last executing test programs: 8.464343333s ago: executing program 1 (id=1399): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0xa00, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 8.45253971s ago: executing program 1 (id=1400): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="98f3d994c9e58aecfeac519e8e9b9a8aba3b12a623195dc86ece0d297c5c37c8a45416cd4825490d47ddaab38f0affad4806285cde1feb1ff0f12290e78e26c0726feb0ae85cc5265a058da6b26153c24a46479c2c7a9d6e", 0x58}], 0x1}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2000000000c45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x400, 0x80, 0x3, 0x0, 0x1, 0x8d], 0x100000, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.307582901s ago: executing program 1 (id=1401): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 7.148362112s ago: executing program 2 (id=1408): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507df75aaf", 0x3a}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c6552", 0x43}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {&(0x7f0000000e00)="9bf1660e4e05ab224977738ee2e2515a9dbeb4fd58e67d16a0a9f34cfbd7cab4dd4a5f83facf29bf45c0ca1a0f5594f327f3f8fd9a1736fc299b380d937bc354c427563c36dd49e294d554604531e05d387de80c3d2e42b8d0140b8912c0d8d2da4b69d9e70a689fe44cd0da4e82d86d23b685a89a366fa3a6bfd52771630570ee1b5f7eb8caf61e4be800be9605c7cdf6c008bb2ebc10b721882ae06722aa473ebf99333a87c91d317f2475ade1105ab01917a45c9ce764efcf811e43447061f9ae9d43", 0xc4}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)="fc5a4366e1", 0x5}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded03bf8a0c2da5168461dafc53f865fab513453ed3d95bd82ab0bb24a32deb3a229be42837b0c57e0c60c042d83c7bf866828342f3e6e1bdef6", 0xe3}, {0x0}], 0xa, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce", 0x83}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, &(0x7f0000000500)=0x1, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.964421784s ago: executing program 2 (id=1410): semtimedop(0x0, &(0x7f00000002c0)=[{0x0, 0xffff}], 0x1, 0x0) semctl$SETVAL(0x0, 0x2000000, 0x10, 0x0) 6.964170277s ago: executing program 2 (id=1411): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x47, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03") 5.287788368s ago: executing program 3 (id=1418): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @pix_mp={0x0, 0x2, 0x30314142, 0x8, 0x14, [{0x3, 0xc}, {0x3, 0x32}, {0x3, 0x1}, {0xab6, 0xfbe}, {0x1, 0x10101}, {0x9, 0x5}, {0x8, 0x7}, {0x8, 0x48d9}], 0x8, 0x8, 0x2, 0x1, 0x7}}) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.227263652s ago: executing program 1 (id=1420): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="98f3d994c9e58aecfeac519e8e9b9a8aba3b12a623195dc86ece0d297c5c37c8a45416cd4825490d47ddaab38f0affad4806285cde1feb1ff0f12290e78e26c0726feb0ae85cc5265a058da6b26153c24a46479c2c7a9d6e8ab201", 0x5b}], 0x1}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2000000000c45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x400, 0x80, 0x3, 0x0, 0x1, 0x8d], 0x100000, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.1403867s ago: executing program 3 (id=1421): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r0 = syz_clone(0x28000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x50, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400102, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.13722518s ago: executing program 2 (id=1422): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r2 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac3(r2, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) syz_usb_control_io$uac3(r2, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4004"], 0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 5.00444803s ago: executing program 3 (id=1424): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008840}, 0x10) 5.003397575s ago: executing program 1 (id=1425): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x23) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x42382) syz_usb_disconnect(r1) 4.905952347s ago: executing program 3 (id=1426): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f00000004c0)=@sr0, &(0x7f0000000280)='./bus\x00', &(0x7f00000003c0)='9p\x00', 0x2208440, &(0x7f0000000300)='trans=rdma,') r2 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000bc0)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x3, 0x9, 0xe4c, 0x2, 0x3, 0x3865, 0x8, 0x9, 0x1, 0x5, 0x4, 0x81}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000bc0)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x3, 0x9, 0xe4c, 0x2, 0x3, 0x3865, 0x8, 0x9, 0x1, 0x5, 0x4, 0x81}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYRES16=r3], 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0) sendmmsg$unix(r0, &(0x7f0000000700)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24000011}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}], 0x2, 0x404) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f0000000200)={r9}, &(0x7f00000001c0)=0x8) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f0000000200)={r9}, &(0x7f00000001c0)=0x8) connect$unix(r0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 3.093859065s ago: executing program 2 (id=1427): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f00000007c0)={0x0, 0x13, 0xb, "b17cc04c68248d7e9cebb6"}, 0x0, 0x0}) 2.864971554s ago: executing program 1 (id=1428): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.892046719s ago: executing program 3 (id=1431): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x44, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459d") 1.120060227s ago: executing program 0 (id=1435): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x7, 0x4) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r0, 0x787) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x401, 0x3, 0x3, 0x3, 0x6, 0x2, 0x5, {0x0, @in6={{0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}, 0x1, 0x101, 0x8000, 0x9, 0xfffffe00}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000380)={r3, 0xca, "db495f0af56bd16f8201bd70c0d055e030291eb6bb6530772ac6668c349499cfe973a5599421fea544727d82c0ea8ba64f92758f9b7c4cf8333ad75079451911f7bd3460f6a764eabc57b0d88c0df03e72d4f7d72b3e8794a11417a77b40f3b802ca328f7dce6f4e56a2e4d31543f202ca3eecd776bfc61fda07f4b381fd1a1de1086ba4da5793f24d10baff1593a9a46b6c384b733534ab4b0fe98168de1a44b5b01561922b0fe58b9951ce10f2f4f6d1285ac647695ffcb1c7a489ade741452d64c37449ffcfda3fe7"}, &(0x7f0000000200)=0xd2) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001400010125bd7000fdd3df25011f08104e24"], 0x4c}, 0x1, 0x0, 0x0, 0x404c0dc}, 0x20008000) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r4) socket$unix(0x1, 0x5, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x7, 0x4) (async) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) (async) listen(r0, 0x787) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x401, 0x3, 0x3, 0x3, 0x6, 0x2, 0x5, {0x0, @in6={{0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}, 0x1, 0x101, 0x8000, 0x9, 0xfffffe00}}, &(0x7f0000000180)=0xb0) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000380)={r3, 0xca, "db495f0af56bd16f8201bd70c0d055e030291eb6bb6530772ac6668c349499cfe973a5599421fea544727d82c0ea8ba64f92758f9b7c4cf8333ad75079451911f7bd3460f6a764eabc57b0d88c0df03e72d4f7d72b3e8794a11417a77b40f3b802ca328f7dce6f4e56a2e4d31543f202ca3eecd776bfc61fda07f4b381fd1a1de1086ba4da5793f24d10baff1593a9a46b6c384b733534ab4b0fe98168de1a44b5b01561922b0fe58b9951ce10f2f4f6d1285ac647695ffcb1c7a489ade741452d64c37449ffcfda3fe7"}, &(0x7f0000000200)=0xd2) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001400010125bd7000fdd3df25011f08104e24"], 0x4c}, 0x1, 0x0, 0x0, 0x404c0dc}, 0x20008000) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r4) (async) 1.115520773s ago: executing program 0 (id=1436): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (fail_nth: 5) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) 1.081548995s ago: executing program 0 (id=1437): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507df75aaf", 0x3a}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc5969269606", 0x7f}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c6552", 0x43}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {&(0x7f0000000e00)="9bf1660e4e05ab224977738ee2e2515a9dbeb4fd58e67d16a0a9f34cfbd7cab4dd4a5f83facf29bf45c0ca1a0f5594f327f3f8fd9a1736fc299b380d937bc354c427563c36dd49e294d554604531e05d387de80c3d2e42b8d0140b8912c0d8d2da4b69d9e70a689fe44cd0da4e82d86d23b685a89a366fa3a6bfd52771630570ee1b5f7eb8caf61e4be800be9605c7cdf6c008bb2ebc10b721882ae06722aa473ebf99333a87c91d317f2475ade1105ab01917a45c9ce764efcf811e43447061f9ae9d43", 0xc4}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f00000011c0)="fc5a4366e1", 0x5}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded03bf8a0c2da5168461dafc53f865fab513453ed3d95bd82ab0bb24a32deb3a229be42837b0c57e0c60c042d83c7bf866828342f3e6e1bdef6", 0xe3}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702a9bd45a1d7bec2b2ccf08c24fec06bd18667119d193444ed6c60c641f54a3826524167885f2542b1bef1198ab8212a20a7f8382198cb2cf2cdd75c076a609bd5fea069e6f61c1eef", 0xde}], 0x9, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x200000000000000) 992.071822ms ago: executing program 0 (id=1438): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x589c9bd8c1bcd27f}, 0x4010) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000019600)=@newtaction={0x14, 0x30, 0x800, 0x70bd2b, 0xbc}, 0x14}}, 0x40) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xf0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x60, 0x0) 989.146108ms ago: executing program 0 (id=1439): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xa57}) syz_usb_connect$uac3(0x0, 0xa7, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000406307f91f400001020301090295000301ffc010080b0002010130070904000000010130000a2401103100120d0000132403df01040604020600000005007f00800014240202"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x50, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x78, 0xb0, 0x9, "", [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x2, 0x8, 0x8}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x2, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xc6, 0x6, 0x3}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x9, 0x3, 0x7f, 0x8, 0x7}, 0x104, &(0x7f0000000180)={0x5, 0xf, 0x104, 0x5, [@generic={0x7, 0x10, 0x2, "c295a9ce"}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x1, 0xf, 0x9, [0xff0000, 0xff00f0, 0xf, 0xff3fc0, 0xff001e]}, @generic={0xce, 0x10, 0xa, "91251be5fb70fe544f9f7048c77f3faacd1d57e556150c1f2c5730bf53a9141319bb46c852269f0ea960a6600fbdf1990319009ab497f02340aacd3497840f852a0d9994baade2f182253e4ff2432f2202125ab179ae476ea4e6234b98a9ce923de358ee245311cc5372508493965458ab1b3ddf214a969f65454477d354d0594c6bb885ae4df75e4882ed61f2bf141249eb17f586789b4b0d0f465c4bfaec16ef0a3f4cb1e6e314d9793c2473265c86a190030becea7567bbc4bf99e792b11c767a6783a2aee794739caa"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x4, 0x8c}]}, 0x9, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x443}}, {0x27, &(0x7f00000002c0)=@string={0x27, 0x3, "f81eeb8301d05219074f3323124a2732180943f1ea2f0c798662a460c5c26519705ffe8e8e"}}, {0x1a, &(0x7f0000000300)=@string={0x1a, 0x3, "ae75d9786e412041b84121644bb1594116db9046098ca076"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "8852ad28b1d0b21f67d7dab21a36efc10f3082fe044c0a33aa0b1eabb2d17dea729aa10eaac35b74963baa42edd0c2040e91f11271c89e9e84"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x40b}}, {0x87, &(0x7f0000000440)=@string={0x87, 0x3, "d98eaee653713b1156463b8dc70866db8adf34274349e7838bd7005c372990aa73e2d2aa99148c0fc5360a53b8c3f5d21dee52b5f4f89603536a20ff41f870c8811a60ff8a576d86d95ed68ce54b62387bc1d435a6caea8dc55950cedd9cb14562c4cf0a4a41cd982227c19667795229b386853bc29550e7f5697c76134cfdee345e5c0bc7"}}, {0x91, &(0x7f0000000500)=@string={0x91, 0x3, "f9fcb4c57051675e1cbdff7c94b5b02dd9f31eea819d60533b2a1a1f63eab331ef17ffe31744bc15ecaae6e16208268d4b48f433b209fc1e785371741390003d0ad18456c14a62e78674d923dd2f4e8f068fa906201d5bbb62214d549078cb7c92c04f0cfd1a34cee59a2684e15ae54de1a635d36397928186475d633dde44eebafd959266b4660e2533f6d89c49aa"}}]}) 437.380065ms ago: executing program 0 (id=1440): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0x14, 0x4, "b4865713"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB="00036c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x118) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b 8:'], 0x9) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x2) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000680)={0x40, 0x7, 0x4, "292cc4ed"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 53.008877ms ago: executing program 2 (id=1441): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="d8000000150081044e81f782db44b9040a87080211000000040000a118000200e000000800000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab44dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d1688683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bbfe5a09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000884) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="d8000000150081044e81f782db44b9040a87080211000000040000a118000200e000000800000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab44dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d1688683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bbfe5a09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000884) r1 = syz_open_dev$swradio(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3}) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"6368eaf9940a53d14b6e1dd3114dca17", 0x0, 0x0, {0x3ac, 0x5}, {0x98, 0x2}, 0x380000000000000, [0x7, 0x7, 0x9, 0xffffffff80000000, 0xfff, 0x3, 0x1, 0x6, 0x3, 0x30000000, 0x80000001, 0x0, 0x5, 0x1, 0x8000000000000001]}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000440)={"80912e09fdb0809cc4802d6689a01e6c", r3, r4, {0x5, 0x3}, {0x485b, 0x7}, 0x2, [0x400, 0x3, 0x0, 0xa5, 0x8, 0x101, 0x6, 0x5, 0xb, 0x2, 0x5, 0x8, 0x5, 0x7, 0x40, 0x58e]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x80) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r7, 0xc2604110, &(0x7f0000000680)={0x0, [[0x5, 0x0, 0xd, 0x2000001, 0xfffffff5, 0x0, 0x0, 0x9], [0x4, 0x1, 0x0, 0x2], [0x100094, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0xff, 0xb]], '\x00', [{0x0, 0x6}, {0x0, 0xfffffffd}, {0x4}, {}, {}, {0x8, 0x40000000}, {}, {0x1}, {0x0, 0xfffffffc}, {0x8}, {0x2, 0x9}, {0x0, 0x3}], '\x00', 0x5}) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r7, 0xc2604110, &(0x7f0000000680)={0x0, [[0x5, 0x0, 0xd, 0x2000001, 0xfffffff5, 0x0, 0x0, 0x9], [0x4, 0x1, 0x0, 0x2], [0x100094, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0xff, 0xb]], '\x00', [{0x0, 0x6}, {0x0, 0xfffffffd}, {0x4}, {}, {}, {0x8, 0x40000000}, {}, {0x1}, {0x0, 0xfffffffc}, {0x8}, {0x2, 0x9}, {0x0, 0x3}], '\x00', 0x5}) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x800000, 0x3, 0x0}) (async) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x800000, 0x3, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x7, &(0x7f00000001c0), 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x5}) syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32b683adf11f83220156c564000400000000000089c5"], 0x0) 0s ago: executing program 3 (id=1442): r0 = syz_io_uring_setup(0x70b, &(0x7f0000000100)={0x0, 0xf5aa, 0x800, 0x0, 0x25}, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') close(0x3) lseek(r1, 0x4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, r2, 0x78451000) r3 = userfaultfd(0x80001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f00000004c0), 0x10) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x2, 0x6040000}) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6", @ANYRES32=r3], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x80100) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="61f245cafab21e55697298a0ae35e18d14dd4b6592fa14c0489b858840d12654fb8ddbd1563e581b6a29f56e6127a48c40b95af04e135572e6084e5706e88f02b4440c32e93c31603beb0bc2616de2e7f2a3936b7862df4bc4178710a61eb2e0e7b4ac16cde4477d10653b0d6afde80c950848626b7296ec902f7dc875cbb34a73638a2a48eec75667340826ad84022664c0039de213dc5054b5ecc2ea3c385fe8cdeb814e4eb6262fb39fb637c13a6c1b401f1eafc7a09d49980e60e5caca3520ffeeaf9b20a67d680c7ade66ff7398725ab5bfeed67b48888284c03f6c5331b33f5bd12b10f2c9f8a82549939fbf23caba0dfe1cd962f5e97d9a7dbfed7b25dfcd025cafb3c3b34bde13e2cf3684db786b56929bd381fa5e178b268005224cf7d79103524ec32d22509292501062fd2a907f9eb1a564bcb58da00933f9fb49af10ce55617b9edfad6ca5f9060623e0d6fb73aa68c9b5190dc671968ecbf752962f6e3f0ef6b3ff918603cd511ec00dc67ba004c6469380f5c5390226ccd5ebb934a63c103e4fb6b69c42a6e8e8aa434fd0c787de018fc1e25189ba81be91c80d5e3c9d021baa3cb3abaf755b79e41a8604392c68a018e1750ab6d54608969f3c9273b1a08c3b8d7d9b6f03f4bd3a6c64790617d72a891556cba509f21f992c59db9f78853421fb9ec4ddb2fe782f5da26c038626f26d1e4fda289cea520d44630b041e18ea2ecf56852c25f1ddf3bbaed2c17ba898575431134ee7c27fbf8548dfd63364b8beae267085bfa964786745134ae2b64c4a263f885c198952e795c17e04f0d9e4360de13ae3f2481e6d234bb5c54e03d5e0cb27e5b610ea2c0d85d21bc66e5c861f1e8ba66620cb6f590b2fe294013923b7fc9b170f449e7873bb9aa14cf7421e61feaaeb349a2acb5816a51325f45065b035be05f4498e77eb5e875c03b0c41061caadee14eb2764a5846ba0cab400e1676f533abc56930e5acccf331b0611af1e2947b11820d32e142ca885f4df233678ccbcfa63e5cfa708adcfefa34f059f81f14a5ef2538ef446feec5c78828c618576b18b86c7ee37d8182a8dee51d5dd199cd2ee915f5e25be2885822ab3e5b988786764e611f0bb1214bb9d825c9c4e15c061acf2b4e7361831e0fe9fc409e0004631ab31c42bfd962ba7a0e475f3a91643ce65d2efb94976b14fcf7d21c93bd9208b7bb7a3dfc4444cf14d127401c6892ba93ac786476e0885f028ae6141de817d3517cce625eebb50e2c1e5e64ffc50da4d2eaa605501769e4c1a40fd9da7da178b4bf468942514082773698770ef455ea263fefa4fb258c15afb076c7979296f901e84a2b71eb63cb3d9dfd9abb3e1f8f657070d75541c20476f37e14ca43014ef80b33eeca91ace604ec2051d73ec2f69ffa14bcd79ea577e9676825094606343d31874111fbc535d28fa7a9e379d38226001e241d3515e1d63ba56f1eebe8ea788c4d768f4c4fbbaf834ca3f21460613d768dacf2a27778dc2b4598726646b8c06b6e4d38162720c807724f92bdc9f0b0f5d303d5a5a3998aa270a6760c7651df601bc42c78dd9bd53ee960cf80a30a6b7a1a880d37ff31fb2c9bb0c591bba3ef8228a0506f45065c65b131aff8da8eebbd6754b9e5601632da39c329a229062a94833b23c97371d510a19e2d3b5bc516e3d3c8601495fbeecc16c5c50ba6c435974e8275d372add206964f29997b515f63f50121029e61f47db19fc63b07d0f059ca686e80fb6c294667affaea2daff241bdd0945bfbfe28643136bcea9aa345d482fc3b9d872b482463b92b25f0e5157be3fd8b7a328f327ddfa5c05a6f172deb795f19b9f2091386acb060f170540bfa898057c206d81afd85701b8ee030076bc3782d7d8f6673111baf80818aeca7e5944d91a7f4fce840303867ea18d2b92d74c67157284c787fcfde780fc9a53ae5560e101ef125ce707d34f957072958dc9916492e73a90a10f660a221a7c6730ac0ac01e37d54f058b64f41a46be5320800172e2c9fda248a2964548ddf1f53599027c29ede6079a72d454bcf4403808111d00cb4e3aadd060c333e57c64a70bdfbb572fe228538c82ab427416cdcce1dd643ece610ca7042e2a164d3dfdabb966f1a8fc875cd002920321dac62e25f38cb0031e4de6324b0db402b12c4b0e335898e21b7b326ebbeec0b4bc21ef2dd6f9755e8ff35602d30189ae3efe9c487aec2ce90dbbe790c919b77036240786f3fe9441204b81bc43b5f5cbede75702a1c28ab16d2f578dddb3624f596b5b82e2f26b63966ddc78c8ffa13a23b6c4ee2c741820b9738fe881ddeeeba60fa4221885be55a6fdaa0b90b246f5959b844afd6898bc8c0a75fc45fb968d6e8ea6831d15808b23904355c62a8590d1ba51cdb051bd5ccc1b62a8ca520af60daefae7f7f1dcc90a02ab3af5307fcd5fed9af7d9b192f080be6ded768c6d1d4ea0ba5cc996e5c24b8048eeaea09cabcf1c0488a357280395cfc5394ba160c439dda0a7f4ed182d3f33a4addb1c74d7d797179c633013b24c7e0cd2f4b86904bd1d70a4821c7ff619455953d820e1594c7136e66c260c868776129eddedfdec5ebb0da2e5207215f9c47d7bf74319661311232ca1d108da00df2d07ff5720c474981cb54bd185448ae0e3d9d3194614ae67bdb24122cb2207be610456c35ba6e11429a3a6c266b4bfd905c7534de4fe03ac5063cbb08b3a75137e59e3e8b3fee3989bfb0735ea6f948371a60efff49ea51d5825dd61ef9a0b735fc859c9b003325fe6e3a5fdb8d2cf51e2e9a4c73a8af3a702a83d57d3ddb81d5e9342c97f143ed28228c16a1625d8ba4f0ffddc968f37cb07ea09d35703f920cf4e7a1394b7f18e6f2508a4c90acc92710ddce1e7a9a22ad2d540f669411b263b3e20b07131cc17cf20ae8030de00862bdc33b7eb4f8122c47c833e73aed84199e5d584625570193e18c3d165dae7941d17cc07034a2a5c67c708d6c96f9c5595800dfb65f42c413716b952d42727e7117915b359d1f1c0a64f0ee4b4a0bfbc4e9fc794cd02369e9594acb7805a155ec03505df719aa47e5da38fd3ab736fa76acee10abd1b220b32436260f2ab86f7d0c20fd9b3a1e63b9b3dbd91e7579fec104f5a714f4d0a00a03a1848c58508e8ec27c7fa04d3baf64e1258bd1d72465f3a64c793b3e09a97ca1a2efbac7adb6228ef4588be15afc21c80905a26a22f4db7940b9369051dde4e24008a5f7b943d769578ffa46572435c2076c60096252f3b3b5fe6d8f4579d11c9c71cbf7444c661306fa07dd01e670fa8d24071b09d6e74a268a0d43aef3b7f8e126900bf2e21304785712f327275a2e16febd4faaaacce68b92dcc3c27ca035bb4210408a34103719c82d33c8b43dd9a46cc0420a533b906317fb817ef6164286b8ddacee6191027bfa9ed19746c8401bab93d08d028fd9e2203cccf56b22042c402e8a438ed226112fa71d02c4537d4156a3af28ab4ffcf19309d283902f1e70f42d6713782c5e468a086fdb5c8b3e15de36acc4469ec42ea23a1e5e8e399f4d4be71dd4b4c268db2ab91b68ceafb95cbba36228e59bc0cd7f987a2ad4bbd23b67acabb26a0f4c694ff320f2275042c85ef256aeef306cf5e2803d6c55827011e2f98d0e80819e0039a71cc9c59464f209afa7891a359a3f9efb4bba2a18fd013e8664a6bec7e717ffe2f0c06f7268862696cfae0fe6fab5b1a2921c0e29aaa8638f6a18d1cbaaa4aa0d76f66fa9f44511e631f2fde8024210eb39f545a648c1b77ab04a7d110edbd1dce3939b4dee867df3cb3107fffe5ab22fe5e32b38447d32094259cee40c9a5254df72cbd7a29188d7285facd6e2f5c78ee9d11645cf026e99162da9c2d148373018fe8e052ffccc4e3952e86228d7835a3bc9b4a5c6099dd3e802b059ef2225cbe4664458729c78032e184b61a089870c6b3c2bf2e5df6bd65bc195e1ccbe58b9a6dde49897ab59dd269a737f04e37e34d3d10c3b01c744a742d52da1bceca63fcbecc136a80bf3ca1df2f226de073b67a0b646674744acd14d5dab9929f2cb804637ebf211f2b3a8b959723808904e9044deb551b2613c1e501385693e7abff809b641c02107187cf1bd1c9571a9023942f0c78c467611193a7e6900eefc49fded206630336cd8d2849731b73798d9258be75b843f051679e6bd541c78457db5470d3d494f333a81b3ed26b57f9f7726275c12f192f4b1d9615c7fe3e0bb22fb47ae1effea3bd2a0a379593a25f933c8af1f14d08bd8ca692c9af3eaee136664e1829204c171ad6e50fa928a3c1f5ee2c14f984884c2cb0256acfa6172d030940f3f9f99443c730b0f070192d36fb83b3d470cf3098bd8b0f09eb6d1b58efbde00305c3a50e00df17b9963f1c06f26b48e4a166073f3f3119ed2b56af1f8c056c07f65ffc3f2e81efa22f97c66998b35bb2af3ce2d89af5f5b1368ce9148937f826c3ef81a116382bd3f53e26f210aed545f38c1e21400957b824eaa95bb401ef308852c7e5015b89244a403308de785a81739634161e33d79435f18cf378bd9f5eb59b40a55abe627f6944ec239f80fc15526e7f1b2c2949a85b8c15a299cee1c86f61746a4eae3dc5f347225f1965cf09d4457b1a1b692fb108a681607d6276c4a6cf35709dc95aa249ae245a0435c481cbae672037aefc82fee9f249e643e658d173aea1d99e361f383dd674a5f2a6525755eaba2d59928a8d9e2eb1aafd129cb4c2cefd5da0213d900efa938e937a7c4e62243eeb3f5f43be35323f63b0b1ac2a298fcfbf71129da3465e488f52b82ec725bdf2fd943e09004c62abf5332139fb38b797756c5e9de926da21f8d77408ea740cf5ec8a657eae110df0550c6ca2585e0cdd5de1e986da91ca1d112f0d5397fdc612b2163164dedddf60c1e3dcd94195b65f50a9c86fb7b67b91dc7c0b8ab3d1c254663fc09ad5fd2c97221f1c6032557ff0a2fc441b71b3a6a6c52efded4133c8d57ce15523550237e7fef838d66cd77c48a743b2a2cc7c1f0ef3d520eb7ce9c086d73c352fe311337b3558a6985660a19ac852edceed56e3e9bb49b8a788eaa3f9be70b3fd1e764888a35a6c874256f9a8e53790281e30fdc1ed35ef03e9bd805ba3ef6ad07c3eef31fadcaba39c9b793e15d04f096c62f6282e8fc4aa31b275bc7fe5dce144ba736151d046b1285b698422ae84ae222e835e2ea80791082cd1742385764a0b047fcadfd8da7acc8f820dd50444fbbecb18ff5c9df10e08609d4b0f76ce14dc8ab056227e3604b3933df593a1b961fba44678131c958b15246e5054465bfffba1cb05c8d4a3ce7a3473d88c9213b5d8fcef3c46f8650fec5077bffaf9b469051b0e5aa7b55f863f0919ca310505a063890b1560597aac6ca1ed9a7c7ed8e894597098cc9333d687bd8e1b4539bb9f74d034d2fc316ef806d67bcec412fb485a03f87cb89d122809fc55f1a7fb35a74440d661ee736340cdbe70141214e899cf9f907a2463f995d21e2d1d25fe92b47ea198f467bf5e775104bbb0ed11534ef25eabdd6b14e8961ee0534f5ab504151f1b2f1853f7229e07131696deb538114d51df2d5c4145bb53d7292e1544c3075806980d5d595528dcf1ce6d4d35470331f00a7bb00e4a1b38982f5dbd2114715a3bd23fa9dbadfe2970853a89d1abb9ae5d4f3bab355691c3ccbbe4bcb2e44425d6c2c3dc3ddd8d43872a6063f111c1c7e6ed4449b39bbd6df92ed4a0e4808ffad0391f89b509f683061bcbe06369e47d43e9", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r7, 0xc01064ac, &(0x7f0000000000)={r8, 0x1000, &(0x7f0000002a80)=""/4096}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_setup(0xced, &(0x7f0000000180)={0x0, 0x577, 0x8, 0x2, 0x3c7}, &(0x7f0000000240), &(0x7f0000000300)) mmap$IORING_OFF_SQES(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x4, 0x810, r0, 0x10000000) getsockopt$bt_hci(r9, 0x84, 0x7d, 0x0, &(0x7f0000000100)) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x8, 0x0, 0x3}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) kernel console output (not intermixed with test programs): 7.649577][ T1231] usb 4-1: device descriptor read/64, error -71 [ 397.760283][ T1231] usb usb4-port1: attempt power cycle [ 397.926247][ T5912] usb 2-1: USB disconnect, device number 22 [ 398.109788][ T1231] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 398.132437][ T1231] usb 4-1: device descriptor read/8, error -71 [ 398.379635][ T1231] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 398.400162][ T1231] usb 4-1: device descriptor read/8, error -71 [ 398.409763][ T809] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 398.510037][ T1231] usb usb4-port1: unable to enumerate USB device [ 398.581022][ T809] usb 2-1: Using ep0 maxpacket: 8 [ 398.591811][ T809] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 398.596436][ T9105] FAULT_INJECTION: forcing a failure. [ 398.596436][ T9105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.604122][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.619291][ T9105] CPU: 0 UID: 0 PID: 9105 Comm: syz.2.1090 Not tainted syzkaller #0 PREEMPT(full) [ 398.619317][ T9105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 398.619327][ T9105] Call Trace: [ 398.619335][ T9105] [ 398.619342][ T9105] dump_stack_lvl+0xe8/0x150 [ 398.619372][ T9105] should_fail_ex+0x412/0x560 [ 398.619397][ T9105] __kvm_read_guest_page+0x18d/0x240 [ 398.619421][ T9105] kvm_fetch_guest_virt+0x12b/0x170 [ 398.619448][ T9105] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 398.619480][ T9105] __do_insn_fetch_bytes+0x31c/0x700 [ 398.619505][ T9105] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 398.619529][ T9105] ? x86_decode_insn+0x1719/0x5df0 [ 398.619552][ T9105] x86_decode_insn+0x38e/0x5df0 [ 398.619598][ T9105] ? __pfx_x86_decode_insn+0x10/0x10 [ 398.619617][ T9105] ? emulator_read_write+0x184/0x730 [ 398.619640][ T9105] ? vmx_read_guest_seg_ar+0x38f/0x5b0 [ 398.619662][ T9105] ? __asan_memset+0x22/0x50 [ 398.619684][ T9105] ? init_decode_cache+0xea/0x160 [ 398.619704][ T9105] ? init_emulate_ctxt+0x4e7/0x680 [ 398.619724][ T9105] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 398.619738][ T9105] ? kvm_multiple_exception+0x2b0/0x950 [ 398.619765][ T9105] x86_emulate_instruction+0x64a/0x2100 [ 398.619789][ T9105] ? vmx_set_rflags+0x42c/0x5a0 [ 398.619815][ T9105] ? x86_emulate_instruction+0x18a8/0x2100 [ 398.619835][ T9105] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 398.619856][ T9105] ? vmx_handle_exit_irqoff+0x100/0xa00 [ 398.619880][ T9105] ? __pfx_vmx_handle_exit_irqoff+0x10/0x10 [ 398.619908][ T9105] handle_ud+0x189/0x590 [ 398.619927][ T9105] ? __pfx_handle_ud+0x10/0x10 [ 398.619943][ T9105] ? vmx_vcpu_run+0xf9c/0x2d90 [ 398.619964][ T9105] ? vmx_vcpu_run+0xf9c/0x2d90 [ 398.619982][ T9105] ? __vmx_complete_interrupts+0xe7/0x660 [ 398.620005][ T9105] ? handle_exception_nmi+0x2bb/0x1380 [ 398.620025][ T9105] ? __pfx_handle_exception_nmi+0x10/0x10 [ 398.620041][ T9105] vmx_handle_exit+0xfc4/0x16c0 [ 398.620078][ T9105] vcpu_run+0x5dee/0x7990 [ 398.620097][ T9105] ? flush_pending_x87_faults+0x21/0x150 [ 398.620135][ T9105] ? vcpu_run+0x4ad8/0x7990 [ 398.620193][ T9105] ? __pfx_vcpu_run+0x10/0x10 [ 398.620212][ T9105] ? __asan_memcpy+0x40/0x70 [ 398.620233][ T9105] ? complete_emulated_mmio+0x53e/0x900 [ 398.620261][ T9105] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 398.620293][ T9105] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 398.620312][ T9105] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 398.620330][ T9105] ? rcu_is_watching+0x15/0xb0 [ 398.620348][ T9105] ? trace_contention_end+0x3d/0x150 [ 398.620369][ T9105] ? __mutex_lock+0x320/0x1420 [ 398.620394][ T9105] ? kasan_quarantine_put+0xbb/0x1f0 [ 398.620417][ T9105] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 398.620439][ T9105] ? __pfx___mutex_lock+0x10/0x10 [ 398.620461][ T9105] ? tomoyo_path_number_perm+0x219/0x630 [ 398.620485][ T9105] ? do_vfs_ioctl+0x1166/0x1530 [ 398.620505][ T9105] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 398.620525][ T9105] kvm_vcpu_ioctl+0xa62/0xfd0 [ 398.620547][ T9105] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 398.620562][ T9105] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 398.620597][ T9105] ? __fget_files+0x2a/0x420 [ 398.620621][ T9105] ? __fget_files+0x2a/0x420 [ 398.620639][ T9105] ? __fget_files+0x3a0/0x420 [ 398.620657][ T9105] ? __fget_files+0x2a/0x420 [ 398.620679][ T9105] ? bpf_lsm_file_ioctl+0x9/0x20 [ 398.620696][ T9105] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 398.620713][ T9105] __se_sys_ioctl+0xfc/0x170 [ 398.620732][ T9105] do_syscall_64+0x14d/0xf80 [ 398.620748][ T9105] ? trace_irq_disable+0x3b/0x150 [ 398.620766][ T9105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.620783][ T9105] ? clear_bhb_loop+0x40/0x90 [ 398.620802][ T9105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.620818][ T9105] RIP: 0033:0x7f8bb659c799 [ 398.620834][ T9105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.620847][ T9105] RSP: 002b:00007f8bb7492028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 398.620865][ T9105] RAX: ffffffffffffffda RBX: 00007f8bb6815fa0 RCX: 00007f8bb659c799 [ 398.620876][ T9105] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 398.620886][ T9105] RBP: 00007f8bb7492090 R08: 0000000000000000 R09: 0000000000000000 [ 398.620896][ T9105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.620906][ T9105] R13: 00007f8bb6816038 R14: 00007f8bb6815fa0 R15: 00007ffce767e218 [ 398.620932][ T9105] [ 399.059513][ T809] usb 2-1: Product: syz [ 399.063706][ T809] usb 2-1: Manufacturer: syz [ 399.068286][ T809] usb 2-1: SerialNumber: syz [ 399.075583][ T809] usb 2-1: config 0 descriptor?? [ 399.285839][ T809] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 399.491367][ T809] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 399.504905][ T809] usb 2-1: USB disconnect, device number 23 [ 399.605807][ T9117] overlayfs: failed to clone upperpath [ 399.613973][ T9117] overlayfs: failed to clone upperpath [ 399.621193][ T9117] overlayfs: failed to clone upperpath [ 399.628650][ T9117] overlayfs: failed to clone upperpath [ 399.635724][ T9117] overlayfs: failed to clone upperpath [ 399.643488][ T9117] overlayfs: failed to clone upperpath [ 399.650705][ T9117] overlayfs: failed to clone upperpath [ 399.660088][ T9117] overlayfs: failed to clone upperpath [ 399.667123][ T9117] overlayfs: failed to clone upperpath [ 399.674232][ T9117] overlayfs: failed to clone upperpath [ 399.684477][ T9117] overlayfs: failed to clone upperpath [ 399.697115][ T9117] overlayfs: failed to clone upperpath [ 399.704311][ T9117] overlayfs: failed to clone upperpath [ 399.710832][ T9117] overlayfs: failed to clone upperpath [ 399.717096][ T9117] overlayfs: failed to clone upperpath [ 399.724241][ T9117] overlayfs: failed to clone upperpath [ 399.730586][ T9117] overlayfs: failed to clone upperpath [ 399.736807][ T9117] overlayfs: failed to clone upperpath [ 399.743219][ T9117] overlayfs: failed to clone upperpath [ 399.750037][ T9117] overlayfs: failed to clone upperpath [ 399.756273][ T9117] overlayfs: failed to clone upperpath [ 399.763359][ T9117] overlayfs: failed to clone upperpath [ 399.769655][ T9117] overlayfs: failed to clone upperpath [ 399.775839][ T9117] overlayfs: failed to clone upperpath [ 399.782231][ T9117] overlayfs: failed to clone upperpath [ 399.788391][ T9117] overlayfs: failed to clone upperpath [ 399.798261][ T9117] overlayfs: failed to clone upperpath [ 399.805880][ T9117] overlayfs: failed to clone upperpath [ 399.812802][ T9117] overlayfs: failed to clone upperpath [ 399.820606][ T9117] overlayfs: failed to clone upperpath [ 399.826895][ T9117] overlayfs: failed to clone upperpath [ 399.835238][ T9117] overlayfs: failed to clone upperpath [ 399.842001][ T9117] overlayfs: failed to clone upperpath [ 399.848637][ T9117] overlayfs: failed to clone upperpath [ 399.860939][ T9117] overlayfs: failed to clone upperpath [ 399.873904][ T9117] overlayfs: failed to clone upperpath [ 399.880998][ T9117] overlayfs: failed to clone upperpath [ 399.887956][ T9117] overlayfs: failed to clone upperpath [ 399.896149][ T9117] overlayfs: failed to clone upperpath [ 399.905695][ T9117] overlayfs: failed to clone upperpath [ 399.913462][ T9117] overlayfs: failed to clone upperpath [ 399.920299][ T9117] overlayfs: failed to clone upperpath [ 399.926670][ T9117] overlayfs: failed to clone upperpath [ 399.932309][ T1231] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 399.941524][ T9117] overlayfs: failed to clone upperpath [ 399.947920][ T9117] overlayfs: failed to clone upperpath [ 399.954631][ T9117] overlayfs: failed to clone upperpath [ 399.961073][ T9117] overlayfs: failed to clone upperpath [ 399.967426][ T9117] overlayfs: failed to clone upperpath [ 399.973792][ T9117] overlayfs: failed to clone upperpath [ 399.980594][ T9117] overlayfs: failed to clone upperpath [ 399.986853][ T9117] overlayfs: failed to clone upperpath [ 399.993628][ T9117] overlayfs: failed to clone upperpath [ 400.001904][ T9117] overlayfs: failed to clone upperpath [ 400.008467][ T9117] overlayfs: failed to clone upperpath [ 400.016713][ T9117] overlayfs: failed to clone upperpath [ 400.025029][ T9117] overlayfs: failed to clone upperpath [ 400.034127][ T9117] overlayfs: failed to clone upperpath [ 400.040703][ T9117] overlayfs: failed to clone upperpath [ 400.048974][ T9117] overlayfs: failed to clone upperpath [ 400.057080][ T9117] overlayfs: failed to clone upperpath [ 400.064434][ T9117] overlayfs: failed to clone upperpath [ 400.072442][ T9117] overlayfs: failed to clone upperpath [ 400.079064][ T9117] overlayfs: failed to clone upperpath [ 400.085945][ T9117] overlayfs: failed to clone upperpath [ 400.090488][ T1231] usb 3-1: Using ep0 maxpacket: 8 [ 400.100533][ T9117] overlayfs: failed to clone upperpath [ 400.111261][ T1231] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 400.133036][ T1231] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 400.149756][ T1231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.158155][ T1231] usb 3-1: Product: syz [ 400.163131][ T1231] usb 3-1: Manufacturer: syz [ 400.167760][ T1231] usb 3-1: SerialNumber: syz [ 400.182870][ T1231] usb 3-1: config 0 descriptor?? [ 400.249566][ T857] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 400.409880][ T857] usb 4-1: Using ep0 maxpacket: 8 [ 400.416851][ T857] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 400.425141][ T857] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 400.435145][ T857] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 400.445235][ T857] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 400.455563][ T857] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 400.465887][ T857] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 400.479694][ T857] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 400.489114][ T857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.503055][ T857] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 400.512165][ T1231] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 400.669577][ T1231] usb 2-1: Using ep0 maxpacket: 32 [ 400.676370][ T1231] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 400.684877][ T1231] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 400.693638][ T1231] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 400.702681][ T1231] usb 2-1: config 1 has no interface number 0 [ 400.708911][ T1231] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 400.721065][ T1231] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 400.734058][ T1231] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 400.743343][ T1231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.759362][ T1231] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 400.961548][ T1231] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 401.376147][ T1231] usb 2-1: USB disconnect, device number 24 [ 401.384703][ T1231] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 402.159632][ T1231] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 402.311651][ T1231] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 402.323024][ T1231] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 402.333162][ T1231] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 402.342374][ T1231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.356030][ T9148] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 402.367585][ T1231] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 402.572686][ T5830] usb 2-1: USB disconnect, device number 25 [ 402.696132][ T1231] usb 3-1: USB disconnect, device number 14 [ 402.920044][ T5830] usb 4-1: USB disconnect, device number 30 [ 403.139712][ T857] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 403.259664][ T5830] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 403.289614][ T857] usb 3-1: Using ep0 maxpacket: 32 [ 403.296852][ T857] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 403.305409][ T857] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.315693][ T857] usb 3-1: config 0 has no interface number 0 [ 403.321955][ T857] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 403.331974][ T857] usb 3-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 403.346081][ T857] usb 3-1: config 0 interface 184 has no altsetting 0 [ 403.360659][ T857] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 403.384235][ T857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.400432][ T857] usb 3-1: Product: syz [ 403.406075][ T857] usb 3-1: Manufacturer: syz [ 403.417368][ T857] usb 3-1: SerialNumber: syz [ 403.430679][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 403.432253][ T857] usb 3-1: config 0 descriptor?? [ 403.442078][ T5830] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 403.450419][ T857] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 403.452443][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.463392][ T857] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 403.479303][ T5830] usb 4-1: Product: syz [ 403.485064][ T5830] usb 4-1: Manufacturer: syz [ 403.490348][ T5830] usb 4-1: SerialNumber: syz [ 403.501992][ T5830] usb 4-1: config 0 descriptor?? [ 403.649665][ T809] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 403.712517][ T5830] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 403.801546][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.812876][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.823523][ T809] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 403.833338][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.844471][ T809] usb 2-1: config 0 descriptor?? [ 404.258670][ T809] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 404.266320][ T809] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 404.273900][ T809] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 404.281349][ T809] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 404.288754][ T809] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 404.298554][ T809] playstation 0003:054C:0DF2.0013: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 404.457937][ T809] playstation 0003:054C:0DF2.0013: Invalid byte count transferred, expected 20 got 0 [ 404.467664][ T809] playstation 0003:054C:0DF2.0013: Failed to retrieve DualSense pairing info: -22 [ 404.477942][ T809] playstation 0003:054C:0DF2.0013: Failed to get MAC address from DualSense [ 404.487170][ T809] playstation 0003:054C:0DF2.0013: Failed to create dualsense. [ 404.498344][ T809] playstation 0003:054C:0DF2.0013: probe with driver playstation failed with error -22 [ 404.922696][ T5830] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 404.936334][ T5830] usb 4-1: USB disconnect, device number 31 [ 405.719587][ T809] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 405.869583][ T809] usb 4-1: Using ep0 maxpacket: 8 [ 405.876258][ T809] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 405.884848][ T809] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 405.894657][ T809] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 405.904578][ T809] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 405.914538][ T809] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 405.924589][ T809] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.937745][ T809] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 405.948199][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.954951][ T857] usb 3-1: USB disconnect, device number 15 [ 405.963412][ T809] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 406.421781][ T9] usb 2-1: USB disconnect, device number 26 [ 406.789670][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 406.939697][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 406.947660][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 406.957525][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 253, changing to 7 [ 406.973054][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=1043, bcdDevice= 0.40 [ 406.982635][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.990754][ T9] usb 2-1: Product: syz [ 406.995118][ T9] usb 2-1: Manufacturer: syz [ 406.999798][ T9] usb 2-1: SerialNumber: syz [ 407.079572][ T809] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 407.228042][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 407.229639][ T809] usb 3-1: Using ep0 maxpacket: 8 [ 407.235633][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 407.244875][ T809] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 407.253233][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 407.261074][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.267321][ T9] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 407.275225][ T809] usb 3-1: Product: syz [ 407.289605][ T809] usb 3-1: Manufacturer: syz [ 407.294245][ T809] usb 3-1: SerialNumber: syz [ 407.302403][ T809] usb 3-1: config 0 descriptor?? [ 407.304488][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 407.350011][ T9] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 407.366331][ T9] usb 2-1: USB disconnect, device number 27 [ 407.392304][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.512847][ T809] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 407.812406][ T9216] FAULT_INJECTION: forcing a failure. [ 407.812406][ T9216] name failslab, interval 1, probability 0, space 0, times 0 [ 407.825205][ T9216] CPU: 1 UID: 0 PID: 9216 Comm: syz.1.1130 Not tainted syzkaller #0 PREEMPT(full) [ 407.825228][ T9216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 407.825237][ T9216] Call Trace: [ 407.825245][ T9216] [ 407.825254][ T9216] dump_stack_lvl+0xe8/0x150 [ 407.825281][ T9216] should_fail_ex+0x412/0x560 [ 407.825303][ T9216] should_failslab+0xa8/0x100 [ 407.825316][ T9216] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 407.825333][ T9216] ? dup_task_struct+0x52/0x840 [ 407.825352][ T9216] dup_task_struct+0x52/0x840 [ 407.825366][ T9216] ? _raw_spin_unlock_irq+0x23/0x50 [ 407.825382][ T9216] copy_process+0x89b/0x4430 [ 407.825412][ T9216] ? __pfx_copy_process+0x10/0x10 [ 407.825430][ T9216] ? mutex_init_lockdep+0xdf/0x110 [ 407.825450][ T9216] vhost_task_create+0x1f9/0x380 [ 407.825463][ T9216] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 407.825475][ T9216] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 407.825486][ T9216] ? __pfx_vhost_task_create+0x10/0x10 [ 407.825502][ T9216] ? __pfx_vhost_task_fn+0x10/0x10 [ 407.825517][ T9216] ? __lock_acquire+0x6b5/0x2cf0 [ 407.825534][ T9216] kvm_mmu_post_init_vm+0x14c/0x300 [ 407.825549][ T9216] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 407.825566][ T9216] ? __mutex_trylock_common+0x158/0x260 [ 407.825578][ T9216] ? __pfx___mutex_trylock_common+0x10/0x10 [ 407.825589][ T9216] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 407.825606][ T9216] ? register_lock_class+0x31/0x2e0 [ 407.825622][ T9216] ? __lock_acquire+0x6b5/0x2cf0 [ 407.825639][ T9216] ? kasan_quarantine_put+0xbb/0x1f0 [ 407.825655][ T9216] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 407.825671][ T9216] ? do_raw_write_lock+0x11d/0x260 [ 407.825692][ T9216] kvm_vcpu_ioctl+0xa62/0xfd0 [ 407.825706][ T9216] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 407.825715][ T9216] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 407.825735][ T9216] ? __fget_files+0x2a/0x420 [ 407.825750][ T9216] ? __fget_files+0x2a/0x420 [ 407.825762][ T9216] ? __fget_files+0x3a0/0x420 [ 407.825773][ T9216] ? __fget_files+0x2a/0x420 [ 407.825787][ T9216] ? bpf_lsm_file_ioctl+0x9/0x20 [ 407.825797][ T9216] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 407.825807][ T9216] __se_sys_ioctl+0xfc/0x170 [ 407.825820][ T9216] do_syscall_64+0x14d/0xf80 [ 407.825830][ T9216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.825840][ T9216] ? clear_bhb_loop+0x40/0x90 [ 407.825851][ T9216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.825861][ T9216] RIP: 0033:0x7f6b5cb9c799 [ 407.825876][ T9216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.825884][ T9216] RSP: 002b:00007f6b5dae5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.825896][ T9216] RAX: ffffffffffffffda RBX: 00007f6b5ce15fa0 RCX: 00007f6b5cb9c799 [ 407.825902][ T9216] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 407.825908][ T9216] RBP: 00007f6b5dae5090 R08: 0000000000000000 R09: 0000000000000000 [ 407.825914][ T9216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.825920][ T9216] R13: 00007f6b5ce16038 R14: 00007f6b5ce15fa0 R15: 00007ffc2fd26df8 [ 407.825935][ T9216] [ 408.500111][ T9] usb 4-1: USB disconnect, device number 32 [ 408.689602][ T5899] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 408.849582][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 408.849649][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 408.866034][ T5899] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 408.875376][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.883666][ T5899] usb 2-1: Product: syz [ 408.887887][ T5899] usb 2-1: Manufacturer: syz [ 408.893175][ T5899] usb 2-1: SerialNumber: syz [ 408.901260][ T5899] usb 2-1: config 0 descriptor?? [ 408.957359][ T809] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 408.972510][ T809] usb 3-1: USB disconnect, device number 16 [ 408.980206][ T9] usb 4-1: device descriptor read/64, error -71 [ 409.109136][ T5899] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 409.219582][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 409.310675][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 409.318016][ T5899] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 409.331045][ T5899] usb 2-1: USB disconnect, device number 28 [ 409.349830][ T9] usb 4-1: device descriptor read/64, error -71 [ 409.455151][ T9231] fuse: fd is not a fuse device [ 409.471814][ T9] usb usb4-port1: attempt power cycle [ 409.769620][ T5899] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 409.830981][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 409.850068][ T9] usb 4-1: device descriptor read/8, error -71 [ 409.921784][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.942316][ T5899] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 409.953958][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.963730][ T9241] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 409.966864][ T5899] usb 3-1: config 0 descriptor?? [ 409.979811][ T9241] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 409.995077][ T5899] pwc: Askey VC010 type 2 USB webcam detected. [ 410.010084][ T9241] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 410.026419][ T9241] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 410.047268][ T9241] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 410.099750][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 410.140996][ T9] usb 4-1: device descriptor read/8, error -71 [ 410.249944][ T9] usb usb4-port1: unable to enumerate USB device [ 410.398179][ T5899] pwc: recv_control_msg error -32 req 02 val 2b00 [ 410.405334][ T5899] pwc: recv_control_msg error -32 req 02 val 2700 [ 410.412580][ T5899] pwc: recv_control_msg error -32 req 02 val 2c00 [ 410.419696][ T5899] pwc: recv_control_msg error -32 req 04 val 1000 [ 410.427006][ T5899] pwc: recv_control_msg error -32 req 04 val 1300 [ 410.434169][ T5899] pwc: recv_control_msg error -32 req 04 val 1400 [ 410.441206][ T5899] pwc: recv_control_msg error -32 req 02 val 2000 [ 410.448870][ T5899] pwc: recv_control_msg error -32 req 02 val 2100 [ 410.456122][ T5899] pwc: recv_control_msg error -32 req 04 val 1500 [ 410.667043][ T5899] pwc: recv_control_msg error -71 req 02 val 2400 [ 410.686154][ T5899] pwc: recv_control_msg error -71 req 02 val 2600 [ 410.697733][ T5899] pwc: recv_control_msg error -71 req 02 val 2900 [ 410.704724][ T5899] pwc: recv_control_msg error -71 req 02 val 2800 [ 410.712529][ T5899] pwc: recv_control_msg error -71 req 04 val 1100 [ 410.719321][ T5899] pwc: recv_control_msg error -71 req 04 val 1200 [ 410.727262][ T5899] pwc: Registered as video103. [ 410.735268][ T5899] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input31 [ 410.755471][ T5899] usb 3-1: USB disconnect, device number 17 [ 410.919638][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 411.069609][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 411.076181][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 411.084463][ T9] usb 2-1: config 0 has no interface number 0 [ 411.091125][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 411.100382][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 411.109542][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.117537][ T9] usb 2-1: Product: syz [ 411.122190][ T9] usb 2-1: Manufacturer: syz [ 411.126801][ T9] usb 2-1: SerialNumber: syz [ 411.133332][ T9] usb 2-1: config 0 descriptor?? [ 411.499586][ T5899] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 411.544310][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 411.555398][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 411.569960][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 411.584478][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 411.650207][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 411.658847][ T5899] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 411.670683][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.680783][ T5899] usb 3-1: Product: syz [ 411.685017][ T5899] usb 3-1: Manufacturer: syz [ 411.690482][ T5899] usb 3-1: SerialNumber: syz [ 411.698023][ T5899] usb 3-1: config 0 descriptor?? [ 411.908661][ T5899] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 412.189600][ T809] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 412.339592][ T809] usb 4-1: Using ep0 maxpacket: 8 [ 412.348379][ T809] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 412.357793][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.365947][ T809] usb 4-1: Product: syz [ 412.370205][ T809] usb 4-1: Manufacturer: syz [ 412.374818][ T809] usb 4-1: SerialNumber: syz [ 412.383614][ T809] usb 4-1: config 0 descriptor?? [ 412.593597][ T809] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 412.795170][ T809] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 412.816650][ T809] usb 4-1: USB disconnect, device number 37 [ 413.116740][ T5899] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 413.128419][ T5899] usb 3-1: USB disconnect, device number 18 [ 413.394880][ T9277] overlayfs: missing 'lowerdir' [ 413.569577][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 413.712583][ T42] usb 2-1: USB disconnect, device number 29 [ 413.729340][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.766414][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 413.776418][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.793090][ T9] usb 4-1: config 0 descriptor?? [ 413.807187][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 414.130046][ T42] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 414.214771][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 414.222533][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 414.231941][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 414.242344][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 414.251684][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 414.260827][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 414.268096][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 414.275516][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 414.282879][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 414.309579][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 414.319085][ T42] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 414.328792][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.359151][ T42] usb 2-1: Product: syz [ 414.363490][ T42] usb 2-1: Manufacturer: syz [ 414.368098][ T42] usb 2-1: SerialNumber: syz [ 414.375501][ T42] usb 2-1: config 0 descriptor?? [ 414.501319][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 414.514796][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 414.522441][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 414.529829][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 414.538319][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 414.550595][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 414.563327][ T9] pwc: Registered as video103. [ 414.581629][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32 [ 414.604390][ T9] usb 4-1: USB disconnect, device number 38 [ 414.665175][ T42] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 414.684602][ T9291] FAULT_INJECTION: forcing a failure. [ 414.684602][ T9291] name failslab, interval 1, probability 0, space 0, times 0 [ 414.708827][ T9291] CPU: 0 UID: 0 PID: 9291 Comm: syz.2.1162 Not tainted syzkaller #0 PREEMPT(full) [ 414.708852][ T9291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 414.708862][ T9291] Call Trace: [ 414.708869][ T9291] [ 414.708877][ T9291] dump_stack_lvl+0xe8/0x150 [ 414.708906][ T9291] should_fail_ex+0x412/0x560 [ 414.708930][ T9291] should_failslab+0xa8/0x100 [ 414.708950][ T9291] __kmalloc_noprof+0xe8/0x760 [ 414.708972][ T9291] ? trace_kmalloc+0x2a/0x110 [ 414.708992][ T9291] ? tomoyo_encode+0x28b/0x550 [ 414.709019][ T9291] tomoyo_encode+0x28b/0x550 [ 414.709046][ T9291] tomoyo_realpath_from_path+0x58d/0x5d0 [ 414.709078][ T9291] tomoyo_check_open_permission+0x229/0x470 [ 414.709100][ T9291] ? tomoyo_check_open_permission+0x1d3/0x470 [ 414.709120][ T9291] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 414.709180][ T9291] security_file_open+0xa9/0x240 [ 414.709201][ T9291] do_dentry_open+0x384/0x14e0 [ 414.709226][ T9291] ? vfs_open+0x31/0x340 [ 414.709247][ T9291] vfs_open+0x3b/0x340 [ 414.709267][ T9291] dentry_open+0x61/0xa0 [ 414.709286][ T9291] ima_calc_file_hash+0x158/0x860 [ 414.709306][ T9291] ? kmem_cache_free+0x189/0x640 [ 414.709321][ T9291] ? __fuse_simple_request+0x157c/0x1c60 [ 414.709344][ T9291] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 414.709366][ T9291] ? __fuse_simple_request+0x157c/0x1c60 [ 414.709397][ T9291] ? __pfx___fuse_simple_request+0x10/0x10 [ 414.709418][ T9291] ? __pfx_autoremove_wake_function+0x10/0x10 [ 414.709439][ T9291] ? look_up_lock_class+0x57/0x110 [ 414.709455][ T9291] ? register_lock_class+0x31/0x2e0 [ 414.709474][ T9291] ? __lock_acquire+0x6b5/0x2cf0 [ 414.709499][ T9291] ? fuse_getattr+0x306/0x610 [ 414.709529][ T9291] ima_collect_measurement+0x51d/0x9c0 [ 414.709557][ T9291] ? __pfx_ima_collect_measurement+0x10/0x10 [ 414.709586][ T9291] ? __mutex_lock+0x320/0x1420 [ 414.709629][ T9291] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 414.709662][ T9291] process_measurement+0x12cd/0x1c80 [ 414.709695][ T9291] ? __pfx_process_measurement+0x10/0x10 [ 414.709752][ T9291] ? get_pid_task+0x20/0x1f0 [ 414.709772][ T9291] ? get_pid_task+0x20/0x1f0 [ 414.709803][ T9291] ima_file_mmap+0x1b0/0x200 [ 414.709823][ T9291] ? __pfx_ima_file_mmap+0x10/0x10 [ 414.709845][ T9291] ? apparmor_mmap_file+0x2da/0x3e0 [ 414.709868][ T9291] security_mmap_file+0x773/0xa20 [ 414.709890][ T9291] vm_mmap_pgoff+0x134/0x4f0 [ 414.709915][ T9291] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 414.709935][ T9291] ? __fget_files+0x2a/0x420 [ 414.709960][ T9291] ? __fget_files+0x3a0/0x420 [ 414.709978][ T9291] ? __fget_files+0x2a/0x420 [ 414.710003][ T9291] ksys_mmap_pgoff+0x51e/0x760 [ 414.710032][ T9291] do_syscall_64+0x14d/0xf80 [ 414.710047][ T9291] ? trace_irq_disable+0x3b/0x150 [ 414.710064][ T9291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.710081][ T9291] ? clear_bhb_loop+0x40/0x90 [ 414.710101][ T9291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.710116][ T9291] RIP: 0033:0x7f8bb659c799 [ 414.710131][ T9291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.710143][ T9291] RSP: 002b:00007f8bb7492028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 414.710162][ T9291] RAX: ffffffffffffffda RBX: 00007f8bb6815fa0 RCX: 00007f8bb659c799 [ 414.710174][ T9291] RDX: 000000000000000e RSI: 0000000000003000 RDI: 0000200000ffa000 [ 414.710183][ T9291] RBP: 00007f8bb7492090 R08: 0000000000000004 R09: 0000000000000000 [ 414.710193][ T9291] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 414.710202][ T9291] R13: 00007f8bb6816038 R14: 00007f8bb6815fa0 R15: 00007ffce767e218 [ 414.710228][ T9291] [ 415.081242][ T42] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 415.098985][ T9291] ERROR: Out of memory at tomoyo_realpath_from_path. [ 415.108536][ T29] audit: type=1800 audit(1773946504.750:5): pid=9291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1162" name="/" dev="fuse" ino=1 res=0 errno=0 [ 415.354565][ T9303] fuse: Unknown parameter '' [ 415.609632][ T42] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 415.769559][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 415.778214][ T42] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 415.787539][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.795981][ T42] usb 3-1: Product: syz [ 415.800294][ T42] usb 3-1: Manufacturer: syz [ 415.804929][ T42] usb 3-1: SerialNumber: syz [ 415.811308][ T42] usb 3-1: config 0 descriptor?? [ 416.020427][ T42] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 416.229710][ T42] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 416.252623][ T42] usb 3-1: USB disconnect, device number 19 [ 416.689625][ T42] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 416.762633][ T9324] fuse: Bad value for 'fd' [ 416.840251][ T5830] usb 2-1: USB disconnect, device number 30 [ 416.853198][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 416.883935][ T42] usb 4-1: unable to get BOS descriptor or descriptor too short [ 416.910394][ T42] usb 4-1: config 6 has an invalid interface number: 201 but max is 0 [ 416.925648][ T42] usb 4-1: config 6 has no interface number 0 [ 416.932572][ T42] usb 4-1: config 6 interface 201 has no altsetting 0 [ 416.942012][ T42] usb 4-1: New USB device found, idVendor=13d3, idProduct=3402, bcdDevice=73.32 [ 416.951593][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.961377][ T42] usb 4-1: Product: syz [ 416.966059][ T42] usb 4-1: Manufacturer: syz [ 416.971220][ T42] usb 4-1: SerialNumber: syz [ 417.034308][ T9333] FAULT_INJECTION: forcing a failure. [ 417.034308][ T9333] name failslab, interval 1, probability 0, space 0, times 0 [ 417.047164][ T9333] CPU: 0 UID: 0 PID: 9333 Comm: syz.1.1175 Not tainted syzkaller #0 PREEMPT(full) [ 417.047189][ T9333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 417.047200][ T9333] Call Trace: [ 417.047207][ T9333] [ 417.047215][ T9333] dump_stack_lvl+0xe8/0x150 [ 417.047246][ T9333] should_fail_ex+0x412/0x560 [ 417.047270][ T9333] should_failslab+0xa8/0x100 [ 417.047290][ T9333] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 417.047315][ T9333] ? css_rstat_updated+0x23a/0x530 [ 417.047331][ T9333] ? __get_vm_area_node+0x13f/0x300 [ 417.047353][ T9333] __get_vm_area_node+0x13f/0x300 [ 417.047379][ T9333] __vmalloc_node_range_noprof+0x36a/0x1750 [ 417.047403][ T9333] ? copy_process+0x89b/0x4430 [ 417.047442][ T9333] ? __memcg_slab_post_alloc_hook+0x493/0xe80 [ 417.047462][ T9333] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 417.047478][ T9333] ? rcu_is_watching+0x15/0xb0 [ 417.047490][ T9333] ? memcpy_and_pad+0x48/0x80 [ 417.047514][ T9333] __vmalloc_node_noprof+0xc2/0x100 [ 417.047536][ T9333] ? copy_process+0x89b/0x4430 [ 417.047555][ T9333] ? copy_process+0x89b/0x4430 [ 417.047578][ T9333] dup_task_struct+0x298/0x840 [ 417.047606][ T9333] copy_process+0x89b/0x4430 [ 417.047643][ T9333] ? __pfx_copy_process+0x10/0x10 [ 417.047670][ T9333] ? mutex_init_lockdep+0xdf/0x110 [ 417.047691][ T9333] vhost_task_create+0x1f9/0x380 [ 417.047710][ T9333] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 417.047730][ T9333] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 417.047749][ T9333] ? __pfx_vhost_task_create+0x10/0x10 [ 417.047783][ T9333] ? __pfx_vhost_task_fn+0x10/0x10 [ 417.047799][ T9333] ? __lock_acquire+0x6b5/0x2cf0 [ 417.047819][ T9333] kvm_mmu_post_init_vm+0x14c/0x300 [ 417.047843][ T9333] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 417.047872][ T9333] ? __mutex_trylock_common+0x158/0x260 [ 417.047893][ T9333] ? __pfx___mutex_trylock_common+0x10/0x10 [ 417.047911][ T9333] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 417.047925][ T9333] ? register_lock_class+0x31/0x2e0 [ 417.047940][ T9333] ? __lock_acquire+0x6b5/0x2cf0 [ 417.047958][ T9333] ? kasan_quarantine_put+0xbb/0x1f0 [ 417.047976][ T9333] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 417.048003][ T9333] ? do_raw_write_lock+0x11d/0x260 [ 417.048038][ T9333] kvm_vcpu_ioctl+0xa62/0xfd0 [ 417.048061][ T9333] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 417.048072][ T9333] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 417.048094][ T9333] ? __fget_files+0x2a/0x420 [ 417.048110][ T9333] ? __fget_files+0x2a/0x420 [ 417.048121][ T9333] ? __fget_files+0x3a0/0x420 [ 417.048137][ T9333] ? __fget_files+0x2a/0x420 [ 417.048160][ T9333] ? bpf_lsm_file_ioctl+0x9/0x20 [ 417.048178][ T9333] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 417.048196][ T9333] __se_sys_ioctl+0xfc/0x170 [ 417.048216][ T9333] do_syscall_64+0x14d/0xf80 [ 417.048227][ T9333] ? trace_irq_disable+0x3b/0x150 [ 417.048238][ T9333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.048249][ T9333] ? clear_bhb_loop+0x40/0x90 [ 417.048261][ T9333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.048274][ T9333] RIP: 0033:0x7f6b5cb9c799 [ 417.048290][ T9333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.048304][ T9333] RSP: 002b:00007f6b5dae5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.048324][ T9333] RAX: ffffffffffffffda RBX: 00007f6b5ce15fa0 RCX: 00007f6b5cb9c799 [ 417.048336][ T9333] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 417.048347][ T9333] RBP: 00007f6b5dae5090 R08: 0000000000000000 R09: 0000000000000000 [ 417.048356][ T9333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.048366][ T9333] R13: 00007f6b5ce16038 R14: 00007f6b5ce15fa0 R15: 00007ffc2fd26df8 [ 417.048385][ T9333] [ 417.048393][ T9333] warn_alloc: 1 callbacks suppressed [ 417.048398][ T9333] syz.1.1175: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 417.455186][ T9333] CPU: 0 UID: 0 PID: 9333 Comm: syz.1.1175 Not tainted syzkaller #0 PREEMPT(full) [ 417.455213][ T9333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 417.455224][ T9333] Call Trace: [ 417.455231][ T9333] [ 417.455240][ T9333] dump_stack_lvl+0xe8/0x150 [ 417.455272][ T9333] warn_alloc+0x249/0x340 [ 417.455296][ T9333] ? __pfx_warn_alloc+0x10/0x10 [ 417.455315][ T9333] ? __get_vm_area_node+0x13f/0x300 [ 417.455341][ T9333] ? __get_vm_area_node+0x2b5/0x300 [ 417.455369][ T9333] __vmalloc_node_range_noprof+0x38f/0x1750 [ 417.455411][ T9333] ? __memcg_slab_post_alloc_hook+0x493/0xe80 [ 417.455443][ T9333] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 417.455466][ T9333] ? rcu_is_watching+0x15/0xb0 [ 417.455486][ T9333] ? memcpy_and_pad+0x48/0x80 [ 417.455514][ T9333] __vmalloc_node_noprof+0xc2/0x100 [ 417.455536][ T9333] ? copy_process+0x89b/0x4430 [ 417.455558][ T9333] ? copy_process+0x89b/0x4430 [ 417.455583][ T9333] dup_task_struct+0x298/0x840 [ 417.455618][ T9333] copy_process+0x89b/0x4430 [ 417.455669][ T9333] ? __pfx_copy_process+0x10/0x10 [ 417.455700][ T9333] ? mutex_init_lockdep+0xdf/0x110 [ 417.455721][ T9333] vhost_task_create+0x1f9/0x380 [ 417.455740][ T9333] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 417.455759][ T9333] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 417.455778][ T9333] ? __pfx_vhost_task_create+0x10/0x10 [ 417.455804][ T9333] ? __pfx_vhost_task_fn+0x10/0x10 [ 417.455831][ T9333] ? __lock_acquire+0x6b5/0x2cf0 [ 417.455862][ T9333] kvm_mmu_post_init_vm+0x14c/0x300 [ 417.455886][ T9333] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 417.455914][ T9333] ? __mutex_trylock_common+0x158/0x260 [ 417.455938][ T9333] ? __pfx___mutex_trylock_common+0x10/0x10 [ 417.455956][ T9333] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 417.455975][ T9333] ? register_lock_class+0x31/0x2e0 [ 417.456002][ T9333] ? __lock_acquire+0x6b5/0x2cf0 [ 417.456030][ T9333] ? kasan_quarantine_put+0xbb/0x1f0 [ 417.456055][ T9333] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 417.456081][ T9333] ? do_raw_write_lock+0x11d/0x260 [ 417.456115][ T9333] kvm_vcpu_ioctl+0xa62/0xfd0 [ 417.456138][ T9333] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 417.456154][ T9333] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 417.456192][ T9333] ? __fget_files+0x2a/0x420 [ 417.456216][ T9333] ? __fget_files+0x2a/0x420 [ 417.456235][ T9333] ? __fget_files+0x3a0/0x420 [ 417.456253][ T9333] ? __fget_files+0x2a/0x420 [ 417.456276][ T9333] ? bpf_lsm_file_ioctl+0x9/0x20 [ 417.456294][ T9333] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 417.456311][ T9333] __se_sys_ioctl+0xfc/0x170 [ 417.456331][ T9333] do_syscall_64+0x14d/0xf80 [ 417.456347][ T9333] ? trace_irq_disable+0x3b/0x150 [ 417.456366][ T9333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.456382][ T9333] ? clear_bhb_loop+0x40/0x90 [ 417.456403][ T9333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.456420][ T9333] RIP: 0033:0x7f6b5cb9c799 [ 417.456438][ T9333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.456451][ T9333] RSP: 002b:00007f6b5dae5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.456470][ T9333] RAX: ffffffffffffffda RBX: 00007f6b5ce15fa0 RCX: 00007f6b5cb9c799 [ 417.456482][ T9333] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 417.456493][ T9333] RBP: 00007f6b5dae5090 R08: 0000000000000000 R09: 0000000000000000 [ 417.456503][ T9333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.456513][ T9333] R13: 00007f6b5ce16038 R14: 00007f6b5ce15fa0 R15: 00007ffc2fd26df8 [ 417.456541][ T9333] [ 417.456742][ T9333] Mem-Info: [ 417.824891][ T9333] active_anon:5918 inactive_anon:0 isolated_anon:0 [ 417.824891][ T9333] active_file:12170 inactive_file:40078 isolated_file:0 [ 417.824891][ T9333] unevictable:768 dirty:106 writeback:0 [ 417.824891][ T9333] slab_reclaimable:5868 slab_unreclaimable:90889 [ 417.824891][ T9333] mapped:26117 shmem:1360 pagetables:1161 [ 417.824891][ T9333] sec_pagetables:0 bounce:0 [ 417.824891][ T9333] kernel_misc_reclaimable:0 [ 417.824891][ T9333] free:1332975 free_pcp:10006 free_cma:0 [ 417.879622][ T9333] Node 0 active_anon:23672kB inactive_anon:0kB active_file:48680kB inactive_file:160112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104468kB dirty:420kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11368kB pagetables:4504kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 417.913340][ T9333] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 417.949059][ T9333] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 417.981472][ T9333] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 417.987383][ T9333] Node 0 DMA32 free:1375116kB boost:0kB min:34080kB low:42600kB high:51120kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23572kB inactive_anon:0kB active_file:48680kB inactive_file:160112kB unevictable:1536kB writepending:420kB zspages:0kB present:3129332kB managed:2540108kB mlocked:0kB bounce:0kB free_pcp:40392kB local_pcp:20324kB free_cma:0kB [ 418.022491][ T9333] lowmem_reserve[]: 0 0 1 1 1 [ 418.027262][ T9333] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1436kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 418.032443][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 418.059897][ T9333] lowmem_reserve[]: 0 0 0 0 0 [ 418.071907][ T9333] Node 1 Normal free:3941424kB boost:0kB min:55800kB low:69748kB high:83696kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 418.103681][ T9333] lowmem_reserve[]: 0 0 0 0 0 [ 418.108522][ T9333] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 418.122219][ T9333] Node 0 DMA32: 797*4kB (UME) 341*8kB (UME) 527*16kB (UME) 390*32kB (UME) 209*64kB (UME) 105*128kB (UME) 66*256kB (UME) 14*512kB (UME) 5*1024kB (ME) 5*2048kB (ME) 313*4096kB (UM) = 1375116kB [ 418.142313][ T9333] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 418.155439][ T9333] Node 1 Normal: 8*4kB (U) 8*8kB (UM) 9*16kB (UM) 8*32kB (UM) 7*64kB (UM) 7*128kB (UM) 5*256kB (UM) 4*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3941424kB [ 418.173471][ T9333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.183103][ T9333] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.192537][ T9333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.202170][ T9333] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.211511][ T9333] 53604 total pagecache pages [ 418.216192][ T9333] 0 pages in swap cache [ 418.220707][ T9333] Free swap = 124996kB [ 418.224879][ T9333] Total swap = 124996kB [ 418.230743][ T9333] 2097051 pages RAM [ 418.234598][ T9333] 0 pages HighMem/MovableOnly [ 418.239290][ T9333] 430050 pages reserved [ 418.240791][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.243823][ T9333] 0 pages cma reserved [ 418.256573][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.269238][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 418.278516][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.290739][ T9] usb 3-1: config 0 descriptor?? [ 418.715980][ T9] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 418.725051][ T9] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 418.734059][ T9] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 418.745479][ T9] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 418.750526][ T29] audit: type=1800 audit(1773946508.390:6): pid=9343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1179" name="/" dev="fuse" ino=1 res=0 errno=0 [ 418.754948][ T9] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 418.792424][ T9] playstation 0003:054C:0DF2.0014: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 418.912797][ T9] playstation 0003:054C:0DF2.0014: Invalid reportID received, expected 9 got 0 [ 418.922248][ T9] playstation 0003:054C:0DF2.0014: Failed to retrieve DualSense pairing info: -22 [ 418.931590][ T9] playstation 0003:054C:0DF2.0014: Failed to get MAC address from DualSense [ 418.940369][ T9] playstation 0003:054C:0DF2.0014: Failed to create dualsense. [ 418.955222][ T9] playstation 0003:054C:0DF2.0014: probe with driver playstation failed with error -22 [ 419.309726][ T42] usb 4-1: USB disconnect, device number 39 [ 419.595450][ T9359] tmpfs: Unknown parameter '' [ 419.679673][ T42] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 419.829593][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 419.841180][ T42] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 419.853443][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.861927][ T42] usb 4-1: Product: syz [ 419.866988][ T42] usb 4-1: Manufacturer: syz [ 419.871704][ T42] usb 4-1: SerialNumber: syz [ 419.878301][ T42] usb 4-1: config 0 descriptor?? [ 419.889696][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 420.039629][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 420.046992][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 420.055694][ T9] usb 2-1: config 0 has no interface number 0 [ 420.062332][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 420.074628][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 420.083834][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.090196][ T42] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 420.092268][ T9] usb 2-1: Product: syz [ 420.105137][ T9] usb 2-1: Manufacturer: syz [ 420.109873][ T9] usb 2-1: SerialNumber: syz [ 420.117097][ T9] usb 2-1: config 0 descriptor?? [ 420.514271][ T9370] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1190'. [ 420.527906][ T9370] netlink: 'syz.0.1190': attribute type 21 has an invalid length. [ 420.536069][ T9370] netlink: 'syz.0.1190': attribute type 6 has an invalid length. [ 420.536743][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 420.545467][ T9370] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1190'. [ 420.555695][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 420.575271][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 420.588259][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 420.731028][ T9] usb 3-1: USB disconnect, device number 20 [ 421.090949][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 421.114829][ T9374] fuse: fd is not a fuse device [ 421.249592][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 421.258295][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 421.267507][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.275756][ T9] usb 3-1: Product: syz [ 421.280087][ T9] usb 3-1: Manufacturer: syz [ 421.284773][ T9] usb 3-1: SerialNumber: syz [ 421.291810][ T9] usb 3-1: config 0 descriptor?? [ 421.304290][ T42] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 421.318064][ T42] usb 4-1: USB disconnect, device number 40 [ 421.501019][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 421.703155][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 422.079691][ T5830] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 422.229632][ T5830] usb 4-1: Using ep0 maxpacket: 16 [ 422.236905][ T5830] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.248027][ T5830] usb 4-1: config 0 interface 0 has no altsetting 0 [ 422.254843][ T5830] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 422.264070][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.273913][ T5830] usb 4-1: config 0 descriptor?? [ 422.660881][ T9] usb 2-1: USB disconnect, device number 31 [ 422.713782][ T5830] nzxt-smart2 0003:1E71:2009.0015: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 422.895775][ T9381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1194'. [ 423.109997][ T5830] usb 4-1: USB disconnect, device number 41 [ 423.120769][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 423.289547][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 423.297938][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 423.307128][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.315166][ T9] usb 2-1: Product: syz [ 423.319347][ T9] usb 2-1: Manufacturer: syz [ 423.324076][ T9] usb 2-1: SerialNumber: syz [ 423.330756][ T9] usb 2-1: config 0 descriptor?? [ 423.545820][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 423.797283][ T5899] usb 3-1: USB disconnect, device number 21 [ 423.889561][ T5830] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 424.039598][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 424.046106][ T5830] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 424.054678][ T5830] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 424.065812][ T5830] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 424.074959][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.140336][ T5899] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 424.291322][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 424.314218][ T5899] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 424.324002][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.332399][ T5899] usb 3-1: Product: syz [ 424.339751][ T5899] usb 3-1: Manufacturer: syz [ 424.344882][ T5899] usb 3-1: SerialNumber: syz [ 424.352080][ T5899] usb 3-1: config 0 descriptor?? [ 424.562254][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 424.563885][ T5899] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 424.581859][ T9] usb 2-1: USB disconnect, device number 32 [ 425.167087][ T5899] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 425.349592][ T5830] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 425.500125][ T5830] usb 2-1: Using ep0 maxpacket: 8 [ 425.507114][ T5830] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 425.515691][ T5830] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 425.525619][ T5830] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 425.536406][ T5830] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 425.546367][ T5830] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.560006][ T5830] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 425.569082][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.346344][ T9432] usb 2-1: usbtmc_ioctl_clear_in_halt returned -32 [ 426.668582][ T9] usb 4-1: USB disconnect, device number 42 [ 426.841588][ T857] usb 3-1: USB disconnect, device number 22 [ 426.896762][ T9438] FAULT_INJECTION: forcing a failure. [ 426.896762][ T9438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.910481][ T9438] CPU: 0 UID: 0 PID: 9438 Comm: syz.2.1214 Not tainted syzkaller #0 PREEMPT(full) [ 426.910508][ T9438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 426.910518][ T9438] Call Trace: [ 426.910524][ T9438] [ 426.910529][ T9438] dump_stack_lvl+0xe8/0x150 [ 426.910552][ T9438] should_fail_ex+0x412/0x560 [ 426.910567][ T9438] _copy_from_iter+0x1d3/0x1670 [ 426.910581][ T9438] ? rcu_is_watching+0x15/0xb0 [ 426.910601][ T9438] ? __pfx__copy_from_iter+0x10/0x10 [ 426.910619][ T9438] ? netlink_sendmsg+0x650/0xb40 [ 426.910630][ T9438] ? skb_put+0x11b/0x210 [ 426.910642][ T9438] netlink_sendmsg+0x6c0/0xb40 [ 426.910656][ T9438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.910666][ T9438] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 426.910686][ T9438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.910694][ T9438] sock_sendmsg_nosec+0x112/0x150 [ 426.910710][ T9438] ____sys_sendmsg+0x589/0x8c0 [ 426.910724][ T9438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.910739][ T9438] ? import_iovec+0x73/0xa0 [ 426.910753][ T9438] ___sys_sendmsg+0x2a5/0x360 [ 426.910766][ T9438] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.910792][ T9438] ? __fget_files+0x2a/0x420 [ 426.910805][ T9438] ? __fget_files+0x3a0/0x420 [ 426.910822][ T9438] __x64_sys_sendmsg+0x1bd/0x2a0 [ 426.910834][ T9438] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.910849][ T9438] ? __pfx_ksys_write+0x10/0x10 [ 426.910863][ T9438] do_syscall_64+0x14d/0xf80 [ 426.910874][ T9438] ? trace_irq_disable+0x3b/0x150 [ 426.910887][ T9438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.910897][ T9438] ? clear_bhb_loop+0x40/0x90 [ 426.910909][ T9438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.910918][ T9438] RIP: 0033:0x7f8bb659c799 [ 426.910933][ T9438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.910941][ T9438] RSP: 002b:00007f8bb7492028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.910953][ T9438] RAX: ffffffffffffffda RBX: 00007f8bb6815fa0 RCX: 00007f8bb659c799 [ 426.910960][ T9438] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000008 [ 426.910967][ T9438] RBP: 00007f8bb7492090 R08: 0000000000000000 R09: 0000000000000000 [ 426.910973][ T9438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.910979][ T9438] R13: 00007f8bb6816038 R14: 00007f8bb6815fa0 R15: 00007ffce767e218 [ 426.910993][ T9438] [ 427.229787][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 427.390179][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 427.398751][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 427.407910][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.416190][ T9] usb 4-1: Product: syz [ 427.420526][ T9] usb 4-1: Manufacturer: syz [ 427.425290][ T9] usb 4-1: SerialNumber: syz [ 427.435105][ T9] usb 4-1: config 0 descriptor?? [ 427.559588][ T857] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 427.645561][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 427.709644][ T857] usb 3-1: Using ep0 maxpacket: 32 [ 427.716664][ T857] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 427.725132][ T857] usb 3-1: config 0 has no interface number 0 [ 427.731862][ T857] usb 3-1: config 0 interface 184 has no altsetting 0 [ 427.742054][ T857] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 427.755223][ T857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.764055][ T857] usb 3-1: Product: syz [ 427.768462][ T857] usb 3-1: Manufacturer: syz [ 427.773947][ T857] usb 3-1: SerialNumber: syz [ 427.783181][ T857] usb 3-1: config 0 descriptor?? [ 428.117886][ T5899] usb 2-1: USB disconnect, device number 33 [ 428.200517][ T857] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 428.212112][ T857] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 428.222021][ T857] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 428.233055][ T857] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 428.860259][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 428.883833][ T9] usb 4-1: USB disconnect, device number 43 [ 428.914865][ T9460] fuse: fd is not a fuse device [ 429.019695][ T5830] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 429.169818][ T5830] usb 2-1: Using ep0 maxpacket: 8 [ 429.177875][ T5830] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 429.187743][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.195841][ T5830] usb 2-1: Product: syz [ 429.200030][ T5830] usb 2-1: Manufacturer: syz [ 429.204617][ T5830] usb 2-1: SerialNumber: syz [ 429.211310][ T5830] usb 2-1: config 0 descriptor?? [ 429.420099][ T5830] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 429.649566][ T5899] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 429.809587][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 429.818905][ T5899] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 429.829141][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.838259][ T5899] usb 4-1: Product: syz [ 429.842860][ T5899] usb 4-1: Manufacturer: syz [ 429.847490][ T5899] usb 4-1: SerialNumber: syz [ 429.855918][ T5899] usb 4-1: config 0 descriptor?? [ 430.035557][ T5830] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 430.068313][ T5899] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 430.247419][ T42] usb 3-1: USB disconnect, device number 23 [ 430.270571][ T5899] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 430.619623][ T42] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 430.769656][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 430.776490][ T42] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 430.786057][ T42] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 430.796157][ T42] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 430.806861][ T42] usb 3-1: config 1 has no interface number 0 [ 430.814948][ T42] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 430.827688][ T42] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 430.841211][ T42] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 430.851296][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.874003][ T42] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 431.068569][ T42] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 431.277393][ T42] usb 3-1: USB disconnect, device number 24 [ 431.284535][ T42] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 431.473246][ T9502] delete_channel: no stack [ 431.477992][ T9502] delete_channel: no stack [ 431.767361][ T857] usb 2-1: USB disconnect, device number 34 [ 432.149642][ T857] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 432.300453][ T857] usb 2-1: Using ep0 maxpacket: 32 [ 432.308812][ T857] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 432.318795][ T857] usb 2-1: config 0 has no interface number 0 [ 432.325329][ T857] usb 2-1: config 0 interface 184 has no altsetting 0 [ 432.335481][ T857] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 432.362246][ T857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.383623][ T857] usb 2-1: Product: syz [ 432.392499][ T857] usb 2-1: Manufacturer: syz [ 432.421152][ T857] usb 2-1: SerialNumber: syz [ 432.432738][ T857] usb 2-1: config 0 descriptor?? [ 432.445692][ T9] usb 4-1: USB disconnect, device number 44 [ 432.627449][ T9526] netlink: 'syz.0.1246': attribute type 3 has an invalid length. [ 432.689651][ T1231] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 432.839602][ T1231] usb 3-1: Using ep0 maxpacket: 32 [ 432.847084][ T1231] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 432.855724][ T1231] usb 3-1: config 0 has no interface number 0 [ 432.862048][ T1231] usb 3-1: config 0 interface 184 has no altsetting 0 [ 432.869215][ T857] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 432.881744][ T857] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 432.891783][ T857] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 432.903050][ T857] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 432.912854][ T1231] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 432.923090][ T1231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.933515][ T1231] usb 3-1: Product: syz [ 432.938874][ T1231] usb 3-1: Manufacturer: syz [ 432.943803][ T1231] usb 3-1: SerialNumber: syz [ 432.951582][ T1231] usb 3-1: config 0 descriptor?? [ 433.225485][ T9538] fuse: fd is not a fuse device [ 433.235056][ T9538] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1248'. [ 433.246346][ T9538] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 433.268280][ T9538] sctp: [Deprecated]: syz.0.1248 (pid 9538) Use of int in maxseg socket option. [ 433.268280][ T9538] Use struct sctp_assoc_value instead [ 433.563599][ T1231] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 433.574826][ T1231] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 433.585907][ T1231] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 433.598978][ T1231] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 433.609383][ T1231] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 433.619752][ T1231] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 433.630087][ T1231] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 434.131080][ T9557] netlink: 'syz.3.1254': attribute type 10 has an invalid length. [ 434.139003][ T9557] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1254'. [ 434.827116][ T42] usb 2-1: USB disconnect, device number 35 [ 435.229625][ T42] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 435.349542][ T5830] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 435.379575][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 435.387469][ T42] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 435.396653][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.404722][ T42] usb 4-1: Product: syz [ 435.408895][ T42] usb 4-1: Manufacturer: syz [ 435.413887][ T42] usb 4-1: SerialNumber: syz [ 435.421237][ T42] usb 4-1: config 0 descriptor?? [ 435.448856][ T809] usb 3-1: USB disconnect, device number 25 [ 435.502366][ T5830] usb 2-1: Using ep0 maxpacket: 8 [ 435.513937][ T5830] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 435.523363][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.532579][ T5830] usb 2-1: Product: syz [ 435.538189][ T5830] usb 2-1: Manufacturer: syz [ 435.543136][ T5830] usb 2-1: SerialNumber: syz [ 435.552587][ T5830] usb 2-1: config 0 descriptor?? [ 435.629916][ T42] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 435.761596][ T5830] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 435.839801][ T809] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 435.994737][ T809] usb 3-1: unable to get BOS descriptor or descriptor too short [ 436.006611][ T809] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 436.015305][ T809] usb 3-1: can't read configurations, error -71 [ 436.365349][ T5830] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 436.635433][ T42] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 436.656044][ T42] usb 4-1: USB disconnect, device number 45 [ 436.751786][ T9593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.471183][ T857] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 437.649563][ T857] usb 4-1: Using ep0 maxpacket: 8 [ 437.658091][ T857] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 437.667252][ T857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.675690][ T857] usb 4-1: Product: syz [ 437.680022][ T857] usb 4-1: Manufacturer: syz [ 437.685358][ T857] usb 4-1: SerialNumber: syz [ 437.690902][ T42] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 437.700656][ T857] usb 4-1: config 0 descriptor?? [ 437.849555][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 437.858029][ T42] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 437.866901][ T42] usb 3-1: config 0 has no interface number 0 [ 437.873375][ T42] usb 3-1: config 0 interface 184 has no altsetting 0 [ 437.883336][ T42] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 437.895198][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.903680][ T42] usb 3-1: Product: syz [ 437.907959][ T42] usb 3-1: Manufacturer: syz [ 437.913632][ T42] usb 3-1: SerialNumber: syz [ 437.919192][ T857] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 437.924344][ T42] usb 3-1: config 0 descriptor?? [ 438.120630][ T9583] usb 2-1: USB disconnect, device number 36 [ 438.533757][ T857] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 438.552632][ T42] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 438.563808][ T9583] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 438.571684][ T42] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 438.582010][ T42] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 438.593014][ T42] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 438.602744][ T42] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 438.614481][ T42] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 438.624859][ T42] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 438.687771][ T9615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.708251][ T9615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1278'. [ 438.739542][ T9583] usb 2-1: Using ep0 maxpacket: 32 [ 438.746418][ T9583] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 438.755254][ T9583] usb 2-1: config 0 has no interface number 0 [ 438.762450][ T9583] usb 2-1: config 0 interface 184 has no altsetting 0 [ 438.772463][ T9583] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 438.781603][ T9583] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.790080][ T9583] usb 2-1: Product: syz [ 438.794288][ T9583] usb 2-1: Manufacturer: syz [ 438.798897][ T9583] usb 2-1: SerialNumber: syz [ 438.807197][ T9583] usb 2-1: config 0 descriptor?? [ 439.223329][ T9583] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 439.234288][ T9583] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 439.245257][ T9583] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 439.256720][ T9583] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 440.153559][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.160155][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.251638][ T5830] usb 4-1: USB disconnect, device number 46 [ 440.458509][ T1231] usb 3-1: USB disconnect, device number 28 [ 440.619607][ T5830] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 440.781190][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.796294][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.806262][ T5830] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 440.809636][ T1231] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 440.815433][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.833880][ T5830] usb 4-1: config 0 descriptor?? [ 440.971456][ T1231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.982564][ T1231] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 440.991907][ T1231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.002483][ T1231] usb 3-1: config 0 descriptor?? [ 441.252341][ T5830] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 441.271130][ T5830] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 441.273102][ T857] usb 2-1: USB disconnect, device number 37 [ 441.293201][ T5830] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 441.307889][ T5830] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 441.322914][ T5830] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 441.352292][ T5830] playstation 0003:054C:0DF2.0016: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 441.418739][ T1231] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 441.433053][ T1231] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0017/input/input33 [ 441.534180][ T1231] keytouch 0003:0926:3333.0017: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 441.651138][ T5830] playstation 0003:054C:0DF2.0016: Failed to retrieve feature with reportID 32: -32 [ 441.661512][ T5830] playstation 0003:054C:0DF2.0016: Failed to retrieve DualSense firmware info: -32 [ 441.671951][ T5830] playstation 0003:054C:0DF2.0016: Failed to get firmware info from DualSense [ 441.681995][ T5830] playstation 0003:054C:0DF2.0016: Failed to create dualsense. [ 441.694508][ T5830] playstation 0003:054C:0DF2.0016: probe with driver playstation failed with error -32 [ 441.707986][ T5830] usb 4-1: USB disconnect, device number 47 [ 441.719777][ T857] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 441.821104][ T42] usb 3-1: USB disconnect, device number 29 [ 441.879760][ T857] usb 2-1: Using ep0 maxpacket: 16 [ 441.892227][ T857] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.904667][ T857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.917533][ T857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.927519][ T857] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 441.936856][ T857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.947084][ T857] usb 2-1: config 0 descriptor?? [ 442.337024][ T857] hid-picolcd 0003:04D8:F002.0018: unknown main item tag 0x0 [ 442.348693][ T857] hid-picolcd 0003:04D8:F002.0018: unknown main item tag 0x0 [ 442.357277][ T857] hid-picolcd 0003:04D8:F002.0018: unknown main item tag 0x0 [ 442.365857][ T857] hid-picolcd 0003:04D8:F002.0018: unknown main item tag 0x0 [ 442.373382][ T857] hid-picolcd 0003:04D8:F002.0018: unknown main item tag 0x0 [ 442.442157][ T857] hid-picolcd 0003:04D8:F002.0018: No report with id 0xf3 found [ 442.450464][ T857] hid-picolcd 0003:04D8:F002.0018: No report with id 0xf4 found [ 442.493025][ T9674] fuse: Bad value for 'fd' [ 442.519618][ T42] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 442.629585][ T9583] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 442.679542][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 442.685226][ T42] usb 4-1: no configurations [ 442.690347][ T42] usb 4-1: can't read configurations, error -22 [ 442.789672][ T9583] usb 3-1: Using ep0 maxpacket: 32 [ 442.797602][ T9583] usb 3-1: unable to get BOS descriptor or descriptor too short [ 442.807163][ T9583] usb 3-1: config 1 has an invalid interface number: 170 but max is 0 [ 442.815507][ T9583] usb 3-1: config 1 has no interface number 0 [ 442.821878][ T9583] usb 3-1: config 1 interface 170 has no altsetting 0 [ 442.830642][ T9583] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=f3.04 [ 442.840886][ T42] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 442.848484][ T9583] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.856752][ T9583] usb 3-1: Product: syz [ 442.861005][ T9583] usb 3-1: Manufacturer: syz [ 442.866006][ T9583] usb 3-1: SerialNumber: syz [ 443.009540][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 443.015551][ T42] usb 4-1: no configurations [ 443.020328][ T42] usb 4-1: can't read configurations, error -22 [ 443.026886][ T42] usb usb4-port1: attempt power cycle [ 443.097233][ T9583] usbsevseg 3-1:1.170: USB 7 Segment device now attached [ 443.108661][ T9583] usb 3-1: USB disconnect, device number 30 [ 443.117559][ T9583] usbsevseg 3-1:1.170: USB 7 Segment now disconnected [ 443.380464][ T42] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 443.400267][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 443.405957][ T42] usb 4-1: no configurations [ 443.410794][ T42] usb 4-1: can't read configurations, error -22 [ 443.549633][ T42] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 443.570754][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 443.576424][ T42] usb 4-1: no configurations [ 443.581212][ T42] usb 4-1: can't read configurations, error -22 [ 443.587743][ T42] usb usb4-port1: unable to enumerate USB device [ 443.624109][ T857] usb 2-1: reset high-speed USB device number 38 using dummy_hcd [ 443.869604][ T1231] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 443.967785][ T9691] process 'syz.0.1306' launched './file0' with NULL argv: empty string added [ 444.019554][ T1231] usb 3-1: Using ep0 maxpacket: 8 [ 444.027636][ T1231] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 444.038568][ T1231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.047184][ T1231] usb 3-1: Product: syz [ 444.053037][ T1231] usb 3-1: Manufacturer: syz [ 444.057876][ T1231] usb 3-1: SerialNumber: syz [ 444.064780][ T1231] usb 3-1: config 0 descriptor?? [ 444.274687][ T1231] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 444.599378][ T9695] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 444.788909][ T9701] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 445.259631][ T857] usb 2-1: device descriptor read/64, error -71 [ 445.283714][ T1231] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 445.499590][ T857] usb 2-1: reset high-speed USB device number 38 using dummy_hcd [ 445.509025][ T857] usb 2-1: device reset changed ep0 maxpacket size! [ 445.523211][ T5912] usb 2-1: USB disconnect, device number 38 [ 445.670720][ T5912] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 445.689617][ T1231] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 445.819596][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 445.827212][ T5912] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 445.835657][ T5912] usb 2-1: config 0 has no interface number 0 [ 445.841968][ T5912] usb 2-1: config 0 interface 184 has no altsetting 0 [ 445.848774][ T1231] usb 4-1: Using ep0 maxpacket: 32 [ 445.856077][ T1231] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 445.864361][ T1231] usb 4-1: config 0 has no interface number 0 [ 445.870787][ T1231] usb 4-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 445.881488][ T5912] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 445.891123][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.899147][ T1231] usb 4-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 445.909210][ T5912] usb 2-1: Product: syz [ 445.913486][ T1231] usb 4-1: config 0 interface 184 has no altsetting 0 [ 445.920319][ T5912] usb 2-1: Manufacturer: syz [ 445.925039][ T5912] usb 2-1: SerialNumber: syz [ 445.931984][ T1231] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 445.941490][ T1231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.950692][ T5912] usb 2-1: config 0 descriptor?? [ 445.956810][ T1231] usb 4-1: Product: syz [ 445.963423][ T1231] usb 4-1: Manufacturer: syz [ 445.968083][ T1231] usb 4-1: SerialNumber: syz [ 445.975731][ T1231] usb 4-1: config 0 descriptor?? [ 445.984107][ T1231] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 445.995035][ T1231] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 446.365275][ T5912] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 446.376273][ T5912] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 446.387339][ T5912] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 446.398494][ T5912] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 446.651117][ T9583] usb 3-1: USB disconnect, device number 31 [ 447.029607][ T9583] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 447.189665][ T9583] usb 3-1: Using ep0 maxpacket: 16 [ 447.196696][ T9583] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.212619][ T9583] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 447.224823][ T9583] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 447.234682][ T9583] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.249036][ T9583] usb 3-1: Product: syz [ 447.253635][ T9583] usb 3-1: Manufacturer: syz [ 447.259634][ T9583] usb 3-1: SerialNumber: syz [ 447.267454][ T9583] usb 3-1: config 0 descriptor?? [ 447.858369][ T9745] openvswitch: netlink: IP tunnel dst address not specified [ 447.913362][ T5912] usb 2-1: USB disconnect, device number 39 [ 448.329644][ T5912] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 448.363922][ T1231] usb 4-1: USB disconnect, device number 52 [ 448.481329][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.493839][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.504674][ T5912] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 448.514639][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.526085][ T5912] usb 2-1: config 0 descriptor?? [ 448.721428][ T1231] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 448.889596][ T1231] usb 4-1: Using ep0 maxpacket: 8 [ 448.898588][ T1231] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 448.908069][ T1231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.916396][ T1231] usb 4-1: Product: syz [ 448.920744][ T1231] usb 4-1: Manufacturer: syz [ 448.925762][ T1231] usb 4-1: SerialNumber: syz [ 448.933088][ T1231] usb 4-1: config 0 descriptor?? [ 448.946025][ T5912] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 448.955539][ T5912] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 448.963889][ T5912] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 448.971486][ T5912] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 448.979029][ T5912] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 448.989999][ T5912] playstation 0003:054C:0DF2.0019: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 449.144286][ T1231] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 449.343676][ T5912] playstation 0003:054C:0DF2.0019: Invalid byte count transferred, expected 64 got 0 [ 449.353408][ T5912] playstation 0003:054C:0DF2.0019: Failed to retrieve DualSense firmware info: -22 [ 449.364690][ T5912] playstation 0003:054C:0DF2.0019: Failed to get firmware info from DualSense [ 449.374135][ T5912] playstation 0003:054C:0DF2.0019: Failed to create dualsense. [ 449.386578][ T5912] playstation 0003:054C:0DF2.0019: probe with driver playstation failed with error -22 [ 449.550338][ T5912] usb 2-1: USB disconnect, device number 40 [ 449.707175][ T9583] usb 3-1: USB disconnect, device number 32 [ 449.949080][ T29] audit: type=1804 audit(1773946539.590:7): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1333" name="bus" dev="ramfs" ino=22502 res=1 errno=0 [ 449.969743][ T29] audit: type=1804 audit(1773946539.590:8): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1333" name="bus" dev="ramfs" ino=22502 res=1 errno=0 [ 450.159534][ T9583] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 450.169681][ T9773] tmpfs: Bad value for 'mpol' [ 450.174776][ T1231] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 450.205268][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1336'. [ 450.223420][ T9773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.289392][ T9773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.331380][ T9583] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.347619][ T9583] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 450.360597][ T9773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.367007][ T9583] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.385285][ T9583] usb 3-1: config 0 descriptor?? [ 450.810436][ T9583] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 450.835828][ T9583] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001A/input/input34 [ 450.997039][ T9583] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 451.024885][ C1] keytouch 0003:0926:3333.001A: Event data for report 0 was too short (8 vs 5) [ 451.239923][ T5912] usb 3-1: USB disconnect, device number 33 [ 451.389584][ T1231] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 451.409759][ T5970] usb 4-1: USB disconnect, device number 53 [ 451.539574][ T1231] usb 2-1: Using ep0 maxpacket: 32 [ 451.546731][ T1231] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 451.548305][ T9787] FAULT_INJECTION: forcing a failure. [ 451.548305][ T9787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.557273][ T1231] usb 2-1: config 0 has no interface number 0 [ 451.574223][ T9787] CPU: 1 UID: 0 PID: 9787 Comm: syz.3.1342 Not tainted syzkaller #0 PREEMPT(full) [ 451.574248][ T9787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 451.574259][ T9787] Call Trace: [ 451.574268][ T9787] [ 451.574276][ T9787] dump_stack_lvl+0xe8/0x150 [ 451.574306][ T9787] should_fail_ex+0x412/0x560 [ 451.574331][ T9787] _copy_from_user+0x2d/0xb0 [ 451.574353][ T9787] ucma_write+0x15d/0x2f0 [ 451.574378][ T9787] ? __pfx_ucma_write+0x10/0x10 [ 451.574397][ T9787] ? iov_iter_iovec_advance+0x1e0/0x290 [ 451.574424][ T9787] vfs_writev+0x4bd/0x990 [ 451.574444][ T9787] ? __pfx_ucma_write+0x10/0x10 [ 451.574466][ T9787] ? __pfx_vfs_writev+0x10/0x10 [ 451.574496][ T9787] ? __fget_files+0x2a/0x420 [ 451.574520][ T9787] ? __fget_files+0x3a0/0x420 [ 451.574538][ T9787] ? __fget_files+0x2a/0x420 [ 451.574564][ T9787] do_writev+0x154/0x2e0 [ 451.574583][ T9787] ? __pfx_do_writev+0x10/0x10 [ 451.574611][ T9787] do_syscall_64+0x14d/0xf80 [ 451.574628][ T9787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.574644][ T9787] ? clear_bhb_loop+0x40/0x90 [ 451.574662][ T9787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.574678][ T9787] RIP: 0033:0x7f433079c799 [ 451.574695][ T9787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.574709][ T9787] RSP: 002b:00007f433162b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 451.574734][ T9787] RAX: ffffffffffffffda RBX: 00007f4330a15fa0 RCX: 00007f433079c799 [ 451.574746][ T9787] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000e [ 451.574756][ T9787] RBP: 00007f433162b090 R08: 0000000000000000 R09: 0000000000000000 [ 451.574765][ T9787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.574774][ T9787] R13: 00007f4330a16038 R14: 00007f4330a15fa0 R15: 00007ffc1a753318 [ 451.574800][ T9787] [ 451.636342][ T9789] FAULT_INJECTION: forcing a failure. [ 451.636342][ T9789] name failslab, interval 1, probability 0, space 0, times 0 [ 451.638032][ T1231] usb 2-1: config 0 interface 184 has no altsetting 0 [ 451.644615][ T9789] CPU: 1 UID: 0 PID: 9789 Comm: syz.3.1343 Not tainted syzkaller #0 PREEMPT(full) [ 451.644636][ T9789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 451.644646][ T9789] Call Trace: [ 451.644653][ T9789] [ 451.644660][ T9789] dump_stack_lvl+0xe8/0x150 [ 451.644688][ T9789] should_fail_ex+0x412/0x560 [ 451.644712][ T9789] should_failslab+0xa8/0x100 [ 451.644732][ T9789] __kmalloc_cache_noprof+0x88/0x660 [ 451.644756][ T9789] ? percpu_ref_init+0xc5/0x360 [ 451.644778][ T9789] ? __pfx_nfsd_net_free+0x10/0x10 [ 451.644799][ T9789] percpu_ref_init+0xc5/0x360 [ 451.644819][ T9789] nfsd_create_serv+0x138/0x850 [ 451.644854][ T9789] ? __pfx_nfsd_create_serv+0x10/0x10 [ 451.644879][ T9789] ? net_generic+0x1e/0x240 [ 451.644902][ T9789] ? net_generic+0x1e/0x240 [ 451.644927][ T9789] nfsd_svc+0x18e/0x810 [ 451.644944][ T9789] ? nfsd_nl_threads_set_doit+0x2e0/0x9a0 [ 451.644969][ T9789] nfsd_nl_threads_set_doit+0x86a/0x9a0 [ 451.644997][ T9789] genl_family_rcv_msg_doit+0x22a/0x330 [ 451.645021][ T9789] ? __asan_memcpy+0x40/0x70 [ 451.645047][ T9789] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 451.645087][ T9789] ? bpf_lsm_capable+0x9/0x20 [ 451.645104][ T9789] ? security_capable+0x7e/0x2c0 [ 451.645132][ T9789] genl_rcv_msg+0x61c/0x7a0 [ 451.645156][ T9789] ? __pfx_genl_rcv_msg+0x10/0x10 [ 451.645174][ T9789] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 451.645195][ T9789] ? __lock_acquire+0x6b5/0x2cf0 [ 451.645227][ T9789] netlink_rcv_skb+0x232/0x4b0 [ 451.645251][ T9789] ? __pfx_genl_rcv_msg+0x10/0x10 [ 451.645271][ T9789] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 451.645308][ T9789] ? down_read+0x270/0x2e0 [ 451.645325][ T9789] ? genl_rcv+0xd/0x40 [ 451.645344][ T9789] genl_rcv+0x28/0x40 [ 451.645361][ T9789] netlink_unicast+0x80f/0x9b0 [ 451.645390][ T9789] ? __pfx_netlink_unicast+0x10/0x10 [ 451.645411][ T9789] ? netlink_sendmsg+0x650/0xb40 [ 451.645426][ T9789] ? skb_put+0x11b/0x210 [ 451.645447][ T9789] netlink_sendmsg+0x813/0xb40 [ 451.645471][ T9789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.645489][ T9789] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 451.645520][ T9789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.645535][ T9789] sock_sendmsg_nosec+0x112/0x150 [ 451.645559][ T9789] ____sys_sendmsg+0x589/0x8c0 [ 451.645585][ T9789] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.645610][ T9789] ? import_iovec+0x73/0xa0 [ 451.645633][ T9789] ___sys_sendmsg+0x2a5/0x360 [ 451.645656][ T9789] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.645706][ T9789] ? __fget_files+0x2a/0x420 [ 451.645725][ T9789] ? __fget_files+0x3a0/0x420 [ 451.645753][ T9789] __x64_sys_sendmsg+0x1bd/0x2a0 [ 451.645774][ T9789] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 451.645800][ T9789] ? __pfx_ksys_write+0x10/0x10 [ 451.645825][ T9789] do_syscall_64+0x14d/0xf80 [ 451.645847][ T9789] ? trace_irq_disable+0x3b/0x150 [ 451.645867][ T9789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.645884][ T9789] ? clear_bhb_loop+0x40/0x90 [ 451.645904][ T9789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.645919][ T9789] RIP: 0033:0x7f433079c799 [ 451.645935][ T9789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.645948][ T9789] RSP: 002b:00007f433162b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.645965][ T9789] RAX: ffffffffffffffda RBX: 00007f4330a15fa0 RCX: 00007f433079c799 [ 451.645977][ T9789] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 451.645987][ T9789] RBP: 00007f433162b090 R08: 0000000000000000 R09: 0000000000000000 [ 451.645997][ T9789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.646007][ T9789] R13: 00007f4330a16038 R14: 00007f4330a15fa0 R15: 00007ffc1a753318 [ 451.646033][ T9789] [ 452.171459][ T1231] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 452.180649][ T1231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.188834][ T1231] usb 2-1: Product: syz [ 452.193255][ T1231] usb 2-1: Manufacturer: syz [ 452.198044][ T1231] usb 2-1: SerialNumber: syz [ 452.205568][ T1231] usb 2-1: config 0 descriptor?? [ 452.282211][ T9800] libceph: resolve '4' (ret=-3): failed [ 452.455929][ T9811] bridge0: port 3(erspan0) entered blocking state [ 452.463331][ T9811] bridge0: port 3(erspan0) entered disabled state [ 452.471226][ T9811] erspan0: entered allmulticast mode [ 452.481125][ T9811] erspan0: entered promiscuous mode [ 452.489012][ T9811] bridge0: port 3(erspan0) entered blocking state [ 452.496970][ T9811] bridge0: port 3(erspan0) entered forwarding state [ 452.564161][ T9811] erspan0: left allmulticast mode [ 452.569235][ T9811] erspan0: left promiscuous mode [ 452.578569][ T9811] bridge0: port 3(erspan0) entered disabled state [ 452.623892][ T1231] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 452.638543][ T1231] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 452.648885][ T1231] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 452.659543][ T9583] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 452.683970][ T1231] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 452.809597][ T9583] usb 4-1: Using ep0 maxpacket: 8 [ 452.818299][ T9583] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 452.828946][ T9583] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.837200][ T9583] usb 4-1: Product: syz [ 452.842234][ T9583] usb 4-1: Manufacturer: syz [ 452.846885][ T9583] usb 4-1: SerialNumber: syz [ 452.855848][ T9583] usb 4-1: config 0 descriptor?? [ 453.019572][ T42] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 453.064973][ T9583] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 453.181157][ T42] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 453.189737][ T42] usb 3-1: config 0 has no interface number 0 [ 453.196187][ T42] usb 3-1: config 0 interface 183 has no altsetting 0 [ 453.206202][ T42] usb 3-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 453.215426][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.224016][ T42] usb 3-1: Product: syz [ 453.228205][ T42] usb 3-1: Manufacturer: syz [ 453.233024][ T42] usb 3-1: SerialNumber: syz [ 453.240587][ T42] usb 3-1: config 0 descriptor?? [ 453.249149][ T42] ftdi_sio 3-1:0.183: FTDI USB Serial Device converter detected [ 453.258379][ T42] ftdi_sio ttyUSB0: unknown device type: 0xd723 [ 453.445739][ T9834] tmpfs: Bad value for 'mpol' [ 453.450131][ T9822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.465639][ T9822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.475826][ T5912] usb 3-1: USB disconnect, device number 34 [ 453.496720][ T5912] ftdi_sio 3-1:0.183: device disconnected [ 454.082465][ T9583] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 454.187084][ T9583] usb 2-1: USB disconnect, device number 41 [ 454.522981][ T9864] warning: `syz.0.1369' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 454.647489][ T9868] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1371'. [ 454.672057][ T9868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1371'. [ 455.169569][ T1231] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 455.254772][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1374'. [ 455.330603][ T1231] usb 3-1: Using ep0 maxpacket: 32 [ 455.346157][ T1231] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 455.361700][ T1231] usb 3-1: config 0 has no interface number 0 [ 455.372690][ T1231] usb 3-1: config 0 interface 184 has no altsetting 0 [ 455.383909][ T1231] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 455.394172][ T1231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.403460][ T1231] usb 3-1: Product: syz [ 455.407976][ T1231] usb 3-1: Manufacturer: syz [ 455.414200][ T5912] usb 4-1: USB disconnect, device number 54 [ 455.431333][ T1231] usb 3-1: SerialNumber: syz [ 455.457146][ T1231] usb 3-1: config 0 descriptor?? [ 455.607636][ T9886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1379'. [ 455.619092][ T9886] FAULT_INJECTION: forcing a failure. [ 455.619092][ T9886] name failslab, interval 1, probability 0, space 0, times 0 [ 455.633005][ T9886] CPU: 0 UID: 0 PID: 9886 Comm: syz.1.1379 Not tainted syzkaller #0 PREEMPT(full) [ 455.633019][ T9886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 455.633026][ T9886] Call Trace: [ 455.633031][ T9886] [ 455.633036][ T9886] dump_stack_lvl+0xe8/0x150 [ 455.633057][ T9886] should_fail_ex+0x412/0x560 [ 455.633071][ T9886] should_failslab+0xa8/0x100 [ 455.633082][ T9886] ? radix_tree_node_alloc+0x7e/0x3a0 [ 455.633098][ T9886] kmem_cache_alloc_noprof+0x87/0x650 [ 455.633112][ T9886] ? radix_tree_node_alloc+0x7e/0x3a0 [ 455.633124][ T9886] ? check_path+0x21/0x40 [ 455.633135][ T9886] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 455.633151][ T9886] radix_tree_node_alloc+0x7e/0x3a0 [ 455.633168][ T9886] idr_get_free+0x2b3/0xa70 [ 455.633188][ T9886] idr_alloc_u32+0x18d/0x320 [ 455.633200][ T9886] ? __pfx_idr_alloc_u32+0x10/0x10 [ 455.633211][ T9886] ? net_generic+0x1e/0x240 [ 455.633227][ T9886] ? l2tp_tunnel_register+0x148/0x1460 [ 455.633242][ T9886] l2tp_tunnel_register+0x162/0x1460 [ 455.633261][ T9886] ? __pfx_l2tp_tunnel_register+0x10/0x10 [ 455.633276][ T9886] ? do_raw_spin_lock+0x12b/0x2f0 [ 455.633291][ T9886] ? pcpu_alloc+0x10/0x360 [ 455.633308][ T9886] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 455.633323][ T9886] ? lockdep_hardirqs_on+0x7a/0x110 [ 455.633333][ T9886] ? l2tp_tunnel_create+0x249/0x3e0 [ 455.633345][ T9886] ? l2tp_tunnel_create+0x2d3/0x3e0 [ 455.633361][ T9886] l2tp_nl_cmd_tunnel_create+0x347/0x970 [ 455.633373][ T9886] ? rcu_is_watching+0x15/0xb0 [ 455.633385][ T9886] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 455.633398][ T9886] ? __nla_parse+0x40/0x60 [ 455.633413][ T9886] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 455.633438][ T9886] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 455.633460][ T9886] genl_family_rcv_msg_doit+0x22a/0x330 [ 455.633483][ T9886] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 455.633514][ T9886] ? bpf_lsm_capable+0x9/0x20 [ 455.633529][ T9886] ? security_capable+0x7e/0x2c0 [ 455.633546][ T9886] genl_rcv_msg+0x61c/0x7a0 [ 455.633561][ T9886] ? __pfx_genl_rcv_msg+0x10/0x10 [ 455.633572][ T9886] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 455.633589][ T9886] ? __lock_acquire+0x6b5/0x2cf0 [ 455.633609][ T9886] netlink_rcv_skb+0x232/0x4b0 [ 455.633624][ T9886] ? __pfx_genl_rcv_msg+0x10/0x10 [ 455.633636][ T9886] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 455.633659][ T9886] ? down_read+0x270/0x2e0 [ 455.633669][ T9886] ? genl_rcv+0xd/0x40 [ 455.633680][ T9886] genl_rcv+0x28/0x40 [ 455.633690][ T9886] netlink_unicast+0x80f/0x9b0 [ 455.633708][ T9886] ? __pfx_netlink_unicast+0x10/0x10 [ 455.633722][ T9886] ? netlink_sendmsg+0x650/0xb40 [ 455.633730][ T9886] ? skb_put+0x11b/0x210 [ 455.633742][ T9886] netlink_sendmsg+0x813/0xb40 [ 455.633756][ T9886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.633766][ T9886] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 455.633785][ T9886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.633793][ T9886] sock_sendmsg_nosec+0x112/0x150 [ 455.633808][ T9886] ____sys_sendmsg+0x589/0x8c0 [ 455.633824][ T9886] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.633839][ T9886] ? import_iovec+0x73/0xa0 [ 455.633853][ T9886] ___sys_sendmsg+0x2a5/0x360 [ 455.633867][ T9886] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.633894][ T9886] ? __fget_files+0x2a/0x420 [ 455.633906][ T9886] ? __fget_files+0x3a0/0x420 [ 455.633925][ T9886] __x64_sys_sendmsg+0x1bd/0x2a0 [ 455.633937][ T9886] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 455.633953][ T9886] ? __pfx_ksys_write+0x10/0x10 [ 455.633967][ T9886] do_syscall_64+0x14d/0xf80 [ 455.633977][ T9886] ? trace_irq_disable+0x3b/0x150 [ 455.633988][ T9886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.633997][ T9886] ? clear_bhb_loop+0x40/0x90 [ 455.634009][ T9886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.634019][ T9886] RIP: 0033:0x7f6b5cb9c799 [ 455.634029][ T9886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.634038][ T9886] RSP: 002b:00007f6b5dae5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.634049][ T9886] RAX: ffffffffffffffda RBX: 00007f6b5ce15fa0 RCX: 00007f6b5cb9c799 [ 455.634056][ T9886] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 455.634062][ T9886] RBP: 00007f6b5dae5090 R08: 0000000000000000 R09: 0000000000000000 [ 455.634068][ T9886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.634073][ T9886] R13: 00007f6b5ce16038 R14: 00007f6b5ce15fa0 R15: 00007ffc2fd26df8 [ 455.634088][ T9886] [ 456.292070][ T1231] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 456.305476][ T1231] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 456.315952][ T1231] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 456.328448][ T1231] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 456.405499][ T9900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1384'. [ 456.499578][ T5912] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 456.545100][ T9905] netlink: 'syz.3.1386': attribute type 1 has an invalid length. [ 456.552951][ T9905] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1386'. [ 456.649540][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 456.656112][ T5912] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 456.664758][ T5912] usb 2-1: config 0 has no interface number 0 [ 456.671920][ T5912] usb 2-1: config 0 interface 184 has no altsetting 0 [ 456.681001][ T5912] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 456.690318][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.698719][ T5912] usb 2-1: Product: syz [ 456.703763][ T5912] usb 2-1: Manufacturer: syz [ 456.709039][ T5912] usb 2-1: SerialNumber: syz [ 456.717915][ T5912] usb 2-1: config 0 descriptor?? [ 456.959657][ T9583] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 457.131018][ T9583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.142683][ T9583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.152990][ T5912] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 457.154069][ T9583] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 457.172879][ T5912] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 457.172907][ T5912] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 457.173153][ T5912] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 457.209749][ T9583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.222429][ T9583] usb 4-1: config 0 descriptor?? [ 457.899296][ T9911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.908295][ T9911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.920873][ T9583] usb 4-1: string descriptor 0 read error: -22 [ 457.953587][ T809] usb 3-1: USB disconnect, device number 35 [ 458.129089][ T9583] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001B/input/input35 [ 458.214894][ T9583] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001B/input/input36 [ 458.241505][ T9583] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001B/input/input37 [ 458.326451][ T9583] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001B/input/input38 [ 458.400260][ T809] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 458.437936][ T9583] uclogic 0003:256C:006D.001B: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 458.486908][ T9583] usb 4-1: USB disconnect, device number 55 [ 458.519220][ T9941] fido_id[9941]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 458.569507][ T809] usb 3-1: Using ep0 maxpacket: 16 [ 458.586678][ T809] usb 3-1: unable to get BOS descriptor or descriptor too short [ 458.596365][ T809] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 458.611750][ T809] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 458.621007][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.629007][ T809] usb 3-1: Product: syz [ 458.633884][ T809] usb 3-1: Manufacturer: syz [ 458.639326][ T809] usb 3-1: SerialNumber: syz [ 458.855294][ T809] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 458.864113][ T809] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 458.950081][ T49] wlan1: Trigger new scan to find an IBSS to join [ 459.255921][ T809] usb 3-1: 2:1 : can't get Cluster Descriptor [ 459.285930][ T5830] usb 2-1: USB disconnect, device number 42 [ 459.359959][ T5912] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 459.464196][ T9583] usb 3-1: USB disconnect, device number 36 [ 459.519757][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 459.531026][ T5912] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 459.542401][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.559776][ T5912] usb 4-1: Product: syz [ 459.564429][ T5912] usb 4-1: Manufacturer: syz [ 459.569415][ T5912] usb 4-1: SerialNumber: syz [ 459.578818][ T5912] usb 4-1: config 0 descriptor?? [ 459.789996][ T5912] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 460.069548][ T5830] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 460.241927][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 460.252672][ T5830] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 460.262770][ T5830] usb 2-1: config 0 has no interface number 0 [ 460.269526][ T5830] usb 2-1: config 0 interface 184 has no altsetting 0 [ 460.280523][ T5830] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 460.291517][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.299787][ T5830] usb 2-1: Product: syz [ 460.304195][ T5830] usb 2-1: Manufacturer: syz [ 460.318897][ T9970] FAULT_INJECTION: forcing a failure. [ 460.318897][ T9970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.333326][ T5830] usb 2-1: SerialNumber: syz [ 460.343499][ T5830] usb 2-1: config 0 descriptor?? [ 460.353326][ T9970] CPU: 0 UID: 0 PID: 9970 Comm: syz.2.1403 Not tainted syzkaller #0 PREEMPT(full) [ 460.353350][ T9970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 460.353361][ T9970] Call Trace: [ 460.353368][ T9970] [ 460.353376][ T9970] dump_stack_lvl+0xe8/0x150 [ 460.353404][ T9970] should_fail_ex+0x412/0x560 [ 460.353429][ T9970] _copy_to_iter+0x1e4/0x17d0 [ 460.353460][ T9970] ? __pfx__copy_to_iter+0x10/0x10 [ 460.353477][ T9970] ? __pfx_woken_wake_function+0x10/0x10 [ 460.353502][ T9970] ? ldsem_down_read+0x12/0x40 [ 460.353526][ T9970] tty_read+0x2ee/0x710 [ 460.353546][ T9970] ? __pfx_tty_read+0x10/0x10 [ 460.353566][ T9970] ? bpf_lsm_file_permission+0x9/0x20 [ 460.353582][ T9970] ? security_file_permission+0x75/0x260 [ 460.353607][ T9970] vfs_read+0x582/0xa70 [ 460.353629][ T9970] ? ksys_write+0x1e6/0x270 [ 460.353648][ T9970] ? __pfx_vfs_read+0x10/0x10 [ 460.353676][ T9970] ? __fget_files+0x2a/0x420 [ 460.353704][ T9970] ksys_read+0x150/0x270 [ 460.353722][ T9970] ? __pfx_ksys_read+0x10/0x10 [ 460.353749][ T9970] do_syscall_64+0x14d/0xf80 [ 460.353765][ T9970] ? trace_irq_disable+0x3b/0x150 [ 460.353782][ T9970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.353798][ T9970] ? clear_bhb_loop+0x40/0x90 [ 460.353816][ T9970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.353831][ T9970] RIP: 0033:0x7f8bb659c799 [ 460.353848][ T9970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.353862][ T9970] RSP: 002b:00007f8bb7471028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 460.353880][ T9970] RAX: ffffffffffffffda RBX: 00007f8bb6816090 RCX: 00007f8bb659c799 [ 460.353892][ T9970] RDX: 0000000000002020 RSI: 0000200000000e00 RDI: 0000000000000003 [ 460.353902][ T9970] RBP: 00007f8bb7471090 R08: 0000000000000000 R09: 0000000000000000 [ 460.353912][ T9970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 460.353922][ T9970] R13: 00007f8bb6816128 R14: 00007f8bb6816090 R15: 00007ffce767e218 [ 460.353948][ T9970] [ 460.762324][ T5830] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 460.773607][ T5830] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 460.784059][ T5830] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 460.796775][ T5830] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 460.984775][ T5912] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 461.419588][ T5830] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 461.573301][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.585041][ T5830] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 461.594297][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.608891][ T5830] usb 3-1: config 0 descriptor?? [ 461.989660][ T460] wlan1: Trigger new scan to find an IBSS to join [ 462.024816][ T5830] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 462.037890][ T5830] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001C/input/input39 [ 462.146631][ T5830] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 462.170559][ T809] usb 4-1: USB disconnect, device number 56 [ 462.231456][ C1] keytouch 0003:0926:3333.001C: Event data for report 0 was too short (8 vs 7) [ 462.437622][ T5912] usb 3-1: USB disconnect, device number 37 [ 462.567677][T10001] FAULT_INJECTION: forcing a failure. [ 462.567677][T10001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.582992][T10001] CPU: 1 UID: 0 PID: 10001 Comm: syz.3.1416 Not tainted syzkaller #0 PREEMPT(full) [ 462.583010][T10001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 462.583021][T10001] Call Trace: [ 462.583028][T10001] [ 462.583035][T10001] dump_stack_lvl+0xe8/0x150 [ 462.583071][T10001] should_fail_ex+0x412/0x560 [ 462.583094][T10001] fpu__restore_sig+0x233/0x1250 [ 462.583126][T10001] ? __pfx_fpu__restore_sig+0x10/0x10 [ 462.583152][T10001] __ia32_sys_rt_sigreturn+0x777/0x8e0 [ 462.583169][T10001] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 462.583181][T10001] ? _raw_spin_unlock_irq+0x2e/0x50 [ 462.583207][T10001] ? __task_pid_nr_ns+0x28/0x470 [ 462.583224][T10001] do_syscall_64+0x14d/0xf80 [ 462.583233][T10001] ? trace_irq_disable+0x3b/0x150 [ 462.583245][T10001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.583255][T10001] ? clear_bhb_loop+0x40/0x90 [ 462.583267][T10001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.583277][T10001] RIP: 0033:0x7f433079c797 [ 462.583287][T10001] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 462.583296][T10001] RSP: 002b:00007f433162b028 EFLAGS: 00000246 [ 462.583305][T10001] RAX: 0000000000000000 RBX: 00007f4330a15fa0 RCX: 00007f433079c799 [ 462.583312][T10001] RDX: 0000000000002020 RSI: 0000200000006b40 RDI: 0000000000000003 [ 462.583319][T10001] RBP: 00007f433162b090 R08: 0000000000000000 R09: 0000000000000000 [ 462.583325][T10001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.583330][T10001] R13: 00007f4330a16038 R14: 00007f4330a15fa0 R15: 00007ffc1a753318 [ 462.583345][T10001] [ 462.882293][ T5912] usb 2-1: USB disconnect, device number 43 [ 463.176479][T10026] ======================================================= [ 463.176479][T10026] WARNING: The mand mount option has been deprecated and [ 463.176479][T10026] and is ignored by this kernel. Remove the mand [ 463.176479][T10026] option from the mount to silence this warning. [ 463.176479][T10026] ======================================================= [ 463.361517][ T5912] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 463.429770][ T5970] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 463.459555][ T809] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 463.529636][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 463.537061][ T5912] usb 3-1: unable to get BOS descriptor or descriptor too short [ 463.546621][ T5912] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 463.560783][ T5912] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 463.570443][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.578611][ T5912] usb 3-1: Product: syz [ 463.582987][ T5912] usb 3-1: Manufacturer: syz [ 463.587634][ T5912] usb 3-1: SerialNumber: syz [ 463.591174][ T809] usb 4-1: device descriptor read/64, error -71 [ 463.603102][ T5970] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 463.611824][ T5970] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 463.622184][ T5970] usb 2-1: config 0 interface 0 has no altsetting 0 [ 463.631894][ T5970] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 463.641470][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 463.649824][ T5970] usb 2-1: Product: syz [ 463.654341][ T5970] usb 2-1: Manufacturer: syz [ 463.659003][ T5970] usb 2-1: SerialNumber: syz [ 463.666573][ T5970] usb 2-1: config 0 descriptor?? [ 463.674890][ T5970] hub 2-1:0.0: bad descriptor, ignoring hub [ 463.681041][ T5970] hub 2-1:0.0: probe with driver hub failed with error -5 [ 463.691691][ T5970] usb 2-1: selecting invalid altsetting 0 [ 463.805486][ T5912] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 463.815628][ T5912] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 463.839616][ T809] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 463.969950][ T809] usb 4-1: device descriptor read/64, error -71 [ 464.079974][ T809] usb usb4-port1: attempt power cycle [ 464.206377][ T5912] usb 3-1: 2:1 : can't get Cluster Descriptor [ 464.414303][ T5912] usb 3-1: USB disconnect, device number 38 [ 464.444085][ T809] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 464.483134][ T809] usb 4-1: device descriptor read/8, error -71 [ 464.729667][ T809] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 464.738778][ T9583] usb 2-1: USB disconnect, device number 44 [ 464.761595][ T809] usb 4-1: device descriptor read/8, error -71 [ 464.879896][ T809] usb usb4-port1: unable to enumerate USB device [ 464.949973][ T49] wlan1: Creating new IBSS network, BSSID 2e:ff:06:4d:02:3c [ 465.289602][ T9583] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 465.449663][ T9583] usb 3-1: Using ep0 maxpacket: 32 [ 465.456992][ T9583] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 465.465352][ T9583] usb 3-1: config 0 has no interface number 0 [ 465.471597][ T9583] usb 3-1: config 0 interface 184 has no altsetting 0 [ 465.481286][ T9583] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 465.490519][ T9583] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.498638][ T9583] usb 3-1: Product: syz [ 465.502937][ T9583] usb 3-1: Manufacturer: syz [ 465.507565][ T9583] usb 3-1: SerialNumber: syz [ 465.514392][ T9583] usb 3-1: config 0 descriptor?? [ 465.539581][ T809] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 465.689533][ T809] usb 2-1: Using ep0 maxpacket: 32 [ 465.696300][ T809] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 465.704830][ T809] usb 2-1: config 0 has no interface number 0 [ 465.711169][ T809] usb 2-1: config 0 interface 184 has no altsetting 0 [ 465.720773][ T809] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 465.730249][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.738924][ T809] usb 2-1: Product: syz [ 465.745218][ T809] usb 2-1: Manufacturer: syz [ 465.749953][ T809] usb 2-1: SerialNumber: syz [ 465.756803][ T809] usb 2-1: config 0 descriptor?? [ 466.144883][ T9583] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 466.156880][ T9583] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 466.167916][ T9583] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 466.189670][ T809] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 466.200553][ T9583] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 466.215891][ T809] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 466.227064][ T9583] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 466.239002][ T809] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 466.249873][ T9583] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 466.261947][ T809] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 466.271601][ T9583] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 466.561228][ T9583] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 466.721281][ T9583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.732441][ T9583] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 466.741686][ T9583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.753208][ T9583] usb 4-1: config 0 descriptor?? [ 467.104309][T10059] trusted_key: syz.0.1438 sent an empty control message without MSG_MORE. [ 467.170902][ T9583] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 467.184726][ T9583] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001D/input/input40 [ 467.278765][ T9583] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 467.376107][ C1] keytouch 0003:0926:3333.001D: Event data for report 0 was too short (8 vs 4) [ 467.589303][ T9583] usb 4-1: USB disconnect, device number 61 [ 468.047944][ T809] usb 3-1: USB disconnect, device number 39 [ 468.085937][T10068] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1441'. [ 468.104962][T10069] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1441'. [ 468.162601][T10072] [ 468.164975][T10072] ====================================================== [ 468.172045][T10072] WARNING: possible circular locking dependency detected [ 468.179195][T10072] syzkaller #0 Not tainted [ 468.183614][T10072] ------------------------------------------------------ [ 468.190702][T10072] syz.3.1442/10072 is trying to acquire lock: [ 468.196768][T10072] ffff888053eddab8 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaf/0x130 [ 468.205740][T10072] [ 468.205740][T10072] but task is already holding lock: [ 468.213105][T10072] ffff88805bccc1f0 (&ctx->map_changing_lock){++++}-{4:4}, at: mfill_get_vma+0x162/0x660 [ 468.222861][T10072] [ 468.222861][T10072] which lock already depends on the new lock. [ 468.222861][T10072] [ 468.233281][T10072] [ 468.233281][T10072] the existing dependency chain (in reverse order) is: [ 468.242299][T10072] [ 468.242299][T10072] -> #1 (&ctx->map_changing_lock){++++}-{4:4}: [ 468.250748][T10072] down_read+0x47/0x2e0 [ 468.255445][T10072] mwriteprotect_range+0x1af/0x530 [ 468.261097][T10072] userfaultfd_ioctl+0x3aa1/0x4c70 [ 468.266729][T10072] __se_sys_ioctl+0xfc/0x170 [ 468.272028][T10072] do_syscall_64+0x14d/0xf80 [ 468.277155][T10072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.283587][T10072] [ 468.283587][T10072] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 468.291155][T10072] __lock_acquire+0x15a5/0x2cf0 [ 468.296532][T10072] lock_acquire+0xf0/0x2e0 [ 468.301615][T10072] __might_fault+0xcb/0x130 [ 468.306654][T10072] userfaultfd_ioctl+0x2c01/0x4c70 [ 468.312317][T10072] __se_sys_ioctl+0xfc/0x170 [ 468.317565][T10072] do_syscall_64+0x14d/0xf80 [ 468.322728][T10072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.329143][T10072] [ 468.329143][T10072] other info that might help us debug this: [ 468.329143][T10072] [ 468.339359][T10072] Possible unsafe locking scenario: [ 468.339359][T10072] [ 468.346839][T10072] CPU0 CPU1 [ 468.352309][T10072] ---- ---- [ 468.357686][T10072] rlock(&ctx->map_changing_lock); [ 468.362873][T10072] lock(&mm->mmap_lock); [ 468.369708][T10072] lock(&ctx->map_changing_lock); [ 468.377349][T10072] rlock(&mm->mmap_lock); [ 468.381753][T10072] [ 468.381753][T10072] *** DEADLOCK *** [ 468.381753][T10072] [ 468.389991][T10072] 2 locks held by syz.3.1442/10072: [ 468.395210][T10072] #0: ffff888029bb1bc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 468.404549][T10072] #1: ffff88805bccc1f0 (&ctx->map_changing_lock){++++}-{4:4}, at: mfill_get_vma+0x162/0x660 [ 468.414749][T10072] [ 468.414749][T10072] stack backtrace: [ 468.420801][T10072] CPU: 0 UID: 0 PID: 10072 Comm: syz.3.1442 Not tainted syzkaller #0 PREEMPT(full) [ 468.420835][T10072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 468.420847][T10072] Call Trace: [ 468.420857][T10072] [ 468.420866][T10072] dump_stack_lvl+0xe8/0x150 [ 468.420896][T10072] print_circular_bug+0x2e1/0x300 [ 468.420916][T10072] check_noncircular+0x12e/0x150 [ 468.420933][T10072] __lock_acquire+0x15a5/0x2cf0 [ 468.420957][T10072] ? __kernel_text_address+0xd/0x30 [ 468.420975][T10072] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 468.420997][T10072] lock_acquire+0xf0/0x2e0 [ 468.421014][T10072] ? __might_fault+0xaf/0x130 [ 468.421034][T10072] ? __might_fault+0xaf/0x130 [ 468.421049][T10072] __might_fault+0xcb/0x130 [ 468.421064][T10072] ? __might_fault+0xaf/0x130 [ 468.421081][T10072] userfaultfd_ioctl+0x2c01/0x4c70 [ 468.421101][T10072] ? __kasan_slab_free+0x5c/0x80 [ 468.421112][T10072] ? kfree+0x1c5/0x650 [ 468.421130][T10072] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 468.421153][T10072] ? kasan_quarantine_put+0xbb/0x1f0 [ 468.421172][T10072] ? tomoyo_path_number_perm+0x219/0x630 [ 468.421189][T10072] ? tomoyo_path_number_perm+0x219/0x630 [ 468.421204][T10072] ? do_vfs_ioctl+0x1166/0x1530 [ 468.421217][T10072] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 468.421232][T10072] ? trace_irq_disable+0x3b/0x150 [ 468.421254][T10072] ? lock_release+0x2d7/0x3d0 [ 468.421274][T10072] ? __fget_files+0x2a/0x420 [ 468.421290][T10072] ? __fget_files+0x3a0/0x420 [ 468.421304][T10072] ? __fget_files+0x2a/0x420 [ 468.421319][T10072] ? bpf_lsm_file_ioctl+0x9/0x20 [ 468.421333][T10072] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 468.421348][T10072] __se_sys_ioctl+0xfc/0x170 [ 468.421361][T10072] do_syscall_64+0x14d/0xf80 [ 468.421375][T10072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.421390][T10072] ? clear_bhb_loop+0x40/0x90 [ 468.421405][T10072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.421421][T10072] RIP: 0033:0x7f433079c799 [ 468.421437][T10072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.421449][T10072] RSP: 002b:00007f433162b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 468.421465][T10072] RAX: ffffffffffffffda RBX: 00007f4330a15fa0 RCX: 00007f433079c799 [ 468.421475][T10072] RDX: 0000200000000080 RSI: 00000000c028aa03 RDI: 0000000000000005 [ 468.421486][T10072] RBP: 00007f4330832c99 R08: 0000000000000000 R09: 0000000000000000 [ 468.421495][T10072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.421504][T10072] R13: 00007f4330a16038 R14: 00007f4330a15fa0 R15: 00007ffc1a753318 [ 468.421519][T10072] [ 468.703686][ T5830] usb 2-1: USB disconnect, device number 45 [ 468.709123][T10072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1442'. [ 468.727687][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1442'.