo_domain+0xd8/0x130 [ 245.929550][ T9156] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 245.929578][ T9156] tomoyo_path_number_perm+0x1e8/0x5a0 [ 245.929608][ T9156] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 245.929657][ T9156] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 245.929720][ T9156] ? __fget_files+0x2a/0x420 [ 245.929752][ T9156] ? __fget_files+0x3a0/0x420 [ 245.929775][ T9156] ? __fget_files+0x2a/0x420 [ 245.929807][ T9156] security_file_ioctl+0xcb/0x2d0 [ 245.929842][ T9156] __se_sys_ioctl+0x47/0x170 [ 245.929880][ T9156] do_syscall_64+0xfa/0xf80 [ 245.929917][ T9156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.929943][ T9156] ? clear_bhb_loop+0x60/0xb0 [ 245.929985][ T9156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.930011][ T9156] RIP: 0033:0x7f511518f749 [ 245.930034][ T9156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.930056][ T9156] RSP: 002b:00007f5116077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.930084][ T9156] RAX: ffffffffffffffda RBX: 00007f51153e5fa0 RCX: 00007f511518f749 [ 245.930104][ T9156] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 245.930121][ T9156] RBP: 00007f5116077090 R08: 0000000000000000 R09: 0000000000000000 [ 245.930134][ T9156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.930154][ T9156] R13: 00007f51153e6038 R14: 00007f51153e5fa0 R15: 00007ffdc12337f8 [ 245.930196][ T9156] [ 245.930277][ T9156] ERROR: Out of memory at tomoyo_realpath_from_path. [ 246.179734][ T43] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 246.249223][ T8264] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 246.249957][ T43] usb 4-1: device descriptor read/8, error -71 [ 246.272197][ T8264] usb 1-1: device descriptor read/8, error -71 [ 246.369551][ T43] usb usb4-port1: unable to enumerate USB device [ 246.529198][ T8264] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 246.551860][ T8264] usb 1-1: device descriptor read/8, error -71 [ 246.669437][ T8264] usb usb1-port1: unable to enumerate USB device [ 246.686914][ T9166] FAULT_INJECTION: forcing a failure. [ 246.686914][ T9166] name failslab, interval 1, probability 0, space 0, times 0 [ 246.700465][ T9166] CPU: 1 UID: 0 PID: 9166 Comm: syz.2.1140 Not tainted syzkaller #0 PREEMPT(full) [ 246.700494][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.700521][ T9166] Call Trace: [ 246.700531][ T9166] [ 246.700540][ T9166] dump_stack_lvl+0x189/0x250 [ 246.700567][ T9166] ? __pfx____ratelimit+0x10/0x10 [ 246.700597][ T9166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.700617][ T9166] ? __pfx__printk+0x10/0x10 [ 246.700665][ T9166] should_fail_ex+0x414/0x560 [ 246.700696][ T9166] should_failslab+0xa8/0x100 [ 246.700719][ T9166] __kmalloc_noprof+0xdf/0x800 [ 246.700747][ T9166] ? hash_ipportnet6_add+0x1273/0x2ee0 [ 246.700772][ T9166] hash_ipportnet6_add+0x1273/0x2ee0 [ 246.700791][ T9166] ? hash_ipportnet6_add+0x7d/0x2ee0 [ 246.701128][ T9166] ? __pfx_ip_set_get_extensions+0x10/0x10 [ 246.701188][ T9166] hash_ipportnet6_uadt+0xa61/0xdd0 [ 246.701217][ T9166] ? __pfx_hash_ipportnet6_add+0x10/0x10 [ 246.701244][ T9166] ? __pfx_hash_ipportnet6_uadt+0x10/0x10 [ 246.701259][ T9166] ? __nla_validate_parse+0x2400/0x2d40 [ 246.701298][ T9166] call_ad+0x178/0xb00 [ 246.701320][ T9166] ? __pfx_call_ad+0x10/0x10 [ 246.701346][ T9166] ? __nla_parse+0x40/0x60 [ 246.701368][ T9166] ip_set_ad+0x791/0x930 [ 246.701390][ T9166] ? __pfx_ip_set_ad+0x10/0x10 [ 246.701432][ T9166] nfnetlink_rcv_msg+0xb4d/0x1130 [ 246.701456][ T9166] ? arch_stack_walk+0xfc/0x150 [ 246.701479][ T9166] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 246.701521][ T9166] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 246.701572][ T9166] ? __lock_acquire+0x6b6/0x2cf0 [ 246.701596][ T9166] ? __lock_acquire+0x6b6/0x2cf0 [ 246.701629][ T9166] netlink_rcv_skb+0x208/0x470 [ 246.701647][ T9166] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 246.701672][ T9166] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 246.701697][ T9166] ? bpf_lsm_capable+0x9/0x20 [ 246.701712][ T9166] ? security_capable+0x7e/0x2e0 [ 246.701735][ T9166] nfnetlink_rcv+0x282/0x2590 [ 246.701771][ T9166] ? __kernel_text_address+0xd/0x40 [ 246.701790][ T9166] ? unwind_get_return_address+0x4d/0x90 [ 246.701814][ T9166] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 246.701834][ T9166] ? arch_stack_walk+0xfc/0x150 [ 246.701866][ T9166] ? stack_trace_save+0x9c/0xe0 [ 246.701885][ T9166] ? __pfx_stack_trace_save+0x10/0x10 [ 246.701907][ T9166] ? trim_netdev_trace+0x2a3/0x3d0 [ 246.701928][ T9166] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 246.701952][ T9166] ? save_netdev_trace_buffer+0x4b5/0x5a0 [ 246.701972][ T9166] ? __pfx___dev_queue_xmit+0x10/0x10 [ 246.701994][ T9166] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 246.702013][ T9166] ? ref_tracker_free+0x63a/0x7d0 [ 246.702030][ T9166] ? __netlink_deliver_tap+0x636/0x8b0 [ 246.702045][ T9166] ? netlink_deliver_tap+0x19c/0x1b0 [ 246.702059][ T9166] ? netlink_unicast+0x7fa/0x9e0 [ 246.702080][ T9166] ? netlink_sendmsg+0x805/0xb30 [ 246.702095][ T9166] ? sock_sendmsg_nosec+0x18f/0x1d0 [ 246.702113][ T9166] ? ____sys_sendmsg+0x577/0x880 [ 246.702126][ T9166] ? ___sys_sendmsg+0x21f/0x2a0 [ 246.702138][ T9166] ? __x64_sys_sendmsg+0x19b/0x260 [ 246.702150][ T9166] ? do_syscall_64+0xfa/0xf80 [ 246.702171][ T9166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.702191][ T9166] ? __skb_clone+0x483/0x7a0 [ 246.702211][ T9166] ? skb_clone+0x246/0x3a0 [ 246.702229][ T9166] ? __netlink_deliver_tap+0x866/0x8b0 [ 246.702245][ T9166] ? netlink_deliver_tap+0x2e/0x1b0 [ 246.702265][ T9166] ? netlink_deliver_tap+0x2e/0x1b0 [ 246.702287][ T9166] netlink_unicast+0x82f/0x9e0 [ 246.702317][ T9166] ? __pfx_netlink_unicast+0x10/0x10 [ 246.702341][ T9166] ? netlink_sendmsg+0x642/0xb30 [ 246.702356][ T9166] ? skb_put+0x11b/0x210 [ 246.702380][ T9166] netlink_sendmsg+0x805/0xb30 [ 246.702395][ T9166] ? aa_sk_perm+0x15f/0x920 [ 246.702419][ T9166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.702436][ T9166] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 246.702464][ T9166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.702480][ T9166] sock_sendmsg_nosec+0x18f/0x1d0 [ 246.702502][ T9166] ____sys_sendmsg+0x577/0x880 [ 246.702524][ T9166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.702546][ T9166] ? import_iovec+0x74/0xa0 [ 246.702573][ T9166] ___sys_sendmsg+0x21f/0x2a0 [ 246.702589][ T9166] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.702609][ T9166] ? rcu_read_lock_any_held+0xb3/0x120 [ 246.702646][ T9166] ? __fget_files+0x2a/0x420 [ 246.702661][ T9166] ? __fget_files+0x3a0/0x420 [ 246.702685][ T9166] __x64_sys_sendmsg+0x19b/0x260 [ 246.702703][ T9166] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 246.702731][ T9166] ? __pfx_ksys_write+0x10/0x10 [ 246.702789][ T9166] ? do_syscall_64+0xbe/0xf80 [ 246.702814][ T9166] do_syscall_64+0xfa/0xf80 [ 246.702838][ T9166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.702853][ T9166] ? clear_bhb_loop+0x60/0xb0 [ 246.702872][ T9166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.702887][ T9166] RIP: 0033:0x7f511518f749 [ 246.702904][ T9166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.702917][ T9166] RSP: 002b:00007f5116077038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.702934][ T9166] RAX: ffffffffffffffda RBX: 00007f51153e5fa0 RCX: 00007f511518f749 [ 246.702946][ T9166] RDX: 0000000020000014 RSI: 00002000000002c0 RDI: 0000000000000003 [ 246.702956][ T9166] RBP: 00007f5116077090 R08: 0000000000000000 R09: 0000000000000000 [ 246.702966][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.702975][ T9166] R13: 00007f51153e6038 R14: 00007f51153e5fa0 R15: 00007ffdc12337f8 [ 246.702999][ T9166] [ 247.373560][ T9170] fuse: Unknown parameter '0x0000000000000003' [ 247.549821][ T9174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.609692][ T8264] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 247.779199][ T8264] usb 3-1: Using ep0 maxpacket: 8 [ 247.786133][ T8264] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 247.796765][ T8264] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.807406][ T8264] usb 3-1: config 0 has no interface number 0 [ 247.809149][ T43] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 247.814661][ T8264] usb 3-1: config 0 interface 1 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 247.836302][ T8264] usb 3-1: config 0 interface 1 has no altsetting 0 [ 247.843434][ T8264] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 247.856326][ T8264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.885012][ T8264] usb 3-1: config 0 descriptor?? [ 247.904263][ T8264] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 247.990005][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 247.999408][ T9184] loop3: detected capacity change from 0 to 7 [ 248.021781][ T43] usb 2-1: config 0 has an invalid interface number: 77 but max is 0 [ 248.022495][ T9184] Dev loop3: unable to read RDB block 7 [ 248.037692][ T9184] loop3: unable to read partition table [ 248.040515][ T43] usb 2-1: config 0 has no interface number 0 [ 248.047812][ T9184] loop3: partition table beyond EOD, truncated [ 248.057927][ T9184] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 248.072803][ T5198] Dev loop3: unable to read RDB block 7 [ 248.078593][ T5198] loop3: unable to read partition table [ 248.084474][ T43] usb 2-1: config 0 interface 77 has no altsetting 0 [ 248.088020][ T43] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=ea.48 [ 248.091648][ T5198] loop3: partition table beyond EOD, truncated [ 248.119772][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.122360][ T8264] usb 3-1: USB disconnect, device number 34 [ 248.129657][ T43] usb 2-1: Product: syz [ 248.141099][ T43] usb 2-1: Manufacturer: syz [ 248.145783][ T43] usb 2-1: SerialNumber: syz [ 248.186975][ T43] usb 2-1: config 0 descriptor?? [ 248.224593][ T43] redrat3 2-1:0.77: Couldn't find all endpoints [ 248.400967][ T9193] syzkaller1: entered promiscuous mode [ 248.406948][ T9193] syzkaller1: entered allmulticast mode [ 248.451548][ T43] usb 2-1: USB disconnect, device number 42 [ 248.511674][ T9197] fuse: Unknown parameter '0x0000000000000003' [ 249.009355][ T43] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 249.118973][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1157'. [ 249.205465][ T43] usb 3-1: device descriptor read/64, error -71 [ 249.261586][ T9218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.270913][ T9218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.392499][ T9223] fuse: Unknown parameter '0x0000000000000003' [ 249.459434][ T43] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 249.500075][ T8264] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 249.595510][ T9229] FAULT_INJECTION: forcing a failure. [ 249.595510][ T9229] name failslab, interval 1, probability 0, space 0, times 0 [ 249.608635][ T9229] CPU: 0 UID: 0 PID: 9229 Comm: syz.0.1163 Not tainted syzkaller #0 PREEMPT(full) [ 249.608657][ T9229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.608667][ T9229] Call Trace: [ 249.608673][ T9229] [ 249.608679][ T9229] dump_stack_lvl+0x189/0x250 [ 249.608698][ T9229] ? __pfx____ratelimit+0x10/0x10 [ 249.608720][ T9229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.608734][ T9229] ? __pfx__printk+0x10/0x10 [ 249.608761][ T9229] ? __pfx___might_resched+0x10/0x10 [ 249.608783][ T9229] ? fs_reclaim_acquire+0x7d/0x100 [ 249.608809][ T9229] should_fail_ex+0x414/0x560 [ 249.608829][ T9229] should_failslab+0xa8/0x100 [ 249.608845][ T9229] __kmalloc_noprof+0xdf/0x800 [ 249.608864][ T9229] ? tomoyo_encode+0x28b/0x550 [ 249.608888][ T9229] tomoyo_encode+0x28b/0x550 [ 249.608911][ T9229] tomoyo_realpath_from_path+0x58d/0x5d0 [ 249.608932][ T9229] ? tomoyo_domain+0xd8/0x130 [ 249.608956][ T9229] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 249.608973][ T9229] tomoyo_path_number_perm+0x1e8/0x5a0 [ 249.608991][ T9229] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 249.609034][ T9229] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 249.609084][ T9229] ? __fget_files+0x2a/0x420 [ 249.609110][ T9229] ? __fget_files+0x3a0/0x420 [ 249.609130][ T9229] ? __fget_files+0x2a/0x420 [ 249.609154][ T9229] security_file_ioctl+0xcb/0x2d0 [ 249.609162][ T43] usb 3-1: device descriptor read/64, error -71 [ 249.609184][ T9229] __se_sys_ioctl+0x47/0x170 [ 249.609215][ T9229] do_syscall_64+0xfa/0xf80 [ 249.609260][ T9229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.609285][ T9229] ? clear_bhb_loop+0x60/0xb0 [ 249.609317][ T9229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.609341][ T9229] RIP: 0033:0x7f96d018f749 [ 249.609363][ T9229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.609385][ T9229] RSP: 002b:00007f96d0f77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.609412][ T9229] RAX: ffffffffffffffda RBX: 00007f96d03e5fa0 RCX: 00007f96d018f749 [ 249.609430][ T9229] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 249.609446][ T9229] RBP: 00007f96d0f77090 R08: 0000000000000000 R09: 0000000000000000 [ 249.609462][ T9229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.609476][ T9229] R13: 00007f96d03e6038 R14: 00007f96d03e5fa0 R15: 00007ffe2a05ba78 [ 249.609510][ T9229] [ 249.615743][ T9229] ERROR: Out of memory at tomoyo_realpath_from_path. [ 249.729842][ T43] usb usb3-port1: attempt power cycle [ 249.730833][ T8264] usb 2-1: device descriptor read/64, error -71 [ 249.786149][ T5921] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 250.029351][ T8264] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 250.089114][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 250.096531][ T5921] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 250.104697][ T5921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.111251][ T9235] FAULT_INJECTION: forcing a failure. [ 250.111251][ T9235] name failslab, interval 1, probability 0, space 0, times 0 [ 250.129202][ T9235] CPU: 0 UID: 0 PID: 9235 Comm: syz.0.1165 Not tainted syzkaller #0 PREEMPT(full) [ 250.129231][ T9235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.129245][ T9235] Call Trace: [ 250.129253][ T9235] [ 250.129261][ T9235] dump_stack_lvl+0x189/0x250 [ 250.129287][ T9235] ? __pfx____ratelimit+0x10/0x10 [ 250.129317][ T9235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.129336][ T9235] ? __pfx__printk+0x10/0x10 [ 250.129369][ T9235] ? __pfx___might_resched+0x10/0x10 [ 250.129400][ T9235] ? fs_reclaim_acquire+0x7d/0x100 [ 250.129435][ T9235] should_fail_ex+0x414/0x560 [ 250.129464][ T9235] should_failslab+0xa8/0x100 [ 250.129486][ T9235] kmem_cache_alloc_noprof+0x88/0x710 [ 250.129512][ T9235] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 250.129543][ T9235] ? getname_flags+0xb8/0x540 [ 250.129562][ T9235] ? __pfx_vfs_write+0x10/0x10 [ 250.129593][ T9235] getname_flags+0xb8/0x540 [ 250.129619][ T9235] do_sys_openat2+0xbc/0x200 [ 250.129645][ T9235] ? __pfx_do_sys_openat2+0x10/0x10 [ 250.129673][ T9235] ? ksys_write+0x22a/0x250 [ 250.129704][ T9235] ? __pfx_ksys_write+0x10/0x10 [ 250.129735][ T9235] __x64_sys_openat+0x138/0x170 [ 250.129765][ T9235] do_syscall_64+0xfa/0xf80 [ 250.129797][ T9235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.129820][ T9235] ? clear_bhb_loop+0x60/0xb0 [ 250.129845][ T9235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.129855][ T5921] usb 4-1: config 0 has no interface number 0 [ 250.129866][ T9235] RIP: 0033:0x7f96d018f749 [ 250.129886][ T9235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.129903][ T9235] RSP: 002b:00007f96d0f56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 250.129925][ T9235] RAX: ffffffffffffffda RBX: 00007f96d03e6090 RCX: 00007f96d018f749 [ 250.129941][ T9235] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 250.129959][ T9235] RBP: 00007f96d0f56090 R08: 0000000000000000 R09: 0000000000000000 [ 250.129975][ T9235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.129990][ T9235] R13: 00007f96d03e6128 R14: 00007f96d03e6090 R15: 00007ffe2a05ba78 [ 250.130031][ T9235] [ 250.169700][ T8264] usb 2-1: device descriptor read/64, error -71 [ 250.189561][ T5921] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.330983][ T8264] usb usb2-port1: attempt power cycle [ 250.338628][ T43] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 250.339220][ T5921] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 250.404535][ T43] usb 3-1: device descriptor read/8, error -71 [ 250.416828][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.429270][ T5921] usb 4-1: config 0 descriptor?? [ 250.438108][ T5921] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 250.646754][ T5921] usb 4-1: USB disconnect, device number 34 [ 250.655066][ T43] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 250.699919][ T8264] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 250.707251][ T43] usb 3-1: device descriptor read/8, error -71 [ 250.740065][ T8264] usb 2-1: device descriptor read/8, error -71 [ 250.823280][ T43] usb usb3-port1: unable to enumerate USB device [ 250.999212][ T8264] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 251.029757][ T8264] usb 2-1: device descriptor read/8, error -71 [ 251.149618][ T8264] usb usb2-port1: unable to enumerate USB device [ 251.294680][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1166'. [ 251.578300][ T9245] syzkaller1: entered promiscuous mode [ 251.585932][ T9245] syzkaller1: entered allmulticast mode [ 251.586668][ T9247] fuse: Unknown parameter '0x0000000000000003' [ 252.149213][ T43] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 252.169332][ T5921] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 252.246148][ T9257] FAULT_INJECTION: forcing a failure. [ 252.246148][ T9257] name failslab, interval 1, probability 0, space 0, times 0 [ 252.261580][ T9257] CPU: 1 UID: 0 PID: 9257 Comm: syz.1.1173 Not tainted syzkaller #0 PREEMPT(full) [ 252.261601][ T9257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 252.261611][ T9257] Call Trace: [ 252.261618][ T9257] [ 252.261624][ T9257] dump_stack_lvl+0x189/0x250 [ 252.261642][ T9257] ? __pfx____ratelimit+0x10/0x10 [ 252.261663][ T9257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.261677][ T9257] ? __pfx__printk+0x10/0x10 [ 252.261697][ T9257] ? save_netdev_trace_buffer+0x4b5/0x5a0 [ 252.261726][ T9257] should_fail_ex+0x414/0x560 [ 252.261747][ T9257] should_failslab+0xa8/0x100 [ 252.261763][ T9257] kmem_cache_alloc_noprof+0x88/0x710 [ 252.261783][ T9257] ? skb_clone+0x212/0x3a0 [ 252.261800][ T9257] skb_clone+0x212/0x3a0 [ 252.261818][ T9257] __netlink_deliver_tap+0x424/0x8b0 [ 252.261844][ T9257] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.261860][ T9257] netlink_deliver_tap+0x19c/0x1b0 [ 252.261877][ T9257] netlink_sendskb+0x68/0x140 [ 252.261901][ T9257] netlink_unicast+0x397/0x9e0 [ 252.261922][ T9257] ? __asan_memcpy+0x40/0x70 [ 252.261946][ T9257] ? __pfx_netlink_unicast+0x10/0x10 [ 252.261976][ T9257] netlink_rcv_skb+0x28c/0x470 [ 252.261992][ T9257] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 252.262019][ T9257] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.262043][ T9257] ? bpf_lsm_capable+0x9/0x20 [ 252.262058][ T9257] ? security_capable+0x7e/0x2e0 [ 252.262081][ T9257] nfnetlink_rcv+0x282/0x2590 [ 252.262107][ T9257] ? __kernel_text_address+0xd/0x40 [ 252.262125][ T9257] ? unwind_get_return_address+0x4d/0x90 [ 252.262149][ T9257] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 252.262169][ T9257] ? arch_stack_walk+0xfc/0x150 [ 252.262203][ T9257] ? stack_trace_save+0x9c/0xe0 [ 252.262222][ T9257] ? __pfx_stack_trace_save+0x10/0x10 [ 252.262244][ T9257] ? trim_netdev_trace+0x2a3/0x3d0 [ 252.262270][ T9257] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 252.262293][ T9257] ? save_netdev_trace_buffer+0x4b5/0x5a0 [ 252.262313][ T9257] ? __pfx___dev_queue_xmit+0x10/0x10 [ 252.262335][ T9257] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 252.262353][ T9257] ? ref_tracker_free+0x63a/0x7d0 [ 252.262371][ T9257] ? __netlink_deliver_tap+0x636/0x8b0 [ 252.262386][ T9257] ? netlink_deliver_tap+0x19c/0x1b0 [ 252.262400][ T9257] ? netlink_unicast+0x7fa/0x9e0 [ 252.262421][ T9257] ? netlink_sendmsg+0x805/0xb30 [ 252.262436][ T9257] ? sock_sendmsg_nosec+0x18f/0x1d0 [ 252.262453][ T9257] ? ____sys_sendmsg+0x577/0x880 [ 252.262465][ T9257] ? ___sys_sendmsg+0x21f/0x2a0 [ 252.262477][ T9257] ? __x64_sys_sendmsg+0x19b/0x260 [ 252.262490][ T9257] ? do_syscall_64+0xfa/0xf80 [ 252.262511][ T9257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.262536][ T9257] ? __skb_clone+0x483/0x7a0 [ 252.262564][ T9257] ? skb_clone+0x246/0x3a0 [ 252.262591][ T9257] ? __netlink_deliver_tap+0x866/0x8b0 [ 252.262614][ T9257] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.262634][ T9257] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.262655][ T9257] netlink_unicast+0x82f/0x9e0 [ 252.262683][ T9257] ? __pfx_netlink_unicast+0x10/0x10 [ 252.262708][ T9257] ? netlink_sendmsg+0x642/0xb30 [ 252.262721][ T9257] ? skb_put+0x11b/0x210 [ 252.262747][ T9257] netlink_sendmsg+0x805/0xb30 [ 252.262761][ T9257] ? aa_sk_perm+0x15f/0x920 [ 252.262784][ T9257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.262801][ T9257] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 252.262829][ T9257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.262844][ T9257] sock_sendmsg_nosec+0x18f/0x1d0 [ 252.262864][ T9257] ____sys_sendmsg+0x577/0x880 [ 252.262884][ T9257] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.262905][ T9257] ? import_iovec+0x74/0xa0 [ 252.262929][ T9257] ___sys_sendmsg+0x21f/0x2a0 [ 252.262945][ T9257] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.262964][ T9257] ? rcu_read_lock_any_held+0xb3/0x120 [ 252.262999][ T9257] ? __fget_files+0x2a/0x420 [ 252.263016][ T9257] ? __fget_files+0x3a0/0x420 [ 252.263039][ T9257] __x64_sys_sendmsg+0x19b/0x260 [ 252.263055][ T9257] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.263077][ T9257] ? __pfx_ksys_write+0x10/0x10 [ 252.263101][ T9257] ? do_syscall_64+0xbe/0xf80 [ 252.263125][ T9257] do_syscall_64+0xfa/0xf80 [ 252.263148][ T9257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.263163][ T9257] ? clear_bhb_loop+0x60/0xb0 [ 252.263181][ T9257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.263195][ T9257] RIP: 0033:0x7fb19bb8f749 [ 252.263210][ T9257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.263223][ T9257] RSP: 002b:00007fb19c9f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.263251][ T9257] RAX: ffffffffffffffda RBX: 00007fb19bde5fa0 RCX: 00007fb19bb8f749 [ 252.263269][ T9257] RDX: 0000000020000014 RSI: 00002000000002c0 RDI: 0000000000000003 [ 252.263280][ T9257] RBP: 00007fb19c9f1090 R08: 0000000000000000 R09: 0000000000000000 [ 252.263291][ T9257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.263300][ T9257] R13: 00007fb19bde6038 R14: 00007fb19bde5fa0 R15: 00007ffe73a6b818 [ 252.263325][ T9257] [ 252.843238][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 252.852538][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.863981][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0 [ 252.871630][ T43] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 252.881614][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.891296][ T5921] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 252.900560][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.908676][ T5921] usb 1-1: Product: syz [ 252.913052][ T5921] usb 1-1: Manufacturer: syz [ 252.917709][ T5921] usb 1-1: SerialNumber: syz [ 252.935907][ T5921] usb 1-1: config 0 descriptor?? [ 252.945478][ T43] usb 3-1: config 0 descriptor?? [ 252.955032][ T43] cp210x 3-1:0.0: cp210x converter detected [ 253.038546][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1175'. [ 253.139184][ T8264] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 253.221038][ T43] usb 3-1: cp210x converter now attached to ttyUSB0 [ 253.299264][ T8264] usb 2-1: Using ep0 maxpacket: 8 [ 253.307030][ T8264] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 253.315552][ T8264] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.327000][ T8264] usb 2-1: config 0 has no interface number 0 [ 253.334602][ T8264] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.349232][ T8264] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 253.362886][ T5953] usb 1-1: USB disconnect, device number 35 [ 253.381633][ T8264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.407315][ T8264] usb 2-1: config 0 descriptor?? [ 253.416866][ T8264] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 253.618652][ T5953] usb 2-1: USB disconnect, device number 47 [ 253.912880][ T9269] fuse: Unknown parameter '0x0000000000000003' [ 254.010454][ T9273] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1180'. [ 254.020481][ T9274] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1180'. [ 254.236704][ T9284] syzkaller1: entered promiscuous mode [ 254.242496][ T9284] syzkaller1: entered allmulticast mode [ 254.300732][ T9285] FAULT_INJECTION: forcing a failure. [ 254.300732][ T9285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.350404][ T9285] CPU: 1 UID: 0 PID: 9285 Comm: syz.1.1185 Not tainted syzkaller #0 PREEMPT(full) [ 254.350438][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 254.350451][ T9285] Call Trace: [ 254.350460][ T9285] [ 254.350469][ T9285] dump_stack_lvl+0x189/0x250 [ 254.350497][ T9285] ? __pfx____ratelimit+0x10/0x10 [ 254.350527][ T9285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.350548][ T9285] ? __pfx__printk+0x10/0x10 [ 254.350582][ T9285] ? __might_fault+0xb0/0x130 [ 254.350621][ T9285] should_fail_ex+0x414/0x560 [ 254.350653][ T9285] _copy_from_user+0x2d/0xb0 [ 254.350688][ T9285] kstrtouint_from_user+0xc4/0x170 [ 254.350718][ T9285] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 254.350762][ T9285] proc_fail_nth_write+0x88/0x200 [ 254.350796][ T9285] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 254.350833][ T9285] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 254.350865][ T9285] vfs_write+0x27e/0xb30 [ 254.350904][ T9285] ? __pfx_vfs_write+0x10/0x10 [ 254.350936][ T9285] ? __fget_files+0x2a/0x420 [ 254.350965][ T9285] ? __fget_files+0x3a0/0x420 [ 254.350988][ T9285] ? __fget_files+0x2a/0x420 [ 254.351021][ T9285] ksys_write+0x145/0x250 [ 254.351062][ T9285] ? __pfx_ksys_write+0x10/0x10 [ 254.351097][ T9285] ? do_syscall_64+0xbe/0xf80 [ 254.351133][ T9285] do_syscall_64+0xfa/0xf80 [ 254.351164][ T9285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.351186][ T9285] ? clear_bhb_loop+0x60/0xb0 [ 254.351213][ T9285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.351234][ T9285] RIP: 0033:0x7fb19bb8e1ff [ 254.351252][ T9285] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 254.351271][ T9285] RSP: 002b:00007fb19c9f1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 254.351294][ T9285] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb19bb8e1ff [ 254.351308][ T9285] RDX: 0000000000000001 RSI: 00007fb19c9f10a0 RDI: 0000000000000006 [ 254.351321][ T9285] RBP: 00007fb19c9f1090 R08: 0000000000000000 R09: 0000000000000000 [ 254.351335][ T9285] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 254.351348][ T9285] R13: 00007fb19bde6038 R14: 00007fb19bde5fa0 R15: 00007ffe73a6b818 [ 254.351384][ T9285] [ 254.601361][ T9292] fuse: Unknown parameter 'fd0x0000000000000003' [ 254.654965][ T9294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1188'. [ 254.719169][ T5921] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 254.727138][ T30] audit: type=1326 audit(1764469635.316:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.1.1189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb19bb8f749 code=0x0 [ 254.902873][ T5921] usb 4-1: config 0 has an invalid interface number: 142 but max is 0 [ 254.912710][ T5921] usb 4-1: config 0 has no interface number 0 [ 254.921372][ T5921] usb 4-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=62.09 [ 254.932106][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.953105][ T5921] usb 4-1: config 0 descriptor?? [ 255.177063][ T9290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.201447][ T9290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.230438][ T5921] usb 4-1: string descriptor 0 read error: -71 [ 255.262012][ T5921] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.142/input/input19 [ 255.271194][ T9303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.284841][ T5183] bcm5974 4-1:0.142: could not read from device [ 255.290702][ T9303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.307176][ T5183] bcm5974 4-1:0.142: could not read from device [ 255.320188][ T5921] usb 4-1: USB disconnect, device number 35 [ 255.337394][ T7142] bcm5974 4-1:0.142: could not read from device [ 255.375316][ T7142] udevd[7142]: Error opening device "/dev/input/event4": No such device [ 255.385402][ T7142] udevd[7142]: Unable to EVIOCGABS device "/dev/input/event4" [ 255.393667][ T7142] udevd[7142]: Unable to EVIOCGABS device "/dev/input/event4" [ 255.402396][ T7142] udevd[7142]: Unable to EVIOCGABS device "/dev/input/event4" [ 255.411849][ T7142] udevd[7142]: Unable to EVIOCGABS device "/dev/input/event4" [ 255.489196][ T43] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 255.586069][ T9306] FAULT_INJECTION: forcing a failure. [ 255.586069][ T9306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.602029][ T9306] CPU: 0 UID: 0 PID: 9306 Comm: syz.1.1192 Not tainted syzkaller #0 PREEMPT(full) [ 255.602060][ T9306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 255.602071][ T9306] Call Trace: [ 255.602077][ T9306] [ 255.602084][ T9306] dump_stack_lvl+0x189/0x250 [ 255.602103][ T9306] ? __pfx____ratelimit+0x10/0x10 [ 255.602124][ T9306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.602139][ T9306] ? __pfx__printk+0x10/0x10 [ 255.602171][ T9306] should_fail_ex+0x414/0x560 [ 255.602192][ T9306] _copy_to_user+0x31/0xb0 [ 255.602217][ T9306] simple_read_from_buffer+0xe1/0x170 [ 255.602236][ T9306] proc_fail_nth_read+0x1b3/0x220 [ 255.602262][ T9306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.602286][ T9306] ? rw_verify_area+0x2a6/0x4d0 [ 255.602307][ T9306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.602330][ T9306] vfs_read+0x200/0xa30 [ 255.602350][ T9306] ? fdget_pos+0x247/0x320 [ 255.602368][ T9306] ? __pfx___mutex_lock+0x10/0x10 [ 255.602392][ T9306] ? __pfx_vfs_read+0x10/0x10 [ 255.602413][ T9306] ? __fget_files+0x2a/0x420 [ 255.602432][ T9306] ? __fget_files+0x3a0/0x420 [ 255.602446][ T9306] ? __fget_files+0x2a/0x420 [ 255.602467][ T9306] ksys_read+0x145/0x250 [ 255.602489][ T9306] ? __pfx_ksys_read+0x10/0x10 [ 255.602512][ T9306] ? do_syscall_64+0xbe/0xf80 [ 255.602537][ T9306] do_syscall_64+0xfa/0xf80 [ 255.602560][ T9306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.602575][ T9306] ? clear_bhb_loop+0x60/0xb0 [ 255.602592][ T9306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.602607][ T9306] RIP: 0033:0x7fb19bb8e15c [ 255.602622][ T9306] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 255.602634][ T9306] RSP: 002b:00007fb19c9f1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 255.602651][ T9306] RAX: ffffffffffffffda RBX: 00007fb19bde5fa0 RCX: 00007fb19bb8e15c [ 255.602662][ T9306] RDX: 000000000000000f RSI: 00007fb19c9f10a0 RDI: 0000000000000004 [ 255.602671][ T9306] RBP: 00007fb19c9f1090 R08: 0000000000000000 R09: 0000000000000000 [ 255.602681][ T9306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.602690][ T9306] R13: 00007fb19bde6038 R14: 00007fb19bde5fa0 R15: 00007ffe73a6b818 [ 255.602722][ T9306] [ 255.849255][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 255.856519][ T43] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 255.865356][ T43] usb 1-1: config 0 has no interface number 0 [ 255.874501][ T43] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 255.884350][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.895122][ T43] usb 1-1: Product: syz [ 255.907337][ T43] usb 1-1: Manufacturer: syz [ 255.912253][ T43] usb 1-1: SerialNumber: syz [ 255.920221][ T43] usb 1-1: config 0 descriptor?? [ 255.930389][ T43] smsc95xx v2.0.0 [ 256.196917][ T9319] syzkaller1: entered promiscuous mode [ 256.205515][ T9319] syzkaller1: entered allmulticast mode [ 256.259182][ T891] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 256.350858][ T9326] input: syz1 as /devices/virtual/input/input20 [ 256.377323][ T9324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.398746][ T9324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.409214][ T891] usb 4-1: Using ep0 maxpacket: 8 [ 256.415978][ T9326] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1200'. [ 256.429834][ T9326] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1200'. [ 256.440008][ T891] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 256.440305][ T9326] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1200'. [ 256.448458][ T891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.457436][ T9326] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1200'. [ 256.469144][ T891] usb 4-1: config 0 has no interface number 0 [ 256.482582][ T9326] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1200'. [ 256.483275][ T891] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.498321][ T9326] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1200'. [ 256.505840][ T891] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 256.524909][ T9326] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1200'. [ 256.525719][ T891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.534573][ T9326] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1200'. [ 256.552019][ T9326] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1200'. [ 256.555210][ T891] usb 4-1: config 0 descriptor?? [ 256.561719][ T9326] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1200'. [ 256.582675][ T891] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 256.788361][ T5953] usb 4-1: USB disconnect, device number 36 [ 256.955582][ T43] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 256.966799][ T43] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 256.977887][ T43] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 256.989506][ T43] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 257.001904][ T43] usb 1-1: USB disconnect, device number 36 [ 257.330397][ T9334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.351225][ T9334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.799143][ T43] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 257.959116][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 257.974389][ T43] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 257.993595][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.023376][ T43] usb 1-1: Product: syz [ 258.033586][ T43] usb 1-1: Manufacturer: syz [ 258.046241][ T43] usb 1-1: SerialNumber: syz [ 258.066547][ T43] usb 1-1: config 0 descriptor?? [ 258.376888][ T9351] syzkaller1: entered promiscuous mode [ 258.383127][ T9351] syzkaller1: entered allmulticast mode [ 258.558260][ T43] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 258.575643][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 258.586505][ T43] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 258.599715][ T43] usb 1-1: media controller created [ 258.624007][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 259.182300][ T43] zl10353_read_register: readreg error (reg=127, ret==0) [ 259.203699][ T43] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 259.222348][ T43] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 259.236850][ T43] usb 1-1: USB disconnect, device number 37 [ 259.318511][ T43] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 259.616639][ T9359] netlink: 'syz.3.1211': attribute type 10 has an invalid length. [ 259.684206][ T9359] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 260.029210][ T8264] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 260.123884][ T9328] ------------[ cut here ]------------ [ 260.131292][ T9328] refcount_t: saturated; leaking memory. [ 260.137619][ T9328] WARNING: lib/refcount.c:19 at 0x0, CPU#1: syz.1.1201/9328 [ 260.145983][ T9328] Modules linked in: [ 260.150442][ T9328] CPU: 1 UID: 0 PID: 9328 Comm: syz.1.1201 Not tainted syzkaller #0 PREEMPT(full) [ 260.159851][ T9328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 260.169995][ T9328] RIP: 0010:refcount_warn_saturate+0xc5/0x110 [ 260.176378][ T9328] Code: d1 2b 36 0b 67 48 0f b9 3a eb 37 e8 b5 f5 2a fd 48 8d 3d ce 2b 36 0b 67 48 0f b9 3a eb 24 e8 a2 f5 2a fd 48 8d 3d cb 2b 36 0b <67> 48 0f b9 3a eb 11 e8 8f f5 2a fd 48 8d 3d c8 2b 36 0b 67 48 0f [ 260.196267][ T9328] RSP: 0018:ffffc90003547528 EFLAGS: 00010293 [ 260.199355][ T8264] usb 1-1: Using ep0 maxpacket: 8 [ 260.202471][ T9328] RAX: ffffffff8496fd8e RBX: 0000000000000000 RCX: ffff88802f6f8000 [ 260.215626][ T8264] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 260.216796][ T9328] RDX: 0000000000000000 RSI: ffffffff8ea9bf40 RDI: ffffffff8fcd2960 [ 260.232830][ T9328] RBP: ffffc90003547648 R08: ffff88802f6f8000 R09: 0000000000000005 [ 260.240944][ T9328] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88807546c580 [ 260.240984][ T8264] usb 1-1: config 0 has no interface number 0 [ 260.249184][ T9328] R13: ffff88807546c500 R14: ffff88807546c580 R15: 0000000000000000 [ 260.249210][ T9328] FS: 0000000000000000(0000) GS:ffff888125b03000(0000) knlGS:0000000000000000 [ 260.249230][ T9328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.249247][ T9328] CR2: 000000110c40f268 CR3: 000000000e13a000 CR4: 00000000003526f0 [ 260.259424][ T8264] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 260.263669][ T9328] Call Trace: [ 260.273518][ T8264] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 260.279482][ T9328] [ 260.288297][ T8264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.300794][ T9328] __vma_enter_locked+0x62e/0x6a0 [ 260.300853][ T9328] ? __pfx___vma_enter_locked+0x10/0x10 [ 260.300893][ T9328] __vma_start_write+0x23/0x140 [ 260.300924][ T9328] free_pgtables+0x72d/0x9d0 [ 260.300966][ T9328] ? __pfx_free_pgtables+0x10/0x10 [ 260.301006][ T9328] ? __pfx_down_write+0x10/0x10 [ 260.301030][ T9328] ? __mas_set_range+0x12f/0x3c0 [ 260.301061][ T9328] exit_mmap+0x431/0xb10 [ 260.301085][ T9328] ? uprobe_clear_state+0x20f/0x290 [ 260.301115][ T9328] ? __pfx_exit_mmap+0x10/0x10 [ 260.301137][ T9328] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 260.301178][ T9328] ? __pfx_exit_aio+0x10/0x10 [ 260.301209][ T9328] ? uprobe_clear_state+0x27c/0x290 [ 260.301244][ T9328] __mmput+0x118/0x430 [ 260.301289][ T9328] exit_mm+0x1da/0x2c0 [ 260.301314][ T9328] ? __pfx_exit_mm+0x10/0x10 [ 260.301348][ T9328] do_exit+0x658/0x2310 [ 260.301377][ T9328] ? do_raw_spin_lock+0x121/0x290 [ 260.301400][ T9328] ? __pfx_do_exit+0x10/0x10 [ 260.301449][ T9328] do_group_exit+0x21c/0x2d0 [ 260.301473][ T9328] ? lockdep_hardirqs_on+0x98/0x140 [ 260.301509][ T9328] get_signal+0x1285/0x1340 [ 260.301559][ T9328] arch_do_signal_or_restart+0x9a/0x7a0 [ 260.301587][ T9328] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 260.301624][ T9328] ? exit_to_user_mode_loop+0x55/0x4f0 [ 260.301656][ T9328] exit_to_user_mode_loop+0x87/0x4f0 [ 260.301683][ T9328] ? rcu_is_watching+0x15/0xb0 [ 260.301705][ T9328] do_syscall_64+0x2e3/0xf80 [ 260.301734][ T9328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.301753][ T9328] ? clear_bhb_loop+0x60/0xb0 [ 260.301776][ T9328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.301794][ T9328] RIP: 0033:0x7fb19bb8f749 [ 260.301813][ T9328] Code: Unable to access opcode bytes at 0x7fb19bb8f71f. [ 260.301823][ T9328] RSP: 002b:00007fb19c9f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.301845][ T9328] RAX: fffffffffffffffc RBX: 00007fb19bde5fa0 RCX: 00007fb19bb8f749 [ 260.301859][ T9328] RDX: 0000200000000100 RSI: 00000000c028aa05 RDI: 0000000000000004 [ 260.301872][ T9328] RBP: 00007fb19bc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 260.301884][ T9328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.301896][ T9328] R13: 00007fb19bde6038 R14: 00007fb19bde5fa0 R15: 00007ffe73a6b818 [ 260.301925][ T9328] [ 260.301936][ T9328] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 260.301953][ T9328] CPU: 1 UID: 0 PID: 9328 Comm: syz.1.1201 Not tainted syzkaller #0 PREEMPT(full) [ 260.301976][ T9328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 260.301988][ T9328] Call Trace: [ 260.301996][ T9328] [ 260.302004][ T9328] dump_stack_lvl+0x99/0x250 [ 260.302022][ T9328] ? __asan_memcpy+0x40/0x70 [ 260.302046][ T9328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.302064][ T9328] ? __pfx__printk+0x10/0x10 [ 260.302100][ T9328] vpanic+0x237/0x6d0 [ 260.302123][ T9328] ? __pfx_vpanic+0x10/0x10 [ 260.302143][ T9328] ? is_bpf_text_address+0x292/0x2b0 [ 260.302168][ T9328] ? is_bpf_text_address+0x26/0x2b0 [ 260.302198][ T9328] panic+0xb9/0xc0 [ 260.302220][ T9328] ? __pfx_panic+0x10/0x10 [ 260.302273][ T9328] __warn+0x317/0x4b0 [ 260.302301][ T9328] __report_bug+0x288/0x500 [ 260.302335][ T9328] ? __pfx___report_bug+0x10/0x10 [ 260.302358][ T9328] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 260.302396][ T9328] ? __lock_acquire+0x6b6/0x2cf0 [ 260.302439][ T9328] report_bug_entry+0x16a/0x220 [ 260.302464][ T9328] ? refcount_warn_saturate+0xc5/0x110 [ 260.302492][ T9328] ? refcount_warn_saturate+0xca/0x110 [ 260.302519][ T9328] handle_bug+0xca/0x200 [ 260.302537][ T9328] exc_invalid_op+0x1a/0x50 [ 260.302555][ T9328] asm_exc_invalid_op+0x1a/0x20 [ 260.302573][ T9328] RIP: 0010:refcount_warn_saturate+0xc5/0x110 [ 260.302604][ T9328] Code: d1 2b 36 0b 67 48 0f b9 3a eb 37 e8 b5 f5 2a fd 48 8d 3d ce 2b 36 0b 67 48 0f b9 3a eb 24 e8 a2 f5 2a fd 48 8d 3d cb 2b 36 0b <67> 48 0f b9 3a eb 11 e8 8f f5 2a fd 48 8d 3d c8 2b 36 0b 67 48 0f [ 260.302623][ T9328] RSP: 0018:ffffc90003547528 EFLAGS: 00010293 [ 260.302644][ T9328] RAX: ffffffff8496fd8e RBX: 0000000000000000 RCX: ffff88802f6f8000 [ 260.302661][ T9328] RDX: 0000000000000000 RSI: ffffffff8ea9bf40 RDI: ffffffff8fcd2960 [ 260.302684][ T9328] RBP: ffffc90003547648 R08: ffff88802f6f8000 R09: 0000000000000005 [ 260.302700][ T9328] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88807546c580 [ 260.302715][ T9328] R13: ffff88807546c500 R14: ffff88807546c580 R15: 0000000000000000 [ 260.302739][ T9328] ? refcount_warn_saturate+0xbe/0x110 [ 260.302777][ T9328] ? refcount_warn_saturate+0xbe/0x110 [ 260.302807][ T9328] __vma_enter_locked+0x62e/0x6a0 [ 260.302847][ T9328] ? __pfx___vma_enter_locked+0x10/0x10 [ 260.302885][ T9328] __vma_start_write+0x23/0x140 [ 260.302914][ T9328] free_pgtables+0x72d/0x9d0 [ 260.302957][ T9328] ? __pfx_free_pgtables+0x10/0x10 [ 260.302995][ T9328] ? __pfx_down_write+0x10/0x10 [ 260.303020][ T9328] ? __mas_set_range+0x12f/0x3c0 [ 260.303056][ T9328] exit_mmap+0x431/0xb10 [ 260.303084][ T9328] ? uprobe_clear_state+0x20f/0x290 [ 260.303120][ T9328] ? __pfx_exit_mmap+0x10/0x10 [ 260.303145][ T9328] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 260.303192][ T9328] ? __pfx_exit_aio+0x10/0x10 [ 260.303228][ T9328] ? uprobe_clear_state+0x27c/0x290 [ 260.303276][ T9328] __mmput+0x118/0x430 [ 260.303310][ T9328] exit_mm+0x1da/0x2c0 [ 260.303336][ T9328] ? __pfx_exit_mm+0x10/0x10 [ 260.303371][ T9328] do_exit+0x658/0x2310 [ 260.303402][ T9328] ? do_raw_spin_lock+0x121/0x290 [ 260.303430][ T9328] ? __pfx_do_exit+0x10/0x10 [ 260.303473][ T9328] do_group_exit+0x21c/0x2d0 [ 260.303499][ T9328] ? lockdep_hardirqs_on+0x98/0x140 [ 260.303533][ T9328] get_signal+0x1285/0x1340 [ 260.303585][ T9328] arch_do_signal_or_restart+0x9a/0x7a0 [ 260.303615][ T9328] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 260.303657][ T9328] ? exit_to_user_mode_loop+0x55/0x4f0 [ 260.303693][ T9328] exit_to_user_mode_loop+0x87/0x4f0 [ 260.303722][ T9328] ? rcu_is_watching+0x15/0xb0 [ 260.303748][ T9328] do_syscall_64+0x2e3/0xf80 [ 260.303781][ T9328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.303803][ T9328] ? clear_bhb_loop+0x60/0xb0 [ 260.303830][ T9328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.303852][ T9328] RIP: 0033:0x7fb19bb8f749 [ 260.303870][ T9328] Code: Unable to access opcode bytes at 0x7fb19bb8f71f. [ 260.303882][ T9328] RSP: 002b:00007fb19c9f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.303902][ T9328] RAX: fffffffffffffffc RBX: 00007fb19bde5fa0 RCX: 00007fb19bb8f749 [ 260.303918][ T9328] RDX: 0000200000000100 RSI: 00000000c028aa05 RDI: 0000000000000004 [ 260.303933][ T9328] RBP: 00007fb19bc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 260.303947][ T9328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.303961][ T9328] R13: 00007fb19bde6038 R14: 00007fb19bde5fa0 R15: 00007ffe73a6b818 [ 260.303996][ T9328] [ 260.304350][ T9328] Kernel Offset: disabled